last executing test programs: 55.222986617s ago: executing program 1 (id=106): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 53.953116231s ago: executing program 1 (id=111): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2a8, 0xf0, 0x5802, 0x294, 0xf0, 0x294, 0x1d8, 0x378, 0x378, 0x1d8, 0x378, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @private0, [], [], 'macvtap0\x00', 'vlan1\x00', {}, {}, 0x0, 0x0, 0x9}, 0x0, 0xa8, 0xf0, 0x52020000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0x0, 0x6536, 0xdfc, 0x25676d1d, 0x1000, 0x1ff, 0x81]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) socket(0x23, 0x80000, 0x17) 52.918861s ago: executing program 1 (id=118): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x926, 0x3333, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x5, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x8, 0x64}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x20, 0x0, 0x6}}]}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) 50.680192332s ago: executing program 1 (id=128): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408, &(0x7f0000000000), 0x26, 0x768, &(0x7f0000001300)="$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") chdir(&(0x7f0000000240)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xf6) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 49.516722398s ago: executing program 1 (id=135): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000540)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000002380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 48.79619371s ago: executing program 1 (id=139): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 33.658740458s ago: executing program 32 (id=139): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 8.802735158s ago: executing program 0 (id=330): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) write$char_usb(r0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008080) 6.847212003s ago: executing program 3 (id=343): r0 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b36cec20ca08602058c60102030109024b0e01000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001000)={0x1c, &(0x7f0000000f40)={0x40, 0x9, 0x1, "b9"}, 0x0, 0x0}) 6.792866469s ago: executing program 4 (id=344): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000300)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 6.507117415s ago: executing program 4 (id=347): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) syz_usb_disconnect(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 6.361473625s ago: executing program 0 (id=349): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x2, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x1, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xffe) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 5.932403065s ago: executing program 5 (id=351): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8e8}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r1, r0, 0x2f}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) 4.960103668s ago: executing program 5 (id=355): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newtfilter={0x3c, 0x2c, 0x601, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4, 0x20}]}]}}]}, 0x3c}}, 0x0) 4.599825056s ago: executing program 5 (id=358): unshare(0x400) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6002adf700383a0ffe880000000000000000000000000001838d13f2ad1bd4ff020000000000000000000000000001020090780000000060fd906300003a00"/88], 0x0) r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x2}], 0x1) semop(r0, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}, {0x3, 0x1, 0x1000}], 0x2) semctl$GETZCNT(r0, 0x2, 0xf, 0x0) 4.406736251s ago: executing program 6 (id=360): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xec, 0x582, &(0x7f0000005a80)="$eJzs3U1rG9caAOB35I983hsHQrj3Li6BLJqSRo7tfqRQaLosbWig3afCVkywHAVLDrEbaLJoNt2UUCilgdIf0H2XoX+gvyLQBkIJpl2UgsrII0exJcty5EiJngcmOUcz43NenTlH52gkFMDQOpH+k4v4b0R8lUQcado3GtnOE+vHrT2+OZtuSdRqH/+eRJI91jg+yf4/lGX+ExE/fxFxOre13MrK6kKhVCouZfnJ6uK1ycrK6pkri4X54nzx6vTMzLk3ZqbffuvNnsX66sU/v/3o/vvnvjy59s2PD4/eTeJ8HM72NcfxDG41Z04U/s5SY3F+04FTPShskCT9rgC7MpL187FIx4AjMZL1euDl93lE1IAhlbTs//uNC/DSa8wDGmv7Hq2DXxiP3ltfANVjH2+Of3T9vZHYX18bHVxLnloZpevdiR6Un5bx02/37qZbbP8+xIEOeYCu3LodEWdHR7eO/0k2/u3e2fqbx9vbXMawvf5AP91P5z+vtZr/5TbmP9Fi/nOoRd/djc79P/ewB8W0lc7/3mk5/90YuiZGsty/6nO+seTylVLxbET8OyJORa3jrY9zaw9q7fY1z//SLS2/MRfM6vFwdN/T58wVqoWIGN9lyE95dDvif6Ot4k822j9p0f7p83Fxh2UcL977f7t9nePfW7UfIl5p2f5PmjXZ/v7kZP16mGxcFVv9cef4L+3K73f8afsf3D7+iaT5fm2l+zK+3/9Xsd2+9fj3dX39jyef1NONTnCjUK0uTUWMJx9ufXz6ybmNfOP4NP5TJ7cf/1pd/+ni69Mdxn/n2J22hw5C+8911f7dJx588Nl37crf2fj3ej11KnskG/9ay66VnVbwWZ8/AAAAAAAAGCS5iDgcSS6/kc7l8vn1z3cci4O5UrlSPX25vHx1LurflZ2IsVzjTveRps9DTGWfh23kpzflZyLiaER8PXKgns/Plktz/Q4eAAAAAAAAAAAAAAAAAAAABsShNt//T/060u/aAXuu/sMG+/pdC6AfOv7kfy9+6QkYSB37P/DS0v9heOn/MLz0fxhe3fT/JOLWHlYFeM68/sPw0v9heOn/AAAAAAAAAAAAAAAAAAAAAAAAAAAA0FMXL1xIt9ra45uzaX7u+sryQvn6mbliZSG/uDybny0vXcvPl8vzpWJ+trzY6e+VyuVrU9OxfGOyWqxUJysrq5cWy8tXq5euLBbmi5eKY88lKgAAAAAAAAAAAAAAAAAAAHixVFZWFwqlUnFJom3i3RiIauxlgOt2dfrooEQh0SZxO2ve7s7q46AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJv8EwAA//+vny2S") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='.\x00', &(0x7f0000006a40)='vfat\x00', 0x1004840, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f00000003c0)) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 4.324192511s ago: executing program 4 (id=361): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) rt_tgsigqueueinfo(0x0, 0x0, 0x1f, &(0x7f0000000080)={0x11, 0x0, 0x2}) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x409314, 0x1f480, 0x1, 0x39d}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000359000/0xa000)=nil, 0x400000, 0x2, 0x2}) 4.10967851s ago: executing program 3 (id=362): bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$P9_RSTATu(r0, &(0x7f00000007c0)={0x18f, 0x7d, 0xa, {{0x0, 0x173, 0x3, 0x5, {0x0, 0x1, 0x5}, 0x100000, 0x8, 0x7, 0x2, 0xcb, '\x1a\x8f\xbc\xd2\xf7\t\a\xc6\xb9\xf8\x8d\x00q\x9fI,\x06\xa9\f\xbe\'\xe8\xda\xab,\xbfb\x8dT\xbe\xbfE\x17\x02k\x12\xa4\"X\xa8\xc8/\x19Z\x95\xb2\xd1\xa2\xa9\xfaN\xb9\x81\xd6+O\xd5\x13\xeb\xd6z\xb0\xbd\x19Q\b\xcd\x91\xbcM>\x8en\xde\xd0\bR1^\xd3S\"p\x8c\xdb%]C\xdc\x9fs^\x81\r6\xe4\x0e\xc8\xf9\xe9\xd9\xb1\xaf\xe7\x00[\tou\xa8\x81\x95\x91e\xfd\x8b\xe1\x18\xech*&\tC8|\xe9\xb0\x1c\x87\xf4\xb5\xe3\xa5\xc6V\xda\xf13\x81X\x01p\xed\v\x18\x91\x0e\xd4imb\xaf\xb3m=\xcc\xc2\x7f\xe5\xfd\x7fv\x97\"+\xf6\xfcxP!HG\xb0\xd5M\xc0,\xe8\xdf\x19c\x1e\xee\xa7\'U\x8b\x188\x11^\xd3\xb9\x12.\xb0,\xc0\x88\xf8\x97\xfc', 0x1, '\x00', 0x73, '\x17\xe0_|s/\xec\xcf\x1e|~\xf4*wIX\xbe[_\x12\xd4zZs\x85\xc4/\xa2?\xbc=\x82O\xc7\xf7\xf1\r\xd0\x06\x14\xbb\xf1\xbb\x99\xaa\xdb\xf1\xf0\xe3\xdf\x1c\x16{\"\f\x8c0\xd0I\xff\x02):9\xe7\xa6\x9e~\xa9\xa3\xf7\xaaW)o\x96\x1bm+\xcb\xf1\xbf\x0e\xaa\xd6|\"\xf73r+F\x10\xf2P\xcc\x1f\xd7\x7f\xfc\x0e,x\xe5\x10^\xff\xf9\x12\x00\x00\x00\x00\x00\x00', 0x1, '{'}, 0x7, '\x97\xfe\xef\x85z\x03\x86'}}, 0x18f) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 3.998571867s ago: executing program 4 (id=363): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) syz_usb_connect(0x6, 0x0, 0x0, 0x0) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0x14, 0x30, 0x100, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xfd27c4eff795f0e1}, 0x480c5) close(r0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x22, 0x0, 0x0) 3.896095317s ago: executing program 0 (id=364): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x7, 0x6, 0xff}, 0x3b, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x6, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x1, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x92c, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x3, 0x4, 0x8, 0x400, 0x84, 0x1, 0x5, 0x8445, 0x6, 0x5, 0x1, 0x40], [0x1000000b, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x4, 0x0, 0x10000, 0x1, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x1e, 0x4, 0x7, 0x7fff, 0x6, 0x43fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x101, 0x1, 0x4, 0xffff80f1, 0x1, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x4, 0x3, 0xbc45, 0x48c93695, 0x43, 0x9], [0x7, 0xa, 0x4, 0x8005, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x5, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x22000008, 0x2, 0x6d03, 0x6, 0x11, 0xb, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x24], [0x9, 0x40bb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xbb, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x1, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0x1, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0x1003]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.755189795s ago: executing program 3 (id=366): bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) r2 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 3.658201635s ago: executing program 2 (id=367): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r0, 0x400455c8, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x22, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 3.591127104s ago: executing program 6 (id=368): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r0, &(0x7f00000000c0)='!', 0xb7f40}]) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 3.475094525s ago: executing program 3 (id=369): pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff01000000000000000000000000000100000000000000000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffdd, 0x0) 3.436537338s ago: executing program 5 (id=370): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) close(r0) 3.004195297s ago: executing program 2 (id=371): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x106, @empty, 0x3}, r3}}, 0x30) 2.930670784s ago: executing program 2 (id=372): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={0x68, r1, 0x5, 0x0, 0x0, {0x1, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a00)={0x8c, r1, 0x5, 0x0, 0x0, {0x5, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x8c}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000200)={'syz_tun\x00', @ifru_mtu=0x500}) syz_emit_ethernet(0x560, &(0x7f0000000c00)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x524, 0x11, 0x40, @remote, @local, {[], {0x1234, 0x1f90, 0x51c, 0x0, @opaque='\x00'/1300}}}}}}, 0x0) 2.867225949s ago: executing program 5 (id=373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 2.814391523s ago: executing program 6 (id=374): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x5e21, @local}], 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r1, 0x7) listen(r0, 0x7) 2.703185429s ago: executing program 2 (id=375): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x4, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x35}) socket$inet6_udp(0xa, 0x2, 0x0) 2.697088019s ago: executing program 6 (id=376): prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x21) fcntl$setlease(r1, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.521966478s ago: executing program 6 (id=377): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write(r0, &(0x7f0000000000)='6', 0x32) fsopen(&(0x7f00000000c0)='adfs\x00', 0x0) 2.472066365s ago: executing program 0 (id=378): modify_ldt$write2(0x11, &(0x7f0000000100)={0xfc, 0x20001000, 0x0, 0x1}, 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x200, 0x7) ptrace(0x21, r0) 1.93087163s ago: executing program 4 (id=379): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x800, 0xfffffffe, 0x3e}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000500)={0x0, 0x1fffd, 0x800, 0x3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10, 0x2, 0xe3, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x800000, 0x0, {}, 0x1f, r4, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffff"], 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x3d}) 1.898833188s ago: executing program 3 (id=380): openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x3, 0x495, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x400, 0x0) fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/ldiscs\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\f\x00\x00\x00Q\x00\x00\x00'], 0x0) 1.464297186s ago: executing program 2 (id=381): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_add_dev(r1, 0x0, r0, 0x0, &(0x7f0000000080)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@new_dev={0x1, 0xb38, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x14}}}, &(0x7f0000000140)=0x0) syz_ublk_setup_queues(r2, r3, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1bee, 0x80000, 0x1000002, 0x141, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x100, 0x0, 0x8004146, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e8b, 0x1000, 0xffffffff, 0x2fd, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x2, 0x2, 0xc5, 0x0, r2}}], 0x1, 0x0, 0x0) 1.400920941s ago: executing program 4 (id=382): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141842, 0x1c2) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x5000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='\f', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 1.237836624s ago: executing program 6 (id=383): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.23586427s ago: executing program 0 (id=395): getpid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x10, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc}, @mptcp=@syn={0x1e, 0xc}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}, @md5sig={0x13, 0x12, "a4bcbcee95c6179191d2675112a6689b"}]}}}}}}}, 0x0) 916.320901ms ago: executing program 3 (id=384): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000040)=0x8000) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000d, 0x38011, r2, 0xb6e42000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x15) 915.778055ms ago: executing program 5 (id=385): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8"], 0x48}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) socket(0x2b, 0x80801, 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x5c}}, 0x0) 74.203627ms ago: executing program 2 (id=386): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r1, r3, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x6d}}, 0x30) syz_emit_ethernet(0x42, &(0x7f0000000000)={@multicast, @random="110e78bef847", @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xfbba, 0xfeea}}}}}}, 0x0) 0s ago: executing program 0 (id=387): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x87ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40000, 0x10000000, 0x144}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x2000, 0x3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x400, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) kernel console output (not intermixed with test programs): ial error at time 1791165704: ext4_xattr_inode_iget:470 [ 107.442370][ C0] EXT4-fs (loop1): last error at time 1791165704: ext4_xattr_inode_iget:470 [ 107.494876][ T6015] EXT4-fs (loop1): 1 orphan inode deleted [ 107.508708][ T6015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.597891][ T5994] BTRFS info (device loop2): enabling ssd optimizations [ 107.597928][ T5994] BTRFS info (device loop2): turning on flush-on-commit [ 107.597957][ T5994] BTRFS info (device loop2): enabling free space tree [ 107.597985][ T5994] BTRFS info (device loop2): enabling auto defrag [ 107.598014][ T5994] BTRFS info (device loop2): use lzo compression, level 1 [ 107.598051][ T5994] BTRFS info (device loop2): max_inline set to 4096 [ 108.074889][ T5623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.391964][ T6055] netlink: 28 bytes leftover after parsing attributes in process `syz.5.62'. [ 108.392085][ T6055] netlink: 'syz.5.62': attribute type 7 has an invalid length. [ 108.392109][ T6055] netlink: 'syz.5.62': attribute type 8 has an invalid length. [ 108.392131][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.5.62'. [ 108.439193][ T6055] gretap0: entered promiscuous mode [ 108.578760][ T6055] gretap0: left promiscuous mode [ 108.661230][ T5633] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 108.804832][ T187] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.963049][ T187] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 108.967043][ T187] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 108.967095][ T187] usb 5-1: config 1 interface 0 has no altsetting 0 [ 108.970867][ T187] usb 5-1: string descriptor 0 read error: -22 [ 108.973325][ T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.050535][ T31] audit: type=1326 audit(1791165706.143:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.2.63" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d16f9e159 code=0x0 [ 109.514617][ T187] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 109.538422][ T187] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:0926:3333.0002/input/input7 [ 109.678684][ T187] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 109.731130][ T25] usb 5-1: USB disconnect, device number 3 [ 109.752479][ T6079] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 110.069529][ T6081] fido_id[6081]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 111.361469][ T31] audit: type=1326 audit(1791165708.453:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.4.86" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2acbd9e159 code=0x0 [ 111.948160][ T6141] netlink: 'syz.5.90': attribute type 2 has an invalid length. [ 112.451589][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.612703][ T25] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 112.617912][ T25] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 112.617964][ T25] usb 3-1: config 1 interface 0 has no altsetting 0 [ 112.652801][ T3212] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.658646][ T25] usb 3-1: string descriptor 0 read error: -22 [ 112.660124][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.805206][ T3212] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 112.806605][ T3212] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 112.806643][ T3212] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.806677][ T3212] usb 4-1: config 0 has no interface number 0 [ 112.806733][ T3212] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 112.806779][ T3212] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 112.806816][ T3212] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.810053][ T3212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.810091][ T3212] usb 4-1: Product: syz [ 112.810118][ T3212] usb 4-1: Manufacturer: syz [ 112.810152][ T3212] usb 4-1: SerialNumber: syz [ 112.914583][ T3212] usb 4-1: config 0 descriptor?? [ 113.345087][ T25] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 113.394261][ T25] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:0926:3333.0003/input/input9 [ 113.489950][ T5630] Bluetooth: hci0: SCO packet for unknown connection handle 2850 [ 113.490612][ T5630] Bluetooth: hci0: Malformed LE Event: 0x0d [ 113.508201][ T187] usb 4-1: USB disconnect, device number 2 [ 113.603778][ T6161] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 113.819716][ T25] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 113.914271][ T25] usb 3-1: USB disconnect, device number 2 [ 114.125613][ T6173] FAULT_INJECTION: forcing a failure. [ 114.125613][ T6173] name failslab, interval 1, probability 0, space 0, times 0 [ 114.125663][ T6173] CPU: 0 UID: 0 PID: 6173 Comm: syz.0.112 Not tainted syzkaller #0 PREEMPT(full) [ 114.125707][ T6173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 114.125730][ T6173] Call Trace: [ 114.125742][ T6173] [ 114.125756][ T6173] dump_stack_lvl+0x100/0x190 [ 114.125816][ T6173] should_fail_ex.cold+0x5/0xa [ 114.125859][ T6173] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.125914][ T6173] should_failslab+0xc2/0x120 [ 114.125959][ T6173] kmem_cache_alloc_noprof+0x92/0x6a0 [ 114.126023][ T6173] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.126070][ T6173] ? __ksm_enter+0x3c/0x630 [ 114.126148][ T6173] __ksm_enter+0x3c/0x630 [ 114.126207][ T6173] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.126253][ T6173] ? mas_prev_slot+0x768/0x11b0 [ 114.126320][ T6173] ksm_madvise+0x24a/0x2c0 [ 114.126387][ T6173] madvise_vma_behavior+0x261/0x2350 [ 114.126444][ T6173] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.126490][ T6173] ? mas_prev+0xa4/0x100 [ 114.126550][ T6173] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 114.126603][ T6173] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.126649][ T6173] ? mas_walk+0x260/0x310 [ 114.126698][ T6173] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.126744][ T6173] ? find_vma_prev+0xd8/0x150 [ 114.126786][ T6173] ? __pfx_find_vma_prev+0x10/0x10 [ 114.126825][ T6173] ? lock_acquire+0x1d1/0x380 [ 114.126893][ T6173] madvise_walk_vmas+0x30e/0xc50 [ 114.126951][ T6173] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 114.126998][ T6173] ? __lock_acquire+0x5c0/0x1f40 [ 114.127042][ T6173] ? __pfx_futex_wake_mark+0x10/0x10 [ 114.127174][ T6173] madvise_do_behavior+0x1ea/0x510 [ 114.127224][ T6173] ? __pfx___might_resched+0x10/0x10 [ 114.127289][ T6173] ? __pfx_madvise_do_behavior+0x10/0x10 [ 114.127339][ T6173] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.127401][ T6173] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.127448][ T6173] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 114.127492][ T6173] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.127545][ T6173] do_madvise+0x238/0x290 [ 114.127593][ T6173] ? __pfx_do_madvise+0x10/0x10 [ 114.127640][ T6173] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.127688][ T6173] ? do_futex+0x190/0x440 [ 114.127750][ T6173] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.127798][ T6173] ? __do_sys_capset+0xfb/0x460 [ 114.127895][ T6173] __x64_sys_madvise+0xa9/0x110 [ 114.127944][ T6173] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.127990][ T6173] ? lockdep_hardirqs_on+0x7d/0x110 [ 114.128041][ T6173] do_syscall_64+0x123/0x790 [ 114.128097][ T6173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.128145][ T6173] RIP: 0033:0x7f6b09b9e159 [ 114.128174][ T6173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.128210][ T6173] RSP: 002b:00007f6b0aa68028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 114.128247][ T6173] RAX: ffffffffffffffda RBX: 00007f6b09e25fa0 RCX: 00007f6b09b9e159 [ 114.128272][ T6173] RDX: 000000000000000c RSI: 0000000000400000 RDI: 0000200000000000 [ 114.128297][ T6173] RBP: 00007f6b09c3506b R08: 0000000000000000 R09: 0000000000000000 [ 114.128320][ T6173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.128344][ T6173] R13: 00007f6b09e26038 R14: 00007f6b09e25fa0 R15: 00007ffe0c508a58 [ 114.128395][ T6173] [ 114.244586][ T6168] fido_id[6168]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 115.148732][ T6187] loop2: detected capacity change from 0 to 512 [ 115.244508][ T6187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.813277][ T6198] loop3: detected capacity change from 0 to 32768 [ 115.814666][ T6198] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 115.819564][ T6198] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.108 (6198) [ 115.831979][ T6198] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.832024][ T6198] BTRFS info (device loop3): using sha256 checksum algorithm [ 115.929301][ T5633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.956001][ T6198] BTRFS info (device loop3): rebuilding free space tree [ 115.984032][ T6198] BTRFS info (device loop3): disabling free space tree [ 115.984116][ T6198] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 115.984176][ T6198] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 116.020792][ T6198] BTRFS info (device loop3): enabling ssd optimizations [ 116.020826][ T6198] BTRFS info (device loop3): force clearing of disk cache [ 116.020856][ T6198] BTRFS info (device loop3): enabling auto defrag [ 116.020884][ T6198] BTRFS info (device loop3): max_inline set to 0 [ 116.314103][ T38] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 116.675420][ T5622] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.774770][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 116.958686][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 116.961607][ T25] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 116.965188][ T25] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.965236][ T25] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.965274][ T25] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 116.965321][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 116.965368][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.985035][ T25] usb 6-1: config 0 descriptor?? [ 117.295729][ T3212] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 117.412684][ T6244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.117'. [ 117.412730][ T6244] netlink: 'syz.2.117': attribute type 7 has an invalid length. [ 117.412780][ T6244] netlink: 'syz.2.117': attribute type 8 has an invalid length. [ 117.412802][ T6244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.117'. [ 117.458516][ T3212] usb 5-1: Using ep0 maxpacket: 16 [ 117.460669][ T3212] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 117.461183][ T25] hid (null): invalid report_size 62792 [ 117.461241][ T25] hid (null): unknown global tag 0xc [ 117.461273][ T25] hid (null): report_id 21808 is invalid [ 117.463820][ T25] hid (null): unknown global tag 0xc [ 117.474868][ T25] hid (null): invalid report_count 1023410300 [ 117.513090][ T3212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.513137][ T3212] usb 5-1: Product: syz [ 117.513164][ T3212] usb 5-1: Manufacturer: syz [ 117.513190][ T3212] usb 5-1: SerialNumber: syz [ 117.520881][ T3212] usb 5-1: config 0 descriptor?? [ 117.617590][ T3212] gspca_main: spca508-2.14.0 probing 041e:4018 [ 117.666320][ T6244] gretap0: entered promiscuous mode [ 117.739725][ T6244] gretap0: left promiscuous mode [ 117.791734][ T1223] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.840760][ T3212] gspca_spca508: reg_read err -32 [ 117.855230][ T3212] gspca_spca508: reg_read err -32 [ 117.856206][ T3212] gspca_spca508: reg_read err -32 [ 117.872001][ T3212] gspca_spca508: reg_read err -32 [ 117.891485][ T3212] gspca_spca508: reg_read err -32 [ 117.902712][ T5634] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 117.902838][ T984] usb 6-1: USB disconnect, device number 3 [ 117.944566][ T1223] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 117.951068][ T1223] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 117.951119][ T1223] usb 2-1: config 1 interface 0 has no altsetting 0 [ 117.968476][ T1223] usb 2-1: string descriptor 0 read error: -22 [ 117.968631][ T1223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.070563][ T5634] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 118.073065][ T5634] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 118.073103][ T5634] usb 1-1: config 1 has no interface number 0 [ 118.079522][ T5634] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.079559][ T5634] usb 1-1: Product: syz [ 118.079614][ T5634] usb 1-1: Manufacturer: syz [ 118.079646][ T5634] usb 1-1: SerialNumber: syz [ 118.124385][ T3212] gspca_spca508: reg write: error -71 [ 118.124471][ T3212] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 118.158367][ T3212] usb 5-1: USB disconnect, device number 4 [ 118.297770][ T5634] usb 1-1: 3:0 : does not exist [ 118.297834][ T5634] usb 1-1: 3:0 : does not exist [ 118.528408][ T1223] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 118.568496][ T1223] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:0926:3333.0005/input/input10 [ 118.614741][ T5634] usb 1-1: USB disconnect, device number 2 [ 118.732748][ T1223] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 118.757579][ T1223] usb 2-1: USB disconnect, device number 2 [ 118.883896][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.917459][ T6251] fido_id[6251]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 119.378731][ T6267] FAULT_INJECTION: forcing a failure. [ 119.378731][ T6267] name failslab, interval 1, probability 0, space 0, times 0 [ 119.378780][ T6267] CPU: 1 UID: 0 PID: 6267 Comm: syz.3.127 Not tainted syzkaller #0 PREEMPT(full) [ 119.378824][ T6267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 119.378847][ T6267] Call Trace: [ 119.378859][ T6267] [ 119.378873][ T6267] dump_stack_lvl+0x100/0x190 [ 119.378933][ T6267] should_fail_ex.cold+0x5/0xa [ 119.378977][ T6267] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.379032][ T6267] should_failslab+0xc2/0x120 [ 119.379078][ T6267] kmem_cache_alloc_noprof+0x92/0x6a0 [ 119.379147][ T6267] ? mas_preallocate+0xc22/0xee0 [ 119.379215][ T6267] mas_preallocate+0xc22/0xee0 [ 119.379279][ T6267] ? __pfx_mas_preallocate+0x10/0x10 [ 119.379350][ T6267] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.379399][ T6267] ? anon_vma_name+0x5a/0x250 [ 119.379450][ T6267] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.379507][ T6267] __split_vma+0x2f8/0x1de0 [ 119.379569][ T6267] ? register_lock_class+0x3f/0x7b0 [ 119.379615][ T6267] ? __pfx___split_vma+0x10/0x10 [ 119.379675][ T6267] ? ima_match_policy+0x8c4/0x23f0 [ 119.379730][ T6267] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.379787][ T6267] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.379844][ T6267] vma_modify+0x1ef4/0x29b0 [ 119.379920][ T6267] ? __pfx_vma_modify+0x10/0x10 [ 119.379978][ T6267] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.380027][ T6267] ? __lock_acquire+0x5c0/0x1f40 [ 119.380073][ T6267] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.380141][ T6267] vma_modify_flags_uffd+0x312/0x470 [ 119.380206][ T6267] ? __pfx_vma_modify_flags_uffd+0x10/0x10 [ 119.380287][ T6267] ? __pfx_vma_can_userfault+0x10/0x10 [ 119.380346][ T6267] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.380397][ T6267] ? __pfx___might_resched+0x10/0x10 [ 119.380471][ T6267] userfaultfd_register_range+0x4be/0x770 [ 119.380546][ T6267] ? __pfx_userfaultfd_register_range+0x10/0x10 [ 119.380618][ T6267] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.380670][ T6267] ? vma_can_userfault+0x124/0x3f0 [ 119.380734][ T6267] ? __pfx_vma_can_userfault+0x10/0x10 [ 119.380795][ T6267] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.380843][ T6267] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 119.380900][ T6267] userfaultfd_register+0x900/0xe40 [ 119.380976][ T6267] ? __pfx_userfaultfd_register+0x10/0x10 [ 119.381039][ T6267] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.381088][ T6267] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.381151][ T6267] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.381199][ T6267] ? tomoyo_path_number_perm+0x188/0x580 [ 119.381243][ T6267] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.381298][ T6267] userfaultfd_ioctl+0x2e6e/0x61d0 [ 119.381370][ T6267] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.381418][ T6267] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 119.381469][ T6267] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 119.381530][ T6267] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 119.381602][ T6267] ? __fget_files+0x34/0x3d0 [ 119.381650][ T6267] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.381698][ T6267] ? find_held_lock+0x2b/0x80 [ 119.381752][ T6267] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.381800][ T6267] ? hook_file_ioctl_common+0x140/0x440 [ 119.381853][ T6267] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.381900][ T6267] ? __fget_files+0x21f/0x3d0 [ 119.381949][ T6267] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 119.382015][ T6267] ? __x64_sys_ioctl+0x18e/0x210 [ 119.382075][ T6267] __x64_sys_ioctl+0x18e/0x210 [ 119.382140][ T6267] do_syscall_64+0x123/0x790 [ 119.382198][ T6267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.382238][ T6267] RIP: 0033:0x7fc394b9e159 [ 119.382268][ T6267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.382305][ T6267] RSP: 002b:00007fc3959a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.382342][ T6267] RAX: ffffffffffffffda RBX: 00007fc394e25fa0 RCX: 00007fc394b9e159 [ 119.382368][ T6267] RDX: 0000200000000080 RSI: 00000000c020aa00 RDI: 0000000000000003 [ 119.382393][ T6267] RBP: 00007fc394c3506b R08: 0000000000000000 R09: 0000000000000000 [ 119.382415][ T6267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.382439][ T6267] R13: 00007fc394e26038 R14: 00007fc394e25fa0 R15: 00007fff618bfbe8 [ 119.382490][ T6267] [ 119.503345][ T1223] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.694070][ T1223] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 119.716215][ T1223] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.716270][ T1223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.862998][ T1223] usb 3-1: config 0 descriptor?? [ 119.870208][ T1223] pwc: Askey VC010 type 2 USB webcam detected. [ 119.900518][ T6274] loop1: detected capacity change from 0 to 2048 [ 120.036161][ T6274] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.037617][ T6274] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.171250][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.130'. [ 120.178213][ T6274] EXT4-fs (loop1): shut down requested (1) [ 120.328786][ T1223] pwc: recv_control_msg error -32 req 02 val 2b00 [ 120.333824][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.130'. [ 120.340156][ T1223] pwc: recv_control_msg error -32 req 02 val 2700 [ 120.346396][ T6281] Zero length message leads to an empty skb [ 120.367272][ T50] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.369410][ T3281] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.386251][ T3281] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.386323][ T3281] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.409124][ T1223] pwc: recv_control_msg error -32 req 02 val 2c00 [ 120.410685][ T1223] pwc: recv_control_msg error -32 req 04 val 1000 [ 120.467648][ T5623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.632590][ T1223] pwc: recv_control_msg error -71 req 04 val 1400 [ 120.634187][ T1223] pwc: recv_control_msg error -71 req 02 val 2000 [ 120.634774][ T1223] pwc: recv_control_msg error -71 req 02 val 2100 [ 120.635569][ T1223] pwc: recv_control_msg error -71 req 04 val 1500 [ 120.636055][ T1223] pwc: recv_control_msg error -71 req 02 val 2500 [ 120.636491][ T1223] pwc: recv_control_msg error -71 req 02 val 2400 [ 120.636938][ T1223] pwc: recv_control_msg error -71 req 02 val 2600 [ 120.637373][ T1223] pwc: recv_control_msg error -71 req 02 val 2900 [ 120.637824][ T1223] pwc: recv_control_msg error -71 req 02 val 2800 [ 120.638530][ T1223] pwc: recv_control_msg error -71 req 04 val 1100 [ 120.638976][ T1223] pwc: recv_control_msg error -71 req 04 val 1200 [ 120.723901][ T1223] pwc: Registered as video103. [ 120.735079][ T1223] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 120.760460][ T1223] usb 3-1: USB disconnect, device number 3 [ 121.120178][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.136'. [ 121.931532][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 122.085294][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 122.088633][ T10] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 122.088684][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 122.099060][ T10] usb 4-1: string descriptor 0 read error: -22 [ 122.099213][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.353724][ T6319] Illegal XDP return value 2136244224 on prog (id 27) dev syz_tun, expect packet loss! [ 122.486575][ T6323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.144'. [ 122.527573][ T6323] xfrm1: entered promiscuous mode [ 122.527601][ T6323] xfrm1: entered allmulticast mode [ 122.529683][ T6323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.144'. [ 122.644292][ T10] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 122.706378][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:0926:3333.0006/input/input12 [ 122.896737][ T10] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 122.970642][ T10] usb 4-1: USB disconnect, device number 3 [ 123.055091][ T6331] FAULT_INJECTION: forcing a failure. [ 123.055091][ T6331] name failslab, interval 1, probability 0, space 0, times 0 [ 123.055147][ T6331] CPU: 0 UID: 0 PID: 6331 Comm: syz.4.148 Not tainted syzkaller #0 PREEMPT(full) [ 123.055191][ T6331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 123.055213][ T6331] Call Trace: [ 123.055226][ T6331] [ 123.055240][ T6331] dump_stack_lvl+0x100/0x190 [ 123.055301][ T6331] should_fail_ex.cold+0x5/0xa [ 123.055345][ T6331] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.055402][ T6331] should_failslab+0xc2/0x120 [ 123.055447][ T6331] kmem_cache_alloc_noprof+0x92/0x6a0 [ 123.055510][ T6331] ? __pfx_map_id_range_down+0x10/0x10 [ 123.055552][ T6331] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.055599][ T6331] ? security_inode_alloc+0x3b/0x2c0 [ 123.055671][ T6331] security_inode_alloc+0x3b/0x2c0 [ 123.055735][ T6331] inode_init_always_gfp+0xc6f/0xfb0 [ 123.055794][ T6331] alloc_inode+0x8e/0x250 [ 123.055853][ T6331] new_inode+0x22/0x1c0 [ 123.055916][ T6331] proc_pid_make_inode+0x22/0x160 [ 123.055965][ T6331] ? d_lookup+0xe7/0x190 [ 123.056028][ T6331] proc_fdinfo_instantiate+0x57/0x240 [ 123.056075][ T6331] proc_fill_cache+0x2a3/0x3a0 [ 123.056127][ T6331] ? __pfx_proc_fdinfo_instantiate+0x10/0x10 [ 123.056181][ T6331] ? __pfx_proc_fill_cache+0x10/0x10 [ 123.056233][ T6331] ? _raw_spin_unlock+0x28/0x50 [ 123.056290][ T6331] proc_readfd_common+0x1ef/0x5f0 [ 123.056332][ T6331] ? __pfx_proc_fdinfo_instantiate+0x10/0x10 [ 123.056380][ T6331] ? __pfx_proc_readfd_common+0x10/0x10 [ 123.056423][ T6331] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.056470][ T6331] ? down_read_killable+0x35d/0x520 [ 123.056532][ T6331] ? __pfx_down_read_killable+0x10/0x10 [ 123.056590][ T6331] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.056653][ T6331] iterate_dir+0x296/0xae0 [ 123.056725][ T6331] __x64_sys_getdents+0x13b/0x2b0 [ 123.056791][ T6331] ? __pfx___x64_sys_getdents+0x10/0x10 [ 123.056857][ T6331] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.056904][ T6331] ? __pfx_filldir+0x10/0x10 [ 123.056974][ T6331] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.057030][ T6331] do_syscall_64+0x123/0x790 [ 123.057087][ T6331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.057127][ T6331] RIP: 0033:0x7f2acbd9e159 [ 123.057163][ T6331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.057199][ T6331] RSP: 002b:00007f2accd51028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 123.057236][ T6331] RAX: ffffffffffffffda RBX: 00007f2acc025fa0 RCX: 00007f2acbd9e159 [ 123.057262][ T6331] RDX: 0000000000001000 RSI: 0000200000001ec0 RDI: 0000000000000004 [ 123.057286][ T6331] RBP: 00007f2acbe3506b R08: 0000000000000000 R09: 0000000000000000 [ 123.057310][ T6331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.057334][ T6331] R13: 00007f2acc026038 R14: 00007f2acc025fa0 R15: 00007ffd68600af8 [ 123.057385][ T6331] [ 123.290584][ T6332] fido_id[6332]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 123.318673][ T5613] udevd[5613]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 123.318819][ T5613] udevd[5613]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 123.802620][ T6342] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 125.168137][ T6349] netlink: 24 bytes leftover after parsing attributes in process `syz.2.154'. [ 125.168198][ T6349] FAULT_INJECTION: forcing a failure. [ 125.168198][ T6349] name failslab, interval 1, probability 0, space 0, times 0 [ 125.168240][ T6349] CPU: 0 UID: 0 PID: 6349 Comm: syz.2.154 Not tainted syzkaller #0 PREEMPT(full) [ 125.168285][ T6349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 125.168308][ T6349] Call Trace: [ 125.168320][ T6349] [ 125.168334][ T6349] dump_stack_lvl+0x100/0x190 [ 125.168395][ T6349] should_fail_ex.cold+0x5/0xa [ 125.168439][ T6349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.168493][ T6349] should_failslab+0xc2/0x120 [ 125.168540][ T6349] __kvmalloc_node_noprof+0x113/0x9b0 [ 125.168607][ T6349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.168661][ T6349] ? rcu_is_watching+0x13/0xc0 [ 125.168716][ T6349] ? pipapo_realloc_scratch+0x122/0x3f0 [ 125.168773][ T6349] pipapo_realloc_scratch+0x122/0x3f0 [ 125.168828][ T6349] pipapo_maybe_clone.part.0+0x315/0xe00 [ 125.168877][ T6349] ? net_generic+0xea/0x2a0 [ 125.168954][ T6349] nft_pipapo_walk+0x432/0x5e0 [ 125.169003][ T6349] nf_tables_delsetelem+0x95d/0xf50 [ 125.169081][ T6349] ? __pfx_nf_tables_delsetelem+0x10/0x10 [ 125.169148][ T6349] ? __pfx_nft_setelem_flush+0x10/0x10 [ 125.169211][ T6349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.169257][ T6349] ? lock_acquire+0x1d1/0x380 [ 125.169302][ T6349] ? net_generic+0x25/0x2a0 [ 125.169355][ T6349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.169402][ T6349] ? __nla_parse+0x40/0x60 [ 125.169459][ T6349] nfnetlink_rcv_batch+0x1410/0x2880 [ 125.169535][ T6349] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 125.169586][ T6349] ? find_held_lock+0x2b/0x80 [ 125.169654][ T6349] ? __local_bh_enable_ip+0xa5/0x120 [ 125.169693][ T6349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.169740][ T6349] ? lockdep_hardirqs_on+0x7d/0x110 [ 125.169790][ T6349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.169906][ T6349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.169953][ T6349] ? __nla_parse+0x40/0x60 [ 125.170007][ T6349] nfnetlink_rcv+0x3bd/0x440 [ 125.170053][ T6349] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 125.170114][ T6349] netlink_unicast+0x585/0x850 [ 125.170184][ T6349] ? __pfx_netlink_unicast+0x10/0x10 [ 125.170261][ T6349] netlink_sendmsg+0x8b0/0xda0 [ 125.170332][ T6349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.170400][ T6349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.170446][ T6349] ? apparmor_socket_sendmsg+0x165/0x280 [ 125.170518][ T6349] ____sys_sendmsg+0xa4d/0xbe0 [ 125.170566][ T6349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.170640][ T6349] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.170715][ T6349] ___sys_sendmsg+0x190/0x1e0 [ 125.170772][ T6349] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.170825][ T6349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.170872][ T6349] ? futex_wait+0x11e/0x370 [ 125.170954][ T6349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.171000][ T6349] ? find_held_lock+0x2b/0x80 [ 125.171089][ T6349] __sys_sendmsg+0x160/0x210 [ 125.171130][ T6349] ? __pfx___sys_sendmsg+0x10/0x10 [ 125.171188][ T6349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.171244][ T6349] do_syscall_64+0x123/0x790 [ 125.171302][ T6349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.171343][ T6349] RIP: 0033:0x7f6d16f9e159 [ 125.171373][ T6349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.171409][ T6349] RSP: 002b:00007f6d17ed0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.171446][ T6349] RAX: ffffffffffffffda RBX: 00007f6d17225fa0 RCX: 00007f6d16f9e159 [ 125.171472][ T6349] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 125.171496][ T6349] RBP: 00007f6d1703506b R08: 0000000000000000 R09: 0000000000000000 [ 125.171519][ T6349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.171543][ T6349] R13: 00007f6d17226038 R14: 00007f6d17225fa0 R15: 00007ffeca47b468 [ 125.171595][ T6349] [ 125.884758][ T6361] loop5: detected capacity change from 0 to 512 [ 125.890560][ T6361] EXT4-fs: Ignoring removed bh option [ 125.946124][ T6361] EXT4-fs error (device loop5): ext4_xattr_inode_iget:440: comm syz.5.159: error while reading EA inode 32 err=-116 [ 125.946173][ T6361] loop5: lost filesystem error report for type 5 error -117 [ 125.951365][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 125.951395][ C0] EXT4-fs (loop5): initial error at time 1791165723: ext4_xattr_inode_iget:440 [ 125.951433][ C0] EXT4-fs (loop5): last error at time 1791165723: ext4_xattr_inode_iget:440 [ 126.010704][ T6361] EXT4-fs (loop5): 1 orphan inode deleted [ 126.038856][ T6361] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.216473][ T5625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.730993][ T6372] loop0: detected capacity change from 0 to 512 [ 126.746438][ T6372] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 126.776253][ T6372] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.173: bad orphan inode 15 [ 126.776293][ T6372] loop0: lost filesystem error report for type 5 error -117 [ 126.834967][ T6372] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.917944][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.173'. [ 127.128513][ T5631] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.196408][ T6377] FAULT_INJECTION: forcing a failure. [ 127.196408][ T6377] name failslab, interval 1, probability 0, space 0, times 0 [ 127.196457][ T6377] CPU: 1 UID: 0 PID: 6377 Comm: syz.5.164 Not tainted syzkaller #0 PREEMPT(full) [ 127.196501][ T6377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 127.196525][ T6377] Call Trace: [ 127.196537][ T6377] [ 127.196552][ T6377] dump_stack_lvl+0x100/0x190 [ 127.196614][ T6377] should_fail_ex.cold+0x5/0xa [ 127.196662][ T6377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.196716][ T6377] should_failslab+0xc2/0x120 [ 127.196762][ T6377] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 127.196835][ T6377] ? __kthread_create_on_node+0x186/0x3f0 [ 127.196893][ T6377] kvasprintf+0xbc/0x150 [ 127.196953][ T6377] ? __pfx_kvasprintf+0x10/0x10 [ 127.197014][ T6377] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 127.197069][ T6377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.197117][ T6377] ? __kthread_create_on_node+0xce/0x3f0 [ 127.197181][ T6377] ? __pfx_cryptomgr_probe+0x10/0x10 [ 127.197232][ T6377] __kthread_create_on_node+0x186/0x3f0 [ 127.197283][ T6377] ? __pfx___kthread_create_on_node+0x10/0x10 [ 127.197355][ T6377] ? __pfx_cryptomgr_probe+0x10/0x10 [ 127.197409][ T6377] kthread_create_on_node+0xc7/0x100 [ 127.197457][ T6377] ? __pfx_kthread_create_on_node+0x10/0x10 [ 127.197508][ T6377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.197555][ T6377] ? __kasan_kmalloc+0xaa/0xb0 [ 127.197594][ T6377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.197642][ T6377] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 127.197701][ T6377] ? cryptomgr_notify+0xa4/0xb40 [ 127.197761][ T6377] cryptomgr_notify+0x953/0xb40 [ 127.197817][ T6377] ? __kasan_kmalloc+0xaa/0xb0 [ 127.197860][ T6377] notifier_call_chain+0x99/0x3f0 [ 127.197923][ T6377] blocking_notifier_call_chain+0x69/0xa0 [ 127.197984][ T6377] crypto_alg_mod_lookup+0x1e2/0x5d0 [ 127.198036][ T6377] crypto_alloc_tfm_node+0xd3/0x260 [ 127.198087][ T6377] esp_init_authenc.constprop.0+0x1df/0xb50 [ 127.198166][ T6377] ? __pfx_esp_init_authenc.constprop.0+0x10/0x10 [ 127.198247][ T6377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.198296][ T6377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.198343][ T6377] ? find_held_lock+0x2b/0x80 [ 127.198406][ T6377] esp_init_state+0x2f8/0x530 [ 127.198468][ T6377] __xfrm_init_state+0x842/0x1dc0 [ 127.198517][ T6377] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 127.198568][ T6377] xfrm_init_state+0x1c/0xa0 [ 127.198613][ T6377] pfkey_add+0x1c88/0x2f10 [ 127.198673][ T6377] ? __pfx_pfkey_add+0x10/0x10 [ 127.198716][ T6377] ? kfree_skbmem+0x19f/0x210 [ 127.198770][ T6377] ? sk_skb_reason_drop+0x114/0x1b0 [ 127.198816][ T6377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.198863][ T6377] ? pfkey_broadcast+0x28c/0x420 [ 127.198913][ T6377] ? __pfx_pfkey_add+0x10/0x10 [ 127.198959][ T6377] pfkey_process+0x5c3/0x810 [ 127.199013][ T6377] ? __pfx_pfkey_process+0x10/0x10 [ 127.199059][ T6377] ? pfkey_sendmsg+0x41a/0x840 [ 127.199144][ T6377] ? __pfx___alloc_skb+0x10/0x10 [ 127.199211][ T6377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.199268][ T6377] pfkey_sendmsg+0x428/0x840 [ 127.199325][ T6377] ____sys_sendmsg+0xa4d/0xbe0 [ 127.199372][ T6377] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 127.199425][ T6377] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.199499][ T6377] ___sys_sendmsg+0x190/0x1e0 [ 127.199556][ T6377] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.199610][ T6377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.199657][ T6377] ? futex_wait+0x11e/0x370 [ 127.199739][ T6377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.199786][ T6377] ? find_held_lock+0x2b/0x80 [ 127.199875][ T6377] __sys_sendmsg+0x160/0x210 [ 127.199917][ T6377] ? __pfx___sys_sendmsg+0x10/0x10 [ 127.199974][ T6377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.200030][ T6377] do_syscall_64+0x123/0x790 [ 127.200088][ T6377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.200128][ T6377] RIP: 0033:0x7f382679e159 [ 127.200165][ T6377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.200202][ T6377] RSP: 002b:00007f3827708028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.200238][ T6377] RAX: ffffffffffffffda RBX: 00007f3826a25fa0 RCX: 00007f382679e159 [ 127.200264][ T6377] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 127.200288][ T6377] RBP: 00007f382683506b R08: 0000000000000000 R09: 0000000000000000 [ 127.200312][ T6377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.200336][ T6377] R13: 00007f3826a26038 R14: 00007f3826a25fa0 R15: 00007ffe1ee8b4a8 [ 127.200387][ T6377] [ 132.137872][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.138345][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.988863][ T5627] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 137.001772][ T5627] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 137.004232][ T5627] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 137.010669][ T5627] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 137.041931][ T5627] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 137.086448][ T6394] capability: warning: `syz.5.169' uses 32-bit capabilities (legacy support in use) [ 137.381462][ T187] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 137.543414][ T187] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 137.549481][ T187] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 137.549531][ T187] usb 1-1: config 1 interface 0 has no altsetting 0 [ 137.588588][ T187] usb 1-1: string descriptor 0 read error: -22 [ 137.588746][ T187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.087136][ T187] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 138.125321][ T187] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:0926:3333.0007/input/input13 [ 138.295837][ T6425] loop5: detected capacity change from 0 to 256 [ 138.329497][ T6429] xt_hashlimit: size too large, truncated to 1048576 [ 138.364870][ T6425] exFAT-fs (loop5): bogus sector size bits : 0 [ 138.364894][ T6425] exFAT-fs (loop5): failed to read boot sector [ 138.364909][ T6425] exFAT-fs (loop5): failed to recognize exfat type [ 138.911875][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.955476][ T187] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 139.043531][ T187] usb 1-1: USB disconnect, device number 3 [ 139.053376][ T6426] NFSD: Failed to start, no listeners configured. [ 139.091638][ T5630] Bluetooth: hci6: command tx timeout [ 139.244153][ T6443] fido_id[6443]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 139.399210][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.555054][ T6451] jffs2: notice: (6451) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 139.806725][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.032442][ T6465] block nbd5: shutting down sockets [ 140.048907][ T6468] input: syz0 as /devices/virtual/input/input14 [ 140.080053][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.460813][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'. [ 140.460847][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'. [ 140.820579][ T6486] syz.3.193 uses obsolete (PF_INET,SOCK_PACKET) [ 140.827119][ T6485] loop7: detected capacity change from 0 to 16384 [ 140.855798][ T6485] loop2: detected capacity change from 0 to 512 [ 140.882475][ T6485] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 140.882500][ T6485] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 140.935734][ T6485] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #16: comm syz.2.194: invalid indirect mapped block 32768 (level 2) [ 140.935923][ T6485] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 140.941365][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 140.941395][ C0] EXT4-fs (loop2): initial error at time 1791165738: ext4_free_branches:1020: inode 16 [ 140.941443][ C0] EXT4-fs (loop2): last error at time 1791165738: ext4_free_branches:1020: inode 16 [ 141.012029][ T6485] EXT4-fs (loop2): 1 orphan inode deleted [ 141.012060][ T6485] EXT4-fs (loop2): 1 truncate cleaned up [ 141.074872][ T6485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.147851][ T31] audit: type=1800 audit(1791165738.243:6): pid=6485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.194" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 141.181731][ T5630] Bluetooth: hci6: command tx timeout [ 141.330804][ T50] bridge_slave_1: left allmulticast mode [ 141.330855][ T50] bridge_slave_1: left promiscuous mode [ 141.332286][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.351514][ T5633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.429881][ T6495] netlink: 20 bytes leftover after parsing attributes in process `syz.4.198'. [ 141.461099][ T50] bridge_slave_0: left allmulticast mode [ 141.461131][ T50] bridge_slave_0: left promiscuous mode [ 141.461425][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.616945][ T6507] FAULT_INJECTION: forcing a failure. [ 141.616945][ T6507] name failslab, interval 1, probability 0, space 0, times 0 [ 141.616995][ T6507] CPU: 0 UID: 0 PID: 6507 Comm: syz.2.202 Not tainted syzkaller #0 PREEMPT(full) [ 141.617040][ T6507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 141.617063][ T6507] Call Trace: [ 141.617074][ T6507] [ 141.617089][ T6507] dump_stack_lvl+0x100/0x190 [ 141.617149][ T6507] should_fail_ex.cold+0x5/0xa [ 141.617192][ T6507] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.617238][ T6507] should_failslab+0xc2/0x120 [ 141.617279][ T6507] kmem_cache_alloc_noprof+0x92/0x6a0 [ 141.617337][ T6507] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.617382][ T6507] ? jffs2_prealloc_raw_node_refs+0x1db/0x370 [ 141.617443][ T6507] jffs2_prealloc_raw_node_refs+0x1db/0x370 [ 141.617501][ T6507] jffs2_scan_medium+0x5e4/0x59c0 [ 141.617578][ T6507] ? __pfx_jffs2_scan_medium+0x10/0x10 [ 141.617634][ T6507] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.617688][ T6507] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.617730][ T6507] ? trace_kmalloc+0xeb/0x110 [ 141.617769][ T6507] ? __kasan_kmalloc+0xaa/0xb0 [ 141.617805][ T6507] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.617852][ T6507] ? __kmalloc_noprof+0x350/0x840 [ 141.617917][ T6507] ? jffs2_sum_init+0xc4/0x1b0 [ 141.617992][ T6507] jffs2_do_mount_fs+0x8a0/0x2300 [ 141.618064][ T6507] ? rcu_is_watching+0x13/0xc0 [ 141.618118][ T6507] ? trace_kmalloc+0xeb/0x110 [ 141.618158][ T6507] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.618205][ T6507] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.618252][ T6507] ? lockdep_init_map_type+0x5c/0x250 [ 141.618299][ T6507] ? __pfx_jffs2_do_mount_fs+0x10/0x10 [ 141.618361][ T6507] ? __raw_spin_lock_init+0x3a/0x110 [ 141.618415][ T6507] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.618463][ T6507] ? __init_rwsem+0x10e/0x180 [ 141.618516][ T6507] jffs2_do_fill_super+0x3d4/0xa50 [ 141.618566][ T6507] jffs2_fill_super+0x283/0x370 [ 141.618606][ T6507] ? __pfx_get_mtd_device+0x10/0x10 [ 141.618676][ T6507] ? __pfx_jffs2_fill_super+0x10/0x10 [ 141.618719][ T6507] mtd_get_sb+0x2f0/0x4c0 [ 141.618761][ T6507] ? __pfx_jffs2_fill_super+0x10/0x10 [ 141.618803][ T6507] get_tree_mtd+0x6f9/0x8a0 [ 141.618843][ T6507] ? __pfx_get_tree_mtd+0x10/0x10 [ 141.618882][ T6507] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.618936][ T6507] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.618982][ T6507] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.619028][ T6507] ? security_capable+0x80/0x260 [ 141.619090][ T6507] vfs_get_tree+0x92/0x320 [ 141.619139][ T6507] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.619189][ T6507] path_mount+0x7d0/0x24c0 [ 141.619250][ T6507] ? __pfx_path_mount+0x10/0x10 [ 141.619300][ T6507] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.619346][ T6507] ? lockdep_hardirqs_on+0x7d/0x110 [ 141.619403][ T6507] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.619450][ T6507] ? kmem_cache_free+0x127/0x6c0 [ 141.619522][ T6507] ? __x64_sys_mount+0x293/0x310 [ 141.619573][ T6507] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.619619][ T6507] __x64_sys_mount+0x293/0x310 [ 141.619680][ T6507] ? __pfx___x64_sys_mount+0x10/0x10 [ 141.619739][ T6507] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.619795][ T6507] do_syscall_64+0x123/0x790 [ 141.619851][ T6507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.619891][ T6507] RIP: 0033:0x7f6d16f9e159 [ 141.619921][ T6507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.619957][ T6507] RSP: 002b:00007f6d17ed0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 141.619992][ T6507] RAX: ffffffffffffffda RBX: 00007f6d17225fa0 RCX: 00007f6d16f9e159 [ 141.620013][ T6507] RDX: 0000200000000300 RSI: 0000200000000100 RDI: 0000200000000200 [ 141.620034][ T6507] RBP: 00007f6d1703506b R08: 0000000000000000 R09: 0000000000000000 [ 141.620056][ T6507] R10: 0000000000800040 R11: 0000000000000246 R12: 0000000000000000 [ 141.620078][ T6507] R13: 00007f6d17226038 R14: 00007f6d17225fa0 R15: 00007ffeca47b468 [ 141.620125][ T6507] [ 142.242257][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.269378][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.280052][ T50] bond0 (unregistering): Released all slaves [ 142.354518][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.354549][ T6495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.364027][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.364052][ T6495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.529611][ T6526] netlink: 28 bytes leftover after parsing attributes in process `syz.3.208'. [ 142.529656][ T6526] netlink: 'syz.3.208': attribute type 7 has an invalid length. [ 142.529678][ T6526] netlink: 'syz.3.208': attribute type 8 has an invalid length. [ 142.529699][ T6526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.208'. [ 142.673364][ T6526] gretap0: entered promiscuous mode [ 142.692360][ T6526] gretap0: left promiscuous mode [ 143.262130][ T5630] Bluetooth: hci6: command tx timeout [ 143.283722][ T5903] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 143.451388][ T5903] usb 5-1: Using ep0 maxpacket: 8 [ 143.452123][ T5903] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 143.455283][ T5903] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 143.455321][ T5903] usb 5-1: config 0 has no interface number 0 [ 143.455373][ T5903] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 143.455413][ T5903] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 143.455457][ T5903] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 143.455504][ T5903] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 143.455567][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.467288][ T5903] usb 5-1: config 0 descriptor?? [ 143.563654][ T5903] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 143.624816][ T6545] loop3: detected capacity change from 0 to 4096 [ 143.794282][ T6402] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.794404][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.794580][ T6402] bridge_slave_0: entered allmulticast mode [ 143.807070][ T6402] bridge_slave_0: entered promiscuous mode [ 143.838868][ T6402] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.838987][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.839132][ T6402] bridge_slave_1: entered allmulticast mode [ 143.856743][ T6402] bridge_slave_1: entered promiscuous mode [ 143.895145][ T6545] ntfs3(loop3): ino=19, mi_enum_attr [ 143.895317][ T6545] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 144.066317][ T5903] kernel write not supported for file [eventfd] (pid: 5903 comm: kworker/1:6) [ 144.423018][ T50] hsr_slave_0: left promiscuous mode [ 144.434804][ T50] hsr_slave_1: left promiscuous mode [ 144.437666][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.437704][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.459404][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.459431][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.566613][ T50] veth1_macvtap: left promiscuous mode [ 144.566686][ T50] veth0_macvtap: left promiscuous mode [ 144.566817][ T50] veth1_vlan: left promiscuous mode [ 144.566976][ T50] veth0_vlan: left promiscuous mode [ 144.963523][ T6568] FAULT_INJECTION: forcing a failure. [ 144.963523][ T6568] name failslab, interval 1, probability 0, space 0, times 0 [ 144.963571][ T6568] CPU: 1 UID: 0 PID: 6568 Comm: syz.5.221 Not tainted syzkaller #0 PREEMPT(full) [ 144.963615][ T6568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 144.963638][ T6568] Call Trace: [ 144.963650][ T6568] [ 144.963665][ T6568] dump_stack_lvl+0x100/0x190 [ 144.963723][ T6568] should_fail_ex.cold+0x5/0xa [ 144.963766][ T6568] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.963820][ T6568] should_failslab+0xc2/0x120 [ 144.963866][ T6568] kmem_cache_alloc_noprof+0x92/0x6a0 [ 144.963932][ T6568] ? radix_tree_node_alloc.constprop.0+0x81/0x360 [ 144.963989][ T6568] radix_tree_node_alloc.constprop.0+0x81/0x360 [ 144.964046][ T6568] idr_get_free+0x52e/0xa00 [ 144.964109][ T6568] idr_alloc_u32+0x1ac/0x320 [ 144.964177][ T6568] ? __pfx_idr_alloc_u32+0x10/0x10 [ 144.964226][ T6568] ? do_raw_spin_lock+0x128/0x260 [ 144.964280][ T6568] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.964341][ T6568] l2tp_tunnel_register+0xfc/0xc10 [ 144.964414][ T6568] ? __pfx___debug_object_init+0x10/0x10 [ 144.964479][ T6568] ? __pfx_l2tp_tunnel_register+0x10/0x10 [ 144.964551][ T6568] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.964597][ T6568] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 144.964652][ T6568] ? l2tp_tunnel_get+0x20c/0x490 [ 144.964711][ T6568] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.964763][ T6568] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.964810][ T6568] ? lockdep_init_map_type+0x5c/0x250 [ 144.964854][ T6568] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.964901][ T6568] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.964947][ T6568] ? l2tp_tunnel_create+0x37d/0x460 [ 144.965010][ T6568] pppol2tp_tunnel_get.constprop.0+0x3f0/0x540 [ 144.965058][ T6568] ? __pfx_pppol2tp_tunnel_get.constprop.0+0x10/0x10 [ 144.965103][ T6568] ? __pfx_futex_wake_mark+0x10/0x10 [ 144.965188][ T6568] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.965235][ T6568] ? __lock_acquire+0x5c0/0x1f40 [ 144.965281][ T6568] pppol2tp_connect+0xaf0/0x1c20 [ 144.965329][ T6568] ? __pfx_pppol2tp_connect+0x10/0x10 [ 144.965388][ T6568] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.965435][ T6568] ? apparmor_socket_connect+0x116/0x1f0 [ 144.965504][ T6568] __sys_connect_file+0x146/0x1a0 [ 144.965570][ T6568] __sys_connect+0x141/0x170 [ 144.965630][ T6568] ? __pfx___sys_connect+0x10/0x10 [ 144.965721][ T6568] __x64_sys_connect+0x72/0xb0 [ 144.965780][ T6568] ? lockdep_hardirqs_on+0x7d/0x110 [ 144.965829][ T6568] do_syscall_64+0x123/0x790 [ 144.965885][ T6568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.965926][ T6568] RIP: 0033:0x7f382679e159 [ 144.965958][ T6568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.965994][ T6568] RSP: 002b:00007f3827708028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 144.966031][ T6568] RAX: ffffffffffffffda RBX: 00007f3826a25fa0 RCX: 00007f382679e159 [ 144.966057][ T6568] RDX: 0000000000000026 RSI: 00002000000002c0 RDI: 0000000000000004 [ 144.966081][ T6568] RBP: 00007f382683506b R08: 0000000000000000 R09: 0000000000000000 [ 144.966105][ T6568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.966129][ T6568] R13: 00007f3826a26038 R14: 00007f3826a25fa0 R15: 00007ffe1ee8b4a8 [ 144.966186][ T6568] [ 145.331514][ T5630] Bluetooth: hci6: command tx timeout [ 145.336952][ T6573] FAULT_INJECTION: forcing a failure. [ 145.336952][ T6573] name failslab, interval 1, probability 0, space 0, times 0 [ 145.336997][ T6573] CPU: 1 UID: 0 PID: 6573 Comm: syz.3.220 Not tainted syzkaller #0 PREEMPT(full) [ 145.337041][ T6573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 145.337067][ T6573] Call Trace: [ 145.337079][ T6573] [ 145.337093][ T6573] dump_stack_lvl+0x100/0x190 [ 145.337159][ T6573] should_fail_ex.cold+0x5/0xa [ 145.337204][ T6573] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.337258][ T6573] should_failslab+0xc2/0x120 [ 145.337304][ T6573] __kmalloc_noprof+0xfc/0x840 [ 145.337369][ T6573] ? __vb2_queue_alloc+0x23e/0x1160 [ 145.337436][ T6573] __vb2_queue_alloc+0x23e/0x1160 [ 145.337518][ T6573] vb2_core_reqbufs+0x899/0xf30 [ 145.337587][ T6573] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 145.337648][ T6573] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.337699][ T6573] ? trace_contention_end+0x126/0x160 [ 145.337748][ T6573] ? __mutex_lock+0x26c/0x1bd0 [ 145.337802][ T6573] ? __video_do_ioctl+0x50f/0xdf0 [ 145.337846][ T6573] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.337902][ T6573] vb2_ioctl_reqbufs+0x291/0x450 [ 145.337958][ T6573] ? __pfx_vb2_ioctl_reqbufs+0x10/0x10 [ 145.338018][ T6573] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.338072][ T6573] vidioc_reqbufs+0x86/0x100 [ 145.338141][ T6573] v4l_reqbufs+0x175/0x1d0 [ 145.338189][ T6573] __video_do_ioctl+0xb2a/0xdf0 [ 145.338241][ T6573] ? __might_fault+0xc5/0x140 [ 145.338295][ T6573] ? __pfx___video_do_ioctl+0x10/0x10 [ 145.338358][ T6573] video_usercopy+0x47a/0x1730 [ 145.338407][ T6573] ? __pfx___video_do_ioctl+0x10/0x10 [ 145.338457][ T6573] ? __pfx_video_usercopy+0x10/0x10 [ 145.338525][ T6573] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.338572][ T6573] ? __fget_files+0x21f/0x3d0 [ 145.338622][ T6573] v4l2_ioctl+0x1bd/0x250 [ 145.338668][ T6573] ? __pfx_v4l2_ioctl+0x10/0x10 [ 145.338720][ T6573] __x64_sys_ioctl+0x18e/0x210 [ 145.338786][ T6573] do_syscall_64+0x123/0x790 [ 145.338843][ T6573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.338883][ T6573] RIP: 0033:0x7fc394b9e159 [ 145.338913][ T6573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.338949][ T6573] RSP: 002b:00007fc3959a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.338987][ T6573] RAX: ffffffffffffffda RBX: 00007fc394e25fa0 RCX: 00007fc394b9e159 [ 145.339012][ T6573] RDX: 0000200000000200 RSI: 00000000c0145608 RDI: 0000000000000004 [ 145.339036][ T6573] RBP: 00007fc394c3506b R08: 0000000000000000 R09: 0000000000000000 [ 145.339060][ T6573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.339083][ T6573] R13: 00007fc394e26038 R14: 00007fc394e25fa0 R15: 00007fff618bfbe8 [ 145.339135][ T6573] [ 146.064367][ T5634] usb 5-1: USB disconnect, device number 5 [ 146.098464][ T5634] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 146.168223][ T50] team0 (unregistering): Port device team_slave_1 removed [ 146.205619][ T50] team0 (unregistering): Port device team_slave_0 removed [ 146.399445][ T6402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.491101][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 146.512498][ T6402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.580030][ T6402] team0: Port device team_slave_0 added [ 146.591366][ T6402] team0: Port device team_slave_1 added [ 146.633001][ T6402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.633024][ T6402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.633070][ T6402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.635416][ T6402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.635437][ T6402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.635482][ T6402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.809036][ T6402] hsr_slave_0: entered promiscuous mode [ 146.810153][ T6402] hsr_slave_1: entered promiscuous mode [ 146.810952][ T6402] debugfs: 'hsr0' already exists in 'hsr' [ 146.810978][ T6402] Cannot create hsr debugfs directory [ 147.294361][ T6402] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 147.298710][ T6402] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 147.300015][ T6402] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 147.336321][ T6402] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 147.337637][ T6402] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 147.357042][ T6402] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 147.358345][ T6402] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 147.382357][ T6402] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 147.504204][ T6402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.526818][ T6402] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.537293][ T3288] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.537412][ T3288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.547345][ T3288] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.547463][ T3288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.628877][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 148.236901][ T6402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.352703][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 148.644514][ T6402] veth0_vlan: entered promiscuous mode [ 148.659230][ T6402] veth1_vlan: entered promiscuous mode [ 148.714825][ T6402] veth0_macvtap: entered promiscuous mode [ 148.720298][ T6402] veth1_macvtap: entered promiscuous mode [ 148.753783][ T6402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.771176][ T6402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.842860][ T1111] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.860338][ T1111] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.860398][ T1111] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.862043][ T1111] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.955833][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.955862][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.019674][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.019703][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.294224][ T6668] netlink: 'syz.0.239': attribute type 1 has an invalid length. [ 149.354882][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4 [ 149.480341][ T6674] bond1: (slave geneve2): making interface the new active one [ 149.490203][ T6674] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 149.501821][ T38] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 149.503639][ T5903] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 149.507357][ T38] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 149.507732][ T38] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 149.508107][ T38] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 149.672396][ T5903] usb 4-1: Using ep0 maxpacket: 16 [ 149.675649][ T5903] usb 4-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 149.676959][ T5903] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 149.676997][ T5903] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.677030][ T5903] usb 4-1: config 0 has no interface number 0 [ 149.677084][ T5903] usb 4-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 149.677127][ T5903] usb 4-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 149.677175][ T5903] usb 4-1: config 0 interface 98 has no altsetting 0 [ 149.690028][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.690067][ T5903] usb 4-1: Product: syz [ 149.690093][ T5903] usb 4-1: Manufacturer: syz [ 149.690119][ T5903] usb 4-1: SerialNumber: syz [ 149.707010][ T5903] usb 4-1: config 0 descriptor?? [ 149.707855][ T6670] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 149.708033][ T6670] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 149.931434][ T5770] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 149.950560][ T6670] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 149.950745][ T6670] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 150.084126][ T5770] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 150.086844][ T5770] usb 7-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 150.086895][ T5770] usb 7-1: config 1 interface 0 has no altsetting 0 [ 150.123953][ T5770] usb 7-1: string descriptor 0 read error: -22 [ 150.124101][ T5770] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.351102][ T6684] loop0: detected capacity change from 0 to 32768 [ 150.378654][ T6684] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.230 (6684) [ 150.424876][ T6684] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 150.424922][ T6684] BTRFS info (device loop0): using blake2b checksum algorithm [ 150.455160][ T187] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 150.531125][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.234'. [ 150.548941][ T6684] BTRFS info (device loop0): enabling ssd optimizations [ 150.548968][ T6684] BTRFS info (device loop0): turning on async discard [ 150.548989][ T6684] BTRFS info (device loop0): enabling free space tree [ 150.549042][ T6684] BTRFS info (device loop0): use zstd compression, level 3 [ 150.602470][ T187] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.606032][ T187] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 150.606079][ T187] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.606144][ T187] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.606205][ T187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.634134][ T31] audit: type=1800 audit(1791165747.723:7): pid=6684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.230" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 150.731854][ T5770] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 150.734937][ T187] usb 6-1: config 0 descriptor?? [ 150.809187][ T5770] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/0003:0926:3333.0008/input/input15 [ 150.985021][ T5631] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 151.059537][ T5770] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 151.104329][ T5770] usb 7-1: USB disconnect, device number 2 [ 151.211675][ T5903] asix 4-1:0.98 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 151.211719][ T5903] asix 4-1:0.98 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 151.212146][ T5903] asix 4-1:0.98: probe with driver asix failed with error -71 [ 151.276178][ T5903] usb 4-1: USB disconnect, device number 4 [ 151.457207][ T187] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 151.563254][ T6726] loop4: detected capacity change from 0 to 128 [ 151.647613][ T6726] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 151.650912][ T6721] fido_id[6721]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 151.651179][ T6726] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 151.823707][ T6726] syz.4.238 (pid 6726) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 151.826616][ T6726] fscrypt: key with descriptor e8dab99234bb312e is too short (got 16 bytes, need 32+ bytes) [ 151.827485][ T6726] fscrypt: key with descriptor e8dab99234bb312e is too short (got 16 bytes, need 32+ bytes) [ 151.984555][ T5632] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.107090][ T6736] FAULT_INJECTION: forcing a failure. [ 152.107090][ T6736] name failslab, interval 1, probability 0, space 0, times 0 [ 152.107145][ T6736] CPU: 0 UID: 0 PID: 6736 Comm: syz.6.245 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.107198][ T6736] Tainted: [L]=SOFTLOCKUP [ 152.107212][ T6736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 152.107234][ T6736] Call Trace: [ 152.107246][ T6736] [ 152.107261][ T6736] dump_stack_lvl+0x100/0x190 [ 152.107320][ T6736] should_fail_ex.cold+0x5/0xa [ 152.107364][ T6736] ? lock_acquire+0x1d1/0x380 [ 152.107410][ T6736] should_failslab+0xc2/0x120 [ 152.107456][ T6736] __kmalloc_cache_noprof+0x91/0x6d0 [ 152.107509][ T6736] ? skb_queue_purge_reason+0x2c2/0x420 [ 152.107554][ T6736] ? nfc_genl_rcv_nl_event+0xc1/0x300 [ 152.107626][ T6736] nfc_genl_rcv_nl_event+0xc1/0x300 [ 152.107692][ T6736] notifier_call_chain+0x99/0x3f0 [ 152.107756][ T6736] blocking_notifier_call_chain+0x69/0xa0 [ 152.107816][ T6736] netlink_release+0x1680/0x2000 [ 152.107886][ T6736] ? netlink_release+0x1e0/0x2000 [ 152.107949][ T6736] ? __pfx_netlink_release+0x10/0x10 [ 152.108014][ T6736] ? __pfx_locks_remove_file+0x10/0x10 [ 152.108079][ T6736] __sock_release+0xb3/0x260 [ 152.108118][ T6736] ? __pfx_sock_close+0x10/0x10 [ 152.108157][ T6736] sock_close+0x1c/0x30 [ 152.108194][ T6736] __fput+0x3ff/0xb50 [ 152.108253][ T6736] fput_close_sync+0x118/0x250 [ 152.108304][ T6736] ? __pfx_fput_close_sync+0x10/0x10 [ 152.108368][ T6736] __x64_sys_close+0x8b/0x120 [ 152.108420][ T6736] do_syscall_64+0x123/0x790 [ 152.108477][ T6736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.108517][ T6736] RIP: 0033:0x7f1c3679e159 [ 152.108547][ T6736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.108583][ T6736] RSP: 002b:00007f1c37728028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 152.108620][ T6736] RAX: ffffffffffffffda RBX: 00007f1c36a25fa0 RCX: 00007f1c3679e159 [ 152.108646][ T6736] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 152.108676][ T6736] RBP: 00007f1c3683506b R08: 0000000000000000 R09: 0000000000000000 [ 152.108700][ T6736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.108723][ T6736] R13: 00007f1c36a26038 R14: 00007f1c36a25fa0 R15: 00007ffe66048328 [ 152.108774][ T6736] [ 152.448019][ T6744] loop6: detected capacity change from 0 to 256 [ 152.763570][ T6749] loop3: detected capacity change from 0 to 1024 [ 152.790423][ T6751] netlink: 'syz.2.252': attribute type 8 has an invalid length. [ 152.790447][ T6751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.252'. [ 152.834217][ T6751] veth1_to_team: entered promiscuous mode [ 152.835683][ T6751] gretap0: entered promiscuous mode [ 152.854826][ T6751] veth1_to_team: left promiscuous mode [ 152.878684][ T6751] gretap0: left promiscuous mode [ 152.897068][ T6749] hfsplus: failed to load catalog file [ 152.973227][ T6755] FAULT_INJECTION: forcing a failure. [ 152.973227][ T6755] name failslab, interval 1, probability 0, space 0, times 0 [ 152.973266][ T6755] CPU: 1 UID: 0 PID: 6755 Comm: syz.0.253 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.973305][ T6755] Tainted: [L]=SOFTLOCKUP [ 152.973315][ T6755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 152.973332][ T6755] Call Trace: [ 152.973341][ T6755] [ 152.973351][ T6755] dump_stack_lvl+0x100/0x190 [ 152.973396][ T6755] should_fail_ex.cold+0x5/0xa [ 152.973428][ T6755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.973467][ T6755] should_failslab+0xc2/0x120 [ 152.973501][ T6755] __kmalloc_noprof+0xfc/0x840 [ 152.973548][ T6755] ? tnode_new+0x2f7/0x350 [ 152.973597][ T6755] tnode_new+0x2f7/0x350 [ 152.973643][ T6755] resize+0xed4/0x22f0 [ 152.973708][ T6755] fib_insert_alias+0x9b3/0xe30 [ 152.973776][ T6755] fib_table_insert+0x9fd/0x1c70 [ 152.973844][ T6755] ? __pfx_fib_table_insert+0x10/0x10 [ 152.973894][ T6755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.973931][ T6755] ? kasan_save_track+0x14/0x30 [ 152.973970][ T6755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.974016][ T6755] ? __kasan_kmalloc+0xaa/0xb0 [ 152.974052][ T6755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.974086][ T6755] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 152.974127][ T6755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.974177][ T6755] ? fib_new_table+0x109/0x5d0 [ 152.974216][ T6755] ? ip_rt_ioctl+0x81d/0x13d0 [ 152.974248][ T6755] ip_rt_ioctl+0x81d/0x13d0 [ 152.974285][ T6755] ? __pfx_ip_rt_ioctl+0x10/0x10 [ 152.974346][ T6755] inet_ioctl+0x25f/0x3f0 [ 152.974391][ T6755] ? __pfx_inet_ioctl+0x10/0x10 [ 152.974427][ T6755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.974468][ T6755] ? lockdep_hardirqs_on+0x7d/0x110 [ 152.974504][ T6755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.974539][ T6755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.974586][ T6755] ? tomoyo_path_number_perm+0x188/0x580 [ 152.974618][ T6755] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 152.974655][ T6755] sock_do_ioctl+0x118/0x280 [ 152.974693][ T6755] ? __pfx_sock_do_ioctl+0x10/0x10 [ 152.974727][ T6755] ? __entry_text_end+0x102035/0x102039 [ 152.974760][ T6755] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 152.974800][ T6755] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 152.974849][ T6755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.974888][ T6755] sock_ioctl+0x599/0x6b0 [ 152.974927][ T6755] ? __pfx_sock_ioctl+0x10/0x10 [ 152.974973][ T6755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.975007][ T6755] ? __fget_files+0x21f/0x3d0 [ 152.975048][ T6755] ? __pfx_sock_ioctl+0x10/0x10 [ 152.975105][ T6755] __x64_sys_ioctl+0x18e/0x210 [ 152.975164][ T6755] do_syscall_64+0x123/0x790 [ 152.975205][ T6755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.975235][ T6755] RIP: 0033:0x7f6b09b9e159 [ 152.975257][ T6755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.975284][ T6755] RSP: 002b:00007f6b0aa68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.975311][ T6755] RAX: ffffffffffffffda RBX: 00007f6b09e25fa0 RCX: 00007f6b09b9e159 [ 152.975329][ T6755] RDX: 0000200000000380 RSI: 000000000000890b RDI: 0000000000000004 [ 152.975347][ T6755] RBP: 00007f6b09c3506b R08: 0000000000000000 R09: 0000000000000000 [ 152.975364][ T6755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.975381][ T6755] R13: 00007f6b09e26038 R14: 00007f6b09e25fa0 R15: 00007ffe0c508a58 [ 152.975420][ T6755] [ 153.424651][ T187] usb 6-1: USB disconnect, device number 4 [ 153.637822][ T6767] process 'syz.2.257' launched './file1' with NULL argv: empty string added [ 153.922057][ T187] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 154.029469][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.6.264'. [ 154.029499][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.6.264'. [ 154.029533][ T6782] netlink: 'syz.6.264': attribute type 15 has an invalid length. [ 154.072504][ T187] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 154.074005][ T187] usb 6-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 154.074061][ T187] usb 6-1: config 1 interface 0 has no altsetting 0 [ 154.079474][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.6.264'. [ 154.079502][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.6.264'. [ 154.079536][ T6782] netlink: 'syz.6.264': attribute type 15 has an invalid length. [ 154.080246][ T187] usb 6-1: string descriptor 0 read error: -22 [ 154.080397][ T187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.091814][ T12] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 154.093173][ T1151] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 154.095070][ T1151] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 154.095129][ T1151] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 154.420830][ T6794] netlink: 'syz.2.268': attribute type 1 has an invalid length. [ 154.596002][ T6794] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.672984][ T6796] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 154.692481][ T38] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 154.700137][ T187] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 154.734024][ T187] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:0926:3333.000A/input/input16 [ 154.826345][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 154.863866][ T187] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 154.921842][ T5903] usb 6-1: USB disconnect, device number 5 [ 155.381875][ T6815] fido_id[6815]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 155.598719][ T6828] FAULT_INJECTION: forcing a failure. [ 155.598719][ T6828] name failslab, interval 1, probability 0, space 0, times 0 [ 155.598772][ T6828] CPU: 0 UID: 0 PID: 6828 Comm: syz.6.278 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.598826][ T6828] Tainted: [L]=SOFTLOCKUP [ 155.598839][ T6828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 155.598862][ T6828] Call Trace: [ 155.598876][ T6828] [ 155.598890][ T6828] dump_stack_lvl+0x100/0x190 [ 155.598950][ T6828] should_fail_ex.cold+0x5/0xa [ 155.598993][ T6828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.599045][ T6828] ? __pfx_proc_fill_super+0x10/0x10 [ 155.599103][ T6828] should_failslab+0xc2/0x120 [ 155.599145][ T6828] ? __pfx_proc_fill_super+0x10/0x10 [ 155.599201][ T6828] __kmalloc_cache_noprof+0x91/0x6d0 [ 155.599253][ T6828] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 155.599308][ T6828] ? proc_fill_super+0x7d/0x870 [ 155.599372][ T6828] ? __pfx_proc_fill_super+0x10/0x10 [ 155.599429][ T6828] proc_fill_super+0x7d/0x870 [ 155.599489][ T6828] ? __pfx_proc_fill_super+0x10/0x10 [ 155.599545][ T6828] get_tree_nodev+0xdd/0x190 [ 155.599611][ T6828] vfs_get_tree+0x92/0x320 [ 155.599666][ T6828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.599717][ T6828] path_mount+0x7d0/0x24c0 [ 155.599779][ T6828] ? __pfx_path_mount+0x10/0x10 [ 155.599831][ T6828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.599877][ T6828] ? lockdep_hardirqs_on+0x7d/0x110 [ 155.599934][ T6828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.599981][ T6828] ? kmem_cache_free+0x127/0x6c0 [ 155.600053][ T6828] ? __x64_sys_mount+0x293/0x310 [ 155.600104][ T6828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.600150][ T6828] __x64_sys_mount+0x293/0x310 [ 155.600205][ T6828] ? __pfx___x64_sys_mount+0x10/0x10 [ 155.600264][ T6828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.600319][ T6828] do_syscall_64+0x123/0x790 [ 155.600375][ T6828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.600414][ T6828] RIP: 0033:0x7f1c3679e159 [ 155.600443][ T6828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.600479][ T6828] RSP: 002b:00007f1c37728028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 155.600515][ T6828] RAX: ffffffffffffffda RBX: 00007f1c36a25fa0 RCX: 00007f1c3679e159 [ 155.600541][ T6828] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 155.600565][ T6828] RBP: 00007f1c3683506b R08: 0000000000000000 R09: 0000000000000000 [ 155.600589][ T6828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.600612][ T6828] R13: 00007f1c36a26038 R14: 00007f1c36a25fa0 R15: 00007ffe66048328 [ 155.600669][ T6828] [ 155.768423][ T6829] tipc: Started in network mode [ 155.768449][ T6829] tipc: Node identity 1001001, cluster identity 4711 [ 155.768468][ T6829] tipc: Node number set to 16781313 [ 155.789445][ T6829] tipc: Enabled bearer , priority 0 [ 156.002817][ T6837] loop5: detected capacity change from 0 to 512 [ 156.018543][ T6837] EXT4-fs (loop5): Test dummy encryption mode enabled [ 156.018570][ T6837] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 156.060511][ T6837] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.283: bad orphan inode 131083 [ 156.060553][ T6837] loop5: lost filesystem error report for type 5 error -117 [ 156.061885][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 156.061913][ C1] EXT4-fs (loop5): initial error at time 1791165753: ext4_orphan_get:1429 [ 156.061949][ C1] EXT4-fs (loop5): last error at time 1791165753: ext4_orphan_get:1429 [ 156.080075][ T6837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.149418][ T6837] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 156.168137][ T6845] loop4: detected capacity change from 0 to 16 [ 156.213916][ T6848] FAULT_INJECTION: forcing a failure. [ 156.213916][ T6848] name failslab, interval 1, probability 0, space 0, times 0 [ 156.213969][ T6848] CPU: 0 UID: 0 PID: 6848 Comm: syz.2.286 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.214022][ T6848] Tainted: [L]=SOFTLOCKUP [ 156.214035][ T6848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 156.214057][ T6848] Call Trace: [ 156.214069][ T6848] [ 156.214082][ T6848] dump_stack_lvl+0x100/0x190 [ 156.214141][ T6848] should_fail_ex.cold+0x5/0xa [ 156.214193][ T6848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.214239][ T6848] should_failslab+0xc2/0x120 [ 156.214280][ T6848] kmem_cache_alloc_noprof+0x92/0x6a0 [ 156.214344][ T6848] ? pidfs_register_pid_gfp+0x98/0x1f0 [ 156.214396][ T6848] pidfs_register_pid_gfp+0x98/0x1f0 [ 156.214440][ T6848] unix_stream_connect+0x213/0x1a40 [ 156.214475][ T6848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.214518][ T6848] ? security_socket_post_create+0x85/0x270 [ 156.214573][ T6848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.214625][ T6848] p9_fd_create_unix+0x280/0x350 [ 156.214671][ T6848] ? __pfx_p9_fd_create_unix+0x10/0x10 [ 156.214732][ T6848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.214774][ T6848] ? lockdep_init_map_type+0x5c/0x250 [ 156.214821][ T6848] p9_client_create+0x563/0xd40 [ 156.214876][ T6848] ? __pfx_p9_client_create+0x10/0x10 [ 156.214944][ T6848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.214990][ T6848] ? lockdep_init_map_type+0x5c/0x250 [ 156.215033][ T6848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.215078][ T6848] ? __raw_spin_lock_init+0x3a/0x110 [ 156.215136][ T6848] v9fs_session_init+0x3c/0xdd0 [ 156.215185][ T6848] ? v9fs_get_tree+0x9c/0xb50 [ 156.215251][ T6848] v9fs_get_tree+0xb8/0xb50 [ 156.215306][ T6848] ? rcu_is_watching+0x13/0xc0 [ 156.215359][ T6848] ? __pfx_v9fs_get_tree+0x10/0x10 [ 156.215421][ T6848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.215467][ T6848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.215512][ T6848] ? security_capable+0x80/0x260 [ 156.215573][ T6848] vfs_get_tree+0x92/0x320 [ 156.215622][ T6848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.215679][ T6848] path_mount+0x7d0/0x24c0 [ 156.215739][ T6848] ? __pfx_path_mount+0x10/0x10 [ 156.215788][ T6848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.215833][ T6848] ? lockdep_hardirqs_on+0x7d/0x110 [ 156.215888][ T6848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.215933][ T6848] ? kmem_cache_free+0x127/0x6c0 [ 156.216005][ T6848] ? __x64_sys_mount+0x293/0x310 [ 156.216055][ T6848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.216101][ T6848] __x64_sys_mount+0x293/0x310 [ 156.216155][ T6848] ? __pfx___x64_sys_mount+0x10/0x10 [ 156.216212][ T6848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.216267][ T6848] do_syscall_64+0x123/0x790 [ 156.216322][ T6848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.216360][ T6848] RIP: 0033:0x7f6d16f9e159 [ 156.216389][ T6848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.216424][ T6848] RSP: 002b:00007f6d17ed0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 156.216459][ T6848] RAX: ffffffffffffffda RBX: 00007f6d17225fa0 RCX: 00007f6d16f9e159 [ 156.216485][ T6848] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000040 [ 156.216510][ T6848] RBP: 00007f6d1703506b R08: 0000200000000280 R09: 0000000000000000 [ 156.216534][ T6848] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.216557][ T6848] R13: 00007f6d17226038 R14: 00007f6d17225fa0 R15: 00007ffeca47b468 [ 156.216608][ T6848] [ 156.217187][ T6848] 9pnet_fd: p9_fd_create_unix (6848): problem connecting socket: ./proc: -12 [ 156.278234][ T6837] EXT4-fs (loop5): shut down requested (1) [ 156.300938][ T6845] erofs (device loop4): mounted with root inode @ nid 36. [ 156.483320][ T5903] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 156.586201][ T5625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.646457][ T5903] usb 7-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 156.647975][ T5903] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.658897][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.658934][ T5903] usb 7-1: Product: syz [ 156.658959][ T5903] usb 7-1: Manufacturer: syz [ 156.658984][ T5903] usb 7-1: SerialNumber: syz [ 156.723523][ T5903] keyspan 7-1:1.0: Keyspan 1 port adapter converter detected [ 156.723744][ T5903] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 156.738585][ T5903] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 156.738682][ T5903] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 82 [ 156.738774][ T5903] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 156.738867][ T5903] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 156.750744][ T5903] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 83 [ 156.750844][ T5903] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 3 [ 156.785307][ T5903] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 156.882070][ T5634] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 157.042199][ T5634] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 157.046852][ T5634] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.046919][ T5634] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 157.046976][ T5634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.305746][ T5634] dvb_ttusb_budget: ttusb_init_controller: error [ 157.305821][ T5634] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 157.318991][ T5903] usb 7-1: USB disconnect, device number 3 [ 157.347111][ T5903] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 157.351652][ T5903] keyspan 7-1:1.0: device disconnected [ 157.537410][ T6863] input: syz1 as /devices/virtual/input/input17 [ 157.597002][ T6870] loop5: detected capacity change from 0 to 2048 [ 157.661070][ T5634] DVB: Unable to find symbol stv0299_attach() [ 157.708334][ T6870] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.710730][ T6878] tipc: Started in network mode [ 157.710771][ T6878] tipc: Node identity ac1414aa, cluster identity 4711 [ 157.712491][ T6878] tipc: New replicast peer: 172.20.20.187 [ 157.714128][ T6878] tipc: Enabled bearer , priority 10 [ 157.838785][ T6880] loop3: detected capacity change from 0 to 128 [ 157.879258][ T6880] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.879738][ T6880] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 157.949765][ T5634] DVB: Unable to find symbol tda8083_attach() [ 157.949783][ T5634] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 157.970754][ T5634] usb 1-1: USB disconnect, device number 4 [ 158.015468][ T5625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.107803][ T5622] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.237516][ T6892] netlink: 'syz.2.304': attribute type 1 has an invalid length. [ 158.272705][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 158.283744][ T6892] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.325401][ T6892] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.338791][ T6892] bond2: (slave team0): Enslaving as a backup interface with an up link [ 158.421579][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 158.423503][ T25] usb 5-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 158.432525][ T25] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 73, changing to 10 [ 158.432593][ T25] usb 5-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.432639][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 158.432685][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.457843][ T25] usb 5-1: config 0 descriptor?? [ 158.507750][ T5634] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 158.653750][ T5634] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 158.657901][ T5634] usb 1-1: config 0 has no interfaces? [ 158.657974][ T5634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.676145][ T5634] usb 1-1: config 0 descriptor?? [ 158.769717][ T6908] FAULT_INJECTION: forcing a failure. [ 158.769717][ T6908] name failslab, interval 1, probability 0, space 0, times 0 [ 158.769799][ T6908] CPU: 1 UID: 0 PID: 6908 Comm: syz.5.309 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.769854][ T6908] Tainted: [L]=SOFTLOCKUP [ 158.769868][ T6908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 158.769891][ T6908] Call Trace: [ 158.769906][ T6908] [ 158.769920][ T6908] dump_stack_lvl+0x100/0x190 [ 158.769982][ T6908] should_fail_ex.cold+0x5/0xa [ 158.770026][ T6908] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.770083][ T6908] should_failslab+0xc2/0x120 [ 158.770132][ T6908] __kmalloc_cache_noprof+0x91/0x6d0 [ 158.770196][ T6908] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.770245][ T6908] ? fanout_add+0x19a/0x1550 [ 158.770311][ T6908] fanout_add+0x19a/0x1550 [ 158.770378][ T6908] packet_setsockopt+0x61a/0x2380 [ 158.770417][ T6908] ? __lock_acquire+0x5c0/0x1f40 [ 158.770465][ T6908] ? __pfx_packet_setsockopt+0x10/0x10 [ 158.770504][ T6908] ? aa_sk_perm+0x389/0xab0 [ 158.770553][ T6908] ? __pfx_aa_sk_perm+0x10/0x10 [ 158.770592][ T6908] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.770639][ T6908] ? lock_acquire+0x1d1/0x380 [ 158.770679][ T6908] ? __fget_files+0x34/0x3d0 [ 158.770722][ T6908] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.770769][ T6908] ? find_held_lock+0x2b/0x80 [ 158.770832][ T6908] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.770879][ T6908] ? aa_sock_opt_perm+0x114/0x1e0 [ 158.770940][ T6908] ? __pfx_packet_setsockopt+0x10/0x10 [ 158.770985][ T6908] do_sock_setsockopt+0xf3/0x1d0 [ 158.771040][ T6908] __sys_setsockopt+0x195/0x220 [ 158.771116][ T6908] __x64_sys_setsockopt+0xbd/0x160 [ 158.771188][ T6908] ? do_syscall_64+0xae/0x790 [ 158.771238][ T6908] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.771285][ T6908] ? lockdep_hardirqs_on+0x7d/0x110 [ 158.771337][ T6908] do_syscall_64+0x123/0x790 [ 158.771394][ T6908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.771434][ T6908] RIP: 0033:0x7f382679e159 [ 158.771464][ T6908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.771500][ T6908] RSP: 002b:00007f3827708028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 158.771538][ T6908] RAX: ffffffffffffffda RBX: 00007f3826a25fa0 RCX: 00007f382679e159 [ 158.771564][ T6908] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000003 [ 158.771589][ T6908] RBP: 00007f382683506b R08: 0000000000000004 R09: 0000000000000000 [ 158.771613][ T6908] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.771638][ T6908] R13: 00007f3826a26038 R14: 00007f3826a25fa0 R15: 00007ffe1ee8b4a8 [ 158.771691][ T6908] [ 158.833386][ T5634] tipc: Node number set to 2886997162 [ 159.003730][ T25] lenovo 0003:17EF:60EE.000B: unknown main item tag 0x0 [ 159.003773][ T25] lenovo 0003:17EF:60EE.000B: unknown main item tag 0x0 [ 159.003821][ T25] lenovo 0003:17EF:60EE.000B: unknown main item tag 0x0 [ 159.003854][ T25] lenovo 0003:17EF:60EE.000B: unknown main item tag 0x0 [ 159.003888][ T25] lenovo 0003:17EF:60EE.000B: unknown main item tag 0x0 [ 159.003920][ T25] lenovo 0003:17EF:60EE.000B: unknown main item tag 0x0 [ 159.033597][ T25] lenovo 0003:17EF:60EE.000B: hidraw0: USB HID v10.01 Device [HID 17ef:60ee] on usb-dummy_hcd.4-1/input0 [ 159.067113][ T6886] FAULT_INJECTION: forcing a failure. [ 159.067113][ T6886] name failslab, interval 1, probability 0, space 0, times 0 [ 159.067169][ T6886] CPU: 1 UID: 0 PID: 6886 Comm: syz.0.301 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.067222][ T6886] Tainted: [L]=SOFTLOCKUP [ 159.067236][ T6886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 159.067258][ T6886] Call Trace: [ 159.067270][ T6886] [ 159.067283][ T6886] dump_stack_lvl+0x100/0x190 [ 159.067341][ T6886] should_fail_ex.cold+0x5/0xa [ 159.067391][ T6886] should_failslab+0xc2/0x120 [ 159.067435][ T6886] __kmalloc_noprof+0xfc/0x840 [ 159.067496][ T6886] ? raw_event_queue_add+0x82/0x220 [ 159.067556][ T6886] raw_event_queue_add+0x82/0x220 [ 159.067612][ T6886] gadget_suspend+0x58/0xd0 [ 159.067666][ T6886] set_link_state+0x3e7/0xc70 [ 159.067716][ T6886] ? __pfx_gadget_suspend+0x10/0x10 [ 159.067767][ T6886] ? __pfx_dummy_pullup+0x10/0x10 [ 159.067823][ T6886] dummy_pullup+0xf3/0x170 [ 159.067873][ T6886] ? __pfx_dummy_pullup+0x10/0x10 [ 159.067925][ T6886] usb_gadget_disconnect_locked+0x142/0x4e0 [ 159.067981][ T6886] gadget_unbind_driver+0xd8/0x4f0 [ 159.068042][ T6886] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.068089][ T6886] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 159.068152][ T6886] device_remove+0xcb/0x180 [ 159.068215][ T6886] device_release_driver_internal+0x44e/0x620 [ 159.068262][ T6886] driver_detach+0xd8/0x1b0 [ 159.068302][ T6886] bus_remove_driver+0x13b/0x2e0 [ 159.068360][ T6886] driver_unregister+0x76/0xb0 [ 159.068398][ T6886] usb_gadget_unregister_driver+0x49/0x70 [ 159.068455][ T6886] raw_release+0x19b/0x260 [ 159.068505][ T6886] ? __pfx_raw_release+0x10/0x10 [ 159.068555][ T6886] __fput+0x3ff/0xb50 [ 159.068611][ T6886] fput_close_sync+0x118/0x250 [ 159.068659][ T6886] ? __pfx_fput_close_sync+0x10/0x10 [ 159.068720][ T6886] __x64_sys_close+0x8b/0x120 [ 159.068771][ T6886] do_syscall_64+0x123/0x790 [ 159.068825][ T6886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.068863][ T6886] RIP: 0033:0x7f6b09b9e159 [ 159.068892][ T6886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.068929][ T6886] RSP: 002b:00007f6b0aa68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 159.068963][ T6886] RAX: ffffffffffffffda RBX: 00007f6b09e25fa0 RCX: 00007f6b09b9e159 [ 159.068988][ T6886] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 159.069011][ T6886] RBP: 00007f6b09c3506b R08: 0000000000000000 R09: 0000000000000000 [ 159.069034][ T6886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.069057][ T6886] R13: 00007f6b09e26038 R14: 00007f6b09e25fa0 R15: 00007ffe0c508a58 [ 159.069107][ T6886] [ 159.069149][ T6886] raw-gadget.0 gadget.0: failed to queue suspend event [ 159.085826][ T5634] usb 1-1: USB disconnect, device number 5 [ 159.583511][ T6916] loop3: detected capacity change from 0 to 16 [ 159.585452][ T6916] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 159.620800][ T25] lenovo 0003:17EF:60EE.000B: Sensitivity setting failed: -71 [ 159.673732][ T25] usb 5-1: USB disconnect, device number 6 [ 160.058166][ T187] kernel read not supported for file /swaps (pid: 187 comm: kworker/0:2) [ 160.395134][ T6944] ip_tables: iptables: counters copy to user failed while replacing table [ 160.432278][ T6943] ip_tables: iptables: counters copy to user failed while replacing table [ 160.437699][ T6943] tipc: Started in network mode [ 160.437740][ T6943] tipc: Node identity 7f000001, cluster identity 4711 [ 160.438432][ T6943] tipc: Enabled bearer , priority 10 [ 160.811178][ T6959] syz_tun: entered allmulticast mode [ 160.838260][ T6957] syz_tun: left allmulticast mode [ 160.882270][ T6962] FAULT_INJECTION: forcing a failure. [ 160.882270][ T6962] name fail_futex, interval 1, probability 0, space 0, times 1 [ 160.882322][ T6962] CPU: 1 UID: 0 PID: 6962 Comm: syz.3.329 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.882378][ T6962] Tainted: [L]=SOFTLOCKUP [ 160.882391][ T6962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 160.882414][ T6962] Call Trace: [ 160.882426][ T6962] [ 160.882440][ T6962] dump_stack_lvl+0x100/0x190 [ 160.882502][ T6962] should_fail_ex.cold+0x5/0xa [ 160.882554][ T6962] get_futex_key+0x1d0/0x14f0 [ 160.882612][ T6962] ? __pfx_get_futex_key+0x10/0x10 [ 160.882663][ T6962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.882715][ T6962] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 160.882770][ T6962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.882818][ T6962] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 160.882879][ T6962] futex_wait_setup+0x91/0x540 [ 160.882959][ T6962] __futex_wait+0x19f/0x300 [ 160.883029][ T6962] ? __pfx___futex_wait+0x10/0x10 [ 160.883092][ T6962] ? __pfx_try_to_wake_up+0x10/0x10 [ 160.883134][ T6962] ? futex_hash+0x311/0x400 [ 160.883194][ T6962] ? __pfx_futex_wake_mark+0x10/0x10 [ 160.883265][ T6962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.883314][ T6962] ? find_held_lock+0x2b/0x80 [ 160.883370][ T6962] ? futex_wake+0x4ea/0x5e0 [ 160.883434][ T6962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.883484][ T6962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.883539][ T6962] futex_wait+0xe6/0x370 [ 160.883605][ T6962] ? __pfx_futex_wait+0x10/0x10 [ 160.883697][ T6962] do_futex+0x265/0x440 [ 160.883755][ T6962] ? __pfx_do_futex+0x10/0x10 [ 160.883810][ T6962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.883857][ T6962] ? rcu_is_watching+0x13/0xc0 [ 160.883911][ T6962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.883958][ T6962] ? kfree+0x1e5/0x6d0 [ 160.884008][ T6962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.884064][ T6962] __x64_sys_futex+0x34f/0x4d0 [ 160.884127][ T6962] ? __pfx___x64_sys_futex+0x10/0x10 [ 160.884200][ T6962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.884257][ T6962] do_syscall_64+0x123/0x790 [ 160.884315][ T6962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.884356][ T6962] RIP: 0033:0x7fc394b9e159 [ 160.884385][ T6962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.884424][ T6962] RSP: 002b:00007fc3959a70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 160.884461][ T6962] RAX: ffffffffffffffda RBX: 00007fc394e25fa8 RCX: 00007fc394b9e159 [ 160.884487][ T6962] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc394e25fa8 [ 160.884512][ T6962] RBP: 00007fc394e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 160.884537][ T6962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.884561][ T6962] R13: 00007fc394e26038 R14: 00007fff618bfb00 R15: 00007fff618bfbe8 [ 160.884612][ T6962] [ 161.146460][ T6935] overlayfs: statfs failed on './file0' [ 161.488103][ T187] tipc: Node number set to 2130706433 [ 162.175112][ T6985] FAULT_INJECTION: forcing a failure. [ 162.175112][ T6985] name failslab, interval 1, probability 0, space 0, times 0 [ 162.175173][ T6985] CPU: 1 UID: 0 PID: 6985 Comm: syz.4.335 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.175226][ T6985] Tainted: [L]=SOFTLOCKUP [ 162.175240][ T6985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 162.175263][ T6985] Call Trace: [ 162.175274][ T6985] [ 162.175289][ T6985] dump_stack_lvl+0x100/0x190 [ 162.175347][ T6985] should_fail_ex.cold+0x5/0xa [ 162.175390][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.175443][ T6985] should_failslab+0xc2/0x120 [ 162.175488][ T6985] kmem_cache_alloc_noprof+0x92/0x6a0 [ 162.175550][ T6985] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 162.175614][ T6985] ? prepare_creds+0x2c/0x950 [ 162.175688][ T6985] prepare_creds+0x2c/0x950 [ 162.175753][ T6985] lookup_user_key+0xfb2/0x1300 [ 162.175794][ T6985] ? __pfx_lookup_user_key+0x10/0x10 [ 162.175833][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.175879][ T6985] ? do_futex+0x190/0x440 [ 162.175942][ T6985] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 162.176015][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.176064][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.176110][ T6985] ? __x64_sys_futex+0x358/0x4d0 [ 162.176179][ T6985] keyctl_session_to_parent+0x28/0xae0 [ 162.176241][ T6985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.176293][ T6985] __do_sys_keyctl+0x2b1/0x5a0 [ 162.176355][ T6985] do_syscall_64+0x123/0x790 [ 162.176411][ T6985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.176449][ T6985] RIP: 0033:0x7f2acbd9e159 [ 162.176478][ T6985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.176513][ T6985] RSP: 002b:00007f2accd51028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 162.176549][ T6985] RAX: ffffffffffffffda RBX: 00007f2acc025fa0 RCX: 00007f2acbd9e159 [ 162.176574][ T6985] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 162.176597][ T6985] RBP: 00007f2acbe3506b R08: 0000000000000000 R09: 0000000000000000 [ 162.176620][ T6985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.176643][ T6985] R13: 00007f2acc026038 R14: 00007f2acc025fa0 R15: 00007ffd68600af8 [ 162.176694][ T6985] [ 162.883268][ T6999] FAULT_INJECTION: forcing a failure. [ 162.883268][ T6999] name failslab, interval 1, probability 0, space 0, times 0 [ 162.883323][ T6999] CPU: 1 UID: 0 PID: 6999 Comm: syz.4.339 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.883378][ T6999] Tainted: [L]=SOFTLOCKUP [ 162.883394][ T6999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 162.883418][ T6999] Call Trace: [ 162.883431][ T6999] [ 162.883445][ T6999] dump_stack_lvl+0x100/0x190 [ 162.883505][ T6999] should_fail_ex.cold+0x5/0xa [ 162.883549][ T6999] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.883604][ T6999] should_failslab+0xc2/0x120 [ 162.883650][ T6999] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 162.883719][ T6999] ? alloc_inode+0x183/0x250 [ 162.883787][ T6999] alloc_inode+0x183/0x250 [ 162.883847][ T6999] new_inode+0x22/0x1c0 [ 162.883914][ T6999] binderfs_binder_device_create.isra.0+0x193/0x990 [ 162.883980][ T6999] binderfs_fill_super+0xcc7/0x13d0 [ 162.884038][ T6999] ? __pfx_binderfs_fill_super+0x10/0x10 [ 162.884084][ T6999] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.884132][ T6999] ? __init_swait_queue_head+0xca/0x150 [ 162.884224][ T6999] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.884272][ T6999] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 162.884329][ T6999] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.884377][ T6999] ? rcu_is_watching+0x13/0xc0 [ 162.884430][ T6999] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.884477][ T6999] ? apparmor_capable+0x1d7/0x4d0 [ 162.884547][ T6999] ? __pfx_binderfs_fill_super+0x10/0x10 [ 162.884596][ T6999] get_tree_nodev+0xdd/0x190 [ 162.884663][ T6999] vfs_get_tree+0x92/0x320 [ 162.884712][ T6999] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.884762][ T6999] path_mount+0x7d0/0x24c0 [ 162.884825][ T6999] ? __pfx_path_mount+0x10/0x10 [ 162.884875][ T6999] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.884922][ T6999] ? lockdep_hardirqs_on+0x7d/0x110 [ 162.884978][ T6999] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.885025][ T6999] ? kmem_cache_free+0x127/0x6c0 [ 162.885099][ T6999] ? __x64_sys_mount+0x293/0x310 [ 162.885150][ T6999] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.885205][ T6999] __x64_sys_mount+0x293/0x310 [ 162.885262][ T6999] ? __pfx___x64_sys_mount+0x10/0x10 [ 162.885323][ T6999] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.885379][ T6999] do_syscall_64+0x123/0x790 [ 162.885435][ T6999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.885475][ T6999] RIP: 0033:0x7f2acbd9e159 [ 162.885505][ T6999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.885543][ T6999] RSP: 002b:00007f2accd51028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 162.885580][ T6999] RAX: ffffffffffffffda RBX: 00007f2acc025fa0 RCX: 00007f2acbd9e159 [ 162.885607][ T6999] RDX: 0000200000000780 RSI: 0000200000000180 RDI: 0000000000000000 [ 162.885631][ T6999] RBP: 00007f2acbe3506b R08: 0000000000000000 R09: 0000000000000000 [ 162.885656][ T6999] R10: 0000000002000090 R11: 0000000000000246 R12: 0000000000000000 [ 162.885681][ T6999] R13: 00007f2acc026038 R14: 00007f2acc025fa0 R15: 00007ffd68600af8 [ 162.885732][ T6999] [ 163.722615][ T187] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 163.808884][ T7025] FAULT_INJECTION: forcing a failure. [ 163.808884][ T7025] name failslab, interval 1, probability 0, space 0, times 0 [ 163.808936][ T7025] CPU: 1 UID: 0 PID: 7025 Comm: syz.5.348 Tainted: G L syzkaller #0 PREEMPT(full) [ 163.808991][ T7025] Tainted: [L]=SOFTLOCKUP [ 163.809005][ T7025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 163.809028][ T7025] Call Trace: [ 163.809039][ T7025] [ 163.809053][ T7025] dump_stack_lvl+0x100/0x190 [ 163.809113][ T7025] should_fail_ex.cold+0x5/0xa [ 163.809156][ T7025] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.809218][ T7025] should_failslab+0xc2/0x120 [ 163.809263][ T7025] kmem_cache_alloc_noprof+0x92/0x6a0 [ 163.809326][ T7025] ? lock_acquire+0x1d1/0x380 [ 163.809366][ T7025] ? copy_pid_ns+0x32b/0x10a0 [ 163.809429][ T7025] copy_pid_ns+0x32b/0x10a0 [ 163.809480][ T7025] ? copy_utsname+0x388/0x690 [ 163.809518][ T7025] ? __pfx_copy_pid_ns+0x10/0x10 [ 163.809565][ T7025] ? find_held_lock+0x2b/0x80 [ 163.809620][ T7025] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.809666][ T7025] ? find_held_lock+0x2b/0x80 [ 163.809721][ T7025] ? copy_utsname+0x388/0x690 [ 163.809756][ T7025] ? copy_utsname+0x388/0x690 [ 163.809791][ T7025] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.809844][ T7025] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.809890][ T7025] ? put_uts_ns+0xc0/0x270 [ 163.809926][ T7025] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.809980][ T7025] create_new_namespaces+0x2aa/0xac0 [ 163.810034][ T7025] unshare_nsproxy_namespaces+0xf2/0x220 [ 163.810082][ T7025] ksys_unshare+0x4a2/0xa70 [ 163.810127][ T7025] ? __pfx_ksys_unshare+0x10/0x10 [ 163.810176][ T7025] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.810242][ T7025] __x64_sys_unshare+0x31/0x40 [ 163.810289][ T7025] do_syscall_64+0x123/0x790 [ 163.810345][ T7025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.810385][ T7025] RIP: 0033:0x7f382679e159 [ 163.810413][ T7025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.810451][ T7025] RSP: 002b:00007f3827708028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 163.810488][ T7025] RAX: ffffffffffffffda RBX: 00007f3826a25fa0 RCX: 00007f382679e159 [ 163.810513][ T7025] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000066000200 [ 163.810536][ T7025] RBP: 00007f382683506b R08: 0000000000000000 R09: 0000000000000000 [ 163.810560][ T7025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.810583][ T7025] R13: 00007f3826a26038 R14: 00007f3826a25fa0 R15: 00007ffe1ee8b4a8 [ 163.810634][ T7025] [ 163.891429][ T187] usb 4-1: Using ep0 maxpacket: 32 [ 163.892454][ T187] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 163.899143][ T187] usb 4-1: config index 0 descriptor too short (expected 3659, got 75) [ 163.899180][ T187] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.910692][ T187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.910730][ T187] usb 4-1: Product: syz [ 163.910755][ T187] usb 4-1: Manufacturer: syz [ 163.910781][ T187] usb 4-1: SerialNumber: syz [ 163.937061][ T187] usb 4-1: config 0 descriptor?? [ 164.006657][ T187] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 164.075597][ T5777] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 164.246340][ T5777] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 164.253234][ T5777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.285796][ T5777] usb 5-1: config 0 descriptor?? [ 164.473643][ T3212] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 164.534177][ T5777] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 164.632572][ T3212] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.637603][ T3212] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 164.637695][ T3212] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 164.637744][ T3212] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 164.637791][ T3212] usb 1-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 164.640920][ T3212] usb 1-1: config 1 interface 0 has no altsetting 0 [ 164.647543][ T3212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 164.647608][ T3212] usb 1-1: SerialNumber: syz [ 164.678276][ T7031] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 164.678467][ T7031] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 164.678750][ T7031] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 164.843892][ T38] IPVS: starting estimator thread 0... [ 164.916832][ T7031] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 164.916990][ T7031] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 164.917135][ T7031] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 164.951627][ T7049] IPVS: using max 22 ests per chain, 52800 per kthread [ 164.960687][ T5777] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 164.960722][ T5777] [drm] Initialized udl on minor 1 [ 165.007018][ T5777] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 165.017541][ T5777] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 165.030790][ T5777] usb 5-1: USB disconnect, device number 7 [ 165.378726][ T3212] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 165.409984][ T187] gspca_sunplus: reg_w_1 err -71 [ 165.410070][ T187] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 165.421756][ T187] usb 4-1: USB disconnect, device number 5 [ 165.611834][ T5777] usb 1-1: USB disconnect, device number 6 [ 165.634826][ T5777] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 165.849448][ T7073] loop6: detected capacity change from 0 to 1024 [ 165.871033][ T7074] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 165.871033][ T7074] The task syz.5.358 (7074) triggered the difference, watch for misbehavior. [ 165.910689][ T7073] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.936575][ T7073] /dev/loop6: Can't open blockdev [ 166.532764][ T6402] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.581397][ T3212] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 166.736935][ T3212] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 166.738294][ T3212] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 166.738333][ T3212] usb 1-1: config 0 has no interface number 0 [ 166.738387][ T3212] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 166.738435][ T3212] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 166.738497][ T3212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.763980][ T3212] usb 1-1: config 0 descriptor?? [ 166.765439][ T7093] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 166.822259][ T3212] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 167.023444][ T3212] usb 1-1: USB disconnect, device number 7 [ 167.301304][ T7129] tipc: Resetting bearer [ 167.305408][ T7129] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 167.772277][ T7134] loop5: detected capacity change from 0 to 40427 [ 167.793883][ T7134] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 167.793919][ T7134] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 167.888459][ T7134] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 167.910900][ T7134] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 167.911021][ T7134] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 167.931382][ T7143] FAULT_INJECTION: forcing a failure. [ 167.931382][ T7143] name failslab, interval 1, probability 0, space 0, times 0 [ 167.931433][ T7143] CPU: 1 UID: 0 PID: 7143 Comm: syz.6.377 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.931488][ T7143] Tainted: [L]=SOFTLOCKUP [ 167.931502][ T7143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 167.931525][ T7143] Call Trace: [ 167.931537][ T7143] [ 167.931551][ T7143] dump_stack_lvl+0x100/0x190 [ 167.931613][ T7143] should_fail_ex.cold+0x5/0xa [ 167.931658][ T7143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.931711][ T7143] should_failslab+0xc2/0x120 [ 167.931757][ T7143] __kmalloc_flags_noprof+0x122/0x8e0 [ 167.931812][ T7143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.931858][ T7143] ? __lock_acquire+0x5c0/0x1f40 [ 167.931902][ T7143] ? alloc_slab_obj_exts+0x6a/0x170 [ 167.931968][ T7143] alloc_slab_obj_exts+0x6a/0x170 [ 167.932028][ T7143] __memcg_slab_post_alloc_hook+0x3fc/0x10c0 [ 167.932102][ T7143] ? kasan_unpoison+0x27/0x60 [ 167.932177][ T7143] __kmalloc_cache_noprof+0x52a/0x6d0 [ 167.932234][ T7143] ? alloc_fs_context+0x57/0xf40 [ 167.932300][ T7143] alloc_fs_context+0x57/0xf40 [ 167.932355][ T7143] ? __get_fs_type+0xe3/0x200 [ 167.932414][ T7143] __x64_sys_fsopen+0xed/0x220 [ 167.932480][ T7143] do_syscall_64+0x123/0x790 [ 167.932537][ T7143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.932577][ T7143] RIP: 0033:0x7f1c3679e159 [ 167.932606][ T7143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.932644][ T7143] RSP: 002b:00007f1c37728028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 167.932681][ T7143] RAX: ffffffffffffffda RBX: 00007f1c36a25fa0 RCX: 00007f1c3679e159 [ 167.932707][ T7143] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 167.932732][ T7143] RBP: 00007f1c3683506b R08: 0000000000000000 R09: 0000000000000000 [ 167.932759][ T7143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.932784][ T7143] R13: 00007f1c36a26038 R14: 00007f1c36a25fa0 R15: 00007ffe66048328 [ 167.932835][ T7143] [ 168.380285][ T7134] syz.5.373: attempt to access beyond end of device [ 168.380285][ T7134] loop5: rw=2049, sector=45096, nr_sectors = 8152 limit=40427 [ 168.387599][ T7134] syz.5.373: attempt to access beyond end of device [ 168.387599][ T7134] loop5: rw=2049, sector=45056, nr_sectors = 8 limit=40427 [ 168.444412][ T31] audit: type=1326 audit(1791165765.443:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7144 comm="syz.0.378" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b09b9e159 code=0x0 [ 168.490904][ T7155] loop3: detected capacity change from 0 to 128 [ 168.498424][ T7134] syz.5.373: attempt to access beyond end of device [ 168.498424][ T7134] loop5: rw=2049, sector=57344, nr_sectors = 16384 limit=40427 [ 168.512576][ T7134] syz.5.373: attempt to access beyond end of device [ 168.512576][ T7134] loop5: rw=2049, sector=73728, nr_sectors = 8 limit=40427 [ 168.512837][ T7134] syz.5.373: attempt to access beyond end of device [ 168.512837][ T7134] loop5: rw=2049, sector=73736, nr_sectors = 8 limit=40427 [ 168.513094][ T7134] syz.5.373: attempt to access beyond end of device [ 168.513094][ T7134] loop5: rw=2049, sector=73744, nr_sectors = 8 limit=40427 [ 168.513361][ T7134] syz.5.373: attempt to access beyond end of device [ 168.513361][ T7134] loop5: rw=2049, sector=73752, nr_sectors = 8 limit=40427 [ 168.513670][ T7134] syz.5.373: attempt to access beyond end of device [ 168.513670][ T7134] loop5: rw=2049, sector=73760, nr_sectors = 8 limit=40427 [ 168.513924][ T7134] syz.5.373: attempt to access beyond end of device [ 168.513924][ T7134] loop5: rw=2049, sector=73768, nr_sectors = 8 limit=40427 [ 168.514194][ T7134] syz.5.373: attempt to access beyond end of device [ 168.514194][ T7134] loop5: rw=2049, sector=73776, nr_sectors = 8 limit=40427 [ 168.923327][ T7155] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 168.953977][ T7155] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.296686][ T5625] CPU: 1 UID: 0 PID: 5625 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 169.296747][ T5625] Tainted: [L]=SOFTLOCKUP [ 169.296761][ T5625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 169.296784][ T5625] Call Trace: [ 169.296797][ T5625] [ 169.296810][ T5625] dump_stack_lvl+0x100/0x190 [ 169.296874][ T5625] f2fs_stop_checkpoint+0x5e6/0xb30 [ 169.296926][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.296974][ T5625] ? errseq_set+0xe3/0x150 [ 169.297029][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.297083][ T5625] f2fs_write_end_bio+0xef9/0x12d0 [ 169.297145][ T5625] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 169.297206][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.297259][ T5625] ? find_held_lock+0x2b/0x80 [ 169.297314][ T5625] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 169.297356][ T5625] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 169.297394][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.297449][ T5625] f2fs_write_end_io+0xc8/0x240 [ 169.297501][ T5625] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 169.297556][ T5625] bio_endio+0x7ba/0x9c0 [ 169.297600][ T5625] submit_bio_noacct+0x22a/0x2130 [ 169.297668][ T5625] f2fs_submit_write_bio+0x133/0x330 [ 169.297721][ T5625] __submit_merged_bio+0x330/0x7b0 [ 169.297777][ T5625] ? rcu_is_watching+0x13/0xc0 [ 169.297837][ T5625] __submit_merged_write_cond+0x3fe/0x510 [ 169.297906][ T5625] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 169.297978][ T5625] ? __pfx___might_resched+0x10/0x10 [ 169.298037][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.298082][ T5625] ? folio_clear_dirty_for_io+0x178/0x960 [ 169.298148][ T5625] f2fs_sync_node_pages+0x13c6/0x1690 [ 169.298226][ T5625] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 169.298276][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.298321][ T5625] ? __lock_acquire+0xe8b/0x1f40 [ 169.298403][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.298450][ T5625] ? down_write+0x146/0x1f0 [ 169.298506][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.298554][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.298600][ T5625] ? up_write+0x2dc/0x5b0 [ 169.298650][ T5625] block_operations+0x938/0xfc0 [ 169.298699][ T5625] ? __pfx_block_operations+0x10/0x10 [ 169.298791][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.298840][ T5625] ? ktime_get+0x22c/0x320 [ 169.298882][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.298927][ T5625] ? rcu_is_watching+0x13/0xc0 [ 169.298984][ T5625] f2fs_write_checkpoint+0x58b/0x53e0 [ 169.299026][ T5625] ? _raw_spin_unlock_irq+0x23/0x50 [ 169.299069][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.299115][ T5625] ? _raw_spin_unlock_irq+0x2e/0x50 [ 169.299155][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.299208][ T5625] ? __wait_for_common+0x1f3/0x4c0 [ 169.299256][ T5625] ? __pfx_schedule_timeout+0x10/0x10 [ 169.299294][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.299339][ T5625] ? do_raw_spin_lock+0x128/0x260 [ 169.299389][ T5625] ? __pfx___wait_for_common+0x10/0x10 [ 169.299439][ T5625] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 169.299479][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.299525][ T5625] ? mark_held_locks+0x40/0x70 [ 169.299571][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.299616][ T5625] ? rcu_is_watching+0x13/0xc0 [ 169.299666][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.299711][ T5625] ? kthread_stop+0x280/0x630 [ 169.299765][ T5625] kill_f2fs_super+0x3f1/0x4a0 [ 169.299802][ T5625] ? __pfx_kill_f2fs_super+0x10/0x10 [ 169.299860][ T5625] ? lockdep_hardirqs_on+0x7d/0x110 [ 169.299908][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.299954][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.300017][ T5625] deactivate_locked_super+0xbd/0x130 [ 169.300079][ T5625] deactivate_super+0xea/0x110 [ 169.300140][ T5625] cleanup_mnt+0x21f/0x450 [ 169.300193][ T5625] task_work_run+0x150/0x240 [ 169.300250][ T5625] ? __pfx_task_work_run+0x10/0x10 [ 169.300311][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.300367][ T5625] exit_to_user_mode_loop+0x1d8/0x700 [ 169.300412][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.300458][ T5625] ? rcu_is_watching+0x13/0xc0 [ 169.300514][ T5625] do_syscall_64+0x661/0x790 [ 169.300566][ T5625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.300606][ T5625] RIP: 0033:0x7f382679f397 [ 169.300635][ T5625] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 169.300671][ T5625] RSP: 002b:00007ffe1ee8a718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 169.300708][ T5625] RAX: 0000000000000000 RBX: 00007f38268344bb RCX: 00007f382679f397 [ 169.300733][ T5625] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe1ee8a7d0 [ 169.300757][ T5625] RBP: 00007ffe1ee8a7d0 R08: 00007ffe1ee8b7d0 R09: 00000000ffffffff [ 169.300782][ T5625] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1ee8b860 [ 169.300805][ T5625] R13: 00007f38268344bb R14: 00000000000293fd R15: 00007ffe1ee8b8a0 [ 169.300857][ T5625] [ 169.324673][ T5625] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 170.157495][ T7162] loop4: detected capacity change from 0 to 32768 [ 170.266344][ T7172] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x21e pfn:0x48bbe [ 170.266382][ T7172] memcg:ffff88802ae7e200 [ 170.266396][ T7172] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 170.266439][ T7172] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 170.266473][ T7172] raw: 000000000000021e 0000000000000000 00000001ffffffff ffff88802ae7e200 [ 170.266494][ T7172] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 170.266514][ T7172] page_owner tracks the page as allocated [ 170.266526][ T7172] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 7172, tgid 7170 (syz.3.384), ts 170266293821 [ 170.266582][ T7172] post_alloc_hook+0xfd/0x120 [ 170.266637][ T7172] get_page_from_freelist+0x110d/0x35d0 [ 170.266700][ T7172] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 170.266768][ T7172] alloc_pages_mpol+0x201/0x550 [ 170.266807][ T7172] folio_alloc_noprof+0x22/0x250 [ 170.266854][ T7172] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 170.266911][ T7172] filemap_alloc_folio_noprof+0x5e/0x80 [ 170.266964][ T7172] page_cache_ra_order+0x539/0xed0 [ 170.267000][ T7172] filemap_fault+0x1943/0x3130 [ 170.267039][ T7172] __do_fault+0x10b/0x440 [ 170.267092][ T7172] do_fault+0xb3f/0x1830 [ 170.267125][ T7172] __handle_mm_fault+0x150b/0x2f60 [ 170.267171][ T7172] handle_mm_fault+0x363/0xa20 [ 170.267214][ T7172] do_user_addr_fault+0x745/0x12f0 [ 170.267257][ T7172] exc_page_fault+0x6f/0xd0 [ 170.267298][ T7172] asm_exc_page_fault+0x26/0x30 [ 170.267330][ T7172] page last free pid 7171 tgid 7170 ts 170224297627 stack trace: [ 170.267353][ T7172] free_unref_folios+0xa4a/0x1790 [ 170.267403][ T7172] folios_put_refs+0x585/0xaa0 [ 170.267442][ T7172] truncate_inode_pages_range+0x30c/0x1050 [ 170.267496][ T7172] set_blocksize+0x2d1/0x460 [ 170.267540][ T7172] blkdev_bszset+0x19b/0x240 [ 170.267592][ T7172] blkdev_ioctl+0x513/0x6f0 [ 170.267644][ T7172] __x64_sys_ioctl+0x18e/0x210 [ 170.267704][ T7172] do_syscall_64+0x123/0x790 [ 170.267749][ T7172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.270838][ T7172] ------------[ cut here ]------------ [ 170.270853][ T7172] kernel BUG at mm/filemap.c:858! [ 170.270884][ T7172] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 170.492033][ T7172] CPU: 0 UID: 0 PID: 7172 Comm: syz.3.384 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.502810][ T7172] Tainted: [L]=SOFTLOCKUP [ 170.507125][ T7172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 170.517178][ T7172] RIP: 0010:__filemap_add_folio+0x1054/0x1330 [ 170.523268][ T7172] Code: 18 c0 ff 48 c7 c6 e0 cb fe 8b 4c 89 ef e8 94 fc 12 00 90 0f 0b e8 9c 18 c0 ff 48 c7 c6 40 cc fe 8b 4c 89 ef e8 7d fc 12 00 90 <0f> 0b e8 85 18 c0 ff 48 c7 c6 c0 cc fe 8b 4c 89 ef e8 66 fc 12 00 [ 170.542884][ T7172] RSP: 0018:ffffc900030af440 EFLAGS: 00010287 [ 170.548955][ T7172] RAX: 0000000000010ba5 RBX: 0000000000112cc0 RCX: ffffc9000fa22000 [ 170.556924][ T7172] RDX: 0000000000080000 RSI: ffffffff825f0b48 RDI: ffff88802779c344 [ 170.564895][ T7172] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 170.572866][ T7172] R10: 0000000000000001 R11: 1ffffffff1dbefc1 R12: 0000000000000003 [ 170.580837][ T7172] R13: ffffea000122ef80 R14: 00000000000b6e40 R15: 0000000000000000 [ 170.588808][ T7172] FS: 00007fc3959866c0(0000) GS:ffff888123b4b000(0000) knlGS:0000000000000000 [ 170.597743][ T7172] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 170.604326][ T7172] CR2: 00007f6d16faedc0 CR3: 000000005848c000 CR4: 0000000000350ef0 [ 170.612301][ T7172] Call Trace: [ 170.615572][ T7172] [ 170.618500][ T7172] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.624153][ T7172] ? lock_acquire+0x1d1/0x380 [ 170.628842][ T7172] ? __pfx___filemap_add_folio+0x10/0x10 [ 170.634491][ T7172] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.640152][ T7172] filemap_add_folio+0x1d3/0x640 [ 170.645104][ T7172] ? __pfx_filemap_add_folio+0x10/0x10 [ 170.650578][ T7172] ? __pfx___css_rstat_updated+0x10/0x10 [ 170.656241][ T7172] page_cache_ra_order+0x602/0xed0 [ 170.661372][ T7172] filemap_fault+0x1943/0x3130 [ 170.666158][ T7172] ? __pfx_filemap_fault+0x10/0x10 [ 170.671285][ T7172] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 170.677021][ T7172] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.682668][ T7172] ? find_held_lock+0x2b/0x80 [ 170.687375][ T7172] ? __pfx_filemap_map_pages+0x10/0x10 [ 170.692845][ T7172] __do_fault+0x10b/0x440 [ 170.697204][ T7172] do_fault+0xb3f/0x1830 [ 170.701456][ T7172] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 170.707720][ T7172] ? __pfx_do_fault+0x10/0x10 [ 170.712406][ T7172] ? pgd_none+0x9f/0xe0 [ 170.716580][ T7172] ? __pfx_pgd_none+0x10/0x10 [ 170.721273][ T7172] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.726924][ T7172] ? find_held_lock+0x2b/0x80 [ 170.731629][ T7172] __handle_mm_fault+0x150b/0x2f60 [ 170.736771][ T7172] ? __pfx___handle_mm_fault+0x10/0x10 [ 170.742246][ T7172] ? __pfx_mt_find+0x10/0x10 [ 170.746872][ T7172] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.752516][ T7172] ? find_vma+0xbf/0x140 [ 170.756764][ T7172] ? __pfx_find_vma+0x10/0x10 [ 170.761447][ T7172] handle_mm_fault+0x363/0xa20 [ 170.766232][ T7172] do_user_addr_fault+0x745/0x12f0 [ 170.771364][ T7172] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.777015][ T7172] exc_page_fault+0x6f/0xd0 [ 170.781532][ T7172] asm_exc_page_fault+0x26/0x30 [ 170.786391][ T7172] RIP: 0010:_copy_from_user+0x93/0xd0 [ 170.791784][ T7172] Code: 5a e1 fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 f9 e4 53 fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 85 54 [ 170.811400][ T7172] RSP: 0018:ffffc900030afc68 EFLAGS: 00050246 [ 170.817473][ T7172] RAX: 0000000000000001 RBX: 0000200000000140 RCX: 0000000000000028 [ 170.825463][ T7172] RDX: 0000000000000001 RSI: 0000200000000140 RDI: ffffc900030afd20 [ 170.833435][ T7172] RBP: 0000000000000028 R08: 0000000000000001 R09: fffff52000615fa8 [ 170.841406][ T7172] R10: ffffc900030afd47 R11: 0000000000000000 R12: 0000000000000000 [ 170.849374][ T7172] R13: ffffc900030afd20 R14: ffff88802779be80 R15: 0000200000000140 [ 170.857357][ T7172] ? _copy_from_user+0x87/0xd0 [ 170.862145][ T7172] get_user_ifreq+0xe7/0x250 [ 170.866748][ T7172] sock_do_ioctl+0x16e/0x280 [ 170.871352][ T7172] ? __pfx_sock_do_ioctl+0x10/0x10 [ 170.876476][ T7172] ? __entry_text_end+0x102035/0x102039 [ 170.882032][ T7172] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 170.887940][ T7172] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 170.892993][ T7172] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.898643][ T7172] sock_ioctl+0x599/0x6b0 [ 170.902996][ T7172] ? __pfx_sock_ioctl+0x10/0x10 [ 170.907870][ T7172] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.913515][ T7172] ? __fget_files+0x21f/0x3d0 [ 170.918225][ T7172] ? __pfx_sock_ioctl+0x10/0x10 [ 170.923096][ T7172] __x64_sys_ioctl+0x18e/0x210 [ 170.927891][ T7172] do_syscall_64+0x123/0x790 [ 170.932504][ T7172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.938406][ T7172] RIP: 0033:0x7fc394b9e159 [ 170.942819][ T7172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.962436][ T7172] RSP: 002b:00007fc395986028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.970855][ T7172] RAX: ffffffffffffffda RBX: 00007fc394e26090 RCX: 00007fc394b9e159 [ 170.978823][ T7172] RDX: 0000200000000140 RSI: 0000000000008933 RDI: 0000000000000003 [ 170.986795][ T7172] RBP: 00007fc394c3506b R08: 0000000000000000 R09: 0000000000000000 [ 170.994763][ T7172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.002734][ T7172] R13: 00007fc394e26128 R14: 00007fc394e26090 R15: 00007fff618bfbe8 [ 171.010719][ T7172] [ 171.013730][ T7172] Modules linked in: [ 171.019995][ T7172] ---[ end trace 0000000000000000 ]--- [ 171.070140][ T7162] JBD2: Ignoring recovery information on journal [ 171.085170][ T7172] RIP: 0010:__filemap_add_folio+0x1054/0x1330 [ 171.085233][ T7172] Code: 18 c0 ff 48 c7 c6 e0 cb fe 8b 4c 89 ef e8 94 fc 12 00 90 0f 0b e8 9c 18 c0 ff 48 c7 c6 40 cc fe 8b 4c 89 ef e8 7d fc 12 00 90 <0f> 0b e8 85 18 c0 ff 48 c7 c6 c0 cc fe 8b 4c 89 ef e8 66 fc 12 00 [ 171.085271][ T7172] RSP: 0018:ffffc900030af440 EFLAGS: 00010287 [ 171.085302][ T7172] RAX: 0000000000010ba5 RBX: 0000000000112cc0 RCX: ffffc9000fa22000 [ 171.085328][ T7172] RDX: 0000000000080000 RSI: ffffffff825f0b48 RDI: ffff88802779c344 [ 171.085354][ T7172] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 171.085377][ T7172] R10: 0000000000000001 R11: 1ffffffff1dbefc1 R12: 0000000000000003 [ 171.085401][ T7172] R13: ffffea000122ef80 R14: 00000000000b6e40 R15: 0000000000000000 [ 171.085429][ T7172] FS: 00007fc3959866c0(0000) GS:ffff888123c4b000(0000) knlGS:0000000000000000 [ 171.085464][ T7172] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.085489][ T7172] CR2: 00007f1c369ef2f8 CR3: 000000005848c000 CR4: 0000000000350ef0 [ 171.085518][ T7172] Kernel panic - not syncing: Fatal exception [ 171.192880][ T7172] Kernel Offset: disabled [ 171.197195][ T7172] Rebooting in 86400 seconds..