last executing test programs: 29.592963395s ago: executing program 4 (id=115): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x12, 0x2014, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb27}, 0xffffffffffffff55) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f000001b840)={&(0x7f000001b900)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001e0000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="60129f6c526f6bd369ef9a2f56f19190d0b12e318fa33de9034653cd28550cc939900e30104abeb5f45a750604875a3d96e308ff35016271c1c13d0338fa8008893ea47a4d6195d84fcce41cb25558c399c6c3ed46999d91d2609da38329"], 0x60}}, 0x8000) fanotify_init(0x1, 0x40000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x400000bce) mknodat$null(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, &(0x7f0000019740)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f000001b780)={0x50, 0x0, r4, {0x7, 0x2b, 0x177, 0x40e00c0, 0x0, 0x800, 0x6, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) close(r3) chown(&(0x7f000001b800)='./file0\x00', 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000740)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f000001b9c0)={0x4, 0x6, &(0x7f000001ba80)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x35}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f000001bac0)='GPL\x00', 0x4, 0xc3, &(0x7f000001bb00)=""/195}, 0x70) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f00000000c0)=0xce, 0x4) connect$inet(r2, &(0x7f00000004c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000500)=0x7e6, 0x4) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x14, &(0x7f0000000580)=[{&(0x7f00000005c0)=' ', 0x100120}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sec/apparmor/.access\x00', 0x2, 0x0) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="77a4", 0xfef}], 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 28.713695566s ago: executing program 4 (id=119): r0 = syz_open_dev$media(&(0x7f0000000000), 0xa, 0x41) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66667a4, 0x0, &(0x7f0000000fc0)}) (fail_nth: 4) 28.263888088s ago: executing program 4 (id=121): r0 = syz_open_dev$media(&(0x7f0000000000), 0xa, 0x41) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66667a4, 0x0, &(0x7f0000000fc0)}) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x800000000000072, 0x101202) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000000c0)=0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b52, &(0x7f0000000100)={0xfffe, 0x203, 0x21, 0xffbf, 0x3e0, 0x1001}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x8000000000000001, 0x10000) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000840)={0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000540), 0x7, 0x0, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {0x0, 0x80000000}, {}], 0x6, 0x0, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000980)={r4, &(0x7f00000008c0), &(0x7f0000000900)}) 26.765566354s ago: executing program 4 (id=123): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x4004, &(0x7f00000002c0)={[{@adaptive_mode}, {@jqfmt_vfsold}, {@fault_injection={'fault_injection', 0x3d, 0x64}}, {@noinline_xattr}, {@fault_type={'fault_type', 0x3d, 0x5}}, {@noinline_xattr}, {@discard_unit_segment}, {@fastboot}, {@fsync_mode_strict}, {@fastboot}]}, 0x21, 0x5544, &(0x7f0000005a40)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3001009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x14a0, 0x0, 0x1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 24.557585617s ago: executing program 4 (id=131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x70, 0x19, 0x1, 0x0, 0x0, {0x1c, 0xd601, 0x9}, [@nested={0xc, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}]}, @nested={0x50, 0x6, 0x0, 0x1, [@nested={0x49, 0x5d, 0x0, 0x1, [@generic="897a22072687e16fdfb849e8dd3bce220a0ca5a0217c43a621fc12ea0f434939e5c85990fb1debcbb8e97383381132856180c51cf041d37410e5c77c74341ca2fb3527623d"]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x5}, 0x4000854) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x14a40, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000100)={0xd, 0x1afe}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000102010100000000000000000a0000013c0001802c00018014"], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8d0) r4 = accept(0xffffffffffffffff, &(0x7f0000000380)=@un=@abs, &(0x7f0000000400)=0x80) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0xa}}, 0x20) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', 0x0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) mmap(&(0x7f0000001000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r11 = userfaultfd(0x1) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000640)) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000780)={{&(0x7f0000001000)=nil, 0x10000}, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000007c0)={0x0, 0x0, 0xffff0000, 0x10000, &(0x7f0000001000)=nil}) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="08002884bd7000fbccdf25050000004407447cade420c41900018008000100", @ANYRES32=r7, @ANYBLOB="1400020076657468315f746f5f626174616476001400020064756d6d79300000000000000000000008000300020000000800030002000000050006000700000005000200030000000800090001000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.648149337s ago: executing program 4 (id=138): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000b00)={0x2, 0x0, @remote, 0xc0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000b40)=ANY=[@ANYBLOB="ffffffffffff00aabbccddee08004500001c123420004073483c00000000ffffffff00000000c002000c"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000b80)=ANY=[@ANYBLOB="ffffffffffff00aabbccddee08004500001c123400014073683b00000000ffffffffc000000100000000"], 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580), 0x1c0102, 0x0) write$vga_arbiter(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r1, &(0x7f0000000600)=@other={'lock', ' ', 'io'}, 0x3c) close_range(r1, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/mpls/conf/lo/input\x00', 0x1, 0x5f) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = eventfd2(0x10, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000300)={0x0, r4}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./debug/dynamic_debug/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x1000010, 0x0) write(r5, &(0x7f0000000680)='+p', 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x2, 0x3000000, 0x80010, r5, 0x0) close(r4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000380)={0x60000005}) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x13, r2, 0x4000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000006c0)={0x2, {{0xa, 0x1, 0x9, @mcast2}}, {{0xa, 0x4e20, 0x0, @local}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="02000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000590000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000003"], 0x210) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000bc0)=ANY=[@ANYBLOB="02000000000000000a004e2300000001ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000e66d00deb77731452b62885ba2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a004e200000000300000000000000000000000000000000010400"/285], 0x110) r7 = syz_usb_connect(0x5, 0xb3, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a100df00008032080b00020903000009040000000e0100000d240100092700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000540)=ANY=[@ANYBLOB="4a1830000000ca47772c886563859a47111214be7d09053a1cf2c0fbe51b4a4b6ed344567af0c523673c41b7dfc40955674ddb958687"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21.520003501s ago: executing program 32 (id=138): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000b00)={0x2, 0x0, @remote, 0xc0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000b40)=ANY=[@ANYBLOB="ffffffffffff00aabbccddee08004500001c123420004073483c00000000ffffffff00000000c002000c"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000b80)=ANY=[@ANYBLOB="ffffffffffff00aabbccddee08004500001c123400014073683b00000000ffffffffc000000100000000"], 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580), 0x1c0102, 0x0) write$vga_arbiter(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r1, &(0x7f0000000600)=@other={'lock', ' ', 'io'}, 0x3c) close_range(r1, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/mpls/conf/lo/input\x00', 0x1, 0x5f) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = eventfd2(0x10, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000300)={0x0, r4}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./debug/dynamic_debug/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x1000010, 0x0) write(r5, &(0x7f0000000680)='+p', 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x2, 0x3000000, 0x80010, r5, 0x0) close(r4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000380)={0x60000005}) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x13, r2, 0x4000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000006c0)={0x2, {{0xa, 0x1, 0x9, @mcast2}}, {{0xa, 0x4e20, 0x0, @local}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="02000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000590000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000003"], 0x210) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000bc0)=ANY=[@ANYBLOB="02000000000000000a004e2300000001ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000e66d00deb77731452b62885ba2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a004e200000000300000000000000000000000000000000010400"/285], 0x110) r7 = syz_usb_connect(0x5, 0xb3, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a100df00008032080b00020903000009040000000e0100000d240100092700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000540)=ANY=[@ANYBLOB="4a1830000000ca47772c886563859a47111214be7d09053a1cf2c0fbe51b4a4b6ed344567af0c523673c41b7dfc40955674ddb958687"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.500604114s ago: executing program 1 (id=160): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000400)="2399", 0x2}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x130, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0xff, 'veth1_to_bond\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x16}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private=0xa010100, @empty, 0xffffff00, 0xffffff00, 'veth1_to_bridge\x00', 'batadv0\x00', {}, {}, 0x0, 0x6, 0x5}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000ac0), 0x100, 0x12000) ioctl$XFS_IOC_FSGEOMETRY(r6, 0x8100587e, &(0x7f0000000b00)) r7 = socket(0x23, 0x80805, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000000440)=0x0, &(0x7f0000000a80)=0x4) sendmsg$nl_xfrm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffbf00010000fc000000000000000000000000000000ff020000000000000000000000000001000103944e230007000000003a000000b1503c08fd0552138b5032a0982fba85", @ANYRES32=r9, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d432000000fe8000000000000000000000000000aa00000000000000000900000000000000070000000000000008000000000000004e0b000000000000b400000000000000f8ffffffffffffffa90e000000000000060000000000000000000000000000001f00000000000000ff010000000000000200000003000000000200002abd7000000000000a0005fd2000000000000000480003006c7a7300"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) listen(r7, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000800)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f0000000840)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r10}) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000880), 0x28140, 0x0) read$dsp(r11, &(0x7f00000008c0)=""/68, 0x44) openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KDGKBDIACR(r0, 0x80045440, &(0x7f0000000040)=""/171) syz_mount_image$nilfs2(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x90, &(0x7f0000005fc0)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006080)="$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") 12.168273726s ago: executing program 1 (id=162): r0 = syz_clone(0x48000080, &(0x7f00000044c0)="3d3e489f992200ce3e000000006d14862e8a7b5f4726bd20f727872a30b4", 0x1e, 0x0, &(0x7f0000000140), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = userfaultfd(0x801) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0xfffffec1) read$FUSE(r3, &(0x7f0000002380)={0x2020}, 0xfffffce2) timer_create(0x0, 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x12, r1, 0xec776000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/21], 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x69c000) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000000180)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000043c0)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000004400)={0x0, 0x0, &(0x7f0000004440)={&(0x7f0000004480)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) 10.736619471s ago: executing program 0 (id=164): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000007c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000800), 0x10106, 0x2, 0x0) (fail_nth: 1) bpf$PROG_LOAD(0x5, &(0x7f00000028c0)={0x11, 0xc, &(0x7f0000002980)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 10.717831332s ago: executing program 1 (id=165): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000240), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000280)={0x3, 0x100, 0x0, 0x8, 0x7, 0x7}) 10.713428732s ago: executing program 2 (id=166): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) r3 = memfd_create(&(0x7f0000000040)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000003c0)={r3, 0x0, 0xfffffffff0000000, 0x1000000}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x48041, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000001800)={0x1, 0x0, [{0x10}]}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40) r7 = socket$packet(0x11, 0x3, 0x300) syz_create_resource$binfmt(0x0) r8 = syz_create_resource$futex(&(0x7f00000006c0)) futex(r8, 0x6, 0x0, 0x0, 0x0, 0x1) bind$packet(r7, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000015c0), 0x8, 0x10, &(0x7f0000001600), 0x10}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c0000"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) write(r7, &(0x7f0000000500)="08021100950108021100000008004500", 0x10) 10.713100231s ago: executing program 3 (id=167): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r6, r5, 0xe}, 0x14) sendmsg$inet(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x7e, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac1414aa0011000000000000000100000001"], 0x30}, 0x4040810) socket$inet6_tcp(0xa, 0x1, 0x0) socket$pptp(0x18, 0x1, 0x2) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r7, 0x541c, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu -pids'], 0xb) 9.170663919s ago: executing program 2 (id=168): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000007c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000800), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000028c0)={0x11, 0xc, &(0x7f0000002980)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 9.169350589s ago: executing program 3 (id=169): r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc\x00', 0x1ff) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000800)={0x20080522}, &(0x7f0000000840)={0x200002, 0x200003, 0x803, 0x4, 0x7, 0x1}) mount(0x0, &(0x7f0000000880)='./proc\x00', &(0x7f00000008c0)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./proc/thread-self/fail-nth\x00', 0x2, 0x2) write(r4, &(0x7f0000000940)='27', 0x2) unshare(0xa000400) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_ACT={0x4}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @multicast2}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88f5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010000000e4ff001000000000008946c5", @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r7, @ANYBLOB], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'gre0\x00', &(0x7f0000000580)={'gre0\x00', 0x0, 0x20, 0x8000, 0x7b, 0x8, {{0x7, 0x4, 0x2, 0x7, 0x1c, 0x66, 0x0, 0xe, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@end, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000980)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r1, @ANYBLOB="04002cb6fcbd7000fbdbdf25170000005800018008000190", @ANYRES32=r2, @ANYBLOB="1400020067656e657665310000000000000000001400020069705f767469300000000000000000001400020069703667726574617030000000000000080003000000000008000100", @ANYRES32=r5, @ANYBLOB="34000180080003000100000014000200687372300000000000000000000000001400020076657468315f766972745f776966690048000180080003000100000008000100", @ANYRES32=r7, @ANYBLOB="1400020070696d3672656730000000000000000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000300010000000c0001800800030000000000"], 0xf4}, 0x1, 0x0, 0x0, 0x4000004}, 0x8880) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) socket(0x2d, 0x2, 0x0) 7.539296108s ago: executing program 2 (id=170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c000000020603000000000000000000070000001c00078008000840000000e2050015000200000008001240000000040500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 7.538145858s ago: executing program 3 (id=171): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) (async) getsockopt$inet_sctp_SCTP_EVENT(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000040)={0x0, 0x8001, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={r2, 0x0, 0x10, 0x5, 0x3}, &(0x7f0000000100)=0x18) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r0}, 0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000200)={r2, 0x1, 0x5, 0x10000, 0x80}, &(0x7f0000000240)=0x14) (async) r5 = inotify_init1(0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r3) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r7, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x40004) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000480)={'tunl0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x20, 0x7, 0x2, 0x8, {{0x23, 0x4, 0x2, 0x4, 0x8c, 0x64, 0x0, 0xff, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @multicast2, {[@rr={0x7, 0x1b, 0x27, [@broadcast, @multicast1, @multicast1, @rand_addr=0x64010101, @local, @broadcast]}, @generic={0x88, 0xf, "71903e7b5dec0ed4ba63fa9fb7"}, @timestamp_addr={0x44, 0x14, 0x14, 0x1, 0xb, [{@multicast1, 0x8}, {@broadcast, 0x9}]}, @lsrr={0x83, 0xf, 0x36, [@local, @remote, @multicast1]}, @generic={0x82, 0xa, "253c6b5603081036"}, @rr={0x7, 0x17, 0xb, [@rand_addr=0x64010100, @remote, @multicast2, @rand_addr=0x64010100, @local]}, @rr={0x7, 0x7, 0x76, [@local]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', r8, 0x29, 0x2c, 0x0, 0x3e, 0x10, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x1, 0x4, 0x3}}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r9, 0x5000943a, &(0x7f0000000580)={{r9}, 0x0, 0x0, @unused=[0x19e9, 0x80000001, 0xffffffffffffaa1f, 0x6], @subvolid=0xffffffff}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000001580), &(0x7f00000015c0)=0x4) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001600)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r10, &(0x7f0000001640)={0x4, 0x20, 0x85e, 0x20, 0x4}, 0x48) (async) getsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(r3, 0x84, 0x84, &(0x7f00000016c0)={r4, @in6={{0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4000}}, 0x4e22}, &(0x7f0000001780)=0x90) (async) bind$inet6(r3, &(0x7f00000017c0)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0xf468}, 0x1c) (async) getsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000001800)=""/230, &(0x7f0000001900)=0xe6) (async) ftruncate(r5, 0x7fff) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), r0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000019c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000001ac0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x7c, r11, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TX_RATES={0x60, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x6, 0x8}, {0x0, 0x4}, {0x7, 0x1}, {0x4, 0x2}, {0x0, 0x2}, {0x3, 0x7}, {0x2, 0x7}, {0x7, 0xa}, {0x3, 0x3}, {0x6, 0x7}, {0x3, 0x3}, {0x4, 0x6}, {0x2, 0x8}, {0x7, 0x6}, {0x1, 0x9}, {0x7, 0x2}, {0x7, 0x2}, {0x6, 0x6}, {0x5, 0x1}, {0x0, 0x2}, {0x2, 0x8}, {0x4, 0x3}, {0x2, 0x9}, {0x7, 0x5}, {0x4, 0x2}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x5}, {0x4, 0x6}, {0x5, 0x5}, {0x1, 0x5}, {0x1, 0x9}, {0x2, 0x5}, {0x2, 0x2}, {0x2, 0x6}, {0x7, 0xa}, {0x6, 0x7}, {0x3, 0x2}, {0x0, 0x4}, {0x7, 0x8}, {0x4, 0x1}, {0x6, 0x3}, {0x2, 0xa}, {0x4, 0x3}, {0x2, 0x8}, {0x7, 0x8}, {0x1, 0xa}, {0x0, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xa0e5, 0x1000, 0x8, 0x4a, 0x0, 0x0, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x24000030) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) (async) open(&(0x7f0000001b00)='./file0\x00', 0x210800, 0x4) socket$nl_audit(0x10, 0x3, 0x9) (async) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000001b40), &(0x7f0000001b80)=0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001bc0)=0x0) prlimit64(r13, 0x2, &(0x7f0000001c00)={0x5, 0x7f}, &(0x7f0000001c40)) 7.537370308s ago: executing program 0 (id=179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0xa4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd], [0x0, 0xfff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xa4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r6, r5, 0xe}, 0x14) sendmsg$inet(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x7e, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac1414aa0011000000000000000100000001"], 0x30}, 0x4040810) socket$inet6_tcp(0xa, 0x1, 0x0) socket$pptp(0x18, 0x1, 0x2) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r7, 0x541c, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu -pids'], 0xb) 5.815449759s ago: executing program 0 (id=172): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000400)="2399", 0x2}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x130, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0xff, 'veth1_to_bond\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x16}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private=0xa010100, @empty, 0xffffff00, 0xffffff00, 'veth1_to_bridge\x00', 'batadv0\x00', {}, {}, 0x0, 0x6, 0x5}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000ac0), 0x100, 0x12000) ioctl$XFS_IOC_FSGEOMETRY(r6, 0x8100587e, &(0x7f0000000b00)) r7 = socket(0x23, 0x80805, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000000440)=0x0, &(0x7f0000000a80)=0x4) sendmsg$nl_xfrm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffbf00010000fc000000000000000000000000000000ff020000000000000000000000000001000103944e230007000000003a000000b1503c08fd0552138b5032a0982fba85", @ANYRES32=r9, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d432000000fe8000000000000000000000000000aa00000000000000000900000000000000070000000000000008000000000000004e0b000000000000b400000000000000f8ffffffffffffffa90e000000000000060000000000000000000000000000001f00000000000000ff010000000000000200000003000000000200002abd7000000000000a0005fd2000000000000000480003006c7a7300"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) listen(r7, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000800)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f0000000840)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r10}) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000880), 0x28140, 0x0) read$dsp(r11, &(0x7f00000008c0)=""/68, 0x44) openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KDGKBDIACR(r0, 0x80045440, &(0x7f0000000040)=""/171) syz_mount_image$nilfs2(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x90, &(0x7f0000005fc0)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006080)="$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") 5.81428083s ago: executing program 2 (id=173): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)}, 0x10) r1 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x0) syz_io_uring_setup(0x6ff, &(0x7f0000000140)={0x0, 0xce1d, 0x10826, 0x2, 0x9c}, &(0x7f0000000080), &(0x7f0000000000), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000"], 0x0) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x40, 0x8302) io_submit(0x0, 0x0, &(0x7f0000000880)) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000140)=""/231) 5.81388698s ago: executing program 3 (id=174): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASCONF_SUPPORTED(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000640)={0x0, 0x6}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r0, 0x84, 0x83, &(0x7f00000006c0)={r1, 0x2}, &(0x7f0000000740)=0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./debug\x00', &(0x7f00000005c0)='debugfs\x00', 0x10808, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/kvm/halt_successful_poll\x00', 0x0, 0x0) read$char_usb(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "e2599803"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmmsg(r3, &(0x7f0000000800), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000028c0)={0x11, 0xc, &(0x7f0000002980)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x14, r7, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r7, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040881}, 0x400c0) 3.959383964s ago: executing program 0 (id=175): r0 = syz_clone(0x48000080, &(0x7f00000044c0)="3d3e489f992200ce3e000000006d14862e8a7b5f4726bd20f727872a30b4", 0x1e, 0x0, &(0x7f0000000140), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = userfaultfd(0x801) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0xfffffec1) read$FUSE(r3, &(0x7f0000002380)={0x2020}, 0xfffffce2) timer_create(0x0, 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x12, r1, 0xec776000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/21], 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x69c000) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000000180)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000043c0)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000004400)={0x0, 0x0, &(0x7f0000004440)={&(0x7f0000004480)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) 3.958828565s ago: executing program 1 (id=176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}}, 0x0) (fail_nth: 4) 3.955229555s ago: executing program 3 (id=177): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40086f52, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0xa0000) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048110) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) 2.05041595s ago: executing program 0 (id=178): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) r3 = memfd_create(&(0x7f0000000040)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000003c0)={r3, 0x0, 0xfffffffff0000000, 0x1000000}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x48041, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000001800)={0x1, 0x0, [{0x10}]}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40) r7 = socket$packet(0x11, 0x3, 0x300) syz_create_resource$binfmt(0x0) r8 = syz_create_resource$futex(&(0x7f00000006c0)) futex(r8, 0x6, 0x0, 0x0, 0x0, 0x1) bind$packet(r7, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0xe, &(0x7f0000000800)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000015c0), 0x8, 0x10, &(0x7f0000001600), 0x10}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c0000"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) write(r7, &(0x7f0000000500)="08021100950108021100000008004500", 0x10) 2.050086341s ago: executing program 1 (id=180): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_settime(0x100000000000000, &(0x7f0000000000)={0x8000000000000803, 0x7}) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f0000000780), 0x2, 0x246, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000a80)='2', 0xfdef, 0xc00) prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) fchmodat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xfffffe42) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4a040, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000b40)=ANY=[@ANYBLOB="0a0000000000000010ac00000000ffff04"]) mount(0x0, 0x0, 0x0, 0x800040, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) clock_settime(0x100000000000000, &(0x7f0000000000)={0x8000000000000803, 0x7}) (async) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f0000000780), 0x2, 0x246, &(0x7f00000007c0)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file1\x00', 0x101042, 0x15) (async) pwrite64(r0, &(0x7f0000000a80)='2', 0xfdef, 0xc00) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x15) (async) setuid(0xee00) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xfffffe42) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4a040, 0x0) (async) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000b40)=ANY=[@ANYBLOB="0a0000000000000010ac00000000ffff04"]) (async) mount(0x0, 0x0, 0x0, 0x800040, 0x0) (async) 2.04960439s ago: executing program 2 (id=181): r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc\x00', 0x1ff) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000800)={0x20080522}, &(0x7f0000000840)={0x200002, 0x200003, 0x803, 0x4, 0x7, 0x1}) mount(0x0, &(0x7f0000000880)='./proc\x00', &(0x7f00000008c0)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./proc/thread-self/fail-nth\x00', 0x2, 0x2) write(r4, &(0x7f0000000940)='27', 0x2) unshare(0xa000400) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_ACT={0x4}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @multicast2}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88f5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010000000e4ff001000000000008946c5", @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r7, @ANYBLOB], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'gre0\x00', &(0x7f0000000580)={'gre0\x00', 0x0, 0x20, 0x8000, 0x7b, 0x8, {{0x7, 0x4, 0x2, 0x7, 0x1c, 0x66, 0x0, 0xe, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@end, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000980)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r1, @ANYBLOB="04002cb6fcbd7000fbdbdf25170000005800018008000190", @ANYRES32=r2, @ANYBLOB="1400020067656e657665310000000000000000001400020069705f767469300000000000000000001400020069703667726574617030000000000000080003000000000008000100", @ANYRES32=r5, @ANYBLOB="34000180080003000100000014000200687372300000000000000000000000001400020076657468315f766972745f776966690048000180080003000100000008000100", @ANYRES32=r7, @ANYBLOB="1400020070696d3672656730000000000000000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000300010000000c0001800800030000000000"], 0xf4}, 0x1, 0x0, 0x0, 0x4000004}, 0x8880) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) 20.029409ms ago: executing program 0 (id=182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0xa4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd], [0x0, 0xfff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xa4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r6, r5, 0xe}, 0x14) sendmsg$inet(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x7e, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac1414aa0011000000000000000100000001"], 0x30}, 0x4040810) socket$inet6_tcp(0xa, 0x1, 0x0) socket$pptp(0x18, 0x1, 0x2) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r7, 0x541c, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu -pids'], 0xb) 19.725129ms ago: executing program 1 (id=183): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x16) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./proc/sys/net/sctp/cookie_hmac_alg\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000026c0)={0x2020}, 0x2020) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) userfaultfd(0x801) userfaultfd(0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000004c0)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x4, r1, 0x10, 0x1, @ib={0x1b, 0xd2e9, 0x3, {"428b6a3bdcca9770b73cbca116cf1673"}, 0xa4a, 0xffffffffffffff82, 0x3}}}, 0xa0) r2 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x4, &(0x7f00000000c0)=[r3, r3, r3, r3], &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000000)=[0x0], 0x0, 0x1}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x240000, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000240)={'dt2814\x00', [0xc, 0x80, 0x20000, 0xfffffff9, 0xfff, 0xe, 0x5, 0x5, 0x7, 0xc, 0xffff8000, 0x6, 0x8, 0x8000, 0x9, 0x5, 0x2, 0x28000000, 0x8a5, 0x2, 0xb, 0x3, 0xffffffff, 0x0, 0x3854, 0x2, 0x0, 0x6, 0x80000000, 0x5, 0x3, 0x3ff]}) 1.71967ms ago: executing program 2 (id=184): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000400)="2399", 0x2}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r6 = socket(0x23, 0x80805, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@private0, @in6=@mcast2, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@loopback, 0x4d4, 0x32}, @in6=@local, {0x0, 0x9, 0x7, 0x8, 0x8251c, 0xb4, 0xfffffffffffffff8, 0xea9}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0x3, 0x200}, 0x70bd2a, 0x0, 0xa, 0x5, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) listen(r6, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000800)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000840)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r8}) (fail_nth: 3) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000880), 0x28140, 0x0) read$dsp(r9, &(0x7f00000008c0)=""/68, 0x44) openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KDGKBDIACR(r0, 0x80045440, &(0x7f0000000040)=""/171) syz_mount_image$nilfs2(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x90, &(0x7f0000005fc0)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006080)="$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") 0s ago: executing program 3 (id=191): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="24005e8010000100ffffffff000000007bffffff080002"], 0x40}}, 0x0) mount(0x0, &(0x7f0000000040)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a320000000014000780080006400000021c080017"], 0x5c}}, 0x0) unshare(0x20000400) kernel console output (not intermixed with test programs): 22][ T4534] [ 82.371940][ T4536] FAULT_INJECTION: forcing a failure. [ 82.371940][ T4536] name failslab, interval 1, probability 0, space 0, times 0 [ 82.495469][ T4536] CPU: 0 PID: 4536 Comm: syz.0.46 Not tainted syzkaller #0 [ 82.503679][ T4536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.515229][ T4536] Call Trace: [ 82.518505][ T4536] [ 82.521515][ T4536] dump_stack_lvl+0x188/0x250 [ 82.526215][ T4536] ? show_regs_print_info+0x20/0x20 [ 82.531532][ T4536] ? load_image+0x410/0x410 [ 82.536247][ T4536] ? __might_sleep+0xf0/0xf0 [ 82.540855][ T4536] ? __lock_acquire+0x7d40/0x7d40 [ 82.545908][ T4536] should_fail+0x383/0x4b0 [ 82.550368][ T4536] should_failslab+0x5/0x20 [ 82.554882][ T4536] slab_pre_alloc_hook+0x51/0xc0 [ 82.559812][ T4536] kmem_cache_alloc_node+0x47/0x2c0 [ 82.565024][ T4536] ? __alloc_skb+0xf4/0x750 [ 82.569515][ T4536] __alloc_skb+0xf4/0x750 [ 82.573832][ T4536] __ip6_append_data+0x26b7/0x38f0 [ 82.578944][ T4536] ? ip6_setup_cork+0x11e0/0x11e0 [ 82.583955][ T4536] ? ip6_setup_cork+0xc68/0x11e0 [ 82.588889][ T4536] ip6_append_data+0x1d4/0x310 [ 82.594175][ T4536] ? rawv6_send_hdrinc+0x1650/0x1650 [ 82.599471][ T4536] ? rawv6_send_hdrinc+0x1650/0x1650 [ 82.605328][ T4536] rawv6_sendmsg+0x1220/0x1710 [ 82.610122][ T4536] ? __might_sleep+0xf0/0xf0 [ 82.614727][ T4536] ? compat_rawv6_ioctl+0x60/0x60 [ 82.619768][ T4536] ? aa_sk_perm+0x7dc/0x910 [ 82.624275][ T4536] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 82.630683][ T4536] ? sock_rps_record_flow+0x17/0x3b0 [ 82.636076][ T4536] ? inet_sendmsg+0x7a/0x2a0 [ 82.640757][ T4536] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 82.646207][ T4536] ? inet_send_prepare+0x250/0x250 [ 82.651586][ T4536] ____sys_sendmsg+0x5be/0x8f0 [ 82.656360][ T4536] ? __sys_sendmsg_sock+0x30/0x30 [ 82.661391][ T4536] ? rcu_is_watching+0x11/0xa0 [ 82.666199][ T4536] ? import_iovec+0x6f/0xa0 [ 82.670713][ T4536] ___sys_sendmsg+0x236/0x2e0 [ 82.675382][ T4536] ? __sys_sendmsg+0x290/0x290 [ 82.680154][ T4536] ? __might_fault+0xb3/0x110 [ 82.684825][ T4536] __sys_sendmmsg+0x2ba/0x500 [ 82.689507][ T4536] ? __ia32_sys_sendmsg+0x80/0x80 [ 82.695149][ T4536] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 82.701161][ T4536] ? lock_chain_count+0x20/0x20 [ 82.706100][ T4536] __x64_sys_sendmmsg+0x9c/0xb0 [ 82.711293][ T4536] do_syscall_64+0x4c/0xa0 [ 82.715846][ T4536] ? clear_bhb_loop+0x30/0x80 [ 82.720619][ T4536] ? clear_bhb_loop+0x30/0x80 [ 82.725932][ T4536] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.731914][ T4536] RIP: 0033:0x7fc6c1a66559 [ 82.736337][ T4536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.756032][ T4536] RSP: 002b:00007fc6bfcbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 82.764686][ T4536] RAX: ffffffffffffffda RBX: 00007fc6c1cedfa0 RCX: 00007fc6c1a66559 [ 82.773406][ T4536] RDX: 00000000000004ff RSI: 0000200000000a40 RDI: 0000000000000004 [ 82.781448][ T4536] RBP: 00007fc6c1afdab8 R08: 0000000000000000 R09: 0000000000000000 [ 82.789648][ T4536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.797643][ T4536] R13: 00007fc6c1cee038 R14: 00007fc6c1cedfa0 R15: 00007ffc07b141b8 [ 82.805627][ T4536] [ 82.876233][ T4383] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 82.966455][ T4354] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 83.079724][ T4275] usb 1-1: USB disconnect, device number 2 [ 83.086424][ T4383] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 83.106300][ T4383] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 50 [ 83.126251][ T4383] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 83.143540][ T4541] loop2: detected capacity change from 0 to 32768 [ 83.269365][ T4383] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 83.297333][ T4541] (syz.2.45,4541,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 83.316408][ T4383] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 83.343702][ T4383] usb 5-1: Product: syz [ 83.356634][ T4541] (syz.2.45,4541,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 83.372831][ T4383] usb 5-1: Manufacturer: syz [ 83.377982][ T4354] usb 4-1: unable to get BOS descriptor or descriptor too short [ 83.433482][ T4541] JBD2: Ignoring recovery information on journal [ 84.623591][ T4529] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 84.633986][ T4354] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 84.650248][ T4529] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 84.662859][ T4354] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice= 0.00 [ 84.697813][ T4354] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.706938][ T4383] dvb_ttusb_budget: ttusb_init_controller: error [ 84.717568][ T4383] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 84.745357][ T4541] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 84.805648][ T4354] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 84.818256][ T4354] usbtest: probe of 4-1:1.0 failed with error -22 [ 84.864468][ T4383] DVB: Unable to find symbol cx22700_attach() [ 84.890727][ T4530] netlink: 'syz.4.42': attribute type 1 has an invalid length. [ 84.903290][ T4383] DVB: Unable to find symbol tda10046_attach() [ 84.914748][ T4383] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 84.936380][ T4529] dvb_ttusb_budget: failed urb submission (0: err = -90)! [ 84.977927][ T4273] usb 5-1: USB disconnect, device number 5 [ 85.016043][ T4354] usb 4-1: USB disconnect, device number 4 [ 85.252984][ T4199] ocfs2: Unmounting device (7,2) on (node local) [ 85.442365][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 85.442378][ T26] audit: type=1326 audit(1792365474.524:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.0.53" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c1a66559 code=0x7ffc0000 [ 85.481001][ T26] audit: type=1326 audit(1792365474.524:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.0.53" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c1a66559 code=0x7ffc0000 [ 85.511587][ T26] audit: type=1326 audit(1792365474.524:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.0.53" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c1a66559 code=0x7ffc0000 [ 85.549515][ T26] audit: type=1326 audit(1792365474.524:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.0.53" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c1a66559 code=0x7ffc0000 [ 85.581496][ T26] audit: type=1326 audit(1792365474.524:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.0.53" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fc6c1a66559 code=0x7ffc0000 [ 85.599802][ T4567] FAULT_INJECTION: forcing a failure. [ 85.599802][ T4567] name failslab, interval 1, probability 0, space 0, times 0 [ 85.612626][ T26] audit: type=1326 audit(1792365474.524:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.0.53" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c1a66559 code=0x7ffc0000 [ 85.649574][ T26] audit: type=1326 audit(1792365474.524:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.0.53" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c1a66559 code=0x7ffc0000 [ 85.671944][ T4567] CPU: 0 PID: 4567 Comm: syz.3.55 Not tainted syzkaller #0 [ 85.682203][ T26] audit: type=1326 audit(1792365474.524:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.0.53" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c1a66559 code=0x7ffc0000 [ 85.682854][ T4567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.709031][ T26] audit: type=1326 audit(1792365474.524:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.0.53" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c1a66559 code=0x7ffc0000 [ 85.719227][ T4567] Call Trace: [ 85.719245][ T4567] [ 85.719254][ T4567] dump_stack_lvl+0x188/0x250 [ 85.719279][ T4567] ? show_regs_print_info+0x20/0x20 [ 85.719295][ T4567] ? load_image+0x410/0x410 [ 85.719313][ T4567] ? __might_sleep+0xf0/0xf0 [ 85.745175][ T26] audit: type=1326 audit(1792365474.524:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.0.53" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc6c1a26d8e code=0x7ffc0000 [ 85.747996][ T4567] ? __lock_acquire+0x7d40/0x7d40 [ 85.748029][ T4567] should_fail+0x383/0x4b0 [ 85.748052][ T4567] should_failslab+0x5/0x20 [ 85.748068][ T4567] slab_pre_alloc_hook+0x51/0xc0 [ 85.748086][ T4567] __kmalloc+0x6b/0x340 [ 85.748099][ T4567] ? tomoyo_encode+0x28a/0x550 [ 85.748120][ T4567] tomoyo_encode+0x28a/0x550 [ 85.748244][ T4567] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 85.748270][ T4567] tomoyo_path_number_perm+0x251/0x6b0 [ 85.748287][ T4567] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 85.748302][ T4567] ? ksys_write+0x1d4/0x260 [ 85.748355][ T4567] security_file_ioctl+0x6c/0xa0 [ 85.748371][ T4567] __se_sys_ioctl+0x48/0x170 [ 85.748388][ T4567] do_syscall_64+0x4c/0xa0 [ 85.748405][ T4567] ? clear_bhb_loop+0x30/0x80 [ 85.748421][ T4567] ? clear_bhb_loop+0x30/0x80 [ 85.748438][ T4567] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.748452][ T4567] RIP: 0033:0x7f8780caf559 [ 85.748466][ T4567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.748479][ T4567] RSP: 002b:00007f877ef07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.748497][ T4567] RAX: ffffffffffffffda RBX: 00007f8780f36fa0 RCX: 00007f8780caf559 [ 85.748507][ T4567] RDX: 0000200000000080 RSI: 0000000040045730 RDI: 0000000000000003 [ 85.748516][ T4567] RBP: 00007f877ef07090 R08: 0000000000000000 R09: 0000000000000000 [ 85.748524][ T4567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.748534][ T4567] R13: 00007f8780f37038 R14: 00007f8780f36fa0 R15: 00007ffebc7f75d8 [ 85.748554][ T4567] [ 85.749667][ T4383] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 85.992233][ T4567] ERROR: Out of memory at tomoyo_realpath_from_path. [ 87.252680][ T13] cfg80211: failed to load regulatory.db [ 87.315862][ T4578] loop2: detected capacity change from 0 to 256 [ 87.322421][ T4383] usb 1-1: device descriptor read/64, error -71 [ 88.615034][ T4586] loop4: detected capacity change from 0 to 64 [ 88.678223][ T4578] FAT-fs (loop2): Unrecognized mount option "iocharset932" or missing value [ 88.772597][ T4586] attempt to access beyond end of device [ 88.772597][ T4586] loop4: rw=0, want=1026, limit=64 [ 88.797574][ T4578] udc-core: couldn't find an available UDC or it's busy [ 88.804890][ T4578] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 88.827090][ T4586] Buffer I/O error on dev loop4, logical block 512, async page read [ 88.836966][ T4586] attempt to access beyond end of device [ 88.836966][ T4586] loop4: rw=0, want=113154, limit=64 [ 88.848076][ T4586] Buffer I/O error on dev loop4, logical block 56576, async page read [ 88.992088][ T4596] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.056273][ T13] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 89.087671][ T4602] FAULT_INJECTION: forcing a failure. [ 89.087671][ T4602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.135374][ T4602] CPU: 0 PID: 4602 Comm: syz.4.63 Not tainted syzkaller #0 [ 89.142735][ T4602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.153280][ T4602] Call Trace: [ 89.156574][ T4602] [ 89.159867][ T4602] dump_stack_lvl+0x188/0x250 [ 89.164569][ T4602] ? show_regs_print_info+0x20/0x20 [ 89.169774][ T4602] ? load_image+0x410/0x410 [ 89.174437][ T4602] ? __lock_acquire+0x7d40/0x7d40 [ 89.179458][ T4602] ? mark_lock+0x94/0x320 [ 89.183822][ T4602] should_fail+0x383/0x4b0 [ 89.188255][ T4602] _copy_from_user+0x2e/0x170 [ 89.193097][ T4602] __copy_msghdr_from_user+0xc9/0x630 [ 89.199030][ T4602] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 89.204309][ T4602] ? rcu_is_watching+0x11/0xa0 [ 89.209417][ T4602] ? verify_lock_unused+0x140/0x140 [ 89.215140][ T4602] ? kfree+0x4a/0x2a0 [ 89.219110][ T4602] ___sys_sendmsg+0x19a/0x2e0 [ 89.223800][ T4602] ? __sys_sendmsg+0x290/0x290 [ 89.228581][ T4602] ? __might_fault+0xb3/0x110 [ 89.233269][ T4602] __sys_sendmmsg+0x2ba/0x500 [ 89.237936][ T4602] ? __ia32_sys_sendmsg+0x80/0x80 [ 89.242962][ T4602] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 89.248932][ T4602] ? lock_chain_count+0x20/0x20 [ 89.253769][ T4602] __x64_sys_sendmmsg+0x9c/0xb0 [ 89.258605][ T4602] do_syscall_64+0x4c/0xa0 [ 89.263015][ T4602] ? clear_bhb_loop+0x30/0x80 [ 89.267676][ T4602] ? clear_bhb_loop+0x30/0x80 [ 89.272336][ T4602] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.278225][ T4602] RIP: 0033:0x7f4e9cfd7559 [ 89.282754][ T4602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.302500][ T4602] RSP: 002b:00007f4e9b22f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 89.310942][ T4602] RAX: ffffffffffffffda RBX: 00007f4e9d25efa0 RCX: 00007f4e9cfd7559 [ 89.318902][ T4602] RDX: 00000000000004ff RSI: 0000200000000a40 RDI: 0000000000000004 [ 89.326876][ T4602] RBP: 00007f4e9d06eab8 R08: 0000000000000000 R09: 0000000000000000 [ 89.334868][ T4602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.342969][ T4602] R13: 00007f4e9d25f038 R14: 00007f4e9d25efa0 R15: 00007ffc753a8808 [ 89.351062][ T4602] [ 89.407101][ T144] blk_update_request: I/O error, dev sda, sector 704822 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 89.418835][ T144] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88103) [ 89.430941][ T144] blk_update_request: I/O error, dev sda, sector 704854 op 0x1:(WRITE) flags 0x0 phys_seg 4 prio class 0 [ 89.442327][ T144] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88169) [ 89.457134][ T4296] Buffer I/O error on device sda1, logical block 88064 [ 89.464396][ T4296] Buffer I/O error on device sda1, logical block 88068 [ 89.471422][ T4296] Buffer I/O error on device sda1, logical block 88069 [ 89.478475][ T4296] Buffer I/O error on device sda1, logical block 88070 [ 89.485434][ T4296] Buffer I/O error on device sda1, logical block 88071 [ 89.492536][ T4296] Buffer I/O error on device sda1, logical block 88072 [ 89.499616][ T4296] Buffer I/O error on device sda1, logical block 88073 [ 89.506541][ T4296] Buffer I/O error on device sda1, logical block 88074 [ 89.513414][ T4296] Buffer I/O error on device sda1, logical block 88075 [ 89.520428][ T4296] Buffer I/O error on device sda1, logical block 88076 [ 89.533597][ T144] blk_update_request: I/O error, dev sda, sector 705366 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 0 [ 89.544889][ T144] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88196) [ 89.557484][ T144] blk_update_request: I/O error, dev sda, sector 705582 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 0 [ 89.568742][ T144] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88217) [ 89.580310][ T144] blk_update_request: I/O error, dev sda, sector 705750 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 0 [ 89.592035][ T144] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88261) [ 89.597358][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 89.608185][ T144] blk_update_request: I/O error, dev sda, sector 706102 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 0 [ 89.625798][ T144] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88289) [ 89.637383][ T144] blk_update_request: I/O error, dev sda, sector 706326 op 0x1:(WRITE) flags 0x0 phys_seg 30 prio class 0 [ 89.642412][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.648726][ T144] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88349) [ 89.663464][ T144] blk_update_request: I/O error, dev sda, sector 706806 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 89.670886][ T4383] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 89.681814][ T144] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88353) [ 89.700982][ T144] blk_update_request: I/O error, dev sda, sector 706838 op 0x1:(WRITE) flags 0x0 phys_seg 5 prio class 0 [ 89.712257][ T144] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88383) [ 89.723827][ T144] blk_update_request: I/O error, dev sda, sector 707086 op 0x1:(WRITE) flags 0x0 phys_seg 35 prio class 0 [ 89.735446][ T144] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88421) [ 89.776135][ T3520] Aborting journal on device sda1-8. [ 89.784128][ T264] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 89.792960][ T3520] JBD2: Error -5 detected when updating journal superblock for sda1-8. [ 89.798385][ T4600] Buffer I/O error on dev sda1, logical block 129, lost async page write [ 89.810282][ T4600] Buffer I/O error on dev sda1, logical block 137, lost async page write [ 89.818803][ T4600] Buffer I/O error on dev sda1, logical block 5752, lost async page write [ 89.828466][ T4600] Buffer I/O error on dev sda1, logical block 5753, lost async page write [ 89.837255][ T4600] Buffer I/O error on dev sda1, logical block 5754, lost async page write [ 89.846015][ T4600] Buffer I/O error on dev sda1, logical block 5755, lost async page write [ 89.854831][ T4600] Buffer I/O error on dev sda1, logical block 5756, lost async page write [ 89.865027][ T13] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 89.882349][ T4598] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.64: Detected aborted journal [ 89.895233][ T13] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.907031][ T4598] EXT4-fs (sda1): I/O error while writing superblock [ 89.913835][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.922311][ T4598] EXT4-fs (sda1): Remounting filesystem read-only [ 89.929439][ T4383] usb 1-1: device descriptor read/64, error -71 [ 89.948120][ T4598] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.64: Detected aborted journal [ 89.959190][ T13] usb 3-1: config 0 descriptor?? [ 89.964700][ T4598] EXT4-fs (sda1): I/O error while writing superblock [ 89.972034][ T4598] EXT4-fs (sda1): Remounting filesystem read-only [ 89.979630][ T4598] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.64: Detected aborted journal [ 89.995314][ T4598] EXT4-fs (sda1): I/O error while writing superblock [ 90.005692][ T4595] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.74: Detected aborted journal [ 90.016979][ T4598] EXT4-fs (sda1): Remounting filesystem read-only [ 90.024163][ T4595] EXT4-fs (sda1): I/O error while writing superblock [ 90.041133][ T4595] EXT4-fs (sda1): Remounting filesystem read-only [ 90.050302][ T4383] usb usb1-port1: attempt power cycle [ 90.057294][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 90.064762][ T4595] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.74: Detected aborted journal [ 90.073405][ T4173] EXT4-fs (sda1): I/O error while writing superblock [ 90.087116][ T4601] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.63: Detected aborted journal [ 90.092249][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 90.105687][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 90.119182][ T4601] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.63: Detected aborted journal [ 90.123359][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 90.209083][ T4606] loop3: detected capacity change from 0 to 4096 [ 90.296324][ T13] usbhid 3-1:0.0: can't add hid device: -71 [ 90.305838][ T13] usbhid: probe of 3-1:0.0 failed with error -71 [ 90.324648][ T4606] EXT4-fs (loop3): Test dummy encryption mode enabled [ 90.346825][ T13] usb 3-1: USB disconnect, device number 3 [ 90.410000][ T4606] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,inode_readahead_blks=0x0000000000800000,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,lazytime,,errors=continue. Quota mode: writeback. [ 90.444458][ T4614] IPv6: Can't replace route, no match found [ 90.506244][ T4383] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 90.540116][ T4600] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 90.585540][ T4618] xt_l2tp: v2 doesn't support IP mode [ 90.591302][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 90.591314][ T26] audit: type=1326 audit(1792365479.674:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.0.73" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc6c1a661eb code=0x7ffc0000 [ 90.602757][ T4618] loop4: detected capacity change from 0 to 64 [ 90.630408][ T26] audit: type=1326 audit(1792365479.714:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.0.73" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc6c1a661eb code=0x7ffc0000 [ 90.630494][ T4383] usb 1-1: device descriptor read/8, error -71 [ 90.665967][ T4606] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 90.691806][ T4606] netlink: 'syz.3.65': attribute type 1 has an invalid length. [ 90.710729][ T4606] netlink: 'syz.3.65': attribute type 2 has an invalid length. [ 90.740552][ T4606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'. [ 90.802551][ T4606] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 90.820205][ T26] audit: type=1800 audit(1792365479.904:125): pid=4606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.65" name="file1" dev="loop3" ino=19 res=0 errno=0 [ 90.882106][ T4618] attempt to access beyond end of device [ 90.882106][ T4618] loop4: rw=0, want=1026, limit=64 [ 90.932777][ T4618] attempt to access beyond end of device [ 90.932777][ T4618] loop4: rw=0, want=113154, limit=64 [ 90.986915][ T4383] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 91.029160][ T4634] attempt to access beyond end of device [ 91.029160][ T4634] loop4: rw=0, want=1026, limit=64 [ 91.071472][ T26] audit: type=1326 audit(1792365480.154:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.0.73" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc6c1a661eb code=0x7ffc0000 [ 91.076474][ T4634] attempt to access beyond end of device [ 91.076474][ T4634] loop4: rw=0, want=113154, limit=64 [ 91.108374][ T4383] usb 1-1: device descriptor read/8, error -71 [ 91.113784][ T26] audit: type=1326 audit(1792365480.194:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.0.73" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc6c1a661eb code=0x7ffc0000 [ 91.247754][ T4383] usb usb1-port1: unable to enumerate USB device [ 91.261218][ T4637] loop3: detected capacity change from 0 to 64 [ 91.303396][ T4354] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 91.403935][ T4637] attempt to access beyond end of device [ 91.403935][ T4637] loop3: rw=0, want=1026, limit=64 [ 91.437886][ T4637] attempt to access beyond end of device [ 91.437886][ T4637] loop3: rw=0, want=113154, limit=64 [ 91.471295][ T4641] FAULT_INJECTION: forcing a failure. [ 91.471295][ T4641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.529623][ T4643] FAULT_INJECTION: forcing a failure. [ 91.529623][ T4643] name failslab, interval 1, probability 0, space 0, times 0 [ 91.547655][ T4641] CPU: 0 PID: 4641 Comm: syz.3.71 Not tainted syzkaller #0 [ 91.554898][ T4641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.565065][ T4641] Call Trace: [ 91.568355][ T4641] [ 91.571284][ T4641] dump_stack_lvl+0x188/0x250 [ 91.575985][ T4641] ? show_regs_print_info+0x20/0x20 [ 91.581184][ T4641] ? load_image+0x410/0x410 [ 91.585697][ T4641] ? __lock_acquire+0x7d40/0x7d40 [ 91.590747][ T4641] should_fail+0x383/0x4b0 [ 91.595170][ T4641] strncpy_from_user+0x32/0x350 [ 91.600636][ T4641] getname_flags+0xf2/0x4f0 [ 91.605151][ T4641] do_sys_openat2+0xdd/0x500 [ 91.609743][ T4641] ? __lock_acquire+0x7d40/0x7d40 [ 91.614815][ T4641] ? do_sys_open+0xe0/0xe0 [ 91.619268][ T4641] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 91.625401][ T4641] ? lock_chain_count+0x20/0x20 [ 91.630345][ T4641] __x64_sys_openat+0x135/0x160 [ 91.635200][ T4641] do_syscall_64+0x4c/0xa0 [ 91.639627][ T4641] ? clear_bhb_loop+0x30/0x80 [ 91.644308][ T4641] ? clear_bhb_loop+0x30/0x80 [ 91.648983][ T4641] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.654886][ T4641] RIP: 0033:0x7f8780caf559 [ 91.659300][ T4641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.678906][ T4641] RSP: 002b:00007f877eee6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 91.687495][ T4641] RAX: ffffffffffffffda RBX: 00007f8780f37090 RCX: 00007f8780caf559 [ 91.695551][ T4641] RDX: 0000000000000002 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 91.703619][ T4641] RBP: 00007f877eee6090 R08: 0000000000000000 R09: 0000000000000000 [ 91.712315][ T4641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.720497][ T4641] R13: 00007f8780f37128 R14: 00007f8780f37090 R15: 00007ffebc7f75d8 [ 91.728497][ T4641] [ 93.308948][ T26] audit: type=1326 audit(1792365482.394:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.0.73" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c1a66559 code=0x7ffc0000 [ 93.338296][ T26] audit: type=1326 audit(1792365482.394:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.0.73" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc6c1a662c2 code=0x7ffc0000 [ 93.340718][ T4643] CPU: 0 PID: 4643 Comm: syz.4.75 Not tainted syzkaller #0 [ 93.362592][ T26] audit: type=1326 audit(1792365482.394:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.0.73" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc6c1a66357 code=0x7ffc0000 [ 93.369316][ T4643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.369329][ T4643] Call Trace: [ 93.369336][ T4643] [ 93.369343][ T4643] dump_stack_lvl+0x188/0x250 [ 93.369370][ T4643] ? show_regs_print_info+0x20/0x20 [ 93.393746][ T26] audit: type=1326 audit(1792365482.394:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.0.73" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc6c1a23251 code=0x7ffc0000 [ 93.403183][ T4643] ? load_image+0x410/0x410 [ 93.403212][ T4643] ? __might_sleep+0xf0/0xf0 [ 93.403230][ T4643] ? __lock_acquire+0x7d40/0x7d40 [ 93.414957][ T26] audit: type=1326 audit(1792365482.394:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.0.73" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fc6c1a67349 code=0x7ffc0000 [ 93.419349][ T4643] ? mark_lock+0x94/0x320 [ 93.419376][ T4643] should_fail+0x383/0x4b0 [ 93.419398][ T4643] should_failslab+0x5/0x20 [ 93.501289][ T4643] slab_pre_alloc_hook+0x51/0xc0 [ 93.506227][ T4643] __kmalloc+0x6b/0x340 [ 93.510473][ T4643] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 93.516188][ T4643] tomoyo_realpath_from_path+0xed/0x5e0 [ 93.521738][ T4643] tomoyo_path_number_perm+0x251/0x6b0 [ 93.527189][ T4643] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 93.532696][ T4643] ? do_futex+0xdc2/0x12b0 [ 93.537122][ T4643] security_file_ioctl+0x6c/0xa0 [ 93.542043][ T4643] __se_sys_ioctl+0x48/0x170 [ 93.546814][ T4643] do_syscall_64+0x4c/0xa0 [ 93.551319][ T4643] ? clear_bhb_loop+0x30/0x80 [ 93.556023][ T4643] ? clear_bhb_loop+0x30/0x80 [ 93.560695][ T4643] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.566873][ T4643] RIP: 0033:0x7f4e9cfd7559 [ 93.571692][ T4643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.592180][ T4643] RSP: 002b:00007f4e9b22f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.600854][ T4643] RAX: ffffffffffffffda RBX: 00007f4e9d25efa0 RCX: 00007f4e9cfd7559 [ 93.608958][ T4643] RDX: 0000200000000300 RSI: 000000000000890b RDI: 0000000000000004 [ 93.617068][ T4643] RBP: 00007f4e9d06eab8 R08: 0000000000000000 R09: 0000000000000000 [ 93.625254][ T4643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.633575][ T4643] R13: 00007f4e9d25f038 R14: 00007f4e9d25efa0 R15: 00007ffc753a8808 [ 93.641579][ T4643] [ 93.715940][ T4650] FAULT_INJECTION: forcing a failure. [ 93.715940][ T4650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.750664][ T4650] CPU: 0 PID: 4650 Comm: syz.1.77 Not tainted syzkaller #0 [ 93.758576][ T4650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.768723][ T4650] Call Trace: [ 93.772006][ T4650] [ 93.774920][ T4650] dump_stack_lvl+0x188/0x250 [ 93.779582][ T4650] ? show_regs_print_info+0x20/0x20 [ 93.787065][ T4650] ? load_image+0x410/0x410 [ 93.791663][ T4650] ? __lock_acquire+0x7d40/0x7d40 [ 93.796789][ T4650] should_fail+0x383/0x4b0 [ 93.801235][ T4650] _copy_to_user+0x2e/0x130 [ 93.805811][ T4650] simple_read_from_buffer+0xe3/0x150 [ 93.811223][ T4650] proc_fail_nth_read+0x1a6/0x220 [ 93.816312][ T4650] ? proc_fault_inject_write+0x310/0x310 [ 93.822421][ T4650] ? fsnotify_perm+0x254/0x560 [ 93.827362][ T4650] ? proc_fault_inject_write+0x310/0x310 [ 93.833010][ T4650] vfs_read+0x2ff/0xd50 [ 93.837600][ T4650] ? __lock_acquire+0x7d40/0x7d40 [ 93.842655][ T4650] ? kernel_read+0x1e0/0x1e0 [ 93.847565][ T4650] ? mutex_lock_nested+0x17/0x20 [ 93.852521][ T4650] ? __fdget_pos+0x2bf/0x370 [ 93.857125][ T4650] ? ksys_read+0x70/0x260 [ 93.861458][ T4650] ksys_read+0x153/0x260 [ 93.865703][ T4650] ? vfs_write+0xd70/0xd70 [ 93.870239][ T4650] ? lockdep_hardirqs_on+0x94/0x140 [ 93.875536][ T4650] do_syscall_64+0x4c/0xa0 [ 93.880079][ T4650] ? clear_bhb_loop+0x30/0x80 [ 93.884854][ T4650] ? clear_bhb_loop+0x30/0x80 [ 93.889536][ T4650] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.895624][ T4650] RIP: 0033:0x7f8d8ac9fd8e [ 93.900128][ T4650] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 93.920157][ T4650] RSP: 002b:00007f8d88f36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 93.928739][ T4650] RAX: ffffffffffffffda RBX: 00007f8d88f376c0 RCX: 00007f8d8ac9fd8e [ 93.937349][ T4650] RDX: 000000000000000f RSI: 00007f8d88f370a0 RDI: 0000000000000007 [ 93.945411][ T4650] RBP: 00007f8d88f37090 R08: 0000000000000000 R09: 0000000000000000 [ 93.953566][ T4650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.961549][ T4650] R13: 00007f8d8af67038 R14: 00007f8d8af66fa0 R15: 00007ffe172535b8 [ 93.969533][ T4650] [ 93.984555][ T4354] usb 3-1: unable to get BOS descriptor or descriptor too short [ 94.066773][ T4354] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 94.079579][ T4354] usb 3-1: can't read configurations, error -71 [ 94.238809][ T4643] ERROR: Out of memory at tomoyo_realpath_from_path. [ 94.421803][ T4675] rxe_eth0 speed is unknown, defaulting to 1000 [ 94.487802][ T4673] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 94.516702][ T4354] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 94.666265][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.896043][ T4173] EXT4-fs error: 83 callbacks suppressed [ 95.896059][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 95.921487][ T4173] EXT4-fs: 97 callbacks suppressed [ 95.921503][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 95.934263][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 95.945671][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 95.956360][ T4383] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 95.969253][ T4683] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.90: Detected aborted journal [ 95.980407][ T4683] EXT4-fs (sda1): Remounting filesystem read-only [ 96.014196][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 96.014210][ T26] audit: type=1326 audit(1792365485.094:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4676 comm="syz.4.88" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e9cfd71eb code=0x7ffc0000 [ 96.023630][ T4683] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.90: Detected aborted journal [ 96.049977][ T26] audit: type=1326 audit(1792365485.104:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4676 comm="syz.4.88" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e9cfd71eb code=0x7ffc0000 [ 96.056374][ T4354] usb 3-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 96.091189][ T4684] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.91: Detected aborted journal [ 96.102468][ T4684] EXT4-fs (sda1): Remounting filesystem read-only [ 96.110257][ T4684] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.91: Detected aborted journal [ 96.121325][ T4354] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.131906][ T4684] EXT4-fs (sda1): Remounting filesystem read-only [ 96.138722][ T4683] EXT4-fs (sda1): Remounting filesystem read-only [ 96.145436][ T4354] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 96.203277][ T4686] FAULT_INJECTION: forcing a failure. [ 96.203277][ T4686] name failslab, interval 1, probability 0, space 0, times 0 [ 96.216681][ T4686] CPU: 0 PID: 4686 Comm: syz.3.91 Not tainted syzkaller #0 [ 96.223885][ T4686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.233942][ T4686] Call Trace: [ 96.237237][ T4686] [ 96.240189][ T4686] dump_stack_lvl+0x188/0x250 [ 96.244851][ T4686] ? show_regs_print_info+0x20/0x20 [ 96.250034][ T4686] ? load_image+0x410/0x410 [ 96.254532][ T4686] ? __lock_acquire+0x7d40/0x7d40 [ 96.259540][ T4686] should_fail+0x383/0x4b0 [ 96.263962][ T4686] should_failslab+0x5/0x20 [ 96.268633][ T4686] slab_pre_alloc_hook+0x51/0xc0 [ 96.274249][ T4686] __kmalloc_node_track_caller+0x68/0x3a0 [ 96.279993][ T4686] ? sk_stream_alloc_skb+0x204/0xb50 [ 96.285697][ T4686] ? __alloc_skb+0xf4/0x750 [ 96.290213][ T4686] ? sk_stream_alloc_skb+0x204/0xb50 [ 96.295720][ T4686] __alloc_skb+0x22c/0x750 [ 96.300144][ T4686] sk_stream_alloc_skb+0x204/0xb50 [ 96.305246][ T4686] ? tcp_rate_check_app_limited+0x1a7/0x340 [ 96.311130][ T4686] tcp_sendmsg_locked+0xcbb/0x3330 [ 96.316243][ T4686] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 96.322211][ T4686] ? lock_chain_count+0x20/0x20 [ 96.327067][ T4686] ? tcp_free_fastopen_req+0x70/0x70 [ 96.332374][ T4686] tcp_sendmsg+0x2b/0x40 [ 96.336826][ T4686] ? inet_send_prepare+0x250/0x250 [ 96.341966][ T4686] ____sys_sendmsg+0x5be/0x8f0 [ 96.346739][ T4686] ? __sys_sendmsg_sock+0x30/0x30 [ 96.351775][ T4686] ? import_iovec+0x6f/0xa0 [ 96.356818][ T4686] ___sys_sendmsg+0x236/0x2e0 [ 96.362281][ T4686] ? __sys_sendmsg+0x290/0x290 [ 96.367075][ T4686] __se_sys_sendmsg+0x1b7/0x2a0 [ 96.371941][ T4686] ? __x64_sys_sendmsg+0x80/0x80 [ 96.377153][ T4686] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 96.383339][ T4686] ? lockdep_hardirqs_on+0x94/0x140 [ 96.388902][ T4686] do_syscall_64+0x4c/0xa0 [ 96.393307][ T4686] ? clear_bhb_loop+0x30/0x80 [ 96.397992][ T4686] ? clear_bhb_loop+0x30/0x80 [ 96.402753][ T4686] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.408733][ T4686] RIP: 0033:0x7f8780caf559 [ 96.413240][ T4686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.432839][ T4686] RSP: 002b:00007f877ef07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.441325][ T4686] RAX: ffffffffffffffda RBX: 00007f8780f36fa0 RCX: 00007f8780caf559 [ 96.449293][ T4686] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 96.457256][ T4686] RBP: 00007f877ef07090 R08: 0000000000000000 R09: 0000000000000000 [ 96.465207][ T4686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.473161][ T4686] R13: 00007f8780f37038 R14: 00007f8780f36fa0 R15: 00007ffebc7f75d8 [ 96.481244][ T4686] [ 96.491135][ T4383] usb 5-1: device descriptor read/64, error -71 [ 96.501244][ T4354] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 96.520176][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 96.521577][ T4354] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.548419][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 96.551605][ T4354] usb 3-1: config 0 descriptor?? [ 96.561854][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 96.576399][ T13] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.582068][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 96.600474][ T4354] usb 3-1: Found UVC 9.00 device (046d:0825) [ 96.611340][ T4688] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.92: Detected aborted journal [ 96.630615][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 96.639109][ T4688] EXT4-fs (sda1): Remounting filesystem read-only [ 96.643132][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 96.746462][ T13] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.765978][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.776781][ T13] usb 2-1: Product: syz [ 96.780967][ T13] usb 2-1: Manufacturer: syz [ 96.786438][ T4383] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 96.806241][ T13] usb 2-1: SerialNumber: syz [ 96.816520][ T26] audit: type=1326 audit(1792365485.904:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4676 comm="syz.4.88" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e9cfd71eb code=0x7ffc0000 [ 96.845989][ T26] audit: type=1326 audit(1792365485.924:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4676 comm="syz.4.88" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e9cfd71eb code=0x7ffc0000 [ 96.967304][ T4275] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 96.986321][ T4383] usb 5-1: device descriptor read/64, error -71 [ 97.070017][ T4700] loop0: detected capacity change from 0 to 32768 [ 97.106657][ T4383] usb usb5-port1: attempt power cycle [ 97.134970][ T4700] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.94 (4700) [ 97.168013][ T4700] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 97.186386][ T4700] BTRFS info (device loop0): turning on async discard [ 97.204293][ T4700] BTRFS info (device loop0): using free space tree [ 97.204632][ T4701] udevd[4701]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 97.224636][ T4700] BTRFS info (device loop0): has skinny extents [ 97.246520][ T4354] uvcvideo 3-1:0.1: Failed to set UVC probe control : -71 (exp. 48). [ 97.266356][ T4354] uvcvideo 3-1:0.1: Failed to query (129) UVC probe control : -71 (exp. 48). [ 97.285553][ T4354] uvcvideo 3-1:0.1: Failed to initialize the device (-5). [ 97.303232][ T4707] udevd[4707]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 97.346528][ T4275] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.363871][ T4354] usb 3-1: USB disconnect, device number 5 [ 97.375030][ T4275] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.407395][ T4275] usb 4-1: config 0 interface 0 has no altsetting 0 [ 97.414580][ T4275] usb 4-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 97.425821][ T4275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.469331][ T4275] usb 4-1: config 0 descriptor?? [ 97.519325][ T4383] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 97.541643][ T4700] BTRFS info (device loop0): enabling ssd optimizations [ 97.570848][ T26] audit: type=1800 audit(1792365486.654:152): pid=4700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.94" name=0C dev="loop0" ino=263 res=0 errno=0 [ 97.579251][ T4700] FAULT_INJECTION: forcing a failure. [ 97.579251][ T4700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.619207][ T4700] CPU: 0 PID: 4700 Comm: syz.0.94 Not tainted syzkaller #0 [ 97.626446][ T4700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.636626][ T4700] Call Trace: [ 97.639918][ T4700] [ 97.642851][ T4700] dump_stack_lvl+0x188/0x250 [ 97.647536][ T4700] ? show_regs_print_info+0x20/0x20 [ 97.652732][ T4700] ? load_image+0x410/0x410 [ 97.657244][ T4700] ? __lock_acquire+0x7d40/0x7d40 [ 97.662272][ T4700] should_fail+0x383/0x4b0 [ 97.666696][ T4700] strncpy_from_user+0x32/0x350 [ 97.671569][ T4700] getname_flags+0xf2/0x4f0 [ 97.676093][ T4700] __x64_sys_link+0x5b/0x90 [ 97.680718][ T4700] do_syscall_64+0x4c/0xa0 [ 97.685159][ T4700] ? clear_bhb_loop+0x30/0x80 [ 97.689837][ T4700] ? clear_bhb_loop+0x30/0x80 [ 97.694672][ T4700] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.700649][ T4700] RIP: 0033:0x7fc6c1a66559 [ 97.705088][ T4700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.724707][ T4700] RSP: 002b:00007fc6bfcbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 97.733131][ T4700] RAX: ffffffffffffffda RBX: 00007fc6c1cedfa0 RCX: 00007fc6c1a66559 [ 97.741108][ T4700] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000200000000200 [ 97.749089][ T4700] RBP: 00007fc6bfcbe090 R08: 0000000000000000 R09: 0000000000000000 [ 97.757055][ T4700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.765022][ T4700] R13: 00007fc6c1cee038 R14: 00007fc6c1cedfa0 R15: 00007ffc07b141b8 [ 97.773008][ T4700] [ 97.789918][ T4383] usb 5-1: device not accepting address 8, error -71 [ 97.808788][ T4692] loop3: detected capacity change from 0 to 128 [ 97.841476][ T4692] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value [ 97.923997][ T4728] FAULT_INJECTION: forcing a failure. [ 97.923997][ T4728] name failslab, interval 1, probability 0, space 0, times 0 [ 97.955758][ T4728] CPU: 0 PID: 4728 Comm: syz.4.97 Not tainted syzkaller #0 [ 97.962995][ T4728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.973061][ T4728] Call Trace: [ 97.976350][ T4728] [ 97.979279][ T4728] dump_stack_lvl+0x188/0x250 [ 97.983965][ T4728] ? show_regs_print_info+0x20/0x20 [ 97.989162][ T4728] ? load_image+0x410/0x410 [ 97.993660][ T4728] ? __might_sleep+0xf0/0xf0 [ 97.998235][ T4728] ? __lock_acquire+0x7d40/0x7d40 [ 98.003254][ T4728] should_fail+0x383/0x4b0 [ 98.007664][ T4728] should_failslab+0x5/0x20 [ 98.012164][ T4728] slab_pre_alloc_hook+0x51/0xc0 [ 98.017094][ T4728] kmem_cache_alloc_trace+0x47/0x290 [ 98.022367][ T4728] ? __list_lru_init+0x535/0xac0 [ 98.027298][ T4728] __list_lru_init+0x535/0xac0 [ 98.032058][ T4728] alloc_super+0x787/0x970 [ 98.036484][ T4728] ? kill_litter_super+0xa0/0xa0 [ 98.041410][ T4728] sget_fc+0x2d4/0x6f0 [ 98.045463][ T4728] ? kill_litter_super+0xa0/0xa0 [ 98.050385][ T4728] ? mqueue_get_tree+0xe0/0xe0 [ 98.055159][ T4728] get_tree_nodev+0x26/0x160 [ 98.059740][ T4728] vfs_get_tree+0x88/0x270 [ 98.064154][ T4728] fc_mount+0x18/0xa0 [ 98.068161][ T4728] mq_init_ns+0x39d/0x510 [ 98.072485][ T4728] copy_ipcs+0x2ea/0x4b0 [ 98.076710][ T4728] create_new_namespaces+0x212/0x700 [ 98.081988][ T4728] unshare_nsproxy_namespaces+0x116/0x160 [ 98.087694][ T4728] ksys_unshare+0x4f6/0x8e0 [ 98.092190][ T4728] ? __lock_acquire+0x7d40/0x7d40 [ 98.097236][ T4728] ? sighand_ctor+0x40/0x40 [ 98.101729][ T4728] ? lock_chain_count+0x20/0x20 [ 98.106589][ T4728] ? syscall_enter_from_user_mode+0x21/0x70 [ 98.112504][ T4728] __x64_sys_unshare+0x34/0x40 [ 98.117258][ T4728] do_syscall_64+0x4c/0xa0 [ 98.121667][ T4728] ? clear_bhb_loop+0x30/0x80 [ 98.126334][ T4728] ? clear_bhb_loop+0x30/0x80 [ 98.130996][ T4728] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.136875][ T4728] RIP: 0033:0x7f4e9cfd7559 [ 98.141280][ T4728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.160957][ T4728] RSP: 002b:00007f4e9b22f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 98.169368][ T4728] RAX: ffffffffffffffda RBX: 00007f4e9d25efa0 RCX: 00007f4e9cfd7559 [ 98.177326][ T4728] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400 [ 98.185285][ T4728] RBP: 00007f4e9d06eab8 R08: 0000000000000000 R09: 0000000000000000 [ 98.193241][ T4728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.201200][ T4728] R13: 00007f4e9d25f038 R14: 00007f4e9d25efa0 R15: 00007ffc753a8808 [ 98.209173][ T4728] [ 98.234192][ T13] cdc_ncm 2-1:1.0: failed to get mac address [ 98.265643][ T4692] loop3: detected capacity change from 0 to 256 [ 98.293939][ T4730] netlink: 44 bytes leftover after parsing attributes in process `syz.2.98'. [ 98.347295][ T4692] exfat: Unknown parameter './cgroup.cpu/syz0' [ 98.736582][ T13] cdc_ncm 2-1:1.0: bind() failure [ 98.758102][ T13] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 98.769524][ T4744] FAULT_INJECTION: forcing a failure. [ 98.769524][ T4744] name failslab, interval 1, probability 0, space 0, times 0 [ 98.782237][ T4744] CPU: 0 PID: 4744 Comm: syz.2.99 Not tainted syzkaller #0 [ 98.789641][ T4744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.799725][ T4744] Call Trace: [ 98.803001][ T4744] [ 98.805923][ T4744] dump_stack_lvl+0x188/0x250 [ 98.810624][ T4744] ? show_regs_print_info+0x20/0x20 [ 98.816206][ T4744] ? load_image+0x410/0x410 [ 98.820725][ T4744] ? mark_lock+0x94/0x320 [ 98.825050][ T4744] should_fail+0x383/0x4b0 [ 98.829512][ T4744] should_failslab+0x5/0x20 [ 98.834114][ T4744] slab_pre_alloc_hook+0x51/0xc0 [ 98.839406][ T4744] ? fib6_add_1+0x98a/0x13c0 [ 98.844006][ T4744] kmem_cache_alloc+0x3d/0x280 [ 98.848861][ T4744] fib6_add_1+0x98a/0x13c0 [ 98.853536][ T4744] fib6_add+0x1e0/0x3ee0 [ 98.857779][ T4744] ? ip_fib_metrics_init+0x41d/0x6f0 [ 98.863098][ T4744] ? fib6_update_sernum_stub+0x110/0x110 [ 98.868719][ T4744] ? do_raw_spin_lock+0x128/0x2f0 [ 98.873728][ T4744] ? __rwlock_init+0x140/0x140 [ 98.878487][ T4744] ? ip6_route_add+0x71/0x130 [ 98.883322][ T4744] ip6_route_add+0x86/0x130 [ 98.887819][ T4744] ipv6_route_ioctl+0x3ab/0x500 [ 98.892780][ T4744] ? rt6_purge_dflt_routers+0xae0/0xae0 [ 98.898343][ T4744] ? __might_fault+0xb3/0x110 [ 98.903052][ T4744] ? _copy_from_user+0x111/0x170 [ 98.907984][ T4744] inet6_ioctl+0x207/0x280 [ 98.912393][ T4744] ? inet6_getname+0x670/0x670 [ 98.917279][ T4744] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 98.922858][ T4744] sock_do_ioctl+0xfb/0x320 [ 98.927521][ T4744] ? sock_show_fdinfo+0xb0/0xb0 [ 98.932377][ T4744] sock_ioctl+0x48a/0x700 [ 98.936697][ T4744] ? sock_poll+0x420/0x420 [ 98.941530][ T4744] ? bpf_lsm_file_ioctl+0x5/0x10 [ 98.946474][ T4744] ? security_file_ioctl+0x7c/0xa0 [ 98.951613][ T4744] ? sock_poll+0x420/0x420 [ 98.956030][ T4744] __se_sys_ioctl+0xfa/0x170 [ 98.960605][ T4744] do_syscall_64+0x4c/0xa0 [ 98.965127][ T4744] ? clear_bhb_loop+0x30/0x80 [ 98.969800][ T4744] ? clear_bhb_loop+0x30/0x80 [ 98.974638][ T4744] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.980529][ T4744] RIP: 0033:0x7f63d52e5559 [ 98.984962][ T4744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.005141][ T4744] RSP: 002b:00007f63d353d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.013732][ T4744] RAX: ffffffffffffffda RBX: 00007f63d556cfa0 RCX: 00007f63d52e5559 [ 99.021697][ T4744] RDX: 0000200000000300 RSI: 000000000000890b RDI: 0000000000000004 [ 99.029661][ T4744] RBP: 00007f63d537cab8 R08: 0000000000000000 R09: 0000000000000000 [ 99.037638][ T4744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.045602][ T4744] R13: 00007f63d556d038 R14: 00007f63d556cfa0 R15: 00007ffe457666f8 [ 99.053583][ T4744] [ 99.096368][ T13] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 99.126437][ T13] usbtest: probe of 2-1:1.1 failed with error -71 [ 99.157628][ T13] usb 2-1: USB disconnect, device number 3 [ 99.249057][ T4748] FAULT_INJECTION: forcing a failure. [ 99.249057][ T4748] name failslab, interval 1, probability 0, space 0, times 0 [ 99.279963][ T4748] CPU: 0 PID: 4748 Comm: syz.0.109 Not tainted syzkaller #0 [ 99.287258][ T4748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.297297][ T4748] Call Trace: [ 99.300559][ T4748] [ 99.303470][ T4748] dump_stack_lvl+0x188/0x250 [ 99.308137][ T4748] ? show_regs_print_info+0x20/0x20 [ 99.313319][ T4748] ? load_image+0x410/0x410 [ 99.317806][ T4748] ? __might_sleep+0xf0/0xf0 [ 99.322399][ T4748] ? __lock_acquire+0x7d40/0x7d40 [ 99.327414][ T4748] should_fail+0x383/0x4b0 [ 99.331846][ T4748] should_failslab+0x5/0x20 [ 99.336357][ T4748] slab_pre_alloc_hook+0x51/0xc0 [ 99.341427][ T4748] __kmalloc_node+0x6d/0x3a0 [ 99.346037][ T4748] ? kvmalloc_node+0x84/0x130 [ 99.350821][ T4748] kvmalloc_node+0x84/0x130 [ 99.355322][ T4748] __list_lru_init+0x4cb/0xac0 [ 99.360107][ T4748] alloc_super+0x787/0x970 [ 99.365129][ T4748] ? kill_litter_super+0xa0/0xa0 [ 99.370059][ T4748] sget_fc+0x2d4/0x6f0 [ 99.374115][ T4748] ? kill_litter_super+0xa0/0xa0 [ 99.379042][ T4748] ? mqueue_get_tree+0xe0/0xe0 [ 99.383809][ T4748] get_tree_nodev+0x26/0x160 [ 99.388386][ T4748] vfs_get_tree+0x88/0x270 [ 99.392787][ T4748] fc_mount+0x18/0xa0 [ 99.396750][ T4748] mq_init_ns+0x39d/0x510 [ 99.401079][ T4748] copy_ipcs+0x2ea/0x4b0 [ 99.405402][ T4748] create_new_namespaces+0x212/0x700 [ 99.410680][ T4748] unshare_nsproxy_namespaces+0x116/0x160 [ 99.416385][ T4748] ksys_unshare+0x4f6/0x8e0 [ 99.420873][ T4748] ? __lock_acquire+0x7d40/0x7d40 [ 99.426044][ T4748] ? sighand_ctor+0x40/0x40 [ 99.430656][ T4748] ? lock_chain_count+0x20/0x20 [ 99.435520][ T4748] ? syscall_enter_from_user_mode+0x21/0x70 [ 99.441407][ T4748] __x64_sys_unshare+0x34/0x40 [ 99.446184][ T4748] do_syscall_64+0x4c/0xa0 [ 99.450649][ T4748] ? clear_bhb_loop+0x30/0x80 [ 99.455311][ T4748] ? clear_bhb_loop+0x30/0x80 [ 99.459999][ T4748] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.465875][ T4748] RIP: 0033:0x7fc6c1a66559 [ 99.470439][ T4748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.490043][ T4748] RSP: 002b:00007fc6bfc9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 99.498613][ T4748] RAX: ffffffffffffffda RBX: 00007fc6c1cee090 RCX: 00007fc6c1a66559 [ 99.506674][ T4748] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400 [ 99.514644][ T4748] RBP: 00007fc6c1afdab8 R08: 0000000000000000 R09: 0000000000000000 [ 99.522609][ T4748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.530718][ T4748] R13: 00007fc6c1cee128 R14: 00007fc6c1cee090 R15: 00007ffc07b141b8 [ 99.538711][ T4748] [ 99.631792][ T4742] loop4: detected capacity change from 0 to 32768 [ 99.656367][ T4275] usbhid 4-1:0.0: can't add hid device: -71 [ 99.665766][ T4275] usbhid: probe of 4-1:0.0 failed with error -71 [ 99.685854][ T4275] usb 4-1: USB disconnect, device number 5 [ 99.726964][ T4742] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.100 (4742) [ 99.758409][ T4742] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 99.771385][ T4742] BTRFS info (device loop4): turning on async discard [ 99.786622][ T4742] BTRFS info (device loop4): using free space tree [ 99.800652][ T4742] BTRFS info (device loop4): has skinny extents [ 99.810725][ T4757] udevd[4757]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 99.844181][ T4742] BTRFS info (device loop4): enabling ssd optimizations [ 99.868775][ T26] audit: type=1800 audit(1792365488.954:153): pid=4742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.100" name=0C dev="loop4" ino=263 res=0 errno=0 [ 99.902590][ T4776] udevd[4776]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 99.960234][ T4782] FAULT_INJECTION: forcing a failure. [ 99.960234][ T4782] name failslab, interval 1, probability 0, space 0, times 0 [ 101.284306][ T4782] CPU: 0 PID: 4782 Comm: syz.0.112 Not tainted syzkaller #0 [ 101.291629][ T4782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.303551][ T4782] Call Trace: [ 101.306833][ T4782] [ 101.309771][ T4782] dump_stack_lvl+0x188/0x250 [ 101.314637][ T4782] ? show_regs_print_info+0x20/0x20 [ 101.320292][ T4782] ? load_image+0x410/0x410 [ 101.324890][ T4782] ? __might_sleep+0xf0/0xf0 [ 101.329574][ T4782] ? __lock_acquire+0x7d40/0x7d40 [ 101.334607][ T4782] should_fail+0x383/0x4b0 [ 101.339201][ T4782] should_failslab+0x5/0x20 [ 101.343756][ T4782] slab_pre_alloc_hook+0x51/0xc0 [ 101.348705][ T4782] kmem_cache_alloc_trace+0x47/0x290 [ 101.354169][ T4782] ? __list_lru_init+0x535/0xac0 [ 101.359220][ T4782] __list_lru_init+0x535/0xac0 [ 101.364094][ T4782] alloc_super+0x787/0x970 [ 101.368601][ T4782] ? kill_litter_super+0xa0/0xa0 [ 101.373977][ T4782] sget_fc+0x2d4/0x6f0 [ 101.378269][ T4782] ? kill_litter_super+0xa0/0xa0 [ 101.383894][ T4782] ? mqueue_get_tree+0xe0/0xe0 [ 101.388949][ T4782] get_tree_nodev+0x26/0x160 [ 101.393648][ T4782] vfs_get_tree+0x88/0x270 [ 101.398197][ T4782] fc_mount+0x18/0xa0 [ 101.402388][ T4782] mq_init_ns+0x39d/0x510 [ 101.406715][ T4782] copy_ipcs+0x2ea/0x4b0 [ 101.411435][ T4782] create_new_namespaces+0x212/0x700 [ 101.416726][ T4782] unshare_nsproxy_namespaces+0x116/0x160 [ 101.422463][ T4782] ksys_unshare+0x4f6/0x8e0 [ 101.426979][ T4782] ? __lock_acquire+0x7d40/0x7d40 [ 101.432127][ T4782] ? sighand_ctor+0x40/0x40 [ 101.436638][ T4782] ? lock_chain_count+0x20/0x20 [ 101.441514][ T4782] ? syscall_enter_from_user_mode+0x21/0x70 [ 101.447445][ T4782] __x64_sys_unshare+0x34/0x40 [ 101.452197][ T4782] do_syscall_64+0x4c/0xa0 [ 101.456618][ T4782] ? clear_bhb_loop+0x30/0x80 [ 101.461278][ T4782] ? clear_bhb_loop+0x30/0x80 [ 101.465953][ T4782] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.472199][ T4782] RIP: 0033:0x7fc6c1a66559 [ 101.476618][ T4782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.496338][ T4782] RSP: 002b:00007fc6bfcbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 101.505045][ T4782] RAX: ffffffffffffffda RBX: 00007fc6c1cedfa0 RCX: 00007fc6c1a66559 [ 101.513303][ T4782] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400 [ 101.522196][ T4782] RBP: 00007fc6c1afdab8 R08: 0000000000000000 R09: 0000000000000000 [ 101.530380][ T4782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.538560][ T4782] R13: 00007fc6c1cee038 R14: 00007fc6c1cedfa0 R15: 00007ffc07b141b8 [ 101.546551][ T4782] [ 101.563785][ T4785] EXT4-fs error: 59 callbacks suppressed [ 101.563804][ T4785] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.104: Detected aborted journal [ 101.736319][ T4785] EXT4-fs: 34 callbacks suppressed [ 101.736332][ T4785] EXT4-fs (sda1): Remounting filesystem read-only [ 101.749868][ T4787] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.106: Detected aborted journal [ 101.778679][ T4785] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.104: Detected aborted journal [ 101.806475][ T4787] EXT4-fs (sda1): Remounting filesystem read-only [ 101.827644][ T4787] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.106: Detected aborted journal [ 101.846883][ T4785] EXT4-fs (sda1): Remounting filesystem read-only [ 101.868940][ T4790] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.105: Detected aborted journal [ 101.887193][ T4787] EXT4-fs (sda1): Remounting filesystem read-only [ 101.901307][ T4791] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.101: Detected aborted journal [ 101.923261][ T4790] EXT4-fs (sda1): Remounting filesystem read-only [ 101.948425][ T4791] EXT4-fs (sda1): Remounting filesystem read-only [ 101.959026][ T4790] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.105: Detected aborted journal [ 101.995162][ T4794] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.010080][ T4795] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.107: Detected aborted journal [ 102.036308][ T4790] EXT4-fs (sda1): Remounting filesystem read-only [ 102.053164][ T26] audit: type=1326 audit(1792365491.134:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4790 comm="syz.3.105" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8780caf559 code=0x7ffc0000 [ 102.054533][ T4791] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.101: Detected aborted journal [ 102.077430][ T26] audit: type=1326 audit(1792365491.134:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4790 comm="syz.3.105" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8780caf559 code=0x7ffc0000 [ 102.119860][ T4795] EXT4-fs (sda1): Remounting filesystem read-only [ 102.133029][ T26] audit: type=1326 audit(1792365491.214:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4790 comm="syz.3.105" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8780caf559 code=0x7ffc0000 [ 102.139373][ T4795] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.107: Detected aborted journal [ 102.175548][ T26] audit: type=1326 audit(1792365491.214:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4790 comm="syz.3.105" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8780caf559 code=0x7ffc0000 [ 102.177390][ T4795] EXT4-fs (sda1): Remounting filesystem read-only [ 102.207366][ T26] audit: type=1326 audit(1792365491.214:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4790 comm="syz.3.105" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f8780caf559 code=0x7ffc0000 [ 102.242415][ T26] audit: type=1326 audit(1792365491.214:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4790 comm="syz.3.105" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8780caf559 code=0x7ffc0000 [ 102.272210][ T26] audit: type=1326 audit(1792365491.214:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4790 comm="syz.3.105" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8780caf559 code=0x7ffc0000 [ 102.302859][ T26] audit: type=1326 audit(1792365491.214:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4790 comm="syz.3.105" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8780caf559 code=0x7ffc0000 [ 102.321120][ T4791] EXT4-fs (sda1): Remounting filesystem read-only [ 102.337426][ T26] audit: type=1326 audit(1792365491.214:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4790 comm="syz.3.105" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8780caf559 code=0x7ffc0000 [ 102.378995][ T26] audit: type=1326 audit(1792365491.214:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4790 comm="syz.3.105" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8780c6fd8e code=0x7ffc0000 [ 102.416299][ T4372] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 102.626410][ T4372] usb 4-1: device descriptor read/64, error -71 [ 102.687093][ T4811] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 102.708242][ T4811] FAULT_INJECTION: forcing a failure. [ 102.708242][ T4811] name failslab, interval 1, probability 0, space 0, times 0 [ 102.723286][ T4811] CPU: 0 PID: 4811 Comm: syz.1.111 Not tainted syzkaller #0 [ 102.736908][ T4811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.748723][ T4811] Call Trace: [ 102.752122][ T4811] [ 102.755822][ T4811] dump_stack_lvl+0x188/0x250 [ 102.760607][ T4811] ? show_regs_print_info+0x20/0x20 [ 102.766224][ T4811] ? load_image+0x410/0x410 [ 102.771202][ T4811] ? __lock_acquire+0x7d40/0x7d40 [ 102.776470][ T4811] should_fail+0x383/0x4b0 [ 102.781292][ T4811] should_failslab+0x5/0x20 [ 102.786022][ T4811] slab_pre_alloc_hook+0x51/0xc0 [ 102.791210][ T4811] __kmalloc_node_track_caller+0x68/0x3a0 [ 102.797013][ T4811] ? sk_stream_alloc_skb+0x204/0xb50 [ 102.802306][ T4811] ? __alloc_skb+0xf4/0x750 [ 102.807000][ T4811] ? sk_stream_alloc_skb+0x204/0xb50 [ 102.812444][ T4811] __alloc_skb+0x22c/0x750 [ 102.817954][ T4811] sk_stream_alloc_skb+0x204/0xb50 [ 102.823479][ T4811] ? tcp_rate_check_app_limited+0x1a7/0x340 [ 102.829741][ T4811] tcp_sendmsg_locked+0xcbb/0x3330 [ 102.834970][ T4811] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 102.841163][ T4811] ? lock_chain_count+0x20/0x20 [ 102.846569][ T4811] ? tcp_free_fastopen_req+0x70/0x70 [ 102.852512][ T4811] tcp_sendmsg+0x2b/0x40 [ 102.857056][ T4811] ? inet_send_prepare+0x250/0x250 [ 102.863447][ T4811] ____sys_sendmsg+0x5be/0x8f0 [ 102.868392][ T4811] ? __sys_sendmsg_sock+0x30/0x30 [ 102.874578][ T4811] ? import_iovec+0x6f/0xa0 [ 102.879093][ T4811] ___sys_sendmsg+0x236/0x2e0 [ 102.883880][ T4811] ? __sys_sendmsg+0x290/0x290 [ 102.888787][ T4811] __se_sys_sendmsg+0x1b7/0x2a0 [ 102.893727][ T4811] ? __x64_sys_sendmsg+0x80/0x80 [ 102.899015][ T4811] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 102.905003][ T4811] ? lockdep_hardirqs_on+0x94/0x140 [ 102.910205][ T4811] do_syscall_64+0x4c/0xa0 [ 102.914635][ T4811] ? clear_bhb_loop+0x30/0x80 [ 102.919636][ T4811] ? clear_bhb_loop+0x30/0x80 [ 102.924315][ T4811] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.930299][ T4811] RIP: 0033:0x7f8d8acdf559 [ 102.935941][ T4811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.958167][ T4811] RSP: 002b:00007f8d88f37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.966831][ T4811] RAX: ffffffffffffffda RBX: 00007f8d8af66fa0 RCX: 00007f8d8acdf559 [ 102.976374][ T4811] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 102.986530][ T4811] RBP: 00007f8d88f37090 R08: 0000000000000000 R09: 0000000000000000 [ 102.998321][ T4811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.006290][ T4811] R13: 00007f8d8af67038 R14: 00007f8d8af66fa0 R15: 00007ffe172535b8 [ 103.014624][ T4811] [ 103.145252][ T4816] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 103.199735][ T4818] FAULT_INJECTION: forcing a failure. [ 103.199735][ T4818] name failslab, interval 1, probability 0, space 0, times 0 [ 103.213605][ T4818] CPU: 0 PID: 4818 Comm: syz.1.113 Not tainted syzkaller #0 [ 103.220886][ T4818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.230960][ T4818] Call Trace: [ 103.234237][ T4818] [ 103.237168][ T4818] dump_stack_lvl+0x188/0x250 [ 103.241963][ T4818] ? show_regs_print_info+0x20/0x20 [ 103.247310][ T4818] ? load_image+0x410/0x410 [ 103.252261][ T4818] ? rcu_lock_acquire+0x30/0x30 [ 103.257463][ T4818] should_fail+0x383/0x4b0 [ 103.261889][ T4818] should_failslab+0x5/0x20 [ 103.266562][ T4818] slab_pre_alloc_hook+0x51/0xc0 [ 103.271515][ T4818] ? fib6_add_1+0x9f2/0x13c0 [ 103.276103][ T4818] kmem_cache_alloc+0x3d/0x280 [ 103.280869][ T4818] fib6_add_1+0x9f2/0x13c0 [ 103.285354][ T4818] fib6_add+0x1e0/0x3ee0 [ 103.289619][ T4818] ? ip_fib_metrics_init+0x41d/0x6f0 [ 103.295267][ T4818] ? fib6_update_sernum_stub+0x110/0x110 [ 103.300913][ T4818] ? do_raw_spin_lock+0x128/0x2f0 [ 103.305935][ T4818] ? __rwlock_init+0x140/0x140 [ 103.310815][ T4818] ? ip6_route_add+0x71/0x130 [ 103.315497][ T4818] ip6_route_add+0x86/0x130 [ 103.319992][ T4818] ipv6_route_ioctl+0x3ab/0x500 [ 103.324855][ T4818] ? rt6_purge_dflt_routers+0xae0/0xae0 [ 103.330398][ T4818] ? __might_fault+0xb3/0x110 [ 103.335079][ T4818] ? _copy_from_user+0x111/0x170 [ 103.340030][ T4818] inet6_ioctl+0x207/0x280 [ 103.344442][ T4818] ? inet6_getname+0x670/0x670 [ 103.349192][ T4818] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 103.354698][ T4818] sock_do_ioctl+0xfb/0x320 [ 103.359221][ T4818] ? sock_show_fdinfo+0xb0/0xb0 [ 103.364081][ T4818] sock_ioctl+0x48a/0x700 [ 103.368419][ T4818] ? sock_poll+0x420/0x420 [ 103.372851][ T4818] ? bpf_lsm_file_ioctl+0x5/0x10 [ 103.377887][ T4818] ? security_file_ioctl+0x7c/0xa0 [ 103.383106][ T4818] ? sock_poll+0x420/0x420 [ 103.387511][ T4818] __se_sys_ioctl+0xfa/0x170 [ 103.392093][ T4818] do_syscall_64+0x4c/0xa0 [ 103.396498][ T4818] ? clear_bhb_loop+0x30/0x80 [ 103.401164][ T4818] ? clear_bhb_loop+0x30/0x80 [ 103.405823][ T4818] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.411709][ T4818] RIP: 0033:0x7f8d8acdf559 [ 103.416121][ T4818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.435811][ T4818] RSP: 002b:00007f8d88f37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.444226][ T4818] RAX: ffffffffffffffda RBX: 00007f8d8af66fa0 RCX: 00007f8d8acdf559 [ 103.452194][ T4818] RDX: 0000200000000300 RSI: 000000000000890b RDI: 0000000000000004 [ 103.460479][ T4818] RBP: 00007f8d8ad76ab8 R08: 0000000000000000 R09: 0000000000000000 [ 103.468445][ T4818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.476453][ T4818] R13: 00007f8d8af67038 R14: 00007f8d8af66fa0 R15: 00007ffe172535b8 [ 103.484605][ T4818] [ 103.566283][ T4372] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 103.574030][ T4375] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 103.634911][ T4815] loop2: detected capacity change from 0 to 32768 [ 103.721260][ T4815] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.114 (4815) [ 103.743430][ T4815] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 103.753899][ T4815] BTRFS info (device loop2): turning on async discard [ 103.761318][ T4815] BTRFS info (device loop2): using free space tree [ 103.768824][ T4372] usb 4-1: device descriptor read/64, error -71 [ 103.775385][ T4815] BTRFS info (device loop2): has skinny extents [ 103.797436][ T4834] udevd[4834]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 103.822661][ T4815] BTRFS info (device loop2): enabling ssd optimizations [ 103.896674][ T4372] usb usb4-port1: attempt power cycle [ 103.908634][ T4844] udevd[4844]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 103.937167][ T4375] usb 1-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 103.965637][ T4375] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.986517][ T4376] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 103.994593][ T4375] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 104.011484][ T4375] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 104.023908][ T4375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.043827][ T4375] usb 1-1: config 0 descriptor?? [ 104.095055][ T4375] usb 1-1: Found UVC 9.00 device (046d:0825) [ 104.197219][ T4846] FAULT_INJECTION: forcing a failure. [ 104.197219][ T4846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.226339][ T4846] CPU: 0 PID: 4846 Comm: syz.4.119 Not tainted syzkaller #0 [ 104.234887][ T4846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.244949][ T4846] Call Trace: [ 104.248407][ T4846] [ 104.251337][ T4846] dump_stack_lvl+0x188/0x250 [ 104.256018][ T4846] ? show_regs_print_info+0x20/0x20 [ 104.261213][ T4846] ? load_image+0x410/0x410 [ 104.265717][ T4846] ? __lock_acquire+0x7d40/0x7d40 [ 104.270740][ T4846] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 104.276377][ T4846] should_fail+0x383/0x4b0 [ 104.280801][ T4846] _copy_from_user+0x2e/0x170 [ 104.285990][ T4846] media_device_ioctl+0x247/0x490 [ 104.291056][ T4846] ? __media_device_usb_init+0x1f0/0x1f0 [ 104.296719][ T4846] ? __media_device_usb_init+0x1f0/0x1f0 [ 104.302352][ T4846] ? media_ioctl+0xf8/0x110 [ 104.306867][ T4846] ? media_poll+0x110/0x110 [ 104.311762][ T4846] __se_sys_ioctl+0xfa/0x170 [ 104.316370][ T4846] do_syscall_64+0x4c/0xa0 [ 104.320881][ T4846] ? clear_bhb_loop+0x30/0x80 [ 104.325566][ T4846] ? clear_bhb_loop+0x30/0x80 [ 104.330392][ T4846] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.336395][ T4846] RIP: 0033:0x7f4e9cfd7559 [ 104.341030][ T4846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.361866][ T4846] RSP: 002b:00007f4e9b22f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.370858][ T4846] RAX: ffffffffffffffda RBX: 00007f4e9d25efa0 RCX: 00007f4e9cfd7559 [ 104.379618][ T4846] RDX: 0000200000000280 RSI: 00000000c0487c04 RDI: 0000000000000003 [ 104.387785][ T4846] RBP: 00007f4e9b22f090 R08: 0000000000000000 R09: 0000000000000000 [ 104.396058][ T4846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.404123][ T4846] R13: 00007f4e9d25f038 R14: 00007f4e9d25efa0 R15: 00007ffc753a8808 [ 104.412555][ T4846] [ 104.486388][ T4372] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 105.901759][ T4851] sched: RT throttling activated [ 105.936321][ T4372] usb 4-1: device descriptor read/8, error -71 [ 106.097472][ T4375] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 106.132588][ T4375] uvcvideo 1-1:0.1: Failed to query (129) UVC probe control : -71 (exp. 48). [ 106.142821][ T4376] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 106.164549][ T4376] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 106.173418][ T4854] FAULT_INJECTION: forcing a failure. [ 106.173418][ T4854] name failslab, interval 1, probability 0, space 0, times 0 [ 106.192024][ T4375] uvcvideo 1-1:0.1: Failed to initialize the device (-5). [ 106.214951][ T4376] usb 2-1: Product: syz [ 106.224084][ T4376] usb 2-1: config 0 descriptor?? [ 106.230172][ T4854] CPU: 0 PID: 4854 Comm: syz.3.122 Not tainted syzkaller #0 [ 106.237493][ T4854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.247763][ T4854] Call Trace: [ 106.251034][ T4854] [ 106.253953][ T4854] dump_stack_lvl+0x188/0x250 [ 106.258657][ T4854] ? show_regs_print_info+0x20/0x20 [ 106.264455][ T4854] ? load_image+0x410/0x410 [ 106.269326][ T4854] ? __might_sleep+0xf0/0xf0 [ 106.274104][ T4854] ? __lock_acquire+0x7d40/0x7d40 [ 106.279210][ T4854] should_fail+0x383/0x4b0 [ 106.283640][ T4854] should_failslab+0x5/0x20 [ 106.288148][ T4854] slab_pre_alloc_hook+0x51/0xc0 [ 106.293201][ T4854] kmem_cache_alloc_trace+0x47/0x290 [ 106.298581][ T4854] ? __list_lru_init+0x535/0xac0 [ 106.303511][ T4854] __list_lru_init+0x535/0xac0 [ 106.308358][ T4854] alloc_super+0x787/0x970 [ 106.312759][ T4854] ? kill_litter_super+0xa0/0xa0 [ 106.317682][ T4854] sget_fc+0x2d4/0x6f0 [ 106.321756][ T4854] ? kill_litter_super+0xa0/0xa0 [ 106.326695][ T4854] ? mqueue_get_tree+0xe0/0xe0 [ 106.331486][ T4854] get_tree_nodev+0x26/0x160 [ 106.336066][ T4854] vfs_get_tree+0x88/0x270 [ 106.340484][ T4854] fc_mount+0x18/0xa0 [ 106.344494][ T4854] mq_init_ns+0x39d/0x510 [ 106.348830][ T4854] copy_ipcs+0x2ea/0x4b0 [ 106.353148][ T4854] create_new_namespaces+0x212/0x700 [ 106.358462][ T4854] unshare_nsproxy_namespaces+0x116/0x160 [ 106.364169][ T4854] ksys_unshare+0x4f6/0x8e0 [ 106.368674][ T4854] ? __lock_acquire+0x7d40/0x7d40 [ 106.373686][ T4854] ? sighand_ctor+0x40/0x40 [ 106.378203][ T4854] ? lock_chain_count+0x20/0x20 [ 106.383051][ T4854] ? syscall_enter_from_user_mode+0x21/0x70 [ 106.388940][ T4854] __x64_sys_unshare+0x34/0x40 [ 106.393714][ T4854] do_syscall_64+0x4c/0xa0 [ 106.398136][ T4854] ? clear_bhb_loop+0x30/0x80 [ 106.402802][ T4854] ? clear_bhb_loop+0x30/0x80 [ 106.407463][ T4854] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.413340][ T4854] RIP: 0033:0x7f8780caf559 [ 106.417740][ T4854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.437334][ T4854] RSP: 002b:00007f877ef07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 106.445760][ T4854] RAX: ffffffffffffffda RBX: 00007f8780f36fa0 RCX: 00007f8780caf559 [ 106.453777][ T4854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400 [ 106.461739][ T4854] RBP: 00007f8780d46ab8 R08: 0000000000000000 R09: 0000000000000000 [ 106.469855][ T4854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.477821][ T4854] R13: 00007f8780f37038 R14: 00007f8780f36fa0 R15: 00007ffebc7f75d8 [ 106.485816][ T4854] [ 106.496336][ T4375] usb 1-1: USB disconnect, device number 7 [ 106.554866][ T4376] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 106.572828][ T4858] EXT4-fs error: 59 callbacks suppressed [ 106.572838][ T4858] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.124: Detected aborted journal [ 106.591796][ T4376] usb 2-1: Detected FT232H [ 106.599524][ T4859] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.125: Detected aborted journal [ 106.643457][ T4858] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.124: Detected aborted journal [ 106.659832][ T4860] rxe_eth0 speed is unknown, defaulting to 1000 [ 106.713594][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 106.716752][ T4376] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 106.732840][ T4859] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.125: Detected aborted journal [ 106.761491][ T4865] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.126: Detected aborted journal [ 106.786430][ T4376] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 106.824229][ T4376] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 106.831209][ T4859] EXT4-fs: 54 callbacks suppressed [ 106.831224][ T4859] EXT4-fs (sda1): Remounting filesystem read-only [ 106.843615][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 106.846379][ T4865] EXT4-fs (sda1): Remounting filesystem read-only [ 106.861844][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 106.871989][ T4376] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 106.874188][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 106.896793][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 106.898286][ T4865] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.126: Detected aborted journal [ 106.903526][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 106.932210][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 106.942505][ T4376] usb 2-1: USB disconnect, device number 4 [ 106.965322][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 106.969932][ T4376] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 106.973204][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 106.994706][ T4865] EXT4-fs (sda1): Remounting filesystem read-only [ 106.995379][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 107.006445][ T4865] EXT4-fs (sda1): Remounting filesystem read-only [ 107.032547][ T4376] ftdi_sio 2-1:0.0: device disconnected [ 107.133464][ T4856] loop4: detected capacity change from 0 to 40427 [ 107.242369][ T4856] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 107.256112][ T4856] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 107.284968][ T4856] F2FS-fs (loop4): build fault injection attr: rate: 64, type: 0x1ffff [ 107.312552][ T4856] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x5 [ 107.336267][ T4273] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 107.376293][ T4856] F2FS-fs (loop4): invalid crc value [ 107.415364][ T4856] F2FS-fs (loop4): Found nat_bits in checkpoint [ 107.495771][ T4856] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 107.517817][ T4866] loop1: detected capacity change from 0 to 32768 [ 107.525155][ T4883] FAULT_INJECTION: forcing a failure. [ 107.525155][ T4883] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 107.540129][ T4273] usb 1-1: device descriptor read/64, error -71 [ 107.550563][ T4856] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 107.580216][ T4883] CPU: 0 PID: 4883 Comm: syz.2.140 Not tainted syzkaller #0 [ 107.587534][ T4883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.598978][ T4883] Call Trace: [ 107.602927][ T4883] [ 107.605862][ T4883] dump_stack_lvl+0x188/0x250 [ 107.610649][ T4883] ? show_regs_print_info+0x20/0x20 [ 107.616259][ T4883] ? load_image+0x410/0x410 [ 107.621051][ T4883] ? __lock_acquire+0x7d40/0x7d40 [ 107.626094][ T4883] should_fail+0x383/0x4b0 [ 107.630683][ T4883] prepare_alloc_pages+0x1e3/0x5b0 [ 107.635866][ T4883] __alloc_pages+0x11b/0x480 [ 107.640989][ T4883] ? zone_statistics+0x170/0x170 [ 107.645948][ T4883] ? mark_lock+0x94/0x320 [ 107.653680][ T4883] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 107.659787][ T4883] ? __lock_acquire+0x7d40/0x7d40 [ 107.665096][ T4883] ? alloc_pages+0x452/0x560 [ 107.669889][ T4883] new_slab+0xc0/0x4b0 [ 107.674070][ T4883] ___slab_alloc+0x807/0xdd0 [ 107.678781][ T4883] ? __list_lru_init+0x535/0xac0 [ 107.684181][ T4883] kmem_cache_alloc_trace+0xf9/0x290 [ 107.689513][ T4883] ? __list_lru_init+0x535/0xac0 [ 107.694540][ T4883] __list_lru_init+0x535/0xac0 [ 107.699523][ T4883] alloc_super+0x787/0x970 [ 107.704266][ T4883] ? kill_litter_super+0xa0/0xa0 [ 107.709733][ T4883] sget_fc+0x2d4/0x6f0 [ 107.713814][ T4883] ? kill_litter_super+0xa0/0xa0 [ 107.718934][ T4883] ? mqueue_get_tree+0xe0/0xe0 [ 107.723790][ T4883] get_tree_nodev+0x26/0x160 [ 107.729653][ T4883] vfs_get_tree+0x88/0x270 [ 107.734292][ T4883] fc_mount+0x18/0xa0 [ 107.739673][ T4883] mq_init_ns+0x39d/0x510 [ 107.744763][ T4883] copy_ipcs+0x2ea/0x4b0 [ 107.750676][ T4883] create_new_namespaces+0x212/0x700 [ 107.756203][ T4883] unshare_nsproxy_namespaces+0x116/0x160 [ 107.762266][ T4883] ksys_unshare+0x4f6/0x8e0 [ 107.766767][ T4883] ? __lock_acquire+0x7d40/0x7d40 [ 107.772306][ T4883] ? sighand_ctor+0x40/0x40 [ 107.776818][ T4883] ? lock_chain_count+0x20/0x20 [ 107.781680][ T4883] ? syscall_enter_from_user_mode+0x21/0x70 [ 107.787587][ T4883] __x64_sys_unshare+0x34/0x40 [ 107.792774][ T4883] do_syscall_64+0x4c/0xa0 [ 107.797187][ T4883] ? clear_bhb_loop+0x30/0x80 [ 107.802051][ T4883] ? clear_bhb_loop+0x30/0x80 [ 107.806844][ T4883] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.813094][ T4883] RIP: 0033:0x7f63d52e5559 [ 107.818321][ T4883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.838063][ T4883] RSP: 002b:00007f63d353d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 107.846501][ T4883] RAX: ffffffffffffffda RBX: 00007f63d556cfa0 RCX: 00007f63d52e5559 [ 107.854499][ T4883] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400 [ 107.862468][ T4883] RBP: 00007f63d537cab8 R08: 0000000000000000 R09: 0000000000000000 [ 107.870431][ T4883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.878438][ T4883] R13: 00007f63d556d038 R14: 00007f63d556cfa0 R15: 00007ffe457666f8 [ 107.886713][ T4883] [ 107.920010][ T4866] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.126 (4866) [ 107.958109][ T4866] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 107.970316][ T4888] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x136/0x8e0 [ 107.991654][ T4866] BTRFS info (device loop1): turning on async discard [ 108.001231][ T4889] udevd[4889]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 108.015351][ T4866] BTRFS info (device loop1): using free space tree [ 108.036261][ T4273] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 108.043932][ T4866] BTRFS info (device loop1): has skinny extents [ 108.143483][ T4893] udevd[4893]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 108.166903][ T4192] attempt to access beyond end of device [ 108.166903][ T4192] loop4: rw=524288, want=45072, limit=40427 [ 108.195487][ T4192] attempt to access beyond end of device [ 108.195487][ T4192] loop4: rw=0, want=45072, limit=40427 [ 108.228006][ T4866] BTRFS info (device loop1): enabling ssd optimizations [ 108.246394][ T4273] usb 1-1: device descriptor read/64, error -71 [ 108.311992][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 108.312009][ T26] audit: type=1800 audit(1792365497.394:182): pid=4866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.126" name=0C dev="loop1" ino=263 res=0 errno=0 [ 108.366496][ T4273] usb usb1-port1: attempt power cycle [ 108.367853][ T9] attempt to access beyond end of device [ 108.367853][ T9] loop4: rw=2049, want=40992, limit=40427 [ 108.536877][ T4886] loop3: detected capacity change from 0 to 32768 [ 108.754496][ T4886] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.130 (4886) [ 108.776589][ T4273] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 108.825508][ T4175] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by udevd (4175) [ 108.866884][ T4273] usb 1-1: device descriptor read/8, error -71 [ 108.889052][ T4910] udevd[4910]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 108.902009][ T4914] input: syz1 as /devices/virtual/input/input9 [ 108.940725][ T4914] input: failed to attach handler leds to device input9, error: -6 [ 109.146256][ T4273] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 109.174196][ T26] audit: type=1326 audit(1792365498.254:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.1.132" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8acdf559 code=0x7ffc0000 [ 109.209284][ T26] audit: type=1326 audit(1792365498.254:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.1.132" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8acdf559 code=0x7ffc0000 [ 109.240467][ T26] audit: type=1326 audit(1792365498.254:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.1.132" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8acdf559 code=0x7ffc0000 [ 109.253886][ T4273] usb 1-1: device descriptor read/8, error -71 [ 109.270640][ T26] audit: type=1326 audit(1792365498.254:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.1.132" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f8d8acdf559 code=0x7ffc0000 [ 109.322839][ T26] audit: type=1326 audit(1792365498.254:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.1.132" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8acdf559 code=0x7ffc0000 [ 109.345413][ T4927] ip_tables: iptables: counters copy to user failed while replacing table [ 109.355248][ T26] audit: type=1326 audit(1792365498.254:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.1.132" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8acdf559 code=0x7ffc0000 [ 109.436390][ T4273] usb usb1-port1: unable to enumerate USB device [ 109.463539][ T26] audit: type=1326 audit(1792365498.254:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.1.132" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8acdf559 code=0x7ffc0000 [ 109.561421][ T26] audit: type=1326 audit(1792365498.254:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.1.132" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8d8ac9fd8e code=0x7ffc0000 [ 109.626219][ T26] audit: type=1326 audit(1792365498.254:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.1.132" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d8acdf1eb code=0x7ffc0000 [ 110.927995][ T4371] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 111.032758][ T151] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.136257][ T4371] usb 2-1: device descriptor read/64, error -71 [ 111.152882][ T151] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.247743][ T151] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.319492][ T151] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.387506][ T4947] netlink: 72 bytes leftover after parsing attributes in process `syz.2.143'. [ 111.416297][ T4371] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 111.616388][ T4371] usb 2-1: device descriptor read/64, error -71 [ 111.625637][ T3851] EXT4-fs error: 80 callbacks suppressed [ 111.625656][ T3851] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #116: comm dhcpcd: reading directory lblock 0 [ 111.665779][ T4952] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #265: comm dhcpcd: reading directory lblock 0 [ 111.696508][ T4953] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #265: comm dhcpcd: reading directory lblock 0 [ 111.735792][ T4950] loop2: detected capacity change from 0 to 4096 [ 111.746419][ T4371] usb usb2-port1: attempt power cycle [ 111.789290][ T3851] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #116: comm dhcpcd: reading directory lblock 0 [ 111.812932][ T4954] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #265: comm dhcpcd: reading directory lblock 0 [ 111.845094][ T4956] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #265: comm dhcpcd: reading directory lblock 0 [ 111.857546][ T4955] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1265: comm syz-executor: reading directory lblock 0 [ 111.989851][ T4957] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.028671][ T3851] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #116: comm dhcpcd: reading directory lblock 0 [ 112.054111][ T4944] loop0: detected capacity change from 0 to 32768 [ 112.097515][ T4958] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #265: comm dhcpcd: reading directory lblock 0 [ 112.128680][ T4959] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #265: comm dhcpcd: reading directory lblock 0 [ 112.156323][ T4371] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 112.217124][ T4944] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 112.263220][ T4944] BTRFS info (device loop0): turning on async discard [ 112.288845][ T4944] BTRFS info (device loop0): using free space tree [ 112.320372][ T4944] BTRFS info (device loop0): has skinny extents [ 112.352519][ T4965] udevd[4965]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 112.416333][ T4371] usb 2-1: device not accepting address 7, error -71 [ 112.466591][ T4173] EXT4-fs: 54 callbacks suppressed [ 112.466609][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 112.481946][ T4980] EXT4-fs (sda1): Remounting filesystem read-only [ 112.508778][ T4980] EXT4-fs (sda1): Remounting filesystem read-only [ 112.514527][ T4982] udevd[4982]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 112.533619][ T4985] EXT4-fs (sda1): Remounting filesystem read-only [ 112.549053][ T4980] EXT4-fs (sda1): Remounting filesystem read-only [ 112.586972][ T4985] EXT4-fs (sda1): Remounting filesystem read-only [ 112.602452][ T4980] EXT4-fs (sda1): Remounting filesystem read-only [ 112.616670][ T4944] BTRFS info (device loop0): enabling ssd optimizations [ 112.636078][ T4943] EXT4-fs (sda1): Remounting filesystem read-only [ 112.643046][ T4980] EXT4-fs (sda1): Remounting filesystem read-only [ 112.655953][ T4943] EXT4-fs (sda1): Remounting filesystem read-only [ 112.813368][ T151] device hsr_slave_0 left promiscuous mode [ 112.820382][ T151] device hsr_slave_1 left promiscuous mode [ 112.849377][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.861727][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.873106][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.886443][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.895486][ T151] device bridge_slave_1 left promiscuous mode [ 112.904610][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.942925][ T151] device bridge_slave_0 left promiscuous mode [ 112.951836][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.133390][ T151] device veth1_macvtap left promiscuous mode [ 113.141066][ T151] device veth0_macvtap left promiscuous mode [ 113.152820][ T151] device veth1_vlan left promiscuous mode [ 113.161124][ T151] device veth0_vlan left promiscuous mode [ 113.239625][ T5009] FAULT_INJECTION: forcing a failure. [ 113.239625][ T5009] name failslab, interval 1, probability 0, space 0, times 0 [ 113.289529][ T5009] CPU: 0 PID: 5009 Comm: syz.1.148 Not tainted syzkaller #0 [ 113.296863][ T5009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.307036][ T5009] Call Trace: [ 113.310313][ T5009] [ 113.313230][ T5009] dump_stack_lvl+0x188/0x250 [ 113.317896][ T5009] ? show_regs_print_info+0x20/0x20 [ 113.323090][ T5009] ? load_image+0x410/0x410 [ 113.327580][ T5009] ? __might_sleep+0xf0/0xf0 [ 113.332154][ T5009] ? __lock_acquire+0x7d40/0x7d40 [ 113.337167][ T5009] should_fail+0x383/0x4b0 [ 113.341576][ T5009] should_failslab+0x5/0x20 [ 113.346076][ T5009] slab_pre_alloc_hook+0x51/0xc0 [ 113.351112][ T5009] kmem_cache_alloc_trace+0x47/0x290 [ 113.356419][ T5009] ? __list_lru_init+0x535/0xac0 [ 113.361384][ T5009] __list_lru_init+0x535/0xac0 [ 113.366189][ T5009] alloc_super+0x787/0x970 [ 113.370617][ T5009] ? kill_litter_super+0xa0/0xa0 [ 113.375565][ T5009] sget_fc+0x2d4/0x6f0 [ 113.379721][ T5009] ? kill_litter_super+0xa0/0xa0 [ 113.384657][ T5009] ? mqueue_get_tree+0xe0/0xe0 [ 113.389556][ T5009] get_tree_nodev+0x26/0x160 [ 113.394502][ T5009] vfs_get_tree+0x88/0x270 [ 113.398928][ T5009] fc_mount+0x18/0xa0 [ 113.402923][ T5009] mq_init_ns+0x39d/0x510 [ 113.407660][ T5009] copy_ipcs+0x2ea/0x4b0 [ 113.412382][ T5009] create_new_namespaces+0x212/0x700 [ 113.417785][ T5009] unshare_nsproxy_namespaces+0x116/0x160 [ 113.423614][ T5009] ksys_unshare+0x4f6/0x8e0 [ 113.428670][ T5009] ? __lock_acquire+0x7d40/0x7d40 [ 113.433882][ T5009] ? sighand_ctor+0x40/0x40 [ 113.438555][ T5009] ? lock_chain_count+0x20/0x20 [ 113.443404][ T5009] ? syscall_enter_from_user_mode+0x21/0x70 [ 113.449301][ T5009] __x64_sys_unshare+0x34/0x40 [ 113.454155][ T5009] do_syscall_64+0x4c/0xa0 [ 113.458584][ T5009] ? clear_bhb_loop+0x30/0x80 [ 113.463257][ T5009] ? clear_bhb_loop+0x30/0x80 [ 113.468477][ T5009] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.474376][ T5009] RIP: 0033:0x7f8d8acdf559 [ 113.478806][ T5009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.498502][ T5009] RSP: 002b:00007f8d88f16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 113.506931][ T5009] RAX: ffffffffffffffda RBX: 00007f8d8af67090 RCX: 00007f8d8acdf559 [ 113.514969][ T5009] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400 [ 113.523052][ T5009] RBP: 00007f8d8ad76ab8 R08: 0000000000000000 R09: 0000000000000000 [ 113.531046][ T5009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.539039][ T5009] R13: 00007f8d8af67128 R14: 00007f8d8af67090 R15: 00007ffe172535b8 [ 113.547045][ T5009] [ 113.591798][ T5008] loop3: detected capacity change from 0 to 4096 [ 113.721046][ T5008] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 113.889163][ T4371] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 113.904545][ T151] team0 (unregistering): Port device team_slave_1 removed [ 113.918699][ T151] team0 (unregistering): Port device team_slave_0 removed [ 113.980143][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.999619][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.071499][ T151] bond0 (unregistering): Released all slaves [ 114.256468][ T4371] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.267768][ T4371] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.278158][ T4371] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.291544][ T4371] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.301142][ T4371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.312637][ T4371] usb 1-1: config 0 descriptor?? [ 114.809278][ T4371] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 114.858441][ T5025] FAULT_INJECTION: forcing a failure. [ 114.858441][ T5025] name failslab, interval 1, probability 0, space 0, times 0 [ 116.234427][ T5025] CPU: 0 PID: 5025 Comm: syz.3.151 Not tainted syzkaller #0 [ 116.242151][ T5025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.252207][ T5025] Call Trace: [ 116.255474][ T5025] [ 116.258404][ T5025] dump_stack_lvl+0x188/0x250 [ 116.263091][ T5025] ? show_regs_print_info+0x20/0x20 [ 116.268371][ T5025] ? load_image+0x410/0x410 [ 116.272899][ T5025] ? __lock_acquire+0x7d40/0x7d40 [ 116.278303][ T5025] should_fail+0x383/0x4b0 [ 116.282850][ T5025] should_failslab+0x5/0x20 [ 116.287359][ T5025] slab_pre_alloc_hook+0x51/0xc0 [ 116.292287][ T5025] kmem_cache_alloc_trace+0x47/0x290 [ 116.297561][ T5025] ? drm_atomic_state_alloc+0xa4/0xf0 [ 116.302920][ T5025] drm_atomic_state_alloc+0xa4/0xf0 [ 116.308124][ T5025] drm_mode_atomic_ioctl+0x45f/0x22e0 [ 116.313491][ T5025] ? verify_lock_unused+0x140/0x140 [ 116.318826][ T5025] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 116.324827][ T5025] ? drm_atomic_set_property+0x24e0/0x24e0 [ 116.330636][ T5025] ? __rwlock_init+0x140/0x140 [ 116.335411][ T5025] ? drm_dp_vsc_sdp_log+0x630/0x630 [ 116.340611][ T5025] ? do_raw_spin_unlock+0x11d/0x230 [ 116.345819][ T5025] ? _raw_spin_unlock+0x24/0x40 [ 116.350665][ T5025] ? drm_is_current_master+0x198/0x200 [ 116.356333][ T5025] ? drm_atomic_set_property+0x24e0/0x24e0 [ 116.362153][ T5025] drm_ioctl_kernel+0x35f/0x4d0 [ 116.367145][ T5025] ? drm_dev_dbg+0x1e0/0x1e0 [ 116.371717][ T5025] ? drm_atomic_set_property+0x24e0/0x24e0 [ 116.377615][ T5025] ? drm_ioctl_permit+0x1f0/0x1f0 [ 116.382918][ T5025] ? __might_fault+0xb3/0x110 [ 116.387722][ T5025] ? _copy_from_user+0x111/0x170 [ 116.392663][ T5025] drm_ioctl+0x65b/0xa30 [ 116.396907][ T5025] ? drm_atomic_set_property+0x24e0/0x24e0 [ 116.402754][ T5025] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 116.408629][ T5025] ? bpf_lsm_file_ioctl+0x5/0x10 [ 116.413646][ T5025] ? security_file_ioctl+0x7c/0xa0 [ 116.418837][ T5025] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 116.423846][ T5025] __se_sys_ioctl+0xfa/0x170 [ 116.428514][ T5025] do_syscall_64+0x4c/0xa0 [ 116.432941][ T5025] ? clear_bhb_loop+0x30/0x80 [ 116.437785][ T5025] ? clear_bhb_loop+0x30/0x80 [ 116.442462][ T5025] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.448347][ T5025] RIP: 0033:0x7f8780caf559 [ 116.452749][ T5025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.472542][ T5025] RSP: 002b:00007f877ef07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.481074][ T5025] RAX: ffffffffffffffda RBX: 00007f8780f36fa0 RCX: 00007f8780caf559 [ 116.489151][ T5025] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 000000000000000e [ 116.497121][ T5025] RBP: 00007f877ef07090 R08: 0000000000000000 R09: 0000000000000000 [ 116.505088][ T5025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.513167][ T5025] R13: 00007f8780f37038 R14: 00007f8780f36fa0 R15: 00007ffebc7f75d8 [ 116.521140][ T5025] [ 116.541246][ T4371] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 116.562823][ T4371] usb 1-1: USB disconnect, device number 12 [ 116.598016][ T5032] udevd[5032]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 116.664899][ T5011] EXT4-fs error: 95 callbacks suppressed [ 116.664913][ T5011] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.147: Detected aborted journal [ 116.682238][ T5011] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.147: Detected aborted journal [ 116.694971][ T5011] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.147: Detected aborted journal [ 116.707193][ T5011] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.147: Detected aborted journal [ 116.718346][ T5011] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.147: Detected aborted journal [ 116.833579][ T5011] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.147: Detected aborted journal [ 116.844905][ T5011] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.147: Detected aborted journal [ 116.857024][ T5011] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.147: Detected aborted journal [ 116.866214][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 116.881416][ T5033] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1265: comm syz-executor: reading directory lblock 0 [ 118.010126][ T4173] EXT4-fs: 48 callbacks suppressed [ 118.010143][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 118.028012][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 118.044837][ T5049] EXT4-fs (sda1): Remounting filesystem read-only [ 118.053738][ T5046] EXT4-fs (sda1): Remounting filesystem read-only [ 118.061790][ T5048] EXT4-fs (sda1): Remounting filesystem read-only [ 118.069133][ T5047] EXT4-fs (sda1): Remounting filesystem read-only [ 118.079330][ T5049] EXT4-fs (sda1): Remounting filesystem read-only [ 118.090165][ T5048] EXT4-fs (sda1): Remounting filesystem read-only [ 118.099898][ T5047] EXT4-fs (sda1): Remounting filesystem read-only [ 118.109798][ T5050] FAULT_INJECTION: forcing a failure. [ 118.109798][ T5050] name failslab, interval 1, probability 0, space 0, times 0 [ 118.125432][ T5047] EXT4-fs (sda1): Remounting filesystem read-only [ 118.152322][ T5050] CPU: 0 PID: 5050 Comm: syz.1.159 Not tainted syzkaller #0 [ 118.159659][ T5050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.169731][ T5050] Call Trace: [ 118.172999][ T5050] [ 118.175937][ T5050] dump_stack_lvl+0x188/0x250 [ 118.180637][ T5050] ? show_regs_print_info+0x20/0x20 [ 118.185843][ T5050] ? load_image+0x410/0x410 [ 118.190372][ T5050] ? __might_sleep+0xf0/0xf0 [ 118.195121][ T5050] ? __lock_acquire+0x7d40/0x7d40 [ 118.200148][ T5050] should_fail+0x383/0x4b0 [ 118.204609][ T5050] should_failslab+0x5/0x20 [ 118.209123][ T5050] slab_pre_alloc_hook+0x51/0xc0 [ 118.214192][ T5050] kmem_cache_alloc_trace+0x47/0x290 [ 118.219493][ T5050] ? __list_lru_init+0x535/0xac0 [ 118.224431][ T5050] __list_lru_init+0x535/0xac0 [ 118.229193][ T5050] alloc_super+0x787/0x970 [ 118.233600][ T5050] ? kill_litter_super+0xa0/0xa0 [ 118.238522][ T5050] sget_fc+0x2d4/0x6f0 [ 118.242597][ T5050] ? kill_litter_super+0xa0/0xa0 [ 118.247627][ T5050] ? mqueue_get_tree+0xe0/0xe0 [ 118.252379][ T5050] get_tree_nodev+0x26/0x160 [ 118.256968][ T5050] vfs_get_tree+0x88/0x270 [ 118.261395][ T5050] fc_mount+0x18/0xa0 [ 118.265372][ T5050] mq_init_ns+0x39d/0x510 [ 118.269718][ T5050] copy_ipcs+0x2ea/0x4b0 [ 118.274050][ T5050] create_new_namespaces+0x212/0x700 [ 118.279331][ T5050] unshare_nsproxy_namespaces+0x116/0x160 [ 118.285426][ T5050] ksys_unshare+0x4f6/0x8e0 [ 118.289932][ T5050] ? __lock_acquire+0x7d40/0x7d40 [ 118.294971][ T5050] ? sighand_ctor+0x40/0x40 [ 118.299564][ T5050] ? lock_chain_count+0x20/0x20 [ 118.305112][ T5050] ? syscall_enter_from_user_mode+0x21/0x70 [ 118.311014][ T5050] __x64_sys_unshare+0x34/0x40 [ 118.315802][ T5050] do_syscall_64+0x4c/0xa0 [ 118.320213][ T5050] ? clear_bhb_loop+0x30/0x80 [ 118.324893][ T5050] ? clear_bhb_loop+0x30/0x80 [ 118.329571][ T5050] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.335662][ T5050] RIP: 0033:0x7f8d8acdf559 [ 118.340272][ T5050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.360131][ T5050] RSP: 002b:00007f8d88f37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 118.368671][ T5050] RAX: ffffffffffffffda RBX: 00007f8d8af66fa0 RCX: 00007f8d8acdf559 [ 118.377075][ T5050] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400 [ 118.385050][ T5050] RBP: 00007f8d8ad76ab8 R08: 0000000000000000 R09: 0000000000000000 [ 118.393322][ T5050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.401457][ T5050] R13: 00007f8d8af67038 R14: 00007f8d8af66fa0 R15: 00007ffe172535b8 [ 118.409704][ T5050] [ 118.412814][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.586283][ T13] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 118.806274][ T13] usb 1-1: device descriptor read/64, error -71 [ 119.096298][ T13] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 119.286286][ T13] usb 1-1: device descriptor read/64, error -71 [ 119.381576][ T5070] netlink: 72 bytes leftover after parsing attributes in process `syz.1.160'. [ 119.407923][ T13] usb usb1-port1: attempt power cycle [ 119.563540][ T5071] loop1: detected capacity change from 0 to 4096 [ 119.701468][ T5072] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.816252][ T13] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 119.916371][ T13] usb 1-1: device descriptor read/8, error -71 [ 120.186341][ T13] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 120.286616][ T13] usb 1-1: device descriptor read/8, error -71 [ 120.406472][ T13] usb usb1-port1: unable to enumerate USB device [ 120.616119][ T5077] rxe_eth0 speed is unknown, defaulting to 1000 [ 121.995167][ T4173] EXT4-fs error: 40 callbacks suppressed [ 121.995185][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 122.000638][ T5084] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.164: Detected aborted journal [ 122.005704][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 122.018778][ T5085] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.165: Detected aborted journal [ 122.039697][ T5083] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1265: comm syz-executor: reading directory lblock 0 [ 122.059748][ T5087] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.167: Detected aborted journal [ 122.073807][ T5086] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.166: Detected aborted journal [ 122.093094][ T5084] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.164: Detected aborted journal [ 122.105896][ T5087] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.167: Detected aborted journal [ 122.118864][ T5086] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.166: Detected aborted journal [ 123.230262][ T5095] FAULT_INJECTION: forcing a failure. [ 123.230262][ T5095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.256546][ T5095] CPU: 0 PID: 5095 Comm: syz.0.164 Not tainted syzkaller #0 [ 123.263869][ T5095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.273969][ T5095] Call Trace: [ 123.277240][ T5095] [ 123.280178][ T5095] dump_stack_lvl+0x188/0x250 [ 123.284843][ T5095] ? show_regs_print_info+0x20/0x20 [ 123.290051][ T5095] ? load_image+0x410/0x410 [ 123.294908][ T5095] ? __lock_acquire+0x7d40/0x7d40 [ 123.299965][ T5095] should_fail+0x383/0x4b0 [ 123.304365][ T5095] _copy_from_user+0x2e/0x170 [ 123.309038][ T5095] ___sys_recvmsg+0x173/0x5c0 [ 123.313737][ T5095] ? __sys_recvmsg+0x280/0x280 [ 123.318530][ T5095] ? __fget_files+0x402/0x470 [ 123.323614][ T5095] ? __fdget+0x18b/0x210 [ 123.327850][ T5095] ? do_recvmmsg+0x18e/0x7f0 [ 123.332452][ T5095] do_recvmmsg+0x360/0x7f0 [ 123.336863][ T5095] ? __sys_recvmmsg+0x290/0x290 [ 123.341720][ T5095] ? __context_tracking_exit+0x4c/0x80 [ 123.347283][ T5095] ? __lock_acquire+0x7d40/0x7d40 [ 123.352300][ T5095] __x64_sys_recvmmsg+0x195/0x250 [ 123.357399][ T5095] ? do_recvmmsg+0x7f0/0x7f0 [ 123.361977][ T5095] ? lockdep_hardirqs_on+0x94/0x140 [ 123.367176][ T5095] do_syscall_64+0x4c/0xa0 [ 123.371598][ T5095] ? clear_bhb_loop+0x30/0x80 [ 123.376260][ T5095] ? clear_bhb_loop+0x30/0x80 [ 123.381058][ T5095] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.386956][ T5095] RIP: 0033:0x7fc6c1a66559 [ 123.391364][ T5095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.410954][ T5095] RSP: 002b:00007fc6bfc9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 123.419362][ T5095] RAX: ffffffffffffffda RBX: 00007fc6c1cee090 RCX: 00007fc6c1a66559 [ 123.427606][ T5095] RDX: 0000000000010106 RSI: 0000200000000800 RDI: 0000000000000003 [ 123.435685][ T5095] RBP: 00007fc6bfc9d090 R08: 0000000000000000 R09: 0000000000000000 [ 123.443814][ T5095] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 123.451837][ T5095] R13: 00007fc6c1cee128 R14: 00007fc6c1cee090 R15: 00007ffc07b141b8 [ 123.459815][ T5095] [ 123.536294][ T4371] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 123.587313][ T5100] EXT4-fs: 29 callbacks suppressed [ 123.587328][ T5100] EXT4-fs (sda1): Remounting filesystem read-only [ 123.606554][ T5099] EXT4-fs (sda1): Remounting filesystem read-only [ 123.620888][ T5099] EXT4-fs (sda1): Remounting filesystem read-only [ 123.630031][ T5100] EXT4-fs (sda1): Remounting filesystem read-only [ 123.637080][ T5099] EXT4-fs (sda1): Remounting filesystem read-only [ 123.648467][ T5102] FAULT_INJECTION: forcing a failure. [ 123.648467][ T5102] name failslab, interval 1, probability 0, space 0, times 0 [ 123.662050][ T5099] EXT4-fs (sda1): Remounting filesystem read-only [ 123.669691][ T5099] EXT4-fs (sda1): Remounting filesystem read-only [ 123.676528][ T5102] CPU: 0 PID: 5102 Comm: syz.3.169 Not tainted syzkaller #0 [ 123.683823][ T5102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.695194][ T5102] Call Trace: [ 123.698492][ T5102] [ 123.701420][ T5102] dump_stack_lvl+0x188/0x250 [ 123.706112][ T5102] ? show_regs_print_info+0x20/0x20 [ 123.711773][ T5102] ? load_image+0x410/0x410 [ 123.716288][ T5102] ? __might_sleep+0xf0/0xf0 [ 123.720897][ T5102] ? __lock_acquire+0x7d40/0x7d40 [ 123.725923][ T5102] should_fail+0x383/0x4b0 [ 123.730375][ T5102] should_failslab+0x5/0x20 [ 123.734881][ T5102] slab_pre_alloc_hook+0x51/0xc0 [ 123.739821][ T5102] kmem_cache_alloc_trace+0x47/0x290 [ 123.745239][ T5102] ? __list_lru_init+0x535/0xac0 [ 123.750382][ T5102] __list_lru_init+0x535/0xac0 [ 123.755370][ T5102] alloc_super+0x787/0x970 [ 123.759804][ T5102] ? kill_litter_super+0xa0/0xa0 [ 123.765177][ T5102] sget_fc+0x2d4/0x6f0 [ 123.769285][ T5102] ? kill_litter_super+0xa0/0xa0 [ 123.774236][ T5102] ? mqueue_get_tree+0xe0/0xe0 [ 123.779000][ T5102] get_tree_nodev+0x26/0x160 [ 123.784048][ T5102] vfs_get_tree+0x88/0x270 [ 123.788762][ T5102] fc_mount+0x18/0xa0 [ 123.792888][ T5102] mq_init_ns+0x39d/0x510 [ 123.797411][ T5102] copy_ipcs+0x2ea/0x4b0 [ 123.801755][ T5102] create_new_namespaces+0x212/0x700 [ 123.807234][ T5102] unshare_nsproxy_namespaces+0x116/0x160 [ 123.813166][ T5102] ksys_unshare+0x4f6/0x8e0 [ 123.817693][ T5102] ? __lock_acquire+0x7d40/0x7d40 [ 123.822806][ T5102] ? sighand_ctor+0x40/0x40 [ 123.827337][ T5102] ? lock_chain_count+0x20/0x20 [ 123.832572][ T5102] ? syscall_enter_from_user_mode+0x21/0x70 [ 123.839348][ T5102] __x64_sys_unshare+0x34/0x40 [ 123.844214][ T5102] do_syscall_64+0x4c/0xa0 [ 123.848848][ T5102] ? clear_bhb_loop+0x30/0x80 [ 123.853642][ T5102] ? clear_bhb_loop+0x30/0x80 [ 123.858371][ T5102] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.864398][ T5102] RIP: 0033:0x7f8780caf559 [ 123.868839][ T5102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.889345][ T5102] RSP: 002b:00007f877ef07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 123.898111][ T5102] RAX: ffffffffffffffda RBX: 00007f8780f36fa0 RCX: 00007f8780caf559 [ 123.906101][ T5102] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400 [ 123.914612][ T5102] RBP: 00007f8780d46ab8 R08: 0000000000000000 R09: 0000000000000000 [ 123.922850][ T5102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.930912][ T5102] R13: 00007f8780f37038 R14: 00007f8780f36fa0 R15: 00007ffebc7f75d8 [ 123.939079][ T5102] [ 123.954223][ T5100] EXT4-fs (sda1): Remounting filesystem read-only [ 123.966612][ T5100] EXT4-fs (sda1): Remounting filesystem read-only [ 124.064686][ T5099] EXT4-fs (sda1): Remounting filesystem read-only [ 124.116527][ T4371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.128929][ T4371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.140514][ T4371] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 124.155127][ T4371] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.164562][ T4371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.176017][ T4371] usb 2-1: config 0 descriptor?? [ 124.658756][ T4371] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 124.670805][ T4371] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 124.707472][ T5113] udevd[5113]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 127.069868][ T5133] EXT4-fs error: 52 callbacks suppressed [ 127.069880][ T5133] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.172: Detected aborted journal [ 127.114918][ T5133] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.172: Detected aborted journal [ 127.149727][ T5133] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.172: Detected aborted journal [ 127.183597][ T5133] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.172: Detected aborted journal [ 127.219579][ T5133] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.172: Detected aborted journal [ 127.231334][ T4371] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 127.262775][ T5142] netlink: 72 bytes leftover after parsing attributes in process `syz.0.172'. [ 127.279354][ T5133] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.172: Detected aborted journal [ 127.310492][ T5133] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.172: Detected aborted journal [ 127.343665][ T5133] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.172: Detected aborted journal [ 127.377846][ T5133] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.172: Detected aborted journal [ 127.446274][ T4371] usb 3-1: device descriptor read/64, error -71 [ 127.490077][ T5133] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.172: Detected aborted journal [ 127.575096][ T5143] loop0: detected capacity change from 0 to 4096 [ 127.729662][ T5144] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.737573][ T4371] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 127.936268][ T4371] usb 3-1: device descriptor read/64, error -71 [ 128.066360][ T4371] usb usb3-port1: attempt power cycle [ 128.391322][ T4376] usb 2-1: USB disconnect, device number 9 [ 128.506421][ T4371] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 128.627195][ T4371] usb 3-1: device descriptor read/8, error -71 [ 128.751743][ T4173] EXT4-fs: 36 callbacks suppressed [ 128.751759][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 128.763825][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 128.771771][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 128.777268][ T5146] EXT4-fs (sda1): Remounting filesystem read-only [ 128.792262][ T5148] EXT4-fs (sda1): Remounting filesystem read-only [ 128.802213][ T5147] EXT4-fs (sda1): Remounting filesystem read-only [ 128.809610][ T5147] EXT4-fs (sda1): Remounting filesystem read-only [ 128.819176][ T5148] EXT4-fs (sda1): Remounting filesystem read-only [ 128.835424][ T5149] FAULT_INJECTION: forcing a failure. [ 128.835424][ T5149] name failslab, interval 1, probability 0, space 0, times 0 [ 128.850278][ T5151] rxe_eth0 speed is unknown, defaulting to 1000 [ 128.857264][ T5148] EXT4-fs (sda1): Remounting filesystem read-only [ 128.873981][ T5149] CPU: 0 PID: 5149 Comm: syz.1.176 Not tainted syzkaller #0 [ 128.881293][ T5149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.891404][ T5149] Call Trace: [ 128.894676][ T5149] [ 128.897609][ T5149] dump_stack_lvl+0x188/0x250 [ 128.902284][ T5149] ? show_regs_print_info+0x20/0x20 [ 128.907468][ T5149] ? load_image+0x410/0x410 [ 128.911954][ T5149] ? __might_sleep+0xf0/0xf0 [ 128.916964][ T5149] ? __lock_acquire+0x7d40/0x7d40 [ 128.921998][ T5149] should_fail+0x383/0x4b0 [ 128.926434][ T5149] should_failslab+0x5/0x20 [ 128.931050][ T5149] slab_pre_alloc_hook+0x51/0xc0 [ 128.936207][ T5149] __kmalloc_node_track_caller+0x68/0x3a0 [ 128.942250][ T5149] ? netlink_sendmsg+0x654/0xbe0 [ 128.947174][ T5149] ? __alloc_skb+0xf4/0x750 [ 128.951775][ T5149] ? netlink_sendmsg+0x654/0xbe0 [ 128.957307][ T5149] __alloc_skb+0x22c/0x750 [ 128.961808][ T5149] netlink_sendmsg+0x654/0xbe0 [ 128.966590][ T5149] ? netlink_getsockopt+0x570/0x570 [ 128.971792][ T5149] ? aa_sock_msg_perm+0x94/0x150 [ 128.976947][ T5149] ? apparmor_socket_sendmsg+0x88/0x230 [ 128.983734][ T5149] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 128.989113][ T5149] ? security_socket_sendmsg+0x7c/0xa0 [ 128.995085][ T5149] ? netlink_getsockopt+0x570/0x570 [ 129.000289][ T5149] ____sys_sendmsg+0x5be/0x8f0 [ 129.005237][ T5149] ? __sys_sendmsg_sock+0x30/0x30 [ 129.010704][ T5149] ? import_iovec+0x6f/0xa0 [ 129.015474][ T5149] ___sys_sendmsg+0x236/0x2e0 [ 129.020452][ T5149] ? __sys_sendmsg+0x290/0x290 [ 129.025934][ T5149] __se_sys_sendmsg+0x1b7/0x2a0 [ 129.030784][ T5149] ? __x64_sys_sendmsg+0x80/0x80 [ 129.036016][ T5149] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 129.042118][ T5149] ? lockdep_hardirqs_on+0x94/0x140 [ 129.047313][ T5149] do_syscall_64+0x4c/0xa0 [ 129.051717][ T5149] ? clear_bhb_loop+0x30/0x80 [ 129.056393][ T5149] ? clear_bhb_loop+0x30/0x80 [ 129.061063][ T5149] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.067029][ T5149] RIP: 0033:0x7f8d8acdf559 [ 129.071452][ T5149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.091135][ T5149] RSP: 002b:00007f8d88f37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.099544][ T5149] RAX: ffffffffffffffda RBX: 00007f8d8af66fa0 RCX: 00007f8d8acdf559 [ 129.107505][ T5149] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 129.115457][ T5149] RBP: 00007f8d88f37090 R08: 0000000000000000 R09: 0000000000000000 [ 129.123414][ T5149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.131425][ T5149] R13: 00007f8d8af67038 R14: 00007f8d8af66fa0 R15: 00007ffe172535b8 [ 129.139528][ T5149] [ 129.150956][ T4371] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 129.166568][ T5146] EXT4-fs (sda1): Remounting filesystem read-only [ 129.246427][ T4371] usb 3-1: device descriptor read/8, error -71 [ 129.366667][ T4371] usb usb3-port1: unable to enumerate USB device [ 130.720985][ T5161] loop1: detected capacity change from 0 to 128 [ 130.733536][ T5160] FAULT_INJECTION: forcing a failure. [ 130.733536][ T5160] name failslab, interval 1, probability 0, space 0, times 0 [ 130.774239][ T5160] CPU: 0 PID: 5160 Comm: syz.2.181 Not tainted syzkaller #0 [ 130.781664][ T5160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.791948][ T5160] Call Trace: [ 130.795227][ T5160] [ 130.798174][ T5160] dump_stack_lvl+0x188/0x250 [ 130.802921][ T5160] ? show_regs_print_info+0x20/0x20 [ 130.808231][ T5160] ? load_image+0x410/0x410 [ 130.812748][ T5160] ? __might_sleep+0xf0/0xf0 [ 130.817396][ T5160] ? __lock_acquire+0x7d40/0x7d40 [ 130.822540][ T5160] should_fail+0x383/0x4b0 [ 130.826952][ T5160] should_failslab+0x5/0x20 [ 130.831439][ T5160] slab_pre_alloc_hook+0x51/0xc0 [ 130.836422][ T5160] kmem_cache_alloc_trace+0x47/0x290 [ 130.841704][ T5160] ? __list_lru_init+0x535/0xac0 [ 130.846653][ T5160] __list_lru_init+0x535/0xac0 [ 130.851612][ T5160] alloc_super+0x787/0x970 [ 130.856153][ T5160] ? kill_litter_super+0xa0/0xa0 [ 130.861115][ T5160] sget_fc+0x2d4/0x6f0 [ 130.865289][ T5160] ? kill_litter_super+0xa0/0xa0 [ 130.870264][ T5160] ? mqueue_get_tree+0xe0/0xe0 [ 130.875549][ T5160] get_tree_nodev+0x26/0x160 [ 130.880168][ T5160] vfs_get_tree+0x88/0x270 [ 130.884609][ T5160] fc_mount+0x18/0xa0 [ 130.888606][ T5160] mq_init_ns+0x39d/0x510 [ 130.892946][ T5160] copy_ipcs+0x2ea/0x4b0 [ 130.897377][ T5160] create_new_namespaces+0x212/0x700 [ 130.902671][ T5160] unshare_nsproxy_namespaces+0x116/0x160 [ 130.908532][ T5160] ksys_unshare+0x4f6/0x8e0 [ 130.913110][ T5160] ? __lock_acquire+0x7d40/0x7d40 [ 130.918148][ T5160] ? sighand_ctor+0x40/0x40 [ 130.922672][ T5160] ? lock_chain_count+0x20/0x20 [ 130.927608][ T5160] ? syscall_enter_from_user_mode+0x21/0x70 [ 130.933496][ T5160] __x64_sys_unshare+0x34/0x40 [ 130.938279][ T5160] do_syscall_64+0x4c/0xa0 [ 130.943568][ T5160] ? clear_bhb_loop+0x30/0x80 [ 130.948252][ T5160] ? clear_bhb_loop+0x30/0x80 [ 130.953471][ T5160] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.959557][ T5160] RIP: 0033:0x7f63d52e5559 [ 130.964284][ T5160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.984969][ T5160] RSP: 002b:00007f63d353d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 130.994300][ T5160] RAX: ffffffffffffffda RBX: 00007f63d556cfa0 RCX: 00007f63d52e5559 [ 131.002815][ T5160] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400 [ 131.011147][ T5160] RBP: 00007f63d537cab8 R08: 0000000000000000 R09: 0000000000000000 [ 131.019948][ T5160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.029139][ T5160] R13: 00007f63d556d038 R14: 00007f63d556cfa0 R15: 00007ffe457666f8 [ 131.037142][ T5160] [ 131.100984][ T5161] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.120112][ T5161] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 132.721007][ T4173] EXT4-fs error: 27 callbacks suppressed [ 132.721025][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 132.749394][ T5183] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.191: Detected aborted journal SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: repeatedly failed to execute the program proc=5 req=141 state=1 status=67 (errno 9: Bad file descriptor) [ 132.752436][ T5179] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1265: comm syz-executor: reading directory lblock 0 [ 132.765205][ T5182] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.183: Detected aborted journal [ 132.791593][ T5181] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.184: Detected aborted journal [ 132.797426][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 132.803489][ T5180] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.182: Detected aborted journal [ 132.814675][ T4173] EXT4-fs error (device sda1) in ext4_evict_inode:259: Journal has aborted [ 132.834671][ T5183] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.191: Detected aborted journal [ 132.839359][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 132.854070][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.864491][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.488613][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.522833][ T4185] syz-executor (4185) used greatest stack depth: 21072 bytes left [ 133.585259][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.651784][ T4194] syz-executor (4194) used greatest stack depth: 20720 bytes left [ 133.654400][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.712207][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.462177][ T9] device hsr_slave_0 left promiscuous mode [ 134.468985][ T9] device hsr_slave_1 left promiscuous mode [ 134.475797][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.483634][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.492961][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.502657][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.510458][ T9] device bridge_slave_1 left promiscuous mode [ 134.516842][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.525577][ T9] device bridge_slave_0 left promiscuous mode [ 134.533139][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.545561][ T9] device veth1_macvtap left promiscuous mode [ 134.551793][ T9] device veth0_macvtap left promiscuous mode [ 134.558305][ T9] device veth1_vlan left promiscuous mode [ 134.564254][ T9] device veth0_vlan left promiscuous mode [ 134.715152][ T9] team0 (unregistering): Port device team_slave_1 removed [ 134.729150][ T9] team0 (unregistering): Port device team_slave_0 removed [ 134.742530][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.758123][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.821739][ T9] bond0 (unregistering): Released all slaves [ 135.820786][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.883426][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.944135][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.983395][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.073817][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.148283][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.201088][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.253117][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.373952][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.429281][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.471458][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.522246][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.778952][ T9] device hsr_slave_0 left promiscuous mode [ 137.785443][ T9] device hsr_slave_1 left promiscuous mode [ 137.792008][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.799653][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.807723][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.815256][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.823471][ T9] device bridge_slave_1 left promiscuous mode [ 137.830737][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.837319][ T3851] EXT4-fs error: 244 callbacks suppressed [ 137.837336][ T3851] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm dhcpcd: reading directory lblock 0 [ 137.859998][ T9] device bridge_slave_0 left promiscuous mode [ 137.868803][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.881341][ T9] device hsr_slave_0 left promiscuous mode [ 137.889673][ T9] device hsr_slave_1 left promiscuous mode [ 137.896128][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.903745][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.904219][ T3851] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm dhcpcd: reading directory lblock 0 [ 137.923452][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.927222][ T3851] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm dhcpcd: reading directory lblock 0 [ 137.935952][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.955905][ T9] device bridge_slave_1 left promiscuous mode [ 137.962669][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.976955][ T9] device bridge_slave_0 left promiscuous mode [ 137.983129][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.994934][ T9] device hsr_slave_0 left promiscuous mode [ 138.001742][ T9] device hsr_slave_1 left promiscuous mode [ 138.009210][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.016865][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.024643][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.032378][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.040212][ T9] device bridge_slave_1 left promiscuous mode [ 138.046486][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.054576][ T9] device bridge_slave_0 left promiscuous mode [ 138.061348][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.061759][ T3851] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm dhcpcd: reading directory lblock 0 [ 138.092497][ T9] device veth1_macvtap left promiscuous mode [ 138.098887][ T9] device veth0_macvtap left promiscuous mode [ 138.105023][ T9] device veth1_vlan left promiscuous mode [ 138.112938][ T9] device veth0_vlan left promiscuous mode [ 138.119945][ T9] device veth1_macvtap left promiscuous mode [ 138.126703][ T9] device veth0_macvtap left promiscuous mode [ 138.132849][ T9] device veth1_vlan left promiscuous mode [ 138.139018][ T9] device veth0_vlan left promiscuous mode [ 138.145765][ T9] device veth1_macvtap left promiscuous mode [ 138.152125][ T9] device veth0_macvtap left promiscuous mode [ 138.158264][ T9] device veth1_vlan left promiscuous mode [ 138.164045][ T9] device veth0_vlan left promiscuous mode [ 138.243049][ T3851] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm dhcpcd: reading directory lblock 0 [ 138.262599][ T3851] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm dhcpcd: reading directory lblock 0 [ 138.384382][ T3851] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm dhcpcd: reading directory lblock 0 [ 138.464316][ T3851] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm dhcpcd: reading directory lblock 0 [ 138.482396][ T9] team0 (unregistering): Port device team_slave_1 removed [ 138.498565][ T9] team0 (unregistering): Port device team_slave_0 removed [ 138.513716][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.528588][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.582601][ T9] bond0 (unregistering): Released all slaves [ 138.652740][ T3851] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm dhcpcd: reading directory lblock 0 [ 138.672467][ T9] team0 (unregistering): Port device team_slave_1 removed [ 138.694610][ T9] team0 (unregistering): Port device team_slave_0 removed [ 138.708963][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.723708][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.743032][ T3851] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm dhcpcd: reading directory lblock 0 [ 138.801148][ T9] bond0 (unregistering): Released all slaves [ 138.893118][ T9] team0 (unregistering): Port device team_slave_1 removed [ 138.912030][ T9] team0 (unregistering): Port device team_slave_0 removed [ 138.927977][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.944510][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.006130][ T9] bond0 (unregistering): Released all slaves