last executing test programs: 2m22.833470968s ago: executing program 1 (id=252): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2fd}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0b010110000a00000a00000000"], 0xf) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000200)="05000000010000", 0x7) write(r0, &(0x7f0000000400)="05000000010001", 0x7) 2m22.184429977s ago: executing program 1 (id=262): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000000)={@mcast2, r3}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000860) close_range(r0, 0xffffffffffffffff, 0x0) 2m21.733301811s ago: executing program 1 (id=268): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0xc0844123, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f00000015c0)) 2m21.560284271s ago: executing program 1 (id=271): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49dd, 0xfeff, 0x9, 0x4, 0x15, "e2e739a291a0a405"}) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x5000000d, 0x244, 0x9, '\x00=\x00'}) r1 = syz_open_pts(r0, 0x400) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 2m20.571500347s ago: executing program 1 (id=274): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f00000012c0)={[{@nogrpid}, {@data_err_ignore}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@mblk_io_submit}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x2000080, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m20.12425895s ago: executing program 1 (id=276): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=2.1,nodfs\x00') r1 = accept(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000380)="00000080fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100100200000000000000000000000000000000000000000000000010000000100000001000000000000000469b162cba311c1f652b919e0000f9ff0000", 0x84, 0x4000014, 0x0, 0x0) 2m13.554179368s ago: executing program 2 (id=341): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r3}, 0xc) 2m13.449491902s ago: executing program 2 (id=343): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) r0 = socket$netlink(0x10, 0x3, 0x14) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="fe", 0x1}], 0x1, &(0x7f0000002a80)=[{0x28, 0x117, 0x9, "bff5f797f108c32aa20eba0545cd1a5cdf"}], 0x28}, 0x0, 0x24000080, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x9c, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m13.322174971s ago: executing program 2 (id=344): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./lower/dir1\x00', 0x1ff) mount$overlay(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, 'lower'}}, {@upperdir={'upperdir', 0x3d, 'upper'}}, {@workdir={'workdir', 0x3d, 'work'}}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/dir1\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./mnt/dir2\x00', 0x5) 2m13.221741845s ago: executing program 2 (id=346): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbae, &(0x7f00000017c0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x810, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 2m12.616392763s ago: executing program 2 (id=351): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000380)="1a00000002800000", 0x8) 2m12.383554487s ago: executing program 2 (id=355): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0xf88ce2e0571bc7ea}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0xfffd, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4) 2m12.203915868s ago: executing program 32 (id=355): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0xf88ce2e0571bc7ea}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0xfffd, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4) 2m4.13741471s ago: executing program 33 (id=276): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=2.1,nodfs\x00') r1 = accept(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000380)="00000080fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100100200000000000000000000000000000000000000000000000010000000100000001000000000000000469b162cba311c1f652b919e0000f9ff0000", 0x84, 0x4000014, 0x0, 0x0) 51.885756502s ago: executing program 5 (id=1015): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) 51.703716764s ago: executing program 5 (id=1018): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x6, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xdb, 0x9d, 0x1b, 0x8, 0x12d1, 0xfae2, 0x708b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f0000000400)=0x1d) 50.924181253s ago: executing program 5 (id=1026): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x73) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$inet(0x2, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/cgroup\x00') 50.082856416s ago: executing program 5 (id=1039): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 49.821125106s ago: executing program 5 (id=1037): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="a6", 0x1, 0x20000000, &(0x7f0000000140)={0xa, 0x2, 0xbe14e07, @loopback, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) shutdown(r0, 0x1) 49.375642238s ago: executing program 5 (id=1042): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000010ffffffffffffffffffffffff86dd69"], 0x3a) 49.111248209s ago: executing program 34 (id=1042): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000010ffffffffffffffffffffffff86dd69"], 0x3a) 31.867602376s ago: executing program 6 (id=1195): unshare(0x400) sendmsg(0xffffffffffffffff, 0x0, 0x8000) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0, 0x1c1, 0x6}, 0x18) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x46]}, 0x34) ioctl$RTC_ALM_READ(r0, 0x40187014, &(0x7f0000000000)) 31.747802694s ago: executing program 6 (id=1188): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010340)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000009"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) 31.555592388s ago: executing program 6 (id=1189): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000340)=0xd031, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "de00", 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0x1001, 0x0, 0x4}}}}}}}, 0x0) 31.359600443s ago: executing program 6 (id=1192): setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, 0x0, 0x0) 30.952500416s ago: executing program 6 (id=1200): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 30.736956826s ago: executing program 6 (id=1203): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x4e23, @private=0xa010101}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6}) 15.646046139s ago: executing program 35 (id=1203): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x4e23, @private=0xa010101}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6}) 6.328745298s ago: executing program 3 (id=1372): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x1000004}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010006000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000001000)=ANY=[@ANYBLOB="ffffffffffffaabbccddee0188ca5bf0004c47ff123400000000010000040000126700000001aabbccddee0100000000000000000000000000000000000000000000000000000000000011111111111111111111111111111111"], 0x0) syz_emit_ethernet(0x5a, &(0x7f0000002000)=ANY=[@ANYBLOB="ffffffffffffaabbccddee0288ca5bf0004c07ff123400000000010000010000126700000001aabbccddee0200000000000000000000000000000000000000000000000000000000000022222222222222222222222222222222"], 0x0) syz_emit_ethernet(0x5a, &(0x7f0000003000)=ANY=[@ANYBLOB="ffffffffffffaabbccddee0388ca5bf0004c47ff123400000000010000010000126700000001aabbccddee0300000000000000000000000000000000000000000000000000000000000033333333333333333333333333333333"], 0x0) 3.886598549s ago: executing program 4 (id=1382): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)={0x10000018}) syz_genetlink_get_family_id$fou(&(0x7f0000000340), r1) 3.833014371s ago: executing program 3 (id=1384): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/79, 0x4f) 3.62042861s ago: executing program 4 (id=1385): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f00000006c0), &(0x7f0000000400)=@tcp6=r2, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.439970351s ago: executing program 3 (id=1387): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000140)={0x0, 0x2, 0x1, [0x4, 0x9, 0x80000000000000, 0x6, 0x7fffffff], [0xe9, 0x6, 0x6, 0x8, 0x100000000, 0x0, 0x9, 0x7, 0x9, 0xd, 0x1, 0x6, 0xfffffffffffff800, 0x50000000, 0x2, 0x2, 0xffffffffffff0001, 0x3, 0x3, 0x4, 0x5, 0x8ea, 0x7ff, 0x0, 0x8, 0x6, 0x7ff, 0x5, 0x4, 0x2, 0xd4e1, 0xd2a, 0x7, 0x1, 0x6, 0x1, 0x3, 0xfffffffffffffff0, 0x0, 0xcf3, 0x10000, 0x4, 0x2, 0x0, 0xf1, 0x4, 0xfffffffffffffffa, 0x3, 0x200000000, 0x6, 0xd, 0x81, 0x10000, 0x6, 0x5ad4, 0x3, 0x6, 0xd0, 0x3, 0x1, 0x5, 0x1, 0x0, 0x4, 0x81, 0xea, 0x6, 0x3ff, 0xdf1, 0x7, 0x5, 0x8, 0x6, 0x9, 0x4, 0x1, 0x5, 0xffff, 0x3b5f, 0x0, 0x10000000800, 0x1, 0x9, 0xfffffffffffffffc, 0x8000000000000001, 0x70, 0x4, 0x3670, 0x100, 0x80, 0x8, 0x7, 0x9, 0x9, 0x2, 0x10001, 0x4, 0x5, 0x8, 0x1ff, 0x7, 0x41, 0x100, 0x400, 0x6, 0x6, 0x9, 0x81, 0x7fff, 0x5, 0x2, 0x0, 0x401, 0xffffffffffffff01, 0x0, 0x8, 0x100000001, 0x1, 0x200, 0x0, 0xd9]}) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x48) splice(r0, 0x0, r2, 0x0, 0x3000, 0x100000000000000d) 3.215708623s ago: executing program 3 (id=1389): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) fcntl$setpipe(r0, 0x407, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x29, 0x4, 0xffffffffc8001048, 0xffff, 0x6, 0x2, 0x0, 0x0, 0x0, 0x80, 0x3}}, 0x50) 3.163429975s ago: executing program 4 (id=1390): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x1800, 0x1, 0xac, 0x5}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) 2.91953886s ago: executing program 0 (id=1391): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000002300), 0x0, &(0x7f0000002380)=""/143, 0x8f}, 0xe89}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 2.83460787s ago: executing program 4 (id=1392): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) 2.649941452s ago: executing program 4 (id=1393): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x57) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0xfdb, 0x4) sendto$inet(r0, &(0x7f00000002c0)="ab", 0xfffffffffffffdd8, 0x4008825, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 2.199426986s ago: executing program 3 (id=1394): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000500), &(0x7f0000000240)=r0}, 0x20) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000040)={0x0, 0xea60}, 0x10) read(r0, &(0x7f0000000080)=""/5, 0x5) 2.088897981s ago: executing program 3 (id=1395): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 1.96400819s ago: executing program 0 (id=1396): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x9, 0x2}, &(0x7f00000000c0)=0x8) 1.790846089s ago: executing program 0 (id=1397): setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, 0x0, 0x0) 1.663819919s ago: executing program 4 (id=1398): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) close(0xffffffffffffffff) openat$dir(0xffffffffffffff9c, 0x0, 0x2000, 0xe7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 1.377456964s ago: executing program 0 (id=1399): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0xfeff, 0xe, 0x0, &(0x7f0000000600)='\x00'/14, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 171.490731ms ago: executing program 0 (id=1400): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x400000f3, 0x3}}], 0x20}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 0 (id=1401): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x50, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff3, 0xffff}, {0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x7}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}]}, 0x50}}, 0x0) kernel console output (not intermixed with test programs): unted at /158/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 152.762898][ T7727] CPU: 0 PID: 7727 Comm: syz.4.592 Not tainted syzkaller #0 [ 152.783825][ T7727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.794017][ T7727] Call Trace: [ 152.797772][ T7727] [ 152.800741][ T7727] dump_stack_lvl+0x18c/0x250 [ 152.807484][ T7727] ? show_regs_print_info+0x20/0x20 [ 152.812739][ T7727] ? load_image+0x420/0x420 [ 152.817359][ T7727] ? __might_sleep+0xe0/0xe0 [ 152.822042][ T7727] ? __lock_acquire+0x7d80/0x7d80 [ 152.827107][ T7727] should_fail_ex+0x394/0x4c0 [ 152.831816][ T7727] should_failslab+0x9/0x20 [ 152.836347][ T7727] slab_pre_alloc_hook+0x59/0x300 [ 152.841428][ T7727] kmem_cache_alloc+0x5a/0x2c0 [ 152.846216][ T7727] ? getname_flags+0xbb/0x500 [ 152.850911][ T7727] getname_flags+0xbb/0x500 [ 152.855422][ T7727] __x64_sys_execve+0x78/0xa0 [ 152.862585][ T7727] do_syscall_64+0x55/0xb0 [ 152.867142][ T7727] ? clear_bhb_loop+0x40/0x90 [ 152.871838][ T7727] ? clear_bhb_loop+0x40/0x90 [ 152.876526][ T7727] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.882462][ T7727] RIP: 0033:0x7f77a579e159 [ 152.886907][ T7727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.906625][ T7727] RSP: 002b:00007f77a66c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 152.915079][ T7727] RAX: ffffffffffffffda RBX: 00007f77a5a25fa0 RCX: 00007f77a579e159 [ 152.923061][ T7727] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000000 [ 152.931227][ T7727] RBP: 00007f77a583506b R08: 0000000000000000 R09: 0000000000000000 [ 152.939210][ T7727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.947188][ T7727] R13: 00007f77a5a26038 R14: 00007f77a5a25fa0 R15: 00007ffcf66420f8 [ 152.955184][ T7727] [ 153.088579][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.212666][ T7738] loop3: detected capacity change from 0 to 256 [ 153.240215][ T7736] binder: 7735:7736 ioctl c0306201 200000000080 returned -14 [ 153.255797][ T7736] binder: 7735:7736 ioctl c0306201 2000000003c0 returned -14 [ 153.436589][ T7744] loop5: detected capacity change from 0 to 256 [ 153.506438][ T7744] FAT-fs (loop5): Directory bread(block 64) failed [ 153.514433][ T7744] FAT-fs (loop5): Directory bread(block 65) failed [ 153.525056][ T7744] FAT-fs (loop5): Directory bread(block 66) failed [ 153.537512][ T7744] FAT-fs (loop5): Directory bread(block 67) failed [ 153.544630][ T7744] FAT-fs (loop5): Directory bread(block 68) failed [ 153.552307][ T7744] FAT-fs (loop5): Directory bread(block 69) failed [ 153.560184][ T7744] FAT-fs (loop5): Directory bread(block 70) failed [ 153.570976][ T7744] FAT-fs (loop5): Directory bread(block 71) failed [ 153.579785][ T7744] FAT-fs (loop5): Directory bread(block 72) failed [ 153.586871][ T7744] FAT-fs (loop5): Directory bread(block 73) failed [ 153.668021][ T7752] loop3: detected capacity change from 0 to 128 [ 154.507563][ T7777] loop4: detected capacity change from 0 to 256 [ 154.526600][ T7777] exfat: Deprecated parameter 'namecase' [ 154.543997][ T7775] FAULT_INJECTION: forcing a failure. [ 154.543997][ T7775] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 154.573084][ T7775] CPU: 1 PID: 7775 Comm: syz.3.612 Not tainted syzkaller #0 [ 154.580462][ T7775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.590554][ T7775] Call Trace: [ 154.593866][ T7775] [ 154.596827][ T7775] dump_stack_lvl+0x18c/0x250 [ 154.601561][ T7775] ? show_regs_print_info+0x20/0x20 [ 154.606810][ T7775] ? load_image+0x420/0x420 [ 154.611356][ T7775] ? __might_fault+0xaa/0x120 [ 154.616078][ T7775] ? __lock_acquire+0x7d80/0x7d80 [ 154.621142][ T7775] ? __virt_addr_valid+0x10c/0x380 [ 154.626310][ T7775] should_fail_ex+0x394/0x4c0 [ 154.631038][ T7775] _copy_to_user+0x2f/0xa0 [ 154.635118][ T7777] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 154.635476][ T7775] bpf_verifier_vlog+0x2f1/0x840 [ 154.635518][ T7775] __btf_verifier_log+0xe3/0x140 [ 154.635549][ T7775] ? btf_check_sec_info+0x350/0x350 [ 154.663088][ T7775] btf_verifier_log_vsi+0x1fd/0x3d0 [ 154.668402][ T7775] ? sort_r+0x17f5/0x1810 [ 154.672821][ T7775] ? btf_datasec_show+0x970/0x970 [ 154.677905][ T7775] btf_datasec_check_meta+0x97f/0xb50 [ 154.683350][ T7775] btf_check_all_metas+0x371/0xaf0 [ 154.688520][ T7775] btf_parse_type_sec+0xfc/0x1960 [ 154.693589][ T7775] ? btf_check_sec_info+0x350/0x350 [ 154.698933][ T7775] ? __virt_addr_valid+0x10c/0x380 [ 154.704097][ T7775] ? btf_verifier_log+0x1a0/0x1a0 [ 154.709266][ T7775] ? btf_parse_hdr+0x545/0x700 [ 154.714071][ T7775] ? btf_parse_str_sec+0x20d/0x2a0 [ 154.719239][ T7775] btf_new_fd+0x440/0x9e0 [ 154.723622][ T7775] ? bpf_btf_show_fdinfo+0x80/0x80 [ 154.728821][ T7775] ? capable+0x88/0xe0 [ 154.732936][ T7775] __sys_bpf+0x670/0x890 [ 154.737302][ T7775] ? bpf_link_show_fdinfo+0x560/0x560 [ 154.742769][ T7775] ? lock_chain_count+0x20/0x20 [ 154.747660][ T7775] __x64_sys_bpf+0x7c/0x90 [ 154.752110][ T7775] do_syscall_64+0x55/0xb0 [ 154.756570][ T7775] ? clear_bhb_loop+0x40/0x90 [ 154.761380][ T7775] ? clear_bhb_loop+0x40/0x90 [ 154.766111][ T7775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.772046][ T7775] RIP: 0033:0x7f2ef659e159 [ 154.776492][ T7775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.796320][ T7775] RSP: 002b:00007f2ef73d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 154.804867][ T7775] RAX: ffffffffffffffda RBX: 00007f2ef6825fa0 RCX: 00007f2ef659e159 [ 154.812868][ T7775] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 154.821048][ T7775] RBP: 00007f2ef663506b R08: 0000000000000000 R09: 0000000000000000 [ 154.829055][ T7775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.837052][ T7775] R13: 00007f2ef6826038 R14: 00007f2ef6825fa0 R15: 00007ffd2e6cf6a8 [ 154.845175][ T7775] [ 154.866140][ T7779] netlink: 'syz.5.615': attribute type 15 has an invalid length. [ 154.914759][ T7779] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 154.924360][ T7779] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 154.933221][ T7779] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 154.941996][ T7779] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 155.007468][ T7779] netlink: 'syz.5.615': attribute type 15 has an invalid length. [ 155.132370][ T7782] loop4: detected capacity change from 0 to 4096 [ 155.208107][ T7782] ntfs3: loop4: ino=19, mi_enum_attr [ 155.213492][ T7782] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 155.349434][ T28] audit: type=1800 audit(1790716908.941:324): pid=7782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.616" name="file2" dev="loop4" ino=31 res=0 errno=0 [ 155.566897][ T7793] netlink: 12 bytes leftover after parsing attributes in process `syz.5.620'. [ 155.623954][ T7795] loop4: detected capacity change from 0 to 2048 [ 155.674270][ T7797] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 155.701473][ T7795] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.016045][ T7806] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.431869][ T7819] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 156.435564][ T1198] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 156.640182][ T1198] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.663967][ T1198] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.674371][ T1198] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.693657][ T1198] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.703133][ T1198] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.719446][ T1198] usb 6-1: config 0 descriptor?? [ 157.149464][ T1198] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 157.181208][ T1198] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 157.536910][ T7858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.562396][ T7858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.305193][ T7867] syz.0.653 (7867) used greatest stack depth: 19272 bytes left [ 159.288991][ T1198] usb 6-1: USB disconnect, device number 3 [ 159.310576][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.5.666'. [ 159.455184][ T7901] hsr_slave_1 (unregistering): left promiscuous mode [ 159.678451][ T7912] netlink: 20 bytes leftover after parsing attributes in process `syz.4.670'. [ 159.729576][ T5775] Bluetooth: hci0: command 0x0c1a tx timeout [ 159.904705][ T7917] Process accounting resumed [ 160.249101][ T7940] vxcan1: tx drop: invalid da for name 0xfffffffffffffffd [ 160.649452][ T7955] loop3: detected capacity change from 0 to 1024 [ 160.708289][ T7955] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.365536][ T23] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 161.369691][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.694'. [ 161.559524][ T7976] FAULT_INJECTION: forcing a failure. [ 161.559524][ T7976] name failslab, interval 1, probability 0, space 0, times 0 [ 161.575479][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 161.583555][ T7976] CPU: 1 PID: 7976 Comm: syz.0.696 Not tainted syzkaller #0 [ 161.590899][ T7976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.600984][ T7976] Call Trace: [ 161.604279][ T7976] [ 161.607240][ T7976] dump_stack_lvl+0x18c/0x250 [ 161.611958][ T7976] ? show_regs_print_info+0x20/0x20 [ 161.617193][ T7976] ? load_image+0x420/0x420 [ 161.621782][ T7976] ? __lock_acquire+0x7d80/0x7d80 [ 161.626843][ T7976] should_fail_ex+0x394/0x4c0 [ 161.631560][ T7976] should_failslab+0x9/0x20 [ 161.636095][ T7976] slab_pre_alloc_hook+0x59/0x300 [ 161.641151][ T7976] ? end_current_label_crit_section+0x170/0x170 [ 161.647436][ T7976] ? alloc_fs_context+0x63/0x7a0 [ 161.652418][ T7976] __kmem_cache_alloc_node+0x53/0x250 [ 161.657840][ T7976] ? alloc_fs_context+0x63/0x7a0 [ 161.662828][ T7976] kmalloc_trace+0x2a/0xe0 [ 161.667302][ T7976] alloc_fs_context+0x63/0x7a0 [ 161.672121][ T7976] path_mount+0xc0b/0xfa0 [ 161.676491][ T7976] __se_sys_mount+0x2e7/0x3d0 [ 161.681214][ T7976] ? __x64_sys_mount+0xc0/0xc0 [ 161.686031][ T7976] ? lockdep_hardirqs_on+0x98/0x150 [ 161.691262][ T7976] ? __x64_sys_mount+0x20/0xc0 [ 161.696091][ T7976] do_syscall_64+0x55/0xb0 [ 161.700528][ T7976] ? clear_bhb_loop+0x40/0x90 [ 161.705230][ T7976] ? clear_bhb_loop+0x40/0x90 [ 161.709949][ T7976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.715866][ T7976] RIP: 0033:0x7fb0b179e159 [ 161.720288][ T7976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.739915][ T7976] RSP: 002b:00007fb0b2601028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 161.748358][ T7976] RAX: ffffffffffffffda RBX: 00007fb0b1a25fa0 RCX: 00007fb0b179e159 [ 161.756345][ T7976] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000000 [ 161.764348][ T7976] RBP: 00007fb0b183506b R08: 00002000000002c0 R09: 0000000000000000 [ 161.772331][ T7976] R10: 0000000000006061 R11: 0000000000000246 R12: 0000000000000000 [ 161.780305][ T7976] R13: 00007fb0b1a26038 R14: 00007fb0b1a25fa0 R15: 00007fff09252708 [ 161.788313][ T7976] [ 161.807545][ T7981] fuse: Bad value for 'fd' [ 161.826067][ T23] usb 6-1: unable to get BOS descriptor or descriptor too short [ 161.862370][ T23] usb 6-1: config 1 interface 0 has no altsetting 0 [ 161.874866][ T23] usb 6-1: string descriptor 0 read error: -22 [ 161.881752][ T23] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.40 [ 161.903419][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.184616][ T7962] lo: entered promiscuous mode [ 162.189726][ T7962] lo: entered allmulticast mode [ 162.195903][ T7962] bond0: entered promiscuous mode [ 162.215509][ T7962] bond0: entered allmulticast mode [ 162.234699][ T7962] dummy0: entered promiscuous mode [ 162.263540][ T7962] dummy0: entered allmulticast mode [ 162.277154][ T7962] eql: entered promiscuous mode [ 162.282090][ T7962] eql: entered allmulticast mode [ 162.306199][ T7962] ifb0: entered promiscuous mode [ 162.323166][ T7962] ifb0: entered allmulticast mode [ 162.330371][ T7962] ifb1: entered promiscuous mode [ 162.336107][ T7962] ifb1: entered allmulticast mode [ 162.342747][ T7962] virtio_net virtio1 eth0: entered promiscuous mode [ 162.350025][ T7962] virtio_net virtio1 eth0: entered allmulticast mode [ 162.360173][ T7962] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 162.368398][ T7962] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 162.377175][ T7962] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 162.386718][ T7962] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 162.407515][ T7962] hwsim0: entered promiscuous mode [ 162.415918][ T7962] hwsim0: entered allmulticast mode [ 162.426657][ T7962] ieee802154 phy0 wpan0: entered promiscuous mode [ 162.445727][ T7962] ieee802154 phy0 wpan0: entered allmulticast mode [ 162.459513][ T7962] ieee802154 phy1 wpan1: entered promiscuous mode [ 162.478885][ T7962] ieee802154 phy1 wpan1: entered allmulticast mode [ 162.492264][ T7962] teql0: entered promiscuous mode [ 162.498767][ T7962] teql0: entered allmulticast mode [ 162.504449][ T7962] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 162.626894][ T23] usbhid 6-1:1.0: can't add hid device: -71 [ 162.632958][ T23] usbhid: probe of 6-1:1.0 failed with error -71 [ 162.675865][ T23] usb 6-1: USB disconnect, device number 4 [ 162.894200][ T8011] jffs2: notice: (8011) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 162.968365][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.710'. [ 163.790108][ T8026] loop5: detected capacity change from 0 to 32768 [ 163.812353][ T8026] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.716 (8026) [ 163.831308][ T8040] netlink: 'syz.4.722': attribute type 2 has an invalid length. [ 163.858385][ T8026] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 163.882759][ T8026] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 163.910202][ T8026] BTRFS info (device loop5): force clearing of disk cache [ 163.930725][ T8026] BTRFS info (device loop5): use zlib compression, level 3 [ 163.951732][ T8026] BTRFS info (device loop5): enabling ssd optimizations [ 163.973140][ T8026] BTRFS info (device loop5): using spread ssd allocation scheme [ 163.995561][ T8026] BTRFS info (device loop5): using free space tree [ 164.145652][ T8026] BTRFS info (device loop5): auto enabling async discard [ 164.169168][ T8026] BTRFS info (device loop5): rebuilding free space tree [ 164.216751][ T8026] BTRFS info (device loop5): checking UUID tree [ 165.070359][ T8026] BTRFS info (device loop5): balance: start -d -m [ 165.124920][ T8026] BTRFS info (device loop5): relocating block group 6881280 flags data|metadata [ 165.343096][ T8026] BTRFS info (device loop5): relocating block group 5242880 flags data|metadata [ 165.679626][ T8026] BTRFS info (device loop5): found 10 extents, stage: move data extents [ 165.778136][ T8026] BTRFS info (device loop5): found 1 extents, stage: update data pointers [ 165.871506][ T8026] BTRFS info (device loop5): balance: ended with status: 0 [ 166.776044][ T6990] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 167.326197][ T8106] FAULT_INJECTION: forcing a failure. [ 167.326197][ T8106] name failslab, interval 1, probability 0, space 0, times 0 [ 167.356532][ T8106] CPU: 0 PID: 8106 Comm: syz.0.743 Not tainted syzkaller #0 [ 167.363889][ T8106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 167.374069][ T8106] Call Trace: [ 167.377380][ T8106] [ 167.380335][ T8106] dump_stack_lvl+0x18c/0x250 [ 167.385045][ T8106] ? show_regs_print_info+0x20/0x20 [ 167.390283][ T8106] ? load_image+0x420/0x420 [ 167.394905][ T8106] ? __might_sleep+0xe0/0xe0 [ 167.399519][ T8106] ? __lock_acquire+0x7d80/0x7d80 [ 167.404559][ T8106] should_fail_ex+0x394/0x4c0 [ 167.409255][ T8106] should_failslab+0x9/0x20 [ 167.413776][ T8106] slab_pre_alloc_hook+0x59/0x300 [ 167.418817][ T8106] ? __lock_acquire+0x7d80/0x7d80 [ 167.423969][ T8106] ? allocate_file_region_entries+0x218/0x600 [ 167.430123][ T8106] __kmem_cache_alloc_node+0x53/0x250 [ 167.435517][ T8106] ? mark_lock+0x94/0x320 [ 167.439859][ T8106] ? allocate_file_region_entries+0x218/0x600 [ 167.446018][ T8106] kmalloc_trace+0x2a/0xe0 [ 167.450452][ T8106] allocate_file_region_entries+0x218/0x600 [ 167.456353][ T8106] ? folio_lock+0x190/0x190 [ 167.461043][ T8106] region_chg+0x30a/0x3d0 [ 167.465389][ T8106] __vma_reservation_common+0x331/0x6e0 [ 167.470953][ T8106] alloc_hugetlb_folio+0x17d/0x1660 [ 167.476159][ T8106] ? filemap_get_entry+0x375/0x3f0 [ 167.481284][ T8106] ? page_cache_prev_miss+0x390/0x390 [ 167.486668][ T8106] ? folio_isolate_hugetlb+0x2f0/0x2f0 [ 167.492148][ T8106] ? mark_lock+0x94/0x320 [ 167.496490][ T8106] ? read_lock_is_recursive+0x20/0x20 [ 167.501868][ T8106] ? mutex_lock_nested+0x20/0x20 [ 167.506897][ T8106] ? __lock_acquire+0x1336/0x7d80 [ 167.511938][ T8106] hugetlb_fault+0xaf9/0x2b60 [ 167.516640][ T8106] ? hugetlb_fault_mutex_hash+0xc0/0xc0 [ 167.522212][ T8106] handle_mm_fault+0x31c1/0x4a50 [ 167.527159][ T8106] ? handle_mm_fault+0xe6/0x4a50 [ 167.532101][ T8106] ? __up_read+0x2b8/0x6b0 [ 167.536700][ T8106] ? __lock_acquire+0x7d80/0x7d80 [ 167.541740][ T8106] ? numa_migrate_prep+0x350/0x350 [ 167.546940][ T8106] ? do_raw_spin_unlock+0x121/0x230 [ 167.552148][ T8106] ? hugetlb_follow_page_mask+0x7e5/0x1640 [ 167.557975][ T8106] __get_user_pages+0x604/0x1580 [ 167.562932][ T8106] ? populate_vma_page_range+0x380/0x380 [ 167.568578][ T8106] populate_vma_page_range+0x2c1/0x380 [ 167.574068][ T8106] ? fixup_user_fault+0x750/0x750 [ 167.579143][ T8106] ? down_read+0x1ac/0x2e0 [ 167.583592][ T8106] __mm_populate+0x260/0x390 [ 167.588318][ T8106] ? faultin_page_range+0x8a0/0x8a0 [ 167.593558][ T8106] ? up_write+0x1be/0x410 [ 167.597897][ T8106] do_mlock+0x5d2/0x740 [ 167.602152][ T8106] ? lru_gen_add_folio+0xe00/0xe00 [ 167.607265][ T8106] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 167.613284][ T8106] ? lock_chain_count+0x20/0x20 [ 167.618240][ T8106] ? syscall_enter_from_user_mode+0x25/0x80 [ 167.624138][ T8106] __x64_sys_mlock+0x60/0x70 [ 167.629958][ T8106] do_syscall_64+0x55/0xb0 [ 167.634383][ T8106] ? clear_bhb_loop+0x40/0x90 [ 167.639067][ T8106] ? clear_bhb_loop+0x40/0x90 [ 167.643952][ T8106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.649863][ T8106] RIP: 0033:0x7fb0b179e159 [ 167.655951][ T8106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.676621][ T8106] RSP: 002b:00007fb0b2601028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 167.685150][ T8106] RAX: ffffffffffffffda RBX: 00007fb0b1a25fa0 RCX: 00007fb0b179e159 [ 167.693229][ T8106] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000341000 [ 167.701233][ T8106] RBP: 00007fb0b183506b R08: 0000000000000000 R09: 0000000000000000 [ 167.710868][ T8106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.719282][ T8106] R13: 00007fb0b1a26038 R14: 00007fb0b1a25fa0 R15: 00007fff09252708 [ 167.728069][ T8106] [ 167.821121][ T28] audit: type=1326 audit(1790716921.431:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8108 comm="syz.5.739" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65bb99e159 code=0x7ffc0000 [ 167.892996][ T28] audit: type=1326 audit(1790716921.431:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8108 comm="syz.5.739" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65bb99e159 code=0x7ffc0000 [ 167.939864][ T28] audit: type=1326 audit(1790716921.431:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8108 comm="syz.5.739" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65bb99e159 code=0x7ffc0000 [ 168.016813][ T28] audit: type=1326 audit(1790716921.431:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8108 comm="syz.5.739" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65bb99e159 code=0x7ffc0000 [ 168.055315][ T28] audit: type=1326 audit(1790716921.431:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8108 comm="syz.5.739" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f65bb99e159 code=0x7ffc0000 [ 168.130973][ T28] audit: type=1326 audit(1790716921.481:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8108 comm="syz.5.739" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65bb99e159 code=0x7ffc0000 [ 168.215457][ T28] audit: type=1326 audit(1790716921.481:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8108 comm="syz.5.739" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65bb99e159 code=0x7ffc0000 [ 168.248753][ T8118] netlink: 20 bytes leftover after parsing attributes in process `syz.5.746'. [ 168.296987][ T28] audit: type=1326 audit(1790716921.481:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8108 comm="syz.5.739" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65bb99e159 code=0x7ffc0000 [ 168.337813][ T28] audit: type=1326 audit(1790716921.481:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8108 comm="syz.5.739" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65bb95e98e code=0x7ffc0000 [ 168.376239][ T28] audit: type=1326 audit(1790716921.481:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8108 comm="syz.5.739" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65bb95e98e code=0x7ffc0000 [ 169.002513][ T8152] FAULT_INJECTION: forcing a failure. [ 169.002513][ T8152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.030476][ T8152] CPU: 1 PID: 8152 Comm: syz.3.755 Not tainted syzkaller #0 [ 169.037844][ T8152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.047970][ T8152] Call Trace: [ 169.051344][ T8152] [ 169.054299][ T8152] dump_stack_lvl+0x18c/0x250 [ 169.059031][ T8152] ? show_regs_print_info+0x20/0x20 [ 169.064367][ T8152] ? load_image+0x420/0x420 [ 169.068963][ T8152] ? __might_fault+0xaa/0x120 [ 169.073780][ T8152] ? __lock_acquire+0x7d80/0x7d80 [ 169.078847][ T8152] ? __virt_addr_valid+0x10c/0x380 [ 169.084016][ T8152] should_fail_ex+0x394/0x4c0 [ 169.088750][ T8152] _copy_to_user+0x2f/0xa0 [ 169.093299][ T8152] bpf_verifier_vlog+0x2f1/0x840 [ 169.098275][ T8152] btf_verifier_log+0x11e/0x1a0 [ 169.103157][ T8152] ? btf_parse_graph_root+0xb00/0xb00 [ 169.108566][ T8152] ? btf_func_proto_log+0x62e/0x850 [ 169.113818][ T8152] __btf_verifier_log_type+0x457/0x690 [ 169.119334][ T8152] ? btf_int_show+0x2810/0x2810 [ 169.124583][ T8152] btf_func_proto_check_meta+0xed/0x150 [ 169.130152][ T8152] btf_check_all_metas+0x371/0xaf0 [ 169.135285][ T8152] btf_parse_type_sec+0xfc/0x1960 [ 169.140454][ T8152] ? btf_check_sec_info+0x350/0x350 [ 169.145691][ T8152] ? __virt_addr_valid+0x10c/0x380 [ 169.150818][ T8152] ? btf_verifier_log+0x1a0/0x1a0 [ 169.155936][ T8152] ? btf_parse_hdr+0x545/0x700 [ 169.160914][ T8152] ? btf_parse_str_sec+0x20d/0x2a0 [ 169.166179][ T8152] btf_new_fd+0x440/0x9e0 [ 169.170644][ T8152] ? bpf_btf_show_fdinfo+0x80/0x80 [ 169.175786][ T8152] ? capable+0x88/0xe0 [ 169.179877][ T8152] __sys_bpf+0x670/0x890 [ 169.184128][ T8152] ? bpf_link_show_fdinfo+0x560/0x560 [ 169.189616][ T8152] ? lock_chain_count+0x20/0x20 [ 169.194526][ T8152] __x64_sys_bpf+0x7c/0x90 [ 169.198997][ T8152] do_syscall_64+0x55/0xb0 [ 169.203433][ T8152] ? clear_bhb_loop+0x40/0x90 [ 169.208121][ T8152] ? clear_bhb_loop+0x40/0x90 [ 169.212804][ T8152] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.218734][ T8152] RIP: 0033:0x7f2ef659e159 [ 169.223186][ T8152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.242910][ T8152] RSP: 002b:00007f2ef73d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 169.251337][ T8152] RAX: ffffffffffffffda RBX: 00007f2ef6825fa0 RCX: 00007f2ef659e159 [ 169.259322][ T8152] RDX: 0000000000000028 RSI: 0000200000000140 RDI: 0000000000000012 [ 169.267304][ T8152] RBP: 00007f2ef663506b R08: 0000000000000000 R09: 0000000000000000 [ 169.275275][ T8152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.283248][ T8152] R13: 00007f2ef6826038 R14: 00007f2ef6825fa0 R15: 00007ffd2e6cf6a8 [ 169.291262][ T8152] [ 169.445474][ T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 169.649477][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.675617][ T8] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 169.684710][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.708480][ T8] usb 6-1: config 0 descriptor?? [ 169.937967][ T8] usbhid 6-1:0.0: can't add hid device: -71 [ 169.944047][ T8] usbhid: probe of 6-1:0.0 failed with error -71 [ 169.966254][ T8] usb 6-1: USB disconnect, device number 5 [ 170.545060][ T8189] veth1_to_bond: entered allmulticast mode [ 170.562574][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.771'. [ 170.575683][ T8] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 170.684636][ T8189] bond0: (slave bond_slave_1): Releasing backup interface [ 171.020288][ T8197] Illegal XDP return value 4294967294 on prog (id 77) dev N/A, expect packet loss! [ 171.495576][ T5816] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 171.695557][ T5816] usb 4-1: Using ep0 maxpacket: 16 [ 171.713682][ T5816] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 171.742041][ T5816] usb 4-1: config 0 interface 0 has no altsetting 0 [ 171.767032][ T5816] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 171.788209][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.808800][ T5816] usb 4-1: Product: syz [ 171.813025][ T5816] usb 4-1: Manufacturer: syz [ 171.832642][ T5816] usb 4-1: SerialNumber: syz [ 171.853748][ T5816] usb 4-1: config 0 descriptor?? [ 172.193588][ T8] usb 6-1: device descriptor read/all, error -71 [ 172.236245][ T5816] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 172.515616][ T5816] rc_core: IR keymap rc-imon-pad not found [ 172.531775][ T5816] Registered IR keymap rc-empty [ 172.538469][ T5816] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 172.539448][ T8222] 9pnet: p9_errstr2errno: server reported unknown error n$Ž[ [ 172.539448][ T8222] Q&|xù6 [ 172.562500][ T5816] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 172.609131][ T5816] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 172.639399][ T5816] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 172.668994][ T5816] imon 4-1:0.0: iMON device (15c2:0041, intf0) on usb<4:8> initialized [ 172.711647][ T8218] loop5: detected capacity change from 0 to 32768 [ 172.904582][ T8218] XFS (loop5): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 172.941102][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 172.941422][ T1198] usb 4-1: USB disconnect, device number 8 [ 173.135652][ T8218] XFS (loop5): Ending clean mount [ 173.302927][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 173.302941][ T28] audit: type=1800 audit(1790716926.911:353): pid=8218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.782" name="file1" dev="loop5" ino=5766 res=0 errno=0 [ 173.638848][ T6990] XFS (loop5): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 173.639157][ T8243] netlink: 24 bytes leftover after parsing attributes in process `syz.3.789'. [ 174.103330][ T8247] overlayfs: workdir and upperdir must reside under the same mount [ 174.282024][ T8253] ip6gre1: entered promiscuous mode [ 174.294169][ T8253] ip6gre1: entered allmulticast mode [ 174.330564][ T8253] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 174.343993][ T8253] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 174.593518][ T6783] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 174.648155][ T5819] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 174.655712][ T6783] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 174.687907][ T8249] loop5: detected capacity change from 0 to 32768 [ 174.768236][ T8249] JBD2: Ignoring recovery information on journal [ 174.875673][ T5819] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 174.877707][ T5816] kernel write not supported for file bpf-prog (pid: 5816 comm: kworker/1:4) [ 174.889410][ T8276] batadv_slave_1: entered promiscuous mode [ 174.904867][ T8275] batadv_slave_1: left promiscuous mode [ 174.913699][ T8249] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 175.165313][ T8286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.808'. [ 175.190301][ T8249] syz.5.790 (8249) used greatest stack depth: 18936 bytes left [ 175.232605][ T6990] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature [ 175.255072][ T5816] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.256052][ T8286] netlink: 60 bytes leftover after parsing attributes in process `syz.3.808'. [ 175.292916][ T6990] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 175.312078][ T6990] OCFS2: File system is now read-only. [ 175.318266][ T6990] (syz-executor,6990,1):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30 [ 175.335690][ T6990] (syz-executor,6990,0):_ocfs2_free_clusters:2605 ERROR: status = -30 [ 175.350881][ T6990] (syz-executor,6990,1):ocfs2_sync_local_to_main:1001 ERROR: status = -30 [ 175.359991][ T6990] (syz-executor,6990,1):ocfs2_sync_local_to_main:1013 ERROR: status = -30 [ 175.372024][ T6990] (syz-executor,6990,1):ocfs2_shutdown_local_alloc:449 ERROR: status = -30 [ 175.442436][ T6990] ocfs2: Unmounting device (7,5) on (node local) [ 175.725679][ T27] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 175.925624][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 175.932886][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.964954][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.989117][ T27] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 176.015583][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.030421][ T27] usb 4-1: config 0 descriptor?? [ 176.062289][ T27] hub 4-1:0.0: USB hub found [ 176.289326][ T27] hub 4-1:0.0: 1 port detected [ 176.446056][ T8306] loop5: detected capacity change from 0 to 40427 [ 176.501484][ T8306] F2FS-fs (loop5): invalid crc value [ 176.535506][ T8306] F2FS-fs (loop5): Found nat_bits in checkpoint [ 176.649896][ T8306] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 176.711569][ T8306] syz.5.810: attempt to access beyond end of device [ 176.711569][ T8306] loop5: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 176.762736][ T8306] syz.5.810: attempt to access beyond end of device [ 176.762736][ T8306] loop5: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 176.782388][ T28] audit: type=1326 audit(1790716930.371:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.4.824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a579e159 code=0x7ffc0000 [ 176.825433][ T28] audit: type=1326 audit(1790716930.371:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.4.824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a579e159 code=0x7ffc0000 [ 176.850750][ T28] audit: type=1326 audit(1790716930.381:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.4.824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a579e159 code=0x7ffc0000 [ 176.853538][ T6990] syz-executor: attempt to access beyond end of device [ 176.853538][ T6990] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 176.874780][ T28] audit: type=1326 audit(1790716930.381:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.4.824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a579e159 code=0x7ffc0000 [ 176.874825][ T28] audit: type=1326 audit(1790716930.381:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.4.824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a579e159 code=0x7ffc0000 [ 176.874863][ T28] audit: type=1326 audit(1790716930.381:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.4.824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f77a579e159 code=0x7ffc0000 [ 176.874900][ T28] audit: type=1326 audit(1790716930.381:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.4.824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a579e159 code=0x7ffc0000 [ 176.874937][ T28] audit: type=1326 audit(1790716930.381:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.4.824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a579e159 code=0x7ffc0000 [ 176.874974][ T28] audit: type=1326 audit(1790716930.381:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.4.824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a579e159 code=0x7ffc0000 [ 177.040984][ T27] hub 4-1:0.0: activate --> -90 [ 177.049711][ T6990] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 177.441869][ T27] usb 4-1-port1: config error [ 177.441881][ T8] usb 4-1: USB disconnect, device number 9 [ 177.678819][ T8350] netlink: 'syz.4.829': attribute type 4 has an invalid length. [ 177.705297][ T8350] netlink: 'syz.4.829': attribute type 4 has an invalid length. [ 177.808701][ T8354] netlink: 'syz.4.831': attribute type 1 has an invalid length. [ 178.274531][ T8374] atomic_op ffff888057318198 conn xmit_atomic 0000000000000000 [ 178.795746][ T8391] x_tables: duplicate entry at hook 2 [ 178.816782][ T8391] x_tables: duplicate underflow at hook 3 [ 178.925680][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 179.685641][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 179.878110][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 179.895843][ T8] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 179.912467][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.970455][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 179.995428][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.003520][ T8] usb 4-1: Product: syz [ 180.035520][ T8] usb 4-1: Manufacturer: syz [ 180.040183][ T8] usb 4-1: SerialNumber: syz [ 180.067115][ T8] hub 4-1:1.0: bad descriptor, ignoring hub [ 180.073093][ T8] hub: probe of 4-1:1.0 failed with error -5 [ 180.290483][ T8] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 180.878067][ T8404] usb 4-1: reset high-speed USB device number 10 using dummy_hcd [ 181.059860][ T8424] x_tables: duplicate entry at hook 2 [ 181.067926][ T8424] x_tables: duplicate underflow at hook 3 [ 181.084927][ T5819] IPVS: starting estimator thread 0... [ 181.105967][ T8425] IPVS: rr: UDP [::1]:8080 - no destination available [ 181.196395][ T8426] IPVS: using max 21 ests per chain, 50400 per kthread [ 181.226480][ T8432] netlink: 'syz.5.871': attribute type 4 has an invalid length. [ 181.259800][ T8432] netlink: 'syz.5.871': attribute type 4 has an invalid length. [ 181.410362][ T5759] usb 4-1: USB disconnect, device number 10 [ 181.438555][ T5759] usblp0: removed [ 181.494486][ T8443] atomic_op ffff88801b3d1198 conn xmit_atomic 0000000000000000 [ 182.029701][ T8447] vlan2: left allmulticast mode [ 182.037881][ T8447] geneve0: left allmulticast mode [ 182.044495][ T8447] vlan2: left promiscuous mode [ 182.049775][ T8447] geneve0: left promiscuous mode [ 182.055249][ T8447] bridge0: port 3(vlan2) entered disabled state [ 182.063892][ T8447] bridge_slave_1: left allmulticast mode [ 182.070937][ T8447] bridge_slave_1: left promiscuous mode [ 182.077758][ T8447] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.108278][ T8447] bridge_slave_0: left allmulticast mode [ 182.118606][ T8447] bridge_slave_0: left promiscuous mode [ 182.135223][ T8447] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.486927][ T8452] FAULT_INJECTION: forcing a failure. [ 182.486927][ T8452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.503451][ T8452] CPU: 0 PID: 8452 Comm: syz.4.870 Not tainted syzkaller #0 [ 182.510811][ T8452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.520916][ T8452] Call Trace: [ 182.524219][ T8452] [ 182.527172][ T8452] dump_stack_lvl+0x18c/0x250 [ 182.531892][ T8452] ? show_regs_print_info+0x20/0x20 [ 182.537137][ T8452] ? load_image+0x420/0x420 [ 182.541685][ T8452] ? __might_fault+0xaa/0x120 [ 182.546407][ T8452] ? __lock_acquire+0x7d80/0x7d80 [ 182.551469][ T8452] ? __virt_addr_valid+0x10c/0x380 [ 182.556638][ T8452] should_fail_ex+0x394/0x4c0 [ 182.561371][ T8452] _copy_to_user+0x2f/0xa0 [ 182.565828][ T8452] bpf_verifier_vlog+0x4e6/0x840 [ 182.570815][ T8452] __btf_verifier_log+0xe3/0x140 [ 182.575809][ T8452] ? btf_check_sec_info+0x350/0x350 [ 182.581071][ T8452] btf_verifier_log_vsi+0x23c/0x3d0 [ 182.586321][ T8452] ? sort_r+0x17f5/0x1810 [ 182.590694][ T8452] ? btf_datasec_show+0x970/0x970 [ 182.595784][ T8452] btf_datasec_check_meta+0x97f/0xb50 [ 182.601225][ T8452] btf_check_all_metas+0x371/0xaf0 [ 182.606389][ T8452] btf_parse_type_sec+0xfc/0x1960 [ 182.611457][ T8452] ? btf_check_sec_info+0x350/0x350 [ 182.616678][ T8452] ? __virt_addr_valid+0x10c/0x380 [ 182.621803][ T8452] ? btf_verifier_log+0x1a0/0x1a0 [ 182.626837][ T8452] ? btf_parse_hdr+0x545/0x700 [ 182.631609][ T8452] ? btf_parse_str_sec+0x20d/0x2a0 [ 182.636742][ T8452] btf_new_fd+0x440/0x9e0 [ 182.641088][ T8452] ? bpf_btf_show_fdinfo+0x80/0x80 [ 182.646215][ T8452] ? capable+0x88/0xe0 [ 182.650294][ T8452] __sys_bpf+0x670/0x890 [ 182.654539][ T8452] ? bpf_link_show_fdinfo+0x560/0x560 [ 182.659928][ T8452] ? lock_chain_count+0x20/0x20 [ 182.664788][ T8452] __x64_sys_bpf+0x7c/0x90 [ 182.669213][ T8452] do_syscall_64+0x55/0xb0 [ 182.673640][ T8452] ? clear_bhb_loop+0x40/0x90 [ 182.678346][ T8452] ? clear_bhb_loop+0x40/0x90 [ 182.683057][ T8452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.688980][ T8452] RIP: 0033:0x7f77a579e159 [ 182.693405][ T8452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.713039][ T8452] RSP: 002b:00007f77a66c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 182.721466][ T8452] RAX: ffffffffffffffda RBX: 00007f77a5a25fa0 RCX: 00007f77a579e159 [ 182.729451][ T8452] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 182.737436][ T8452] RBP: 00007f77a583506b R08: 0000000000000000 R09: 0000000000000000 [ 182.745427][ T8452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.753412][ T8452] R13: 00007f77a5a26038 R14: 00007f77a5a25fa0 R15: 00007ffcf66420f8 [ 182.761408][ T8452] [ 182.873491][ T8458] fuse: Bad value for 'fd' [ 183.051309][ T27] IPVS: starting estimator thread 0... [ 183.059263][ T8465] IPVS: rr: UDP [::1]:8080 - no destination available [ 183.145570][ T8466] IPVS: using max 19 ests per chain, 45600 per kthread [ 183.232761][ T8459] loop5: detected capacity change from 0 to 32768 [ 183.263877][ T8459] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 183.332021][ T28] kauditd_printk_skb: 336 callbacks suppressed [ 183.332036][ T28] audit: type=1800 audit(1790716936.941:699): pid=8459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.872" name="file1" dev="loop5" ino=17060 res=0 errno=0 [ 183.392558][ T8459] syz.5.872 (8459) used greatest stack depth: 17720 bytes left [ 183.448370][ T6990] ocfs2: Unmounting device (7,5) on (node local) [ 183.815853][ T8485] FAULT_INJECTION: forcing a failure. [ 183.815853][ T8485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.829262][ T8485] CPU: 1 PID: 8485 Comm: syz.5.884 Not tainted syzkaller #0 [ 183.836584][ T8485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.846670][ T8485] Call Trace: [ 183.849966][ T8485] [ 183.852909][ T8485] dump_stack_lvl+0x18c/0x250 [ 183.857631][ T8485] ? show_regs_print_info+0x20/0x20 [ 183.862861][ T8485] ? load_image+0x420/0x420 [ 183.867399][ T8485] ? __might_fault+0xaa/0x120 [ 183.872099][ T8485] ? __lock_acquire+0x7d80/0x7d80 [ 183.877151][ T8485] ? __virt_addr_valid+0x10c/0x380 [ 183.882306][ T8485] should_fail_ex+0x394/0x4c0 [ 183.887033][ T8485] _copy_to_user+0x2f/0xa0 [ 183.891479][ T8485] bpf_verifier_vlog+0x2f1/0x840 [ 183.896460][ T8485] __btf_verifier_log+0xe3/0x140 [ 183.901454][ T8485] ? btf_check_sec_info+0x350/0x350 [ 183.906711][ T8485] btf_verifier_log_vsi+0x1fd/0x3d0 [ 183.911952][ T8485] ? sort_r+0x17f5/0x1810 [ 183.916314][ T8485] ? btf_datasec_show+0x970/0x970 [ 183.921392][ T8485] btf_datasec_check_meta+0x97f/0xb50 [ 183.926854][ T8485] btf_check_all_metas+0x371/0xaf0 [ 183.932016][ T8485] btf_parse_type_sec+0xfc/0x1960 [ 183.937068][ T8485] ? btf_check_sec_info+0x350/0x350 [ 183.942312][ T8485] ? __virt_addr_valid+0x10c/0x380 [ 183.947469][ T8485] ? btf_verifier_log+0x1a0/0x1a0 [ 183.952544][ T8485] ? btf_parse_hdr+0x545/0x700 [ 183.957343][ T8485] ? btf_parse_str_sec+0x20d/0x2a0 [ 183.962487][ T8485] btf_new_fd+0x440/0x9e0 [ 183.966866][ T8485] ? bpf_btf_show_fdinfo+0x80/0x80 [ 183.972055][ T8485] ? capable+0x88/0xe0 [ 183.976168][ T8485] __sys_bpf+0x670/0x890 [ 183.980449][ T8485] ? bpf_link_show_fdinfo+0x560/0x560 [ 183.985877][ T8485] ? lock_chain_count+0x20/0x20 [ 183.990767][ T8485] __x64_sys_bpf+0x7c/0x90 [ 183.995209][ T8485] do_syscall_64+0x55/0xb0 [ 183.999659][ T8485] ? clear_bhb_loop+0x40/0x90 [ 184.004375][ T8485] ? clear_bhb_loop+0x40/0x90 [ 184.009099][ T8485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.015026][ T8485] RIP: 0033:0x7f65bb99e159 [ 184.019474][ T8485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.039122][ T8485] RSP: 002b:00007f65b9bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 184.047582][ T8485] RAX: ffffffffffffffda RBX: 00007f65bbc25fa0 RCX: 00007f65bb99e159 [ 184.055589][ T8485] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 184.063598][ T8485] RBP: 00007f65bba3506b R08: 0000000000000000 R09: 0000000000000000 [ 184.071601][ T8485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.079606][ T8485] R13: 00007f65bbc26038 R14: 00007f65bbc25fa0 R15: 00007ffeff35a1c8 [ 184.087629][ T8485] [ 185.775498][ T27] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 185.999548][ T27] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 186.011919][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.031114][ T27] usb 4-1: Product: syz [ 186.040945][ T27] usb 4-1: Manufacturer: syz [ 186.050148][ T27] usb 4-1: SerialNumber: syz [ 186.432140][ T8544] netlink: 20 bytes leftover after parsing attributes in process `syz.5.902'. [ 186.458551][ T8543] syz.4.901: vmalloc error: size 53248, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 186.502831][ T27] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 186.535526][ T8543] CPU: 1 PID: 8543 Comm: syz.4.901 Not tainted syzkaller #0 [ 186.542895][ T8543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 186.552983][ T8543] Call Trace: [ 186.556298][ T8543] [ 186.559254][ T8543] dump_stack_lvl+0x18c/0x250 [ 186.563978][ T8543] ? show_regs_print_info+0x20/0x20 [ 186.569223][ T8543] ? load_image+0x420/0x420 [ 186.573773][ T8543] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 186.580240][ T8543] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 186.586798][ T8543] warn_alloc+0x246/0x340 [ 186.591178][ T8543] ? zone_watermark_ok_safe+0x230/0x230 [ 186.596780][ T8543] __vmalloc_node_range+0x1055/0x1320 [ 186.602229][ T8543] ? free_vm_area+0x50/0x50 [ 186.606771][ T8543] ? netlink_sendmsg+0x602/0xbf0 [ 186.611716][ T8543] vmalloc+0x79/0x90 [ 186.615619][ T8543] ? netlink_sendmsg+0x602/0xbf0 [ 186.620572][ T8543] netlink_sendmsg+0x602/0xbf0 [ 186.625347][ T8543] ? netlink_getsockopt+0x590/0x590 [ 186.630567][ T8543] ? apparmor_socket_sendmsg+0x8e/0x330 [ 186.636122][ T8543] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 186.641414][ T8543] ? security_socket_sendmsg+0x80/0xa0 [ 186.646878][ T8543] __sys_sendto+0x4a9/0x6b0 [ 186.651389][ T8543] ? __ia32_sys_getpeername+0x90/0x90 [ 186.656777][ T8543] ? __lock_acquire+0x7d80/0x7d80 [ 186.661813][ T8543] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 186.667796][ T8543] ? lock_chain_count+0x20/0x20 [ 186.672667][ T8543] __x64_sys_sendto+0xde/0xf0 [ 186.677436][ T8543] do_syscall_64+0x55/0xb0 [ 186.681856][ T8543] ? clear_bhb_loop+0x40/0x90 [ 186.686536][ T8543] ? clear_bhb_loop+0x40/0x90 [ 186.691217][ T8543] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 186.697122][ T8543] RIP: 0033:0x7f77a579e159 [ 186.701542][ T8543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.721165][ T8543] RSP: 002b:00007f77a66c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 186.729585][ T8543] RAX: ffffffffffffffda RBX: 00007f77a5a25fa0 RCX: 00007f77a579e159 [ 186.737565][ T8543] RDX: 0000000000010a73 RSI: 0000200000000000 RDI: 0000000000000004 [ 186.745542][ T8543] RBP: 00007f77a583506b R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 186.753519][ T8543] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 186.761488][ T8543] R13: 00007f77a5a26038 R14: 00007f77a5a25fa0 R15: 00007ffcf66420f8 [ 186.769470][ T8543] [ 186.796821][ T8543] Mem-Info: [ 186.800183][ T8543] active_anon:43691 inactive_anon:0 isolated_anon:0 [ 186.800183][ T8543] active_file:16081 inactive_file:40084 isolated_file:0 [ 186.800183][ T8543] unevictable:0 dirty:227 writeback:0 [ 186.800183][ T8543] slab_reclaimable:11236 slab_unreclaimable:94575 [ 186.800183][ T8543] mapped:24952 shmem:37785 pagetables:787 [ 186.800183][ T8543] sec_pagetables:0 bounce:0 [ 186.800183][ T8543] kernel_misc_reclaimable:0 [ 186.800183][ T8543] free:1303164 free_pcp:13055 free_cma:0 [ 186.893657][ T8543] Node 0 active_anon:169828kB inactive_anon:0kB active_file:64324kB inactive_file:160136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99808kB dirty:908kB writeback:0kB shmem:146304kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12100kB pagetables:3148kB sec_pagetables:0kB all_unreclaimable? no [ 186.936109][ T8543] Node 1 active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 187.023832][ T8543] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 187.082207][ T8543] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 187.095387][ T8543] Node 0 DMA32 free:1311236kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:160644kB inactive_anon:0kB active_file:64324kB inactive_file:159316kB unevictable:0kB writepending:952kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:37532kB local_pcp:16000kB free_cma:0kB [ 187.146650][ T8543] lowmem_reserve[]: 0 0 0 0 0 [ 187.151512][ T8543] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 187.205598][ T8543] lowmem_reserve[]: 0 0 0 0 0 [ 187.215481][ T8543] Node 1 Normal free:3888524kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23936kB local_pcp:9504kB free_cma:0kB [ 187.255647][ T8543] lowmem_reserve[]: 0 0 0 0 0 [ 187.270851][ T8543] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 187.304072][ T8543] Node 0 DMA32: 129*4kB (UE) 219*8kB (UME) 117*16kB (UME) 530*32kB (UME) 96*64kB (UME) 74*128kB (UME) 93*256kB (UME) 52*512kB (UME) 48*1024kB (UM) 35*2048kB (UME) 274*4096kB (UM) = 1330284kB [ 187.375538][ T8543] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 187.405653][ T8543] Node 1 Normal: 233*4kB (UM) 75*8kB (UME) 47*16kB (UME) 39*32kB (UME) 19*64kB (UE) 6*128kB (UME) 0*256kB 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 947*4096kB (UM) = 3888524kB [ 187.443973][ T8543] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 187.474930][ T8543] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 187.485691][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 187.495317][ T8543] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 187.515924][ T8543] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 187.536354][ T8543] 88497 total pagecache pages [ 187.542346][ T8543] 0 pages in swap cache [ 187.547905][ T8543] Free swap = 124676kB [ 187.557859][ T8543] Total swap = 124996kB [ 187.566042][ T8543] 2097051 pages RAM [ 187.569933][ T8543] 0 pages HighMem/MovableOnly [ 187.583769][ T8543] 416965 pages reserved [ 187.590402][ T8543] 0 pages cma reserved [ 187.599549][ T8557] jffs2: notice: (8557) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 187.997347][ T8565] loop5: detected capacity change from 0 to 2048 [ 188.079147][ T8565] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.214401][ T8568] jffs2: notice: (8568) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 188.459680][ C0] usblp0: nonzero write bulk status received: -71 [ 188.475572][ T8] usb 4-1: USB disconnect, device number 11 [ 188.534023][ T8549] usblp0: removed [ 190.385683][ T8616] netlink: 92 bytes leftover after parsing attributes in process `syz.3.928'. [ 190.469198][ T8616] netlink: 'syz.3.928': attribute type 1 has an invalid length. [ 190.508879][ T8616] netlink: 76 bytes leftover after parsing attributes in process `syz.3.928'. [ 190.790126][ T8625] FAULT_INJECTION: forcing a failure. [ 190.790126][ T8625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.845631][ T8625] CPU: 1 PID: 8625 Comm: syz.3.929 Not tainted syzkaller #0 [ 190.853006][ T8625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.863092][ T8625] Call Trace: [ 190.866401][ T8625] [ 190.869363][ T8625] dump_stack_lvl+0x18c/0x250 [ 190.874098][ T8625] ? show_regs_print_info+0x20/0x20 [ 190.879342][ T8625] ? load_image+0x420/0x420 [ 190.883896][ T8625] ? __might_fault+0xaa/0x120 [ 190.888621][ T8625] ? __lock_acquire+0x7d80/0x7d80 [ 190.893666][ T8625] ? __virt_addr_valid+0x10c/0x380 [ 190.898804][ T8625] should_fail_ex+0x394/0x4c0 [ 190.903516][ T8625] _copy_to_user+0x2f/0xa0 [ 190.907960][ T8625] bpf_verifier_vlog+0x4e6/0x840 [ 190.912958][ T8625] __btf_verifier_log+0xe3/0x140 [ 190.917939][ T8625] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.924068][ T8625] ? btf_check_sec_info+0x350/0x350 [ 190.929313][ T8625] ? mark_lock+0x94/0x320 [ 190.933666][ T8625] __btf_verifier_log_type+0x4f7/0x690 [ 190.939158][ T8625] ? sort_r+0x17f5/0x1810 [ 190.943519][ T8625] ? btf_int_show+0x2810/0x2810 [ 190.948411][ T8625] btf_datasec_check_meta+0x46d/0xb50 [ 190.953806][ T8625] btf_check_all_metas+0x371/0xaf0 [ 190.958962][ T8625] btf_parse_type_sec+0xfc/0x1960 [ 190.964000][ T8625] ? btf_check_sec_info+0x350/0x350 [ 190.969214][ T8625] ? __virt_addr_valid+0x10c/0x380 [ 190.974332][ T8625] ? btf_verifier_log+0x1a0/0x1a0 [ 190.979368][ T8625] ? btf_parse_hdr+0x545/0x700 [ 190.984136][ T8625] ? btf_parse_str_sec+0x20d/0x2a0 [ 190.989262][ T8625] btf_new_fd+0x440/0x9e0 [ 190.993623][ T8625] ? bpf_btf_show_fdinfo+0x80/0x80 [ 190.998745][ T8625] ? capable+0x88/0xe0 [ 191.002840][ T8625] __sys_bpf+0x670/0x890 [ 191.007109][ T8625] ? bpf_link_show_fdinfo+0x560/0x560 [ 191.012512][ T8625] ? lock_chain_count+0x20/0x20 [ 191.017373][ T8625] __x64_sys_bpf+0x7c/0x90 [ 191.021796][ T8625] do_syscall_64+0x55/0xb0 [ 191.026228][ T8625] ? clear_bhb_loop+0x40/0x90 [ 191.030915][ T8625] ? clear_bhb_loop+0x40/0x90 [ 191.035616][ T8625] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.041521][ T8625] RIP: 0033:0x7f2ef659e159 [ 191.045942][ T8625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.065556][ T8625] RSP: 002b:00007f2ef73d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 191.073970][ T8625] RAX: ffffffffffffffda RBX: 00007f2ef6825fa0 RCX: 00007f2ef659e159 [ 191.081942][ T8625] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 191.089913][ T8625] RBP: 00007f2ef663506b R08: 0000000000000000 R09: 0000000000000000 [ 191.097888][ T8625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.105865][ T8625] R13: 00007f2ef6826038 R14: 00007f2ef6825fa0 R15: 00007ffd2e6cf6a8 [ 191.113855][ T8625] [ 191.196880][ T8636] FAULT_INJECTION: forcing a failure. [ 191.196880][ T8636] name fail_futex, interval 1, probability 0, space 0, times 1 [ 191.220450][ T8636] CPU: 1 PID: 8636 Comm: syz.0.924 Not tainted syzkaller #0 [ 191.227805][ T8636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.237893][ T8636] Call Trace: [ 191.241194][ T8636] [ 191.244144][ T8636] dump_stack_lvl+0x18c/0x250 [ 191.248863][ T8636] ? show_regs_print_info+0x20/0x20 [ 191.254088][ T8636] ? load_image+0x420/0x420 [ 191.258620][ T8636] ? get_user_pages_fast_only+0xa0/0xa0 [ 191.264203][ T8636] should_fail_ex+0x394/0x4c0 [ 191.268913][ T8636] get_futex_key+0x857/0x1030 [ 191.273622][ T8636] ? futex_setup_timer+0xc0/0xc0 [ 191.278599][ T8636] futex_wake+0x127/0x4f0 [ 191.282967][ T8636] ? futex_wake_mark+0x150/0x150 [ 191.287944][ T8636] do_futex+0x35d/0x3e0 [ 191.292291][ T8636] ? __might_fault+0xaa/0x120 [ 191.296993][ T8636] ? __ia32_sys_get_robust_list+0x110/0x110 [ 191.303035][ T8636] ? __might_fault+0xc6/0x120 [ 191.307773][ T8636] mm_release+0x184/0x3a0 [ 191.312145][ T8636] ? exit_mm_release+0x30/0x30 [ 191.316952][ T8636] ? lockdep_hardirqs_on+0x98/0x150 [ 191.322214][ T8636] exit_mm+0xa4/0x340 [ 191.326234][ T8636] ? sysctl_delayacct+0x220/0x220 [ 191.331295][ T8636] ? do_exit+0x2530/0x2530 [ 191.335757][ T8636] do_exit+0x909/0x2530 [ 191.339954][ T8636] ? put_task_struct+0xc0/0xc0 [ 191.344761][ T8636] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 191.350778][ T8636] ? get_signal+0x100e/0x1390 [ 191.355487][ T8636] ? lock_chain_count+0x20/0x20 [ 191.360378][ T8636] ? _raw_spin_lock_irq+0xbb/0xf0 [ 191.365446][ T8636] do_group_exit+0x22d/0x2f0 [ 191.370069][ T8636] ? lockdep_hardirqs_on+0x98/0x150 [ 191.375304][ T8636] get_signal+0x12a6/0x1390 [ 191.379855][ T8636] arch_do_signal_or_restart+0xc2/0x7b0 [ 191.385443][ T8636] ? __ia32_sys_get_robust_list+0x110/0x110 [ 191.391389][ T8636] ? get_sigframe_size+0x20/0x20 [ 191.396388][ T8636] ? rcu_is_watching+0x15/0xb0 [ 191.401198][ T8636] ? exit_to_user_mode_loop+0x3b/0x110 [ 191.406698][ T8636] exit_to_user_mode_loop+0x70/0x110 [ 191.412051][ T8636] exit_to_user_mode_prepare+0xee/0x180 [ 191.417636][ T8636] syscall_exit_to_user_mode+0x1a/0x50 [ 191.423133][ T8636] do_syscall_64+0x61/0xb0 [ 191.427593][ T8636] ? clear_bhb_loop+0x40/0x90 [ 191.432304][ T8636] ? clear_bhb_loop+0x40/0x90 [ 191.437030][ T8636] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.442963][ T8636] RIP: 0033:0x7fb0b179e159 [ 191.447407][ T8636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.467051][ T8636] RSP: 002b:00007fb0b25e00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 191.475501][ T8636] RAX: fffffffffffffe00 RBX: 00007fb0b1a26098 RCX: 00007fb0b179e159 [ 191.483500][ T8636] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb0b1a26098 [ 191.491474][ T8636] RBP: 00007fb0b1a26090 R08: 0000000000000000 R09: 0000000000000000 [ 191.499443][ T8636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.507411][ T8636] R13: 00007fb0b1a26128 R14: 00007fff09252620 R15: 00007fff09252708 [ 191.515396][ T8636] [ 191.705576][ T27] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 191.968901][ T27] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.985510][ T27] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 192.015499][ T27] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 192.024605][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.066843][ T27] cdc_acm: probe of 6-1:1.0 failed with error -22 [ 192.287393][ T23] usb 6-1: USB disconnect, device number 8 [ 192.324243][ T8654] FAULT_INJECTION: forcing a failure. [ 192.324243][ T8654] name failslab, interval 1, probability 0, space 0, times 0 [ 192.351380][ T8654] CPU: 0 PID: 8654 Comm: syz.0.939 Not tainted syzkaller #0 [ 192.358749][ T8654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.368833][ T8654] Call Trace: [ 192.372147][ T8654] [ 192.375113][ T8654] dump_stack_lvl+0x18c/0x250 [ 192.379848][ T8654] ? show_regs_print_info+0x20/0x20 [ 192.385097][ T8654] ? load_image+0x420/0x420 [ 192.389652][ T8654] ? __might_sleep+0xe0/0xe0 [ 192.394293][ T8654] ? __lock_acquire+0x7d80/0x7d80 [ 192.399374][ T8654] should_fail_ex+0x394/0x4c0 [ 192.404102][ T8654] should_failslab+0x9/0x20 [ 192.408643][ T8654] slab_pre_alloc_hook+0x59/0x300 [ 192.413718][ T8654] ? binderfs_fill_super+0x643/0xfa0 [ 192.419052][ T8654] __kmem_cache_alloc_node+0x53/0x250 [ 192.424471][ T8654] ? binderfs_fill_super+0x643/0xfa0 [ 192.429796][ T8654] kmalloc_trace+0x2a/0xe0 [ 192.434260][ T8654] binderfs_fill_super+0x643/0xfa0 [ 192.439424][ T8654] ? binderfs_fs_context_reconfigure+0x210/0x210 [ 192.445816][ T8654] ? up_write+0x1be/0x410 [ 192.450176][ T8654] ? sget_fc+0x7f5/0x8d0 [ 192.454454][ T8654] ? kill_litter_super+0xb0/0xb0 [ 192.459431][ T8654] ? binderfs_fs_context_reconfigure+0x210/0x210 [ 192.465802][ T8654] get_tree_nodev+0xb5/0x140 [ 192.470435][ T8654] vfs_get_tree+0x8c/0x280 [ 192.474891][ T8654] do_new_mount+0x24a/0xa40 [ 192.479440][ T8654] __se_sys_mount+0x2e7/0x3d0 [ 192.484159][ T8654] ? __x64_sys_mount+0xc0/0xc0 [ 192.488970][ T8654] ? lockdep_hardirqs_on+0x98/0x150 [ 192.494209][ T8654] ? __x64_sys_mount+0x20/0xc0 [ 192.499031][ T8654] do_syscall_64+0x55/0xb0 [ 192.503503][ T8654] ? clear_bhb_loop+0x40/0x90 [ 192.508232][ T8654] ? clear_bhb_loop+0x40/0x90 [ 192.512948][ T8654] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.518887][ T8654] RIP: 0033:0x7fb0b179e159 [ 192.523339][ T8654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.542989][ T8654] RSP: 002b:00007fb0b2601028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 192.551540][ T8654] RAX: ffffffffffffffda RBX: 00007fb0b1a25fa0 RCX: 00007fb0b179e159 [ 192.559548][ T8654] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000200000000300 [ 192.567565][ T8654] RBP: 00007fb0b183506b R08: 0000000000000000 R09: 0000000000000000 [ 192.575574][ T8654] R10: 0000000002200892 R11: 0000000000000246 R12: 0000000000000000 [ 192.583577][ T8654] R13: 00007fb0b1a26038 R14: 00007fb0b1a25fa0 R15: 00007fff09252708 [ 192.591598][ T8654] [ 193.194009][ T8681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.897597][ T8699] fuse: Bad value for 'fd' [ 193.908008][ T8697] jffs2: notice: (8697) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 194.023235][ T8705] netlink: 'syz.0.960': attribute type 8 has an invalid length. [ 194.031642][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.960'. [ 194.049358][ T8705] veth1_to_team: entered promiscuous mode [ 194.057070][ T8705] gretap0: entered promiscuous mode [ 194.066000][ T8705] veth1_to_hsr: entered promiscuous mode [ 194.072889][ T8705] hsr1: entered promiscuous mode [ 194.227694][ T8712] FAULT_INJECTION: forcing a failure. [ 194.227694][ T8712] name failslab, interval 1, probability 0, space 0, times 0 [ 194.245593][ T8712] CPU: 1 PID: 8712 Comm: syz.0.963 Not tainted syzkaller #0 [ 194.252947][ T8712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 194.263032][ T8712] Call Trace: [ 194.266328][ T8712] [ 194.269275][ T8712] dump_stack_lvl+0x18c/0x250 [ 194.273992][ T8712] ? show_regs_print_info+0x20/0x20 [ 194.279231][ T8712] ? load_image+0x420/0x420 [ 194.283767][ T8712] ? __might_sleep+0xe0/0xe0 [ 194.288387][ T8712] ? __lock_acquire+0x7d80/0x7d80 [ 194.293450][ T8712] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 194.299470][ T8712] should_fail_ex+0x394/0x4c0 [ 194.304189][ T8712] should_failslab+0x9/0x20 [ 194.308735][ T8712] slab_pre_alloc_hook+0x59/0x300 [ 194.313792][ T8712] ? __ns_get_path+0x2e/0x5f0 [ 194.318503][ T8712] kmem_cache_alloc_lru+0x4d/0x2b0 [ 194.323647][ T8712] ? new_inode_pseudo+0x82/0x1d0 [ 194.328627][ T8712] new_inode_pseudo+0x82/0x1d0 [ 194.333439][ T8712] __ns_get_path+0x249/0x5f0 [ 194.338072][ T8712] ns_get_path+0x54/0x90 [ 194.342356][ T8712] proc_ns_get_link+0x16c/0x2d0 [ 194.347239][ T8712] ? proc_ns_instantiate+0xf0/0xf0 [ 194.352384][ T8712] ? try_to_unlazy+0x33e/0x5c0 [ 194.357183][ T8712] ? proc_ns_instantiate+0xf0/0xf0 [ 194.362323][ T8712] pick_link+0x666/0xdd0 [ 194.366604][ T8712] step_into+0xc18/0xee0 [ 194.370864][ T8712] ? pid_revalidate+0x22/0x260 [ 194.375625][ T8712] ? set_root+0x3a0/0x3a0 [ 194.379963][ T8712] ? pid_revalidate+0x20d/0x260 [ 194.384851][ T8712] ? lookup_fast+0x494/0x4c0 [ 194.389478][ T8712] path_openat+0x1656/0x3270 [ 194.394117][ T8712] ? do_sys_openat2+0xda/0x1d0 [ 194.398914][ T8712] ? __x64_sys_openat+0x139/0x160 [ 194.403980][ T8712] ? verify_lock_unused+0x140/0x140 [ 194.409217][ T8712] ? do_filp_open+0x430/0x430 [ 194.413948][ T8712] do_filp_open+0x1f2/0x430 [ 194.418489][ T8712] ? vfs_tmpfile+0x620/0x620 [ 194.423125][ T8712] ? _raw_spin_unlock+0x28/0x40 [ 194.427992][ T8712] ? alloc_fd+0x590/0x640 [ 194.432333][ T8712] do_sys_openat2+0x134/0x1d0 [ 194.437018][ T8712] ? do_sys_open+0xe0/0xe0 [ 194.441442][ T8712] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 194.447427][ T8712] ? lock_chain_count+0x20/0x20 [ 194.452281][ T8712] __x64_sys_openat+0x139/0x160 [ 194.457139][ T8712] do_syscall_64+0x55/0xb0 [ 194.461559][ T8712] ? clear_bhb_loop+0x40/0x90 [ 194.466241][ T8712] ? clear_bhb_loop+0x40/0x90 [ 194.470921][ T8712] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.476820][ T8712] RIP: 0033:0x7fb0b175e98e [ 194.481235][ T8712] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 194.500854][ T8712] RSP: 002b:00007fb0b2600ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 194.509276][ T8712] RAX: ffffffffffffffda RBX: 00007fb0b26016c0 RCX: 00007fb0b175e98e [ 194.517257][ T8712] RDX: 0000000000000000 RSI: 00007fb0b2600f90 RDI: ffffffffffffff9c [ 194.525231][ T8712] RBP: 00007fb0b183506b R08: 0000000000000000 R09: 0000000000000000 [ 194.533200][ T8712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.541174][ T8712] R13: 00007fb0b1a26038 R14: 00007fb0b1a25fa0 R15: 00007fff09252708 [ 194.549158][ T8712] [ 194.589984][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.596442][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.865626][ T28] audit: type=1326 audit(1790716948.471:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.5.971" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65bb99e159 code=0x7ffc0000 [ 194.905574][ T8732] netlink: 16 bytes leftover after parsing attributes in process `syz.4.969'. [ 194.924820][ T28] audit: type=1326 audit(1790716948.471:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.5.971" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65bb99e159 code=0x7ffc0000 [ 194.973388][ T28] audit: type=1326 audit(1790716948.501:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.5.971" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f65bb99e159 code=0x7ffc0000 [ 195.035447][ T28] audit: type=1326 audit(1790716948.501:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.5.971" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65bb99e159 code=0x7ffc0000 [ 195.075167][ T28] audit: type=1326 audit(1790716948.501:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.5.971" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65bb99e159 code=0x7ffc0000 [ 195.099889][ T28] audit: type=1326 audit(1790716948.501:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.5.971" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f65bb99e159 code=0x7ffc0000 [ 195.134965][ T28] audit: type=1326 audit(1790716948.501:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.5.971" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65bb99e159 code=0x7ffc0000 [ 195.182828][ T28] audit: type=1326 audit(1790716948.501:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.5.971" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65bb99e159 code=0x7ffc0000 [ 195.211566][ T28] audit: type=1326 audit(1790716948.511:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.5.971" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f65bb99e159 code=0x7ffc0000 [ 195.241997][ T28] audit: type=1326 audit(1790716948.511:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.5.971" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65bb99e159 code=0x7ffc0000 [ 195.615809][ T5819] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 195.815565][ T5819] usb 4-1: Using ep0 maxpacket: 16 [ 195.837101][ T5819] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 195.864652][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.883306][ T5819] usb 4-1: Product: syz [ 195.891305][ T5819] usb 4-1: Manufacturer: syz [ 195.896193][ T5819] usb 4-1: SerialNumber: syz [ 196.356498][ T5819] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 196.377538][ T5819] usb 4-1: USB disconnect, device number 12 [ 196.658701][ T8782] fuse: Bad value for 'fd' [ 196.867234][ T8780] loop5: detected capacity change from 0 to 32768 [ 196.940804][ T8780] JBD2: Ignoring recovery information on journal [ 197.001234][ T8780] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 197.310593][ T6990] ocfs2: Unmounting device (7,5) on (node local) [ 197.413225][ T8803] FAULT_INJECTION: forcing a failure. [ 197.413225][ T8803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.472585][ T8803] CPU: 1 PID: 8803 Comm: syz.4.1001 Not tainted syzkaller #0 [ 197.480044][ T8803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 197.490136][ T8803] Call Trace: [ 197.493443][ T8803] [ 197.496393][ T8803] dump_stack_lvl+0x18c/0x250 [ 197.501124][ T8803] ? show_regs_print_info+0x20/0x20 [ 197.506418][ T8803] ? load_image+0x420/0x420 [ 197.510960][ T8803] ? __might_fault+0xaa/0x120 [ 197.515671][ T8803] ? __lock_acquire+0x7d80/0x7d80 [ 197.520751][ T8803] should_fail_ex+0x394/0x4c0 [ 197.525478][ T8803] strncpy_from_user+0x36/0x2f0 [ 197.530366][ T8803] getname_flags+0xf6/0x500 [ 197.534935][ T8803] do_sys_openat2+0xda/0x1d0 [ 197.539551][ T8803] ? do_sys_open+0xe0/0xe0 [ 197.543983][ T8803] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 197.549977][ T8803] ? lock_chain_count+0x20/0x20 [ 197.554841][ T8803] __x64_sys_openat+0x139/0x160 [ 197.559700][ T8803] do_syscall_64+0x55/0xb0 [ 197.564126][ T8803] ? clear_bhb_loop+0x40/0x90 [ 197.568809][ T8803] ? clear_bhb_loop+0x40/0x90 [ 197.573496][ T8803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.579398][ T8803] RIP: 0033:0x7f77a575e98e [ 197.583813][ T8803] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 197.603437][ T8803] RSP: 002b:00007f77a66bfec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 197.611858][ T8803] RAX: ffffffffffffffda RBX: 00007f77a66c06c0 RCX: 00007f77a575e98e [ 197.619832][ T8803] RDX: 0000000000000000 RSI: 00007f77a66bff90 RDI: ffffffffffffff9c [ 197.627804][ T8803] RBP: 00007f77a583506b R08: 0000000000000000 R09: 0000000000000000 [ 197.635774][ T8803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.643742][ T8803] R13: 00007f77a5a26038 R14: 00007f77a5a25fa0 R15: 00007ffcf66420f8 [ 197.651726][ T8803] [ 198.396887][ T8834] FAULT_INJECTION: forcing a failure. [ 198.396887][ T8834] name failslab, interval 1, probability 0, space 0, times 0 [ 198.417074][ T8834] CPU: 1 PID: 8834 Comm: syz.3.1013 Not tainted syzkaller #0 [ 198.424518][ T8834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.434654][ T8834] Call Trace: [ 198.437964][ T8834] [ 198.440915][ T8834] dump_stack_lvl+0x18c/0x250 [ 198.445652][ T8834] ? show_regs_print_info+0x20/0x20 [ 198.450893][ T8834] ? load_image+0x420/0x420 [ 198.455428][ T8834] ? __lock_acquire+0x7d80/0x7d80 [ 198.460484][ T8834] ? __asan_memset+0x22/0x40 [ 198.465113][ T8834] should_fail_ex+0x394/0x4c0 [ 198.469835][ T8834] should_failslab+0x9/0x20 [ 198.474376][ T8834] slab_pre_alloc_hook+0x59/0x300 [ 198.479450][ T8834] kmem_cache_alloc+0x5a/0x2c0 [ 198.484254][ T8834] ? security_inode_alloc+0x34/0x110 [ 198.489582][ T8834] security_inode_alloc+0x34/0x110 [ 198.494745][ T8834] inode_init_always+0x914/0xc90 [ 198.499737][ T8834] new_inode_pseudo+0x95/0x1d0 [ 198.504549][ T8834] __ns_get_path+0x249/0x5f0 [ 198.509199][ T8834] ns_get_path+0x54/0x90 [ 198.513503][ T8834] proc_ns_get_link+0x16c/0x2d0 [ 198.518402][ T8834] ? proc_ns_instantiate+0xf0/0xf0 [ 198.523555][ T8834] ? try_to_unlazy+0x33e/0x5c0 [ 198.528361][ T8834] ? proc_ns_instantiate+0xf0/0xf0 [ 198.533509][ T8834] pick_link+0x666/0xdd0 [ 198.537796][ T8834] step_into+0xc18/0xee0 [ 198.542079][ T8834] ? pid_revalidate+0x22/0x260 [ 198.546872][ T8834] ? set_root+0x3a0/0x3a0 [ 198.551232][ T8834] ? pid_revalidate+0x20d/0x260 [ 198.556122][ T8834] ? lookup_fast+0x494/0x4c0 [ 198.560751][ T8834] path_openat+0x1656/0x3270 [ 198.565383][ T8834] ? do_sys_openat2+0xda/0x1d0 [ 198.570175][ T8834] ? __x64_sys_openat+0x139/0x160 [ 198.575239][ T8834] ? verify_lock_unused+0x140/0x140 [ 198.580490][ T8834] ? do_filp_open+0x430/0x430 [ 198.585233][ T8834] do_filp_open+0x1f2/0x430 [ 198.589779][ T8834] ? vfs_tmpfile+0x620/0x620 [ 198.594425][ T8834] ? _raw_spin_unlock+0x28/0x40 [ 198.599312][ T8834] ? alloc_fd+0x590/0x640 [ 198.603690][ T8834] do_sys_openat2+0x134/0x1d0 [ 198.608409][ T8834] ? do_sys_open+0xe0/0xe0 [ 198.612865][ T8834] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 198.618887][ T8834] ? lock_chain_count+0x20/0x20 [ 198.623788][ T8834] __x64_sys_openat+0x139/0x160 [ 198.628686][ T8834] do_syscall_64+0x55/0xb0 [ 198.633153][ T8834] ? clear_bhb_loop+0x40/0x90 [ 198.637878][ T8834] ? clear_bhb_loop+0x40/0x90 [ 198.642600][ T8834] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.648542][ T8834] RIP: 0033:0x7f2ef655e98e [ 198.652992][ T8834] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 198.672639][ T8834] RSP: 002b:00007f2ef73cfec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 198.681104][ T8834] RAX: ffffffffffffffda RBX: 00007f2ef73d06c0 RCX: 00007f2ef655e98e [ 198.689092][ T8834] RDX: 0000000000000000 RSI: 00007f2ef73cff90 RDI: ffffffffffffff9c [ 198.697067][ T8834] RBP: 00007f2ef663506b R08: 0000000000000000 R09: 0000000000000000 [ 198.705036][ T8834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.713010][ T8834] R13: 00007f2ef6826038 R14: 00007f2ef6825fa0 R15: 00007ffd2e6cf6a8 [ 198.721000][ T8834] [ 199.785825][ T8875] FAULT_INJECTION: forcing a failure. [ 199.785825][ T8875] name failslab, interval 1, probability 0, space 0, times 0 [ 199.804102][ T8875] CPU: 1 PID: 8875 Comm: syz.5.1026 Not tainted syzkaller #0 [ 199.811556][ T8875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.821652][ T8875] Call Trace: [ 199.824948][ T8875] [ 199.827897][ T8875] dump_stack_lvl+0x18c/0x250 [ 199.832614][ T8875] ? show_regs_print_info+0x20/0x20 [ 199.837848][ T8875] ? load_image+0x420/0x420 [ 199.842397][ T8875] should_fail_ex+0x394/0x4c0 [ 199.847119][ T8875] should_failslab+0x9/0x20 [ 199.851662][ T8875] slab_pre_alloc_hook+0x59/0x300 [ 199.856735][ T8875] ? proc_self_get_link+0xe5/0x180 [ 199.861891][ T8875] __kmem_cache_alloc_node+0x53/0x250 [ 199.867312][ T8875] ? proc_self_get_link+0xe5/0x180 [ 199.872454][ T8875] kmalloc_trace+0x2a/0xe0 [ 199.876911][ T8875] proc_self_get_link+0xe5/0x180 [ 199.881877][ T8875] ? proc_setup_self+0x2c0/0x2c0 [ 199.886845][ T8875] pick_link+0x6a8/0xdd0 [ 199.891132][ T8875] step_into+0xc18/0xee0 [ 199.895432][ T8875] ? set_root+0x3a0/0x3a0 [ 199.899807][ T8875] ? lookup_fast+0x14a/0x4c0 [ 199.904438][ T8875] ? security_inode_permission+0xb0/0xf0 [ 199.910120][ T8875] link_path_walk+0x748/0xe40 [ 199.914821][ T8875] ? handle_lookup_down+0x130/0x130 [ 199.920033][ T8875] path_openat+0x291/0x3270 [ 199.924554][ T8875] ? do_sys_openat2+0xda/0x1d0 [ 199.929321][ T8875] ? __x64_sys_openat+0x139/0x160 [ 199.934447][ T8875] ? verify_lock_unused+0x140/0x140 [ 199.939655][ T8875] ? do_filp_open+0x430/0x430 [ 199.944356][ T8875] do_filp_open+0x1f2/0x430 [ 199.948871][ T8875] ? vfs_tmpfile+0x620/0x620 [ 199.953481][ T8875] ? _raw_spin_unlock+0x28/0x40 [ 199.958341][ T8875] ? alloc_fd+0x590/0x640 [ 199.962688][ T8875] do_sys_openat2+0x134/0x1d0 [ 199.967380][ T8875] ? do_sys_open+0xe0/0xe0 [ 199.971806][ T8875] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 199.977794][ T8875] ? lock_chain_count+0x20/0x20 [ 199.982760][ T8875] __x64_sys_openat+0x139/0x160 [ 199.987624][ T8875] do_syscall_64+0x55/0xb0 [ 199.992047][ T8875] ? clear_bhb_loop+0x40/0x90 [ 199.996742][ T8875] ? clear_bhb_loop+0x40/0x90 [ 200.001430][ T8875] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.007347][ T8875] RIP: 0033:0x7f65bb95e98e [ 200.011765][ T8875] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 200.031385][ T8875] RSP: 002b:00007f65b9bf5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 200.039811][ T8875] RAX: ffffffffffffffda RBX: 00007f65b9bf66c0 RCX: 00007f65bb95e98e [ 200.047790][ T8875] RDX: 0000000000000000 RSI: 00007f65b9bf5f90 RDI: ffffffffffffff9c [ 200.055767][ T8875] RBP: 00007f65bba3506b R08: 0000000000000000 R09: 0000000000000000 [ 200.063741][ T8875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.071712][ T8875] R13: 00007f65bbc26038 R14: 00007f65bbc25fa0 R15: 00007ffeff35a1c8 [ 200.079699][ T8875] [ 201.130442][ T8889] loop3: detected capacity change from 0 to 40427 [ 201.148711][ T8889] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 201.162599][ T8889] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 201.190770][ T8889] F2FS-fs (loop3): invalid crc value [ 201.217272][ T8889] F2FS-fs (loop3): Found nat_bits in checkpoint [ 201.341851][ T8909] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 201.374920][ T8889] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 201.395421][ T8889] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 201.494270][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 201.494286][ T28] audit: type=1804 audit(1790716955.101:717): pid=8889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1032" name="/newroot/258/file0/bus" dev="loop3" ino=10 res=1 errno=0 [ 201.728124][ T5085] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.734241][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 201.960386][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 201.977611][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 201.989821][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 202.008118][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 202.016420][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 202.024144][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 202.348517][ T8918] chnl_net:caif_netlink_parms(): no params data found [ 202.546348][ T8918] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.553722][ T8918] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.561925][ T8918] bridge_slave_0: entered allmulticast mode [ 202.569564][ T8918] bridge_slave_0: entered promiscuous mode [ 202.588867][ T8918] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.605584][ T8918] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.612882][ T8918] bridge_slave_1: entered allmulticast mode [ 202.636839][ T8918] bridge_slave_1: entered promiscuous mode [ 202.693157][ T8918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.706437][ T8918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.756472][ T8918] team0: Port device team_slave_0 added [ 202.778429][ T8918] team0: Port device team_slave_1 added [ 202.837648][ T8918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.855462][ T8918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.916725][ T8918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.948270][ T8918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.961125][ T8918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.993526][ T8918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.093058][ T8918] hsr_slave_0: entered promiscuous mode [ 203.099982][ T8918] hsr_slave_1: entered promiscuous mode [ 203.106566][ T8918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.116493][ T8918] Cannot create hsr debugfs directory [ 203.122079][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1054'. [ 203.158616][ T8947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1054'. [ 203.563784][ T8918] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 203.595079][ T8918] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 203.631456][ T8918] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 203.651531][ T8918] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 203.887616][ T8918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.939059][ T8918] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.998362][ T2112] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.005721][ T2112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.039699][ T2112] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.046966][ T2112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.119903][ T8918] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 204.139733][ T5784] Bluetooth: hci2: command tx timeout [ 204.163209][ T8918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.192302][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1063'. [ 204.313158][ T8977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.378998][ T8980] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1067'. [ 204.496511][ T8984] fuse: Bad value for 'fd' [ 204.596983][ T8918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.750875][ T8997] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 204.772917][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 205.048654][ T8918] veth0_vlan: entered promiscuous mode [ 205.107564][ T8918] veth1_vlan: entered promiscuous mode [ 205.201641][ T8918] veth0_macvtap: entered promiscuous mode [ 205.249651][ T8918] veth1_macvtap: entered promiscuous mode [ 205.302388][ T8918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.346397][ T8918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.366731][ T8918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.380013][ T8918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.391171][ T8918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.422640][ T8918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.444250][ T8918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.461955][ T8918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.474556][ T8918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.492825][ T8918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.509147][ T8918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.530546][ T8918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.554165][ T8918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.574794][ T8918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.592038][ T8918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.603184][ T8918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.620734][ T8918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.630859][ T8918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.659925][ T8918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.684438][ T8918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.701782][ T8918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.714658][ T8918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.739586][ T8918] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.756291][ T8918] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.765109][ T8918] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.784669][ T8918] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.892434][ T9014] FAULT_INJECTION: forcing a failure. [ 205.892434][ T9014] name failslab, interval 1, probability 0, space 0, times 0 [ 205.909736][ T9012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1077'. [ 205.919445][ T9014] CPU: 0 PID: 9014 Comm: syz.3.1078 Not tainted syzkaller #0 [ 205.926890][ T9014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.936987][ T9014] Call Trace: [ 205.940329][ T9014] [ 205.943788][ T9014] dump_stack_lvl+0x18c/0x250 [ 205.948606][ T9014] ? show_regs_print_info+0x20/0x20 [ 205.953891][ T9014] ? load_image+0x420/0x420 [ 205.958473][ T9014] ? __might_sleep+0xe0/0xe0 [ 205.963200][ T9014] ? __lock_acquire+0x7d80/0x7d80 [ 205.968279][ T9014] should_fail_ex+0x394/0x4c0 [ 205.973296][ T9014] should_failslab+0x9/0x20 [ 205.978022][ T9014] slab_pre_alloc_hook+0x59/0x300 [ 205.983202][ T9014] kmem_cache_alloc+0x5a/0x2c0 [ 205.988019][ T9014] ? __anon_vma_prepare+0x68/0x440 [ 205.993189][ T9014] __anon_vma_prepare+0x68/0x440 [ 205.998435][ T9014] ? __pte_alloc+0x113/0x2a0 [ 206.003119][ T9014] handle_mm_fault+0x3ded/0x4a50 [ 206.008117][ T9014] ? handle_mm_fault+0xe6/0x4a50 [ 206.013103][ T9014] ? numa_migrate_prep+0x350/0x350 [ 206.018364][ T9014] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 206.023687][ T9014] do_user_addr_fault+0x736/0x12d0 [ 206.028824][ T9014] exc_page_fault+0x64/0x100 [ 206.033440][ T9014] ? clear_bhb_loop+0x40/0x90 [ 206.038144][ T9014] asm_exc_page_fault+0x26/0x30 [ 206.043004][ T9014] RIP: 0033:0x7f2ef6560082 [ 206.047436][ T9014] Code: 8d 15 13 1a 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 38 2d 29 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 206.067241][ T9014] RSP: 002b:00007f2ef73ced20 EFLAGS: 00010286 [ 206.073321][ T9014] RAX: ffffffffffffffff RBX: 00007f2ef0000000 RCX: 00007f2ef659df57 [ 206.081297][ T9014] RDX: 00007f2ef6651a71 RSI: 0000000000021000 RDI: 00007f2ef0000000 [ 206.089282][ T9014] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 206.097269][ T9014] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 206.105365][ T9014] R13: 0000000000001000 R14: 00007f2ef4000000 R15: 0000000003809000 [ 206.113363][ T9014] [ 206.132844][ T9014] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 206.140958][ T9012] bridge_slave_1: left allmulticast mode [ 206.147139][ T9012] bridge_slave_1: left promiscuous mode [ 206.165939][ T9012] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.215641][ T5784] Bluetooth: hci2: command tx timeout [ 206.216559][ T9012] bridge_slave_0: left allmulticast mode [ 206.287183][ T9012] bridge_slave_0: left promiscuous mode [ 206.295075][ T9012] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.709293][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.733661][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.830764][ T5977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.859601][ T5977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.035740][ T9032] 9pnet: p9_errstr2errno: server reported unknown error õ1 [ 207.687676][ T9042] gadgetfs: bound to dummy_udc driver [ 207.698383][ T9034] loop6: detected capacity change from 0 to 32768 [ 208.010664][ T9034] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 208.174191][ T9034] XFS (loop6): Ending clean mount [ 208.283328][ T28] audit: type=1800 audit(1790716961.891:718): pid=9034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1043" name="file1" dev="loop6" ino=6150 res=0 errno=0 [ 208.310358][ T5784] Bluetooth: hci2: command tx timeout [ 208.347364][ T9034] XFS (loop6): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 208.719054][ T8918] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 210.377035][ T5784] Bluetooth: hci2: command tx timeout [ 210.905772][ T9090] netlink: 'syz.3.1107': attribute type 4 has an invalid length. [ 210.932187][ T9090] netlink: 'syz.3.1107': attribute type 4 has an invalid length. [ 211.412948][ T9128] loop3: detected capacity change from 0 to 256 [ 211.492615][ T9128] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 211.568273][ T9119] loop6: detected capacity change from 0 to 32768 [ 211.653418][ T9119] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1116 (9119) [ 211.791315][ T9119] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 211.835536][ T9119] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 211.835609][ T9119] BTRFS info (device loop6): setting nodatasum [ 211.835626][ T9119] BTRFS info (device loop6): force zlib compression, level 3 [ 211.835651][ T9119] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 211.941368][ T9119] BTRFS info (device loop6): use lzo compression, level 0 [ 211.980933][ T9119] BTRFS info (device loop6): turning on flush-on-commit [ 211.995529][ T9119] BTRFS info (device loop6): enabling auto defrag [ 212.002076][ T9119] BTRFS info (device loop6): max_inline at 4096 [ 212.046595][ T9119] BTRFS info (device loop6): using free space tree [ 212.220498][ T9119] BTRFS info (device loop6): enabling ssd optimizations [ 212.737975][ T8918] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 213.628485][ T9170] FAULT_INJECTION: forcing a failure. [ 213.628485][ T9170] name failslab, interval 1, probability 0, space 0, times 0 [ 213.681159][ T9170] CPU: 1 PID: 9170 Comm: syz.6.1130 Not tainted syzkaller #0 [ 213.688714][ T9170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.698810][ T9170] Call Trace: [ 213.702123][ T9170] [ 213.705085][ T9170] dump_stack_lvl+0x18c/0x250 [ 213.709812][ T9170] ? show_regs_print_info+0x20/0x20 [ 213.715035][ T9170] ? load_image+0x420/0x420 [ 213.719919][ T9170] ? __lock_acquire+0x7d80/0x7d80 [ 213.719955][ T9170] should_fail_ex+0x394/0x4c0 [ 213.719988][ T9170] should_failslab+0x9/0x20 [ 213.730292][ T9170] slab_pre_alloc_hook+0x59/0x300 [ 213.730340][ T9170] kmem_cache_alloc_lru+0x4d/0x2b0 [ 213.730366][ T9170] ? proc_alloc_inode+0x2a/0xb0 [ 213.730389][ T9170] proc_alloc_inode+0x2a/0xb0 [ 213.730410][ T9170] ? proc_invalidate_siblings_dcache+0x6c0/0x6c0 [ 213.730433][ T9170] new_inode_pseudo+0x63/0x1d0 [ 213.730456][ T9170] new_inode+0x22/0x1d0 [ 213.730482][ T9170] proc_pid_make_inode+0x24/0x190 [ 213.730508][ T9170] proc_ns_instantiate+0x53/0xf0 [ 213.730533][ T9170] proc_fill_cache+0x1ef/0x430 [ 213.730559][ T9170] ? proc_ns_dir_lookup+0x800/0x800 [ 213.730580][ T9170] ? pid_revalidate+0x260/0x260 [ 213.740223][ T9170] ? filldir64+0x40b/0x620 [ 213.740273][ T9170] proc_ns_dir_readdir+0x369/0x470 [ 213.740302][ T9170] iterate_dir+0x1bd/0x590 [ 213.740332][ T9170] __se_sys_getdents64+0xf6/0x270 [ 213.740360][ T9170] ? __x64_sys_getdents64+0x80/0x80 [ 213.740381][ T9170] ? filldir+0x620/0x620 [ 213.740413][ T9170] ? lockdep_hardirqs_on+0x98/0x150 [ 213.740437][ T9170] do_syscall_64+0x55/0xb0 [ 213.740460][ T9170] ? clear_bhb_loop+0x40/0x90 [ 213.740485][ T9170] ? clear_bhb_loop+0x40/0x90 [ 213.740514][ T9170] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.740540][ T9170] RIP: 0033:0x7fc915d9e159 [ 213.740557][ T9170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.740572][ T9170] RSP: 002b:00007fc916ccd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 213.740594][ T9170] RAX: ffffffffffffffda RBX: 00007fc916025fa0 RCX: 00007fc915d9e159 [ 213.740616][ T9170] RDX: 0000000000000077 RSI: 0000200000000200 RDI: 0000000000000004 [ 213.740631][ T9170] RBP: 00007fc915e3506b R08: 0000000000000000 R09: 0000000000000000 [ 213.740642][ T9170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.740652][ T9170] R13: 00007fc916026038 R14: 00007fc916025fa0 R15: 00007fff9837b3a8 [ 213.755830][ T9170] [ 214.967481][ T9192] loop6: detected capacity change from 0 to 40427 [ 214.994329][ T9192] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 215.052902][ T9192] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 215.078294][ T9192] F2FS-fs (loop6): invalid crc value [ 215.119607][ T9192] F2FS-fs (loop6): Found nat_bits in checkpoint [ 215.256890][ T9192] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 215.267325][ T9192] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 215.448690][ T28] audit: type=1804 audit(1790716969.061:719): pid=9192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1136" name="/newroot/16/file0/bus" dev="loop6" ino=10 res=1 errno=0 [ 216.286050][ C1] net_ratelimit: 92 callbacks suppressed [ 216.492276][ T9260] gadgetfs: bound to dummy_udc driver [ 217.158957][ T9289] loop3: detected capacity change from 0 to 128 [ 217.221075][ T9289] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 217.293194][ T9289] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 217.370852][ T9289] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 217.422024][ T9289] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 217.698607][ T9293] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 218.263674][ T9324] loop6: detected capacity change from 0 to 128 [ 218.338404][ T9324] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 218.367855][ T9324] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.432393][ T9324] UDF-fs: error (device loop6): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 218.487405][ T9324] UDF-fs: error (device loop6): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 219.073864][ T9339] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 219.742837][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ea8cc00: rx timeout, send abort [ 220.243107][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ea8d000: rx timeout, send abort [ 220.253156][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ea8cc00: abort rx timeout. Force session deactivation [ 220.474396][ T9381] loop3: detected capacity change from 0 to 512 [ 220.496363][ T9381] EXT4-fs (loop3): 1 truncate cleaned up [ 220.506768][ T9381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.751406][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ea8d000: abort rx timeout. Force session deactivation [ 221.072806][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.140370][ T9391] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1209'. [ 221.405544][ C1] net_ratelimit: 85 callbacks suppressed [ 225.131546][ T9424] fuse: Bad value for 'fd' [ 226.264967][ T9450] FAULT_INJECTION: forcing a failure. [ 226.264967][ T9450] name failslab, interval 1, probability 0, space 0, times 0 [ 226.281375][ T9450] CPU: 1 PID: 9450 Comm: syz.4.1229 Not tainted syzkaller #0 [ 226.288788][ T9450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 226.288842][ T9450] Call Trace: [ 226.288852][ T9450] [ 226.288861][ T9450] dump_stack_lvl+0x18c/0x250 [ 226.288958][ T9450] ? show_regs_print_info+0x20/0x20 [ 226.288983][ T9450] ? load_image+0x420/0x420 [ 226.289010][ T9450] ? __might_sleep+0xe0/0xe0 [ 226.299406][ T9450] ? __lock_acquire+0x7d80/0x7d80 [ 226.299446][ T9450] should_fail_ex+0x394/0x4c0 [ 226.299485][ T9450] should_failslab+0x9/0x20 [ 226.299513][ T9450] slab_pre_alloc_hook+0x59/0x300 [ 226.306017][ T9450] ? down_write+0x16e/0x200 [ 226.306045][ T9450] ? devpts_fill_super+0x136/0x8e0 [ 226.306071][ T9450] __kmem_cache_alloc_node+0x53/0x250 [ 226.306104][ T9450] ? devpts_fill_super+0x136/0x8e0 [ 226.315970][ T9450] kmalloc_trace+0x2a/0xe0 [ 226.316013][ T9450] devpts_fill_super+0x136/0x8e0 [ 226.316043][ T9450] ? free_anon_bdev+0x30/0x30 [ 226.316065][ T9450] ? devpts_kill_sb+0x70/0x70 [ 226.316089][ T9450] mount_nodev+0x56/0xf0 [ 226.316110][ T9450] legacy_get_tree+0xea/0x180 [ 226.325723][ T9450] ? devpts_pty_kill+0x290/0x290 [ 226.325759][ T9450] vfs_get_tree+0x8c/0x280 [ 226.325781][ T9450] do_new_mount+0x24a/0xa40 [ 226.325808][ T9450] __se_sys_mount+0x2e7/0x3d0 [ 226.411390][ T9450] ? __x64_sys_mount+0xc0/0xc0 [ 226.416167][ T9450] ? lockdep_hardirqs_on+0x98/0x150 [ 226.421369][ T9450] ? __x64_sys_mount+0x20/0xc0 [ 226.426174][ T9450] do_syscall_64+0x55/0xb0 [ 226.430598][ T9450] ? clear_bhb_loop+0x40/0x90 [ 226.435314][ T9450] ? clear_bhb_loop+0x40/0x90 [ 226.440036][ T9450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.445949][ T9450] RIP: 0033:0x7f77a579e159 [ 226.450368][ T9450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.450388][ T9450] RSP: 002b:00007f77a66c0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 226.450412][ T9450] RAX: ffffffffffffffda RBX: 00007f77a5a25fa0 RCX: 00007f77a579e159 [ 226.478416][ T9450] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 226.478434][ T9450] RBP: 00007f77a583506b R08: 0000000000000000 R09: 0000000000000000 [ 226.478448][ T9450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.494368][ T9450] R13: 00007f77a5a26038 R14: 00007f77a5a25fa0 R15: 00007ffcf66420f8 [ 226.510307][ T9450] [ 226.510491][ C1] net_ratelimit: 68 callbacks suppressed [ 226.664201][ T9459] fuse: Bad value for 'fd' [ 227.026013][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1237'. [ 227.047529][ T9472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.122749][ T9473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.136892][ T9472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.881138][ T9498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1249'. [ 227.891526][ T9498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.939940][ T9498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.698496][ T28] audit: type=1326 audit(1790716982.311:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.4.1260" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77a579e159 code=0x0 [ 228.938659][ T9530] input: syz0 as /devices/virtual/input/input7 [ 228.953421][ T9530] input: failed to attach handler leds to device input7, error: -6 [ 229.975733][ T9558] FAULT_INJECTION: forcing a failure. [ 229.975733][ T9558] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 229.989475][ T9558] CPU: 1 PID: 9558 Comm: syz.4.1275 Not tainted syzkaller #0 [ 229.996865][ T9558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.007030][ T9558] Call Trace: [ 230.010319][ T9558] [ 230.013261][ T9558] dump_stack_lvl+0x18c/0x250 [ 230.017964][ T9558] ? show_regs_print_info+0x20/0x20 [ 230.023179][ T9558] ? load_image+0x420/0x420 [ 230.027701][ T9558] ? __lock_acquire+0x7d80/0x7d80 [ 230.032769][ T9558] should_fail_ex+0x394/0x4c0 [ 230.037504][ T9558] prepare_alloc_pages+0x1e1/0x5b0 [ 230.042778][ T9558] __alloc_pages+0x134/0x460 [ 230.047406][ T9558] ? zone_statistics+0x170/0x170 [ 230.052382][ T9558] ? alloc_pages+0x4e1/0x740 [ 230.057014][ T9558] ? lock_chain_count+0x20/0x20 [ 230.061927][ T9558] __get_free_pages+0xc/0x30 [ 230.066544][ T9558] __se_sys_mincore+0xe0/0x600 [ 230.071331][ T9558] ? syscall_enter_from_user_mode+0x25/0x80 [ 230.077250][ T9558] ? lockdep_hardirqs_on+0x98/0x150 [ 230.082470][ T9558] do_syscall_64+0x55/0xb0 [ 230.087801][ T9558] ? clear_bhb_loop+0x40/0x90 [ 230.092535][ T9558] ? clear_bhb_loop+0x40/0x90 [ 230.097251][ T9558] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.103192][ T9558] RIP: 0033:0x7f77a579e159 [ 230.107630][ T9558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.127280][ T9558] RSP: 002b:00007f77a66c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 230.135842][ T9558] RAX: ffffffffffffffda RBX: 00007f77a5a25fa0 RCX: 00007f77a579e159 [ 230.143828][ T9558] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ffa000 [ 230.151821][ T9558] RBP: 00007f77a583506b R08: 0000000000000000 R09: 0000000000000000 [ 230.159852][ T9558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.167844][ T9558] R13: 00007f77a5a26038 R14: 00007f77a5a25fa0 R15: 00007ffcf66420f8 [ 230.175884][ T9558] [ 231.321547][ T9593] FAULT_INJECTION: forcing a failure. [ 231.321547][ T9593] name failslab, interval 1, probability 0, space 0, times 0 [ 231.334466][ T9593] CPU: 0 PID: 9593 Comm: syz.0.1288 Not tainted syzkaller #0 [ 231.341858][ T9593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 231.341874][ T9593] Call Trace: [ 231.341886][ T9593] [ 231.358197][ T9593] dump_stack_lvl+0x18c/0x250 [ 231.362893][ T9593] ? show_regs_print_info+0x20/0x20 [ 231.368220][ T9593] ? load_image+0x420/0x420 [ 231.372744][ T9593] ? __lock_acquire+0x7d80/0x7d80 [ 231.377810][ T9593] ? rcu_is_watching+0x15/0xb0 [ 231.382584][ T9593] ? trace_contention_end+0x39/0xe0 [ 231.387807][ T9593] should_fail_ex+0x394/0x4c0 [ 231.392537][ T9593] should_failslab+0x9/0x20 [ 231.397081][ T9593] slab_pre_alloc_hook+0x59/0x300 [ 231.402149][ T9593] ? __list_lru_init+0xb4/0x600 [ 231.407093][ T9593] ? __list_lru_init+0xb4/0x600 [ 231.411948][ T9593] __kmem_cache_alloc_node+0x53/0x250 [ 231.417340][ T9593] ? __list_lru_init+0xb4/0x600 [ 231.422204][ T9593] __kmalloc+0xa7/0x240 [ 231.426376][ T9593] __list_lru_init+0xb4/0x600 [ 231.431067][ T9593] alloc_super+0x77b/0x910 [ 231.435861][ T9593] sget+0x1d2/0x4d0 [ 231.439721][ T9593] ? free_anon_bdev+0x30/0x30 [ 231.444417][ T9593] ? devpts_kill_sb+0x70/0x70 [ 231.449101][ T9593] mount_nodev+0x30/0xf0 [ 231.453350][ T9593] legacy_get_tree+0xea/0x180 [ 231.458039][ T9593] ? devpts_pty_kill+0x290/0x290 [ 231.462998][ T9593] vfs_get_tree+0x8c/0x280 [ 231.467426][ T9593] do_new_mount+0x24a/0xa40 [ 231.471984][ T9593] __se_sys_mount+0x2e7/0x3d0 [ 231.476676][ T9593] ? __x64_sys_mount+0xc0/0xc0 [ 231.481450][ T9593] ? lockdep_hardirqs_on+0x98/0x150 [ 231.486660][ T9593] ? __x64_sys_mount+0x20/0xc0 [ 231.491459][ T9593] do_syscall_64+0x55/0xb0 [ 231.495904][ T9593] ? clear_bhb_loop+0x40/0x90 [ 231.500615][ T9593] ? clear_bhb_loop+0x40/0x90 [ 231.505298][ T9593] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.511198][ T9593] RIP: 0033:0x7fb0b179e159 [ 231.515616][ T9593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.535355][ T9593] RSP: 002b:00007fb0b2601028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 231.543816][ T9593] RAX: ffffffffffffffda RBX: 00007fb0b1a25fa0 RCX: 00007fb0b179e159 [ 231.551848][ T9593] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 231.559841][ T9593] RBP: 00007fb0b183506b R08: 0000000000000000 R09: 0000000000000000 [ 231.567995][ T9593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.575994][ T9593] R13: 00007fb0b1a26038 R14: 00007fb0b1a25fa0 R15: 00007fff09252708 [ 231.584040][ T9593] [ 231.646362][ C0] net_ratelimit: 73 callbacks suppressed [ 231.719956][ T5784] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 231.787806][ T5784] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 232.032193][ T28] audit: type=1800 audit(1790716985.641:721): pid=9609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1295" name="streaming_maxpacket" dev="configfs" ino=22875 res=0 errno=0 [ 232.170934][ T9607] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [105] [ 232.225441][ T9607] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 232.275490][ T9607] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 232.342077][ T9607] One or more global auth toks could not properly register; rc = [-22] [ 232.376573][ T9607] Error parsing options; rc = [-22] [ 232.787898][ T9631] FAULT_INJECTION: forcing a failure. [ 232.787898][ T9631] name failslab, interval 1, probability 0, space 0, times 0 [ 232.801690][ T9631] CPU: 1 PID: 9631 Comm: syz.4.1301 Not tainted syzkaller #0 [ 232.809108][ T9631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 232.819236][ T9631] Call Trace: [ 232.822547][ T9631] [ 232.825505][ T9631] dump_stack_lvl+0x18c/0x250 [ 232.830232][ T9631] ? show_regs_print_info+0x20/0x20 [ 232.835473][ T9631] ? load_image+0x420/0x420 [ 232.840018][ T9631] ? __might_sleep+0xe0/0xe0 [ 232.844625][ T9631] ? __lock_acquire+0x7d80/0x7d80 [ 232.849666][ T9631] should_fail_ex+0x394/0x4c0 [ 232.854368][ T9631] should_failslab+0x9/0x20 [ 232.858927][ T9631] slab_pre_alloc_hook+0x59/0x300 [ 232.863997][ T9631] ? asymmetric_key_generate_id+0x60/0x150 [ 232.869849][ T9631] ? asymmetric_key_generate_id+0x60/0x150 [ 232.875709][ T9631] __kmem_cache_alloc_node+0x53/0x250 [ 232.881161][ T9631] ? asymmetric_key_generate_id+0x60/0x150 [ 232.887034][ T9631] __kmalloc+0xa7/0x240 [ 232.891238][ T9631] asymmetric_key_generate_id+0x60/0x150 [ 232.896919][ T9631] x509_key_preparse+0x3f0/0x6c0 [ 232.901904][ T9631] asymmetric_key_preparse+0xa9/0x140 [ 232.907324][ T9631] __key_create_or_update+0x3a6/0xa60 [ 232.912739][ T9631] ? key_create_or_update+0x60/0x60 [ 232.917970][ T9631] ? bpf_lsm_key_permission+0x9/0x10 [ 232.923313][ T9631] ? lookup_user_key+0xb66/0x1140 [ 232.928387][ T9631] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 232.935138][ T9631] key_create_or_update+0x42/0x60 [ 232.940436][ T9631] __se_sys_add_key+0x34f/0x410 [ 232.945864][ T9631] ? __x64_sys_add_key+0xc0/0xc0 [ 232.950847][ T9631] ? lockdep_hardirqs_on+0x98/0x150 [ 232.956081][ T9631] ? __x64_sys_add_key+0x20/0xc0 [ 232.961095][ T9631] do_syscall_64+0x55/0xb0 [ 232.965522][ T9631] ? clear_bhb_loop+0x40/0x90 [ 232.965551][ T9631] ? clear_bhb_loop+0x40/0x90 [ 232.965583][ T9631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.965606][ T9631] RIP: 0033:0x7f77a579e159 [ 232.970586][ T9631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.970607][ T9631] RSP: 002b:00007f77a66c0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 232.981316][ T9631] RAX: ffffffffffffffda RBX: 00007f77a5a25fa0 RCX: 00007f77a579e159 [ 233.005324][ T9631] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 233.005341][ T9631] RBP: 00007f77a583506b R08: ffffffffffffffff R09: 0000000000000000 [ 233.005355][ T9631] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 233.005367][ T9631] R13: 00007f77a5a26038 R14: 00007f77a5a25fa0 R15: 00007ffcf66420f8 [ 233.005401][ T9631] [ 235.140028][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024dbc800: rx timeout, send abort [ 235.640279][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024dbcc00: rx timeout, send abort [ 235.648966][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024dbc800: abort rx timeout. Force session deactivation [ 235.881571][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.897512][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.952284][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.961869][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.975218][ T5775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 235.994524][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 236.148655][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024dbcc00: abort rx timeout. Force session deactivation [ 236.403040][ T5979] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.480087][ T9687] loop3: detected capacity change from 0 to 32768 [ 236.550108][ T9687] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 236.734846][ T9687] XFS (loop3): Ending clean mount [ 236.742711][ T5979] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.766628][ T6784] net_ratelimit: 78 callbacks suppressed [ 236.958629][ T5979] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.163557][ T5771] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 237.435938][ T5979] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.046554][ T5784] Bluetooth: hci2: command tx timeout [ 238.185944][ T9690] chnl_net:caif_netlink_parms(): no params data found [ 238.556221][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1337'. [ 238.824752][ T9741] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 238.916915][ T9741] overlayfs: overlapping lowerdir path [ 238.967519][ T9749] FAULT_INJECTION: forcing a failure. [ 238.967519][ T9749] name failslab, interval 1, probability 0, space 0, times 0 [ 238.980391][ T9749] CPU: 1 PID: 9749 Comm: syz.0.1341 Not tainted syzkaller #0 [ 238.987776][ T9749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.987813][ T9749] Call Trace: [ 238.987824][ T9749] [ 238.987834][ T9749] dump_stack_lvl+0x18c/0x250 [ 239.001352][ T9749] ? show_regs_print_info+0x20/0x20 [ 239.008990][ T9749] ? load_image+0x420/0x420 [ 239.009019][ T9749] ? __might_sleep+0xe0/0xe0 [ 239.009042][ T9749] ? __lock_acquire+0x7d80/0x7d80 [ 239.009069][ T9749] should_fail_ex+0x394/0x4c0 [ 239.009101][ T9749] should_failslab+0x9/0x20 [ 239.019344][ T9749] slab_pre_alloc_hook+0x59/0x300 [ 239.019380][ T9749] ? _raw_spin_unlock_irq+0x2e/0x50 [ 239.019405][ T9749] ? copy_ipcs+0x15f/0x500 [ 239.029008][ T9749] __kmem_cache_alloc_node+0x53/0x250 [ 239.029045][ T9749] ? copy_ipcs+0x15f/0x500 [ 239.063293][ T9749] kmalloc_trace+0x2a/0xe0 [ 239.067771][ T9749] copy_ipcs+0x15f/0x500 [ 239.072057][ T9749] create_new_namespaces+0x212/0x700 [ 239.077463][ T9749] unshare_nsproxy_namespaces+0x11a/0x160 [ 239.083340][ T9749] ksys_unshare+0x4fa/0x8f0 [ 239.087893][ T9749] ? sighand_ctor+0x50/0x50 [ 239.092449][ T9749] ? lock_chain_count+0x20/0x20 [ 239.097362][ T9749] ? syscall_enter_from_user_mode+0x25/0x80 [ 239.103383][ T9749] __x64_sys_unshare+0x38/0x40 [ 239.108189][ T9749] do_syscall_64+0x55/0xb0 [ 239.112751][ T9749] ? clear_bhb_loop+0x40/0x90 [ 239.117450][ T9749] ? clear_bhb_loop+0x40/0x90 [ 239.122177][ T9749] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.128411][ T9749] RIP: 0033:0x7fb0b179e159 [ 239.132857][ T9749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.152486][ T9749] RSP: 002b:00007fb0b2601028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 239.161370][ T9749] RAX: ffffffffffffffda RBX: 00007fb0b1a25fa0 RCX: 00007fb0b179e159 [ 239.169361][ T9749] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 239.177361][ T9749] RBP: 00007fb0b183506b R08: 0000000000000000 R09: 0000000000000000 [ 239.185338][ T9749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.193366][ T9749] R13: 00007fb0b1a26038 R14: 00007fb0b1a25fa0 R15: 00007fff09252708 [ 239.201419][ T9749] [ 239.483088][ T9690] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.490660][ T9690] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.498103][ T9690] bridge_slave_0: entered allmulticast mode [ 239.507161][ T9690] bridge_slave_0: entered promiscuous mode [ 239.571477][ T9690] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.599741][ T9690] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.620916][ T9690] bridge_slave_1: entered allmulticast mode [ 239.648481][ T9690] bridge_slave_1: entered promiscuous mode [ 239.965642][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.135713][ T5784] Bluetooth: hci2: command tx timeout [ 240.219621][ T9690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.270044][ T9753] loop3: detected capacity change from 0 to 32768 [ 240.363443][ T9753] JBD2: Ignoring recovery information on journal [ 240.529296][ T9690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.580901][ T9753] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 240.879785][ T9690] team0: Port device team_slave_0 added [ 240.912903][ T9690] team0: Port device team_slave_1 added [ 241.154154][ T5771] ocfs2: Unmounting device (7,3) on (node local) [ 241.196221][ T9690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.243847][ T9690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.335731][ T9690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.536573][ T9690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.544946][ T9690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.614926][ T9690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.673289][ T9791] Bluetooth: hci0: service_discovery: too big uuid_count value 48427 [ 241.885509][ C1] net_ratelimit: 65 callbacks suppressed [ 242.139132][ T9690] hsr_slave_0: entered promiscuous mode [ 242.175742][ T9690] hsr_slave_1: entered promiscuous mode [ 242.193259][ T9690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.205656][ T5784] Bluetooth: hci2: command tx timeout [ 242.224462][ T9690] Cannot create hsr debugfs directory [ 242.409882][ T9803] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1352'. [ 242.495943][ T9814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1355'. [ 242.626631][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1355'. [ 242.702445][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 243.128054][ T5979] hsr_slave_0: left promiscuous mode [ 243.136845][ T5979] hsr_slave_1: left promiscuous mode [ 243.161301][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.184716][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.214263][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.232722][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.246830][ T5979] bridge_slave_1: left allmulticast mode [ 243.252619][ T5979] bridge_slave_1: left promiscuous mode [ 243.293414][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.313702][ T5979] bridge_slave_0: left allmulticast mode [ 243.323615][ T5979] bridge_slave_0: left promiscuous mode [ 243.345730][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.470740][ T5979] veth1_macvtap: left promiscuous mode [ 243.479985][ T5979] veth0_macvtap: left promiscuous mode [ 243.492590][ T5979] veth1_vlan: left promiscuous mode [ 243.502620][ T5979] veth0_vlan: left promiscuous mode [ 244.296948][ T5775] Bluetooth: hci2: command tx timeout [ 245.134424][ T5979] team0 (unregistering): Port device team_slave_1 removed [ 245.240704][ T5979] team0 (unregistering): Port device team_slave_0 removed [ 245.371280][ T5979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.524349][ T5979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.385087][ T5979] bond0 (unregistering): Released all slaves [ 246.670348][ T9862] tipc: Started in network mode [ 246.675256][ T9862] tipc: Node identity 1000004, cluster identity 4711 [ 246.675273][ T9862] tipc: Node number set to 16777220 [ 246.747305][ T9863] tipc: Enabling of bearer rejected, failed to enable media [ 247.342365][ C0] net_ratelimit: 72 callbacks suppressed [ 247.381312][ T9690] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 247.458632][ T9690] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 247.561770][ T9690] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 247.646269][ T9690] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 247.995016][ T9690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.064496][ T9690] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.089983][ T6784] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.097259][ T6784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.124859][ T6784] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.132112][ T6784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.599902][ T9690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.926593][ T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 249.135630][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 249.147654][ T8] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.204467][ T8] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.245876][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 249.252603][ T8] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 249.300249][ T9690] veth0_vlan: entered promiscuous mode [ 249.303477][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.346904][ T8] usb 4-1: config 0 descriptor?? [ 249.376574][ T9690] veth1_vlan: entered promiscuous mode [ 249.562036][ T9690] veth0_macvtap: entered promiscuous mode [ 249.612203][ T9690] veth1_macvtap: entered promiscuous mode [ 249.707825][ T9690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.755391][ T9690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.805040][ T9690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.817579][ T8] hid-multitouch 0003:0EEF:72C4.0004: No inputs registered, leaving [ 249.835421][ T9690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.853587][ T8] hid-multitouch 0003:0EEF:72C4.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 249.866851][ T9690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.905616][ T9690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.925582][ T9690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.945392][ T9690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.965831][ T9690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.985520][ T9690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.021528][ T9690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.064617][ T9690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.114332][ T9690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.145310][ T9690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.169194][ T9690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.189878][ T9690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.222899][ T9690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.252696][ T9690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.268683][ T23] usb 4-1: USB disconnect, device number 13 [ 250.324371][ T9690] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.369659][ T9690] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.403165][ T9690] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.437047][ T9690] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.787931][ T5977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.834698][ T5977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.945687][ T6606] unregister_netdevice: waiting for syz_tun to become free. Usage count = 3 [ 250.973700][ T6606] ref_tracker: syz_tun@ffff88805ffac5b8 has 1/2 users at [ 250.973700][ T6606] netdev_get_by_index+0x79/0xa0 [ 250.973700][ T6606] fib6_nh_init+0x1ff/0x1fe0 [ 250.973700][ T6606] ip6_route_info_create+0x96c/0x1260 [ 250.973700][ T6606] addrconf_f6i_alloc+0x1fa/0x440 [ 250.973700][ T6606] ipv6_add_addr+0x5a4/0x10d0 [ 250.973700][ T6606] inet6_addr_add+0x563/0xb30 [ 250.973700][ T6606] inet6_rtm_newaddr+0x6fd/0x9d0 [ 250.973700][ T6606] rtnetlink_rcv_msg+0x843/0xf90 [ 250.973700][ T6606] netlink_rcv_skb+0x235/0x4c0 [ 250.973700][ T6606] netlink_unicast+0x7b1/0x930 [ 250.973700][ T6606] netlink_sendmsg+0x8d0/0xbf0 [ 250.973700][ T6606] __sys_sendto+0x4a9/0x6b0 [ 250.973700][ T6606] __x64_sys_sendto+0xde/0xf0 [ 250.973700][ T6606] do_syscall_64+0x55/0xb0 [ 250.973700][ T6606] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.973700][ T6606] [ 251.065280][ T6606] ref_tracker: syz_tun@ffff88805ffac5b8 has 1/2 users at [ 251.065280][ T6606] ipv6_add_dev+0x407/0x11f0 [ 251.065280][ T6606] addrconf_notify+0x67b/0x1010 [ 251.065280][ T6606] notifier_call_chain+0x18f/0x380 [ 251.065280][ T6606] register_netdevice+0x1670/0x1ba0 [ 251.065280][ T6606] tun_set_iff+0x82b/0xea0 [ 251.065280][ T6606] __tun_chr_ioctl+0x7e0/0x2070 [ 251.065280][ T6606] __se_sys_ioctl+0xfd/0x170 [ 251.065280][ T6606] do_syscall_64+0x55/0xb0 [ 251.065280][ T6606] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.065280][ T6606] [ 251.198977][ T5977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.207420][ T5977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.455479][ C0] net_ratelimit: 115 callbacks suppressed [ 255.971150][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.979459][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.805475][ C1] net_ratelimit: 75 callbacks suppressed