last executing test programs: 6m43.294946635s ago: executing program 32 (id=2429): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./mnt\x00', &(0x7f0000000680)='overlay\x00', 0x0, &(0x7f00000006c0)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') 5m18.290346956s ago: executing program 33 (id=2790): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000ac0)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000b00)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000d40)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x6, 0xfff7}, {0xfff1, 0xffff}, {0x300, 0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_FD={0x8}]}}]}, 0x40}}, 0x0) 4m39.649484398s ago: executing program 34 (id=2937): unshare(0x40200) r0 = semget(0x2, 0x3, 0x39c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x0, 0x0, 0x0}, 0x94) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f0000000000)=[{0x2, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000280)=[0x6, 0x7fff]) unshare(0x40400) 4m7.99767084s ago: executing program 35 (id=3046): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x10083, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/sda1\x00', &(0x7f0000000340)='./mnt\x00', &(0x7f0000000380)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x0, 0x21) ioctl$EXT4_IOC_SETFSUUID(r0, 0xc0406619, 0x0) 3m56.563432754s ago: executing program 36 (id=3080): r0 = syz_usb_connect(0x0, 0x17d, &(0x7f00000046c0)=ANY=[@ANYBLOB="12010000fa5c531046084010c9d00102030109026b0101000000000904620202436f1f0009050802100000fa00cd08dfa9a5fd67f84bd21113acd7fc0e3b35824deb14c9ec5d483d62169d56171de8bc4bc98d302e503f95cf970fcea2490ec47e33f438ea21d7203978d5e2904b6966f7096cf08bba8ddb7691bcbc9ce2c5760af21822ed33fc12b88222be6b3b70d8595ba08893f644fa53c1c55ad648952a80f17ece8bff775682c9a5167111725b5484fd0ab5d334dcfbe28eb0e02bd0fa90c776e4997388fc9442fd3e8657ac92601fd61a184cf49d513b7bf7cdcebe6423101690e5269a5b2be351ef182d84744d9664f21b1c4bd8c72c09"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x40000, 0x0) read(r1, &(0x7f0000000100)=""/256, 0x100) 3m39.257154616s ago: executing program 2 (id=3134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000005c0)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000b40)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newtfilter={0x90, 0x2c, 0x601, 0xfffffffe, 0x2, {0x0, 0x0, 0x0, r3, {0x1b, 0x7ff9}, {0x6, 0xffff}, {0x300, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x105, 0x0, 0x0, 0xffffffff}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xfe}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) 3m38.633195689s ago: executing program 2 (id=3136): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000580)={0xa0000004}) 3m38.289098344s ago: executing program 2 (id=3139): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000980)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r0, &(0x7f00000029c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x8, 0x8001}}, 0x50) creat(&(0x7f0000008e80)='./file0\x00', 0x167) close_range(r0, 0xffffffffffffffff, 0x0) 3m37.954051498s ago: executing program 2 (id=3141): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x10, &(0x7f0000000280), 0x1, 0x7cc, &(0x7f00000002c0)="$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") r0 = creat(&(0x7f0000000ac0)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000000b00)=0x0) mount(&(0x7f0000000b40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000b80)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000bc0)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x4, 0x400, 0x0, 0x0, 0x1c, 0x18, "ef359f413bb93874f7d6a4ae6ddffbd1ce5d29c2ee5e5ca9000f110ff45933ba223f0000ee60e677df701905b9aafa34afaaf755a3f6a00400", "036c47c6780800d1cbf7966d61f53d00000000000000000000000000000002000000000000000000000000000080000000000000000000fcff00", "f29359738e229a4c66810000000000d300e6d6020000000000a1090800000001", [0xc, 0x8]}) io_submit(r1, 0x1, &(0x7f0000000d00)=[&(0x7f0000000d40)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000d80)='$', 0x1, 0x0, 0x0, 0x0, r2}]) 3m36.008495716s ago: executing program 2 (id=3148): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @random="facfff00716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x26, 0x24, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3}}}}}}}, 0x0) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e1d, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000200)={0x4, {{0x2, 0x4e22, @empty=0xe0009eff}}, {{0x2, 0x4e23, @rand_addr=0x64010101}}}, 0x108) syz_emit_ethernet(0x42, &(0x7f0000000a40)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0xc, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @loopback}, {[], {0x4e1d, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x100, @void}}}}}}}}, 0x0) 3m35.265290251s ago: executing program 2 (id=3151): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x8, 0xc, 0x5}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000009e00000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000600)={r2}, 0xc) 3m34.564986013s ago: executing program 37 (id=3151): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x8, 0xc, 0x5}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000009e00000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000600)={r2}, 0xc) 3m29.558069502s ago: executing program 7 (id=3170): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x6, r1, 0x0, &(0x7f000001e000/0x2000)=nil, 0x2000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x26}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f00000002c0)={0x8, r2}) 3m29.151597674s ago: executing program 7 (id=3171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000800)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000b80)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000000bc0)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) 3m24.977459149s ago: executing program 7 (id=3174): r0 = syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='task\x00') fchdir(r1) mount(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000300)='proc\x00', 0x100c803, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000340)='pagemap\x00') syz_usb_disconnect(0xffffffffffffffff) read$FUSE(r2, 0x0, 0x0) 3m23.725742166s ago: executing program 7 (id=3185): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x10, &(0x7f0000000280), 0x1, 0x7cc, &(0x7f00000002c0)="$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") r0 = creat(&(0x7f0000000ac0)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000000b00)=0x0) mount(&(0x7f0000000b40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000b80)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000bc0)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x4, 0x400, 0x0, 0x0, 0x1c, 0x18, "ef359f413bb93874f7d6a4ae6ddffbd1ce5d29c2ee5e5ca9000f110ff45933ba223f0000ee60e677df701905b9aafa34afaaf755a3f6a00400", "036c47c6780800d1cbf7966d61f53d00000000000000000000000000000002000000000000000000000000000080000000000000000000fcff00", "f29359738e229a4c66810000000000d300e6d6020000000000a1090800000001", [0xc, 0x8]}) io_submit(r1, 0x1, &(0x7f0000000d00)=[&(0x7f0000000d40)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000d80)='$', 0x1, 0x0, 0x0, 0x0, r2}]) 3m22.045783667s ago: executing program 7 (id=3183): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r0, &(0x7f0000000180)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000012, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) syz_io_uring_setup(0xefe, &(0x7f0000000240)={0x0, 0xcc19, 0x10806, 0x0, 0x2000001}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) 3m21.285363104s ago: executing program 7 (id=3187): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) fchdir(r1) creat(&(0x7f0000000300)='./bus\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x8100, &(0x7f0000000380)={0xf, 0x84, 0x20000}, 0x20) 3m20.458565818s ago: executing program 38 (id=3187): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) fchdir(r1) creat(&(0x7f0000000300)='./bus\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x8100, &(0x7f0000000380)={0xf, 0x84, 0x20000}, 0x20) 3m5.017329753s ago: executing program 8 (id=3209): r0 = socket(0x1d, 0x2, 0x6) r1 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000140)={0x2e, 0x77, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f00000001c0)) setsockopt$ALG_SET_KEY(r0, 0x6a, 0x1, 0x0, 0xc) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r3, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1e0}, 0x1, 0x0, 0x0, 0x8005}, 0x40084) 3m2.948124003s ago: executing program 8 (id=3213): socket$key(0xf, 0x3, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x2, 0x4000, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)='=', 0x1}], 0x1}}], 0x1, 0x4000801) 3m2.670138441s ago: executing program 8 (id=3215): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100002b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='veth1_to_bridge\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0xac141442, @empty=0xe0000001}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x3}}}}}}, 0x0) 3m2.315349057s ago: executing program 8 (id=3217): syz_mount_image$ext4(&(0x7f0000005d40)='ext4\x00', &(0x7f0000005d80)='./file1\x00', 0x8004, &(0x7f0000005dc0)={[{@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@norecovery}]}, 0x1, 0x7b9, &(0x7f0000005e00)="$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") openat(0xffffffffffffff9c, &(0x7f00000065c0)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000006600)='./bus\x00', 0x0) mount(&(0x7f0000006640)=@loop={'/dev/loop', 0x0}, &(0x7f0000006680)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f00000066c0)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000006700)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c603000000966d61fd922952769d9bffbcc2542ded71038259ca571c0000000000000000000000000000000000000700", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x3]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000011500)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000011540)='2', 0xfdef, 0xe7c) 3m0.870927954s ago: executing program 8 (id=3221): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000280)=0x1, 0x4) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x41) 3m0.067230216s ago: executing program 8 (id=3224): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x22, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 2m59.436913831s ago: executing program 39 (id=3224): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x22, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 2m59.373365007s ago: executing program 9 (id=3228): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000002640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002600)=""/17, 0x11}, 0xb041}], 0x1, 0x2, 0x0) 2m59.260480538s ago: executing program 9 (id=3229): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x58) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', r2, &(0x7f0000000180)='./file0\x00', 0x2) read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020) 2m59.089988986s ago: executing program 9 (id=3231): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x8, 0xc, 0x0, 0xe9, 0x4, 0xf9, 0x38}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m58.597216567s ago: executing program 9 (id=3232): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200000, &(0x7f0000000180)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@mblk_io_submit}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobarrier}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x3, 0x572, &(0x7f00000003c0)="$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") open(&(0x7f0000000980)='./bus\x00', 0x400141042, 0x22) setxattr$trusted_overlay_upper(&(0x7f00000016c0)='./file1\x00', &(0x7f0000001700), &(0x7f0000001740)=ANY=[], 0x835, 0x0) mount(&(0x7f00000009c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000a00)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000a40)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) setxattr$trusted_overlay_upper(&(0x7f0000000b80)='./file1\x00', &(0x7f0000000bc0), &(0x7f0000000c00)=ANY=[], 0x841, 0x0) 2m57.635427435s ago: executing program 9 (id=3234): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x47, {"660f6626470f65411b66660faebe008000000f214df367f3430f017f42d1c4b8010000000f01c14d0fc72eb9b30a00000f32460f01c2"}}], 0x47}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000340), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x1, 0x400000000006, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0xffe, 0x0, 0x2a, 0x14, 0x6b00, 0x0, 0x0, 0x8, 0x7], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m55.981338894s ago: executing program 9 (id=3238): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0xfffffffffffffdc1, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x140) write(r0, &(0x7f0000000000)='3', 0x4e) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$getownex(r0, 0x10, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0xfffffffffffffffe) 2m55.450090359s ago: executing program 40 (id=3238): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0xfffffffffffffdc1, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x140) write(r0, &(0x7f0000000000)='3', 0x4e) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$getownex(r0, 0x10, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0xfffffffffffffffe) 2m51.71039522s ago: executing program 6 (id=3249): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000a80)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000ac0)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000b00)=[@text64={0x40, &(0x7f0000000b40)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m50.574503716s ago: executing program 6 (id=3251): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791048000000000071001e000000000095000300"], &(0x7f0000000100)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) unshare(0x26020480) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000001400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x3, 0x8, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000002580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000025c0)={@fallback=r1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000002600)={@cgroup=r0, r2, 0x2f, 0x18, 0x4, @void, @value=r0, @void, @void, r3}, 0x20) 2m50.270439067s ago: executing program 6 (id=3253): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000c80)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000cc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}, {0x0, 0x3}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x4, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x1000}, 0x1100, 0x1000, 0x0, 0xfffffffc}}]}}]}, 0x60}}, 0x890) sendmsg$nl_route_sched(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=@newtclass={0x60, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}, {0x0, 0x9}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x11000}, {0x0, 0x0, 0x2, 0x205c, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0) 2m49.549957101s ago: executing program 6 (id=3256): mkdirat(0xffffffffffffff9c, &(0x7f0000001580)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000015c0)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000001600)='./bus\x00', &(0x7f0000001640), 0x8, &(0x7f0000001680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000016c0)='./bus\x00') r0 = syz_open_dev$loop(&(0x7f0000000080), 0xffff, 0x109041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x275a, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) 2m49.173311179s ago: executing program 6 (id=3258): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x4, 0x0, 0x4, 0xfffffffc}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000980)=0x1, 0x4) bind$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000000a00)=[{{&(0x7f0000000a40)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="b9cd14", 0x3}], 0x1}}], 0x1, 0x20008000) 2m48.539476774s ago: executing program 6 (id=3259): r0 = socket(0x1d, 0x2, 0x6) r1 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000140)={0x2e, 0x77, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f00000001c0)) setsockopt$ALG_SET_KEY(r0, 0x6a, 0x1, 0x0, 0xc) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r3, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1e0}, 0x1, 0x0, 0x0, 0x8005}, 0x40084) 2m47.970936241s ago: executing program 41 (id=3259): r0 = socket(0x1d, 0x2, 0x6) r1 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000140)={0x2e, 0x77, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f00000001c0)) setsockopt$ALG_SET_KEY(r0, 0x6a, 0x1, 0x0, 0xc) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r3, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1e0}, 0x1, 0x0, 0x0, 0x8005}, 0x40084) 2m25.719243428s ago: executing program 0 (id=3266): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{r0}, &(0x7f0000000980), &(0x7f00000009c0)='%-010d \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x300, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 2m25.041446928s ago: executing program 0 (id=3267): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000001c0)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000280)="2feebe8d881590f656d01482831f4b036a7bb40c6782cbb5dafe72ea85766575551d40e3", 0x24}], 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/35, 0x23}], 0x1}, 0x10040) close_range(r0, 0xffffffffffffffff, 0x0) 2m23.93793216s ago: executing program 0 (id=3276): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x802, 0x165) write(r0, &(0x7f0000000280)='100', 0x3) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xe9, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0xffffffff, 0x1c56422c, 0x2, {0x1, @raw_data="e683179ae605e563297650140477f63fa8f4a63103495e3e088794f56fca74bd81fed4dd1baa4ba8dc444e867e93e3eab15be5e1afdc27a38618b8cd6a0d7f6bdb984ff4d718c9b6204741ed94f3511da1820b06179a593ae9abb238af2e7f0b67be906fefcfcecda0d526376fb34ea6bb0c6f0c666921ed928bbb9f9970ef12b3d328fc68f637cebeaf26b9c860dfd906006c0d02ee91715c2f66b1db0160970302ac41b87a0f46cbb605f913b1d89fa10b0c105b3cf42da0656e75280f49532755f58a1c006435"}, 0x101}) 2m22.871049879s ago: executing program 0 (id=3281): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) 2m22.345719162s ago: executing program 0 (id=3283): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x43, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2m21.809311307s ago: executing program 0 (id=3286): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x56) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49809, 0x49a01}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x38}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000400)=0xb, 0x4) sendto$packet(r0, &(0x7f0000000b40)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000b80)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 2m21.366282562s ago: executing program 42 (id=3286): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x56) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49809, 0x49a01}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x38}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000400)=0xb, 0x4) sendto$packet(r0, &(0x7f0000000b40)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000b80)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 10.257845876s ago: executing program 3 (id=3799): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xfff1, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x3c0d, 0x5, 0xe4, 0x5}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x7, [0xc, 0xb, 0x5, 0x5, 0x1, 0xd, 0x1, 0x8, 0xa, 0x4, 0xb, 0xa, 0x10, 0x6, 0x2], 0x9, [0x78ec, 0x400, 0x3c09, 0x8733, 0x4, 0x4054, 0x4, 0x24, 0x1, 0xbe7, 0x9, 0x8, 0x1, 0x6, 0x1, 0xfffa], [0x1, 0x3, 0x8000, 0x6, 0x7, 0x4692, 0x7, 0x7fff, 0x2, 0x6, 0x9a, 0x3, 0x8, 0x7f, 0x6, 0x4]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24048881}, 0x4000080) 5.037273457s ago: executing program 3 (id=3805): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7}, 0xffffffd5) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, &(0x7f00000067c0)={[{@uuid_null}, {@verity_off}, {@uuid_on}, {@nfs_export_off}, {@default_permissions}, {@metacopy_off}, {@uuid_auto}, {@default_permissions}], [{@subj_type={'subj_type', 0x3d, '\xff\xff'}}]}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004440)="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", 0x2000, &(0x7f0000006440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006500)={0x1020, 0x0, 0xc, {0x3, 0x0, 0x7, 0x803}}, 0x0}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000006540)={0x0, 0x0, &(0x7f0000006580)={&(0x7f00000065c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in=@broadcast}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x4000}]}]}, 0x13c}}, 0x4040000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000006700)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 4.292476263s ago: executing program 4 (id=3807): epoll_create(0x10002e78) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x37}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfcff}]}) 3.911571412s ago: executing program 4 (id=3809): add_key$fscrypt_v1(0x0, &(0x7f0000000580)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000680)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000007c0)=0x1, 0x4) listen(r0, 0x5) syz_emit_vhci(&(0x7f0000000e00)=ANY=[@ANYBLOB="02c90012000e00050014420a008000400003e3ee"], 0x17) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x2) eventfd2(0x1, 0x80001) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.297350534s ago: executing program 5 (id=3810): creat(&(0x7f0000003680)='./file0\x00', 0xc9a9c042ad77c5e5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000036c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000003700)='./file0\x00', &(0x7f0000003740), 0x1000000, &(0x7f0000003780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000003800)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000005840)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000058c0)="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", 0x2000, &(0x7f00000078c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007980)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000079c0)='./file0\x00', 0x24c01, 0x8) io_setup(0x6, &(0x7f0000007a00)=0x0) io_submit(r3, 0x2, &(0x7f0000007a40)=[&(0x7f0000007a80)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f0000007ac0)='!', 0xffffff49, 0x3000000000000500}]) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) 2.868598528s ago: executing program 1 (id=3811): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) keyctl$reject(0x13, 0x0, 0x57, 0x35cf0866, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f0000000880)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x800}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x44004080) 2.868153238s ago: executing program 3 (id=3812): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000480)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x8, 0xc, 0x0, 0xe9, 0x4, 0xfc, 0x38}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = inotify_init() sendmmsg$unix(r3, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x1c, 0x1, 0x1, [r3, r4, r3]}}], 0x20, 0x20044000}}], 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000006c0)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x1000000004, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.822557962s ago: executing program 4 (id=3813): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0xa00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x10679, 0x6, 0xf3b8, 0x11de, 0x51, 0x400, 0x4002004c4, 0x1000, 0xfffffffffffffffd, 0x97, 0x10, 0x0, 0x3, 0x4, 0x0, 0x5], 0x2000, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.819420053s ago: executing program 5 (id=3814): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=@newsa={0xec, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4e20, 0x71c, 0x4e21, 0x5, 0x2, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfffffffffffffffa, 0xf, 0x6, 0x2, 0x8251c, 0xffffffffffff37a6, 0xfffffffffffffffc, 0x1}, {0xffffffffffffffff, 0x0, 0x1ff, 0xfffffffffffffffe}, {0xfffffffe, 0x4003fe}, 0x70bd2c, 0x3505, 0x2, 0x1, 0x0, 0x20}}, 0xec}}, 0x844) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e20, 0x8, @private0, 0x7}, {0xa, 0x4e24, 0x3c, @local, 0x8}, 0xffffffffffffffff, {[0x48c7686f, 0x3, 0x5, 0x8001, 0xd, 0x10000, 0x0, 0xffff]}}, 0x5c) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0x1, 0x0, 0x2, 0x4, 0x0, 0x7, 0x8004, 0xa, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.709501714s ago: executing program 1 (id=3815): r0 = syz_open_dev$dri(&(0x7f00000007c0), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000800)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000840)={&(0x7f0000000880)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000008c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000900)={&(0x7f0000000940)=[0x0, 0x0, 0x0], &(0x7f0000000980), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000a40)={0x600, 0x1, &(0x7f0000000a80)=[r2], &(0x7f0000000ac0)=[0x3], &(0x7f0000000b00)=[r4, r3, r4], &(0x7f0000000b40), 0x0, 0x2}) r5 = syz_open_dev$dri(&(0x7f00000065c0), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000006600)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000006640)={&(0x7f0000006680)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000066c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000006700)={&(0x7f0000006740)=[0x0], &(0x7f0000006780), 0x1, r7}) 2.515666944s ago: executing program 5 (id=3816): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0x100000000, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x5, 0x3, 0x8d], 0x100000, 0x2c08c6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.492564786s ago: executing program 1 (id=3817): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, 0x0, 0x42, 0x836d9fb164f927b3) io_setup(0x3, 0x0) io_submit(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f00000011c0)=0x6, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269bb, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000001200)=0x3, 0x4) bind$inet(r0, &(0x7f0000001240)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000001280)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01562daa2400"}}}}}}}, 0x0) 2.469760649s ago: executing program 3 (id=3818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbf, {0x0, 0x0, 0x0, r4, {0x5, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2, 0x7, 0x2}, {{0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x1}, {0x8, 0x1, 0x7, 0x2, 0x5, 0x1, 0x1}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045081}, 0x4880) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000740)=@xdp={0x2c, 0x7, r4, 0xbe}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000800)="04eaaaf3", 0x4}], 0x1}, 0x5) 2.297642316s ago: executing program 4 (id=3819): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000002c0)=@gcm_256={{0x304}, "ca191b2a0104b6a9", "404322cba02335d4c6d2d4fb43583cbce8ed367085d85317964322238ef204b2", "0ecc07cb", "4e0eac216e798a00"}, 0x38) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) recvfrom$inet6(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) shutdown(r0, 0x0) 2.25946726s ago: executing program 5 (id=3820): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@chacha20_poly1305={{0x304}, "56d18b31b82556c59a9e4de5", "a64c1c2e4f1ce02d9c532e496ecfaf02ffd5787ce078bc65608d4871b1f5f0e6", "6697b7f216fcc502"}, 0x38) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) 2.218645654s ago: executing program 1 (id=3821): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@increfs], 0x37}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000003c0)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f0000000440)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000c40)={0x8, 0x0, &(0x7f0000000ac0)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000340)=[@release={0x40046306, 0x1}]}) 1.994533757s ago: executing program 1 (id=3822): socket$packet(0x11, 0x3, 0x300) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./trace\x00', &(0x7f0000000a40)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000ac0)='./proc\x00', &(0x7f0000000b00)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000b80)='10', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./trace/events/sched/sched_switch/filter\x00', 0x2, 0x0) 1.928718673s ago: executing program 3 (id=3823): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mysys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x3, &(0x7f0000de5000/0x4000)=nil) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) 1.895384267s ago: executing program 4 (id=3824): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./dev\x00', 0x1fe) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/sda\x00', 0x1c5e42, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000480)={0x7, 0x4d, 0x2}, 0xffffff28) 1.309836296s ago: executing program 5 (id=3825): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x3}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0xfff, 0x10000000, 0x7, 0xccb}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) write$tun(r0, &(0x7f0000000480)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x28, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}, {[@generic={0x7, 0x2}]}}, {0x4e24, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0xa, 0x100, @val=0x80}}}}}, 0x36) 1.309553936s ago: executing program 3 (id=3826): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./security\x00', &(0x7f00000003c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./security/apparmor/.load\x00', 0x1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$IOMMU_GET_HW_INFO(r1, 0x3b8a, &(0x7f00000001c0)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000540)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f00000005c0)='0', 0x1) write(r0, &(0x7f0000000600)="04080076657273696f6e00020500000004080070726f66696c6500070502002f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x50) 403.112679ms ago: executing program 4 (id=3827): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x10b8}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0x1}, &(0x7f00000000c0), &(0x7f0000000100)='%-5lx \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0xd, 0x5, &(0x7f0000000400)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000440)='GPL\x00'}, 0x80) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[], 0x48) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001180)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001240)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 133.285796ms ago: executing program 1 (id=3828): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f00000001c0)={0x0, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, &(0x7f0000000240)) ioctl$GET_ARRAY_INFO(r1, 0x80480911, &(0x7f0000000280)) pwrite64(r1, &(0x7f0000000300)="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0x20, 0x1000) ioctl$GET_DISK_INFO(r1, 0x80140912, &(0x7f0000000340)={0x1}) ioctl$STOP_ARRAY(r1, 0x932, 0x0) 0s ago: executing program 5 (id=3829): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x208042, 0x2, 0x1}, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000001000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000380)={0x0, &(0x7f00000003c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/memory.force_empty\x00', 0x401, 0x26) write(r4, &(0x7f00000000c0)="0f", 0x1) kernel console output (not intermixed with test programs): 9][T17667] R13: 00007f6ca7c26038 R14: 00007f6ca7c25fa0 R15: 00007ffe368fb438 [ 941.547418][T17667] [ 941.551219][ C0] net_ratelimit: 80 callbacks suppressed [ 942.189464][T17488] veth0_vlan: entered promiscuous mode [ 942.269041][T17488] veth1_vlan: entered promiscuous mode [ 942.379433][T17488] veth0_macvtap: entered promiscuous mode [ 942.419792][T17488] veth1_macvtap: entered promiscuous mode [ 942.503603][T17488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 942.520637][T17488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.542373][T17488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 942.558327][T17488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.576619][T17488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 942.600488][T17488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.624139][T17488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 942.638995][T17488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.660636][T17488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 942.727853][T17488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.747256][T17488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.767767][T17488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.779239][T17488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.791472][T17488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.816567][T17488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.830608][T17488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.850738][T17488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.863898][T17488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 942.928970][T17488] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.950990][T17488] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.968394][T17488] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.987372][T17488] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.102529][T17710] FAULT_INJECTION: forcing a failure. [ 943.102529][T17710] name failslab, interval 1, probability 0, space 0, times 0 [ 943.198582][T17710] CPU: 0 PID: 17710 Comm: syz.0.3276 Not tainted syzkaller #0 [ 943.206167][T17710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 943.216252][T17710] Call Trace: [ 943.219610][T17710] [ 943.222662][T17710] dump_stack_lvl+0x18c/0x250 [ 943.222703][T17710] ? show_regs_print_info+0x20/0x20 [ 943.222734][T17710] ? load_image+0x420/0x420 [ 943.232640][T17710] ? __lock_acquire+0x7eb0/0x7eb0 [ 943.232680][T17710] should_fail_ex+0x394/0x4c0 [ 943.242241][T17710] should_failslab+0x9/0x20 [ 943.242266][T17710] slab_pre_alloc_hook+0x59/0x300 [ 943.251489][T17710] ? __vb2_queue_alloc+0x142/0x1410 [ 943.261780][T17710] ? __vb2_queue_alloc+0x142/0x1410 [ 943.261811][T17710] __kmem_cache_alloc_node+0x53/0x260 [ 943.261841][T17710] ? __vb2_queue_alloc+0x142/0x1410 [ 943.272454][T17710] __kmalloc+0xa7/0x240 [ 943.272496][T17710] __vb2_queue_alloc+0x142/0x1410 [ 943.281896][T17710] vb2_core_create_bufs+0x57d/0xa80 [ 943.292171][T17710] ? __vb2_queue_alloc+0x1410/0x1410 [ 943.292202][T17710] ? __mutex_trylock_common+0x160/0x270 [ 943.303106][T17710] vb2_create_bufs+0x803/0xe70 [ 943.303146][T17710] ? kasan_set_track+0x4e/0x70 [ 943.312708][T17710] ? vb2_queue_or_prepare_buf+0xe80/0xe80 [ 943.312749][T17710] ? v4l_sanitize_format+0x5d6/0xa00 [ 943.323765][T17710] v4l_create_bufs+0xb6/0x180 [ 943.323803][T17710] __video_do_ioctl+0xa34/0xde0 [ 943.333357][T17710] ? video_ioctl2+0x30/0x30 [ 943.333383][T17710] ? __virt_addr_valid+0x10c/0x380 [ 943.343014][T17710] ? __might_fault+0xc6/0x120 [ 943.343041][T17710] ? __might_fault+0xaa/0x120 [ 943.352432][T17710] video_usercopy+0x889/0x1360 [ 943.352469][T17710] ? video_ioctl2+0x30/0x30 [ 943.352496][T17710] ? v4l_printk_ioctl+0x160/0x160 [ 943.361817][T17710] v4l2_ioctl+0x18a/0x1e0 [ 943.371213][T17710] ? v4l2_poll+0x2b0/0x2b0 [ 943.371240][T17710] __se_sys_ioctl+0xfd/0x170 [ 943.371286][T17710] do_syscall_64+0x55/0xb0 [ 943.380301][T17710] ? clear_bhb_loop+0x40/0x90 [ 943.389417][T17710] ? clear_bhb_loop+0x40/0x90 [ 943.389457][T17710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 943.400056][T17710] RIP: 0033:0x7f2fcf9a8fd9 [ 943.400081][T17710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 943.424111][T17710] RSP: 002b:00007f2fd07cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 943.424140][T17710] RAX: ffffffffffffffda RBX: 00007f2fcfc25fa0 RCX: 00007f2fcf9a8fd9 [ 943.424159][T17710] RDX: 00002000000002c0 RSI: 00000000c100565c RDI: 0000000000000004 [ 943.440557][T17710] RBP: 00007f2fcfa37fed R08: 0000000000000000 R09: 0000000000000000 [ 943.456545][T17710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 943.456563][T17710] R13: 00007f2fcfc26038 R14: 00007f2fcfc25fa0 R15: 00007ffefd4cf6e8 [ 943.456600][T17710] [ 943.552087][T17714] batman_adv: batadv0: Adding interface: syz_tun [ 943.558462][T17714] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.608340][T17714] batman_adv: batadv0: Interface activated: syz_tun [ 944.094474][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.134397][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.958682][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.966844][T17746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3285'. [ 944.984021][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.218694][T17745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3284'. [ 945.417374][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.726730][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.047330][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.398247][T11611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 946.436711][T11611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 946.452291][T11611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 946.470537][T11611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 946.490499][T11611] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 946.501039][T11611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 946.525514][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.600854][ C0] net_ratelimit: 94 callbacks suppressed [ 946.981071][T17775] rxe_eth0 speed is unknown, defaulting to 1000 [ 947.554544][T17791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3298'. [ 947.742875][T17798] FAULT_INJECTION: forcing a failure. [ 947.742875][T17798] name fail_futex, interval 1, probability 0, space 0, times 0 [ 947.788254][T17798] CPU: 0 PID: 17798 Comm: syz.3.3300 Not tainted syzkaller #0 [ 947.795902][T17798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 947.805974][T17798] Call Trace: [ 947.805988][T17798] [ 947.806000][T17798] dump_stack_lvl+0x18c/0x250 [ 947.812257][T17798] ? show_regs_print_info+0x20/0x20 [ 947.812294][T17798] ? load_image+0x420/0x420 [ 947.822182][T17798] ? rcu_read_lock_sched_held+0x8a/0x110 [ 947.822213][T17798] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 947.822240][T17798] ? __cgroup_rstat_updated+0xd5/0x360 [ 947.832413][T17798] should_fail_ex+0x394/0x4c0 [ 947.832451][T17798] get_futex_key+0x134/0xf40 [ 947.844103][T17798] ? futex_setup_timer+0xc0/0xc0 [ 947.844135][T17798] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 947.844165][T17798] ? __lock_acquire+0x7eb0/0x7eb0 [ 947.853457][T17798] ? lock_chain_count+0x20/0x20 [ 947.853490][T17798] futex_wait_setup+0xbc/0x270 [ 947.853522][T17798] ? futex_wait_multiple+0x970/0x970 [ 947.864492][T17798] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 947.874411][T17798] ? _raw_spin_unlock+0x40/0x40 [ 947.874458][T17798] futex_wait+0x1cf/0x640 [ 947.884573][T17798] ? futex_wait_setup+0x270/0x270 [ 947.895423][T17798] do_futex+0x2ff/0x3e0 [ 947.904740][T17798] ? __ia32_sys_get_robust_list+0x110/0x110 [ 947.914848][T17798] __se_sys_futex+0x3a9/0x440 [ 947.914883][T17798] ? __x64_sys_futex+0xf0/0xf0 [ 947.914916][T17798] ? __x64_sys_futex+0x21/0xf0 [ 947.929337][T17798] do_syscall_64+0x55/0xb0 [ 947.933818][T17798] ? clear_bhb_loop+0x40/0x90 [ 947.938550][T17798] ? clear_bhb_loop+0x40/0x90 [ 947.943272][T17798] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 947.949218][T17798] RIP: 0033:0x7f6ca79a8fd9 [ 947.953658][T17798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 947.973304][T17798] RSP: 002b:00007f6ca89220e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 947.981754][T17798] RAX: ffffffffffffffda RBX: 00007f6ca7c25fa8 RCX: 00007f6ca79a8fd9 [ 947.989762][T17798] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6ca7c25fa8 [ 947.997760][T17798] RBP: 00007f6ca7c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 948.005756][T17798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 948.013760][T17798] R13: 00007f6ca7c26038 R14: 00007ffe368fb350 R15: 00007ffe368fb438 [ 948.021866][T17798] [ 948.601376][T11611] Bluetooth: hci3: command tx timeout [ 948.855657][T17806] FAULT_INJECTION: forcing a failure. [ 948.855657][T17806] name failslab, interval 1, probability 0, space 0, times 0 [ 948.905665][T17806] CPU: 0 PID: 17806 Comm: syz.3.3303 Not tainted syzkaller #0 [ 948.913251][T17806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 948.923364][T17806] Call Trace: [ 948.927353][T17806] [ 948.930376][T17806] dump_stack_lvl+0x18c/0x250 [ 948.935130][T17806] ? show_regs_print_info+0x20/0x20 [ 948.940421][T17806] ? load_image+0x420/0x420 [ 948.944991][T17806] ? __might_sleep+0xe0/0xe0 [ 948.949649][T17806] ? __lock_acquire+0x7eb0/0x7eb0 [ 948.954812][T17806] should_fail_ex+0x394/0x4c0 [ 948.959535][T17806] should_failslab+0x9/0x20 [ 948.959558][T17806] slab_pre_alloc_hook+0x59/0x300 [ 948.959587][T17806] ? apply_subsystem_event_filter+0x33e/0x1060 [ 948.975337][T17806] __kmem_cache_alloc_node+0x53/0x260 [ 948.975377][T17806] ? apply_subsystem_event_filter+0x33e/0x1060 [ 948.986956][T17806] kmalloc_trace+0x2a/0xe0 [ 948.987001][T17806] apply_subsystem_event_filter+0x33e/0x1060 [ 948.997438][T17806] ? apply_event_filter+0x420/0x420 [ 949.002686][T17806] ? __might_fault+0xc6/0x120 [ 949.002717][T17806] ? _copy_from_user+0xa5/0xe0 [ 949.002746][T17806] subsystem_filter_write+0x99/0xf0 [ 949.012239][T17806] ? subsystem_filter_read+0x210/0x210 [ 949.012272][T17806] vfs_write+0x299/0x9a0 [ 949.012332][T17806] ? file_end_write+0x250/0x250 [ 949.023017][T17806] ? __fget_files+0x28/0x460 [ 949.023056][T17806] ? __fget_files+0x3fc/0x460 [ 949.032192][T17806] ? __fdget_pos+0x2a3/0x330 [ 949.032224][T17806] ? ksys_write+0x74/0x260 [ 949.032261][T17806] ksys_write+0x151/0x260 [ 949.041545][T17806] ? __ia32_sys_read+0x90/0x90 [ 949.041585][T17806] ? lockdep_hardirqs_on+0x98/0x150 [ 949.041615][T17806] do_syscall_64+0x55/0xb0 [ 949.050638][T17806] ? clear_bhb_loop+0x40/0x90 [ 949.074253][T17806] ? clear_bhb_loop+0x40/0x90 [ 949.078980][T17806] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 949.084922][T17806] RIP: 0033:0x7f6ca79a8fd9 [ 949.089392][T17806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.109052][T17806] RSP: 002b:00007f6ca8922028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 949.117548][T17806] RAX: ffffffffffffffda RBX: 00007f6ca7c25fa0 RCX: 00007f6ca79a8fd9 [ 949.125559][T17806] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 949.133646][T17806] RBP: 00007f6ca7a37fed R08: 0000000000000000 R09: 0000000000000000 [ 949.141653][T17806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 949.149659][T17806] R13: 00007f6ca7c26038 R14: 00007f6ca7c25fa0 R15: 00007ffe368fb438 [ 949.157683][T17806] [ 950.305660][T17816] kvm_msr_ignored_check: 306 callbacks suppressed [ 950.361041][ C0] ipvlan_process_outbound: 1 callbacks suppressed [ 950.619295][T17820] FAULT_INJECTION: forcing a failure. [ 950.619295][T17820] name failslab, interval 1, probability 0, space 0, times 0 [ 950.681375][T11611] Bluetooth: hci3: command tx timeout [ 950.682447][T17820] CPU: 0 PID: 17820 Comm: syz.5.3307 Not tainted syzkaller #0 [ 950.694300][T17820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 950.694316][T17820] Call Trace: [ 950.694326][T17820] [ 950.694337][T17820] dump_stack_lvl+0x18c/0x250 [ 950.694374][T17820] ? show_regs_print_info+0x20/0x20 [ 950.694403][T17820] ? load_image+0x420/0x420 [ 950.694430][T17820] ? __might_sleep+0xe0/0xe0 [ 950.694459][T17820] ? __lock_acquire+0x7eb0/0x7eb0 [ 950.694491][T17820] should_fail_ex+0x394/0x4c0 [ 950.694523][T17820] should_failslab+0x9/0x20 [ 950.694562][T17820] slab_pre_alloc_hook+0x59/0x300 [ 950.694583][T17820] ? __kernfs_new_node+0xaa/0x7f0 [ 950.694614][T17820] ? rcu_is_watching+0x15/0xb0 [ 950.705279][T17820] kmem_cache_alloc+0x5a/0x2d0 [ 950.711816][T17820] ? __kernfs_new_node+0xe5/0x7f0 [ 950.711869][T17820] __kernfs_new_node+0xe5/0x7f0 [ 950.711909][T17820] ? kernfs_new_node+0x260/0x260 [ 950.711981][T17820] ? sysfs_do_create_link_sd+0x75/0x110 [ 950.721836][T17820] ? __lock_acquire+0x7eb0/0x7eb0 [ 950.721873][T17820] kernfs_new_node+0x14c/0x260 [ 950.721914][T17820] kernfs_create_link+0xa7/0x200 [ 950.740804][T17820] sysfs_do_create_link_sd+0x83/0x110 [ 950.740853][T17820] device_add_class_symlinks+0x1cf/0x240 [ 950.740885][T17820] device_add+0x4f9/0xc40 [ 950.740912][T17820] rfkill_register+0x170/0x9b0 [ 950.740962][T17820] nfc_register_device+0x13d/0x300 [ 950.760388][T17820] nci_register_device+0x8a3/0xa00 [ 950.805797][T17820] ? nci_free_device+0x90/0x90 [ 950.815780][T17820] ? __init_waitqueue_head+0xa8/0x140 [ 950.825675][T17820] virtual_ncidev_open+0x12c/0x1a0 [ 950.835605][T17820] ? virtual_ncidev_ioctl+0xd0/0xd0 [ 950.846159][T17820] misc_open+0x326/0x3a0 [ 950.855771][T17820] chrdev_open+0x58c/0x600 [ 950.855809][T17820] ? cd_forget+0x160/0x160 [ 950.864704][T17820] ? fsnotify_perm+0x3ed/0x5e0 [ 950.864743][T17820] do_dentry_open+0x880/0x14b0 [ 950.874291][T17820] ? cd_forget+0x160/0x160 [ 950.874331][T17820] path_openat+0x284f/0x3270 [ 950.883391][T17820] ? do_sys_openat2+0xda/0x1d0 [ 950.883426][T17820] ? __x64_sys_openat+0x139/0x160 [ 950.893259][T17820] ? verify_lock_unused+0x140/0x140 [ 950.893291][T17820] ? do_filp_open+0x430/0x430 [ 950.893401][T17820] do_filp_open+0x1f2/0x430 [ 950.907884][T17820] ? vfs_tmpfile+0x620/0x620 [ 950.912562][T17820] ? _raw_spin_unlock+0x28/0x40 [ 950.917453][T17820] ? alloc_fd+0x590/0x640 [ 950.921836][T17820] do_sys_openat2+0x134/0x1d0 [ 950.926562][T17820] ? do_sys_open+0xe0/0xe0 [ 950.931017][T17820] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 950.937036][T17820] ? lock_chain_count+0x20/0x20 [ 950.941938][T17820] __x64_sys_openat+0x139/0x160 [ 950.946834][T17820] do_syscall_64+0x55/0xb0 [ 950.951305][T17820] ? clear_bhb_loop+0x40/0x90 [ 950.956020][T17820] ? clear_bhb_loop+0x40/0x90 [ 950.960735][T17820] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 950.966654][T17820] RIP: 0033:0x7f1ed1ba8fd9 [ 950.966680][T17820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 950.990716][T17820] RSP: 002b:00007f1ed29b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 950.990744][T17820] RAX: ffffffffffffffda RBX: 00007f1ed1e25fa0 RCX: 00007f1ed1ba8fd9 [ 950.990763][T17820] RDX: 0000000000000002 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 950.990779][T17820] RBP: 00007f1ed1c37fed R08: 0000000000000000 R09: 0000000000000000 [ 950.990794][T17820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 950.990809][T17820] R13: 00007f1ed1e26038 R14: 00007f1ed1e25fa0 R15: 00007ffc9022dbc8 [ 951.007266][T17820] [ 951.251815][T17775] chnl_net:caif_netlink_parms(): no params data found [ 951.591292][ T5853] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 951.658966][ C1] net_ratelimit: 44 callbacks suppressed [ 951.791228][ T5853] usb 2-1: Using ep0 maxpacket: 32 [ 951.800118][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 951.811305][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.821213][ T5853] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 951.830903][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.841115][T12658] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 951.889973][ T5853] usb 2-1: config 0 descriptor?? [ 951.920083][ T5853] hub 2-1:0.0: USB hub found [ 952.051136][T12658] usb 4-1: Using ep0 maxpacket: 8 [ 952.060557][T12658] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 952.074292][T12658] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 952.084236][T12658] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 952.095401][T12658] usb 4-1: config 250 has no interface number 0 [ 952.095579][T12658] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 952.129268][T12658] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 952.143738][T12658] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 952.143771][T12658] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 952.166332][ T5853] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 952.180833][T12658] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 952.216384][T12658] usb 4-1: config 250 interface 228 has no altsetting 0 [ 952.227672][T12658] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 952.247522][T12658] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 952.271649][T12658] usb 4-1: Product: syz [ 952.275919][T12658] usb 4-1: SerialNumber: syz [ 952.429173][T12658] hub 4-1:250.228: bad descriptor, ignoring hub [ 952.455325][ T5853] hid-generic 0003:046D:C31C.0024: item fetching failed at offset 0/1 [ 952.464057][T12658] hub: probe of 4-1:250.228 failed with error -5 [ 952.488529][ T5853] hid-generic: probe of 0003:046D:C31C.0024 failed with error -22 [ 952.750279][T17775] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.761048][T11611] Bluetooth: hci3: command tx timeout [ 952.775020][T17775] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.791633][T17775] bridge_slave_0: entered allmulticast mode [ 952.825140][T12658] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 27 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 952.841418][ T5853] usb 2-1: USB disconnect, device number 46 [ 952.873231][T17775] bridge_slave_0: entered promiscuous mode [ 952.891972][T17775] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.899175][T17775] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.915073][T17775] bridge_slave_1: entered allmulticast mode [ 952.957049][T17775] bridge_slave_1: entered promiscuous mode [ 953.013728][T12658] usb 4-1: USB disconnect, device number 27 [ 953.078864][T12658] usblp0: removed [ 953.287254][T17775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.407922][ T50] hsr_slave_0: left promiscuous mode [ 953.420138][ T50] hsr_slave_1: left promiscuous mode [ 953.439188][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 953.455265][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 953.475019][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 953.491990][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 953.507936][ T50] bridge_slave_1: left allmulticast mode [ 953.523321][ T50] bridge_slave_1: left promiscuous mode [ 953.539024][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.581996][ T50] bridge_slave_0: left allmulticast mode [ 953.587718][ T50] bridge_slave_0: left promiscuous mode [ 953.611646][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.641152][T12658] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 953.824004][ T50] veth1_macvtap: left promiscuous mode [ 953.829679][ T50] veth0_macvtap: left promiscuous mode [ 953.852183][ T50] veth1_vlan: left promiscuous mode [ 953.857602][ T50] veth0_vlan: left promiscuous mode [ 953.871190][T12658] usb 4-1: Using ep0 maxpacket: 8 [ 953.879052][T12658] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 953.887724][T12658] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 953.923802][T12658] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 953.958213][T12658] usb 4-1: config 250 has no interface number 0 [ 953.988329][T12658] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 954.030130][T12658] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 954.063881][T12658] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 954.096342][T12658] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 954.132218][T12658] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 954.160899][T12658] usb 4-1: config 250 interface 228 has no altsetting 0 [ 954.180880][T12658] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 954.200488][T12658] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 954.230429][T12658] usb 4-1: Product: syz [ 954.248549][T12658] usb 4-1: SerialNumber: syz [ 954.284771][T12658] hub 4-1:250.228: bad descriptor, ignoring hub [ 954.304164][T12658] hub: probe of 4-1:250.228 failed with error -5 [ 954.504417][T12658] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 28 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 954.593059][T12658] usb 4-1: USB disconnect, device number 28 [ 954.648014][T12658] usblp0: removed [ 954.844306][T11611] Bluetooth: hci3: command tx timeout [ 955.427819][T17881] FAULT_INJECTION: forcing a failure. [ 955.427819][T17881] name fail_futex, interval 1, probability 0, space 0, times 0 [ 955.440857][T17881] CPU: 0 PID: 17881 Comm: syz.3.3325 Not tainted syzkaller #0 [ 955.448371][T17881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 955.458481][T17881] Call Trace: [ 955.461808][T17881] [ 955.464793][T17881] dump_stack_lvl+0x18c/0x250 [ 955.469546][T17881] ? show_regs_print_info+0x20/0x20 [ 955.474803][T17881] ? load_image+0x420/0x420 [ 955.479364][T17881] ? do_raw_spin_lock+0x11f/0x2b0 [ 955.484466][T17881] ? __rwlock_init+0x150/0x150 [ 955.489302][T17881] should_fail_ex+0x394/0x4c0 [ 955.494026][T17881] futex_requeue+0x55b/0x13c0 [ 955.498735][T17881] ? preempt_schedule_thunk+0x1a/0x30 [ 955.498801][T17881] ? put_task_struct+0xc0/0xc0 [ 955.498826][T17881] ? wake_up_q+0xca/0x100 [ 955.504817][T17881] ? futex_wake+0x42a/0x4f0 [ 955.513955][T17881] ? userfaultfd_unmap_complete+0x293/0x310 [ 955.513990][T17881] do_futex+0x32b/0x3e0 [ 955.528783][T17881] ? __ia32_sys_get_robust_list+0x110/0x110 [ 955.534737][T17881] __se_sys_futex+0x3a9/0x440 [ 955.539472][T17881] ? __x64_sys_futex+0xf0/0xf0 [ 955.544277][T17881] ? __x64_sys_futex+0x21/0xf0 [ 955.549080][T17881] do_syscall_64+0x55/0xb0 [ 955.553546][T17881] ? clear_bhb_loop+0x40/0x90 [ 955.558274][T17881] ? clear_bhb_loop+0x40/0x90 [ 955.563011][T17881] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 955.568949][T17881] RIP: 0033:0x7f6ca79a8fd9 [ 955.573406][T17881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.593055][T17881] RSP: 002b:00007f6ca8922028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 955.601529][T17881] RAX: ffffffffffffffda RBX: 00007f6ca7c25fa0 RCX: 00007f6ca79a8fd9 [ 955.609537][T17881] RDX: 0000000000000001 RSI: 000000000000008c RDI: 0000200000000700 [ 955.617554][T17881] RBP: 00007f6ca7a37fed R08: 0000000000000000 R09: 0000000000000000 [ 955.625579][T17881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 955.633640][T17881] R13: 00007f6ca7c26038 R14: 00007f6ca7c25fa0 R15: 00007ffe368fb438 [ 955.641683][T17881] [ 955.957713][T17886] FAULT_INJECTION: forcing a failure. [ 955.957713][T17886] name failslab, interval 1, probability 0, space 0, times 0 [ 955.999230][T17886] CPU: 0 PID: 17886 Comm: syz.3.3327 Not tainted syzkaller #0 [ 956.006778][T17886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 956.006885][T17886] Call Trace: [ 956.006896][T17886] [ 956.006906][T17886] dump_stack_lvl+0x18c/0x250 [ 956.006947][T17886] ? show_regs_print_info+0x20/0x20 [ 956.006979][T17886] ? load_image+0x420/0x420 [ 956.007008][T17886] ? __might_sleep+0xe0/0xe0 [ 956.007038][T17886] ? __lock_acquire+0x7eb0/0x7eb0 [ 956.007072][T17886] should_fail_ex+0x394/0x4c0 [ 956.007104][T17886] should_failslab+0x9/0x20 [ 956.007124][T17886] slab_pre_alloc_hook+0x59/0x300 [ 956.007155][T17886] kmem_cache_alloc+0x5a/0x2d0 [ 956.007176][T17886] ? __kernfs_new_node+0xe5/0x7f0 [ 956.007215][T17886] __kernfs_new_node+0xe5/0x7f0 [ 956.007255][T17886] ? kernfs_new_node+0x260/0x260 [ 956.007302][T17886] ? up_write+0x1be/0x410 [ 956.020690][T17886] kernfs_new_node+0x14c/0x260 [ 956.033588][T17886] __kernfs_create_file+0x4b/0x2e0 [ 956.033624][T17886] sysfs_add_file_mode_ns+0x237/0x2f0 [ 956.033658][T17886] internal_create_group+0x431/0xd10 [ 956.033685][T17886] ? kernfs_add_one+0x149/0x6b0 [ 956.047859][T17886] ? down_read_killable+0x340/0x340 [ 956.062106][T17886] ? sysfs_create_group+0x20/0x20 [ 956.062146][T17886] ? up_write+0x1be/0x410 [ 956.062174][T17886] sysfs_create_groups+0x59/0x120 [ 956.076860][T17886] device_add_attrs+0xdf/0x830 [ 956.096082][T17886] ? device_add_class_symlinks+0x240/0x240 [ 956.111615][T17886] ? kobject_put+0x41a/0x450 [ 956.111653][T17886] ? device_add_class_symlinks+0x21f/0x240 [ 956.111684][T17886] device_add+0x51a/0xc40 [ 956.111713][T17886] rfkill_register+0x170/0x9b0 [ 956.121971][T17886] hci_register_dev+0x412/0x8b0 [ 956.122016][T17886] vhci_create_device+0x403/0x6e0 [ 956.122226][T17886] vhci_write+0x3a3/0x460 [ 956.122261][T17886] vfs_write+0x474/0x9a0 [ 956.122300][T17886] ? file_end_write+0x250/0x250 [ 956.122337][T17886] ? __fget_files+0x3fc/0x460 [ 956.122376][T17886] ? __fdget_pos+0x1d8/0x330 [ 956.122413][T17886] ? ksys_write+0x74/0x260 [ 956.122448][T17886] ksys_write+0x151/0x260 [ 956.122485][T17886] ? __ia32_sys_read+0x90/0x90 [ 956.122522][T17886] ? lockdep_hardirqs_on+0x98/0x150 [ 956.122549][T17886] do_syscall_64+0x55/0xb0 [ 956.122577][T17886] ? clear_bhb_loop+0x40/0x90 [ 956.122607][T17886] ? clear_bhb_loop+0x40/0x90 [ 956.122641][T17886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 956.122671][T17886] RIP: 0033:0x7f6ca79a8fd9 [ 956.122693][T17886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.122714][T17886] RSP: 002b:00007f6ca8922028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 956.122740][T17886] RAX: ffffffffffffffda RBX: 00007f6ca7c25fa0 RCX: 00007f6ca79a8fd9 [ 956.122757][T17886] RDX: 0000000000000002 RSI: 0000200000000bc0 RDI: 0000000000000004 [ 956.122772][T17886] RBP: 00007f6ca7a37fed R08: 0000000000000000 R09: 0000000000000000 [ 956.122787][T17886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 956.122802][T17886] R13: 00007f6ca7c26038 R14: 00007f6ca7c25fa0 R15: 00007ffe368fb438 [ 956.122838][T17886] [ 956.690906][ C0] net_ratelimit: 47 callbacks suppressed [ 957.077415][T17891] FAULT_INJECTION: forcing a failure. [ 957.077415][T17891] name failslab, interval 1, probability 0, space 0, times 0 [ 957.110285][T17891] CPU: 0 PID: 17891 Comm: syz.1.3329 Not tainted syzkaller #0 [ 957.117843][T17891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 957.127964][T17891] Call Trace: [ 957.131338][T17891] [ 957.134358][T17891] dump_stack_lvl+0x18c/0x250 [ 957.139145][T17891] ? show_regs_print_info+0x20/0x20 [ 957.144412][T17891] ? load_image+0x420/0x420 [ 957.148997][T17891] ? __might_sleep+0xe0/0xe0 [ 957.153663][T17891] ? __lock_acquire+0x7eb0/0x7eb0 [ 957.158765][T17891] should_fail_ex+0x394/0x4c0 [ 957.163613][T17891] should_failslab+0x9/0x20 [ 957.168171][T17891] slab_pre_alloc_hook+0x59/0x300 [ 957.173251][T17891] ? do_raw_read_unlock+0x80/0x80 [ 957.178432][T17891] kmem_cache_alloc+0x5a/0x2d0 [ 957.183248][T17891] ? mpol_set_shared_policy+0x5c0/0xe90 [ 957.188860][T17891] mpol_set_shared_policy+0x5c0/0xe90 [ 957.194321][T17891] vma_replace_policy+0x1de/0x4a0 [ 957.199412][T17891] __se_sys_mbind+0x5ca/0x7c0 [ 957.204150][T17891] ? __ia32_sys_get_robust_list+0x110/0x110 [ 957.210120][T17891] ? __x64_sys_mbind+0xf0/0xf0 [ 957.214963][T17891] ? lock_chain_count+0x20/0x20 [ 957.219884][T17891] ? __x64_sys_mbind+0x21/0xf0 [ 957.224712][T17891] do_syscall_64+0x55/0xb0 [ 957.229192][T17891] ? clear_bhb_loop+0x40/0x90 [ 957.234019][T17891] ? clear_bhb_loop+0x40/0x90 [ 957.238752][T17891] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 957.244710][T17891] RIP: 0033:0x7f82717a8fd9 [ 957.249179][T17891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.268933][T17891] RSP: 002b:00007f82725de028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 957.277410][T17891] RAX: ffffffffffffffda RBX: 00007f8271a25fa0 RCX: 00007f82717a8fd9 [ 957.285438][T17891] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000001000 [ 957.293479][T17891] RBP: 00007f8271837fed R08: 0000000000000000 R09: 0000000000000000 [ 957.301503][T17891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 957.309532][T17891] R13: 00007f8271a26038 R14: 00007f8271a25fa0 R15: 00007ffd7fb8e4f8 [ 957.317533][T17891] [ 957.339239][T17908] loop3: detected capacity change from 0 to 33280 [ 957.368417][T17908] EXT4-fs (loop3): Test dummy encryption mode enabled [ 957.422373][T17908] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.3332: inode has both inline data and extents flags [ 957.448864][T17908] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.3332: couldn't read orphan inode 15 (err -117) [ 957.484156][T17908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 957.680830][ T28] audit: type=1800 audit(1700000189.680:86): pid=17907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3332" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 957.791274][T17143] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.516568][ T50] team0 (unregistering): Port device team_slave_1 removed [ 958.687249][ T50] team0 (unregistering): Port device team_slave_0 removed [ 958.855872][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 959.042481][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 959.295645][T17924] FAULT_INJECTION: forcing a failure. [ 959.295645][T17924] name fail_futex, interval 1, probability 0, space 0, times 0 [ 959.308940][T17924] CPU: 0 PID: 17924 Comm: syz.3.3337 Not tainted syzkaller #0 [ 959.316526][T17924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 959.326656][T17924] Call Trace: [ 959.329983][T17924] [ 959.332942][T17924] dump_stack_lvl+0x18c/0x250 [ 959.337670][T17924] ? show_regs_print_info+0x20/0x20 [ 959.342900][T17924] ? load_image+0x420/0x420 [ 959.342945][T17924] should_fail_ex+0x394/0x4c0 [ 959.342980][T17924] futex_lock_pi_atomic+0x14c/0xd00 [ 959.352203][T17924] ? pi_state_update_owner+0x340/0x340 [ 959.352235][T17924] ? futex_setup_timer+0xc0/0xc0 [ 959.362928][T17924] futex_lock_pi+0x22b/0xa00 [ 959.372494][T17924] ? futex_wait_queue+0x138/0x1b0 [ 959.372526][T17924] ? fixup_pi_state_owner+0x5f0/0x5f0 [ 959.382991][T17924] ? file_end_write+0x159/0x250 [ 959.383040][T17924] ? vfs_write+0x5de/0x9a0 [ 959.392337][T17924] do_futex+0x23d/0x3e0 [ 959.392371][T17924] ? __ia32_sys_get_robust_list+0x110/0x110 [ 959.392427][T17924] __se_sys_futex+0x3a9/0x440 [ 959.407223][T17924] ? __x64_sys_futex+0xf0/0xf0 [ 959.412034][T17924] ? __x64_sys_futex+0x21/0xf0 [ 959.416828][T17924] do_syscall_64+0x55/0xb0 [ 959.421279][T17924] ? clear_bhb_loop+0x40/0x90 [ 959.425993][T17924] ? clear_bhb_loop+0x40/0x90 [ 959.430708][T17924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 959.436644][T17924] RIP: 0033:0x7f6ca79a8fd9 [ 959.441088][T17924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 959.460755][T17924] RSP: 002b:00007f6ca8922028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 959.469229][T17924] RAX: ffffffffffffffda RBX: 00007f6ca7c25fa0 RCX: 00007f6ca79a8fd9 [ 959.477240][T17924] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000000 [ 959.485250][T17924] RBP: 00007f6ca7a37fed R08: 0000000000000000 R09: 0000000034fffffd [ 959.493254][T17924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 959.501277][T17924] R13: 00007f6ca7c26038 R14: 00007f6ca7c25fa0 R15: 00007ffe368fb438 [ 959.509294][T17924] [ 961.278269][ T50] bond0 (unregistering): Released all slaves [ 961.591694][T17775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.652159][T17947] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 961.720050][T17943] loop1: detected capacity change from 0 to 32768 [ 961.720997][ C1] net_ratelimit: 34 callbacks suppressed [ 961.825475][T17595] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 961.919601][T17775] team0: Port device team_slave_0 added [ 961.959603][T17775] team0: Port device team_slave_1 added [ 962.238949][T17775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.277720][T17775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 962.360999][T17775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.389339][T17775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.431262][T17775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 962.489244][T17775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.823559][T17775] hsr_slave_0: entered promiscuous mode [ 962.846946][T17775] hsr_slave_1: entered promiscuous mode [ 962.867420][T17775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 962.890837][T17775] Cannot create hsr debugfs directory [ 963.031080][ T57] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 963.220931][ T57] usb 2-1: Using ep0 maxpacket: 8 [ 963.230120][ T57] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 963.249381][ T57] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 963.292933][ T57] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 963.324170][ T57] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 963.358328][ T57] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 963.408853][ T57] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 963.440905][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.724575][ T57] usb 2-1: usb_control_msg returned -32 [ 963.730674][ T57] usbtmc 2-1:16.0: can't read capabilities [ 964.009329][T12658] usb 2-1: USB disconnect, device number 47 [ 965.022083][T17775] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 965.057641][T17775] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 965.085424][T17979] loop1: detected capacity change from 0 to 33280 [ 965.124823][T17775] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 965.233050][T17775] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 965.743214][T17775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 965.851554][T17775] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.923047][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.930259][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 965.966151][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.973545][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 966.388374][T18007] bond1: entered promiscuous mode [ 966.719303][T17775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 966.841067][ C1] net_ratelimit: 44 callbacks suppressed [ 967.317500][T18048] FAULT_INJECTION: forcing a failure. [ 967.317500][T18048] name failslab, interval 1, probability 0, space 0, times 0 [ 967.360259][T18048] CPU: 0 PID: 18048 Comm: syz.3.3368 Not tainted syzkaller #0 [ 967.367913][T18048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 967.378029][T18048] Call Trace: [ 967.381353][T18048] [ 967.384338][T18048] dump_stack_lvl+0x18c/0x250 [ 967.389080][T18048] ? show_regs_print_info+0x20/0x20 [ 967.394349][T18048] ? load_image+0x420/0x420 [ 967.398923][T18048] ? __might_sleep+0xe0/0xe0 [ 967.403592][T18048] ? __lock_acquire+0x7eb0/0x7eb0 [ 967.408694][T18048] should_fail_ex+0x394/0x4c0 [ 967.413437][T18048] should_failslab+0x9/0x20 [ 967.417994][T18048] slab_pre_alloc_hook+0x59/0x300 [ 967.423076][T18048] ? assoc_array_insert+0x93/0x3080 [ 967.428334][T18048] __kmem_cache_alloc_node+0x53/0x260 [ 967.433763][T18048] ? assoc_array_insert+0x93/0x3080 [ 967.439021][T18048] kmalloc_trace+0x2a/0xe0 [ 967.443512][T18048] assoc_array_insert+0x93/0x3080 [ 967.448629][T18048] ? urandom_read_iter+0x140/0x140 [ 967.453800][T18048] ? __key_link_lock+0x9b/0xb0 [ 967.458619][T18048] ? mutex_lock_nested+0x20/0x20 [ 967.463605][T18048] ? down_write+0x16e/0x200 [ 967.468149][T18048] ? down_read_killable+0x340/0x340 [ 967.473489][T18048] __key_link_begin+0xd6/0x1e0 [ 967.478312][T18048] key_instantiate_and_link+0x232/0x490 [ 967.483897][T18048] ? key_payload_reserve+0x3c0/0x3c0 [ 967.489231][T18048] ? do_raw_spin_unlock+0x121/0x230 [ 967.494489][T18048] keyring_alloc+0x6f/0xb0 [ 967.498977][T18048] keyctl_get_persistent+0x5cb/0x830 [ 967.504317][T18048] ? proc_key_users_show+0x310/0x310 [ 967.509665][T18048] __se_sys_keyctl+0x829/0xb50 [ 967.514463][T18048] ? __x64_sys_keyctl+0xc0/0xc0 [ 967.519367][T18048] ? do_futex+0x2ff/0x3e0 [ 967.523736][T18048] ? __ia32_sys_get_robust_list+0x110/0x110 [ 967.529669][T18048] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 967.535773][T18048] ? lock_chain_count+0x20/0x20 [ 967.540661][T18048] ? lockdep_hardirqs_on+0x98/0x150 [ 967.545889][T18048] ? __x64_sys_keyctl+0x20/0xc0 [ 967.550797][T18048] do_syscall_64+0x55/0xb0 [ 967.555313][T18048] ? clear_bhb_loop+0x40/0x90 [ 967.560028][T18048] ? clear_bhb_loop+0x40/0x90 [ 967.564741][T18048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 967.570675][T18048] RIP: 0033:0x7f6ca79a8fd9 [ 967.575146][T18048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.594803][T18048] RSP: 002b:00007f6ca8922028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 967.603269][T18048] RAX: ffffffffffffffda RBX: 00007f6ca7c25fa0 RCX: 00007f6ca79a8fd9 [ 967.611283][T18048] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 967.619287][T18048] RBP: 00007f6ca7a37fed R08: 0000000000000000 R09: 0000000000000000 [ 967.627373][T18048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 967.635376][T18048] R13: 00007f6ca7c26038 R14: 00007f6ca7c25fa0 R15: 00007ffe368fb438 [ 967.643406][T18048] [ 967.828135][T17775] veth0_vlan: entered promiscuous mode [ 967.873053][T17775] veth1_vlan: entered promiscuous mode [ 968.014163][T17775] veth0_macvtap: entered promiscuous mode [ 968.062100][T17775] veth1_macvtap: entered promiscuous mode [ 968.109177][T17775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.128823][T17775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.151935][T17775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.169786][T17775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.179901][T17775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.204730][T17775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.218984][T17775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.240405][T17775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.264390][T17775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 968.297882][T17775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.309895][T17775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.320886][T17775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.332372][T17775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.364314][T17775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.380817][T17775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.405454][T17775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.425916][T17775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.438809][T18065] loop4: detected capacity change from 0 to 7 [ 968.452099][T17775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 968.462419][T18065] loop4: [ 968.465448][T18065] loop4: partition table partially beyond EOD, truncated [ 968.513121][T17775] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.541152][T17775] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.549952][T17775] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.549988][T17775] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.178151][T18079] futex_wake_op: syz.3.3373 tries to shift op by 144; fix this program [ 969.597327][T18079] futex_wake_op: syz.3.3373 tries to shift op by 144; fix this program [ 970.287369][T18096] syz.3.3376[18096] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 970.287702][T18096] syz.3.3376[18096] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 971.893249][ C1] net_ratelimit: 73 callbacks suppressed [ 974.004687][T18131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3386'. [ 975.550364][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 975.571611][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 976.091097][ T57] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 976.314140][ T57] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 976.333701][ T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.341948][ T57] usb 6-1: Product: syz [ 976.356381][ T57] usb 6-1: Manufacturer: syz [ 976.367025][ T57] usb 6-1: SerialNumber: syz [ 976.780588][T18131] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 976.834759][T18126] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 976.920904][ C1] net_ratelimit: 59 callbacks suppressed [ 977.017007][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.053258][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.360959][T18174] nla_validate_range_unsigned: 25 callbacks suppressed [ 977.360977][T18174] netlink: 'syz.4.3287': attribute type 11 has an invalid length. [ 977.605236][T18180] binder_alloc: 18177: binder_alloc_buf, no vma [ 977.861940][T18186] input: syz0 as /devices/virtual/input/input56 [ 977.868754][T18186] FAULT_INJECTION: forcing a failure. [ 977.868754][T18186] name failslab, interval 1, probability 0, space 0, times 0 [ 977.914905][ T57] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 977.936980][T18186] CPU: 0 PID: 18186 Comm: syz.4.3396 Not tainted syzkaller #0 [ 977.944532][T18186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 977.954644][T18186] Call Trace: [ 977.958012][T18186] [ 977.960992][T18186] dump_stack_lvl+0x18c/0x250 [ 977.965741][T18186] ? show_regs_print_info+0x20/0x20 [ 977.971004][T18186] ? load_image+0x420/0x420 [ 977.975574][T18186] ? __might_sleep+0xe0/0xe0 [ 977.980229][T18186] ? __lock_acquire+0x7eb0/0x7eb0 [ 977.985328][T18186] should_fail_ex+0x394/0x4c0 [ 977.990092][T18186] should_failslab+0x9/0x20 [ 977.994661][T18186] slab_pre_alloc_hook+0x59/0x300 [ 977.999728][T18186] kmem_cache_alloc+0x5a/0x2d0 [ 978.004635][T18186] ? __kernfs_new_node+0xe5/0x7f0 [ 978.009708][T18186] __kernfs_new_node+0xe5/0x7f0 [ 978.014640][T18186] ? kernfs_new_node+0x260/0x260 [ 978.019641][T18186] ? up_write+0x1be/0x410 [ 978.024006][T18186] kernfs_new_node+0x14c/0x260 [ 978.028822][T18186] __kernfs_create_file+0x4b/0x2e0 [ 978.033968][T18186] sysfs_add_file_mode_ns+0x237/0x2f0 [ 978.039384][T18186] sysfs_merge_group+0x184/0x320 [ 978.044377][T18186] ? sysfs_remove_groups+0xa0/0xa0 [ 978.049623][T18186] ? device_add_attrs+0x725/0x830 [ 978.054692][T18186] ? device_add_class_symlinks+0x240/0x240 [ 978.060629][T18186] dpm_sysfs_add+0xd2/0x270 [ 978.065173][T18186] device_add+0x55c/0xc40 [ 978.069563][T18186] cdev_device_add+0x1c6/0x380 [ 978.074370][T18186] evdev_connect+0x354/0x3f0 [ 978.079085][T18186] input_register_device+0xcb0/0x1050 [ 978.084536][T18186] ? input_ff_create+0x252/0x2e0 [ 978.089506][T18186] uinput_create_device+0x53e/0x680 [ 978.094805][T18186] uinput_ioctl_handler+0x437/0x1590 [ 978.100135][T18186] ? uinput_release+0x50/0x50 [ 978.104868][T18186] ? bpf_lsm_file_ioctl+0x9/0x10 [ 978.109855][T18186] ? security_file_ioctl+0x80/0xa0 [ 978.115003][T18186] ? uinput_poll+0x120/0x120 [ 978.119636][T18186] __se_sys_ioctl+0xfd/0x170 [ 978.124295][T18186] do_syscall_64+0x55/0xb0 [ 978.128759][T18186] ? clear_bhb_loop+0x40/0x90 [ 978.133475][T18186] ? clear_bhb_loop+0x40/0x90 [ 978.138276][T18186] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 978.144211][T18186] RIP: 0033:0x7f15abfa8fd9 [ 978.148690][T18186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.168334][T18186] RSP: 002b:00007f15acf2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 978.176791][T18186] RAX: ffffffffffffffda RBX: 00007f15ac225fa0 RCX: 00007f15abfa8fd9 [ 978.184809][T18186] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 978.192841][T18186] RBP: 00007f15ac037fed R08: 0000000000000000 R09: 0000000000000000 [ 978.200846][T18186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 978.208852][T18186] R13: 00007f15ac226038 R14: 00007f15ac225fa0 R15: 00007ffd3f51d918 [ 978.216881][T18186] [ 978.257034][ T57] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 978.289038][ T57] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 978.311559][T18186] input: failed to attach handler evdev to device input56, error: -12 [ 978.336377][ T57] lan78xx: probe of 6-1:1.0 failed with error -71 [ 978.358509][T18189] loop1: detected capacity change from 0 to 36864 [ 978.391008][ T5878] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 978.405262][ T57] usb 6-1: USB disconnect, device number 9 [ 978.618236][ T5878] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 978.650998][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.709973][ T5878] usb 4-1: config 0 descriptor?? [ 978.729135][ T5878] pwc: Samsung MPC-C10 USB webcam detected. [ 978.963600][ T5878] pwc: send_video_command error -71 [ 978.968900][ T5878] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 978.995451][ T5878] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 979.003247][ T57] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 979.039283][ T5878] usb 4-1: USB disconnect, device number 29 [ 979.194865][ T57] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 979.206093][ T57] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 979.217068][ T57] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 979.226486][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.246541][ T57] spcp8x5 2-1:1.0: SPCP8x5 converter detected [ 979.287953][ T57] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 979.580907][ T5878] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 979.701557][T18199] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 979.719207][T18199] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 979.736652][T18199] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 979.811899][ T5878] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 979.840391][T18199] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 979.869701][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.889966][ T5878] usb 4-1: config 0 descriptor?? [ 979.920434][ T5878] pwc: Samsung MPC-C10 USB webcam detected. [ 979.934484][T18221] loop4: detected capacity change from 0 to 32896 [ 979.993532][T18198] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 980.023973][T18221] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 980.044767][ T57] usb 2-1: USB disconnect, device number 48 [ 980.093257][ T57] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 980.117660][T18221] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 980.134750][T18219] event trace: Could not enable event p [ 980.146746][ T57] spcp8x5 2-1:1.0: device disconnected [ 980.239641][ T28] audit: type=1800 audit(1700000212.240:87): pid=18221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3404" name="file1" dev="loop4" ino=13 res=0 errno=0 [ 980.334427][ T5878] pwc: recv_control_msg error -32 req 02 val 2b00 [ 980.372816][ T5878] pwc: recv_control_msg error -32 req 02 val 2700 [ 980.401870][ T5878] pwc: recv_control_msg error -32 req 04 val 1700 [ 980.410547][ T5878] pwc: recv_control_msg error -32 req 02 val 2c00 [ 980.646901][T17775] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 980.655252][ T5878] pwc: recv_control_msg error -71 req 04 val 1300 [ 980.691098][ T5878] pwc: recv_control_msg error -71 req 04 val 1400 [ 980.717198][ T5878] pwc: recv_control_msg error -71 req 02 val 2000 [ 980.733630][ T5878] pwc: recv_control_msg error -71 req 02 val 2100 [ 980.773522][ T5878] pwc: recv_control_msg error -71 req 02 val 2200 [ 980.815391][ T5878] pwc: recv_control_msg error -71 req 06 val 0600 [ 980.873335][ T5878] pwc: recv_control_msg error -71 req 04 val 1500 [ 980.910889][ T5878] pwc: recv_control_msg error -71 req 02 val 2500 [ 980.938498][ T5878] pwc: recv_control_msg error -71 req 02 val 2400 [ 980.965470][ T5878] pwc: recv_control_msg error -71 req 02 val 2600 [ 980.979721][ T5878] pwc: recv_control_msg error -71 req 02 val 2900 [ 981.011604][ T5878] pwc: recv_control_msg error -71 req 02 val 2800 [ 981.023336][T18239] loop4: detected capacity change from 0 to 256 [ 981.044738][ T5878] pwc: recv_control_msg error -71 req 04 val 1100 [ 981.067726][ T5878] pwc: recv_control_msg error -71 req 04 val 1200 [ 981.075896][T18237] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3408'. [ 981.089499][ T5878] pwc: Registered as video103. [ 981.130637][ T5878] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input57 [ 981.196033][T18240] syzkaller1: entered promiscuous mode [ 981.260004][ T5878] usb 4-1: USB disconnect, device number 30 [ 981.273456][T18240] syzkaller1: entered allmulticast mode [ 982.306867][T18276] loop3: detected capacity change from 0 to 33280 [ 982.329161][T18276] EXT4-fs: inline encryption not supported [ 982.361975][T18276] EXT4-fs (loop3): Test dummy encryption mode enabled [ 982.371002][T16132] net_ratelimit: 62 callbacks suppressed [ 982.400650][T18276] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 982.433034][T18276] EXT4-fs (loop3): group descriptors corrupted! [ 982.473400][T18276] FAULT_INJECTION: forcing a failure. [ 982.473400][T18276] name failslab, interval 1, probability 0, space 0, times 0 [ 982.510582][T18276] CPU: 0 PID: 18276 Comm: syz.3.3416 Not tainted syzkaller #0 [ 982.518144][T18276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 982.528265][T18276] Call Trace: [ 982.531606][T18276] [ 982.534590][T18276] dump_stack_lvl+0x18c/0x250 [ 982.539368][T18276] ? show_regs_print_info+0x20/0x20 [ 982.544668][T18276] ? load_image+0x420/0x420 [ 982.549234][T18276] ? __might_sleep+0xe0/0xe0 [ 982.553886][T18276] ? __lock_acquire+0x7eb0/0x7eb0 [ 982.559013][T18276] ? percpu_ref_put+0x12/0x100 [ 982.563879][T18276] should_fail_ex+0x394/0x4c0 [ 982.568652][T18276] should_failslab+0x9/0x20 [ 982.573220][T18276] slab_pre_alloc_hook+0x59/0x300 [ 982.578348][T18276] kmem_cache_alloc+0x5a/0x2d0 [ 982.583173][T18276] ? vm_area_dup+0x61/0x270 [ 982.587779][T18276] vm_area_dup+0x61/0x270 [ 982.592201][T18276] __split_vma+0x1a8/0xc20 [ 982.596681][T18276] ? finish_task_switch+0x25d/0x8f0 [ 982.601983][T18276] ? mmap_write_unlock+0x160/0x160 [ 982.607247][T18276] ? lockdep_hardirqs_on+0x98/0x150 [ 982.612508][T18276] do_vmi_align_munmap+0x310/0x16a0 [ 982.617778][T18276] ? do_vmi_munmap+0x2d0/0x2d0 [ 982.622600][T18276] ? mtree_range_walk+0x68c/0x7b0 [ 982.627691][T18276] ? mas_find_setup+0x47f/0x590 [ 982.632628][T18276] do_vmi_munmap+0x252/0x2d0 [ 982.637272][T18276] mmap_region+0x8d9/0x2090 [ 982.641831][T18276] ? aa_get_newest_label+0xfd/0x5c0 [ 982.647065][T18276] ? file_mmap_ok+0x170/0x170 [ 982.651795][T18276] ? bpf_lsm_capable+0x9/0x10 [ 982.656517][T18276] ? security_capable+0x89/0xb0 [ 982.661408][T18276] do_mmap+0x98f/0x10a0 [ 982.665616][T18276] ? mlock_future_ok+0xf0/0xf0 [ 982.670504][T18276] ? down_write+0x200/0x200 [ 982.675044][T18276] vm_mmap_pgoff+0x1c4/0x3f0 [ 982.679682][T18276] ? account_locked_vm+0x200/0x200 [ 982.684839][T18276] ? ksys_mmap_pgoff+0xf3/0x720 [ 982.689733][T18276] ? __x64_sys_mmap+0x7a/0x130 [ 982.694568][T18276] do_syscall_64+0x55/0xb0 [ 982.699110][T18276] ? clear_bhb_loop+0x40/0x90 [ 982.703831][T18276] ? clear_bhb_loop+0x40/0x90 [ 982.708550][T18276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 982.714481][T18276] RIP: 0033:0x7f6ca79a8fd9 [ 982.718930][T18276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 982.738573][T18276] RSP: 002b:00007f6ca8922028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 982.747030][T18276] RAX: ffffffffffffffda RBX: 00007f6ca7c25fa0 RCX: 00007f6ca79a8fd9 [ 982.755052][T18276] RDX: 0000000000000001 RSI: 0000000000002000 RDI: 0000200000003000 [ 982.763154][T18276] RBP: 00007f6ca7a37fed R08: ffffffffffffffff R09: 0000000068535000 [ 982.771160][T18276] R10: 0000000000002172 R11: 0000000000000246 R12: 0000000000000000 [ 982.779157][T18276] R13: 00007f6ca7c26038 R14: 00007f6ca7c25fa0 R15: 00007ffe368fb438 [ 982.787179][T18276] [ 983.305037][T18267] loop5: detected capacity change from 0 to 32768 [ 983.416012][T18267] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 983.495817][T18301] input: syz0 as /devices/virtual/input/input58 [ 983.547589][T18301] FAULT_INJECTION: forcing a failure. [ 983.547589][T18301] name failslab, interval 1, probability 0, space 0, times 0 [ 983.594421][T18301] CPU: 0 PID: 18301 Comm: syz.1.3421 Not tainted syzkaller #0 [ 983.601987][T18301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 983.612105][T18301] Call Trace: [ 983.615441][T18301] [ 983.618424][T18301] dump_stack_lvl+0x18c/0x250 [ 983.623174][T18301] ? show_regs_print_info+0x20/0x20 [ 983.626274][T18267] XFS (loop5): Ending clean mount [ 983.628421][T18301] ? load_image+0x420/0x420 [ 983.638031][T18301] ? __might_sleep+0xe0/0xe0 [ 983.642695][T18301] ? __lock_acquire+0x7eb0/0x7eb0 [ 983.647795][T18301] should_fail_ex+0x394/0x4c0 [ 983.652534][T18301] should_failslab+0x9/0x20 [ 983.657087][T18301] slab_pre_alloc_hook+0x59/0x300 [ 983.662179][T18301] kmem_cache_alloc+0x5a/0x2d0 [ 983.667007][T18301] ? __kernfs_new_node+0xe5/0x7f0 [ 983.672099][T18301] __kernfs_new_node+0xe5/0x7f0 [ 983.676999][T18301] ? kernfs_new_node+0x260/0x260 [ 983.681991][T18301] ? up_write+0x1be/0x410 [ 983.686360][T18301] kernfs_new_node+0x14c/0x260 [ 983.691170][T18301] __kernfs_create_file+0x4b/0x2e0 [ 983.696324][T18301] sysfs_add_file_mode_ns+0x237/0x2f0 [ 983.701735][T18301] sysfs_merge_group+0x184/0x320 [ 983.706724][T18301] ? sysfs_remove_groups+0xa0/0xa0 [ 983.711870][T18301] ? device_add_attrs+0x725/0x830 [ 983.716952][T18301] ? device_add_class_symlinks+0x240/0x240 [ 983.722814][T18301] dpm_sysfs_add+0xd2/0x270 [ 983.727371][T18301] device_add+0x55c/0xc40 [ 983.731740][T18301] cdev_device_add+0x1c6/0x380 [ 983.736551][T18301] evdev_connect+0x354/0x3f0 [ 983.741187][T18301] input_register_device+0xcb0/0x1050 [ 983.746617][T18301] ? input_ff_create+0x252/0x2e0 [ 983.751612][T18301] uinput_create_device+0x53e/0x680 [ 983.756868][T18301] uinput_ioctl_handler+0x437/0x1590 [ 983.762194][T18301] ? uinput_release+0x50/0x50 [ 983.766966][T18301] ? bpf_lsm_file_ioctl+0x9/0x10 [ 983.771938][T18301] ? security_file_ioctl+0x80/0xa0 [ 983.777097][T18301] ? uinput_poll+0x120/0x120 [ 983.781735][T18301] __se_sys_ioctl+0xfd/0x170 [ 983.786400][T18301] do_syscall_64+0x55/0xb0 [ 983.790916][T18301] ? clear_bhb_loop+0x40/0x90 [ 983.795659][T18301] ? clear_bhb_loop+0x40/0x90 [ 983.800390][T18301] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 983.806366][T18301] RIP: 0033:0x7f82717a8fd9 [ 983.810911][T18301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 983.830561][T18301] RSP: 002b:00007f82725de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 983.839021][T18301] RAX: ffffffffffffffda RBX: 00007f8271a25fa0 RCX: 00007f82717a8fd9 [ 983.847053][T18301] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 983.855098][T18301] RBP: 00007f8271837fed R08: 0000000000000000 R09: 0000000000000000 [ 983.863143][T18301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 983.871146][T18301] R13: 00007f8271a26038 R14: 00007f8271a25fa0 R15: 00007ffd7fb8e4f8 [ 983.879169][T18301] [ 983.970490][T18301] input: failed to attach handler evdev to device input58, error: -12 [ 984.388204][T18323] FAULT_INJECTION: forcing a failure. [ 984.388204][T18323] name failslab, interval 1, probability 0, space 0, times 0 [ 984.439842][T18323] CPU: 0 PID: 18323 Comm: syz.1.3424 Not tainted syzkaller #0 [ 984.447405][T18323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 984.457531][T18323] Call Trace: [ 984.460861][T18323] [ 984.463853][T18323] dump_stack_lvl+0x18c/0x250 [ 984.468603][T18323] ? show_regs_print_info+0x20/0x20 [ 984.473868][T18323] ? load_image+0x420/0x420 [ 984.478437][T18323] ? __might_sleep+0xe0/0xe0 [ 984.483091][T18323] ? __lock_acquire+0x7eb0/0x7eb0 [ 984.488201][T18323] should_fail_ex+0x394/0x4c0 [ 984.492991][T18323] should_failslab+0x9/0x20 [ 984.497560][T18323] slab_pre_alloc_hook+0x59/0x300 [ 984.502650][T18323] ? nfs_create_rpc_client+0x525/0x730 [ 984.508210][T18323] ? nfs4_alloc_client+0x79e/0xc20 [ 984.513390][T18323] ? nfs_get_client+0xab3/0xe50 [ 984.518309][T18323] ? xprt_alloc+0x4db/0x790 [ 984.523016][T18323] __kmem_cache_alloc_node+0x53/0x260 [ 984.528499][T18323] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 984.534737][T18323] ? xprt_alloc+0x4db/0x790 [ 984.539335][T18323] kmalloc_trace+0x2a/0xe0 [ 984.543861][T18323] xprt_alloc+0x4db/0x790 [ 984.548279][T18323] xs_setup_xprt+0x9e/0x3b0 [ 984.552862][T18323] xs_setup_tcp+0xe0/0x920 [ 984.557344][T18323] ? xprt_create_transport+0x12e/0x5b0 [ 984.562879][T18323] ? xs_create_sock+0x7c0/0x7c0 [ 984.567801][T18323] ? __rwlock_init+0x150/0x150 [ 984.572639][T18323] ? do_raw_spin_unlock+0x121/0x230 [ 984.578003][T18323] xprt_create_transport+0x152/0x5b0 [ 984.583364][T18323] rpc_create+0x4d3/0x8a0 [ 984.587767][T18323] ? rpc_cleanup_clids+0x20/0x20 [ 984.592793][T18323] ? net_generic+0x1e/0x240 [ 984.597361][T18323] ? net_generic+0x1e/0x240 [ 984.601921][T18323] ? nfs_create_rpc_client+0x2ea/0x730 [ 984.607454][T18323] nfs_create_rpc_client+0x525/0x730 [ 984.612812][T18323] ? nfs_init_timeout_values+0x420/0x420 [ 984.618542][T18323] ? __init_waitqueue_head+0xa8/0x140 [ 984.623992][T18323] nfs4_alloc_client+0x79e/0xc20 [ 984.629015][T18323] ? nfs40_shutdown_client+0x80/0x80 [ 984.634386][T18323] ? net_generic+0x1e/0x240 [ 984.638961][T18323] ? nfs_get_client+0xa8b/0xe50 [ 984.643895][T18323] ? __lock_acquire+0x7eb0/0x7eb0 [ 984.648995][T18323] ? do_raw_spin_unlock+0x121/0x230 [ 984.654277][T18323] nfs_get_client+0xab3/0xe50 [ 984.659052][T18323] nfs4_set_client+0x3e2/0x5b0 [ 984.663884][T18323] ? lock_chain_count+0x20/0x20 [ 984.668804][T18323] ? nfs4_create_referral_server+0x5f0/0x5f0 [ 984.674885][T18323] nfs4_create_server+0x48e/0x1080 [ 984.680090][T18323] ? nfs4_set_ds_client+0x590/0x590 [ 984.685366][T18323] ? get_nfs_version+0x1eb/0x210 [ 984.690371][T18323] ? nfs_get_tree+0x11a4/0x1650 [ 984.695307][T18323] nfs4_try_get_tree+0x49/0x110 [ 984.700230][T18323] vfs_get_tree+0x8c/0x280 [ 984.704716][T18323] do_new_mount+0x24a/0xa60 [ 984.709298][T18323] __se_sys_mount+0x2e7/0x3d0 [ 984.714043][T18323] ? __x64_sys_mount+0xc0/0xc0 [ 984.718870][T18323] ? lockdep_hardirqs_on+0x98/0x150 [ 984.724118][T18323] ? __x64_sys_mount+0x20/0xc0 [ 984.728947][T18323] do_syscall_64+0x55/0xb0 [ 984.733431][T18323] ? clear_bhb_loop+0x40/0x90 [ 984.738170][T18323] ? clear_bhb_loop+0x40/0x90 [ 984.742917][T18323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 984.748872][T18323] RIP: 0033:0x7f82717a8fd9 [ 984.753350][T18323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 984.773160][T18323] RSP: 002b:00007f82725de028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 984.781647][T18323] RAX: ffffffffffffffda RBX: 00007f8271a25fa0 RCX: 00007f82717a8fd9 [ 984.789685][T18323] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 984.797717][T18323] RBP: 00007f8271837fed R08: 0000200000000140 R09: 0000000000000000 [ 984.805759][T18323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 984.813792][T18323] R13: 00007f8271a26038 R14: 00007f8271a25fa0 R15: 00007ffd7fb8e4f8 [ 984.821846][T18323] [ 985.035082][T17488] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 985.447922][T18340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3429'. [ 985.751301][T18353] FAULT_INJECTION: forcing a failure. [ 985.751301][T18353] name failslab, interval 1, probability 0, space 0, times 0 [ 985.790869][T18353] CPU: 0 PID: 18353 Comm: syz.1.3432 Not tainted syzkaller #0 [ 985.798463][T18353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 985.808581][T18353] Call Trace: [ 985.811920][T18353] [ 985.814901][T18353] dump_stack_lvl+0x18c/0x250 [ 985.819652][T18353] ? show_regs_print_info+0x20/0x20 [ 985.824918][T18353] ? load_image+0x420/0x420 [ 985.829486][T18353] ? __lock_acquire+0x7eb0/0x7eb0 [ 985.834577][T18353] ? __lock_acquire+0x135d/0x7eb0 [ 985.839701][T18353] should_fail_ex+0x394/0x4c0 [ 985.844443][T18353] should_failslab+0x9/0x20 [ 985.848989][T18353] slab_pre_alloc_hook+0x59/0x300 [ 985.854052][T18353] kmem_cache_alloc_lru+0x4d/0x2c0 [ 985.859306][T18353] ? __d_alloc+0x31/0x710 [ 985.863696][T18353] __d_alloc+0x31/0x710 [ 985.863726][T18353] d_alloc_parallel+0xe0/0x1590 [ 985.863752][T18353] ? verify_lock_unused+0x140/0x140 [ 985.872801][T18353] ? lockdep_softirqs_off+0x440/0x440 [ 985.872837][T18353] ? lockdep_softirqs_off+0x440/0x440 [ 985.883434][T18353] ? d_hash_and_lookup+0x1b0/0x1b0 [ 985.883475][T18353] ? __init_waitqueue_head+0xa8/0x140 [ 985.894032][T18353] __lookup_slow+0x138/0x400 [ 985.894067][T18353] ? lookup_one_len+0x2e0/0x2e0 [ 985.894155][T18353] lookup_one_len+0x1a1/0x2e0 [ 985.904124][T18353] ? lookup_one_common+0x450/0x450 [ 985.913677][T18353] ? mntput+0x65/0xc0 [ 985.913713][T18353] start_creating+0x184/0x310 [ 985.913753][T18353] __debugfs_create_file+0x6f/0x500 [ 985.922843][T18353] ? debugfs_create_dir+0x415/0x4b0 [ 985.922878][T18353] bdi_register_va+0x296/0x6d0 [ 985.932832][T18353] super_setup_bdi_name+0xf9/0x200 [ 985.932871][T18353] ? vfs_get_tree+0x280/0x280 [ 985.932906][T18353] ? do_raw_spin_unlock+0x121/0x230 [ 985.958229][T18353] fuse_fill_super_common+0x63d/0x11d0 [ 985.963779][T18353] ? down_write+0x16e/0x200 [ 985.968352][T18353] ? fuse_init_fs_context_submount+0x40/0x40 [ 985.974411][T18353] ? __rwlock_init+0x150/0x150 [ 985.979263][T18353] ? up_write+0x1be/0x410 [ 985.983686][T18353] fuse_fill_super+0x17a/0x1f0 [ 985.988527][T18353] ? fuse_reconfigure+0xb0/0xb0 [ 985.993447][T18353] get_tree_nodev+0xb5/0x140 [ 985.998209][T18353] fuse_get_tree+0x2e2/0x4e0 [ 986.002881][T18353] vfs_get_tree+0x8c/0x280 [ 986.007365][T18353] do_new_mount+0x24a/0xa60 [ 986.011939][T18353] __se_sys_mount+0x2e7/0x3d0 [ 986.016694][T18353] ? __x64_sys_mount+0xc0/0xc0 [ 986.021509][T18353] ? lockdep_hardirqs_on+0x98/0x150 [ 986.026767][T18353] ? __x64_sys_mount+0x20/0xc0 [ 986.031595][T18353] do_syscall_64+0x55/0xb0 [ 986.036085][T18353] ? clear_bhb_loop+0x40/0x90 [ 986.040827][T18353] ? clear_bhb_loop+0x40/0x90 [ 986.045576][T18353] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 986.051643][T18353] RIP: 0033:0x7f82717a8fd9 [ 986.056110][T18353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 986.075955][T18353] RSP: 002b:00007f82725de028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 986.084460][T18353] RAX: ffffffffffffffda RBX: 00007f8271a25fa0 RCX: 00007f82717a8fd9 [ 986.092499][T18353] RDX: 00002000000003c0 RSI: 0000200000000380 RDI: 0000000000000000 [ 986.100559][T18353] RBP: 00007f8271837fed R08: 0000200000000400 R09: 0000000000000000 [ 986.108689][T18353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 986.116718][T18353] R13: 00007f8271a26038 R14: 00007f8271a25fa0 R15: 00007ffd7fb8e4f8 [ 986.124770][T18353] [ 986.335933][T18361] loop4: detected capacity change from 0 to 32896 [ 986.383396][T18361] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 986.417351][T18361] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 986.520674][T18361] EXT4-fs (loop4): shut down requested (0) [ 986.725996][T17775] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 986.968248][T18368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3436'. [ 987.031702][T18368] l2tp_ppp: sess 2/0: no socket in recv [ 987.042732][T18373] Bluetooth: MGMT ver 1.22 [ 987.225273][T18377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 987.558482][T18377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 987.571205][ C0] net_ratelimit: 55 callbacks suppressed [ 987.602902][T18389] loop1: detected capacity change from 0 to 33280 [ 987.705706][T17595] I/O error, dev loop1, sector 33152 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 987.787749][T18384] ip_vti0: entered promiscuous mode [ 987.839128][T18384] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3438'. [ 988.200187][T18366] loop3: detected capacity change from 0 to 32768 [ 988.318056][T18366] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 988.469060][T18366] XFS (loop3): Ending clean mount [ 988.530492][T18412] futex_wake_op: syz.5.3444 tries to shift op by 144; fix this program [ 989.082245][T17143] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 989.301653][T18412] futex_wake_op: syz.5.3444 tries to shift op by 144; fix this program [ 990.705343][T18435] loop1: detected capacity change from 0 to 32768 [ 990.765727][T18456] loop3: detected capacity change from 0 to 36864 [ 990.792272][T17595] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 990.884865][T18456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 991.079547][T17143] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.515267][T18475] FAULT_INJECTION: forcing a failure. [ 991.515267][T18475] name failslab, interval 1, probability 0, space 0, times 0 [ 991.569784][T18475] CPU: 0 PID: 18475 Comm: syz.1.3466 Not tainted syzkaller #0 [ 991.577338][T18475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 991.587465][T18475] Call Trace: [ 991.590788][T18475] [ 991.593757][T18475] dump_stack_lvl+0x18c/0x250 [ 991.598487][T18475] ? show_regs_print_info+0x20/0x20 [ 991.603729][T18475] ? load_image+0x420/0x420 [ 991.608266][T18475] ? __might_sleep+0xe0/0xe0 [ 991.612897][T18475] ? __lock_acquire+0x7eb0/0x7eb0 [ 991.617966][T18475] should_fail_ex+0x394/0x4c0 [ 991.622686][T18475] should_failslab+0x9/0x20 [ 991.627245][T18475] slab_pre_alloc_hook+0x59/0x300 [ 991.632320][T18475] kmem_cache_alloc+0x5a/0x2d0 [ 991.637126][T18475] ? vm_area_dup+0x27/0x270 [ 991.641673][T18475] vm_area_dup+0x27/0x270 [ 991.646056][T18475] __split_vma+0x1a8/0xc20 [ 991.650544][T18475] ? mmap_write_unlock+0x160/0x160 [ 991.655706][T18475] ? split_vma+0x8f/0x110 [ 991.660081][T18475] mprotect_fixup+0xade/0xcd0 [ 991.664833][T18475] ? change_protection+0x31e0/0x31e0 [ 991.670152][T18475] ? apparmor_file_mprotect+0xfe/0x120 [ 991.675652][T18475] ? bpf_lsm_file_mprotect+0x9/0x10 [ 991.680899][T18475] do_mprotect_pkey+0x7c3/0xcc0 [ 991.685797][T18475] ? prot_none_test+0x10/0x10 [ 991.690622][T18475] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 991.696701][T18475] __x64_sys_mprotect+0x80/0x90 [ 991.701597][T18475] do_syscall_64+0x55/0xb0 [ 991.706059][T18475] ? clear_bhb_loop+0x40/0x90 [ 991.710788][T18475] ? clear_bhb_loop+0x40/0x90 [ 991.715528][T18475] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 991.721489][T18475] RIP: 0033:0x7f82717a8fd9 [ 991.725961][T18475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 991.745642][T18475] RSP: 002b:00007f82725de028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 991.754096][T18475] RAX: ffffffffffffffda RBX: 00007f8271a25fa0 RCX: 00007f82717a8fd9 [ 991.762107][T18475] RDX: 0000000000000001 RSI: 000000000000f000 RDI: 0000200000000000 [ 991.770121][T18475] RBP: 00007f8271837fed R08: 0000000000000000 R09: 0000000000000000 [ 991.778125][T18475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 991.786130][T18475] R13: 00007f8271a26038 R14: 00007f8271a25fa0 R15: 00007ffd7fb8e4f8 [ 991.794147][T18475] [ 992.542358][T18476] loop4: detected capacity change from 0 to 32768 [ 992.600833][ C1] net_ratelimit: 50 callbacks suppressed [ 992.625375][T18476] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 992.640281][ T28] audit: type=1800 audit(1700000224.640:88): pid=18496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3462" name=08 dev="sda1" ino=2068 res=0 errno=0 [ 992.804457][T18476] XFS (loop4): Ending clean mount [ 993.271628][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.278043][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.582976][T17775] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 993.940173][T18538] loop5: detected capacity change from 0 to 256 [ 994.002521][T17595] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 995.403163][T18579] fuse: Bad value for 'fd' [ 995.738003][T18588] netlink: 'syz.1.3484': attribute type 11 has an invalid length. [ 995.891746][T18565] loop3: detected capacity change from 0 to 32768 [ 995.977080][T18565] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 996.110958][T18565] XFS (loop3): Ending clean mount [ 996.771325][T17143] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 997.351093][ T5853] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 997.512034][T18631] FAULT_INJECTION: forcing a failure. [ 997.512034][T18631] name failslab, interval 1, probability 0, space 0, times 0 [ 997.537242][T18631] CPU: 0 PID: 18631 Comm: syz.3.3489 Not tainted syzkaller #0 [ 997.544768][T18631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 997.544785][T18631] Call Trace: [ 997.544795][T18631] [ 997.561181][T18631] dump_stack_lvl+0x18c/0x250 [ 997.565949][T18631] ? show_regs_print_info+0x20/0x20 [ 997.571206][T18631] ? load_image+0x420/0x420 [ 997.575775][T18631] ? __lock_acquire+0x7eb0/0x7eb0 [ 997.580871][T18631] should_fail_ex+0x394/0x4c0 [ 997.585612][T18631] should_failslab+0x9/0x20 [ 997.590170][T18631] slab_pre_alloc_hook+0x59/0x300 [ 997.595255][T18631] kmem_cache_alloc+0x5a/0x2d0 [ 997.600066][T18631] ? security_inode_alloc+0x34/0x110 [ 997.605392][T18631] security_inode_alloc+0x34/0x110 [ 997.610546][T18631] inode_init_always+0x914/0xc90 [ 997.615548][T18631] new_inode_pseudo+0x95/0x1d0 [ 997.620460][T18631] new_inode+0x22/0x1d0 [ 997.624656][T18631] ? start_creating+0x1f5/0x310 [ 997.629561][T18631] debugfs_create_dir+0xf0/0x4b0 [ 997.634554][T18631] bdi_register_va+0x253/0x6d0 [ 997.639379][T18631] super_setup_bdi_name+0xf9/0x200 [ 997.644556][T18631] ? vfs_get_tree+0x280/0x280 [ 997.649294][T18631] ? do_raw_spin_unlock+0x121/0x230 [ 997.654556][T18631] fuse_fill_super_common+0x63d/0x11d0 [ 997.660085][T18631] ? down_write+0x16e/0x200 [ 997.664730][T18631] ? fuse_init_fs_context_submount+0x40/0x40 [ 997.670850][T18631] ? __rwlock_init+0x150/0x150 [ 997.675700][T18631] ? up_write+0x1be/0x410 [ 997.680100][T18631] fuse_fill_super+0x17a/0x1f0 [ 997.684939][T18631] ? fuse_reconfigure+0xb0/0xb0 [ 997.689855][T18631] get_tree_nodev+0xb5/0x140 [ 997.694530][T18631] fuse_get_tree+0x2e2/0x4e0 [ 997.699186][T18631] vfs_get_tree+0x8c/0x280 [ 997.703665][T18631] do_new_mount+0x24a/0xa60 [ 997.708228][T18631] __se_sys_mount+0x2e7/0x3d0 [ 997.712970][T18631] ? __x64_sys_mount+0xc0/0xc0 [ 997.717802][T18631] ? lockdep_hardirqs_on+0x98/0x150 [ 997.723055][T18631] ? __x64_sys_mount+0x20/0xc0 [ 997.727902][T18631] do_syscall_64+0x55/0xb0 [ 997.732413][T18631] ? clear_bhb_loop+0x40/0x90 [ 997.737172][T18631] ? clear_bhb_loop+0x40/0x90 [ 997.741945][T18631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 997.747912][T18631] RIP: 0033:0x7f6ca79a8fd9 [ 997.752384][T18631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 997.772054][T18631] RSP: 002b:00007f6ca8922028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 997.780529][T18631] RAX: ffffffffffffffda RBX: 00007f6ca7c25fa0 RCX: 00007f6ca79a8fd9 [ 997.788561][T18631] RDX: 00002000000003c0 RSI: 0000200000000380 RDI: 0000000000000000 [ 997.796584][T18631] RBP: 00007f6ca7a37fed R08: 0000200000000400 R09: 0000000000000000 [ 997.804606][T18631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 997.812639][T18631] R13: 00007f6ca7c26038 R14: 00007f6ca7c25fa0 R15: 00007ffe368fb438 [ 997.820700][T18631] [ 997.825075][ C0] net_ratelimit: 53 callbacks suppressed [ 997.860319][ T5853] usb 2-1: Using ep0 maxpacket: 32 [ 997.911804][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 997.923155][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 997.940966][ T5853] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 997.950104][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.964120][T18631] debugfs: out of free dentries, can not create directory '0:55' [ 997.973453][ T5853] usb 2-1: config 0 descriptor?? [ 998.059723][T18636] loop5: detected capacity change from 0 to 8 [ 998.147876][T17595] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 998.394007][ T5853] ft260 0003:0403:6030.0025: unknown main item tag 0x0 [ 998.414579][ T5853] ft260 0003:0403:6030.0025: unknown main item tag 0x0 [ 998.613559][ T5853] ft260 0003:0403:6030.0025: chip code: 0000 0000 [ 998.824982][ T5853] ft260 0003:0403:6030.0025: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 998.879663][T18662] loop3: detected capacity change from 0 to 128 [ 999.015606][ T5853] ft260 0003:0403:6030.0025: failed to retrieve status: -32, no wakeup [ 999.237002][T18670] loop3: detected capacity change from 0 to 33792 [ 999.263110][T18622] i2c i2c-1: adapter quirk: comb msg only to same addr (addr 0x00cf, size 0, write) [ 999.305479][ T5853] usb 2-1: USB disconnect, device number 49 [ 999.360039][T18670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 999.402336][T18670] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 999.446214][T18670] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: comm syz.3.3502: lblock 0 mapped to illegal pblock 0 (length 1) [ 999.484112][T18670] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.3502: lblock 0 mapped to illegal pblock 0 (length 1) [ 999.511516][T18670] EXT4-fs error (device loop3): ext4_ext_remove_space:2957: inode #15: comm syz.3.3502: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 999.638064][T18669] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.3502: lblock 0 mapped to illegal pblock 0 (length 1) [ 999.705146][T18669] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.3502: lblock 0 mapped to illegal pblock 0 (length 1) [ 999.737474][T18669] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.3502: lblock 0 mapped to illegal pblock 0 (length 1) [ 999.791830][T18669] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.3502: lblock 0 mapped to illegal pblock 0 (length 1) [ 999.822402][T18669] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.3502: lblock 0 mapped to illegal pblock 0 (length 1) [ 999.853495][T18669] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.3502: lblock 0 mapped to illegal pblock 0 (length 1) [ 999.871363][T18669] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.3502: lblock 0 mapped to illegal pblock 0 (length 1) [ 1000.055649][T17143] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1000.451127][ T5878] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1000.661147][ T5878] usb 2-1: Using ep0 maxpacket: 32 [ 1000.679757][ T5878] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1000.701123][ T5878] usb 2-1: config 0 has no interface number 0 [ 1000.707323][ T5878] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1000.753479][ T5878] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1000.783680][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.806676][ T5878] usb 2-1: Product: syz [ 1000.821804][ T5878] usb 2-1: Manufacturer: syz [ 1000.841271][ T5878] usb 2-1: SerialNumber: syz [ 1000.852868][ T5151] Dev loop2: unable to read RDB block 2 [ 1000.858527][ T5151] loop2: unable to read partition table [ 1000.866381][ T5878] usb 2-1: config 0 descriptor?? [ 1000.875837][T18703] kvm: pic: level sensitive irq not supported [ 1000.876419][T18703] kvm: pic: single mode not supported [ 1000.906828][ T5151] loop2: partition table beyond EOD, truncated [ 1001.315746][T18688] loop4: detected capacity change from 0 to 40427 [ 1001.452435][T18688] bond0: (slave bond_slave_0): Releasing backup interface [ 1001.776786][T18724] bridge0: port 3(syz_tun) entered blocking state [ 1001.798539][T18724] bridge0: port 3(syz_tun) entered disabled state [ 1001.815908][T18724] syz_tun: entered allmulticast mode [ 1001.845179][T18724] syz_tun: entered promiscuous mode [ 1001.932286][T18726] digital: digital_start_poll: Unknown protocol [ 1002.405612][T18743] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3517'. [ 1002.451130][T14093] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1002.554438][T18747] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3517'. [ 1002.654557][T14093] usb 4-1: Using ep0 maxpacket: 8 [ 1002.674234][T14093] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1002.700952][T14093] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1002.728090][T14093] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1002.758879][T14093] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1002.785152][ T5878] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 1002.810866][T14093] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1002.824329][ T5878] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1002.840992][ C1] net_ratelimit: 46 callbacks suppressed [ 1002.850814][ T5878] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1002.865865][T14093] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1002.886659][ T5878] f81534: probe of 2-1:0.12 failed with error -71 [ 1002.910550][T14093] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.945589][ T5878] usb 2-1: USB disconnect, device number 50 [ 1003.166087][T18753] TC_ACT_REPEAT abuse ? [ 1003.188955][T14093] usb 4-1: usb_control_msg returned -32 [ 1003.200891][T14093] usbtmc 4-1:16.0: can't read capabilities [ 1003.616831][T18738] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 1003.647981][T18762] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1003.690071][T18769] FAULT_INJECTION: forcing a failure. [ 1003.690071][T18769] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.704759][T18765] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1003.740993][T18769] CPU: 1 PID: 18769 Comm: syz.5.3523 Not tainted syzkaller #0 [ 1003.748534][T18769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1003.748556][T18769] Call Trace: [ 1003.748567][T18769] [ 1003.748578][T18769] dump_stack_lvl+0x18c/0x250 [ 1003.748619][T18769] ? show_regs_print_info+0x20/0x20 [ 1003.748651][T18769] ? load_image+0x420/0x420 [ 1003.748681][T18769] ? verify_lock_unused+0x140/0x140 [ 1003.748717][T18769] should_fail_ex+0x394/0x4c0 [ 1003.748748][T18769] should_failslab+0x9/0x20 [ 1003.765771][T18769] slab_pre_alloc_hook+0x59/0x300 [ 1003.794703][T18769] kmem_cache_alloc+0x5a/0x2d0 [ 1003.794732][T18769] ? skb_clone+0x1eb/0x370 [ 1003.794767][T18769] skb_clone+0x1eb/0x370 [ 1003.805235][T18769] __netlink_deliver_tap+0x411/0x7f0 [ 1003.814532][T18769] ? netlink_deliver_tap+0x2e/0x1b0 [ 1003.814565][T18769] netlink_deliver_tap+0x19c/0x1b0 [ 1003.814588][T18769] netlink_unicast+0x82f/0x9e0 [ 1003.814640][T18769] netlink_sendmsg+0x8d0/0xbf0 [ 1003.830310][T18769] ? netlink_getsockopt+0x590/0x590 [ 1003.839848][T18769] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1003.839896][T18769] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1003.855972][T18769] ? security_socket_sendmsg+0x80/0xa0 [ 1003.856022][T18769] __sys_sendto+0x4a9/0x6b0 [ 1003.866140][T18769] ? __ia32_sys_getpeername+0x90/0x90 [ 1003.871592][T18769] ? __lock_acquire+0x7eb0/0x7eb0 [ 1003.876697][T18769] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1003.876731][T18769] ? lock_chain_count+0x20/0x20 [ 1003.876759][T18769] ? lock_chain_count+0x20/0x20 [ 1003.892540][T18769] __x64_sys_sendto+0xde/0xf0 [ 1003.897280][T18769] do_syscall_64+0x55/0xb0 [ 1003.897321][T18769] ? clear_bhb_loop+0x40/0x90 [ 1003.897355][T18769] ? clear_bhb_loop+0x40/0x90 [ 1003.897394][T18769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1003.897423][T18769] RIP: 0033:0x7f1ed1b6980e [ 1003.897445][T18769] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1003.897465][T18769] RSP: 002b:00007f1ed29afe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1003.950281][T18769] RAX: ffffffffffffffda RBX: 00007f1ed29b16c0 RCX: 00007f1ed1b6980e [ 1003.958311][T18769] RDX: 0000000000000020 RSI: 00007f1ed29b0000 RDI: 0000000000000003 [ 1003.966316][T18769] RBP: 0000000000000000 R08: 00007f1ed29aff04 R09: 000000000000000c [ 1003.966334][T18769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1003.966348][T18769] R13: 00007f1ed29aff58 R14: 00007f1ed29b0000 R15: 0000000000000000 [ 1003.966388][T18769] [ 1004.048447][ T5878] usb 4-1: USB disconnect, device number 31 [ 1004.792296][T18763] loop4: detected capacity change from 0 to 32768 [ 1004.921642][T18763] JBD2: Ignoring recovery information on journal [ 1005.072062][T18763] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1005.357312][ T28] audit: type=1804 audit(1700000237.360:89): pid=18787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3520" name="/newroot/29/bus/file1" dev="loop4" ino=17059 res=1 errno=0 [ 1005.523594][T17775] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #0 has bad signature  [ 1005.559290][T17775] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1005.578675][T17775] OCFS2: File system is now read-only. [ 1005.584655][T17775] (syz-executor,17775,1):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30 [ 1005.597941][T17775] (syz-executor,17775,1):_ocfs2_free_clusters:2605 ERROR: status = -30 [ 1005.606832][T17775] (syz-executor,17775,1):ocfs2_sync_local_to_main:1001 ERROR: status = -30 [ 1005.616063][T17775] (syz-executor,17775,1):ocfs2_sync_local_to_main:1013 ERROR: status = -30 [ 1005.625089][T17775] (syz-executor,17775,1):ocfs2_shutdown_local_alloc:449 ERROR: status = -30 [ 1005.675466][T17775] ocfs2: Unmounting device (7,4) on (node local) [ 1006.225569][T18810] netlink: 'syz.4.3528': attribute type 2 has an invalid length. [ 1006.835862][T18796] loop1: detected capacity change from 0 to 40427 [ 1006.915867][T18821] loop3: detected capacity change from 0 to 34816 [ 1007.020217][T18821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1007.133855][T18821] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1007.532646][T17143] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.965657][ C0] net_ratelimit: 45 callbacks suppressed [ 1008.703289][T18840] loop3: detected capacity change from 0 to 32768 [ 1008.761463][T18840] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.3536 (18840) [ 1008.897155][T18840] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1008.941393][T18840] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1008.981449][T18840] BTRFS info (device loop3): force clearing of disk cache [ 1008.988734][T18840] BTRFS info (device loop3): enabling auto defrag [ 1009.024411][T18840] BTRFS info (device loop3): max_inline at 0 [ 1009.071901][T18840] BTRFS info (device loop3): enabling disk space caching [ 1009.099566][T18840] BTRFS info (device loop3): disk space caching is enabled [ 1009.128373][T18849] loop4: detected capacity change from 0 to 32768 [ 1009.166513][T18849] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 1009.353022][T18840] BTRFS info (device loop3): enabling ssd optimizations [ 1009.402048][T18840] BTRFS info (device loop3): rebuilding free space tree [ 1009.481619][T18840] BTRFS info (device loop3): disabling free space tree [ 1009.488728][T18840] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1009.503673][T18771] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 1009.581269][T18840] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1010.525991][ T1098] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 1010.690008][ T5789] Bluetooth: hci2: command 0x0406 tx timeout [ 1010.904365][ T5777] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1010.972660][T17143] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1011.133861][ T5777] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1011.148620][ T5777] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.177767][ T5777] usb 6-1: string descriptor 0 read error: -22 [ 1011.242919][ T5777] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1011.263208][ T5777] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.323906][ T5797] usb 6-1: USB disconnect, device number 10 [ 1012.833136][T11611] Bluetooth: hci2: hcon ffff888079e96000 sent 1 < count 16 [ 1013.201055][T18944] file system registered [ 1013.212905][T18944] unloading [ 1013.490927][T16143] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1013.700886][T16143] usb 6-1: Using ep0 maxpacket: 32 [ 1013.708837][T16143] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.725389][ C0] net_ratelimit: 50 callbacks suppressed [ 1013.740917][T16143] usb 6-1: config 0 has no interfaces? [ 1013.753942][T16143] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1013.778148][T16143] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1013.830912][T16143] usb 6-1: Product: syz [ 1013.849484][T16143] usb 6-1: Manufacturer: syz [ 1013.877000][T16143] usb 6-1: SerialNumber: syz [ 1013.909116][T16143] usb 6-1: config 0 descriptor?? [ 1013.991411][T16136] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.184296][T16143] usb 6-1: USB disconnect, device number 11 [ 1014.306995][T16136] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.502183][T16136] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.711018][ T5853] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1014.723802][T18962] loop4: detected capacity change from 0 to 32768 [ 1014.791382][T18962] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3556 (18962) [ 1014.866601][T16136] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.902729][T18962] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1014.933904][ T5853] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1014.962200][T18962] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1014.976367][ T5853] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1015.021020][T18962] BTRFS info (device loop4): force clearing of disk cache [ 1015.054610][ T5853] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 1015.070911][T18962] BTRFS info (device loop4): enabling auto defrag [ 1015.083568][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.103840][T18962] BTRFS info (device loop4): max_inline at 0 [ 1015.122447][ T5853] usb 2-1: Product: syz [ 1015.131885][T18962] BTRFS info (device loop4): enabling disk space caching [ 1015.140801][ T5853] usb 2-1: Manufacturer: syz [ 1015.160975][ T5853] usb 2-1: SerialNumber: syz [ 1015.175237][T18962] BTRFS info (device loop4): disk space caching is enabled [ 1015.199006][ T5853] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 1015.278972][ T5853] ums-sddr09 2-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1015.278972][ T5853] Please send a copy of this message to and [ 1015.498645][T18962] BTRFS info (device loop4): enabling ssd optimizations [ 1015.539757][T18962] BTRFS info (device loop4): rebuilding free space tree [ 1015.564849][T19011] netlink: 'syz.3.3562': attribute type 2 has an invalid length. [ 1015.627089][T18962] BTRFS info (device loop4): disabling free space tree [ 1015.647698][T18962] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1015.690531][T18962] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1015.911906][T19018] binder: 19016:19018 unknown command 0 [ 1015.917568][T19018] binder: 19016:19018 ioctl c0306201 2000000003c0 returned -22 [ 1016.287732][ T5853] scsi host1: usb-storage 2-1:1.0 [ 1016.334875][ T5853] usb 2-1: USB disconnect, device number 51 [ 1016.594479][ T1098] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 1016.868484][T17775] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1017.133189][T19038] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3570'. [ 1017.237351][T19038] ip6gre1: entered promiscuous mode [ 1017.277592][T19038] ip6gre1: entered allmulticast mode [ 1017.591027][T19053] Unsupported ieee802154 address type: 0 [ 1018.842781][T16132] net_ratelimit: 56 callbacks suppressed [ 1019.406935][T19068] loop5: detected capacity change from 0 to 32768 [ 1019.461365][T19068] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.3577 (19068) [ 1019.541698][T19068] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1019.578118][T19068] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1019.634278][T19068] BTRFS info (device loop5): force clearing of disk cache [ 1019.666806][T19068] BTRFS info (device loop5): enabling auto defrag [ 1019.690333][T19068] BTRFS info (device loop5): max_inline at 0 [ 1019.709887][T19068] BTRFS info (device loop5): enabling disk space caching [ 1019.761858][T19068] BTRFS info (device loop5): disk space caching is enabled [ 1019.923940][ T28] audit: type=1326 audit(1700000251.930:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19112 comm="syz.3.3586" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ca79a8fd9 code=0x0 [ 1020.058122][T19068] BTRFS info (device loop5): enabling ssd optimizations [ 1020.075667][T19068] BTRFS info (device loop5): rebuilding free space tree [ 1020.123461][T19068] BTRFS info (device loop5): disabling free space tree [ 1020.134068][T19068] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1020.144536][T19068] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1020.740258][T16132] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 1020.799429][T16136] hsr_slave_0: left promiscuous mode [ 1020.859888][T16136] hsr_slave_1: left promiscuous mode [ 1020.889983][T16136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1020.909377][T17488] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1020.934488][T16136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1020.975986][T16136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1021.006089][T16136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1021.065428][T16136] bridge_slave_1: left allmulticast mode [ 1021.100542][T16136] bridge_slave_1: left promiscuous mode [ 1021.132286][T16136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.195340][T16136] bridge_slave_0: left allmulticast mode [ 1021.214753][T16136] bridge_slave_0: left promiscuous mode [ 1021.232443][T16136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.498750][T16136] veth1_macvtap: left promiscuous mode [ 1021.512006][T16136] veth0_macvtap: left promiscuous mode [ 1021.530480][T16136] veth1_vlan: left promiscuous mode [ 1021.563924][T16136] veth0_vlan: left promiscuous mode [ 1022.186697][T19139] loop1: detected capacity change from 0 to 32768 [ 1022.319346][T18771] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1022.774287][T19151] loop5: detected capacity change from 0 to 40427 [ 1022.816857][T19151] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 1022.826239][T19151] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1022.875572][T19151] F2FS-fs (loop5): invalid crc value [ 1023.178910][T19151] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 1023.188524][T19151] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1023.290110][T17488] syz-executor: attempt to access beyond end of device [ 1023.290110][T17488] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1023.347476][T17488] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1023.981112][T16132] net_ratelimit: 48 callbacks suppressed [ 1025.147732][T19156] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1025.377552][T16136] team0 (unregistering): Port device team_slave_1 removed [ 1025.576139][T16136] team0 (unregistering): Port device team_slave_0 removed [ 1025.757237][T16136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1025.951041][T16136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1026.273856][T19203] loop1: detected capacity change from 0 to 33280 [ 1026.315616][T17595] I/O error, dev loop1, sector 33152 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1027.007526][T19206] loop1: detected capacity change from 0 to 32768 [ 1027.081144][T17595] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1027.503111][T16136] bond0 (unregistering): Released all slaves [ 1028.274033][T19222] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3608'. [ 1028.409330][T19227] md: couldn't update array info. -22 [ 1028.416617][T19227] md1: personality does not support diskops! [ 1028.436652][T19227] md1: personality does not support diskops! [ 1028.493297][T19227] md1: detected capacity change from 16128 to 0 [ 1028.511850][T19227] md: md1 stopped. [ 1028.985861][T19234] loop1: detected capacity change from 0 to 36864 [ 1029.064363][T19234] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1029.071534][ T5878] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1029.080863][ T1146] net_ratelimit: 34 callbacks suppressed [ 1029.107710][T19234] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a80cc01c, mo2=0002] [ 1029.123008][T19234] System zones: 0-5 [ 1029.128749][T19234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1029.166770][T19241] ip_tables: iptables: counters copy to user failed while replacing table [ 1029.263373][T17385] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.274998][ T5878] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1029.286268][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.298083][T19243] syzkaller1: entered promiscuous mode [ 1029.339631][T19243] syzkaller1: entered allmulticast mode [ 1029.347381][ T5878] usb 4-1: config 0 descriptor?? [ 1029.474255][T19247] loop1: detected capacity change from 0 to 33280 [ 1031.121163][T19285] loop5: detected capacity change from 0 to 256 [ 1031.142755][T19285] exfat: Deprecated parameter 'utf8' [ 1031.148211][T19285] exfat: Deprecated parameter 'namecase' [ 1031.184849][T19285] exfat: Deprecated parameter 'namecase' [ 1031.190638][T19285] exfat: Deprecated parameter 'utf8' [ 1031.228613][ T5878] usb 4-1: Cannot set autoneg [ 1031.237441][ T5878] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 1031.289979][ T5878] usb 4-1: USB disconnect, device number 32 [ 1031.346106][T19285] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1031.467638][T19292] xt_bpf: check failed: parse error [ 1031.857963][T19300] syzkaller1: entered promiscuous mode [ 1031.871219][T19300] syzkaller1: entered allmulticast mode [ 1032.354351][T19312] loop5: detected capacity change from 0 to 8192 [ 1032.430451][T19312] loop5: p3 p4 < > [ 1032.445976][T19312] loop5: p3 start 986112 is beyond EOD, truncated [ 1032.737255][T19327] loop1: detected capacity change from 0 to 8 [ 1033.022531][T19312] loop5: detected capacity change from 0 to 256 [ 1033.105381][T17595] udevd[17595]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1034.235014][T16136] net_ratelimit: 31 callbacks suppressed [ 1034.900665][T19377] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 1036.146455][T19415] block device autoloading is deprecated and will be removed. [ 1036.292858][ T5789] Bluetooth: hci1: command 0x0406 tx timeout [ 1036.432608][T16143] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1036.629228][T19425] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 1036.643703][T16143] usb 6-1: Using ep0 maxpacket: 8 [ 1036.674426][T16143] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1036.704894][T16143] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.731222][T16143] usb 6-1: Product: syz [ 1036.746909][T16143] usb 6-1: Manufacturer: syz [ 1036.760491][T16143] usb 6-1: SerialNumber: syz [ 1036.808364][T16143] usb 6-1: config 0 descriptor?? [ 1037.056118][T16143] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1038.478217][T16143] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 1038.517253][T16143] usb 6-1: USB disconnect, device number 12 [ 1038.614869][T19475] netlink: 'syz.4.3655': attribute type 1 has an invalid length. [ 1038.797142][T19475] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1038.904645][T19478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1038.925025][T19478] bond1: (slave batadv0): making interface the new active one [ 1038.942537][T19478] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 1039.038772][T19480] bond1: (slave batadv0): Releasing active interface [ 1039.108589][T19480] bridge_slave_0: left allmulticast mode [ 1039.129332][T19480] bridge_slave_0: left promiscuous mode [ 1039.141291][T19480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.177215][T19480] bridge_slave_1: left allmulticast mode [ 1039.187800][T19480] bridge_slave_1: left promiscuous mode [ 1039.196412][T19480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.218787][T19485] loop5: detected capacity change from 0 to 128 [ 1039.251200][T19485] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1039.352870][T19480] bond0: (slave bond_slave_1): Releasing backup interface [ 1039.393116][T19485] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1039.480936][ C1] net_ratelimit: 32 callbacks suppressed [ 1039.619174][T19480] team0: Port device team_slave_0 removed [ 1039.683556][T19480] team0: Port device team_slave_1 removed [ 1039.690661][T19480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1039.717822][T19480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1039.733704][T19480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1039.741412][T19480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1039.765531][T19492] loop5: detected capacity change from 0 to 256 [ 1039.832135][T19492] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1040.024188][T19431] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1040.395147][T19505] loop3: detected capacity change from 0 to 256 [ 1040.424390][T19505] exfat: Deprecated parameter 'utf8' [ 1040.445851][T19505] exfat: Deprecated parameter 'utf8' [ 1040.508575][T19505] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1044.680930][ C0] net_ratelimit: 29 callbacks suppressed [ 1044.740194][T19565] rxe_eth0 speed is unknown, defaulting to 1000 [ 1046.140020][T19592] loop3: detected capacity change from 0 to 40427 [ 1046.161645][T19592] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1046.180574][T19592] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1046.218926][T19592] F2FS-fs (loop3): invalid crc value [ 1046.263445][T19592] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1046.466881][T19592] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1046.511160][T19592] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1046.521534][ T5789] Bluetooth: hci0: command 0x0406 tx timeout [ 1050.040813][ C0] net_ratelimit: 34 callbacks suppressed [ 1051.577240][T19649] loop4: detected capacity change from 0 to 33280 [ 1051.686810][T19649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1051.822615][T19649] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1052.224161][T17775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.545993][T19666] loop3: detected capacity change from 0 to 256 [ 1052.658028][T19666] FAT-fs (loop3): Directory bread(block 64) failed [ 1052.687907][T19666] FAT-fs (loop3): Directory bread(block 65) failed [ 1052.709465][T19666] FAT-fs (loop3): Directory bread(block 66) failed [ 1052.726249][T19666] FAT-fs (loop3): Directory bread(block 67) failed [ 1052.739839][T19666] FAT-fs (loop3): Directory bread(block 68) failed [ 1052.757439][T19666] FAT-fs (loop3): Directory bread(block 69) failed [ 1052.796674][T19666] FAT-fs (loop3): Directory bread(block 70) failed [ 1052.824330][T19666] FAT-fs (loop3): Directory bread(block 71) failed [ 1052.849931][T19666] FAT-fs (loop3): Directory bread(block 72) failed [ 1052.876024][T19666] FAT-fs (loop3): Directory bread(block 73) failed [ 1053.143956][ T5853] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1053.386572][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1053.424597][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1053.478211][ T5853] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1053.495382][T19684] fuse: Bad value for 'fd' [ 1053.528528][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.569985][ T5853] usb 2-1: config 0 descriptor?? [ 1053.957596][T19697] overlayfs: failed to clone upperpath [ 1054.142947][ T5853] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 1054.173584][ T5853] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 1054.211025][ T5853] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 1054.240823][ T5853] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 1054.247940][ T5853] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 1054.290839][ T5853] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 1054.317229][ T5853] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 1054.356359][ T5853] cp2112 0003:10C4:EA90.0026: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1054.501021][ T5853] cp2112 0003:10C4:EA90.0026: Part Number: 0x00 Device Version: 0x00 [ 1054.661213][T19713] jffs2: notice: (19713) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1054.699824][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.710860][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.080873][ C1] net_ratelimit: 26 callbacks suppressed [ 1055.169277][T19673] cp2112 0003:10C4:EA90.0026: Error starting transaction: -38 [ 1055.189695][ T5853] cp2112 0003:10C4:EA90.0026: error reading lock byte: -32 [ 1055.571349][ T5853] usb 2-1: reset high-speed USB device number 52 using dummy_hcd [ 1056.199034][T19746] loop4: detected capacity change from 0 to 256 [ 1056.230212][T19738] rxe_eth0 speed is unknown, defaulting to 1000 [ 1056.896589][ T5878] usb 2-1: USB disconnect, device number 52 [ 1057.744288][T19775] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1058.749331][T19797] fuse: Bad value for 'fd' [ 1059.062096][T19806] netlink: 'syz.4.3709': attribute type 12 has an invalid length. [ 1059.102083][T19806] dlm: no local IP address has been set [ 1059.150971][T19806] dlm: cannot start dlm midcomms -107 [ 1059.721682][ T5853] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1059.927160][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1059.950767][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1059.950842][ T5853] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1059.950869][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.058695][ T5853] usb 5-1: config 0 descriptor?? [ 1060.070496][T19814] loop3: detected capacity change from 0 to 32768 [ 1060.102929][T19814] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 1060.200825][ C0] net_ratelimit: 29 callbacks suppressed [ 1060.503194][T19637] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 1060.578934][ T5853] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x1 [ 1060.641209][ T5853] cp2112 0003:10C4:EA90.0027: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1060.671725][ T5878] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 1060.787698][ T5853] cp2112 0003:10C4:EA90.0027: error requesting version [ 1060.843958][ T5853] cp2112: probe of 0003:10C4:EA90.0027 failed with error -71 [ 1061.045353][ T5853] usb 5-1: USB disconnect, device number 11 [ 1061.175008][ T5878] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1061.207272][ T5878] usb 4-1: no configurations [ 1061.223496][ T5878] usb 4-1: can't read configurations, error -22 [ 1061.646928][T19854] fuse: Bad value for 'fd' [ 1061.924015][T19863] netlink: 'syz.1.3720': attribute type 12 has an invalid length. [ 1061.962151][T19863] dlm: no local IP address has been set [ 1061.981801][T19863] dlm: cannot start dlm midcomms -107 [ 1062.194213][ C0] vkms_vblank_simulate: vblank timer overrun [ 1062.401744][ T5853] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1062.485709][T19884] lo: entered allmulticast mode [ 1062.621896][ T5853] usb 5-1: Using ep0 maxpacket: 32 [ 1062.651284][T19871] syz_tun: entered allmulticast mode [ 1062.724880][T19871] loop4: detected capacity change from 0 to 1024 [ 1062.845613][T19871] hfsplus: invalid length 32517 has been corrected to 255 [ 1062.909957][T19871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3724'. [ 1062.974409][ T5853] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1063.012255][ T5853] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1063.019934][ T5853] usb 5-1: can't read configurations, error -71 [ 1064.960267][T19929] loop4: detected capacity change from 0 to 128 [ 1065.341816][T19938] overlayfs: failed to clone upperpath [ 1065.400946][ C1] net_ratelimit: 34 callbacks suppressed [ 1066.112706][T19959] loop4: detected capacity change from 0 to 33280 [ 1066.211962][T19959] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.3742: iget: bad i_size value: 38620345925642 [ 1066.251965][T19959] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.3742: couldn't read orphan inode 15 (err -117) [ 1066.273628][T19959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1066.549697][T19974] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.3742: bg 0: block 5: invalid block bitmap [ 1066.667004][T19974] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 284 with error 28 [ 1066.705162][T19974] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1066.705162][T19974] [ 1066.731050][T19974] EXT4-fs (loop4): Total free blocks count 0 [ 1066.744165][T19974] EXT4-fs (loop4): Free/Dirty block details [ 1066.751733][T19974] EXT4-fs (loop4): free_blocks=0 [ 1066.757017][T19974] EXT4-fs (loop4): dirty_blocks=288 [ 1066.764027][T19974] EXT4-fs (loop4): Block reservation details [ 1066.770139][T19974] EXT4-fs (loop4): i_reserved_data_blocks=288 [ 1067.001797][T17775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.315953][T20030] binder: 20029:20030 ioctl c0306201 2000000000c0 returned -14 [ 1068.829612][T20055] netlink: 'syz.3.3765': attribute type 39 has an invalid length. [ 1069.445547][T20076] binder: 20074:20076 ioctl c0306201 200000000100 returned -14 [ 1069.484144][T20076] binder: 20074:20076 ioctl c0306201 2000000002c0 returned -14 [ 1069.991021][ T57] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1070.193010][ T57] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1070.210863][ T57] usb 4-1: config 1 has no interface number 0 [ 1070.227623][ T57] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1070.268263][ T57] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1070.309782][ T57] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1070.350530][ T57] usb 4-1: Product: syz [ 1070.360673][ T57] usb 4-1: Manufacturer: syz [ 1070.365714][ T57] usb 4-1: SerialNumber: syz [ 1070.440792][ C1] net_ratelimit: 24 callbacks suppressed [ 1070.530928][T11611] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1070.538492][T20096] Bluetooth: hci0: command 0x0406 tx timeout [ 1070.741257][ T5878] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1070.971053][ T5878] usb 2-1: Using ep0 maxpacket: 32 [ 1070.988367][T20103] syz_tun: entered allmulticast mode [ 1071.046052][T20103] loop1: detected capacity change from 0 to 1024 [ 1071.173202][T20103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3774'. [ 1071.220520][ T5878] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1071.235296][ T57] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1071.257008][ T5878] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1071.272288][ T57] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1071.286356][ T5878] usb 2-1: can't read configurations, error -71 [ 1071.312637][ T57] aqc111 4-1:1.105 eth25: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 0e:4e:e9:3a:43:ce [ 1071.523257][ T57] usb 4-1: USB disconnect, device number 35 [ 1071.571143][ T57] aqc111 4-1:1.105 eth25: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1071.823563][ T57] aqc111 4-1:1.105 eth25 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1071.858249][ T57] aqc111 4-1:1.105 eth25 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1071.923340][ T57] aqc111 4-1:1.105 eth25 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1072.122371][T20096] Bluetooth: hci3: command 0x0406 tx timeout [ 1074.510019][T20163] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3785'. [ 1074.821429][ T5853] usb 2-1: new low-speed USB device number 55 using dummy_hcd [ 1075.034576][ T5853] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1075.044708][ T5853] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1075.061234][ T5853] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1075.092830][ T5853] usb 2-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.40 [ 1075.117223][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.129660][ T5853] usb 2-1: Manufacturer: 㠸 [ 1075.140926][ T5853] usb 2-1: SerialNumber: 􌙬૽杓扵䣀긮쉬°넜䴻㠀罶呵夜꾳⤮婈䝉ຮ攕疛昴㪦奲궈簳⩜눎䰛㽣棽幮⑗❱᧏富ꛛ렞牤魑뉿ᛓꍈ椮鱄꞉㇯ⱙ饪꾸쑥䎦닿ᆚ코楥 [ 1075.181518][T20183] fuse: Bad value for 'fd' [ 1075.205898][T20165] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1075.437542][ T5853] usbhid 2-1:1.0: can't add hid device: -71 [ 1075.445531][ T5853] usbhid: probe of 2-1:1.0 failed with error -71 [ 1075.481477][ T5853] usb 2-1: USB disconnect, device number 55 [ 1075.800935][ C0] net_ratelimit: 29 callbacks suppressed [ 1076.299516][T20205] syzkaller0: entered promiscuous mode [ 1076.590258][T20223] batman_adv: batadv0: Adding interface: veth0 [ 1076.602692][T20223] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1076.645152][T20223] batman_adv: batadv0: Interface activated: veth0 [ 1080.924657][ T6460] net_ratelimit: 32 callbacks suppressed [ 1081.435917][T20228] batman_adv: batadv0: Interface deactivated: veth0 [ 1081.447987][T20228] batman_adv: batadv0: Removing interface: veth0 [ 1081.661389][T20269] loop1: detected capacity change from 0 to 256 [ 1082.656021][T20288] binder: 20286:20288 ioctl c0306201 2000000000c0 returned -14 [ 1082.719692][T20288] binder_alloc: 20286: binder_alloc_buf size 64768 failed, no address space [ 1082.757398][T20288] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1084.434190][T20331] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1084.572755][T20333] syzkaller0: entered promiscuous mode [ 1084.578381][T20333] syzkaller0: entered allmulticast mode [ 1084.712769][T20343] binder: 20342:20343 ioctl c0306201 200000000200 returned -14 [ 1084.723507][T20343] binder: BINDER_SET_CONTEXT_MGR already set [ 1084.736940][T20343] binder: 20342:20343 ioctl 4018620d 2000000003c0 returned -16 [ 1084.960022][T20352] FAULT_INJECTION: forcing a failure. [ 1084.960022][T20352] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.001024][T20352] CPU: 0 PID: 20352 Comm: syz.1.3822 Not tainted syzkaller #0 [ 1085.008575][T20352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1085.018682][T20352] Call Trace: [ 1085.021996][T20352] [ 1085.024953][T20352] dump_stack_lvl+0x18c/0x250 [ 1085.029664][T20352] ? show_regs_print_info+0x20/0x20 [ 1085.034914][T20352] ? load_image+0x420/0x420 [ 1085.039548][T20352] ? __lock_acquire+0x7eb0/0x7eb0 [ 1085.044706][T20352] ? __mutex_trylock_common+0x160/0x270 [ 1085.044735][T20352] should_fail_ex+0x394/0x4c0 [ 1085.044769][T20352] should_failslab+0x9/0x20 [ 1085.055019][T20352] slab_pre_alloc_hook+0x59/0x300 [ 1085.055047][T20352] ? trace_contention_end+0x39/0xe0 [ 1085.055077][T20352] kmem_cache_alloc_lru+0x4d/0x2c0 [ 1085.064601][T20352] ? tracefs_alloc_inode+0x31/0x120 [ 1085.064634][T20352] ? __lock_acquire+0x7eb0/0x7eb0 [ 1085.064666][T20352] tracefs_alloc_inode+0x31/0x120 [ 1085.075005][T20352] ? tracefs_apply_options+0x730/0x730 [ 1085.075042][T20352] new_inode_pseudo+0x63/0x1d0 [ 1085.075075][T20352] new_inode+0x22/0x1d0 [ 1085.085328][T20352] tracefs_get_inode+0x1e/0xe0 [ 1085.085367][T20352] eventfs_root_lookup+0x282/0x1800 [ 1085.085411][T20352] ? free_ei+0x310/0x310 [ 1085.104885][T20352] ? __init_waitqueue_head+0xa8/0x140 [ 1085.115004][T20352] __lookup_slow+0x2a1/0x400 [ 1085.115037][T20352] ? lookup_one_len+0x2e0/0x2e0 [ 1085.134315][T20352] ? generic_permission+0x1ed/0x590 [ 1085.139555][T20352] ? down_read+0x1ac/0x2e0 [ 1085.144001][T20352] lookup_slow+0x53/0x70 [ 1085.148275][T20352] link_path_walk+0x97c/0xe40 [ 1085.152994][T20352] ? handle_lookup_down+0x130/0x130 [ 1085.158231][T20352] path_openat+0x291/0x3270 [ 1085.162793][T20352] ? do_sys_openat2+0xda/0x1d0 [ 1085.167595][T20352] ? __x64_sys_openat+0x139/0x160 [ 1085.172661][T20352] ? verify_lock_unused+0x140/0x140 [ 1085.177900][T20352] ? do_filp_open+0x430/0x430 [ 1085.182643][T20352] do_filp_open+0x1f2/0x430 [ 1085.187207][T20352] ? vfs_tmpfile+0x620/0x620 [ 1085.191847][T20352] ? _raw_spin_unlock+0x28/0x40 [ 1085.196737][T20352] ? alloc_fd+0x590/0x640 [ 1085.201113][T20352] do_sys_openat2+0x134/0x1d0 [ 1085.205852][T20352] ? do_sys_open+0xe0/0xe0 [ 1085.210308][T20352] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1085.216331][T20352] ? lock_chain_count+0x20/0x20 [ 1085.221232][T20352] __x64_sys_openat+0x139/0x160 [ 1085.226128][T20352] do_syscall_64+0x55/0xb0 [ 1085.230584][T20352] ? clear_bhb_loop+0x40/0x90 [ 1085.235302][T20352] ? clear_bhb_loop+0x40/0x90 [ 1085.240019][T20352] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1085.245948][T20352] RIP: 0033:0x7f82717a8fd9 [ 1085.250393][T20352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1085.270034][T20352] RSP: 002b:00007f82725de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1085.278494][T20352] RAX: ffffffffffffffda RBX: 00007f8271a25fa0 RCX: 00007f82717a8fd9 [ 1085.286526][T20352] RDX: 0000000000000002 RSI: 0000200000000bc0 RDI: ffffffffffffff9c [ 1085.294528][T20352] RBP: 00007f8271837fed R08: 0000000000000000 R09: 0000000000000000 [ 1085.302532][T20352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1085.310534][T20352] R13: 00007f8271a26038 R14: 00007f8271a25fa0 R15: 00007ffd7fb8e4f8 [ 1085.318557][T20352] [ 1085.463291][T20355] x86/PAT: syz.3.3823:20355 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 1085.960835][ C0] net_ratelimit: 26 callbacks suppressed [ 1086.569095][T20371] netlink: 'syz.4.3827': attribute type 10 has an invalid length. [ 1086.892460][T20371] team0: Port device wlan0 added [ 1086.973219][T20370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1087.004850][T20383] ------------[ cut here ]------------ [ 1087.010580][T20383] kobject: '(null)' (ffff88802f4840f0): is not initialized, yet kobject_get() is being called. [ 1087.089166][T20383] WARNING: CPU: 0 PID: 20383 at lib/kobject.c:642 kobject_add_internal+0x115/0xc90 [ 1087.098661][T20383] Modules linked in: [ 1087.103005][T20383] CPU: 0 PID: 20383 Comm: syz.1.3828 Not tainted syzkaller #0 [ 1087.110522][T20383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1087.120794][T20383] RIP: 0010:kobject_add_internal+0x115/0xc90 [ 1087.126874][T20383] Code: b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 5e 4e 5d f7 49 8b 34 24 48 c7 c7 00 4f 0b 8c 4c 89 e2 e8 4b ea cd f6 <0f> 0b e9 e5 00 00 00 e8 8f 45 04 f7 b8 fe ff ff ff e9 f0 06 00 00 [ 1087.146603][T20383] RSP: 0018:ffffc9000c7e78c8 EFLAGS: 00010246 [ 1087.152966][T20383] [ 1087.155359][T20383] RAX: e694eb3ac089b100 RBX: ffff88807718c878 RCX: 0000000000080000 [ 1087.163559][T20383] RDX: ffffc9001147e000 RSI: 00000000000040c1 RDI: 00000000000040c2 [ 1087.171639][T20383] RBP: 0000000000000000 R08: ffffffff922236b7 R09: 1ffffffff24446d6 [ 1087.179676][T20383] R10: dffffc0000000000 R11: fffffbfff24446d7 R12: ffff88802f4840f0 [ 1087.187834][T20383] R13: dffffc0000000000 R14: ffff88802f48412c R15: dffffc0000000000 [ 1087.195897][T20383] FS: 00007f82725bd6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 1087.204917][T20383] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1087.211612][T20383] CR2: 000055bbc6c91950 CR3: 000000006a345000 CR4: 00000000003506f0 [ 1087.219653][T20383] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 1087.227793][T20383] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1087.235923][T20383] Call Trace: [ 1087.239251][T20383] [ 1087.242340][T20383] ? kfree+0x31/0x1a0 [ 1087.246404][T20383] kobject_add+0x164/0x240 [ 1087.250992][T20383] ? kobject_init+0x1d0/0x1d0 [ 1087.255908][T20383] ? mddev_create_serial_pool+0x1f3/0x4d0 [ 1087.261891][T20383] bind_rdev_to_array+0xb51/0x1270 [ 1087.267088][T20383] ? bind_rdev_to_array+0x5fb/0x1270 [ 1087.272573][T20383] ? md_import_device+0x7b0/0x7b0 [ 1087.277712][T20383] md_add_new_disk+0xe31/0x17b0 [ 1087.282680][T20383] md_ioctl+0x2152/0x24e0 [ 1087.287110][T20383] ? blkdev_common_ioctl+0x10ee/0x2580 [ 1087.292718][T20383] ? md_release+0x1e0/0x1e0 [ 1087.297286][T20383] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 1087.303060][T20383] ? blkdev_bszset+0x1f0/0x1f0 [ 1087.307893][T20383] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1087.313542][T20383] ? md_release+0x1e0/0x1e0 [ 1087.318119][T20383] blkdev_ioctl+0x5b2/0x730 [ 1087.322949][T20383] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 1087.328495][T20383] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1087.333588][T20383] ? security_file_ioctl+0x80/0xa0 [ 1087.338763][T20383] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 1087.344341][T20383] __se_sys_ioctl+0xfd/0x170 [ 1087.349028][T20383] do_syscall_64+0x55/0xb0 [ 1087.353747][T20383] ? clear_bhb_loop+0x40/0x90 [ 1087.358493][T20383] ? clear_bhb_loop+0x40/0x90 [ 1087.363347][T20383] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1087.369344][T20383] RIP: 0033:0x7f82717a8fd9 [ 1087.373908][T20383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1087.393674][T20383] RSP: 002b:00007f82725bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1087.402264][T20383] RAX: ffffffffffffffda RBX: 00007f8271a26090 RCX: 00007f82717a8fd9 [ 1087.410303][T20383] RDX: 00002000000001c0 RSI: 0000000040140921 RDI: 0000000000000004 [ 1087.418389][T20383] RBP: 00007f8271837fed R08: 0000000000000000 R09: 0000000000000000 [ 1087.426617][T20383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1087.434713][T20383] R13: 00007f8271a26128 R14: 00007f8271a26090 R15: 00007ffd7fb8e4f8 [ 1087.443519][T20383] [ 1087.446591][T20383] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1087.447534][T20096] hci3: [ 1087.447576][T20096] hci3: entry ffff88805e6dbf80 [ 1087.447626][T20096] hci3: Opcode 0x0406 [ 1087.447658][T20096] hci3: opcode 0x0406 plen 3 [ 1087.447785][T20096] hci3: skb len 6 [ 1087.447826][T20096] hci3: length 1 [ 1087.447958][ T5789] hci3 cmd_cnt 1 cmd queued 1 [ 1087.448000][ T5789] hci3: skb ffff888066144a00 [ 1087.448082][ T5789] hci3 type 1 len 6 [ 1087.490606][T20383] CPU: 0 PID: 20383 Comm: syz.1.3828 Not tainted syzkaller #0 [ 1087.498120][T20383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1087.508229][T20383] Call Trace: [ 1087.511583][T20383] [ 1087.514582][T20383] dump_stack_lvl+0x18c/0x250 [ 1087.519485][T20383] ? show_regs_print_info+0x20/0x20 [ 1087.524753][T20383] ? load_image+0x420/0x420 [ 1087.529331][T20383] panic+0x2ca/0x720 [ 1087.533326][T20383] ? bpf_jit_dump+0xd0/0xd0 [ 1087.537939][T20383] __warn+0x2e0/0x470 [ 1087.541989][T20383] ? kobject_add_internal+0x115/0xc90 [ 1087.547419][T20383] ? kobject_add_internal+0x115/0xc90 [ 1087.552843][T20383] report_bug+0x2be/0x4f0 [ 1087.557244][T20383] ? kobject_add_internal+0x115/0xc90 [ 1087.562701][T20383] ? kobject_add_internal+0x115/0xc90 [ 1087.568219][T20383] ? kobject_add_internal+0x117/0xc90 [ 1087.573664][T20383] handle_bug+0xcf/0x120 [ 1087.577976][T20383] exc_invalid_op+0x1a/0x50 [ 1087.582556][T20383] asm_exc_invalid_op+0x1a/0x20 [ 1087.587489][T20383] RIP: 0010:kobject_add_internal+0x115/0xc90 [ 1087.593534][T20383] Code: b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 5e 4e 5d f7 49 8b 34 24 48 c7 c7 00 4f 0b 8c 4c 89 e2 e8 4b ea cd f6 <0f> 0b e9 e5 00 00 00 e8 8f 45 04 f7 b8 fe ff ff ff e9 f0 06 00 00 [ 1087.613286][T20383] RSP: 0018:ffffc9000c7e78c8 EFLAGS: 00010246 [ 1087.619443][T20383] RAX: e694eb3ac089b100 RBX: ffff88807718c878 RCX: 0000000000080000 [ 1087.627465][T20383] RDX: ffffc9001147e000 RSI: 00000000000040c1 RDI: 00000000000040c2 [ 1087.635486][T20383] RBP: 0000000000000000 R08: ffffffff922236b7 R09: 1ffffffff24446d6 [ 1087.643517][T20383] R10: dffffc0000000000 R11: fffffbfff24446d7 R12: ffff88802f4840f0 [ 1087.651539][T20383] R13: dffffc0000000000 R14: ffff88802f48412c R15: dffffc0000000000 [ 1087.659585][T20383] ? kobject_add_internal+0x115/0xc90 [ 1087.665018][T20383] ? kfree+0x31/0x1a0 [ 1087.669066][T20383] kobject_add+0x164/0x240 [ 1087.673541][T20383] ? kobject_init+0x1d0/0x1d0 [ 1087.678282][T20383] ? mddev_create_serial_pool+0x1f3/0x4d0 [ 1087.684070][T20383] bind_rdev_to_array+0xb51/0x1270 [ 1087.689255][T20383] ? bind_rdev_to_array+0x5fb/0x1270 [ 1087.694605][T20383] ? md_import_device+0x7b0/0x7b0 [ 1087.699704][T20383] md_add_new_disk+0xe31/0x17b0 [ 1087.704633][T20383] md_ioctl+0x2152/0x24e0 [ 1087.709033][T20383] ? blkdev_common_ioctl+0x10ee/0x2580 [ 1087.714590][T20383] ? md_release+0x1e0/0x1e0 [ 1087.719157][T20383] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 1087.724845][T20383] ? blkdev_bszset+0x1f0/0x1f0 [ 1087.729660][T20383] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1087.735215][T20383] ? md_release+0x1e0/0x1e0 [ 1087.739787][T20383] blkdev_ioctl+0x5b2/0x730 [ 1087.744376][T20383] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 1087.749916][T20383] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1087.754933][T20383] ? security_file_ioctl+0x80/0xa0 [ 1087.760112][T20383] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 1087.765622][T20383] __se_sys_ioctl+0xfd/0x170 [ 1087.770262][T20383] do_syscall_64+0x55/0xb0 [ 1087.774716][T20383] ? clear_bhb_loop+0x40/0x90 [ 1087.779454][T20383] ? clear_bhb_loop+0x40/0x90 [ 1087.784171][T20383] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1087.790114][T20383] RIP: 0033:0x7f82717a8fd9 [ 1087.794560][T20383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1087.814212][T20383] RSP: 002b:00007f82725bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1087.822661][T20383] RAX: ffffffffffffffda RBX: 00007f8271a26090 RCX: 00007f82717a8fd9 [ 1087.830661][T20383] RDX: 00002000000001c0 RSI: 0000000040140921 RDI: 0000000000000004 [ 1087.838668][T20383] RBP: 00007f8271837fed R08: 0000000000000000 R09: 0000000000000000 [ 1087.846664][T20383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1087.854663][T20383] R13: 00007f8271a26128 R14: 00007f8271a26090 R15: 00007ffd7fb8e4f8 [ 1087.862677][T20383] [ 1087.865856][T20383] Kernel Offset: disabled [ 1087.870356][T20383] Rebooting in 86400 seconds..