last executing test programs: 1m12.31305067s ago: executing program 0 (id=1451): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xb, &(0x7f00000010c0)=@raw=[@generic={0xb7, 0x7}, @generic={0x7b, 0xa, 0x7, 0xfff0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x63}, @generic={0x15, 0x0, 0x0, 0x2}, @generic={0xbf, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x56}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m12.081033005s ago: executing program 0 (id=1453): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0) syz_socket_connect_nvme_tcp() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x3630c1) getpid() mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)="3100f3a70c57aab9346531b3f6ad5b6ec75a0fc0a6c0bbd4b2d8ee9d3c891dff36500980fc1652c71193785d5ff7f83552ca2dbca8aee1c26bb0337897ace4fb85cc40c273cd67ec01764ee2f7de0223a5bea506f5f997938cd33aef9a85636fc3", 0x61) 1m11.160641397s ago: executing program 0 (id=1455): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(r0, 0x84, 0x7d, &(0x7f0000000680)={0x1, 0x2}, 0x8) 1m11.02495551s ago: executing program 0 (id=1457): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f0000001180)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000011c0)='./file0\x00', &(0x7f0000001200), 0x0, &(0x7f0000001240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000001280)='./file0/file1\x00', &(0x7f00000012c0), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./file1/file0\x00', 0x0, 0x1005418, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180), 0x40, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000240)='./bus\x00') setxattr$incfs_size(&(0x7f0000001480)='./file0/file1\x00', &(0x7f00000014c0), 0x0, 0x0, 0x0) 1m10.755058517s ago: executing program 0 (id=1463): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) lseek(r0, 0x1, 0x0) getdents64(r0, 0x0, 0x22) 1m9.743239781s ago: executing program 0 (id=1465): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)='1:0', 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0) 1m9.708958572s ago: executing program 32 (id=1465): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)='1:0', 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0) 5.319268683s ago: executing program 5 (id=1932): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/net/bridge0/bridge/multicast_membership_interval\x00', 0x0, 0x100) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) fsopen(0x0, 0x1) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x274}, 0x10) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x9315, 0x1f480, 0x0, 0x39d}) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 4.963172541s ago: executing program 5 (id=1936): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000006c0)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r1, 0x20, &(0x7f0000000780)={&(0x7f00000007c0)=""/257, 0xfffffffffffffcbd, 0x0, 0x0}}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) writev(r2, &(0x7f0000000f40)=[{&(0x7f0000000f80), 0x86}], 0x2) 4.687618178s ago: executing program 5 (id=1937): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r2 = memfd_create(&(0x7f0000000300)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\xa7\x90N\x8a\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabui\x00'/255, 0x3) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000400)={r2, 0x0, 0x4000, 0x2000}) close_range(r0, 0xffffffffffffffff, 0x0) 4.644911979s ago: executing program 5 (id=1938): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x6, 0x0, 0x0) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r5, @ANYBLOB="080002007f00000108000400ac1e000114"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) 4.195818839s ago: executing program 5 (id=1943): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0) syz_socket_connect_nvme_tcp() syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x3630c1) getpid() mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)="3100f3a70c57aab9346531b3f6ad5b6ec75a0fc0a6c0bbd4b2d8ee9d3c891dff36500980fc1652c71193785d5ff7f83552ca2dbca8aee1c26bb0337897ace4fb85cc40c273cd67ec01764ee2f7de0223a5bea506f5f997938cd33aef9a85636fc3", 0x61) 3.195631613s ago: executing program 4 (id=1950): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x8, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x1c4) mount(0x0, &(0x7f00000008c0)='./file0\x00', 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 3.069246467s ago: executing program 3 (id=1955): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x1f, &(0x7f00000000c0)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) write$FUSE_ATTR(r0, 0x0, 0xfc92) 2.993989538s ago: executing program 3 (id=1956): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000140)) 2.992615429s ago: executing program 5 (id=1957): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc38, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066"], 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000580)='7', 0x1) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/134, 0x86) syz_usb_control_io$uac3(r2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000040)="2318e78a") 1.574057382s ago: executing program 4 (id=1958): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000840000000100"], 0x18, 0x4000}, 0x28008841) 1.508190904s ago: executing program 3 (id=1959): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r0, &(0x7f0000000000)='27', 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r1, 0x1, 0x49, 0x0, &(0x7f00000004c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) socket$inet_tcp(0x2, 0x1, 0x0) 1.507237554s ago: executing program 4 (id=1961): r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f00000004c0)=@keyring) add_key$user(0x0, 0x0, 0x0, 0x0, r0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000880)={0x200000000000001}, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f00000008c0)={0xa, 0x4e25, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)='\x00', 0x1}], 0x1}}], 0x1, 0x400c405) exit(0x0) write(r1, &(0x7f00000009c0)="ea2eb55e1d6a", 0x6) 1.034746525s ago: executing program 3 (id=1967): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18300000090040a2b8e631d7d0c4146e2d3014c60de84190"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x21, &(0x7f0000000240)=""/153}, 0x90) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 963.570167ms ago: executing program 3 (id=1968): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0) syz_socket_connect_nvme_tcp() syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x3630c1) getpid() mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)="3100f3a70c57aab9346531b3f6ad5b6ec75a0fc0a6c0bbd4b2d8ee9d3c891dff36500980fc1652c71193785d5ff7f83552ca2dbca8aee1c26bb0337897ace4fb85cc40c273cd67ec01764ee2f7de0223a5bea506f5f997938cd33aef9a85636fc3", 0x61) 663.144184ms ago: executing program 1 (id=1971): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x1, &(0x7f0000001380)=[{0x6, 0x1, 0x83, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082104, 0x0) 642.251634ms ago: executing program 4 (id=1972): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000100)={0x3ff, 0x3}) 582.037986ms ago: executing program 1 (id=1973): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x8, 0x100c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0x10, &(0x7f0000001000)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) 581.910826ms ago: executing program 4 (id=1974): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x540, 0x380, 0x1a0, 0xd0, 0xd0, 0x1a0, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {0xff}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@private=0xa010100, @ipv6=@mcast1, 0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 529.389857ms ago: executing program 4 (id=1976): r0 = openat(0xffffffffffffff9c, &(0x7f00000015c0)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001600)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000001700)='./file0\x00', &(0x7f0000001740), 0x8, &(0x7f0000001780)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 519.795737ms ago: executing program 1 (id=1977): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='veth0_macvtap\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x7c70}, 0x1, 0x0, 0x0, 0x90}, 0x8080) sendmmsg$sock(r1, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000740)="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", 0x201}], 0x1}}], 0x1, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) 435.18661ms ago: executing program 2 (id=1978): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010003704000000000500000000000000", @ANYRES32=r3, @ANYBLOB="c3040580000000002800128008000100677265001c00028005000a000000000008000700ac1414aa0500130001"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000340)={0x2, 0x4e1c, @private=0x1}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102}}}], 0x20}, 0x4000004) 435.036459ms ago: executing program 2 (id=1979): socket$netlink(0x10, 0x3, 0x8000000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='27', 0x2) ioctl$BLKDISCARDZEROES(0xffffffffffffffff, 0x127c, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000180)={0x2, &(0x7f00000001c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x80, 0xfd}]}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000200)={@random="a327746a58f7", @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x9, 0x14, 0x64, 0x0, 0x2, 0x62, 0x0, @local, @empty}}}}}, 0x0) 404.06667ms ago: executing program 2 (id=1980): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./tracing\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000006540)='./tracing/uprobe_events\x00', 0x601, 0xd) 370.586001ms ago: executing program 2 (id=1981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1e, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000003, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000300)=ANY=[], 0x34) 243.364954ms ago: executing program 1 (id=1982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000012c0)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001380)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000013c0)={'geneve1\x00', 0x400}) close(0x3) 203.169535ms ago: executing program 2 (id=1983): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000480)={0xbe, 0xa, 0xaa, 0x5, 0x6, 0x0, 0x0, 0x8, 0x80, 0x8, 0xf8, 0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}]}, &(0x7f0000000540)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000580)={r1}, &(0x7f00000005c0)=0x8) 180.290415ms ago: executing program 1 (id=1984): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f0000001180)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000011c0)='./file0\x00', &(0x7f0000001200), 0x0, &(0x7f0000001240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000001280)='./file0/file1\x00', &(0x7f00000012c0), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./file1/file0\x00', 0x0, 0x1005418, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180), 0x40, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000240)='./bus\x00') setxattr$incfs_size(&(0x7f0000001480)='./file0/file1\x00', &(0x7f00000014c0), 0x0, 0x0, 0x0) 107.286218ms ago: executing program 2 (id=1985): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x100bf2c, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffff805}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x220c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 99.427937ms ago: executing program 1 (id=1986): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) close(0x3) 0s ago: executing program 3 (id=1987): unshare(0x400) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x180861) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000001c0)) kernel console output (not intermixed with test programs): 3-1: USB disconnect, device number 6 [ 319.602771][ T6567] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 319.622102][ T7661] loop3: detected capacity change from 0 to 32768 [ 319.882981][ T7661] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1133 (7661) [ 320.095140][ T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 320.188766][ T7661] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 320.296648][ T7661] BTRFS info (device loop3): setting nodatasum [ 320.361085][ T7661] BTRFS info (device loop3): force zlib compression, level 3 [ 320.369703][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 320.473494][ T7661] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 320.515742][ T21] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 320.614607][ T7661] BTRFS info (device loop3): use lzo compression, level 0 [ 320.690509][ T7661] BTRFS info (device loop3): turning on flush-on-commit [ 320.698182][ T7661] BTRFS info (device loop3): enabling auto defrag [ 320.704670][ T7661] BTRFS info (device loop3): max_inline at 4096 [ 320.711048][ T7661] BTRFS info (device loop3): using free space tree [ 320.725125][ T7661] BTRFS info (device loop3): has skinny extents [ 320.745224][ T21] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 320.757999][ T21] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 320.785061][ T21] usb 5-1: Product: syz [ 320.809756][ T21] usb 5-1: Manufacturer: syz [ 320.823191][ T21] usb 5-1: SerialNumber: syz [ 320.863519][ T21] usb 5-1: config 0 descriptor?? [ 320.885371][ T7687] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 320.936169][ T21] hub 5-1:0.0: bad descriptor, ignoring hub [ 320.943494][ T21] hub: probe of 5-1:0.0 failed with error -5 [ 321.022955][ T7720] loop1: detected capacity change from 0 to 512 [ 321.035072][ T7661] BTRFS info (device loop3): enabling ssd optimizations [ 322.066546][ T6473] usb 5-1: USB disconnect, device number 6 [ 322.585401][ T6473] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 322.673839][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.680614][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.970599][ T6473] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 323.155263][ T6473] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 323.174754][ T6473] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 323.183497][ T6473] usb 5-1: Product: syz [ 323.188138][ T6473] usb 5-1: Manufacturer: syz [ 323.192864][ T6473] usb 5-1: SerialNumber: syz [ 323.226551][ T6473] usb 5-1: config 0 descriptor?? [ 323.255656][ T6473] usb 5-1: can't set config #0, error -71 [ 323.282167][ T6473] usb 5-1: USB disconnect, device number 7 [ 323.295113][ T21] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 323.322406][ T7772] loop4: detected capacity change from 0 to 512 [ 323.329051][ T4275] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 323.555266][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 323.705882][ T21] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 323.735494][ T4275] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 323.756105][ T21] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 323.797093][ T4275] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 323.933026][ T21] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 323.952536][ T4275] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 324.093444][ T4275] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 324.122186][ T21] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 324.253510][ T4275] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 324.280323][ T21] usb 4-1: config 0 interface 0 has no altsetting 0 [ 324.324147][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1181'. [ 324.425587][ T4275] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 324.449860][ T4275] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 324.465372][ T21] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 324.480532][ T21] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 324.491541][ T4275] usb 3-1: Product: syz [ 324.506450][ T4275] usb 3-1: Manufacturer: syz [ 324.515184][ T21] usb 4-1: Product: syz [ 324.519431][ T21] usb 4-1: Manufacturer: syz [ 324.541694][ T21] usb 4-1: SerialNumber: syz [ 324.564496][ T21] usb 4-1: config 0 descriptor?? [ 324.595991][ T4275] cdc_wdm 3-1:1.0: skipping garbage [ 324.601274][ T4275] cdc_wdm 3-1:1.0: skipping garbage [ 324.617741][ T4275] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 324.623710][ T4275] cdc_wdm 3-1:1.0: Unknown control protocol [ 324.636500][ T21] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 324.664250][ T21] ldusb 4-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 324.855115][ T4267] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 324.908304][ T21] usb 4-1: USB disconnect, device number 5 [ 324.937128][ T21] ldusb 4-1:0.0: LD USB Device #1 now disconnected [ 324.977504][ T7810] netlink: 'syz.4.1189': attribute type 1 has an invalid length. [ 324.986350][ T7810] netlink: 'syz.4.1189': attribute type 2 has an invalid length. [ 325.115175][ T4267] usb 1-1: Using ep0 maxpacket: 32 [ 325.189915][ T4275] usb 3-1: USB disconnect, device number 7 [ 325.215012][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 325.221673][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 325.227772][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 325.236628][ T7802] cdc_wdm 3-1:1.0: Tx URB error: -19 [ 325.259953][ T7760] cdc_wdm 3-1:1.0: Tx URB error: -19 [ 325.285297][ T4267] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 325.565521][ T4267] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 325.620024][ T4267] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 325.700821][ T4267] usb 1-1: Product: syz [ 325.787286][ T4267] usb 1-1: Manufacturer: syz [ 325.846902][ T4267] usb 1-1: SerialNumber: syz [ 325.938571][ T4267] usb 1-1: config 0 descriptor?? [ 325.985507][ T7801] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 326.031810][ T4267] hub 1-1:0.0: bad descriptor, ignoring hub [ 326.042654][ T4267] hub: probe of 1-1:0.0 failed with error -5 [ 326.178076][ T7829] loop3: detected capacity change from 0 to 512 [ 326.213065][ T7833] exFAT-fs (nbd2): mounting with "discard" option, but the device does not support discard [ 326.224477][ T150] block nbd2: Attempted send on invalid socket [ 326.230733][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 326.245126][ T7833] exFAT-fs (nbd2): unable to read boot sector [ 326.251231][ T7833] exFAT-fs (nbd2): failed to read boot sector [ 326.257362][ T7833] exFAT-fs (nbd2): failed to recognize exfat type [ 327.140668][ T7853] lo speed is unknown, defaulting to 1000 [ 327.219717][ T7853] lo speed is unknown, defaulting to 1000 [ 327.354698][ T7853] lo speed is unknown, defaulting to 1000 [ 327.397427][ T7853] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 327.442806][ T7853] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 327.473756][ T7853] lo speed is unknown, defaulting to 1000 [ 327.481687][ T7853] lo speed is unknown, defaulting to 1000 [ 327.488693][ T7853] lo speed is unknown, defaulting to 1000 [ 327.496007][ T7853] lo speed is unknown, defaulting to 1000 [ 327.502695][ T7853] lo speed is unknown, defaulting to 1000 [ 327.721733][ T7866] exFAT-fs (nbd1): mounting with "discard" option, but the device does not support discard [ 327.732143][ T150] block nbd1: Attempted send on invalid socket [ 327.738424][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.754637][ T7866] exFAT-fs (nbd1): unable to read boot sector [ 327.761308][ T7866] exFAT-fs (nbd1): failed to read boot sector [ 327.767418][ T7866] exFAT-fs (nbd1): failed to recognize exfat type [ 327.797550][ T7747] usb 1-1: USB disconnect, device number 6 [ 327.975319][ T7747] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 328.168230][ T1092] block nbd1: Attempted send on invalid socket [ 328.175905][ T1092] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 328.190263][ T7880] exFAT-fs (nbd1): unable to read boot sector [ 328.196537][ T7880] exFAT-fs (nbd1): failed to read boot sector [ 328.202835][ T7880] exFAT-fs (nbd1): failed to recognize exfat type [ 328.875429][ T7747] usb 1-1: device descriptor read/all, error -71 [ 329.097701][ T7891] IPv6: Can't replace route, no match found [ 329.166869][ T7893] siw: device registration error -23 [ 330.381910][ T7915] netlink: 'syz.3.1231': attribute type 1 has an invalid length. [ 330.390843][ T7915] netlink: 'syz.3.1231': attribute type 2 has an invalid length. [ 330.485310][ T150] block nbd0: Attempted send on invalid socket [ 330.487708][ T7747] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 330.491828][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 330.511986][ T7916] exFAT-fs (nbd0): unable to read boot sector [ 330.518247][ T7916] exFAT-fs (nbd0): failed to read boot sector [ 330.525281][ T7916] exFAT-fs (nbd0): failed to recognize exfat type [ 331.304093][ T7922] netlink: 'syz.3.1233': attribute type 1 has an invalid length. [ 331.374198][ T7924] IPv6: Can't replace route, no match found [ 331.385174][ T7747] usb 3-1: Using ep0 maxpacket: 32 [ 331.407387][ T7926] siw: device registration error -23 [ 331.505369][ T7747] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 331.615746][ T7937] loop1: detected capacity change from 0 to 512 [ 331.705922][ T7747] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 332.435832][ T7747] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 332.444065][ T7747] usb 3-1: Product: syz [ 332.448365][ T7747] usb 3-1: Manufacturer: syz [ 332.452991][ T7747] usb 3-1: SerialNumber: syz [ 332.460033][ T7747] usb 3-1: config 0 descriptor?? [ 332.485340][ T7910] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 332.505871][ T7747] hub 3-1:0.0: bad descriptor, ignoring hub [ 332.511847][ T7747] hub: probe of 3-1:0.0 failed with error -5 [ 332.530869][ T7946] netlink: 'syz.4.1243': attribute type 29 has an invalid length. [ 332.600178][ T7946] netlink: 'syz.4.1243': attribute type 29 has an invalid length. [ 332.617737][ T7948] netlink: 'syz.3.1244': attribute type 1 has an invalid length. [ 332.641257][ T7946] netlink: 'syz.4.1243': attribute type 29 has an invalid length. [ 332.661094][ T7948] netlink: 'syz.3.1244': attribute type 2 has an invalid length. [ 332.669693][ T7946] netlink: 'syz.4.1243': attribute type 29 has an invalid length. [ 332.698681][ T7946] netlink: 'syz.4.1243': attribute type 29 has an invalid length. [ 332.741889][ T1092] block nbd0: Attempted send on invalid socket [ 332.748319][ T1092] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 332.759800][ T7952] exFAT-fs (nbd0): unable to read boot sector [ 332.766037][ T7952] exFAT-fs (nbd0): failed to read boot sector [ 332.772147][ T7952] exFAT-fs (nbd0): failed to recognize exfat type [ 333.619431][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1250'. [ 333.677759][ T7965] IPv6: Can't replace route, no match found [ 334.081563][ T6565] usb 3-1: USB disconnect, device number 8 [ 334.935581][ T7974] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 335.126212][ T7983] exFAT-fs (nbd4): mounting with "discard" option, but the device does not support discard [ 335.138925][ T1092] block nbd4: Attempted send on invalid socket [ 335.145738][ T1092] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 335.157402][ T7983] exFAT-fs (nbd4): unable to read boot sector [ 335.163582][ T7983] exFAT-fs (nbd4): failed to read boot sector [ 335.169831][ T7983] exFAT-fs (nbd4): failed to recognize exfat type [ 335.275199][ T6565] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 336.337182][ T8003] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1267'. [ 336.380955][ T8006] validate_nla: 5 callbacks suppressed [ 336.380971][ T8006] netlink: 'syz.0.1268': attribute type 29 has an invalid length. [ 336.402806][ T8006] netlink: 'syz.0.1268': attribute type 29 has an invalid length. [ 336.412742][ T8006] netlink: 'syz.0.1268': attribute type 29 has an invalid length. [ 336.428060][ T8006] netlink: 'syz.0.1268': attribute type 29 has an invalid length. [ 336.464644][ T8006] netlink: 'syz.0.1268': attribute type 29 has an invalid length. [ 337.357353][ T8015] exFAT-fs (nbd3): mounting with "discard" option, but the device does not support discard [ 337.368711][ T1092] block nbd3: Attempted send on invalid socket [ 337.375399][ T1092] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.389595][ T8015] exFAT-fs (nbd3): unable to read boot sector [ 337.397332][ T8015] exFAT-fs (nbd3): failed to read boot sector [ 337.414979][ T8015] exFAT-fs (nbd3): failed to recognize exfat type [ 337.634012][ T8021] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1274'. [ 337.782036][ T8031] loop3: detected capacity change from 0 to 512 [ 339.208652][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1287'. [ 339.383335][ T8069] netlink: 'syz.4.1295': attribute type 29 has an invalid length. [ 339.445684][ T8069] netlink: 'syz.4.1295': attribute type 29 has an invalid length. [ 339.475033][ T8074] netlink: 'syz.4.1295': attribute type 29 has an invalid length. [ 339.506995][ T8069] netlink: 'syz.4.1295': attribute type 29 has an invalid length. [ 339.522403][ T8078] loop0: detected capacity change from 0 to 512 [ 340.515580][ T8091] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 340.983448][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1307'. [ 341.119561][ T8101] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1307'. [ 341.199761][ T8099] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 341.302683][ T8113] exFAT-fs (nbd2): mounting with "discard" option, but the device does not support discard [ 341.314562][ T1092] block nbd2: Attempted send on invalid socket [ 341.321572][ T1092] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 341.333345][ T8113] exFAT-fs (nbd2): unable to read boot sector [ 341.347686][ T8113] exFAT-fs (nbd2): failed to read boot sector [ 341.354077][ T8113] exFAT-fs (nbd2): failed to recognize exfat type [ 342.164465][ T8120] loop3: detected capacity change from 0 to 512 [ 343.542252][ T8148] exFAT-fs (nbd0): mounting with "discard" option, but the device does not support discard [ 343.553980][ T1092] block nbd0: Attempted send on invalid socket [ 343.560728][ T1092] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 343.572300][ T8148] exFAT-fs (nbd0): unable to read boot sector [ 343.578601][ T8148] exFAT-fs (nbd0): failed to read boot sector [ 343.585169][ T8148] exFAT-fs (nbd0): failed to recognize exfat type [ 344.412270][ T8159] loop1: detected capacity change from 0 to 512 [ 345.520424][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1342'. [ 345.679217][ T8187] exFAT-fs (nbd2): mounting with "discard" option, but the device does not support discard [ 345.690661][ T150] block nbd2: Attempted send on invalid socket [ 345.697543][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 345.709688][ T8187] exFAT-fs (nbd2): unable to read boot sector [ 345.715986][ T8187] exFAT-fs (nbd2): failed to read boot sector [ 345.722217][ T8187] exFAT-fs (nbd2): failed to recognize exfat type [ 346.515326][ T8186] Set syz1 is full, maxelem 2076 reached [ 346.536406][ T8197] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1347'. [ 346.580999][ T8197] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1347'. [ 346.608862][ T8203] netlink: 752 bytes leftover after parsing attributes in process `syz.1.1349'. [ 346.739423][ T8212] loop4: detected capacity change from 0 to 512 [ 348.112847][ T8237] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1364'. [ 348.135540][ T8237] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1364'. [ 348.323741][ T8250] loop2: detected capacity change from 0 to 512 [ 348.379211][ T8253] loop3: detected capacity change from 0 to 164 [ 348.835770][ T8253] rock: directory entry would overflow storage [ 348.963321][ T8253] rock: sig=0x66, size=4, remaining=3 [ 349.721050][ T8271] exFAT-fs (nbd2): mounting with "discard" option, but the device does not support discard [ 349.732271][ T1092] block nbd2: Attempted send on invalid socket [ 349.739042][ T1092] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.750817][ T8271] exFAT-fs (nbd2): unable to read boot sector [ 349.757133][ T8271] exFAT-fs (nbd2): failed to read boot sector [ 349.763322][ T8271] exFAT-fs (nbd2): failed to recognize exfat type [ 350.580531][ T8279] loop1: detected capacity change from 0 to 512 [ 350.786260][ T8287] loop3: detected capacity change from 0 to 512 [ 351.935410][ T8310] exFAT-fs (nbd2): mounting with "discard" option, but the device does not support discard [ 351.947050][ T150] block nbd2: Attempted send on invalid socket [ 351.953321][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 351.965061][ T8310] exFAT-fs (nbd2): unable to read boot sector [ 351.971473][ T8310] exFAT-fs (nbd2): failed to read boot sector [ 351.977714][ T8310] exFAT-fs (nbd2): failed to recognize exfat type [ 352.729168][ T8227] ODEBUG: Out of memory. ODEBUG disabled [ 352.943432][ T8326] loop2: detected capacity change from 0 to 512 [ 353.958962][ T8340] loop1: detected capacity change from 0 to 16 [ 353.979483][ T8340] erofs: (device loop1): mounted with root inode @ nid 36. [ 354.013251][ T8340] erofs: (device loop1): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 354.033977][ T8340] attempt to access beyond end of device [ 354.033977][ T8340] loop1: rw=0, want=304, limit=16 [ 354.090216][ T8340] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 354.141151][ T8340] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 354.266887][ T8350] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 355.991586][ T8355] exFAT-fs (nbd3): mounting with "discard" option, but the device does not support discard [ 356.675164][ T150] block nbd3: Attempted send on invalid socket [ 356.681570][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 356.808166][ T8358] loop0: detected capacity change from 0 to 512 [ 356.821099][ T8355] exFAT-fs (nbd3): unable to read boot sector [ 356.831199][ T8355] exFAT-fs (nbd3): failed to read boot sector [ 356.845483][ T8355] exFAT-fs (nbd3): failed to recognize exfat type [ 358.039168][ T8373] FAULT_INJECTION: forcing a failure. [ 358.039168][ T8373] name failslab, interval 1, probability 0, space 0, times 0 [ 358.078610][ T8373] CPU: 1 PID: 8373 Comm: syz.2.1415 Not tainted syzkaller #0 [ 358.086064][ T8373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 358.096246][ T8373] Call Trace: [ 358.099593][ T8373] [ 358.102783][ T8373] dump_stack_lvl+0x188/0x250 [ 358.107684][ T8373] ? show_regs_print_info+0x20/0x20 [ 358.113094][ T8373] ? load_image+0x410/0x410 [ 358.117636][ T8373] ? __might_sleep+0xf0/0xf0 [ 358.122412][ T8373] ? __lock_acquire+0x7d40/0x7d40 [ 358.127577][ T8373] should_fail+0x383/0x4b0 [ 358.132142][ T8373] should_failslab+0x5/0x20 [ 358.136738][ T8373] slab_pre_alloc_hook+0x51/0xc0 [ 358.141771][ T8373] __kmalloc_node+0x6d/0x3a0 [ 358.146400][ T8373] ? kvmalloc_node+0x84/0x130 [ 358.151174][ T8373] ? stack_depot_save+0x41b/0x460 [ 358.156240][ T8373] kvmalloc_node+0x84/0x130 [ 358.160778][ T8373] translate_table+0x18d/0x1f60 [ 358.165779][ T8373] ? ipt_register_table+0x7b0/0x7b0 [ 358.171013][ T8373] ? __might_fault+0xb7/0x110 [ 358.175782][ T8373] ? __lock_acquire+0x7d40/0x7d40 [ 358.180888][ T8373] ? __might_fault+0xb3/0x110 [ 358.185612][ T8373] ? _copy_from_user+0x111/0x170 [ 358.190684][ T8373] do_ipt_set_ctl+0x963/0xd70 [ 358.195544][ T8373] ? nf_setsockopt+0x218/0x280 [ 358.200451][ T8373] ? ipt_unregister_table_exit+0x220/0x220 [ 358.206386][ T8373] ? __lock_acquire+0x7d40/0x7d40 [ 358.211446][ T8373] ? __mutex_lock_common+0x435/0x2400 [ 358.217068][ T8373] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 358.222755][ T8373] ? mutex_unlock+0x10/0x10 [ 358.227319][ T8373] ? __local_bh_enable_ip+0x136/0x1c0 [ 358.232806][ T8373] ? lockdep_hardirqs_on+0x94/0x140 [ 358.238128][ T8373] ? __local_bh_enable_ip+0x136/0x1c0 [ 358.243539][ T8373] nf_setsockopt+0x25f/0x280 [ 358.248178][ T8373] ip_setsockopt+0x29c3/0x31e0 [ 358.253086][ T8373] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 358.258502][ T8373] ? aa_sk_perm+0x7dc/0x910 [ 358.263136][ T8373] ? aa_af_perm+0x340/0x340 [ 358.267709][ T8373] ? __fget_files+0x402/0x470 [ 358.272501][ T8373] ? aa_sock_opt_perm+0x74/0x100 [ 358.277482][ T8373] ? udp_setsockopt+0x77/0xa0 [ 358.282235][ T8373] ? sock_common_recvmsg+0x1c0/0x1c0 [ 358.287599][ T8373] __sys_setsockopt+0x2bf/0x3d0 [ 358.292560][ T8373] __x64_sys_setsockopt+0xb1/0xc0 [ 358.297641][ T8373] do_syscall_64+0x4c/0xa0 [ 358.302088][ T8373] ? clear_bhb_loop+0x30/0x80 [ 358.306867][ T8373] ? clear_bhb_loop+0x30/0x80 [ 358.311580][ T8373] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 358.317562][ T8373] RIP: 0033:0x7fc16df1d559 [ 358.322054][ T8373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.341757][ T8373] RSP: 002b:00007fc16c175028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 358.350383][ T8373] RAX: ffffffffffffffda RBX: 00007fc16e1a4fa0 RCX: 00007fc16df1d559 [ 358.358386][ T8373] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 358.366395][ T8373] RBP: 00007fc16dfb4ab8 R08: 0000000000000230 R09: 0000000000000000 [ 358.374434][ T8373] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 358.382440][ T8373] R13: 00007fc16e1a5038 R14: 00007fc16e1a4fa0 R15: 00007ffcb4532608 [ 358.390468][ T8373] [ 358.498499][ T8227] Set syz0 is full, maxelem 65536 reached [ 358.518257][ T8393] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 358.525613][ T8393] IPv6: NLM_F_CREATE should be set when creating new route [ 358.561225][ T8390] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1423'. [ 359.158945][ T8405] loop4: detected capacity change from 0 to 2048 [ 359.490942][ T8405] loop4: p1 < > p3 [ 359.529798][ T8405] loop4: p3 size 134217728 extends beyond EOD, truncated [ 359.560576][ T3559] loop4: p1 < > p3 [ 359.587467][ T3559] loop4: p3 size 134217728 extends beyond EOD, truncated [ 359.597756][ T8415] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 359.709364][ T6785] udevd[6785]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 359.712396][ T6368] udevd[6368]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 359.744537][ T6785] udevd[6785]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 359.767125][ T6368] udevd[6368]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 360.024577][ T8396] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.032103][ T8396] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.526797][ T8396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.563455][ T8396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.742642][ T8396] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.752190][ T8396] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.766723][ T8396] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.779732][ T8396] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.997422][ T8396] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.006482][ T8396] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.015479][ T8396] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.024416][ T8396] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.040156][ T8406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1423'. [ 361.081795][ T8426] device bridge0 entered promiscuous mode [ 361.275134][ T8445] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 361.329447][ T26] audit: type=1326 audit(1792276244.766:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.0.1445" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1549552559 code=0x0 [ 361.358526][ T8443] loop2: detected capacity change from 0 to 2048 [ 361.387371][ T8453] loop4: detected capacity change from 0 to 512 [ 361.422581][ T6368] Alternate GPT is invalid, using primary GPT. [ 361.440407][ T8453] attempt to access beyond end of device [ 361.440407][ T8453] loop4: rw=2051, want=28736, limit=512 [ 361.460232][ T6368] loop2: p1 p2 p3 [ 361.505855][ T8443] Alternate GPT is invalid, using primary GPT. [ 361.516169][ T8443] loop2: p1 p2 p3 [ 362.055026][ T6561] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 362.795096][ T6561] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.942325][ T8475] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 363.544506][ T6561] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 363.554026][ T6561] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.568551][ T6561] usb 4-1: config 0 descriptor?? [ 363.715034][ T6564] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 363.836353][ T8484] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 363.918448][ T6561] usbhid 4-1:0.0: can't add hid device: -71 [ 363.924834][ T6561] usbhid: probe of 4-1:0.0 failed with error -71 [ 363.959012][ T8492] loop1: detected capacity change from 0 to 128 [ 363.962554][ T6561] usb 4-1: USB disconnect, device number 6 [ 364.071627][ T8492] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 364.425354][ T6564] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.751576][ T6561] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 364.824532][ T6564] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 364.834018][ T6564] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.849532][ T6564] usb 5-1: config 0 descriptor?? [ 365.075027][ T6561] usb 4-1: Using ep0 maxpacket: 32 [ 365.104942][ C0] raw-gadget.0 gadget: ignoring, device is not running [ 365.160698][ T6561] usb 4-1: device descriptor read/all, error -71 [ 365.234863][ T4399] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 365.240608][ T6564] usbhid 5-1:0.0: can't add hid device: -71 [ 365.263866][ T6564] usbhid: probe of 5-1:0.0 failed with error -71 [ 365.280813][ T6564] usb 5-1: USB disconnect, device number 8 [ 365.343575][ T8504] rxe_eth0 speed is unknown, defaulting to 1000 [ 365.474779][ T8512] sctp: [Deprecated]: syz.1.1470 (pid 8512) Use of int in max_burst socket option. [ 365.474779][ T8512] Use struct sctp_assoc_value instead [ 365.706399][ T8504] lo speed is unknown, defaulting to 1000 [ 365.725145][ T6564] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 365.882291][ T8530] loop1: detected capacity change from 0 to 128 [ 365.930755][ T8504] chnl_net:caif_netlink_parms(): no params data found [ 365.995116][ T6564] usb 5-1: Using ep0 maxpacket: 32 [ 366.074542][ T8504] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.082619][ T8504] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.092228][ T8504] device bridge_slave_0 entered promiscuous mode [ 366.117798][ T6564] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.147101][ T6564] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.66 [ 366.165150][ T6564] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.178165][ T6564] usb 5-1: config 0 descriptor?? [ 366.186060][ T8504] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.194006][ T8504] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.203790][ T8504] device bridge_slave_1 entered promiscuous mode [ 366.216679][ T6564] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 366.247797][ T6564] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 366.303125][ T8504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.605204][ T6561] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 366.634944][ T8504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.843738][ T6562] usb 5-1: USB disconnect, device number 9 [ 366.957424][ T6562] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 367.025919][ T6561] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.097681][ T6561] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 367.136214][ T6561] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.166117][ T6561] usb 4-1: config 0 descriptor?? [ 367.171990][ T8554] loop1: detected capacity change from 0 to 128 [ 367.224239][ T8504] team0: Port device team_slave_0 added [ 367.301512][ T8554] attempt to access beyond end of device [ 367.301512][ T8554] loop1: rw=2049, want=224, limit=128 [ 367.312897][ T8504] team0: Port device team_slave_1 added [ 367.319548][ T6804] Bluetooth: hci0: command 0x0409 tx timeout [ 367.377054][ T8504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.392719][ T8553] attempt to access beyond end of device [ 367.392719][ T8553] loop1: rw=524288, want=224, limit=128 [ 367.413408][ T8504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.451485][ T8554] attempt to access beyond end of device [ 367.451485][ T8554] loop1: rw=0, want=153, limit=128 [ 367.474510][ T8504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.493656][ T8554] attempt to access beyond end of device [ 367.493656][ T8554] loop1: rw=0, want=153, limit=128 [ 367.523191][ T8504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.540307][ T6561] usbhid 4-1:0.0: can't add hid device: -71 [ 367.555515][ T6561] usbhid: probe of 4-1:0.0 failed with error -71 [ 367.568279][ T8504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.607409][ T6561] usb 4-1: USB disconnect, device number 9 [ 367.647807][ T8504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.740225][ T8504] device hsr_slave_0 entered promiscuous mode [ 367.802715][ T8504] device hsr_slave_1 entered promiscuous mode [ 367.851254][ T8504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.870656][ T8504] Cannot create hsr debugfs directory [ 367.935389][ T8572] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1484'. [ 367.982083][ T8572] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.022359][ T8576] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1484'. [ 368.035095][ T6561] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 368.047092][ T8576] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.054212][ T8576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.106599][ T154] device hsr_slave_0 left promiscuous mode [ 368.124647][ T154] device hsr_slave_1 left promiscuous mode [ 368.135824][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.156610][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.164430][ T154] device bridge_slave_1 left promiscuous mode [ 368.176277][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.199181][ T154] device bridge_slave_0 left promiscuous mode [ 368.215169][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.235139][ T6562] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 368.285325][ T6561] usb 4-1: Using ep0 maxpacket: 32 [ 368.409109][ T154] team0 (unregistering): Port device team_slave_1 removed [ 368.425463][ T6561] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.444993][ T6561] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.66 [ 368.450790][ T154] team0 (unregistering): Port device team_slave_0 removed [ 368.460424][ T6561] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.480918][ T6561] usb 4-1: config 0 descriptor?? [ 368.498887][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.529971][ T6561] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 368.547653][ T6561] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 368.575334][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.655221][ T6562] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.684769][ T6562] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 368.701739][ T6562] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.713057][ T6562] usb 3-1: config 0 descriptor?? [ 368.733320][ T154] bond0 (unregistering): Released all slaves [ 368.790708][ T8576] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1484'. [ 368.816393][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.016157][ T8589] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 369.105691][ T6562] usbhid 3-1:0.0: can't add hid device: -71 [ 369.113521][ T6562] usbhid: probe of 3-1:0.0 failed with error -71 [ 369.202636][ T6562] usb 3-1: USB disconnect, device number 10 [ 369.765194][ T6562] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 370.055124][ T6562] usb 3-1: Using ep0 maxpacket: 32 [ 370.185737][ T6562] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.221883][ T6562] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.66 [ 370.277309][ T6562] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.414389][ T6562] usb 3-1: config 0 descriptor?? [ 370.536616][ T6562] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 370.658956][ T6562] ldusb 3-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 370.710220][ T6799] Bluetooth: hci0: command 0x041b tx timeout [ 371.905485][ T6561] usb 3-1: USB disconnect, device number 11 [ 371.915815][ T6561] ldusb 3-1:0.0: LD USB Device #1 now disconnected [ 372.107372][ T8599] capability: warning: `syz.1.1489' uses deprecated v2 capabilities in a way that may be insecure [ 372.469888][ T8504] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 372.532376][ T8504] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 372.587196][ T8504] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 372.607477][ T8504] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 372.753545][ T8621] FAULT_INJECTION: forcing a failure. [ 372.753545][ T8621] name failslab, interval 1, probability 0, space 0, times 0 [ 372.803636][ T8621] CPU: 0 PID: 8621 Comm: syz.1.1495 Not tainted syzkaller #0 [ 372.811198][ T8621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 372.821299][ T8621] Call Trace: [ 372.824608][ T8621] [ 372.827577][ T8621] dump_stack_lvl+0x188/0x250 [ 372.832306][ T8621] ? show_regs_print_info+0x20/0x20 [ 372.837551][ T8621] ? load_image+0x410/0x410 [ 372.842140][ T8621] ? __might_sleep+0xf0/0xf0 [ 372.846767][ T8621] ? __lock_acquire+0x7d40/0x7d40 [ 372.851839][ T8621] should_fail+0x383/0x4b0 [ 372.856386][ T8621] should_failslab+0x5/0x20 [ 372.860928][ T8621] slab_pre_alloc_hook+0x51/0xc0 [ 372.865908][ T8621] __kmalloc+0x6b/0x340 [ 372.870103][ T8621] ? tomoyo_encode+0x28a/0x550 [ 372.875052][ T8621] tomoyo_encode+0x28a/0x550 [ 372.879680][ T8621] tomoyo_mount_permission+0x4f8/0x9b0 [ 372.885175][ T8621] ? ____kasan_slab_free+0xd5/0x110 [ 372.890408][ T8621] ? slab_free_freelist_hook+0xec/0x170 [ 372.896029][ T8621] ? tomoyo_get_name+0x520/0x520 [ 372.901060][ T8621] security_sb_mount+0x83/0xb0 [ 372.906032][ T8621] path_mount+0xb8/0xfe0 [ 372.910317][ T8621] ? user_path_at_empty+0x13e/0x190 [ 372.915632][ T8621] __se_sys_mount+0x2e3/0x3d0 [ 372.920352][ T8621] ? __x64_sys_mount+0xc0/0xc0 [ 372.925171][ T8621] ? lockdep_hardirqs_on+0x94/0x140 [ 372.930415][ T8621] ? __x64_sys_mount+0x1c/0xc0 [ 372.935217][ T8621] do_syscall_64+0x4c/0xa0 [ 372.939662][ T8621] ? clear_bhb_loop+0x30/0x80 [ 372.944381][ T8621] ? clear_bhb_loop+0x30/0x80 [ 372.949099][ T8621] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 372.955054][ T8621] RIP: 0033:0x7f9fdf6bd559 [ 372.959502][ T8621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.979232][ T8621] RSP: 002b:00007f9fdd915028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 372.987701][ T8621] RAX: ffffffffffffffda RBX: 00007f9fdf944fa0 RCX: 00007f9fdf6bd559 [ 372.995718][ T8621] RDX: 0000200000000380 RSI: 0000200000000340 RDI: 0000000000000000 [ 373.003731][ T8621] RBP: 00007f9fdf754ab8 R08: 0000200000000740 R09: 0000000000000000 [ 373.011738][ T8621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.019771][ T8621] R13: 00007f9fdf945038 R14: 00007f9fdf944fa0 R15: 00007ffe971a4ff8 [ 373.027801][ T8621] [ 373.048630][ T8624] rxe_eth0 speed is unknown, defaulting to 1000 [ 373.085408][ T8504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.130277][ T7127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 373.153731][ T7127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 373.168479][ T8504] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.206690][ T8632] loop4: detected capacity change from 0 to 256 [ 373.222155][ T7127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 373.241221][ T7127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 373.292164][ T8632] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 373.317855][ T7127] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.325012][ T7127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.348689][ T7127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 373.407741][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 373.430014][ T8632] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2048) [ 373.455865][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 373.504014][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.511228][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.518862][ T8632] FAT-fs (loop4): Filesystem has been set read-only [ 373.548250][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 373.567987][ T8632] FAT-fs (loop4): error, invalid FAT chain (i_pos 196, last_block 8) [ 373.570245][ T8624] lo speed is unknown, defaulting to 1000 [ 373.589866][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 373.614069][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 373.644982][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 373.679002][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 373.700855][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 373.720913][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 373.793440][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 373.805003][ T8543] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 373.824370][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 373.868308][ T6800] Bluetooth: hci0: command 0x040f tx timeout [ 373.890922][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 373.907371][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 373.929493][ T6800] usb 4-1: USB disconnect, device number 10 [ 373.950258][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 373.991806][ T8640] rxe_eth0 speed is unknown, defaulting to 1000 [ 374.003815][ T6800] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 374.315877][ T8664] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1506'. [ 374.361950][ T8664] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1506'. [ 374.405140][ T8664] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1506'. [ 374.435017][ T8664] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1506'. [ 374.487819][ T8224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 374.526393][ T8224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 374.571932][ T8669] device team_slave_0 entered promiscuous mode [ 374.625245][ T8504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.704405][ T8640] lo speed is unknown, defaulting to 1000 [ 374.902000][ T8687] loop2: detected capacity change from 0 to 128 [ 374.995261][ T8687] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 375.304358][ T8702] FAULT_INJECTION: forcing a failure. [ 375.304358][ T8702] name fail_futex, interval 1, probability 0, space 0, times 0 [ 375.344139][ T8705] loop1: detected capacity change from 0 to 256 [ 375.412767][ T8702] CPU: 0 PID: 8702 Comm: syz.4.1516 Not tainted syzkaller #0 [ 375.420230][ T8702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 375.430321][ T8702] Call Trace: [ 375.433638][ T8702] [ 375.436598][ T8702] dump_stack_lvl+0x188/0x250 [ 375.441323][ T8702] ? show_regs_print_info+0x20/0x20 [ 375.446562][ T8702] ? load_image+0x410/0x410 [ 375.451103][ T8702] ? add_lock_to_list+0x18d/0x280 [ 375.456213][ T8702] should_fail+0x383/0x4b0 [ 375.460675][ T8702] get_futex_key+0x1a1/0x12d0 [ 375.465484][ T8702] ? __lock_acquire+0x13b3/0x7d40 [ 375.470547][ T8702] ? futex_wait_restart+0x250/0x250 [ 375.475787][ T8702] futex_wake+0x101/0x540 [ 375.480159][ T8702] ? futex_wait+0x680/0x680 [ 375.484711][ T8702] ? verify_lock_unused+0x140/0x140 [ 375.489952][ T8702] ? verify_lock_unused+0x140/0x140 [ 375.495198][ T8702] do_futex+0xd83/0x12b0 [ 375.499484][ T8702] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 375.505512][ T8702] ? futex_exit_release+0x1c0/0x1c0 [ 375.510754][ T8702] ? __context_tracking_exit+0x4c/0x80 [ 375.516269][ T8702] __se_sys_futex+0x389/0x420 [ 375.520996][ T8702] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 375.527035][ T8702] ? __x64_sys_futex+0xf0/0xf0 [ 375.531853][ T8702] ? __x64_sys_futex+0x1d/0xf0 [ 375.536668][ T8702] do_syscall_64+0x4c/0xa0 [ 375.541136][ T8702] ? clear_bhb_loop+0x30/0x80 [ 375.545854][ T8702] ? clear_bhb_loop+0x30/0x80 [ 375.550581][ T8702] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 375.556522][ T8702] RIP: 0033:0x7f7ecc6c6559 [ 375.560985][ T8702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.580630][ T8702] RSP: 002b:00007f7eca91e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 375.589113][ T8702] RAX: ffffffffffffffda RBX: 00007f7ecc94dfa8 RCX: 00007f7ecc6c6559 [ 375.597140][ T8702] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7ecc94dfac [ 375.605162][ T8702] RBP: 00007f7ecc94dfa0 R08: 000bdb4af4f7d762 R09: 0000000000000000 [ 375.613169][ T8702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.621179][ T8702] R13: 00007f7ecc94e038 R14: 00007ffff64d4000 R15: 00007ffff64d40e8 [ 375.629217][ T8702] [ 375.693170][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 375.725439][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 375.806843][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 375.830880][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 375.868316][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 375.896185][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 375.936531][ T8504] device veth0_vlan entered promiscuous mode [ 375.945029][ T6804] Bluetooth: hci0: command 0x0419 tx timeout [ 375.988758][ T8504] device veth1_vlan entered promiscuous mode [ 376.095317][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 376.113933][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 376.144715][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 376.170237][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 376.328909][ T8743] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 376.451177][ T8504] device veth0_macvtap entered promiscuous mode [ 377.022479][ T8737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1528'. [ 377.140672][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 377.200964][ T8504] device veth1_macvtap entered promiscuous mode [ 377.892434][ T8504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.031114][ T8504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.176538][ T8504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.314650][ T8504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.421454][ T8756] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 378.451420][ T8504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.546274][ T8756] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 378.599991][ T8504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.673884][ T8756] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 378.722042][ T8504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.787777][ T8756] overlayfs: missing 'lowerdir' [ 378.842039][ T8504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.048285][ T8504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.170288][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 379.282039][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 379.319281][ T8504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.337164][ T8504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.365077][ T8504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.378780][ T8504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.435410][ T8504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.454011][ T8504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.473160][ T8504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.492402][ T8504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.514105][ T8504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.538844][ T8504] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.554114][ T8504] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.592337][ T8504] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.621130][ T8504] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.666238][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 379.696330][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 379.906990][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.923684][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.956864][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 380.098922][ T8224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.115247][ T8224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.154692][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 380.270016][ T8800] loop2: detected capacity change from 0 to 512 [ 380.309157][ T8805] loop3: detected capacity change from 0 to 164 [ 380.401903][ T8800] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 380.442116][ T8800] FAT-fs (loop2): Filesystem has been set read-only [ 380.471115][ T8805] rock: directory entry would overflow storage [ 380.480583][ T8800] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 380.495101][ T6562] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 380.505700][ T8805] rock: sig=0x66, size=4, remaining=3 [ 380.555061][ T8805] rock: directory entry would overflow storage [ 380.593607][ T8805] rock: sig=0x66, size=4, remaining=3 [ 380.614796][ T8818] loop4: detected capacity change from 0 to 128 [ 380.665604][ T8805] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 380.885494][ T6562] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.913673][ T6562] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 380.960425][ T6562] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.006361][ T6562] usb 2-1: config 0 descriptor?? [ 381.256662][ T8846] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring [ 381.355182][ T6562] usbhid 2-1:0.0: can't add hid device: -71 [ 381.361766][ T6562] usbhid: probe of 2-1:0.0 failed with error -71 [ 381.386737][ T6562] usb 2-1: USB disconnect, device number 4 [ 381.386829][ T8853] device syzkaller0 entered promiscuous mode [ 381.652302][ T8868] device syzkaller0 entered promiscuous mode [ 381.874999][ T6562] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 382.145125][ T6562] usb 2-1: Using ep0 maxpacket: 32 [ 382.266509][ T6562] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.285376][ T6562] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.66 [ 382.304495][ T6562] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.334724][ T6562] usb 2-1: config 0 descriptor?? [ 382.365158][ T8903] 9pnet: Insufficient options for proto=fd [ 382.396635][ T6562] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 382.426955][ T6562] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 382.789640][ T8937] FAULT_INJECTION: forcing a failure. [ 382.789640][ T8937] name failslab, interval 1, probability 0, space 0, times 0 [ 382.837778][ T8933] rxe_eth0 speed is unknown, defaulting to 1000 [ 382.859517][ T8937] CPU: 0 PID: 8937 Comm: syz.3.1592 Not tainted syzkaller #0 [ 382.866968][ T8937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 382.878934][ T8937] Call Trace: [ 382.878976][ T8937] [ 382.878986][ T8937] dump_stack_lvl+0x188/0x250 [ 382.879040][ T8937] ? show_regs_print_info+0x20/0x20 [ 382.879069][ T8937] ? load_image+0x410/0x410 [ 382.879095][ T8937] ? __lock_acquire+0x7d40/0x7d40 [ 382.879130][ T8937] should_fail+0x383/0x4b0 [ 382.879161][ T8937] should_failslab+0x5/0x20 [ 382.879182][ T8937] slab_pre_alloc_hook+0x51/0xc0 [ 382.879208][ T8937] kmem_cache_alloc_trace+0x47/0x290 [ 382.879227][ T8937] ? x509_cert_parse+0x97/0x7a0 [ 382.879335][ T8937] x509_cert_parse+0x97/0x7a0 [ 382.879364][ T8937] x509_key_preparse+0x60/0x5d0 [ 382.879388][ T8937] ? down_read+0x1aa/0x2e0 [ 382.879414][ T8937] asymmetric_key_preparse+0xa5/0x140 [ 382.879444][ T8937] key_create_or_update+0x432/0xa40 [ 382.879500][ T8937] ? security_key_permission+0x7c/0xa0 [ 382.879533][ T8937] ? key_type_put+0x20/0x20 [ 382.879557][ T8937] ? lookup_user_key_possessed+0x40/0x40 [ 382.879593][ T8937] ? __might_fault+0xb3/0x110 [ 382.879623][ T8937] __se_sys_add_key+0x34b/0x410 [ 382.879658][ T8937] ? __x64_sys_add_key+0xc0/0xc0 [ 382.879687][ T8937] ? lockdep_hardirqs_on+0x94/0x140 [ 382.879712][ T8937] ? __x64_sys_add_key+0x1c/0xc0 [ 382.879743][ T8937] do_syscall_64+0x4c/0xa0 [ 382.879764][ T8937] ? clear_bhb_loop+0x30/0x80 [ 382.879787][ T8937] ? clear_bhb_loop+0x30/0x80 [ 382.879812][ T8937] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 382.879841][ T8937] RIP: 0033:0x7f38bc6d9559 [ 382.879863][ T8937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.879882][ T8937] RSP: 002b:00007f38ba931028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 382.879906][ T8937] RAX: ffffffffffffffda RBX: 00007f38bc960fa0 RCX: 00007f38bc6d9559 [ 382.879922][ T8937] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 382.879938][ T8937] RBP: 00007f38bc770ab8 R08: ffffffffffffffff R09: 0000000000000000 [ 382.879952][ T8937] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 382.879965][ T8937] R13: 00007f38bc961038 R14: 00007f38bc960fa0 R15: 00007ffef40f5eb8 [ 382.879997][ T8937] [ 383.138878][ T6562] usb 2-1: USB disconnect, device number 5 [ 383.140582][ T6562] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 383.205102][ T4310] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 383.306503][ T8933] lo speed is unknown, defaulting to 1000 [ 383.502710][ T8959] loop3: detected capacity change from 0 to 164 [ 383.620840][ T4310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.620892][ T4310] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 383.620918][ T4310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.622871][ T4310] usb 5-1: config 0 descriptor?? [ 383.884424][ T8973] FAULT_INJECTION: forcing a failure. [ 383.884424][ T8973] name fail_futex, interval 1, probability 0, space 0, times 0 [ 383.884461][ T8973] CPU: 1 PID: 8973 Comm: syz.3.1603 Not tainted syzkaller #0 [ 383.884484][ T8973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 383.884498][ T8973] Call Trace: [ 383.884506][ T8973] [ 383.884515][ T8973] dump_stack_lvl+0x188/0x250 [ 383.884547][ T8973] ? show_regs_print_info+0x20/0x20 [ 383.884569][ T8973] ? load_image+0x410/0x410 [ 383.884591][ T8973] ? cgroup_rstat_updated+0xce/0x350 [ 383.884728][ T8973] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 383.884806][ T8973] should_fail+0x383/0x4b0 [ 383.884836][ T8973] get_futex_key+0x1a1/0x12d0 [ 383.884863][ T8973] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 383.884895][ T8973] ? futex_wait_restart+0x250/0x250 [ 383.884920][ T8973] ? lock_chain_count+0x20/0x20 [ 383.884950][ T8973] futex_wait_setup+0x4b/0x520 [ 383.884974][ T8973] ? lockdep_hardirqs_on+0x94/0x140 [ 383.885000][ T8973] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 383.885031][ T8973] futex_wait+0x22f/0x680 [ 383.885054][ T8973] ? __lock_acquire+0x13b3/0x7d40 [ 383.885079][ T8973] ? do_futex+0x12b0/0x12b0 [ 383.885132][ T8973] ? verify_lock_unused+0x140/0x140 [ 383.885160][ T8973] ? verify_lock_unused+0x140/0x140 [ 383.885185][ T8973] ? lockdep_hardirqs_on+0x94/0x140 [ 383.885214][ T8973] do_futex+0xdc2/0x12b0 [ 383.885239][ T8973] ? slab_free_freelist_hook+0xec/0x170 [ 383.885266][ T8973] ? btf_new_fd+0x58e/0x910 [ 383.885359][ T8973] ? kfree+0xef/0x2a0 [ 383.885389][ T8973] ? futex_exit_release+0x1c0/0x1c0 [ 383.885416][ T8973] ? __context_tracking_exit+0x4c/0x80 [ 383.885444][ T8973] __se_sys_futex+0x389/0x420 [ 383.885472][ T8973] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 383.885501][ T8973] ? __x64_sys_futex+0xf0/0xf0 [ 383.885531][ T8973] ? __x64_sys_futex+0x1d/0xf0 [ 383.885557][ T8973] do_syscall_64+0x4c/0xa0 [ 383.885583][ T8973] ? clear_bhb_loop+0x30/0x80 [ 383.885608][ T8973] ? clear_bhb_loop+0x30/0x80 [ 383.885633][ T8973] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 383.885658][ T8973] RIP: 0033:0x7f38bc6d9559 [ 383.885679][ T8973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.885697][ T8973] RSP: 002b:00007f38ba9310e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 383.885724][ T8973] RAX: ffffffffffffffda RBX: 00007f38bc960fa8 RCX: 00007f38bc6d9559 [ 383.885741][ T8973] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f38bc960fa8 [ 383.885756][ T8973] RBP: 00007f38bc960fa0 R08: 0000000000000000 R09: 0000000000000000 [ 383.885771][ T8973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.885785][ T8973] R13: 00007f38bc961038 R14: 00007ffef40f5dd0 R15: 00007ffef40f5eb8 [ 383.885815][ T8973] [ 383.990793][ T4310] usbhid 5-1:0.0: can't add hid device: -71 [ 383.990879][ T4310] usbhid: probe of 5-1:0.0 failed with error -71 [ 383.995961][ T4310] usb 5-1: USB disconnect, device number 10 [ 384.110349][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.110440][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.343914][ T8996] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 384.474996][ T4310] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 384.735144][ T4310] usb 5-1: Using ep0 maxpacket: 32 [ 384.855483][ T4310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.855769][ T4310] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.66 [ 384.855924][ T4310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.870931][ T4310] usb 5-1: config 0 descriptor?? [ 384.925387][ T4310] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 384.985526][ T4310] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 385.357283][ T4310] usb 5-1: USB disconnect, device number 11 [ 385.380202][ T4310] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 386.375180][ T4310] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 386.765486][ T4310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.765823][ T4310] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 386.766396][ T4310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.793054][ T4310] usb 6-1: config 0 descriptor?? [ 387.155373][ T4310] usbhid 6-1:0.0: can't add hid device: -71 [ 387.156241][ T4310] usbhid: probe of 6-1:0.0 failed with error -71 [ 387.171882][ T4310] usb 6-1: USB disconnect, device number 2 [ 387.221326][ T9006] FAULT_INJECTION: forcing a failure. [ 387.221326][ T9006] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 387.221370][ T9006] CPU: 0 PID: 9006 Comm: syz.4.1614 Not tainted syzkaller #0 [ 387.221394][ T9006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.221407][ T9006] Call Trace: [ 387.221415][ T9006] [ 387.221424][ T9006] dump_stack_lvl+0x188/0x250 [ 387.221456][ T9006] ? show_regs_print_info+0x20/0x20 [ 387.221480][ T9006] ? load_image+0x410/0x410 [ 387.221505][ T9006] ? __lock_acquire+0x7d40/0x7d40 [ 387.221540][ T9006] should_fail+0x383/0x4b0 [ 387.221569][ T9006] _copy_from_user+0x2e/0x170 [ 387.221595][ T9006] strndup_user+0xae/0x150 [ 387.221616][ T9006] __se_sys_fsopen+0xae/0x320 [ 387.221759][ T9006] do_syscall_64+0x4c/0xa0 [ 387.221782][ T9006] ? clear_bhb_loop+0x30/0x80 [ 387.221805][ T9006] ? clear_bhb_loop+0x30/0x80 [ 387.221831][ T9006] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 387.221857][ T9006] RIP: 0033:0x7f7ecc6c6559 [ 387.221876][ T9006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.221896][ T9006] RSP: 002b:00007f7eca91e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 387.221921][ T9006] RAX: ffffffffffffffda RBX: 00007f7ecc94dfa0 RCX: 00007f7ecc6c6559 [ 387.221939][ T9006] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000280 [ 387.221954][ T9006] RBP: 00007f7ecc75dab8 R08: 0000000000000000 R09: 0000000000000000 [ 387.221968][ T9006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.221982][ T9006] R13: 00007f7ecc94e038 R14: 00007f7ecc94dfa0 R15: 00007ffff64d40e8 [ 387.222014][ T9006] [ 387.675142][ T4310] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 387.915058][ T4310] usb 6-1: Using ep0 maxpacket: 32 [ 387.953688][ T9028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1624'. [ 388.035241][ T6562] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 388.045327][ T4310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.065850][ T4310] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.66 [ 388.084256][ T4310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.125244][ T4310] usb 6-1: config 0 descriptor?? [ 388.173943][ T4310] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 388.296676][ T4310] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 388.425453][ T6562] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.522117][ T6562] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 388.641329][ T6562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.903949][ T6562] usb 5-1: config 0 descriptor?? [ 389.041843][ T9034] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 389.375746][ T6562] usbhid 5-1:0.0: can't add hid device: -71 [ 389.456535][ T6562] usbhid: probe of 5-1:0.0 failed with error -71 [ 389.729823][ T6562] usb 5-1: USB disconnect, device number 12 [ 390.096835][ T6561] usb 6-1: USB disconnect, device number 3 [ 390.259006][ T6561] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 390.375150][ T6562] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 391.983991][ T9066] bridge0: port 3(syz_tun) entered blocking state [ 392.021185][ T9066] bridge0: port 3(syz_tun) entered disabled state [ 392.053337][ T9066] bridge0: port 3(syz_tun) entered blocking state [ 392.059991][ T9066] bridge0: port 3(syz_tun) entered forwarding state [ 392.225252][ T9072] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.262850][ T9091] FAULT_INJECTION: forcing a failure. [ 392.262850][ T9091] name failslab, interval 1, probability 0, space 0, times 0 [ 392.297704][ T9091] CPU: 1 PID: 9091 Comm: syz.4.1641 Not tainted syzkaller #0 [ 392.305162][ T9091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 392.315267][ T9091] Call Trace: [ 392.318589][ T9091] [ 392.321568][ T9091] dump_stack_lvl+0x188/0x250 [ 392.326296][ T9091] ? show_regs_print_info+0x20/0x20 [ 392.331565][ T9091] ? load_image+0x410/0x410 [ 392.336116][ T9091] ? __might_sleep+0xf0/0xf0 [ 392.340750][ T9091] ? __lock_acquire+0x7d40/0x7d40 [ 392.345886][ T9091] should_fail+0x383/0x4b0 [ 392.350354][ T9091] should_failslab+0x5/0x20 [ 392.354897][ T9091] slab_pre_alloc_hook+0x51/0xc0 [ 392.359875][ T9091] __kmalloc_node+0x6d/0x3a0 [ 392.364506][ T9091] ? kvmalloc_node+0x84/0x130 [ 392.369229][ T9091] kvmalloc_node+0x84/0x130 [ 392.373782][ T9091] __se_sys_add_key+0x27b/0x410 [ 392.378684][ T9091] ? __x64_sys_add_key+0xc0/0xc0 [ 392.383716][ T9091] ? lockdep_hardirqs_on+0x94/0x140 [ 392.388972][ T9091] ? __x64_sys_add_key+0x1c/0xc0 [ 392.393956][ T9091] do_syscall_64+0x4c/0xa0 [ 392.398414][ T9091] ? clear_bhb_loop+0x30/0x80 [ 392.403141][ T9091] ? clear_bhb_loop+0x30/0x80 [ 392.407869][ T9091] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 392.413810][ T9091] RIP: 0033:0x7f7ecc6c6559 [ 392.418268][ T9091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.437913][ T9091] RSP: 002b:00007f7eca91e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 392.446408][ T9091] RAX: ffffffffffffffda RBX: 00007f7ecc94dfa0 RCX: 00007f7ecc6c6559 [ 392.454610][ T9091] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000200000000100 [ 392.462629][ T9091] RBP: 00007f7ecc75dab8 R08: 000000003812133e R09: 0000000000000000 [ 392.470641][ T9091] R10: 00000000000000ad R11: 0000000000000246 R12: 0000000000000000 [ 392.478647][ T9091] R13: 00007f7ecc94e038 R14: 00007f7ecc94dfa0 R15: 00007ffff64d40e8 [ 392.486829][ T9091] [ 392.516007][ T9072] device bridge_slave_0 left promiscuous mode [ 392.541212][ T9072] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.622121][ T9097] FAULT_INJECTION: forcing a failure. [ 392.622121][ T9097] name failslab, interval 1, probability 0, space 0, times 0 [ 392.638794][ T9097] CPU: 1 PID: 9097 Comm: syz.5.1642 Not tainted syzkaller #0 [ 392.646236][ T9097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 392.656331][ T9097] Call Trace: [ 392.659645][ T9097] [ 392.662617][ T9097] dump_stack_lvl+0x188/0x250 [ 392.667351][ T9097] ? show_regs_print_info+0x20/0x20 [ 392.672590][ T9097] ? load_image+0x410/0x410 [ 392.677135][ T9097] ? __lock_acquire+0x12df/0x7d40 [ 392.682213][ T9097] should_fail+0x383/0x4b0 [ 392.686702][ T9097] should_failslab+0x5/0x20 [ 392.691251][ T9097] slab_pre_alloc_hook+0x51/0xc0 [ 392.696232][ T9097] ? dst_alloc+0x101/0x160 [ 392.700724][ T9097] kmem_cache_alloc+0x3d/0x280 [ 392.705536][ T9097] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 392.711331][ T9097] dst_alloc+0x101/0x160 [ 392.715615][ T9097] ip6_create_rt_rcu+0x233/0x560 [ 392.720607][ T9097] ? nexthop_fib6_nh+0x2b0/0x2b0 [ 392.725597][ T9097] ip6_pol_route_lookup+0xbf2/0xf00 [ 392.730933][ T9097] ? ip6_route_lookup+0x40/0x40 [ 392.735827][ T9097] ? stack_trace_save+0xa6/0xf0 [ 392.740787][ T9097] ? register_lock_class+0xc0/0x880 [ 392.746041][ T9097] fib6_rule_lookup+0x222/0x5e0 [ 392.750983][ T9097] ? __kasan_kmalloc+0xaf/0xe0 [ 392.755836][ T9097] ? ip6_route_lookup+0x40/0x40 [ 392.760731][ T9097] ? fib6_lookup+0x2d0/0x2d0 [ 392.765555][ T9097] ? do_syscall_64+0x4c/0xa0 [ 392.770197][ T9097] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 392.776328][ T9097] ? rt6_lookup+0xdd/0x220 [ 392.780794][ T9097] rt6_lookup+0x142/0x220 [ 392.785178][ T9097] ? ip6_pol_route_lookup+0xf00/0xf00 [ 392.790616][ T9097] ? __ipv6_sock_mc_join+0x492/0x7e0 [ 392.796110][ T9097] __ipv6_sock_mc_join+0x5c7/0x7e0 [ 392.801284][ T9097] ipv6_mcast_join_leave+0x19f/0x230 [ 392.806617][ T9097] ? compat_ipv6_mcast_join_leave+0x230/0x230 [ 392.812748][ T9097] ? __local_bh_enable_ip+0x136/0x1c0 [ 392.818156][ T9097] ? _local_bh_enable+0xa0/0xa0 [ 392.823062][ T9097] ipv6_setsockopt+0x9a6/0x3cc0 [ 392.827973][ T9097] ? futex_wait_queue_me+0x16e/0x440 [ 392.833412][ T9097] ? ipv6_update_options+0x400/0x400 [ 392.838742][ T9097] ? __lock_acquire+0x7d40/0x7d40 [ 392.843906][ T9097] ? mark_lock+0x94/0x320 [ 392.848278][ T9097] ? __lock_acquire+0x12df/0x7d40 [ 392.853363][ T9097] ? __lock_acquire+0x13b3/0x7d40 [ 392.858444][ T9097] ? verify_lock_unused+0x140/0x140 [ 392.863690][ T9097] ? aa_label_sk_perm+0x3e6/0x540 [ 392.868779][ T9097] ? aa_sk_perm+0x910/0x910 [ 392.873340][ T9097] ? __might_sleep+0xf0/0xf0 [ 392.877977][ T9097] ? rcu_lock_release+0x9/0x20 [ 392.882800][ T9097] ? __lock_acquire+0x7d40/0x7d40 [ 392.887893][ T9097] ? aa_sk_perm+0x7dc/0x910 [ 392.892457][ T9097] ? aa_af_perm+0x340/0x340 [ 392.897002][ T9097] ? __fget_files+0x402/0x470 [ 392.901728][ T9097] ? aa_sock_opt_perm+0x74/0x100 [ 392.906718][ T9097] ? udpv6_setsockopt+0x7a/0xa0 [ 392.911616][ T9097] ? sock_common_recvmsg+0x1c0/0x1c0 [ 392.916963][ T9097] __sys_setsockopt+0x2bf/0x3d0 [ 392.921881][ T9097] __x64_sys_setsockopt+0xb1/0xc0 [ 392.926963][ T9097] do_syscall_64+0x4c/0xa0 [ 392.931430][ T9097] ? clear_bhb_loop+0x30/0x80 [ 392.936150][ T9097] ? clear_bhb_loop+0x30/0x80 [ 392.940890][ T9097] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 392.946835][ T9097] RIP: 0033:0x7fceec20a559 [ 392.951305][ T9097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.970950][ T9097] RSP: 002b:00007fceea462028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 392.979493][ T9097] RAX: ffffffffffffffda RBX: 00007fceec491fa0 RCX: 00007fceec20a559 [ 392.987506][ T9097] RDX: 000000000000002a RSI: 0000000000000029 RDI: 0000000000000006 [ 392.995520][ T9097] RBP: 00007fceec2a1ab8 R08: 0000000000000088 R09: 0000000000000000 [ 393.003529][ T9097] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000000 [ 393.011528][ T9097] R13: 00007fceec492038 R14: 00007fceec491fa0 R15: 00007fff4485fa08 [ 393.019536][ T9097] [ 393.134842][ T9106] loop2: detected capacity change from 0 to 128 [ 393.169403][ T9106] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 393.320413][ T9106] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 393.339718][ T9106] FAT-fs (loop2): Filesystem has been set read-only [ 393.457443][ T9120] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 394.174393][ T9126] FAULT_INJECTION: forcing a failure. [ 394.174393][ T9126] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 394.188264][ T9126] CPU: 1 PID: 9126 Comm: syz.3.1651 Not tainted syzkaller #0 [ 394.195859][ T9126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 394.205953][ T9126] Call Trace: [ 394.209279][ T9126] [ 394.212244][ T9126] dump_stack_lvl+0x188/0x250 [ 394.216973][ T9126] ? show_regs_print_info+0x20/0x20 [ 394.222219][ T9126] ? load_image+0x410/0x410 [ 394.226778][ T9126] should_fail+0x383/0x4b0 [ 394.231242][ T9126] prepare_alloc_pages+0x1e3/0x5b0 [ 394.236434][ T9126] __alloc_pages+0x11b/0x480 [ 394.241073][ T9126] ? zone_statistics+0x170/0x170 [ 394.246066][ T9126] ? rcu_lock_acquire+0x30/0x30 [ 394.251050][ T9126] ? alloc_pages+0x452/0x560 [ 394.255727][ T9126] __get_free_pages+0x8/0x30 [ 394.260361][ T9126] __tlb_remove_page_size+0x1f2/0x3f0 [ 394.265949][ T9126] unmap_page_range+0xfcf/0x2410 [ 394.270968][ T9126] unmap_vmas+0x131/0x250 [ 394.275464][ T9126] ? unmap_page_range+0x2410/0x2410 [ 394.280695][ T9126] ? __mutex_lock_common+0x435/0x2400 [ 394.286109][ T9126] ? exit_mm_release+0x16/0x30 [ 394.291009][ T9126] exit_mmap+0x3b9/0x640 [ 394.295332][ T9126] ? vm_brk+0x20/0x20 [ 394.299368][ T9126] ? uprobe_clear_state+0x2f6/0x460 [ 394.304645][ T9126] __mmput+0x115/0x390 [ 394.308759][ T9126] exit_mm+0x632/0x7b0 [ 394.312863][ T9126] ? perf_pmu_migrate_context+0xb70/0xb70 [ 394.318692][ T9126] ? do_exit+0x2110/0x2110 [ 394.323143][ T9126] ? hrtimer_try_to_cancel+0x71/0x420 [ 394.328622][ T9126] ? __ia32_sys_timer_delete+0x40/0x40 [ 394.334124][ T9126] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 394.339648][ T9126] ? tty_audit_exit+0x149/0x1f0 [ 394.344621][ T9126] do_exit+0x5b8/0x2110 [ 394.348822][ T9126] ? put_task_struct+0x80/0x80 [ 394.353737][ T9126] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 394.359759][ T9126] ? _raw_spin_lock_irq+0xb7/0xf0 [ 394.364825][ T9126] do_group_exit+0x12c/0x2f0 [ 394.369452][ T9126] ? lockdep_hardirqs_on+0x94/0x140 [ 394.374693][ T9126] get_signal+0x7eb/0x12e0 [ 394.379247][ T9126] arch_do_signal_or_restart+0xe6/0x12a0 [ 394.385041][ T9126] ? futex_exit_release+0x1c0/0x1c0 [ 394.390283][ T9126] ? get_sigframe_size+0x10/0x10 [ 394.395260][ T9126] ? __context_tracking_exit+0x4c/0x80 [ 394.400770][ T9126] ? exit_to_user_mode_loop+0x3b/0x130 [ 394.406266][ T9126] exit_to_user_mode_loop+0x9e/0x130 [ 394.411586][ T9126] exit_to_user_mode_prepare+0xee/0x180 [ 394.417173][ T9126] syscall_exit_to_user_mode+0x16/0x40 [ 394.422669][ T9126] do_syscall_64+0x58/0xa0 [ 394.427128][ T9126] ? clear_bhb_loop+0x30/0x80 [ 394.431884][ T9126] ? clear_bhb_loop+0x30/0x80 [ 394.436602][ T9126] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 394.442533][ T9126] RIP: 0033:0x7f38bc6d9559 [ 394.446979][ T9126] Code: Unable to access opcode bytes at RIP 0x7f38bc6d952f. [ 394.454382][ T9126] RSP: 002b:00007f38ba9310e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 394.462838][ T9126] RAX: 0000000000000001 RBX: 00007f38bc960fa8 RCX: 00007f38bc6d9559 [ 394.470844][ T9126] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f38bc960fac [ 394.478848][ T9126] RBP: 00007f38bc960fa0 R08: 003a5927509dc5e6 R09: 0000000000000000 [ 394.486854][ T9126] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 394.494871][ T9126] R13: 00007f38bc961038 R14: 00007ffef40f5dd0 R15: 00007ffef40f5eb8 [ 394.502892][ T9126] [ 394.805260][ T9121] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 394.958313][ T9129] FAULT_INJECTION: forcing a failure. [ 394.958313][ T9129] name failslab, interval 1, probability 0, space 0, times 0 [ 395.167439][ T9129] CPU: 1 PID: 9129 Comm: syz.4.1653 Not tainted syzkaller #0 [ 395.174890][ T9129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 395.184981][ T9129] Call Trace: [ 395.188300][ T9129] [ 395.191262][ T9129] dump_stack_lvl+0x188/0x250 [ 395.195990][ T9129] ? show_regs_print_info+0x20/0x20 [ 395.201314][ T9129] ? load_image+0x410/0x410 [ 395.206161][ T9129] ? __might_sleep+0xf0/0xf0 [ 395.210803][ T9129] ? __lock_acquire+0x7d40/0x7d40 [ 395.215876][ T9129] should_fail+0x383/0x4b0 [ 395.220443][ T9129] should_failslab+0x5/0x20 [ 395.224991][ T9129] slab_pre_alloc_hook+0x51/0xc0 [ 395.230022][ T9129] ? x509_cert_parse+0x2d1/0x7a0 [ 395.235014][ T9129] __kmalloc_track_caller+0x69/0x330 [ 395.240341][ T9129] ? x509_cert_parse+0x2d1/0x7a0 [ 395.245322][ T9129] kmemdup+0x22/0x50 [ 395.249258][ T9129] x509_cert_parse+0x2d1/0x7a0 [ 395.254086][ T9129] x509_key_preparse+0x60/0x5d0 [ 395.259243][ T9129] ? down_read+0x1aa/0x2e0 [ 395.263737][ T9129] asymmetric_key_preparse+0xa5/0x140 [ 395.269307][ T9129] key_create_or_update+0x432/0xa40 [ 395.274550][ T9129] ? security_key_permission+0x7c/0xa0 [ 395.280221][ T9129] ? key_type_put+0x20/0x20 [ 395.284800][ T9129] ? lookup_user_key_possessed+0x40/0x40 [ 395.290493][ T9129] ? __might_fault+0xb3/0x110 [ 395.295222][ T9129] __se_sys_add_key+0x34b/0x410 [ 395.300123][ T9129] ? __x64_sys_add_key+0xc0/0xc0 [ 395.305116][ T9129] ? lockdep_hardirqs_on+0x94/0x140 [ 395.310357][ T9129] ? __x64_sys_add_key+0x1c/0xc0 [ 395.315354][ T9129] do_syscall_64+0x4c/0xa0 [ 395.319843][ T9129] ? clear_bhb_loop+0x30/0x80 [ 395.324571][ T9129] ? clear_bhb_loop+0x30/0x80 [ 395.329304][ T9129] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 395.335241][ T9129] RIP: 0033:0x7f7ecc6c6559 [ 395.339696][ T9129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.359350][ T9129] RSP: 002b:00007f7eca91e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 395.367818][ T9129] RAX: ffffffffffffffda RBX: 00007f7ecc94dfa0 RCX: 00007f7ecc6c6559 [ 395.375824][ T9129] RDX: 0000200000000540 RSI: 0000200000000500 RDI: 00002000000004c0 [ 395.383840][ T9129] RBP: 00007f7ecc75dab8 R08: ffffffffffffffff R09: 0000000000000000 [ 395.391859][ T9129] R10: 00000000000000da R11: 0000000000000246 R12: 0000000000000000 [ 395.399864][ T9129] R13: 00007f7ecc94e038 R14: 00007f7ecc94dfa0 R15: 00007ffff64d40e8 [ 395.407891][ T9129] [ 396.610738][ T9159] FAULT_INJECTION: forcing a failure. [ 396.610738][ T9159] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 396.624292][ T9159] CPU: 0 PID: 9159 Comm: syz.4.1662 Not tainted syzkaller #0 [ 396.631710][ T9159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 396.641813][ T9159] Call Trace: [ 396.645126][ T9159] [ 396.648093][ T9159] dump_stack_lvl+0x188/0x250 [ 396.652818][ T9159] ? show_regs_print_info+0x20/0x20 [ 396.658057][ T9159] ? load_image+0x410/0x410 [ 396.662610][ T9159] ? mark_lock+0x94/0x320 [ 396.666972][ T9159] should_fail+0x383/0x4b0 [ 396.671428][ T9159] prepare_alloc_pages+0x1e3/0x5b0 [ 396.676582][ T9159] __alloc_pages+0x11b/0x480 [ 396.681216][ T9159] ? zone_statistics+0x170/0x170 [ 396.686192][ T9159] ? rcu_lock_acquire+0x30/0x30 [ 396.691083][ T9159] ? alloc_pages+0x452/0x560 [ 396.695723][ T9159] __get_free_pages+0x8/0x30 [ 396.700354][ T9159] __tlb_remove_page_size+0x1f2/0x3f0 [ 396.701816][ T9163] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1664'. [ 396.705778][ T9159] unmap_page_range+0xfcf/0x2410 [ 396.706215][ T9159] unmap_vmas+0x131/0x250 [ 396.725023][ T9159] ? unmap_page_range+0x2410/0x2410 [ 396.730268][ T9159] ? __mutex_lock_common+0x435/0x2400 [ 396.735685][ T9159] ? exit_mm_release+0x16/0x30 [ 396.740490][ T9159] exit_mmap+0x3b9/0x640 [ 396.744771][ T9159] ? vm_brk+0x20/0x20 [ 396.748902][ T9159] ? uprobe_clear_state+0x2f6/0x460 [ 396.754147][ T9159] __mmput+0x115/0x390 [ 396.758253][ T9159] exit_mm+0x632/0x7b0 [ 396.762947][ T9159] ? perf_pmu_migrate_context+0xb70/0xb70 [ 396.768730][ T9159] ? do_exit+0x2110/0x2110 [ 396.773191][ T9159] ? __ia32_sys_timer_delete+0x40/0x40 [ 396.778689][ T9159] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 396.784197][ T9159] ? tty_audit_exit+0x149/0x1f0 [ 396.789092][ T9159] do_exit+0x5b8/0x2110 [ 396.793373][ T9159] ? put_task_struct+0x80/0x80 [ 396.798175][ T9159] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 396.804210][ T9159] ? _raw_spin_lock_irq+0xb7/0xf0 [ 396.809286][ T9159] do_group_exit+0x12c/0x2f0 [ 396.813914][ T9159] ? lockdep_hardirqs_on+0x94/0x140 [ 396.819155][ T9159] get_signal+0x7eb/0x12e0 [ 396.823630][ T9159] arch_do_signal_or_restart+0xe6/0x12a0 [ 396.829303][ T9159] ? rcu_lock_release+0x9/0x20 [ 396.834117][ T9159] ? futex_exit_release+0x1c0/0x1c0 [ 396.839360][ T9159] ? get_sigframe_size+0x10/0x10 [ 396.844336][ T9159] ? __context_tracking_exit+0x4c/0x80 [ 396.849839][ T9159] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 396.855867][ T9159] ? exit_to_user_mode_loop+0x3b/0x130 [ 396.861384][ T9159] exit_to_user_mode_loop+0x9e/0x130 [ 396.866703][ T9159] exit_to_user_mode_prepare+0xee/0x180 [ 396.872286][ T9159] syscall_exit_to_user_mode+0x16/0x40 [ 396.877784][ T9159] do_syscall_64+0x58/0xa0 [ 396.882251][ T9159] ? clear_bhb_loop+0x30/0x80 [ 396.886971][ T9159] ? clear_bhb_loop+0x30/0x80 [ 396.891688][ T9159] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 396.897615][ T9159] RIP: 0033:0x7f7ecc6c6559 [ 396.902116][ T9159] Code: Unable to access opcode bytes at RIP 0x7f7ecc6c652f. [ 396.909508][ T9159] RSP: 002b:00007f7eca91e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 396.917956][ T9159] RAX: 0000000000000001 RBX: 00007f7ecc94dfa8 RCX: 00007f7ecc6c6559 [ 396.926005][ T9159] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7ecc94dfac [ 396.934020][ T9159] RBP: 00007f7ecc94dfa0 R08: 001dbcef7f43fcce R09: 0000000000000000 [ 396.942030][ T9159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.950043][ T9159] R13: 00007f7ecc94e038 R14: 00007ffff64d4000 R15: 00007ffff64d40e8 [ 396.958071][ T9159] [ 397.052795][ T9174] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 397.276175][ T9186] X.509: Got cert with pkey (7) and sig (98) algorithm OIDs [ 397.430036][ T9190] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 398.361465][ T9192] loop3: detected capacity change from 0 to 512 [ 400.384629][ T9203] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1678'. [ 400.628926][ T9223] loop1: detected capacity change from 0 to 512 [ 400.942893][ T9241] netlink: 'syz.3.1694': attribute type 2 has an invalid length. [ 400.997047][ T9244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1695'. [ 401.104626][ T9234] loop4: detected capacity change from 0 to 8192 [ 401.254612][ T9255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1699'. [ 401.356486][ T9255] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1699'. [ 402.961014][ T9299] xt_TPROXY: Can be used only with -p tcp or -p udp [ 403.019962][ T9299] FAULT_INJECTION: forcing a failure. [ 403.019962][ T9299] name failslab, interval 1, probability 0, space 0, times 0 [ 403.033790][ T9299] CPU: 1 PID: 9299 Comm: syz.4.1710 Not tainted syzkaller #0 [ 403.041216][ T9299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 403.051317][ T9299] Call Trace: [ 403.054632][ T9299] [ 403.057590][ T9299] dump_stack_lvl+0x188/0x250 [ 403.062308][ T9299] ? show_regs_print_info+0x20/0x20 [ 403.067536][ T9299] ? load_image+0x410/0x410 [ 403.072114][ T9299] should_fail+0x383/0x4b0 [ 403.076589][ T9299] should_failslab+0x5/0x20 [ 403.081135][ T9299] slab_pre_alloc_hook+0x51/0xc0 [ 403.086119][ T9299] ? radix_tree_node_alloc+0x7e/0x3a0 [ 403.091603][ T9299] kmem_cache_alloc+0x3d/0x280 [ 403.096408][ T9299] radix_tree_node_alloc+0x7e/0x3a0 [ 403.101659][ T9299] idr_get_free+0x28b/0xa10 [ 403.106215][ T9299] idr_alloc_cyclic+0x286/0x610 [ 403.111118][ T9299] ? idr_alloc+0x2e0/0x2e0 [ 403.115580][ T9299] ? do_raw_spin_lock+0x128/0x2f0 [ 403.120648][ T9299] ? __radix_tree_preload+0x3cf/0x450 [ 403.126055][ T9299] ? bpf_map_alloc_id+0x2e/0x180 [ 403.131167][ T9299] bpf_map_alloc_id+0x4d/0x180 [ 403.135972][ T9299] map_create+0x19db/0x2330 [ 403.140518][ T9299] ? bpf_lsm_bpf+0x5/0x10 [ 403.144887][ T9299] __sys_bpf+0x30a/0x6f0 [ 403.149169][ T9299] ? bpf_link_show_fdinfo+0x380/0x380 [ 403.154617][ T9299] __x64_sys_bpf+0x78/0x90 [ 403.159069][ T9299] do_syscall_64+0x4c/0xa0 [ 403.163520][ T9299] ? clear_bhb_loop+0x30/0x80 [ 403.168235][ T9299] ? clear_bhb_loop+0x30/0x80 [ 403.172952][ T9299] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 403.178887][ T9299] RIP: 0033:0x7f7ecc6c6559 [ 403.183459][ T9299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.203334][ T9299] RSP: 002b:00007f7eca91e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 403.211794][ T9299] RAX: ffffffffffffffda RBX: 00007f7ecc94dfa0 RCX: 00007f7ecc6c6559 [ 403.219814][ T9299] RDX: 0000000000000048 RSI: 0000200000000280 RDI: 0000000000000000 [ 403.227826][ T9299] RBP: 00007f7ecc75dab8 R08: 0000000000000000 R09: 0000000000000000 [ 403.235841][ T9299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.243874][ T9299] R13: 00007f7ecc94e038 R14: 00007f7ecc94dfa0 R15: 00007ffff64d40e8 [ 403.251899][ T9299] [ 403.356238][ T9314] syz.5.1718 (9314): /proc/9311/oom_adj is deprecated, please use /proc/9311/oom_score_adj instead. [ 403.430236][ T9317] loop5: detected capacity change from 0 to 512 [ 403.466223][ T9317] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 403.696239][ T9327] loop3: detected capacity change from 0 to 512 [ 405.045503][ T9350] loop4: detected capacity change from 0 to 8192 [ 405.217563][ T9372] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1738'. [ 405.252885][ T9372] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.260233][ T9372] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.303108][ T9376] loop1: detected capacity change from 0 to 512 [ 405.350534][ T9377] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1738'. [ 405.434298][ T9377] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.441504][ T9377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.451409][ T9377] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.458558][ T9377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.257899][ T9377] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1738'. [ 406.298024][ T9377] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.305261][ T9377] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.359374][ T9384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1741'. [ 406.420455][ T9384] device ip6gre1 entered promiscuous mode [ 408.170656][ T9434] loop4: detected capacity change from 0 to 512 [ 408.229042][ T9393] bridge0: port 3(syz_tun) entered disabled state [ 409.865283][ T9393] bridge0: port 3(syz_tun) entered disabled state [ 409.918220][ T9446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1757'. [ 410.116256][ T9393] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.290516][ T9467] loop4: detected capacity change from 0 to 512 [ 410.321244][ T9470] FAULT_INJECTION: forcing a failure. [ 410.321244][ T9470] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 410.334748][ T9470] CPU: 1 PID: 9470 Comm: syz.3.1768 Not tainted syzkaller #0 [ 410.342157][ T9470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 410.352270][ T9470] Call Trace: [ 410.355575][ T9470] [ 410.358528][ T9470] dump_stack_lvl+0x188/0x250 [ 410.363249][ T9470] ? show_regs_print_info+0x20/0x20 [ 410.368477][ T9470] ? load_image+0x410/0x410 [ 410.373026][ T9470] ? uncharge_page+0x490/0x490 [ 410.377827][ T9470] should_fail+0x383/0x4b0 [ 410.382380][ T9470] prepare_alloc_pages+0x1e3/0x5b0 [ 410.387530][ T9470] __alloc_pages+0x11b/0x480 [ 410.392154][ T9470] ? zone_statistics+0x170/0x170 [ 410.397131][ T9470] ? rcu_lock_acquire+0x30/0x30 [ 410.402024][ T9470] ? alloc_pages+0x452/0x560 [ 410.406651][ T9470] __get_free_pages+0x8/0x30 [ 410.411275][ T9470] __tlb_remove_page_size+0x1f2/0x3f0 [ 410.416686][ T9470] unmap_page_range+0xfcf/0x2410 [ 410.421715][ T9470] unmap_vmas+0x131/0x250 [ 410.426081][ T9470] ? unmap_page_range+0x2410/0x2410 [ 410.431813][ T9470] ? __mutex_lock_common+0x435/0x2400 [ 410.437231][ T9470] ? exit_mm_release+0x16/0x30 [ 410.442047][ T9470] exit_mmap+0x3b9/0x640 [ 410.446350][ T9470] ? vm_brk+0x20/0x20 [ 410.450382][ T9470] ? uprobe_clear_state+0x2f6/0x460 [ 410.455617][ T9470] __mmput+0x115/0x390 [ 410.459719][ T9470] exit_mm+0x632/0x7b0 [ 410.463811][ T9470] ? perf_pmu_migrate_context+0xb70/0xb70 [ 410.469565][ T9470] ? do_exit+0x2110/0x2110 [ 410.474014][ T9470] ? __ia32_sys_timer_delete+0x40/0x40 [ 410.479503][ T9470] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 410.485012][ T9470] ? tty_audit_exit+0x149/0x1f0 [ 410.488119][ T9472] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 410.489897][ T9470] do_exit+0x5b8/0x2110 [ 410.512218][ T9470] ? put_task_struct+0x80/0x80 [ 410.517021][ T9470] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 410.523049][ T9470] ? _raw_spin_lock_irq+0xb7/0xf0 [ 410.528110][ T9470] do_group_exit+0x12c/0x2f0 [ 410.532729][ T9470] ? lockdep_hardirqs_on+0x94/0x140 [ 410.537976][ T9470] get_signal+0x7eb/0x12e0 [ 410.542452][ T9470] arch_do_signal_or_restart+0xe6/0x12a0 [ 410.548160][ T9470] ? futex_exit_release+0x1c0/0x1c0 [ 410.553400][ T9470] ? get_sigframe_size+0x10/0x10 [ 410.558369][ T9470] ? __context_tracking_exit+0x4c/0x80 [ 410.563875][ T9470] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 410.569904][ T9470] ? exit_to_user_mode_loop+0x3b/0x130 [ 410.575405][ T9470] exit_to_user_mode_loop+0x9e/0x130 [ 410.580724][ T9470] exit_to_user_mode_prepare+0xee/0x180 [ 410.586300][ T9470] syscall_exit_to_user_mode+0x16/0x40 [ 410.591791][ T9470] do_syscall_64+0x58/0xa0 [ 410.596235][ T9470] ? clear_bhb_loop+0x30/0x80 [ 410.600948][ T9470] ? clear_bhb_loop+0x30/0x80 [ 410.605659][ T9470] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 410.611618][ T9470] RIP: 0033:0x7f38bc6d9559 [ 410.616064][ T9470] Code: Unable to access opcode bytes at RIP 0x7f38bc6d952f. [ 410.623455][ T9470] RSP: 002b:00007f38ba9310e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 410.631917][ T9470] RAX: fffffffffffffe00 RBX: 00007f38bc960fa8 RCX: 00007f38bc6d9559 [ 410.639917][ T9470] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f38bc960fa8 [ 410.647917][ T9470] RBP: 00007f38bc960fa0 R08: 0000000000000000 R09: 0000000000000000 [ 410.655914][ T9470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.663930][ T9470] R13: 00007f38bc961038 R14: 00007ffef40f5dd0 R15: 00007ffef40f5eb8 [ 410.671933][ T9470] [ 411.555768][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1770'. [ 411.790072][ T9489] loop4: detected capacity change from 0 to 128 [ 411.947789][ T9393] device bridge_slave_1 left promiscuous mode [ 411.954041][ T9393] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.018355][ T9393] bond0: (slave bond_slave_0): Releasing backup interface [ 412.074110][ T9393] bond0: (slave bond_slave_1): Releasing backup interface [ 412.122896][ T9393] team0: Port device team_slave_0 removed [ 412.172154][ T9393] team0: Port device team_slave_1 removed [ 412.180649][ T9393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.207630][ T9393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.236801][ T9393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.271767][ T9393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.731207][ T9393] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.741069][ T9393] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.752511][ T9393] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.761478][ T9393] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.883459][ T4966] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 412.903217][ T4966] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 412.935559][ T4267] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 412.985163][ T9496] netlink: 'syz.4.1777': attribute type 30 has an invalid length. [ 413.153824][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1782'. [ 413.250534][ T9519] loop4: detected capacity change from 0 to 512 [ 413.316415][ T4275] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 413.495091][ T4275] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 414.285004][ T7] Process accounting resumed [ 414.358796][ T9546] FAULT_INJECTION: forcing a failure. [ 414.358796][ T9546] name failslab, interval 1, probability 0, space 0, times 0 [ 414.390360][ T9546] CPU: 0 PID: 9546 Comm: syz.5.1793 Not tainted syzkaller #0 [ 414.397818][ T9546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 414.407907][ T9546] Call Trace: [ 414.411206][ T9546] [ 414.414162][ T9546] dump_stack_lvl+0x188/0x250 [ 414.418910][ T9546] ? show_regs_print_info+0x20/0x20 [ 414.424149][ T9546] ? load_image+0x410/0x410 [ 414.428702][ T9546] ? __might_sleep+0xf0/0xf0 [ 414.433325][ T9546] ? __lock_acquire+0x7d40/0x7d40 [ 414.438380][ T9546] ? _raw_spin_lock_irq+0xb7/0xf0 [ 414.443463][ T9546] should_fail+0x383/0x4b0 [ 414.447925][ T9546] should_failslab+0x5/0x20 [ 414.452460][ T9546] slab_pre_alloc_hook+0x51/0xc0 [ 414.457434][ T9546] __kmalloc+0x6b/0x340 [ 414.461617][ T9546] ? copy_net_ns+0x10b/0x5b0 [ 414.466338][ T9546] copy_net_ns+0x10b/0x5b0 [ 414.470798][ T9546] create_new_namespaces+0x3ce/0x700 [ 414.476226][ T9546] unshare_nsproxy_namespaces+0x116/0x160 [ 414.481989][ T9546] ksys_unshare+0x4f6/0x8e0 [ 414.486529][ T9546] ? __lock_acquire+0x7d40/0x7d40 [ 414.491604][ T9546] ? sighand_ctor+0x40/0x40 [ 414.496141][ T9546] ? lock_chain_count+0x20/0x20 [ 414.501038][ T9546] ? syscall_enter_from_user_mode+0x21/0x70 [ 414.506989][ T9546] __x64_sys_unshare+0x34/0x40 [ 414.511785][ T9546] do_syscall_64+0x4c/0xa0 [ 414.516229][ T9546] ? clear_bhb_loop+0x30/0x80 [ 414.520939][ T9546] ? clear_bhb_loop+0x30/0x80 [ 414.525648][ T9546] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 414.531572][ T9546] RIP: 0033:0x7fceec20a559 [ 414.536023][ T9546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.555682][ T9546] RSP: 002b:00007fceea462028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 414.564136][ T9546] RAX: ffffffffffffffda RBX: 00007fceec491fa0 RCX: 00007fceec20a559 [ 414.572139][ T9546] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040040400 [ 414.580135][ T9546] RBP: 00007fceec2a1ab8 R08: 0000000000000000 R09: 0000000000000000 [ 414.588133][ T9546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.596134][ T9546] R13: 00007fceec492038 R14: 00007fceec491fa0 R15: 00007fff4485fa08 [ 414.604158][ T9546] [ 414.663188][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1796'. [ 414.808778][ T9569] loop5: detected capacity change from 0 to 512 [ 415.860640][ T9593] overlayfs: conflicting lowerdir path [ 416.564744][ T9606] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.755199][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 417.060406][ T9635] loop5: detected capacity change from 0 to 512 [ 418.195085][ T4267] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 418.349511][ T9669] FAULT_INJECTION: forcing a failure. [ 418.349511][ T9669] name failslab, interval 1, probability 0, space 0, times 0 [ 418.370445][ T9669] CPU: 0 PID: 9669 Comm: syz.1.1834 Not tainted syzkaller #0 [ 418.377889][ T9669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 418.387974][ T9669] Call Trace: [ 418.391280][ T9669] [ 418.394231][ T9669] dump_stack_lvl+0x188/0x250 [ 418.398944][ T9669] ? show_regs_print_info+0x20/0x20 [ 418.404179][ T9669] ? load_image+0x410/0x410 [ 418.408763][ T9669] ? __lock_acquire+0x7d40/0x7d40 [ 418.413827][ T9669] should_fail+0x383/0x4b0 [ 418.418282][ T9669] should_failslab+0x5/0x20 [ 418.422814][ T9669] slab_pre_alloc_hook+0x51/0xc0 [ 418.427782][ T9669] __kmalloc+0x6b/0x340 [ 418.431967][ T9669] ? security_prepare_creds+0x47/0x130 [ 418.437456][ T9669] ? prepare_creds+0x3c/0x610 [ 418.442172][ T9669] security_prepare_creds+0x47/0x130 [ 418.447500][ T9669] prepare_creds+0x450/0x610 [ 418.452133][ T9669] __sys_setreuid+0x101/0x980 [ 418.456854][ T9669] ? syscall_enter_from_user_mode+0x21/0x70 [ 418.462786][ T9669] ? lockdep_hardirqs_on+0x94/0x140 [ 418.468036][ T9669] do_syscall_64+0x4c/0xa0 [ 418.472489][ T9669] ? clear_bhb_loop+0x30/0x80 [ 418.477198][ T9669] ? clear_bhb_loop+0x30/0x80 [ 418.481913][ T9669] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 418.487843][ T9669] RIP: 0033:0x7f9fdf6bd559 [ 418.492312][ T9669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.512081][ T9669] RSP: 002b:00007f9fdd915028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 418.520646][ T9669] RAX: ffffffffffffffda RBX: 00007f9fdf944fa0 RCX: 00007f9fdf6bd559 [ 418.528703][ T9669] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 418.536730][ T9669] RBP: 00007f9fdf754ab8 R08: 0000000000000000 R09: 0000000000000000 [ 418.544738][ T9669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.552743][ T9669] R13: 00007f9fdf945038 R14: 00007f9fdf944fa0 R15: 00007ffe971a4ff8 [ 418.560773][ T9669] [ 419.558361][ T9684] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.564031][ T4267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.565658][ T9684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.576582][ T4267] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 419.592765][ T4267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.603696][ T4267] usb 4-1: config 0 descriptor?? [ 419.612153][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 419.699287][ T9684] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 419.898030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 419.939636][ T9693] loop1: detected capacity change from 0 to 256 [ 419.965087][ T4267] usbhid 4-1:0.0: can't add hid device: -71 [ 419.972482][ T4267] usbhid: probe of 4-1:0.0 failed with error -71 [ 420.129058][ T4267] usb 4-1: USB disconnect, device number 11 [ 420.581436][ T9700] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1845'. [ 420.726822][ T9707] loop5: detected capacity change from 0 to 128 [ 420.748390][ T4267] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 420.771151][ T9707] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 420.954531][ T9717] loop1: detected capacity change from 0 to 512 [ 421.020786][ T4267] usb 4-1: Using ep0 maxpacket: 32 [ 422.140571][ T4267] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 422.184916][ T4267] usb 4-1: can't read configurations, error -71 [ 422.426713][ T9748] loop3: detected capacity change from 0 to 256 [ 422.526441][ T9754] bridge0: port 1(syz_tun) entered blocking state [ 422.533158][ T9754] bridge0: port 1(syz_tun) entered disabled state [ 422.571994][ T9754] bridge0: port 1(syz_tun) entered disabled state [ 422.584314][ T9756] FAULT_INJECTION: forcing a failure. [ 422.584314][ T9756] name failslab, interval 1, probability 0, space 0, times 0 [ 422.603424][ T9756] CPU: 0 PID: 9756 Comm: syz.5.1871 Not tainted syzkaller #0 [ 422.610863][ T9756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 422.621044][ T9756] Call Trace: [ 422.624360][ T9756] [ 422.627329][ T9756] dump_stack_lvl+0x188/0x250 [ 422.632066][ T9756] ? show_regs_print_info+0x20/0x20 [ 422.637279][ T9756] ? load_image+0x410/0x410 [ 422.641814][ T9756] ? __lock_acquire+0x7d40/0x7d40 [ 422.646869][ T9756] should_fail+0x383/0x4b0 [ 422.651335][ T9756] should_failslab+0x5/0x20 [ 422.655871][ T9756] slab_pre_alloc_hook+0x51/0xc0 [ 422.660864][ T9756] __kmalloc+0x6b/0x340 [ 422.665035][ T9756] ? security_prepare_creds+0x47/0x130 [ 422.670520][ T9756] ? prepare_creds+0x3c/0x610 [ 422.675217][ T9756] security_prepare_creds+0x47/0x130 [ 422.680520][ T9756] prepare_creds+0x450/0x610 [ 422.685125][ T9756] __sys_setreuid+0x101/0x980 [ 422.689832][ T9756] ? syscall_enter_from_user_mode+0x21/0x70 [ 422.695746][ T9756] ? lockdep_hardirqs_on+0x94/0x140 [ 422.700988][ T9756] do_syscall_64+0x4c/0xa0 [ 422.705437][ T9756] ? clear_bhb_loop+0x30/0x80 [ 422.710152][ T9756] ? clear_bhb_loop+0x30/0x80 [ 422.714875][ T9756] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 422.720796][ T9756] RIP: 0033:0x7fceec20a559 [ 422.725234][ T9756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.745061][ T9756] RSP: 002b:00007fceea462028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 422.753516][ T9756] RAX: ffffffffffffffda RBX: 00007fceec491fa0 RCX: 00007fceec20a559 [ 422.761539][ T9756] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 422.769520][ T9756] RBP: 00007fceec2a1ab8 R08: 0000000000000000 R09: 0000000000000000 [ 422.777508][ T9756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.785495][ T9756] R13: 00007fceec492038 R14: 00007fceec491fa0 R15: 00007fff4485fa08 [ 422.793522][ T9756] [ 422.837326][ T9760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1872'. [ 422.849638][ T9760] device ip6gre1 entered promiscuous mode [ 422.858130][ T4966] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 422.867910][ T9760] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 422.876715][ T4966] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 422.885378][ T4275] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 422.938724][ T9762] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.945948][ T9762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.953392][ T9762] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.960550][ T9762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.978938][ T9762] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 422.998417][ T9762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 423.015795][ T9766] x_tables: duplicate underflow at hook 1 [ 423.026033][ T8224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 423.095004][ T4267] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 423.249304][ T9785] FAULT_INJECTION: forcing a failure. [ 423.249304][ T9785] name fail_futex, interval 1, probability 0, space 0, times 0 [ 423.284000][ T9785] CPU: 0 PID: 9785 Comm: syz.4.1883 Not tainted syzkaller #0 [ 423.291475][ T9785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 423.301568][ T9785] Call Trace: [ 423.304883][ T9785] [ 423.307837][ T9785] dump_stack_lvl+0x188/0x250 [ 423.312553][ T9785] ? __lock_acquire+0x7d40/0x7d40 [ 423.317625][ T9785] ? show_regs_print_info+0x20/0x20 [ 423.322850][ T9785] ? load_image+0x410/0x410 [ 423.327359][ T9785] ? mark_lock+0x94/0x320 [ 423.331693][ T9785] ? __lock_acquire+0x13b3/0x7d40 [ 423.336728][ T9785] ? 0xffffffffa0030000 [ 423.340915][ T9785] should_fail+0x383/0x4b0 [ 423.342239][ T6800] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 423.345383][ T9785] get_futex_key+0x1a1/0x12d0 [ 423.345417][ T9785] ? __lock_acquire+0x13b3/0x7d40 [ 423.345445][ T9785] ? futex_wait_restart+0x250/0x250 [ 423.367843][ T9785] futex_wake+0x101/0x540 [ 423.372188][ T9785] ? futex_wait+0x680/0x680 [ 423.376696][ T9785] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 423.382772][ T9785] ? verify_lock_unused+0x140/0x140 [ 423.387988][ T9785] ? verify_lock_unused+0x140/0x140 [ 423.393230][ T9785] do_futex+0xd83/0x12b0 [ 423.397514][ T9785] ? proc_id_connector+0x167/0x630 [ 423.402800][ T9785] ? proc_exec_connector+0x1f0/0x1f0 [ 423.408145][ T9785] ? futex_exit_release+0x1c0/0x1c0 [ 423.413390][ T9785] ? __context_tracking_exit+0x4c/0x80 [ 423.418884][ T9785] __se_sys_futex+0x389/0x420 [ 423.423601][ T9785] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 423.429637][ T9785] ? __x64_sys_futex+0xf0/0xf0 [ 423.434438][ T9785] ? __x64_sys_futex+0x1d/0xf0 [ 423.439224][ T9785] do_syscall_64+0x4c/0xa0 [ 423.443678][ T9785] ? clear_bhb_loop+0x30/0x80 [ 423.448394][ T9785] ? clear_bhb_loop+0x30/0x80 [ 423.453104][ T9785] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 423.459033][ T9785] RIP: 0033:0x7f7ecc6c6559 [ 423.463479][ T9785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.483101][ T9785] RSP: 002b:00007f7eca91e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 423.483700][ T9792] bridge0: port 3(syz_tun) entered blocking state [ 423.491549][ T9785] RAX: ffffffffffffffda RBX: 00007f7ecc94dfa8 RCX: 00007f7ecc6c6559 [ 423.491569][ T9785] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7ecc94dfac [ 423.491584][ T9785] RBP: 00007f7ecc94dfa0 R08: 0008e05dec99a504 R09: 0000000000000000 [ 423.491599][ T9785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.491611][ T9785] R13: 00007f7ecc94e038 R14: 00007ffff64d4000 R15: 00007ffff64d40e8 [ 423.491644][ T9785] [ 423.549793][ T9792] bridge0: port 3(syz_tun) entered disabled state [ 423.559006][ T9792] bridge0: port 3(syz_tun) entered blocking state [ 423.565580][ T9792] bridge0: port 3(syz_tun) entered forwarding state [ 423.583419][ T9790] bridge0: port 3(syz_tun) entered disabled state [ 423.592468][ T9790] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 423.607399][ T9790] device bridge_slave_0 left promiscuous mode [ 423.613817][ T9790] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.625128][ T9790] device bridge_slave_1 left promiscuous mode [ 423.631381][ T9790] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.645172][ T4275] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 423.652990][ T4267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.669222][ T4267] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 423.678486][ T4267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.688801][ T4267] usb 4-1: config 0 descriptor?? [ 423.699294][ T9790] bond0: (slave bond_slave_0): Releasing backup interface [ 423.744366][ T9790] bond0: (slave bond_slave_1): Releasing backup interface [ 423.846938][ T9797] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 424.025428][ T9790] team0: Port device team_slave_0 removed [ 424.435026][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 424.454601][ T4267] usbhid 4-1:0.0: can't add hid device: -71 [ 424.739318][ T9790] team0: Port device team_slave_1 removed [ 424.881981][ T9790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.963193][ T9801] loop1: detected capacity change from 0 to 164 [ 425.020506][ T9790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.402214][ T9790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.583381][ T9790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.627384][ T9803] x_tables: duplicate underflow at hook 1 [ 425.803957][ T9803] dyndbg: expected <4096 bytes into control [ 425.911204][ T4267] usbhid: probe of 4-1:0.0 failed with error -71 [ 426.571992][ T9790] team0: Port device macvlan1 removed [ 426.733238][ T4267] usb 4-1: USB disconnect, device number 13 [ 426.773522][ T9805] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 426.799846][ T9807] device bond0 entered promiscuous mode [ 426.818991][ T9807] device bond_slave_0 entered promiscuous mode [ 426.893576][ T9807] device bond_slave_1 entered promiscuous mode [ 426.905074][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 426.916601][ T9814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1897'. [ 426.929827][ T9816] device batadv_slave_1 entered promiscuous mode [ 426.938110][ T9815] device batadv_slave_1 left promiscuous mode [ 426.968676][ T9814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1897'. [ 427.032686][ T9821] fuse: Bad value for 'fd' [ 427.098105][ T9830] device lo entered promiscuous mode [ 427.103631][ T9830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.334946][ T4267] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 427.358347][ T9839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1914'. [ 427.453278][ T9837] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 427.464754][ T9839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1914'. [ 427.492270][ T9846] x_tables: duplicate underflow at hook 1 [ 427.541818][ T9846] dyndbg: expected <4096 bytes into control [ 427.550267][ T9850] bridge0: port 3(syz_tun) entered blocking state [ 427.558137][ T9850] bridge0: port 3(syz_tun) entered disabled state [ 427.566258][ T9850] device syz_tun entered promiscuous mode [ 427.572711][ T9850] bridge0: port 3(syz_tun) entered blocking state [ 427.579247][ T9850] bridge0: port 3(syz_tun) entered forwarding state [ 427.596372][ T9850] device syz_tun left promiscuous mode [ 427.603556][ T9850] bridge0: port 3(syz_tun) entered disabled state [ 427.612990][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 427.631862][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 427.641305][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 427.658837][ T9850] device bridge_slave_0 left promiscuous mode [ 427.666539][ T9850] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.682658][ T9850] device bridge_slave_1 left promiscuous mode [ 427.689170][ T9855] fuse: Bad value for 'fd' [ 427.692055][ T9850] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.704279][ T9855] fuse: Bad value for 'fd' [ 427.712212][ T9850] bond0: (slave bond_slave_0): Releasing backup interface [ 427.734301][ T9850] bond0: (slave bond_slave_1): Releasing backup interface [ 427.813544][ T9850] team0: Port device team_slave_0 removed [ 427.835940][ T9850] team0: Port device team_slave_1 removed [ 427.845182][ T4267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.861553][ T4267] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 427.868189][ T9850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.872984][ T4267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.893396][ T9850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.901223][ T4267] usb 5-1: config 0 descriptor?? [ 427.916364][ T9850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.924092][ T9850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.154130][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1921'. [ 428.180435][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1921'. [ 428.276225][ T4267] usbhid 5-1:0.0: can't add hid device: -71 [ 428.282480][ T4267] usbhid: probe of 5-1:0.0 failed with error -71 [ 428.292914][ T4267] usb 5-1: USB disconnect, device number 14 [ 428.320292][ T9886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 428.327655][ T9886] IPv6: NLM_F_CREATE should be set when creating new route [ 428.784983][ T4267] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 428.952667][ T9898] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 429.127407][ T4267] usb 5-1: Using ep0 maxpacket: 32 [ 429.245303][ T4267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.275492][ T4267] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.66 [ 429.302278][ T4267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.324825][ T4267] usb 5-1: config 0 descriptor?? [ 429.369658][ T4267] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 429.394446][ T4267] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 430.263606][ T9886] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.272741][ T9886] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.281950][ T9886] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.290893][ T9886] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.425030][ T9888] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1927'. [ 430.821681][ T9930] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 430.853074][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1945'. [ 430.898862][ T9940] FAULT_INJECTION: forcing a failure. [ 430.898862][ T9940] name failslab, interval 1, probability 0, space 0, times 0 [ 430.915158][ T9940] CPU: 1 PID: 9940 Comm: syz.1.1946 Not tainted syzkaller #0 [ 430.922589][ T9940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 430.932656][ T9940] Call Trace: [ 430.935968][ T9940] [ 430.938924][ T9940] dump_stack_lvl+0x188/0x250 [ 430.943636][ T9940] ? show_regs_print_info+0x20/0x20 [ 430.949048][ T9940] ? load_image+0x410/0x410 [ 430.953607][ T9940] ? __might_sleep+0xf0/0xf0 [ 430.958486][ T9940] ? __lock_acquire+0x7d40/0x7d40 [ 430.963581][ T9940] should_fail+0x383/0x4b0 [ 430.968048][ T9940] should_failslab+0x5/0x20 [ 430.972579][ T9940] slab_pre_alloc_hook+0x51/0xc0 [ 430.977535][ T9940] __kmalloc_node+0x6d/0x3a0 [ 430.982163][ T9940] ? kvmalloc_node+0x84/0x130 [ 430.986888][ T9940] kvmalloc_node+0x84/0x130 [ 430.991420][ T9940] translate_table+0x18d/0x1f60 [ 430.996327][ T9940] ? ipt_register_table+0x7b0/0x7b0 [ 431.001577][ T9940] ? __might_fault+0xb7/0x110 [ 431.006271][ T9940] ? __lock_acquire+0x7d40/0x7d40 [ 431.011340][ T9940] ? __might_fault+0xb3/0x110 [ 431.016052][ T9940] ? _copy_from_user+0x111/0x170 [ 431.021030][ T9940] do_ipt_set_ctl+0x963/0xd70 [ 431.025738][ T9940] ? nf_setsockopt+0x218/0x280 [ 431.030538][ T9940] ? ipt_unregister_table_exit+0x220/0x220 [ 431.036382][ T9940] ? __lock_acquire+0x7d40/0x7d40 [ 431.041454][ T9940] ? __mutex_lock_common+0x435/0x2400 [ 431.046875][ T9940] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 431.052551][ T9940] ? mutex_unlock+0x10/0x10 [ 431.057075][ T9940] ? __local_bh_enable_ip+0x136/0x1c0 [ 431.062480][ T9940] ? lockdep_hardirqs_on+0x94/0x140 [ 431.067717][ T9940] ? __local_bh_enable_ip+0x136/0x1c0 [ 431.073119][ T9940] nf_setsockopt+0x25f/0x280 [ 431.077759][ T9940] ip_setsockopt+0x29c3/0x31e0 [ 431.082573][ T9940] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 431.088006][ T9940] ? aa_sk_perm+0x7dc/0x910 [ 431.092540][ T9940] ? aa_af_perm+0x340/0x340 [ 431.097059][ T9940] ? __fget_files+0x402/0x470 [ 431.101766][ T9940] ? aa_sock_opt_perm+0x74/0x100 [ 431.106717][ T9940] ? udp_setsockopt+0x77/0xa0 [ 431.111426][ T9940] ? sock_common_recvmsg+0x1c0/0x1c0 [ 431.116752][ T9940] __sys_setsockopt+0x2bf/0x3d0 [ 431.121645][ T9940] __x64_sys_setsockopt+0xb1/0xc0 [ 431.126692][ T9940] do_syscall_64+0x4c/0xa0 [ 431.131140][ T9940] ? clear_bhb_loop+0x30/0x80 [ 431.135855][ T9940] ? clear_bhb_loop+0x30/0x80 [ 431.140574][ T9940] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 431.146514][ T9940] RIP: 0033:0x7f9fdf6bd559 [ 431.150964][ T9940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.170598][ T9940] RSP: 002b:00007f9fdd915028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 431.179049][ T9940] RAX: ffffffffffffffda RBX: 00007f9fdf944fa0 RCX: 00007f9fdf6bd559 [ 431.187050][ T9940] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 431.195048][ T9940] RBP: 00007f9fdf754ab8 R08: 0000000000000230 R09: 0000000000000000 [ 431.203057][ T9940] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 431.211063][ T9940] R13: 00007f9fdf945038 R14: 00007f9fdf944fa0 R15: 00007ffe971a4ff8 [ 431.219103][ T9940] [ 431.235643][ T6561] usb 5-1: USB disconnect, device number 15 [ 431.248281][ T6561] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 431.331538][ T9944] FAULT_INJECTION: forcing a failure. [ 431.331538][ T9944] name failslab, interval 1, probability 0, space 0, times 0 [ 431.344385][ T9944] CPU: 0 PID: 9944 Comm: syz.1.1948 Not tainted syzkaller #0 [ 431.351794][ T9944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 431.361995][ T9944] Call Trace: [ 431.363168][ T9946] sctp: [Deprecated]: syz.4.1949 (pid 9946) Use of int in maxseg socket option. [ 431.363168][ T9946] Use struct sctp_assoc_value instead [ 431.365303][ T9944] [ 431.365315][ T9944] dump_stack_lvl+0x188/0x250 [ 431.365347][ T9944] ? show_regs_print_info+0x20/0x20 [ 431.392443][ T9944] ? load_image+0x410/0x410 [ 431.397026][ T9944] ? __might_sleep+0xf0/0xf0 [ 431.401653][ T9944] ? __lock_acquire+0x7d40/0x7d40 [ 431.406727][ T9944] should_fail+0x383/0x4b0 [ 431.411263][ T9944] should_failslab+0x5/0x20 [ 431.415805][ T9944] slab_pre_alloc_hook+0x51/0xc0 [ 431.420779][ T9944] ? create_new_namespaces+0x34/0x700 [ 431.426193][ T9944] kmem_cache_alloc+0x3d/0x280 [ 431.431021][ T9944] create_new_namespaces+0x34/0x700 [ 431.436260][ T9944] ? __fget_files+0x402/0x470 [ 431.440997][ T9944] __se_sys_setns+0x2c8/0x15e0 [ 431.445807][ T9944] ? __x64_sys_setns+0x60/0x60 [ 431.450612][ T9944] ? lockdep_hardirqs_on+0x94/0x140 [ 431.455852][ T9944] do_syscall_64+0x4c/0xa0 [ 431.460298][ T9944] ? clear_bhb_loop+0x30/0x80 [ 431.465063][ T9944] ? clear_bhb_loop+0x30/0x80 [ 431.469775][ T9944] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 431.475707][ T9944] RIP: 0033:0x7f9fdf6bd559 [ 431.480156][ T9944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.499909][ T9944] RSP: 002b:00007f9fdd915028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 431.508362][ T9944] RAX: ffffffffffffffda RBX: 00007f9fdf944fa0 RCX: 00007f9fdf6bd559 [ 431.516372][ T9944] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 431.524374][ T9944] RBP: 00007f9fdf754ab8 R08: 0000000000000000 R09: 0000000000000000 [ 431.532367][ T9944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.540340][ T9944] R13: 00007f9fdf945038 R14: 00007f9fdf944fa0 R15: 00007ffe971a4ff8 [ 431.548344][ T9944] [ 431.585584][ T9951] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 431.592883][ T9951] IPv6: NLM_F_CREATE should be set when creating new route [ 432.045025][ T6561] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 432.069123][ T9955] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.415187][ T6561] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.432388][ T6561] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 432.441872][ T6561] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.455118][ T6561] usb 6-1: config 0 descriptor?? [ 432.579512][ T9955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.621258][ T9955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.795037][ T6561] usbhid 6-1:0.0: can't add hid device: -71 [ 432.804669][ T6561] usbhid: probe of 6-1:0.0 failed with error -71 [ 432.821816][ T6561] usb 6-1: USB disconnect, device number 4 [ 432.961630][ T9955] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.970853][ T9955] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.979810][ T9955] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.990713][ T9955] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.135731][ T9957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1953'. [ 433.145237][ T6800] lo speed is unknown, defaulting to 1000 [ 433.257558][ T9980] FAULT_INJECTION: forcing a failure. [ 433.257558][ T9980] name failslab, interval 1, probability 0, space 0, times 0 [ 433.280444][ T9980] CPU: 1 PID: 9980 Comm: syz.3.1959 Not tainted syzkaller #0 [ 433.287990][ T9980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 433.295205][ T6561] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 433.298158][ T9980] Call Trace: [ 433.298169][ T9980] [ 433.298178][ T9980] dump_stack_lvl+0x188/0x250 [ 433.316579][ T9980] ? show_regs_print_info+0x20/0x20 [ 433.321820][ T9980] ? load_image+0x410/0x410 [ 433.326369][ T9980] ? __might_sleep+0xf0/0xf0 [ 433.330992][ T9980] ? __lock_acquire+0x7d40/0x7d40 [ 433.336058][ T9980] should_fail+0x383/0x4b0 [ 433.340523][ T9980] should_failslab+0x5/0x20 [ 433.345097][ T9980] slab_pre_alloc_hook+0x51/0xc0 [ 433.350338][ T9980] __kmalloc_node+0x6d/0x3a0 [ 433.354962][ T9980] ? kvmalloc_node+0x84/0x130 [ 433.359698][ T9980] kvmalloc_node+0x84/0x130 [ 433.364242][ T9980] translate_table+0x18d/0x1f60 [ 433.369156][ T9980] ? ipt_register_table+0x7b0/0x7b0 [ 433.374391][ T9980] ? __might_fault+0xb7/0x110 [ 433.379112][ T9980] ? __lock_acquire+0x7d40/0x7d40 [ 433.384194][ T9980] ? __might_fault+0xb3/0x110 [ 433.388907][ T9980] ? _copy_from_user+0x111/0x170 [ 433.393929][ T9980] do_ipt_set_ctl+0x963/0xd70 [ 433.398644][ T9980] ? nf_setsockopt+0x218/0x280 [ 433.403473][ T9980] ? ipt_unregister_table_exit+0x220/0x220 [ 433.409313][ T9980] ? __lock_acquire+0x7d40/0x7d40 [ 433.414371][ T9980] ? __mutex_lock_common+0x435/0x2400 [ 433.419787][ T9980] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 433.425460][ T9980] ? mutex_unlock+0x10/0x10 [ 433.429998][ T9980] ? __local_bh_enable_ip+0x136/0x1c0 [ 433.435405][ T9980] ? lockdep_hardirqs_on+0x94/0x140 [ 433.440645][ T9980] ? __local_bh_enable_ip+0x136/0x1c0 [ 433.446077][ T9980] nf_setsockopt+0x25f/0x280 [ 433.450719][ T9980] ip_setsockopt+0x29c3/0x31e0 [ 433.455526][ T9980] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 433.460939][ T9980] ? aa_sk_perm+0x7dc/0x910 [ 433.465488][ T9980] ? aa_af_perm+0x340/0x340 [ 433.470026][ T9980] ? __fget_files+0x402/0x470 [ 433.474743][ T9980] ? aa_sock_opt_perm+0x74/0x100 [ 433.479723][ T9980] ? udp_setsockopt+0x77/0xa0 [ 433.484443][ T9980] ? sock_common_recvmsg+0x1c0/0x1c0 [ 433.489769][ T9980] __sys_setsockopt+0x2bf/0x3d0 [ 433.494661][ T9980] __x64_sys_setsockopt+0xb1/0xc0 [ 433.499727][ T9980] do_syscall_64+0x4c/0xa0 [ 433.504182][ T9980] ? clear_bhb_loop+0x30/0x80 [ 433.508895][ T9980] ? clear_bhb_loop+0x30/0x80 [ 433.513611][ T9980] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 433.519559][ T9980] RIP: 0033:0x7f38bc6d9559 [ 433.524014][ T9980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.543657][ T9980] RSP: 002b:00007f38ba931028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 433.552118][ T9980] RAX: ffffffffffffffda RBX: 00007f38bc960fa0 RCX: 00007f38bc6d9559 [ 433.560141][ T9980] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 433.568146][ T9980] RBP: 00007f38bc770ab8 R08: 0000000000000230 R09: 0000000000000000 [ 433.576154][ T9980] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 433.584163][ T9980] R13: 00007f38bc961038 R14: 00007f38bc960fa0 R15: 00007ffef40f5eb8 [ 433.585242][ T6561] usb 6-1: Using ep0 maxpacket: 32 [ 433.592182][ T9980] [ 433.658748][ T9995] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1965'. [ 433.669902][ T9995] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1965'. [ 433.682506][ T9995] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 433.735151][ T6561] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.755034][ T6561] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.66 [ 433.766708][ T6561] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.786464][ T6561] usb 6-1: config 0 descriptor?? [ 433.836671][ T6561] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 433.852637][ T6561] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 434.100323][T10001] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 434.602997][T10043] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 434.773440][ T4310] ------------[ cut here ]------------ [ 434.782275][ T4310] sysfs group 'byte_queue_limits' not found for kobject 'tx-0' [ 434.793940][ T4310] WARNING: CPU: 0 PID: 4310 at fs/sysfs/group.c:281 sysfs_remove_group+0x177/0x290 [ 434.810137][ T4310] Modules linked in: [ 434.814131][ T4310] CPU: 0 PID: 4310 Comm: kworker/0:7 Not tainted syzkaller #0 [ 434.821791][ T4310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 434.836235][ T4310] Workqueue: events delete_netdev [ 434.841533][ T4310] RIP: 0010:sysfs_remove_group+0x177/0x290 [ 434.847833][ T4310] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 4b 26 d0 ff 49 8b 17 48 c7 c7 80 b3 39 8a 48 89 de e8 a9 e7 c8 07 <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 23 e1 8a ff [ 434.874154][ T4310] RSP: 0018:ffffc900031ff8f8 EFLAGS: 00010246 [ 434.890162][ T4310] RAX: 3af58aaa2beaf300 RBX: ffffffff8b20ce20 RCX: ffff888021488000 [ 434.900413][ T4310] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 434.911555][ T4310] RBP: 0000000000000076 R08: ffff8880b8e33d7f R09: 1ffff110171c67af [ 434.921994][ T4310] R10: dffffc0000000000 R11: ffffed10171c67b0 R12: 1ffffffff16418e0 [ 434.933149][ T4310] R13: dffffc0000000000 R14: ffff888057cca658 R15: ffff8880224e1818 [ 434.943302][ T4310] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 434.957383][ T4310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 434.964046][ T4310] CR2: 00007fc16c153ff8 CR3: 000000002a9b7000 CR4: 00000000003506f0 [ 434.972807][ T4310] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 434.981005][ T4310] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 434.991935][ T4310] Call Trace: [ 434.997696][ T4310] [ 435.000698][ T4310] ? netdev_queue_update_kobjects+0x33f/0x3e0 [ 435.009896][ T4310] netdev_queue_update_kobjects+0x37a/0x3e0 [ 435.017571][ T4310] netdev_unregister_kobject+0x104/0x250 [ 435.023267][ T4310] unregister_netdevice_many+0x1530/0x1a40 [ 435.031918][ T4310] ? alloc_netdev_mqs+0xc40/0xc40 [ 435.037211][ T4310] ? __mutex_lock_common+0x435/0x2400 [ 435.042633][ T4310] unregister_netdevice_queue+0x2e1/0x320 [ 435.048895][ T4310] ? list_netdevice+0x460/0x460 [ 435.055530][ T4310] lowpan_unregister_netdev+0x18/0x20 [ 435.061170][ T4310] process_one_work+0x867/0xff0 [ 435.066466][ T4310] ? worker_detach_from_pool+0x240/0x240 [ 435.072248][ T4310] ? lockdep_hardirqs_off+0x70/0x100 [ 435.085011][ T4310] ? _raw_spin_lock_irq+0xb7/0xf0 [ 435.090619][ T4310] ? _raw_spin_lock_irqsave+0x100/0x100 [ 435.096507][ T4310] ? wq_worker_running+0x97/0x170 [ 435.101673][ T4310] worker_thread+0xad7/0x12a0 [ 435.113797][ T4310] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 435.120839][ T4310] kthread+0x42e/0x520 [ 435.128411][ T4310] ? rcu_lock_release+0x20/0x20 [ 435.133289][ T4310] ? kthread_blkcg+0xd0/0xd0 [ 435.139049][ T4310] ret_from_fork+0x1f/0x30 [ 435.143587][ T4310] [ 435.150610][ T4310] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 435.157922][ T4310] CPU: 0 PID: 4310 Comm: kworker/0:7 Not tainted syzkaller #0 [ 435.165394][ T4310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 435.175479][ T4310] Workqueue: events delete_netdev [ 435.180557][ T4310] Call Trace: [ 435.183854][ T4310] [ 435.186788][ T4310] dump_stack_lvl+0x188/0x250 [ 435.191484][ T4310] ? show_regs_print_info+0x20/0x20 [ 435.196686][ T4310] ? load_image+0x410/0x410 [ 435.201359][ T4310] panic+0x2f8/0x850 [ 435.205296][ T4310] ? bpf_jit_dump+0xd0/0xd0 [ 435.209841][ T4310] ? ret_from_fork+0x1f/0x30 [ 435.214453][ T4310] ? sysfs_remove_group+0x177/0x290 [ 435.219698][ T4310] __warn+0x248/0x2b0 [ 435.223695][ T4310] ? sysfs_remove_group+0x177/0x290 [ 435.228910][ T4310] report_bug+0x1b9/0x2e0 [ 435.233268][ T4310] handle_bug+0x3a/0x70 [ 435.237433][ T4310] exc_invalid_op+0x16/0x40 [ 435.241955][ T4310] asm_exc_invalid_op+0x16/0x20 [ 435.246834][ T4310] RIP: 0010:sysfs_remove_group+0x177/0x290 [ 435.252655][ T4310] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 4b 26 d0 ff 49 8b 17 48 c7 c7 80 b3 39 8a 48 89 de e8 a9 e7 c8 07 <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 23 e1 8a ff [ 435.272293][ T4310] RSP: 0018:ffffc900031ff8f8 EFLAGS: 00010246 [ 435.278409][ T4310] RAX: 3af58aaa2beaf300 RBX: ffffffff8b20ce20 RCX: ffff888021488000 [ 435.286432][ T4310] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 435.294411][ T4310] RBP: 0000000000000076 R08: ffff8880b8e33d7f R09: 1ffff110171c67af [ 435.302399][ T4310] R10: dffffc0000000000 R11: ffffed10171c67b0 R12: 1ffffffff16418e0 [ 435.305508][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 435.310419][ T4310] R13: dffffc0000000000 R14: ffff888057cca658 R15: ffff8880224e1818 [ 435.325938][ T4310] ? sysfs_remove_group+0x177/0x290 [ 435.331172][ T4310] ? netdev_queue_update_kobjects+0x33f/0x3e0 [ 435.337275][ T4310] netdev_queue_update_kobjects+0x37a/0x3e0 [ 435.343180][ T4310] netdev_unregister_kobject+0x104/0x250 [ 435.348829][ T4310] unregister_netdevice_many+0x1530/0x1a40 [ 435.354688][ T4310] ? alloc_netdev_mqs+0xc40/0xc40 [ 435.359762][ T4310] ? __mutex_lock_common+0x435/0x2400 [ 435.365155][ T4310] unregister_netdevice_queue+0x2e1/0x320 [ 435.370907][ T4310] ? list_netdevice+0x460/0x460 [ 435.375809][ T4310] lowpan_unregister_netdev+0x18/0x20 [ 435.381227][ T4310] process_one_work+0x867/0xff0 [ 435.386134][ T4310] ? worker_detach_from_pool+0x240/0x240 [ 435.391788][ T4310] ? lockdep_hardirqs_off+0x70/0x100 [ 435.397117][ T4310] ? _raw_spin_lock_irq+0xb7/0xf0 [ 435.402168][ T4310] ? _raw_spin_lock_irqsave+0x100/0x100 [ 435.407731][ T4310] ? wq_worker_running+0x97/0x170 [ 435.412795][ T4310] worker_thread+0xad7/0x12a0 [ 435.417518][ T4310] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 435.423468][ T4310] kthread+0x42e/0x520 [ 435.427564][ T4310] ? rcu_lock_release+0x20/0x20 [ 435.432434][ T4310] ? kthread_blkcg+0xd0/0xd0 [ 435.437053][ T4310] ret_from_fork+0x1f/0x30 [ 435.441506][ T4310] [ 435.444891][ T4310] Kernel Offset: disabled [ 435.449814][ T4310] Rebooting in 86400 seconds..