last executing test programs: 18.70106335s ago: executing program 3 (id=399): syz_mount_image$fuse(0x0, 0x0, 0x280028, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r0 = getpid() ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f00000001c0), 0x1004) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000640), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) eventfd2(0x5, 0x1) r3 = memfd_create(&(0x7f0000000000)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x1) execveat(r3, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x1000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x2e, 0x51, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000800)) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f00000002c0)={0x1, 0x7f}) 18.616182499s ago: executing program 4 (id=400): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xeffffffffffffffe, 0x0, 0x0, 0x0, 0x8000004, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@remote, 0xfffffffc, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x0, 0x0, 0x2, 0x7, 0x200, 0x10000}}, 0xe8) sendmmsg(r1, &(0x7f0000000280), 0x2e9, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) fanotify_mark(r2, 0x200, 0x1002, r2, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000001fc0)='addr\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d80)=ANY=[@ANYBLOB="44010000160033060000000000000080e0000002b25523640800000000000000ff0200000000000000000000000000012d79e77100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004d232000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000400000000000c000000000000000000000000000000050000000000000004000000000000000000000002"], 0x144}}, 0x0) 18.035484408s ago: executing program 2 (id=401): openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000940)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000a00)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b80), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000f40)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000), 0x0, &(0x7f0000001040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) chdir(&(0x7f0000001080)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f00000010c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./file1\x00', 0x2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1208002, &(0x7f0000000140)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000001c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") mount$overlay(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x4, &(0x7f0000000880)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$bind(0x0, &(0x7f00000008c0)='.\x00', 0x0, 0x21, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fddbdf250c000000180005800c0002800800040009000000080001"], 0x70}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000850) 17.232832099s ago: executing program 1 (id=402): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000b80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000e80)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000ec0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000f00)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000f80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000001000), 0x318, 0x0) recvmmsg(r3, &(0x7f0000001040), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001080)=0x2) write$UHID_INPUT(r1, &(0x7f00000010c0)={0xe, {"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", 0x942}}, 0x1006) 16.221373862s ago: executing program 3 (id=403): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) statfs(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)=""/216) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x2200008, &(0x7f00000005c0), 0x3, 0x5ad, &(0x7f0000000780)="$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") r1 = open(&(0x7f0000000d40)='./file2\x00', 0xac941, 0x56) pwritev2(r1, 0x0, 0x0, 0x7000, 0x0, 0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r4}, 0x50) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x284182, 0x0) sendmmsg$unix(r5, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x18, 0x1, 0x1, [r6, r5]}}], 0x18, 0x48000}}], 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) 16.088502846s ago: executing program 1 (id=404): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000940)=""/4096, 0x7151}], 0x1) splice(r1, 0x0, r3, 0x0, 0x7151, 0x0) 16.020891573s ago: executing program 4 (id=405): openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000940)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000009c0)=0x2) r0 = getpid() socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000a00)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b80), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000bc0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000c40)='nilfs2\x00', 0x280000, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000cc0)=0x2) syz_mount_image$erofs(&(0x7f0000000d00), &(0x7f0000000d40)='./file0\x00', 0x18000c6, &(0x7f0000000d80)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f0000000dc0)="$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") mkdir(&(0x7f0000000f40)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000f80)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000), 0x0, 0x0) 15.864349458s ago: executing program 2 (id=406): syz_mount_image$fuse(0x0, 0x0, 0x280028, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r0 = getpid() ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f00000001c0), 0x1004) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000640), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) eventfd2(0x5, 0x1) r3 = memfd_create(&(0x7f0000000000)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x1) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x2e, 0x51, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000800)) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f00000002c0)={0x1, 0x7f}) 14.787926078s ago: executing program 3 (id=407): syz_open_dev$video4linux(&(0x7f00000000c0), 0x5ffffffbffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x318, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000200)={0x20000014}) epoll_wait(r0, &(0x7f0000000240)=[{}], 0x1, 0x400) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) epoll_wait(r0, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0x800) 14.464235171s ago: executing program 4 (id=408): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) close(0x3) close(r1) 12.633817847s ago: executing program 2 (id=410): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x4}]}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee01], 0xac}}, 0x0) r1 = getpgrp(0xffffffffffffffff) sched_setattr(r1, &(0x7f0000000300)={0x38, 0x0, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000340)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000380)=0x33, 0x8) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f00000003c0)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000400), 0xfeb5, 0x0, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, 0xffffffffffffffff, 0x100000000) ioctl$BTRFS_IOC_RM_DEV(r5, 0x5000940b, &(0x7f0000000680)={{}, "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"}) recvfrom(r3, &(0x7f0000001680)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 12.525691508s ago: executing program 4 (id=411): r0 = socket$inet6(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000400), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x80881000, 0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000480)=""/1024, 0x400) connect$inet6(r0, &(0x7f00000016c0)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000001740), 0x171, 0x0, 0x0, 0x40000}}], 0x400000000000172, 0x4000000) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000001740), 0x2000010, &(0x7f0000001780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000001800)={0x2020}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000059c0)='./file0\x00', 0x22801, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x80000) write(r5, &(0x7f0000005a00)='3', 0x1) 12.416063049s ago: executing program 1 (id=412): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000280)={0x0, 0x0}) statfs(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)=""/216) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x2200008, &(0x7f00000005c0), 0x3, 0x5ad, &(0x7f0000000780)="$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") r1 = open(&(0x7f0000000d40)='./file2\x00', 0xac941, 0x56) pwritev2(r1, 0x0, 0x0, 0x7000, 0x0, 0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r4}, 0x50) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x284182, 0x0) sendmmsg$unix(r5, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x18, 0x1, 0x1, [r6, r5]}}], 0x18, 0x48000}}], 0x1, 0x0) 9.219618784s ago: executing program 0 (id=415): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000b80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000e80)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000ec0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000f00)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000f80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000001000), 0x318, 0x0) recvmmsg(r3, &(0x7f0000001040), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001080)=0x2) write$UHID_INPUT(r1, &(0x7f00000010c0)={0xe, {"a2e3ad099b0d09f91b5f2f0987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f323063090810e0879b0f0a75e70a9b334d959b669a240d5b0af3988f7ef31952010afde8d178708c523c921b1b5b07070d075b0936cd3b78130daa61d8e81a3f00005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397273ce1766769f0c91c00305d3f46635eb016d5b1dda98e2d739be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b7638354a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc3609aa24b7d520c829d095083bba2987a67399eac430d145d546a40b9f6ff14ac488ec130bb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b2860d1b3cff57d8b6d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a4f0492d48604675fde2b34cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827955e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb9754fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94e7475cb74642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd72ea4998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c58b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b50517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864af090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d885b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1a85ae7e69fd1a47a284f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef8473b53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b344340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cccf8a97406bb5a68a1f0c4549820a73c8859dde0712ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcb7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c2e14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ec00000000000000b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a52830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec685f068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000e00f96f06817fb903729a7fb6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x942}}, 0x1006) 9.147765781s ago: executing program 2 (id=416): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xeffffffffffffffe, 0x0, 0x0, 0x0, 0x8000004, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@remote, 0xfffffffc, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x0, 0x0, 0x2, 0x7, 0x200, 0x10000}}, 0xe8) sendmmsg(r1, &(0x7f0000000280), 0x2e9, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) fanotify_mark(r2, 0x200, 0x1002, r2, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000001fc0)='addr\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d80)=ANY=[@ANYBLOB="44010000160033060000000000000080e0000002b25523640800000000000000ff0200000000000000000000000000012d79e77100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004d232000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000400000000000c000000000000000000000000000000050000000000000004000000000000000000000002"], 0x144}}, 0x0) 8.195478057s ago: executing program 0 (id=417): prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000700)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000800), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000840), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000008c0)='./bus\x00', &(0x7f0000000900), 0x8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000940)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@private=0xa010100, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x1, 0x0, 0x4, 0x0, 0x1, 0x0, 0x9c0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d3, 0x3c}, 0x2, @in=@remote, 0xffffffff, 0x4, 0x0, 0x0, 0x790, 0x4000000, 0x3}}, 0xe8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000200)=[@release={0x40046306, 0x3}]}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000180)=[@acquire]}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)}) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x801c0, 0x189) r6 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x3000004, 0x11, r6, 0x25844000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000005c0)={{&(0x7f00001eb000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000600)={&(0x7f00005a7000/0x3000)=nil, &(0x7f0000a16000/0x1000)=nil, 0x3000, 0x1}) fcntl$setlease(r5, 0x400, 0x0) 8.158075932s ago: executing program 1 (id=418): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000b80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000e80)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000ec0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000f00)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000f80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000001000), 0x318, 0x0) recvmmsg(r3, &(0x7f0000001040), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001080)=0x2) write$UHID_INPUT(r1, &(0x7f00000010c0)={0xe, {"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", 0x942}}, 0x1006) 8.112538586s ago: executing program 4 (id=419): socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x280000, &(0x7f00000002c0)='%/-/\xe1.\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtaction={0x18, 0x30, 0x12f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x18000c6, &(0x7f0000000480)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f00000004c0)="$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") mkdir(&(0x7f0000000640)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f0000000700), 0x0, &(0x7f0000000740)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) chdir(&(0x7f0000000780)='./bus\x00') renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), 0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000f40)='./file0\x00', 0x0, 0x4, &(0x7f0000000fc0)) mount$bind(0x0, &(0x7f0000001000)='.\x00', 0x0, 0x21, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000040}, 0x20000850) 6.733712156s ago: executing program 0 (id=420): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0x8, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0xffffffff}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.675093142s ago: executing program 4 (id=421): openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000940)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000009c0)=0x2) getpid() socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000b00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000b80), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000bc0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000c40)='nilfs2\x00', 0x280000, &(0x7f0000000c80)='%/-/\xe1.\x00') socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000cc0)=0x2) mkdir(&(0x7f0000000f40)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000fc0)='./bus\x00', &(0x7f0000001000), 0x0, &(0x7f0000001040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) chdir(&(0x7f0000001080)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f00000010c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./file1\x00', 0x2) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1208002, &(0x7f0000000140)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000001c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000007c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x4, &(0x7f0000000880)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$bind(0x0, &(0x7f00000008c0)='.\x00', 0x0, 0x21, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fddbdf250c000000180005800c0002800800040009000000080001"], 0x70}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000850) 5.991318551s ago: executing program 1 (id=422): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000940)=""/4096, 0x7151}], 0x1) splice(r1, 0x0, r3, 0x0, 0x7151, 0x0) 5.761035735s ago: executing program 3 (id=423): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000b80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000e80)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000ec0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000f00)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000f80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000001000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) write$UHID_INPUT(r1, &(0x7f00000010c0)={0xe, {"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", 0x942}}, 0x1006) 5.663802685s ago: executing program 2 (id=424): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000b80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000e80)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000ec0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000f00)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000f80)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f0000001040), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001080)=0x2) write$UHID_INPUT(r1, &(0x7f00000010c0)={0xe, {"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", 0x942}}, 0x1006) 5.493479442s ago: executing program 0 (id=425): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xa) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x2c73, &(0x7f0000000400)={0x0, 0x34bb, 0x4, 0x1, 0x2f4}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) r3 = mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x20ec, 0x0, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) munmap$IORING_OFF_CQ_RING(r3, 0x9) syz_clone(0x40200000, &(0x7f0000000b00)="0dbbeb3e8947572c5c218eb35308a5c820a1637c60ed4a2ed01d4c28dcf1aaca091d2d27b26a17b045d26458323d9e5f9bbc91bda902e2cbcc3e01926b070f3fe7e3094f018d13ad103de785f5108ee0dd1103d414b7ee547690b41ff814e69e77adfc8862e4dcc75adcec33bb4195e0e512826fcde041a801480d1ceae41f27c6d2618c170574a4326f21b17c8ddeda66e5d31e9856f27bdf0c832fca6fb08542d4b1a0e2c037811facc1c4c74dd9378ac1834642481d351c0de500f3ddbbc51a80c5031c7980bbdb5889a640e4395df002670296", 0xd5, &(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80)="456febb1ab073a9426fda6fc68b362034f24854259d8a29d08929538c57d38c706aa4847dac74fa31fceaf43a3dade957d038830776947ea24f739d5e65237") socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000d00)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 2.822166274s ago: executing program 2 (id=426): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x4}]}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee01], 0xac}}, 0x0) r1 = getpgrp(0xffffffffffffffff) sched_setattr(r1, &(0x7f0000000300)={0x38, 0x0, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000340)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000380)=0x33, 0x8) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f00000003c0)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000400), 0xfeb5, 0x0, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, 0xffffffffffffffff, 0x100000000) ioctl$BTRFS_IOC_RM_DEV(r5, 0x5000940b, &(0x7f0000000680)={{}, "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"}) recvfrom(r3, &(0x7f0000001680)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.801811845s ago: executing program 3 (id=427): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000b80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000e80)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000ec0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000f00)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000f80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000001000), 0x318, 0x0) recvmmsg(r3, &(0x7f0000001040), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001080)=0x2) write$UHID_INPUT(r1, &(0x7f00000010c0)={0xe, {"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", 0x942}}, 0x1006) 2.199200246s ago: executing program 0 (id=428): openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000940)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000009c0)=0x2) r0 = getpid() socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000a00)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b80), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000bc0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000c40)='nilfs2\x00', 0x280000, &(0x7f0000000c80)='%/-/\xe1.\x00') socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000f40)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(&(0x7f0000001080)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f00000010c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./file1\x00', 0x2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1208002, &(0x7f0000000140)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000001c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000007c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x4, &(0x7f0000000880)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$bind(0x0, &(0x7f00000008c0)='.\x00', 0x0, 0x21, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fddbdf250c000000180005800c0002800800040009000000080001"], 0x70}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000850) 1.728545834s ago: executing program 1 (id=429): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) statfs(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)=""/216) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x2200008, &(0x7f00000005c0), 0x3, 0x5ad, &(0x7f0000000780)="$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") r1 = open(&(0x7f0000000d40)='./file2\x00', 0xac941, 0x56) pwritev2(r1, 0x0, 0x0, 0x7000, 0x0, 0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r4}, 0x50) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x284182, 0x0) sendmmsg$unix(r5, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x18, 0x1, 0x1, [r6, r5]}}], 0x18, 0x48000}}], 0x1, 0x0) 1.724117345s ago: executing program 3 (id=430): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001040)={0x2020}, 0x2020) r0 = socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000700)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0x5) sched_setscheduler(r1, 0x1, &(0x7f00000007c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x80}, 0x6e) sendmmsg$unix(r3, &(0x7f00000008c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000940), 0x4000087, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000009c0)=0x80000000001, 0x4) connect$inet6(r4, &(0x7f0000000a00)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000003080)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x8, 0xff, 0xfffff038}, {0x20, 0x1f, 0x9, 0xfffff00c}, {0x6, 0x80, 0x2}]}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0xed60e250ba39e68f, 0x70bd26, 0x25dfdbfe, {0x2, 0x0, 0x30, 0x8, 0xff, 0x1, 0x0, 0x1, 0x5120}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}]}, 0x24}}, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r4, r6, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000003140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000003180)=""/4106, 0x100a, 0x0, 0x0}, &(0x7f00000041c0)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000004200)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000004240)=0x40) r8 = dup2(r0, r0) write$tun(r8, &(0x7f0000004300)=ANY=[], 0x46) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000004340)=0x6, 0x4) 0s ago: executing program 0 (id=431): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ef) mount(0x0, &(0x7f0000000080)='./gadget\x00', &(0x7f00000000c0)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./gadget/dummy_udc\x00', 0x2, 0x84) write(r0, &(0x7f0000000180)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./sys\x00', 0x1ed) mount(0x0, &(0x7f00000007c0)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/class/scsi_host/host0/state\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x700, 0xf951, 0x7, 0x5, {{0x11, 0x4, 0x3, 0x8, 0x44, 0x65, 0x0, 0xf6, 0x29, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x24, 0xd1, 0x1, 0x9, [{@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x4}, {@loopback, 0x296}, {@broadcast, 0x7fff}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xd2, [@private=0xa010101]}]}}}}}) getsockname$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) openat(r2, 0x0, 0x9850c1, 0x182) openat(0xffffffffffffff9c, &(0x7f0000000400)='./gadget/ep1in-bulk\x00', 0x2, 0x24) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, &(0x7f0000000940)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bridge0\x00'}) r4 = syz_open_dev$sg(&(0x7f00000008c0), 0xffff0000, 0x2842) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000900)={0x0, 0x7, 0xb8}) sendmsg$nl_route(r3, 0x0, 0x0) kernel console output (not intermixed with test programs): nk becomes ready [ 85.859653][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.875535][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.884783][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.893526][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.902887][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.911776][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.927091][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.936684][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.944475][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.960006][ T4280] device veth1_vlan entered promiscuous mode [ 85.972783][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.022946][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.046334][ T4290] device veth0_vlan entered promiscuous mode [ 86.053558][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.064124][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.073416][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.082479][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.091213][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.099675][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.109271][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.119030][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.143287][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.165923][ T4287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.184340][ T4290] device veth1_vlan entered promiscuous mode [ 86.195606][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.202993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.212537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.221213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.230435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.267137][ T4284] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.295287][ T4284] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.305240][ T4284] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.314259][ T4284] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.346315][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.359244][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.369192][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.385574][ T4280] device veth0_macvtap entered promiscuous mode [ 86.427391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.439401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.449383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.461106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.470223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.481772][ T4280] device veth1_macvtap entered promiscuous mode [ 86.494377][ T4290] device veth0_macvtap entered promiscuous mode [ 86.509949][ T4287] device veth0_vlan entered promiscuous mode [ 86.534017][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.546208][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.556103][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.564527][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.572410][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.580198][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.588356][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.607155][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.622951][ T4290] device veth1_macvtap entered promiscuous mode [ 86.632335][ T4287] device veth1_vlan entered promiscuous mode [ 86.651443][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.662620][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.676921][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.696325][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.711826][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.723785][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.733003][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.755019][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 86.755489][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.772610][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.783081][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.793629][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.806196][ T4290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.818961][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.834821][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 86.840874][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 86.842072][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.866440][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.898380][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.907781][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.918511][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.928040][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.937190][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.946422][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.979338][ T4280] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.989302][ T4280] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.998768][ T4283] Bluetooth: hci4: command 0x0419 tx timeout [ 86.998782][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 87.018369][ T4280] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.027130][ T4280] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.041931][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.052891][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.063513][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.077453][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.089175][ T4290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.097187][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.106329][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.116777][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.125858][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.137891][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.147017][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.181516][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.191365][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.212836][ T4287] device veth0_macvtap entered promiscuous mode [ 87.222345][ T4290] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.231685][ T4290] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.241948][ T4290] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.250935][ T4290] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.284072][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.288331][ T4287] device veth1_macvtap entered promiscuous mode [ 87.292732][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.322122][ T4276] device veth0_vlan entered promiscuous mode [ 87.361119][ T4276] device veth1_vlan entered promiscuous mode [ 87.369159][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.377936][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.386313][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.394376][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.451074][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.462187][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.472381][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.487443][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.497804][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.508366][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.520001][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.532280][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.543089][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.552249][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.572808][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.582697][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.594049][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.595114][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.617512][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.628212][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.639257][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.650114][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.663556][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.684858][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.687815][ T4276] device veth0_macvtap entered promiscuous mode [ 87.694691][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.711622][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.721354][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.730291][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.739674][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.749047][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.757738][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.770804][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.802278][ T4276] device veth1_macvtap entered promiscuous mode [ 87.828024][ T4287] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.838333][ T4287] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.847417][ T4287] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.858650][ T4287] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.877121][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.886162][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.893740][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.893991][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.922735][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.930027][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.940734][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.951679][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.962041][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.972602][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.982774][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.993324][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.004532][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.022975][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.032860][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.043316][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.051380][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.061538][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.086296][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.109698][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.126438][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.138417][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.148432][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.159417][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.173465][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.188736][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.203555][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.236403][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.243963][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.255758][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.257949][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.279877][ T4276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.298338][ T4276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.307651][ T4276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.318627][ T4276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.360417][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.476897][ T4416] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.581697][ T4419] netlink: 'syz.4.6': attribute type 12 has an invalid length. [ 88.590291][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.605798][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.636371][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.654931][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.664529][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.757734][ T4423] hub 8-0:1.0: USB hub found [ 88.766059][ T4423] hub 8-0:1.0: 1 port detected [ 88.911618][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.115161][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.198165][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.364236][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.364255][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.373674][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.374519][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.715581][ T4435] overlayfs: missing 'lowerdir' [ 90.504030][ T4435] loop3: detected capacity change from 0 to 1024 [ 90.610672][ T4435] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.850039][ T4435] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 92.530132][ T4456] sched: RT throttling activated [ 92.540660][ T4435] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 92.557904][ T4377] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.633838][ T4458] loop0: detected capacity change from 0 to 16 [ 92.646044][ T4458] ======================================================= [ 92.646044][ T4458] WARNING: The mand mount option has been deprecated and [ 92.646044][ T4458] and is ignored by this kernel. Remove the mand [ 92.646044][ T4458] option from the mount to silence this warning. [ 92.646044][ T4458] ======================================================= [ 92.750382][ T4458] erofs: (device loop0): mounted with root inode @ nid 36. [ 92.948053][ T4435] EXT4-fs: failed to create workqueue [ 92.960886][ T4435] EXT4-fs (loop3): mount failed [ 92.971370][ T4456] overlayfs: filesystem on './file0' not supported as upperdir [ 93.098567][ T4463] overlayfs: missing 'lowerdir' [ 93.309642][ T4463] loop4: detected capacity change from 0 to 1024 [ 93.317245][ T4463] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.374938][ T4463] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.386403][ T4463] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 93.513189][ T4463] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 93.522010][ T4463] System zones: 0-1, 3-36 [ 93.673208][ T4463] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 93.863289][ T4463] netlink: 68 bytes leftover after parsing attributes in process `syz.4.11'. [ 93.886143][ T4461] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 94.354020][ T4471] loop2: detected capacity change from 0 to 16 [ 94.442992][ T4471] erofs: (device loop2): mounted with root inode @ nid 36. [ 95.583497][ T957] cfg80211: failed to load regulatory.db [ 95.641121][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 95.840236][ T4486] gadgetfs: bound to dummy_udc driver [ 95.910365][ T4377] libceph: connect (1)[c::]:6789 error -101 [ 95.928863][ T4377] libceph: mon0 (1)[c::]:6789 connect error [ 95.974245][ T4484] ceph: No mds server is up or the cluster is laggy [ 96.067342][ T4486] FAULT_INJECTION: forcing a failure. [ 96.067342][ T4486] name failslab, interval 1, probability 0, space 0, times 1 [ 96.147871][ T4486] CPU: 1 PID: 4486 Comm: syz.1.17 Not tainted syzkaller #0 [ 96.155140][ T4486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 96.165256][ T4486] Call Trace: [ 96.168599][ T4486] [ 96.171568][ T4486] dump_stack_lvl+0x188/0x24e [ 96.176344][ T4486] ? show_regs_print_info+0x12/0x12 [ 96.181582][ T4486] ? load_image+0x410/0x410 [ 96.186107][ T4486] ? __might_sleep+0xd0/0xd0 [ 96.190739][ T4486] ? __lock_acquire+0x7ea0/0x7ea0 [ 96.195789][ T4486] should_fail_ex+0x390/0x4c0 [ 96.200513][ T4486] should_failslab+0x5/0x20 [ 96.205046][ T4486] slab_pre_alloc_hook+0x59/0x300 [ 96.210118][ T4486] kmem_cache_alloc+0x56/0x2f0 [ 96.214904][ T4486] ? mas_alloc_nodes+0x2ec/0x880 [ 96.219889][ T4486] mas_alloc_nodes+0x2ec/0x880 [ 96.224696][ T4486] mas_preallocate+0x162/0x3b0 [ 96.229488][ T4486] do_mas_align_munmap+0x239/0x12d0 [ 96.234710][ T4486] ? verify_lock_unused+0x140/0x140 [ 96.239939][ T4486] ? do_mas_align_munmap+0x74c/0x12d0 [ 96.245333][ T4486] ? do_mas_munmap+0x2b0/0x2b0 [ 96.250123][ T4486] ? mtree_range_walk+0x664/0x780 [ 96.255180][ T4486] ? mas_walk+0x15f/0x180 [ 96.259527][ T4486] ? mas_find+0x1ba/0x220 [ 96.263884][ T4486] do_mas_munmap+0x240/0x2b0 [ 96.268502][ T4486] __vm_munmap+0x1aa/0x2d0 [ 96.272951][ T4486] ? vm_munmap+0x20/0x20 [ 96.277213][ T4486] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 96.283221][ T4486] ? syscall_enter_from_user_mode+0x21/0x80 [ 96.289133][ T4486] __x64_sys_munmap+0x5c/0x70 [ 96.293828][ T4486] do_syscall_64+0x4c/0xa0 [ 96.298268][ T4486] ? clear_bhb_loop+0x60/0xb0 [ 96.302977][ T4486] ? clear_bhb_loop+0x60/0xb0 [ 96.307674][ T4486] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.313585][ T4486] RIP: 0033:0x7f8d86d9f947 [ 96.318033][ T4486] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.337673][ T4486] RSP: 002b:00007f8d87c65d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 96.346127][ T4486] RAX: ffffffffffffffda RBX: 00007f8d80000000 RCX: 00007f8d86d9f947 [ 96.354113][ T4486] RDX: 0000000000000000 RSI: 0000000000ff7000 RDI: 00007f8d84000000 [ 96.362095][ T4486] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 96.370084][ T4486] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 96.378079][ T4486] R13: 0000000000001000 R14: 00007f8d84000000 R15: 0000000003009000 [ 96.386085][ T4486] [ 96.398594][ T130] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.429945][ C1] gadgetfs: connected [ 96.448960][ T130] gadgetfs: disconnected [ 96.478120][ T4377] libceph: connect (1)[c::]:6789 error -101 [ 96.484191][ T4377] libceph: mon0 (1)[c::]:6789 connect error [ 96.656551][ C1] gadgetfs: connected [ 96.663126][ T130] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 96.704791][ T130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.778901][ C1] gadgetfs: configuration #1 [ 96.826387][ T4486] program syz.1.17 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.869236][ T130] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input5 [ 96.927243][ T4491] device bridge0 entered promiscuous mode [ 97.069870][ T4483] gadgetfs: suspended from state 3 [ 97.116663][ T4483] gadgetfs: disconnected [ 97.136623][ T4502] Zero length message leads to an empty skb [ 97.155400][ T4373] usb 1-1: USB disconnect, device number 2 [ 97.155541][ C1] usbtouchscreen 1-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 98.569032][ T4529] netlink: 'syz.3.21': attribute type 12 has an invalid length. [ 98.699493][ T4531] loop2: detected capacity change from 0 to 1024 [ 98.710901][ T4531] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.732848][ T4531] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.744300][ T4531] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 98.974057][ T4531] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 98.983759][ T4531] System zones: 0-1, 3-36 [ 99.070518][ T4531] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 99.356726][ T4531] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 99.533513][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 99.841850][ T4546] loop2: detected capacity change from 0 to 16 [ 99.860092][ T4546] erofs: (device loop2): mounted with root inode @ nid 36. [ 101.739577][ T4566] loop4: detected capacity change from 0 to 16 [ 102.044033][ T4565] loop2: detected capacity change from 0 to 16 [ 102.154619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 102.174463][ T4566] erofs: (device loop4): mounted with root inode @ nid 36. [ 102.182657][ T4565] erofs: (device loop2): mounted with root inode @ nid 36. [ 102.227520][ T4564] overlayfs: filesystem on './file0' not supported as upperdir [ 102.234610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 103.944655][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 103.954223][ T4578] loop2: detected capacity change from 0 to 16 [ 103.988377][ T4578] erofs: (device loop2): mounted with root inode @ nid 36. [ 104.059022][ T4571] device syzkaller0 entered promiscuous mode [ 104.850838][ T4593] process 'syz.2.35' launched '/dev/fd/6' with NULL argv: empty string added [ 105.809543][ T4596] loop1: detected capacity change from 0 to 128 [ 106.844235][ T4604] loop4: detected capacity change from 0 to 16 [ 106.888449][ T4604] erofs: (device loop4): mounted with root inode @ nid 36. [ 107.003841][ T4604] overlayfs: filesystem on './file0' not supported as upperdir [ 108.887120][ T4625] loop2: detected capacity change from 0 to 1024 [ 108.966035][ T4625] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 110.020620][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 110.251598][ T4633] loop2: detected capacity change from 0 to 512 [ 110.371734][ T4633] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 110.441288][ T4638] overlayfs: missing 'lowerdir' [ 110.516814][ T4638] loop3: detected capacity change from 0 to 1024 [ 110.527121][ T4638] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.543313][ T4638] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.555856][ T4638] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 110.744914][ T4638] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 110.753542][ T4638] System zones: 0-1, 3-36 [ 110.802992][ T4638] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 111.020635][ T4640] netlink: 68 bytes leftover after parsing attributes in process `syz.3.43'. [ 111.355722][ T4638] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 112.590308][ T4647] loop2: detected capacity change from 0 to 1024 [ 112.599640][ T4647] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.621801][ T4647] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 112.633321][ T4647] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 112.753171][ T4647] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 112.762379][ T4647] System zones: 0-1, 3-36 [ 112.785287][ T4647] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 113.236295][ T4647] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 114.402815][ T4613] netlink: 'syz.1.39': attribute type 12 has an invalid length. [ 114.510569][ T4290] EXT4-fs (loop3): unmounting filesystem. [ 114.518866][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 114.828109][ T4659] loop3: detected capacity change from 0 to 16 [ 116.903596][ T4659] erofs: (device loop3): mounted with root inode @ nid 36. [ 117.032666][ T4667] loop0: detected capacity change from 0 to 16 [ 117.041604][ T4667] erofs: (device loop0): mounted with root inode @ nid 36. [ 117.147558][ T4668] overlayfs: missing 'lowerdir' [ 117.238267][ T4673] loop3: detected capacity change from 0 to 128 [ 117.396775][ T4675] loop1: detected capacity change from 0 to 1024 [ 118.024609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 118.044597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 118.054603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 118.064600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 118.074604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 118.084603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 118.094603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 118.744305][ T4692] loop0: detected capacity change from 0 to 16 [ 118.788235][ T4692] erofs: (device loop0): mounted with root inode @ nid 36. [ 119.568950][ T4696] gadgetfs: bound to dummy_udc driver [ 120.811830][ T4709] FAULT_INJECTION: forcing a failure. [ 120.811830][ T4709] name failslab, interval 1, probability 0, space 0, times 0 [ 120.865021][ T4700] device bridge0 entered promiscuous mode [ 120.944146][ T4709] CPU: 1 PID: 4709 Comm: syz.2.57 Not tainted syzkaller #0 [ 120.951431][ T4709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 120.961503][ T4709] Call Trace: [ 120.964797][ T4709] [ 120.967743][ T4709] dump_stack_lvl+0x188/0x24e [ 120.972450][ T4709] ? show_regs_print_info+0x12/0x12 [ 120.977676][ T4709] ? load_image+0x410/0x410 [ 120.982203][ T4709] ? verify_lock_unused+0x140/0x140 [ 120.987427][ T4709] should_fail_ex+0x390/0x4c0 [ 120.992124][ T4709] should_failslab+0x5/0x20 [ 120.996640][ T4709] slab_pre_alloc_hook+0x59/0x300 [ 121.001694][ T4709] kmem_cache_alloc+0x56/0x2f0 [ 121.006471][ T4709] ? skb_clone+0x1e7/0x370 [ 121.010938][ T4709] skb_clone+0x1e7/0x370 [ 121.015210][ T4709] __netlink_deliver_tap+0x3e4/0x7e0 [ 121.020544][ T4709] ? netlink_deliver_tap+0x2e/0x1b0 [ 121.025763][ T4709] netlink_deliver_tap+0x19c/0x1b0 [ 121.030934][ T4709] netlink_unicast+0x777/0x920 [ 121.035739][ T4709] netlink_sendmsg+0x8ad/0xbd0 [ 121.040530][ T4709] ? netlink_getsockopt+0x550/0x550 [ 121.045753][ T4709] ? apparmor_socket_sendmsg+0x8a/0x330 [ 121.051338][ T4709] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 121.056640][ T4709] ? security_socket_sendmsg+0x7c/0xa0 [ 121.062125][ T4709] __sys_sendto+0x497/0x650 [ 121.066651][ T4709] ? __ia32_sys_getpeername+0x80/0x80 [ 121.072070][ T4709] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 121.078079][ T4709] ? lock_chain_count+0x20/0x20 [ 121.082955][ T4709] __x64_sys_sendto+0xda/0xf0 [ 121.087658][ T4709] do_syscall_64+0x4c/0xa0 [ 121.092102][ T4709] ? clear_bhb_loop+0x60/0xb0 [ 121.096797][ T4709] ? clear_bhb_loop+0x60/0xb0 [ 121.101490][ T4709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.107412][ T4709] RIP: 0033:0x7fdb86f6034e [ 121.111838][ T4709] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 121.131474][ T4709] RSP: 002b:00007fdb87dbde88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 121.139997][ T4709] RAX: ffffffffffffffda RBX: 00007fdb87dbf6c0 RCX: 00007fdb86f6034e [ 121.147996][ T4709] RDX: 0000000000000020 RSI: 00007fdb87dbe000 RDI: 0000000000000005 [ 121.155992][ T4709] RBP: 0000000000000000 R08: 00007fdb87dbdf04 R09: 000000000000000c [ 121.164106][ T4709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 121.172181][ T4709] R13: 00007fdb87dbdf58 R14: 00007fdb87dbe000 R15: 0000000000000000 [ 121.180186][ T4709] [ 121.840820][ T4715] overlayfs: missing 'lowerdir' [ 121.985328][ T4716] loop0: detected capacity change from 0 to 1024 [ 121.995577][ T4716] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.021410][ T4716] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.032845][ T4716] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 122.150024][ T4716] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 122.158648][ T4716] System zones: 0-1, 3-36 [ 122.224541][ T4716] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 122.400759][ T4715] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 122.446633][ T4713] netlink: 68 bytes leftover after parsing attributes in process `syz.0.59'. [ 122.461658][ T4709] program syz.2.57 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.957011][ T4287] EXT4-fs (loop0): unmounting filesystem. [ 122.975426][ T4467] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 123.063774][ T4726] loop1: detected capacity change from 0 to 128 [ 123.072419][ T4467] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 123.089007][ T4467] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.119133][ T4467] Buffer I/O error on dev loop1, logical block 0, async page read [ 123.140986][ T4724] device syzkaller0 entered promiscuous mode [ 125.982954][ T4734] loop2: detected capacity change from 0 to 16 [ 125.982963][ T4732] loop0: detected capacity change from 0 to 16 [ 126.008797][ T4732] erofs: (device loop0): mounted with root inode @ nid 36. [ 126.015558][ T4734] erofs: (device loop2): mounted with root inode @ nid 36. [ 126.329426][ T4745] loop3: detected capacity change from 0 to 16 [ 126.361787][ T4745] erofs: (device loop3): mounted with root inode @ nid 36. [ 126.462352][ T4745] overlayfs: filesystem on './file0' not supported as upperdir [ 127.205595][ T4754] loop3: detected capacity change from 0 to 128 [ 129.574233][ T4764] gadgetfs: bound to dummy_udc driver [ 130.408848][ T4767] overlayfs: missing 'lowerdir' [ 130.466282][ T4767] loop3: detected capacity change from 0 to 1024 [ 130.476354][ T4767] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.530968][ T4767] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 130.542432][ T4767] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 130.702981][ T4764] FAULT_INJECTION: forcing a failure. [ 130.702981][ T4764] name failslab, interval 1, probability 0, space 0, times 0 [ 130.744811][ T4764] CPU: 0 PID: 4764 Comm: syz.0.69 Not tainted syzkaller #0 [ 130.750545][ T4767] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 130.752056][ T4764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 130.760442][ T4767] System zones: [ 130.770188][ T4764] Call Trace: [ 130.770206][ T4764] [ 130.770215][ T4764] dump_stack_lvl+0x188/0x24e [ 130.770247][ T4764] ? show_regs_print_info+0x12/0x12 [ 130.770269][ T4764] ? load_image+0x410/0x410 [ 130.770291][ T4764] ? __might_sleep+0xd0/0xd0 [ 130.770307][ T4764] ? __lock_acquire+0x7ea0/0x7ea0 [ 130.770336][ T4764] should_fail_ex+0x390/0x4c0 [ 130.770361][ T4764] should_failslab+0x5/0x20 [ 130.770379][ T4764] slab_pre_alloc_hook+0x59/0x300 [ 130.770409][ T4764] kmem_cache_alloc+0x56/0x2f0 [ 130.770427][ T4764] ? mas_alloc_nodes+0x2ec/0x880 [ 130.770451][ T4764] mas_alloc_nodes+0x2ec/0x880 [ 130.774006][ T4767] 0-1 [ 130.777292][ T4764] mas_preallocate+0x162/0x3b0 [ 130.777326][ T4764] do_mas_align_munmap+0x239/0x12d0 [ 130.777378][ T4764] ? do_mas_munmap+0x2b0/0x2b0 [ 130.777407][ T4764] ? mtree_range_walk+0x664/0x780 [ 130.780542][ T4767] , 3-36 [ 130.785218][ T4764] ? mas_walk+0x15f/0x180 [ 130.785246][ T4764] ? mas_find+0x1ba/0x220 [ 130.785266][ T4764] do_mas_munmap+0x240/0x2b0 [ 130.790632][ T4767] [ 130.795120][ T4764] mmap_region+0x7ab/0x1c50 [ 130.795154][ T4764] ? file_mmap_ok+0x170/0x170 [ 130.795174][ T4764] ? validate_mm+0x23f/0x2e0 [ 130.795195][ T4764] ? arch_get_unmapped_area+0x640/0x640 [ 130.893378][ T4764] ? cap_mmap_addr+0x153/0x2c0 [ 130.898165][ T4764] do_mmap+0x9ce/0x10d0 [ 130.902326][ T4764] ? mlock_future_check+0x100/0x100 [ 130.907522][ T4764] ? ima_file_mmap+0xf7/0x140 [ 130.912195][ T4764] ? ima_file_free+0x3e0/0x3e0 [ 130.916960][ T4764] vm_mmap_pgoff+0x1c1/0x2d0 [ 130.921546][ T4764] ? account_locked_vm+0xe0/0xe0 [ 130.926486][ T4764] ? ksys_mmap_pgoff+0xef/0x720 [ 130.931353][ T4764] ? lockdep_hardirqs_on+0x94/0x140 [ 130.936559][ T4764] do_syscall_64+0x4c/0xa0 [ 130.940973][ T4764] ? clear_bhb_loop+0x60/0xb0 [ 130.945653][ T4764] ? clear_bhb_loop+0x60/0xb0 [ 130.950327][ T4764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.956218][ T4764] RIP: 0033:0x7fc32dd9fb19 [ 130.960654][ T4764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.980269][ T4764] RSP: 002b:00007fc32bff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 130.988694][ T4764] RAX: ffffffffffffffda RBX: 00007fc32e025fa0 RCX: 00007fc32dd9fb19 [ 130.996657][ T4764] RDX: 0000000002000007 RSI: 0000000008000002 RDI: 000000110c230000 [ 131.004619][ T4764] RBP: 00007fc32de37af8 R08: 0000000000000005 R09: 0000000000000000 [ 131.012583][ T4764] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 131.020547][ T4764] R13: 00007fc32e026038 R14: 00007fc32e025fa0 R15: 00007ffc654b6088 [ 131.028525][ T4764] [ 131.051575][ T4767] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 131.137208][ T957] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 131.147706][ T4778] loop2: detected capacity change from 0 to 16 [ 131.350579][ T4778] erofs: (device loop2): mounted with root inode @ nid 36. [ 131.380006][ T4767] netlink: 68 bytes leftover after parsing attributes in process `syz.3.70'. [ 131.432993][ T4763] gadgetfs: suspended from state 2 [ 131.783971][ T4765] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 131.827045][ T4775] FAULT_INJECTION: forcing a failure. [ 131.827045][ T4775] name failslab, interval 1, probability 0, space 0, times 0 [ 131.855371][ T4775] CPU: 1 PID: 4775 Comm: syz.1.73 Not tainted syzkaller #0 [ 131.862637][ T4775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 131.872717][ T4775] Call Trace: [ 131.876079][ T4775] [ 131.879028][ T4775] dump_stack_lvl+0x188/0x24e [ 131.879471][ T4777] program syz.1.73 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.883723][ T4775] ? show_regs_print_info+0x12/0x12 [ 131.898006][ T4775] ? load_image+0x410/0x410 [ 131.902547][ T4775] ? verify_lock_unused+0x140/0x140 [ 131.907794][ T4775] should_fail_ex+0x390/0x4c0 [ 131.912513][ T4775] should_failslab+0x5/0x20 [ 131.917044][ T4775] slab_pre_alloc_hook+0x59/0x300 [ 131.922106][ T4775] kmem_cache_alloc+0x56/0x2f0 [ 131.926902][ T4775] ? skb_clone+0x1e7/0x370 [ 131.931366][ T4775] skb_clone+0x1e7/0x370 [ 131.935646][ T4775] __netlink_deliver_tap+0x3e4/0x7e0 [ 131.940978][ T4775] ? netlink_deliver_tap+0x2e/0x1b0 [ 131.946213][ T4775] netlink_deliver_tap+0x19c/0x1b0 [ 131.951378][ T4775] netlink_unicast+0x777/0x920 [ 131.956192][ T4775] netlink_sendmsg+0x8ad/0xbd0 [ 131.961000][ T4775] ? netlink_getsockopt+0x550/0x550 [ 131.966232][ T4775] ? apparmor_socket_sendmsg+0x8a/0x330 [ 131.971815][ T4775] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 131.977147][ T4775] ? security_socket_sendmsg+0x7c/0xa0 [ 131.982616][ T4775] __sys_sendto+0x497/0x650 [ 131.987151][ T4775] ? __ia32_sys_getpeername+0x80/0x80 [ 131.992532][ T4775] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 131.998508][ T4775] ? lock_chain_count+0x20/0x20 [ 132.003356][ T4775] __x64_sys_sendto+0xda/0xf0 [ 132.008028][ T4775] do_syscall_64+0x4c/0xa0 [ 132.012446][ T4775] ? clear_bhb_loop+0x60/0xb0 [ 132.017126][ T4775] ? clear_bhb_loop+0x60/0xb0 [ 132.021814][ T4775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.027770][ T4775] RIP: 0033:0x7f8d86d6034e [ 132.032208][ T4775] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 132.051844][ T4775] RSP: 002b:00007f8d87c65e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 132.060364][ T4775] RAX: ffffffffffffffda RBX: 00007f8d87c676c0 RCX: 00007f8d86d6034e [ 132.068359][ T4775] RDX: 0000000000000020 RSI: 00007f8d87c66000 RDI: 0000000000000005 [ 132.076350][ T4775] RBP: 0000000000000000 R08: 00007f8d87c65f04 R09: 000000000000000c [ 132.084332][ T4775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 132.092305][ T4775] R13: 00007f8d87c65f58 R14: 00007f8d87c66000 R15: 0000000000000000 [ 132.100283][ T4775] [ 133.090340][ T4764] device bridge0 entered promiscuous mode [ 133.201839][ T4290] EXT4-fs (loop3): unmounting filesystem. [ 133.357681][ T4788] loop4: detected capacity change from 0 to 16 [ 133.372653][ T4788] erofs: (device loop4): mounted with root inode @ nid 36. [ 135.543942][ T4796] fuse: Unknown parameter 'fd0x0000000000000003' [ 136.539226][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.545987][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.137537][ T4823] loop4: detected capacity change from 0 to 1024 [ 141.717374][ T4823] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 141.791403][ T4835] gadgetfs: bound to dummy_udc driver [ 141.960218][ T4835] FAULT_INJECTION: forcing a failure. [ 141.960218][ T4835] name failslab, interval 1, probability 0, space 0, times 0 [ 141.973962][ T4835] CPU: 1 PID: 4835 Comm: syz.0.88 Not tainted syzkaller #0 [ 141.981307][ T4835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 141.991400][ T4835] Call Trace: [ 141.994706][ T4835] [ 141.997676][ T4835] dump_stack_lvl+0x188/0x24e [ 142.002418][ T4835] ? show_regs_print_info+0x12/0x12 [ 142.007655][ T4835] ? load_image+0x410/0x410 [ 142.012228][ T4835] ? __might_sleep+0xd0/0xd0 [ 142.016898][ T4835] ? __lock_acquire+0x7ea0/0x7ea0 [ 142.021969][ T4835] should_fail_ex+0x390/0x4c0 [ 142.026691][ T4835] should_failslab+0x5/0x20 [ 142.031228][ T4835] slab_pre_alloc_hook+0x59/0x300 [ 142.036300][ T4835] kmem_cache_alloc+0x56/0x2f0 [ 142.041096][ T4835] ? mas_alloc_nodes+0x2ec/0x880 [ 142.046072][ T4835] mas_alloc_nodes+0x2ec/0x880 [ 142.050856][ T4835] mas_preallocate+0x162/0x3b0 [ 142.055639][ T4835] do_mas_align_munmap+0x239/0x12d0 [ 142.060847][ T4835] ? verify_lock_unused+0x140/0x140 [ 142.066134][ T4835] ? do_mas_align_munmap+0x74c/0x12d0 [ 142.071510][ T4835] ? do_mas_munmap+0x2b0/0x2b0 [ 142.076284][ T4835] ? mtree_range_walk+0x664/0x780 [ 142.081321][ T4835] ? mas_walk+0x15f/0x180 [ 142.085651][ T4835] ? mas_find+0x1ba/0x220 [ 142.089983][ T4835] do_mas_munmap+0x240/0x2b0 [ 142.094588][ T4835] __vm_munmap+0x1aa/0x2d0 [ 142.099020][ T4835] ? vm_munmap+0x20/0x20 [ 142.103259][ T4835] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 142.109254][ T4835] ? syscall_enter_from_user_mode+0x21/0x80 [ 142.115147][ T4835] __x64_sys_munmap+0x5c/0x70 [ 142.119825][ T4835] do_syscall_64+0x4c/0xa0 [ 142.124242][ T4835] ? clear_bhb_loop+0x60/0xb0 [ 142.128926][ T4835] ? clear_bhb_loop+0x60/0xb0 [ 142.133605][ T4835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.139498][ T4835] RIP: 0033:0x7fc32dd9f947 [ 142.143917][ T4835] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.163537][ T4835] RSP: 002b:00007fc32bff4d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 142.171957][ T4835] RAX: ffffffffffffffda RBX: 00007fc324000000 RCX: 00007fc32dd9f947 [ 142.179931][ T4835] RDX: 0000000000000000 RSI: 0000000003fb5000 RDI: 00007fc328000000 [ 142.187899][ T4835] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 142.195872][ T4835] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 142.203926][ T4835] R13: 0000000000001000 R14: 00007fc328000000 R15: 000000000004b000 [ 142.211910][ T4835] [ 142.696006][ T4835] program syz.0.88 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.723877][ T4839] device syzkaller0 entered promiscuous mode [ 142.757091][ T4833] gadgetfs: suspended from state 2 [ 142.800500][ T4288] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 142.830609][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 145.845108][ T4869] gadgetfs: bound to dummy_udc driver [ 145.957150][ T4869] FAULT_INJECTION: forcing a failure. [ 145.957150][ T4869] name failslab, interval 1, probability 0, space 0, times 0 [ 146.011903][ T4873] overlayfs: missing 'lowerdir' [ 146.027213][ T4869] CPU: 1 PID: 4869 Comm: syz.0.92 Not tainted syzkaller #0 [ 146.034507][ T4869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 146.044574][ T4869] Call Trace: [ 146.047874][ T4869] [ 146.050817][ T4869] dump_stack_lvl+0x188/0x24e [ 146.055527][ T4869] ? show_regs_print_info+0x12/0x12 [ 146.060746][ T4869] ? load_image+0x410/0x410 [ 146.065270][ T4869] ? __might_sleep+0xd0/0xd0 [ 146.069876][ T4869] ? __lock_acquire+0x7ea0/0x7ea0 [ 146.074926][ T4869] should_fail_ex+0x390/0x4c0 [ 146.079627][ T4869] should_failslab+0x5/0x20 [ 146.084138][ T4869] slab_pre_alloc_hook+0x59/0x300 [ 146.089189][ T4869] kmem_cache_alloc+0x56/0x2f0 [ 146.094006][ T4869] ? mas_alloc_nodes+0x2ec/0x880 [ 146.098970][ T4869] mas_alloc_nodes+0x2ec/0x880 [ 146.103759][ T4869] mas_preallocate+0x162/0x3b0 [ 146.108571][ T4869] do_mas_align_munmap+0x239/0x12d0 [ 146.113805][ T4869] ? do_mas_munmap+0x2b0/0x2b0 [ 146.118596][ T4869] ? mtree_range_walk+0x664/0x780 [ 146.123654][ T4869] ? mas_walk+0x15f/0x180 [ 146.128002][ T4869] ? mas_find+0x1ba/0x220 [ 146.132346][ T4869] do_mas_munmap+0x240/0x2b0 [ 146.136962][ T4869] mmap_region+0x7ab/0x1c50 [ 146.141496][ T4869] ? file_mmap_ok+0x170/0x170 [ 146.146189][ T4869] ? validate_mm+0x23f/0x2e0 [ 146.150799][ T4869] ? arch_get_unmapped_area+0x640/0x640 [ 146.156360][ T4869] ? cap_mmap_addr+0x153/0x2c0 [ 146.161163][ T4869] do_mmap+0x9ce/0x10d0 [ 146.165347][ T4869] ? mlock_future_check+0x100/0x100 [ 146.170561][ T4869] ? ima_file_mmap+0xf7/0x140 [ 146.175259][ T4869] ? ima_file_free+0x3e0/0x3e0 [ 146.180055][ T4869] vm_mmap_pgoff+0x1c1/0x2d0 [ 146.184671][ T4869] ? account_locked_vm+0xe0/0xe0 [ 146.189666][ T4869] ? ksys_mmap_pgoff+0xef/0x720 [ 146.194545][ T4869] ? lockdep_hardirqs_on+0x94/0x140 [ 146.199761][ T4869] do_syscall_64+0x4c/0xa0 [ 146.204206][ T4869] ? clear_bhb_loop+0x60/0xb0 [ 146.208910][ T4869] ? clear_bhb_loop+0x60/0xb0 [ 146.213613][ T4869] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.219531][ T4869] RIP: 0033:0x7fc32dd9fb19 [ 146.223963][ T4869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.243597][ T4869] RSP: 002b:00007fc32bff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 146.252054][ T4869] RAX: ffffffffffffffda RBX: 00007fc32e025fa0 RCX: 00007fc32dd9fb19 [ 146.260057][ T4869] RDX: 0000000002000007 RSI: 0000000008000002 RDI: 000000110c230000 [ 146.268061][ T4869] RBP: 00007fc32de37af8 R08: 0000000000000005 R09: 0000000000000000 [ 146.276065][ T4869] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 146.284063][ T4869] R13: 00007fc32e026038 R14: 00007fc32e025fa0 R15: 00007ffc654b6088 [ 146.292070][ T4869] [ 146.435158][ T4873] loop4: detected capacity change from 0 to 1024 [ 146.482070][ T4873] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.544688][ T4288] usb 1-1: device descriptor read/64, error -71 [ 146.560759][ T4873] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 146.633390][ T4873] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 146.668921][ T4288] gadgetfs: suspended from state 2 [ 146.716539][ T4873] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 146.738210][ T4873] System zones: 0-1, 3-36 [ 146.770022][ T4873] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 146.798565][ T4873] overlayfs: failed to resolve './bus': -2 [ 146.868224][ T4873] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 146.911401][ T4873] netlink: 68 bytes leftover after parsing attributes in process `syz.4.94'. [ 148.465628][ T4894] gadgetfs: bound to dummy_udc driver [ 148.494956][ T4894] FAULT_INJECTION: forcing a failure. [ 148.494956][ T4894] name failslab, interval 1, probability 0, space 0, times 0 [ 148.508379][ T4894] CPU: 0 PID: 4894 Comm: syz.2.99 Not tainted syzkaller #0 [ 148.515635][ T4894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 148.525723][ T4894] Call Trace: [ 148.529022][ T4894] [ 148.531986][ T4894] dump_stack_lvl+0x188/0x24e [ 148.536695][ T4894] ? show_regs_print_info+0x12/0x12 [ 148.541919][ T4894] ? load_image+0x410/0x410 [ 148.546463][ T4894] ? __lock_acquire+0x7ea0/0x7ea0 [ 148.551517][ T4894] should_fail_ex+0x390/0x4c0 [ 148.556197][ T4894] should_failslab+0x5/0x20 [ 148.560709][ T4894] slab_pre_alloc_hook+0x59/0x300 [ 148.565755][ T4894] ? __split_vma+0x4f0/0x4f0 [ 148.570366][ T4894] kmem_cache_alloc+0x56/0x2f0 [ 148.575135][ T4894] ? vm_area_dup+0x23/0x1a0 [ 148.579666][ T4894] vm_area_dup+0x23/0x1a0 [ 148.583991][ T4894] __split_vma+0xb9/0x4f0 [ 148.588330][ T4894] ? mas_preallocate+0x1c0/0x3b0 [ 148.593292][ T4894] do_mas_align_munmap+0x399/0x12d0 [ 148.598515][ T4894] ? verify_lock_unused+0x140/0x140 [ 148.603718][ T4894] ? do_mas_align_munmap+0x74c/0x12d0 [ 148.609105][ T4894] ? do_mas_munmap+0x2b0/0x2b0 [ 148.613893][ T4894] ? mtree_range_walk+0x664/0x780 [ 148.618923][ T4894] ? mas_walk+0x15f/0x180 [ 148.623254][ T4894] ? mas_find+0x1ba/0x220 [ 148.627605][ T4894] do_mas_munmap+0x240/0x2b0 [ 148.632218][ T4894] __vm_munmap+0x1aa/0x2d0 [ 148.636633][ T4894] ? vm_munmap+0x20/0x20 [ 148.640879][ T4894] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 148.646882][ T4894] ? syscall_enter_from_user_mode+0x21/0x80 [ 148.652796][ T4894] __x64_sys_munmap+0x5c/0x70 [ 148.657476][ T4894] do_syscall_64+0x4c/0xa0 [ 148.661922][ T4894] ? clear_bhb_loop+0x60/0xb0 [ 148.666620][ T4894] ? clear_bhb_loop+0x60/0xb0 [ 148.671318][ T4894] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.677215][ T4894] RIP: 0033:0x7fdb86f9f947 [ 148.681626][ T4894] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.701235][ T4894] RSP: 002b:00007fdb87dbdd18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 148.709659][ T4894] RAX: ffffffffffffffda RBX: 00007fdb80000000 RCX: 00007fdb86f9f947 [ 148.717649][ T4894] RDX: 0000000000000000 RSI: 00000000011f7000 RDI: 00007fdb84000000 [ 148.725629][ T4894] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 148.733638][ T4894] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 148.734745][ T4377] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 148.741600][ T4894] R13: 0000000000001000 R14: 00007fdb84000000 R15: 0000000002e09000 [ 148.741639][ T4894] [ 148.773156][ C1] gadgetfs: connected [ 148.777911][ T4377] gadgetfs: disconnected [ 148.788327][ T4894] program syz.2.99 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.959349][ C1] gadgetfs: connected [ 148.967721][ T4377] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 148.988842][ T4377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.250758][ C1] gadgetfs: configuration #1 [ 149.278718][ T4893] gadgetfs: suspended from state 3 [ 149.288468][ T4893] gadgetfs: disconnected [ 149.358023][ T4377] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input6 [ 150.024102][ T4377] usb 1-1: USB disconnect, device number 7 [ 150.030206][ C1] usbtouchscreen 1-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 151.161086][ T4903] hub 8-0:1.0: USB hub found [ 151.166647][ T4903] hub 8-0:1.0: 1 port detected [ 151.780660][ T4894] device bridge0 entered promiscuous mode [ 151.846096][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 152.267458][ T4914] hub 8-0:1.0: USB hub found [ 152.273171][ T4914] hub 8-0:1.0: 1 port detected [ 157.869505][ T4937] hub 8-0:1.0: USB hub found [ 157.874627][ T4937] hub 8-0:1.0: 1 port detected [ 158.944222][ T4951] gadgetfs: bound to dummy_udc driver [ 159.039484][ T4956] overlayfs: missing 'lowerdir' [ 159.108896][ T4957] loop1: detected capacity change from 0 to 1024 [ 159.116146][ T4957] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.125719][ T4957] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 159.137168][ T4957] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 159.304641][ T4957] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 159.313280][ T4957] System zones: 0-1, 3-36 [ 159.321015][ T4341] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 159.385495][ C1] gadgetfs: connected [ 159.392986][ T4341] gadgetfs: disconnected [ 159.491443][ T4957] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 159.716686][ T4963] netlink: 68 bytes leftover after parsing attributes in process `syz.1.113'. [ 159.799736][ T4957] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 159.852611][ T4954] device syzkaller0 entered promiscuous mode [ 159.883634][ T4962] program syz.0.112 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.916294][ C1] gadgetfs: connected [ 159.928765][ T4341] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 159.992882][ T4341] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.023733][ C1] gadgetfs: configuration #1 [ 160.034436][ T4341] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input7 [ 160.148902][ T4950] gadgetfs: suspended from state 3 [ 160.152910][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 160.166668][ T4950] gadgetfs: disconnected [ 160.173392][ T4288] usb 1-1: USB disconnect, device number 8 [ 160.521861][ T4981] loop1: detected capacity change from 0 to 16 [ 160.634084][ T4981] erofs: (device loop1): mounted with root inode @ nid 36. [ 160.800401][ T4986] loop4: detected capacity change from 0 to 16 [ 160.895614][ T4986] erofs: (device loop4): mounted with root inode @ nid 36. [ 162.356343][ T5000] loop4: detected capacity change from 0 to 16 [ 162.389437][ T5000] erofs: (device loop4): mounted with root inode @ nid 36. [ 162.831098][ T5006] loop1: detected capacity change from 0 to 16 [ 162.868462][ T5006] erofs: (device loop1): mounted with root inode @ nid 36. [ 163.881389][ T5017] loop1: detected capacity change from 0 to 1024 [ 163.896902][ T5017] EXT4-fs: Ignoring removed nomblk_io_submit option [ 163.955336][ T5017] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 163.966833][ T5017] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 164.104266][ T5017] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 164.113581][ T5017] System zones: 0-1, 3-36 [ 164.164307][ T5017] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 164.528802][ T5017] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 164.613917][ T5025] loop4: detected capacity change from 0 to 16 [ 165.019185][ T5025] erofs: (device loop4): mounted with root inode @ nid 36. [ 165.129908][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 165.689130][ T5036] loop3: detected capacity change from 0 to 1024 [ 165.698785][ T5036] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.711766][ T5036] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.723614][ T5036] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 165.791951][ T5036] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 165.800747][ T5036] System zones: 0-1, 3-36 [ 165.918818][ T5036] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 166.412423][ T5036] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 166.493496][ T4290] EXT4-fs (loop3): unmounting filesystem. [ 168.201041][ T5051] loop4: detected capacity change from 0 to 16 [ 168.255529][ T5051] erofs: (device loop4): mounted with root inode @ nid 36. [ 170.918457][ T5059] rxe_eth0 speed is unknown, defaulting to 1000 [ 171.326769][ T5074] loop0: detected capacity change from 0 to 16 [ 171.340863][ T5074] erofs: (device loop0): mounted with root inode @ nid 36. [ 171.384504][ T5071] rxe_eth0 speed is unknown, defaulting to 1000 [ 174.343851][ T5102] loop3: detected capacity change from 0 to 16 [ 174.360046][ T5102] erofs: (device loop3): mounted with root inode @ nid 36. [ 174.797186][ T5106] device syzkaller0 entered promiscuous mode [ 175.107859][ T5116] loop3: detected capacity change from 0 to 16 [ 175.181054][ T5116] erofs: (device loop3): mounted with root inode @ nid 36. [ 177.316933][ T5137] loop2: detected capacity change from 0 to 1024 [ 177.326532][ T5137] EXT4-fs: Ignoring removed nomblk_io_submit option [ 177.350771][ T5137] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 177.362240][ T5137] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 177.495538][ T5137] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 177.504124][ T5137] System zones: 0-1, 3-36 [ 177.579501][ T5137] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 178.053392][ T5137] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 178.149873][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 181.112665][ T5165] loop4: detected capacity change from 0 to 256 [ 186.013980][ T5201] gadgetfs: bound to dummy_udc driver [ 186.099256][ T5201] FAULT_INJECTION: forcing a failure. [ 186.099256][ T5201] name failslab, interval 1, probability 0, space 0, times 0 [ 186.134634][ T5201] CPU: 0 PID: 5201 Comm: syz.1.167 Not tainted syzkaller #0 [ 186.141998][ T5201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 186.152107][ T5201] Call Trace: [ 186.155413][ T5201] [ 186.158363][ T5201] dump_stack_lvl+0x188/0x24e [ 186.163071][ T5201] ? show_regs_print_info+0x12/0x12 [ 186.168300][ T5201] ? load_image+0x410/0x410 [ 186.172827][ T5201] ? __might_sleep+0xd0/0xd0 [ 186.177439][ T5201] ? __lock_acquire+0x7ea0/0x7ea0 [ 186.182493][ T5201] should_fail_ex+0x390/0x4c0 [ 186.187207][ T5201] should_failslab+0x5/0x20 [ 186.191737][ T5201] slab_pre_alloc_hook+0x59/0x300 [ 186.196784][ T5201] kmem_cache_alloc+0x56/0x2f0 [ 186.201566][ T5201] ? mas_alloc_nodes+0x2ec/0x880 [ 186.206543][ T5201] mas_alloc_nodes+0x2ec/0x880 [ 186.211337][ T5201] mas_preallocate+0x162/0x3b0 [ 186.216130][ T5201] do_mas_align_munmap+0x239/0x12d0 [ 186.221355][ T5201] ? verify_lock_unused+0x140/0x140 [ 186.226605][ T5201] ? do_mas_munmap+0x2b0/0x2b0 [ 186.231405][ T5201] ? mtree_range_walk+0x664/0x780 [ 186.236480][ T5201] ? mas_walk+0x15f/0x180 [ 186.240865][ T5201] ? mas_find+0x1ba/0x220 [ 186.245200][ T5201] do_mas_munmap+0x240/0x2b0 [ 186.249787][ T5201] __vm_munmap+0x1aa/0x2d0 [ 186.254214][ T5201] ? vm_munmap+0x20/0x20 [ 186.258457][ T5201] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 186.264451][ T5201] ? syscall_enter_from_user_mode+0x21/0x80 [ 186.270361][ T5201] __x64_sys_munmap+0x5c/0x70 [ 186.275090][ T5201] do_syscall_64+0x4c/0xa0 [ 186.279537][ T5201] ? clear_bhb_loop+0x60/0xb0 [ 186.284235][ T5201] ? clear_bhb_loop+0x60/0xb0 [ 186.288947][ T5201] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 186.294871][ T5201] RIP: 0033:0x7f8d86d9f947 [ 186.299326][ T5201] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.317669][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 186.319207][ T5201] RSP: 002b:00007f8d87c65d18 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 186.329661][ C1] gadgetfs: connected [ 186.335100][ T5201] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8d86d9f947 [ 186.342537][ T25] gadgetfs: disconnected [ 186.347066][ T5201] RDX: 0000000000000000 RSI: 0000000004000000 RDI: 00007f8d80ff7000 [ 186.359292][ T5201] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 186.367255][ T5201] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 186.375225][ T5201] R13: 0000000000001000 R14: 0000000000000022 R15: 00007f8d86e35228 [ 186.383482][ T5201] [ 186.639503][ C1] gadgetfs: connected [ 186.659929][ T25] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 186.692542][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.813677][ T5200] gadgetfs: suspended from state 3 [ 186.854161][ T5200] gadgetfs: disconnected [ 186.890594][ T25] usb 1-1: can't set config #1, error -71 [ 187.059212][ T25] usb 1-1: USB disconnect, device number 9 [ 188.525666][ T5150] rxe_eth0 speed is unknown, defaulting to 1000 [ 188.663445][ T5211] gadgetfs: bound to dummy_udc driver [ 188.761727][ T5211] FAULT_INJECTION: forcing a failure. [ 188.761727][ T5211] name failslab, interval 1, probability 0, space 0, times 0 [ 188.823518][ T5211] CPU: 0 PID: 5211 Comm: syz.2.169 Not tainted syzkaller #0 [ 188.830873][ T5211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 188.840955][ T5211] Call Trace: [ 188.844258][ T5211] [ 188.847212][ T5211] dump_stack_lvl+0x188/0x24e [ 188.852086][ T5211] ? show_regs_print_info+0x12/0x12 [ 188.857323][ T5211] ? load_image+0x410/0x410 [ 188.861867][ T5211] ? __lock_acquire+0x7ea0/0x7ea0 [ 188.867034][ T5211] should_fail_ex+0x390/0x4c0 [ 188.871772][ T5211] should_failslab+0x5/0x20 [ 188.876812][ T5211] slab_pre_alloc_hook+0x59/0x300 [ 188.881875][ T5211] ? __split_vma+0x4f0/0x4f0 [ 188.886508][ T5211] kmem_cache_alloc+0x56/0x2f0 [ 188.891304][ T5211] ? vm_area_dup+0x23/0x1a0 [ 188.895847][ T5211] vm_area_dup+0x23/0x1a0 [ 188.900211][ T5211] __split_vma+0xb9/0x4f0 [ 188.904605][ T5211] ? mas_preallocate+0x1c0/0x3b0 [ 188.909612][ T5211] do_mas_align_munmap+0x399/0x12d0 [ 188.914826][ T5211] ? verify_lock_unused+0x140/0x140 [ 188.920220][ T5211] ? do_mas_align_munmap+0x74c/0x12d0 [ 188.925598][ T5211] ? do_mas_munmap+0x2b0/0x2b0 [ 188.930380][ T5211] ? mtree_range_walk+0x664/0x780 [ 188.935497][ T5211] ? mas_walk+0x15f/0x180 [ 188.939820][ T5211] ? mas_find+0x1ba/0x220 [ 188.944159][ T5211] do_mas_munmap+0x240/0x2b0 [ 188.948770][ T5211] __vm_munmap+0x1aa/0x2d0 [ 188.953201][ T5211] ? vm_munmap+0x20/0x20 [ 188.957479][ T5211] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 188.959294][ T5217] loop3: detected capacity change from 0 to 512 [ 188.963486][ T5211] ? syscall_enter_from_user_mode+0x21/0x80 [ 188.963519][ T5211] __x64_sys_munmap+0x5c/0x70 [ 188.980367][ T5211] do_syscall_64+0x4c/0xa0 [ 188.981149][ T5217] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 188.984830][ T5211] ? clear_bhb_loop+0x60/0xb0 [ 188.984863][ T5211] ? clear_bhb_loop+0x60/0xb0 [ 188.984886][ T5211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.984908][ T5211] RIP: 0033:0x7fdb86f9f947 [ 188.984925][ T5211] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.984942][ T5211] RSP: 002b:00007fdb87dbdd18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 188.984964][ T5211] RAX: ffffffffffffffda RBX: 00007fdb80000000 RCX: 00007fdb86f9f947 [ 188.984977][ T5211] RDX: 0000000000000000 RSI: 00000000011f7000 RDI: 00007fdb84000000 [ 188.984989][ T5211] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 188.984999][ T5211] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 188.985009][ T5211] R13: 0000000000001000 R14: 00007fdb84000000 R15: 0000000002e09000 [ 189.084596][ T5211] [ 189.148049][ T5211] program syz.2.169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.174737][ T4373] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 189.182561][ C0] gadgetfs: connected [ 189.199933][ T4373] gadgetfs: disconnected [ 190.256977][ T5239] gadgetfs: bound to dummy_udc driver [ 190.284322][ T5239] FAULT_INJECTION: forcing a failure. [ 190.284322][ T5239] name failslab, interval 1, probability 0, space 0, times 0 [ 190.299571][ T5239] CPU: 0 PID: 5239 Comm: syz.3.176 Not tainted syzkaller #0 [ 190.306911][ T5239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 190.317004][ T5239] Call Trace: [ 190.320302][ T5239] [ 190.323254][ T5239] dump_stack_lvl+0x188/0x24e [ 190.327982][ T5239] ? show_regs_print_info+0x12/0x12 [ 190.333225][ T5239] ? load_image+0x410/0x410 [ 190.337773][ T5239] ? __lock_acquire+0x7ea0/0x7ea0 [ 190.342846][ T5239] should_fail_ex+0x390/0x4c0 [ 190.347649][ T5239] should_failslab+0x5/0x20 [ 190.352163][ T5239] slab_pre_alloc_hook+0x59/0x300 [ 190.357217][ T5239] ? __split_vma+0x4f0/0x4f0 [ 190.361816][ T5239] kmem_cache_alloc+0x56/0x2f0 [ 190.366707][ T5239] ? vm_area_dup+0x23/0x1a0 [ 190.371220][ T5239] vm_area_dup+0x23/0x1a0 [ 190.375602][ T5239] __split_vma+0xb9/0x4f0 [ 190.379941][ T5239] ? mas_preallocate+0x1c0/0x3b0 [ 190.384989][ T5239] do_mas_align_munmap+0x399/0x12d0 [ 190.390216][ T5239] ? verify_lock_unused+0x140/0x140 [ 190.395458][ T5239] ? do_mas_align_munmap+0x74c/0x12d0 [ 190.401054][ T5239] ? do_mas_munmap+0x2b0/0x2b0 [ 190.405943][ T5239] ? mtree_range_walk+0x664/0x780 [ 190.411000][ T5239] ? mas_walk+0x15f/0x180 [ 190.415383][ T5239] ? mas_find+0x1ba/0x220 [ 190.419734][ T5239] do_mas_munmap+0x240/0x2b0 [ 190.424355][ T5239] __vm_munmap+0x1aa/0x2d0 [ 190.428794][ T5239] ? vm_munmap+0x20/0x20 [ 190.433086][ T5239] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 190.439119][ T5239] ? syscall_enter_from_user_mode+0x21/0x80 [ 190.445023][ T5239] __x64_sys_munmap+0x5c/0x70 [ 190.449804][ T5239] do_syscall_64+0x4c/0xa0 [ 190.454250][ T5239] ? clear_bhb_loop+0x60/0xb0 [ 190.458938][ T5239] ? clear_bhb_loop+0x60/0xb0 [ 190.463632][ T5239] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.469564][ T5239] RIP: 0033:0x7f54dc19f947 [ 190.474016][ T5239] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.493631][ T5239] RSP: 002b:00007f54dd0f1d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 190.502049][ T5239] RAX: ffffffffffffffda RBX: 00007f54d4000000 RCX: 00007f54dc19f947 [ 190.510020][ T5239] RDX: 0000000000000000 RSI: 00000000023f7000 RDI: 00007f54d8000000 [ 190.518099][ T5239] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 190.526114][ T5239] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 190.534104][ T5239] R13: 0000000000001000 R14: 00007f54d8000000 R15: 0000000001c09000 [ 190.542085][ T5239] [ 190.568141][ T5239] program syz.3.176 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.590115][ T5239] device bridge0 entered promiscuous mode [ 191.382801][ T5249] overlayfs: missing 'lowerdir' [ 191.463042][ T5252] loop0: detected capacity change from 0 to 1024 [ 191.470349][ T5252] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.499135][ T5252] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 191.512293][ T5252] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 191.576408][ T5252] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 191.584884][ T5252] System zones: 0-1, 3-36 [ 191.603379][ T5252] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 191.618038][ T5252] overlayfs: failed to resolve './bus': -2 [ 191.674942][ T5257] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 192.083373][ T4287] EXT4-fs (loop0): unmounting filesystem. [ 192.305588][ T5260] device syzkaller0 entered promiscuous mode [ 193.396873][ T5271] loop1: detected capacity change from 0 to 1024 [ 193.406913][ T5271] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.432708][ T5271] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 193.444601][ T5271] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 193.565851][ T5264] rxe_eth0 speed is unknown, defaulting to 1000 [ 193.908128][ T5271] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 193.919657][ T5271] System zones: 0-1, 3-36 [ 193.941826][ T5271] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 193.981230][ T5275] gadgetfs: bound to dummy_udc driver [ 194.016084][ T5269] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 194.063995][ T5275] FAULT_INJECTION: forcing a failure. [ 194.063995][ T5275] name failslab, interval 1, probability 0, space 0, times 0 [ 194.086428][ T5275] CPU: 1 PID: 5275 Comm: syz.0.185 Not tainted syzkaller #0 [ 194.093782][ T5275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 194.103869][ T5275] Call Trace: [ 194.107191][ T5275] [ 194.110163][ T5275] dump_stack_lvl+0x188/0x24e [ 194.110780][ T5279] loop4: detected capacity change from 0 to 512 [ 194.114892][ T5275] ? show_regs_print_info+0x12/0x12 [ 194.114931][ T5275] ? load_image+0x410/0x410 [ 194.114954][ T5275] ? __lock_acquire+0x7ea0/0x7ea0 [ 194.114986][ T5275] should_fail_ex+0x390/0x4c0 [ 194.140727][ T5275] should_failslab+0x5/0x20 [ 194.145282][ T5275] slab_pre_alloc_hook+0x59/0x300 [ 194.150447][ T5275] ? __split_vma+0x4f0/0x4f0 [ 194.155212][ T5275] kmem_cache_alloc+0x56/0x2f0 [ 194.160032][ T5275] ? vm_area_dup+0x23/0x1a0 [ 194.164592][ T5275] vm_area_dup+0x23/0x1a0 [ 194.168966][ T5275] __split_vma+0xb9/0x4f0 [ 194.173346][ T5275] ? mas_preallocate+0x1c0/0x3b0 [ 194.178347][ T5275] do_mas_align_munmap+0x399/0x12d0 [ 194.183597][ T5275] ? verify_lock_unused+0x140/0x140 [ 194.188847][ T5275] ? do_mas_align_munmap+0x74c/0x12d0 [ 194.194266][ T5275] ? do_mas_munmap+0x2b0/0x2b0 [ 194.199087][ T5275] ? mtree_range_walk+0x664/0x780 [ 194.204169][ T5275] ? mas_walk+0x15f/0x180 [ 194.208503][ T5275] ? mas_find+0x1ba/0x220 [ 194.212858][ T5275] do_mas_munmap+0x240/0x2b0 [ 194.217502][ T5275] __vm_munmap+0x1aa/0x2d0 [ 194.221964][ T5275] ? vm_munmap+0x20/0x20 [ 194.226249][ T5275] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 194.232297][ T5275] ? syscall_enter_from_user_mode+0x21/0x80 [ 194.238241][ T5275] __x64_sys_munmap+0x5c/0x70 [ 194.242966][ T5275] do_syscall_64+0x4c/0xa0 [ 194.247528][ T5275] ? clear_bhb_loop+0x60/0xb0 [ 194.252259][ T5275] ? clear_bhb_loop+0x60/0xb0 [ 194.256981][ T5275] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.262913][ T5275] RIP: 0033:0x7fc32dd9f947 [ 194.267352][ T5275] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.287130][ T5275] RSP: 002b:00007fc32bff4d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 194.295585][ T5275] RAX: ffffffffffffffda RBX: 00007fc324000000 RCX: 00007fc32dd9f947 [ 194.303619][ T5275] RDX: 0000000000000000 RSI: 0000000003fd6000 RDI: 00007fc328000000 [ 194.311665][ T5275] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 194.319670][ T5275] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 194.327669][ T5275] R13: 0000000000001000 R14: 00007fc328000000 R15: 000000000002a000 [ 194.335697][ T5275] [ 194.372845][ T5279] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 194.414939][ T4373] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 194.423138][ C0] gadgetfs: connected [ 194.439200][ T4373] gadgetfs: disconnected [ 194.459305][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 194.645974][ C0] gadgetfs: connected [ 194.650974][ T4373] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 194.660173][ T4373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.995131][ T5290] loop1: detected capacity change from 0 to 16 [ 195.035246][ T5290] erofs: (device loop1): mounted with root inode @ nid 36. [ 195.091415][ T5274] gadgetfs: suspended from state 3 [ 195.187225][ T5274] gadgetfs: disconnected [ 195.431403][ T4373] usb 1-1: can't set config #1, error -71 [ 195.486888][ T4373] usb 1-1: USB disconnect, device number 11 [ 195.614215][ T5293] gadgetfs: bound to dummy_udc driver [ 195.673304][ T5293] FAULT_INJECTION: forcing a failure. [ 195.673304][ T5293] name failslab, interval 1, probability 0, space 0, times 0 [ 195.692483][ T5293] CPU: 1 PID: 5293 Comm: syz.3.191 Not tainted syzkaller #0 [ 195.699875][ T5293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 195.709962][ T5293] Call Trace: [ 195.713261][ T5293] [ 195.716218][ T5293] dump_stack_lvl+0x188/0x24e [ 195.720932][ T5293] ? show_regs_print_info+0x12/0x12 [ 195.726168][ T5293] ? load_image+0x410/0x410 [ 195.730701][ T5293] ? __lock_acquire+0x7ea0/0x7ea0 [ 195.735761][ T5293] should_fail_ex+0x390/0x4c0 [ 195.740490][ T5293] should_failslab+0x5/0x20 [ 195.745041][ T5293] slab_pre_alloc_hook+0x59/0x300 [ 195.750119][ T5293] ? __split_vma+0x4f0/0x4f0 [ 195.754803][ T5293] kmem_cache_alloc+0x56/0x2f0 [ 195.759625][ T5293] ? vm_area_dup+0x23/0x1a0 [ 195.764190][ T5293] vm_area_dup+0x23/0x1a0 [ 195.768564][ T5293] __split_vma+0xb9/0x4f0 [ 195.772933][ T5293] ? mas_preallocate+0x1c0/0x3b0 [ 195.777948][ T5293] do_mas_align_munmap+0x399/0x12d0 [ 195.783187][ T5293] ? verify_lock_unused+0x140/0x140 [ 195.788400][ T5293] ? do_mas_align_munmap+0x74c/0x12d0 [ 195.793772][ T5293] ? do_mas_munmap+0x2b0/0x2b0 [ 195.798596][ T5293] ? mtree_range_walk+0x664/0x780 [ 195.803672][ T5293] ? mas_walk+0x15f/0x180 [ 195.808032][ T5293] ? mas_find+0x1ba/0x220 [ 195.812408][ T5293] do_mas_munmap+0x240/0x2b0 [ 195.817005][ T5293] __vm_munmap+0x1aa/0x2d0 [ 195.821452][ T5293] ? vm_munmap+0x20/0x20 [ 195.825730][ T5293] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 195.827075][ T5299] overlayfs: missing 'lowerdir' [ 195.831729][ T5293] ? syscall_enter_from_user_mode+0x21/0x80 [ 195.831765][ T5293] __x64_sys_munmap+0x5c/0x70 [ 195.847328][ T5293] do_syscall_64+0x4c/0xa0 [ 195.851791][ T5293] ? clear_bhb_loop+0x60/0xb0 [ 195.856515][ T5293] ? clear_bhb_loop+0x60/0xb0 [ 195.861254][ T5293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.867189][ T5293] RIP: 0033:0x7f54dc19f947 [ 195.871633][ T5293] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.891298][ T5293] RSP: 002b:00007f54dd0f1d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 195.895700][ T5300] loop1: detected capacity change from 0 to 1024 [ 195.899728][ T5293] RAX: ffffffffffffffda RBX: 00007f54d4000000 RCX: 00007f54dc19f947 [ 195.899750][ T5293] RDX: 0000000000000000 RSI: 00000000023f7000 RDI: 00007f54d8000000 [ 195.899762][ T5293] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 195.899774][ T5293] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 195.899784][ T5293] R13: 0000000000001000 R14: 00007f54d8000000 R15: 0000000001c09000 [ 195.907107][ T5300] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.914173][ T5293] [ 195.933908][ T5300] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 195.968155][ T5300] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 196.000894][ T5293] program syz.3.191 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.019283][ T5300] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 196.027746][ T5300] System zones: 0-1, 3-36 [ 196.045686][ T5300] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 196.063907][ T5296] overlayfs: failed to resolve './bus': -2 [ 196.076166][ T5296] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 196.084973][ T5296] netlink: 68 bytes leftover after parsing attributes in process `syz.1.190'. [ 196.136509][ T4373] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 196.144342][ C0] gadgetfs: connected [ 196.154763][ T4373] gadgetfs: disconnected [ 196.357075][ C0] gadgetfs: connected [ 196.361750][ T4373] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 196.371354][ T4373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.414510][ C0] gadgetfs: configuration #1 [ 196.423627][ T4373] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input8 [ 196.439181][ T5292] gadgetfs: suspended from state 3 [ 196.452696][ T5292] gadgetfs: disconnected [ 196.476119][ C0] usbtouchscreen 1-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 196.501807][ T4373] usb 1-1: USB disconnect, device number 12 [ 197.966465][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.973730][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.350700][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 199.976324][ T5318] overlayfs: missing 'lowerdir' [ 200.084981][ T5318] loop2: detected capacity change from 0 to 1024 [ 200.095224][ T5318] EXT4-fs: Ignoring removed nomblk_io_submit option [ 200.124059][ T5318] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 200.135794][ T5318] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 200.319745][ T5318] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 200.328458][ T5318] System zones: 0-1, 3-36 [ 200.342139][ T5318] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 200.385413][ T5318] overlayfs: failed to resolve './bus': -2 [ 200.412090][ T5318] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 200.658152][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 203.154720][ T5344] loop2: detected capacity change from 0 to 16 [ 203.228511][ T5344] erofs: (device loop2): mounted with root inode @ nid 36. [ 203.403028][ T5342] rxe_eth0 speed is unknown, defaulting to 1000 [ 204.006747][ T5352] overlayfs: missing 'lowerdir' [ 204.156953][ T5352] loop0: detected capacity change from 0 to 1024 [ 204.167790][ T5352] EXT4-fs: Ignoring removed nomblk_io_submit option [ 204.193453][ T5352] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 204.205136][ T5352] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 204.401289][ T5352] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 204.409972][ T5352] System zones: 0-1, 3-36 [ 204.486894][ T5352] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 204.687844][ T5355] netlink: 68 bytes leftover after parsing attributes in process `syz.0.201'. [ 204.703055][ T5350] loop2: detected capacity change from 0 to 1024 [ 204.755489][ T5352] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 204.809479][ T5350] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 205.234818][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 205.242238][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 205.250657][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 205.262304][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 205.262346][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 205.947637][ T4287] EXT4-fs (loop0): unmounting filesystem. [ 207.271373][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 207.542915][ T5377] gadgetfs: bound to dummy_udc driver [ 207.711157][ T5387] loop2: detected capacity change from 0 to 16 [ 207.811121][ T5387] erofs: (device loop2): mounted with root inode @ nid 36. [ 207.935080][ T4366] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 207.935879][ C1] gadgetfs: connected [ 207.936111][ T4366] gadgetfs: disconnected [ 208.125326][ C1] gadgetfs: connected [ 208.145982][ T4366] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 208.146098][ T4366] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.161882][ C1] gadgetfs: configuration #1 [ 208.279716][ T4366] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input9 [ 208.426694][ T5389] loop0: detected capacity change from 0 to 16 [ 208.436939][ T5389] erofs: (device loop0): mounted with root inode @ nid 36. [ 208.547480][ T5375] gadgetfs: suspended from state 3 [ 208.547547][ T5375] gadgetfs: disconnected [ 208.549504][ T4365] usb 1-1: USB disconnect, device number 13 [ 208.741932][ T5393] overlayfs: missing 'lowerdir' [ 208.816815][ T5393] loop2: detected capacity change from 0 to 1024 [ 208.820493][ T5393] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.837218][ T5393] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 208.837278][ T5393] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 208.998141][ T5393] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 208.998530][ T5393] System zones: 0-1, 3-36 [ 209.072701][ T5393] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 209.092437][ T5393] overlayfs: failed to resolve './bus': -2 [ 209.102737][ T5393] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 209.685757][ T5402] loop1: detected capacity change from 0 to 1024 [ 209.688986][ T5402] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.692266][ T5402] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 209.692323][ T5402] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 209.702646][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 210.504043][ T5402] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 210.504145][ T5402] System zones: 0-1, 3-36 [ 210.507655][ T5402] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 210.794307][ T5407] rxe_eth0 speed is unknown, defaulting to 1000 [ 212.545935][ T5401] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 212.716391][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 213.202167][ T5416] loop4: detected capacity change from 0 to 16 [ 213.204861][ T5416] erofs: (device loop4): mounted with root inode @ nid 36. [ 216.081652][ T5439] gadgetfs: bound to dummy_udc driver [ 217.194989][ T4366] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 217.526482][ C1] gadgetfs: connected [ 217.530829][ T4366] gadgetfs: disconnected [ 217.576734][ T5439] FAULT_INJECTION: forcing a failure. [ 217.576734][ T5439] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 217.624825][ T5439] CPU: 0 PID: 5439 Comm: syz.4.221 Not tainted syzkaller #0 [ 217.632186][ T5439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 217.642297][ T5439] Call Trace: [ 217.645610][ T5439] [ 217.648567][ T5439] dump_stack_lvl+0x188/0x24e [ 217.653273][ T5439] ? show_regs_print_info+0x12/0x12 [ 217.658490][ T5439] ? load_image+0x410/0x410 [ 217.663013][ T5439] ? __lock_acquire+0x7ea0/0x7ea0 [ 217.668056][ T5439] ? __kasan_slab_alloc+0x6b/0x80 [ 217.673096][ T5439] should_fail_ex+0x390/0x4c0 [ 217.677816][ T5439] strncpy_from_user+0x32/0x340 [ 217.682709][ T5439] getname_flags+0xf2/0x500 [ 217.687232][ T5439] do_sys_openat2+0xdd/0x4f0 [ 217.691848][ T5439] ? do_sys_open+0xe0/0xe0 [ 217.696282][ T5439] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 217.702273][ T5439] ? lock_chain_count+0x20/0x20 [ 217.707141][ T5439] __x64_sys_openat+0x135/0x160 [ 217.712006][ T5439] do_syscall_64+0x4c/0xa0 [ 217.716428][ T5439] ? clear_bhb_loop+0x60/0xb0 [ 217.721131][ T5439] ? clear_bhb_loop+0x60/0xb0 [ 217.725820][ T5439] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.731713][ T5439] RIP: 0033:0x7f24b039fb19 [ 217.736161][ T5439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.755797][ T5439] RSP: 002b:00007f24b1223028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 217.764216][ T5439] RAX: ffffffffffffffda RBX: 00007f24b0625fa0 RCX: 00007f24b039fb19 [ 217.772188][ T5439] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 217.780246][ T5439] RBP: 00007f24b0437af8 R08: 0000000000000000 R09: 0000000000000000 [ 217.788303][ T5439] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 217.796300][ T5439] R13: 00007f24b0626038 R14: 00007f24b0625fa0 R15: 00007ffce89a31d8 [ 217.804283][ T5439] [ 217.835026][ C1] gadgetfs: connected [ 217.839865][ T4366] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 217.859251][ T4366] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.892609][ C1] gadgetfs: configuration #1 [ 217.924800][ T4366] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input10 [ 217.954054][ T5437] gadgetfs: suspended from state 3 [ 218.054361][ T5437] gadgetfs: disconnected [ 218.691460][ T4366] usb 1-1: USB disconnect, device number 14 [ 218.697501][ C1] usbtouchscreen 1-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 218.936276][ T5468] loop2: detected capacity change from 0 to 512 [ 219.092748][ T5468] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 220.467550][ T5480] loop0: detected capacity change from 0 to 1024 [ 220.474856][ T5480] EXT4-fs: Ignoring removed nomblk_io_submit option [ 221.371571][ T5480] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 221.383097][ T5480] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 221.416196][ T5480] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 221.424459][ T5480] System zones: 0-1, 3-36 [ 221.455541][ T5480] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 221.517507][ T5478] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 222.005854][ T5492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 222.014823][ T5492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 222.023719][ T5492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 222.036980][ T5492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 222.045931][ T5492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 222.056589][ T5492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 222.065537][ T5492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 222.076192][ T5492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 222.085143][ T5492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 222.095850][ T5492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 222.122162][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 222.139643][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.148225][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.442080][ T4287] EXT4-fs (loop0): unmounting filesystem. [ 223.687040][ T5509] gadgetfs: bound to dummy_udc driver [ 223.723197][ T5509] FAULT_INJECTION: forcing a failure. [ 223.723197][ T5509] name failslab, interval 1, probability 0, space 0, times 0 [ 223.736281][ T5509] CPU: 0 PID: 5509 Comm: syz.3.238 Not tainted syzkaller #0 [ 223.743599][ T5509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 223.753690][ T5509] Call Trace: [ 223.756991][ T5509] [ 223.759987][ T5509] dump_stack_lvl+0x188/0x24e [ 223.764722][ T5509] ? show_regs_print_info+0x12/0x12 [ 223.769946][ T5509] ? load_image+0x410/0x410 [ 223.774486][ T5509] ? __lock_acquire+0x7ea0/0x7ea0 [ 223.779555][ T5509] should_fail_ex+0x390/0x4c0 [ 223.784364][ T5509] should_failslab+0x5/0x20 [ 223.788911][ T5509] slab_pre_alloc_hook+0x59/0x300 [ 223.793972][ T5509] ? __split_vma+0x4f0/0x4f0 [ 223.798609][ T5509] kmem_cache_alloc+0x56/0x2f0 [ 223.803397][ T5509] ? vm_area_dup+0x23/0x1a0 [ 223.807938][ T5509] vm_area_dup+0x23/0x1a0 [ 223.812306][ T5509] __split_vma+0xb9/0x4f0 [ 223.816658][ T5509] ? mas_preallocate+0x1c0/0x3b0 [ 223.821715][ T5509] do_mas_align_munmap+0x399/0x12d0 [ 223.826952][ T5509] ? verify_lock_unused+0x140/0x140 [ 223.832193][ T5509] ? do_mas_align_munmap+0x74c/0x12d0 [ 223.837607][ T5509] ? do_mas_munmap+0x2b0/0x2b0 [ 223.842414][ T5509] ? mtree_range_walk+0x664/0x780 [ 223.847485][ T5509] ? mas_walk+0x15f/0x180 [ 223.851830][ T5509] ? mas_find+0x1ba/0x220 [ 223.856165][ T5509] do_mas_munmap+0x240/0x2b0 [ 223.860807][ T5509] __vm_munmap+0x1aa/0x2d0 [ 223.865223][ T5509] ? vm_munmap+0x20/0x20 [ 223.869489][ T5509] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 223.875489][ T5509] ? syscall_enter_from_user_mode+0x21/0x80 [ 223.881421][ T5509] __x64_sys_munmap+0x5c/0x70 [ 223.886173][ T5509] do_syscall_64+0x4c/0xa0 [ 223.890628][ T5509] ? clear_bhb_loop+0x60/0xb0 [ 223.895380][ T5509] ? clear_bhb_loop+0x60/0xb0 [ 223.900086][ T5509] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.905995][ T5509] RIP: 0033:0x7f54dc19f947 [ 223.910419][ T5509] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.930042][ T5509] RSP: 002b:00007f54dd0f1d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 223.938459][ T5509] RAX: ffffffffffffffda RBX: 00007f54d4000000 RCX: 00007f54dc19f947 [ 223.946433][ T5509] RDX: 0000000000000000 RSI: 00000000023f7000 RDI: 00007f54d8000000 [ 223.954442][ T5509] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 223.962505][ T5509] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 223.970479][ T5509] R13: 0000000000001000 R14: 00007f54d8000000 R15: 0000000001c09000 [ 223.978488][ T5509] [ 224.532234][ T4288] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 224.549172][ T5505] gadgetfs: suspended from state 2 [ 225.670225][ T5529] loop4: detected capacity change from 0 to 16 [ 226.081915][ T5529] erofs: (device loop4): mounted with root inode @ nid 36. [ 227.654773][ T5545] overlayfs: missing 'lowerdir' [ 227.735797][ T5545] loop1: detected capacity change from 0 to 1024 [ 227.805427][ T5545] EXT4-fs: Ignoring removed nomblk_io_submit option [ 227.868031][ T5545] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 227.868055][ T5545] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 227.916337][ T5545] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 227.916427][ T5545] System zones: 0-1, 3-36 [ 227.930455][ T5545] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 227.982084][ T5545] overlayfs: failed to resolve './bus': -2 [ 228.070456][ T5554] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 228.079923][ T5545] __nla_validate_parse: 137 callbacks suppressed [ 228.079962][ T5545] netlink: 68 bytes leftover after parsing attributes in process `syz.1.246'. [ 230.024089][ T5569] loop2: detected capacity change from 0 to 256 [ 230.102767][ T5571] gadgetfs: bound to dummy_udc driver [ 230.190754][ T5571] FAULT_INJECTION: forcing a failure. [ 230.190754][ T5571] name failslab, interval 1, probability 0, space 0, times 0 [ 230.254472][ T5571] CPU: 0 PID: 5571 Comm: syz.0.252 Not tainted syzkaller #0 [ 230.261903][ T5571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 230.271998][ T5571] Call Trace: [ 230.275293][ T5571] [ 230.278235][ T5571] dump_stack_lvl+0x188/0x24e [ 230.282951][ T5571] ? show_regs_print_info+0x12/0x12 [ 230.288213][ T5571] ? load_image+0x410/0x410 [ 230.292741][ T5571] ? __lock_acquire+0x7ea0/0x7ea0 [ 230.297808][ T5571] should_fail_ex+0x390/0x4c0 [ 230.302524][ T5571] should_failslab+0x5/0x20 [ 230.307035][ T5571] slab_pre_alloc_hook+0x59/0x300 [ 230.312058][ T5571] ? __split_vma+0x4f0/0x4f0 [ 230.316676][ T5571] kmem_cache_alloc+0x56/0x2f0 [ 230.321437][ T5571] ? vm_area_dup+0x23/0x1a0 [ 230.325943][ T5571] vm_area_dup+0x23/0x1a0 [ 230.330271][ T5571] __split_vma+0xb9/0x4f0 [ 230.334599][ T5571] ? mas_preallocate+0x1c0/0x3b0 [ 230.339544][ T5571] do_mas_align_munmap+0x399/0x12d0 [ 230.344774][ T5571] ? verify_lock_unused+0x140/0x140 [ 230.349982][ T5571] ? do_mas_align_munmap+0x74c/0x12d0 [ 230.355359][ T5571] ? do_mas_munmap+0x2b0/0x2b0 [ 230.360139][ T5571] ? mtree_range_walk+0x664/0x780 [ 230.365208][ T5571] ? mas_walk+0x15f/0x180 [ 230.369544][ T5571] ? mas_find+0x1ba/0x220 [ 230.373893][ T5571] do_mas_munmap+0x240/0x2b0 [ 230.378489][ T5571] __vm_munmap+0x1aa/0x2d0 [ 230.382925][ T5571] ? vm_munmap+0x20/0x20 [ 230.387170][ T5571] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 230.393177][ T5571] ? syscall_enter_from_user_mode+0x21/0x80 [ 230.399069][ T5571] __x64_sys_munmap+0x5c/0x70 [ 230.403749][ T5571] do_syscall_64+0x4c/0xa0 [ 230.408189][ T5571] ? clear_bhb_loop+0x60/0xb0 [ 230.412884][ T5571] ? clear_bhb_loop+0x60/0xb0 [ 230.417564][ T5571] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.423460][ T5571] RIP: 0033:0x7fc32dd9f947 [ 230.427903][ T5571] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.447533][ T5571] RSP: 002b:00007fc32bff4d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 230.455955][ T5571] RAX: ffffffffffffffda RBX: 00007fc324000000 RCX: 00007fc32dd9f947 [ 230.463930][ T5571] RDX: 0000000000000000 RSI: 0000000003fd6000 RDI: 00007fc328000000 [ 230.471931][ T5571] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 230.479906][ T5571] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 230.487878][ T5571] R13: 0000000000001000 R14: 00007fc328000000 R15: 000000000002a000 [ 230.495869][ T5571] [ 231.482245][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 232.832231][ T5588] loop3: detected capacity change from 0 to 16 [ 232.896603][ T5588] erofs: (device loop3): mounted with root inode @ nid 36. [ 235.137890][ T5612] loop4: detected capacity change from 0 to 128 [ 235.242441][ T5612] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 235.253131][ T5612] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.693211][ T5622] loop0: detected capacity change from 0 to 16 [ 235.779146][ T5622] erofs: (device loop0): mounted with root inode @ nid 36. [ 236.583969][ T5626] overlayfs: missing 'lowerdir' [ 236.616225][ T5626] loop3: detected capacity change from 0 to 1024 [ 236.623657][ T5626] EXT4-fs: Ignoring removed nomblk_io_submit option [ 236.639200][ T5626] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 236.650752][ T5626] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 236.672821][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 236.714720][ T5626] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 236.722932][ T5626] System zones: 0-1, 3-36 [ 236.742540][ T5629] loop2: detected capacity change from 0 to 256 [ 236.755914][ T5626] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 236.872512][ T5634] netlink: 68 bytes leftover after parsing attributes in process `syz.3.265'. [ 236.925566][ T5626] overlayfs: upper fs is r/o, try multi-lower layers mount [ 236.933256][ T5633] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 240.445850][ T4290] EXT4-fs (loop3): unmounting filesystem. [ 242.038704][ T5653] overlayfs: missing 'lowerdir' [ 242.115736][ T5655] loop2: detected capacity change from 0 to 1024 [ 242.123254][ T5655] EXT4-fs: Ignoring removed nomblk_io_submit option [ 242.183474][ T5655] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 242.197061][ T5655] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 242.254329][ T5655] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 242.262959][ T5655] System zones: 0-1, 3-36 [ 242.278618][ T5655] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 242.292906][ T5653] overlayfs: failed to resolve './bus': -2 [ 242.304127][ T5653] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 242.354479][ T5655] netlink: 68 bytes leftover after parsing attributes in process `syz.2.271'. [ 243.188145][ T5665] loop3: detected capacity change from 0 to 512 [ 243.326175][ T5665] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 243.415334][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 245.530629][ T5677] loop4: detected capacity change from 0 to 512 [ 245.570889][ T5677] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 246.371512][ T5687] loop1: detected capacity change from 0 to 16 [ 246.524714][ T5687] erofs: (device loop1): mounted with root inode @ nid 36. [ 248.403729][ T5709] overlayfs: missing 'lowerdir' [ 248.473813][ T5710] loop3: detected capacity change from 0 to 1024 [ 248.481296][ T5710] EXT4-fs: Ignoring removed nomblk_io_submit option [ 248.529930][ T5710] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 248.541675][ T5710] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 248.649109][ T5710] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 248.657845][ T5710] System zones: 0-1, 3-36 [ 248.713120][ T5710] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 249.091760][ T5710] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 249.521846][ T4290] EXT4-fs (loop3): unmounting filesystem. [ 250.565067][ T5729] overlayfs: missing 'lowerdir' [ 250.699074][ T5730] loop3: detected capacity change from 0 to 1024 [ 250.706320][ T5730] EXT4-fs: Ignoring removed nomblk_io_submit option [ 250.762806][ T5730] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 250.774374][ T5730] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 250.785621][ T5730] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 250.793848][ T5730] System zones: 0-1, 3-36 [ 250.801431][ T5730] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 250.900116][ T5726] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 250.912035][ T5726] netlink: 68 bytes leftover after parsing attributes in process `syz.3.283'. [ 251.050345][ T5736] netlink: 76 bytes leftover after parsing attributes in process `syz.1.286'. [ 251.116791][ T4290] EXT4-fs (loop3): unmounting filesystem. [ 251.915992][ T5747] loop3: detected capacity change from 0 to 512 [ 251.960834][ T5751] overlayfs: missing 'lowerdir' [ 251.978266][ T5751] loop4: detected capacity change from 0 to 1024 [ 251.985618][ T5751] EXT4-fs: Ignoring removed nomblk_io_submit option [ 251.992883][ T5751] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 252.005400][ T5751] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 252.027240][ T5754] netlink: 'syz.1.291': attribute type 12 has an invalid length. [ 252.039727][ T5751] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 252.048040][ T5751] System zones: 0-1, 3-36 [ 252.055397][ T5751] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 252.067595][ T5751] overlayfs: failed to resolve './bus': -2 [ 252.085025][ T5751] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 252.093666][ T5751] netlink: 68 bytes leftover after parsing attributes in process `syz.4.292'. [ 252.161170][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 252.184639][ T5747] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 252.399574][ T5759] loop2: detected capacity change from 0 to 256 [ 254.853787][ T5771] loop2: detected capacity change from 0 to 16 [ 254.868782][ T5771] erofs: (device loop2): mounted with root inode @ nid 36. [ 255.713080][ T5780] loop4: detected capacity change from 0 to 16 [ 255.745023][ T5780] erofs: (device loop4): mounted with root inode @ nid 36. [ 257.593210][ T5807] loop4: detected capacity change from 0 to 256 [ 258.106376][ T5814] loop0: detected capacity change from 0 to 1024 [ 258.114305][ T5814] EXT4-fs: Ignoring removed nomblk_io_submit option [ 258.141906][ T5814] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 258.153954][ T5814] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 258.231460][ T5814] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 258.240017][ T5814] System zones: 0-1, 3-36 [ 258.297492][ T5814] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 258.333711][ T5814] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 259.539275][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.548736][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.858246][ T5825] loop3: detected capacity change from 0 to 16 [ 259.903702][ T5825] erofs: (device loop3): mounted with root inode @ nid 36. [ 259.991704][ T5824] overlayfs: filesystem on './file0' not supported as upperdir [ 260.313521][ T4287] EXT4-fs (loop0): unmounting filesystem. [ 262.180671][ T5852] loop4: detected capacity change from 0 to 16 [ 262.191532][ T5854] overlayfs: missing 'lowerdir' [ 262.245434][ T5852] erofs: (device loop4): mounted with root inode @ nid 36. [ 262.275526][ T5855] loop3: detected capacity change from 0 to 1024 [ 262.282826][ T5855] EXT4-fs: Ignoring removed nomblk_io_submit option [ 262.294957][ T5855] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 262.306638][ T5855] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 262.862758][ T5855] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 262.871427][ T5855] System zones: 0-1, 3-36 [ 262.917390][ T5855] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 262.953438][ T5853] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 263.160858][ T4290] EXT4-fs (loop3): unmounting filesystem. [ 263.913412][ T5866] loop2: detected capacity change from 0 to 256 [ 265.027471][ T5879] hub 8-0:1.0: USB hub found [ 265.032356][ T5879] hub 8-0:1.0: 1 port detected [ 265.238273][ T5886] netlink: 'syz.0.325': attribute type 12 has an invalid length. [ 265.758054][ T5892] loop0: detected capacity change from 0 to 16 [ 266.125121][ T5892] erofs: (device loop0): mounted with root inode @ nid 36. [ 266.370275][ T5894] gadgetfs: bound to dummy_udc driver [ 266.479753][ T5894] FAULT_INJECTION: forcing a failure. [ 266.479753][ T5894] name failslab, interval 1, probability 0, space 0, times 0 [ 266.502018][ T5894] CPU: 1 PID: 5894 Comm: syz.3.327 Not tainted syzkaller #0 [ 266.509361][ T5894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 266.519506][ T5894] Call Trace: [ 266.522788][ T5894] [ 266.525714][ T5894] dump_stack_lvl+0x188/0x24e [ 266.530440][ T5894] ? show_regs_print_info+0x12/0x12 [ 266.535647][ T5894] ? load_image+0x410/0x410 [ 266.540183][ T5894] ? __might_sleep+0xd0/0xd0 [ 266.544824][ T5894] ? __lock_acquire+0x7ea0/0x7ea0 [ 266.549863][ T5894] should_fail_ex+0x390/0x4c0 [ 266.554565][ T5894] should_failslab+0x5/0x20 [ 266.559081][ T5894] slab_pre_alloc_hook+0x59/0x300 [ 266.564210][ T5894] kmem_cache_alloc+0x56/0x2f0 [ 266.568976][ T5894] ? mas_alloc_nodes+0x2ec/0x880 [ 266.573919][ T5894] mas_alloc_nodes+0x2ec/0x880 [ 266.578702][ T5894] mas_preallocate+0x162/0x3b0 [ 266.583471][ T5894] vma_expand+0x232/0x850 [ 266.587813][ T5894] mmap_region+0xc69/0x1c50 [ 266.592376][ T5894] ? file_mmap_ok+0x170/0x170 [ 266.597064][ T5894] ? vma_expand+0x850/0x850 [ 266.601588][ T5894] ? cap_mmap_addr+0x153/0x2c0 [ 266.606380][ T5894] do_mmap+0x9ce/0x10d0 [ 266.610548][ T5894] ? mlock_future_check+0x100/0x100 [ 266.615750][ T5894] ? ima_file_mmap+0xf7/0x140 [ 266.620430][ T5894] ? ima_file_free+0x3e0/0x3e0 [ 266.625199][ T5894] vm_mmap_pgoff+0x1c1/0x2d0 [ 266.629794][ T5894] ? account_locked_vm+0xe0/0xe0 [ 266.634727][ T5894] ? ksys_mmap_pgoff+0xef/0x720 [ 266.639581][ T5894] ? lockdep_hardirqs_on+0x94/0x140 [ 266.644793][ T5894] do_syscall_64+0x4c/0xa0 [ 266.649209][ T5894] ? clear_bhb_loop+0x60/0xb0 [ 266.653912][ T5894] ? clear_bhb_loop+0x60/0xb0 [ 266.658592][ T5894] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.664594][ T5894] RIP: 0033:0x7f54dc19f882 [ 266.669032][ T5894] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 266.688637][ T5894] RSP: 002b:00007f54dd0f1d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 266.697070][ T5894] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f54dc19f882 [ 266.705051][ T5894] RDX: 0000000000000000 RSI: 0000000004000000 RDI: 0000000000000000 [ 266.713021][ T5894] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 266.720988][ T5894] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 266.728955][ T5894] R13: 0000000000001000 R14: 0000000000000022 R15: 00007f54dc235228 [ 266.736935][ T5894] [ 267.492068][ T5906] hub 8-0:1.0: USB hub found [ 267.497214][ T5906] hub 8-0:1.0: 1 port detected [ 267.815601][ T25] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 267.827461][ T5893] gadgetfs: suspended from state 2 [ 268.005693][ T5913] loop1: detected capacity change from 0 to 256 [ 269.342328][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'. [ 269.351297][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'. [ 269.360235][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'. [ 269.369724][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'. [ 269.379000][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'. [ 269.388431][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'. [ 269.397338][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'. [ 269.406901][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'. [ 269.415785][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'. [ 269.425172][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'. [ 269.437007][ T5936] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 269.446777][ T5936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 269.454720][ T5936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 270.534344][ T5944] loop3: detected capacity change from 0 to 16 [ 270.562644][ T5944] erofs: (device loop3): mounted with root inode @ nid 36. [ 271.871505][ T5961] gadgetfs: bound to dummy_udc driver [ 271.897000][ T5962] hub 8-0:1.0: USB hub found [ 271.918691][ T5962] hub 8-0:1.0: 1 port detected [ 271.923803][ T5961] FAULT_INJECTION: forcing a failure. [ 271.923803][ T5961] name failslab, interval 1, probability 0, space 0, times 0 [ 271.953614][ T5961] CPU: 1 PID: 5961 Comm: syz.0.346 Not tainted syzkaller #0 [ 271.960977][ T5961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 271.971065][ T5961] Call Trace: [ 271.974357][ T5961] [ 271.977302][ T5961] dump_stack_lvl+0x188/0x24e [ 271.982012][ T5961] ? show_regs_print_info+0x12/0x12 [ 271.987323][ T5961] ? load_image+0x410/0x410 [ 271.991861][ T5961] ? __lock_acquire+0x7ea0/0x7ea0 [ 271.996918][ T5961] should_fail_ex+0x390/0x4c0 [ 272.001626][ T5961] should_failslab+0x5/0x20 [ 272.006150][ T5961] slab_pre_alloc_hook+0x59/0x300 [ 272.011204][ T5961] ? __split_vma+0x4f0/0x4f0 [ 272.015835][ T5961] kmem_cache_alloc+0x56/0x2f0 [ 272.020634][ T5961] ? vm_area_dup+0x23/0x1a0 [ 272.025203][ T5961] vm_area_dup+0x23/0x1a0 [ 272.029555][ T5961] __split_vma+0xb9/0x4f0 [ 272.033902][ T5961] ? mas_preallocate+0x1c0/0x3b0 [ 272.038875][ T5961] do_mas_align_munmap+0x399/0x12d0 [ 272.044103][ T5961] ? verify_lock_unused+0x140/0x140 [ 272.049368][ T5961] ? do_mas_align_munmap+0x74c/0x12d0 [ 272.054754][ T5961] ? do_mas_munmap+0x2b0/0x2b0 [ 272.059538][ T5961] ? mtree_range_walk+0x664/0x780 [ 272.064591][ T5961] ? mas_walk+0x15f/0x180 [ 272.068928][ T5961] ? mas_find+0x1ba/0x220 [ 272.073256][ T5961] do_mas_munmap+0x240/0x2b0 [ 272.077860][ T5961] __vm_munmap+0x1aa/0x2d0 [ 272.082297][ T5961] ? vm_munmap+0x20/0x20 [ 272.086543][ T5961] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 272.092533][ T5961] ? syscall_enter_from_user_mode+0x21/0x80 [ 272.098424][ T5961] __x64_sys_munmap+0x5c/0x70 [ 272.103104][ T5961] do_syscall_64+0x4c/0xa0 [ 272.107524][ T5961] ? clear_bhb_loop+0x60/0xb0 [ 272.112205][ T5961] ? clear_bhb_loop+0x60/0xb0 [ 272.116899][ T5961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.122795][ T5961] RIP: 0033:0x7fc32dd9f947 [ 272.127242][ T5961] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.147031][ T5961] RSP: 002b:00007fc32bff4d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 272.155451][ T5961] RAX: ffffffffffffffda RBX: 00007fc324000000 RCX: 00007fc32dd9f947 [ 272.163439][ T5961] RDX: 0000000000000000 RSI: 0000000003fd6000 RDI: 00007fc328000000 [ 272.171410][ T5961] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 272.179475][ T5961] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 272.187443][ T5961] R13: 0000000000001000 R14: 00007fc328000000 R15: 000000000002a000 [ 272.195451][ T5961] [ 272.234475][ T5961] program syz.0.346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.344707][ T5964] loop1: detected capacity change from 0 to 1024 [ 272.354959][ T4341] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 272.362760][ C1] gadgetfs: connected [ 272.367498][ T5964] EXT4-fs: Ignoring removed nomblk_io_submit option [ 272.375495][ T4341] gadgetfs: disconnected [ 272.394784][ T5964] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 272.420775][ T5964] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 272.451050][ T5964] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 272.462667][ T5964] System zones: 0-1, 3-36 [ 272.468361][ T5960] gadgetfs: suspended from state 2 [ 272.506806][ T5964] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 272.775868][ T4341] usb 1-1: device not accepting address 18, error -71 [ 272.902537][ T5964] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 273.014315][ T5983] loop0: detected capacity change from 0 to 16 [ 273.055493][ T5983] erofs: (device loop0): mounted with root inode @ nid 36. [ 273.955327][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 274.772406][ T5996] loop1: detected capacity change from 0 to 16 [ 275.253568][ T5996] erofs: (device loop1): mounted with root inode @ nid 36. [ 275.583538][ T6004] overlayfs: missing 'lowerdir' [ 275.650740][ T6005] loop0: detected capacity change from 0 to 1024 [ 275.658027][ T6005] EXT4-fs: Ignoring removed nomblk_io_submit option [ 276.549474][ T6005] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 276.560928][ T6005] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 276.763876][ T6005] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 276.773254][ T6005] System zones: 0-1, 3-36 [ 276.781149][ T6005] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 276.895935][ T6003] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 277.100594][ T4287] EXT4-fs (loop0): unmounting filesystem. [ 277.101604][ T6015] gadgetfs: bound to dummy_udc driver [ 277.293791][ T6017] program syz.1.360 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.932667][ T6014] gadgetfs: suspended from state 2 [ 277.954430][ T6021] FAULT_INJECTION: forcing a failure. [ 277.954430][ T6021] name failslab, interval 1, probability 0, space 0, times 0 [ 277.974731][ T7] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 277.987857][ T6021] CPU: 0 PID: 6021 Comm: syz.0.359 Not tainted syzkaller #0 [ 277.995250][ T6021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 278.005347][ T6021] Call Trace: [ 278.008663][ T6021] [ 278.011610][ T6021] dump_stack_lvl+0x188/0x24e [ 278.016505][ T6021] ? show_regs_print_info+0x12/0x12 [ 278.021746][ T6021] ? load_image+0x410/0x410 [ 278.026280][ T6021] ? verify_lock_unused+0x140/0x140 [ 278.031532][ T6021] should_fail_ex+0x390/0x4c0 [ 278.036212][ T6021] should_failslab+0x5/0x20 [ 278.040716][ T6021] slab_pre_alloc_hook+0x59/0x300 [ 278.045762][ T6021] kmem_cache_alloc+0x56/0x2f0 [ 278.050523][ T6021] ? skb_clone+0x1e7/0x370 [ 278.054981][ T6021] skb_clone+0x1e7/0x370 [ 278.059222][ T6021] __netlink_deliver_tap+0x3e4/0x7e0 [ 278.064535][ T6021] ? netlink_deliver_tap+0x2e/0x1b0 [ 278.069756][ T6021] netlink_deliver_tap+0x19c/0x1b0 [ 278.075058][ T6021] netlink_unicast+0x777/0x920 [ 278.075102][ T6021] netlink_sendmsg+0x8ad/0xbd0 [ 278.075162][ T6021] ? netlink_getsockopt+0x550/0x550 [ 278.075177][ T6021] ? apparmor_socket_sendmsg+0x8a/0x330 [ 278.075202][ T6021] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 278.075214][ T6021] ? security_socket_sendmsg+0x7c/0xa0 [ 278.075230][ T6021] __sys_sendto+0x497/0x650 [ 278.075247][ T6021] ? __ia32_sys_getpeername+0x80/0x80 [ 278.075285][ T6021] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 278.075301][ T6021] ? lock_chain_count+0x20/0x20 [ 278.075316][ T6021] __x64_sys_sendto+0xda/0xf0 [ 278.075330][ T6021] do_syscall_64+0x4c/0xa0 [ 278.075355][ T6021] ? clear_bhb_loop+0x60/0xb0 [ 278.075369][ T6021] ? clear_bhb_loop+0x60/0xb0 [ 278.075383][ T6021] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 278.075396][ T6021] RIP: 0033:0x7fc32dd6034e [ 278.075409][ T6021] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 278.075418][ T6021] RSP: 002b:00007fc32bff4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 278.075432][ T6021] RAX: ffffffffffffffda RBX: 00007fc32bff66c0 RCX: 00007fc32dd6034e [ 278.075440][ T6021] RDX: 0000000000000020 RSI: 00007fc32bff5000 RDI: 0000000000000005 [ 278.075448][ T6021] RBP: 0000000000000000 R08: 00007fc32bff4f04 R09: 000000000000000c [ 278.075455][ T6021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 278.075462][ T6021] R13: 00007fc32bff4f58 R14: 00007fc32bff5000 R15: 0000000000000000 [ 278.075478][ T6021] [ 278.616784][ T6033] overlayfs: missing 'lowerdir' [ 278.678752][ T6035] loop1: detected capacity change from 0 to 1024 [ 278.679578][ T6035] EXT4-fs: Ignoring removed nomblk_io_submit option [ 278.700721][ T6034] loop2: detected capacity change from 0 to 16 [ 278.708120][ T6035] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 278.708167][ T6035] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 278.721021][ T6034] erofs: (device loop2): mounted with root inode @ nid 36. [ 278.816523][ T6034] overlayfs: filesystem on './file0' not supported as upperdir [ 279.553355][ T6035] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 279.553460][ T6035] System zones: 0-1, 3-36 [ 279.587736][ T6035] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 279.590545][ T6033] overlayfs: failed to resolve './bus': -2 [ 279.592422][ T6033] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 279.593829][ T6033] __nla_validate_parse: 137 callbacks suppressed [ 279.593843][ T6033] netlink: 68 bytes leftover after parsing attributes in process `syz.1.362'. [ 279.847566][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 282.345604][ T6053] loop2: detected capacity change from 0 to 16 [ 282.426503][ T6053] erofs: (device loop2): mounted with root inode @ nid 36. [ 282.687327][ T6024] tty tty1: ldisc open failed (-12), clearing slot 0 [ 282.700768][ T6050] tty tty1: ldisc open failed (-12), clearing slot 0 [ 283.036412][ T6063] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 283.125788][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 283.134915][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 283.143804][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 283.154574][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 283.163470][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 283.174307][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 283.183332][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 283.194021][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 283.204034][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 283.224711][ T6071] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 283.241068][ T6071] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 283.249751][ T6071] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 285.249042][ T6087] overlayfs: missing 'lowerdir' [ 285.279102][ T6087] loop2: detected capacity change from 0 to 1024 [ 285.286412][ T6087] EXT4-fs: Ignoring removed nomblk_io_submit option [ 285.311947][ T6087] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 285.323437][ T6087] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 285.360169][ T6087] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 285.368503][ T6087] System zones: 0-1, 3-36 [ 285.383541][ T6087] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 285.396997][ T6087] overlayfs: failed to resolve './bus': -2 [ 285.405557][ T6087] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 285.414094][ T6087] __nla_validate_parse: 139 callbacks suppressed [ 285.414119][ T6087] netlink: 68 bytes leftover after parsing attributes in process `syz.2.376'. [ 285.570292][ T6095] loop4: detected capacity change from 0 to 1024 [ 285.577582][ T6095] EXT4-fs: Ignoring removed nomblk_io_submit option [ 285.599703][ T6095] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 285.611258][ T6095] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 285.628137][ T6095] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 285.636637][ T6095] System zones: 0-1, 3-36 [ 285.643149][ T6095] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 286.676918][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 287.104589][ T6094] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 287.172719][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 287.967680][ T6111] overlayfs: missing 'lowerdir' [ 288.069799][ T6114] loop1: detected capacity change from 0 to 1024 [ 288.076747][ T6114] EXT4-fs: Ignoring removed nomblk_io_submit option [ 288.126855][ T6114] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 288.138404][ T6114] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 288.210367][ T6114] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 288.219018][ T6114] System zones: 0-1, 3-36 [ 288.226351][ T6114] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 288.251194][ T6111] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 288.413158][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 289.130736][ T6140] netlink: 76 bytes leftover after parsing attributes in process `syz.1.387'. [ 289.725448][ T6145] overlayfs: missing 'lowerdir' [ 289.742374][ T6145] loop4: detected capacity change from 0 to 1024 [ 289.749560][ T6145] EXT4-fs: Ignoring removed nomblk_io_submit option [ 289.761037][ T6145] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 289.772437][ T6145] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 289.795958][ T6145] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 289.804259][ T6145] System zones: 0-1, 3-36 [ 289.846432][ T6145] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 289.860605][ T6145] overlayfs: failed to resolve './bus': -2 [ 289.877694][ T6145] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 289.919492][ T6145] netlink: 68 bytes leftover after parsing attributes in process `syz.4.389'. [ 290.640754][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 292.381103][ T6173] loop2: detected capacity change from 0 to 16 [ 292.455462][ T6171] loop0: detected capacity change from 0 to 16 [ 292.470443][ T6173] erofs: (device loop2): mounted with root inode @ nid 36. [ 292.480230][ T6173] overlayfs: missing 'lowerdir' [ 293.136508][ T6171] erofs: (device loop0): mounted with root inode @ nid 36. [ 296.038549][ T6198] netlink: 76 bytes leftover after parsing attributes in process `syz.4.400'. [ 297.387615][ T6205] overlayfs: missing 'lowerdir' [ 297.624700][ T6207] loop2: detected capacity change from 0 to 1024 [ 297.631914][ T6207] EXT4-fs: Ignoring removed nomblk_io_submit option [ 297.728581][ T6207] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 297.740783][ T6207] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 297.808938][ T6207] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 297.817248][ T6207] System zones: 0-1, 3-36 [ 297.826666][ T6207] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 297.840261][ T6205] overlayfs: failed to resolve './bus': -2 [ 297.860081][ T6205] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 297.869168][ T6205] netlink: 68 bytes leftover after parsing attributes in process `syz.2.401'. [ 297.964015][ T6215] loop3: detected capacity change from 0 to 1024 [ 298.015918][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 298.050556][ T6215] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 298.227450][ T6223] loop4: detected capacity change from 0 to 16 [ 299.167294][ T6223] erofs: (device loop4): mounted with root inode @ nid 36. [ 299.185921][ T6223] overlayfs: missing 'lowerdir' [ 299.235498][ T4290] EXT4-fs (loop3): unmounting filesystem. [ 301.520733][ T6251] loop1: detected capacity change from 0 to 1024 [ 301.659192][ T6251] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 305.768164][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 305.805398][ T6280] netlink: 76 bytes leftover after parsing attributes in process `syz.2.416'. [ 306.476653][ T6288] loop4: detected capacity change from 0 to 16 [ 306.494051][ T6288] erofs: (device loop4): mounted with root inode @ nid 36. [ 307.889608][ T6292] tipc: Started in network mode [ 307.924754][ T6292] tipc: Node identity daa522010dbd, cluster identity 4711 [ 307.952901][ T6292] tipc: Enabled bearer , priority 0 [ 308.039587][ T6299] device syzkaller0 entered promiscuous mode [ 308.122915][ T6292] tipc: Resetting bearer [ 308.134922][ T6304] overlayfs: missing 'lowerdir' [ 308.153479][ T6291] tipc: Resetting bearer [ 308.182001][ T6291] tipc: Disabling bearer [ 308.241034][ T6303] loop4: detected capacity change from 0 to 1024 [ 308.344352][ T6303] EXT4-fs: Ignoring removed nomblk_io_submit option [ 308.396172][ T6303] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 308.475896][ T6303] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 308.677429][ T6303] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 308.691159][ T6303] System zones: 0-1, 3-36 [ 308.985140][ T6317] rxe_eth0 speed is unknown, defaulting to 1000 [ 310.670709][ T6303] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 312.316619][ T6337] loop0: detected capacity change from 0 to 1024 [ 312.327091][ T6337] EXT4-fs: Ignoring removed nomblk_io_submit option [ 312.350532][ T6337] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 312.362053][ T6337] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 312.549103][ T6337] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 312.557917][ T6337] System zones: 0-1, 3-36 [ 312.583506][ T6337] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 313.734753][ T6337] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 313.823175][ T6346] loop1: detected capacity change from 0 to 1024 [ 313.905934][ T6346] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 314.126022][ T4287] EXT4-fs (loop0): unmounting filesystem. [ 314.131894][ C1] ================================================================== [ 314.131992][ C1] BUG: KASAN: use-after-free in __xfrm_state_delete+0x3db/0x940 [ 314.132055][ C1] Write of size 8 at addr ffff888055ec3990 by task syz-executor/4287 [ 314.132113][ C1] [ 314.132130][ C1] CPU: 1 PID: 4287 Comm: syz-executor Not tainted syzkaller #0 [ 314.132151][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 314.132167][ C1] Call Trace: [ 314.132177][ C1] [ 314.132185][ C1] dump_stack_lvl+0x188/0x24e [ 314.132219][ C1] ? __lock_acquire+0x7ea0/0x7ea0 [ 314.132260][ C1] ? show_regs_print_info+0x12/0x12 [ 314.132287][ C1] ? load_image+0x410/0x410 [ 314.132311][ C1] ? __virt_addr_valid+0x467/0x540 [ 314.132354][ C1] ? __xfrm_state_delete+0x3db/0x940 [ 314.132373][ C1] print_report+0xa8/0x210 [ 314.132396][ C1] kasan_report+0x10b/0x140 [ 314.132432][ C1] ? __xfrm_state_delete+0x3db/0x940 [ 314.132454][ C1] __xfrm_state_delete+0x3db/0x940 [ 314.132480][ C1] xfrm_timer_handler+0x10b/0x970 [ 314.132501][ C1] ? xfrm_state_alloc+0x2a0/0x2a0 [ 314.132518][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 314.132545][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 314.132565][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 314.132590][ C1] ? _raw_spin_unlock+0x40/0x40 [ 314.132615][ C1] __hrtimer_run_queues+0x522/0xc90 [ 314.132653][ C1] ? xfrm_state_alloc+0x2a0/0x2a0 [ 314.132673][ C1] ? hrtimer_interrupt+0x980/0x980 [ 314.132696][ C1] hrtimer_run_softirq+0x173/0x290 [ 314.132719][ C1] handle_softirqs+0x291/0x910 [ 314.132743][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 314.132762][ C1] ? do_softirq+0x210/0x210 [ 314.132777][ C1] ? hrtimer_interrupt+0x775/0x980 [ 314.132802][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 314.132826][ C1] __irq_exit_rcu+0x13b/0x230 [ 314.132847][ C1] ? irq_exit_rcu+0x20/0x20 [ 314.132868][ C1] irq_exit_rcu+0x5/0x20 [ 314.132884][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 314.132904][ C1] [ 314.132910][ C1] [ 314.132917][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 314.132943][ C1] RIP: 0010:console_emit_next_record+0x92f/0xb50 [ 314.132968][ C1] Code: 0f 85 af 00 00 00 e8 00 ba 1a 00 0f b6 5c 24 0f 4d 85 f6 75 07 e8 f1 b9 1a 00 eb 06 e8 ea b9 1a 00 fb 66 43 c7 44 2f 24 f8 f8 <43> c6 44 2f 26 f8 48 b8 f8 f2 f2 f2 f8 f8 f8 f8 48 05 00 06 06 06 [ 314.132989][ C1] RSP: 0018:ffffc900045976e0 EFLAGS: 00000293 [ 314.133011][ C1] RAX: ffffffff8167aeb6 RBX: 0000000000000001 RCX: ffff88807dc00000 [ 314.133025][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.133036][ C1] RBP: ffffc90004597900 R08: ffffffff91b62247 R09: 1ffffffff236c448 [ 314.133050][ C1] R10: dffffc0000000000 R11: fffffbfff236c449 R12: 1ffff920008b2f27 [ 314.133064][ C1] R13: dffffc0000000000 R14: 0000000000000200 R15: 1ffff920008b2ee8 [ 314.133087][ C1] ? console_emit_next_record+0x926/0xb50 [ 314.133109][ C1] ? console_emit_next_record+0x68f/0xb50 [ 314.133128][ C1] ? info_print_prefix+0x360/0x360 [ 314.133149][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 314.133184][ C1] ? __down_trylock_console_sem+0xf2/0x1f0 [ 314.133212][ C1] ? __down_trylock_console_sem+0x19f/0x1f0 [ 314.133237][ C1] ? _printk+0xda/0x130 [ 314.133257][ C1] ? _printk+0xda/0x130 [ 314.133277][ C1] ? console_trylock+0x160/0x160 [ 314.133306][ C1] console_unlock+0x223/0x630 [ 314.133332][ C1] ? _printk+0xda/0x130 [ 314.133352][ C1] vprintk_emit+0x4b3/0x6a0 [ 314.133377][ C1] ? printk_sprint+0x460/0x460 [ 314.133401][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 314.133423][ C1] ? _raw_spin_unlock+0x40/0x40 [ 314.133447][ C1] _printk+0xda/0x130 [ 314.133475][ C1] ? load_image+0x410/0x410 [ 314.133494][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 314.133521][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 314.133545][ C1] __ext4_msg+0x2b2/0x2c0 [ 314.133595][ C1] ? ___ratelimit+0x474/0x610 [ 314.133613][ C1] ? __ext4_std_error+0x4b0/0x4b0 [ 314.133639][ C1] ? radix_tree_cpu_dead+0x160/0x160 [ 314.133657][ C1] ? kobject_put+0x416/0x450 [ 314.133679][ C1] ext4_put_super+0xb3/0xc00 [ 314.133713][ C1] ? ext4_drop_inode+0x2b0/0x2b0 [ 314.133734][ C1] generic_shutdown_super+0x130/0x340 [ 314.133764][ C1] kill_block_super+0x7c/0xe0 [ 314.133791][ C1] deactivate_locked_super+0x93/0xf0 [ 314.133811][ C1] cleanup_mnt+0x471/0x4f0 [ 314.133846][ C1] task_work_run+0x1d0/0x260 [ 314.133875][ C1] ? task_work_cancel+0x220/0x220 [ 314.133942][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 314.133979][ C1] exit_to_user_mode_loop+0xe6/0x110 [ 314.134005][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 314.134034][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 314.134054][ C1] do_syscall_64+0x58/0xa0 [ 314.134086][ C1] ? clear_bhb_loop+0x60/0xb0 [ 314.134114][ C1] ? clear_bhb_loop+0x60/0xb0 [ 314.134139][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.134163][ C1] RIP: 0033:0x7fc32dda0d57 [ 314.134180][ C1] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 314.134199][ C1] RSP: 002b:00007ffc654b3118 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 314.134222][ C1] RAX: 0000000000000000 RBX: 0000000000000064 RCX: 00007fc32dda0d57 [ 314.134234][ C1] RDX: 0000000000000200 RSI: 0000000000000009 RDI: 00007ffc654b42c0 [ 314.134246][ C1] RBP: 00007fc32de36f3b R08: 0000000000020550 R09: 0000000000000001 [ 314.134258][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffc654b42c0 [ 314.134270][ C1] R13: 00007fc32de36f3b R14: 00005555738164e8 R15: 00007ffc654b6480 [ 314.134290][ C1] [ 314.134296][ C1] [ 314.134299][ C1] Allocated by task 4385: [ 314.134317][ C1] kasan_set_track+0x4b/0x70 [ 314.134345][ C1] __kasan_kmalloc+0x8e/0xa0 [ 314.134367][ C1] __kmalloc+0xb3/0x240 [ 314.134389][ C1] ieee802_11_parse_elems_full+0xb4/0x1240 [ 314.134437][ C1] ieee80211_bss_info_update+0x7df/0xbf0 [ 314.134461][ C1] ieee80211_ibss_rx_queued_mgmt+0x1931/0x2eb0 [ 314.134485][ C1] ieee80211_iface_work+0x72c/0xc70 [ 314.134503][ C1] cfg80211_wiphy_work+0x224/0x260 [ 314.134540][ C1] process_one_work+0x8ab/0x1160 [ 314.134557][ C1] worker_thread+0xaf5/0x12a0 [ 314.134575][ C1] kthread+0x29d/0x330 [ 314.134601][ C1] ret_from_fork+0x1f/0x30 [ 314.134637][ C1] [ 314.134641][ C1] Freed by task 4385: [ 314.134648][ C1] kasan_set_track+0x4b/0x70 [ 314.134670][ C1] kasan_save_free_info+0x27/0x40 [ 314.134687][ C1] ____kasan_slab_free+0x126/0x1f0 [ 314.134710][ C1] slab_free_freelist_hook+0x133/0x1b0 [ 314.134731][ C1] __kmem_cache_free+0xb6/0x200 [ 314.134749][ C1] ieee80211_bss_info_update+0x889/0xbf0 [ 314.134767][ C1] ieee80211_ibss_rx_queued_mgmt+0x1931/0x2eb0 [ 314.134792][ C1] ieee80211_iface_work+0x72c/0xc70 [ 314.134815][ C1] cfg80211_wiphy_work+0x224/0x260 [ 314.134837][ C1] process_one_work+0x8ab/0x1160 [ 314.134855][ C1] worker_thread+0xaf5/0x12a0 [ 314.134873][ C1] kthread+0x29d/0x330 [ 314.134887][ C1] ret_from_fork+0x1f/0x30 [ 314.134907][ C1] [ 314.134910][ C1] The buggy address belongs to the object at ffff888055ec3800 [ 314.134910][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 314.134938][ C1] The buggy address is located 400 bytes inside of [ 314.134938][ C1] 1024-byte region [ffff888055ec3800, ffff888055ec3c00) [ 314.134956][ C1] [ 314.134960][ C1] The buggy address belongs to the physical page: [ 314.135014][ C1] page:ffffea000157b000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55ec0 [ 314.135046][ C1] head:ffffea000157b000 order:3 compound_mapcount:0 compound_pincount:0 [ 314.135060][ C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 314.135099][ C1] raw: 00fff00000010200 ffffea0001f8b400 dead000000000002 ffff888018441dc0 [ 314.135115][ C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 314.135124][ C1] page dumped because: kasan: bad access detected [ 314.135138][ C1] page_owner tracks the page as allocated [ 314.135144][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 58, tgid 58 (kworker/u4:4), ts 82755374129, free_ts 30112403830 [ 314.135176][ C1] post_alloc_hook+0x173/0x1a0 [ 314.135204][ C1] get_page_from_freelist+0x206b/0x2180 [ 314.135229][ C1] __alloc_pages+0x1ec/0x4f0 [ 314.135252][ C1] alloc_slab_page+0x5d/0x180 [ 314.135272][ C1] new_slab+0x87/0x2d0 [ 314.135291][ C1] ___slab_alloc+0xbc5/0x1240 [ 314.135309][ C1] __kmem_cache_alloc_node+0x126/0x270 [ 314.135327][ C1] __kmalloc_node_track_caller+0xa0/0x240 [ 314.135344][ C1] __alloc_skb+0x226/0x7d0 [ 314.135370][ C1] __netdev_alloc_skb+0x114/0x4f0 [ 314.135389][ C1] batadv_iv_ogm_queue_add+0x833/0xdb0 [ 314.135424][ C1] batadv_iv_ogm_schedule+0x860/0x1080 [ 314.135445][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x6e9/0x800 [ 314.135468][ C1] process_one_work+0x8ab/0x1160 [ 314.135515][ C1] worker_thread+0xaf5/0x12a0 [ 314.135533][ C1] kthread+0x29d/0x330 [ 314.135547][ C1] page last free stack trace: [ 314.135552][ C1] free_unref_page_prepare+0x8e5/0x9e0 [ 314.135575][ C1] free_unref_page+0x2e/0x3f0 [ 314.135602][ C1] free_contig_range+0x9d/0x150 [ 314.135622][ C1] destroy_args+0xef/0xa0e [ 314.135704][ C1] debug_vm_pgtable+0x33c/0x38e [ 314.135725][ C1] do_one_initcall+0x257/0x800 [ 314.135745][ C1] do_initcall_level+0x13d/0x1ed [ 314.135768][ C1] do_initcalls+0x4b/0x8a [ 314.135783][ C1] kernel_init_freeable+0x401/0x5ab [ 314.135799][ C1] kernel_init+0x19/0x1b0 [ 314.135817][ C1] ret_from_fork+0x1f/0x30 [ 314.135838][ C1] [ 314.135841][ C1] Memory state around the buggy address: [ 314.135855][ C1] ffff888055ec3880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 314.135867][ C1] ffff888055ec3900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 314.135879][ C1] >ffff888055ec3980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 314.135888][ C1] ^ [ 314.135896][ C1] ffff888055ec3a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 314.135912][ C1] ffff888055ec3a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 314.135921][ C1] ================================================================== [ 314.136002][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 314.136010][ C1] CPU: 1 PID: 4287 Comm: syz-executor Not tainted syzkaller #0 [ 314.136028][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 314.136038][ C1] Call Trace: [ 314.136044][ C1] [ 314.136051][ C1] dump_stack_lvl+0x188/0x24e [ 314.136099][ C1] ? memcpy+0x3c/0x60 [ 314.136117][ C1] ? show_regs_print_info+0x12/0x12 [ 314.136141][ C1] ? load_image+0x410/0x410 [ 314.136166][ C1] panic+0x2d3/0x710 [ 314.136186][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 314.136205][ C1] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 314.136227][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 314.136248][ C1] ? _raw_spin_unlock+0x40/0x40 [ 314.136267][ C1] ? print_memory_metadata+0x314/0x400 [ 314.136291][ C1] check_panic_on_warn+0x80/0xa0 [ 314.136317][ C1] ? __xfrm_state_delete+0x3db/0x940 [ 314.136334][ C1] end_report+0x66/0x110 [ 314.136358][ C1] kasan_report+0x118/0x140 [ 314.136384][ C1] ? __xfrm_state_delete+0x3db/0x940 [ 314.136404][ C1] __xfrm_state_delete+0x3db/0x940 [ 314.136425][ C1] xfrm_timer_handler+0x10b/0x970 [ 314.136445][ C1] ? xfrm_state_alloc+0x2a0/0x2a0 [ 314.136461][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 314.136482][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 314.136502][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 314.136523][ C1] ? _raw_spin_unlock+0x40/0x40 [ 314.136547][ C1] __hrtimer_run_queues+0x522/0xc90 [ 314.136572][ C1] ? xfrm_state_alloc+0x2a0/0x2a0 [ 314.136587][ C1] ? hrtimer_interrupt+0x980/0x980 [ 314.136605][ C1] hrtimer_run_softirq+0x173/0x290 [ 314.136627][ C1] handle_softirqs+0x291/0x910 [ 314.136646][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 314.136664][ C1] ? do_softirq+0x210/0x210 [ 314.136679][ C1] ? hrtimer_interrupt+0x775/0x980 [ 314.136700][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 314.136719][ C1] __irq_exit_rcu+0x13b/0x230 [ 314.136735][ C1] ? irq_exit_rcu+0x20/0x20 [ 314.136755][ C1] irq_exit_rcu+0x5/0x20 [ 314.136771][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 314.136790][ C1] [ 314.136796][ C1] [ 314.136802][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 314.136826][ C1] RIP: 0010:console_emit_next_record+0x92f/0xb50 [ 314.136845][ C1] Code: 0f 85 af 00 00 00 e8 00 ba 1a 00 0f b6 5c 24 0f 4d 85 f6 75 07 e8 f1 b9 1a 00 eb 06 e8 ea b9 1a 00 fb 66 43 c7 44 2f 24 f8 f8 <43> c6 44 2f 26 f8 48 b8 f8 f2 f2 f2 f8 f8 f8 f8 48 05 00 06 06 06 [ 314.136860][ C1] RSP: 0018:ffffc900045976e0 EFLAGS: 00000293 [ 314.136876][ C1] RAX: ffffffff8167aeb6 RBX: 0000000000000001 RCX: ffff88807dc00000 [ 314.136889][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.136900][ C1] RBP: ffffc90004597900 R08: ffffffff91b62247 R09: 1ffffffff236c448 [ 314.136913][ C1] R10: dffffc0000000000 R11: fffffbfff236c449 R12: 1ffff920008b2f27 [ 314.136926][ C1] R13: dffffc0000000000 R14: 0000000000000200 R15: 1ffff920008b2ee8 [ 314.136942][ C1] ? console_emit_next_record+0x926/0xb50 [ 314.136963][ C1] ? console_emit_next_record+0x68f/0xb50 [ 314.136981][ C1] ? info_print_prefix+0x360/0x360 [ 314.137001][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 314.137029][ C1] ? __down_trylock_console_sem+0xf2/0x1f0 [ 314.137094][ C1] ? __down_trylock_console_sem+0x19f/0x1f0 [ 314.137119][ C1] ? _printk+0xda/0x130 [ 314.137139][ C1] ? _printk+0xda/0x130 [ 314.137157][ C1] ? console_trylock+0x160/0x160 [ 314.137182][ C1] console_unlock+0x223/0x630 [ 314.137206][ C1] ? _printk+0xda/0x130 [ 314.137226][ C1] vprintk_emit+0x4b3/0x6a0 [ 314.137250][ C1] ? printk_sprint+0x460/0x460 [ 314.137274][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 314.137295][ C1] ? _raw_spin_unlock+0x40/0x40 [ 314.137319][ C1] _printk+0xda/0x130 [ 314.137340][ C1] ? load_image+0x410/0x410 [ 314.137359][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 314.137382][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 314.137405][ C1] __ext4_msg+0x2b2/0x2c0 [ 314.137433][ C1] ? ___ratelimit+0x474/0x610 [ 314.137450][ C1] ? __ext4_std_error+0x4b0/0x4b0 [ 314.137475][ C1] ? radix_tree_cpu_dead+0x160/0x160 [ 314.137492][ C1] ? kobject_put+0x416/0x450 [ 314.137523][ C1] ext4_put_super+0xb3/0xc00 [ 314.137546][ C1] ? ext4_drop_inode+0x2b0/0x2b0 [ 314.137567][ C1] generic_shutdown_super+0x130/0x340 [ 314.137588][ C1] kill_block_super+0x7c/0xe0 [ 314.137610][ C1] deactivate_locked_super+0x93/0xf0 [ 314.137630][ C1] cleanup_mnt+0x471/0x4f0 [ 314.137653][ C1] task_work_run+0x1d0/0x260 [ 314.137675][ C1] ? task_work_cancel+0x220/0x220 [ 314.137699][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 314.137726][ C1] exit_to_user_mode_loop+0xe6/0x110 [ 314.137751][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 314.137776][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 314.137796][ C1] do_syscall_64+0x58/0xa0 [ 314.137819][ C1] ? clear_bhb_loop+0x60/0xb0 [ 314.137842][ C1] ? clear_bhb_loop+0x60/0xb0 [ 314.137867][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.137890][ C1] RIP: 0033:0x7fc32dda0d57 [ 314.137905][ C1] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 314.137920][ C1] RSP: 002b:00007ffc654b3118 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 314.137938][ C1] RAX: 0000000000000000 RBX: 0000000000000064 RCX: 00007fc32dda0d57 [ 314.137950][ C1] RDX: 0000000000000200 RSI: 0000000000000009 RDI: 00007ffc654b42c0 [ 314.137966][ C1] RBP: 00007fc32de36f3b R08: 0000000000020550 R09: 0000000000000001 [ 314.137978][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffc654b42c0 [ 314.137989][ C1] R13: 00007fc32de36f3b R14: 00005555738164e8 R15: 00007ffc654b6480 [ 314.138007][ C1] [ 314.138279][ C1] Kernel Offset: disabled [ 315.706593][ C1] Rebooting in 86400 seconds..