last executing test programs: 26.839165067s ago: executing program 2 (id=2951): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000001c0)=0x80, 0x400) r2 = socket(0x840000000002, 0x3, 0xff) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000200)={'nat\x00', 0x78, "3fdca2c218170c5a1596df143a965bc6aa762f567a3da5e808b59e9c30e5f56daca6a744a6ad3c953012902fba1d1a4d72a303410b0618f65171fd96191c6b04a02a8c91d58b8037f079b29d6c6b75df2e16a0d855694de6fb422ba816426f2517cb018d2056f4efa139b57cd32d4e826aabad2e531d9245"}, &(0x7f0000000340)=0x9c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="6000000002060500000000000000000007000000140007800800114000000040080012400000ffff0500010006000800050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d6172"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000100)="e0b954", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0xffffffff, @local, 0x9}, 0x1c) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) sendmsg$inet(r2, &(0x7f00000001c0)={&(0x7f00000006c0)={0x2, 0x4e21, @multicast2=0xe0000001}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000140)="9745edff0000000001008cc5ffffffff", 0x10}, {&(0x7f0000000000)="74145fdae5ca0070777c079c", 0xc}], 0x2, &(0x7f0000000840)}, 0x4044040) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd24, 0x25dfdbfa, {0x0, 0x0, 0xe0, 0x0, 0x0, 0x10400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x34}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x88840}, 0x0) 20.170631177s ago: executing program 2 (id=2963): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 18.82363117s ago: executing program 2 (id=2965): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='external:', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='raid5', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='2', 0x1) write(0xffffffffffffffff, &(0x7f0000000400)='6553', 0x4) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/dev-ram0/ppl_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000740)='128', 0x3) 11.472565717s ago: executing program 2 (id=2975): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, r3) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) 10.592528699s ago: executing program 0 (id=2976): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1e01}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) close(0x3) 9.50798596s ago: executing program 2 (id=2978): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 8.467043109s ago: executing program 0 (id=2980): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x121c02, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xcf0b, 0x0, 0x3, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x101, 0x11, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 7.004043459s ago: executing program 3 (id=2983): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='external:', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='raid5', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='6553', 0x4) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/dev-ram0/ppl_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000740)='128', 0x3) 6.688608434s ago: executing program 3 (id=2984): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB], 0xe) 6.269379074s ago: executing program 0 (id=2985): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f00000001c0)=[{0x3ff, 0x40, 0x13, 0xfffffe00}]}, 0x10) 6.194091747s ago: executing program 2 (id=2986): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, &(0x7f0000000400)='\x00') mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {@errors_remount}]}, 0x1, 0x52f, &(0x7f00000005c0)="$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") mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ff) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000200), 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f0, &(0x7f0000001040)={'ip_vti0\x00', 0x0}) symlink(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlink(&(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') 5.947976329s ago: executing program 3 (id=2987): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x1) writev(r4, &(0x7f0000000140), 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 4.937898657s ago: executing program 3 (id=2988): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1e01}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) close(0x3) 2.696008303s ago: executing program 1 (id=2990): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'ip6gre0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r1, 0x4004743a, 0x0) 2.480447833s ago: executing program 1 (id=2991): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'mpc624\x00', [0x10f, 0x9, 0x7fffffff, 0xc, 0x8, 0x5, 0x79, 0x3, 0x3, 0x100, 0x6, 0x6, 0x6, 0x80000001, 0x1ff, 0xfd, 0xfffffffc, 0x803, 0x10, 0x2, 0x8, 0x0, 0x0, 0x20001e58, 0xffffffff, 0x3, 0x6, 0x80000008, 0xa6b5, 0x4, 0xffffffff]}) 2.272481673s ago: executing program 1 (id=2992): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='external:', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='raid5', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='6553', 0x4) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/dev-ram0/ppl_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000740)='128', 0x3) 2.192675387s ago: executing program 0 (id=2993): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r0, &(0x7f0000001800)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca", 0x16) r1 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f00000091c0)=""/16384, 0x4000) 1.997731316s ago: executing program 1 (id=2994): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) write$char_usb(r0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008080) 1.931520679s ago: executing program 0 (id=2995): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB], 0xe) 1.930525899s ago: executing program 3 (id=2996): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x1) writev(r4, &(0x7f0000000140), 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 831.996921ms ago: executing program 3 (id=2997): bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10) listen(0xffffffffffffffff, 0x5) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000f54c0)={0x0, 0x0, "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", "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"}) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100)="26c2", 0xfffff, 0xffffffffffffffff) 794.956362ms ago: executing program 1 (id=2998): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x800, &(0x7f0000000000), 0x26, 0x75b, &(0x7f0000000d80)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x40200) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 400.980851ms ago: executing program 0 (id=2999): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7046b57d5400fddbdf25", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'vlan1\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x2, 0x3, 0xd, 0x82, 0x200, 0x3, 0xffff, 0x4}}) 0s ago: executing program 1 (id=3000): r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./hb_file\x00', 0x42, 0x1b6) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f00000005e0), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) dup2(r1, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/cluster/ocfs2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='127.0.0.1\n', 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='7777\n', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/ocfs2/node/node0/num\x00', 0x2, 0x0) write(r4, &(0x7f00000002c0)='0\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/ocfs2/node/node0/local\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/cluster/ocfs2/heartbeat/hb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/cluster/ocfs2/heartbeat/hb0/block_bytes\x00', 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/cluster/ocfs2/heartbeat/hb0/blocks\x00', 0x2, 0x0) write(r6, &(0x7f00000007c0)='100\n', 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/cluster/ocfs2/heartbeat/hb0/dev\x00', 0x2, 0x0) write(r7, &(0x7f0000000840)='10\n', 0x3) kernel console output (not intermixed with test programs): 80417272 (sector = 1) [ 765.829481][T11277] trusted_key: encrypted_key: keylen parameter is missing [ 766.638250][T11286] loop2: detected capacity change from 0 to 16 [ 766.680810][T11286] erofs: (device loop2): mounted with root inode @ nid 36. [ 771.023239][T11311] trusted_key: encrypted_key: keylen parameter is missing [ 772.022870][T11318] netlink: 'syz.2.1721': attribute type 10 has an invalid length. [ 777.055363][T11354] trusted_key: encrypted_key: keylen parameter is missing [ 777.404755][T11353] bond1: entered allmulticast mode [ 777.427088][T11353] 8021q: adding VLAN 0 to HW filter on device bond1 [ 782.175956][T11384] loop3: detected capacity change from 0 to 32768 [ 782.937100][T11384] read_mapping_page failed! [ 782.942297][T11384] ERROR: (device loop3): txCommit: [ 782.942297][T11384] [ 782.980168][T11389] bridge0: port 3(netdevsim0) entered blocking state [ 782.987291][T11389] bridge0: port 3(netdevsim0) entered forwarding state [ 782.994508][T11389] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.001656][T11389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.009567][T11389] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.016917][T11389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.653968][T11411] FAULT_INJECTION: forcing a failure. [ 784.653968][T11411] name failslab, interval 1, probability 0, space 0, times 0 [ 785.566814][T11411] CPU: 1 PID: 11411 Comm: syz.3.1750 Not tainted syzkaller #0 [ 785.574360][T11411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 785.584446][T11411] Call Trace: [ 785.587748][T11411] [ 785.590696][T11411] dump_stack_lvl+0x18c/0x250 [ 785.595410][T11411] ? show_regs_print_info+0x20/0x20 [ 785.600631][T11411] ? load_image+0x420/0x420 [ 785.605157][T11411] ? __lock_acquire+0x7d80/0x7d80 [ 785.610209][T11411] should_fail_ex+0x394/0x4c0 [ 785.614915][T11411] should_failslab+0x9/0x20 [ 785.619452][T11411] slab_pre_alloc_hook+0x59/0x300 [ 785.624502][T11411] ? key_alloc+0x34a/0x1030 [ 785.629027][T11411] ? key_alloc+0x34a/0x1030 [ 785.633553][T11411] __kmem_cache_alloc_node+0x53/0x250 [ 785.638967][T11411] ? slab_post_alloc_hook+0x86/0x4d0 [ 785.644307][T11411] ? key_alloc+0x34a/0x1030 [ 785.648835][T11411] __kmalloc_node_track_caller+0xa4/0x230 [ 785.654583][T11411] kmemdup+0x2b/0x70 [ 785.658501][T11411] key_alloc+0x34a/0x1030 [ 785.662857][T11411] keyring_alloc+0x45/0xb0 [ 785.667295][T11411] lookup_user_key+0x4aa/0x1140 [ 785.672170][T11411] ? lookup_user_key_possessed+0x40/0x40 [ 785.677825][T11411] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 785.683823][T11411] ? __might_fault+0xaa/0x120 [ 785.688519][T11411] ? _copy_from_user+0xa5/0xe0 [ 785.693303][T11411] __se_sys_request_key+0x228/0x350 [ 785.698525][T11411] ? __x64_sys_request_key+0xb0/0xb0 [ 785.703834][T11411] ? lockdep_hardirqs_on+0x98/0x150 [ 785.709056][T11411] do_syscall_64+0x55/0xb0 [ 785.713488][T11411] ? clear_bhb_loop+0x40/0x90 [ 785.718193][T11411] ? clear_bhb_loop+0x40/0x90 [ 785.722888][T11411] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 785.728802][T11411] RIP: 0033:0x7fbb17b9e159 [ 785.733230][T11411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.752850][T11411] RSP: 002b:00007fbb18983028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 785.761295][T11411] RAX: ffffffffffffffda RBX: 00007fbb17e25fa0 RCX: 00007fbb17b9e159 [ 785.769283][T11411] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 785.777533][T11411] RBP: 00007fbb17c3506b R08: 0000000000000000 R09: 0000000000000000 [ 785.785564][T11411] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 785.793566][T11411] R13: 00007fbb17e26038 R14: 00007fbb17e25fa0 R15: 00007ffe4d4ceee8 [ 785.801582][T11411] [ 787.151506][T11441] loop2: detected capacity change from 0 to 16 [ 787.466548][T11441] erofs: (device loop2): mounted with root inode @ nid 36. [ 788.698620][T11440] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 788.741413][T11451] netlink: 'syz.3.1768': attribute type 10 has an invalid length. [ 788.904384][T11454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1769'. [ 788.934269][T11454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1769'. [ 789.568695][T11464] ipip0: entered promiscuous mode [ 789.607550][T11464] ipip0: entered allmulticast mode [ 794.068606][T11486] netlink: 'syz.0.1781': attribute type 10 has an invalid length. [ 794.285755][T11486] bridge0: port 3(netdevsim0) entered disabled state [ 794.292700][T11486] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.299888][T11486] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.499857][T11492] trusted_key: encrypted_key: keylen parameter is missing [ 795.239543][T11499] bridge: RTM_NEWNEIGH with invalid ether address [ 795.278610][T11499] bridge: RTM_NEWNEIGH with invalid ether address [ 795.477671][T11501] overlayfs: failed to clone upperpath [ 795.618946][T11506] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 799.526518][T11523] raw_sendmsg: syz.2.1795 forgot to set AF_INET. Fix it! [ 801.610717][T11535] trusted_key: encrypted_key: keylen parameter is missing [ 803.570583][T11546] loop2: detected capacity change from 0 to 32768 [ 805.066748][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1804'. [ 805.327213][T11544] ERROR: (device loop2): diAllocAG: ipimap->i_size is wrong [ 805.327213][T11544] [ 805.338450][T11544] ERROR: (device loop2): remounting filesystem as read-only [ 805.345758][T11544] ialloc: diAlloc returned -5! [ 805.978646][T11558] netlink: 'syz.3.1807': attribute type 5 has an invalid length. [ 806.334280][T11560] overlayfs: failed to clone upperpath [ 806.456385][T11562] ip6gre1: entered allmulticast mode [ 806.513128][T11562] team0: Device ip6gre1 is of different type [ 807.127296][T11571] trusted_key: encrypted_key: keylen parameter is missing [ 807.186999][T11575] netlink: 'syz.2.1813': attribute type 10 has an invalid length. [ 808.230664][T11590] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 808.966890][T11601] loop1: detected capacity change from 0 to 8 [ 808.983359][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.989919][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.998218][T11601] Dev loop1: unable to read RDB block 8 [ 809.023115][T11601] loop1: unable to read partition table [ 809.048648][T11601] loop1: partition table beyond EOD, truncated [ 809.096855][T11601] loop_reread_partitions: partition scan of loop1 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 809.437867][T11604] netlink: 'syz.2.1824': attribute type 10 has an invalid length. [ 811.373099][T11624] overlayfs: failed to clone upperpath [ 813.332763][T11640] bridge0: port 3(netdevsim0) entered blocking state [ 813.339770][T11640] bridge0: port 3(netdevsim0) entered forwarding state [ 813.346885][T11640] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.354114][T11640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.361518][T11640] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.368714][T11640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.638135][T11640] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 817.239546][T11670] FAULT_INJECTION: forcing a failure. [ 817.239546][T11670] name failslab, interval 1, probability 0, space 0, times 0 [ 817.318513][T11670] CPU: 0 PID: 11670 Comm: syz.0.1847 Not tainted syzkaller #0 [ 817.326063][T11670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 817.336166][T11670] Call Trace: [ 817.339488][T11670] [ 817.342461][T11670] dump_stack_lvl+0x18c/0x250 [ 817.347199][T11670] ? show_regs_print_info+0x20/0x20 [ 817.352449][T11670] ? load_image+0x420/0x420 [ 817.356994][T11670] ? verify_lock_unused+0x140/0x140 [ 817.362245][T11670] should_fail_ex+0x394/0x4c0 [ 817.366979][T11670] should_failslab+0x9/0x20 [ 817.371526][T11670] slab_pre_alloc_hook+0x59/0x300 [ 817.376614][T11670] kmem_cache_alloc+0x5a/0x2c0 [ 817.381425][T11670] ? skb_clone+0x1eb/0x370 [ 817.385926][T11670] skb_clone+0x1eb/0x370 [ 817.390224][T11670] __netlink_deliver_tap+0x411/0x7f0 [ 817.395649][T11670] ? netlink_deliver_tap+0x2e/0x1b0 [ 817.400894][T11670] netlink_deliver_tap+0x19c/0x1b0 [ 817.406081][T11670] netlink_sendskb+0x68/0x130 [ 817.410809][T11670] netlink_ack+0xcd5/0x1160 [ 817.415398][T11670] ? netlink_dump+0xec0/0xec0 [ 817.420118][T11670] ? ref_tracker_free+0x686/0x830 [ 817.425225][T11670] netlink_rcv_skb+0x2b3/0x4c0 [ 817.430036][T11670] ? genl_bind+0x360/0x360 [ 817.434495][T11670] ? netlink_ack+0x1160/0x1160 [ 817.439318][T11670] ? __lock_acquire+0x7d80/0x7d80 [ 817.444392][T11670] ? down_read+0x1ac/0x2e0 [ 817.448849][T11670] genl_rcv+0x28/0x40 [ 817.452879][T11670] netlink_unicast+0x7b1/0x930 [ 817.457702][T11670] netlink_sendmsg+0x8d0/0xbf0 [ 817.462521][T11670] ? netlink_getsockopt+0x590/0x590 [ 817.467763][T11670] ? apparmor_socket_sendmsg+0x8e/0x330 [ 817.473374][T11670] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 817.478701][T11670] ? security_socket_sendmsg+0x80/0xa0 [ 817.484197][T11670] __sys_sendto+0x4a9/0x6b0 [ 817.488755][T11670] ? __ia32_sys_getpeername+0x90/0x90 [ 817.494179][T11670] ? __lock_acquire+0x7d80/0x7d80 [ 817.499265][T11670] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 817.505295][T11670] ? lock_chain_count+0x20/0x20 [ 817.510198][T11670] ? lock_chain_count+0x20/0x20 [ 817.515104][T11670] __x64_sys_sendto+0xde/0xf0 [ 817.519831][T11670] do_syscall_64+0x55/0xb0 [ 817.524290][T11670] ? clear_bhb_loop+0x40/0x90 [ 817.529017][T11670] ? clear_bhb_loop+0x40/0x90 [ 817.533765][T11670] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 817.540055][T11670] RIP: 0033:0x7f753d55e98e [ 817.544518][T11670] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 817.564187][T11670] RSP: 002b:00007f753e457e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 817.572695][T11670] RAX: ffffffffffffffda RBX: 00007f753e4596c0 RCX: 00007f753d55e98e [ 817.580701][T11670] RDX: 0000000000000020 RSI: 00007f753e458000 RDI: 0000000000000007 [ 817.588705][T11670] RBP: 0000000000000000 R08: 00007f753e457f04 R09: 000000000000000c [ 817.596728][T11670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 817.604753][T11670] R13: 00007f753e457f58 R14: 00007f753e458000 R15: 0000000000000000 [ 817.613576][T11670] [ 818.316348][T11680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1851'. [ 819.451327][T11693] loop3: detected capacity change from 0 to 128 [ 819.677293][T11693] syz.3.1854: attempt to access beyond end of device [ 819.677293][T11693] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 820.332009][T11696] loop3: detected capacity change from 0 to 128 [ 820.474684][T11698] netdevsim0: mtu less than device minimum [ 821.173925][T11704] loop3: detected capacity change from 0 to 128 [ 821.877191][ T28] audit: type=1800 audit(1790149662.013:40): pid=11710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1858" name="file2" dev="loop3" ino=1048601 res=0 errno=0 [ 824.668760][T11726] ptp ptp0: new virtual clock ptp1 [ 824.697688][T11726] ptp ptp0: guarantee physical clock free running [ 826.576702][T11739] loop3: detected capacity change from 0 to 16 [ 828.805793][T11749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1864'. [ 829.597016][T11755] loop2: detected capacity change from 0 to 16 [ 831.169448][T11755] erofs: (device loop2): mounted with root inode @ nid 36. [ 833.180934][T11778] FAULT_INJECTION: forcing a failure. [ 833.180934][T11778] name failslab, interval 1, probability 0, space 0, times 0 [ 833.213170][T11778] CPU: 0 PID: 11778 Comm: syz.0.1879 Not tainted syzkaller #0 [ 833.220755][T11778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 833.230861][T11778] Call Trace: [ 833.234176][T11778] [ 833.237141][T11778] dump_stack_lvl+0x18c/0x250 [ 833.241897][T11778] ? show_regs_print_info+0x20/0x20 [ 833.247160][T11778] ? load_image+0x420/0x420 [ 833.251720][T11778] ? __lock_acquire+0x7d80/0x7d80 [ 833.256809][T11778] should_fail_ex+0x394/0x4c0 [ 833.261568][T11778] should_failslab+0x9/0x20 [ 833.266127][T11778] slab_pre_alloc_hook+0x59/0x300 [ 833.271220][T11778] ? get_mountpoint+0x205/0x440 [ 833.276120][T11778] __kmem_cache_alloc_node+0x53/0x250 [ 833.281642][T11778] ? get_mountpoint+0x205/0x440 [ 833.286543][T11778] kmalloc_trace+0x2a/0xe0 [ 833.291081][T11778] get_mountpoint+0x205/0x440 [ 833.295808][T11778] attach_recursive_mnt+0x1a4/0x1920 [ 833.301621][T11778] ? graft_tree+0x1b0/0x1b0 [ 833.306177][T11778] ? do_raw_spin_unlock+0x121/0x230 [ 833.311522][T11778] ? ktime_get_real_seconds+0x9/0x20 [ 833.316867][T11778] ? mnt_warn_timestamp_expiry+0x12f/0x2c0 [ 833.322742][T11778] do_new_mount+0x843/0xa40 [ 833.327307][T11778] __se_sys_mount+0x2e7/0x3d0 [ 833.332045][T11778] ? __x64_sys_mount+0xc0/0xc0 [ 833.336863][T11778] ? lockdep_hardirqs_on+0x98/0x150 [ 833.342211][T11778] ? __x64_sys_mount+0x20/0xc0 [ 833.347027][T11778] do_syscall_64+0x55/0xb0 [ 833.351499][T11778] ? clear_bhb_loop+0x40/0x90 [ 833.356244][T11778] ? clear_bhb_loop+0x40/0x90 [ 833.360976][T11778] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 833.366925][T11778] RIP: 0033:0x7f753d59e159 [ 833.371402][T11778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 833.391062][T11778] RSP: 002b:00007f753e459028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 833.399538][T11778] RAX: ffffffffffffffda RBX: 00007f753d825fa0 RCX: 00007f753d59e159 [ 833.407576][T11778] RDX: 0000200000000140 RSI: 0000200000000080 RDI: 0000000000000000 [ 833.415615][T11778] RBP: 00007f753d63506b R08: 0000000000000000 R09: 0000000000000000 [ 833.423617][T11778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 833.431600][T11778] R13: 00007f753d826038 R14: 00007f753d825fa0 R15: 00007ffd7440d6f8 [ 833.439598][T11778] [ 836.142037][T11799] loop7: detected capacity change from 0 to 7 [ 836.172944][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 836.182340][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 836.208328][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 836.217538][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 836.229334][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 836.241292][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 836.250503][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 836.280363][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 836.291980][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 836.301195][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 836.311498][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 836.320709][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 836.331603][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 836.340774][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 836.349489][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 836.358673][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 836.366523][T11799] ldm_validate_partition_table(): Disk read failed. [ 836.373788][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 836.382949][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 836.425128][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 836.434831][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 836.446510][T11799] Dev loop7: unable to read RDB block 0 [ 836.467158][T11799] loop7: unable to read partition table [ 836.494140][T11799] loop7: partition table beyond EOD, truncated [ 836.528567][T11799] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 841.179456][T11832] loop3: detected capacity change from 0 to 16 [ 841.280889][T11832] erofs: (device loop3): mounted with root inode @ nid 36. [ 842.778395][T11835] loop2: detected capacity change from 0 to 32768 [ 844.093302][T11838] loop3: detected capacity change from 0 to 16 [ 844.436218][T11838] erofs: (device loop3): mounted with root inode @ nid 36. [ 844.514089][T11834] ERROR: (device loop2): diAllocAG: ipimap->i_size is wrong [ 844.514089][T11834] [ 844.528421][T11834] ERROR: (device loop2): remounting filesystem as read-only [ 844.535767][T11834] ialloc: diAlloc returned -5! [ 847.418586][T11861] : renamed from veth0_macvtap (while UP) [ 847.763076][T11865] ip_tables: iptables: counters copy to user failed while replacing table [ 848.407246][T11874] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 848.416960][T11874] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 848.426194][T11874] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 848.435487][T11874] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 848.444724][T11874] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 848.453984][T11874] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 848.463236][T11874] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 848.472424][T11874] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 848.481555][T11874] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 851.141148][T11900] warning: `syz.0.1920' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 853.921018][T11918] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1928'. [ 854.045927][T11920] loop3: detected capacity change from 0 to 16 [ 854.079199][T11920] erofs: (device loop3): mounted with root inode @ nid 36. [ 856.743624][T11939] loop3: detected capacity change from 0 to 2048 [ 856.840548][T11939] loop3: p1 < > p4 [ 856.846563][T11939] loop3: p4 size 8388608 extends beyond EOD, truncated [ 857.277851][T11945] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1938'. [ 857.379401][T11754] udevd[11754]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 857.405715][T11946] bridge0: port 3(netdevsim0) entered blocking state [ 857.412565][T11946] bridge0: port 3(netdevsim0) entered forwarding state [ 857.419646][T11946] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.426756][T11946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.434134][T11946] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.441267][T11946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.554560][T11754] udevd[11754]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 857.825959][T11946] net_ratelimit: 3320 callbacks suppressed [ 857.826036][T11946] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 865.019984][T11987] loop3: detected capacity change from 0 to 32768 [ 865.128490][T11987] read_mapping_page failed! [ 865.133096][T11987] ERROR: (device loop3): txCommit: [ 865.133096][T11987] [ 865.533927][T11997] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1954'. [ 866.559305][T12002] trusted_key: encrypted_key: key user:syz not found [ 868.212924][T12008] loop3: detected capacity change from 0 to 32768 [ 869.652574][T12005] ERROR: (device loop3): diAllocAG: ipimap->i_size is wrong [ 869.652574][T12005] [ 869.662335][T12005] ERROR: (device loop3): remounting filesystem as read-only [ 869.669727][T12005] ialloc: diAlloc returned -5! [ 870.428980][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.566975][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.350313][T12016] loop3: detected capacity change from 0 to 16 [ 871.446385][T12016] erofs: (device loop3): mounted with root inode @ nid 36. [ 872.791294][T12027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1966'. [ 872.916732][T12027] 8021q: adding VLAN 0 to HW filter on device bond1 [ 873.247230][T12029] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 873.268881][T12031] trusted_key: encrypted_key: key user:syz not found [ 874.727745][ T5764] smpboot: CPU 1 is now offline [ 875.322153][T12043] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1970'. [ 877.749699][T12053] netlink: 1708 bytes leftover after parsing attributes in process `syz.1.1972'. [ 878.269464][ T28] audit: type=1326 audit(1790149718.413:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.2.1973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08d4d9e159 code=0x0 [ 879.499365][T12072] trusted_key: encrypted_key: key user:syz not found [ 879.709840][T12075] 9pnet_fd: Insufficient options for proto=fd [ 879.792623][T12078] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1980'. [ 880.184200][T12085] loop2: detected capacity change from 0 to 16 [ 880.264067][T12085] erofs: (device loop2): mounted with root inode @ nid 36. [ 881.770802][T12096] loop3: detected capacity change from 0 to 32768 [ 881.808664][T12096] ERROR: (device loop3): diAllocAG: ipimap->i_size is wrong [ 881.808664][T12096] [ 881.828479][T12096] ERROR: (device loop3): remounting filesystem as read-only [ 881.835832][T12096] ialloc: diAlloc returned -5! [ 882.056277][T12101] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1990'. [ 883.834928][T12108] trusted_key: encrypted_key: key user:syz not found [ 883.869825][T12115] loop3: detected capacity change from 0 to 16 [ 883.928799][T12115] erofs: (device loop3): mounted with root inode @ nid 36. [ 884.909900][T12123] loop3: detected capacity change from 0 to 16 [ 884.958742][T12123] erofs: (device loop3): mounted with root inode @ nid 36. [ 888.221084][T12146] trusted_key: encrypted_key: key user:syz not found [ 890.956005][T12164] block device autoloading is deprecated and will be removed. [ 891.096607][T12164] md: loop0 has zero or unknown size, marking faulty! [ 891.120914][T12164] md: md_import_device returned -22 [ 891.757259][T12174] loop3: detected capacity change from 0 to 16 [ 891.783644][T12174] erofs: (device loop3): mounted with root inode @ nid 36. [ 893.333787][T12177] trusted_key: encrypted_key: key user:syz not found [ 894.160879][T12188] loop3: detected capacity change from 0 to 32768 [ 894.186719][T12188] ERROR: (device loop3): diAllocAG: ipimap->i_size is wrong [ 894.186719][T12188] [ 894.196808][T12188] ERROR: (device loop3): remounting filesystem as read-only [ 894.204208][T12188] ialloc: diAlloc returned -5! [ 895.454776][T12206] autofs4:pid:12206:autofs_fill_super: called with bogus options [ 897.739274][T12224] trusted_key: encrypted_key: key user:syz not found [ 897.811675][T12227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2032'. [ 898.153026][T12233] netdevsim0: mtu less than device minimum [ 899.916824][T12254] netdevsim0: mtu less than device minimum [ 901.004454][T12256] trusted_key: encrypted_key: key user:syz not found [ 901.881299][T12263] loop2: detected capacity change from 0 to 32768 [ 901.939067][T12263] ERROR: (device loop2): diAllocAG: ipimap->i_size is wrong [ 901.939067][T12263] [ 901.954967][T12263] ERROR: (device loop2): remounting filesystem as read-only [ 901.962389][T12263] ialloc: diAlloc returned -5! [ 903.684998][T12280] FAULT_INJECTION: forcing a failure. [ 903.684998][T12280] name failslab, interval 1, probability 0, space 0, times 0 [ 903.750498][T12280] CPU: 0 PID: 12280 Comm: syz.0.2053 Not tainted syzkaller #0 [ 903.757995][T12280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 903.768043][T12280] Call Trace: [ 903.771318][T12280] [ 903.774249][T12280] dump_stack_lvl+0x18c/0x250 [ 903.778930][T12280] ? show_regs_print_info+0x20/0x20 [ 903.784130][T12280] ? load_image+0x420/0x420 [ 903.788633][T12280] ? __might_sleep+0xe0/0xe0 [ 903.793223][T12280] ? __lock_acquire+0x7d80/0x7d80 [ 903.798249][T12280] ? _raw_spin_lock_irq+0xbb/0xf0 [ 903.803282][T12280] ? _raw_spin_lock_irqsave+0x100/0x100 [ 903.808822][T12280] should_fail_ex+0x394/0x4c0 [ 903.813498][T12280] should_failslab+0x9/0x20 [ 903.817998][T12280] slab_pre_alloc_hook+0x59/0x300 [ 903.823025][T12280] kmem_cache_alloc+0x5a/0x2c0 [ 903.827789][T12280] ? fanotify_add_mark+0x411/0xd30 [ 903.832918][T12280] fanotify_add_mark+0x411/0xd30 [ 903.837856][T12280] ? fanotify_events_supported+0x1d7/0x2f0 [ 903.843661][T12280] do_fanotify_mark+0xc45/0xdb0 [ 903.848522][T12280] ? copy_fid_info_to_user+0x6f0/0x6f0 [ 903.853980][T12280] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 903.859998][T12280] ? lock_chain_count+0x20/0x20 [ 903.864854][T12280] __x64_sys_fanotify_mark+0xb5/0xd0 [ 903.870161][T12280] do_syscall_64+0x55/0xb0 [ 903.874575][T12280] ? clear_bhb_loop+0x40/0x90 [ 903.879257][T12280] ? clear_bhb_loop+0x40/0x90 [ 903.883934][T12280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 903.889823][T12280] RIP: 0033:0x7f753d59e159 [ 903.894238][T12280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 903.913842][T12280] RSP: 002b:00007f753e459028 EFLAGS: 00000246 ORIG_RAX: 000000000000012d [ 903.922260][T12280] RAX: ffffffffffffffda RBX: 00007f753d825fa0 RCX: 00007f753d59e159 [ 903.930248][T12280] RDX: 000000000800101b RSI: 0000000000000105 RDI: 0000000000000004 [ 903.938246][T12280] RBP: 00007f753d63506b R08: 0000000000000000 R09: 0000000000000000 [ 903.946233][T12280] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 903.954228][T12280] R13: 00007f753d826038 R14: 00007f753d825fa0 R15: 00007ffd7440d6f8 [ 903.962222][T12280] [ 905.737546][T12286] trusted_key: encrypted_key: key user:syz not found [ 906.984132][T12296] loop0: detected capacity change from 0 to 32768 [ 907.258237][T12296] ERROR: (device loop0): diAllocAG: ipimap->i_size is wrong [ 907.258237][T12296] [ 907.305893][T12296] ERROR: (device loop0): remounting filesystem as read-only [ 907.342879][T12296] ialloc: diAlloc returned -5! [ 907.715801][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2065'. [ 908.913583][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2065'. [ 911.494896][T12347] netdevsim0: mtu less than device minimum [ 915.574270][T12389] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 917.097030][T12410] FAULT_INJECTION: forcing a failure. [ 917.097030][T12410] name fail_futex, interval 1, probability 0, space 0, times 1 [ 917.334549][T12410] CPU: 0 PID: 12410 Comm: syz.3.2094 Not tainted syzkaller #0 [ 917.342070][T12410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 917.352127][T12410] Call Trace: [ 917.355403][T12410] [ 917.358334][T12410] dump_stack_lvl+0x18c/0x250 [ 917.363019][T12410] ? show_regs_print_info+0x20/0x20 [ 917.368216][T12410] ? load_image+0x420/0x420 [ 917.372728][T12410] ? mark_lock+0x94/0x320 [ 917.377067][T12410] ? __lock_acquire+0x1262/0x7d80 [ 917.382090][T12410] should_fail_ex+0x394/0x4c0 [ 917.386774][T12410] get_futex_key+0x136/0x1030 [ 917.391470][T12410] ? futex_unqueue+0xcb/0xf0 [ 917.396062][T12410] ? futex_setup_timer+0xc0/0xc0 [ 917.401018][T12410] futex_wake+0x127/0x4f0 [ 917.405347][T12410] ? futex_wake_mark+0x150/0x150 [ 917.410286][T12410] do_futex+0x35d/0x3e0 [ 917.414434][T12410] ? __fget_files+0x28/0x460 [ 917.419022][T12410] ? __ia32_sys_get_robust_list+0x110/0x110 [ 917.424906][T12410] ? aa_af_perm+0x330/0x330 [ 917.429413][T12410] __se_sys_futex+0x3a9/0x440 [ 917.434089][T12410] ? __x64_sys_futex+0xf0/0xf0 [ 917.438856][T12410] ? __x64_sys_futex+0x21/0xf0 [ 917.443613][T12410] do_syscall_64+0x55/0xb0 [ 917.448025][T12410] ? clear_bhb_loop+0x40/0x90 [ 917.452699][T12410] ? clear_bhb_loop+0x40/0x90 [ 917.457376][T12410] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 917.463265][T12410] RIP: 0033:0x7fbb17b9e159 [ 917.467678][T12410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 917.487278][T12410] RSP: 002b:00007fbb189830e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 917.495688][T12410] RAX: ffffffffffffffda RBX: 00007fbb17e25fa8 RCX: 00007fbb17b9e159 [ 917.503653][T12410] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbb17e25fac [ 917.511616][T12410] RBP: 00007fbb17e25fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 917.519578][T12410] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 917.527542][T12410] R13: 00007fbb17e26038 R14: 00007ffe4d4cee00 R15: 00007ffe4d4ceee8 [ 917.535519][T12410] [ 922.170975][ T51] Bluetooth: Unexpected continuation frame (len 10) [ 923.988064][T12452] netlink: 1708 bytes leftover after parsing attributes in process `syz.3.2118'. [ 929.057854][T12505] netdevsim0: mtu less than device minimum [ 931.864739][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.872455][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.391004][T12549] netlink: 1708 bytes leftover after parsing attributes in process `syz.2.2152'. [ 943.524866][T12599] SET target dimension over the limit! [ 953.571904][T12655] loop3: detected capacity change from 0 to 32768 [ 953.674312][T12655] ERROR: (device loop3): diAllocAG: ipimap->i_size is wrong [ 953.674312][T12655] [ 953.684694][T12655] ERROR: (device loop3): remounting filesystem as read-only [ 953.692136][T12655] ialloc: diAlloc returned -5! [ 958.695140][T12678] loop2: detected capacity change from 0 to 32768 [ 958.733903][T12678] ERROR: (device loop2): diAllocAG: ipimap->i_size is wrong [ 958.733903][T12678] [ 958.745070][T12678] ERROR: (device loop2): remounting filesystem as read-only [ 958.752438][T12678] ialloc: diAlloc returned -5! [ 963.960784][T12728] misc userio: Invalid payload size [ 964.674941][T12715] loop0: detected capacity change from 0 to 32768 [ 965.882008][T12715] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 966.069710][T12715] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 966.808691][T12715] XFS (loop0): Tail block (0x29) overwrite detected. Updated to 0x30 [ 966.886623][T12715] XFS (loop0): Ending clean mount [ 966.988538][ T5777] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 967.548452][T12756] syz_tun: entered allmulticast mode [ 967.593799][T12756] wg2: entered allmulticast mode [ 967.690133][T12755] syz_tun: left allmulticast mode [ 967.858853][T12764] loop0: detected capacity change from 0 to 128 [ 967.899854][T12764] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 968.070994][T12766] overlayfs: failed to get inode (-116) [ 968.114219][T12766] overlayfs: failed to get inode (-116) [ 971.233830][T12776] No source specified [ 974.786523][T12805] autofs4:pid:12805:autofs_fill_super: called with bogus options [ 977.044427][T12823] loop3: detected capacity change from 0 to 32768 [ 977.095238][T12823] ERROR: (device loop3): diAllocAG: ipimap->i_size is wrong [ 977.095238][T12823] [ 977.105082][T12823] ERROR: (device loop3): remounting filesystem as read-only [ 977.112403][T12823] ialloc: diAlloc returned -5! [ 979.758624][T12842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 979.771753][T12842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 979.782132][T12842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 979.791435][T12842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 979.800089][T12842] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 979.807374][T12842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 980.344708][T12841] chnl_net:caif_netlink_parms(): no params data found [ 980.741966][T12841] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.790524][T12841] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.837094][T12841] bridge_slave_0: entered allmulticast mode [ 980.863289][T12841] bridge_slave_0: entered promiscuous mode [ 980.896312][T12841] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.938592][T12841] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.971271][T12841] bridge_slave_1: entered allmulticast mode [ 981.014546][T12841] bridge_slave_1: entered promiscuous mode [ 981.134298][T12841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 981.188033][T12841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 981.335055][T12841] team0: Port device team_slave_0 added [ 981.365746][T12841] team0: Port device team_slave_1 added [ 981.470880][T12854] loop3: detected capacity change from 0 to 32768 [ 981.507383][T12841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 982.434254][T12842] Bluetooth: hci4: command tx timeout [ 982.458442][T12841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 982.534750][T12854] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 982.619685][T12841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 982.669716][T12854] XFS (loop3): Ending clean mount [ 982.713000][T12854] XFS (loop3): Quotacheck needed: Please wait. [ 982.770264][T12841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 982.840794][T12841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 982.905949][T12854] XFS (loop3): Quotacheck: Done. [ 982.978616][T12841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 983.022110][ T5774] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 983.249297][T12841] hsr_slave_0: entered promiscuous mode [ 983.307758][T12841] hsr_slave_1: entered promiscuous mode [ 983.407929][T12841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 983.422427][T12841] Cannot create hsr debugfs directory [ 984.387985][T12841] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.499202][T12842] Bluetooth: hci4: command tx timeout [ 984.557290][T12841] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.806700][T12841] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.937913][T12841] bridge0: port 3(netdevsim0) entered disabled state [ 985.041714][T12841] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 985.070669][T12841] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 985.112185][T12841] bridge0: port 3(netdevsim0) entered disabled state [ 985.211392][T12841] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.457957][T12895] syzkaller1: entered promiscuous mode [ 986.513437][T12895] syzkaller1: entered allmulticast mode [ 986.578385][T12842] Bluetooth: hci4: command tx timeout [ 987.234146][T12841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 987.283629][T12841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 987.326189][T12841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 987.563745][T12841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 987.773800][T12841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 987.839418][T12841] 8021q: adding VLAN 0 to HW filter on device team0 [ 987.880093][ T9226] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.887286][ T9226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 987.957369][ T6815] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.964543][ T6815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 988.658430][T12842] Bluetooth: hci4: command tx timeout [ 988.776931][T12841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 988.946367][T12841] veth0_vlan: entered promiscuous mode [ 988.990006][T12841] veth1_vlan: entered promiscuous mode [ 989.088106][T12841] veth0_macvtap: entered promiscuous mode [ 990.121797][T12841] veth1_macvtap: entered promiscuous mode [ 990.232659][T12841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.278876][T12841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.320048][T12841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.361094][T12841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.480663][T12841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.532616][T12841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.545303][T12927] UBIFS error (pid: 12927): cannot open "", error -22 [ 990.587056][T12841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 990.669903][T12841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 990.723089][T12841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.762842][T12841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 990.810378][T12841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.833365][T12841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 990.896839][T12841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.924333][T12841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 990.971446][T12841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.002265][T12841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.031880][T12841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.063933][T12841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.325661][T12933] FAULT_INJECTION: forcing a failure. [ 991.325661][T12933] name fail_futex, interval 1, probability 0, space 0, times 0 [ 991.437480][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.463578][T12933] CPU: 0 PID: 12933 Comm: syz.3.2275 Not tainted syzkaller #0 [ 991.471067][T12933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 991.481118][T12933] Call Trace: [ 991.484390][T12933] [ 991.487320][T12933] dump_stack_lvl+0x18c/0x250 [ 991.492009][T12933] ? show_regs_print_info+0x20/0x20 [ 991.497205][T12933] ? load_image+0x420/0x420 [ 991.501730][T12933] ? verify_lock_unused+0x140/0x140 [ 991.506931][T12933] should_fail_ex+0x394/0x4c0 [ 991.511611][T12933] get_futex_key+0x136/0x1030 [ 991.516280][T12933] ? futex_unqueue+0xcb/0xf0 [ 991.520862][T12933] ? futex_wait+0x4a7/0x5c0 [ 991.525361][T12933] ? futex_setup_timer+0xc0/0xc0 [ 991.530316][T12933] futex_wake+0x127/0x4f0 [ 991.534637][T12933] ? __lock_acquire+0x7d80/0x7d80 [ 991.539660][T12933] ? futex_wake_mark+0x150/0x150 [ 991.544600][T12933] do_futex+0x35d/0x3e0 [ 991.548765][T12933] ? __ia32_sys_get_robust_list+0x110/0x110 [ 991.554658][T12933] ? do_fanotify_mark+0x8fe/0xdb0 [ 991.559704][T12933] __se_sys_futex+0x3a9/0x440 [ 991.564376][T12933] ? __x64_sys_futex+0xf0/0xf0 [ 991.569142][T12933] ? __x64_sys_futex+0x21/0xf0 [ 991.573900][T12933] do_syscall_64+0x55/0xb0 [ 991.578328][T12933] ? clear_bhb_loop+0x40/0x90 [ 991.583003][T12933] ? clear_bhb_loop+0x40/0x90 [ 991.587677][T12933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 991.593567][T12933] RIP: 0033:0x7fbb17b9e159 [ 991.597992][T12933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 991.617590][T12933] RSP: 002b:00007fbb189830e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 991.626000][T12933] RAX: ffffffffffffffda RBX: 00007fbb17e25fa8 RCX: 00007fbb17b9e159 [ 991.633966][T12933] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbb17e25fac [ 991.641928][T12933] RBP: 00007fbb17e25fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 991.649896][T12933] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 991.657859][T12933] R13: 00007fbb17e26038 R14: 00007ffe4d4cee00 R15: 00007ffe4d4ceee8 [ 991.665832][T12933] [ 991.680362][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 991.766557][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.797234][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.521970][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.528454][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.559193][T12953] loop1: detected capacity change from 0 to 32768 [ 995.868890][T12953] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 996.287602][T12966] syz_tun: entered allmulticast mode [ 996.359863][T12963] syz_tun: left allmulticast mode [ 996.731674][T12841] ocfs2: Unmounting device (7,1) on (node local) [ 1001.548614][T13009] syz_tun: entered allmulticast mode [ 1001.616811][T13005] syz_tun: left allmulticast mode [ 1001.654239][T13019] FAULT_INJECTION: forcing a failure. [ 1001.654239][T13019] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1001.715946][T13019] CPU: 0 PID: 13019 Comm: syz.1.2301 Not tainted syzkaller #0 [ 1001.723436][T13019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1001.733485][T13019] Call Trace: [ 1001.736759][T13019] [ 1001.739683][T13019] dump_stack_lvl+0x18c/0x250 [ 1001.744381][T13019] ? show_regs_print_info+0x20/0x20 [ 1001.749576][T13019] ? load_image+0x420/0x420 [ 1001.754077][T13019] ? verify_lock_unused+0x140/0x140 [ 1001.759279][T13019] should_fail_ex+0x394/0x4c0 [ 1001.763955][T13019] get_futex_key+0x136/0x1030 [ 1001.768622][T13019] ? futex_unqueue+0xcb/0xf0 [ 1001.773207][T13019] ? futex_wait+0x4a7/0x5c0 [ 1001.777723][T13019] ? futex_setup_timer+0xc0/0xc0 [ 1001.782681][T13019] futex_wake+0x127/0x4f0 [ 1001.787017][T13019] ? __lock_acquire+0x7d80/0x7d80 [ 1001.792055][T13019] ? futex_wake_mark+0x150/0x150 [ 1001.797003][T13019] do_futex+0x35d/0x3e0 [ 1001.801162][T13019] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1001.807049][T13019] ? do_fanotify_mark+0x8fe/0xdb0 [ 1001.812076][T13019] __se_sys_futex+0x3a9/0x440 [ 1001.816750][T13019] ? __x64_sys_futex+0xf0/0xf0 [ 1001.821511][T13019] ? __x64_sys_futex+0x21/0xf0 [ 1001.826269][T13019] do_syscall_64+0x55/0xb0 [ 1001.830681][T13019] ? clear_bhb_loop+0x40/0x90 [ 1001.835354][T13019] ? clear_bhb_loop+0x40/0x90 [ 1001.840029][T13019] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1001.845919][T13019] RIP: 0033:0x7f16b5b9e159 [ 1001.850341][T13019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1001.869941][T13019] RSP: 002b:00007f16b69e80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1001.878372][T13019] RAX: ffffffffffffffda RBX: 00007f16b5e25fa8 RCX: 00007f16b5b9e159 [ 1001.886338][T13019] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f16b5e25fac [ 1001.894317][T13019] RBP: 00007f16b5e25fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 1001.902282][T13019] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1001.910246][T13019] R13: 00007f16b5e26038 R14: 00007ffddc7f62c0 R15: 00007ffddc7f63a8 [ 1001.918220][T13019] [ 1005.162221][T13054] syz_tun: entered allmulticast mode [ 1005.182645][T13054] wg2: entered allmulticast mode [ 1005.207863][T13053] syz_tun: left allmulticast mode [ 1007.478823][T13079] syzkaller0: entered promiscuous mode [ 1007.501034][T13079] syzkaller0: entered allmulticast mode [ 1007.542586][T13079] tipc: Started in network mode [ 1007.576628][T13079] tipc: Node identity fe08d509d276, cluster identity 4711 [ 1007.605937][T13079] tipc: Enabled bearer , priority 0 [ 1007.659619][T13075] tipc: Resetting bearer [ 1007.778145][T13075] tipc: Disabling bearer [ 1007.935944][T13085] loop2: detected capacity change from 0 to 512 [ 1007.965050][T13088] wg2: entered allmulticast mode [ 1008.227819][T13085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1008.345887][T13085] ext4 filesystem being mounted at /566/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1008.479503][ T5764] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1008.597185][ T28] audit: type=1800 audit(1790149848.733:42): pid=13085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2325" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1008.908310][ T5764] usb 2-1: Using ep0 maxpacket: 8 [ 1008.925873][ T5764] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1008.968023][ T5764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.031074][ T5764] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1009.094694][ T5764] pvrusb2: ********** [ 1009.120666][ T5764] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1009.179436][ T5764] pvrusb2: Important functionality might not be entirely working. [ 1009.229633][ T5764] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1009.283309][T13115] loop3: detected capacity change from 0 to 128 [ 1009.301703][ T5764] pvrusb2: ********** [ 1009.344480][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.360555][ T2322] pvrusb2: Invalid write control endpoint [ 1009.520791][T13115] syz.3.2337: attempt to access beyond end of device [ 1009.520791][T13115] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 1009.623634][ T2322] pvrusb2: Invalid write control endpoint [ 1009.670682][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1009.737350][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1009.795625][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1009.871584][ T2322] pvrusb2: Device being rendered inoperable [ 1009.906989][T13094] pvrusb2: Attempted to execute control transfer when device not ok [ 1009.957196][ T2322] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1009.999141][ T2322] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1010.029374][ T9] usb 2-1: USB disconnect, device number 2 [ 1010.086414][ T2322] pvrusb2: Attached sub-driver cx25840 [ 1010.119973][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1010.177684][T13126] FAULT_INJECTION: forcing a failure. [ 1010.177684][T13126] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1010.201498][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1010.576604][T13133] syz_tun: entered allmulticast mode [ 1010.586695][T13126] CPU: 0 PID: 13126 Comm: syz.2.2339 Not tainted syzkaller #0 [ 1010.594186][T13126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1010.604250][T13126] Call Trace: [ 1010.607527][T13126] [ 1010.610458][T13126] dump_stack_lvl+0x18c/0x250 [ 1010.615151][T13126] ? show_regs_print_info+0x20/0x20 [ 1010.620344][T13126] ? load_image+0x420/0x420 [ 1010.624845][T13126] ? verify_lock_unused+0x140/0x140 [ 1010.630046][T13126] should_fail_ex+0x394/0x4c0 [ 1010.634722][T13126] get_futex_key+0x136/0x1030 [ 1010.639397][T13126] ? futex_setup_timer+0xc0/0xc0 [ 1010.644347][T13126] futex_wake+0x127/0x4f0 [ 1010.648671][T13126] ? aa_get_newest_label+0xfd/0x5c0 [ 1010.653867][T13126] ? futex_wake_mark+0x150/0x150 [ 1010.658801][T13126] ? __fget_files+0x3fc/0x460 [ 1010.663482][T13126] do_futex+0x35d/0x3e0 [ 1010.667631][T13126] ? fput+0x154/0x1a0 [ 1010.671604][T13126] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1010.677509][T13126] ? do_fanotify_mark+0x6ae/0xdb0 [ 1010.682562][T13126] __se_sys_futex+0x3a9/0x440 [ 1010.687254][T13126] ? __x64_sys_futex+0xf0/0xf0 [ 1010.692018][T13126] ? __x64_sys_futex+0x21/0xf0 [ 1010.696776][T13126] do_syscall_64+0x55/0xb0 [ 1010.701191][T13126] ? clear_bhb_loop+0x40/0x90 [ 1010.705864][T13126] ? clear_bhb_loop+0x40/0x90 [ 1010.710541][T13126] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1010.716431][T13126] RIP: 0033:0x7f08d4d9e159 [ 1010.720841][T13126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1010.740459][T13126] RSP: 002b:00007f08d5cfb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1010.748877][T13126] RAX: ffffffffffffffda RBX: 00007f08d5025fa8 RCX: 00007f08d4d9e159 [ 1010.756849][T13126] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f08d5025fac [ 1010.764821][T13126] RBP: 00007f08d5025fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 1010.772789][T13126] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1010.780763][T13126] R13: 00007f08d5026038 R14: 00007ffdd46d8590 R15: 00007ffdd46d8678 [ 1010.788739][T13126] [ 1010.819274][T13130] syz_tun: left allmulticast mode [ 1011.954998][T13157] pimreg: entered allmulticast mode [ 1012.840985][T13169] syz_tun: entered allmulticast mode [ 1012.875881][T13168] syz_tun: left allmulticast mode [ 1013.036853][T13173] overlayfs: failed to resolve './file0': -2 [ 1014.303797][T13177] loop2: detected capacity change from 0 to 4096 [ 1014.770447][T13188] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1015.441329][ T5775] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 1015.893094][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.341364][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.378569][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1016.391636][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1016.401268][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1016.411433][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1016.422098][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1016.429499][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1016.737548][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.763928][T13207] overlayfs: failed to resolve './file0': -2 [ 1017.200099][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 1017.244144][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 1017.282405][ T48] bridge0: port 3(netdevsim0) entered disabled state [ 1017.339165][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.904278][T13200] chnl_net:caif_netlink_parms(): no params data found [ 1017.993035][T13221] FAULT_INJECTION: forcing a failure. [ 1017.993035][T13221] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1018.268286][T13221] CPU: 0 PID: 13221 Comm: syz.2.2376 Not tainted syzkaller #0 [ 1018.275791][T13221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1018.285844][T13221] Call Trace: [ 1018.289120][T13221] [ 1018.292059][T13221] dump_stack_lvl+0x18c/0x250 [ 1018.296742][T13221] ? show_regs_print_info+0x20/0x20 [ 1018.301939][T13221] ? load_image+0x420/0x420 [ 1018.306440][T13221] ? verify_lock_unused+0x140/0x140 [ 1018.311635][T13221] should_fail_ex+0x394/0x4c0 [ 1018.316313][T13221] get_futex_key+0x136/0x1030 [ 1018.320989][T13221] ? futex_setup_timer+0xc0/0xc0 [ 1018.325924][T13221] futex_wake+0x127/0x4f0 [ 1018.330245][T13221] ? aa_get_newest_label+0xfd/0x5c0 [ 1018.335439][T13221] ? futex_wake_mark+0x150/0x150 [ 1018.340369][T13221] ? __fget_files+0x3fc/0x460 [ 1018.345049][T13221] do_futex+0x35d/0x3e0 [ 1018.349202][T13221] ? fput+0x154/0x1a0 [ 1018.353175][T13221] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1018.359063][T13221] ? do_fanotify_mark+0x6ae/0xdb0 [ 1018.364091][T13221] __se_sys_futex+0x3a9/0x440 [ 1018.368768][T13221] ? __x64_sys_futex+0xf0/0xf0 [ 1018.373529][T13221] ? __x64_sys_futex+0x21/0xf0 [ 1018.378290][T13221] do_syscall_64+0x55/0xb0 [ 1018.382703][T13221] ? clear_bhb_loop+0x40/0x90 [ 1018.387388][T13221] ? clear_bhb_loop+0x40/0x90 [ 1018.392064][T13221] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1018.397954][T13221] RIP: 0033:0x7f08d4d9e159 [ 1018.402362][T13221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1018.421966][T13221] RSP: 002b:00007f08d5cfb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1018.430374][T13221] RAX: ffffffffffffffda RBX: 00007f08d5025fa8 RCX: 00007f08d4d9e159 [ 1018.438340][T13221] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f08d5025fac [ 1018.446303][T13221] RBP: 00007f08d5025fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 1018.454268][T13221] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1018.462246][T13221] R13: 00007f08d5026038 R14: 00007ffdd46d8590 R15: 00007ffdd46d8678 [ 1018.470221][T13221] [ 1018.478809][T13200] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.508330][T13200] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.515518][T13200] bridge_slave_0: entered allmulticast mode [ 1018.550726][ T51] Bluetooth: hci0: command tx timeout [ 1018.559427][T13200] bridge_slave_0: entered promiscuous mode [ 1018.604473][T13200] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.631832][T13200] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.669060][T13200] bridge_slave_1: entered allmulticast mode [ 1018.728394][T13200] bridge_slave_1: entered promiscuous mode [ 1020.578278][ T51] Bluetooth: hci0: command tx timeout [ 1021.016355][T13200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.178010][T13200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.474982][T13200] team0: Port device team_slave_0 added [ 1021.520979][T13236] syz.3.2378 (13236): drop_caches: 2 [ 1021.686714][T13200] team0: Port device team_slave_1 added [ 1022.037190][T13249] loop1: detected capacity change from 0 to 32768 [ 1022.153058][T13249] read_mapping_page failed! [ 1022.157623][T13249] ERROR: (device loop1): txCommit: [ 1022.157623][T13249] [ 1022.568062][T13200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.621375][T13200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.677136][ T51] Bluetooth: hci0: command tx timeout [ 1022.925352][T13257] loop2: detected capacity change from 0 to 32768 [ 1022.960773][T13200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.986977][T13257] ERROR: (device loop2): diAllocAG: ipimap->i_size is wrong [ 1022.986977][T13257] [ 1022.997770][T13257] ERROR: (device loop2): remounting filesystem as read-only [ 1023.005181][T13257] ialloc: diAlloc returned -5! [ 1023.060267][T13200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1023.117525][T13200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1023.267206][T13200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1023.523383][T13259] syz_tun: entered allmulticast mode [ 1023.694849][T13256] syz_tun: left allmulticast mode [ 1023.761023][T13251] loop3: detected capacity change from 0 to 32768 [ 1023.868016][T13251] ERROR: (device loop3): diAllocAG: ipimap->i_size is wrong [ 1023.868016][T13251] [ 1023.936929][T13251] ERROR: (device loop3): remounting filesystem as read-only [ 1024.003826][T13251] ialloc: diAlloc returned -5! [ 1024.342594][T13200] hsr_slave_0: entered promiscuous mode [ 1024.411797][T13200] hsr_slave_1: entered promiscuous mode [ 1024.452657][T13200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1024.512811][T13200] Cannot create hsr debugfs directory [ 1024.738866][ T51] Bluetooth: hci0: command tx timeout [ 1024.972101][ T48] hsr_slave_0: left promiscuous mode [ 1025.004495][ T48] hsr_slave_1: left promiscuous mode [ 1025.035799][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1025.068492][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1025.112004][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1025.141839][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1025.195283][ T48] bridge_slave_1: left allmulticast mode [ 1025.227403][ T48] bridge_slave_1: left promiscuous mode [ 1025.256623][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.295746][ T48] bridge_slave_0: left allmulticast mode [ 1025.315127][ T48] bridge_slave_0: left promiscuous mode [ 1025.335963][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.427457][ T48] veth1_macvtap: left promiscuous mode [ 1025.441903][ T48] veth0_macvtap: left promiscuous mode [ 1025.454075][ T48] veth1_vlan: left promiscuous mode [ 1025.464696][ T48] veth0_vlan: left promiscuous mode [ 1026.676194][ T48] team0 (unregistering): Port device team_slave_1 removed [ 1026.737646][ T48] team0 (unregistering): Port device team_slave_0 removed [ 1026.794668][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1026.857337][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1027.014792][ T48] wg2 (unregistering): left allmulticast mode [ 1027.314033][ T48] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1027.323562][ T48] bond0 (unregistering): Released all slaves [ 1027.445568][T13297] syz_tun: entered allmulticast mode [ 1027.465659][T13297] syz_tun: left allmulticast mode [ 1027.913129][T13309] loop1: detected capacity change from 0 to 32768 [ 1027.971423][T13309] ERROR: (device loop1): diAllocAG: ipimap->i_size is wrong [ 1027.971423][T13309] [ 1027.981422][T13309] ERROR: (device loop1): remounting filesystem as read-only [ 1027.989350][T13309] ialloc: diAlloc returned -5! [ 1029.155698][T13337] syz_tun: entered allmulticast mode [ 1029.197470][T13337] wg2: entered allmulticast mode [ 1029.242400][T13336] syz_tun: left allmulticast mode [ 1029.567500][T13342] socket: no more sockets [ 1030.054061][T13352] loop3: detected capacity change from 0 to 32768 [ 1030.089239][T13352] ERROR: (device loop3): diAllocAG: ipimap->i_size is wrong [ 1030.089239][T13352] [ 1030.099927][T13352] ERROR: (device loop3): remounting filesystem as read-only [ 1030.107246][T13352] ialloc: diAlloc returned -5! [ 1031.470990][T13360] loop3: detected capacity change from 0 to 32768 [ 1031.591774][T13360] read_mapping_page failed! [ 1031.596391][T13360] ERROR: (device loop3): txCommit: [ 1031.596391][T13360] [ 1031.844287][T13200] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1031.910061][T13200] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1032.053267][T13200] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1032.100534][T13200] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1032.377100][T13367] syz_tun: entered allmulticast mode [ 1032.532107][T13366] syz_tun: left allmulticast mode [ 1033.317712][T13379] loop3: detected capacity change from 0 to 32768 [ 1033.362260][T13379] ERROR: (device loop3): diAllocAG: ipimap->i_size is wrong [ 1033.362260][T13379] [ 1033.373540][T13379] ERROR: (device loop3): remounting filesystem as read-only [ 1033.380906][T13379] ialloc: diAlloc returned -5! [ 1033.467425][T13200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.555660][T13200] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.613575][T13393] 9pnet_fd: Insufficient options for proto=fd [ 1034.692164][ T86] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.699348][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.752933][ T86] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.760088][ T86] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.944946][ T48] hsr_slave_0: left promiscuous mode [ 1034.992407][ T48] hsr_slave_1: left promiscuous mode [ 1035.031323][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1035.068658][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1035.101195][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1035.139195][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1035.181936][ T48] bridge_slave_1: left allmulticast mode [ 1035.213872][ T48] bridge_slave_1: left promiscuous mode [ 1035.227497][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.263495][ T48] bridge_slave_0: left allmulticast mode [ 1035.276031][ T48] bridge_slave_0: left promiscuous mode [ 1035.297802][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.365923][ T48] veth1_macvtap: left promiscuous mode [ 1035.382926][ T48] veth0_macvtap: left promiscuous mode [ 1035.410368][ T48] veth1_vlan: left promiscuous mode [ 1035.422300][ T48] veth0_vlan: left promiscuous mode [ 1036.415245][ T48] bond1 (unregistering): Released all slaves [ 1037.813813][T13415] loop3: detected capacity change from 0 to 32768 [ 1037.859684][T13415] ERROR: (device loop3): diAllocAG: ipimap->i_size is wrong [ 1037.859684][T13415] [ 1037.870045][T13415] ERROR: (device loop3): remounting filesystem as read-only [ 1037.877339][T13415] ialloc: diAlloc returned -5! [ 1038.387442][T13422] loop3: detected capacity change from 0 to 32768 [ 1038.414814][T13422] ERROR: (device loop3): diAllocAG: ipimap->i_size is wrong [ 1038.414814][T13422] [ 1038.424728][T13422] ERROR: (device loop3): remounting filesystem as read-only [ 1038.432616][T13422] ialloc: diAlloc returned -5! [ 1038.773418][ T48] team0 (unregistering): Port device team_slave_1 removed [ 1039.577173][ T48] team0 (unregistering): Port device team_slave_0 removed [ 1039.689778][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1039.809118][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1040.507428][T13428] loop3: detected capacity change from 0 to 32768 [ 1040.552659][T13428] read_mapping_page failed! [ 1040.557261][T13428] ERROR: (device loop3): txCommit: [ 1040.557261][T13428] [ 1040.894333][ T48] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1040.904339][ T48] bond0 (unregistering): Released all slaves [ 1040.979107][T13399] syz_tun: entered allmulticast mode [ 1041.061522][T13399] syz_tun: left allmulticast mode [ 1041.256161][T13200] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1042.407689][T13200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1043.598671][T13200] veth0_vlan: entered promiscuous mode [ 1043.682079][T13200] veth1_vlan: entered promiscuous mode [ 1043.891082][T13200] veth0_macvtap: entered promiscuous mode [ 1043.968767][T13200] veth1_macvtap: entered promiscuous mode [ 1044.023588][T13200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.115262][T13200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.160371][T13200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.228269][T13200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.285820][T13200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1044.333401][T13200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.415691][T13200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.466636][T13200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.645425][T13200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.920499][T13200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1044.975427][T13200] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.031453][T13200] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.074772][T13200] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.113260][T13200] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.474928][ T3548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.525086][ T3548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.544258][ T3548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.573378][ T3548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.247620][T13520] Set syz1 is full, maxelem 2 reached [ 1047.807950][T13528] loop2: detected capacity change from 0 to 32768 [ 1047.857588][T13528] ERROR: (device loop2): diAllocAG: ipimap->i_size is wrong [ 1047.857588][T13528] [ 1047.899095][T13528] ERROR: (device loop2): remounting filesystem as read-only [ 1047.906409][T13528] ialloc: diAlloc returned -5! [ 1048.019228][T13532] wg2: entered allmulticast mode [ 1049.190374][T12842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1049.202313][T12842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1049.210448][T12842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1049.221214][T12842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1049.272764][T12842] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1049.287613][T12842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1049.837662][T13549] loop0: detected capacity change from 0 to 32768 [ 1050.634487][T13549] read_mapping_page failed! [ 1050.639177][T13549] ERROR: (device loop0): txCommit: [ 1050.639177][T13549] [ 1051.388418][T12842] Bluetooth: hci3: command tx timeout [ 1051.412072][T13541] chnl_net:caif_netlink_parms(): no params data found [ 1051.901812][T13541] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.961597][T13541] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.012410][T13541] bridge_slave_0: entered allmulticast mode [ 1052.058369][T13541] bridge_slave_0: entered promiscuous mode [ 1052.105330][T13541] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.148376][T13541] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.216592][T13541] bridge_slave_1: entered allmulticast mode [ 1052.241955][T13541] bridge_slave_1: entered promiscuous mode [ 1053.322181][T13541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.459024][T12842] Bluetooth: hci3: command tx timeout [ 1053.643697][ T9226] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.742780][T13541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.880173][ T9226] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.975181][T13541] team0: Port device team_slave_0 added [ 1054.032173][T13541] team0: Port device team_slave_1 added [ 1054.144413][ T9226] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.274739][ T9226] bridge0: port 3(netdevsim0) entered disabled state [ 1054.499147][T13593] loop1: detected capacity change from 0 to 32768 [ 1054.547752][T13593] ERROR: (device loop1): diAllocAG: ipimap->i_size is wrong [ 1054.547752][T13593] [ 1054.559316][T13593] ERROR: (device loop1): remounting filesystem as read-only [ 1054.566644][T13593] ialloc: diAlloc returned -5! [ 1054.619297][ T9226] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 1054.658349][ T9226] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 1054.699984][ T9226] bridge0: port 3(netdevsim0) entered disabled state [ 1054.732592][ T9226] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.751158][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.759919][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.817291][T13600] Set syz1 is full, maxelem 2 reached [ 1054.837704][T13541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.874038][T13541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.788245][T12842] Bluetooth: hci3: command tx timeout [ 1055.909281][T13541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.977332][T13541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1056.022758][T13541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1056.160560][T13541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1057.042105][T13541] hsr_slave_0: entered promiscuous mode [ 1057.074426][T13541] hsr_slave_1: entered promiscuous mode [ 1057.111697][T13541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1057.138562][T13541] Cannot create hsr debugfs directory [ 1057.768064][T13621] syz_tun: entered allmulticast mode [ 1057.860491][T12842] Bluetooth: hci3: command tx timeout [ 1057.901049][T13618] syz_tun: left allmulticast mode [ 1061.509692][T13541] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1061.608304][T13541] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1061.730370][T13541] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1061.845614][T13541] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1061.963650][ T9226] hsr_slave_0: left promiscuous mode [ 1062.008528][ T9226] hsr_slave_1: left promiscuous mode [ 1062.064187][ T9226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1062.094939][ T9226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1062.159843][ T9226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1062.201786][ T9226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1062.260603][ T9226] bridge_slave_1: left allmulticast mode [ 1062.297525][ T9226] bridge_slave_1: left promiscuous mode [ 1062.341979][ T9226] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.382984][ T9226] bridge_slave_0: left allmulticast mode [ 1062.425317][ T9226] bridge_slave_0: left promiscuous mode [ 1062.444068][ T9226] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.617026][ T9226] veth1_macvtap: left promiscuous mode [ 1062.636231][ T9226] veth0_macvtap: left promiscuous mode [ 1062.656463][ T9226] veth1_vlan: left promiscuous mode [ 1062.682876][ T9226] veth0_vlan: left promiscuous mode [ 1065.402981][ T9226] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1065.467018][ T9226] bond1 (unregistering): Released all slaves [ 1069.263661][ T9226] team0 (unregistering): Port device team_slave_1 removed [ 1069.375491][ T9226] team0 (unregistering): Port device team_slave_0 removed [ 1069.497679][ T9226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1069.607540][ T9226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1070.352590][ T9226] wg2 (unregistering): left allmulticast mode [ 1070.612206][T13736] loop2: detected capacity change from 0 to 32768 [ 1070.638606][T13736] ERROR: (device loop2): diAllocAG: ipimap->i_size is wrong [ 1070.638606][T13736] [ 1070.649424][T13736] ERROR: (device loop2): remounting filesystem as read-only [ 1070.656737][T13736] ialloc: diAlloc returned -5! [ 1073.987456][ T9226] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1074.006994][ T9226] bond0 (unregistering): Released all slaves [ 1074.508859][T13541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1074.620997][T13541] 8021q: adding VLAN 0 to HW filter on device team0 [ 1074.650906][T13753] syz_tun: entered allmulticast mode [ 1074.670206][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.677353][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1074.734526][T13751] syz_tun: left allmulticast mode [ 1074.779972][ T3548] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.787182][ T3548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1075.652013][T13766] loop0: detected capacity change from 0 to 32768 [ 1075.690485][T13766] ERROR: (device loop0): diAllocAG: ipimap->i_size is wrong [ 1075.690485][T13766] [ 1075.701209][T13766] ERROR: (device loop0): remounting filesystem as read-only [ 1075.709228][T13766] ialloc: diAlloc returned -5! [ 1078.758502][T13784] loop0: detected capacity change from 0 to 32768 [ 1078.791079][T13541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1078.822134][T13784] ERROR: (device loop0): diAllocAG: ipimap->i_size is wrong [ 1078.822134][T13784] [ 1078.838037][T13784] ERROR: (device loop0): remounting filesystem as read-only [ 1078.845474][T13784] ialloc: diAlloc returned -5! [ 1078.966646][T13541] veth0_vlan: entered promiscuous mode [ 1079.029989][T13541] veth1_vlan: entered promiscuous mode [ 1079.129625][T13541] veth0_macvtap: entered promiscuous mode [ 1079.175728][T13541] veth1_macvtap: entered promiscuous mode [ 1079.242341][T13541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1079.275233][T13541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.309442][T13541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1079.342685][T13541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.374190][T13541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1079.416366][T13541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1079.452446][T13541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.478371][T13541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1079.499068][T13541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.517774][T13541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1079.537769][T13541] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.561163][T13541] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.576133][T13541] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.592201][T13541] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.714843][ T6815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.739969][ T6815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.777908][ T9226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.801986][ T9226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.680963][T13822] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 1084.680963][T13822] program syz.0.2529 not setting count and/or reply_len properly [ 1086.076862][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1086.092058][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1086.101767][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1086.111160][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1086.120170][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1086.127476][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1086.164772][T13821] syz.0.2529 (13821): drop_caches: 2 [ 1087.039013][T13834] chnl_net:caif_netlink_parms(): no params data found [ 1088.178863][ T51] Bluetooth: hci1: command tx timeout [ 1088.308502][T13834] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.416011][T13834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.445694][T13834] bridge_slave_0: entered allmulticast mode [ 1088.470146][T13834] bridge_slave_0: entered promiscuous mode [ 1088.489653][T13863] syz_tun: entered allmulticast mode [ 1088.497076][T13834] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.527143][T13834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.538267][T12935] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1088.556196][T13834] bridge_slave_1: entered allmulticast mode [ 1088.571850][T13834] bridge_slave_1: entered promiscuous mode [ 1088.598568][T13863] wg2: entered allmulticast mode [ 1088.661204][T13834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.738341][T12935] usb 1-1: Using ep0 maxpacket: 8 [ 1088.757303][T12935] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1088.782215][T12935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.824593][T12935] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1088.867140][T12935] pvrusb2: ********** [ 1088.874533][T12935] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1088.897317][T12935] pvrusb2: Important functionality might not be entirely working. [ 1088.925935][T12935] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1088.939610][T13834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.959092][T12935] pvrusb2: ********** [ 1089.026606][ T2322] pvrusb2: Invalid write control endpoint [ 1089.110969][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1089.151969][ T2322] pvrusb2: Invalid write control endpoint [ 1089.159625][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.181583][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1089.207922][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1089.231972][T13868] pimreg: entered allmulticast mode [ 1089.259921][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1089.323932][ T2322] pvrusb2: Device being rendered inoperable [ 1089.333513][T13834] team0: Port device team_slave_0 added [ 1089.350020][T13861] pvrusb2: Attempted to execute control transfer when device not ok [ 1089.382036][T12935] usb 1-1: USB disconnect, device number 21 [ 1089.392495][ T2322] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1089.417427][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1089.432664][ T2322] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1089.453854][ T2322] pvrusb2: Attached sub-driver cx25840 [ 1089.468531][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.481460][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1089.512922][T13834] team0: Port device team_slave_1 added [ 1089.522074][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1089.654010][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1089.691018][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.763582][T13834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1089.797235][T13834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1089.855643][T13834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1089.912389][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 1089.933899][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 1089.989922][ T59] bridge0: port 3(netdevsim0) entered disabled state [ 1090.036181][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1090.263393][ T51] Bluetooth: hci1: command tx timeout [ 1091.683348][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.758694][T13834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1091.765686][T13834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1091.975453][T13881] loop0: detected capacity change from 0 to 32768 [ 1092.031490][T13881] ERROR: (device loop0): diAllocAG: ipimap->i_size is wrong [ 1092.031490][T13881] [ 1092.042402][T13881] ERROR: (device loop0): remounting filesystem as read-only [ 1092.049791][T13881] ialloc: diAlloc returned -5! [ 1092.166106][T13834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1093.162944][ T51] Bluetooth: hci1: command tx timeout [ 1093.309273][T13834] hsr_slave_0: entered promiscuous mode [ 1093.414958][T13834] hsr_slave_1: entered promiscuous mode [ 1093.481551][T13834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1093.518303][T13834] Cannot create hsr debugfs directory [ 1095.225810][ T51] Bluetooth: hci1: command tx timeout [ 1098.767756][T13923] loop1: detected capacity change from 0 to 32768 [ 1098.790918][T13923] ERROR: (device loop1): diAllocAG: ipimap->i_size is wrong [ 1098.790918][T13923] [ 1098.800772][T13923] ERROR: (device loop1): remounting filesystem as read-only [ 1098.808105][T13923] ialloc: diAlloc returned -5! [ 1100.747236][T13933] loop0: detected capacity change from 0 to 32768 [ 1100.832836][T13933] ERROR: (device loop0): diAllocAG: ipimap->i_size is wrong [ 1100.832836][T13933] [ 1100.842947][T13933] ERROR: (device loop0): remounting filesystem as read-only [ 1100.850332][T13933] ialloc: diAlloc returned -5! [ 1101.272577][T13834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1101.494815][T13834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1101.867019][T13834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1101.922472][T13834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1102.155045][ T59] hsr_slave_0: left promiscuous mode [ 1102.205180][ T59] hsr_slave_1: left promiscuous mode [ 1102.234606][ T59] bridge_slave_1: left allmulticast mode [ 1102.257372][ T59] bridge_slave_1: left promiscuous mode [ 1103.230491][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 1103.284489][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.369058][ T59] bridge_slave_0: left allmulticast mode [ 1103.374740][ T59] bridge_slave_0: left promiscuous mode [ 1103.437491][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.536474][ T59] veth1_macvtap: left promiscuous mode [ 1103.552377][ T59] : left promiscuous mode [ 1103.574289][ T59] veth1_vlan: left promiscuous mode [ 1103.599749][ T59] veth0_vlan: left promiscuous mode [ 1103.926570][ T59] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 1105.920913][T13983] loop3: detected capacity change from 0 to 32768 [ 1105.951560][T13983] ERROR: (device loop3): diAllocAG: ipimap->i_size is wrong [ 1105.951560][T13983] [ 1105.961398][T13983] ERROR: (device loop3): remounting filesystem as read-only [ 1105.968767][T13983] ialloc: diAlloc returned -5! [ 1106.459168][ T59] bond1 (unregistering): Released all slaves [ 1107.397106][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1107.464485][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1107.522664][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1107.581030][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1107.744257][ T59] wg2 (unregistering): left allmulticast mode [ 1108.023098][ T59] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1108.035768][ T59] bond0 (unregistering): Released all slaves [ 1108.382372][T13834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1109.440065][T13834] 8021q: adding VLAN 0 to HW filter on device team0 [ 1109.472159][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.479439][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1109.567864][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.576260][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.676448][T13834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1111.934317][T14016] loop0: detected capacity change from 0 to 32768 [ 1111.954471][T13834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1111.986467][T14016] ERROR: (device loop0): diAllocAG: ipimap->i_size is wrong [ 1111.986467][T14016] [ 1111.997288][T14016] ERROR: (device loop0): remounting filesystem as read-only [ 1112.004673][T14016] ialloc: diAlloc returned -5! [ 1112.171365][T13834] veth0_vlan: entered promiscuous mode [ 1112.216252][T13834] veth1_vlan: entered promiscuous mode [ 1112.325181][T13834] veth0_macvtap: entered promiscuous mode [ 1112.370560][T13834] veth1_macvtap: entered promiscuous mode [ 1112.443718][T13834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.497860][T13834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.547681][T13834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.570730][T13834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.590528][T13834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.604112][T13834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.626569][T13834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1112.669972][T13834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.704578][T13834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.722757][T13834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.736354][T13834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.751379][T13834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.762728][T13834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.779520][T13834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1112.787576][T14030] syz_tun: entered allmulticast mode [ 1112.802082][T13834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.814140][T13834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.824235][T13834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.835842][T13834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.017654][ T9226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.066267][ T9226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.157314][ T9226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.151313][T14036] binder: 14035:14036 ioctl c0306201 0 returned -14 [ 1114.168705][T14036] loop0: detected capacity change from 0 to 1764 [ 1114.214445][ T9226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.589688][T14042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2586'. [ 1114.643394][T14044] 9pnet_fd: Insufficient options for proto=fd [ 1114.873174][T14048] syz_tun: entered allmulticast mode [ 1114.892161][T14048] wg2: entered allmulticast mode [ 1116.237352][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.243800][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.609279][T14070] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2595'. [ 1116.967734][T14075] 9pnet_fd: Insufficient options for proto=fd [ 1117.159695][T14077] syz_tun: entered allmulticast mode [ 1120.125949][T14103] 9pnet_fd: Insufficient options for proto=fd [ 1122.239733][T14111] loop1: detected capacity change from 0 to 32768 [ 1122.276150][T14111] ERROR: (device loop1): diAllocAG: ipimap->i_size is wrong [ 1122.276150][T14111] [ 1122.287107][T14111] ERROR: (device loop1): remounting filesystem as read-only [ 1122.295391][T14111] ialloc: diAlloc returned -5! [ 1124.251861][T14133] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2614'. [ 1124.482539][T14135] 9pnet_fd: Insufficient options for proto=fd [ 1124.934307][T14145] loop1: detected capacity change from 0 to 256 [ 1124.965458][T14145] exfat: Unknown parameter '' [ 1125.133513][T14147] pimreg: entered allmulticast mode [ 1125.522415][T14159] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2623'. [ 1125.662895][T13499] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 1126.979912][T13499] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.036444][T14166] 9pnet_fd: Insufficient options for proto=fd [ 1127.042868][T13499] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1127.143376][T13499] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.177977][T13499] usb 1-1: config 0 descriptor?? [ 1127.237391][T14170] netdevsim0: mtu less than device minimum [ 1127.278065][T14173] overlayfs: missing 'lowerdir' [ 1127.413293][T13499] ath6kl: Failed to submit usb control message: -71 [ 1127.454349][T13499] ath6kl: unable to send the bmi data to the device: -71 [ 1127.481267][T13499] ath6kl: Unable to send get target info: -71 [ 1127.654145][T13499] ath6kl: Failed to init ath6kl core: -71 [ 1127.689910][T13499] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 1127.754033][T13499] usb 1-1: USB disconnect, device number 22 [ 1128.398048][T14195] syz.0.2634 uses obsolete (PF_INET,SOCK_PACKET) [ 1129.692396][T14203] overlayfs: missing 'lowerdir' [ 1130.258774][T12842] Bluetooth: hci0: command tx timeout [ 1131.389712][T14226] netdevsim0: mtu less than device minimum [ 1134.107791][T14243] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1134.129510][T14243] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1135.487665][T14254] loop1: detected capacity change from 0 to 32768 [ 1135.516478][T14254] read_mapping_page failed! [ 1135.521251][T14254] ERROR: (device loop1): txCommit: [ 1135.521251][T14254] [ 1137.383462][T14256] loop0: detected capacity change from 0 to 32768 [ 1137.410785][T14256] ERROR: (device loop0): diAllocAG: ipimap->i_size is wrong [ 1137.410785][T14256] [ 1137.420588][T14256] ERROR: (device loop0): remounting filesystem as read-only [ 1137.427877][T14256] ialloc: diAlloc returned -5! [ 1138.035670][T14268] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1138.094739][T14268] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1138.745285][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 1139.955981][T14297] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1139.975067][T14297] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1140.157481][T14301] netdevsim0: mtu less than device minimum [ 1140.496266][ T8] IPVS: starting estimator thread 0... [ 1141.730390][T14314] IPVS: fo: FWM 3 0x00000003 - no destination available [ 1141.903239][T14308] IPVS: using max 32 ests per chain, 76800 per kthread [ 1141.935335][T14317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2672'. [ 1142.795079][T14328] overlayfs: missing 'lowerdir' [ 1143.085979][T14333] netdevsim0: mtu less than device minimum [ 1144.891583][T14348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2683'. [ 1145.259805][T14354] 9pnet_fd: Insufficient options for proto=fd [ 1145.446256][T14358] netdevsim0: mtu less than device minimum [ 1145.650597][T14360] overlayfs: missing 'lowerdir' [ 1148.724152][T14381] 9pnet_fd: Insufficient options for proto=fd [ 1150.427993][T14388] overlayfs: missing 'lowerdir' [ 1151.272693][T14396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2695'. [ 1153.587782][T14422] overlayfs: missing 'workdir' [ 1153.764263][T14424] FAULT_INJECTION: forcing a failure. [ 1153.764263][T14424] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.814316][T14424] CPU: 0 PID: 14424 Comm: syz.1.2709 Not tainted syzkaller #0 [ 1153.821842][T14424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1153.831897][T14424] Call Trace: [ 1153.835172][T14424] [ 1153.838104][T14424] dump_stack_lvl+0x18c/0x250 [ 1153.842793][T14424] ? show_regs_print_info+0x20/0x20 [ 1153.847989][T14424] ? load_image+0x420/0x420 [ 1153.852492][T14424] ? __might_sleep+0xe0/0xe0 [ 1153.857084][T14424] ? __lock_acquire+0x7d80/0x7d80 [ 1153.862111][T14424] should_fail_ex+0x394/0x4c0 [ 1153.866798][T14424] should_failslab+0x9/0x20 [ 1153.871300][T14424] slab_pre_alloc_hook+0x59/0x300 [ 1153.876326][T14424] ? x509_cert_parse+0x2d5/0x7b0 [ 1153.881263][T14424] ? x509_cert_parse+0x2d5/0x7b0 [ 1153.886197][T14424] __kmem_cache_alloc_node+0x53/0x250 [ 1153.891570][T14424] ? x509_cert_parse+0x2d5/0x7b0 [ 1153.896505][T14424] __kmalloc_node_track_caller+0xa4/0x230 [ 1153.902231][T14424] kmemdup+0x2b/0x70 [ 1153.906126][T14424] x509_cert_parse+0x2d5/0x7b0 [ 1153.910891][T14424] x509_key_preparse+0x64/0x6c0 [ 1153.915741][T14424] ? down_read+0x1ac/0x2e0 [ 1153.920157][T14424] asymmetric_key_preparse+0xa9/0x140 [ 1153.925527][T14424] __key_create_or_update+0x3a6/0xa60 [ 1153.930907][T14424] ? key_create_or_update+0x60/0x60 [ 1153.936100][T14424] ? bpf_lsm_key_permission+0x9/0x10 [ 1153.941385][T14424] ? lookup_user_key+0xb66/0x1140 [ 1153.946408][T14424] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 1153.952389][T14424] key_create_or_update+0x42/0x60 [ 1153.957413][T14424] __se_sys_add_key+0x34f/0x410 [ 1153.962282][T14424] ? __x64_sys_add_key+0xc0/0xc0 [ 1153.967221][T14424] ? lockdep_hardirqs_on+0x98/0x150 [ 1153.972416][T14424] ? __x64_sys_add_key+0x20/0xc0 [ 1153.977355][T14424] do_syscall_64+0x55/0xb0 [ 1153.981768][T14424] ? clear_bhb_loop+0x40/0x90 [ 1153.986444][T14424] ? clear_bhb_loop+0x40/0x90 [ 1153.991118][T14424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1153.997010][T14424] RIP: 0033:0x7f16b5b9e159 [ 1154.001434][T14424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1154.021047][T14424] RSP: 002b:00007f16b69e8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1154.029457][T14424] RAX: ffffffffffffffda RBX: 00007f16b5e25fa0 RCX: 00007f16b5b9e159 [ 1154.037424][T14424] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 1154.045389][T14424] RBP: 00007f16b5c3506b R08: ffffffffffffffff R09: 0000000000000000 [ 1154.053354][T14424] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 1154.061317][T14424] R13: 00007f16b5e26038 R14: 00007f16b5e25fa0 R15: 00007ffddc7f63a8 [ 1154.069295][T14424] [ 1157.204560][T14454] overlayfs: missing 'workdir' [ 1157.774613][T14464] loop3: detected capacity change from 0 to 128 [ 1159.136441][T14468] FAULT_INJECTION: forcing a failure. [ 1159.136441][T14468] name failslab, interval 1, probability 0, space 0, times 0 [ 1159.586117][T14468] CPU: 0 PID: 14468 Comm: syz.3.2724 Not tainted syzkaller #0 [ 1159.593616][T14468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1159.603669][T14468] Call Trace: [ 1159.606971][T14468] [ 1159.609899][T14468] dump_stack_lvl+0x18c/0x250 [ 1159.614580][T14468] ? show_regs_print_info+0x20/0x20 [ 1159.619777][T14468] ? load_image+0x420/0x420 [ 1159.624293][T14468] ? __might_sleep+0xe0/0xe0 [ 1159.628895][T14468] ? __lock_acquire+0x7d80/0x7d80 [ 1159.633932][T14468] should_fail_ex+0x394/0x4c0 [ 1159.638612][T14468] should_failslab+0x9/0x20 [ 1159.643116][T14468] slab_pre_alloc_hook+0x59/0x300 [ 1159.648145][T14468] ? tcf_block_get_ext+0xe92/0x13d0 [ 1159.653424][T14468] ? multiq_init+0x144/0x2b0 [ 1159.658036][T14468] ? multiq_init+0x144/0x2b0 [ 1159.662625][T14468] __kmem_cache_alloc_node+0x53/0x250 [ 1159.667998][T14468] ? qdisc_alloc+0x95/0xa80 [ 1159.672515][T14468] ? multiq_init+0x144/0x2b0 [ 1159.677099][T14468] __kmalloc+0xa7/0x240 [ 1159.681253][T14468] multiq_init+0x144/0x2b0 [ 1159.685671][T14468] ? multiq_peek+0x300/0x300 [ 1159.690257][T14468] qdisc_create+0x90f/0x1060 [ 1159.694849][T14468] ? qdisc_notify+0x370/0x370 [ 1159.699521][T14468] ? lockdep_rtnl_is_held+0x26/0x30 [ 1159.704740][T14468] ? qdisc_lookup+0x361/0x6c0 [ 1159.709413][T14468] tc_modify_qdisc+0xb47/0x1de0 [ 1159.714268][T14468] ? qdisc_offload_query_caps+0x150/0x150 [ 1159.720000][T14468] ? qdisc_offload_query_caps+0x150/0x150 [ 1159.725714][T14468] rtnetlink_rcv_msg+0x843/0xf90 [ 1159.730732][T14468] ? rtnetlink_rcv_msg+0x220/0xf90 [ 1159.735865][T14468] ? rtnetlink_bind+0x80/0x80 [ 1159.740561][T14468] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1159.746564][T14468] ? lock_chain_count+0x20/0x20 [ 1159.751415][T14468] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1159.756781][T14468] ? lockdep_hardirqs_on+0x98/0x150 [ 1159.761975][T14468] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1159.767341][T14468] ? _local_bh_enable+0xa0/0xa0 [ 1159.772190][T14468] ? __dev_queue_xmit+0x272/0x37e0 [ 1159.777355][T14468] ? __dev_queue_xmit+0x1329/0x37e0 [ 1159.782547][T14468] ? __dev_queue_xmit+0x272/0x37e0 [ 1159.787663][T14468] ? ref_tracker_free+0x686/0x830 [ 1159.792697][T14468] netlink_rcv_skb+0x235/0x4c0 [ 1159.797510][T14468] ? rtnetlink_bind+0x80/0x80 [ 1159.802223][T14468] ? netlink_ack+0x1160/0x1160 [ 1159.807005][T14468] ? __lock_acquire+0x7d80/0x7d80 [ 1159.812034][T14468] ? netlink_deliver_tap+0x2e/0x1b0 [ 1159.817231][T14468] netlink_unicast+0x7b1/0x930 [ 1159.822010][T14468] netlink_sendmsg+0x8d0/0xbf0 [ 1159.826780][T14468] ? netlink_getsockopt+0x590/0x590 [ 1159.831991][T14468] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1159.837556][T14468] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1159.842840][T14468] ? security_socket_sendmsg+0x80/0xa0 [ 1159.848295][T14468] ? netlink_getsockopt+0x590/0x590 [ 1159.853507][T14468] ____sys_sendmsg+0x61b/0x980 [ 1159.858274][T14468] ? __asan_memset+0x22/0x40 [ 1159.862863][T14468] ? __sys_sendmsg_sock+0x30/0x30 [ 1159.867883][T14468] ? __import_iovec+0x5f2/0x850 [ 1159.872761][T14468] ? import_iovec+0x73/0xa0 [ 1159.877283][T14468] ___sys_sendmsg+0x2a6/0x360 [ 1159.881961][T14468] ? __sys_sendmsg+0x2b0/0x2b0 [ 1159.886759][T14468] __se_sys_sendmsg+0x1d0/0x2c0 [ 1159.891606][T14468] ? __x64_sys_sendmsg+0x80/0x80 [ 1159.896572][T14468] ? lockdep_hardirqs_on+0x98/0x150 [ 1159.901771][T14468] do_syscall_64+0x55/0xb0 [ 1159.906185][T14468] ? clear_bhb_loop+0x40/0x90 [ 1159.910874][T14468] ? clear_bhb_loop+0x40/0x90 [ 1159.915561][T14468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1159.921462][T14468] RIP: 0033:0x7f580859e159 [ 1159.925874][T14468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1159.945479][T14468] RSP: 002b:00007f58093c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1159.953888][T14468] RAX: ffffffffffffffda RBX: 00007f5808825fa0 RCX: 00007f580859e159 [ 1159.961856][T14468] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000006 [ 1159.969821][T14468] RBP: 00007f580863506b R08: 0000000000000000 R09: 0000000000000000 [ 1159.977788][T14468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1159.985766][T14468] R13: 00007f5808826038 R14: 00007f5808825fa0 R15: 00007ffe3c749108 [ 1159.993752][T14468] [ 1161.111288][T14492] overlayfs: missing 'workdir' [ 1161.479349][T14496] loop3: detected capacity change from 0 to 4096 [ 1162.044056][T14496] EXT4-fs: inline encryption not supported [ 1163.051500][T14496] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1163.086632][T14496] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1163.125018][T14496] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a80ec128, mo2=0003] [ 1163.166788][T14496] System zones: 0-5 [ 1163.204934][T14496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1163.622396][T14517] comedi comedi0: ni_at_a2150: I/O port conflict (0x60,28) [ 1163.646952][T14517] comedi comedi0: ni_at_a2150: I/O port conflict (0xe0,28) [ 1163.921267][T14517] comedi comedi0: ni_at_a2150: I/O port conflict (0x2e0,28) [ 1164.025168][T14496] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1164.099104][T14508] overlayfs: missing 'lowerdir' [ 1164.222579][T13541] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1164.252976][T14528] loop1: detected capacity change from 0 to 2048 [ 1164.446459][T14528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1166.594016][T14542] zram0: detected capacity change from 0 to 65536 [ 1166.992641][T12841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1167.121223][T14559] netdevsim0: mtu less than device minimum [ 1167.875467][T14574] syz.3.2755: attempt to access beyond end of device [ 1167.875467][T14574] loop0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1168.010690][T14574] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 1168.052693][T14574] device-mapper: ioctl: error adding target to table [ 1168.388631][T14582] bridge1: entered allmulticast mode [ 1168.411523][T14581] netdevsim0: mtu less than device minimum [ 1170.270081][T14584] loop3: detected capacity change from 0 to 32768 [ 1170.329545][T14584] ERROR: (device loop3): diAllocAG: ipimap->i_size is wrong [ 1170.329545][T14584] [ 1170.342115][T14584] ERROR: (device loop3): remounting filesystem as read-only [ 1170.349579][T14584] ialloc: diAlloc returned -5! [ 1172.549373][T14601] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2766'. [ 1173.716628][T14620] netdevsim0: mtu less than device minimum [ 1174.582724][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 1175.643288][T14623] loop0: detected capacity change from 0 to 32768 [ 1175.683563][T14623] ERROR: (device loop0): diAllocAG: ipimap->i_size is wrong [ 1175.683563][T14623] [ 1175.695716][T14623] ERROR: (device loop0): remounting filesystem as read-only [ 1175.703631][T14623] ialloc: diAlloc returned -5! [ 1177.335191][T14647] zram: Can't change algorithm for initialized device [ 1177.355574][T14647] zram: Cannot change disksize for initialized device [ 1177.447284][T14655] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1177.622831][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.629590][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.680933][T14659] FAULT_INJECTION: forcing a failure. [ 1177.680933][T14659] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.713354][T14659] CPU: 0 PID: 14659 Comm: syz.0.2784 Not tainted syzkaller #0 [ 1177.720855][T14659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1177.730912][T14659] Call Trace: [ 1177.734192][T14659] [ 1177.737136][T14659] dump_stack_lvl+0x18c/0x250 [ 1177.741819][T14659] ? show_regs_print_info+0x20/0x20 [ 1177.747014][T14659] ? load_image+0x420/0x420 [ 1177.751513][T14659] ? __might_sleep+0xe0/0xe0 [ 1177.756111][T14659] ? __lock_acquire+0x7d80/0x7d80 [ 1177.761129][T14659] ? mark_lock+0x94/0x320 [ 1177.765455][T14659] should_fail_ex+0x394/0x4c0 [ 1177.770131][T14659] should_failslab+0x9/0x20 [ 1177.774634][T14659] slab_pre_alloc_hook+0x59/0x300 [ 1177.779677][T14659] ? pkcs8_key_preparse+0x12e/0x3e0 [ 1177.784876][T14659] __kmem_cache_alloc_node+0x53/0x250 [ 1177.790302][T14659] ? pkcs8_key_preparse+0x12e/0x3e0 [ 1177.795530][T14659] kmalloc_trace+0x2a/0xe0 [ 1177.799962][T14659] pkcs8_key_preparse+0x12e/0x3e0 [ 1177.804996][T14659] ? __kmem_cache_free+0xba/0x1f0 [ 1177.810025][T14659] ? pkcs8_note_key+0x80/0x80 [ 1177.814710][T14659] ? down_read+0x1ac/0x2e0 [ 1177.819123][T14659] asymmetric_key_preparse+0xa9/0x140 [ 1177.824497][T14659] __key_create_or_update+0x3a6/0xa60 [ 1177.829876][T14659] ? key_create_or_update+0x60/0x60 [ 1177.835077][T14659] ? bpf_lsm_key_permission+0x9/0x10 [ 1177.840367][T14659] ? lookup_user_key+0xb66/0x1140 [ 1177.845396][T14659] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 1177.851380][T14659] key_create_or_update+0x42/0x60 [ 1177.856542][T14659] __se_sys_add_key+0x34f/0x410 [ 1177.861431][T14659] ? __x64_sys_add_key+0xc0/0xc0 [ 1177.866400][T14659] ? lockdep_hardirqs_on+0x98/0x150 [ 1177.871611][T14659] ? __x64_sys_add_key+0x20/0xc0 [ 1177.876553][T14659] do_syscall_64+0x55/0xb0 [ 1177.880969][T14659] ? clear_bhb_loop+0x40/0x90 [ 1177.885674][T14659] ? clear_bhb_loop+0x40/0x90 [ 1177.890454][T14659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1177.896367][T14659] RIP: 0033:0x7f6b3199e159 [ 1177.900797][T14659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1177.920414][T14659] RSP: 002b:00007f6b328b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1177.928845][T14659] RAX: ffffffffffffffda RBX: 00007f6b31c25fa0 RCX: 00007f6b3199e159 [ 1177.936815][T14659] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 1177.944789][T14659] RBP: 00007f6b31a3506b R08: ffffffffffffffff R09: 0000000000000000 [ 1177.952755][T14659] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 1177.960724][T14659] R13: 00007f6b31c26038 R14: 00007f6b31c25fa0 R15: 00007ffec6480798 [ 1177.968704][T14659] [ 1188.736583][T14703] loop0: detected capacity change from 0 to 32768 [ 1188.761818][T14703] ERROR: (device loop0): diAllocAG: ipimap->i_size is wrong [ 1188.761818][T14703] [ 1188.771617][T14703] ERROR: (device loop0): remounting filesystem as read-only [ 1188.778977][T14703] ialloc: diAlloc returned -5! [ 1192.301909][T14712] syz.2.2802 (14712): drop_caches: 2 [ 1193.369036][ T28] audit: type=1326 audit(1790150033.513:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14727 comm="syz.3.2792" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580859e159 code=0x7ffc0000 [ 1193.947150][ T28] audit: type=1326 audit(1790150033.533:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14727 comm="syz.3.2792" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580859e159 code=0x7ffc0000 [ 1194.112513][ T28] audit: type=1326 audit(1790150033.543:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14727 comm="syz.3.2792" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f580859e159 code=0x7ffc0000 [ 1194.231834][ T28] audit: type=1326 audit(1790150033.743:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14727 comm="syz.3.2792" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580859e159 code=0x7ffc0000 [ 1194.456265][ T28] audit: type=1326 audit(1790150033.743:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14727 comm="syz.3.2792" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580859e159 code=0x7ffc0000 [ 1194.496173][T14743] loop0: detected capacity change from 0 to 64 [ 1194.641290][ T28] audit: type=1326 audit(1790150033.743:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14733 comm="syz.3.2792" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f580855e98e code=0x7ffc0000 [ 1194.696688][T14743] Bad inode number on dev loop0: 6 is out of range [ 1194.816933][ T28] audit: type=1326 audit(1790150034.083:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14733 comm="syz.3.2792" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f580859e159 code=0x7ffc0000 [ 1195.674216][T14748] overlayfs: missing 'lowerdir' [ 1195.740254][ T28] audit: type=1326 audit(1790150034.213:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14727 comm="syz.3.2792" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f580859e159 code=0x7ffc0000 [ 1196.251916][ T28] audit: type=1326 audit(1790150034.213:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14727 comm="syz.3.2792" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580859e159 code=0x7ffc0000 [ 1197.940407][ T28] audit: type=1326 audit(1790150034.213:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14727 comm="syz.3.2792" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580859e159 code=0x7ffc0000 [ 1199.179227][T14769] loop2: detected capacity change from 0 to 512 [ 1199.275502][T14769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1199.389930][T14769] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1199.598574][T14769] EXT4-fs error (device loop2): ext4_get_first_dir_block:3594: inode #12: block 32: comm syz.2.2822: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1199.890317][T14769] EXT4-fs error (device loop2): ext4_get_first_dir_block:3597: inode #12: comm syz.2.2822: directory missing '.' [ 1199.951020][ T28] audit: type=1800 audit(1790150040.093:53): pid=14783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2822" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1203.609322][T13834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1205.744809][T14814] syzkaller0: entered promiscuous mode [ 1205.885115][T14814] syzkaller0: entered allmulticast mode [ 1206.780461][T14831] netdevsim0: mtu less than device minimum [ 1207.635478][T12842] Bluetooth: min 0 < 6 [ 1207.783584][T14845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2843'. [ 1208.020676][T14848] syzkaller0: entered promiscuous mode [ 1208.036938][T14848] syzkaller0: entered allmulticast mode [ 1208.853459][T14858] netdevsim0: mtu less than device minimum [ 1209.702465][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 1210.418181][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 1211.048577][T14864] loop2: detected capacity change from 0 to 32768 [ 1211.845121][T14881] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2856'. [ 1213.635934][T14887] netdevsim0: mtu less than device minimum [ 1215.406675][T14884] syz.0.2857 (14884): drop_caches: 2 [ 1215.651508][T14898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2863'. [ 1215.699936][T14898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1217.474761][T14902] loop2: detected capacity change from 0 to 32768 [ 1217.561528][T14898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1218.358894][T14916] netdevsim0: mtu less than device minimum [ 1219.384968][T14922] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2871'. [ 1220.327147][T14927] loop3: detected capacity change from 0 to 32768 [ 1220.407755][T14927] read_mapping_page failed! [ 1220.443124][T14927] ERROR: (device loop3): txCommit: [ 1220.443124][T14927] [ 1221.108854][T14947] netdevsim0: mtu less than device minimum [ 1221.568973][ T8] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 1221.638248][T12935] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1221.682014][T14954] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2883'. [ 1221.771094][ T8] usb 1-1: not running at top speed; connect to a high speed hub [ 1221.784058][ T8] usb 1-1: config index 0 descriptor too short (expected 43, got 25) [ 1221.792828][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1221.816376][ T8] usb 1-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 1221.842924][T12935] usb 4-1: Using ep0 maxpacket: 32 [ 1221.851330][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1221.861753][T12935] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1221.880132][ T8] usb 1-1: Product: syz [ 1221.884445][T12935] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1221.893373][ T8] usb 1-1: Manufacturer: syz [ 1221.906177][T12935] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1221.941378][T12935] usb 4-1: config 1 has no interface number 0 [ 1221.962852][T12935] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1222.001005][T12935] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1222.065764][T12935] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1222.087803][ T8] msi2500 1-1:1.0: Registered as swradio24 [ 1222.102277][T12935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.110441][ T8] msi2500 1-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 1222.147041][T12935] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1222.176194][ T8] usb 1-1: USB disconnect, device number 23 [ 1222.393798][T12935] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1222.490175][T14963] loop1: detected capacity change from 0 to 64 [ 1222.876465][T12842] Bluetooth: hci1: unexpected event 0x04 length: 9 < 10 [ 1222.917816][ T8] usb 4-1: USB disconnect, device number 20 [ 1222.936623][ T8] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1223.312241][T14982] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2893'. [ 1223.465051][T14986] loop0: detected capacity change from 0 to 64 [ 1223.571349][T14988] loop3: detected capacity change from 0 to 128 [ 1223.622796][T14988] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1225.058793][T12842] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10 [ 1225.096311][T12842] Bluetooth: min 0 < 6 [ 1225.355890][T14976] loop2: detected capacity change from 0 to 32768 [ 1225.462785][T14976] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1225.584174][T14976] XFS (loop2): Ending clean mount [ 1225.865278][T13834] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1225.970390][T15014] loop1: detected capacity change from 0 to 64 [ 1227.604851][T12842] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1227.611331][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 1227.990512][T15028] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2908'. [ 1228.117073][T15023] Bluetooth: hci3: unexpected event 0x04 length: 9 < 10 [ 1230.005593][T15036] loop2: detected capacity change from 0 to 32768 [ 1230.045533][T15036] ERROR: (device loop2): diAllocAG: ipimap->i_size is wrong [ 1230.045533][T15036] [ 1230.055504][T15036] ERROR: (device loop2): remounting filesystem as read-only [ 1230.062839][T15036] ialloc: diAlloc returned -5! [ 1230.169326][ T28] audit: type=1800 audit(1790150070.303:54): pid=15042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2913" name="attr_allow_any_host" dev="configfs" ino=36129 res=0 errno=0 [ 1230.209208][T15042] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1230.283561][ T28] audit: type=1800 audit(1790150070.313:55): pid=15042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2913" name="device_path" dev="configfs" ino=36130 res=0 errno=0 [ 1230.408239][ T28] audit: type=1800 audit(1790150070.343:56): pid=15042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2913" name="enable" dev="configfs" ino=36131 res=0 errno=0 [ 1230.688700][ T28] audit: type=1800 audit(1790150070.343:57): pid=15042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2913" name="addr_trtype" dev="configfs" ino=36132 res=0 errno=0 [ 1230.956147][T15049] program syz.1.2915 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1232.238855][T15053] bridge0: port 3(wlan1) entered blocking state [ 1232.260323][T15053] bridge0: port 3(wlan1) entered disabled state [ 1233.829697][T15053] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 1233.852209][T15057] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 1233.852209][T15057] program syz.1.2920 not setting count and/or reply_len properly [ 1235.516917][T15059] syz.2.2919 (15059): drop_caches: 2 [ 1235.522662][T15053] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 1235.545523][T15059] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 1235.545523][T15059] program syz.2.2919 not setting count and/or reply_len properly [ 1235.674726][T15060] syz.1.2920 (15060): drop_caches: 2 [ 1235.895503][T15071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2922'. [ 1235.976499][T15071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2922'. [ 1236.024650][T15071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2922'. [ 1237.624246][T15071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2922'. [ 1237.970475][T15073] loop2: detected capacity change from 0 to 32768 [ 1238.196203][T15077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2924'. [ 1238.242235][T15073] ERROR: (device loop2): diAllocAG: ipimap->i_size is wrong [ 1238.242235][T15073] [ 1238.253653][T15073] ERROR: (device loop2): remounting filesystem as read-only [ 1238.261808][T15073] ialloc: diAlloc returned -5! [ 1238.761001][T15085] syzkaller0: entered promiscuous mode [ 1238.790251][T15085] syzkaller0: entered allmulticast mode [ 1239.073147][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.080832][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.894105][T15094] loop1: detected capacity change from 0 to 32768 [ 1241.961827][T15094] ERROR: (device loop1): diAllocAG: ipimap->i_size is wrong [ 1241.961827][T15094] [ 1241.972726][T15094] ERROR: (device loop1): remounting filesystem as read-only [ 1241.980099][T15094] ialloc: diAlloc returned -5! [ 1243.962495][T15100] loop0: detected capacity change from 0 to 32768 [ 1244.023752][T15100] ERROR: (device loop0): diAllocAG: ipimap->i_size is wrong [ 1244.023752][T15100] [ 1244.033574][T15100] ERROR: (device loop0): remounting filesystem as read-only [ 1244.040990][T15100] ialloc: diAlloc returned -5! [ 1244.612311][T15114] syzkaller0: entered promiscuous mode [ 1244.617820][T15114] syzkaller0: entered allmulticast mode [ 1244.774050][T15117] loop1: detected capacity change from 0 to 8 [ 1244.825846][T15117] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1244.859696][T15117] SQUASHFS error: Failed to read block 0x9b: -5 [ 1244.899478][T15117] SQUASHFS error: Unable to read metadata cache entry [99] [ 1244.935161][T15117] SQUASHFS error: Unable to read inode 0x127 [ 1248.387481][T15123] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 1248.387481][T15123] program syz.3.2932 not setting count and/or reply_len properly [ 1248.427669][T15124] syz.3.2932 (15124): drop_caches: 2 [ 1249.749569][T15138] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2946'. [ 1249.788219][T13499] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1251.553514][ T9] IPVS: starting estimator thread 0... [ 1251.559203][T13499] usb 3-1: Using ep0 maxpacket: 8 [ 1251.603912][T15139] device-mapper: ioctl: Invalid ioctl structure: name N!, dev f801 [ 1251.612740][T13499] usb 3-1: device descriptor read/all, error -71 [ 1251.678440][T15144] IPVS: using max 33 ests per chain, 79200 per kthread [ 1253.492532][T15150] ip_tables: iptables: counters copy to user failed while replacing table [ 1260.279573][T15187] ip_tables: iptables: counters copy to user failed while replacing table [ 1268.060828][T15214] FAULT_INJECTION: forcing a failure. [ 1268.060828][T15214] name failslab, interval 1, probability 0, space 0, times 0 [ 1268.336062][T15214] CPU: 0 PID: 15214 Comm: syz.3.2970 Not tainted syzkaller #0 [ 1268.343568][T15214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1268.353620][T15214] Call Trace: [ 1268.356896][T15214] [ 1268.359828][T15214] dump_stack_lvl+0x18c/0x250 [ 1268.364517][T15214] ? show_regs_print_info+0x20/0x20 [ 1268.369713][T15214] ? load_image+0x420/0x420 [ 1268.374217][T15214] ? __lock_acquire+0x7d80/0x7d80 [ 1268.379258][T15214] should_fail_ex+0x394/0x4c0 [ 1268.383947][T15214] should_failslab+0x9/0x20 [ 1268.388447][T15214] slab_pre_alloc_hook+0x59/0x300 [ 1268.393474][T15214] ? rcu_is_watching+0x15/0xb0 [ 1268.398237][T15214] kmem_cache_alloc+0x5a/0x2c0 [ 1268.403003][T15214] ? ceph_msg_new2+0x3a/0x490 [ 1268.407734][T15214] ceph_msg_new2+0x3a/0x490 [ 1268.412234][T15214] ceph_monc_init+0x5b6/0xa70 [ 1268.417024][T15214] ceph_create_client+0x225/0x300 [ 1268.422068][T15214] ceph_get_tree+0x1ca/0x1800 [ 1268.426745][T15214] ? bpf_lsm_capable+0x9/0x10 [ 1268.431415][T15214] ? security_capable+0x89/0xb0 [ 1268.436263][T15214] vfs_get_tree+0x8c/0x280 [ 1268.440681][T15214] vfs_cmd_create+0xe3/0x230 [ 1268.445278][T15214] __se_sys_fsconfig+0x70a/0x850 [ 1268.450235][T15214] ? __x64_sys_fsconfig+0xc0/0xc0 [ 1268.455284][T15214] ? lockdep_hardirqs_on+0x98/0x150 [ 1268.460474][T15214] ? __x64_sys_fsconfig+0x20/0xc0 [ 1268.465495][T15214] do_syscall_64+0x55/0xb0 [ 1268.469909][T15214] ? clear_bhb_loop+0x40/0x90 [ 1268.474585][T15214] ? clear_bhb_loop+0x40/0x90 [ 1268.479287][T15214] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1268.485176][T15214] RIP: 0033:0x7f580859e159 [ 1268.489585][T15214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1268.509185][T15214] RSP: 002b:00007f58093c2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1268.517597][T15214] RAX: ffffffffffffffda RBX: 00007f5808825fa0 RCX: 00007f580859e159 [ 1268.525574][T15214] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1268.533538][T15214] RBP: 00007f580863506b R08: 0000000000000000 R09: 0000000000000000 [ 1268.541503][T15214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1268.549481][T15214] R13: 00007f5808826038 R14: 00007f5808825fa0 R15: 00007ffe3c749108 [ 1268.557458][T15214] [ 1268.579875][T15217] hub 1-0:1.0: USB hub found [ 1268.590159][T15217] hub 1-0:1.0: 1 port detected [ 1269.981238][T15233] ip_tables: iptables: counters copy to user failed while replacing table [ 1272.209291][T15245] netdevsim0: mtu less than device minimum [ 1273.887849][T15244] bridge0: port 3(wlan1) entered disabled state [ 1278.325758][T15301] ip_tables: iptables: counters copy to user failed while replacing table [ 1279.772906][T15317] loop1: detected capacity change from 0 to 2048 [ 1279.853633][T15317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1279.930769][T15317] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1280.139573][T15317] fs-verity: sha512 using implementation "sha512-avx2" [ 1280.414112][T12841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1280.656793][T15332] loop2: detected capacity change from 0 to 512 [ 1280.753606][T15332] EXT4-fs (loop2): bad s_min_extra_isize: 544 [ 1280.771688][T15337] loop0: detected capacity change from 0 to 32768 [ 1280.861443][T15069] blk_print_req_error: 12 callbacks suppressed [ 1280.861456][T15069] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1280.907303][ T28] audit: type=1800 audit(1790150121.033:58): pid=15337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3000" name="ipv4_address" dev="configfs" ino=36975 res=0 errno=0 [ 1281.033143][T15343] [ 1281.035505][T15343] ====================================================== [ 1281.042510][T15343] WARNING: possible circular locking dependency detected [ 1281.049510][T15343] syzkaller #0 Not tainted [ 1281.053906][T15343] ------------------------------------------------------ [ 1281.060910][T15343] syz.2.2986/15343 is trying to acquire lock: [ 1281.066958][T15343] ffffffff8ddf43f0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: uvcg_streaming_header_allow_link+0x71/0x4a0 [ 1281.078246][T15343] [ 1281.078246][T15343] but task is already holding lock: [ 1281.085595][T15343] ffff888030edaef0 (&sb->s_type->i_mutex_key#22){++++}-{3:3}, at: configfs_symlink+0x47a/0xfe0 [ 1281.095937][T15343] [ 1281.095937][T15343] which lock already depends on the new lock. [ 1281.095937][T15343] [ 1281.106337][T15343] [ 1281.106337][T15343] the existing dependency chain (in reverse order) is: [ 1281.115337][T15343] [ 1281.115337][T15343] -> #3 (&sb->s_type->i_mutex_key#22){++++}-{3:3}: [ 1281.124011][T15343] down_write+0x97/0x200 [ 1281.128779][T15343] configfs_depend_item_unlocked+0x157/0x430 [ 1281.135269][T15343] usbg_make_tpg+0x1e1/0x550 [ 1281.140402][T15343] target_fabric_make_tpg+0xa4/0x6d0 [ 1281.146219][T15343] configfs_mkdir+0x515/0x9e0 [ 1281.151409][T15343] vfs_mkdir+0x2a5/0x470 [ 1281.156161][T15343] do_mkdirat+0x1dc/0x450 [ 1281.160999][T15343] __x64_sys_mkdirat+0x89/0xa0 [ 1281.166269][T15343] do_syscall_64+0x55/0xb0 [ 1281.171210][T15343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1281.177645][T15343] [ 1281.177645][T15343] -> #2 (tpg_instances_lock){+.+.}-{3:3}: [ 1281.185552][T15343] __mutex_lock+0x135/0xc80 [ 1281.190582][T15343] tcm_alloc_inst+0x65/0x190 [ 1281.195681][T15343] usb_get_function_instance+0xdd/0x2e0 [ 1281.201795][T15343] function_make+0x11c/0x350 [ 1281.206895][T15343] configfs_mkdir+0x515/0x9e0 [ 1281.212083][T15343] vfs_mkdir+0x2a5/0x470 [ 1281.216830][T15343] do_mkdirat+0x1dc/0x450 [ 1281.221673][T15343] __x64_sys_mkdirat+0x89/0xa0 [ 1281.226943][T15343] do_syscall_64+0x55/0xb0 [ 1281.231870][T15343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1281.238273][T15343] [ 1281.238273][T15343] -> #1 (func_lock){+.+.}-{3:3}: [ 1281.245385][T15343] __mutex_lock+0x135/0xc80 [ 1281.250396][T15343] usb_get_function_instance+0x2e/0x2e0 [ 1281.256454][T15343] function_make+0x11c/0x350 [ 1281.261555][T15343] configfs_mkdir+0x515/0x9e0 [ 1281.266740][T15343] vfs_mkdir+0x2a5/0x470 [ 1281.271492][T15343] do_mkdirat+0x1dc/0x450 [ 1281.276330][T15343] __x64_sys_mkdirat+0x89/0xa0 [ 1281.281600][T15343] do_syscall_64+0x55/0xb0 [ 1281.286527][T15343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1281.292932][T15343] [ 1281.292932][T15343] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 1281.301168][T15343] __lock_acquire+0x37ef/0x7d80 [ 1281.306542][T15343] lock_acquire+0x19e/0x420 [ 1281.311555][T15343] __mutex_lock+0x135/0xc80 [ 1281.316592][T15343] uvcg_streaming_header_allow_link+0x71/0x4a0 [ 1281.323271][T15343] configfs_symlink+0x5a5/0xfe0 [ 1281.328633][T15343] vfs_symlink+0x138/0x2b0 [ 1281.333568][T15343] do_symlinkat+0x1ba/0x400 [ 1281.338583][T15343] __x64_sys_symlink+0x7e/0x90 [ 1281.343858][T15343] do_syscall_64+0x55/0xb0 [ 1281.348783][T15343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1281.355186][T15343] [ 1281.355186][T15343] other info that might help us debug this: [ 1281.355186][T15343] [ 1281.365398][T15343] Chain exists of: [ 1281.365398][T15343] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#22 [ 1281.365398][T15343] [ 1281.380333][T15343] Possible unsafe locking scenario: [ 1281.380333][T15343] [ 1281.387767][T15343] CPU0 CPU1 [ 1281.393121][T15343] ---- ---- [ 1281.398472][T15343] lock(&sb->s_type->i_mutex_key#22); [ 1281.403924][T15343] lock(tpg_instances_lock); [ 1281.411108][T15343] lock(&sb->s_type->i_mutex_key#22); [ 1281.419092][T15343] lock(gadget_subsys.su_mutex); [ 1281.424103][T15343] [ 1281.424103][T15343] *** DEADLOCK *** [ 1281.424103][T15343] [ 1281.432248][T15343] 2 locks held by syz.2.2986/15343: [ 1281.437428][T15343] #0: ffff88801fedc418 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1281.446647][T15343] #1: ffff888030edaef0 (&sb->s_type->i_mutex_key#22){++++}-{3:3}, at: configfs_symlink+0x47a/0xfe0 [ 1281.457422][T15343] [ 1281.457422][T15343] stack backtrace: [ 1281.463297][T15343] CPU: 0 PID: 15343 Comm: syz.2.2986 Not tainted syzkaller #0 [ 1281.470742][T15343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1281.480786][T15343] Call Trace: [ 1281.484058][T15343] [ 1281.487002][T15343] dump_stack_lvl+0x18c/0x250 [ 1281.491675][T15343] ? load_image+0x420/0x420 [ 1281.496167][T15343] ? show_regs_print_info+0x20/0x20 [ 1281.501360][T15343] ? print_circular_bug+0x12b/0x1a0 [ 1281.506549][T15343] check_noncircular+0x2fc/0x400 [ 1281.511480][T15343] ? print_deadlock_bug+0x5d0/0x5d0 [ 1281.516667][T15343] ? lockdep_lock+0xf5/0x230 [ 1281.521252][T15343] ? _find_first_zero_bit+0xd6/0x100 [ 1281.526528][T15343] __lock_acquire+0x37ef/0x7d80 [ 1281.531371][T15343] ? __lock_acquire+0x1336/0x7d80 [ 1281.536382][T15343] ? verify_lock_unused+0x140/0x140 [ 1281.541572][T15343] lock_acquire+0x19e/0x420 [ 1281.546066][T15343] ? uvcg_streaming_header_allow_link+0x71/0x4a0 [ 1281.552389][T15343] ? __might_sleep+0xe0/0xe0 [ 1281.556969][T15343] ? read_lock_is_recursive+0x20/0x20 [ 1281.562332][T15343] __mutex_lock+0x135/0xc80 [ 1281.566823][T15343] ? uvcg_streaming_header_allow_link+0x71/0x4a0 [ 1281.573144][T15343] ? __might_sleep+0xe0/0xe0 [ 1281.577725][T15343] ? uvcg_streaming_header_allow_link+0x71/0x4a0 [ 1281.584059][T15343] ? read_lock_is_recursive+0x20/0x20 [ 1281.589433][T15343] ? mutex_lock_nested+0x20/0x20 [ 1281.594357][T15343] ? configfs_symlink+0x469/0xfe0 [ 1281.599371][T15343] ? make_vfsuid+0x67/0xb0 [ 1281.603787][T15343] ? generic_permission+0x1ed/0x590 [ 1281.608977][T15343] uvcg_streaming_header_allow_link+0x71/0x4a0 [ 1281.615124][T15343] ? inode_permission+0xf3/0x480 [ 1281.620062][T15343] ? bpf_lsm_inode_permission+0x9/0x10 [ 1281.625513][T15343] ? security_inode_permission+0xb0/0xf0 [ 1281.631138][T15343] configfs_symlink+0x5a5/0xfe0 [ 1281.635985][T15343] ? from_kgid+0x153/0x6a0 [ 1281.640411][T15343] ? generic_permission+0x1ed/0x590 [ 1281.645597][T15343] ? detach_groups+0x370/0x370 [ 1281.650352][T15343] ? inode_permission+0xf3/0x480 [ 1281.655288][T15343] ? bpf_lsm_inode_symlink+0x9/0x10 [ 1281.660474][T15343] ? security_inode_symlink+0xb6/0x100 [ 1281.665926][T15343] vfs_symlink+0x138/0x2b0 [ 1281.670332][T15343] do_symlinkat+0x1ba/0x400 [ 1281.674826][T15343] ? vfs_symlink+0x2b0/0x2b0 [ 1281.679420][T15343] ? getname_flags+0x20a/0x500 [ 1281.684175][T15343] __x64_sys_symlink+0x7e/0x90 [ 1281.688931][T15343] do_syscall_64+0x55/0xb0 [ 1281.693339][T15343] ? clear_bhb_loop+0x40/0x90 [ 1281.698007][T15343] ? clear_bhb_loop+0x40/0x90 [ 1281.702676][T15343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1281.708561][T15343] RIP: 0033:0x7ff44819e159 [ 1281.712985][T15343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1281.732599][T15343] RSP: 002b:00007ff448fdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 1281.741013][T15343] RAX: ffffffffffffffda RBX: 00007ff448426090 RCX: 00007ff44819e159 [ 1281.748974][T15343] RDX: 0000000000000000 RSI: 0000200000001100 RDI: 0000200000001000 [ 1281.756935][T15343] RBP: 00007ff44823506b R08: 0000000000000000 R09: 0000000000000000 [ 1281.764893][T15343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1281.772851][T15343] R13: 00007ff448426128 R14: 00007ff448426090 R15: 00007ffef35b3e48 [ 1281.780815][T15343] [ 1281.818207][ T28] audit: type=1800 audit(1790150121.073:59): pid=15337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3000" name="ipv4_port" dev="configfs" ino=36976 res=0 errno=0 [ 1281.869012][ T28] audit: type=1800 audit(1790150121.073:60): pid=15337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3000" name="num" dev="configfs" ino=36977 res=0 errno=0 [ 1281.907138][T15346] Invalid option length (1004290) for dns_resolver key [ 1281.966373][ T28] audit: type=1800 audit(1790150121.073:61): pid=15337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3000" name="local" dev="configfs" ino=36978 res=0 errno=0 [ 1282.041440][ T28] audit: type=1800 audit(1790150121.153:62): pid=15337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3000" name="block_bytes" dev="configfs" ino=36990 res=0 errno=0 [ 1282.120192][ T28] audit: type=1800 audit(1790150121.153:63): pid=15337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3000" name="blocks" dev="configfs" ino=36991 res=0 errno=0 [ 1282.220072][ T28] audit: type=1800 audit(1790150121.163:64): pid=15337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3000" name="dev" dev="configfs" ino=36992 res=0 errno=0