last executing test programs: 53.83727841s ago: executing program 2 (id=450): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000003e00)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003f40)={&(0x7f0000003f80)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000540)=ANY=[], 0x36) 53.693273605s ago: executing program 2 (id=451): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x242, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000080)={0x77, 0x6, 0xfffffffffffffffd, 0x9, 0x6500, 0xb, 0x4545, 0xb, 0x9657, 0x3, 0x7fffffff, 0xfffffffffffffffb, 0x1000000000000020, 0x9, 0x40, 0xcc0, 0x10048, 0x3, 0x94d6, 0xd, 0x2, 0x10000000010000c, 0x2, 0xbc0, 0x8, 0x2000000000000}) setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000680001040000000000000000020000000000000008000100020000000800050001"], 0x28}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000740)={0x2, 0x5000, @dev={0xc0, 0x0, 0x2, 0x1}}, 0x10) 53.602167044s ago: executing program 2 (id=452): syz_mount_image$ocfs2(&(0x7f0000000980), &(0x7f00000009c0)='./file0\x00', 0x200000, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000005f00)="$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") ioctl$FITRIM(0xffffffffffffffff, 0x40046f01, &(0x7f000000a680)={0x7fffffff, 0x5, 0x401}) 50.388352182s ago: executing program 2 (id=461): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0xfe, 0x1af, &(0x7f0000000580)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000009d80)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000009dc0)='./proc\x00', &(0x7f0000009e00)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000009e80)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000009f00)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000009f40)='* ./tmp 2147483647 0 0 0 0 fsloc 1 127.0.0.1 / 1\n', 0x31) 49.721192039s ago: executing program 2 (id=469): syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2e86dd6100272400183aff00000000000000000000000000000000ff02000000000000000001000000000188009078450000006d7c00"/78], 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x804808, &(0x7f0000000a40)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES8=r0, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000000b80)="$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") openat$fuse(0xffffffffffffff9c, &(0x7f0000000880), 0x42, 0x0) socket$inet6(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000780)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) delete_module(&(0x7f0000000840)='syzkaller\x00', 0x200) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$KVM_RUN(r3, 0xae80, 0x0) 49.059940427s ago: executing program 2 (id=477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000003e40)={0x0, 0x0, &(0x7f0000003e80)={&(0x7f0000003ec0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003f40)={&(0x7f0000003f80)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000540)=ANY=[], 0x36) 48.73537573s ago: executing program 32 (id=477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000003e40)={0x0, 0x0, &(0x7f0000003e80)={&(0x7f0000003ec0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003f40)={&(0x7f0000003f80)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000540)=ANY=[], 0x36) 10.49681735s ago: executing program 4 (id=593): syz_mount_image$ocfs2(&(0x7f0000000980), &(0x7f00000009c0)='./file0\x00', 0x200000, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000005f00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f000000a640)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40046f01, 0x0) 7.878842397s ago: executing program 0 (id=603): unshare(0x64000600) 5.896106259s ago: executing program 4 (id=607): r0 = syz_open_dev$vim2m(&(0x7f0000000500), 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', 0x0, 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 3.850132217s ago: executing program 4 (id=610): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001700), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001880)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001940)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000001980)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000019c0)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001a00)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1c, 0x2d, 0x65, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x28}}, {0x4e20, 0x4e20, 0x19, 0x0, @gue={{0x2, 0x0, 0x0, 0x2, 0x100}, "b68ed34f131c03e57e"}}}}, 0x3b) 3.310068652s ago: executing program 4 (id=614): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0xa, 0xff, 0x0, 0x7fff0026}]}) syz_emit_ethernet(0x6a, &(0x7f0000000800)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "4b3f7633015aff9fa5e73369ed3ed4f938752184f1af2029", "14ef0f501fd4f4fc0d232b48a86ef0222fb6364766977f816acb8f51148dba1a"}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x3, 0xc, 0x0, &(0x7f0000001040)='syzkaller\x00'}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001080)={r1, 0x0, &(0x7f00000010c0)=""/1, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r1, &(0x7f0000001140), &(0x7f0000001180)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000011c0)={r1, &(0x7f0000001200), 0x0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000001500010000000000000000000f0000000800010001000000080003"], 0x24}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x34}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = io_uring_setup(0x6618, &(0x7f0000000000)={0x0, 0x0, 0x800}) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f0000000080)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0xc00, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x371, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448cb, 0x0) syz_emit_vhci(&(0x7f0000000e40)=ANY=[@ANYBLOB="040e0402030c"], 0x7) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r5) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)={0x2b4, r7, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x270, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '(/^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'v@:}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/dev/dri/card#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x92, 0x4, "5b1a7f6604746c96bd8cdeb7172eb1f989f0ed99171af815bc8eced49169836eb649b5ca481af7f7fb28c43a0beb2320ea3cc05c48a073f0f1959a37a90af8f7be6c3ea2a72a6f561001174d3fd512cc4071cc02579366f7646ca4850a97bf433b47531cb6eaafd5919ece2ff3eb2ce05c03589ff06830c1d25c548a8e45b3893fc8d1f0b84da0f2b2fdc25c593e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xef, 0x5, "b414aacc499b1de83402a157a563ccf6cebb340028795e57ec4622a3093423cd7a484cf841ac366b3726193a19f0ead14bec251e1db604b9f491c6a33d0693f56e0de5421f19a867cacbfba838f831e5da0677a031974b5cda8735c66e5bb25829114c19d6fb05b77027e2485199cd28230416eff69f457140ded8db25cbfe93b4fe7bec1df5c704572a57aa9079b5800e6decd46e428d165e914e5c2005c2977672f6463a80d24d02025a96e6d7534681d5339fb4bfabb6dc98911cd5bb9fe94c5b36a2a88804975fa312bc1248d089960c60679ecb70227eaf67cad6c0e4daa9ae394ce724357add79da"}, @ETHTOOL_A_BITSET_MASK={0x75, 0x5, "a1dcc1a531fab7a3bbee22ab52a03b3a623886222007e7e8bdbc2be95f03acde0fb2c634f4ecd32f38b48773cb65e19afb22b96dfe8489c621974d89d05e6768d98a06b629f0c10945029f22e3613afe50454bf2413cb77086cb0c45c7936616113e397779f589b5936e2088f49c9656b8"}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x20000001}, 0x40008) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f00000000c0)={0xff, 0x0, 0x1, '\x00', 0xb}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f0000000100)={0x29a, 0xe3, 0x1, '\x00', 0xb}, 0x1) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={0x0, 0x10}}, 0x0) r9 = syz_open_dev$dri(&(0x7f00000009c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000a00)={0x0, &(0x7f0000000a40)=[0x0], 0x0, 0x0, 0x0, 0x1}) 3.015992942s ago: executing program 0 (id=615): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) r1 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000300)={0x0, {0x1, 0x0}, 0x0, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) 2.872054377s ago: executing program 1 (id=616): r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000380)=[{0x0}], 0x1}, 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x1ef) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = dup(r1) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, 0x0, 0x0) mount(&(0x7f0000000700)=@filename='mtd0\x00', &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f00000007c0)='./file0\x00') r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000800)='attr/fscreate\x00') write$binfmt_script(r4, &(0x7f0000000840)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0, 0x103) 2.626071292s ago: executing program 1 (id=618): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.488072476s ago: executing program 0 (id=619): r0 = userfaultfd(0x80801) r1 = syz_open_dev$usbfs(&(0x7f0000000440), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000480)={0x0, 0x0, "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"}) close_range(r0, 0xffffffffffffffff, 0x0) 2.335252192s ago: executing program 1 (id=622): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000003c80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000040008000140000000030900010073797a300000000064000000060a01040000000000000000010000000900020073797a32000000000900010073797a300000000038000480340001800c0001007061796c6f61640024000280080001400000000e080004400000000108000240000000010800034000"], 0xec}, 0x1, 0x0, 0x0, 0x4000000}, 0x8090) 2.303543675s ago: executing program 0 (id=623): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="89", 0x1}], 0x1}}], 0x1, 0x400c010) shutdown(r0, 0x1) 2.185198377s ago: executing program 1 (id=624): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x80, 0x10000, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x8}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x7, 0x9, 0x10, 0x5, 0x9, 0x1, 0x7, 0xb, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0) 2.043913521s ago: executing program 0 (id=627): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000040)="3a0000000700200000982a4601", 0xd) 1.800072697s ago: executing program 1 (id=631): r0 = userfaultfd(0x80801) syz_open_dev$usbfs(&(0x7f0000000440), 0x1ff, 0xa401) close_range(r0, 0xffffffffffffffff, 0x0) 1.799960146s ago: executing program 0 (id=632): bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x7, 0x17, 0x7b, 0x8, 0x7c0, 0x1504, 0xb9aa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc2, 0x8, 0x10, 0x0, "", [{{0x9, 0x4, 0x6a, 0x80, 0x0, 0x5a, 0x93, 0x8b, 0x3f}}]}}]}}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000d80), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000e40)={[0x10000000000004, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x469, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x6], 0xeeee8000, 0x2018d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.731440983s ago: executing program 5 (id=633): syz_emit_ethernet(0xa2, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ee527e", 0x6c, 0x3c, 0x0, @empty, @mcast2, {[@dstopts={0x0, 0x3, '\x00', [@ra, @hao={0xc9, 0x10, @mcast1}, @pad1]}]}}}}}, 0x0) 1.688883828s ago: executing program 1 (id=634): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000100)=""/74, 0x49) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x494, &(0x7f0000000180)=ANY=[]) 1.597745027s ago: executing program 5 (id=636): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x9c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x9c}}, 0x0) 1.554211821s ago: executing program 5 (id=637): r0 = syz_open_dev$dri(&(0x7f0000000640), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000700)={0x0, 0x0, 0x0, r1}) r2 = userfaultfd(0x80800) r3 = socket(0x10, 0x3, 0x9) getsockopt$sock_timeval(r3, 0x1, 0x1, &(0x7f0000000000), &(0x7f00000000c0)=0x10) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r4, r6, 0x25, 0x4, @val=@tcx={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0x20d0}}}}}, 0x0) 1.507803356s ago: executing program 5 (id=638): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000002e40)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002e80)='./cifs\x00', 0x1ff) mount(&(0x7f0000002ec0)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000002f00)='./cifs\x00', &(0x7f0000002f40)='cifs\x00', 0x0, &(0x7f0000002f80)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,,ass=root,vers=2.1,nodfs\x00') r1 = accept(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000003000)="00000080fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100100200"/85, 0x55, 0x2, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000500)={0x0, &(0x7f0000000080)=[@nested_amd_inject_event={0x180, 0x38, {0x0, 0xd2, 0x3, 0x5}}, @wr_drn={0x68, 0x20, {0x1, 0x7}}], 0x58}) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5) 595.036499ms ago: executing program 5 (id=642): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 543.179314ms ago: executing program 3 (id=643): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b80), 0x80600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, 0x0) 425.563406ms ago: executing program 3 (id=644): openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240), 0x4002, 0x0) 373.512662ms ago: executing program 3 (id=645): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000900)={0xf, {"a2e3ad21ed0d09f91b5b090987f70906d038e7ff7fc6e5539b0d3d0e8b089b32356d63060890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d17c708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08cdc339081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9d6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f74a2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bcff00000000000000fec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420ae305fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42f48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fadf9ffffff238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3b99caf6b00d84a604047497022d9c30e23ef4df5c89644f48bb536f7946b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6020048cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffee738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c65a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c3329c8a6b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2d06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d2a89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d009000000c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb7847c7148b6ce431bb90e29389f22fc5b59a70efaea2bd40195af4486220d70bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24622a4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744d9b6c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de99258842cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b9906009af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 312.833488ms ago: executing program 4 (id=646): r0 = syz_open_dev$dri(&(0x7f0000000840), 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) 164.077923ms ago: executing program 3 (id=647): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/10, 0x5b) 144.577345ms ago: executing program 3 (id=648): r0 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000100)={0x4, &(0x7f00000001c0)=[{0x1d, '\x00', @data=0x7ffff801, 0x5}, {0x28, '\x00', @buffer={"321734a8fbbf5b0d33cbd3ece430772381dd70c90a624a4ad85b38eb96b4d103", 0x20}, 0x2}, {0x1a, '\x00', @data=0x2, 0x9}, {0x20, '\x00', @st={0x4, [{0x0, @svalue=0x4}, {0x2, @svalue=0x6}, {0x0, @svalue=0x6}, {0x0, @svalue=0x200}]}, 0x8b}]}) 126.348447ms ago: executing program 4 (id=649): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002740)={0x0, 0x0, 0x0}, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x9, 0x5, 0x800, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}) mount(0x0, 0x0, 0x0, 0x40, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) ioctl$GET_ARRAY_INFO(r1, 0x80480911, &(0x7f0000000280)) pwrite64(r1, &(0x7f0000000300)="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0x19, 0x1000) ioctl$GET_DISK_INFO(r1, 0x80140912, 0x0) openat$md_sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$STOP_ARRAY(r1, 0x932, 0x0) 105.5µs ago: executing program 3 (id=650): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x0, 0x0) 0s ago: executing program 5 (id=651): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000000001f7ff9, 0x2) mmap(&(0x7f000028e000/0x3000)=nil, 0x3000, 0x2000009, 0x28011, r0, 0xbf010000) kernel console output (not intermixed with test programs): ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 78.347833][ T4405] (syz.0.7,4405,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 78.479645][ T4405] JBD2: Ignoring recovery information on journal [ 78.486698][ T4361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.510774][ T4361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.581941][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.589446][ T4361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.628469][ T4361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.648899][ T4405] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 78.669580][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.688162][ T4368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.717110][ T4368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.753164][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.761896][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.778249][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.828418][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.929948][ T4410] syz.1.8 (4410) used greatest stack depth: 19536 bytes left [ 79.053840][ T26] audit: type=1400 audit(1793705520.466:3): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/:o" pid=4420 comm="syz.3.4" [ 79.085715][ T4405] syz.0.7 (4405) used greatest stack depth: 18656 bytes left [ 79.170118][ T4424] loop4: detected capacity change from 0 to 2048 [ 79.226150][ T4413] loop2: detected capacity change from 0 to 32768 [ 79.269777][ T4413] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.3 (4413) [ 79.338450][ T4425] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.350532][ T4287] ocfs2: Unmounting device (7,0) on (node local) [ 79.382601][ T4413] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 79.431664][ T4413] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 79.464250][ T4413] BTRFS info (device loop2): setting nodatacow, compression disabled [ 79.513559][ T4427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'. [ 79.520090][ T4413] BTRFS info (device loop2): force clearing of disk cache [ 79.567646][ T4427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'. [ 79.576142][ T4413] BTRFS info (device loop2): enabling ssd optimizations [ 79.607258][ T4413] BTRFS info (device loop2): using spread ssd allocation scheme [ 79.649511][ T4413] BTRFS info (device loop2): turning off barriers [ 79.676639][ T4413] BTRFS info (device loop2): disabling free space tree [ 79.704912][ T4413] BTRFS info (device loop2): not using ssd optimizations [ 79.736343][ T4413] BTRFS info (device loop2): not using spread ssd allocation scheme [ 79.769182][ T4431] loop3: detected capacity change from 0 to 2048 [ 79.856732][ T4439] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.041943][ T4413] BTRFS info (device loop2): rebuilding free space tree [ 80.095813][ T4413] BTRFS info (device loop2): disabling free space tree [ 80.108839][ T4413] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 80.131456][ T4413] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 80.409590][ T4438] loop0: detected capacity change from 0 to 32768 [ 80.454831][ T4438] (syz.0.10,4438,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 80.510287][ T4438] (syz.0.10,4438,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 80.527316][ T4282] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 80.687164][ T4438] JBD2: Ignoring recovery information on journal [ 80.878869][ T4416] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop2 scanned by udevd (4416) [ 80.893482][ T4438] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 81.054409][ T4473] FAULT_INJECTION: forcing a failure. [ 81.054409][ T4473] name fail_futex, interval 1, probability 0, space 0, times 1 [ 81.095747][ T4451] loop1: detected capacity change from 0 to 32768 [ 81.102654][ T4473] CPU: 0 PID: 4473 Comm: syz.2.15 Not tainted syzkaller #0 [ 81.109881][ T4473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 81.119977][ T4473] Call Trace: [ 81.123255][ T4473] [ 81.126183][ T4473] dump_stack_lvl+0x188/0x24e [ 81.131017][ T4473] ? show_regs_print_info+0x12/0x12 [ 81.136219][ T4473] ? load_image+0x410/0x410 [ 81.140721][ T4473] ? rcu_read_lock_sched_held+0x86/0x110 [ 81.146353][ T4473] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 81.152361][ T4473] ? __update_load_avg_cfs_rq+0x745/0xb70 [ 81.158084][ T4473] should_fail_ex+0x390/0x4c0 [ 81.162766][ T4473] get_futex_key+0x1a6/0xe70 [ 81.167384][ T4473] ? futex_setup_timer+0xc0/0xc0 [ 81.172320][ T4473] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 81.178342][ T4473] ? __lock_acquire+0x7ea0/0x7ea0 [ 81.183374][ T4473] ? lock_chain_count+0x20/0x20 [ 81.188229][ T4473] futex_wait_setup+0xb8/0x270 [ 81.193019][ T4473] ? futex_wait_multiple+0x970/0x970 [ 81.198297][ T4473] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 81.204187][ T4473] ? _raw_spin_unlock+0x40/0x40 [ 81.209036][ T4473] futex_wait+0x1cb/0x640 [ 81.213366][ T4473] ? futex_wait_setup+0x270/0x270 [ 81.218395][ T4473] ? file_end_write+0x156/0x250 [ 81.223241][ T4473] ? vfs_write+0x777/0x9a0 [ 81.227651][ T4473] do_futex+0x310/0x320 [ 81.231805][ T4473] ? __ia32_sys_get_robust_list+0x100/0x100 [ 81.237697][ T4473] __se_sys_futex+0x381/0x410 [ 81.242367][ T4473] ? __x64_sys_futex+0xf0/0xf0 [ 81.247127][ T4473] ? __x64_sys_futex+0x1d/0xf0 [ 81.251892][ T4473] do_syscall_64+0x4c/0xa0 [ 81.256308][ T4473] ? clear_bhb_loop+0x60/0xb0 [ 81.260982][ T4473] ? clear_bhb_loop+0x60/0xb0 [ 81.265776][ T4473] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 81.271665][ T4473] RIP: 0033:0x7f597099fb19 [ 81.276086][ T4473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.295692][ T4473] RSP: 002b:00007f59718e50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 81.304131][ T4473] RAX: ffffffffffffffda RBX: 00007f5970c25fa8 RCX: 00007f597099fb19 [ 81.312115][ T4473] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5970c25fa8 [ 81.320092][ T4473] RBP: 00007f5970c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 81.328057][ T4473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.336016][ T4473] R13: 00007f5970c26038 R14: 00007ffde2c8d260 R15: 00007ffde2c8d348 [ 81.343989][ T4473] [ 81.379527][ T4451] ======================================================= [ 81.379527][ T4451] WARNING: The mand mount option has been deprecated and [ 81.379527][ T4451] and is ignored by this kernel. Remove the mand [ 81.379527][ T4451] option from the mount to silence this warning. [ 81.379527][ T4451] ======================================================= [ 81.439044][ T4456] loop4: detected capacity change from 0 to 32768 [ 81.450113][ T4350] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.462841][ T4456] (syz.4.14,4456,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 81.533675][ T4456] (syz.4.14,4456,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 81.534796][ T4451] JBD2: Ignoring recovery information on journal [ 81.616444][ T4287] ocfs2: Unmounting device (7,0) on (node local) [ 81.648510][ T4456] JBD2: Ignoring recovery information on journal [ 81.848559][ T4456] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 81.875732][ T4451] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 82.232426][ T4379] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.390814][ T4284] ocfs2: Unmounting device (7,4) on (node local) [ 82.406785][ T4494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 82.431529][ T4274] ocfs2: Unmounting device (7,1) on (node local) [ 82.441586][ T4379] usb 3-1: device descriptor read/64, error -71 [ 82.646985][ T4498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 82.708530][ T4502] Zero length message leads to an empty skb [ 82.711610][ T4379] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 82.891642][ T4379] usb 3-1: device descriptor read/64, error -71 [ 83.023258][ T4379] usb usb3-port1: attempt power cycle [ 83.146434][ T4515] FAULT_INJECTION: forcing a failure. [ 83.146434][ T4515] name failslab, interval 1, probability 0, space 0, times 1 [ 83.172911][ T4515] CPU: 0 PID: 4515 Comm: syz.4.29 Not tainted syzkaller #0 [ 83.180187][ T4515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 83.190617][ T4515] Call Trace: [ 83.192700][ T4518] loop1: detected capacity change from 0 to 128 [ 83.193899][ T4515] [ 83.193909][ T4515] dump_stack_lvl+0x188/0x24e [ 83.207778][ T4515] ? show_regs_print_info+0x12/0x12 [ 83.214858][ T4515] ? load_image+0x410/0x410 [ 83.219406][ T4515] ? __might_sleep+0xd0/0xd0 [ 83.224033][ T4515] ? __lock_acquire+0x7ea0/0x7ea0 [ 83.229100][ T4515] should_fail_ex+0x390/0x4c0 [ 83.231952][ T4518] FAT-fs (loop1): Unrecognized mount option "shortnamèÊž$·DùÕô14e=win95" or missing value [ 83.233852][ T4515] should_failslab+0x5/0x20 [ 83.233877][ T4515] slab_pre_alloc_hook+0x59/0x300 [ 83.253525][ T4515] ? vfs_write+0x777/0x9a0 [ 83.257998][ T4515] kmem_cache_alloc+0x56/0x2f0 [ 83.262784][ T4515] ? getname_flags+0xb7/0x500 [ 83.267500][ T4515] getname_flags+0xb7/0x500 [ 83.272049][ T4515] do_sys_openat2+0xdd/0x4f0 [ 83.276740][ T4515] ? do_sys_open+0xe0/0xe0 [ 83.281209][ T4515] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 83.287233][ T4515] ? lock_chain_count+0x20/0x20 [ 83.292130][ T4515] __x64_sys_openat+0x135/0x160 [ 83.297120][ T4515] do_syscall_64+0x4c/0xa0 [ 83.301629][ T4515] ? clear_bhb_loop+0x60/0xb0 [ 83.306348][ T4515] ? clear_bhb_loop+0x60/0xb0 [ 83.311072][ T4515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.317011][ T4515] RIP: 0033:0x7f44f279fb19 [ 83.321493][ T4515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.341130][ T4515] RSP: 002b:00007f44f3744028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 83.349572][ T4515] RAX: ffffffffffffffda RBX: 00007f44f2a25fa0 RCX: 00007f44f279fb19 [ 83.357572][ T4515] RDX: 0000000000180302 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 83.365596][ T4515] RBP: 00007f44f2837af8 R08: 0000000000000000 R09: 0000000000000000 [ 83.374386][ T4515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.382391][ T4515] R13: 00007f44f2a26038 R14: 00007f44f2a25fa0 R15: 00007ffcbbee2578 [ 83.390547][ T4515] [ 83.442479][ T4393] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 83.452731][ T4379] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 83.502118][ T4379] usb 3-1: device descriptor read/8, error -71 [ 83.740142][ T4536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.35'. [ 83.774767][ T4379] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 83.815758][ T4379] usb 3-1: device descriptor read/8, error -71 [ 83.943767][ T4379] usb usb3-port1: unable to enumerate USB device [ 83.955902][ T4540] loop3: detected capacity change from 0 to 2048 [ 84.010778][ T4548] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.204014][ T4518] loop1: detected capacity change from 0 to 32768 [ 84.248698][ T4518] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.28 (4518) [ 84.311583][ T4518] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 84.372755][ T4518] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 84.424167][ T4518] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 84.451836][ T4518] BTRFS info (device loop1): use zstd compression, level 3 [ 84.487592][ T4518] BTRFS info (device loop1): using free space tree [ 84.652016][ T4518] BTRFS info (device loop1): enabling ssd optimizations [ 84.732994][ T26] audit: type=1800 audit(1793705526.146:4): pid=4518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.28" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 84.892283][ T4580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.39'. [ 85.151001][ T4274] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 85.583977][ T4613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.48'. [ 86.130761][ T4606] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 86.139334][ T4619] loop0: detected capacity change from 0 to 32768 [ 86.196965][ T4619] JBD2: Ignoring recovery information on journal [ 86.250885][ T4634] loop3: detected capacity change from 0 to 128 [ 86.266158][ T4634] FAT-fs (loop3): Unrecognized mount option "shortnamèÊž$·DùÕô14e=win95" or missing value [ 86.291721][ T4606] usb 3-1: device descriptor read/64, error -71 [ 86.296975][ T4619] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 86.478761][ T26] audit: type=1804 audit(1793705527.886:5): pid=4619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.49" name="/newroot/11/file1/file1" dev="loop0" ino=17059 res=1 errno=0 [ 86.535361][ T4639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'. [ 86.571592][ T4606] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 86.626889][ T1636] cfg80211: failed to load regulatory.db [ 86.731952][ T4606] usb 3-1: device descriptor read/64, error -71 [ 86.749689][ T4287] ocfs2: Unmounting device (7,0) on (node local) [ 86.755815][ T4634] loop3: detected capacity change from 0 to 32768 [ 86.801231][ T4634] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.54 (4634) [ 86.851890][ T4606] usb usb3-port1: attempt power cycle [ 86.858576][ T4634] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 86.892037][ T4634] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 86.910706][ T4634] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 86.921607][ T4634] BTRFS info (device loop3): use zstd compression, level 3 [ 86.955854][ T4634] BTRFS info (device loop3): using free space tree [ 87.083791][ T4634] BTRFS info (device loop3): enabling ssd optimizations [ 87.174585][ T26] audit: type=1800 audit(1793705528.586:6): pid=4634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.54" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 87.237941][ T4673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.61'. [ 87.263052][ T4606] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 87.312338][ T4606] usb 3-1: device descriptor read/8, error -71 [ 87.359812][ T4278] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 87.591592][ T4606] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 87.627850][ T4686] loop4: detected capacity change from 0 to 2048 [ 87.632215][ T4606] usb 3-1: device descriptor read/8, error -71 [ 87.747181][ T4691] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.761826][ T4606] usb usb3-port1: unable to enumerate USB device [ 88.286623][ T4702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'. [ 88.365903][ T26] audit: type=1400 audit(1793705529.776:7): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/:o" pid=4707 comm="syz.0.73" [ 88.391337][ T26] audit: type=1400 audit(1793705529.776:8): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=4707 comm="syz.0.73" name="p" offset=69 [ 88.573601][ T4606] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.761672][ T4606] usb 2-1: Using ep0 maxpacket: 32 [ 88.777801][ T4606] usb 2-1: config 0 has no interfaces? [ 88.797999][ T4606] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 88.823690][ T4606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.868990][ T4606] usb 2-1: Product: syz [ 88.884207][ T4606] usb 2-1: Manufacturer: syz [ 88.900645][ T4606] usb 2-1: SerialNumber: syz [ 88.905648][ T4711] loop4: detected capacity change from 0 to 32768 [ 88.940467][ T4711] (syz.4.74,4711,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 88.960066][ T4606] usb 2-1: config 0 descriptor?? [ 88.977483][ T4711] (syz.4.74,4711,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 88.993041][ T4727] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.027578][ T4711] JBD2: Ignoring recovery information on journal [ 89.096779][ T4711] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 89.121819][ T1636] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.318637][ T1636] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 89.319950][ T4284] ocfs2: Unmounting device (7,4) on (node local) [ 89.332837][ T1636] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 89.347048][ T1636] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 89.360236][ T1636] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 89.394313][ T1636] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 89.418797][ T1636] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.446405][ T1636] usb 1-1: Product: syz [ 89.450781][ T1636] usb 1-1: Manufacturer: syz [ 89.469633][ T1636] usb 1-1: SerialNumber: syz [ 89.486771][ T1636] usb 1-1: config 0 descriptor?? [ 89.610069][ T4745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.72'. [ 89.725661][ T1636] adutux 1-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 89.741685][ T1636] usb 1-1: USB disconnect, device number 2 [ 90.164676][ T4766] loop3: detected capacity change from 0 to 2048 [ 90.193512][ T4768] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.360294][ T4772] loop0: detected capacity change from 0 to 4096 [ 90.466530][ T4773] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.516009][ T26] audit: type=1800 audit(1793705531.926:9): pid=4772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.95" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 90.613634][ T26] audit: type=1800 audit(1793705532.016:10): pid=4777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.95" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 90.649225][ T4780] netlink: 24 bytes leftover after parsing attributes in process `syz.2.99'. [ 90.703166][ T4782] netlink: 24 bytes leftover after parsing attributes in process `syz.2.99'. [ 90.847969][ T4782] netlink: 24 bytes leftover after parsing attributes in process `syz.2.99'. [ 91.209707][ T4779] loop3: detected capacity change from 0 to 32768 [ 91.279326][ T4779] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 91.339940][ T4779] JBD2: Ignoring recovery information on journal [ 91.377410][ T4606] usb 2-1: USB disconnect, device number 2 [ 91.435369][ T4779] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 91.544510][ T4779] (syz.3.97,4779,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 91.546581][ T4801] loop2: detected capacity change from 0 to 2048 [ 91.642587][ T4804] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.690159][ T4278] ocfs2: Unmounting device (7,3) on (node local) [ 91.796265][ T4606] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.003290][ T4606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 92.032249][ T4606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 92.060005][ T4606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 92.098982][ T4606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 92.114946][ T4824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'. [ 92.130728][ T4606] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 92.171558][ T4606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.179653][ T4606] usb 2-1: Product: syz [ 92.191568][ T4606] usb 2-1: Manufacturer: syz [ 92.201683][ T4606] usb 2-1: SerialNumber: syz [ 92.216669][ T4606] usb 2-1: config 0 descriptor?? [ 92.235209][ T4827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'. [ 92.281781][ T4827] netlink: 24 bytes leftover after parsing attributes in process `syz.0.116'. [ 92.305583][ T4830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'. [ 92.368655][ T4830] netlink: 24 bytes leftover after parsing attributes in process `syz.0.116'. [ 92.445148][ T4606] adutux 2-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 92.466762][ T4606] usb 2-1: USB disconnect, device number 3 [ 92.504273][ T4830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'. [ 92.521744][ T4830] netlink: 24 bytes leftover after parsing attributes in process `syz.0.116'. [ 92.585494][ T4838] loop3: detected capacity change from 0 to 4096 [ 92.611411][ T4839] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.640287][ T26] audit: type=1800 audit(1793705534.046:11): pid=4838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.119" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 92.700509][ T26] audit: type=1800 audit(1793705534.106:12): pid=4840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.119" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 93.410816][ T4842] loop2: detected capacity change from 0 to 32768 [ 93.491888][ T4842] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 93.537408][ T4842] JBD2: Ignoring recovery information on journal [ 93.577032][ T4846] loop0: detected capacity change from 0 to 32768 [ 93.612047][ T4846] (syz.0.122,4846,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 93.684767][ T4846] (syz.0.122,4846,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 93.710798][ T4842] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 93.734634][ T4850] loop1: detected capacity change from 0 to 32768 [ 93.796493][ T4842] (syz.2.120,4842,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 93.814801][ T4846] JBD2: Ignoring recovery information on journal [ 93.857280][ T4850] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 93.882791][ T4848] loop4: detected capacity change from 0 to 32768 [ 93.941900][ T4848] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 93.955990][ T4850] JBD2: Ignoring recovery information on journal [ 94.011350][ T4846] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 94.025913][ T4848] JBD2: Ignoring recovery information on journal [ 94.086486][ T4850] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 94.136125][ T4282] ocfs2: Unmounting device (7,2) on (node local) [ 94.197988][ T4848] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 94.333086][ T26] audit: type=1804 audit(1793705535.746:13): pid=4850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.124" name="/newroot/18/file1/file1" dev="loop1" ino=17059 res=1 errno=0 [ 94.457105][ T26] audit: type=1804 audit(1793705535.806:14): pid=4848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.123" name="/newroot/24/file1/file1" dev="loop4" ino=17059 res=1 errno=0 [ 94.478772][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.560324][ T4274] ocfs2: Unmounting device (7,1) on (node local) [ 94.612848][ T4287] ocfs2: Unmounting device (7,0) on (node local) [ 94.657313][ T4284] ocfs2: Unmounting device (7,4) on (node local) [ 95.021688][ T4606] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 95.235887][ T4606] usb 2-1: Using ep0 maxpacket: 32 [ 95.259608][ T4606] usb 2-1: config 0 has no interfaces? [ 95.279849][ T4606] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 95.309170][ T4606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.336620][ T4606] usb 2-1: Product: syz [ 95.340846][ T4606] usb 2-1: Manufacturer: syz [ 95.346550][ T4896] dummy0 speed is unknown, defaulting to 1000 [ 95.356374][ T4606] usb 2-1: SerialNumber: syz [ 95.356544][ T4896] dummy0 speed is unknown, defaulting to 1000 [ 95.368318][ T4896] dummy0 speed is unknown, defaulting to 1000 [ 95.378964][ T4896] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 95.392812][ T4606] usb 2-1: config 0 descriptor?? [ 95.412182][ T4896] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 95.493943][ T4896] dummy0 speed is unknown, defaulting to 1000 [ 95.519017][ T4898] FAULT_INJECTION: forcing a failure. [ 95.519017][ T4898] name failslab, interval 1, probability 0, space 0, times 0 [ 95.519707][ T4896] dummy0 speed is unknown, defaulting to 1000 [ 95.544412][ T4896] dummy0 speed is unknown, defaulting to 1000 [ 95.550660][ T4898] CPU: 1 PID: 4898 Comm: syz.3.137 Not tainted syzkaller #0 [ 95.557974][ T4898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 95.562225][ T4896] dummy0 speed is unknown, defaulting to 1000 [ 95.568027][ T4898] Call Trace: [ 95.577402][ T4898] [ 95.580351][ T4898] dump_stack_lvl+0x188/0x24e [ 95.585070][ T4898] ? show_regs_print_info+0x12/0x12 [ 95.590299][ T4898] ? load_image+0x410/0x410 [ 95.592847][ T4896] dummy0 speed is unknown, defaulting to 1000 [ 95.594816][ T4898] ? __might_sleep+0xd0/0xd0 [ 95.594841][ T4898] ? __lock_acquire+0x7ea0/0x7ea0 [ 95.594871][ T4898] should_fail_ex+0x390/0x4c0 [ 95.594896][ T4898] should_failslab+0x5/0x20 [ 95.614232][ T4897] smc: removing ib device rxe0 [ 95.615383][ T4898] slab_pre_alloc_hook+0x59/0x300 [ 95.615411][ T4898] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.635891][ T4898] ? ima_collect_measurement+0x640/0xb50 [ 95.641658][ T4898] __kmem_cache_alloc_node+0x4f/0x270 [ 95.647073][ T4898] ? ima_collect_measurement+0x640/0xb50 [ 95.652739][ T4898] __kmalloc_node_track_caller+0xa0/0x240 [ 95.658477][ T4898] krealloc+0x6a/0x100 [ 95.662546][ T4898] ima_collect_measurement+0x640/0xb50 [ 95.668002][ T4898] ? trace_raw_output_contention_end+0xd0/0xd0 [ 95.674159][ T4898] ? ima_get_action+0xa0/0xa0 [ 95.678831][ T4898] ? __mutex_lock+0x1ab/0xb40 [ 95.683549][ T4898] ? is_bad_inode+0x9/0x40 [ 95.687980][ T4898] ? vfs_getxattr_alloc+0xf0/0x5a0 [ 95.693097][ T4898] ? ima_get_cache_status+0xb0/0xb0 [ 95.698321][ T4898] process_measurement+0x119b/0x1c40 [ 95.703647][ T4898] ? ima_file_mmap+0x140/0x140 [ 95.708428][ T4898] ? __lock_acquire+0x7ea0/0x7ea0 [ 95.713492][ T4898] ? apparmor_inode_getattr+0x20/0x20 [ 95.718888][ T4898] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 95.725095][ T4898] ima_file_check+0xc8/0x110 [ 95.729789][ T4898] ? ima_bprm_check+0x200/0x200 [ 95.734642][ T4898] path_openat+0x272b/0x2f10 [ 95.739244][ T4898] ? kasan_set_track+0x60/0x70 [ 95.744012][ T4898] ? verify_lock_unused+0x140/0x140 [ 95.749209][ T4898] ? do_sys_openat2+0xdd/0x4f0 [ 95.753980][ T4898] ? do_filp_open+0x420/0x420 [ 95.758667][ T4898] do_filp_open+0x1ee/0x420 [ 95.763269][ T4898] ? vfs_tmpfile+0x490/0x490 [ 95.767898][ T4898] ? _raw_spin_unlock+0x24/0x40 [ 95.772755][ T4898] ? alloc_fd+0x590/0x640 [ 95.777124][ T4898] do_sys_openat2+0x14b/0x4f0 [ 95.781832][ T4898] ? do_sys_open+0xe0/0xe0 [ 95.786246][ T4898] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 95.792252][ T4898] ? lock_chain_count+0x20/0x20 [ 95.797108][ T4898] __x64_sys_openat+0x135/0x160 [ 95.801963][ T4898] do_syscall_64+0x4c/0xa0 [ 95.806377][ T4898] ? clear_bhb_loop+0x60/0xb0 [ 95.811056][ T4898] ? clear_bhb_loop+0x60/0xb0 [ 95.816103][ T4898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.822015][ T4898] RIP: 0033:0x7f31e419fb19 [ 95.826451][ T4898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.846096][ T4898] RSP: 002b:00007f31e50ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 95.854531][ T4898] RAX: ffffffffffffffda RBX: 00007f31e4426180 RCX: 00007f31e419fb19 [ 95.862529][ T4898] RDX: 0000000000000002 RSI: 0000200000000c00 RDI: ffffffffffffff9c [ 95.870498][ T4898] RBP: 00007f31e4237af8 R08: 0000000000000000 R09: 0000000000000000 [ 95.878461][ T4898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.886429][ T4898] R13: 00007f31e4426218 R14: 00007f31e4426180 R15: 00007fffee3fba48 [ 95.894413][ T4898] [ 95.976557][ T26] audit: type=1800 audit(1793705537.386:15): pid=4898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.137" name="filter" dev="tracefs" ino=2495 res=0 errno=0 [ 96.096007][ T4911] siw: device registration error -23 [ 96.182447][ T4911] FAULT_INJECTION: forcing a failure. [ 96.182447][ T4911] name failslab, interval 1, probability 0, space 0, times 0 [ 96.242440][ T4911] CPU: 1 PID: 4911 Comm: syz.2.140 Not tainted syzkaller #0 [ 96.249793][ T4911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 96.259878][ T4911] Call Trace: [ 96.263182][ T4911] [ 96.266140][ T4911] dump_stack_lvl+0x188/0x24e [ 96.270858][ T4911] ? show_regs_print_info+0x12/0x12 [ 96.276097][ T4911] ? load_image+0x410/0x410 [ 96.280637][ T4911] ? __might_sleep+0xd0/0xd0 [ 96.285257][ T4911] ? __lock_acquire+0x7ea0/0x7ea0 [ 96.290318][ T4911] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 96.296336][ T4911] should_fail_ex+0x390/0x4c0 [ 96.301051][ T4911] should_failslab+0x5/0x20 [ 96.302847][ T4916] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 96.305558][ T4911] slab_pre_alloc_hook+0x59/0x300 [ 96.305588][ T4911] ? ima_alloc_init_template+0x8f/0x6e0 [ 96.323300][ T4911] __kmem_cache_alloc_node+0x4f/0x270 [ 96.328709][ T4911] ? ima_alloc_init_template+0x8f/0x6e0 [ 96.334283][ T4911] __kmalloc+0xa3/0x240 [ 96.338472][ T4911] ima_alloc_init_template+0x8f/0x6e0 [ 96.343887][ T4911] ima_store_measurement+0x1d1/0x690 [ 96.349187][ T4911] ? ima_collect_measurement+0xb50/0xb50 [ 96.354817][ T4911] ? ima_d_path+0x180/0x240 [ 96.359324][ T4911] ? ima_get_cache_status+0xb0/0xb0 [ 96.364528][ T4911] process_measurement+0x1263/0x1c40 [ 96.369820][ T4911] ? ima_file_mmap+0x140/0x140 [ 96.374580][ T4911] ? __lock_acquire+0x7ea0/0x7ea0 [ 96.379646][ T4911] ? apparmor_inode_getattr+0x20/0x20 [ 96.385053][ T4911] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 96.391213][ T4911] ima_file_check+0xc8/0x110 [ 96.395814][ T4911] ? ima_bprm_check+0x200/0x200 [ 96.400672][ T4911] path_openat+0x272b/0x2f10 [ 96.405272][ T4911] ? kasan_set_track+0x60/0x70 [ 96.410045][ T4911] ? verify_lock_unused+0x140/0x140 [ 96.415241][ T4911] ? do_sys_openat2+0xdd/0x4f0 [ 96.420005][ T4911] ? do_filp_open+0x420/0x420 [ 96.424695][ T4911] do_filp_open+0x1ee/0x420 [ 96.429197][ T4911] ? vfs_tmpfile+0x490/0x490 [ 96.433799][ T4911] ? _raw_spin_unlock+0x24/0x40 [ 96.438645][ T4911] ? alloc_fd+0x590/0x640 [ 96.442977][ T4911] do_sys_openat2+0x14b/0x4f0 [ 96.447656][ T4911] ? do_sys_open+0xe0/0xe0 [ 96.452071][ T4911] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 96.458050][ T4911] ? lock_chain_count+0x20/0x20 [ 96.462908][ T4911] __x64_sys_openat+0x135/0x160 [ 96.467764][ T4911] do_syscall_64+0x4c/0xa0 [ 96.472180][ T4911] ? clear_bhb_loop+0x60/0xb0 [ 96.476863][ T4911] ? clear_bhb_loop+0x60/0xb0 [ 96.481547][ T4911] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.487445][ T4911] RIP: 0033:0x7f597099fb19 [ 96.491857][ T4911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.511485][ T4911] RSP: 002b:00007f59718e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 96.519906][ T4911] RAX: ffffffffffffffda RBX: 00007f5970c25fa0 RCX: 00007f597099fb19 [ 96.527899][ T4911] RDX: 0000000000000002 RSI: 0000200000000c00 RDI: ffffffffffffff9c [ 96.535889][ T4911] RBP: 00007f5970a37af8 R08: 0000000000000000 R09: 0000000000000000 [ 96.543859][ T4911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.551826][ T4911] R13: 00007f5970c26038 R14: 00007f5970c25fa0 R15: 00007ffde2c8d348 [ 96.559897][ T4911] [ 96.572118][ T26] audit: type=1804 audit(1793705537.976:16): pid=4911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.2.140" name="/newroot/25/trace/events/sched/sched_switch/filter" dev="tracefs" ino=2495 res=0 errno=0 [ 97.025756][ T4928] loop2: detected capacity change from 0 to 164 [ 97.765148][ T4683] usb 2-1: USB disconnect, device number 4 [ 98.064554][ T4941] loop2: detected capacity change from 0 to 32768 [ 98.097239][ T4941] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.150 (4941) [ 98.141334][ T4941] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 98.175699][ T4941] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 98.215080][ T4941] BTRFS info (device loop2): using free space tree [ 98.248844][ T4941] BTRFS info (device loop2): enabling ssd optimizations [ 98.296995][ T4282] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 98.312731][ T4683] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 98.471579][ T4683] usb 2-1: device descriptor read/64, error -71 [ 98.513781][ T4876] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop2 scanned by udevd (4876) [ 98.741670][ T4683] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 98.885806][ T4995] ip_tables: iptables: counters copy to user failed while replacing table [ 98.911673][ T4683] usb 2-1: device descriptor read/64, error -71 [ 99.031757][ T4683] usb usb2-port1: attempt power cycle [ 99.441575][ T4683] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 99.503213][ T4683] usb 2-1: device descriptor read/8, error -71 [ 99.689971][ T5019] device syzkaller1 entered promiscuous mode [ 99.720534][ T5009] loop3: detected capacity change from 0 to 32768 [ 99.757358][ T5012] loop0: detected capacity change from 0 to 32768 [ 99.781978][ T4683] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 99.811889][ T5009] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 99.832349][ T4683] usb 2-1: device descriptor read/8, error -71 [ 99.850518][ T5012] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 99.889287][ T5017] loop2: detected capacity change from 0 to 32768 [ 99.889813][ T5009] JBD2: Ignoring recovery information on journal [ 99.965037][ T4683] usb usb2-port1: unable to enumerate USB device [ 99.966783][ T5017] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 99.998856][ T5009] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 100.000536][ T5017] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 100.020175][ T5017] JBD2: Ignoring recovery information on journal [ 100.075850][ T5017] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 100.138156][ T4393] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 100.175188][ T5017] (syz.2.174,5017,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 100.230605][ T5009] (syz.3.170,5009,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 100.244500][ T5028] ip_tables: iptables: counters copy to user failed while replacing table [ 100.318735][ T4282] ocfs2: Unmounting device (7,2) on (node local) [ 100.359108][ T5030] ip_tables: iptables: counters copy to user failed while replacing table [ 100.417455][ T4278] ocfs2: Unmounting device (7,3) on (node local) [ 100.795816][ T5042] __nla_validate_parse: 5 callbacks suppressed [ 100.795835][ T5042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 100.850484][ T5045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 101.061770][ T5045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 101.383477][ T5065] loop3: detected capacity change from 0 to 164 [ 101.872518][ T5060] loop4: detected capacity change from 0 to 32768 [ 101.934866][ T5060] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 101.967360][ T5060] JBD2: Ignoring recovery information on journal [ 101.986091][ T5066] loop2: detected capacity change from 0 to 32768 [ 102.012355][ T5066] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 102.022693][ T5066] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 102.033353][ T5066] JBD2: Ignoring recovery information on journal [ 102.051895][ T4458] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 102.062281][ T5063] loop1: detected capacity change from 0 to 32768 [ 102.078212][ T5063] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 102.108413][ T5060] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 102.172091][ T5060] (syz.4.189,5060,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 102.183116][ T5066] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 102.251685][ T4458] usb 1-1: device descriptor read/64, error -71 [ 102.368938][ T5066] (syz.2.190,5066,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 102.398632][ T4284] ocfs2: Unmounting device (7,4) on (node local) [ 102.454764][ T4416] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 102.504012][ T5088] netlink: 'syz.3.200': attribute type 1 has an invalid length. [ 102.541940][ T5090] siw: device registration error -23 [ 102.546495][ T4458] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.554130][ T5088] device bond1 entered promiscuous mode [ 102.576178][ T4282] ocfs2: Unmounting device (7,2) on (node local) [ 102.613301][ T5088] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.635716][ T5090] FAULT_INJECTION: forcing a failure. [ 102.635716][ T5090] name failslab, interval 1, probability 0, space 0, times 0 [ 102.714027][ T5090] CPU: 0 PID: 5090 Comm: syz.4.199 Not tainted syzkaller #0 [ 102.721389][ T5090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 102.731470][ T5090] Call Trace: [ 102.734763][ T5090] [ 102.737706][ T5090] dump_stack_lvl+0x188/0x24e [ 102.742419][ T5090] ? show_regs_print_info+0x12/0x12 [ 102.747646][ T5090] ? load_image+0x410/0x410 [ 102.752181][ T5090] ? __might_sleep+0xd0/0xd0 [ 102.756822][ T5090] ? __lock_acquire+0x7ea0/0x7ea0 [ 102.760923][ T5092] bond1: (slave bridge1): making interface the new active one [ 102.761864][ T5090] should_fail_ex+0x390/0x4c0 [ 102.761894][ T5090] should_failslab+0x5/0x20 [ 102.761911][ T5090] slab_pre_alloc_hook+0x59/0x300 [ 102.761933][ T5090] ? ima_alloc_init_template+0x16e/0x6e0 [ 102.761956][ T5090] __kmem_cache_alloc_node+0x4f/0x270 [ 102.761981][ T5090] ? ima_alloc_init_template+0x16e/0x6e0 [ 102.762003][ T5090] __kmalloc+0xa3/0x240 [ 102.762023][ T5090] ima_alloc_init_template+0x16e/0x6e0 [ 102.762052][ T5090] ima_store_measurement+0x1d1/0x690 [ 102.776668][ T5092] device bridge1 entered promiscuous mode [ 102.778691][ T5090] ? ima_collect_measurement+0xb50/0xb50 [ 102.790520][ T5092] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 102.795664][ T5090] ? ima_d_path+0x180/0x240 [ 102.795704][ T5090] ? ima_get_cache_status+0xb0/0xb0 [ 102.795730][ T5090] process_measurement+0x1263/0x1c40 [ 102.795762][ T5090] ? ima_file_mmap+0x140/0x140 [ 102.795782][ T5090] ? __lock_acquire+0x7ea0/0x7ea0 [ 102.795830][ T5090] ? apparmor_inode_getattr+0x20/0x20 [ 102.795858][ T5090] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 102.795880][ T5090] ima_file_check+0xc8/0x110 [ 102.795900][ T5090] ? ima_bprm_check+0x200/0x200 [ 102.882669][ T5090] path_openat+0x272b/0x2f10 [ 102.887306][ T5090] ? kasan_set_track+0x60/0x70 [ 102.892073][ T5090] ? verify_lock_unused+0x140/0x140 [ 102.897270][ T5090] ? do_sys_openat2+0xdd/0x4f0 [ 102.902040][ T5090] ? do_filp_open+0x420/0x420 [ 102.906755][ T5090] do_filp_open+0x1ee/0x420 [ 102.911261][ T5090] ? vfs_tmpfile+0x490/0x490 [ 102.915866][ T5090] ? _raw_spin_unlock+0x24/0x40 [ 102.920725][ T5090] ? alloc_fd+0x590/0x640 [ 102.925076][ T5090] do_sys_openat2+0x14b/0x4f0 [ 102.929789][ T5090] ? do_sys_open+0xe0/0xe0 [ 102.934224][ T5090] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 102.940211][ T5090] ? lock_chain_count+0x20/0x20 [ 102.945069][ T5090] __x64_sys_openat+0x135/0x160 [ 102.949928][ T5090] do_syscall_64+0x4c/0xa0 [ 102.954347][ T5090] ? clear_bhb_loop+0x60/0xb0 [ 102.959026][ T5090] ? clear_bhb_loop+0x60/0xb0 [ 102.963734][ T5090] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.969648][ T5090] RIP: 0033:0x7f44f279fb19 [ 102.974063][ T5090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.993691][ T5090] RSP: 002b:00007f44f3744028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 103.002128][ T5090] RAX: ffffffffffffffda RBX: 00007f44f2a25fa0 RCX: 00007f44f279fb19 [ 103.010104][ T5090] RDX: 0000000000000002 RSI: 0000200000000c00 RDI: ffffffffffffff9c [ 103.018092][ T5090] RBP: 00007f44f2837af8 R08: 0000000000000000 R09: 0000000000000000 [ 103.026061][ T5090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.034144][ T5090] R13: 00007f44f2a26038 R14: 00007f44f2a25fa0 R15: 00007ffcbbee2578 [ 103.042130][ T5090] [ 103.049034][ T4458] usb 1-1: device descriptor read/64, error -71 [ 103.121763][ T5093] netlink: 28 bytes leftover after parsing attributes in process `syz.3.200'. [ 103.139604][ T26] audit: type=1804 audit(1793705544.546:17): pid=5090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.4.199" name="/newroot/43/trace/events/sched/sched_switch/filter" dev="tracefs" ino=2495 res=0 errno=0 [ 103.192452][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 103.196738][ T4458] usb usb1-port1: attempt power cycle [ 103.201816][ T5096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.203'. [ 103.252969][ T5099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.203'. [ 103.452477][ T5103] netlink: 'syz.4.205': attribute type 1 has an invalid length. [ 103.554878][ T5103] device bond1 entered promiscuous mode [ 103.560961][ T5103] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.576407][ T5099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.203'. [ 103.587138][ T5110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.205'. [ 103.631551][ T4458] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 103.684469][ T4458] usb 1-1: device descriptor read/8, error -71 [ 103.710911][ T5103] bond1: (slave bridge1): making interface the new active one [ 103.728583][ T5103] device bridge1 entered promiscuous mode [ 103.748804][ T5103] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 103.768606][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 103.828842][ T5121] netlink: 'syz.1.209': attribute type 1 has an invalid length. [ 103.895112][ T5121] netlink: 28 bytes leftover after parsing attributes in process `syz.1.209'. [ 103.910741][ T5121] device geneve0 entered promiscuous mode [ 103.930184][ T5124] netlink: 'syz.4.210': attribute type 1 has an invalid length. [ 103.951602][ T4458] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 103.955918][ T5124] device bond2 entered promiscuous mode [ 103.966719][ T5124] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.003262][ T4458] usb 1-1: device descriptor read/8, error -71 [ 104.010105][ T5124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.210'. [ 104.117454][ T5124] bond2: (slave bridge2): making interface the new active one [ 104.140539][ T5124] device bridge2 entered promiscuous mode [ 104.151871][ T4458] usb usb1-port1: unable to enumerate USB device [ 104.179210][ T5124] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 104.198773][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 104.421339][ T5138] netlink: 'syz.1.215': attribute type 1 has an invalid length. [ 104.449653][ T5138] device netdevsim3 entered promiscuous mode [ 104.573404][ T5130] loop3: detected capacity change from 0 to 32768 [ 104.637343][ T5130] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 104.675540][ T5130] JBD2: Ignoring recovery information on journal [ 104.809999][ T5130] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 104.898117][ T5130] (syz.3.212,5130,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 105.041330][ T4278] ocfs2: Unmounting device (7,3) on (node local) [ 105.378555][ T5171] siw: device registration error -23 [ 105.448318][ T5171] FAULT_INJECTION: forcing a failure. [ 105.448318][ T5171] name failslab, interval 1, probability 0, space 0, times 0 [ 105.472170][ T5175] ip_tables: iptables: counters copy to user failed while replacing table [ 105.485750][ T5171] CPU: 0 PID: 5171 Comm: syz.4.229 Not tainted syzkaller #0 [ 105.493097][ T5171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 105.503173][ T5171] Call Trace: [ 105.506473][ T5171] [ 105.509418][ T5171] dump_stack_lvl+0x188/0x24e [ 105.514131][ T5171] ? show_regs_print_info+0x12/0x12 [ 105.519356][ T5171] ? load_image+0x410/0x410 [ 105.523884][ T5171] ? __might_sleep+0xd0/0xd0 [ 105.528507][ T5171] ? __lock_acquire+0x7ea0/0x7ea0 [ 105.533610][ T5171] should_fail_ex+0x390/0x4c0 [ 105.538351][ T5171] should_failslab+0x5/0x20 [ 105.542881][ T5171] slab_pre_alloc_hook+0x59/0x300 [ 105.547942][ T5171] ? ima_alloc_init_template+0x16e/0x6e0 [ 105.553600][ T5171] __kmem_cache_alloc_node+0x4f/0x270 [ 105.559005][ T5171] ? ima_alloc_init_template+0x16e/0x6e0 [ 105.564669][ T5171] __kmalloc+0xa3/0x240 [ 105.568850][ T5171] ima_alloc_init_template+0x16e/0x6e0 [ 105.574343][ T5171] ima_store_measurement+0x1d1/0x690 [ 105.579664][ T5171] ? ima_collect_measurement+0xb50/0xb50 [ 105.585319][ T5171] ? ima_d_path+0x180/0x240 [ 105.589859][ T5171] ? ima_get_cache_status+0xb0/0xb0 [ 105.595200][ T5171] process_measurement+0x1263/0x1c40 [ 105.600579][ T5171] ? ima_file_mmap+0x140/0x140 [ 105.605373][ T5171] ? __lock_acquire+0x7ea0/0x7ea0 [ 105.610453][ T5171] ? apparmor_inode_getattr+0x20/0x20 [ 105.615862][ T5171] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 105.622051][ T5171] ima_file_check+0xc8/0x110 [ 105.626670][ T5171] ? ima_bprm_check+0x200/0x200 [ 105.631555][ T5171] path_openat+0x272b/0x2f10 [ 105.636193][ T5171] ? kasan_set_track+0x60/0x70 [ 105.640994][ T5171] ? verify_lock_unused+0x140/0x140 [ 105.646225][ T5171] ? do_sys_openat2+0xdd/0x4f0 [ 105.651037][ T5171] ? do_filp_open+0x420/0x420 [ 105.655760][ T5171] do_filp_open+0x1ee/0x420 [ 105.660297][ T5171] ? vfs_tmpfile+0x490/0x490 [ 105.664937][ T5171] ? _raw_spin_unlock+0x24/0x40 [ 105.669817][ T5171] ? alloc_fd+0x590/0x640 [ 105.674185][ T5171] do_sys_openat2+0x14b/0x4f0 [ 105.678891][ T5171] ? do_sys_open+0xe0/0xe0 [ 105.683367][ T5171] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 105.689388][ T5171] ? lock_chain_count+0x20/0x20 [ 105.694284][ T5171] __x64_sys_openat+0x135/0x160 [ 105.699177][ T5171] do_syscall_64+0x4c/0xa0 [ 105.703635][ T5171] ? clear_bhb_loop+0x60/0xb0 [ 105.708343][ T5171] ? clear_bhb_loop+0x60/0xb0 [ 105.713052][ T5171] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.718975][ T5171] RIP: 0033:0x7f44f279fb19 [ 105.723424][ T5171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.743060][ T5171] RSP: 002b:00007f44f3744028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 105.751501][ T5171] RAX: ffffffffffffffda RBX: 00007f44f2a25fa0 RCX: 00007f44f279fb19 [ 105.759511][ T5171] RDX: 0000000000000002 RSI: 0000200000000c00 RDI: ffffffffffffff9c [ 105.767518][ T5171] RBP: 00007f44f2837af8 R08: 0000000000000000 R09: 0000000000000000 [ 105.775604][ T5171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.783606][ T5171] R13: 00007f44f2a26038 R14: 00007f44f2a25fa0 R15: 00007ffcbbee2578 [ 105.791617][ T5171] [ 105.926693][ T5184] FAULT_INJECTION: forcing a failure. [ 105.926693][ T5184] name failslab, interval 1, probability 0, space 0, times 0 [ 105.939775][ T5184] CPU: 1 PID: 5184 Comm: syz.1.233 Not tainted syzkaller #0 [ 105.947060][ T5184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 105.957160][ T5184] Call Trace: [ 105.960448][ T5184] [ 105.963378][ T5184] dump_stack_lvl+0x188/0x24e [ 105.968061][ T5184] ? __wake_up+0x12e/0x1a0 [ 105.972475][ T5184] ? show_regs_print_info+0x12/0x12 [ 105.977680][ T5184] ? load_image+0x410/0x410 [ 105.982186][ T5184] should_fail_ex+0x390/0x4c0 [ 105.986864][ T5184] should_failslab+0x5/0x20 [ 105.991362][ T5184] slab_pre_alloc_hook+0x59/0x300 [ 105.996384][ T5184] ? __lock_acquire+0x7ea0/0x7ea0 [ 106.001438][ T5184] kmem_cache_alloc+0x56/0x2f0 [ 106.006212][ T5184] ? __sigqueue_alloc+0x40c/0x520 [ 106.011327][ T5184] ? __sigqueue_alloc+0x32/0x520 [ 106.016265][ T5184] __sigqueue_alloc+0x40c/0x520 [ 106.021386][ T5184] __send_signal_locked+0x22f/0xde0 [ 106.026589][ T5184] do_notify_parent+0xb24/0xd10 [ 106.031445][ T5184] ? trace_signal_generate+0x260/0x260 [ 106.036917][ T5184] ? __lock_acquire+0x7ea0/0x7ea0 [ 106.041950][ T5184] release_task+0x121c/0x1680 [ 106.046633][ T5184] ? do_exit+0x18d7/0x2570 [ 106.051049][ T5184] ? delayed_put_task_struct+0x2f0/0x2f0 [ 106.056678][ T5184] ? _raw_write_lock_irq+0xb7/0xf0 [ 106.061789][ T5184] ? _raw_write_lock_irqsave+0x100/0x100 [ 106.067428][ T5184] ? _raw_write_unlock_irq+0x1f/0x40 [ 106.072712][ T5184] ? lockdep_hardirqs_on+0x94/0x140 [ 106.077910][ T5184] do_exit+0x18d7/0x2570 [ 106.082161][ T5184] ? put_task_struct+0x80/0x80 [ 106.086953][ T5184] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 106.092968][ T5184] ? lock_chain_count+0x20/0x20 [ 106.097820][ T5184] ? _raw_spin_lock_irq+0xb7/0xf0 [ 106.102861][ T5184] do_group_exit+0x229/0x2e0 [ 106.107489][ T5184] ? lockdep_hardirqs_on+0x94/0x140 [ 106.112694][ T5184] get_signal+0x1259/0x1340 [ 106.117255][ T5184] arch_do_signal_or_restart+0xc4/0x1310 [ 106.122898][ T5184] ? do_futex+0x310/0x320 [ 106.127226][ T5184] ? get_sigframe_size+0x10/0x10 [ 106.132156][ T5184] ? __ia32_sys_get_robust_list+0x100/0x100 [ 106.138059][ T5184] ? exit_to_user_mode_loop+0x3b/0x110 [ 106.143518][ T5184] exit_to_user_mode_loop+0x70/0x110 [ 106.148839][ T5184] exit_to_user_mode_prepare+0xee/0x180 [ 106.154396][ T5184] syscall_exit_to_user_mode+0x16/0x40 [ 106.159855][ T5184] do_syscall_64+0x58/0xa0 [ 106.164274][ T5184] ? clear_bhb_loop+0x60/0xb0 [ 106.168952][ T5184] ? clear_bhb_loop+0x60/0xb0 [ 106.173628][ T5184] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.179522][ T5184] RIP: 0033:0x7f9b5ed9fb19 [ 106.183930][ T5184] Code: Unable to access opcode bytes at 0x7f9b5ed9faef. [ 106.190941][ T5184] RSP: 002b:00007f9b5fba30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 106.199370][ T5184] RAX: fffffffffffffe00 RBX: 00007f9b5f025fa8 RCX: 00007f9b5ed9fb19 [ 106.207350][ T5184] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9b5f025fa8 [ 106.215324][ T5184] RBP: 00007f9b5f025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 106.223308][ T5184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.231382][ T5184] R13: 00007f9b5f026038 R14: 00007ffe8574f9d0 R15: 00007ffe8574fab8 [ 106.239379][ T5184] [ 106.245421][ T26] audit: type=1804 audit(1793705547.656:18): pid=5171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.4.229" name="/newroot/50/trace/events/sched/sched_switch/filter" dev="tracefs" ino=2495 res=0 errno=0 [ 106.287615][ T5173] loop3: detected capacity change from 0 to 32768 [ 106.332488][ T5173] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 106.380598][ T5173] JBD2: Ignoring recovery information on journal [ 106.431730][ T4458] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 106.492506][ T5173] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 106.562256][ T5173] (syz.3.230,5173,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 106.597069][ T5181] loop2: detected capacity change from 0 to 32768 [ 106.623471][ T4458] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.640351][ T4458] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 106.668112][ T5181] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 106.703050][ T5181] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 106.716623][ T5181] JBD2: Ignoring recovery information on journal [ 106.716976][ T4458] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 106.743105][ T4278] ocfs2: Unmounting device (7,3) on (node local) [ 106.802833][ T4458] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.820245][ T5181] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 106.847785][ T4458] usb 1-1: Product: syz [ 106.861169][ T4458] usb 1-1: Manufacturer: syz [ 106.875021][ T4458] usb 1-1: SerialNumber: syz [ 106.899763][ T4458] usb 1-1: config 0 descriptor?? [ 106.938467][ T5181] (syz.2.235,5181,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 107.056865][ T4282] ocfs2: Unmounting device (7,2) on (node local) [ 107.351172][ T5215] ip_tables: iptables: counters copy to user failed while replacing table [ 107.360244][ T5213] netlink: 'syz.1.244': attribute type 1 has an invalid length. [ 107.420674][ T5213] device bond1 entered promiscuous mode [ 107.430938][ T5213] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.604171][ T5213] bond1: (slave bridge1): making interface the new active one [ 107.612504][ T5213] device bridge1 entered promiscuous mode [ 107.619773][ T5213] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 107.641888][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 107.715885][ T5229] netlink: 'syz.3.249': attribute type 1 has an invalid length. [ 107.801222][ T5229] device bond2 entered promiscuous mode [ 107.827108][ T5229] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.867869][ T5233] __nla_validate_parse: 1 callbacks suppressed [ 107.867886][ T5233] netlink: 28 bytes leftover after parsing attributes in process `syz.3.249'. [ 107.936995][ T5229] bond2: (slave bridge2): making interface the new active one [ 107.944708][ T5229] device bridge2 entered promiscuous mode [ 107.951965][ T5229] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 107.960831][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 108.309557][ T5253] loop4: detected capacity change from 0 to 164 [ 108.480920][ T5238] loop1: detected capacity change from 0 to 32768 [ 108.561880][ T5238] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 108.663008][ T4458] usb 1-1: USB disconnect, device number 7 [ 108.676875][ T5238] JBD2: Ignoring recovery information on journal [ 108.797348][ T5267] ip_tables: iptables: counters copy to user failed while replacing table [ 108.817231][ T5238] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 108.818478][ T5269] overlayfs: failed to resolve './file1': -2 [ 108.866811][ T5272] loop3: detected capacity change from 0 to 164 [ 108.894447][ T5238] (syz.1.251,5238,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 109.056150][ T4274] ocfs2: Unmounting device (7,1) on (node local) [ 109.208232][ T5283] netlink: 'syz.3.267': attribute type 1 has an invalid length. [ 109.299409][ T5283] device bond3 entered promiscuous mode [ 109.382196][ T5283] 8021q: adding VLAN 0 to HW filter on device bond3 [ 109.421775][ T5287] netlink: 28 bytes leftover after parsing attributes in process `syz.3.267'. [ 109.598897][ T5283] bond3: (slave bridge3): making interface the new active one [ 109.656944][ T5283] device bridge3 entered promiscuous mode [ 109.684897][ T5283] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 109.729399][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 109.896669][ T5275] loop2: detected capacity change from 0 to 32768 [ 109.994884][ T5285] loop1: detected capacity change from 0 to 32768 [ 110.006853][ T5275] JBD2: Ignoring recovery information on journal [ 110.052156][ T5291] loop4: detected capacity change from 0 to 32768 [ 110.065394][ T5285] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 110.110646][ T5275] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 110.121396][ T5307] FAULT_INJECTION: forcing a failure. [ 110.121396][ T5307] name failslab, interval 1, probability 0, space 0, times 0 [ 110.131341][ T5285] JBD2: Ignoring recovery information on journal [ 110.134275][ T5307] CPU: 1 PID: 5307 Comm: syz.3.270 Not tainted syzkaller #0 [ 110.147905][ T5307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 110.157961][ T5307] Call Trace: [ 110.161241][ T5307] [ 110.164186][ T5307] dump_stack_lvl+0x188/0x24e [ 110.168883][ T5307] ? show_regs_print_info+0x12/0x12 [ 110.174122][ T5307] ? load_image+0x410/0x410 [ 110.178624][ T5307] ? __might_sleep+0xd0/0xd0 [ 110.183211][ T5307] ? __lock_acquire+0x7ea0/0x7ea0 [ 110.188241][ T5307] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 110.194270][ T5307] should_fail_ex+0x390/0x4c0 [ 110.198952][ T5307] should_failslab+0x5/0x20 [ 110.203470][ T5307] slab_pre_alloc_hook+0x59/0x300 [ 110.208515][ T5307] ? ima_alloc_init_template+0x8f/0x6e0 [ 110.214103][ T5307] __kmem_cache_alloc_node+0x4f/0x270 [ 110.219569][ T5307] ? ima_alloc_init_template+0x8f/0x6e0 [ 110.225145][ T5307] __kmalloc+0xa3/0x240 [ 110.229301][ T5307] ima_alloc_init_template+0x8f/0x6e0 [ 110.235286][ T5307] ima_store_measurement+0x1d1/0x690 [ 110.240592][ T5307] ? ima_collect_measurement+0xb50/0xb50 [ 110.246225][ T5307] ? ima_d_path+0x180/0x240 [ 110.250741][ T5307] ? ima_get_cache_status+0xb0/0xb0 [ 110.255951][ T5307] process_measurement+0x1263/0x1c40 [ 110.261249][ T5307] ? ima_file_mmap+0x140/0x140 [ 110.266825][ T5307] ? __lock_acquire+0x7ea0/0x7ea0 [ 110.271959][ T5307] ? apparmor_inode_getattr+0x20/0x20 [ 110.277362][ T5307] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 110.284823][ T5307] ima_file_check+0xc8/0x110 [ 110.289438][ T5307] ? ima_bprm_check+0x200/0x200 [ 110.294605][ T5307] path_openat+0x272b/0x2f10 [ 110.299299][ T5307] ? kasan_set_track+0x60/0x70 [ 110.304277][ T5307] ? verify_lock_unused+0x140/0x140 [ 110.309480][ T5307] ? do_sys_openat2+0xdd/0x4f0 [ 110.314274][ T5307] ? do_filp_open+0x420/0x420 [ 110.319058][ T5307] do_filp_open+0x1ee/0x420 [ 110.323829][ T5307] ? vfs_tmpfile+0x490/0x490 [ 110.328465][ T5307] ? _raw_spin_unlock+0x24/0x40 [ 110.333452][ T5307] ? alloc_fd+0x590/0x640 [ 110.337914][ T5307] do_sys_openat2+0x14b/0x4f0 [ 110.342620][ T5307] ? do_sys_open+0xe0/0xe0 [ 110.347067][ T5307] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 110.353056][ T5307] ? lock_chain_count+0x20/0x20 [ 110.358106][ T5307] __x64_sys_openat+0x135/0x160 [ 110.362964][ T5307] do_syscall_64+0x4c/0xa0 [ 110.367385][ T5307] ? clear_bhb_loop+0x60/0xb0 [ 110.372065][ T5307] ? clear_bhb_loop+0x60/0xb0 [ 110.376742][ T5307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.382636][ T5307] RIP: 0033:0x7f31e419fb19 [ 110.387051][ T5307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.406747][ T5307] RSP: 002b:00007f31e512f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 110.415227][ T5307] RAX: ffffffffffffffda RBX: 00007f31e4425fa0 RCX: 00007f31e419fb19 [ 110.423210][ T5307] RDX: 0000000000000002 RSI: 0000200000000c00 RDI: ffffffffffffff9c [ 110.431186][ T5307] RBP: 00007f31e4237af8 R08: 0000000000000000 R09: 0000000000000000 [ 110.439362][ T5307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.447854][ T5307] R13: 00007f31e4426038 R14: 00007f31e4425fa0 R15: 00007fffee3fba48 [ 110.455842][ T5307] [ 110.489432][ T26] audit: type=1804 audit(1793705551.896:19): pid=5307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.3.270" name="/newroot/57/trace/events/sched/sched_switch/filter" dev="tracefs" ino=2495 res=0 errno=0 [ 110.514320][ T5291] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 110.538790][ T5285] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 110.541801][ T41] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 110.600402][ T5291] JBD2: Ignoring recovery information on journal [ 110.704385][ T5285] (syz.1.277,5285,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 110.749394][ T41] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.781166][ T4282] ocfs2: Unmounting device (7,2) on (node local) [ 110.788383][ T5291] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 110.810836][ T41] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 110.867842][ T41] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 110.872204][ T4274] ocfs2: Unmounting device (7,1) on (node local) [ 110.886694][ T26] audit: type=1804 audit(1793705552.296:20): pid=5291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.269" name="/newroot/60/file1/file1" dev="loop4" ino=17059 res=1 errno=0 [ 110.887212][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.002227][ T41] usb 1-1: Product: syz [ 111.006552][ T41] usb 1-1: Manufacturer: syz [ 111.038555][ T41] usb 1-1: SerialNumber: syz [ 111.072207][ T41] usb 1-1: config 0 descriptor?? [ 111.086330][ T4284] ocfs2: Unmounting device (7,4) on (node local) [ 111.481072][ T5328] ip_tables: iptables: counters copy to user failed while replacing table [ 111.602541][ T5335] netlink: 'syz.3.282': attribute type 1 has an invalid length. [ 111.646349][ T5335] device bond4 entered promiscuous mode [ 111.652327][ T5335] 8021q: adding VLAN 0 to HW filter on device bond4 [ 111.780781][ T5335] netlink: 28 bytes leftover after parsing attributes in process `syz.3.282'. [ 111.860315][ T5340] bond4: (slave bridge4): making interface the new active one [ 111.896757][ T5340] device bridge4 entered promiscuous mode [ 111.904655][ T5338] loop4: detected capacity change from 0 to 32768 [ 111.912867][ T5340] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 111.956648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 111.968442][ T5338] JBD2: Ignoring recovery information on journal [ 112.096448][ T5338] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 112.298031][ T5354] loop3: detected capacity change from 0 to 128 [ 112.332827][ T5354] FAT-fs (loop3): Unrecognized mount option "shortnamèÊž$·DùÕô14e=win95" or missing value [ 112.427026][ T4284] ocfs2: Unmounting device (7,4) on (node local) [ 112.866337][ T5354] loop3: detected capacity change from 0 to 32768 [ 112.910367][ T5354] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 112.978427][ T5356] loop2: detected capacity change from 0 to 32768 [ 113.037787][ T4354] usb 1-1: USB disconnect, device number 8 [ 113.096429][ T5356] JBD2: Ignoring recovery information on journal [ 113.107292][ T4876] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 113.299007][ T5356] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 113.457928][ T5382] siw: device registration error -23 [ 113.494822][ T26] audit: type=1804 audit(1793705554.906:21): pid=5356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.289" name="/newroot/59/file1/file1" dev="loop2" ino=17059 res=1 errno=0 [ 113.530093][ T5382] FAULT_INJECTION: forcing a failure. [ 113.530093][ T5382] name failslab, interval 1, probability 0, space 0, times 0 [ 113.543329][ T5382] CPU: 0 PID: 5382 Comm: syz.1.298 Not tainted syzkaller #0 [ 113.550649][ T5382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 113.560725][ T5382] Call Trace: [ 113.564031][ T5382] [ 113.566984][ T5382] dump_stack_lvl+0x188/0x24e [ 113.571698][ T5382] ? show_regs_print_info+0x12/0x12 [ 113.576923][ T5382] ? load_image+0x410/0x410 [ 113.581455][ T5382] ? __might_sleep+0xd0/0xd0 [ 113.586061][ T5382] ? __lock_acquire+0x7ea0/0x7ea0 [ 113.591123][ T5382] should_fail_ex+0x390/0x4c0 [ 113.595833][ T5382] should_failslab+0x5/0x20 [ 113.600375][ T5382] slab_pre_alloc_hook+0x59/0x300 [ 113.605413][ T5382] ? ima_alloc_init_template+0x16e/0x6e0 [ 113.611050][ T5382] __kmem_cache_alloc_node+0x4f/0x270 [ 113.616460][ T5382] ? ima_alloc_init_template+0x16e/0x6e0 [ 113.622113][ T5382] __kmalloc+0xa3/0x240 [ 113.626302][ T5382] ima_alloc_init_template+0x16e/0x6e0 [ 113.631772][ T5382] ima_store_measurement+0x1d1/0x690 [ 113.637085][ T5382] ? ima_collect_measurement+0xb50/0xb50 [ 113.642720][ T5382] ? ima_d_path+0x180/0x240 [ 113.647235][ T5382] ? ima_get_cache_status+0xb0/0xb0 [ 113.652470][ T5382] process_measurement+0x1263/0x1c40 [ 113.657791][ T5382] ? ima_file_mmap+0x140/0x140 [ 113.662556][ T5382] ? __lock_acquire+0x7ea0/0x7ea0 [ 113.667633][ T5382] ? apparmor_inode_getattr+0x20/0x20 [ 113.673011][ T5382] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 113.679168][ T5382] ima_file_check+0xc8/0x110 [ 113.683785][ T5382] ? ima_bprm_check+0x200/0x200 [ 113.688641][ T5382] path_openat+0x272b/0x2f10 [ 113.693263][ T5382] ? kasan_set_track+0x60/0x70 [ 113.698028][ T5382] ? verify_lock_unused+0x140/0x140 [ 113.703242][ T5382] ? do_sys_openat2+0xdd/0x4f0 [ 113.708011][ T5382] ? do_filp_open+0x420/0x420 [ 113.712696][ T5382] do_filp_open+0x1ee/0x420 [ 113.717221][ T5382] ? vfs_tmpfile+0x490/0x490 [ 113.721828][ T5382] ? _raw_spin_unlock+0x24/0x40 [ 113.726680][ T5382] ? alloc_fd+0x590/0x640 [ 113.731022][ T5382] do_sys_openat2+0x14b/0x4f0 [ 113.735703][ T5382] ? do_sys_open+0xe0/0xe0 [ 113.740121][ T5382] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 113.746108][ T5382] ? lock_chain_count+0x20/0x20 [ 113.750964][ T5382] __x64_sys_openat+0x135/0x160 [ 113.755823][ T5382] do_syscall_64+0x4c/0xa0 [ 113.760244][ T5382] ? clear_bhb_loop+0x60/0xb0 [ 113.764947][ T5382] ? clear_bhb_loop+0x60/0xb0 [ 113.769625][ T5382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.775518][ T5382] RIP: 0033:0x7f9b5ed9fb19 [ 113.779930][ T5382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.799538][ T5382] RSP: 002b:00007f9b5fba3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 113.807958][ T5382] RAX: ffffffffffffffda RBX: 00007f9b5f025fa0 RCX: 00007f9b5ed9fb19 [ 113.815931][ T5382] RDX: 0000000000000002 RSI: 0000200000000c00 RDI: ffffffffffffff9c [ 113.823922][ T5382] RBP: 00007f9b5ee37af8 R08: 0000000000000000 R09: 0000000000000000 [ 113.831907][ T5382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.840011][ T5382] R13: 00007f9b5f026038 R14: 00007f9b5f025fa0 R15: 00007ffe8574fab8 [ 113.848155][ T5382] [ 113.870677][ T26] audit: type=1804 audit(1793705555.276:22): pid=5382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.1.298" name="/newroot/48/trace/events/sched/sched_switch/filter" dev="tracefs" ino=2495 res=0 errno=0 [ 114.050934][ T4282] ocfs2: Unmounting device (7,2) on (node local) [ 114.093889][ T5388] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 114.175643][ T5394] netlink: 'syz.0.303': attribute type 1 has an invalid length. [ 114.235717][ T5394] device bond1 entered promiscuous mode [ 114.242871][ T5394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.408519][ T5402] loop4: detected capacity change from 0 to 4096 [ 114.427561][ T5394] bond1: (slave bridge2): making interface the new active one [ 114.455771][ T5394] device bridge2 entered promiscuous mode [ 114.479369][ T5394] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 114.489327][ T5406] siw: device registration error -23 [ 114.498767][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 114.535103][ T5406] FAULT_INJECTION: forcing a failure. [ 114.535103][ T5406] name failslab, interval 1, probability 0, space 0, times 0 [ 114.581601][ T5406] CPU: 0 PID: 5406 Comm: syz.1.307 Not tainted syzkaller #0 [ 114.588953][ T5406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 114.599042][ T5406] Call Trace: [ 114.602336][ T5406] [ 114.605288][ T5406] dump_stack_lvl+0x188/0x24e [ 114.610006][ T5406] ? show_regs_print_info+0x12/0x12 [ 114.615253][ T5406] ? load_image+0x410/0x410 [ 114.619787][ T5406] ? __might_sleep+0xd0/0xd0 [ 114.624406][ T5406] ? __lock_acquire+0x7ea0/0x7ea0 [ 114.626570][ T4683] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 114.629451][ T5406] should_fail_ex+0x390/0x4c0 [ 114.629485][ T5406] should_failslab+0x5/0x20 [ 114.629502][ T5406] slab_pre_alloc_hook+0x59/0x300 [ 114.651249][ T5406] ? ima_alloc_init_template+0x16e/0x6e0 [ 114.656895][ T5406] __kmem_cache_alloc_node+0x4f/0x270 [ 114.662371][ T5406] ? ima_alloc_init_template+0x16e/0x6e0 [ 114.668020][ T5406] __kmalloc+0xa3/0x240 [ 114.672180][ T5406] ima_alloc_init_template+0x16e/0x6e0 [ 114.677664][ T5406] ima_store_measurement+0x1d1/0x690 [ 114.682959][ T5406] ? ima_collect_measurement+0xb50/0xb50 [ 114.688600][ T5406] ? ima_d_path+0x180/0x240 [ 114.693137][ T5406] ? ima_get_cache_status+0xb0/0xb0 [ 114.698361][ T5406] process_measurement+0x1263/0x1c40 [ 114.703685][ T5406] ? ima_file_mmap+0x140/0x140 [ 114.708453][ T5406] ? __lock_acquire+0x7ea0/0x7ea0 [ 114.713499][ T5406] ? apparmor_inode_getattr+0x20/0x20 [ 114.718876][ T5406] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 114.725033][ T5406] ima_file_check+0xc8/0x110 [ 114.729625][ T5406] ? ima_bprm_check+0x200/0x200 [ 114.734482][ T5406] path_openat+0x272b/0x2f10 [ 114.739086][ T5406] ? kasan_set_track+0x60/0x70 [ 114.743861][ T5406] ? verify_lock_unused+0x140/0x140 [ 114.749067][ T5406] ? do_sys_openat2+0xdd/0x4f0 [ 114.753851][ T5406] ? do_filp_open+0x420/0x420 [ 114.758575][ T5406] do_filp_open+0x1ee/0x420 [ 114.763251][ T5406] ? vfs_tmpfile+0x490/0x490 [ 114.768001][ T5406] ? _raw_spin_unlock+0x24/0x40 [ 114.772857][ T5406] ? alloc_fd+0x590/0x640 [ 114.777192][ T5406] do_sys_openat2+0x14b/0x4f0 [ 114.781898][ T5406] ? do_sys_open+0xe0/0xe0 [ 114.786311][ T5406] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 114.793037][ T5406] ? lock_chain_count+0x20/0x20 [ 114.797943][ T5406] __x64_sys_openat+0x135/0x160 [ 114.803284][ T5406] do_syscall_64+0x4c/0xa0 [ 114.807811][ T5406] ? clear_bhb_loop+0x60/0xb0 [ 114.812528][ T5406] ? clear_bhb_loop+0x60/0xb0 [ 114.817233][ T5406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.823128][ T5406] RIP: 0033:0x7f9b5ed9fb19 [ 114.827571][ T5406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.847267][ T5406] RSP: 002b:00007f9b5fba3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 114.855687][ T5406] RAX: ffffffffffffffda RBX: 00007f9b5f025fa0 RCX: 00007f9b5ed9fb19 [ 114.863660][ T5406] RDX: 0000000000000002 RSI: 0000200000000c00 RDI: ffffffffffffff9c [ 114.871632][ T5406] RBP: 00007f9b5ee37af8 R08: 0000000000000000 R09: 0000000000000000 [ 114.879634][ T5406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.887608][ T5406] R13: 00007f9b5f026038 R14: 00007f9b5f025fa0 R15: 00007ffe8574fab8 [ 114.895591][ T5406] [ 114.987903][ T26] audit: type=1804 audit(1793705556.396:23): pid=5406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.1.307" name="/newroot/49/trace/events/sched/sched_switch/filter" dev="tracefs" ino=2495 res=0 errno=0 [ 115.096486][ T4683] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.119083][ T4683] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 115.156851][ T4683] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 115.184691][ T4683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.205763][ T4683] usb 3-1: Product: syz [ 115.209998][ T4683] usb 3-1: Manufacturer: syz [ 115.241673][ T4683] usb 3-1: SerialNumber: syz [ 115.259802][ T4683] usb 3-1: config 0 descriptor?? [ 115.725734][ T5411] loop0: detected capacity change from 0 to 32768 [ 115.775861][ T5411] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 115.807673][ T5411] JBD2: Ignoring recovery information on journal [ 115.852138][ T5411] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 115.898523][ T5411] (syz.0.310,5411,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 115.976515][ T5437] ip_tables: iptables: counters copy to user failed while replacing table [ 115.999153][ T4287] ocfs2: Unmounting device (7,0) on (node local) [ 116.498832][ T5458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.323'. [ 116.924401][ T5475] ip_tables: iptables: counters copy to user failed while replacing table [ 117.099091][ T5466] loop0: detected capacity change from 0 to 32768 [ 117.140643][ T5466] JBD2: Ignoring recovery information on journal [ 117.235978][ T5480] loop1: detected capacity change from 0 to 4096 [ 117.243504][ T5466] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 117.263895][ T5480] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 117.304491][ T26] audit: type=1804 audit(1793705558.716:24): pid=5466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.326" name="/newroot/67/file1/file1" dev="loop0" ino=17059 res=1 errno=0 [ 117.422889][ T5480] ntfs3: loop1: Failed to load $Extend. [ 117.443803][ T41] usb 3-1: USB disconnect, device number 10 [ 117.487644][ T5473] loop4: detected capacity change from 0 to 32768 [ 117.540000][ T5473] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 117.561795][ T5473] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 117.598576][ T5473] JBD2: Ignoring recovery information on journal [ 117.666791][ T4287] ocfs2: Unmounting device (7,0) on (node local) [ 117.683775][ T5480] ntfs3: loop1: ino=1b, mi_enum_attr [ 117.723444][ T5480] overlayfs: missing 'lowerdir' [ 117.790930][ T5473] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 117.863617][ T5473] (syz.4.329,5473,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 118.058204][ T4284] ocfs2: Unmounting device (7,4) on (node local) [ 118.258789][ T5510] ip_tables: iptables: counters copy to user failed while replacing table [ 118.417032][ T5514] siw: device registration error -23 [ 118.460918][ T5514] FAULT_INJECTION: forcing a failure. [ 118.460918][ T5514] name failslab, interval 1, probability 0, space 0, times 0 [ 118.506412][ T5514] CPU: 0 PID: 5514 Comm: syz.2.345 Not tainted syzkaller #0 [ 118.513763][ T5514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 118.523837][ T5514] Call Trace: [ 118.527124][ T5514] [ 118.530042][ T5514] dump_stack_lvl+0x188/0x24e [ 118.534732][ T5514] ? show_regs_print_info+0x12/0x12 [ 118.539947][ T5514] ? load_image+0x410/0x410 [ 118.544455][ T5514] ? __might_sleep+0xd0/0xd0 [ 118.549475][ T5514] ? __lock_acquire+0x7ea0/0x7ea0 [ 118.554498][ T5514] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 118.560485][ T5514] should_fail_ex+0x390/0x4c0 [ 118.565172][ T5514] should_failslab+0x5/0x20 [ 118.569673][ T5514] slab_pre_alloc_hook+0x59/0x300 [ 118.574715][ T5514] ? ima_alloc_init_template+0x8f/0x6e0 [ 118.580282][ T5514] __kmem_cache_alloc_node+0x4f/0x270 [ 118.585705][ T5514] ? ima_alloc_init_template+0x8f/0x6e0 [ 118.591272][ T5514] __kmalloc+0xa3/0x240 [ 118.595432][ T5514] ima_alloc_init_template+0x8f/0x6e0 [ 118.600810][ T5514] ima_store_measurement+0x1d1/0x690 [ 118.606102][ T5514] ? ima_collect_measurement+0xb50/0xb50 [ 118.611734][ T5514] ? ima_d_path+0x180/0x240 [ 118.616255][ T5514] ? ima_get_cache_status+0xb0/0xb0 [ 118.621480][ T5514] process_measurement+0x1263/0x1c40 [ 118.626799][ T5514] ? ima_file_mmap+0x140/0x140 [ 118.631575][ T5514] ? __lock_acquire+0x7ea0/0x7ea0 [ 118.636651][ T5514] ? apparmor_inode_getattr+0x20/0x20 [ 118.642040][ T5514] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 118.648222][ T5514] ima_file_check+0xc8/0x110 [ 118.652814][ T5514] ? ima_bprm_check+0x200/0x200 [ 118.657686][ T5514] path_openat+0x272b/0x2f10 [ 118.662292][ T5514] ? kasan_set_track+0x60/0x70 [ 118.667063][ T5514] ? verify_lock_unused+0x140/0x140 [ 118.672284][ T5514] ? do_sys_openat2+0xdd/0x4f0 [ 118.677052][ T5514] ? do_filp_open+0x420/0x420 [ 118.681739][ T5514] do_filp_open+0x1ee/0x420 [ 118.686310][ T5514] ? vfs_tmpfile+0x490/0x490 [ 118.690920][ T5514] ? _raw_spin_unlock+0x24/0x40 [ 118.695774][ T5514] ? alloc_fd+0x590/0x640 [ 118.700116][ T5514] do_sys_openat2+0x14b/0x4f0 [ 118.704797][ T5514] ? do_sys_open+0xe0/0xe0 [ 118.709217][ T5514] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 118.715198][ T5514] ? lock_chain_count+0x20/0x20 [ 118.720052][ T5514] __x64_sys_openat+0x135/0x160 [ 118.724913][ T5514] do_syscall_64+0x4c/0xa0 [ 118.729331][ T5514] ? clear_bhb_loop+0x60/0xb0 [ 118.734020][ T5514] ? clear_bhb_loop+0x60/0xb0 [ 118.738726][ T5514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.744629][ T5514] RIP: 0033:0x7f597099fb19 [ 118.749072][ T5514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.768681][ T5514] RSP: 002b:00007f59718e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 118.777094][ T5514] RAX: ffffffffffffffda RBX: 00007f5970c25fa0 RCX: 00007f597099fb19 [ 118.785096][ T5514] RDX: 0000000000000002 RSI: 0000200000000c00 RDI: ffffffffffffff9c [ 118.793065][ T5514] RBP: 00007f5970a37af8 R08: 0000000000000000 R09: 0000000000000000 [ 118.801033][ T5514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.809005][ T5514] R13: 00007f5970c26038 R14: 00007f5970c25fa0 R15: 00007ffde2c8d348 [ 118.816986][ T5514] [ 118.859916][ T26] audit: type=1804 audit(1793705560.266:25): pid=5514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.2.345" name="/newroot/65/trace/events/sched/sched_switch/filter" dev="tracefs" ino=2495 res=0 errno=0 [ 118.981769][ T4683] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 119.173404][ T4683] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.200947][ T4683] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 119.232379][ T4683] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.277378][ T4683] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 119.302120][ T4683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.326671][ T4683] usb 1-1: Product: syz [ 119.351437][ T4683] usb 1-1: Manufacturer: syz [ 119.356204][ T4683] usb 1-1: SerialNumber: syz [ 119.374014][ T4683] usb 1-1: config 0 descriptor?? [ 119.391015][ T4683] adutux 1-1:0.0: interrupt endpoints not found [ 119.587119][ T4459] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 119.630033][ T5540] loop4: detected capacity change from 0 to 32768 [ 119.646892][ T5548] loop1: detected capacity change from 0 to 128 [ 119.662506][ T5548] FAT-fs (loop1): Unrecognized mount option "shortnamèÊž$·DùÕô14e=win95" or missing value [ 119.692441][ T5540] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 119.719524][ T5540] JBD2: Ignoring recovery information on journal [ 119.741760][ T4459] usb 4-1: device descriptor read/64, error -71 [ 119.797854][ T5540] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 119.877210][ T5540] (syz.4.353,5540,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 119.982088][ T4284] ocfs2: Unmounting device (7,4) on (node local) [ 120.021615][ T4459] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 120.069609][ T5548] loop1: detected capacity change from 0 to 32768 [ 120.098142][ T5548] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 120.192929][ T4459] usb 4-1: device descriptor read/64, error -71 [ 120.304327][ T4876] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 120.320275][ T5559] ip_tables: iptables: counters copy to user failed while replacing table [ 120.329908][ T4459] usb usb4-port1: attempt power cycle [ 120.741919][ T4459] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 120.793107][ T4459] usb 4-1: device descriptor read/8, error -71 [ 121.061629][ T4459] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 121.103681][ T4459] usb 4-1: device descriptor read/8, error -71 [ 121.135802][ T5577] loop1: detected capacity change from 0 to 32768 [ 121.167134][ T5577] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 121.178223][ T5577] JBD2: Ignoring recovery information on journal [ 121.221984][ T4459] usb usb4-port1: unable to enumerate USB device [ 121.248885][ T5577] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 121.286041][ T5577] (syz.1.369,5577,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 121.358684][ T4274] ocfs2: Unmounting device (7,1) on (node local) [ 121.470431][ T41] usb 1-1: USB disconnect, device number 9 [ 121.574712][ T5599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.374'. [ 121.877081][ T5597] loop0: detected capacity change from 0 to 32768 [ 121.889198][ T5612] netlink: 24 bytes leftover after parsing attributes in process `syz.4.381'. [ 121.932972][ T5597] JBD2: Ignoring recovery information on journal [ 121.953744][ T5615] netlink: 24 bytes leftover after parsing attributes in process `syz.4.381'. [ 122.059662][ T5597] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 122.143665][ T5615] netlink: 24 bytes leftover after parsing attributes in process `syz.4.381'. [ 122.231952][ T5622] device syzkaller1 entered promiscuous mode [ 122.323980][ T4287] ocfs2: Unmounting device (7,0) on (node local) [ 122.604820][ T5630] 9pnet_fd: Insufficient options for proto=fd [ 122.721813][ T4683] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 122.913661][ T4683] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.941915][ T4683] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 122.953817][ T5624] loop3: detected capacity change from 0 to 32768 [ 122.992481][ T4683] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.034765][ T5624] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 123.049084][ T4683] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 123.092824][ T5624] JBD2: Ignoring recovery information on journal [ 123.114110][ T4683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.172914][ T4683] usb 5-1: Product: syz [ 123.179129][ T4683] usb 5-1: Manufacturer: syz [ 123.204890][ T4683] usb 5-1: SerialNumber: syz [ 123.226239][ T4683] usb 5-1: config 0 descriptor?? [ 123.243624][ T5624] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 123.293314][ T4683] adutux 5-1:0.0: interrupt endpoints not found [ 123.347368][ T5624] (syz.3.385,5624,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 123.437549][ T4278] ocfs2: Unmounting device (7,3) on (node local) [ 123.542990][ T5656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.397'. [ 123.571654][ T5656] netlink: 24 bytes leftover after parsing attributes in process `syz.3.397'. [ 123.585033][ T5649] loop1: detected capacity change from 0 to 32768 [ 123.629048][ T5659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.397'. [ 123.641793][ T4354] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 123.655215][ T5659] netlink: 24 bytes leftover after parsing attributes in process `syz.3.397'. [ 123.681534][ T5649] JBD2: Ignoring recovery information on journal [ 123.709577][ T5658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.398'. [ 123.759330][ T5649] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 123.795513][ T5659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.397'. [ 123.804685][ T4354] usb 1-1: device descriptor read/64, error -71 [ 123.938637][ T4274] ocfs2: Unmounting device (7,1) on (node local) [ 123.976538][ T5670] 9pnet_fd: Insufficient options for proto=fd [ 124.071692][ T4354] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 124.231666][ T4354] usb 1-1: device descriptor read/64, error -71 [ 124.351705][ T4354] usb usb1-port1: attempt power cycle [ 124.505066][ T5676] loop2: detected capacity change from 0 to 32768 [ 124.552544][ T5676] JBD2: Ignoring recovery information on journal [ 124.671567][ T5676] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 124.761669][ T4354] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 124.762396][ T5687] loop3: detected capacity change from 0 to 32768 [ 124.822113][ T4354] usb 1-1: device descriptor read/8, error -71 [ 124.822313][ T5687] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 124.906321][ T5687] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 124.954446][ T5687] JBD2: Ignoring recovery information on journal [ 125.038219][ T4282] ocfs2: Unmounting device (7,2) on (node local) [ 125.087283][ T5687] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 125.102946][ T4354] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 125.144185][ T4354] usb 1-1: device descriptor read/8, error -71 [ 125.169692][ T5687] (syz.3.407,5687,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 125.257770][ T4278] ocfs2: Unmounting device (7,3) on (node local) [ 125.271994][ T4354] usb usb1-port1: unable to enumerate USB device [ 125.497893][ T4354] usb 5-1: USB disconnect, device number 2 [ 125.601050][ T5705] 9pnet_fd: Insufficient options for proto=fd [ 126.036763][ T5706] loop3: detected capacity change from 0 to 32768 [ 126.091617][ T5706] JBD2: Ignoring recovery information on journal [ 126.206355][ T5706] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 126.417475][ T5733] loop4: detected capacity change from 0 to 164 [ 126.418888][ T5734] fuse: Bad value for 'fd' [ 126.469684][ T4278] ocfs2: Unmounting device (7,3) on (node local) [ 126.626068][ T5741] __nla_validate_parse: 9 callbacks suppressed [ 126.626084][ T5741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.423'. [ 126.691836][ T5741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.423'. [ 126.840227][ T5741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.423'. [ 126.859835][ T5741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.423'. [ 126.868972][ T5746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.426'. [ 126.997473][ T5751] 9pnet_fd: Insufficient options for proto=fd [ 127.118610][ T5760] overlayfs: missing 'lowerdir' [ 127.561628][ T4379] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 127.721581][ T4379] usb 5-1: device descriptor read/64, error -71 [ 127.760938][ T5771] loop1: detected capacity change from 0 to 32768 [ 127.808650][ T5771] (syz.1.436,5771,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 127.813263][ T5781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.440'. [ 127.832057][ T5766] loop2: detected capacity change from 0 to 32768 [ 127.849232][ T5771] (syz.1.436,5771,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 127.885376][ T5766] JBD2: Ignoring recovery information on journal [ 127.905844][ T5771] JBD2: Ignoring recovery information on journal [ 127.991627][ T4379] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 128.078793][ T5766] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 128.088794][ T5781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.440'. [ 128.111072][ T5771] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 128.171537][ T4379] usb 5-1: device descriptor read/64, error -71 [ 128.221307][ T4274] ocfs2: Unmounting device (7,1) on (node local) [ 128.276504][ T4282] ocfs2: Unmounting device (7,2) on (node local) [ 128.291783][ T4379] usb usb5-port1: attempt power cycle [ 128.346319][ T4458] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 128.516685][ T5794] 9pnet_fd: Insufficient options for proto=fd [ 128.546712][ T4458] usb 4-1: Using ep0 maxpacket: 32 [ 128.557073][ T5796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.443'. [ 128.568736][ T4458] usb 4-1: config 0 has no interfaces? [ 128.593570][ T4458] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 128.611590][ T4458] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.629875][ T4458] usb 4-1: Product: syz [ 128.634602][ T4458] usb 4-1: Manufacturer: syz [ 128.639298][ T4458] usb 4-1: SerialNumber: syz [ 128.658579][ T4458] usb 4-1: config 0 descriptor?? [ 128.698545][ T5796] team0: Port device team_slave_0 removed [ 128.704692][ T4379] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 128.722568][ T5801] netlink: 28 bytes leftover after parsing attributes in process `syz.0.446'. [ 128.742460][ T4379] usb 5-1: device descriptor read/8, error -71 [ 129.015562][ T4379] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 129.063234][ T4379] usb 5-1: device descriptor read/8, error -71 [ 129.182550][ T4379] usb usb5-port1: unable to enumerate USB device [ 129.230180][ T5815] siw: device registration error -23 [ 129.294555][ T5819] loop0: detected capacity change from 0 to 164 [ 129.492748][ T5822] netlink: 24 bytes leftover after parsing attributes in process `syz.1.454'. [ 129.588185][ T5825] 9pnet_fd: Insufficient options for proto=fd [ 129.657987][ T5817] loop2: detected capacity change from 0 to 32768 [ 129.707451][ T5817] (syz.2.452,5817,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 129.737944][ T5817] (syz.2.452,5817,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 129.777814][ T5817] JBD2: Ignoring recovery information on journal [ 129.902400][ T5817] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 130.078700][ T5837] dummy0 speed is unknown, defaulting to 1000 [ 130.894711][ T5832] sched: RT throttling activated [ 132.335553][ T4379] usb 4-1: USB disconnect, device number 6 [ 132.416401][ T4282] ocfs2: Unmounting device (7,2) on (node local) [ 132.545201][ T5845] loop4: detected capacity change from 0 to 2048 [ 132.645484][ T5850] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.704818][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.711200][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.808504][ T5852] 9pnet_fd: Insufficient options for proto=fd [ 132.896388][ T5854] ip_tables: iptables: counters copy to user failed while replacing table [ 132.932701][ T5856] loop2: detected capacity change from 0 to 64 [ 133.058364][ T5858] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 133.081997][ T5858] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 133.091184][ T5860] 9pnet_fd: Insufficient options for proto=fd [ 133.102045][ T5862] loop3: detected capacity change from 0 to 164 [ 133.132916][ T4282] Bad inode number on dev loop2: 4160749571 is out of range [ 133.141094][ T4282] Bad inode number on dev loop2: 4160749571 is out of range [ 133.808746][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.875635][ T5880] dummy0 speed is unknown, defaulting to 1000 [ 133.929175][ T5866] loop1: detected capacity change from 0 to 32768 [ 133.978247][ T5866] (syz.1.472,5866,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 134.008786][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.023747][ T5866] (syz.1.472,5866,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 134.120832][ T5866] JBD2: Ignoring recovery information on journal [ 134.258569][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.497735][ T5866] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 134.597914][ T5890] dummy0 speed is unknown, defaulting to 1000 [ 135.124356][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.134592][ T5896] loop4: detected capacity change from 0 to 164 [ 135.185215][ T4274] ocfs2: Unmounting device (7,1) on (node local) [ 135.200190][ T5899] 9pnet_fd: Insufficient options for proto=fd [ 135.458221][ T5903] dummy0 speed is unknown, defaulting to 1000 [ 135.501671][ T5907] netlink: 'syz.0.485': attribute type 1 has an invalid length. [ 135.647084][ T5907] device bond2 entered promiscuous mode [ 135.756997][ T5907] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.850564][ T5912] __nla_validate_parse: 1 callbacks suppressed [ 135.850581][ T5912] netlink: 28 bytes leftover after parsing attributes in process `syz.0.485'. [ 136.944105][ T5914] dummy0 speed is unknown, defaulting to 1000 [ 136.955815][ T4289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 136.976877][ T4289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 136.985232][ T4289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 137.002013][ T4289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 137.009634][ T4289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 137.017501][ T4292] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 137.486761][ T5921] dummy0 speed is unknown, defaulting to 1000 [ 137.518006][ T5927] loop1: detected capacity change from 0 to 2048 [ 137.718440][ T5934] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.186418][ T5921] chnl_net:caif_netlink_parms(): no params data found [ 138.290665][ T5951] 9pnet_fd: Insufficient options for proto=fd [ 138.432794][ T5950] dummy0 speed is unknown, defaulting to 1000 [ 138.555415][ T5955] dummy0 speed is unknown, defaulting to 1000 [ 138.690397][ T5921] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.707928][ T5921] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.737305][ T5921] device bridge_slave_0 entered promiscuous mode [ 138.833783][ T5921] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.841141][ T5921] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.850762][ T5921] device bridge_slave_1 entered promiscuous mode [ 138.926678][ T5921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.021777][ T4606] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 139.081386][ T5921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.102828][ T4286] Bluetooth: hci2: command 0x0409 tx timeout [ 139.522806][ T5921] team0: Port device team_slave_0 added [ 139.717134][ T5921] team0: Port device team_slave_1 added [ 139.821568][ T4606] usb 4-1: Using ep0 maxpacket: 32 [ 139.828784][ T4606] usb 4-1: config 0 has no interfaces? [ 139.841269][ T4606] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 139.843067][ T5976] dummy0 speed is unknown, defaulting to 1000 [ 139.856796][ T4606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.871311][ T4606] usb 4-1: Product: syz [ 139.878820][ T4606] usb 4-1: Manufacturer: syz [ 139.900551][ T11] device hsr_slave_0 left promiscuous mode [ 139.907714][ T11] device hsr_slave_1 left promiscuous mode [ 139.914771][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.922715][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.932268][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.939912][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.992222][ T4606] usb 4-1: SerialNumber: syz [ 140.013064][ T4606] usb 4-1: config 0 descriptor?? [ 140.039400][ T11] device bridge_slave_1 left promiscuous mode [ 140.059466][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.100372][ T11] device bridge_slave_0 left promiscuous mode [ 140.117080][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.264985][ T11] device veth1_macvtap left promiscuous mode [ 140.281399][ T11] device veth0_macvtap left promiscuous mode [ 140.284082][ T5990] 9pnet_fd: Insufficient options for proto=fd [ 140.296512][ T11] device veth1_vlan left promiscuous mode [ 140.320660][ T11] device veth0_vlan left promiscuous mode [ 140.349773][ T5993] 9pnet_fd: Insufficient options for proto=fd [ 140.751789][ T6001] siw: device registration error -23 [ 141.193047][ T4286] Bluetooth: hci2: command 0x041b tx timeout [ 141.940921][ T4358] usb 4-1: USB disconnect, device number 7 [ 142.046735][ T11] team0 (unregistering): Port device team_slave_1 removed [ 142.108637][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.155506][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.443409][ T11] bond0 (unregistering): Released all slaves [ 142.520412][ T6015] netlink: 48 bytes leftover after parsing attributes in process `syz.1.508'. [ 142.529867][ T6015] netlink: 48 bytes leftover after parsing attributes in process `syz.1.508'. [ 142.580947][ T6000] dummy0 speed is unknown, defaulting to 1000 [ 142.588276][ T6027] dummy0 speed is unknown, defaulting to 1000 [ 142.608026][ T5921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.641504][ T5921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.711507][ T5921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.742987][ T5921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.750001][ T5921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.814185][ T5921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.969666][ T6036] loop0: detected capacity change from 0 to 164 [ 142.980283][ T5921] device hsr_slave_0 entered promiscuous mode [ 143.029421][ T5921] device hsr_slave_1 entered promiscuous mode [ 143.129618][ T6039] 9pnet_fd: Insufficient options for proto=fd [ 143.261519][ T4289] Bluetooth: hci2: command 0x040f tx timeout [ 144.792769][ T4683] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 144.987560][ T4683] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.012667][ T4683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 145.049210][ T4683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 145.076737][ T4683] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.116513][ T4683] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 145.145008][ T4683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.180522][ T4683] usb 1-1: Product: syz [ 145.197106][ T4683] usb 1-1: Manufacturer: syz [ 145.211258][ T4683] usb 1-1: SerialNumber: syz [ 145.260877][ T4683] usb 1-1: config 0 descriptor?? [ 145.286601][ T4683] adutux 1-1:0.0: interrupt endpoints not found [ 145.409658][ T4289] Bluetooth: hci2: command 0x0419 tx timeout [ 145.749607][ T5921] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 145.823330][ T5921] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 145.867345][ T5921] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 146.042212][ T5921] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 146.918408][ T6063] loop1: detected capacity change from 0 to 32768 [ 146.998778][ T5921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.031118][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.069791][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.085383][ T6063] JBD2: Ignoring recovery information on journal [ 147.137755][ T5921] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.164798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.173643][ T6063] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 147.187459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.233967][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.241179][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.264561][ T4379] usb 1-1: USB disconnect, device number 14 [ 147.270595][ T26] audit: type=1804 audit(1793705588.676:26): pid=6063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.518" name="/newroot/94/file1/file1" dev="loop1" ino=17059 res=1 errno=0 [ 147.350002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.463287][ T6088] netlink: 48 bytes leftover after parsing attributes in process `syz.3.521'. [ 147.482334][ T6088] netlink: 48 bytes leftover after parsing attributes in process `syz.3.521'. [ 147.504017][ T4274] ocfs2: Unmounting device (7,1) on (node local) [ 147.537471][ T6011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.566720][ T6011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.609901][ T6011] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.617078][ T6011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.802113][ T6011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.990168][ T6011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.013087][ T6011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.054879][ T6011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.082896][ T6011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.109674][ T6011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.197843][ T5921] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.213150][ T5921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.411617][ T6011] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.432539][ T6011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.462265][ T6011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.477566][ T6011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.566227][ T6011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.086259][ T6097] loop1: detected capacity change from 0 to 32768 [ 149.225811][ T6097] (syz.1.523,6097,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 149.302841][ T6097] (syz.1.523,6097,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 149.321969][ T6011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 149.384853][ T6097] JBD2: Ignoring recovery information on journal [ 149.754424][ T4683] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 149.905255][ T6097] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 150.241936][ T6130] dummy0 speed is unknown, defaulting to 1000 [ 150.597400][ T4683] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 150.659216][ T4683] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 150.712995][ T4683] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 150.773672][ T4683] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 150.794744][ T6138] loop3: detected capacity change from 0 to 164 [ 150.820725][ T4274] ocfs2: Unmounting device (7,1) on (node local) [ 150.845660][ T4683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.946080][ T4683] usb 5-1: Product: syz [ 150.958430][ T4683] usb 5-1: Manufacturer: syz [ 150.976437][ T4683] usb 5-1: SerialNumber: syz [ 150.993325][ T4683] usb 5-1: config 0 descriptor?? [ 151.039551][ T6011] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.048419][ T4683] adutux 5-1:0.0: interrupt endpoints not found [ 151.067867][ T6011] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.078230][ T6144] siw: device registration error -23 [ 151.092625][ T5921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.190744][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.533'. [ 151.201235][ T6149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.533'. [ 151.222066][ T6151] FAULT_INJECTION: forcing a failure. [ 151.222066][ T6151] name failslab, interval 1, probability 0, space 0, times 0 [ 151.302740][ T6151] CPU: 1 PID: 6151 Comm: syz.0.534 Not tainted syzkaller #0 [ 151.310101][ T6151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 151.320268][ T6151] Call Trace: [ 151.323556][ T6151] [ 151.326499][ T6151] dump_stack_lvl+0x188/0x24e [ 151.331217][ T6151] ? show_regs_print_info+0x12/0x12 [ 151.336449][ T6151] ? load_image+0x410/0x410 [ 151.340984][ T6151] ? __might_sleep+0xd0/0xd0 [ 151.345594][ T6151] ? __lock_acquire+0x7ea0/0x7ea0 [ 151.350655][ T6151] should_fail_ex+0x390/0x4c0 [ 151.355369][ T6151] should_failslab+0x5/0x20 [ 151.359895][ T6151] slab_pre_alloc_hook+0x59/0x300 [ 151.364952][ T6151] ? ima_alloc_init_template+0x16e/0x6e0 [ 151.370612][ T6151] __kmem_cache_alloc_node+0x4f/0x270 [ 151.376011][ T6151] ? ima_alloc_init_template+0x16e/0x6e0 [ 151.381668][ T6151] __kmalloc+0xa3/0x240 [ 151.385851][ T6151] ima_alloc_init_template+0x16e/0x6e0 [ 151.391347][ T6151] ima_store_measurement+0x1d1/0x690 [ 151.396924][ T6151] ? ima_collect_measurement+0xb50/0xb50 [ 151.402592][ T6151] ? ima_d_path+0x180/0x240 [ 151.407656][ T6151] ? ima_get_cache_status+0xb0/0xb0 [ 151.413631][ T6151] process_measurement+0x1263/0x1c40 [ 151.419730][ T6151] ? ima_file_mmap+0x140/0x140 [ 151.424497][ T6151] ? __lock_acquire+0x7ea0/0x7ea0 [ 151.429565][ T6151] ? apparmor_inode_getattr+0x20/0x20 [ 151.434946][ T6151] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 151.441112][ T6151] ima_file_check+0xc8/0x110 [ 151.445745][ T6151] ? ima_bprm_check+0x200/0x200 [ 151.450614][ T6151] path_openat+0x272b/0x2f10 [ 151.455231][ T6151] ? kasan_set_track+0x60/0x70 [ 151.459997][ T6151] ? verify_lock_unused+0x140/0x140 [ 151.465209][ T6151] ? do_sys_openat2+0xdd/0x4f0 [ 151.469981][ T6151] ? do_filp_open+0x420/0x420 [ 151.474672][ T6151] do_filp_open+0x1ee/0x420 [ 151.479182][ T6151] ? vfs_tmpfile+0x490/0x490 [ 151.483794][ T6151] ? _raw_spin_unlock+0x24/0x40 [ 151.488678][ T6151] ? alloc_fd+0x590/0x640 [ 151.493021][ T6151] do_sys_openat2+0x14b/0x4f0 [ 151.497706][ T6151] ? do_sys_open+0xe0/0xe0 [ 151.502122][ T6151] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 151.508116][ T6151] ? lock_chain_count+0x20/0x20 [ 151.513069][ T6151] __x64_sys_openat+0x135/0x160 [ 151.517958][ T6151] do_syscall_64+0x4c/0xa0 [ 151.522413][ T6151] ? clear_bhb_loop+0x60/0xb0 [ 151.527096][ T6151] ? clear_bhb_loop+0x60/0xb0 [ 151.531777][ T6151] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.537687][ T6151] RIP: 0033:0x7f05cc59fb19 [ 151.542123][ T6151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.561756][ T6151] RSP: 002b:00007f05ca7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 151.570294][ T6151] RAX: ffffffffffffffda RBX: 00007f05cc826090 RCX: 00007f05cc59fb19 [ 151.578279][ T6151] RDX: 0000000000000002 RSI: 0000200000000c00 RDI: ffffffffffffff9c [ 151.586277][ T6151] RBP: 00007f05cc637af8 R08: 0000000000000000 R09: 0000000000000000 [ 151.594247][ T6151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.602215][ T6151] R13: 00007f05cc826128 R14: 00007f05cc826090 R15: 00007ffe410bf6c8 [ 151.610202][ T6151] [ 151.679380][ T6158] loop3: detected capacity change from 0 to 128 [ 151.753908][ T6158] FAT-fs (loop3): Unrecognized mount option "shortnamèÊž$·DùÕô14e=win95" or missing value [ 152.028064][ T6167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.537'. [ 152.076409][ T26] audit: type=1804 audit(1793705593.486:27): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.0.534" name="/newroot/114/trace/events/sched/sched_switch/filter" dev="tracefs" ino=2495 res=0 errno=0 [ 152.318189][ T6167] team0: Port device team_slave_0 removed [ 152.558465][ T6178] dummy0 speed is unknown, defaulting to 1000 [ 153.213136][ T6158] loop3: detected capacity change from 0 to 32768 [ 153.310522][ T6158] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 153.314978][ T4379] usb 5-1: USB disconnect, device number 7 [ 153.853503][ T6189] loop0: detected capacity change from 0 to 164 [ 154.261724][ T4393] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 154.304734][ T4876] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 154.308158][ T6186] dummy0 speed is unknown, defaulting to 1000 [ 154.347102][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.422259][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.585529][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.543'. [ 156.010295][ T6191] team0: Port device team_slave_0 removed [ 156.135966][ T5921] device veth0_vlan entered promiscuous mode [ 156.217725][ T5921] device veth1_vlan entered promiscuous mode [ 156.388642][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 156.409806][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.469474][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 156.522666][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 156.553323][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.567222][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.577248][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.585286][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.614512][ T5921] device veth0_macvtap entered promiscuous mode [ 156.831761][ T6209] device syzkaller1 entered promiscuous mode [ 157.068815][ T6229] loop4: detected capacity change from 0 to 164 [ 157.573155][ T5921] device veth1_macvtap entered promiscuous mode [ 157.678069][ T6230] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 157.737988][ T5921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.790834][ T6234] loop1: detected capacity change from 0 to 128 [ 157.834776][ T5921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.857791][ T5921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.881003][ T6234] FAT-fs (loop1): Unrecognized mount option "shortnamèÊž$·DùÕô14e=win95" or missing value [ 157.917834][ T5921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.953579][ T5921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.977347][ T5921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.031562][ T5921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.068074][ T5921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.110599][ T5921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.155603][ T6238] dummy0 speed is unknown, defaulting to 1000 [ 158.210592][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.235805][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.267505][ T5921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.296418][ T5921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.330710][ T5921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.362608][ T5921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.393856][ T5921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.417760][ T5921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.452752][ T5921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.494688][ T5921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.508700][ T5921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.538485][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.561878][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.563715][ T6234] loop1: detected capacity change from 0 to 32768 [ 158.601104][ T6234] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 158.664086][ T5921] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.683144][ T5921] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.698045][ T5921] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.709954][ T5921] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.954176][ T4876] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 159.180739][ T6266] loop1: detected capacity change from 0 to 164 [ 159.374171][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.560'. [ 159.597287][ T6264] netlink: 24 bytes leftover after parsing attributes in process `syz.3.560'. [ 160.022200][ T4361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.038957][ T4361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.196888][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 160.376561][ T6281] loop0: detected capacity change from 0 to 164 [ 160.901969][ T6282] loop1: detected capacity change from 0 to 164 [ 161.384821][ T4876] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 161.450626][ T6274] dummy0 speed is unknown, defaulting to 1000 [ 161.514983][ T6280] dummy0 speed is unknown, defaulting to 1000 [ 161.526412][ T6279] dummy0 speed is unknown, defaulting to 1000 [ 161.643859][ T4368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.743860][ T4368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.817426][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 162.057447][ T6292] ip_tables: iptables: counters copy to user failed while replacing table [ 162.320437][ T6299] dummy0 speed is unknown, defaulting to 1000 [ 162.720268][ T6296] loop0: detected capacity change from 0 to 32768 [ 162.901163][ T6296] (syz.0.566,6296,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 162.990074][ T6296] (syz.0.566,6296,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 163.082612][ T6313] loop5: detected capacity change from 0 to 164 [ 163.681272][ T6296] JBD2: Ignoring recovery information on journal [ 164.270086][ T6296] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 164.733414][ T6330] dummy0 speed is unknown, defaulting to 1000 [ 164.922571][ T6336] loop4: detected capacity change from 0 to 2048 [ 164.996677][ T4287] ocfs2: Unmounting device (7,0) on (node local) [ 165.031984][ T6338] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.215027][ T6343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.580'. [ 165.219188][ T6340] ip_tables: iptables: counters copy to user failed while replacing table [ 168.969368][ T6370] dummy0 speed is unknown, defaulting to 1000 [ 169.728774][ T6380] dummy0 speed is unknown, defaulting to 1000 [ 170.621988][ T6379] loop0: detected capacity change from 0 to 164 [ 170.705723][ T6388] loop5: detected capacity change from 0 to 164 [ 171.175826][ T6379] dummy0 speed is unknown, defaulting to 1000 [ 171.672449][ T6397] loop1: detected capacity change from 0 to 164 [ 172.260060][ T6397] dummy0 speed is unknown, defaulting to 1000 [ 172.377675][ T6401] loop5: detected capacity change from 0 to 2048 [ 172.514160][ T6404] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.563387][ T6406] siw: device registration error -23 [ 173.449053][ T6428] loop0: detected capacity change from 0 to 164 [ 174.106070][ T6407] loop4: detected capacity change from 0 to 32768 [ 174.146962][ T6428] dummy0 speed is unknown, defaulting to 1000 [ 174.188812][ T6407] (syz.4.593,6407,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 174.786236][ T6436] dummy0 speed is unknown, defaulting to 1000 [ 174.924478][ T6407] (syz.4.593,6407,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 175.053158][ T6407] JBD2: Ignoring recovery information on journal [ 175.970169][ T6443] dummy0 speed is unknown, defaulting to 1000 [ 175.985470][ T6445] dummy0 speed is unknown, defaulting to 1000 [ 176.013958][ T6407] JBD2: recovery failed [ 176.018178][ T6407] (syz.4.593,6407,0):ocfs2_journal_load:1135 ERROR: Failed to load journal! [ 176.057536][ T6407] (syz.4.593,6407,0):ocfs2_check_volume:2431 ERROR: ocfs2 journal load failed! -5 [ 176.100388][ T6407] (syz.4.593,6407,1):ocfs2_check_volume:2487 ERROR: status = -5 [ 176.112088][ T6407] (syz.4.593,6407,1):ocfs2_mount_volume:1821 ERROR: status = -5 [ 176.321393][ T6407] (syz.4.593,6407,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 176.561806][ T41] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 176.792492][ T41] usb 6-1: Using ep0 maxpacket: 32 [ 176.801678][ T41] usb 6-1: config 0 has no interfaces? [ 177.091729][ T41] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 177.100864][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.111063][ T41] usb 6-1: Product: syz [ 177.125895][ T41] usb 6-1: Manufacturer: syz [ 177.130541][ T41] usb 6-1: SerialNumber: syz [ 177.158054][ T6457] dummy0 speed is unknown, defaulting to 1000 [ 177.291087][ T41] usb 6-1: config 0 descriptor?? [ 178.702838][ T6472] loop3: detected capacity change from 0 to 164 [ 178.891890][ T6473] siw: device registration error -23 [ 178.957387][ T6398] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 179.000297][ T6470] dummy0 speed is unknown, defaulting to 1000 [ 179.259489][ T6480] netlink: 64 bytes leftover after parsing attributes in process `syz.4.610'. [ 179.332894][ T6480] device syzkaller1 entered promiscuous mode [ 179.522791][ T6490] netlink: 'syz.3.613': attribute type 4 has an invalid length. [ 180.007726][ T6505] jffs2: notice: (6505) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 180.009141][ T6501] block device autoloading is deprecated and will be removed. [ 180.040920][ T4463] usb 6-1: USB disconnect, device number 2 [ 180.099329][ T26] audit: type=1400 audit(1793705621.506:28): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6503 comm="syz.1.616" [ 180.472782][ T6525] autofs4:pid:6525:autofs_fill_super: called with bogus options [ 180.723134][ T6537] netlink: 'syz.1.624': attribute type 1 has an invalid length. [ 180.756075][ T6537] netlink: 84 bytes leftover after parsing attributes in process `syz.1.624'. [ 180.812265][ T6543] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 180.867932][ T6549] Bluetooth: MGMT ver 1.22 [ 180.905669][ T6549] Bluetooth: hci0: service_discovery: too big uuid_count value 38912 [ 181.344710][ T6570] CIFS: Attempting to mount \\127.0.0.1\share [ 181.461548][ T4379] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 181.641573][ T4379] usb 2-1: Using ep0 maxpacket: 8 [ 181.648625][ T4379] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 181.660045][ T4379] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 181.670521][ T4379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.682262][ T4379] usb 2-1: config 0 descriptor?? [ 181.897830][ T4379] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 181.908436][ T6495] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 182.168930][ T6570] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -512 [ 182.182956][ T6570] CIFS: VFS: cifs_mount failed w/return code = -512 [ 182.192964][ T6585] 9pnet_virtio: no channels available for device syz [ 182.364057][ T4683] usb 2-1: USB disconnect, device number 9 [ 182.890829][ T6604] ================================================================== [ 182.899041][ T6604] BUG: KASAN: null-ptr-deref in free_conf+0x90/0x4b0 [ 182.905744][ T6604] Read of size 8 at addr 0000000000000028 by task syz.4.649/6604 [ 182.913498][ T6604] [ 182.915846][ T6604] CPU: 0 PID: 6604 Comm: syz.4.649 Not tainted syzkaller #0 [ 182.923205][ T6604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 182.933555][ T6604] Call Trace: [ 182.936863][ T6604] [ 182.939818][ T6604] dump_stack_lvl+0x188/0x24e [ 182.944577][ T6604] ? show_regs_print_info+0x12/0x12 [ 182.949808][ T6604] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 182.955299][ T6604] ? mark_lock+0x94/0x320 [ 182.960023][ T6604] ? free_conf+0x90/0x4b0 [ 182.965203][ T6604] kasan_report+0x10b/0x140 [ 182.969918][ T6604] ? free_conf+0x90/0x4b0 [ 182.974274][ T6604] kasan_check_range+0x235/0x290 [ 182.979345][ T6604] free_conf+0x90/0x4b0 [ 182.983614][ T6604] ? __raw_spin_lock_init+0x41/0x100 [ 182.988938][ T6604] setup_conf+0x1679/0x29f0 [ 182.993449][ T6604] ? percpu_ref_put+0x1e/0x230 [ 182.998217][ T6604] ? __lock_acquire+0x7ea0/0x7ea0 [ 183.003266][ T6604] ? __add_stripe_bio+0x830/0x830 [ 183.008291][ T6604] ? percpu_ref_put+0x17e/0x230 [ 183.013141][ T6604] raid5_run+0x8af/0x2960 [ 183.017471][ T6604] ? mempool_free+0x320/0x320 [ 183.022155][ T6604] md_run+0x10bf/0x2260 [ 183.026348][ T6604] do_md_run+0x30/0x400 [ 183.030506][ T6604] md_ioctl+0x249b/0x2880 [ 183.034839][ T6604] ? tomoyo_path_number_perm+0x205/0x650 [ 183.040478][ T6604] ? md_release+0xa0/0xa0 [ 183.044805][ T6604] ? __lock_acquire+0x7ea0/0x7ea0 [ 183.049854][ T6604] ? slab_free_freelist_hook+0x133/0x1b0 [ 183.055595][ T6604] ? tomoyo_path_number_perm+0x4fb/0x650 [ 183.061245][ T6604] ? blkdev_common_ioctl+0x6c1/0x2090 [ 183.066714][ T6604] ? tomoyo_path_number_perm+0x205/0x650 [ 183.072442][ T6604] ? tomoyo_path_number_perm+0x5a4/0x650 [ 183.078077][ T6604] ? blkdev_bszset+0x200/0x200 [ 183.082862][ T6604] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 183.088332][ T6604] ? md_release+0xa0/0xa0 [ 183.092658][ T6604] blkdev_ioctl+0x37b/0x740 [ 183.097160][ T6604] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 183.102614][ T6604] ? bpf_lsm_file_ioctl+0x5/0x10 [ 183.107566][ T6604] ? security_file_ioctl+0x7c/0xa0 [ 183.112676][ T6604] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 183.118132][ T6604] __se_sys_ioctl+0xfa/0x170 [ 183.122737][ T6604] do_syscall_64+0x4c/0xa0 [ 183.127158][ T6604] ? clear_bhb_loop+0x60/0xb0 [ 183.131831][ T6604] ? clear_bhb_loop+0x60/0xb0 [ 183.136506][ T6604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.142401][ T6604] RIP: 0033:0x7f44f279fb19 [ 183.146815][ T6604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.166444][ T6604] RSP: 002b:00007f44f3744028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.174880][ T6604] RAX: ffffffffffffffda RBX: 00007f44f2a25fa0 RCX: 00007f44f279fb19 [ 183.182955][ T6604] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000004 [ 183.190964][ T6604] RBP: 00007f44f2837af8 R08: 0000000000000000 R09: 0000000000000000 [ 183.198934][ T6604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.206936][ T6604] R13: 00007f44f2a26038 R14: 00007f44f2a25fa0 R15: 00007ffcbbee2578 [ 183.215123][ T6604] [ 183.218658][ T6604] ================================================================== [ 183.227054][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.312516][ T6604] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 183.319777][ T6604] CPU: 0 PID: 6604 Comm: syz.4.649 Not tainted syzkaller #0 [ 183.327077][ T6604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 183.337148][ T6604] Call Trace: [ 183.340436][ T6604] [ 183.343372][ T6604] dump_stack_lvl+0x188/0x24e [ 183.348049][ T6604] ? memcpy+0x3c/0x60 [ 183.352034][ T6604] ? show_regs_print_info+0x12/0x12 [ 183.357225][ T6604] ? load_image+0x410/0x410 [ 183.361726][ T6604] panic+0x2d3/0x710 [ 183.365610][ T6604] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 183.371756][ T6604] ? bpf_jit_dump+0xd0/0xd0 [ 183.376267][ T6604] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 183.382252][ T6604] ? _raw_spin_unlock+0x40/0x40 [ 183.387097][ T6604] check_panic_on_warn+0x80/0xa0 [ 183.392030][ T6604] ? free_conf+0x90/0x4b0 [ 183.396351][ T6604] end_report+0x66/0x110 [ 183.400586][ T6604] kasan_report+0x118/0x140 [ 183.405101][ T6604] ? free_conf+0x90/0x4b0 [ 183.409436][ T6604] kasan_check_range+0x235/0x290 [ 183.414373][ T6604] free_conf+0x90/0x4b0 [ 183.418523][ T6604] ? __raw_spin_lock_init+0x41/0x100 [ 183.423798][ T6604] setup_conf+0x1679/0x29f0 [ 183.428292][ T6604] ? percpu_ref_put+0x1e/0x230 [ 183.433075][ T6604] ? __lock_acquire+0x7ea0/0x7ea0 [ 183.438092][ T6604] ? __add_stripe_bio+0x830/0x830 [ 183.443106][ T6604] ? percpu_ref_put+0x17e/0x230 [ 183.447996][ T6604] raid5_run+0x8af/0x2960 [ 183.452323][ T6604] ? mempool_free+0x320/0x320 [ 183.456999][ T6604] md_run+0x10bf/0x2260 [ 183.461154][ T6604] do_md_run+0x30/0x400 [ 183.465318][ T6604] md_ioctl+0x249b/0x2880 [ 183.469646][ T6604] ? tomoyo_path_number_perm+0x205/0x650 [ 183.475292][ T6604] ? md_release+0xa0/0xa0 [ 183.479615][ T6604] ? __lock_acquire+0x7ea0/0x7ea0 [ 183.484633][ T6604] ? slab_free_freelist_hook+0x133/0x1b0 [ 183.490261][ T6604] ? tomoyo_path_number_perm+0x4fb/0x650 [ 183.495895][ T6604] ? blkdev_common_ioctl+0x6c1/0x2090 [ 183.501258][ T6604] ? tomoyo_path_number_perm+0x205/0x650 [ 183.506934][ T6604] ? tomoyo_path_number_perm+0x5a4/0x650 [ 183.512588][ T6604] ? blkdev_bszset+0x200/0x200 [ 183.517348][ T6604] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 183.522817][ T6604] ? md_release+0xa0/0xa0 [ 183.527147][ T6604] blkdev_ioctl+0x37b/0x740 [ 183.531648][ T6604] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 183.537133][ T6604] ? bpf_lsm_file_ioctl+0x5/0x10 [ 183.542084][ T6604] ? security_file_ioctl+0x7c/0xa0 [ 183.547205][ T6604] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 183.552668][ T6604] __se_sys_ioctl+0xfa/0x170 [ 183.557388][ T6604] do_syscall_64+0x4c/0xa0 [ 183.561832][ T6604] ? clear_bhb_loop+0x60/0xb0 [ 183.566514][ T6604] ? clear_bhb_loop+0x60/0xb0 [ 183.571191][ T6604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.577079][ T6604] RIP: 0033:0x7f44f279fb19 [ 183.581485][ T6604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.601086][ T6604] RSP: 002b:00007f44f3744028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.609524][ T6604] RAX: ffffffffffffffda RBX: 00007f44f2a25fa0 RCX: 00007f44f279fb19 [ 183.617489][ T6604] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000004 [ 183.625458][ T6604] RBP: 00007f44f2837af8 R08: 0000000000000000 R09: 0000000000000000 [ 183.633423][ T6604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.641411][ T6604] R13: 00007f44f2a26038 R14: 00007f44f2a25fa0 R15: 00007ffcbbee2578 [ 183.649387][ T6604] [ 183.652651][ T6604] Kernel Offset: disabled [ 183.656965][ T6604] Rebooting in 86400 seconds..