last executing test programs: 1m14.322775888s ago: executing program 0 (id=521): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/xt_recent/syz0\x00', 0x2, 0x3) write$P9_RREADDIR(r1, &(0x7f0000000140)={0xb, 0x29, 0x2, {0xd43}}, 0xb) 1m14.125247371s ago: executing program 0 (id=523): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002180)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000002840)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000002880)=0x1) preadv2(r0, &(0x7f0000000a80)=[{&(0x7f0000002900)=""/72, 0x48}, {0x0}], 0x2, 0x0, 0x7e, 0x10) 1m13.902887265s ago: executing program 0 (id=526): ftruncate(0xffffffffffffffff, 0x51a9497) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='3', 0x4e) sched_setaffinity(0x0, 0x0, 0x0) 1m13.759475119s ago: executing program 0 (id=529): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x10081, 0xffffffff, 0x4}) r0 = io_uring_setup(0x3a61, &(0x7f0000000580)={0x0, 0x8270, 0x80, 0x3, 0x846}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000d00)=""/135, 0x87}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 1m13.480633241s ago: executing program 0 (id=531): mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a', @ANYRESHEX], 0x0) 1m11.201706765s ago: executing program 0 (id=541): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0x14, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc}, 0x14}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000008c0)={0xcf, 0xfffffffb, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000980)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000009c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000a00)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c) 1m10.681816209s ago: executing program 32 (id=541): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0x14, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc}, 0x14}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000008c0)={0xcf, 0xfffffffb, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000980)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000009c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000a00)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c) 57.429555383s ago: executing program 5 (id=542): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0xc0049364, &(0x7f00000001c0)) 57.289490906s ago: executing program 5 (id=614): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000004c0)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000680), 0x8800, 0x0) read$dsp(r1, &(0x7f0000001180)=""/4086, 0xff6) write$dsp(r0, &(0x7f0000002180)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) read$dsp(r1, &(0x7f0000000000)=""/92, 0x5c) 56.801812987s ago: executing program 5 (id=619): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r1 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r1, &(0x7f0000000980)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000009c0)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000a00)=ANY=[@ANYBLOB="01808ea918981dc3e1d6bbbb08004500007800000002"], 0x0) 56.509848956s ago: executing program 33 (id=619): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r1 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r1, &(0x7f0000000980)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000009c0)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000a00)=ANY=[@ANYBLOB="01808ea918981dc3e1d6bbbb08004500007800000002"], 0x0) 7.312872416s ago: executing program 4 (id=1011): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@mblk_io_submit}, {@nouid32}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}, {@nobarrier}]}, 0x4, 0xbbf, &(0x7f0000000700)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) chdir(&(0x7f0000000300)='./bus\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x2c1c99, 0x0, 0x0, 0x0, &(0x7f0000000340)) rename(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./bus\x00') 6.387586983s ago: executing program 4 (id=1014): syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0xf88ce2e0571bc7ea}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4) 5.569468462s ago: executing program 4 (id=1020): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x26) write(r2, &(0x7f0000000000)='7', 0x1) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x4, 0x0, 0x4, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x43}, 0xb}}}, 0x26) 5.457820937s ago: executing program 4 (id=1021): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000000c0)={0x1, 0xe4ff71c170d132d5, &(0x7f0000000400)="fccdccc6aefa"}) 4.647865737s ago: executing program 3 (id=1024): ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x3) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000005c0)='.\x00', 0x428) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0x10, 0x10, &(0x7f0000000540)="0000ffffffffa000", &(0x7f0000000580)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x168, &(0x7f0000000240)="$eJzs29tKOlEUx/HfqP9/ZudzdBUU1E2Op4Lu8lFEJ5PGkuxGCaJH6cl6Ab3oBZpolKnZBE2CDun3A7LXEhZr74vtLC9GAGbWhSRLltKSPM97vDq0tB/3pgBMhDdc3zwAsyfJ1QdmVL+c9J//LUkvrw/V3vCTjjg/9MsJf/34H9H7Uj8ftf7J8te9VLg+I2khyvzyPKg/Mvov/rJ/xqhfilw/OP/xQbh+WdKKpFVJa5LWJW1I2pS09U3/mtF/N2J/AAAAAACisJQ189AXCV02XCcX5P/8PB/k//28YOTFIJ/z82z11q2N6wgARpT44f4njfufMu4/gL+r3eleV1zXuSMgICAIgrh/mQCMm33fbNntTvek0azUnbpzUyidnpWK+fNcwfYnfzs8/wOYHp8P/bh3AgAAAAAAAAAAAAAARrUtaSfuTQAAAACYiEm8ThT3GQEAAAAAAAAAAAAAmHbvAQAA///oFUsF") 4.331519154s ago: executing program 1 (id=1026): r0 = fsopen(&(0x7f00000001c0)='pvfs2\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='source\x00', &(0x7f0000000280)='127.0.0.1:/export\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='3', 0x4e) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 4.129489044s ago: executing program 3 (id=1027): socket$inet6_udp(0xa, 0x2, 0x11) socket(0x40000000015, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x33, 0x0, 0x0) 3.681099821s ago: executing program 3 (id=1029): syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x800, 0x2, 0x156}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x107ffffe, 0x200, 0x1006, 0x200015a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f000000, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 3.117602683s ago: executing program 1 (id=1032): socket(0x1e, 0x1, 0x0) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x1, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0}, 0x94) 2.947647237s ago: executing program 4 (id=1035): syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10004, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x3b, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 2.741827275s ago: executing program 3 (id=1036): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0193acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417bb7f527c0bfebec112d57fc69fabb9b31ef97b2147930ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a3332978da70e9050417087c5ae034a735e8b448dd97014043159cbaacebfc912cf05f608e6214c04099fa311b747c37af702d134fb8eec487cfaea91150d1980464ff31cf86e3f3b950b204f6f67810c0826e4e5467c1588de9816bc627fb4662ac5fc8e38f19ec065550e5f9b16f72a91144a2e52ba9f2c6a7e2afbabc533ac731bb7ec51b8c585c2749469da331006ca4d49e136189d21ae50455834b2e75efd81c9d6352e5a814cf002f294475dab27a10d87516e405eff30", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$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") unshare(0x22020600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) linkat(r0, &(0x7f0000000000)='\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1400) socket$nl_route(0x10, 0x3, 0x0) 2.625991326s ago: executing program 2 (id=1038): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) waitid(0x1, r0, 0x0, 0x4, 0x0) 2.109455232s ago: executing program 2 (id=1039): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 1.831640694s ago: executing program 3 (id=1040): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x0, 0x1a, 0x0, 0x1}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet6(0xa, 0x800, 0xfffffffb) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x6, 0xc, 0xa}]}, 0x10) ioctl$TCSETS(r0, 0x89f2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x802, 0xd, "5dee0000005940090000000f00"}) 1.664861843s ago: executing program 4 (id=1041): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.595107505s ago: executing program 6 (id=1042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0xca02}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000004c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r0, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/30, 0x6c}], 0x1000000000000105, 0x402, 0x7c) 1.547507675s ago: executing program 2 (id=1043): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000053c0)='./proc\x00', &(0x7f0000005400)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000005440)='./proc/thread-self/fail-nth\x00', 0x802, 0x165) write(r0, &(0x7f0000005480)='10', 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.094782577s ago: executing program 2 (id=1044): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 926.001936ms ago: executing program 1 (id=1045): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0xd, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) shutdown(r0, 0x1) 916.219239ms ago: executing program 6 (id=1046): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0xa2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {0x95, 0x0, 0x1200}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) 781.021854ms ago: executing program 2 (id=1047): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f00000050c0)=[{{&(0x7f0000000380)={0x2, 0x4e28, @multicast2}, 0x10, &(0x7f0000003680)=[{&(0x7f00000008c0)="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", 0x546}], 0x1}}], 0x1, 0x2000c044) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000001240)="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"/268, 0x10c}], 0x1) 758.754753ms ago: executing program 6 (id=1048): r0 = socket(0x200000000000011, 0x2, 0x8001) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) r2 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000400)={0x11, 0x1c, r3, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(r0, &(0x7f0000000440)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 665.365642ms ago: executing program 1 (id=1049): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x71) write(r0, &(0x7f0000000140)='27', 0x2) futex_waitv(&(0x7f0000000180)=[{0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x2}], 0x3, 0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) 654.680108ms ago: executing program 2 (id=1050): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000300)="00ad", 0x2}], 0x1}}], 0x1, 0x22008805) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100), 0x4) 557.830239ms ago: executing program 6 (id=1051): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x42, 0x184) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f0000000840)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x8, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000940)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./file0/file2\x00', 0x1000) 445.662164ms ago: executing program 1 (id=1052): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@delchain={0x50, 0x64, 0xf31, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff3, 0xffff}, {0xf, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x9, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c4}, 0x20000804) 201.899763ms ago: executing program 6 (id=1053): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x400, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64018101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x7, 0x0, 0xe}}}}}}, 0x0) 32.446291ms ago: executing program 1 (id=1054): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x101401, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101002, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101002, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 17.188046ms ago: executing program 6 (id=1055): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r2, 0x4048aecb, &(0x7f0000000100)) ioctl(r2, 0x4048aecb, &(0x7f0000000100)="070000000000000001000000ffffffff01") ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3 (id=1056): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x4a, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getpid() sendmmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x50008000) ioctl(r2, 0x4048aecb, &(0x7f0000000100)) kernel console output (not intermixed with test programs): 0:50:50:50:50 [ 172.399547][ T8096] loop6: detected capacity change from 0 to 16 [ 172.497147][ T8096] erofs (device loop6): mounted with root inode @ nid 36. [ 173.044881][ T7085] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 173.195935][ T7085] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 173.196918][ T7085] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 173.196949][ T7085] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 173.196974][ T7085] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 173.196997][ T7085] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 173.198198][ T7085] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 173.198219][ T7085] usb 5-1: SerialNumber: syz [ 173.221849][ T8110] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 173.221994][ T8110] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 173.222120][ T8110] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 173.305121][ T8127] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 173.305142][ T8127] device-mapper: raid: Choosing default region size of 4MiB [ 173.312733][ T8127] device-mapper: table: 248:2: raid: Component device(s) too small (-EINVAL) [ 173.312766][ T8127] device-mapper: ioctl: error adding target to table [ 173.455681][ T8110] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 173.455820][ T8110] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 173.455945][ T8110] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 173.548413][ T8119] loop2: detected capacity change from 0 to 32768 [ 173.631016][ T32] audit: type=1800 audit(1792454967.389:55): pid=8119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.691" name="file1" dev="loop2" ino=7 res=0 errno=-22 [ 173.736482][ T31] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 173.736922][ T31] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 173.757979][ T26] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 173.769258][ T31] usb 2-1: USB disconnect, device number 15 [ 173.919536][ T7085] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 174.164537][ T8146] FAULT_INJECTION: forcing a failure. [ 174.164537][ T8146] name failslab, interval 1, probability 0, space 0, times 0 [ 174.164577][ T8146] CPU: 0 UID: 0 PID: 8146 Comm: syz.3.696 Not tainted syzkaller #0 PREEMPT(full) [ 174.164600][ T8146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.164613][ T8146] Call Trace: [ 174.164620][ T8146] [ 174.164628][ T8146] dump_stack_lvl+0xe8/0x150 [ 174.164663][ T8146] should_fail_ex+0x3eb/0x540 [ 174.164707][ T8146] should_failslab+0xa8/0x100 [ 174.164735][ T8146] __kmalloc_noprof+0xf9/0x710 [ 174.164755][ T8146] ? n_hdlc_alloc_buf+0x83/0x230 [ 174.164776][ T8146] ? n_hdlc_alloc_buf+0x83/0x230 [ 174.164805][ T8146] n_hdlc_alloc_buf+0x83/0x230 [ 174.164838][ T8146] n_hdlc_tty_open+0x25a/0x4a0 [ 174.164863][ T8146] tty_ldisc_open+0xa1/0x100 [ 174.164886][ T8146] tty_set_ldisc+0x365/0x540 [ 174.164910][ T8146] tty_ioctl+0xc30/0xde0 [ 174.164932][ T8146] ? __pfx_tty_ioctl+0x10/0x10 [ 174.164953][ T8146] __se_sys_ioctl+0xfc/0x170 [ 174.164980][ T8146] do_syscall_64+0x166/0x520 [ 174.165003][ T8146] ? trace_irq_disable+0x3b/0x140 [ 174.165027][ T8146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.165046][ T8146] ? clear_bhb_loop+0x70/0xc0 [ 174.165070][ T8146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.165088][ T8146] RIP: 0033:0x7f5c06f9e559 [ 174.165107][ T8146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.165124][ T8146] RSP: 002b:00007f5c051f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.165145][ T8146] RAX: ffffffffffffffda RBX: 00007f5c07225fa0 RCX: 00007f5c06f9e559 [ 174.165171][ T8146] RDX: 0000200000000440 RSI: 0000000000005423 RDI: 0000000000000004 [ 174.165184][ T8146] RBP: 00007f5c07035ad8 R08: 0000000000000000 R09: 0000000000000000 [ 174.165197][ T8146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.165208][ T8146] R13: 00007f5c07226038 R14: 00007f5c07225fa0 R15: 00007fff7533bbd8 [ 174.165241][ T8146] [ 174.446959][ T5814] usb 5-1: USB disconnect, device number 13 [ 174.470148][ T5814] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 174.766225][ T8156] FAULT_INJECTION: forcing a failure. [ 174.766225][ T8156] name failslab, interval 1, probability 0, space 0, times 0 [ 174.766254][ T8156] CPU: 0 UID: 0 PID: 8156 Comm: syz.2.698 Not tainted syzkaller #0 PREEMPT(full) [ 174.766276][ T8156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.766288][ T8156] Call Trace: [ 174.766295][ T8156] [ 174.766302][ T8156] dump_stack_lvl+0xe8/0x150 [ 174.766350][ T8156] should_fail_ex+0x3eb/0x540 [ 174.766376][ T8156] should_failslab+0xa8/0x100 [ 174.766404][ T8156] __kmalloc_cache_noprof+0x9e/0x600 [ 174.766423][ T8156] ? __kmalloc_cache_noprof+0x148/0x600 [ 174.766449][ T8156] ? resv_map_alloc+0x88/0x2c0 [ 174.766466][ T8156] ? resv_map_alloc+0x88/0x2c0 [ 174.766490][ T8156] resv_map_alloc+0x88/0x2c0 [ 174.766511][ T8156] hugetlbfs_get_inode+0x5f/0x680 [ 174.766545][ T8156] hugetlb_file_setup+0x21d/0x630 [ 174.766574][ T8156] ksys_mmap_pgoff+0x1ec/0x760 [ 174.766603][ T8156] do_syscall_64+0x166/0x520 [ 174.766625][ T8156] ? trace_irq_disable+0x3b/0x140 [ 174.766648][ T8156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.766668][ T8156] ? clear_bhb_loop+0x70/0xc0 [ 174.766692][ T8156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.766711][ T8156] RIP: 0033:0x7fead079e559 [ 174.766730][ T8156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.766746][ T8156] RSP: 002b:00007fead1739028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 174.766767][ T8156] RAX: ffffffffffffffda RBX: 00007fead0a25fa0 RCX: 00007fead079e559 [ 174.766782][ T8156] RDX: 0000000000000006 RSI: 0000000000c00000 RDI: 0000000000000000 [ 174.766794][ T8156] RBP: 00007fead0835ad8 R08: ffffffffffffffff R09: 0000000000000000 [ 174.766807][ T8156] R10: 000000000004c032 R11: 0000000000000246 R12: 0000000000000000 [ 174.766818][ T8156] R13: 00007fead0a26038 R14: 00007fead0a25fa0 R15: 00007ffd4becaaa8 [ 174.766847][ T8156] [ 175.325758][ T8174] loop6: detected capacity change from 0 to 512 [ 175.391447][ T8174] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.704: iget: bad i_size value: 38620345925642 [ 175.391485][ T8174] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 175.394795][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 175.394818][ C1] EXT4-fs (loop6): initial error at time 1792454969: ext4_orphan_get:1404: inode 15 [ 175.394849][ C1] EXT4-fs (loop6): last error at time 1792454969: ext4_orphan_get:1404: inode 15 [ 175.463277][ T8174] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.704: couldn't read orphan inode 15 (err -117) [ 175.463312][ T8174] loop6: lost filesystem error report for type 5 error -117 [ 175.522456][ T8174] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.716391][ T8174] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.704: bg 0: block 5: invalid block bitmap [ 175.731072][ T8174] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 30 with max blocks 484 with error 28 [ 175.731105][ T8174] EXT4-fs (loop6): This should not happen!! Data will be lost [ 175.731105][ T8174] [ 175.731119][ T8174] EXT4-fs (loop6): Total free blocks count 0 [ 175.731132][ T8174] EXT4-fs (loop6): Free/Dirty block details [ 175.731167][ T8174] EXT4-fs (loop6): free_blocks=0 [ 175.731198][ T8174] EXT4-fs (loop6): dirty_blocks=485 [ 175.731209][ T8174] EXT4-fs (loop6): Block reservation details [ 175.731220][ T8174] EXT4-fs (loop6): i_reserved_data_blocks=485 [ 175.844878][ T7085] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 175.890870][ T144] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 131075 with max blocks 1 with error 28 [ 176.000392][ T7085] usb 5-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 176.001407][ T7085] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.009553][ T7085] usb 5-1: config 0 descriptor?? [ 176.198730][ T8204] loop2: detected capacity change from 0 to 4096 [ 176.211969][ T8204] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 176.257347][ T7085] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 176.524356][ T7085] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 176.524383][ T7085] [drm] Initialized udl on minor 1 [ 176.940436][ T26] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 176.955054][ T26] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 177.090347][ T8243] syzkaller1: entered promiscuous mode [ 177.090370][ T8243] syzkaller1: entered allmulticast mode [ 177.154865][ T31] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 177.318698][ T31] usb 2-1: New USB device found: idVendor=1e7d, idProduct=2d5a, bcdDevice=0.00 [ 177.319944][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.319974][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.320009][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.384003][ T31] usb 2-1: config 0 descriptor?? [ 177.822300][ T31] savu 0003:1E7D:2D5A.000D: invalid report_count 29806 [ 177.822326][ T31] savu 0003:1E7D:2D5A.000D: item 0 2 1 9 parsing failed [ 177.822983][ T31] savu 0003:1E7D:2D5A.000D: parse failed [ 177.823051][ T31] savu 0003:1E7D:2D5A.000D: probe with driver savu failed with error -22 [ 177.891035][ T8270] tipc: Started in network mode [ 177.891057][ T8270] tipc: Node identity 4, cluster identity 4711 [ 177.891068][ T8270] tipc: Node number set to 4 [ 177.892734][ T8270] tipc: Enabled bearer , priority 0 [ 177.970427][ T8272] FAULT_INJECTION: forcing a failure. [ 177.970427][ T8272] name failslab, interval 1, probability 0, space 0, times 0 [ 177.970458][ T8272] CPU: 1 UID: 0 PID: 8272 Comm: syz.6.727 Not tainted syzkaller #0 PREEMPT(full) [ 177.970480][ T8272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.970492][ T8272] Call Trace: [ 177.970500][ T8272] [ 177.970508][ T8272] dump_stack_lvl+0xe8/0x150 [ 177.970548][ T8272] should_fail_ex+0x3eb/0x540 [ 177.970577][ T8272] should_failslab+0xa8/0x100 [ 177.970613][ T8272] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 177.970636][ T8272] ? __lock_acquire+0x747/0x2de0 [ 177.970657][ T8272] ? __kernfs_new_node+0xa9/0x980 [ 177.970682][ T8272] ? __kernfs_new_node+0xa9/0x980 [ 177.970714][ T8272] kstrdup+0x42/0x100 [ 177.970744][ T8272] __kernfs_new_node+0xa9/0x980 [ 177.970779][ T8272] ? __pfx___kernfs_new_node+0x10/0x10 [ 177.970803][ T8272] ? lock_acquire+0x115/0x350 [ 177.970825][ T8272] ? kernfs_root+0x1c/0x230 [ 177.970856][ T8272] ? kernfs_root+0x1c/0x230 [ 177.970879][ T8272] ? kernfs_root+0x1c/0x230 [ 177.970901][ T8272] ? kernfs_root+0x1c/0x230 [ 177.970930][ T8272] kernfs_new_node+0xeb/0x140 [ 177.970961][ T8272] kernfs_create_link+0xe3/0x240 [ 177.970985][ T8272] sysfs_do_create_link_sd+0x83/0x110 [ 177.971012][ T8272] device_add_class_symlinks+0x1cf/0x240 [ 177.971044][ T8272] device_add+0x467/0xb80 [ 177.971074][ T8272] device_create+0x269/0x300 [ 177.971110][ T8272] ? __pfx_device_create+0x10/0x10 [ 177.971155][ T8272] bdi_register_va+0x9c/0x740 [ 177.971179][ T8272] super_setup_bdi_name+0xf8/0x210 [ 177.971203][ T8272] ? __pfx_afs_set_super+0x10/0x10 [ 177.971234][ T8272] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 177.971255][ T8272] ? __kasan_kmalloc+0x93/0xb0 [ 177.971280][ T8272] ? __kmalloc_cache_noprof+0x31c/0x600 [ 177.971301][ T8272] ? __kmalloc_cache_noprof+0x148/0x600 [ 177.971320][ T8272] ? afs_get_tree+0x3b9/0x12c0 [ 177.971354][ T8272] afs_get_tree+0xa40/0x12c0 [ 177.971377][ T8272] ? apparmor_capable+0x126/0x170 [ 177.971410][ T8272] vfs_get_tree+0x92/0x2a0 [ 177.971436][ T8272] do_new_mount+0x325/0xb00 [ 177.971462][ T8272] ? __pfx_do_new_mount+0x10/0x10 [ 177.971485][ T8272] ? ns_capable+0x84/0xe0 [ 177.971511][ T8272] ? path_mount+0x647/0x1050 [ 177.971534][ T8272] ? user_path_at+0xd4/0x160 [ 177.971557][ T8272] __se_sys_mount+0x31d/0x420 [ 177.971583][ T8272] ? __pfx___se_sys_mount+0x10/0x10 [ 177.971660][ T8272] ? __x64_sys_mount+0x20/0xc0 [ 177.971685][ T8272] do_syscall_64+0x166/0x520 [ 177.971709][ T8272] ? trace_irq_disable+0x3b/0x140 [ 177.971734][ T8272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.971755][ T8272] ? clear_bhb_loop+0x70/0xc0 [ 177.971780][ T8272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.971799][ T8272] RIP: 0033:0x7fd5dd79e559 [ 177.971818][ T8272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.971835][ T8272] RSP: 002b:00007fd5de664028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 177.971856][ T8272] RAX: ffffffffffffffda RBX: 00007fd5dda25fa0 RCX: 00007fd5dd79e559 [ 177.971871][ T8272] RDX: 0000200000000200 RSI: 0000200000000000 RDI: 0000000000000000 [ 177.971884][ T8272] RBP: 00007fd5dd835ad8 R08: 0000200000000040 R09: 0000000000000000 [ 177.971898][ T8272] R10: 0000000000004080 R11: 0000000000000246 R12: 0000000000000000 [ 177.971911][ T8272] R13: 00007fd5dda26038 R14: 00007fd5dda25fa0 R15: 00007ffec2597308 [ 177.971945][ T8272] [ 178.119334][ T2253] usb 2-1: USB disconnect, device number 16 [ 178.849340][ T8287] loop6: detected capacity change from 0 to 40427 [ 178.869188][ T8287] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 178.869215][ T8287] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 178.896458][ T8287] F2FS-fs (loop6): invalid crc value [ 179.022116][ T8287] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 179.044029][ T8287] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 179.044058][ T8287] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 179.185019][ T127] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 179.297518][ T8300] loop2: detected capacity change from 0 to 8 [ 179.335718][ T127] usb 2-1: Using ep0 maxpacket: 32 [ 179.337547][ T127] usb 2-1: New USB device found: idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 179.339172][ T127] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 179.339195][ T127] usb 2-1: config 2 has no interface number 0 [ 179.339235][ T127] usb 2-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 179.339259][ T127] usb 2-1: config 2 interface 88 has no altsetting 0 [ 179.341239][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 179.341260][ T127] usb 2-1: Product: syz [ 179.341274][ T127] usb 2-1: Manufacturer: syz [ 179.341288][ T127] usb 2-1: SerialNumber: syz [ 179.419435][ T8296] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 179.630912][ T8296] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 180.455745][ T4926] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 180.704163][ T127] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 180.704396][ T127] asix 2-1:2.88: probe with driver asix failed with error -71 [ 180.743759][ T127] usb 2-1: USB disconnect, device number 17 [ 181.069692][ T8384] loop6: detected capacity change from 0 to 128 [ 181.090494][ T32] audit: type=1800 audit(1792454974.859:56): pid=8384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.752" name="file1" dev="loop6" ino=118 res=0 errno=-22 [ 181.289847][ T8388] loop3: detected capacity change from 0 to 8192 [ 181.291857][ T127] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 181.318190][ T32] audit: type=1800 audit(1792454975.089:57): pid=8388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.754" name="bus" dev="loop3" ino=119 res=0 errno=-22 [ 181.465480][ T127] usb 3-1: New USB device found: idVendor=17ef, idProduct=6047, bcdDevice=0.00 [ 181.466486][ T127] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 181.466515][ T127] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.466537][ T127] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.466561][ T127] usb 3-1: config 0 interface 0 has no altsetting 0 [ 181.466591][ T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.472341][ T127] usb 3-1: config 0 descriptor?? [ 181.577737][ T7085] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 181.578169][ T7085] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 181.634358][ T7085] usb 5-1: USB disconnect, device number 14 [ 181.634495][ T7080] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 181.643522][ T7080] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 181.643705][ T7080] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 181.705144][ T8399] FAULT_INJECTION: forcing a failure. [ 181.705144][ T8399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.705177][ T8399] CPU: 1 UID: 0 PID: 8399 Comm: syz.6.756 Not tainted syzkaller #0 PREEMPT(full) [ 181.705200][ T8399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.705212][ T8399] Call Trace: [ 181.705220][ T8399] [ 181.705229][ T8399] dump_stack_lvl+0xe8/0x150 [ 181.705262][ T8399] should_fail_ex+0x3eb/0x540 [ 181.705288][ T8399] set_fd_set+0x3a/0xa0 [ 181.705325][ T8399] core_sys_select+0x9c1/0xb40 [ 181.705371][ T8399] ? __pfx_core_sys_select+0x10/0x10 [ 181.705424][ T8399] ? __pfx_set_user_sigmask+0x10/0x10 [ 181.705451][ T8399] ? __fget_files+0x2a/0x420 [ 181.705477][ T8399] __se_sys_pselect6+0x267/0x320 [ 181.705512][ T8399] ? __pfx___se_sys_pselect6+0x10/0x10 [ 181.705549][ T8399] ? __x64_sys_pselect6+0x21/0xf0 [ 181.705580][ T8399] do_syscall_64+0x166/0x520 [ 181.705603][ T8399] ? trace_irq_disable+0x3b/0x140 [ 181.705628][ T8399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.705647][ T8399] ? clear_bhb_loop+0x70/0xc0 [ 181.705671][ T8399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.705690][ T8399] RIP: 0033:0x7fd5dd79e559 [ 181.705709][ T8399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.705725][ T8399] RSP: 002b:00007fd5de664028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 181.705745][ T8399] RAX: ffffffffffffffda RBX: 00007fd5dda25fa0 RCX: 00007fd5dd79e559 [ 181.705758][ T8399] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 181.705771][ T8399] RBP: 00007fd5dd835ad8 R08: 0000200000000280 R09: 0000000000000000 [ 181.705783][ T8399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.705794][ T8399] R13: 00007fd5dda26038 R14: 00007fd5dda25fa0 R15: 00007ffec2597308 [ 181.705825][ T8399] [ 181.960688][ T127] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0 [ 181.960733][ T127] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0 [ 181.960760][ T127] lenovo 0003:17EF:6047.000E: unbalanced collection at end of report description [ 181.961520][ T127] lenovo 0003:17EF:6047.000E: hid_parse failed [ 181.961585][ T127] lenovo 0003:17EF:6047.000E: probe with driver lenovo failed with error -22 [ 182.032357][ T8404] pimreg: entered allmulticast mode [ 182.042583][ T8407] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.053686][ T8402] pimreg: left allmulticast mode [ 182.169179][ T7085] usb 3-1: USB disconnect, device number 10 [ 182.217607][ T8413] loop1: detected capacity change from 0 to 1024 [ 182.234552][ T8413] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 182.245849][ T127] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 182.301030][ T8413] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #3: block 2: comm syz.1.763: lblock 2 mapped to illegal pblock 2 (length 1) [ 182.301071][ T8413] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 182.303661][ T8413] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 182.303738][ T8413] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #3: block 48: comm syz.1.763: lblock 0 mapped to illegal pblock 48 (length 1) [ 182.303769][ T8413] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 182.304778][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 182.304796][ C0] EXT4-fs (loop1): initial error at time 1792454976: ext4_map_blocks:867: inode 3: block 2 [ 182.304827][ C0] EXT4-fs (loop1): last error at time 1792454976: ext4_map_blocks:867: inode 3: block 48 [ 182.308343][ T8413] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 182.308363][ T8413] EXT4-fs error (device loop1): ext4_acquire_dquot:7120: comm syz.1.763: Failed to acquire dquot type 0 [ 182.308384][ T8413] loop1: lost filesystem error report for type 5 error -117 [ 182.322660][ T8413] EXT4-fs error (device loop1) in ext4_reserve_inode_write:7453: Corrupt filesystem [ 182.322687][ T8413] loop1: lost filesystem error report for type 5 error -117 [ 182.349630][ T8413] EXT4-fs error (device loop1): ext4_evict_inode:336: inode #11: comm syz.1.763: mark_inode_dirty error [ 182.349668][ T8413] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 182.366439][ T8413] EXT4-fs warning (device loop1): ext4_evict_inode:339: couldn't mark inode dirty (err -117) [ 182.366544][ T8413] EXT4-fs (loop1): 1 orphan inode deleted [ 182.377620][ T8413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.386064][ T1125] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 182.446441][ T1125] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 182.446488][ T1125] EXT4-fs error (device loop1): ext4_release_dquot:7156: comm kworker/u8:9: Failed to release dquot type 0 [ 182.526780][ T5605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.531434][ T5605] EXT4-fs error (device loop1): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 182.531464][ T5605] loop1: lost filesystem error report for type 5 error -117 [ 182.541159][ T8420] kvm: user requested TSC rate below hardware speed [ 182.541600][ T8420] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 182.568727][ T5605] EXT4-fs error (device loop1) in ext4_reserve_inode_write:7453: Corrupt filesystem [ 182.568753][ T5605] loop1: lost filesystem error report for type 5 error -117 [ 182.569472][ T5605] EXT4-fs error (device loop1): ext4_quota_off:7404: inode #3: comm syz-executor: mark_inode_dirty error [ 182.569497][ T5605] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 182.569872][ T5605] EXT4-fs error (device loop1): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 182.569896][ T5605] loop1: lost filesystem error report for type 5 error -117 [ 182.664926][ T127] usb 4-1: Using ep0 maxpacket: 32 [ 182.665683][ T127] usb 4-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 182.668866][ T127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.668895][ T127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.668932][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.671968][ T127] usb 4-1: config 0 descriptor?? [ 182.735571][ T127] hub 4-1:0.0: USB hub found [ 182.848663][ T8429] FAULT_INJECTION: forcing a failure. [ 182.848663][ T8429] name failslab, interval 1, probability 0, space 0, times 0 [ 182.848724][ T8429] CPU: 1 UID: 0 PID: 8429 Comm: syz.2.769 Not tainted syzkaller #0 PREEMPT(full) [ 182.848747][ T8429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.848759][ T8429] Call Trace: [ 182.848766][ T8429] [ 182.848775][ T8429] dump_stack_lvl+0xe8/0x150 [ 182.848807][ T8429] should_fail_ex+0x3eb/0x540 [ 182.848836][ T8429] should_failslab+0xa8/0x100 [ 182.848863][ T8429] __kmalloc_cache_noprof+0x9e/0x600 [ 182.848885][ T8429] ? ramfs_init_fs_context+0x4f/0xe0 [ 182.848910][ T8429] ? ramfs_init_fs_context+0x4f/0xe0 [ 182.848942][ T8429] ramfs_init_fs_context+0x4f/0xe0 [ 182.848969][ T8429] alloc_fs_context+0x99e/0xd00 [ 182.849003][ T8429] __se_sys_fsopen+0x118/0x370 [ 182.849033][ T8429] do_syscall_64+0x166/0x520 [ 182.849057][ T8429] ? trace_irq_disable+0x3b/0x140 [ 182.849080][ T8429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.849108][ T8429] ? clear_bhb_loop+0x70/0xc0 [ 182.849133][ T8429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.849152][ T8429] RIP: 0033:0x7fead079e559 [ 182.849170][ T8429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.849188][ T8429] RSP: 002b:00007fead1739028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 182.849209][ T8429] RAX: ffffffffffffffda RBX: 00007fead0a25fa0 RCX: 00007fead079e559 [ 182.849224][ T8429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 182.849236][ T8429] RBP: 00007fead0835ad8 R08: 0000000000000000 R09: 0000000000000000 [ 182.849248][ T8429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.849260][ T8429] R13: 00007fead0a26038 R14: 00007fead0a25fa0 R15: 00007ffd4becaaa8 [ 182.849292][ T8429] [ 182.926813][ T127] hub 4-1:0.0: 1 port detected [ 182.929386][ T32] audit: type=1326 audit(1792454976.699:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8430 comm="syz.1.770" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe74bf9e559 code=0x0 [ 183.087751][ T8433] loop4: detected capacity change from 0 to 4096 [ 183.135192][ T8434] md: could not open device unknown-block(1,0). [ 183.146160][ T8433] NILFS (loop4): invalid segment: Checksum error in segment payload [ 183.146184][ T8433] NILFS (loop4): trying rollback from an earlier position [ 183.211676][ T8433] NILFS (loop4): recovery complete [ 183.227250][ T8439] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.470824][ T8438] loop2: detected capacity change from 0 to 40427 [ 183.495346][ T8438] F2FS-fs (loop2): build fault injection rate: 174 [ 183.495372][ T8438] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 183.499030][ T8438] F2FS-fs (loop2): invalid crc value [ 183.524422][ T127] hub 4-1:0.0: activate --> -90 [ 183.742019][ T7080] usb 4-1: USB disconnect, device number 9 [ 183.744516][ T144] usb 4-1: Failed to suspend device, error -19 [ 183.802860][ T8438] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 183.872525][ T8438] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 184.024110][ T8438] F2FS-fs (loop2): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_cache+0x4ef/0x8f0 [ 184.024158][ T8438] F2FS-fs (loop2): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0] [ 184.201685][ T8449] loop6: detected capacity change from 0 to 32768 [ 184.211949][ T8449] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.775 (8449) [ 184.239565][ T8449] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 184.239599][ T8449] BTRFS info (device loop6): using crc32c checksum algorithm [ 184.389293][ T8449] BTRFS info (device loop6): enabling ssd optimizations [ 184.389322][ T8449] BTRFS info (device loop6): turning on async discard [ 184.389338][ T8449] BTRFS info (device loop6): enabling free space tree [ 184.437871][ T5604] syz-executor: attempt to access beyond end of device [ 184.437871][ T5604] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 184.440603][ T5604] CPU: 1 UID: 0 PID: 5604 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 184.440632][ T5604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.440644][ T5604] Call Trace: [ 184.440652][ T5604] [ 184.440661][ T5604] dump_stack_lvl+0xe8/0x150 [ 184.440692][ T5604] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 184.440718][ T5604] f2fs_write_end_bio+0x118e/0x15d0 [ 184.440762][ T5604] __submit_merged_bio+0x258/0x6a0 [ 184.440782][ T5604] ? rcu_is_watching+0x16/0xb0 [ 184.440813][ T5604] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 184.440837][ T5604] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 184.440882][ T5604] f2fs_write_data_pages+0x2a13/0x36e0 [ 184.440942][ T5604] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 184.440979][ T5604] ? is_bpf_text_address+0x292/0x2b0 [ 184.441006][ T5604] ? is_bpf_text_address+0x26/0x2b0 [ 184.441060][ T5604] ? stack_trace_save+0xa9/0x100 [ 184.441081][ T5604] ? __pfx_stack_trace_save+0x10/0x10 [ 184.441121][ T5604] ? lockdep_unlock+0x5c/0xd0 [ 184.441138][ T5604] ? __lock_acquire+0x1511/0x2de0 [ 184.441186][ T5604] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 184.441211][ T5604] do_writepages+0x338/0x560 [ 184.441253][ T5604] ? do_raw_spin_unlock+0xf5/0x200 [ 184.441285][ T5604] filemap_fdatawrite+0x1e9/0x2f0 [ 184.441315][ T5604] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 184.441389][ T5604] ? do_raw_spin_unlock+0xf5/0x200 [ 184.441420][ T5604] f2fs_sync_dirty_inodes+0x471/0x970 [ 184.441462][ T5604] f2fs_write_checkpoint+0x860/0x24d0 [ 184.441530][ T5604] kill_f2fs_super+0x2dc/0x700 [ 184.441559][ T5604] ? rcu_do_enqueue+0x616/0x870 [ 184.441580][ T5604] ? lockdep_hardirqs_on+0x7b/0x110 [ 184.441603][ T5604] ? __pfx_kill_f2fs_super+0x10/0x10 [ 184.441644][ T5604] ? __pfx_call_rcu+0x10/0x10 [ 184.441676][ T5604] ? shrinker_free+0x2a7/0x3b0 [ 184.441706][ T5604] deactivate_locked_super+0xbe/0x110 [ 184.441726][ T5604] cleanup_mnt+0x204/0x2a0 [ 184.441752][ T5604] task_work_run+0x1d9/0x260 [ 184.441776][ T5604] ? __pfx_task_work_run+0x10/0x10 [ 184.441808][ T5604] exit_to_user_mode_loop+0x204/0x770 [ 184.441831][ T5604] ? rcu_is_watching+0x16/0xb0 [ 184.441860][ T5604] do_syscall_64+0x328/0x520 [ 184.441883][ T5604] ? trace_irq_disable+0x3b/0x140 [ 184.441905][ T5604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.441924][ T5604] ? clear_bhb_loop+0x70/0xc0 [ 184.441947][ T5604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.441965][ T5604] RIP: 0033:0x7fead079f797 [ 184.441984][ T5604] Code: a2 c7 05 5c 7f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 184.442000][ T5604] RSP: 002b:00007ffd4bec9d18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 184.442020][ T5604] RAX: 0000000000000000 RBX: 00007fead0834f1b RCX: 00007fead079f797 [ 184.442034][ T5604] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4bec9dd0 [ 184.442046][ T5604] RBP: 00007ffd4bec9dd0 R08: 00007ffd4becadd0 R09: 00000000ffffffff [ 184.442058][ T5604] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd4becae60 [ 184.442070][ T5604] R13: 00007fead0834f1b R14: 000000000002cfce R15: 00007ffd4becaea0 [ 184.442103][ T5604] [ 184.442201][ T5604] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 184.496012][ T8449] BTRFS info (device loop6 state M): use zstd compression, level 15 [ 184.539351][ T8477] netlink: 7 bytes leftover after parsing attributes in process `syz.3.780'. [ 184.985690][ T8484] pim6reg1: entered promiscuous mode [ 184.985713][ T8484] pim6reg1: entered allmulticast mode [ 185.026260][ T7781] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 185.870462][ T8519] loop2: detected capacity change from 0 to 512 [ 185.967864][ T8519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.967984][ T8519] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.078843][ T8525] ªªªªª»: renamed from dummy0 (while UP) [ 186.078998][ T8525] FAULT_INJECTION: forcing a failure. [ 186.078998][ T8525] name failslab, interval 1, probability 0, space 0, times 0 [ 186.079022][ T8525] CPU: 0 UID: 0 PID: 8525 Comm: syz.1.794 Not tainted syzkaller #0 PREEMPT(full) [ 186.079044][ T8525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 186.079057][ T8525] Call Trace: [ 186.079065][ T8525] [ 186.079073][ T8525] dump_stack_lvl+0xe8/0x150 [ 186.079107][ T8525] should_fail_ex+0x3eb/0x540 [ 186.079133][ T8525] should_failslab+0xa8/0x100 [ 186.079177][ T8525] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 186.079199][ T8525] ? kernfs_root+0x1c/0x230 [ 186.079223][ T8525] ? kernfs_rename_ns+0x6c/0x9e0 [ 186.079251][ T8525] ? kernfs_rename_ns+0x6c/0x9e0 [ 186.079286][ T8525] kstrdup+0x42/0x100 [ 186.079314][ T8525] kernfs_rename_ns+0x6c/0x9e0 [ 186.079357][ T8525] ? _raw_read_unlock_irqrestore+0x30/0x80 [ 186.079383][ T8525] ? _raw_read_unlock_irqrestore+0x4c/0x80 [ 186.079434][ T8525] sysfs_rename_dir_ns+0x6d/0x90 [ 186.079463][ T8525] kobject_rename+0x3a2/0x500 [ 186.079502][ T8525] ? __pfx_kobject_rename+0x10/0x10 [ 186.079544][ T8525] ? sysfs_rename_link_ns+0x178/0x1b0 [ 186.079573][ T8525] device_rename+0x15d/0x210 [ 186.079606][ T8525] netif_change_name+0x27a/0x970 [ 186.079632][ T8525] ? dev_change_name+0x101/0x220 [ 186.079654][ T8525] ? __pfx___mutex_lock+0x10/0x10 [ 186.079683][ T8525] ? __pfx_netif_change_name+0x10/0x10 [ 186.079705][ T8525] ? __dev_get_by_name+0xe5/0x130 [ 186.079736][ T8525] dev_change_name+0x101/0x220 [ 186.079761][ T8525] dev_ioctl+0x5ec/0x1150 [ 186.079802][ T8525] sock_do_ioctl+0x23e/0x320 [ 186.079834][ T8525] ? __pfx_sock_do_ioctl+0x10/0x10 [ 186.079859][ T8525] ? do_futex+0x458/0x4e0 [ 186.079904][ T8525] sock_ioctl+0x57a/0x7e0 [ 186.079939][ T8525] ? __fget_files+0x2a/0x420 [ 186.079958][ T8525] ? __pfx_sock_ioctl+0x10/0x10 [ 186.080000][ T8525] ? __fget_files+0x2a/0x420 [ 186.080024][ T8525] ? __fget_files+0x2a/0x420 [ 186.080047][ T8525] ? bpf_lsm_file_ioctl+0x9/0x20 [ 186.080070][ T8525] ? __pfx_sock_ioctl+0x10/0x10 [ 186.080094][ T8525] __se_sys_ioctl+0xfc/0x170 [ 186.080123][ T8525] do_syscall_64+0x166/0x520 [ 186.080147][ T8525] ? trace_irq_disable+0x3b/0x140 [ 186.080170][ T8525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.080190][ T8525] ? clear_bhb_loop+0x70/0xc0 [ 186.080227][ T8525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.080262][ T8525] RIP: 0033:0x7fe74bf9e559 [ 186.080281][ T8525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.080297][ T8525] RSP: 002b:00007fe74ce30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.080318][ T8525] RAX: ffffffffffffffda RBX: 00007fe74c225fa0 RCX: 00007fe74bf9e559 [ 186.080332][ T8525] RDX: 0000200000000340 RSI: 0000000000008923 RDI: 0000000000000005 [ 186.080345][ T8525] RBP: 00007fe74c035ad8 R08: 0000000000000000 R09: 0000000000000000 [ 186.080356][ T8525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.080367][ T8525] R13: 00007fe74c226038 R14: 00007fe74c225fa0 R15: 00007ffe06affd08 [ 186.080400][ T8525] [ 186.421167][ T8536] FAULT_INJECTION: forcing a failure. [ 186.421167][ T8536] name failslab, interval 1, probability 0, space 0, times 0 [ 186.421200][ T8536] CPU: 1 UID: 0 PID: 8536 Comm: syz.4.796 Not tainted syzkaller #0 PREEMPT(full) [ 186.421221][ T8536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 186.421231][ T8536] Call Trace: [ 186.421239][ T8536] [ 186.421247][ T8536] dump_stack_lvl+0xe8/0x150 [ 186.421278][ T8536] should_fail_ex+0x3eb/0x540 [ 186.421304][ T8536] should_failslab+0xa8/0x100 [ 186.421330][ T8536] __kmalloc_noprof+0xf9/0x710 [ 186.421348][ T8536] ? __pfx___futex_wait+0x10/0x10 [ 186.421368][ T8536] ? iovec_from_user+0x87/0x250 [ 186.421387][ T8536] ? iovec_from_user+0x87/0x250 [ 186.421409][ T8536] iovec_from_user+0x87/0x250 [ 186.421432][ T8536] __import_iovec+0x15e/0x7e0 [ 186.421460][ T8536] import_iovec+0x73/0xa0 [ 186.421483][ T8536] vfs_writev+0x1cf/0x990 [ 186.421518][ T8536] ? __pfx_vfs_writev+0x10/0x10 [ 186.421561][ T8536] ? __fget_files+0x3a2/0x420 [ 186.421585][ T8536] ? __fget_files+0x2a/0x420 [ 186.421608][ T8536] ? fdget+0x1ac/0x250 [ 186.421629][ T8536] __se_sys_pwritev2+0x177/0x2a0 [ 186.421653][ T8536] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 186.421683][ T8536] ? __x64_sys_pwritev2+0x20/0xc0 [ 186.421709][ T8536] do_syscall_64+0x166/0x520 [ 186.421740][ T8536] ? trace_irq_disable+0x3b/0x140 [ 186.421762][ T8536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.421781][ T8536] ? clear_bhb_loop+0x70/0xc0 [ 186.421803][ T8536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.421821][ T8536] RIP: 0033:0x7f20e3d9e559 [ 186.421838][ T8536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.421854][ T8536] RSP: 002b:00007f20e4d3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 186.421872][ T8536] RAX: ffffffffffffffda RBX: 00007f20e4025fa0 RCX: 00007f20e3d9e559 [ 186.421884][ T8536] RDX: 000000000000001c RSI: 00002000000002c0 RDI: 0000000000000003 [ 186.421896][ T8536] RBP: 00007f20e3e35ad8 R08: 0000000000000000 R09: 0000000000000022 [ 186.421907][ T8536] R10: 0000000000000a00 R11: 0000000000000246 R12: 0000000000000000 [ 186.421917][ T8536] R13: 00007f20e4026038 R14: 00007f20e4025fa0 R15: 00007fff3db74ee8 [ 186.421948][ T8536] [ 186.756987][ T5604] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.093555][ T8556] device-mapper: table: 248:1: snapshot: Cannot get origin device (-ENOENT) [ 187.093584][ T8556] device-mapper: ioctl: error adding target to table [ 187.512093][ T8582] syz_tun: entered allmulticast mode [ 187.526205][ T8581] syz_tun: left allmulticast mode [ 187.654652][ T8587] loop2: detected capacity change from 0 to 128 [ 187.707073][ T8587] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 187.707553][ T8587] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.873472][ T5604] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.258630][ T8609] FAULT_INJECTION: forcing a failure. [ 188.258630][ T8609] name fail_futex, interval 1, probability 0, space 0, times 1 [ 188.258663][ T8609] CPU: 1 UID: 0 PID: 8609 Comm: syz.3.824 Not tainted syzkaller #0 PREEMPT(full) [ 188.258685][ T8609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.258703][ T8609] Call Trace: [ 188.258710][ T8609] [ 188.258718][ T8609] dump_stack_lvl+0xe8/0x150 [ 188.258753][ T8609] should_fail_ex+0x3eb/0x540 [ 188.258780][ T8609] futex_lock_pi_atomic+0xc0/0xae0 [ 188.258811][ T8609] futex_lock_pi+0x30a/0xab0 [ 188.258843][ T8609] ? __pfx_futex_lock_pi+0x10/0x10 [ 188.258894][ T8609] ? __pfx_futex_wake_mark+0x10/0x10 [ 188.258938][ T8609] do_futex+0x330/0x4e0 [ 188.258971][ T8609] ? __pfx_do_futex+0x10/0x10 [ 188.258997][ T8609] ? __fget_files+0x3a2/0x420 [ 188.259017][ T8609] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 188.259049][ T8609] __se_sys_futex+0x3a8/0x450 [ 188.259084][ T8609] ? __pfx___se_sys_futex+0x10/0x10 [ 188.259112][ T8609] ? rcu_is_watching+0x16/0xb0 [ 188.259144][ T8609] ? __x64_sys_futex+0x21/0xf0 [ 188.259175][ T8609] do_syscall_64+0x166/0x520 [ 188.259198][ T8609] ? trace_irq_disable+0x3b/0x140 [ 188.259220][ T8609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.259238][ T8609] ? clear_bhb_loop+0x70/0xc0 [ 188.259260][ T8609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.259278][ T8609] RIP: 0033:0x7f5c06f9e559 [ 188.259294][ T8609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.259311][ T8609] RSP: 002b:00007f5c051f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 188.259331][ T8609] RAX: ffffffffffffffda RBX: 00007f5c07225fa0 RCX: 00007f5c06f9e559 [ 188.259345][ T8609] RDX: 0000000000000004 RSI: 0000000000000086 RDI: 0000200000000500 [ 188.259357][ T8609] RBP: 00007f5c07035ad8 R08: 0000000000000000 R09: 0000000001000000 [ 188.259370][ T8609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.259382][ T8609] R13: 00007f5c07226038 R14: 00007f5c07225fa0 R15: 00007fff7533bbd8 [ 188.259415][ T8609] [ 188.657635][ T32] audit: type=1326 audit(1792454982.429:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.6.826" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5dd79e559 code=0x0 [ 188.756621][ T32] audit: type=1326 audit(1792454982.529:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.3.832" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c06f9e559 code=0x0 [ 188.834018][ T8635] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 188.865240][ T8635] md: could not open device unknown-block(1,0). [ 189.051647][ T8644] loop1: detected capacity change from 0 to 4096 [ 189.063850][ T8644] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 189.093122][ T8644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.145603][ T8644] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.309669][ T8650] FAULT_INJECTION: forcing a failure. [ 189.309669][ T8650] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 189.309703][ T8650] CPU: 1 UID: 0 PID: 8650 Comm: syz.1.838 Not tainted syzkaller #0 PREEMPT(full) [ 189.309726][ T8650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.309739][ T8650] Call Trace: [ 189.309747][ T8650] [ 189.309756][ T8650] dump_stack_lvl+0xe8/0x150 [ 189.309791][ T8650] should_fail_ex+0x3eb/0x540 [ 189.309818][ T8650] prepare_alloc_pages+0x21e/0x5f0 [ 189.309848][ T8650] __alloc_frozen_pages_noprof+0x17c/0x410 [ 189.309876][ T8650] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 189.309908][ T8650] ? policy_nodemask+0x2cc/0x8e0 [ 189.309940][ T8650] alloc_pages_mpol+0x21e/0x390 [ 189.309971][ T8650] folio_alloc_mpol_noprof+0x39/0x160 [ 189.310001][ T8650] shmem_alloc_and_add_folio+0x43e/0xf60 [ 189.310024][ T8650] ? filemap_get_entry+0xcd/0x3f0 [ 189.310055][ T8650] ? __futex_wait+0x3c7/0x470 [ 189.310076][ T8650] ? __pfx_filemap_get_entry+0x10/0x10 [ 189.310098][ T8650] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 189.310125][ T8650] ? shmem_allowable_huge_orders+0x34c/0x6c0 [ 189.310154][ T8650] shmem_get_folio_gfp+0x594/0x1330 [ 189.310193][ T8650] shmem_fallocate+0x996/0xf10 [ 189.310235][ T8650] ? __pfx_shmem_fallocate+0x10/0x10 [ 189.310260][ T8650] ? lock_acquire+0x115/0x350 [ 189.310303][ T8650] vfs_fallocate+0x65a/0x7e0 [ 189.310325][ T8650] ? __fget_files+0x2a/0x420 [ 189.310351][ T8650] ? __pfx_vfs_fallocate+0x10/0x10 [ 189.310372][ T8650] ? __fget_files+0x2a/0x420 [ 189.310396][ T8650] ? fdget+0x1ac/0x250 [ 189.310418][ T8650] __x64_sys_fallocate+0xbf/0x110 [ 189.310445][ T8650] do_syscall_64+0x166/0x520 [ 189.310469][ T8650] ? trace_irq_disable+0x3b/0x140 [ 189.310492][ T8650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.310520][ T8650] ? clear_bhb_loop+0x70/0xc0 [ 189.310545][ T8650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.310565][ T8650] RIP: 0033:0x7fe74bf9e559 [ 189.310584][ T8650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.310600][ T8650] RSP: 002b:00007fe74ce30028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 189.310621][ T8650] RAX: ffffffffffffffda RBX: 00007fe74c225fa0 RCX: 00007fe74bf9e559 [ 189.310636][ T8650] RDX: 0000000000800657 RSI: 0000000000000000 RDI: 0000000000000004 [ 189.310648][ T8650] RBP: 00007fe74c035ad8 R08: 0000000000000000 R09: 0000000000000000 [ 189.310661][ T8650] R10: 00000000040000b7 R11: 0000000000000246 R12: 0000000000000000 [ 189.310673][ T8650] R13: 00007fe74c226038 R14: 00007fe74c225fa0 R15: 00007ffe06affd08 [ 189.310707][ T8650] [ 189.348945][ T8641] loop2: detected capacity change from 0 to 32768 [ 189.446184][ T8641] loop2: p1 p3 < > [ 189.644167][ T8656] blktrace: Concurrent blktraces are not allowed on loop2 [ 189.828952][ T8665] FAULT_INJECTION: forcing a failure. [ 189.828952][ T8665] name failslab, interval 1, probability 0, space 0, times 0 [ 189.828983][ T8665] CPU: 0 UID: 0 PID: 8665 Comm: syz.1.844 Not tainted syzkaller #0 PREEMPT(full) [ 189.829006][ T8665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.829018][ T8665] Call Trace: [ 189.829025][ T8665] [ 189.829033][ T8665] dump_stack_lvl+0xe8/0x150 [ 189.829067][ T8665] should_fail_ex+0x3eb/0x540 [ 189.829093][ T8665] should_failslab+0xa8/0x100 [ 189.829118][ T8665] ? __pfx_mqueue_fill_super+0x10/0x10 [ 189.829147][ T8665] __kmalloc_cache_noprof+0x9e/0x600 [ 189.829168][ T8665] ? sget_fc+0x78f/0x1a60 [ 189.829185][ T8665] ? sget_fc+0x78f/0x1a60 [ 189.829206][ T8665] ? __pfx_mqueue_fill_super+0x10/0x10 [ 189.829232][ T8665] sget_fc+0x78f/0x1a60 [ 189.829261][ T8665] ? __pfx_set_anon_super_fc+0x10/0x10 [ 189.829285][ T8665] ? __pfx_sget_fc+0x10/0x10 [ 189.829303][ T8665] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 189.829325][ T8665] ? __kmalloc_cache_noprof+0x148/0x600 [ 189.829352][ T8665] ? __pfx_mqueue_fill_super+0x10/0x10 [ 189.829384][ T8665] get_tree_nodev+0x2a/0x150 [ 189.829409][ T8665] vfs_get_tree+0x92/0x2a0 [ 189.829435][ T8665] fc_mount_longterm+0x1c/0x100 [ 189.829463][ T8665] mq_init_ns+0x508/0x770 [ 189.829499][ T8665] copy_ipcs+0x460/0x6c0 [ 189.829533][ T8665] create_new_namespaces+0x210/0x6b0 [ 189.829561][ T8665] ? security_capable+0x7e/0x2c0 [ 189.829586][ T8665] unshare_nsproxy_namespaces+0x144/0x190 [ 189.829614][ T8665] ksys_unshare+0x532/0x890 [ 189.829643][ T8665] ? __pfx_ksys_unshare+0x10/0x10 [ 189.829672][ T8665] ? rcu_is_watching+0x16/0xb0 [ 189.829706][ T8665] __x64_sys_unshare+0x38/0x50 [ 189.829729][ T8665] do_syscall_64+0x166/0x520 [ 189.829752][ T8665] ? trace_irq_disable+0x3b/0x140 [ 189.829774][ T8665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.829794][ T8665] ? clear_bhb_loop+0x70/0xc0 [ 189.829816][ T8665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.829834][ T8665] RIP: 0033:0x7fe74bf9e559 [ 189.829852][ T8665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.829867][ T8665] RSP: 002b:00007fe74ce30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 189.829887][ T8665] RAX: ffffffffffffffda RBX: 00007fe74c225fa0 RCX: 00007fe74bf9e559 [ 189.829900][ T8665] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 189.829911][ T8665] RBP: 00007fe74c035ad8 R08: 0000000000000000 R09: 0000000000000000 [ 189.829923][ T8665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.829933][ T8665] R13: 00007fe74c226038 R14: 00007fe74c225fa0 R15: 00007ffe06affd08 [ 189.829959][ T8665] [ 189.930277][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.845'. [ 190.161177][ T8671] loop1: detected capacity change from 0 to 128 [ 190.214362][ T8671] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 190.219257][ T8671] ext4 filesystem being mounted at /154/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 190.306151][ T6574] udevd[6574]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 190.311679][ T5621] udevd[5621]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 190.358155][ T8676] loop2: detected capacity change from 0 to 512 [ 190.384131][ T8676] EXT4-fs error (device loop2): ext4_iget_extra_inode:6027: inode #15: comm syz.2.849: corrupted in-inode xattr: invalid ea_ino [ 190.384164][ T8676] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 190.384515][ T8676] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.849: couldn't read orphan inode 15 (err -117) [ 190.384541][ T8676] loop2: lost filesystem error report for type 5 error -117 [ 190.384794][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 190.384812][ C1] EXT4-fs (loop2): initial error at time 1792454984: ext4_iget_extra_inode:6027: inode 15 [ 190.384840][ C1] EXT4-fs (loop2): last error at time 1792454984: ext4_orphan_get:1409 [ 190.463526][ T8676] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.550277][ T5604] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.576577][ T5605] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 190.660868][ T8686] syzkaller1: entered promiscuous mode [ 190.660891][ T8686] syzkaller1: entered allmulticast mode [ 190.677944][ T8683] netlink: 'syz.3.852': attribute type 4 has an invalid length. [ 190.677964][ T8683] netlink: 'syz.3.852': attribute type 10 has an invalid length. [ 190.677978][ T8683] netlink: 152 bytes leftover after parsing attributes in process `syz.3.852'. [ 190.678093][ T8683] bond_slave_0: mtu greater than device maximum [ 190.877439][ T32] audit: type=1326 audit(1792454984.649:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8695 comm="syz.3.858" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c06f9e559 code=0x0 [ 191.445541][ T8718] loop6: detected capacity change from 0 to 164 [ 191.673683][ T8693] loop1: detected capacity change from 0 to 32768 [ 191.677343][ T8693] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.854 (8693) [ 191.726243][ T8693] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 191.726276][ T8693] BTRFS info (device loop1): using crc32c checksum algorithm [ 191.867537][ T8693] BTRFS info (device loop1): disabling tree log [ 191.867564][ T8693] BTRFS info (device loop1): turning on async discard [ 191.867580][ T8693] BTRFS info (device loop1): enabling free space tree [ 191.867596][ T8693] BTRFS info (device loop1): force zlib compression, level 3 [ 191.867614][ T8693] BTRFS info (device loop1): max_inline set to 0 [ 192.071955][ T8746] 9pnet: p9_errstr2errno: server reported unknown error  [ 192.186320][ T7085] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 192.228129][ T5605] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 192.258384][ T8752] loop3: detected capacity change from 0 to 128 [ 192.311176][ T8752] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.314278][ T8752] ext4 filesystem being mounted at /167/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 192.360046][ T7085] usb 7-1: New USB device found: idVendor=0738, idProduct=1709, bcdDevice=0.00 [ 192.364002][ T7085] usb 7-1: too many endpoints for config 0 interface 0 altsetting 5: 66, using maximum allowed: 30 [ 192.364043][ T7085] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.364067][ T7085] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.364087][ T7085] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 192.364109][ T7085] usb 7-1: config 0 interface 0 has no altsetting 0 [ 192.364140][ T7085] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.374605][ T7085] usb 7-1: config 0 descriptor?? [ 192.426979][ T8752] syz.3.867 (pid 8752) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 192.800920][ T8760] netlink: 'syz.1.868': attribute type 1 has an invalid length. [ 192.863285][ T7085] saitek 0003:0738:1709.000F: unknown main item tag 0x0 [ 192.863322][ T7085] saitek 0003:0738:1709.000F: unknown main item tag 0x0 [ 192.863348][ T7085] saitek 0003:0738:1709.000F: unknown main item tag 0x0 [ 192.863374][ T7085] saitek 0003:0738:1709.000F: unknown main item tag 0x0 [ 192.863399][ T7085] saitek 0003:0738:1709.000F: unknown main item tag 0x0 [ 192.863425][ T7085] saitek 0003:0738:1709.000F: unknown main item tag 0x0 [ 192.863450][ T7085] saitek 0003:0738:1709.000F: unknown main item tag 0x0 [ 192.863475][ T7085] saitek 0003:0738:1709.000F: unknown main item tag 0x0 [ 192.863500][ T7085] saitek 0003:0738:1709.000F: unknown main item tag 0x0 [ 192.863525][ T7085] saitek 0003:0738:1709.000F: unknown main item tag 0x0 [ 192.872206][ T7085] saitek 0003:0738:1709.000F: unbalanced collection at end of report description [ 192.872994][ T7085] saitek 0003:0738:1709.000F: parse failed [ 192.873091][ T7085] saitek 0003:0738:1709.000F: probe with driver saitek failed with error -22 [ 193.020711][ T8752] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-lib)" [ 193.133294][ T31] usb 7-1: USB disconnect, device number 2 [ 193.276689][ T5617] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.321276][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.321331][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.414446][ T8820] netlink: 'syz.1.888': attribute type 1 has an invalid length. [ 194.513742][ T8820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.829454][ T31] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 194.974971][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 194.975813][ T31] usb 2-1: New USB device found: idVendor=1b1c, idProduct=0c10, bcdDevice=0.00 [ 194.977017][ T31] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 194.977046][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 194.977079][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.980593][ T31] usb 2-1: config 0 descriptor?? [ 195.050183][ T8845] FAULT_INJECTION: forcing a failure. [ 195.050183][ T8845] name failslab, interval 1, probability 0, space 0, times 0 [ 195.050203][ T8845] CPU: 0 UID: 0 PID: 8845 Comm: syz.6.898 Not tainted syzkaller #0 PREEMPT(full) [ 195.050217][ T8845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.050228][ T8845] Call Trace: [ 195.050237][ T8845] [ 195.050245][ T8845] dump_stack_lvl+0xe8/0x150 [ 195.050279][ T8845] should_fail_ex+0x3eb/0x540 [ 195.050306][ T8845] should_failslab+0xa8/0x100 [ 195.050323][ T8845] __kmalloc_noprof+0xf9/0x710 [ 195.050336][ T8845] ? x509_key_preparse+0x21c/0x6d0 [ 195.050346][ T8845] ? x509_key_preparse+0x21c/0x6d0 [ 195.050361][ T8845] x509_key_preparse+0x21c/0x6d0 [ 195.050383][ T8845] asymmetric_key_preparse+0xb9/0x1b0 [ 195.050412][ T8845] __key_create_or_update+0x34f/0xa70 [ 195.050444][ T8845] ? __pfx___key_create_or_update+0x10/0x10 [ 195.050476][ T8845] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 195.050498][ T8845] key_create_or_update+0x42/0x60 [ 195.050511][ T8845] __se_sys_add_key+0x349/0x420 [ 195.050534][ T8845] ? __pfx___se_sys_add_key+0x10/0x10 [ 195.050570][ T8845] ? __x64_sys_add_key+0x20/0xc0 [ 195.050597][ T8845] do_syscall_64+0x166/0x520 [ 195.050616][ T8845] ? trace_irq_disable+0x3b/0x140 [ 195.050629][ T8845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.050640][ T8845] ? clear_bhb_loop+0x70/0xc0 [ 195.050652][ T8845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.050663][ T8845] RIP: 0033:0x7fd5dd79e559 [ 195.050677][ T8845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.050694][ T8845] RSP: 002b:00007fd5de664028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 195.050714][ T8845] RAX: ffffffffffffffda RBX: 00007fd5dda25fa0 RCX: 00007fd5dd79e559 [ 195.050728][ T8845] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 195.050741][ T8845] RBP: 00007fd5dd835ad8 R08: ffffffffffffffff R09: 0000000000000000 [ 195.050754][ T8845] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 195.050762][ T8845] R13: 00007fd5dda26038 R14: 00007fd5dda25fa0 R15: 00007ffec2597308 [ 195.050780][ T8845] [ 195.075085][ T7080] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 195.198931][ T8832] loop4: detected capacity change from 0 to 32768 [ 195.228293][ T7080] usb 3-1: New USB device found: idVendor=0489, idProduct=e057, bcdDevice=0.00 [ 195.230651][ T7080] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.230674][ T7080] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 195.230718][ T7080] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.238325][ T7080] usb 3-1: config 0 descriptor?? [ 195.263957][ T8832] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 195.391056][ T8855] FAULT_INJECTION: forcing a failure. [ 195.391056][ T8855] name failslab, interval 1, probability 0, space 0, times 0 [ 195.391090][ T8855] CPU: 1 UID: 0 PID: 8855 Comm: syz.6.899 Not tainted syzkaller #0 PREEMPT(full) [ 195.391112][ T8855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.391124][ T8855] Call Trace: [ 195.391131][ T8855] [ 195.391139][ T8855] dump_stack_lvl+0xe8/0x150 [ 195.391173][ T8855] should_fail_ex+0x3eb/0x540 [ 195.391199][ T8855] should_failslab+0xa8/0x100 [ 195.391229][ T8855] __kmalloc_noprof+0xf9/0x710 [ 195.391248][ T8855] ? __might_fault+0xaf/0x130 [ 195.391275][ T8855] ? anon_vma_name_alloc+0x40/0xf0 [ 195.391294][ T8855] ? anon_vma_name_alloc+0x40/0xf0 [ 195.391321][ T8855] anon_vma_name_alloc+0x40/0xf0 [ 195.391344][ T8855] set_anon_vma_name+0x1e4/0x460 [ 195.391369][ T8855] ? __pfx_set_anon_vma_name+0x10/0x10 [ 195.391394][ T8855] ? cap_task_prctl+0x1bb/0xa40 [ 195.391428][ T8855] ? static_key_count+0x41/0x70 [ 195.391456][ T8855] ? security_task_prctl+0x163/0x190 [ 195.391484][ T8855] __se_sys_prctl+0x139d/0x1900 [ 195.391510][ T8855] ? __pfx___se_sys_prctl+0x10/0x10 [ 195.391536][ T8855] ? __x64_sys_prctl+0x20/0xc0 [ 195.391555][ T8855] do_syscall_64+0x166/0x520 [ 195.391578][ T8855] ? trace_irq_disable+0x3b/0x140 [ 195.391601][ T8855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.391620][ T8855] ? clear_bhb_loop+0x70/0xc0 [ 195.391643][ T8855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.391663][ T8855] RIP: 0033:0x7fd5dd79e559 [ 195.391682][ T8855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.391699][ T8855] RSP: 002b:00007fd5de664028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 195.391721][ T8855] RAX: ffffffffffffffda RBX: 00007fd5dda25fa0 RCX: 00007fd5dd79e559 [ 195.391735][ T8855] RDX: 0000200000ffc000 RSI: 0000000000000000 RDI: 0000000053564d41 [ 195.391748][ T8855] RBP: 00007fd5dd835ad8 R08: 0000200000000140 R09: 0000000000000000 [ 195.391761][ T8855] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000000 [ 195.391774][ T8855] R13: 00007fd5dda26038 R14: 00007fd5dda25fa0 R15: 00007ffec2597308 [ 195.391806][ T8855] [ 195.392703][ T8832] XFS (loop4): Ending clean mount [ 195.540788][ T8832] XFS (loop4): Quotacheck needed: Please wait. [ 195.645284][ T31] corsair-cpro 0003:1B1C:0C10.0010: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 195.674582][ T8857] loop6: detected capacity change from 0 to 4096 [ 195.676701][ T8857] EXT4-fs: Ignoring removed bh option [ 195.676722][ T8857] EXT4-fs: Ignoring removed orlov option [ 195.711485][ T8857] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.715679][ T8838] loop2: detected capacity change from 0 to 164 [ 195.752241][ T8832] XFS (loop4): Quotacheck: Done. [ 195.844083][ T8838] Unsupported NM flag settings (240) [ 195.867887][ T7781] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.933173][ T7080] Bluetooth: Can't get state to change to load configuration err [ 195.933192][ T7080] Bluetooth: Loading sysconfig file failed [ 195.933218][ T7080] ath3k 3-1:0.0: probe with driver ath3k failed with error -16 [ 195.946833][ T7080] usb 3-1: USB disconnect, device number 11 [ 195.963652][ T5606] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 196.019825][ T31] corsair-cpro 0003:1B1C:0C10.0010: probe with driver corsair-cpro failed with error -71 [ 196.050196][ T31] usb 2-1: USB disconnect, device number 18 [ 196.081412][ T32] audit: type=1326 audit(1792454989.859:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8864 comm="syz.3.903" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c06f9e559 code=0x0 [ 196.198281][ T8867] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 196.248886][ T8867] md: could not open device unknown-block(1,0). [ 196.366635][ T32] audit: type=1326 audit(1792454990.139:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.4.905" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f20e3d9e559 code=0x0 [ 196.384705][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 196.384866][ T5620] Bluetooth: hci0: command 0x0406 tx timeout [ 196.391732][ T4926] Bluetooth: hci3: command 0x0406 tx timeout [ 196.789528][ T8891] FAULT_INJECTION: forcing a failure. [ 196.789528][ T8891] name failslab, interval 1, probability 0, space 0, times 0 [ 196.789551][ T8891] CPU: 0 UID: 0 PID: 8891 Comm: syz.6.911 Not tainted syzkaller #0 PREEMPT(full) [ 196.789565][ T8891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 196.789571][ T8891] Call Trace: [ 196.789576][ T8891] [ 196.789581][ T8891] dump_stack_lvl+0xe8/0x150 [ 196.789602][ T8891] should_fail_ex+0x3eb/0x540 [ 196.789619][ T8891] should_failslab+0xa8/0x100 [ 196.789643][ T8891] ? sctp_chunkify+0x5a/0x260 [ 196.789667][ T8891] kmem_cache_alloc_noprof+0x9c/0x600 [ 196.789696][ T8891] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 196.789716][ T8891] ? __alloc_skb+0x27a/0x7a0 [ 196.789733][ T8891] ? sctp_chunkify+0x5a/0x260 [ 196.789764][ T8891] sctp_chunkify+0x5a/0x260 [ 196.789793][ T8891] _sctp_make_chunk+0x122/0x290 [ 196.789818][ T8891] sctp_make_init+0x5f0/0xe60 [ 196.789830][ T8891] ? is_bpf_text_address+0x292/0x2b0 [ 196.789852][ T8891] ? __pfx_sctp_make_init+0x10/0x10 [ 196.789881][ T8891] ? stack_trace_save+0xa9/0x100 [ 196.789898][ T8891] ? __pfx_stack_trace_save+0x10/0x10 [ 196.789923][ T8891] sctp_sf_do_prm_asoc+0xcf/0x3f0 [ 196.789943][ T8891] sctp_do_sm+0x239/0x5dd0 [ 196.789963][ T8891] ? kasan_save_track+0x3e/0x80 [ 196.789983][ T8891] ? __pfx_sctp_pname+0x10/0x10 [ 196.790006][ T8891] ? __kmalloc_cache_noprof+0x31c/0x600 [ 196.790020][ T8891] ? sctp_stream_init_ext+0x57/0x180 [ 196.790032][ T8891] ? sctp_sendmsg+0x1bb5/0x2d00 [ 196.790046][ T8891] ? ___sys_sendmsg+0x2a5/0x360 [ 196.790059][ T8891] ? __sys_sendmmsg+0x273/0x4d0 [ 196.790071][ T8891] ? do_syscall_64+0x166/0x520 [ 196.790084][ T8891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.790098][ T8891] ? __pfx_sctp_do_sm+0x10/0x10 [ 196.790130][ T8891] ? __sk_mem_raise_allocated+0x292/0x1250 [ 196.790144][ T8891] ? __genradix_ptr+0x1e1/0x220 [ 196.790162][ T8891] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 196.790181][ T8891] sctp_sendmsg_to_asoc+0x1097/0x1a40 [ 196.790196][ T8891] ? __asan_memcpy+0x40/0x70 [ 196.790210][ T8891] ? sctp_assoc_add_peer+0xd57/0x1430 [ 196.790234][ T8891] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 196.790249][ T8891] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 196.790268][ T8891] ? __local_bh_enable_ip+0xd6/0x140 [ 196.790280][ T8891] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 196.790292][ T8891] ? security_sctp_bind_connect+0x7e/0x2c0 [ 196.790309][ T8891] sctp_sendmsg+0x1bb5/0x2d00 [ 196.790332][ T8891] ? __pfx_sctp_sendmsg+0x10/0x10 [ 196.790350][ T8891] ? __lock_acquire+0x747/0x2de0 [ 196.790372][ T8891] ? aa_sock_msg_perm+0xf5/0x210 [ 196.790383][ T8891] ? sock_rps_record_flow+0x19/0x350 [ 196.790397][ T8891] ? inet_sendmsg+0x298/0x320 [ 196.790410][ T8891] ? __pfx_inet_sendmsg+0x10/0x10 [ 196.790421][ T8891] sock_sendmsg_nosec+0x10f/0x190 [ 196.790438][ T8891] ____sys_sendmsg+0x54e/0x850 [ 196.790463][ T8891] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.790494][ T8891] ? import_iovec+0x73/0xa0 [ 196.790522][ T8891] ___sys_sendmsg+0x2a5/0x360 [ 196.790544][ T8891] ? __lock_acquire+0x747/0x2de0 [ 196.790558][ T8891] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.790576][ T8891] ? __pfx_futex_wake_mark+0x10/0x10 [ 196.790603][ T8891] ? __fget_files+0x3a2/0x420 [ 196.790614][ T8891] ? __fget_files+0x2a/0x420 [ 196.790630][ T8891] __sys_sendmmsg+0x273/0x4d0 [ 196.790646][ T8891] ? __pfx___sys_sendmmsg+0x10/0x10 [ 196.790658][ T8891] ? do_futex+0x3e7/0x4e0 [ 196.790687][ T8891] ? __pfx___se_sys_futex+0x10/0x10 [ 196.790701][ T8891] ? rcu_is_watching+0x16/0xb0 [ 196.790720][ T8891] __x64_sys_sendmmsg+0xa0/0xc0 [ 196.790743][ T8891] do_syscall_64+0x166/0x520 [ 196.790766][ T8891] ? trace_irq_disable+0x3b/0x140 [ 196.790788][ T8891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.790807][ T8891] ? clear_bhb_loop+0x70/0xc0 [ 196.790820][ T8891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.790836][ T8891] RIP: 0033:0x7fd5dd79e559 [ 196.790854][ T8891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.790879][ T8891] RSP: 002b:00007fd5de664028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 196.790900][ T8891] RAX: ffffffffffffffda RBX: 00007fd5dda25fa0 RCX: 00007fd5dd79e559 [ 196.790914][ T8891] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000004 [ 196.790920][ T8891] RBP: 00007fd5dd835ad8 R08: 0000000000000000 R09: 0000000000000000 [ 196.790927][ T8891] R10: 0000000004008040 R11: 0000000000000246 R12: 0000000000000000 [ 196.790934][ T8891] R13: 00007fd5dda26038 R14: 00007fd5dda25fa0 R15: 00007ffec2597308 [ 196.790951][ T8891] [ 196.915912][ T31] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 197.084890][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 197.087516][ T31] usb 2-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00 [ 197.088658][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.088680][ T31] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 197.088712][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.106581][ T5814] page_pool_release_retry() stalled pool shutdown: id 29, 1 inflight 60 sec [ 197.107533][ T31] usb 2-1: config 0 descriptor?? [ 197.369822][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.915'. [ 197.422735][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.915'. [ 197.440949][ T8902] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 197.738153][ T8913] ip_tables: iptables: counters copy to user failed while replacing table [ 198.065198][ T32] audit: type=1326 audit(1792454991.839:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8927 comm="syz.2.923" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fead079e559 code=0x0 [ 198.147650][ T8910] loop3: detected capacity change from 0 to 32768 [ 198.174224][ T32] audit: type=1800 audit(1792454991.939:65): pid=8910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.919" name="file1" dev="loop3" ino=4 res=0 errno=-22 [ 198.190492][ T8931] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 198.228408][ T8931] md: could not open device unknown-block(1,0). [ 199.098706][ T8950] netlink: 'syz.6.931': attribute type 1 has an invalid length. [ 199.326701][ T8952] bond1: (slave geneve2): making interface the new active one [ 199.328606][ T8952] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 199.401584][ T8954] batman_adv: batadv0: Adding interface: gretap1 [ 199.401608][ T8954] batman_adv: batadv0: Interface activated: gretap1 [ 199.432923][ T1115] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 199.455736][ T1115] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 199.457637][ T144] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 199.457678][ T144] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 199.580042][ T144] IPVS: starting estimator thread 0... [ 199.648151][ T5814] usb 2-1: USB disconnect, device number 19 [ 199.685782][ T8957] IPVS: using max 29 ests per chain, 69600 per kthread [ 200.091789][ T32] audit: type=1326 audit(1792454993.859:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8972 comm="syz.2.941" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fead079e559 code=0x0 [ 200.240273][ T8980] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 200.286128][ T8980] md: could not open device unknown-block(1,0). [ 201.198044][ T5814] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 201.356997][ T5814] usb 5-1: unable to get BOS descriptor or descriptor too short [ 201.359035][ T5814] usb 5-1: not running at top speed; connect to a high speed hub [ 201.359070][ T5814] usb 5-1: New USB device found: idVendor=0582, idProduct=004c, bcdDevice=0.40 [ 201.363924][ T5814] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 201.366637][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.366660][ T5814] usb 5-1: Product: syz [ 201.366673][ T5814] usb 5-1: Manufacturer: syz [ 201.366685][ T5814] usb 5-1: SerialNumber: syz [ 201.868181][ T127] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 201.889112][ T5814] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 202.014120][ T5814] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 202.014147][ T5814] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 202.351460][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.957'. [ 202.422829][ T5814] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 202.422858][ T5814] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 202.619285][ T32] audit: type=1326 audit(1792454996.389:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.1.960" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe74bf9e559 code=0x0 [ 202.623976][ T5814] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 202.701294][ T9029] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 202.732697][ T127] usb 3-1: unable to get BOS descriptor or descriptor too short [ 202.732974][ T127] usb 3-1: New USB device found: idVendor=00e1, idProduct=0000, bcdDevice=0.00 [ 202.732996][ T127] usb 3-1: no configurations [ 202.733003][ T127] usb 3-1: can't read configurations, error -22 [ 202.754962][ T9029] md: could not open device unknown-block(1,0). [ 202.787754][ T5814] usb 5-1: USB disconnect, device number 15 [ 202.869822][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.864894][ T127] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 204.014862][ T127] usb 3-1: Using ep0 maxpacket: 32 [ 204.015579][ T127] usb 3-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 204.016612][ T127] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 204.016635][ T127] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 204.016654][ T127] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 204.016700][ T127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 204.016720][ T127] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 204.016741][ T127] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 204.016778][ T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.021979][ T127] usb 3-1: config 0 descriptor?? [ 204.111526][ T9000] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.280237][ T127] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 204.401448][ T32] audit: type=1326 audit(1792454998.159:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9063 comm="syz.6.974" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5dd79e559 code=0x0 [ 204.486768][ T9067] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 204.515587][ T9067] md: could not open device unknown-block(1,0). [ 204.517930][ T9066] loop1: detected capacity change from 0 to 4096 [ 204.629881][ T9066] ntfs3(loop1): ino=19, mi_enum_attr [ 204.629917][ T9066] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 204.920687][ T127] usb 3-1: USB disconnect, device number 14 [ 204.956086][ T127] usblp0: removed [ 205.544889][ T7077] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 205.584944][ T7078] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 205.696509][ T7077] usb 4-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 205.698511][ T7077] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 205.698536][ T7077] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.698554][ T7077] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 205.698595][ T7077] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.703283][ T7077] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 205.703306][ T7077] usb 4-1: Product: syz [ 205.703320][ T7077] usb 4-1: Manufacturer: syz [ 205.721977][ T7077] cdc_wdm 4-1:1.0: skipping garbage [ 205.721997][ T7077] cdc_wdm 4-1:1.0: skipping garbage [ 205.737594][ T7077] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 205.737632][ T7077] cdc_wdm 4-1:1.0: Unknown control protocol [ 205.805217][ T7078] usb 7-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 205.808092][ T7078] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.808128][ T7078] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 205.811680][ T7078] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.811703][ T7078] usb 7-1: Product: syz [ 205.811716][ T7078] usb 7-1: Manufacturer: syz [ 205.811730][ T7078] usb 7-1: SerialNumber: syz [ 205.930214][ T9099] loop2: detected capacity change from 0 to 2048 [ 205.945749][ T7077] usb 4-1: USB disconnect, device number 10 [ 205.958102][ T9099] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.074556][ T9088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.086344][ T9088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.114063][ T7078] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 206.146683][ T7078] usb 7-1: USB disconnect, device number 3 [ 206.408600][ T7077] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 206.448449][ T9108] gre1: entered promiscuous mode [ 206.513396][ T9112] FAULT_INJECTION: forcing a failure. [ 206.513396][ T9112] name fail_futex, interval 1, probability 0, space 0, times 0 [ 206.513427][ T9112] CPU: 0 UID: 0 PID: 9112 Comm: syz.2.992 Not tainted syzkaller #0 PREEMPT(full) [ 206.513447][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 206.513458][ T9112] Call Trace: [ 206.513465][ T9112] [ 206.513473][ T9112] dump_stack_lvl+0xe8/0x150 [ 206.513506][ T9112] should_fail_ex+0x3eb/0x540 [ 206.513532][ T9112] get_futex_key+0x1ab/0x1410 [ 206.513565][ T9112] ? __schedule+0x1b5d/0x5b40 [ 206.513588][ T9112] ? __pfx_get_futex_key+0x10/0x10 [ 206.513617][ T9112] ? update_se+0x90/0x1080 [ 206.513647][ T9112] futex_wait_setup+0x4a/0x590 [ 206.513674][ T9112] ? __futex_wait+0xdb/0x470 [ 206.513700][ T9112] __futex_wait+0x175/0x470 [ 206.513730][ T9112] ? __pfx___futex_wait+0x10/0x10 [ 206.513753][ T9112] ? __pfx_futex_wake_mark+0x10/0x10 [ 206.513778][ T9112] ? try_to_wake_up+0x90a/0x14e0 [ 206.513815][ T9112] futex_wait+0x121/0x390 [ 206.513839][ T9112] ? __pfx_futex_wait+0x10/0x10 [ 206.513872][ T9112] ? capable+0x83/0xe0 [ 206.513897][ T9112] do_futex+0x3e7/0x4e0 [ 206.513926][ T9112] ? __pfx_do_futex+0x10/0x10 [ 206.513953][ T9112] ? __pfx_tty_mode_ioctl+0x10/0x10 [ 206.513979][ T9112] __se_sys_futex+0x3a8/0x450 [ 206.514011][ T9112] ? __pfx___se_sys_futex+0x10/0x10 [ 206.514036][ T9112] ? rcu_is_watching+0x16/0xb0 [ 206.514064][ T9112] ? __x64_sys_futex+0x21/0xf0 [ 206.514094][ T9112] do_syscall_64+0x166/0x520 [ 206.514120][ T9112] ? trace_irq_disable+0x3b/0x140 [ 206.514142][ T9112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.514160][ T9112] ? clear_bhb_loop+0x70/0xc0 [ 206.514182][ T9112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.514198][ T9112] RIP: 0033:0x7fead079e559 [ 206.514217][ T9112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.514233][ T9112] RSP: 002b:00007fead17390e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 206.514253][ T9112] RAX: ffffffffffffffda RBX: 00007fead0a25fa8 RCX: 00007fead079e559 [ 206.514267][ T9112] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fead0a25fa8 [ 206.514279][ T9112] RBP: 00007fead0a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 206.514302][ T9112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.514313][ T9112] R13: 00007fead0a26038 R14: 00007ffd4beca9c0 R15: 00007ffd4becaaa8 [ 206.514344][ T9112] [ 206.594822][ T7077] usb 4-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 206.638573][ T7077] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 206.638602][ T7077] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.638618][ T7077] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 206.638661][ T7077] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.641250][ T32] audit: type=1326 audit(1792455000.409:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.4.993" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f20e3d9e559 code=0x0 [ 206.644927][ T7078] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 206.722345][ T7077] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 206.722383][ T7077] usb 4-1: Product: syz [ 206.722398][ T7077] usb 4-1: Manufacturer: syz [ 206.767592][ T9119] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 206.781527][ T7077] cdc_wdm 4-1:1.0: skipping garbage [ 206.781548][ T7077] cdc_wdm 4-1:1.0: skipping garbage [ 206.785187][ T7077] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 206.785206][ T7077] cdc_wdm 4-1:1.0: Unknown control protocol [ 206.798801][ T7078] usb 7-1: Using ep0 maxpacket: 8 [ 206.799612][ T7078] usb 7-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 206.860408][ T7078] usb 7-1: config index 0 descriptor too short (expected 301, got 72) [ 206.860437][ T7078] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 206.860485][ T7078] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 206.860508][ T7078] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 206.860530][ T7078] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 206.860553][ T7078] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.860575][ T7078] usb 7-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.860614][ T7078] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.996227][ T9119] md: could not open device unknown-block(1,0). [ 207.227699][ T7078] usb 7-1: usb_control_msg returned -32 [ 207.227744][ T7078] usbtmc 7-1:16.0: can't read capabilities [ 207.227989][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.228177][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.228377][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.228575][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.228772][ C0] usbtmc 7-1:16.0: invalid notification: 11 [ 207.229000][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.229417][ C0] usbtmc 7-1:16.0: invalid notification: 2 [ 207.229640][ C0] usbtmc 7-1:16.0: invalid notification: 5 [ 207.229862][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.230091][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.230308][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.230527][ C0] usbtmc 7-1:16.0: invalid notification: 40 [ 207.230966][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.231186][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.231407][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.231620][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.231828][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.232092][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.232306][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.232527][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.232747][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.232965][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.233177][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.233390][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.233608][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.233819][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.234041][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.234256][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.234471][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.234690][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.234903][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.240567][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.246595][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.252551][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.258662][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.258857][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.264861][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.270836][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.271039][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.271221][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.271402][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.271582][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.271774][ C0] usbtmc 7-1:16.0: invalid notification: 24 [ 207.277861][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.278200][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.284127][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.290082][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.296083][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.301943][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.307999][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.313971][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.320038][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.326057][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.326668][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.332733][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.338854][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.344893][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.345107][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.350998][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.356939][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.362874][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.368820][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.375106][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.375457][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.375671][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.375873][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.376051][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.376235][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.376438][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.376632][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.376831][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.377042][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.382948][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.389198][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.395269][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.401186][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.407117][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.412997][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.418941][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.419142][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.425118][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.431054][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.437023][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.443059][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.449032][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.454983][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.455202][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.455402][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.455610][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.455827][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.456035][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.456245][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.456454][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.456668][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.456875][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.457081][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.457287][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.457494][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.457703][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.457909][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.458114][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.458321][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.458528][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.458739][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.458947][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.459153][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.459361][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.459568][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.459775][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.459980][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.460185][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.460401][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.460608][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.460816][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.461026][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.461231][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.461451][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.463657][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.465400][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.465608][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.465806][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.466004][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.466207][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.466404][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.466605][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.466803][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.467004][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.467207][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.467403][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.467600][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.467796][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.467986][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.468183][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.468389][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.468582][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.468775][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.468968][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.469169][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.469374][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.469587][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.469803][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.469999][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.470196][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.470392][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.470605][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.470803][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.471003][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.471216][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.471413][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.471626][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.471823][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.472015][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.472218][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.472412][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.472605][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.472805][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.473010][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.473215][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.473417][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.473659][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.473998][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.474223][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.474436][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.474630][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.474860][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.475066][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.475265][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.475466][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.477544][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.477914][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.478120][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.478320][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.478525][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.478719][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.478909][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.479114][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.481659][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.481870][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.482065][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.482269][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.482465][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.482660][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.482857][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.483052][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.483240][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.483433][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.483639][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.483830][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.484036][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.484235][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.484429][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.484618][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.484806][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.485024][ C0] usbtmc 7-1:16.0: invalid notification: 0 [ 207.715251][ T7080] usb 7-1: USB disconnect, device number 4 [ 208.007358][ T7080] usb 4-1: USB disconnect, device number 11 [ 208.236523][ T9144] FAULT_INJECTION: forcing a failure. [ 208.236523][ T9144] name failslab, interval 1, probability 0, space 0, times 0 [ 208.236553][ T9144] CPU: 0 UID: 0 PID: 9144 Comm: syz.2.999 Not tainted syzkaller #0 PREEMPT(full) [ 208.236575][ T9144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.236587][ T9144] Call Trace: [ 208.236595][ T9144] [ 208.236603][ T9144] dump_stack_lvl+0xe8/0x150 [ 208.236644][ T9144] should_fail_ex+0x3eb/0x540 [ 208.236670][ T9144] should_failslab+0xa8/0x100 [ 208.236696][ T9144] __kmalloc_cache_node_noprof+0xa5/0x620 [ 208.236719][ T9144] ? __up_read+0x29c/0x930 [ 208.236743][ T9144] ? __get_vm_area_node+0x155/0x2f0 [ 208.236768][ T9144] ? __get_vm_area_node+0x155/0x2f0 [ 208.236799][ T9144] __get_vm_area_node+0x155/0x2f0 [ 208.236830][ T9144] ? xdp_umem_create+0x6dc/0x8b0 [ 208.236852][ T9144] vmap+0x158/0x2f0 [ 208.236877][ T9144] ? xdp_umem_create+0x6dc/0x8b0 [ 208.236901][ T9144] xdp_umem_create+0x6dc/0x8b0 [ 208.236933][ T9144] xsk_setsockopt+0x82f/0x960 [ 208.236957][ T9144] ? __pfx_xsk_setsockopt+0x10/0x10 [ 208.236984][ T9144] ? aa_sock_opt_perm+0x142/0x1e0 [ 208.237009][ T9144] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 208.237029][ T9144] ? __pfx_xsk_setsockopt+0x10/0x10 [ 208.237051][ T9144] do_sock_setsockopt+0x17c/0x1b0 [ 208.237079][ T9144] __x64_sys_setsockopt+0x13d/0x1b0 [ 208.237107][ T9144] do_syscall_64+0x166/0x520 [ 208.237129][ T9144] ? trace_irq_disable+0x3b/0x140 [ 208.237152][ T9144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.237171][ T9144] ? clear_bhb_loop+0x70/0xc0 [ 208.237195][ T9144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.237213][ T9144] RIP: 0033:0x7fead079e559 [ 208.237230][ T9144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.237243][ T9144] RSP: 002b:00007fead1739028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 208.237263][ T9144] RAX: ffffffffffffffda RBX: 00007fead0a25fa0 RCX: 00007fead079e559 [ 208.237277][ T9144] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000005 [ 208.237288][ T9144] RBP: 00007fead0835ad8 R08: 0000000000000020 R09: 0000000000000000 [ 208.237300][ T9144] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 208.237312][ T9144] R13: 00007fead0a26038 R14: 00007fead0a25fa0 R15: 00007ffd4becaaa8 [ 208.237343][ T9144] [ 208.643459][ T9155] overlayfs: failed to resolve './file2': -2 [ 208.697852][ T9159] virt_wifi0 speed is unknown, defaulting to 1000 [ 208.697920][ T9159] virt_wifi0 speed is unknown, defaulting to 1000 [ 208.718413][ T9159] virt_wifi0 speed is unknown, defaulting to 1000 [ 208.722656][ T9159] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 208.722690][ T9159] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 208.722726][ T9159] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 208.823787][ T9159] virt_wifi0 speed is unknown, defaulting to 1000 [ 208.837950][ T9159] virt_wifi0 speed is unknown, defaulting to 1000 [ 208.845392][ T9159] virt_wifi0 speed is unknown, defaulting to 1000 [ 208.851018][ T9159] virt_wifi0 speed is unknown, defaulting to 1000 [ 208.916465][ T9159] virt_wifi0 speed is unknown, defaulting to 1000 [ 209.075539][ T9164] loop1: detected capacity change from 0 to 32768 [ 209.079666][ T9164] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1007 (9164) [ 209.119856][ T9164] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 209.119888][ T9164] BTRFS info (device loop1): using sha256 checksum algorithm [ 209.150171][ T9168] FAULT_INJECTION: forcing a failure. [ 209.150171][ T9168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.150202][ T9168] CPU: 1 UID: 0 PID: 9168 Comm: syz.4.1009 Not tainted syzkaller #0 PREEMPT(full) [ 209.150224][ T9168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 209.150235][ T9168] Call Trace: [ 209.150243][ T9168] [ 209.150250][ T9168] dump_stack_lvl+0xe8/0x150 [ 209.150284][ T9168] should_fail_ex+0x3eb/0x540 [ 209.150312][ T9168] _copy_to_user+0x31/0xb0 [ 209.150338][ T9168] bpf_verifier_vlog+0x3a2/0x900 [ 209.150369][ T9168] ? is_bpf_text_address+0x292/0x2b0 [ 209.150406][ T9168] __btf_verifier_log+0xe2/0x140 [ 209.150425][ T9168] ? unwind_get_return_address+0x4d/0x90 [ 209.150454][ T9168] ? __pfx___btf_verifier_log+0x10/0x10 [ 209.150472][ T9168] ? __sort_r+0x2c3f/0x3530 [ 209.150503][ T9168] __btf_verifier_log_type+0x4fd/0x6a0 [ 209.150535][ T9168] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 209.150567][ T9168] btf_datasec_check_meta+0x40e/0xad0 [ 209.150593][ T9168] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 209.150613][ T9168] ? sort+0xb0/0x100 [ 209.150637][ T9168] btf_check_all_metas+0x344/0xa30 [ 209.150663][ T9168] btf_parse_type_sec+0xf9/0x1a60 [ 209.150691][ T9168] ? __pfx_btf_check_sec_info+0x10/0x10 [ 209.150718][ T9168] ? btf_parse_hdr+0x5f2/0x810 [ 209.150743][ T9168] ? btf_parse_str_sec+0x244/0x2f0 [ 209.150765][ T9168] btf_new_fd+0x3e0/0x8f0 [ 209.150794][ T9168] __sys_bpf+0xda7/0xe00 [ 209.150830][ T9168] ? __pfx___sys_bpf+0x10/0x10 [ 209.150856][ T9168] ? do_futex+0x3e7/0x4e0 [ 209.150914][ T9168] ? rcu_is_watching+0x16/0xb0 [ 209.150952][ T9168] __x64_sys_bpf+0xba/0xd0 [ 209.150981][ T9168] do_syscall_64+0x166/0x520 [ 209.151006][ T9168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.151026][ T9168] ? clear_bhb_loop+0x70/0xc0 [ 209.151060][ T9168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.151079][ T9168] RIP: 0033:0x7f20e3d9e559 [ 209.151097][ T9168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.151114][ T9168] RSP: 002b:00007f20e4d3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 209.151134][ T9168] RAX: ffffffffffffffda RBX: 00007f20e4025fa0 RCX: 00007f20e3d9e559 [ 209.151148][ T9168] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 209.151161][ T9168] RBP: 00007f20e3e35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 209.151173][ T9168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.151186][ T9168] R13: 00007f20e4026038 R14: 00007f20e4025fa0 R15: 00007fff3db74ee8 [ 209.151219][ T9168] [ 209.404988][ T9164] BTRFS info (device loop1): enabling ssd optimizations [ 209.405015][ T9164] BTRFS info (device loop1): turning on async discard [ 209.405030][ T9164] BTRFS info (device loop1): enabling free space tree [ 209.424319][ T9164] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 209.600623][ T9187] loop4: detected capacity change from 0 to 4096 [ 209.606374][ T9187] EXT4-fs: Ignoring removed mblk_io_submit option [ 209.606464][ T9187] EXT4-fs: Ignoring removed orlov option [ 209.624111][ T9187] EXT4-fs (loop4): Test dummy encryption mode enabled [ 209.687127][ T9187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.874949][ T9187] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-lib" [ 210.233777][ T5606] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.068289][ T9218] FAULT_INJECTION: forcing a failure. [ 211.068289][ T9218] name failslab, interval 1, probability 0, space 0, times 0 [ 211.068320][ T9218] CPU: 1 UID: 0 PID: 9218 Comm: syz.4.1020 Not tainted syzkaller #0 PREEMPT(full) [ 211.068342][ T9218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.068354][ T9218] Call Trace: [ 211.068362][ T9218] [ 211.068369][ T9218] dump_stack_lvl+0xe8/0x150 [ 211.068403][ T9218] should_fail_ex+0x3eb/0x540 [ 211.068430][ T9218] should_failslab+0xa8/0x100 [ 211.068456][ T9218] ? radix_tree_node_alloc+0x82/0x3a0 [ 211.068479][ T9218] kmem_cache_alloc_noprof+0x9c/0x600 [ 211.068518][ T9218] ? radix_tree_node_alloc+0x82/0x3a0 [ 211.068540][ T9218] ? kmem_cache_alloc_noprof+0x151/0x600 [ 211.068570][ T9218] ? radix_tree_node_alloc+0x82/0x3a0 [ 211.068601][ T9218] radix_tree_node_alloc+0x82/0x3a0 [ 211.068632][ T9218] idr_get_free+0x28f/0xa10 [ 211.068668][ T9218] idr_alloc_u32+0x18a/0x330 [ 211.068699][ T9218] ? __pfx_idr_alloc_u32+0x10/0x10 [ 211.068728][ T9218] ? net_generic+0x1e/0x240 [ 211.068756][ T9218] ? l2tp_tunnel_register+0x140/0x1570 [ 211.068785][ T9218] l2tp_tunnel_register+0x15a/0x1570 [ 211.068824][ T9218] ? __pfx_l2tp_tunnel_register+0x10/0x10 [ 211.068855][ T9218] ? do_raw_spin_lock+0x12b/0x2f0 [ 211.068887][ T9218] ? pcpu_alloc+0x10/0x310 [ 211.068930][ T9218] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 211.068956][ T9218] ? l2tp_tunnel_create+0x249/0x3e0 [ 211.068981][ T9218] ? l2tp_tunnel_create+0x2d3/0x3e0 [ 211.069010][ T9218] pppol2tp_connect+0x8e3/0x18b0 [ 211.069049][ T9218] ? aa_sk_perm+0x6ff/0x8f0 [ 211.069067][ T9218] ? __pfx_pppol2tp_connect+0x10/0x10 [ 211.069093][ T9218] ? lock_acquire+0x115/0x350 [ 211.069120][ T9218] ? __pfx_aa_sk_perm+0x10/0x10 [ 211.069144][ T9218] ? apparmor_socket_connect+0x13e/0x210 [ 211.069177][ T9218] ? bpf_lsm_socket_connect+0x9/0x20 [ 211.069201][ T9218] __sys_connect+0x316/0x450 [ 211.069225][ T9218] ? __pfx___sys_connect+0x10/0x10 [ 211.069258][ T9218] ? rcu_is_watching+0x16/0xb0 [ 211.069288][ T9218] __x64_sys_connect+0x7a/0x90 [ 211.069308][ T9218] do_syscall_64+0x166/0x520 [ 211.069330][ T9218] ? trace_irq_disable+0x3b/0x140 [ 211.069353][ T9218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.069372][ T9218] ? clear_bhb_loop+0x70/0xc0 [ 211.069396][ T9218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.069415][ T9218] RIP: 0033:0x7f20e3d9e559 [ 211.069432][ T9218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.069448][ T9218] RSP: 002b:00007f20e4d3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 211.069468][ T9218] RAX: ffffffffffffffda RBX: 00007f20e4025fa0 RCX: 00007f20e3d9e559 [ 211.069482][ T9218] RDX: 0000000000000026 RSI: 00002000000002c0 RDI: 0000000000000004 [ 211.069493][ T9218] RBP: 00007f20e3e35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 211.069510][ T9218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.069521][ T9218] R13: 00007f20e4026038 R14: 00007f20e4025fa0 R15: 00007fff3db74ee8 [ 211.069553][ T9218] [ 211.114482][ T9211] FAULT_INJECTION: forcing a failure. [ 211.114482][ T9211] name failslab, interval 1, probability 0, space 0, times 0 [ 211.114564][ T9211] CPU: 1 UID: 0 PID: 9211 Comm: syz.2.1017 Not tainted syzkaller #0 PREEMPT(full) [ 211.114587][ T9211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.114599][ T9211] Call Trace: [ 211.114606][ T9211] [ 211.114615][ T9211] dump_stack_lvl+0xe8/0x150 [ 211.114649][ T9211] should_fail_ex+0x3eb/0x540 [ 211.114677][ T9211] ? __alloc_skb+0x1db/0x7a0 [ 211.114701][ T9211] should_failslab+0xa8/0x100 [ 211.114725][ T9211] ? __alloc_skb+0x1db/0x7a0 [ 211.114741][ T9211] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 211.114768][ T9211] ? __alloc_skb+0x18d/0x7a0 [ 211.114788][ T9211] ? __alloc_skb+0x1db/0x7a0 [ 211.114814][ T9211] __alloc_skb+0x1db/0x7a0 [ 211.114840][ T9211] nfc_genl_device_removed+0x84/0x360 [ 211.114869][ T9211] ? __fsnotify_parent+0x267/0x620 [ 211.114895][ T9211] ? __pfx_nfc_genl_device_removed+0x10/0x10 [ 211.114932][ T9211] nfc_unregister_rfkill+0x32/0x280 [ 211.114961][ T9211] nci_unregister_device+0x46/0x250 [ 211.114996][ T9211] virtual_ncidev_close+0x56/0x90 [ 211.115016][ T9211] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 211.115036][ T9211] __fput+0x408/0xa40 [ 211.115073][ T9211] fput_close_sync+0x11f/0x240 [ 211.115092][ T9211] ? __pfx_fput_close_sync+0x10/0x10 [ 211.115121][ T9211] ? do_raw_spin_unlock+0xf5/0x200 [ 211.115157][ T9211] __se_sys_close+0xa2/0x160 [ 211.115179][ T9211] do_syscall_64+0x166/0x520 [ 211.115201][ T9211] ? trace_irq_disable+0x3b/0x140 [ 211.115224][ T9211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.115244][ T9211] ? clear_bhb_loop+0x70/0xc0 [ 211.115268][ T9211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.115287][ T9211] RIP: 0033:0x7fead079e559 [ 211.115305][ T9211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.115321][ T9211] RSP: 002b:00007fead1739028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 211.115342][ T9211] RAX: ffffffffffffffda RBX: 00007fead0a25fa0 RCX: 00007fead079e559 [ 211.115356][ T9211] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 211.115367][ T9211] RBP: 00007fead0835ad8 R08: 0000000000000000 R09: 0000000000000000 [ 211.115379][ T9211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.115391][ T9211] R13: 00007fead0a26038 R14: 00007fead0a25fa0 R15: 00007ffd4becaaa8 [ 211.115423][ T9211] [ 211.939147][ T9229] FAULT_INJECTION: forcing a failure. [ 211.939147][ T9229] name failslab, interval 1, probability 0, space 0, times 0 [ 211.939177][ T9229] CPU: 1 UID: 0 PID: 9229 Comm: syz.1.1022 Not tainted syzkaller #0 PREEMPT(full) [ 211.939200][ T9229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.939210][ T9229] Call Trace: [ 211.939218][ T9229] [ 211.939226][ T9229] dump_stack_lvl+0xe8/0x150 [ 211.939266][ T9229] should_fail_ex+0x3eb/0x540 [ 211.939292][ T9229] should_failslab+0xa8/0x100 [ 211.939320][ T9229] __kmalloc_cache_noprof+0x9e/0x600 [ 211.939344][ T9229] ? smc_clc_send_proposal+0x15e/0x25f0 [ 211.939372][ T9229] ? smc_clc_send_proposal+0x15e/0x25f0 [ 211.939400][ T9229] smc_clc_send_proposal+0x15e/0x25f0 [ 211.939423][ T9229] ? __pfx_stack_trace_save+0x10/0x10 [ 211.939449][ T9229] ? stack_depot_save_flags+0x33/0x7f0 [ 211.939475][ T9229] ? kasan_save_track+0x4f/0x80 [ 211.939493][ T9229] ? kasan_save_track+0x3e/0x80 [ 211.939511][ T9229] ? __kasan_kmalloc+0x93/0xb0 [ 211.939529][ T9229] ? __kmalloc_cache_noprof+0x31c/0x600 [ 211.939547][ T9229] ? __smc_connect+0x18a2/0x2860 [ 211.939563][ T9229] ? __sys_connect+0x316/0x450 [ 211.939581][ T9229] ? __pfx_smc_clc_send_proposal+0x10/0x10 [ 211.939640][ T9229] ? rcu_is_watching+0x16/0xb0 [ 211.939668][ T9229] ? __kasan_kmalloc+0x93/0xb0 [ 211.939689][ T9229] ? __kmalloc_cache_noprof+0x31c/0x600 [ 211.939706][ T9229] ? __kmalloc_cache_noprof+0x148/0x600 [ 211.939723][ T9229] ? __smc_connect+0x18a2/0x2860 [ 211.939741][ T9229] ? __smc_connect+0x18a2/0x2860 [ 211.939763][ T9229] smc_connect_clc+0x1f/0x70 [ 211.939786][ T9229] __smc_connect+0x18c6/0x2860 [ 211.939819][ T9229] smc_connect+0x85e/0xdb0 [ 211.939846][ T9229] __sys_connect+0x316/0x450 [ 211.939868][ T9229] ? __pfx___sys_connect+0x10/0x10 [ 211.939903][ T9229] ? rcu_is_watching+0x16/0xb0 [ 211.939940][ T9229] __x64_sys_connect+0x7a/0x90 [ 211.939962][ T9229] do_syscall_64+0x166/0x520 [ 211.939987][ T9229] ? trace_irq_disable+0x3b/0x140 [ 211.940011][ T9229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.940031][ T9229] ? clear_bhb_loop+0x70/0xc0 [ 211.940054][ T9229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.940072][ T9229] RIP: 0033:0x7fe74bf9e559 [ 211.940090][ T9229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.940106][ T9229] RSP: 002b:00007fe74ce30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 211.940127][ T9229] RAX: ffffffffffffffda RBX: 00007fe74c225fa0 RCX: 00007fe74bf9e559 [ 211.940139][ T9229] RDX: 000000000000001c RSI: 0000200000001540 RDI: 0000000000000004 [ 211.940150][ T9229] RBP: 00007fe74c035ad8 R08: 0000000000000000 R09: 0000000000000000 [ 211.940162][ T9229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.940172][ T9229] R13: 00007fe74c226038 R14: 00007fe74c225fa0 R15: 00007ffe06affd08 [ 211.940202][ T9229] [ 211.940895][ T9227] device-mapper: ioctl: populate_table: target parameters not NUL-terminated [ 211.966701][ T9190] loop6: detected capacity change from 0 to 32768 [ 212.057296][ T9190] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 212.057316][ T9190] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 212.191428][ T9190] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 5ms [ 212.203202][ T7085] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 212.203221][ T7085] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 212.238201][ T9237] loop3: detected capacity change from 0 to 64 [ 212.487366][ T9241] FAULT_INJECTION: forcing a failure. [ 212.487366][ T9241] name failslab, interval 1, probability 0, space 0, times 0 [ 212.487399][ T9241] CPU: 1 UID: 0 PID: 9241 Comm: syz.1.1026 Not tainted syzkaller #0 PREEMPT(full) [ 212.487421][ T9241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.487433][ T9241] Call Trace: [ 212.487442][ T9241] [ 212.487450][ T9241] dump_stack_lvl+0xe8/0x150 [ 212.487486][ T9241] should_fail_ex+0x3eb/0x540 [ 212.487512][ T9241] ? __alloc_empty_sheaf+0x28/0x40 [ 212.487531][ T9241] should_failslab+0xa8/0x100 [ 212.487559][ T9241] ? __alloc_empty_sheaf+0x28/0x40 [ 212.487575][ T9241] __kmalloc_flags_noprof+0x123/0x790 [ 212.487600][ T9241] ? __alloc_empty_sheaf+0x28/0x40 [ 212.487627][ T9241] __alloc_empty_sheaf+0x28/0x40 [ 212.487644][ T9241] __pcs_replace_empty_main+0x43b/0x6c0 [ 212.487688][ T9241] kmem_cache_alloc_noprof+0x394/0x600 [ 212.487716][ T9241] ? op_alloc+0x2a/0x4f0 [ 212.487738][ T9241] ? kmem_cache_alloc_noprof+0x151/0x600 [ 212.487766][ T9241] ? op_alloc+0x2a/0x4f0 [ 212.487798][ T9241] op_alloc+0x2a/0x4f0 [ 212.487834][ T9241] orangefs_get_tree+0xf6/0xeb0 [ 212.487867][ T9241] ? __pfx_orangefs_get_tree+0x10/0x10 [ 212.487898][ T9241] ? apparmor_capable+0x126/0x170 [ 212.487932][ T9241] vfs_get_tree+0x92/0x2a0 [ 212.487960][ T9241] vfs_cmd_create+0xa2/0x200 [ 212.487991][ T9241] __se_sys_fsconfig+0x6b9/0x810 [ 212.488025][ T9241] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 212.488056][ T9241] ? rcu_is_watching+0x16/0xb0 [ 212.488092][ T9241] ? __x64_sys_fsconfig+0x20/0xc0 [ 212.488123][ T9241] do_syscall_64+0x166/0x520 [ 212.488160][ T9241] ? trace_irq_disable+0x3b/0x140 [ 212.488184][ T9241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.488205][ T9241] ? clear_bhb_loop+0x70/0xc0 [ 212.488230][ T9241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.488250][ T9241] RIP: 0033:0x7fe74bf9e559 [ 212.488269][ T9241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.488286][ T9241] RSP: 002b:00007fe74ce30028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 212.488308][ T9241] RAX: ffffffffffffffda RBX: 00007fe74c225fa0 RCX: 00007fe74bf9e559 [ 212.488323][ T9241] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 212.488335][ T9241] RBP: 00007fe74c035ad8 R08: 0000000000000000 R09: 0000000000000000 [ 212.488348][ T9241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.488360][ T9241] R13: 00007fe74c226038 R14: 00007fe74c225fa0 R15: 00007ffe06affd08 [ 212.488394][ T9241] [ 212.502940][ T7085] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 299ms [ 212.503129][ T7085] gfs2: fsid=syz:syz.0: jid=0: Done [ 212.504321][ T9190] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 212.541224][ T9190] gfs2: fsid=syz:syz.0: can't create quotad thread: -4 [ 213.127022][ T32] audit: type=1326 audit(1792455006.899:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.2.1030" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead079e559 code=0x7ffc0000 [ 213.128099][ T32] audit: type=1326 audit(1792455006.899:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.2.1030" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead079e559 code=0x7ffc0000 [ 213.128842][ T32] audit: type=1326 audit(1792455006.899:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.2.1030" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fead079e559 code=0x7ffc0000 [ 213.129605][ T32] audit: type=1326 audit(1792455006.899:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.2.1030" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead079e559 code=0x7ffc0000 [ 213.130449][ T32] audit: type=1326 audit(1792455006.899:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.2.1030" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead079e559 code=0x7ffc0000 [ 213.130832][ T32] audit: type=1326 audit(1792455006.899:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.2.1030" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fead079e559 code=0x7ffc0000 [ 213.131650][ T32] audit: type=1326 audit(1792455006.899:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.2.1030" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead079e559 code=0x7ffc0000 [ 213.131929][ T32] audit: type=1326 audit(1792455006.899:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.2.1030" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead079e559 code=0x7ffc0000 [ 213.132119][ T32] audit: type=1326 audit(1792455006.899:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.2.1030" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fead079e559 code=0x7ffc0000 [ 213.132957][ T32] audit: type=1326 audit(1792455006.899:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.2.1030" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead079e559 code=0x7ffc0000 [ 213.291908][ T9241] orangefs_mount: mount request failed with -4 [ 213.379797][ T9256] loop6: detected capacity change from 0 to 4096 [ 213.397527][ T9256] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 213.523292][ T9256] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 213.532717][ T9256] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 214.120317][ T9276] loop3: detected capacity change from 0 to 40427 [ 214.122504][ T9276] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 214.122529][ T9276] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 214.221712][ T9276] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 214.238850][ T9276] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 214.238878][ T9276] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 215.140170][ T9294] FAULT_INJECTION: forcing a failure. [ 215.140170][ T9294] name failslab, interval 1, probability 0, space 0, times 0 [ 215.140202][ T9294] CPU: 1 UID: 0 PID: 9294 Comm: syz.2.1043 Not tainted syzkaller #0 PREEMPT(full) [ 215.140224][ T9294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.140237][ T9294] Call Trace: [ 215.140245][ T9294] [ 215.140253][ T9294] dump_stack_lvl+0xe8/0x150 [ 215.140287][ T9294] should_fail_ex+0x3eb/0x540 [ 215.140314][ T9294] should_failslab+0xa8/0x100 [ 215.140343][ T9294] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 215.140376][ T9294] ? __d_alloc+0x37/0x820 [ 215.140396][ T9294] ? __d_alloc+0x37/0x820 [ 215.140424][ T9294] __d_alloc+0x37/0x820 [ 215.140449][ T9294] path_from_stashed+0x35c/0x580 [ 215.140480][ T9294] proc_ns_get_link+0x16b/0x2a0 [ 215.140505][ T9294] ? __pfx_proc_ns_get_link+0x10/0x10 [ 215.140532][ T9294] ? bpf_lsm_inode_follow_link+0x9/0x20 [ 215.140551][ T9294] ? __pfx_proc_ns_get_link+0x10/0x10 [ 215.140572][ T9294] pick_link+0x72a/0xfd0 [ 215.140599][ T9294] step_into_slowpath+0x58a/0x820 [ 215.140621][ T9294] ? __pfx_step_into_slowpath+0x10/0x10 [ 215.140672][ T9294] path_openat+0xa97/0x20f0 [ 215.140714][ T9294] do_file_open+0x23e/0x4a0 [ 215.140743][ T9294] ? __pfx_do_file_open+0x10/0x10 [ 215.140789][ T9294] ? _raw_spin_unlock+0x28/0x50 [ 215.140810][ T9294] ? alloc_fd+0x6af/0x760 [ 215.140843][ T9294] do_sys_openat2+0x115/0x200 [ 215.140871][ T9294] ? __se_sys_futex+0x3a8/0x450 [ 215.140900][ T9294] ? __pfx_do_sys_openat2+0x10/0x10 [ 215.140941][ T9294] ? rcu_is_watching+0x16/0xb0 [ 215.140974][ T9294] __x64_sys_openat+0x138/0x170 [ 215.141009][ T9294] do_syscall_64+0x166/0x520 [ 215.141032][ T9294] ? trace_irq_disable+0x3b/0x140 [ 215.141055][ T9294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.141076][ T9294] ? clear_bhb_loop+0x70/0xc0 [ 215.141099][ T9294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.141118][ T9294] RIP: 0033:0x7fead075ed8e [ 215.141136][ T9294] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 215.141151][ T9294] RSP: 002b:00007fead1738f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 215.141172][ T9294] RAX: ffffffffffffffda RBX: 00007fead17396c0 RCX: 00007fead075ed8e [ 215.141187][ T9294] RDX: 0000000000000000 RSI: 00007fead0835206 RDI: ffffffffffffff9c [ 215.141201][ T9294] RBP: 00007fead0835ad8 R08: 0000000000000000 R09: 0000000000000000 [ 215.141213][ T9294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.141224][ T9294] R13: 00007fead0a26038 R14: 00007fead0a25fa0 R15: 00007ffd4becaaa8 [ 215.141253][ T9294] [ 215.311693][ T7078] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 215.565842][ T7078] usb 5-1: New USB device found: idVendor=1ba6, idProduct=0001, bcdDevice=0.01 [ 215.568264][ T7078] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.568319][ T7078] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.681083][ T7078] as10x_usb: device has been detected [ 215.685432][ T9296] netlink: 'syz.2.1044': attribute type 10 has an invalid length. [ 215.688451][ T7078] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 215.701224][ T9296] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 215.883391][ T7078] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 216.059937][ T9309] FAULT_INJECTION: forcing a failure. [ 216.059937][ T9309] name failslab, interval 1, probability 0, space 0, times 0 [ 216.059970][ T9309] CPU: 0 UID: 0 PID: 9309 Comm: syz.1.1049 Not tainted syzkaller #0 PREEMPT(full) [ 216.059992][ T9309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.060004][ T9309] Call Trace: [ 216.060011][ T9309] [ 216.060020][ T9309] dump_stack_lvl+0xe8/0x150 [ 216.060055][ T9309] should_fail_ex+0x3eb/0x540 [ 216.060089][ T9309] should_failslab+0xa8/0x100 [ 216.060114][ T9309] ? fuse_get_req+0x8e9/0xd40 [ 216.060137][ T9309] kmem_cache_alloc_noprof+0x9c/0x600 [ 216.060188][ T9309] ? fuse_get_req+0x8e9/0xd40 [ 216.060217][ T9309] fuse_get_req+0x8e9/0xd40 [ 216.060250][ T9309] ? __pfx_fuse_get_req+0x10/0x10 [ 216.060280][ T9309] ? __pfx_from_kgid+0x10/0x10 [ 216.060319][ T9309] fuse_chan_send_bg+0x234/0x1640 [ 216.060347][ T9309] ? fuse_req_prep+0x131/0xa30 [ 216.060370][ T9309] ? __kmalloc_cache_noprof+0x31c/0x600 [ 216.060394][ T9309] ? fuse_simple_background+0xce/0x160 [ 216.060423][ T9309] cuse_channel_open+0x4be/0x7a0 [ 216.060447][ T9309] ? __pfx_cuse_channel_open+0x10/0x10 [ 216.060465][ T9309] misc_open+0x2d5/0x350 [ 216.060488][ T9309] chrdev_open+0x4d9/0x600 [ 216.060518][ T9309] ? __pfx_chrdev_open+0x10/0x10 [ 216.060543][ T9309] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 216.060587][ T9309] ? devcgroup_check_permission+0x31/0x8f0 [ 216.060620][ T9309] ? __pfx_chrdev_open+0x10/0x10 [ 216.060646][ T9309] do_dentry_open+0x80e/0x1360 [ 216.060684][ T9309] vfs_open_consume+0x4a/0x350 [ 216.060709][ T9309] ? path_openat+0x16e1/0x20f0 [ 216.060734][ T9309] path_openat+0x16fc/0x20f0 [ 216.060776][ T9309] do_file_open+0x23e/0x4a0 [ 216.060805][ T9309] ? __pfx_do_file_open+0x10/0x10 [ 216.060847][ T9309] ? _raw_spin_unlock+0x28/0x50 [ 216.060867][ T9309] ? alloc_fd+0x6af/0x760 [ 216.060899][ T9309] do_sys_openat2+0x115/0x200 [ 216.060926][ T9309] ? __se_sys_futex+0x3a8/0x450 [ 216.060954][ T9309] ? __pfx_do_sys_openat2+0x10/0x10 [ 216.060988][ T9309] ? rcu_is_watching+0x16/0xb0 [ 216.061017][ T9309] __x64_sys_openat+0x138/0x170 [ 216.061049][ T9309] do_syscall_64+0x166/0x520 [ 216.061075][ T9309] ? trace_irq_disable+0x3b/0x140 [ 216.061099][ T9309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.061120][ T9309] ? clear_bhb_loop+0x70/0xc0 [ 216.061146][ T9309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.061164][ T9309] RIP: 0033:0x7fe74bf9e559 [ 216.061183][ T9309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.061199][ T9309] RSP: 002b:00007fe74ce30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 216.061220][ T9309] RAX: ffffffffffffffda RBX: 00007fe74c225fa0 RCX: 00007fe74bf9e559 [ 216.061234][ T9309] RDX: 0000000000000002 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 216.061248][ T9309] RBP: 00007fe74c035ad8 R08: 0000000000000000 R09: 0000000000000000 [ 216.061259][ T9309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.061270][ T9309] R13: 00007fe74c226038 R14: 00007fe74c225fa0 R15: 00007ffe06affd08 [ 216.061303][ T9309] [ 216.331949][ T7078] as10x_usb: error during firmware upload part1 [ 216.332588][ T7078] Registered device Abilis Systems DVB-Titan [ 216.664574][ T9330] lo: entered allmulticast mode [ 216.684111][ T9329] lo: left allmulticast mode [ 216.716234][ C0] [ 216.718608][ C0] ============================= [ 216.723448][ C0] [ BUG: Invalid wait context ] [ 216.728301][ C0] syzkaller #0 Not tainted [ 216.732709][ C0] ----------------------------- [ 216.737625][ C0] syz.6.1055/9333 is trying to lock: [ 216.742917][ C0] ffff888047001bc8 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 216.752402][ C0] other info that might help us debug this: [ 216.758368][ C0] context-{2:2} [ 216.761816][ C0] locks held by syz.6.1055/9333: 4, last CPU#0: [ 216.768113][ C0] #0: ffff88802aa3d1a8 (&vcpu->mutex){+.+.}-{4:4}, at: kvm_vcpu_ioctl+0x27f/0xfd0 [ 216.777419][ C0] #1: ffff888047001b48 (&kvm->arch.xen.xen_lock){+.+.}-{4:4}, at: kvm_xen_vcpu_set_attr+0x4d/0x1230 [ 216.788373][ C0] #2: ffff888047002118 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_vcpu_set_attr+0x8e/0x1230 [ 216.798502][ C0] #3: ffff888047002118 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x1d2/0x8d0 [ 216.808514][ C0] stack backtrace: [ 216.812352][ C0] CPU: 0 UID: 0 PID: 9333 Comm: syz.6.1055 Not tainted syzkaller #0 PREEMPT(full) [ 216.821625][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.831673][ C0] Call Trace: [ 216.834943][ C0] [ 216.837777][ C0] dump_stack_lvl+0xe8/0x150 [ 216.842389][ C0] __lock_acquire+0xf5b/0x2de0 [ 216.847161][ C0] lock_acquire+0x115/0x350 [ 216.851674][ C0] ? kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 216.857311][ C0] ? xa_load+0x1db/0x210 [ 216.861551][ C0] _raw_read_lock_irqsave+0x48/0x60 [ 216.866747][ C0] ? kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 216.872407][ C0] kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 216.877875][ C0] ? kvm_xen_set_evtchn_fast+0x1d2/0x8d0 [ 216.883506][ C0] xen_timer_callback+0x109/0x220 [ 216.888534][ C0] ? __pfx_xen_timer_callback+0x10/0x10 [ 216.894075][ C0] __hrtimer_run_queues+0x371/0xa10 [ 216.899278][ C0] hrtimer_interrupt+0x4cd/0xaa0 [ 216.904247][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 216.910253][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 216.915886][ C0] [ 216.918874][ C0] [ 216.921813][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 216.927811][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 216.934232][ C0] Code: f7 e8 cd a8 aa f5 f7 c3 00 02 00 00 74 05 e8 f0 44 d7 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 74 9b 9b f5 65 48 8b 05 6c 2f a0 08 48 85 c0 74 18 5b 41 5e c3 [ 216.953914][ C0] RSP: 0018:ffffc900032673e8 EFLAGS: 00000206 [ 216.959976][ C0] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 8000000000000001 [ 216.967934][ C0] RDX: 0000000000000007 RSI: ffffffff8e4777b8 RDI: 0000000000000001 [ 216.975896][ C0] RBP: ffffc90003267528 R08: ffffffff917afabf R09: 1ffffffff22f5f57 [ 216.983859][ C0] R10: dffffc0000000000 R11: fffffbfff22f5f58 R12: 000000327442858b [ 216.991908][ C0] R13: ffff88802aa3e638 R14: ffff8880b84286c0 R15: dffffc0000000000 [ 216.999878][ C0] kvm_xen_start_timer+0x37f/0x5f0 [ 217.004994][ C0] ? __pfx_kvm_xen_start_timer+0x10/0x10 [ 217.010634][ C0] ? lock_acquire+0x115/0x350 [ 217.015301][ C0] ? hrtimer_try_to_cancel+0x1f7/0x680 [ 217.020760][ C0] kvm_xen_vcpu_set_attr+0xb29/0x1230 [ 217.026124][ C0] ? __might_fault+0xaf/0x130 [ 217.030791][ C0] ? kvm_xen_vcpu_set_attr+0x8e/0x1230 [ 217.036252][ C0] kvm_arch_vcpu_ioctl+0x148b/0x23a0 [ 217.041529][ C0] ? lock_acquire+0x115/0x350 [ 217.046194][ C0] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 217.051816][ C0] ? lock_acquire+0x115/0x350 [ 217.056484][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 217.061680][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 217.066956][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 217.072170][ C0] ? kernel_text_address+0xa5/0xe0 [ 217.077355][ C0] ? __kernel_text_address+0xd/0x30 [ 217.082539][ C0] ? unwind_get_return_address+0x4d/0x90 [ 217.088252][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 217.094394][ C0] ? arch_stack_walk+0xfb/0x150 [ 217.099239][ C0] ? stack_trace_save+0xa9/0x100 [ 217.104164][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 217.109527][ C0] ? kasan_save_track+0x4f/0x80 [ 217.114372][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 217.119908][ C0] ? __lock_acquire+0x747/0x2de0 [ 217.124840][ C0] ? kfree+0x1c5/0x650 [ 217.128910][ C0] ? __se_sys_ioctl+0x47/0x170 [ 217.133666][ C0] ? do_syscall_64+0x166/0x520 [ 217.138418][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.144480][ C0] ? __mutex_trylock_common+0x15f/0x270 [ 217.150027][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 217.155913][ C0] ? rcu_is_watching+0x16/0xb0 [ 217.160755][ C0] ? trace_contention_end+0x3d/0x140 [ 217.166031][ C0] ? __mutex_lock+0x305/0x15a0 [ 217.170789][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 217.176070][ C0] ? kvm_vcpu_ioctl+0x27f/0xfd0 [ 217.180933][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 217.185965][ C0] ? do_vfs_ioctl+0x116f/0x1530 [ 217.190812][ C0] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 217.195829][ C0] kvm_vcpu_ioctl+0x7e3/0xfd0 [ 217.200498][ C0] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 217.205684][ C0] ? do_futex+0x3e7/0x4e0 [ 217.210017][ C0] ? __fget_files+0x2a/0x420 [ 217.214593][ C0] ? __fget_files+0x2a/0x420 [ 217.219170][ C0] ? __fget_files+0x2a/0x420 [ 217.223753][ C0] ? bpf_lsm_file_ioctl+0x9/0x20 [ 217.228688][ C0] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 217.233884][ C0] __se_sys_ioctl+0xfc/0x170 [ 217.238465][ C0] do_syscall_64+0x166/0x520 [ 217.243043][ C0] ? trace_irq_disable+0x3b/0x140 [ 217.248058][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.254118][ C0] ? clear_bhb_loop+0x70/0xc0 [ 217.258810][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.264689][ C0] RIP: 0033:0x7fd5dd79e559 [ 217.269181][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.288858][ C0] RSP: 002b:00007fd5de664028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.297277][ C0] RAX: ffffffffffffffda RBX: 00007fd5dda25fa0 RCX: 00007fd5dd79e559 [ 217.305258][ C0] RDX: 0000200000000100 RSI: 000000004048aecb RDI: 0000000000000005 [ 217.313237][ C0] RBP: 00007fd5dd835ad8 R08: 0000000000000000 R09: 0000000000000000 [ 217.321212][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.329186][ C0] R13: 00007fd5dda26038 R14: 00007fd5dda25fa0 R15: 00007ffec2597308 [ 217.337165][ C0] [ 217.352794][ T9342] ip_tables: iptables: counters copy to user failed while replacing table [ 217.436778][ T7078] usb 5-1: USB disconnect, device number 16 [ 217.448434][ T7078] Unregistered device Abilis Systems DVB-Titan [ 217.458730][ T7078] as10x_usb: device has been disconnected