last executing test programs: 8.684975396s ago: executing program 2 (id=1761): mkdir(0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0xfffa, [0x92e, 0x746ffec1]}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) read$FUSE(r0, &(0x7f0000000540)={0x2020}, 0x2020) 7.101464462s ago: executing program 3 (id=1772): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/4096, 0x1000}], 0x2) 5.981081665s ago: executing program 2 (id=1776): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3001) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r0, 0x4004550d, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='1\x00', 0x2) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000480)={0x0, 0x1}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='1\x00', 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x200002, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x29) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x33, @rand_addr=0x64010102, 0x4e1f, 0x3, 'wlc\x00', 0x3e, 0x83, 0x5d}, {@rand_addr=0x64090102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) write(r8, &(0x7f0000000000)='7', 0x1) memfd_secret(0x0) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6], 0x14}, 0x4, 0x700000000000000, 0x0, 0x8041}, 0x44000) close_range(r2, r3, 0x2) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000050000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYRESHEX=r9], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) 5.900612933s ago: executing program 3 (id=1777): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) unshare(0x28000600) syz_open_procfs$userns(0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, 0x0, 0x11f90aaf22dbaef5, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x80) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x40, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x40}}, 0x0) 5.786571269s ago: executing program 3 (id=1780): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000140), 0x0, 0x1}) 5.437195057s ago: executing program 3 (id=1782): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='external:', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='raid5', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='2', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000400), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/consistency_policy\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='ppl', 0x3) socket$can_j1939(0x1d, 0x2, 0x7) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) landlock_create_ruleset(&(0x7f00000002c0)={0x10a18}, 0x30, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r6, &(0x7f00000000c0)='.\x00', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64], 0x101c40) write(0xffffffffffffffff, &(0x7f0000000580)='1:0', 0x3) write(0xffffffffffffffff, &(0x7f00000007c0)='0', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r7, &(0x7f0000000a40)='active', 0x6) 4.551582436s ago: executing program 2 (id=1787): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r0, 0x5452, &(0x7f00000003c0)=0x400800) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="18", 0x1, 0x44010, &(0x7f00000000c0)={0x11, 0xe, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.144640267s ago: executing program 2 (id=1789): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x18000000) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) 3.982519564s ago: executing program 1 (id=1790): epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) epoll_create1(0x0) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000140), 0x0, 0x1}) 3.878381648s ago: executing program 1 (id=1792): socket(0x1e, 0x4, 0x0) unshare(0x20000600) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x3, 0xc95a, 0xfffffff3, 0x9, 0x6, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x80005, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x10000e, 0x40, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x193, 0xffff, 0x12f, 0x2ea9c1f6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x100, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x6, 0x5, 0x6, 0x4, 0xfb, 0x1, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x5, 0x8000, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x8, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x3, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0xfffffffe, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0xfffffffe, 0xcc52, 0xc, 0xfff, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3ff, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x8, 0x5, 0x1, 0x6, 0x5, 0x0, 0xd2, 0x2, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x0, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0xc5a, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x400007f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x7, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.720835923s ago: executing program 3 (id=1794): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0x20fa91, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000020301020000000090ffffffffffffff080004400000000008000540000000180800010001000011"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x90) getdents(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r5, r4, 0x80000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x0, 0x0, 0x0}) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) getpriority(0x2, 0x0) 3.596462181s ago: executing program 1 (id=1795): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3001) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r0, 0x4004550d, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='1\x00', 0x2) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000480)={0x0, 0x1}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='1\x00', 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x200002, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x29) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x33, @rand_addr=0x64010102, 0x4e1f, 0x3, 'wlc\x00', 0x3e, 0x83, 0x5d}, {@rand_addr=0x64090102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) write(r8, &(0x7f0000000000)='7', 0x1) memfd_secret(0x0) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6], 0x14}, 0x4, 0x700000000000000, 0x0, 0x8041}, 0x44000) close_range(r2, r3, 0x2) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000050000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYRESHEX=r9], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) 3.267879165s ago: executing program 0 (id=1797): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000005c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.464570536s ago: executing program 0 (id=1798): epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180"], 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) epoll_create1(0x0) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) 2.347998922s ago: executing program 1 (id=1799): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, 0x0, 0x11f90aaf22dbaef5, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x80) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x40, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x40}}, 0x0) 1.896873763s ago: executing program 0 (id=1800): epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) epoll_create1(0x0) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000140), 0x0, 0x1}) 1.845964045s ago: executing program 1 (id=1801): writev(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000200)='2\x00\x00\x00\a\x00\a\x00\x00\x00\x00\x00\x00', 0xd) 1.590290962s ago: executing program 1 (id=1802): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='external:', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='raid5', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='2', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000400), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/consistency_policy\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='ppl', 0x3) socket$can_j1939(0x1d, 0x2, 0x7) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) landlock_create_ruleset(&(0x7f00000002c0)={0x10a18}, 0x30, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r6, &(0x7f00000000c0)='.\x00', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64], 0x101c40) write(0xffffffffffffffff, &(0x7f0000000580)='1:0', 0x3) write(0xffffffffffffffff, &(0x7f00000007c0)='0', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r7, &(0x7f0000000a40)='active', 0x6) 1.588701473s ago: executing program 0 (id=1803): r0 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4000015}, 0x80) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x5000, 0x6, @loopback, 0x7}, 0x1c) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 1.37980646s ago: executing program 2 (id=1804): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/power\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) 1.316638274s ago: executing program 0 (id=1805): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x20}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) userfaultfd(0x80001) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200005, 0x200027, 0x801, 0x0, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) 1.24548458s ago: executing program 2 (id=1806): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) socket$nl_xfrm(0x10, 0x3, 0x6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) sendmsg$nl_route(r4, 0x0, 0x20000880) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x19, &(0x7f0000000700)=ANY=[@ANYBLOB="180000008b00000000000000ffffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf09000000000000550901000000000095000000000000002d0a0600000000002500ffffdf070ae91801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41000, 0x24}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000440)={[{@data_err_ignore}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@noquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x200004}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@nodelalloc}]}, 0x1, 0x48d, &(0x7f0000000c80)="$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") 1.035585517s ago: executing program 0 (id=1807): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3001) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0x6, @empty, 0x4e21, 0x0, 'ovf\x00', 0x0, 0xe00e, 0x79}, 0x2c) ioctl$USBDEVFS_REAPURB(r0, 0x4004550d, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='1\x00', 0x2) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000480)={0x0, 0x1}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='1\x00', 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x200002, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x29) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x33, @rand_addr=0x64010102, 0x4e1f, 0x3, 'wlc\x00', 0x3e, 0x83, 0x5d}, {@rand_addr=0x64090102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) write(r8, &(0x7f0000000000)='7', 0x1) memfd_secret(0x0) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6], 0x14}, 0x4, 0x700000000000000, 0x0, 0x8041}, 0x44000) close_range(r2, r3, 0x2) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000050000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYRESHEX=r9], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) 0s ago: executing program 3 (id=1808): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf523", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) migrate_pages(0x0, 0x1, 0x0, 0x0) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0) ioctl(r0, 0xfffff000, &(0x7f0000000180)="f3205e0d917bf38bdeef5d880ad5ab303a49d186945b") mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xd939e2b5a30c84bd, 0xffffffffffffffff, 0x69167000) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x2002a3a}}}, 0x24}, 0x1, 0x0, 0x0, 0x20408d1}, 0x20000888) kernel console output (not intermixed with test programs): ffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 387.773265][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 387.843466][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 387.894448][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 387.940466][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 388.031997][ T9629] jffs2: Further such events for this erase block will not be printed [ 388.041605][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 388.052655][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 388.063782][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xf01c instead [ 388.077004][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xa256 instead [ 388.087897][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 388.100519][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 388.113454][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 388.198546][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 388.225613][ T9632] autofs4:pid:9632:autofs_fill_super: called with bogus options [ 388.299440][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 388.522237][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 388.736264][ T9629] jffs2: Further such events for this erase block will not be printed [ 388.774819][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 388.822385][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 388.875429][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xf01c instead [ 388.904440][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xa256 instead [ 388.924687][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 388.952744][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 388.983649][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xf01c instead [ 389.023987][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xa256 instead [ 389.039991][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 389.051028][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 389.072828][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xf01c instead [ 389.089759][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xa256 instead [ 389.100668][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 389.116737][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 389.130419][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xf01c instead [ 389.161328][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xa256 instead [ 389.186640][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 389.224741][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 389.275988][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xf01c instead [ 389.336006][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xa256 instead [ 389.384839][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 389.417493][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 389.432731][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xf01c instead [ 389.474347][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xa256 instead [ 389.502207][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 389.502234][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 389.544430][ T9632] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1133'. [ 389.545585][ T9650] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1138'. [ 389.594633][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xf01c instead [ 389.613077][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xa256 instead [ 389.640032][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 389.667881][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 389.722851][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xf01c instead [ 391.004514][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xa256 instead [ 391.075428][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 391.165197][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 391.186881][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xf01c instead [ 391.204496][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xa256 instead [ 391.384036][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 391.625894][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 391.756310][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xf01c instead [ 391.891523][ T9660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1142'. [ 391.936519][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xa256 instead [ 391.949802][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 391.965744][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 391.982788][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xf01c instead [ 392.001776][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xa256 instead [ 392.014048][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 392.029855][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 392.053182][ T9662] syzkaller0: entered promiscuous mode [ 392.059751][ T9662] syzkaller0: entered allmulticast mode [ 392.064276][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xf01c instead [ 392.076010][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xa256 instead [ 392.091373][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 392.125988][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 392.157238][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xf01c instead [ 392.169402][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xa256 instead [ 392.180238][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 392.191464][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 392.202223][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xf01c instead [ 392.213028][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xa256 instead [ 392.224320][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 392.224347][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 392.253379][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xf01c instead [ 392.270877][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xa256 instead [ 392.289117][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 392.299852][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 392.326817][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xf01c instead [ 392.342817][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xa256 instead [ 392.388987][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 392.399624][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 392.410459][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xf01c instead [ 392.421364][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xa256 instead [ 392.464437][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 392.486126][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 392.505341][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xf01c instead [ 392.530101][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xa256 instead [ 392.548492][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 392.580018][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 392.623761][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xf01c instead [ 392.648085][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xa256 instead [ 392.659550][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 392.670204][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 392.681368][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xf01c instead [ 392.691817][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xa256 instead [ 392.702508][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 392.713230][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 392.723936][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xf01c instead [ 392.734561][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xa256 instead [ 392.771804][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 393.455197][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 393.465810][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xf01c instead [ 393.465842][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xa256 instead [ 393.555861][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 393.659050][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 393.735583][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xf01c instead [ 393.803410][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xa256 instead [ 393.860827][ T9678] process 'syz.3.1147' launched '/dev/fd/3' with NULL argv: empty string added [ 393.877639][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 393.915503][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 393.933256][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xf01c instead [ 393.947584][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xa256 instead [ 393.970743][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 393.998095][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 394.023205][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xf01c instead [ 394.034516][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xa256 instead [ 394.054268][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 394.065071][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 394.076007][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xf01c instead [ 394.092365][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xa256 instead [ 394.103329][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 394.114360][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 394.124928][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xf01c instead [ 394.135435][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xa256 instead [ 394.146409][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 394.157271][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 394.203287][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xf01c instead [ 394.264683][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xa256 instead [ 394.335635][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 394.400144][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 394.464447][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xf01c instead [ 394.570615][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xa256 instead [ 394.649541][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 394.798265][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 394.932859][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xf01c instead [ 395.060060][ T9629] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xa256 instead [ 395.128314][ T9629] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 395.137993][ T9629] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 400.584408][ T6738] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 400.964821][ T9726] syz.0.1161: attempt to access beyond end of device [ 400.964821][ T9726] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 400.978871][ T9726] gfs2: error 10 reading superblock [ 401.043179][ T9731] netlink: 'syz.0.1161': attribute type 21 has an invalid length. [ 401.051494][ T9731] IPv6: NLM_F_CREATE should be specified when creating new route [ 404.391326][ T6738] usb 2-1: device descriptor read/all, error -71 [ 404.690885][ T9744] autofs4:pid:9744:autofs_fill_super: called with bogus options [ 405.051731][ T9751] serio: Serial port ptm0 [ 405.775628][ T9747] comedi comedi1: reset error (fatal) [ 410.188740][ T9774] syzkaller0: entered promiscuous mode [ 410.226419][ T9774] syzkaller0: entered allmulticast mode [ 410.325528][ T9778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1177'. [ 412.614453][ T6738] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 412.841900][ T6738] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.857635][ T6738] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 412.892244][ T6738] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 412.936111][ T6738] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 412.949298][ T9801] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 412.964144][ T6738] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 413.013719][ T6738] usb 2-1: Product: syz [ 413.055427][ T6738] usb 2-1: Manufacturer: syz [ 413.084980][ T9795] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 413.160697][ T6738] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 413.205083][ T6738] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 415.104811][ T8] usb 2-1: USB disconnect, device number 34 [ 415.152941][ T8] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 415.222135][ T8] garmin_gps 2-1:1.0: device disconnected [ 417.078932][ T9840] syz.0.1196: vmalloc error: size 12288, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 417.096641][ T9840] CPU: 1 PID: 9840 Comm: syz.0.1196 Not tainted syzkaller #0 [ 417.096710][ T9840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 417.096723][ T9840] Call Trace: [ 417.096735][ T9840] [ 417.096744][ T9840] dump_stack_lvl+0x18c/0x250 [ 417.096786][ T9840] ? show_regs_print_info+0x20/0x20 [ 417.096816][ T9840] ? load_image+0x420/0x420 [ 417.137149][ T9840] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 417.143943][ T9840] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 417.151266][ T9840] warn_alloc+0x246/0x340 [ 417.155928][ T9840] ? zone_watermark_ok_safe+0x230/0x230 [ 417.161777][ T9840] __vmalloc_node_range+0x1055/0x1320 [ 417.167210][ T9840] ? free_vm_area+0x50/0x50 [ 417.172271][ T9840] vmalloc_user+0x74/0x80 [ 417.176937][ T9840] ? vb2_vmalloc_alloc+0xef/0x330 [ 417.182690][ T9840] vb2_vmalloc_alloc+0xef/0x330 [ 417.187776][ T9840] ? __copy_timestamp+0x1f0/0x1f0 [ 417.193615][ T9840] __vb2_queue_alloc+0x78f/0x1410 [ 417.199091][ T9840] vb2_core_reqbufs+0x9e8/0x10d0 [ 417.205088][ T9840] ? vb2_verify_memory_type+0x570/0x570 [ 417.211870][ T9840] __vb2_init_fileio+0x2ec/0xcc0 [ 417.216952][ T9840] ? futex_wait_queue+0x138/0x1b0 [ 417.222015][ T9840] ? vb2_fop_read+0xfb/0x360 [ 417.226635][ T9840] __vb2_perform_fileio+0x346/0x1590 [ 417.226675][ T9840] ? __asan_memset+0x22/0x40 [ 417.236744][ T9840] ? __fsnotify_parent+0x6d8/0x7c0 [ 417.241903][ T9840] vb2_fop_read+0x28b/0x360 [ 417.246460][ T9840] v4l2_read+0x19a/0x2c0 [ 417.251467][ T9840] ? video_device_pipeline+0xa0/0xa0 [ 417.257138][ T9840] vfs_read+0x298/0x990 [ 417.261431][ T9840] ? kernel_read+0x1e0/0x1e0 [ 417.266158][ T9840] ? __fget_files+0x28/0x460 [ 417.270830][ T9840] ? __fget_files+0x3fc/0x460 [ 417.275918][ T9840] ? __fdget_pos+0x1d8/0x330 [ 417.280817][ T9840] ? ksys_read+0x74/0x260 [ 417.285260][ T9840] ksys_read+0x151/0x260 [ 417.289622][ T9840] ? vfs_write+0x9a0/0x9a0 [ 417.294354][ T9840] ? lockdep_hardirqs_on+0x98/0x150 [ 417.299670][ T9840] do_syscall_64+0x55/0xb0 [ 417.304244][ T9840] ? clear_bhb_loop+0x40/0x90 [ 417.309255][ T9840] ? clear_bhb_loop+0x40/0x90 [ 417.314355][ T9840] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.320786][ T9840] RIP: 0033:0x7f9a2a59e159 [ 417.325418][ T9840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.346052][ T9840] RSP: 002b:00007f9a2b3de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 417.354961][ T9840] RAX: ffffffffffffffda RBX: 00007f9a2a825fa0 RCX: 00007f9a2a59e159 [ 417.363057][ T9840] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 417.371255][ T9840] RBP: 00007f9a2a63506b R08: 0000000000000000 R09: 0000000000000000 [ 417.379479][ T9840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.387938][ T9840] R13: 00007f9a2a826038 R14: 00007f9a2a825fa0 R15: 00007fff93358d48 [ 417.396316][ T9840] [ 417.400822][ T9840] Mem-Info: [ 417.403958][ T9840] active_anon:5805 inactive_anon:0 isolated_anon:0 [ 417.403958][ T9840] active_file:11963 inactive_file:38721 isolated_file:0 [ 417.403958][ T9840] unevictable:768 dirty:503 writeback:0 [ 417.403958][ T9840] slab_reclaimable:10448 slab_unreclaimable:92910 [ 417.403958][ T9840] mapped:24978 shmem:1389 pagetables:639 [ 417.403958][ T9840] sec_pagetables:0 bounce:0 [ 417.403958][ T9840] kernel_misc_reclaimable:0 [ 417.403958][ T9840] free:1349278 free_pcp:5851 free_cma:0 [ 417.864969][ T9840] Node 0 active_anon:34308kB inactive_anon:0kB active_file:47852kB inactive_file:154752kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111304kB dirty:2012kB writeback:0kB shmem:15504kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11760kB pagetables:2620kB sec_pagetables:0kB all_unreclaimable? no [ 417.990246][ T9840] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 418.128307][ T9840] Node 0 DMA free:15328kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 418.319016][ T9840] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 418.325615][ T9840] Node 0 DMA32 free:1482564kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:31468kB inactive_anon:0kB active_file:47852kB inactive_file:153944kB unevictable:1536kB writepending:2012kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:7500kB local_pcp:2516kB free_cma:0kB [ 418.359225][ T9840] lowmem_reserve[]: 0 0 0 0 0 [ 418.364528][ T9840] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:808kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 418.430364][ T9840] lowmem_reserve[]: 0 0 0 0 0 [ 418.435785][ T9840] Node 1 Normal free:3887880kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19428kB local_pcp:7348kB free_cma:0kB [ 418.466846][ T9840] lowmem_reserve[]: 0 0 0 0 0 [ 418.471772][ T9840] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 418.487668][ T9840] Node 0 DMA32: 2457*4kB (UME) 826*8kB (UE) 498*16kB (UE) 372*32kB (UME) 332*64kB (UME) 55*128kB (UM) 10*256kB (UME) 4*512kB (UM) 2*1024kB (M) 5*2048kB (UME) 342*4096kB (UM) = 1482324kB [ 418.577523][ T9840] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 418.663954][ T9840] Node 1 Normal: 162*4kB (UE) 16*8kB (UE) 40*16kB (UE) 56*32kB (UE) 26*64kB (UME) 6*128kB (UM) 1*256kB (M) 0*512kB 1*1024kB (E) 1*2048kB (E) 947*4096kB (M) = 3887880kB [ 418.681335][ T9840] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 418.691138][ T9840] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 418.700646][ T9840] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 418.711008][ T9840] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 418.720573][ T9840] 52224 total pagecache pages [ 418.725486][ T9840] 0 pages in swap cache [ 418.729895][ T9840] Free swap = 124720kB [ 418.735947][ T9840] Total swap = 124996kB [ 418.740250][ T9840] 2097051 pages RAM [ 418.744286][ T9840] 0 pages HighMem/MovableOnly [ 418.744299][ T9840] 416965 pages reserved [ 418.744308][ T9840] 0 pages cma reserved [ 419.115611][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1203'. [ 422.457123][ T8] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 423.805465][ T8] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 423.818866][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 423.841350][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 423.873248][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 423.896808][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 423.916275][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 423.969051][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 423.992026][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 424.003666][ T9889] syzkaller0: entered promiscuous mode [ 424.013874][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 424.025241][ T9889] syzkaller0: entered allmulticast mode [ 424.042241][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 424.063304][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 424.095724][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 424.124122][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 424.133998][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 424.159440][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 424.185715][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 424.200827][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 424.217795][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 424.249481][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 424.268193][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 424.293343][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 424.335635][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 424.357265][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 424.377735][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 424.407163][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 424.425907][ T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 424.440204][ T8] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 424.456793][ T8] usb 2-1: Product: syz [ 424.466810][ T8] usb 2-1: Manufacturer: syz [ 424.476433][ T8] usb 2-1: SerialNumber: syz [ 424.486405][ T8] usb 2-1: config 0 descriptor?? [ 424.508268][ T8] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 424.729401][ T6738] usb 2-1: USB disconnect, device number 35 [ 424.741695][ T6738] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 425.051223][ T28] audit: type=1800 audit(1790437370.106:35): pid=9905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1216" name="id" dev="configfs" ino=24619 res=0 errno=0 [ 426.102211][ T9880] Process accounting resumed [ 427.043137][ T9916] md/raid:md0: not clean -- starting background reconstruction [ 427.052196][ T9916] md/raid:md0: device ram0 operational as raid disk 0 [ 427.286290][ T9916] md/raid:md0: starting dirty degraded array with PPL. [ 427.316561][ T9916] md/raid:md0: raid level 5 active with 1 out of 2 devices, algorithm 2 [ 427.327662][ T9916] sysfs: cannot create duplicate filename '/devices/virtual/block/md0/md/stripe_cache_size' [ 427.339212][ T9916] CPU: 0 PID: 9916 Comm: syz.3.1218 Not tainted syzkaller #0 [ 427.346981][ T9916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 427.357179][ T9916] Call Trace: [ 427.360531][ T9916] [ 427.363606][ T9916] dump_stack_lvl+0x18c/0x250 [ 427.368531][ T9916] ? show_regs_print_info+0x20/0x20 [ 427.374067][ T9916] ? load_image+0x420/0x420 [ 427.378827][ T9916] sysfs_warn_dup+0x8e/0xa0 [ 427.383605][ T9916] sysfs_add_file_mode_ns+0x285/0x2f0 [ 427.389042][ T9916] internal_create_group+0x431/0xd10 [ 427.394494][ T9916] ? sysfs_create_group+0x20/0x20 [ 427.399601][ T9916] ? print_raid5_conf+0x49/0x580 [ 427.404602][ T9916] raid5_run+0x1dda/0x2a00 [ 427.409196][ T9916] md_run+0x10b3/0x2210 [ 427.413511][ T9916] do_md_run+0x34/0x410 [ 427.417841][ T9916] array_state_store+0x696/0x980 [ 427.422940][ T9916] md_attr_store+0x196/0x380 [ 427.427602][ T9916] ? sysfs_kf_read+0x360/0x360 [ 427.432527][ T9916] kernfs_fop_write_iter+0x3a4/0x520 [ 427.437893][ T9916] vfs_write+0x474/0x9a0 [ 427.442265][ T9916] ? file_end_write+0x250/0x250 [ 427.447183][ T9916] ? __fget_files+0x3fc/0x460 [ 427.452022][ T9916] ? __fdget_pos+0x2a3/0x330 [ 427.456756][ T9916] ? ksys_write+0x74/0x260 [ 427.461327][ T9916] ksys_write+0x151/0x260 [ 427.465730][ T9916] ? __ia32_sys_read+0x90/0x90 [ 427.470933][ T9916] ? lockdep_hardirqs_on+0x98/0x150 [ 427.476366][ T9916] do_syscall_64+0x55/0xb0 [ 427.480856][ T9916] ? clear_bhb_loop+0x40/0x90 [ 427.485792][ T9916] ? clear_bhb_loop+0x40/0x90 [ 427.491001][ T9916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 427.496949][ T9916] RIP: 0033:0x7f7bd479e159 [ 427.501588][ T9916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.521342][ T9916] RSP: 002b:00007f7bd29f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 427.530017][ T9916] RAX: ffffffffffffffda RBX: 00007f7bd4a25fa0 RCX: 00007f7bd479e159 [ 427.538258][ T9916] RDX: 0000000000000006 RSI: 0000200000000a40 RDI: 000000000000000f [ 427.546712][ T9916] RBP: 00007f7bd483506b R08: 0000000000000000 R09: 0000000000000000 [ 427.554747][ T9916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.563221][ T9916] R13: 00007f7bd4a26038 R14: 00007f7bd4a25fa0 R15: 00007ffd90f92188 [ 427.571377][ T9916] [ 427.574625][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.591842][ T9916] raid5: failed to create sysfs attributes for md0 [ 427.640496][ T9916] md/raid:md0: PPL space too small on ram0 [ 428.157142][ T9916] md/raid:md0: failed to run raid set. [ 428.179005][ T9916] md: pers->run() failed ... [ 428.384645][ T9926] comedi comedi1: reset error (fatal) [ 428.531977][ T28] audit: type=1800 audit(1790437373.586:36): pid=9933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1225" name="id" dev="configfs" ino=24681 res=0 errno=0 [ 428.796642][ T9941] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 428.845247][ T9941] pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f] [ 428.884638][ T9941] pci 0000:00:03.0: BAR 1 [mem 0xfe800000-0xfe80007f] [ 429.040029][ T9945] FAULT_INJECTION: forcing a failure. [ 429.040029][ T9945] name failslab, interval 1, probability 0, space 0, times 0 [ 429.124797][ T9945] CPU: 0 PID: 9945 Comm: syz.3.1228 Not tainted syzkaller #0 [ 429.132244][ T9945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 429.132264][ T9945] Call Trace: [ 429.132274][ T9945] [ 429.132285][ T9945] dump_stack_lvl+0x18c/0x250 [ 429.132325][ T9945] ? show_regs_print_info+0x20/0x20 [ 429.159810][ T9945] ? load_image+0x420/0x420 [ 429.164364][ T9945] ? __might_sleep+0xe0/0xe0 [ 429.169166][ T9945] ? __lock_acquire+0x7d80/0x7d80 [ 429.169201][ T9945] should_fail_ex+0x394/0x4c0 [ 429.169236][ T9945] should_failslab+0x9/0x20 [ 429.183896][ T9945] slab_pre_alloc_hook+0x59/0x300 [ 429.183935][ T9945] ? d_instantiate+0x6f/0x90 [ 429.183960][ T9945] kmem_cache_alloc+0x5a/0x2c0 [ 429.189335][ T9945] ? alloc_empty_file+0x9e/0x1d0 [ 429.189371][ T9945] alloc_empty_file+0x9e/0x1d0 [ 429.189394][ T9945] alloc_file+0x5b/0x600 [ 429.189419][ T9945] alloc_file_pseudo+0x184/0x210 [ 429.189440][ T9945] ? fput+0x1a0/0x1a0 [ 429.199270][ T9945] ? anon_inode_make_secure_inode+0xfb/0x160 [ 429.199312][ T9945] ? do_compat_epoll_pwait+0x1c0/0x1c0 [ 429.213589][ T9945] ? _raw_spin_unlock+0x28/0x40 [ 429.213635][ T9945] __se_sys_memfd_secret+0x125/0x300 [ 429.222740][ T9945] do_syscall_64+0x55/0xb0 [ 429.222774][ T9945] ? clear_bhb_loop+0x40/0x90 [ 429.234595][ T9945] ? clear_bhb_loop+0x40/0x90 [ 429.234631][ T9945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.234658][ T9945] RIP: 0033:0x7f7bd479e159 [ 429.234679][ T9945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.234696][ T9945] RSP: 002b:00007f7bd29d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 429.234721][ T9945] RAX: ffffffffffffffda RBX: 00007f7bd4a26090 RCX: 00007f7bd479e159 [ 429.234736][ T9945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 429.234748][ T9945] RBP: 00007f7bd483506b R08: 0000000000000000 R09: 0000000000000000 [ 429.234761][ T9945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.234774][ T9945] R13: 00007f7bd4a26128 R14: 00007f7bd4a26090 R15: 00007ffd90f92188 [ 429.234812][ T9945] [ 429.254958][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.375188][ T9941] virtio-pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f]: not claimed; can't enable device [ 429.396177][ T9941] virtio-pci: probe of 0000:00:03.0 failed with error -22 [ 429.601259][ T9952] futex_wake_op: syz.3.1230 tries to shift op by 144; fix this program [ 429.694357][ T6726] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 432.251779][ T6726] usb 2-1: device descriptor read/all, error -71 [ 434.215596][ T9969] md/raid:md0: not clean -- starting background reconstruction [ 434.251291][ T9972] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 434.281165][ T9969] md/raid:md0: device ram0 operational as raid disk 0 [ 434.328294][ T28] audit: type=1800 audit(1790437379.386:37): pid=9973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1235" name="id" dev="configfs" ino=24834 res=0 errno=0 [ 434.363092][ T9969] md/raid:md0: starting dirty degraded array with PPL. [ 434.376234][ T9969] md/raid:md0: raid level 5 active with 1 out of 2 devices, algorithm 2 [ 434.414520][ T9969] md/raid:md0: PPL space too small on ram0 [ 434.909520][ T9969] md/raid:md0: failed to run raid set. [ 434.915592][ T9969] md: pers->run() failed ... [ 435.241664][ T9987] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 435.344342][ T9991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.381814][ T9987] pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f] [ 435.382389][ T9992] FAULT_INJECTION: forcing a failure. [ 435.382389][ T9992] name failslab, interval 1, probability 0, space 0, times 0 [ 435.401597][ T9991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.476438][ T9992] CPU: 1 PID: 9992 Comm: syz.3.1238 Not tainted syzkaller #0 [ 435.484139][ T9992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 435.494228][ T9992] Call Trace: [ 435.497684][ T9992] [ 435.500642][ T9992] dump_stack_lvl+0x18c/0x250 [ 435.505345][ T9992] ? show_regs_print_info+0x20/0x20 [ 435.510643][ T9992] ? load_image+0x420/0x420 [ 435.515237][ T9992] ? __might_sleep+0xe0/0xe0 [ 435.519918][ T9992] ? __lock_acquire+0x7d80/0x7d80 [ 435.524969][ T9992] should_fail_ex+0x394/0x4c0 [ 435.529684][ T9992] should_failslab+0x9/0x20 [ 435.534194][ T9992] slab_pre_alloc_hook+0x59/0x300 [ 435.539341][ T9992] kmem_cache_alloc+0x5a/0x2c0 [ 435.544392][ T9992] ? security_file_alloc+0x34/0x120 [ 435.549739][ T9992] security_file_alloc+0x34/0x120 [ 435.554766][ T9992] init_file+0x94/0x1f0 [ 435.558932][ T9992] alloc_empty_file+0xb7/0x1d0 [ 435.563694][ T9992] alloc_file+0x5b/0x600 [ 435.568037][ T9992] alloc_file_pseudo+0x184/0x210 [ 435.573059][ T9992] ? fput+0x1a0/0x1a0 [ 435.577053][ T9992] ? anon_inode_make_secure_inode+0xfb/0x160 [ 435.583076][ T9992] ? do_compat_epoll_pwait+0x1c0/0x1c0 [ 435.588642][ T9992] ? _raw_spin_unlock+0x28/0x40 [ 435.593531][ T9992] __se_sys_memfd_secret+0x125/0x300 [ 435.599115][ T9992] do_syscall_64+0x55/0xb0 [ 435.603635][ T9992] ? clear_bhb_loop+0x40/0x90 [ 435.608912][ T9992] ? clear_bhb_loop+0x40/0x90 [ 435.613787][ T9992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 435.619691][ T9992] RIP: 0033:0x7f7bd479e159 [ 435.624221][ T9992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.643985][ T9992] RSP: 002b:00007f7bd29d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 435.652526][ T9992] RAX: ffffffffffffffda RBX: 00007f7bd4a26090 RCX: 00007f7bd479e159 [ 435.660969][ T9992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 435.668964][ T9992] RBP: 00007f7bd483506b R08: 0000000000000000 R09: 0000000000000000 [ 435.677227][ T9992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.685408][ T9992] R13: 00007f7bd4a26128 R14: 00007f7bd4a26090 R15: 00007ffd90f92188 [ 435.693395][ T9992] [ 435.799910][ T9987] pci 0000:00:03.0: BAR 1 [mem 0xfe800000-0xfe80007f] [ 435.871829][ T9998] futex_wake_op: syz.1.1241 tries to shift op by 144; fix this program [ 436.196981][ T9987] virtio-pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f]: not claimed; can't enable device [ 436.209622][ T9987] virtio-pci: probe of 0000:00:03.0 failed with error -22 [ 436.440037][ T9991] Process accounting resumed [ 436.686599][T10003] block nbd0: NBD_DISCONNECT [ 436.855573][ T28] audit: type=1800 audit(1790437381.906:38): pid=10007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1245" name="id" dev="configfs" ino=24554 res=0 errno=0 [ 437.157856][ T28] audit: type=1800 audit(1790437382.216:39): pid=10011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1246" name="id" dev="configfs" ino=25000 res=0 errno=0 [ 438.632576][T10028] md/raid:md0: not clean -- starting background reconstruction [ 438.654941][T10028] md/raid:md0: device ram0 operational as raid disk 0 [ 438.735901][T10028] md/raid:md0: starting dirty degraded array with PPL. [ 438.769301][T10032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.778039][T10028] md/raid:md0: raid level 5 active with 1 out of 2 devices, algorithm 2 [ 438.795170][T10032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.809955][T10028] sysfs: cannot create duplicate filename '/devices/virtual/block/md0/md/stripe_cache_size' [ 438.884285][T10028] CPU: 0 PID: 10028 Comm: syz.2.1250 Not tainted syzkaller #0 [ 438.892012][T10028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 438.902196][T10028] Call Trace: [ 438.905522][T10028] [ 438.908498][T10028] dump_stack_lvl+0x18c/0x250 [ 438.913327][T10028] ? show_regs_print_info+0x20/0x20 [ 438.918572][T10028] ? load_image+0x420/0x420 [ 438.923149][T10028] sysfs_warn_dup+0x8e/0xa0 [ 438.927704][T10028] sysfs_add_file_mode_ns+0x285/0x2f0 [ 438.933314][T10028] internal_create_group+0x431/0xd10 [ 438.938640][T10028] ? sysfs_create_group+0x20/0x20 [ 438.943756][T10028] ? print_raid5_conf+0x49/0x580 [ 438.948779][T10028] raid5_run+0x1dda/0x2a00 [ 438.953251][T10028] md_run+0x10b3/0x2210 [ 438.957460][T10028] do_md_run+0x34/0x410 [ 438.961940][T10028] array_state_store+0x696/0x980 [ 438.966932][T10028] md_attr_store+0x196/0x380 [ 438.972200][T10028] ? sysfs_kf_read+0x360/0x360 [ 438.977077][T10028] kernfs_fop_write_iter+0x3a4/0x520 [ 438.982440][T10028] vfs_write+0x474/0x9a0 [ 438.986788][T10028] ? file_end_write+0x250/0x250 [ 438.991696][T10028] ? __fget_files+0x3fc/0x460 [ 438.996614][T10028] ? __fdget_pos+0x2a3/0x330 [ 439.001252][T10028] ? ksys_write+0x74/0x260 [ 439.005996][T10028] ksys_write+0x151/0x260 [ 439.010402][T10028] ? __ia32_sys_read+0x90/0x90 [ 439.015250][T10028] ? lockdep_hardirqs_on+0x98/0x150 [ 439.020536][T10028] do_syscall_64+0x55/0xb0 [ 439.025101][T10028] ? clear_bhb_loop+0x40/0x90 [ 439.029940][T10028] ? clear_bhb_loop+0x40/0x90 [ 439.034679][T10028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 439.040625][T10028] RIP: 0033:0x7f26e639e159 [ 439.045083][T10028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.064896][T10028] RSP: 002b:00007f26e7348028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 439.073493][T10028] RAX: ffffffffffffffda RBX: 00007f26e6625fa0 RCX: 00007f26e639e159 [ 439.081522][T10028] RDX: 0000000000000006 RSI: 0000200000000a40 RDI: 000000000000000f [ 439.089552][T10028] RBP: 00007f26e643506b R08: 0000000000000000 R09: 0000000000000000 [ 439.097581][T10028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.105623][T10028] R13: 00007f26e6626038 R14: 00007f26e6625fa0 R15: 00007ffe58de9178 [ 439.113854][T10028] [ 439.116981][ C0] vkms_vblank_simulate: vblank timer overrun [ 439.184854][T10028] raid5: failed to create sysfs attributes for md0 [ 439.264033][T10028] md/raid:md0: PPL space too small on ram0 [ 439.439117][T10034] futex_wake_op: syz.3.1252 tries to shift op by 144; fix this program [ 439.476599][T10028] md/raid:md0: failed to run raid set. [ 439.484244][T10028] md: pers->run() failed ... [ 440.760196][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.766818][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.183614][T10030] Process accounting resumed [ 442.505964][T10042] FAULT_INJECTION: forcing a failure. [ 442.505964][T10042] name fail_futex, interval 1, probability 0, space 0, times 0 [ 442.565004][T10042] CPU: 1 PID: 10042 Comm: syz.0.1253 Not tainted syzkaller #0 [ 442.572525][T10042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 442.572543][T10042] Call Trace: [ 442.582780][T10042] [ 442.582792][T10042] dump_stack_lvl+0x18c/0x250 [ 442.582828][T10042] ? show_regs_print_info+0x20/0x20 [ 442.582855][T10042] ? load_image+0x420/0x420 [ 442.582875][T10042] ? kmem_cache_alloc+0x17e/0x2c0 [ 442.589241][T10042] ? alloc_file+0x5b/0x600 [ 442.589268][T10042] ? __se_sys_memfd_secret+0x125/0x300 [ 442.599357][T10042] ? do_syscall_64+0x55/0xb0 [ 442.599399][T10042] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 442.609151][T10042] should_fail_ex+0x394/0x4c0 [ 442.609199][T10042] get_futex_key+0x136/0x1030 [ 442.609232][T10042] ? futex_setup_timer+0xc0/0xc0 [ 442.619237][T10042] futex_wake+0x127/0x4f0 [ 442.619273][T10042] ? verify_lock_unused+0x140/0x140 [ 442.619296][T10042] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 442.619330][T10042] ? futex_wake_mark+0x150/0x150 [ 442.630156][T10042] ? percpu_counter_add_batch+0x252/0x2a0 [ 442.639549][T10042] ? percpu_counter_set+0x1b0/0x1b0 [ 442.676271][T10042] do_futex+0x35d/0x3e0 [ 442.680480][T10042] ? fd_install+0x60/0x4e0 [ 442.684940][T10042] ? __ia32_sys_get_robust_list+0x110/0x110 [ 442.690875][T10042] __se_sys_futex+0x3a9/0x440 [ 442.695581][T10042] ? __x64_sys_futex+0xf0/0xf0 [ 442.700559][T10042] ? __x64_sys_futex+0x21/0xf0 [ 442.705517][T10042] do_syscall_64+0x55/0xb0 [ 442.710164][T10042] ? clear_bhb_loop+0x40/0x90 [ 442.714947][T10042] ? clear_bhb_loop+0x40/0x90 [ 442.719675][T10042] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 442.725625][T10042] RIP: 0033:0x7f9a2a59e159 [ 442.730084][T10042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.749812][T10042] RSP: 002b:00007f9a2b3de0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 442.758244][T10042] RAX: ffffffffffffffda RBX: 00007f9a2a825fa8 RCX: 00007f9a2a59e159 [ 442.766233][T10042] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9a2a825fac [ 442.774220][T10042] RBP: 00007f9a2a825fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 442.782290][T10042] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000000 [ 442.790292][T10042] R13: 00007f9a2a826038 R14: 00007fff93358c60 R15: 00007fff93358d48 [ 442.798326][T10042] [ 442.853465][ T28] audit: type=1800 audit(1790437387.906:40): pid=10046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1254" name="id" dev="configfs" ino=25652 res=0 errno=0 [ 443.715682][ T28] audit: type=1800 audit(1790437388.776:41): pid=10064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1256" name="id" dev="configfs" ino=25176 res=0 errno=0 [ 444.714242][T10060] comedi comedi1: reset error (fatal) [ 445.021304][T10075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.040951][T10075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.067405][T10073] md/raid:md0: not clean -- starting background reconstruction [ 445.099511][T10073] md/raid:md0: device ram0 operational as raid disk 0 [ 445.147612][T10073] md/raid:md0: starting dirty degraded array with PPL. [ 445.156288][T10073] md/raid:md0: raid level 5 active with 1 out of 2 devices, algorithm 2 [ 445.170889][T10073] md/raid:md0: PPL space too small on ram0 [ 445.553987][T10073] md/raid:md0: failed to run raid set. [ 445.560193][T10073] md: pers->run() failed ... [ 445.638739][T10081] futex_wake_op: syz.2.1263 tries to shift op by 144; fix this program [ 446.287166][T10075] Process accounting resumed [ 447.182062][ T28] audit: type=1800 audit(1790437392.236:42): pid=10091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1266" name="id" dev="configfs" ino=25296 res=0 errno=0 [ 447.265221][T10090] FAULT_INJECTION: forcing a failure. [ 447.265221][T10090] name failslab, interval 1, probability 0, space 0, times 0 [ 447.389364][T10090] CPU: 1 PID: 10090 Comm: syz.3.1265 Not tainted syzkaller #0 [ 447.396963][T10090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 447.407152][T10090] Call Trace: [ 447.410483][T10090] [ 447.413444][T10090] dump_stack_lvl+0x18c/0x250 [ 447.418185][T10090] ? show_regs_print_info+0x20/0x20 [ 447.423425][T10090] ? load_image+0x420/0x420 [ 447.427973][T10090] ? __might_sleep+0xe0/0xe0 [ 447.432791][T10090] ? __lock_acquire+0x7d80/0x7d80 [ 447.437892][T10090] should_fail_ex+0x394/0x4c0 [ 447.442637][T10090] should_failslab+0x9/0x20 [ 447.447291][T10090] slab_pre_alloc_hook+0x59/0x300 [ 447.452394][T10090] kmem_cache_alloc+0x5a/0x2c0 [ 447.457239][T10090] ? security_file_alloc+0x34/0x120 [ 447.462608][T10090] security_file_alloc+0x34/0x120 [ 447.462649][T10090] init_file+0x94/0x1f0 [ 447.462675][T10090] alloc_empty_file+0xb7/0x1d0 [ 447.476693][T10090] alloc_file+0x5b/0x600 [ 447.481075][T10090] alloc_file_pseudo+0x184/0x210 [ 447.486316][T10090] ? fput+0x1a0/0x1a0 [ 447.490337][T10090] ? anon_inode_make_secure_inode+0xfb/0x160 [ 447.496364][T10090] ? do_compat_epoll_pwait+0x1c0/0x1c0 [ 447.501870][T10090] ? _raw_spin_unlock+0x3a/0x40 [ 447.506776][T10090] __se_sys_memfd_secret+0x125/0x300 [ 447.512548][T10090] do_syscall_64+0x55/0xb0 [ 447.517019][T10090] ? clear_bhb_loop+0x40/0x90 [ 447.521823][T10090] ? clear_bhb_loop+0x40/0x90 [ 447.526551][T10090] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 447.532632][T10090] RIP: 0033:0x7f7bd479e159 [ 447.537088][T10090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.556920][T10090] RSP: 002b:00007f7bd29f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 447.565472][T10090] RAX: ffffffffffffffda RBX: 00007f7bd4a25fa0 RCX: 00007f7bd479e159 [ 447.573478][T10090] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 447.581568][T10090] RBP: 00007f7bd483506b R08: 0000000000000000 R09: 0000000000000000 [ 447.589590][T10090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.597628][T10090] R13: 00007f7bd4a26038 R14: 00007f7bd4a25fa0 R15: 00007ffd90f92188 [ 447.605950][T10090] [ 448.334658][ T28] audit: type=1800 audit(1790437393.396:43): pid=10096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1268" name="id" dev="configfs" ino=25334 res=0 errno=0 [ 451.998023][ T28] audit: type=1800 audit(1790437397.056:44): pid=10130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1277" name="id" dev="configfs" ino=25767 res=0 errno=0 [ 452.018167][ C1] vkms_vblank_simulate: vblank timer overrun [ 452.667026][T10133] FAULT_INJECTION: forcing a failure. [ 452.667026][T10133] name failslab, interval 1, probability 0, space 0, times 0 [ 452.817922][T10133] CPU: 0 PID: 10133 Comm: syz.1.1278 Not tainted syzkaller #0 [ 452.825740][T10133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 452.835943][T10133] Call Trace: [ 452.839291][T10133] [ 452.842260][T10133] dump_stack_lvl+0x18c/0x250 [ 452.847001][T10133] ? show_regs_print_info+0x20/0x20 [ 452.852433][T10133] ? load_image+0x420/0x420 [ 452.857073][T10133] ? __might_sleep+0xe0/0xe0 [ 452.861715][T10133] ? __lock_acquire+0x7d80/0x7d80 [ 452.866874][T10133] should_fail_ex+0x394/0x4c0 [ 452.871605][T10133] should_failslab+0x9/0x20 [ 452.876159][T10133] slab_pre_alloc_hook+0x59/0x300 [ 452.881317][T10133] ? memcg_list_lru_alloc+0x335/0xb00 [ 452.886741][T10133] ? memcg_list_lru_alloc+0x335/0xb00 [ 452.892156][T10133] __kmem_cache_alloc_node+0x53/0x250 [ 452.897584][T10133] ? memcg_list_lru_alloc+0x335/0xb00 [ 452.902994][T10133] __kmalloc+0xa7/0x240 [ 452.907199][T10133] memcg_list_lru_alloc+0x335/0xb00 [ 452.912449][T10133] ? memcg_reparent_list_lrus+0x860/0x860 [ 452.918230][T10133] ? get_obj_cgroup_from_current+0xd4/0x280 [ 452.924175][T10133] slab_pre_alloc_hook+0x2ad/0x300 [ 452.929336][T10133] ? slab_pre_alloc_hook+0xb1/0x300 [ 452.934672][T10133] kmem_cache_alloc_lru+0x4d/0x2b0 [ 452.939830][T10133] ? __d_alloc+0x31/0x710 [ 452.944284][T10133] __d_alloc+0x31/0x710 [ 452.948477][T10133] d_alloc_pseudo+0x1d/0x70 [ 452.953028][T10133] alloc_file_pseudo+0xe4/0x210 [ 452.958100][T10133] ? fput+0x1a0/0x1a0 [ 452.962217][T10133] ? anon_inode_make_secure_inode+0xfb/0x160 [ 452.968340][T10133] ? do_compat_epoll_pwait+0x1c0/0x1c0 [ 452.973943][T10133] ? _raw_spin_unlock+0x3a/0x40 [ 452.978884][T10133] __se_sys_memfd_secret+0x125/0x300 [ 452.984223][T10133] do_syscall_64+0x55/0xb0 [ 452.988769][T10133] ? clear_bhb_loop+0x40/0x90 [ 452.993661][T10133] ? clear_bhb_loop+0x40/0x90 [ 452.998380][T10133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 453.004313][T10133] RIP: 0033:0x7f4778d9e159 [ 453.008952][T10133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.028768][T10133] RSP: 002b:00007f4779b82028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 453.037332][T10133] RAX: ffffffffffffffda RBX: 00007f4779025fa0 RCX: 00007f4778d9e159 [ 453.045460][T10133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 453.053578][T10133] RBP: 00007f4778e3506b R08: 0000000000000000 R09: 0000000000000000 [ 453.061605][T10133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.069632][T10133] R13: 00007f4779026038 R14: 00007f4779025fa0 R15: 00007ffc3e4b3838 [ 453.077683][T10133] [ 453.715826][T10143] futex_wake_op: syz.3.1280 tries to shift op by 144; fix this program [ 455.366347][ T28] audit: type=1800 audit(1790437400.426:45): pid=10167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1287" name="id" dev="configfs" ino=25854 res=0 errno=0 [ 455.613755][T10172] FAULT_INJECTION: forcing a failure. [ 455.613755][T10172] name failslab, interval 1, probability 0, space 0, times 0 [ 455.642926][T10178] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1290'. [ 455.662261][T10172] CPU: 0 PID: 10172 Comm: syz.1.1291 Not tainted syzkaller #0 [ 455.670080][T10172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 455.680895][T10172] Call Trace: [ 455.684509][T10172] [ 455.687481][T10172] dump_stack_lvl+0x18c/0x250 [ 455.692322][T10172] ? show_regs_print_info+0x20/0x20 [ 455.697773][T10172] ? load_image+0x420/0x420 [ 455.702514][T10172] ? __might_sleep+0xe0/0xe0 [ 455.707258][T10172] ? __lock_acquire+0x7d80/0x7d80 [ 455.712343][T10172] should_fail_ex+0x394/0x4c0 [ 455.717056][T10172] should_failslab+0x9/0x20 [ 455.721927][T10172] slab_pre_alloc_hook+0x59/0x300 [ 455.721968][T10172] ? memcg_list_lru_alloc+0x335/0xb00 [ 455.721990][T10172] ? memcg_list_lru_alloc+0x335/0xb00 [ 455.722013][T10172] __kmem_cache_alloc_node+0x53/0x250 [ 455.722048][T10172] ? memcg_list_lru_alloc+0x335/0xb00 [ 455.722072][T10172] __kmalloc+0xa7/0x240 [ 455.732813][T10172] memcg_list_lru_alloc+0x335/0xb00 [ 455.743618][T10172] ? memcg_reparent_list_lrus+0x860/0x860 [ 455.765657][T10172] ? get_obj_cgroup_from_current+0xd4/0x280 [ 455.765701][T10172] slab_pre_alloc_hook+0x2ad/0x300 [ 455.765729][T10172] ? slab_pre_alloc_hook+0xb1/0x300 [ 455.772117][T10172] kmem_cache_alloc_lru+0x4d/0x2b0 [ 455.772165][T10172] ? __d_alloc+0x31/0x710 [ 455.783315][T10172] __d_alloc+0x31/0x710 [ 455.783353][T10172] d_alloc_pseudo+0x1d/0x70 [ 455.783377][T10172] alloc_file_pseudo+0xe4/0x210 [ 455.797264][T10172] ? fput+0x1a0/0x1a0 [ 455.806634][T10172] ? anon_inode_make_secure_inode+0xfb/0x160 [ 455.806671][T10172] ? do_compat_epoll_pwait+0x1c0/0x1c0 [ 455.822925][T10172] ? _raw_spin_unlock+0x28/0x40 [ 455.827813][T10172] __se_sys_memfd_secret+0x125/0x300 [ 455.833488][T10172] do_syscall_64+0x55/0xb0 [ 455.837944][T10172] ? clear_bhb_loop+0x40/0x90 [ 455.842678][T10172] ? clear_bhb_loop+0x40/0x90 [ 455.847397][T10172] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.853506][T10172] RIP: 0033:0x7f4778d9e159 [ 455.857937][T10172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.877848][T10172] RSP: 002b:00007f4779b82028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 455.886370][T10172] RAX: ffffffffffffffda RBX: 00007f4779025fa0 RCX: 00007f4778d9e159 [ 455.894373][T10172] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 455.902442][T10172] RBP: 00007f4778e3506b R08: 0000000000000000 R09: 0000000000000000 [ 455.910469][T10172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.918570][T10172] R13: 00007f4779026038 R14: 00007f4779025fa0 R15: 00007ffc3e4b3838 [ 455.926660][T10172] [ 456.085178][T10183] futex_wake_op: syz.3.1293 tries to shift op by 144; fix this program [ 458.774902][T10196] ceph: No mds server is up or the cluster is laggy [ 458.782960][ T6738] libceph: connect (1)[c::]:6789 error -101 [ 458.831443][ T6738] libceph: mon0 (1)[c::]:6789 connect error [ 459.839961][T10212] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1300'. [ 459.869792][ T28] audit: type=1800 audit(1790437404.926:46): pid=10211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1298" name="id" dev="configfs" ino=26687 res=0 errno=0 [ 460.438593][T10220] FAULT_INJECTION: forcing a failure. [ 460.438593][T10220] name failslab, interval 1, probability 0, space 0, times 0 [ 460.466338][T10220] CPU: 0 PID: 10220 Comm: syz.2.1302 Not tainted syzkaller #0 [ 460.473987][T10220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 460.484172][T10220] Call Trace: [ 460.484186][T10220] [ 460.484197][T10220] dump_stack_lvl+0x18c/0x250 [ 460.495230][T10220] ? show_regs_print_info+0x20/0x20 [ 460.495267][T10220] ? load_image+0x420/0x420 [ 460.495294][T10220] ? __might_sleep+0xe0/0xe0 [ 460.505011][T10220] ? __lock_acquire+0x7d80/0x7d80 [ 460.505054][T10220] should_fail_ex+0x394/0x4c0 [ 460.505088][T10220] should_failslab+0x9/0x20 [ 460.505116][T10220] slab_pre_alloc_hook+0x59/0x300 [ 460.505144][T10220] ? d_instantiate+0x6f/0x90 [ 460.515003][T10220] kmem_cache_alloc+0x5a/0x2c0 [ 460.515044][T10220] ? alloc_empty_file+0x9e/0x1d0 [ 460.515070][T10220] alloc_empty_file+0x9e/0x1d0 [ 460.515091][T10220] alloc_file+0x5b/0x600 [ 460.515116][T10220] alloc_file_pseudo+0x184/0x210 [ 460.524325][T10220] ? fput+0x1a0/0x1a0 [ 460.524350][T10220] ? anon_inode_make_secure_inode+0xfb/0x160 [ 460.524383][T10220] ? do_compat_epoll_pwait+0x1c0/0x1c0 [ 460.524409][T10220] ? _raw_spin_unlock+0x28/0x40 [ 460.524442][T10220] __se_sys_memfd_secret+0x125/0x300 [ 460.524474][T10220] do_syscall_64+0x55/0xb0 [ 460.524498][T10220] ? clear_bhb_loop+0x40/0x90 [ 460.524530][T10220] ? clear_bhb_loop+0x40/0x90 [ 460.524561][T10220] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 460.524587][T10220] RIP: 0033:0x7f26e639e159 [ 460.524610][T10220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.524627][T10220] RSP: 002b:00007f26e7348028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 460.524652][T10220] RAX: ffffffffffffffda RBX: 00007f26e6625fa0 RCX: 00007f26e639e159 [ 460.524668][T10220] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 460.524680][T10220] RBP: 00007f26e643506b R08: 0000000000000000 R09: 0000000000000000 [ 460.524694][T10220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.673039][T10220] R13: 00007f26e6626038 R14: 00007f26e6625fa0 R15: 00007ffe58de9178 [ 460.681159][T10220] [ 461.931234][T10239] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 461.944616][T10236] comedi comedi1: reset error (fatal) [ 462.102358][ T28] audit: type=1800 audit(1790437407.156:47): pid=10245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1310" name="id" dev="configfs" ino=25954 res=0 errno=0 [ 462.245340][T10248] futex_wake_op: syz.0.1309 tries to shift op by 144; fix this program [ 462.298923][T10251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1311'. [ 462.308883][T10251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1311'. [ 464.603240][ T8] libceph: connect (1)[c::]:6789 error -101 [ 464.619280][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 464.672116][T10284] ceph: No mds server is up or the cluster is laggy [ 464.686534][ T8] libceph: connect (1)[c::]:6789 error -101 [ 464.788123][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 465.206760][ T28] audit: type=1800 audit(1790437410.266:48): pid=10293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1320" name="id" dev="configfs" ino=26868 res=0 errno=0 [ 465.312384][T10299] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1321'. [ 465.403924][T10299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1321'. [ 467.254341][T10300] comedi comedi1: reset error (fatal) [ 467.471377][ T5836] libceph: connect (1)[c::]:6789 error -101 [ 467.542109][T10324] ceph: No mds server is up or the cluster is laggy [ 467.782437][ T5836] libceph: mon0 (1)[c::]:6789 connect error [ 470.516253][ T28] audit: type=1800 audit(1790437415.486:49): pid=10336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1332" name="id" dev="configfs" ino=26932 res=0 errno=0 [ 470.627274][T10340] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1333'. [ 470.698467][T10340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1333'. [ 472.301846][T10362] ceph: No mds server is up or the cluster is laggy [ 472.422969][ T8] libceph: connect (1)[c::]:6789 error -101 [ 472.536064][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 473.040384][T10358] comedi comedi1: reset error (fatal) [ 473.125789][T10370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1343'. [ 473.156820][ T28] audit: type=1800 audit(1790437418.216:50): pid=10368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1342" name="id" dev="configfs" ino=26142 res=0 errno=0 [ 474.886315][ T6738] libceph: connect (1)[c::]:6789 error -101 [ 474.966432][ T6738] libceph: mon0 (1)[c::]:6789 connect error [ 474.982929][T10400] ceph: No mds server is up or the cluster is laggy [ 475.842085][ T28] audit: type=1800 audit(1790437420.876:51): pid=10406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1354" name="id" dev="configfs" ino=27055 res=0 errno=0 [ 477.092534][T10413] comedi comedi1: reset error (fatal) [ 478.697211][ T28] audit: type=1800 audit(1790437423.756:52): pid=10437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1364" name="id" dev="configfs" ino=26269 res=0 errno=0 [ 479.065288][ T8] libceph: connect (1)[c::]:6789 error -101 [ 479.152605][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 479.274641][T10444] ceph: No mds server is up or the cluster is laggy [ 479.307543][ T8] libceph: connect (1)[c::]:6789 error -101 [ 480.093123][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 481.495097][T10455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1369'. [ 482.344441][ T28] audit: type=1800 audit(1790437427.396:53): pid=10465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1373" name="id" dev="configfs" ino=26339 res=0 errno=0 [ 482.694112][T10458] comedi comedi1: reset error (fatal) [ 482.739696][T10472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1374'. [ 483.218486][T10485] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1378'. [ 484.215969][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 484.222228][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 484.291157][T10504] device-mapper: table: 248:0: zero-length target [ 484.298530][T10504] device-mapper: ioctl: error adding target to table [ 484.311697][T10499] ceph: No mds server is up or the cluster is laggy [ 484.502818][ T28] audit: type=1800 audit(1790437429.556:54): pid=10509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1384" name="id" dev="configfs" ino=26404 res=0 errno=0 [ 484.556706][T10511] autofs4:pid:10511:autofs_fill_super: called with bogus options [ 485.608075][T10514] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1385'. [ 485.745637][T10521] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1387'. [ 485.962078][T10479] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 486.064601][T10525] block nbd0: NBD_DISCONNECT [ 486.508550][T10538] device-mapper: table: 248:0: zero-length target [ 486.550366][T10538] device-mapper: ioctl: error adding target to table [ 486.834078][T10523] comedi comedi1: reset error (fatal) [ 487.138996][ T28] audit: type=1800 audit(1790437432.196:55): pid=10543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1394" name="id" dev="configfs" ino=26499 res=0 errno=0 [ 487.418189][T10551] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1397'. [ 487.723836][T10553] autofs4:pid:10553:autofs_fill_super: called with bogus options [ 488.055319][T10553] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1398'. [ 488.135060][T10564] syzkaller0: entered promiscuous mode [ 488.154222][T10564] syzkaller0: entered allmulticast mode [ 488.270852][T10569] device-mapper: table: 248:0: zero-length target [ 488.284174][T10569] device-mapper: ioctl: error adding target to table [ 488.442769][ T28] audit: type=1800 audit(1790437433.496:56): pid=10574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1405" name="id" dev="configfs" ino=26570 res=0 errno=0 [ 488.510394][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1406'. [ 489.330099][T10590] autofs4:pid:10590:autofs_fill_super: called with bogus options [ 489.409159][T10590] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1411'. [ 489.527283][T10595] device-mapper: table: 248:0: zero-length target [ 489.550797][T10595] device-mapper: ioctl: error adding target to table [ 489.611509][T10597] syzkaller0: entered promiscuous mode [ 489.620790][T10597] syzkaller0: entered allmulticast mode [ 489.725136][ T28] audit: type=1800 audit(1790437434.786:57): pid=10599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1415" name="id" dev="configfs" ino=27338 res=0 errno=0 [ 489.815962][T10603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1416'. [ 490.679883][T10555] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 490.953894][T10623] device-mapper: table: 248:0: zero-length target [ 490.982045][T10623] device-mapper: ioctl: error adding target to table [ 491.122699][ T28] audit: type=1800 audit(1790437436.176:58): pid=10626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1424" name="id" dev="configfs" ino=27406 res=0 errno=0 [ 491.275895][T10632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1426'. [ 491.343175][T10630] syzkaller0: entered promiscuous mode [ 491.364017][T10630] syzkaller0: entered allmulticast mode [ 491.412638][T10630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1425'. [ 493.087455][ T28] audit: type=1800 audit(1790437438.146:59): pid=10663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1435" name="id" dev="configfs" ino=27747 res=0 errno=0 [ 493.153324][T10667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1436'. [ 494.085716][T10673] device-mapper: table: 248:0: zero-length target [ 494.092303][T10673] device-mapper: ioctl: error adding target to table [ 494.774742][T10646] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 495.069691][T10686] syzkaller0: entered promiscuous mode [ 495.076610][T10686] syzkaller0: entered allmulticast mode [ 495.091462][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1443'. [ 495.393485][ T28] audit: type=1800 audit(1790437440.446:60): pid=10691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1445" name="id" dev="configfs" ino=27530 res=0 errno=0 [ 496.506006][T10705] device-mapper: table: 248:0: : unknown target type [ 496.512877][T10705] device-mapper: ioctl: error adding target to table [ 497.823765][ T28] audit: type=1800 audit(1790437442.876:61): pid=10731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1456" name="id" dev="configfs" ino=27865 res=0 errno=0 [ 498.670566][T10739] device-mapper: table: 248:0: : unknown target type [ 498.678515][T10739] device-mapper: ioctl: error adding target to table [ 498.924472][ T6738] libceph: connect (1)[c::]:6789 error -101 [ 498.936191][ T6738] libceph: mon0 (1)[c::]:6789 connect error [ 499.019167][T10750] ceph: No mds server is up or the cluster is laggy [ 499.733985][ T28] audit: type=1800 audit(1790437444.786:62): pid=10764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1465" name="id" dev="configfs" ino=28723 res=0 errno=0 [ 500.140522][T10717] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 501.189253][T10777] device-mapper: table: 248:0: : unknown target type [ 501.217160][T10777] device-mapper: ioctl: error adding target to table [ 501.516235][T10784] syzkaller0: entered promiscuous mode [ 501.537884][T10784] syzkaller0: entered allmulticast mode [ 501.581935][T10784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1470'. [ 501.740173][ T8] libceph: connect (1)[c::]:6789 error -101 [ 501.783008][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 502.001003][T10790] ceph: No mds server is up or the cluster is laggy [ 502.143785][ T5836] libceph: connect (1)[c::]:6789 error -101 [ 502.144003][ T5836] libceph: mon0 (1)[c::]:6789 connect error [ 502.198457][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.198547][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.499664][ T28] audit: type=1800 audit(1790437447.556:63): pid=10800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1474" name="id" dev="configfs" ino=28796 res=0 errno=0 [ 502.582218][T10808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1476'. [ 502.796545][T10819] md/raid:md0: not clean -- starting background reconstruction [ 502.809739][T10819] md/raid:md0: device ram0 operational as raid disk 0 [ 502.853838][T10819] md/raid:md0: starting dirty degraded array with PPL. [ 502.861491][T10819] md/raid:md0: raid level 5 active with 1 out of 2 devices, algorithm 2 [ 502.870665][T10819] sysfs: cannot create duplicate filename '/devices/virtual/block/md0/md/stripe_cache_size' [ 502.888813][T10819] CPU: 1 PID: 10819 Comm: syz.2.1478 Not tainted syzkaller #0 [ 502.896355][T10819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 502.906643][T10819] Call Trace: [ 502.909963][T10819] [ 502.912940][T10819] dump_stack_lvl+0x18c/0x250 [ 502.917668][T10819] ? show_regs_print_info+0x20/0x20 [ 502.923049][T10819] ? load_image+0x420/0x420 [ 502.927619][T10819] sysfs_warn_dup+0x8e/0xa0 [ 502.932172][T10819] sysfs_add_file_mode_ns+0x285/0x2f0 [ 502.937602][T10819] internal_create_group+0x431/0xd10 [ 502.942963][T10819] ? sysfs_create_group+0x20/0x20 [ 502.948051][T10819] ? print_raid5_conf+0x49/0x580 [ 502.953498][T10819] raid5_run+0x1dda/0x2a00 [ 502.958005][T10819] md_run+0x10b3/0x2210 [ 502.962255][T10819] do_md_run+0x34/0x410 [ 502.966471][T10819] array_state_store+0x696/0x980 [ 502.971474][T10819] md_attr_store+0x196/0x380 [ 502.976108][T10819] ? sysfs_kf_read+0x360/0x360 [ 502.981258][T10819] kernfs_fop_write_iter+0x3a4/0x520 [ 502.986598][T10819] vfs_write+0x474/0x9a0 [ 502.990903][T10819] ? file_end_write+0x250/0x250 [ 502.995823][T10819] ? __fget_files+0x3fc/0x460 [ 503.000571][T10819] ? __fdget_pos+0x2a3/0x330 [ 503.005296][T10819] ? ksys_write+0x74/0x260 [ 503.009768][T10819] ksys_write+0x151/0x260 [ 503.014241][T10819] ? __ia32_sys_read+0x90/0x90 [ 503.019067][T10819] ? lockdep_hardirqs_on+0x98/0x150 [ 503.024316][T10819] do_syscall_64+0x55/0xb0 [ 503.028784][T10819] ? clear_bhb_loop+0x40/0x90 [ 503.033508][T10819] ? clear_bhb_loop+0x40/0x90 [ 503.038239][T10819] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 503.044185][T10819] RIP: 0033:0x7f26e639e159 [ 503.048636][T10819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.068457][T10819] RSP: 002b:00007f26e7348028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 503.076921][T10819] RAX: ffffffffffffffda RBX: 00007f26e6625fa0 RCX: 00007f26e639e159 [ 503.084936][T10819] RDX: 0000000000000006 RSI: 0000200000000a40 RDI: 000000000000000f [ 503.092977][T10819] RBP: 00007f26e643506b R08: 0000000000000000 R09: 0000000000000000 [ 503.100992][T10819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.109070][T10819] R13: 00007f26e6626038 R14: 00007f26e6625fa0 R15: 00007ffe58de9178 [ 503.117179][T10819] [ 503.134262][T10819] raid5: failed to create sysfs attributes for md0 [ 503.147986][T10819] md/raid:md0: PPL space too small on ram0 [ 503.279304][T10819] md/raid:md0: failed to run raid set. [ 503.285540][T10819] md: pers->run() failed ... [ 504.240096][T10842] syzkaller0: entered promiscuous mode [ 504.246975][T10842] syzkaller0: entered allmulticast mode [ 504.470700][ T6738] libceph: connect (1)[c::]:6789 error -101 [ 504.585310][ T6738] libceph: mon0 (1)[c::]:6789 connect error [ 504.605107][ T6738] libceph: connect (1)[c::]:6789 error -101 [ 504.611390][ T6738] libceph: mon0 (1)[c::]:6789 connect error [ 504.620386][T10845] ceph: No mds server is up or the cluster is laggy [ 504.840194][ T28] audit: type=1800 audit(1790437449.896:64): pid=10851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1485" name="id" dev="configfs" ino=28047 res=0 errno=0 [ 504.905551][T10855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1486'. [ 505.559088][T10807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 505.857407][T10875] md/raid:md0: not clean -- starting background reconstruction [ 505.870614][T10875] md/raid:md0: device ram0 operational as raid disk 0 [ 505.909389][T10871] syzkaller0: entered promiscuous mode [ 505.924470][T10871] syzkaller0: entered allmulticast mode [ 505.930710][T10875] md/raid:md0: starting dirty degraded array with PPL. [ 505.937869][T10875] md/raid:md0: raid level 5 active with 1 out of 2 devices, algorithm 2 [ 505.949585][T10875] md/raid:md0: PPL space too small on ram0 [ 506.132843][T10875] md/raid:md0: failed to run raid set. [ 506.149576][T10875] md: pers->run() failed ... [ 506.161874][T10884] syzkaller0: entered promiscuous mode [ 506.183434][T10884] syzkaller0: entered allmulticast mode [ 506.499613][ T8] libceph: connect (1)[c::]:6789 error -101 [ 506.544535][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 506.600669][T10889] ceph: No mds server is up or the cluster is laggy [ 506.694189][ T28] audit: type=1800 audit(1790437451.756:65): pid=10895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1495" name="id" dev="configfs" ino=28931 res=0 errno=0 [ 506.714603][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.242261][T10913] autofs4:pid:10913:autofs_fill_super: called with bogus options [ 507.342206][T10913] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1499'. [ 507.922134][T10931] syzkaller0: entered promiscuous mode [ 507.936832][T10931] syzkaller0: entered allmulticast mode [ 508.222624][T10933] md/raid:md0: not clean -- starting background reconstruction [ 508.231343][T10933] md/raid:md0: device ram0 operational as raid disk 0 [ 508.253333][T10933] md/raid:md0: starting dirty degraded array with PPL. [ 508.261554][T10933] md/raid:md0: raid level 5 active with 1 out of 2 devices, algorithm 2 [ 508.270823][T10933] sysfs: cannot create duplicate filename '/devices/virtual/block/md0/md/stripe_cache_size' [ 508.281876][T10933] CPU: 1 PID: 10933 Comm: syz.0.1503 Not tainted syzkaller #0 [ 508.289388][T10933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 508.299553][T10933] Call Trace: [ 508.302889][T10933] [ 508.305829][T10933] dump_stack_lvl+0x18c/0x250 [ 508.310556][T10933] ? show_regs_print_info+0x20/0x20 [ 508.315855][T10933] ? load_image+0x420/0x420 [ 508.320833][T10933] sysfs_warn_dup+0x8e/0xa0 [ 508.325354][T10933] sysfs_add_file_mode_ns+0x285/0x2f0 [ 508.330748][T10933] internal_create_group+0x431/0xd10 [ 508.336078][T10933] ? sysfs_create_group+0x20/0x20 [ 508.341241][T10933] ? print_raid5_conf+0x49/0x580 [ 508.346206][T10933] raid5_run+0x1dda/0x2a00 [ 508.350899][T10933] md_run+0x10b3/0x2210 [ 508.355465][T10933] do_md_run+0x34/0x410 [ 508.359758][T10933] array_state_store+0x696/0x980 [ 508.364749][T10933] md_attr_store+0x196/0x380 [ 508.369397][T10933] ? sysfs_kf_read+0x360/0x360 [ 508.374257][T10933] kernfs_fop_write_iter+0x3a4/0x520 [ 508.379603][T10933] vfs_write+0x474/0x9a0 [ 508.383963][T10933] ? file_end_write+0x250/0x250 [ 508.388857][T10933] ? __fget_files+0x3fc/0x460 [ 508.393595][T10933] ? __fdget_pos+0x2a3/0x330 [ 508.398226][T10933] ? ksys_write+0x74/0x260 [ 508.402679][T10933] ksys_write+0x151/0x260 [ 508.407289][T10933] ? __ia32_sys_read+0x90/0x90 [ 508.412080][T10933] ? lockdep_hardirqs_on+0x98/0x150 [ 508.417317][T10933] do_syscall_64+0x55/0xb0 [ 508.421941][T10933] ? clear_bhb_loop+0x40/0x90 [ 508.426638][T10933] ? clear_bhb_loop+0x40/0x90 [ 508.431371][T10933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 508.437299][T10933] RIP: 0033:0x7f9a2a59e159 [ 508.441768][T10933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.461415][T10933] RSP: 002b:00007f9a2b3de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 508.469843][T10933] RAX: ffffffffffffffda RBX: 00007f9a2a825fa0 RCX: 00007f9a2a59e159 [ 508.477831][T10933] RDX: 0000000000000006 RSI: 0000200000000a40 RDI: 000000000000000f [ 508.485919][T10933] RBP: 00007f9a2a63506b R08: 0000000000000000 R09: 0000000000000000 [ 508.493939][T10933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 508.502089][T10933] R13: 00007f9a2a826038 R14: 00007f9a2a825fa0 R15: 00007fff93358d48 [ 508.510307][T10933] [ 508.514385][T10933] raid5: failed to create sysfs attributes for md0 [ 508.522538][T10933] md/raid:md0: PPL space too small on ram0 [ 508.587174][T10933] md/raid:md0: failed to run raid set. [ 508.592808][T10933] md: pers->run() failed ... [ 508.731017][T10937] syzkaller0: entered promiscuous mode [ 508.737999][T10937] syzkaller0: entered allmulticast mode [ 509.834942][ T28] audit: type=1800 audit(1790437454.886:66): pid=10943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1506" name="id" dev="configfs" ino=28163 res=0 errno=0 [ 510.084591][T10905] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 510.175855][T10947] block nbd0: NBD_DISCONNECT [ 510.690465][T10968] md: personality for level rai is not loaded! [ 510.958179][T10971] syzkaller0: entered promiscuous mode [ 510.977406][T10971] syzkaller0: entered allmulticast mode [ 511.245171][ T28] audit: type=1800 audit(1790437456.306:67): pid=10976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1515" name="id" dev="configfs" ino=28209 res=0 errno=0 [ 513.438672][T11010] md: personality for level rai is not loaded! [ 513.883173][T11016] syzkaller0: entered promiscuous mode [ 513.889022][T11016] syzkaller0: entered allmulticast mode [ 513.899834][T11016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1523'. [ 514.352721][T10982] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 514.530118][ T28] audit: type=1800 audit(1790437459.586:68): pid=11021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1525" name="id" dev="configfs" ino=28296 res=0 errno=0 [ 514.698961][T11032] device-mapper: table: 248:0: integ: unknown target type [ 514.714332][T11032] device-mapper: ioctl: error adding target to table [ 515.177329][T11041] md: personality for level rai is not loaded! [ 515.634528][T11050] syzkaller0: entered promiscuous mode [ 515.642690][T11050] syzkaller0: entered allmulticast mode [ 515.660556][T11050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1533'. [ 517.833181][T11035] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 518.064665][ T28] audit: type=1800 audit(1790437463.116:69): pid=11064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1536" name="id" dev="configfs" ino=29252 res=0 errno=0 [ 518.106248][T11068] device-mapper: table: 248:0: integ: unknown target type [ 518.116145][T11068] device-mapper: ioctl: error adding target to table [ 519.325652][T11080] md: personality for level raid is not loaded! [ 519.421440][T11086] syzkaller0: entered promiscuous mode [ 519.443831][T11086] syzkaller0: entered allmulticast mode [ 519.490398][T11086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1543'. [ 519.596044][T11100] syzkaller0: entered promiscuous mode [ 519.601784][T11100] syzkaller0: entered allmulticast mode [ 519.613029][T11100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1546'. [ 519.695831][ T28] audit: type=1800 audit(1790437464.756:70): pid=11102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1547" name="id" dev="configfs" ino=29310 res=0 errno=0 [ 519.806812][T11107] device-mapper: table: 248:0: integ: unknown target type [ 519.816276][T11107] device-mapper: ioctl: error adding target to table [ 520.958637][T11121] autofs4:pid:11121:autofs_fill_super: called with bogus options [ 521.203749][T11127] md: personality for level raid is not loaded! [ 521.296644][T11130] syzkaller0: entered promiscuous mode [ 521.302182][T11130] syzkaller0: entered allmulticast mode [ 521.311408][T11130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1555'. [ 521.439998][ T28] audit: type=1800 audit(1790437466.496:71): pid=11132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1556" name="id" dev="configfs" ino=28455 res=0 errno=0 [ 521.529938][T11136] syzkaller0: entered promiscuous mode [ 521.535870][T11136] syzkaller0: entered allmulticast mode [ 521.544295][T11136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1557'. [ 521.667259][T11138] device-mapper: table: 248:0: integri: unknown target type [ 521.674815][T11138] device-mapper: ioctl: error adding target to table [ 522.325169][T11088] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 522.634511][ T5836] libceph: connect (1)[c::]:6789 error -101 [ 522.640831][ T5836] libceph: mon0 (1)[c::]:6789 connect error [ 522.737063][T11150] md: personality for level raid is not loaded! [ 523.573430][T11149] ceph: No mds server is up or the cluster is laggy [ 523.581798][ T8] libceph: connect (1)[c::]:6789 error -101 [ 523.588244][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 523.841356][T11168] syzkaller0: entered promiscuous mode [ 523.862398][T11168] syzkaller0: entered allmulticast mode [ 523.896084][T11171] device-mapper: table: 248:0: integri: unknown target type [ 523.900293][T11168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1566'. [ 523.905537][T11171] device-mapper: ioctl: error adding target to table [ 524.166627][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1570'. [ 525.265216][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 525.273823][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 525.359823][T11205] ceph: No mds server is up or the cluster is laggy [ 526.671072][T11224] device-mapper: table: 248:0: integri: unknown target type [ 526.679145][T11224] device-mapper: ioctl: error adding target to table [ 526.748761][T11227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1581'. [ 527.009450][T11177] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 527.268241][T11232] syzkaller0: entered promiscuous mode [ 527.287900][T11232] syzkaller0: entered allmulticast mode [ 527.298882][ T6738] libceph: connect (1)[c::]:6789 error -101 [ 527.306343][ T6738] libceph: mon0 (1)[c::]:6789 connect error [ 527.347307][T11232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1584'. [ 527.423660][T11236] ceph: No mds server is up or the cluster is laggy [ 527.909981][T11251] device-mapper: table: 248:0: integrit: unknown target type [ 527.931571][T11251] device-mapper: ioctl: error adding target to table [ 530.055666][T11259] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 530.161885][T11257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1591'. [ 531.742289][T11280] syzkaller0: entered promiscuous mode [ 531.754483][T11280] syzkaller0: entered allmulticast mode [ 531.763775][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1596'. [ 533.116941][T11262] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 533.888370][T11303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1602'. [ 535.448321][T11312] syzkaller0: entered promiscuous mode [ 535.486405][T11312] syzkaller0: entered allmulticast mode [ 535.529984][T11313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1607'. [ 536.406899][T11330] device-mapper: table: 248:0: integrit: unknown target type [ 536.435956][T11330] device-mapper: ioctl: error adding target to table [ 537.173456][T11335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1615'. [ 539.796378][T11324] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 542.130629][T11379] syzkaller0: entered promiscuous mode [ 542.159611][T11379] syzkaller0: entered allmulticast mode [ 547.252807][T11422] syzkaller0: entered promiscuous mode [ 547.324247][T11422] syzkaller0: entered allmulticast mode [ 548.790640][T11439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1641'. [ 549.117657][T11451] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1645'. [ 549.416522][ T5836] libceph: connect (1)[c::]:6789 error -101 [ 549.416652][ T5836] libceph: mon0 (1)[c::]:6789 connect error [ 549.639312][T11453] ceph: No mds server is up or the cluster is laggy [ 549.893034][T11467] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 549.923364][T11467] pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f] [ 549.955916][T11467] pci 0000:00:03.0: BAR 1 [mem 0xfe800000-0xfe80007f] [ 550.037068][T11470] FAULT_INJECTION: forcing a failure. [ 550.037068][T11470] name failslab, interval 1, probability 0, space 0, times 0 [ 550.063633][T11470] CPU: 0 PID: 11470 Comm: syz.1.1648 Not tainted syzkaller #0 [ 550.071416][T11470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 550.071434][T11470] Call Trace: [ 550.071444][T11470] [ 550.071454][T11470] dump_stack_lvl+0x18c/0x250 [ 550.071490][T11470] ? show_regs_print_info+0x20/0x20 [ 550.088157][T11470] ? load_image+0x420/0x420 [ 550.088193][T11470] ? __might_sleep+0xe0/0xe0 [ 550.098141][T11470] ? __lock_acquire+0x7d80/0x7d80 [ 550.098175][T11470] should_fail_ex+0x394/0x4c0 [ 550.098210][T11470] should_failslab+0x9/0x20 [ 550.098238][T11470] slab_pre_alloc_hook+0x59/0x300 [ 550.098271][T11470] ? memcg_list_lru_alloc+0x335/0xb00 [ 550.098299][T11470] ? memcg_list_lru_alloc+0x335/0xb00 [ 550.098322][T11470] __kmem_cache_alloc_node+0x53/0x250 [ 550.098356][T11470] ? memcg_list_lru_alloc+0x335/0xb00 [ 550.112736][T11470] __kmalloc+0xa7/0x240 [ 550.112776][T11470] memcg_list_lru_alloc+0x335/0xb00 [ 550.112811][T11470] ? memcg_reparent_list_lrus+0x860/0x860 [ 550.122190][T11470] ? get_obj_cgroup_from_current+0xd4/0x280 [ 550.132908][T11470] slab_pre_alloc_hook+0x2ad/0x300 [ 550.143794][T11470] ? slab_pre_alloc_hook+0xb1/0x300 [ 550.143842][T11470] kmem_cache_alloc_lru+0x4d/0x2b0 [ 550.143869][T11470] ? __d_alloc+0x31/0x710 [ 550.159209][T11470] __d_alloc+0x31/0x710 [ 550.159244][T11470] d_alloc_pseudo+0x1d/0x70 [ 550.171132][T11470] alloc_file_pseudo+0xe4/0x210 [ 550.171163][T11470] ? fput+0x1a0/0x1a0 [ 550.181712][T11470] ? anon_inode_make_secure_inode+0xfb/0x160 [ 550.181749][T11470] ? do_compat_epoll_pwait+0x1c0/0x1c0 [ 550.196370][T11470] ? _raw_spin_unlock+0x28/0x40 [ 550.196423][T11470] __se_sys_memfd_secret+0x125/0x300 [ 550.196455][T11470] do_syscall_64+0x55/0xb0 [ 550.196480][T11470] ? clear_bhb_loop+0x40/0x90 [ 550.196508][T11470] ? clear_bhb_loop+0x40/0x90 [ 550.196535][T11470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 550.196562][T11470] RIP: 0033:0x7f4778d9e159 [ 550.206304][T11470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.206330][T11470] RSP: 002b:00007f4776fd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 550.206354][T11470] RAX: ffffffffffffffda RBX: 00007f4779026180 RCX: 00007f4778d9e159 [ 550.206370][T11470] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 550.206382][T11470] RBP: 00007f4778e3506b R08: 0000000000000000 R09: 0000000000000000 [ 550.206395][T11470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.206421][T11470] R13: 00007f4779026218 R14: 00007f4779026180 R15: 00007ffc3e4b3838 [ 550.206451][T11470] [ 550.399548][T11473] syzkaller0: entered promiscuous mode [ 550.419653][T11473] syzkaller0: entered allmulticast mode [ 550.561088][T11467] virtio-pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f]: not claimed; can't enable device [ 550.577454][T11467] virtio-pci: probe of 0000:00:03.0 failed with error -22 [ 551.077324][T11482] syzkaller0: entered promiscuous mode [ 551.083173][T11482] syzkaller0: entered allmulticast mode [ 551.138012][T11482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1651'. [ 552.256197][T11445] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 553.028626][T11496] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1654'. [ 553.507483][ T5836] libceph: connect (1)[c::]:6789 error -101 [ 553.540152][ T5836] libceph: mon0 (1)[c::]:6789 connect error [ 553.616972][T11500] ceph: No mds server is up or the cluster is laggy [ 555.531612][T11516] syzkaller0: entered promiscuous mode [ 555.547639][T11516] syzkaller0: entered allmulticast mode [ 556.046571][T11520] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 556.123797][T11520] pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f] [ 556.145603][T11521] FAULT_INJECTION: forcing a failure. [ 556.145603][T11521] name failslab, interval 1, probability 0, space 0, times 0 [ 556.192396][T11521] CPU: 0 PID: 11521 Comm: syz.1.1662 Not tainted syzkaller #0 [ 556.211473][T11521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 556.211493][T11521] Call Trace: [ 556.211506][T11521] [ 556.228096][T11521] dump_stack_lvl+0x18c/0x250 [ 556.232845][T11521] ? show_regs_print_info+0x20/0x20 [ 556.238224][T11521] ? load_image+0x420/0x420 [ 556.242786][T11521] ? __might_sleep+0xe0/0xe0 [ 556.247583][T11521] ? __lock_acquire+0x7d80/0x7d80 [ 556.252754][T11521] should_fail_ex+0x394/0x4c0 [ 556.257686][T11521] should_failslab+0x9/0x20 [ 556.262259][T11521] slab_pre_alloc_hook+0x59/0x300 [ 556.267450][T11521] ? memcg_list_lru_alloc+0x335/0xb00 [ 556.272948][T11521] ? memcg_list_lru_alloc+0x335/0xb00 [ 556.278540][T11521] __kmem_cache_alloc_node+0x53/0x250 [ 556.284132][T11521] ? memcg_list_lru_alloc+0x335/0xb00 [ 556.289522][T11521] __kmalloc+0xa7/0x240 [ 556.293738][T11521] memcg_list_lru_alloc+0x335/0xb00 [ 556.299101][T11521] ? memcg_reparent_list_lrus+0x860/0x860 [ 556.304871][T11521] ? get_obj_cgroup_from_current+0xd4/0x280 [ 556.310916][T11521] slab_pre_alloc_hook+0x2ad/0x300 [ 556.316067][T11521] ? slab_pre_alloc_hook+0xb1/0x300 [ 556.321322][T11521] kmem_cache_alloc_lru+0x4d/0x2b0 [ 556.326498][T11521] ? __d_alloc+0x31/0x710 [ 556.330889][T11521] __d_alloc+0x31/0x710 [ 556.335077][T11521] d_alloc_pseudo+0x1d/0x70 [ 556.339738][T11521] alloc_file_pseudo+0xe4/0x210 [ 556.344608][T11521] ? fput+0x1a0/0x1a0 [ 556.348725][T11521] ? anon_inode_make_secure_inode+0xfb/0x160 [ 556.354849][T11521] ? do_compat_epoll_pwait+0x1c0/0x1c0 [ 556.360363][T11521] ? _raw_spin_unlock+0x28/0x40 [ 556.365341][T11521] __se_sys_memfd_secret+0x125/0x300 [ 556.371562][T11521] do_syscall_64+0x55/0xb0 [ 556.376436][T11521] ? clear_bhb_loop+0x40/0x90 [ 556.381351][T11521] ? clear_bhb_loop+0x40/0x90 [ 556.386247][T11521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 556.392255][T11521] RIP: 0033:0x7f4778d9e159 [ 556.396700][T11521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.416774][T11521] RSP: 002b:00007f4776ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 556.425406][T11521] RAX: ffffffffffffffda RBX: 00007f4779026090 RCX: 00007f4778d9e159 [ 556.433516][T11521] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 556.441627][T11521] RBP: 00007f4778e3506b R08: 0000000000000000 R09: 0000000000000000 [ 556.449627][T11521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.457795][T11521] R13: 00007f4779026128 R14: 00007f4779026090 R15: 00007ffc3e4b3838 [ 556.465910][T11521] [ 556.535703][T11520] pci 0000:00:03.0: BAR 1 [mem 0xfe800000-0xfe80007f] [ 556.676239][T11531] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1665'. [ 556.923237][T11520] virtio-pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f]: not claimed; can't enable device [ 556.966926][T11520] virtio-pci: probe of 0000:00:03.0 failed with error -22 [ 556.986966][ T6735] libceph: connect (1)[c::]:6789 error -101 [ 556.993374][ T6735] libceph: mon0 (1)[c::]:6789 connect error [ 557.024735][ T28] audit: type=1800 audit(1790437502.086:72): pid=11534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1666" name="id" dev="configfs" ino=30109 res=0 errno=0 [ 557.100240][T11537] ceph: No mds server is up or the cluster is laggy [ 557.918348][T11554] syzkaller0: entered promiscuous mode [ 557.924435][T11554] syzkaller0: entered allmulticast mode [ 559.202155][T11523] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 559.373779][T11565] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1674'. [ 559.500824][ T28] audit: type=1800 audit(1790437504.556:73): pid=11567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1676" name="id" dev="configfs" ino=31213 res=0 errno=0 [ 562.379042][T11591] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 562.515688][T11591] pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f] [ 562.601519][T11596] FAULT_INJECTION: forcing a failure. [ 562.601519][T11596] name failslab, interval 1, probability 0, space 0, times 0 [ 562.634870][T11596] CPU: 0 PID: 11596 Comm: syz.0.1684 Not tainted syzkaller #0 [ 562.642546][T11596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 562.652825][T11596] Call Trace: [ 562.656235][T11596] [ 562.659199][T11596] dump_stack_lvl+0x18c/0x250 [ 562.663912][T11596] ? show_regs_print_info+0x20/0x20 [ 562.669345][T11596] ? load_image+0x420/0x420 [ 562.673910][T11596] ? __might_sleep+0xe0/0xe0 [ 562.678733][T11596] ? __lock_acquire+0x7d80/0x7d80 [ 562.683812][T11596] should_fail_ex+0x394/0x4c0 [ 562.688523][T11596] should_failslab+0x9/0x20 [ 562.693046][T11596] slab_pre_alloc_hook+0x59/0x300 [ 562.698211][T11596] kmem_cache_alloc+0x5a/0x2c0 [ 562.703014][T11596] ? security_file_alloc+0x34/0x120 [ 562.708346][T11596] security_file_alloc+0x34/0x120 [ 562.713402][T11596] init_file+0x94/0x1f0 [ 562.717585][T11596] alloc_empty_file+0xb7/0x1d0 [ 562.722536][T11596] alloc_file+0x5b/0x600 [ 562.726802][T11596] alloc_file_pseudo+0x184/0x210 [ 562.731757][T11596] ? fput+0x1a0/0x1a0 [ 562.735749][T11596] ? anon_inode_make_secure_inode+0xfb/0x160 [ 562.742019][T11596] ? do_compat_epoll_pwait+0x1c0/0x1c0 [ 562.748102][T11596] ? _raw_spin_unlock+0x28/0x40 [ 562.753019][T11596] __se_sys_memfd_secret+0x125/0x300 [ 562.759148][T11596] do_syscall_64+0x55/0xb0 [ 562.764465][T11596] ? clear_bhb_loop+0x40/0x90 [ 562.769365][T11596] ? clear_bhb_loop+0x40/0x90 [ 562.774109][T11596] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 562.780224][T11596] RIP: 0033:0x7f9a2a59e159 [ 562.784819][T11596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.804735][T11596] RSP: 002b:00007f9a2b3bd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 562.813435][T11596] RAX: ffffffffffffffda RBX: 00007f9a2a826090 RCX: 00007f9a2a59e159 [ 562.821425][T11596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 562.829510][T11596] RBP: 00007f9a2a63506b R08: 0000000000000000 R09: 0000000000000000 [ 562.837667][T11596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.845825][T11596] R13: 00007f9a2a826128 R14: 00007f9a2a826090 R15: 00007fff93358d48 [ 562.853826][T11596] [ 562.952535][T11591] pci 0000:00:03.0: BAR 1 [mem 0xfe800000-0xfe80007f] [ 563.228942][T11591] virtio-pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f]: not claimed; can't enable device [ 563.270255][T11591] virtio-pci: probe of 0000:00:03.0 failed with error -22 [ 563.456894][ T28] audit: type=1800 audit(1790437508.516:74): pid=11609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1687" name="id" dev="configfs" ino=31283 res=0 errno=0 [ 563.638617][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.645210][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.591490][T11599] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 566.946169][T11635] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 567.016775][T11635] pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f] [ 567.034870][ T28] audit: type=1800 audit(1790437512.096:75): pid=11637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1697" name="id" dev="configfs" ino=30284 res=0 errno=0 [ 567.114657][T11640] FAULT_INJECTION: forcing a failure. [ 567.114657][T11640] name failslab, interval 1, probability 0, space 0, times 0 [ 567.134588][T11635] pci 0000:00:03.0: BAR 1 [mem 0xfe800000-0xfe80007f] [ 567.194496][T11640] CPU: 1 PID: 11640 Comm: syz.1.1696 Not tainted syzkaller #0 [ 567.202728][T11640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 567.213828][T11640] Call Trace: [ 567.217327][T11640] [ 567.220470][T11640] dump_stack_lvl+0x18c/0x250 [ 567.225191][T11640] ? show_regs_print_info+0x20/0x20 [ 567.230599][T11640] ? load_image+0x420/0x420 [ 567.235440][T11640] ? __might_sleep+0xe0/0xe0 [ 567.240682][T11640] ? __lock_acquire+0x7d80/0x7d80 [ 567.245854][T11640] should_fail_ex+0x394/0x4c0 [ 567.251924][T11640] should_failslab+0x9/0x20 [ 567.256695][T11640] slab_pre_alloc_hook+0x59/0x300 [ 567.262236][T11640] ? memcg_list_lru_alloc+0x335/0xb00 [ 567.268457][T11640] ? memcg_list_lru_alloc+0x335/0xb00 [ 567.274276][T11640] __kmem_cache_alloc_node+0x53/0x250 [ 567.280253][T11640] ? memcg_list_lru_alloc+0x335/0xb00 [ 567.286134][T11640] __kmalloc+0xa7/0x240 [ 567.290356][T11640] memcg_list_lru_alloc+0x335/0xb00 [ 567.295805][T11640] ? memcg_reparent_list_lrus+0x860/0x860 [ 567.301929][T11640] ? get_obj_cgroup_from_current+0xd4/0x280 [ 567.308077][T11640] slab_pre_alloc_hook+0x2ad/0x300 [ 567.313667][T11640] ? slab_pre_alloc_hook+0xb1/0x300 [ 567.319013][T11640] kmem_cache_alloc_lru+0x4d/0x2b0 [ 567.324388][T11640] ? __d_alloc+0x31/0x710 [ 567.329829][T11640] __d_alloc+0x31/0x710 [ 567.334826][T11640] d_alloc_pseudo+0x1d/0x70 [ 567.339448][T11640] alloc_file_pseudo+0xe4/0x210 [ 567.344694][T11640] ? fput+0x1a0/0x1a0 [ 567.348833][T11640] ? anon_inode_make_secure_inode+0xfb/0x160 [ 567.355495][T11640] ? do_compat_epoll_pwait+0x1c0/0x1c0 [ 567.361266][T11640] ? _raw_spin_unlock+0x28/0x40 [ 567.367233][T11640] __se_sys_memfd_secret+0x125/0x300 [ 567.373226][T11640] do_syscall_64+0x55/0xb0 [ 567.378127][T11640] ? clear_bhb_loop+0x40/0x90 [ 567.378161][T11640] ? clear_bhb_loop+0x40/0x90 [ 567.378186][T11640] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 567.378213][T11640] RIP: 0033:0x7f4778d9e159 [ 567.378235][T11640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.388006][T11640] RSP: 002b:00007f4776ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 567.388038][T11640] RAX: ffffffffffffffda RBX: 00007f4779026090 RCX: 00007f4778d9e159 [ 567.388055][T11640] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 567.388068][T11640] RBP: 00007f4778e3506b R08: 0000000000000000 R09: 0000000000000000 [ 567.388081][T11640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.388096][T11640] R13: 00007f4779026128 R14: 00007f4779026090 R15: 00007ffc3e4b3838 [ 567.399606][T11640] [ 567.429713][ C1] vkms_vblank_simulate: vblank timer overrun [ 570.003242][T11635] virtio-pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f]: not claimed; can't enable device [ 570.071129][T11635] virtio-pci: probe of 0000:00:03.0 failed with error -22 [ 572.189234][ T28] audit: type=1800 audit(1790437517.246:76): pid=11682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1707" name="id" dev="configfs" ino=31476 res=0 errno=0 [ 572.830482][T11694] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 574.270363][T11664] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 575.523594][T11703] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 575.564903][T11703] pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f] [ 575.645784][T11710] FAULT_INJECTION: forcing a failure. [ 575.645784][T11710] name failslab, interval 1, probability 0, space 0, times 0 [ 575.677286][ T8] libceph: connect (1)[c::]:6789 error -101 [ 575.683542][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 575.744502][T11703] pci 0000:00:03.0: BAR 1 [mem 0xfe800000-0xfe80007f] [ 575.790144][T11710] CPU: 0 PID: 11710 Comm: syz.3.1712 Not tainted syzkaller #0 [ 575.797709][T11710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 575.808198][T11710] Call Trace: [ 575.808212][T11710] [ 575.808221][T11710] dump_stack_lvl+0x18c/0x250 [ 575.808253][T11710] ? show_regs_print_info+0x20/0x20 [ 575.808279][T11710] ? load_image+0x420/0x420 [ 575.808304][T11710] ? __might_sleep+0xe0/0xe0 [ 575.808327][T11710] ? __lock_acquire+0x7d80/0x7d80 [ 575.808376][T11710] should_fail_ex+0x394/0x4c0 [ 575.808407][T11710] should_failslab+0x9/0x20 [ 575.808435][T11710] slab_pre_alloc_hook+0x59/0x300 [ 575.808466][T11710] kmem_cache_alloc+0x5a/0x2c0 [ 575.808490][T11710] ? security_file_alloc+0x34/0x120 [ 575.808522][T11710] security_file_alloc+0x34/0x120 [ 575.808551][T11710] init_file+0x94/0x1f0 [ 575.808574][T11710] alloc_empty_file+0xb7/0x1d0 [ 575.808595][T11710] alloc_file+0x5b/0x600 [ 575.808621][T11710] alloc_file_pseudo+0x184/0x210 [ 575.808642][T11710] ? fput+0x1a0/0x1a0 [ 575.808660][T11710] ? anon_inode_make_secure_inode+0xfb/0x160 [ 575.808690][T11710] ? do_compat_epoll_pwait+0x1c0/0x1c0 [ 575.808720][T11710] ? _raw_spin_unlock+0x28/0x40 [ 575.808753][T11710] __se_sys_memfd_secret+0x125/0x300 [ 575.808780][T11710] do_syscall_64+0x55/0xb0 [ 575.808803][T11710] ? clear_bhb_loop+0x40/0x90 [ 575.808827][T11710] ? clear_bhb_loop+0x40/0x90 [ 575.808853][T11710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 575.808878][T11710] RIP: 0033:0x7f7bd479e159 [ 575.808899][T11710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.808915][T11710] RSP: 002b:00007f7bd29d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 575.808940][T11710] RAX: ffffffffffffffda RBX: 00007f7bd4a26090 RCX: 00007f7bd479e159 [ 575.808956][T11710] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 575.808968][T11710] RBP: 00007f7bd483506b R08: 0000000000000000 R09: 0000000000000000 [ 575.808982][T11710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.808995][T11710] R13: 00007f7bd4a26128 R14: 00007f7bd4a26090 R15: 00007ffd90f92188 [ 575.809026][T11710] [ 575.809065][ C0] vkms_vblank_simulate: vblank timer overrun [ 575.821768][T11705] ceph: No mds server is up or the cluster is laggy [ 576.141924][ C0] vkms_vblank_simulate: vblank timer overrun [ 576.278780][ C0] vkms_vblank_simulate: vblank timer overrun [ 576.401197][T11703] virtio-pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f]: not claimed; can't enable device [ 576.471227][ T28] audit: type=1800 audit(1790437521.476:77): pid=11721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1716" name="id" dev="configfs" ino=31565 res=0 errno=0 [ 576.475404][T11703] virtio-pci: probe of 0000:00:03.0 failed with error -22 [ 576.491446][ C0] vkms_vblank_simulate: vblank timer overrun [ 577.934554][ T5836] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 578.431499][ T5836] usb 4-1: Using ep0 maxpacket: 8 [ 578.536357][ T5836] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 578.554310][ T5836] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 578.564587][ T5836] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 578.576826][ T5836] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 578.595311][ T5836] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 578.610491][ T5836] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 579.396234][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.716082][ T5836] usb 4-1: GET_CAPABILITIES returned 0 [ 579.721945][ T5836] usbtmc 4-1:16.0: can't read capabilities [ 580.346212][T11758] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 580.437062][ T5817] usb 4-1: USB disconnect, device number 31 [ 580.508837][ T28] audit: type=1800 audit(1790437525.566:78): pid=11759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1728" name="in_ports" dev="configfs" ino=30464 res=0 errno=0 [ 580.690307][T11766] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 581.548980][T11763] FAULT_INJECTION: forcing a failure. [ 581.548980][T11763] name failslab, interval 1, probability 0, space 0, times 0 [ 581.662167][T11763] CPU: 1 PID: 11763 Comm: syz.2.1729 Not tainted syzkaller #0 [ 581.669756][T11763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 581.679923][T11763] Call Trace: [ 581.683354][T11763] [ 581.684211][T11766] pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f] [ 581.686315][T11763] dump_stack_lvl+0x18c/0x250 [ 581.705590][T11763] ? show_regs_print_info+0x20/0x20 [ 581.711120][T11763] ? load_image+0x420/0x420 [ 581.716010][T11763] ? __might_sleep+0xe0/0xe0 [ 581.720627][T11763] ? __lock_acquire+0x7d80/0x7d80 [ 581.725685][T11763] should_fail_ex+0x394/0x4c0 [ 581.730387][T11763] should_failslab+0x9/0x20 [ 581.734904][T11763] slab_pre_alloc_hook+0x59/0x300 [ 581.739974][T11763] kmem_cache_alloc+0x5a/0x2c0 [ 581.744954][T11763] ? security_file_alloc+0x34/0x120 [ 581.750450][T11763] security_file_alloc+0x34/0x120 [ 581.755527][T11763] init_file+0x94/0x1f0 [ 581.759830][T11763] alloc_empty_file+0xb7/0x1d0 [ 581.764683][T11763] alloc_file+0x5b/0x600 [ 581.769338][T11763] alloc_file_pseudo+0x184/0x210 [ 581.774706][T11763] ? fput+0x1a0/0x1a0 [ 581.778830][T11763] ? anon_inode_make_secure_inode+0xfb/0x160 [ 581.784925][T11763] ? do_compat_epoll_pwait+0x1c0/0x1c0 [ 581.790523][T11763] ? _raw_spin_unlock+0x28/0x40 [ 581.795404][T11763] __se_sys_memfd_secret+0x125/0x300 [ 581.800823][T11763] do_syscall_64+0x55/0xb0 [ 581.805296][T11763] ? clear_bhb_loop+0x40/0x90 [ 581.810096][T11763] ? clear_bhb_loop+0x40/0x90 [ 581.814841][T11763] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 581.820948][T11763] RIP: 0033:0x7f26e639e159 [ 581.825415][T11763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.845509][T11763] RSP: 002b:00007f26e7348028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 581.853946][T11763] RAX: ffffffffffffffda RBX: 00007f26e6625fa0 RCX: 00007f26e639e159 [ 581.861931][T11763] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 581.870117][T11763] RBP: 00007f26e643506b R08: 0000000000000000 R09: 0000000000000000 [ 581.878378][T11763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.886688][T11763] R13: 00007f26e6626038 R14: 00007f26e6625fa0 R15: 00007ffe58de9178 [ 581.894790][T11763] [ 581.922124][T11766] pci 0000:00:03.0: BAR 1 [mem 0xfe800000-0xfe80007f] [ 582.337775][T11766] virtio-pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f]: not claimed; can't enable device [ 582.352314][T11766] virtio-pci: probe of 0000:00:03.0 failed with error -22 [ 582.479372][T11779] syzkaller0: entered promiscuous mode [ 582.486700][T11779] syzkaller0: entered allmulticast mode [ 583.051378][T11794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.052204][ T28] audit: type=1326 audit(1790437528.096:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.0.1738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2a59e159 code=0x7ffc0000 [ 583.052230][T11794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.052255][ T28] audit: type=1326 audit(1790437528.096:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.0.1738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9a2a59e159 code=0x7ffc0000 [ 583.052300][ T28] audit: type=1326 audit(1790437528.096:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.0.1738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2a59e159 code=0x7ffc0000 [ 583.052343][ T28] audit: type=1326 audit(1790437528.096:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.0.1738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2a59e159 code=0x7ffc0000 [ 583.052388][ T28] audit: type=1326 audit(1790437528.096:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.0.1738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9a2a59e159 code=0x7ffc0000 [ 583.052431][ T28] audit: type=1326 audit(1790437528.096:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.0.1738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2a59e159 code=0x7ffc0000 [ 583.052481][ T28] audit: type=1326 audit(1790437528.096:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.0.1738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2a59e159 code=0x7ffc0000 [ 583.052525][ T28] audit: type=1326 audit(1790437528.096:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.0.1738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9a2a59e159 code=0x7ffc0000 [ 583.052564][ T28] audit: type=1326 audit(1790437528.096:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.0.1738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2a59e159 code=0x7ffc0000 [ 583.180954][ C0] vkms_vblank_simulate: vblank timer overrun [ 583.214781][ C0] vkms_vblank_simulate: vblank timer overrun [ 583.398616][ C0] vkms_vblank_simulate: vblank timer overrun [ 583.611157][T11785] null_blk: disk rnullb0 created [ 583.688516][T11796] netlink: 'syz.0.1738': attribute type 30 has an invalid length. [ 584.597547][T11804] warning: `syz.2.1740' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 584.720077][T11808] syzkaller0: entered promiscuous mode [ 584.725831][T11808] syzkaller0: entered allmulticast mode [ 585.138998][T11773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 585.179093][T11816] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 585.918499][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 585.918513][ T28] audit: type=1800 audit(1790437530.976:123): pid=11821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1747" name="id" dev="configfs" ino=30677 res=0 errno=0 [ 587.071014][T11831] sctp: [Deprecated]: syz.3.1750 (pid 11831) Use of int in max_burst socket option deprecated. [ 587.071014][T11831] Use struct sctp_assoc_value instead [ 587.347838][T11837] futex_wake_op: syz.0.1754 tries to shift op by 144; fix this program [ 590.277329][T11879] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 590.309918][T11879] pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f] [ 590.348367][T11879] pci 0000:00:03.0: BAR 1 [mem 0xfe800000-0xfe80007f] [ 590.402212][T11880] FAULT_INJECTION: forcing a failure. [ 590.402212][T11880] name failslab, interval 1, probability 0, space 0, times 0 [ 590.431357][T11880] CPU: 1 PID: 11880 Comm: syz.1.1763 Not tainted syzkaller #0 [ 590.438916][T11880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 590.449217][T11880] Call Trace: [ 590.452785][T11880] [ 590.455865][T11880] dump_stack_lvl+0x18c/0x250 [ 590.460701][T11880] ? show_regs_print_info+0x20/0x20 [ 590.466040][T11880] ? load_image+0x420/0x420 [ 590.470679][T11880] ? __might_sleep+0xe0/0xe0 [ 590.475608][T11880] ? __lock_acquire+0x7d80/0x7d80 [ 590.480943][T11880] should_fail_ex+0x394/0x4c0 [ 590.486009][T11880] should_failslab+0x9/0x20 [ 590.490750][T11880] slab_pre_alloc_hook+0x59/0x300 [ 590.508408][T11880] ? memcg_list_lru_alloc+0x335/0xb00 [ 590.513944][T11880] ? memcg_list_lru_alloc+0x335/0xb00 [ 590.519996][T11880] __kmem_cache_alloc_node+0x53/0x250 [ 590.525556][T11880] ? memcg_list_lru_alloc+0x335/0xb00 [ 590.531206][T11880] __kmalloc+0xa7/0x240 [ 590.535592][T11880] memcg_list_lru_alloc+0x335/0xb00 [ 590.541530][T11880] ? memcg_reparent_list_lrus+0x860/0x860 [ 590.541572][T11880] ? get_obj_cgroup_from_current+0xd4/0x280 [ 590.541603][T11880] slab_pre_alloc_hook+0x2ad/0x300 [ 590.541630][T11880] ? slab_pre_alloc_hook+0xb1/0x300 [ 590.541663][T11880] kmem_cache_alloc_lru+0x4d/0x2b0 [ 590.541695][T11880] ? __d_alloc+0x31/0x710 [ 590.553891][T11880] __d_alloc+0x31/0x710 [ 590.564515][T11880] d_alloc_pseudo+0x1d/0x70 [ 590.564552][T11880] alloc_file_pseudo+0xe4/0x210 [ 590.564578][T11880] ? fput+0x1a0/0x1a0 [ 590.564599][T11880] ? anon_inode_make_secure_inode+0xfb/0x160 [ 590.574315][T11880] ? do_compat_epoll_pwait+0x1c0/0x1c0 [ 590.574352][T11880] ? _raw_spin_unlock+0x28/0x40 [ 590.574385][T11880] __se_sys_memfd_secret+0x125/0x300 [ 590.583451][T11880] do_syscall_64+0x55/0xb0 [ 590.598787][T11880] ? clear_bhb_loop+0x40/0x90 [ 590.609320][T11880] ? clear_bhb_loop+0x40/0x90 [ 590.609367][T11880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 590.619396][T11880] RIP: 0033:0x7f4778d9e159 [ 590.619427][T11880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.619447][T11880] RSP: 002b:00007f4776ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 590.619474][T11880] RAX: ffffffffffffffda RBX: 00007f4779026090 RCX: 00007f4778d9e159 [ 590.629032][T11880] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 590.639826][T11880] RBP: 00007f4778e3506b R08: 0000000000000000 R09: 0000000000000000 [ 590.660948][ C0] vkms_vblank_simulate: vblank timer overrun [ 590.669630][T11880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.669650][T11880] R13: 00007f4779026128 R14: 00007f4779026090 R15: 00007ffc3e4b3838 [ 590.669682][T11880] [ 590.944184][T11879] virtio-pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f]: not claimed; can't enable device [ 590.974341][T11879] virtio-pci: probe of 0000:00:03.0 failed with error -22 [ 591.085241][T11888] md/raid:md0: not clean -- starting background reconstruction [ 591.105796][T11888] md/raid:md0: device ram0 operational as raid disk 0 [ 591.146030][T11888] md/raid:md0: starting dirty degraded array with PPL. [ 591.146053][T11888] md/raid:md0: raid level 5 active with 1 out of 2 devices, algorithm 2 [ 591.148498][T11888] md/raid:md0: PPL space too small on ram0 [ 591.308577][T11888] md/raid:md0: failed to run raid set. [ 591.314658][T11888] md: pers->run() failed ... [ 591.954558][ T5785] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 591.961822][ T5781] Bluetooth: hci4: command 0x1003 tx timeout [ 592.945745][T11916] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 593.056384][T11916] pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f] [ 593.089355][T11916] pci 0000:00:03.0: BAR 1 [mem 0xfe800000-0xfe80007f] [ 593.310440][T11931] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1784'. [ 593.331406][T11927] md/raid:md0: not clean -- starting background reconstruction [ 593.358346][T11927] md/raid:md0: device ram0 operational as raid disk 0 [ 593.479482][T11927] md/raid:md0: starting dirty degraded array with PPL. [ 593.509484][T11927] md/raid:md0: raid level 5 active with 1 out of 2 devices, algorithm 2 [ 593.523045][T11927] sysfs: cannot create duplicate filename '/devices/virtual/block/md0/md/stripe_cache_size' [ 593.550695][T11927] CPU: 0 PID: 11927 Comm: syz.3.1782 Not tainted syzkaller #0 [ 593.550724][T11927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 593.550738][T11927] Call Trace: [ 593.550748][T11927] [ 593.574773][T11927] dump_stack_lvl+0x18c/0x250 [ 593.579518][T11927] ? show_regs_print_info+0x20/0x20 [ 593.584802][T11927] ? load_image+0x420/0x420 [ 593.584852][T11927] sysfs_warn_dup+0x8e/0xa0 [ 593.593911][T11927] sysfs_add_file_mode_ns+0x285/0x2f0 [ 593.599330][T11927] internal_create_group+0x431/0xd10 [ 593.604651][T11927] ? sysfs_create_group+0x20/0x20 [ 593.609780][T11927] ? print_raid5_conf+0x49/0x580 [ 593.615572][T11927] raid5_run+0x1dda/0x2a00 [ 593.620228][T11927] md_run+0x10b3/0x2210 [ 593.624534][T11927] do_md_run+0x34/0x410 [ 593.628901][T11927] array_state_store+0x696/0x980 [ 593.633874][T11927] md_attr_store+0x196/0x380 [ 593.638570][T11927] ? sysfs_kf_read+0x360/0x360 [ 593.643365][T11927] kernfs_fop_write_iter+0x3a4/0x520 [ 593.648694][T11927] vfs_write+0x474/0x9a0 [ 593.653262][T11927] ? file_end_write+0x250/0x250 [ 593.659063][T11927] ? __fget_files+0x3fc/0x460 [ 593.663881][T11927] ? __fdget_pos+0x2a3/0x330 [ 593.668666][T11927] ? ksys_write+0x74/0x260 [ 593.673130][T11927] ksys_write+0x151/0x260 [ 593.677491][T11927] ? __ia32_sys_read+0x90/0x90 [ 593.682291][T11927] ? lockdep_hardirqs_on+0x98/0x150 [ 593.687682][T11927] do_syscall_64+0x55/0xb0 [ 593.692211][T11927] ? clear_bhb_loop+0x40/0x90 [ 593.696910][T11927] ? clear_bhb_loop+0x40/0x90 [ 593.701868][T11927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 593.707816][T11927] RIP: 0033:0x7f7bd479e159 [ 593.712252][T11927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.732227][T11927] RSP: 002b:00007f7bd29f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 593.740927][T11927] RAX: ffffffffffffffda RBX: 00007f7bd4a25fa0 RCX: 00007f7bd479e159 [ 593.749370][T11927] RDX: 0000000000000006 RSI: 0000200000000a40 RDI: 000000000000000f [ 593.757734][T11927] RBP: 00007f7bd483506b R08: 0000000000000000 R09: 0000000000000000 [ 593.766854][T11927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 593.775585][T11927] R13: 00007f7bd4a26038 R14: 00007f7bd4a25fa0 R15: 00007ffd90f92188 [ 593.783953][T11927] [ 593.787073][ C0] vkms_vblank_simulate: vblank timer overrun [ 593.848330][T11916] virtio-pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f]: not claimed; can't enable device [ 593.860705][T11916] virtio-pci: probe of 0000:00:03.0 failed with error -22 [ 593.977399][T11927] raid5: failed to create sysfs attributes for md0 [ 594.045447][T11927] md/raid:md0: PPL space too small on ram0 [ 594.607184][T11927] md/raid:md0: failed to run raid set. [ 594.612732][T11927] md: pers->run() failed ... [ 595.023891][T11958] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 595.062628][ T28] audit: type=1800 audit(1790437540.116:124): pid=11960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1796" name="id" dev="configfs" ino=33010 res=0 errno=0 [ 595.114231][T11958] pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f] [ 595.277525][T11958] pci 0000:00:03.0: BAR 1 [mem 0xfe800000-0xfe80007f] [ 595.384409][T11963] FAULT_INJECTION: forcing a failure. [ 595.384409][T11963] name failslab, interval 1, probability 0, space 0, times 0 [ 595.481050][T11963] CPU: 1 PID: 11963 Comm: syz.1.1795 Not tainted syzkaller #0 [ 595.500393][T11963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 595.500412][T11963] Call Trace: [ 595.500425][T11963] [ 595.513880][T11963] dump_stack_lvl+0x18c/0x250 [ 595.521581][T11963] ? show_regs_print_info+0x20/0x20 [ 595.521620][T11963] ? load_image+0x420/0x420 [ 595.531600][T11963] ? __might_sleep+0xe0/0xe0 [ 595.531634][T11963] ? __lock_acquire+0x7d80/0x7d80 [ 595.541594][T11963] should_fail_ex+0x394/0x4c0 [ 595.541637][T11963] should_failslab+0x9/0x20 [ 595.550796][T11963] slab_pre_alloc_hook+0x59/0x300 [ 595.550832][T11963] ? memcg_list_lru_alloc+0x335/0xb00 [ 595.556197][T11963] ? memcg_list_lru_alloc+0x335/0xb00 [ 595.556224][T11963] __kmem_cache_alloc_node+0x53/0x250 [ 595.567140][T11963] ? memcg_list_lru_alloc+0x335/0xb00 [ 595.567168][T11963] __kmalloc+0xa7/0x240 [ 595.567201][T11963] memcg_list_lru_alloc+0x335/0xb00 [ 595.577976][T11963] ? memcg_reparent_list_lrus+0x860/0x860 [ 595.578022][T11963] ? get_obj_cgroup_from_current+0xd4/0x280 [ 595.587379][T11963] slab_pre_alloc_hook+0x2ad/0x300 [ 595.587413][T11963] ? slab_pre_alloc_hook+0xb1/0x300 [ 595.599042][T11963] kmem_cache_alloc_lru+0x4d/0x2b0 [ 595.609879][T11963] ? __d_alloc+0x31/0x710 [ 595.609910][T11963] __d_alloc+0x31/0x710 [ 595.609936][T11963] d_alloc_pseudo+0x1d/0x70 [ 595.640839][T11963] alloc_file_pseudo+0xe4/0x210 [ 595.640879][T11963] ? fput+0x1a0/0x1a0 [ 595.664198][T11963] ? anon_inode_make_secure_inode+0xfb/0x160 [ 595.664245][T11963] ? do_compat_epoll_pwait+0x1c0/0x1c0 [ 595.686177][T11963] ? _raw_spin_unlock+0x28/0x40 [ 595.686238][T11963] __se_sys_memfd_secret+0x125/0x300 [ 595.706001][T11963] do_syscall_64+0x55/0xb0 [ 595.706043][T11963] ? clear_bhb_loop+0x40/0x90 [ 595.725061][T11963] ? clear_bhb_loop+0x40/0x90 [ 595.725107][T11963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 595.745202][T11963] RIP: 0033:0x7f4778d9e159 [ 595.745233][T11963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.784454][T11963] RSP: 002b:00007f4776ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 595.784495][T11963] RAX: ffffffffffffffda RBX: 00007f4779026090 RCX: 00007f4778d9e159 [ 595.792931][ C0] vkms_vblank_simulate: vblank timer overrun [ 595.800880][T11963] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 595.815075][T11963] RBP: 00007f4778e3506b R08: 0000000000000000 R09: 0000000000000000 [ 595.815099][T11963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 595.815112][T11963] R13: 00007f4779026128 R14: 00007f4779026090 R15: 00007ffc3e4b3838 [ 595.815144][T11963] [ 595.867025][T11958] virtio-pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f]: not claimed; can't enable device [ 595.924370][T11958] virtio-pci: probe of 0000:00:03.0 failed with error -22 [ 596.582913][T11976] binder: 11955:11976 unknown command 1074553619 [ 596.589864][T11976] binder: 11955:11976 ioctl c0306201 200000000040 returned -22 [ 597.029622][T11984] md/raid:md0: not clean -- starting background reconstruction [ 597.038461][T11984] md/raid:md0: device ram0 operational as raid disk 0 [ 597.130921][T11984] md/raid:md0: starting dirty degraded array with PPL. [ 597.156992][T11984] md/raid:md0: raid level 5 active with 1 out of 2 devices, algorithm 2 [ 597.189797][T11984] md/raid:md0: PPL space too small on ram0 [ 597.290201][ T28] audit: type=1800 audit(1790437542.346:125): pid=11992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1805" name="id" dev="configfs" ino=33139 res=0 errno=0 [ 597.568673][T11998] loop2: detected capacity change from 0 to 512 [ 598.480232][T11984] md/raid:md0: failed to run raid set. [ 598.485034][T11998] ------------[ cut here ]------------ [ 598.491680][T11998] EA inode 11 i_nlink=0 [ 598.491937][T11998] WARNING: CPU: 1 PID: 11998 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x572/0x5d0 [ 598.508063][T11998] Modules linked in: [ 598.512017][T11998] CPU: 1 PID: 11998 Comm: syz.2.1806 Not tainted syzkaller #0 [ 598.514953][T11984] md: pers->run() failed ... [ 598.519717][T11998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 598.534524][T11998] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 598.534562][T11998] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 91 f5 98 ff 49 8b 34 24 48 c7 c7 60 df de 8a 44 89 fa e8 5e 2d 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 d8 27 4a 08 [ 598.534583][T11998] RSP: 0018:ffffc9000c99f360 EFLAGS: 00010246 [ 598.534600][T11998] [ 598.534609][T11998] RAX: b327089383356e00 RBX: ffff8880771ce8a8 RCX: 0000000000080000 [ 598.534627][T11998] RDX: ffffc9000ff01000 RSI: 000000000003bb08 RDI: 000000000003bb09 [ 598.534642][T11998] RBP: ffffc9000c99f450 R08: ffffc9000c99ef67 R09: 1ffff92001933dec [ 598.534658][T11998] R10: dffffc0000000000 R11: fffff52001933ded R12: ffff8880771ce700 [ 598.534674][T11998] R13: ffffc9000c99f3c0 R14: dffffc0000000000 R15: 0000000000000000 [ 598.534689][T11998] FS: 00007f26e73066c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 598.534707][T11998] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 598.534722][T11998] CR2: 00007fd179955000 CR3: 0000000055626000 CR4: 00000000003506e0 [ 598.534742][T11998] Call Trace: [ 598.534753][T11998] [ 598.534771][T11998] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 598.534803][T11998] ? __ext4_journal_ensure_credits+0x30/0x450 [ 598.534836][T11998] ext4_xattr_inode_dec_ref_all+0x9bb/0x1030 [ 598.579255][T11998] ? ext4_xattr_delete_inode+0xd00/0xd00 [ 598.587660][T11998] ? __ext4_journal_ensure_credits+0x450/0x450 [ 598.603823][T11998] ext4_xattr_delete_inode+0xb3b/0xd00 [ 598.621329][T11998] ? ext4_expand_extra_isize_ea+0x1ea0/0x1ea0 [ 598.636477][T11998] ? __ext4_mark_inode_dirty+0x50d/0x720 [ 598.643815][T11998] ext4_evict_inode+0xa88/0xe70 [ 598.662694][T11998] ? evict+0x482/0x8a0 [ 598.702111][T11998] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 598.708233][T11998] ? do_raw_spin_unlock+0x121/0x230 [ 598.708273][T11998] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 598.708305][T11998] evict+0x4b7/0x8a0 [ 598.723775][T11998] ? __lock_acquire+0x7d80/0x7d80 [ 598.728959][T11998] ? proc_nr_inodes+0x230/0x230 [ 598.733865][T11998] ? do_raw_spin_unlock+0x121/0x230 [ 598.739246][T11998] ? _raw_spin_unlock+0x28/0x40 [ 598.744213][T11998] ext4_orphan_cleanup+0xdff/0x1650 [ 598.749679][T11998] ? ext4_orphan_file_block_trigger+0x440/0x440 [ 598.756358][T11998] ? ext4_orphan_del+0xc90/0xc90 [ 598.761858][T11998] ? ext4_register_li_request+0x182/0x930 [ 598.761892][T11998] ? errseq_check_and_advance+0x66/0x120 [ 598.761922][T11998] ext4_fill_super+0x5fb5/0x6870 [ 598.779060][T11998] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 598.785479][T11998] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 598.791709][T11998] ? preempt_schedule_notrace+0x110/0x110 [ 598.797699][T11998] ? lock_chain_count+0x20/0x20 [ 598.802822][T11998] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 598.808633][T11998] ? get_tree_bdev+0x34f/0x520 [ 598.813762][T11998] get_tree_bdev+0x3e5/0x520 [ 598.813798][T11998] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 598.825744][T11998] ? setup_bdev_super+0x660/0x660 [ 598.830932][T11998] ? apparmor_capable+0x137/0x1a0 [ 598.836477][T11998] ? bpf_lsm_capable+0x9/0x10 [ 598.841651][T11998] ? security_capable+0x89/0xb0 [ 598.846650][T11998] vfs_get_tree+0x8c/0x280 [ 598.851210][T11998] do_new_mount+0x24a/0xa40 [ 598.856098][T11998] __se_sys_mount+0x2e7/0x3d0 [ 598.856139][T11998] ? __x64_sys_mount+0xc0/0xc0 [ 598.856169][T11998] ? lockdep_hardirqs_on+0x98/0x150 [ 598.856193][T11998] ? __x64_sys_mount+0x20/0xc0 [ 598.865748][T11998] do_syscall_64+0x55/0xb0 [ 598.880510][T11998] ? clear_bhb_loop+0x40/0x90 [ 598.885295][T11998] ? clear_bhb_loop+0x40/0x90 [ 598.885336][T11998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 598.885366][T11998] RIP: 0033:0x7f26e639f3ca [ 598.900815][T11998] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.900845][T11998] RSP: 002b:00007f26e7305e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 598.930102][T11998] RAX: ffffffffffffffda RBX: 00007f26e7305ee0 RCX: 00007f26e639f3ca [ 598.938203][T11998] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f26e7305ea0 [ 598.946319][T11998] RBP: 0000200000000180 R08: 00007f26e7305ee0 R09: 0000000000000000 [ 598.946644][T12005] FAULT_INJECTION: forcing a failure. [ 598.946644][T12005] name failslab, interval 1, probability 0, space 0, times 0 [ 598.954710][T11998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 598.954739][T11998] R13: 00007f26e7305ea0 R14: 000000000000048d R15: 000000000000002c [ 598.954775][T11998] [ 598.969695][ T787] Added buffer head 0 to ffff88814127f800 [ 598.976439][T11998] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 598.976451][T11998] CPU: 1 PID: 11998 Comm: syz.2.1806 Not tainted syzkaller #0 [ 598.976471][T11998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 598.976482][T11998] Call Trace: [ 598.976492][T11998] [ 598.976502][T11998] dump_stack_lvl+0x18c/0x250 [ 598.976535][T11998] ? show_regs_print_info+0x20/0x20 [ 598.976560][T11998] ? load_image+0x420/0x420 [ 598.976594][T11998] panic+0x2ca/0x720 [ 598.976619][T11998] ? bpf_jit_dump+0xd0/0xd0 [ 598.976656][T11998] __warn+0x2e0/0x470 [ 598.976673][T11998] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 598.976694][T11998] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 598.976712][T11998] report_bug+0x2be/0x4f0 [ 598.976810][T11998] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 598.976829][T11998] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 598.976847][T11998] ? ext4_xattr_inode_update_ref+0x574/0x5d0 [ 598.976864][T11998] handle_bug+0xcf/0x120 [ 598.976890][T11998] exc_invalid_op+0x1a/0x50 [ 598.976913][T11998] asm_exc_invalid_op+0x1a/0x20 [ 598.976945][T11998] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 598.976966][T11998] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 91 f5 98 ff 49 8b 34 24 48 c7 c7 60 df de 8a 44 89 fa e8 5e 2d 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 d8 27 4a 08 [ 598.976981][T11998] RSP: 0018:ffffc9000c99f360 EFLAGS: 00010246 [ 598.976999][T11998] RAX: b327089383356e00 RBX: ffff8880771ce8a8 RCX: 0000000000080000 [ 598.977013][T11998] RDX: ffffc9000ff01000 RSI: 000000000003bb08 RDI: 000000000003bb09 [ 598.977026][T11998] RBP: ffffc9000c99f450 R08: ffffc9000c99ef67 R09: 1ffff92001933dec [ 598.977039][T11998] R10: dffffc0000000000 R11: fffff52001933ded R12: ffff8880771ce700 [ 598.977052][T11998] R13: ffffc9000c99f3c0 R14: dffffc0000000000 R15: 0000000000000000 [ 598.977090][T11998] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 598.977115][T11998] ? __ext4_journal_ensure_credits+0x30/0x450 [ 598.977148][T11998] ext4_xattr_inode_dec_ref_all+0x9bb/0x1030 [ 598.977192][T11998] ? ext4_xattr_delete_inode+0xd00/0xd00 [ 598.977221][T11998] ? __ext4_journal_ensure_credits+0x450/0x450 [ 598.977256][T11998] ext4_xattr_delete_inode+0xb3b/0xd00 [ 598.977293][T11998] ? ext4_expand_extra_isize_ea+0x1ea0/0x1ea0 [ 598.977321][T11998] ? __ext4_mark_inode_dirty+0x50d/0x720 [ 598.977356][T11998] ext4_evict_inode+0xa88/0xe70 [ 598.977378][T11998] ? evict+0x482/0x8a0 [ 598.977408][T11998] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 598.977436][T11998] ? do_raw_spin_unlock+0x121/0x230 [ 598.977463][T11998] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 598.977487][T11998] evict+0x4b7/0x8a0 [ 598.977509][T11998] ? __lock_acquire+0x7d80/0x7d80 [ 598.977534][T11998] ? proc_nr_inodes+0x230/0x230 [ 598.977557][T11998] ? do_raw_spin_unlock+0x121/0x230 [ 598.977583][T11998] ? _raw_spin_unlock+0x28/0x40 [ 598.977613][T11998] ext4_orphan_cleanup+0xdff/0x1650 [ 598.977639][T11998] ? ext4_orphan_file_block_trigger+0x440/0x440 [ 598.977663][T11998] ? ext4_orphan_del+0xc90/0xc90 [ 598.977684][T11998] ? ext4_register_li_request+0x182/0x930 [ 598.977704][T11998] ? errseq_check_and_advance+0x66/0x120 [ 598.977729][T11998] ext4_fill_super+0x5fb5/0x6870 [ 598.977777][T11998] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 598.977798][T11998] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 598.977819][T11998] ? preempt_schedule_notrace+0x110/0x110 [ 598.977846][T11998] ? lock_chain_count+0x20/0x20 [ 598.977878][T11998] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 598.977908][T11998] ? get_tree_bdev+0x34f/0x520 [ 598.977944][T11998] get_tree_bdev+0x3e5/0x520 [ 598.977966][T11998] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 598.977988][T11998] ? setup_bdev_super+0x660/0x660 [ 598.978008][T11998] ? apparmor_capable+0x137/0x1a0 [ 598.978030][T11998] ? bpf_lsm_capable+0x9/0x10 [ 598.978047][T11998] ? security_capable+0x89/0xb0 [ 598.978072][T11998] vfs_get_tree+0x8c/0x280 [ 598.978095][T11998] do_new_mount+0x24a/0xa40 [ 598.978123][T11998] __se_sys_mount+0x2e7/0x3d0 [ 598.978150][T11998] ? __x64_sys_mount+0xc0/0xc0 [ 598.978174][T11998] ? lockdep_hardirqs_on+0x98/0x150 [ 598.978191][T11998] ? __x64_sys_mount+0x20/0xc0 [ 598.978213][T11998] do_syscall_64+0x55/0xb0 [ 598.978235][T11998] ? clear_bhb_loop+0x40/0x90 [ 598.978257][T11998] ? clear_bhb_loop+0x40/0x90 [ 598.978282][T11998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 598.978305][T11998] RIP: 0033:0x7f26e639f3ca [ 598.978323][T11998] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.978337][T11998] RSP: 002b:00007f26e7305e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 598.978356][T11998] RAX: ffffffffffffffda RBX: 00007f26e7305ee0 RCX: 00007f26e639f3ca [ 598.978370][T11998] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f26e7305ea0 [ 598.978383][T11998] RBP: 0000200000000180 R08: 00007f26e7305ee0 R09: 0000000000000000 [ 598.978395][T11998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 598.978407][T11998] R13: 00007f26e7305ea0 R14: 000000000000048d R15: 000000000000002c [ 598.978436][T11998] [ 598.984618][T11998] Kernel Offset: disabled