last executing test programs: 3m0.114545187s ago: executing program 1 (id=390): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) pread64(r0, 0x0, 0x0, 0x5) 2m59.936514355s ago: executing program 1 (id=391): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0xbd) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, r3) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r4}, 0x0, 0x0, 0x0) 2m58.426430915s ago: executing program 1 (id=393): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\x1c\xe4\xd8\xb58\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\x00\b\x00\x00X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31\xb0\x87O\xc3\xa3AW\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]~\xfc1\xe5w\"\xa3\x8d\xe7\xd4x\xb3\xfa(\xc9\xc2bb\xb1\xa8\xe1\xc2\xec\xca\x7f\xe1\x1e\xb9\xd4\x80-6L\x91\x9b\xad\x85`\xf2+\xfbN+\x0e\xa6\xc4M\xda\xfc\xa1gZ)STB\xd1\xd1\xf1', 0x1) ftruncate(r4, 0x80007) finit_module(r4, 0x0, 0x7) 2m54.936835928s ago: executing program 1 (id=401): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 2m51.754624065s ago: executing program 1 (id=407): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x10) 2m51.537287286s ago: executing program 1 (id=410): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e23, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x3, 0xfffffffe, @private1}}}, 0x108) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000001c0)=0x2001) r2 = fcntl$dupfd(r1, 0x0, r1) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$snddsp(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 2m36.264585697s ago: executing program 32 (id=410): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e23, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x3, 0xfffffffe, @private1}}}, 0x108) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000001c0)=0x2001) r2 = fcntl$dupfd(r1, 0x0, r1) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$snddsp(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 12.514878487s ago: executing program 2 (id=767): connect$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) close(0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050401000000000000000a0000000900010073797a300000000040000000120a050402000000000000000a0000000900010073797a30000000000900020073797a310000000008000300000000050c0004"], 0x88}}, 0x0) 11.260275625s ago: executing program 2 (id=775): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0xbd) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) 10.143551817s ago: executing program 2 (id=784): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0xbd) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) 7.485510681s ago: executing program 2 (id=789): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tkill(0x0, 0x3b) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000440)=""/107) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x208080, 0x0) 3.21221581s ago: executing program 0 (id=819): io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f00000008c0)={0xa, 0x0, 0x0, &(0x7f0000000740), &(0x7f0000000800)=[0x2, 0x4]}, 0x20) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) 3.040130008s ago: executing program 2 (id=822): socket(0x840000000002, 0x3, 0x100) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt+bH/ved+a93TcznQmgbQ2kf5KIbRHxe0T0ZdnbFxjI3ubnZsZuzs2MJbGw8PbfSWW5G3MzY8WixXpb88yhUkTpsySOJ0vLnbp46cxouTxxPs8PTZ/9cGjq4qXnTp8dPTVxauLcyLFjR48Mv/jCyPNrEmca1429H0/u2/P6u1ffHDtx9b2fvk2rtXt/Nr86jju6WSegOgbSrfbPQkXtvCebqPu9YHtVOulsYUVoSkdEpLurq9L/+6IjFndeX7z2aUsrB6yr9LdpS+PZswvAJpZEq2sAtEbxQ58e/xavDRp6/C9cfzmiO0/Pz82Mzd+KvzNK+fSudSx/ICJOzP77VfqKZs9DAACsQmVs82y98V8pdlfes2sdO/JrKP0RcX9E7IyIByJiV0Q8GFFZ9qGIeDhbeaFvheUP1OSXjn9K1+rWeY2k47+XqsZ+81Xx52/9HXlueyX+ruTk6fLE4XybHIquLWl+eJkyvn/1ty8azase/6WvtPxiLJhX4FpnzQm68dHp0bXaCNcvR+ztrBd/cutKQNoC9kTE3uY+ekeROP30N/saLXTn+JexBteZFr6OeCrb/7NRE38hWf765FBPlCcODxWtYqmff73yVqPy7yr+NXD9wCNZYnH/1yxR1dDK5YnzU82XceWPzxse06y2/Xcn71T65C/vZ9MujE5Pnx+O6E7eqOSLY7rK9JHFdS+MTvem+WL5tP0fOli//+/M10n3f7qV0ka8PyIejYjH8ro/HhEHIuLgMvH/+MoTHywTfxJJtG7/X44Yr/v9d6v99yfV1+tXkeg488N3ja6Yr2z/H43ZyndtpvL9dwcrreBdbj4AAAC4J5QiYlskpcEsPbAtSqXBwex/+HfFfaXy5NT0MycnPzo3nt0j0B9dpeJMV1/V+dDhZDb/xCw/kp8rLuYfyc8bf9nRW8kPjk2Wx1scO7S7rbf3/yj6f+qvjlbXDlh37teC9lXb/0stqgew8Vby++9YADan2/t/T/qnt1V1ATaW439oX/X6/yc1eeN/2JyW9v8/6zyyDtiMjP+hfen/0L70f2hLzdzOH8cbzeqJiGYeC1DcLLD6pwr0rPgO/3ZJFE+8WM+yeuPSme58SpRaFGlHk41tUyTSHrOxhS4+QwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBe9l8AAAD//3ow3kU=") syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0], 0xfe, 0x123a, &(0x7f00000024c0)="$eJzs3E9rHGUcB/CfmzSpSfNHrdUK0gd70cuQ5OBFQYKkIF1Q2kZoBWFqNrpk3A2ZJbAijZ7Em2/Bq3jUkyDe9BIPgu/AWy4ePagj3UlrViNRW7s1fD6Xfdjn+Q6/Z2YYeJZ9Zu/5j97eWC+z9bwXjQdeiMZmxPgvKVI04pb34pnnvv7myctXr11cbjZXLqV0YfnK4rMppdlzX7727qdPfdWbfvWz2S8mY3f+9b0fl37YPbN7du/XK2+1y9QuU6fbS3m63u328utFK621y40spVeKVl62UrtTtraG+teL7uZmP+WdtZmpza1WWaa8008brX7qdVNvq5/yN/N2J2VZlmamgjux+slPVVVFVNWJmIiqqqoHYyoacSpmYjbmYj4eiofjkTgdj8aZeCwej7ODUREToy4dAAAAAAAAAAAAAAAAAAAAjpHD9v9PD+////zU/tiD+/8Hzo2wcAAAAAAAAAAAAAAAAAAAADhGLl+9dnG52Vy5lNLJiOKD7dXt1fqz7l9ej3YU0YqFmIufY7D7v1a3J6K5spAG5uP9Ymc/v7O9OjacXxy8TuBP+QsvNVcW63wazk/G1MH8UszF6cPzS3/Inx/kT8bT5w/ks5iL796IbhSxFjezv+dvLKb04svN2/lvd+u5r43wugAAAMDdlKXbDl2/Z9lf9df5o34fuLm+Xjh0fT8eT4yPdu5ElP13NvKiaG2NvHGrovqbnYi4Twr7141GRPS/j4i7dMAPb9Rn6G+nJo4afOLI40yP4NR9PB1xB/GxoRvpvrgT/o+No54cY//dQ4l7Zv+iT466DgAAAAAAAAAAAP6Ze/F3wlHPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiNHTgWAAAAABDmb51GxwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXwUAAP//vGrDtw==") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80c40a, &(0x7f0000000900)={[{@noblock_validity}, {@dioread_nolock}, {@nolazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3}}, {@noload}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$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") chdir(0x0) socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4040010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) 3.019582379s ago: executing program 0 (id=823): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) r1 = fsmount(r0, 0x0, 0x82) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) pread64(r2, &(0x7f0000000240)=""/91, 0x5b, 0x7) 2.940259862s ago: executing program 0 (id=824): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x8000, &(0x7f0000000280)=ANY=[], 0x1, 0x278, &(0x7f0000000000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write(r0, &(0x7f0000000080)='-', 0x1) 2.825108098s ago: executing program 0 (id=826): ioctl(0xffffffffffffffff, 0x8916, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc013fd04, &(0x7f00000000c0)="040000000000000000380100fc370100000000c42db0225c289d1ff7a07a84a87916bdc91100ed175bfc") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) 1.92303203s ago: executing program 3 (id=828): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000240)=""/203, 0xcb, 0x9) 1.832286954s ago: executing program 0 (id=830): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tkill(0x0, 0x3b) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000440)=""/107) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x208080, 0x0) 1.647526533s ago: executing program 3 (id=832): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) r1 = fsmount(r0, 0x0, 0x82) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) pread64(r2, &(0x7f0000000240)=""/91, 0x5b, 0x7) 1.536291918s ago: executing program 4 (id=833): r0 = syz_io_uring_setup(0x26b6, 0x0, &(0x7f0000000080), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000008c0)={0xa, 0x0, 0x0, &(0x7f0000000740), &(0x7f0000000800)=[0x2, 0x4]}, 0x20) 1.428382393s ago: executing program 3 (id=834): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x8000, &(0x7f0000000280)=ANY=[], 0x1, 0x278, &(0x7f0000000000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write(r0, &(0x7f0000000080)='-', 0x1) 1.333830137s ago: executing program 4 (id=835): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="9800000000010104000000000000000002000000240001"], 0x98}}, 0x4004000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 992.327983ms ago: executing program 3 (id=836): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @empty}, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x900}, 0x0) 992.090393ms ago: executing program 4 (id=837): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x1000, 0x2, 0x0, 0xa0, 0x2e}, 0x0, 0x3}, [@migrate={0x50, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x32, 0x2, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 804.510582ms ago: executing program 3 (id=838): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000140)='0x1d6b\n', 0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0), 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/bcdDevice\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000b40), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='0123456789\n', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='HID Gadget\n', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0) write(r3, &(0x7f00000006c0)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) write(r4, &(0x7f0000000840), 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, &(0x7f00000008c0)="05010906a101050719e029e71500250175019508810295017508810395057501050819012905910295017503910395067508150025650507190029658100c0", 0x3f) symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000a40)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000b00)={0x0, 0x1dcd6500}, 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) write$hidraw(r7, &(0x7f0000000c40)="0001", 0x2) 796.005353ms ago: executing program 4 (id=839): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x80, &(0x7f0000000540)={[{@grpjquota}, {@usrquota}, {@bh}, {@sb={'sb', 0x3d, 0xc4}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@test_dummy_encryption}, {@dioread_lock}, {@block_validity}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x463, &(0x7f0000001900)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="9800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1414160800074000000005080004800400038008000840"], 0x98}}, 0x4004000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 424.25632ms ago: executing program 4 (id=840): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x11ba80, 0x8) r1 = openat(r0, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x521802, 0x0) read(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x9, 0x2, 0x2, 0x2, 0x7ff, 0xc, 0x8, {0x0, @in6={{0xa, 0x4e1e, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffff7fff}}, 0x5, 0x7, 0x4, 0x2, 0x4}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x26fe9}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000240)=""/203, 0xcb, 0x9) 100.591925ms ago: executing program 2 (id=841): r0 = syz_io_uring_setup(0x26b6, 0x0, &(0x7f0000000080), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000008c0)={0xa, 0x0, 0x0, &(0x7f0000000740), &(0x7f0000000800)=[0x2, 0x4]}, 0x20) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 49.718287ms ago: executing program 0 (id=842): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) r1 = fsmount(r0, 0x0, 0x82) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) pread64(r2, &(0x7f0000000240)=""/91, 0x5b, 0x7) 316.29µs ago: executing program 4 (id=843): r0 = syz_io_uring_setup(0x26b6, &(0x7f0000000200)={0x0, 0xf906, 0x800, 0x0, 0x308}, 0x0, &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000008c0)={0xa, 0x0, 0x0, &(0x7f0000000740), &(0x7f0000000800)=[0x2, 0x4]}, 0x20) 0s ago: executing program 3 (id=844): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x8000, &(0x7f0000000280)=ANY=[], 0x1, 0x278, &(0x7f0000000000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write(r0, &(0x7f0000000080)='-', 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.36' (ED25519) to the list of known hosts. [ 76.760812][ T5764] cgroup: Unknown subsys name 'net' [ 76.925794][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.567687][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.266962][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.278213][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.286676][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.294684][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.304939][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.318359][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.338828][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.347072][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.354987][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.363580][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.371742][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.388393][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.405601][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.413078][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.420321][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.423474][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.430242][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.447049][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.455053][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.466175][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.474398][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.489355][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.498315][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.509970][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.879982][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 81.019771][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 81.060856][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 81.108373][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.116062][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.123701][ T5781] bridge_slave_0: entered allmulticast mode [ 81.131280][ T5781] bridge_slave_0: entered promiscuous mode [ 81.147360][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.154678][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.161936][ T5781] bridge_slave_1: entered allmulticast mode [ 81.169386][ T5781] bridge_slave_1: entered promiscuous mode [ 81.185066][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 81.269043][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.297239][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.374969][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.382252][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.389525][ T5785] bridge_slave_0: entered allmulticast mode [ 81.396304][ T5785] bridge_slave_0: entered promiscuous mode [ 81.414301][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.421676][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.431428][ T5775] bridge_slave_0: entered allmulticast mode [ 81.438419][ T5775] bridge_slave_0: entered promiscuous mode [ 81.456339][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.464213][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.471806][ T5775] bridge_slave_1: entered allmulticast mode [ 81.479150][ T5775] bridge_slave_1: entered promiscuous mode [ 81.485670][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.492911][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.500311][ T5785] bridge_slave_1: entered allmulticast mode [ 81.507083][ T5785] bridge_slave_1: entered promiscuous mode [ 81.516628][ T5781] team0: Port device team_slave_0 added [ 81.525622][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.532872][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.540407][ T5780] bridge_slave_0: entered allmulticast mode [ 81.547192][ T5780] bridge_slave_0: entered promiscuous mode [ 81.586964][ T5781] team0: Port device team_slave_1 added [ 81.601537][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.609055][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.616192][ T5780] bridge_slave_1: entered allmulticast mode [ 81.623222][ T5780] bridge_slave_1: entered promiscuous mode [ 81.641624][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.655919][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.686403][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.707313][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.714386][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.740715][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.765920][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.787132][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.794283][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.820924][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.834203][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.859616][ T5775] team0: Port device team_slave_0 added [ 81.875353][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.898818][ T5775] team0: Port device team_slave_1 added [ 81.919309][ T5785] team0: Port device team_slave_0 added [ 81.960538][ T5785] team0: Port device team_slave_1 added [ 81.977170][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.984420][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.010905][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.024180][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.031657][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.057846][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.073311][ T5780] team0: Port device team_slave_0 added [ 82.105309][ T5780] team0: Port device team_slave_1 added [ 82.126856][ T5781] hsr_slave_0: entered promiscuous mode [ 82.133222][ T5781] hsr_slave_1: entered promiscuous mode [ 82.162876][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.170045][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.196237][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.242030][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.249332][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.275501][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.291133][ T5775] hsr_slave_0: entered promiscuous mode [ 82.297758][ T5775] hsr_slave_1: entered promiscuous mode [ 82.305018][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.313417][ T5775] Cannot create hsr debugfs directory [ 82.337594][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.344779][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.373506][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.405334][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.412507][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.439108][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.508279][ T51] Bluetooth: hci1: command tx timeout [ 82.514021][ T51] Bluetooth: hci3: command tx timeout [ 82.520007][ T5783] Bluetooth: hci0: command tx timeout [ 82.566123][ T5785] hsr_slave_0: entered promiscuous mode [ 82.573345][ T5785] hsr_slave_1: entered promiscuous mode [ 82.579299][ T51] Bluetooth: hci2: command tx timeout [ 82.585105][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.593016][ T5785] Cannot create hsr debugfs directory [ 82.654651][ T5780] hsr_slave_0: entered promiscuous mode [ 82.662138][ T5780] hsr_slave_1: entered promiscuous mode [ 82.671525][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.679176][ T5780] Cannot create hsr debugfs directory [ 82.943654][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.978690][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.992680][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.007507][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.095960][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.119861][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.130279][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.155444][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.247061][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.267671][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.304747][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.314437][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.369390][ T5785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.381087][ T5785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.393427][ T5785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.404417][ T5785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.477121][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.501996][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.535340][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.562012][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.595441][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.602926][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.614759][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.621997][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.640015][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.647214][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.662555][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.669787][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.770586][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.807460][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.850915][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.900677][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.907883][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.944876][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.972044][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.979294][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.010737][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.017936][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.043032][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.050269][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.335605][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.415913][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.515224][ T5775] veth0_vlan: entered promiscuous mode [ 84.547734][ T5775] veth1_vlan: entered promiscuous mode [ 84.578483][ T51] Bluetooth: hci3: command tx timeout [ 84.583976][ T5087] Bluetooth: hci0: command tx timeout [ 84.588904][ T51] Bluetooth: hci1: command tx timeout [ 84.636953][ T5781] veth0_vlan: entered promiscuous mode [ 84.658891][ T5783] Bluetooth: hci2: command tx timeout [ 84.681954][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.695930][ T5781] veth1_vlan: entered promiscuous mode [ 84.721605][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.759147][ T5775] veth0_macvtap: entered promiscuous mode [ 84.800763][ T5775] veth1_macvtap: entered promiscuous mode [ 84.825337][ T5780] veth0_vlan: entered promiscuous mode [ 84.857366][ T5780] veth1_vlan: entered promiscuous mode [ 84.873499][ T5781] veth0_macvtap: entered promiscuous mode [ 84.904721][ T5781] veth1_macvtap: entered promiscuous mode [ 84.916794][ T5785] veth0_vlan: entered promiscuous mode [ 84.927098][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.942999][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.969852][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.992306][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.003609][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.012692][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.056367][ T5785] veth1_vlan: entered promiscuous mode [ 85.074813][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.085619][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.099400][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.125680][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.137081][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.156496][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.179451][ T5780] veth0_macvtap: entered promiscuous mode [ 85.213320][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.224394][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.233790][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.246297][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.287192][ T5780] veth1_macvtap: entered promiscuous mode [ 85.335586][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.354453][ T5785] veth0_macvtap: entered promiscuous mode [ 85.363816][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.420891][ T5785] veth1_macvtap: entered promiscuous mode [ 85.459942][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.476054][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.484781][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.498856][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.510073][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.520881][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.533098][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.581445][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.592154][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.602562][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.613455][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.627218][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.649501][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.658468][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.666436][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.681375][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.691755][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.703906][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.714377][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.725234][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.742059][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.784639][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.795442][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.806497][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.817614][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.828847][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.839418][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.852650][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.866076][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.887992][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.898355][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.928739][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.985599][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.994521][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.003575][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.013881][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.032799][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.047979][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.294801][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.314749][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.544781][ T5783] Bluetooth: hci0: command tx timeout [ 87.544812][ T51] Bluetooth: hci3: command tx timeout [ 87.550293][ T5783] Bluetooth: hci1: command tx timeout [ 87.550320][ T5783] Bluetooth: hci2: command tx timeout [ 87.705967][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.738254][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.832270][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.861195][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.884055][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.895886][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.808983][ T51] Bluetooth: hci2: command tx timeout [ 89.814471][ T51] Bluetooth: hci1: command tx timeout [ 89.818292][ T5087] Bluetooth: hci0: command tx timeout [ 89.820750][ T5783] Bluetooth: hci3: command tx timeout [ 91.461555][ T5874] syz.0.10[5874]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.508886][ T5874] loop0: detected capacity change from 0 to 512 [ 92.190184][ T788] cfg80211: failed to load regulatory.db [ 92.412112][ T5874] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 92.463077][ T5874] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 92.518270][ T5874] System zones: 0-1, 15-15, 18-18, 34-34 [ 92.529183][ T5874] EXT4-fs (loop0): orphan cleanup on readonly fs [ 92.535816][ T5874] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 92.588207][ T5874] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 92.626985][ T5874] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 92.648955][ T5874] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.10: bad orphan inode 16 [ 92.693588][ T5874] ext4_test_bit(bit=15, block=18) = 1 [ 92.723423][ T5874] is_bad_inode(inode)=0 [ 92.727650][ T5874] NEXT_ORPHAN(inode)=0 [ 92.748365][ T5874] max_ino=32 [ 92.756678][ T5874] i_nlink=2 [ 92.771205][ T5874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 93.247499][ T5888] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 93.661427][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.198265][ T5881] loop3: detected capacity change from 0 to 32768 [ 95.253778][ T5881] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.9 (5881) [ 95.349541][ T5881] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 95.361840][ T5881] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 95.398548][ T5881] BTRFS info (device loop3): using free space tree [ 95.528344][ T5881] BTRFS info (device loop3): enabling ssd optimizations [ 95.535390][ T5881] BTRFS info (device loop3): auto enabling async discard [ 95.710423][ T5775] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 96.908193][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 99.058112][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 99.468263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.310624][ T5931] loop1: detected capacity change from 0 to 32768 [ 102.433849][ T27] audit: type=1800 audit(1789967408.628:2): pid=5931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.19" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 102.721860][ T2968] read_mapping_page failed! [ 102.734539][ T2968] ERROR: (device loop1): txCommit: [ 102.734539][ T2968] [ 102.763774][ T2968] jfs_write_inode: jfs_commit_inode failed! [ 104.336072][ T5953] loop1: detected capacity change from 0 to 512 [ 104.457361][ T5953] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 104.508131][ T5953] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 104.566212][ T5953] System zones: 0-1, 15-15, 18-18, 34-34 [ 105.558486][ T5953] EXT4-fs (loop1): orphan cleanup on readonly fs [ 105.565282][ T5953] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 105.727265][ T5953] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 106.501832][ T5953] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 106.589412][ T5953] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.24: bad orphan inode 16 [ 106.606985][ T5953] ext4_test_bit(bit=15, block=18) = 1 [ 106.613936][ T5953] is_bad_inode(inode)=0 [ 106.633194][ T5953] NEXT_ORPHAN(inode)=0 [ 106.653485][ T5953] max_ino=32 [ 106.656749][ T5953] i_nlink=2 [ 106.684050][ T5953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.014993][ T5843] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.151751][ T5970] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 107.338092][ T5843] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 107.555073][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.566206][ T5843] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 107.598343][ T5843] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 107.607454][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.720118][ T5843] spcp8x5 3-1:1.0: SPCP8x5 converter detected [ 107.770777][ T5843] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 108.088460][ T5968] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 108.097460][ T5968] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 108.124174][ T5968] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 108.888490][ T5843] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.142019][ T5843] usb 2-1: Using ep0 maxpacket: 8 [ 109.233911][ T5967] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 109.293658][ T5843] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.360838][ T5843] usb 2-1: config 0 has no interface number 0 [ 109.368881][ T5776] usb 3-1: USB disconnect, device number 2 [ 109.430061][ T5776] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 109.433206][ T5843] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.442589][ T5776] spcp8x5 3-1:1.0: device disconnected [ 109.450693][ T5843] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 109.486525][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.587383][ T5843] usb 2-1: config 0 descriptor?? [ 109.640544][ T5843] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 110.980519][ T788] usb 2-1: USB disconnect, device number 2 [ 111.161488][ T5990] syz.1.40 uses obsolete (PF_INET,SOCK_PACKET) [ 111.300140][ T5776] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.448749][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 112.458529][ T5776] usb 1-1: Using ep0 maxpacket: 8 [ 112.477199][ T5776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.492013][ T5776] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 112.501953][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.538569][ T5776] usb 1-1: config 0 descriptor?? [ 113.012620][ T5776] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 113.664742][ T5818] usb 1-1: USB disconnect, device number 2 [ 114.061746][ T6008] loop2: detected capacity change from 0 to 512 [ 114.147071][ T6008] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 114.161936][ T6008] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 114.214481][ T6008] System zones: 0-1, 15-15, 18-18, 34-34 [ 114.292449][ T6008] EXT4-fs (loop2): orphan cleanup on readonly fs [ 114.355456][ T6008] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 114.412422][ T6008] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 114.458181][ T6008] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 114.828135][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.116374][ T6008] EXT4-fs error (device loop2): ext4_orphan_get:1434: comm syz.2.45: bad orphan inode 16 [ 115.159854][ T6008] ext4_test_bit(bit=15, block=18) = 1 [ 115.175646][ T6008] is_bad_inode(inode)=0 [ 115.200615][ T6008] NEXT_ORPHAN(inode)=0 [ 115.268329][ T5818] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 115.268355][ T6008] max_ino=32 [ 115.409082][ T6008] i_nlink=2 [ 115.492269][ T5818] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.526612][ T6008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.527650][ T5818] usb 1-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 115.549955][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.609516][ T5818] opticon 1-1:1.0: required endpoints missing [ 115.874683][ T5820] usb 1-1: USB disconnect, device number 3 [ 116.181608][ T6018] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 116.646622][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.356081][ T6061] warning: `syz.2.56' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 129.778192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 131.786327][ T6098] netlink: 20 bytes leftover after parsing attributes in process `syz.0.66'. [ 133.176243][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.183153][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.275000][ T6098] ip6gretap0: entered promiscuous mode [ 133.334476][ T6098] ip6gretap0: entered allmulticast mode [ 133.424534][ T6100] netlink: 'syz.1.68': attribute type 4 has an invalid length. [ 133.568438][ T6100] netlink: 17 bytes leftover after parsing attributes in process `syz.1.68'. [ 134.375889][ T6100] Zero length message leads to an empty skb [ 135.789942][ T6119] loop2: detected capacity change from 0 to 1024 [ 137.458169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 139.086054][ T6146] i2c i2c-0: new_device: Extra parameters [ 141.988305][ T6173] netlink: 20 bytes leftover after parsing attributes in process `syz.2.83'. [ 145.138101][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 148.958492][ T6212] netlink: 88 bytes leftover after parsing attributes in process `syz.2.85'. [ 151.011227][ T6228] Config c/1 of g1 needs at least one function. [ 151.049783][ T6228] udc usbip-vudc.0: failed to start g1: -22 [ 151.097296][ T6228] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 151.159695][ T6234] netlink: 20 bytes leftover after parsing attributes in process `syz.3.95'. [ 151.183196][ T6228] UDC core: g1: couldn't find an available UDC or it's busy [ 151.421754][ T6239] loop2: detected capacity change from 0 to 256 [ 152.647804][ T6239] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 153.010687][ T6245] syz.2.102 (6245) used greatest stack depth: 20944 bytes left [ 154.968326][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 155.558451][ T9] IPVS: starting estimator thread 0... [ 155.668631][ T6259] IPVS: using max 17 ests per chain, 40800 per kthread [ 155.808284][ T51] Bluetooth: Unknown LE signaling command 0x03 [ 155.814843][ T51] Bluetooth: Wrong link type (-22) [ 157.449090][ T6280] FAULT_INJECTION: forcing a failure. [ 157.449090][ T6280] name fail_futex, interval 1, probability 0, space 0, times 1 [ 157.462233][ T6280] CPU: 0 PID: 6280 Comm: syz.0.106 Not tainted syzkaller #0 [ 157.469672][ T6280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.479777][ T6280] Call Trace: [ 157.483195][ T6280] [ 157.486171][ T6280] dump_stack_lvl+0x18c/0x250 [ 157.490922][ T6280] ? show_regs_print_info+0x20/0x20 [ 157.496179][ T6280] ? load_image+0x420/0x420 [ 157.500731][ T6280] ? get_user_pages_fast_only+0xa0/0xa0 [ 157.506345][ T6280] should_fail_ex+0x394/0x4c0 [ 157.511077][ T6280] get_futex_key+0x16f/0x1030 [ 157.515816][ T6280] ? futex_setup_timer+0xc0/0xc0 [ 157.520824][ T6280] futex_wake_op+0x1e8/0xd40 [ 157.525479][ T6280] ? wake_up_q+0xca/0x100 [ 157.529835][ T6280] ? futex_wake+0x4f0/0x4f0 [ 157.534362][ T6280] ? futex_wake+0x42a/0x4f0 [ 157.538905][ T6280] ? futex_wake_mark+0x150/0x150 [ 157.543856][ T6280] ? __lock_acquire+0x7d80/0x7d80 [ 157.548907][ T6280] ? file_end_write+0x159/0x250 [ 157.553777][ T6280] ? vfs_write+0x5de/0x9a0 [ 157.558237][ T6280] do_futex+0x385/0x3e0 [ 157.562409][ T6280] ? __ia32_sys_get_robust_list+0x110/0x110 [ 157.568320][ T6280] __se_sys_futex+0x3a9/0x440 [ 157.573016][ T6280] ? __x64_sys_futex+0xf0/0xf0 [ 157.577799][ T6280] ? __x64_sys_futex+0x21/0xf0 [ 157.582785][ T6280] do_syscall_64+0x55/0xb0 [ 157.587226][ T6280] ? clear_bhb_loop+0x40/0x90 [ 157.591920][ T6280] ? clear_bhb_loop+0x40/0x90 [ 157.596620][ T6280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.602530][ T6280] RIP: 0033:0x7fde4219e159 [ 157.606958][ T6280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.626751][ T6280] RSP: 002b:00007fde42ffe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 157.635186][ T6280] RAX: ffffffffffffffda RBX: 00007fde42425fa0 RCX: 00007fde4219e159 [ 157.643175][ T6280] RDX: 0000000000000001 RSI: 0000000000000005 RDI: 000020000000cffc [ 157.651166][ T6280] RBP: 00007fde4223506b R08: 0000000000000000 R09: 0000000034fffffd [ 157.659145][ T6280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.667213][ T6280] R13: 00007fde42426038 R14: 00007fde42425fa0 R15: 00007ffd143d53d8 [ 157.675218][ T6280] [ 158.978377][ T6298] Config c/1 of g1 needs at least one function. [ 158.984797][ T6298] udc usbip-vudc.0: failed to start g1: -22 [ 159.003287][ T6299] netlink: 20 bytes leftover after parsing attributes in process `syz.1.110'. [ 159.012849][ T6298] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 159.023252][ T6298] UDC core: g1: couldn't find an available UDC or it's busy [ 159.183514][ T6291] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 162.293153][ T6323] ALSA: mixer_oss: invalid OSS volume 'W' [ 165.208294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 165.563833][ T6341] se_dev->se_dev_ptr already set for storage object [ 165.574389][ T6341] Config c/1 of g1 needs at least one function. [ 165.582131][ T6341] udc usbip-vudc.0: failed to start g1: -22 [ 165.593754][ T6341] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 165.604972][ T6341] UDC core: g1: couldn't find an available UDC or it's busy [ 167.714527][ T6356] ALSA: mixer_oss: invalid OSS volume 'W' [ 171.555748][ T6365] loop1: detected capacity change from 0 to 40427 [ 171.589571][ T6365] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff [ 171.609250][ T6365] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x30e4 [ 172.617098][ T6365] F2FS-fs (loop1): invalid crc value [ 172.656165][ T6365] F2FS-fs (loop1): Found nat_bits in checkpoint [ 172.701577][ T6365] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970 [ 172.795959][ T6365] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 172.845895][ T6365] F2FS-fs (loop1): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80 [ 172.890365][ T6365] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xd7/0x5d0 [ 172.923487][ T6365] F2FS-fs (loop1): inject checkpoint error in f2fs_balance_fs of f2fs_map_blocks+0x3608/0x4080 [ 172.950130][ T6365] F2FS-fs (loop1): Stopped filesystem due to reason: 1 [ 172.967037][ T6365] syz.1.135: attempt to access beyond end of device [ 172.967037][ T6365] loop1: rw=34817, sector=77824, nr_sectors = 8 limit=40427 [ 176.151086][ T6409] se_dev->se_dev_ptr already set for storage object [ 176.177395][ T6409] Config c/1 of g1 needs at least one function. [ 176.192371][ T6409] udc usbip-vudc.0: failed to start g1: -22 [ 176.205504][ T6409] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 176.224179][ T6409] UDC core: g1: couldn't find an available UDC or it's busy [ 176.572576][ T6414] ALSA: mixer_oss: invalid OSS volume 'W' [ 178.865001][ T6413] loop1: detected capacity change from 0 to 40427 [ 178.892339][ T6413] F2FS-fs (loop1): heap/no_heap options were deprecated [ 178.918189][ T6413] F2FS-fs (loop1): build fault injection attr: rate: 19, type: 0x7ffff [ 179.455889][ T6418] loop3: detected capacity change from 0 to 40427 [ 179.506722][ T6418] F2FS-fs (loop3): heap/no_heap options were deprecated [ 179.535726][ T6418] F2FS-fs (loop3): build fault injection attr: rate: 19, type: 0x7ffff [ 184.673171][ T6457] se_dev->se_dev_ptr already set for storage object [ 184.711149][ T6457] Config c/1 of g1 needs at least one function. [ 184.717578][ T6457] udc usbip-vudc.0: failed to start g1: -22 [ 184.727121][ T6457] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 184.740959][ T6457] UDC core: g1: couldn't find an available UDC or it's busy [ 186.600151][ T6469] autofs4:pid:6469:autofs_fill_super: called with bogus options [ 190.184435][ T51] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 190.193283][ T51] Bluetooth: Wrong link type (-22) [ 190.278826][ T6486] ======================================================= [ 190.278826][ T6486] WARNING: The mand mount option has been deprecated and [ 190.278826][ T6486] and is ignored by this kernel. Remove the mand [ 190.278826][ T6486] option from the mount to silence this warning. [ 190.278826][ T6486] ======================================================= [ 190.429483][ T6487] loop2: detected capacity change from 0 to 256 [ 190.451984][ T6487] FAT-fs (loop2): Unrecognized mount option "errors=remount-ro [ 236.220228][ T6793] dump_stack_lvl+0x18c/0x250 [ 236.224974][ T6793] ? show_regs_print_info+0x20/0x20 [ 236.230237][ T6793] ? load_image+0x420/0x420 [ 236.234789][ T6793] ? __might_sleep+0xe0/0xe0 [ 236.239432][ T6793] ? __lock_acquire+0x7d80/0x7d80 [ 236.244494][ T6793] ? percpu_ref_put+0x12/0x100 [ 236.249364][ T6793] should_fail_ex+0x394/0x4c0 [ 236.254066][ T6793] should_failslab+0x9/0x20 [ 236.258589][ T6793] slab_pre_alloc_hook+0x59/0x300 [ 236.263633][ T6793] kmem_cache_alloc+0x5a/0x2c0 [ 236.268412][ T6793] ? vm_area_dup+0x61/0x270 [ 236.272929][ T6793] vm_area_dup+0x61/0x270 [ 236.277283][ T6793] __split_vma+0x1a8/0xc20 [ 236.281723][ T6793] ? init_vma_prep+0x160/0x160 [ 236.286596][ T6793] ? mmap_write_unlock+0x160/0x160 [ 236.291733][ T6793] ? split_vma+0x8f/0x110 [ 236.296077][ T6793] mlock_fixup+0x3ac/0x550 [ 236.300529][ T6793] apply_vma_lock_flags+0x2a7/0x3c0 [ 236.305745][ T6793] ? __lock_acquire+0x7d80/0x7d80 [ 236.310827][ T6793] ? do_mlock+0x740/0x740 [ 236.315174][ T6793] ? down_write_killable+0x181/0x230 [ 236.320493][ T6793] do_mlock+0x4be/0x740 [ 236.324667][ T6793] ? lru_gen_add_folio+0xe00/0xe00 [ 236.329887][ T6793] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 236.335883][ T6793] ? lock_chain_count+0x20/0x20 [ 236.340754][ T6793] ? syscall_enter_from_user_mode+0x25/0x80 [ 236.346664][ T6793] __x64_sys_mlock+0x60/0x70 [ 236.351266][ T6793] do_syscall_64+0x55/0xb0 [ 236.355705][ T6793] ? clear_bhb_loop+0x40/0x90 [ 236.360400][ T6793] ? clear_bhb_loop+0x40/0x90 [ 236.365094][ T6793] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.371004][ T6793] RIP: 0033:0x7ff83499e159 [ 236.375437][ T6793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.395066][ T6793] RSP: 002b:00007ff835803028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 236.403642][ T6793] RAX: ffffffffffffffda RBX: 00007ff834c25fa0 RCX: 00007ff83499e159 [ 236.411628][ T6793] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000200000ffb000 [ 236.419701][ T6793] RBP: 00007ff834a3506b R08: 0000000000000000 R09: 0000000000000000 [ 236.427680][ T6793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.435661][ T6793] R13: 00007ff834c26038 R14: 00007ff834c25fa0 R15: 00007ffc9ff149e8 [ 236.443743][ T6793] [ 236.483921][ T6795] loop1: detected capacity change from 0 to 512 [ 236.539628][ T6795] EXT4-fs (loop1): bad s_min_extra_isize: 544 [ 236.816487][ T5818] wiimote 0005:057E:0330.0001: detected device: Nintendo Wii Remote Plus (Gen 2) [ 238.592627][ T5818] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0001/input/input6 [ 238.615491][ T5818] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0001/input/input7 [ 238.794040][ T5818] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0001/input/input5 [ 239.392200][ T6808] loop3: detected capacity change from 0 to 4096 [ 239.447000][ T6808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.631235][ T6808] EXT4-fs (loop3): shut down requested (1) [ 240.707621][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.943433][ T6819] random: crng reseeded on system resumption [ 242.955656][ T6830] loop3: detected capacity change from 0 to 512 [ 243.075861][ T6830] EXT4-fs (loop3): bad s_min_extra_isize: 544 [ 248.102458][ T6862] loop1: detected capacity change from 0 to 512 [ 248.137959][ T6862] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 248.193488][ T6862] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 248.217684][ T6862] EXT4-fs (loop1): orphan cleanup on readonly fs [ 248.318970][ T6862] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.286: bg 0: block 361: padding at end of block bitmap is not set [ 248.393276][ T6862] EXT4-fs (loop1): Remounting filesystem read-only [ 248.413210][ T6862] EXT4-fs (loop1): 1 truncate cleaned up [ 248.832424][ T6862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 249.200710][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 252.245069][ T6880] raw_sendmsg: syz.2.293 forgot to set AF_INET. Fix it! [ 256.057735][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.064175][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.179503][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 256.179519][ T27] audit: type=1326 audit(1789967818.376:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6907 comm="syz.2.304" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83499e159 code=0x7fc00000 [ 261.966081][ T27] audit: type=1804 audit(1789967824.167:63): pid=6949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.319" name="bus" dev="ramfs" ino=10266 res=1 errno=0 [ 268.209921][ T6976] loop1: detected capacity change from 0 to 512 [ 268.258179][ T6976] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.322: iget: bad i_size value: 38620345925642 [ 268.322420][ T6976] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.322: couldn't read orphan inode 15 (err -117) [ 268.341360][ T6976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.414393][ T1006] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm kworker/u4:6: bg 0: block 5: invalid block bitmap [ 268.488132][ T1006] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 268.552301][ T1006] EXT4-fs (loop1): This should not happen!! Data will be lost [ 268.552301][ T1006] [ 268.562017][ T1006] EXT4-fs (loop1): Total free blocks count 0 [ 268.586152][ T1006] EXT4-fs (loop1): Free/Dirty block details [ 268.605453][ T1006] EXT4-fs (loop1): free_blocks=0 [ 268.612412][ T1006] EXT4-fs (loop1): dirty_blocks=1 [ 268.617487][ T1006] EXT4-fs (loop1): Block reservation details [ 268.652304][ T1006] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 268.877558][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.364314][ T6988] loop3: detected capacity change from 0 to 256 [ 269.776614][ T6998] loop2: detected capacity change from 0 to 128 [ 269.834906][ T6998] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 269.863604][ T6998] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 270.201831][ T5785] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 273.205510][ T7023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.342'. [ 277.497370][ T7050] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 277.523330][ T7050] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 278.963619][ T5087] Bluetooth: hci0: command 0x0406 tx timeout [ 279.043236][ T7050] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 279.081312][ T7050] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 279.134509][ T7050] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 279.140572][ T7050] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 279.163910][ T7050] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 279.180232][ T7050] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 281.018376][ T5087] Bluetooth: hci0: command 0x0406 tx timeout [ 281.062817][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 281.212518][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 281.218678][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 283.141202][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 283.813989][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 283.814001][ T5087] Bluetooth: hci2: command 0x0406 tx timeout [ 288.292484][ T7120] netlink: 32 bytes leftover after parsing attributes in process `syz.2.375'. [ 294.235810][ T7161] loop2: detected capacity change from 0 to 1024 [ 295.690501][ T7161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 295.773759][ T7161] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.897337][ T7161] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.388: bg 0: block 112: padding at end of block bitmap is not set [ 295.943758][ T7161] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 295.957498][ T7161] EXT4-fs (loop2): This should not happen!! Data will be lost [ 295.957498][ T7161] [ 295.974346][ T7161] EXT4-fs (loop2): Total free blocks count 0 [ 295.984226][ T7161] EXT4-fs (loop2): Free/Dirty block details [ 295.996336][ T7161] EXT4-fs (loop2): free_blocks=0 [ 296.002462][ T7161] EXT4-fs (loop2): dirty_blocks=64 [ 296.007636][ T7161] EXT4-fs (loop2): Block reservation details [ 296.018996][ T7161] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 296.086153][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 297.971499][ T7182] 8021q: adding VLAN 0 to HW filter on device bond1 [ 298.034515][ T7182] bridge0: port 3(bond1) entered blocking state [ 298.046191][ T7182] bridge0: port 3(bond1) entered disabled state [ 298.053105][ T7182] bond1: entered allmulticast mode [ 298.060901][ T7182] bond1: entered promiscuous mode [ 298.066867][ T7182] bridge0: port 3(bond1) entered blocking state [ 298.073638][ T7182] bridge0: port 3(bond1) entered forwarding state [ 298.095109][ T2963] bridge0: port 3(bond1) entered disabled state [ 298.455869][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.396'. [ 300.134497][ T7197] loop3: detected capacity change from 0 to 512 [ 300.229679][ T7197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.298649][ T7197] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.542650][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.578618][ T7238] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 2, id = 0 [ 305.815788][ T7240] loop2: detected capacity change from 0 to 128 [ 309.687689][ T7263] sg_write: data in/out 121/14 bytes for SCSI command 0x0-- guessing data in; [ 309.687689][ T7263] program syz.2.423 not setting count and/or reply_len properly [ 314.630030][ T7287] syzkaller0: entered promiscuous mode [ 314.656740][ T7287] syzkaller0: entered allmulticast mode [ 317.389443][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.395844][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.727290][ T5087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 321.784665][ T5087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 321.794410][ T5087] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 321.814320][ T5087] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 321.822850][ T5087] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 321.836132][ T5087] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 323.936824][ T51] Bluetooth: hci2: command tx timeout [ 324.718678][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.200664][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.600152][ T51] Bluetooth: hci2: command tx timeout [ 326.841708][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.097915][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.398667][ T51] Bluetooth: hci2: command tx timeout [ 329.706104][ T7323] chnl_net:caif_netlink_parms(): no params data found [ 329.997115][ T7323] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.004399][ T7323] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.051275][ T7323] bridge_slave_0: entered allmulticast mode [ 330.086980][ T7323] bridge_slave_0: entered promiscuous mode [ 330.131521][ T7323] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.174989][ T7323] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.182286][ T7323] bridge_slave_1: entered allmulticast mode [ 330.213076][ T7323] bridge_slave_1: entered promiscuous mode [ 330.703557][ T7323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.062533][ T7323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.454749][ T51] Bluetooth: hci2: command tx timeout [ 332.965508][ T7323] team0: Port device team_slave_0 added [ 332.973409][ T7323] team0: Port device team_slave_1 added [ 333.274824][ T7323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.304127][ T7323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.404391][ T7323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.629495][ T7323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.664406][ T7323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.762990][ T7323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.806925][ T27] audit: type=1326 audit(1789967897.015:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.2.463" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83499e159 code=0x7ffc0000 [ 334.844395][ T27] audit: type=1326 audit(1789967897.015:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.2.463" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83499e159 code=0x7ffc0000 [ 334.930900][ T27] audit: type=1326 audit(1789967897.015:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.2.463" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83499e159 code=0x7ffc0000 [ 335.014557][ T27] audit: type=1326 audit(1789967897.015:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.2.463" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83499e159 code=0x7ffc0000 [ 335.080779][ T27] audit: type=1326 audit(1789967897.015:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.2.463" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ff83499e159 code=0x7ffc0000 [ 335.166080][ T27] audit: type=1326 audit(1789967897.015:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.2.463" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83499e159 code=0x7ffc0000 [ 335.206022][ T7323] hsr_slave_0: entered promiscuous mode [ 335.225296][ T7323] hsr_slave_1: entered promiscuous mode [ 335.234277][ T7323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.241885][ T7323] Cannot create hsr debugfs directory [ 335.249418][ T27] audit: type=1326 audit(1789967897.015:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.2.463" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83499e159 code=0x7ffc0000 [ 335.304272][ T27] audit: type=1326 audit(1789967897.015:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.2.463" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83499e159 code=0x7ffc0000 [ 335.364415][ T27] audit: type=1326 audit(1789967897.045:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.2.463" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7ff83499e159 code=0x7ffc0000 [ 336.818799][ T27] audit: type=1326 audit(1789967897.045:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.2.463" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83499e159 code=0x7ffc0000 [ 339.210473][ T61] hsr_slave_0: left promiscuous mode [ 339.235592][ T61] hsr_slave_1: left promiscuous mode [ 339.262100][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.293986][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.333147][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.374004][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.404549][ T61] bridge_slave_1: left allmulticast mode [ 339.410268][ T61] bridge_slave_1: left promiscuous mode [ 339.435489][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.531795][ T61] bridge_slave_0: left allmulticast mode [ 339.723107][ T61] bridge_slave_0: left promiscuous mode [ 339.743883][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.170309][ T61] veth1_macvtap: left promiscuous mode [ 340.213907][ T61] veth0_macvtap: left promiscuous mode [ 340.234135][ T61] veth1_vlan: left promiscuous mode [ 340.239923][ T61] veth0_vlan: left promiscuous mode [ 343.358534][ T7464] autofs4:pid:7464:autofs_fill_super: called with bogus options [ 343.859312][ T61] team0 (unregistering): Port device team_slave_1 removed [ 343.930519][ T61] team0 (unregistering): Port device team_slave_0 removed [ 344.002553][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.064189][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.595670][ T61] bond0 (unregistering): Released all slaves [ 345.948631][ T7323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 345.986622][ T7323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 346.004858][ T7485] loop3: detected capacity change from 0 to 256 [ 346.014949][ T7323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 346.056863][ T7323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 346.096055][ T7485] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 347.491623][ T7485] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 347.543495][ T7485] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 347.605404][ T27] kauditd_printk_skb: 32 callbacks suppressed [ 347.605420][ T27] audit: type=1800 audit(1789967909.807:106): pid=7485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.480" name="file1" dev="loop3" ino=1048670 res=0 errno=0 [ 347.623048][ T7485] syz.3.480 (7485) used greatest stack depth: 19568 bytes left [ 348.109838][ T7323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.493746][ T7323] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.508678][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.516472][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.524719][ T7499] 9pnet_fd: Insufficient options for proto=fd [ 348.571436][ T61] IPVS: stop unused estimator thread 0... [ 348.634525][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.641678][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.508129][ T7323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.651665][ T7536] autofs4:pid:7536:autofs_fill_super: called with bogus options [ 351.760334][ T7323] veth0_vlan: entered promiscuous mode [ 351.806097][ T7323] veth1_vlan: entered promiscuous mode [ 351.942730][ T7323] veth0_macvtap: entered promiscuous mode [ 351.961977][ T7323] veth1_macvtap: entered promiscuous mode [ 352.024464][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.043319][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.058774][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.087364][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.112198][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.138177][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.177051][ T7323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.218456][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.242218][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.281606][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.309262][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.331049][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.375803][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.434722][ T7323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.498991][ T7323] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.562024][ T7323] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.570871][ T7323] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.912275][ T7323] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.576601][ T4542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.766267][ T4542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.921124][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.971136][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.142595][ T7590] 9pnet_fd: Insufficient options for proto=fd [ 356.424032][ T7596] loop2: detected capacity change from 0 to 512 [ 356.562291][ T7465] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 358.832098][ T7621] loop3: detected capacity change from 0 to 512 [ 358.852575][ T7621] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 358.895881][ T7623] autofs4:pid:7623:autofs_fill_super: called with bogus options [ 358.906335][ T7621] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 12 [ 359.866109][ T7634] 9pnet_fd: Insufficient options for proto=fd [ 359.957277][ T7639] FAULT_INJECTION: forcing a failure. [ 359.957277][ T7639] name failslab, interval 1, probability 0, space 0, times 0 [ 359.986396][ T7639] CPU: 1 PID: 7639 Comm: syz.3.514 Not tainted syzkaller #0 [ 359.993854][ T7639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.003958][ T7639] Call Trace: [ 360.007273][ T7639] [ 360.010289][ T7639] dump_stack_lvl+0x18c/0x250 [ 360.015089][ T7639] ? show_regs_print_info+0x20/0x20 [ 360.020340][ T7639] ? load_image+0x420/0x420 [ 360.024916][ T7639] ? __lock_acquire+0x7d80/0x7d80 [ 360.029993][ T7639] should_fail_ex+0x394/0x4c0 [ 360.034766][ T7639] should_failslab+0x9/0x20 [ 360.039343][ T7639] slab_pre_alloc_hook+0x59/0x300 [ 360.044448][ T7639] ? end_current_label_crit_section+0x170/0x170 [ 360.050778][ T7639] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 360.056583][ T7639] kmem_cache_alloc+0x5a/0x2c0 [ 360.061405][ T7639] ? alloc_vfsmnt+0x24/0x450 [ 360.066152][ T7639] alloc_vfsmnt+0x24/0x450 [ 360.070616][ T7639] vfs_create_mount+0x7e/0x3d0 [ 360.075432][ T7639] ? __fdget+0x180/0x210 [ 360.079767][ T7639] __se_sys_fsmount+0x3ea/0x9b0 [ 360.084695][ T7639] ? __x64_sys_fsmount+0x80/0x80 [ 360.089681][ T7639] ? lockdep_hardirqs_on+0x98/0x150 [ 360.095021][ T7639] do_syscall_64+0x55/0xb0 [ 360.099491][ T7639] ? clear_bhb_loop+0x40/0x90 [ 360.104322][ T7639] ? clear_bhb_loop+0x40/0x90 [ 360.109053][ T7639] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.116956][ T7639] RIP: 0033:0x7ffa5079e159 [ 360.121426][ T7639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.141168][ T7639] RSP: 002b:00007ffa516a1028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 360.149744][ T7639] RAX: ffffffffffffffda RBX: 00007ffa50a25fa0 RCX: 00007ffa5079e159 [ 360.157770][ T7639] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000004 [ 360.165816][ T7639] RBP: 00007ffa5083506b R08: 0000000000000000 R09: 0000000000000000 [ 360.173838][ T7639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.181945][ T7639] R13: 00007ffa50a26038 R14: 00007ffa50a25fa0 R15: 00007fffd1b0d1a8 [ 360.189974][ T7639] [ 363.951095][ T7670] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input9 [ 364.002529][ T7683] autofs4:pid:7683:autofs_fill_super: called with bogus options [ 365.904780][ T7699] 9pnet_fd: Insufficient options for proto=fd [ 366.155165][ T7702] loop3: detected capacity change from 0 to 512 [ 366.192735][ T7706] FAULT_INJECTION: forcing a failure. [ 366.192735][ T7706] name failslab, interval 1, probability 0, space 0, times 0 [ 367.219188][ T7706] CPU: 1 PID: 7706 Comm: syz.0.527 Not tainted syzkaller #0 [ 367.226592][ T7706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 367.236702][ T7706] Call Trace: [ 367.240014][ T7706] [ 367.242980][ T7706] dump_stack_lvl+0x18c/0x250 [ 367.247712][ T7706] ? show_regs_print_info+0x20/0x20 [ 367.252951][ T7706] ? load_image+0x420/0x420 [ 367.257475][ T7706] ? __lock_acquire+0x7d80/0x7d80 [ 367.262524][ T7706] should_fail_ex+0x394/0x4c0 [ 367.267227][ T7706] should_failslab+0x9/0x20 [ 367.271755][ T7706] slab_pre_alloc_hook+0x59/0x300 [ 367.276891][ T7706] ? legacy_init_fs_context+0x51/0xc0 [ 367.282280][ T7706] __kmem_cache_alloc_node+0x53/0x250 [ 367.287674][ T7706] ? legacy_init_fs_context+0x51/0xc0 [ 367.293068][ T7706] kmalloc_trace+0x2a/0xe0 [ 367.297503][ T7706] legacy_init_fs_context+0x51/0xc0 [ 367.302725][ T7706] alloc_fs_context+0x618/0x7a0 [ 367.307596][ T7706] ? debug_mount+0x70/0x70 [ 367.312069][ T7706] mount_single+0x87/0x1b0 [ 367.316506][ T7706] legacy_get_tree+0xea/0x180 [ 367.321203][ T7706] ? debugfs_setattr+0xa0/0xa0 [ 367.326075][ T7706] vfs_get_tree+0x8c/0x280 [ 367.330524][ T7706] vfs_cmd_create+0xe3/0x230 [ 367.335135][ T7706] __se_sys_fsconfig+0x70a/0x850 [ 367.340096][ T7706] ? __x64_sys_fsconfig+0xc0/0xc0 [ 367.345145][ T7706] ? lockdep_hardirqs_on+0x98/0x150 [ 367.350361][ T7706] ? __x64_sys_fsconfig+0x20/0xc0 [ 367.355450][ T7706] do_syscall_64+0x55/0xb0 [ 367.359882][ T7706] ? clear_bhb_loop+0x40/0x90 [ 367.364579][ T7706] ? clear_bhb_loop+0x40/0x90 [ 367.369273][ T7706] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 367.375179][ T7706] RIP: 0033:0x7fde4219e159 [ 367.379624][ T7706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.399261][ T7706] RSP: 002b:00007fde42ffe028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 367.407709][ T7706] RAX: ffffffffffffffda RBX: 00007fde42425fa0 RCX: 00007fde4219e159 [ 367.415707][ T7706] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 367.423831][ T7706] RBP: 00007fde4223506b R08: 0000000000000000 R09: 0000000000000000 [ 367.431836][ T7706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.439818][ T7706] R13: 00007fde42426038 R14: 00007fde42425fa0 R15: 00007ffd143d53d8 [ 367.447817][ T7706] [ 367.788154][ T27] audit: type=1800 audit(1789967929.999:107): pid=7718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.532" name=08 dev="sda1" ino=2045 res=0 errno=0 [ 368.968091][ T7727] loop3: detected capacity change from 0 to 2048 [ 368.995893][ T7727] EXT4-fs: Ignoring removed nomblk_io_submit option [ 369.122236][ T7727] EXT4-fs error (device loop3): __ext4_iget:5091: inode #2: block 127754: comm syz.3.533: invalid block [ 369.145399][ T7727] EXT4-fs (loop3): get root inode failed [ 369.155073][ T7727] EXT4-fs (loop3): mount failed [ 370.052601][ T7744] 9pnet_fd: Insufficient options for proto=fd [ 373.473589][ T7765] loop4: detected capacity change from 0 to 512 [ 373.539790][ T7765] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 373.600523][ T7765] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 12 [ 373.630966][ T7768] FAULT_INJECTION: forcing a failure. [ 373.630966][ T7768] name failslab, interval 1, probability 0, space 0, times 0 [ 373.686550][ T7465] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 373.703796][ T7768] CPU: 1 PID: 7768 Comm: syz.2.541 Not tainted syzkaller #0 [ 373.704407][ T7771] loop3: detected capacity change from 0 to 512 [ 373.711130][ T7768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 373.711172][ T7768] Call Trace: [ 373.711182][ T7768] [ 373.711190][ T7768] dump_stack_lvl+0x18c/0x250 [ 373.711228][ T7768] ? show_regs_print_info+0x20/0x20 [ 373.711254][ T7768] ? load_image+0x420/0x420 [ 373.711279][ T7768] ? __lock_acquire+0x7d80/0x7d80 [ 373.711301][ T7768] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 373.711324][ T7768] ? __lock_acquire+0x7d80/0x7d80 [ 373.764383][ T7768] should_fail_ex+0x394/0x4c0 [ 373.769095][ T7768] should_failslab+0x9/0x20 [ 373.773648][ T7768] slab_pre_alloc_hook+0x59/0x300 [ 373.778745][ T7768] ? _raw_spin_unlock_irq+0x2e/0x50 [ 373.784053][ T7768] ? alloc_mnt_ns+0xaf/0x3b0 [ 373.788720][ T7768] __kmem_cache_alloc_node+0x53/0x250 [ 373.794114][ T7768] ? alloc_mnt_ns+0xaf/0x3b0 [ 373.798717][ T7768] kmalloc_trace+0x2a/0xe0 [ 373.803155][ T7768] alloc_mnt_ns+0xaf/0x3b0 [ 373.807587][ T7768] __se_sys_fsmount+0x5b3/0x9b0 [ 373.812459][ T7768] ? __x64_sys_fsmount+0x80/0x80 [ 373.817415][ T7768] ? lockdep_hardirqs_on+0x98/0x150 [ 373.822723][ T7768] do_syscall_64+0x55/0xb0 [ 373.827156][ T7768] ? clear_bhb_loop+0x40/0x90 [ 373.831850][ T7768] ? clear_bhb_loop+0x40/0x90 [ 373.836638][ T7768] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 373.842551][ T7768] RIP: 0033:0x7ff83499e159 [ 373.846980][ T7768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.867205][ T7768] RSP: 002b:00007ff835803028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 373.875645][ T7768] RAX: ffffffffffffffda RBX: 00007ff834c25fa0 RCX: 00007ff83499e159 [ 373.883728][ T7768] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000004 [ 373.891716][ T7768] RBP: 00007ff834a3506b R08: 0000000000000000 R09: 0000000000000000 [ 373.899708][ T7768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.907730][ T7768] R13: 00007ff834c26038 R14: 00007ff834c25fa0 R15: 00007ffc9ff149e8 [ 373.915746][ T7768] [ 374.038690][ T7771] EXT4-fs: Ignoring removed oldalloc option [ 374.131010][ T7771] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.542: bg 0: block 5: invalid block bitmap [ 374.254413][ T7771] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 374.424467][ T7771] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.542: invalid indirect mapped block 3 (level 2) [ 374.474412][ T7771] EXT4-fs (loop3): 1 orphan inode deleted [ 374.821351][ T7771] EXT4-fs (loop3): 1 truncate cleaned up [ 375.030016][ T7771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.327900][ T7797] 9pnet_fd: Insufficient options for proto=fd [ 376.355803][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.257218][ T7809] FAULT_INJECTION: forcing a failure. [ 378.257218][ T7809] name fail_futex, interval 1, probability 0, space 0, times 0 [ 378.271310][ T7809] CPU: 1 PID: 7809 Comm: syz.3.549 Not tainted syzkaller #0 [ 378.278653][ T7809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 378.288756][ T7809] Call Trace: [ 378.292076][ T7809] [ 378.295038][ T7809] dump_stack_lvl+0x18c/0x250 [ 378.299776][ T7809] ? security_file_alloc+0x34/0x120 [ 378.305046][ T7809] ? alloc_empty_file+0xb7/0x1d0 [ 378.310027][ T7809] ? show_regs_print_info+0x20/0x20 [ 378.315367][ T7809] ? load_image+0x420/0x420 [ 378.319930][ T7809] ? mark_lock+0x94/0x320 [ 378.324262][ T7809] should_fail_ex+0x394/0x4c0 [ 378.328979][ T7809] get_futex_key+0x136/0x1030 [ 378.333667][ T7809] ? futex_setup_timer+0xc0/0xc0 [ 378.338631][ T7809] futex_wake+0x127/0x4f0 [ 378.342982][ T7809] ? futex_wake_mark+0x150/0x150 [ 378.347941][ T7809] ? fd_install+0x60/0x4e0 [ 378.352364][ T7809] do_futex+0x35d/0x3e0 [ 378.356521][ T7809] ? __ia32_sys_get_robust_list+0x110/0x110 [ 378.362423][ T7809] ? __lock_acquire+0x7d80/0x7d80 [ 378.367469][ T7809] __se_sys_futex+0x3a9/0x440 [ 378.372157][ T7809] ? __x64_sys_futex+0xf0/0xf0 [ 378.376932][ T7809] ? __x64_sys_futex+0x21/0xf0 [ 378.381697][ T7809] do_syscall_64+0x55/0xb0 [ 378.386138][ T7809] ? clear_bhb_loop+0x40/0x90 [ 378.390827][ T7809] ? clear_bhb_loop+0x40/0x90 [ 378.395507][ T7809] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 378.401402][ T7809] RIP: 0033:0x7ffa5079e159 [ 378.405902][ T7809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.425513][ T7809] RSP: 002b:00007ffa516a10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 378.433952][ T7809] RAX: ffffffffffffffda RBX: 00007ffa50a25fa8 RCX: 00007ffa5079e159 [ 378.441928][ T7809] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ffa50a25fac [ 378.449900][ T7809] RBP: 00007ffa50a25fa0 R08: 00000000007460a0 R09: 0000000000000000 [ 378.457963][ T7809] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 378.466024][ T7809] R13: 00007ffa50a26038 R14: 00007fffd1b0d0c0 R15: 00007fffd1b0d1a8 [ 378.474011][ T7809] [ 378.814579][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.821093][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.460218][ T7837] loop2: detected capacity change from 0 to 512 [ 381.374207][ T7837] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 381.401725][ T7837] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 12 [ 382.600065][ T7860] 9pnet_fd: Insufficient options for proto=fd [ 385.566322][ T7893] FAULT_INJECTION: forcing a failure. [ 385.566322][ T7893] name failslab, interval 1, probability 0, space 0, times 0 [ 385.581580][ T7893] CPU: 0 PID: 7893 Comm: syz.3.568 Not tainted syzkaller #0 [ 385.588919][ T7893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 385.599014][ T7893] Call Trace: [ 385.602321][ T7893] [ 385.605254][ T7893] dump_stack_lvl+0x18c/0x250 [ 385.609940][ T7893] ? show_regs_print_info+0x20/0x20 [ 385.615143][ T7893] ? load_image+0x420/0x420 [ 385.619667][ T7893] ? __might_sleep+0xe0/0xe0 [ 385.624286][ T7893] ? __lock_acquire+0x7d80/0x7d80 [ 385.629328][ T7893] should_fail_ex+0x394/0x4c0 [ 385.634040][ T7893] should_failslab+0x9/0x20 [ 385.638578][ T7893] slab_pre_alloc_hook+0x59/0x300 [ 385.643692][ T7893] ? kvmalloc_node+0x70/0x180 [ 385.648393][ T7893] ? kvmalloc_node+0x70/0x180 [ 385.653073][ T7893] __kmem_cache_alloc_node+0x53/0x250 [ 385.658457][ T7893] ? kvmalloc_node+0x70/0x180 [ 385.663139][ T7893] __kmalloc_node+0xa6/0x240 [ 385.667782][ T7893] kvmalloc_node+0x70/0x180 [ 385.672293][ T7893] bpf_uprobe_multi_link_attach+0x53b/0xcb0 [ 385.678212][ T7893] ? __fget_files+0x28/0x460 [ 385.682814][ T7893] ? bpf_kprobe_multi_link_attach+0x10/0x10 [ 385.688738][ T7893] ? __fget_files+0x3fc/0x460 [ 385.693520][ T7893] ? bpf_prog_attach_check_attach_type+0x237/0x440 [ 385.700074][ T7893] link_create+0x3ed/0x720 [ 385.704517][ T7893] __sys_bpf+0x4d7/0x890 [ 385.708767][ T7893] ? bpf_link_show_fdinfo+0x560/0x560 [ 385.714146][ T7893] ? lock_chain_count+0x20/0x20 [ 385.719017][ T7893] __x64_sys_bpf+0x7c/0x90 [ 385.723434][ T7893] do_syscall_64+0x55/0xb0 [ 385.727871][ T7893] ? clear_bhb_loop+0x40/0x90 [ 385.732549][ T7893] ? clear_bhb_loop+0x40/0x90 [ 385.737231][ T7893] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 385.743132][ T7893] RIP: 0033:0x7ffa5079e159 [ 385.747596][ T7893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.767412][ T7893] RSP: 002b:00007ffa516a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 385.775833][ T7893] RAX: ffffffffffffffda RBX: 00007ffa50a25fa0 RCX: 00007ffa5079e159 [ 385.783804][ T7893] RDX: 0000000000000040 RSI: 00002000000012c0 RDI: 000000000000001c [ 385.791808][ T7893] RBP: 00007ffa5083506b R08: 0000000000000000 R09: 0000000000000000 [ 385.799875][ T7893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.807852][ T7893] R13: 00007ffa50a26038 R14: 00007ffa50a25fa0 R15: 00007fffd1b0d1a8 [ 385.815836][ T7893] [ 385.930078][ T7895] FAULT_INJECTION: forcing a failure. [ 385.930078][ T7895] name failslab, interval 1, probability 0, space 0, times 0 [ 385.974763][ T7895] CPU: 1 PID: 7895 Comm: syz.4.555 Not tainted syzkaller #0 [ 385.982130][ T7895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 385.992232][ T7895] Call Trace: [ 385.995551][ T7895] [ 385.998524][ T7895] dump_stack_lvl+0x18c/0x250 [ 386.003256][ T7895] ? show_regs_print_info+0x20/0x20 [ 386.008504][ T7895] ? load_image+0x420/0x420 [ 386.013063][ T7895] ? __lock_acquire+0x7d80/0x7d80 [ 386.018137][ T7895] should_fail_ex+0x394/0x4c0 [ 386.022870][ T7895] should_failslab+0x9/0x20 [ 386.027429][ T7895] slab_pre_alloc_hook+0x59/0x300 [ 386.032502][ T7895] ? end_current_label_crit_section+0x170/0x170 [ 386.038788][ T7895] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 386.044647][ T7895] kmem_cache_alloc+0x5a/0x2c0 [ 386.049472][ T7895] ? alloc_vfsmnt+0x24/0x450 [ 386.054123][ T7895] alloc_vfsmnt+0x24/0x450 [ 386.058584][ T7895] vfs_create_mount+0x7e/0x3d0 [ 386.063383][ T7895] ? __fdget+0x180/0x210 [ 386.067676][ T7895] __se_sys_fsmount+0x3ea/0x9b0 [ 386.072579][ T7895] ? __x64_sys_fsmount+0x80/0x80 [ 386.077555][ T7895] ? lockdep_hardirqs_on+0x98/0x150 [ 386.082791][ T7895] do_syscall_64+0x55/0xb0 [ 386.087248][ T7895] ? clear_bhb_loop+0x40/0x90 [ 386.091968][ T7895] ? clear_bhb_loop+0x40/0x90 [ 386.096695][ T7895] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.102637][ T7895] RIP: 0033:0x7ff1e839e159 [ 386.107085][ T7895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.126731][ T7895] RSP: 002b:00007ff1e65f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 386.135160][ T7895] RAX: ffffffffffffffda RBX: 00007ff1e8625fa0 RCX: 00007ff1e839e159 [ 386.143161][ T7895] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000004 [ 386.151141][ T7895] RBP: 00007ff1e843506b R08: 0000000000000000 R09: 0000000000000000 [ 386.159149][ T7895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.167155][ T7895] R13: 00007ff1e8626038 R14: 00007ff1e8625fa0 R15: 00007ffcd189ea98 [ 386.175166][ T7895] [ 386.625606][ T7902] loop4: detected capacity change from 0 to 512 [ 387.513430][ T7912] netlink: 44 bytes leftover after parsing attributes in process `syz.2.569'. [ 391.241236][ T7929] loop4: detected capacity change from 0 to 512 [ 391.303420][ T7896] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 391.434107][ T7931] loop2: detected capacity change from 0 to 1024 [ 391.569696][ T7933] FAULT_INJECTION: forcing a failure. [ 391.569696][ T7933] name failslab, interval 1, probability 0, space 0, times 0 [ 391.582944][ T7933] CPU: 0 PID: 7933 Comm: syz.4.583 Not tainted syzkaller #0 [ 391.590183][ T7931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.590259][ T7933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.612780][ T7933] Call Trace: [ 391.616164][ T7933] [ 391.619109][ T7933] dump_stack_lvl+0x18c/0x250 [ 391.623826][ T7933] ? show_regs_print_info+0x20/0x20 [ 391.629046][ T7933] ? load_image+0x420/0x420 [ 391.633563][ T7933] ? __lock_acquire+0x7d80/0x7d80 [ 391.638606][ T7933] should_fail_ex+0x394/0x4c0 [ 391.643311][ T7933] should_failslab+0x9/0x20 [ 391.647831][ T7933] slab_pre_alloc_hook+0x59/0x300 [ 391.652871][ T7933] ? end_current_label_crit_section+0x170/0x170 [ 391.659159][ T7933] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 391.664810][ T7933] kmem_cache_alloc+0x5a/0x2c0 [ 391.669621][ T7933] ? alloc_vfsmnt+0x24/0x450 [ 391.674228][ T7933] alloc_vfsmnt+0x24/0x450 [ 391.678659][ T7933] vfs_create_mount+0x7e/0x3d0 [ 391.683429][ T7933] ? __fdget+0x180/0x210 [ 391.687701][ T7933] __se_sys_fsmount+0x3ea/0x9b0 [ 391.692590][ T7933] ? __x64_sys_fsmount+0x80/0x80 [ 391.697560][ T7933] ? lockdep_hardirqs_on+0x98/0x150 [ 391.702878][ T7933] do_syscall_64+0x55/0xb0 [ 391.707316][ T7933] ? clear_bhb_loop+0x40/0x90 [ 391.712099][ T7933] ? clear_bhb_loop+0x40/0x90 [ 391.716885][ T7933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 391.722812][ T7933] RIP: 0033:0x7ff1e839e159 [ 391.727246][ T7933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.746867][ T7933] RSP: 002b:00007ff1e65f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 391.755298][ T7933] RAX: ffffffffffffffda RBX: 00007ff1e8625fa0 RCX: 00007ff1e839e159 [ 391.763285][ T7933] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000004 [ 391.771274][ T7933] RBP: 00007ff1e843506b R08: 0000000000000000 R09: 0000000000000000 [ 391.779265][ T7933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.787268][ T7933] R13: 00007ff1e8626038 R14: 00007ff1e8625fa0 R15: 00007ffcd189ea98 [ 391.795300][ T7933] [ 391.963415][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.223885][ T7940] FAULT_INJECTION: forcing a failure. [ 392.223885][ T7940] name failslab, interval 1, probability 0, space 0, times 0 [ 392.236814][ T7940] CPU: 0 PID: 7940 Comm: syz.0.585 Not tainted syzkaller #0 [ 392.244150][ T7940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 392.254229][ T7940] Call Trace: [ 392.257547][ T7940] [ 392.260494][ T7940] dump_stack_lvl+0x18c/0x250 [ 392.265211][ T7940] ? show_regs_print_info+0x20/0x20 [ 392.270714][ T7940] ? load_image+0x420/0x420 [ 392.275236][ T7940] ? __might_sleep+0xe0/0xe0 [ 392.279831][ T7940] ? __lock_acquire+0x7d80/0x7d80 [ 392.284858][ T7940] ? __asan_memset+0x22/0x40 [ 392.289467][ T7940] should_fail_ex+0x394/0x4c0 [ 392.294179][ T7940] should_failslab+0x9/0x20 [ 392.298712][ T7940] slab_pre_alloc_hook+0x59/0x300 [ 392.303771][ T7940] kmem_cache_alloc+0x5a/0x2c0 [ 392.308564][ T7940] ? posix_lock_inode+0x369/0x3270 [ 392.313715][ T7940] posix_lock_inode+0x369/0x3270 [ 392.318680][ T7940] ? aa_path_link+0xf80/0xf80 [ 392.323383][ T7940] ? lockdep_softirqs_off+0x440/0x440 [ 392.328771][ T7940] ? slab_post_alloc_hook+0x86/0x4d0 [ 392.334159][ T7940] ? end_current_label_crit_section+0x149/0x170 [ 392.340415][ T7940] ? posix_lock_file+0x50/0x50 [ 392.345198][ T7940] ? bpf_lsm_file_lock+0x9/0x10 [ 392.350062][ T7940] fcntl_setlk+0x9c0/0x1070 [ 392.354596][ T7940] ? vfs_lock_file+0x110/0x110 [ 392.359465][ T7940] ? __might_fault+0xaa/0x120 [ 392.364150][ T7940] ? __might_fault+0xc6/0x120 [ 392.368834][ T7940] ? __might_fault+0xaa/0x120 [ 392.373524][ T7940] do_fcntl+0x88e/0x14a0 [ 392.377790][ T7940] ? kill_fasync+0x4b0/0x4b0 [ 392.382486][ T7940] ? __fget_files+0x28/0x460 [ 392.387100][ T7940] ? __fget_files+0x3fc/0x460 [ 392.391795][ T7940] ? tomoyo_file_fcntl+0x7b/0x220 [ 392.396833][ T7940] ? bpf_lsm_file_fcntl+0x9/0x10 [ 392.401789][ T7940] ? security_file_fcntl+0x80/0xa0 [ 392.406921][ T7940] __se_sys_fcntl+0xc9/0x1a0 [ 392.411535][ T7940] do_syscall_64+0x55/0xb0 [ 392.416000][ T7940] ? clear_bhb_loop+0x40/0x90 [ 392.420705][ T7940] ? clear_bhb_loop+0x40/0x90 [ 392.425408][ T7940] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 392.431315][ T7940] RIP: 0033:0x7fde4219e159 [ 392.435744][ T7940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.455366][ T7940] RSP: 002b:00007fde42ffe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 392.463818][ T7940] RAX: ffffffffffffffda RBX: 00007fde42425fa0 RCX: 00007fde4219e159 [ 392.471825][ T7940] RDX: 0000200000000100 RSI: 0000000000000007 RDI: 0000000000000004 [ 392.480076][ T7940] RBP: 00007fde4223506b R08: 0000000000000000 R09: 0000000000000000 [ 392.488329][ T7940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.496397][ T7940] R13: 00007fde42426038 R14: 00007fde42425fa0 R15: 00007ffd143d53d8 [ 392.504401][ T7940] [ 395.343670][ T7956] loop2: detected capacity change from 0 to 512 [ 395.411639][ T7896] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 406.861514][ T27] audit: type=1804 audit(1789967969.074:108): pid=8049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.613" name="/newroot/158/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=187 res=1 errno=0 [ 408.900181][ T8063] loop4: detected capacity change from 0 to 512 [ 409.025538][ T7896] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 409.282178][ T8075] loop2: detected capacity change from 0 to 512 [ 410.721653][ T8075] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 410.843986][ T8075] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.625: iget: bad i_size value: 38620345925642 [ 410.920450][ T8075] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.625: couldn't read orphan inode 15 (err -117) [ 410.946913][ T8075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.999060][ T8075] netlink: 32 bytes leftover after parsing attributes in process `syz.2.625'. [ 411.176791][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.704554][ T8114] usb usb7: usbfs: process 8114 (syz.0.622) did not claim interface 0 before use [ 415.291780][ T8126] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 418.736323][ T27] audit: type=1800 audit(1789967980.955:109): pid=8177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.650" name="protocol" dev="configfs" ino=13612 res=0 errno=0 [ 418.831285][ T27] audit: type=1800 audit(1789967980.975:110): pid=8177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.650" name="report_desc" dev="configfs" ino=13613 res=0 errno=0 [ 420.659754][ T8192] loop4: detected capacity change from 0 to 512 [ 420.701591][ T8192] ext3: Unknown parameter 'fsname' [ 425.170950][ T27] audit: type=1800 audit(1789967987.386:111): pid=8241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.666" name=08 dev="sda1" ino=2045 res=0 errno=0 [ 429.897515][ T8269] loop2: detected capacity change from 0 to 512 [ 433.272464][ T8286] loop3: detected capacity change from 0 to 8192 [ 435.276049][ T8299] loop3: detected capacity change from 0 to 512 [ 435.356386][ T7896] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 439.841109][ T8340] loop4: detected capacity change from 0 to 512 [ 439.906515][ T8340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.022452][ T8340] ext4 filesystem being mounted at /59/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.237736][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.246685][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.510197][ T7323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.744671][ T8351] netlink: 40 bytes leftover after parsing attributes in process `syz.3.703'. [ 440.757898][ T8351] random: crng reseeded on system resumption [ 441.737930][ T8356] loop4: detected capacity change from 0 to 1024 [ 441.805818][ T8356] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 441.817053][ T8358] loop2: detected capacity change from 0 to 512 [ 441.872762][ T8356] JBD2: no valid journal superblock found [ 442.361524][ C1] sched: RT throttling activated [ 442.403273][ T8356] EXT4-fs (loop4): Could not load journal inode [ 443.985092][ T8368] loop3: detected capacity change from 0 to 512 [ 444.009503][ T8368] EXT4-fs: Ignoring removed nomblk_io_submit option [ 444.083224][ T8368] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.709: corrupted in-inode xattr: e_value size too large [ 444.121246][ T8368] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.709: couldn't read orphan inode 15 (err -117) [ 444.183354][ T8368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.375756][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.827469][ T8385] loop4: detected capacity change from 0 to 512 [ 446.312312][ T8391] loop2: detected capacity change from 0 to 128 [ 447.347804][ T8391] FAT-fs (loop2): Directory bread(block 1048) failed [ 447.411902][ T8391] FAT-fs (loop2): Directory bread(block 1049) failed [ 447.443082][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 447.461020][ T8391] FAT-fs (loop2): Directory bread(block 1050) failed [ 447.467919][ T8391] FAT-fs (loop2): Directory bread(block 1051) failed [ 447.511148][ T8391] FAT-fs (loop2): Directory bread(block 1052) failed [ 447.556641][ T8391] FAT-fs (loop2): Directory bread(block 1053) failed [ 447.566066][ T8391] FAT-fs (loop2): Directory bread(block 1054) failed [ 447.568283][ T8397] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 447.593856][ T8391] FAT-fs (loop2): Directory bread(block 1055) failed [ 447.675233][ T8391] FAT-fs (loop2): FAT read failed (blocknr 128) [ 447.782333][ T8400] loop3: detected capacity change from 0 to 1024 [ 447.846220][ T8400] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 447.903900][ T8400] JBD2: no valid journal superblock found [ 447.929856][ T8400] EXT4-fs (loop3): Could not load journal inode [ 448.825344][ T8404] loop4: detected capacity change from 0 to 512 [ 448.933554][ T8404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.005111][ T8404] ext4 filesystem being mounted at /66/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.210149][ T7323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.522778][ T8416] loop4: detected capacity change from 0 to 512 [ 449.610931][ T7896] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 451.400011][ T8432] loop2: detected capacity change from 0 to 1024 [ 451.427545][ T8432] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 451.511139][ T8432] JBD2: no valid journal superblock found [ 451.538562][ T8432] EXT4-fs (loop2): Could not load journal inode [ 451.952437][ T8437] FAULT_INJECTION: forcing a failure. [ 451.952437][ T8437] name failslab, interval 1, probability 0, space 0, times 0 [ 452.022994][ T8437] CPU: 1 PID: 8437 Comm: syz.4.734 Not tainted syzkaller #0 [ 452.030520][ T8437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 452.040619][ T8437] Call Trace: [ 452.043944][ T8437] [ 452.046993][ T8437] dump_stack_lvl+0x18c/0x250 [ 452.051731][ T8437] ? show_regs_print_info+0x20/0x20 [ 452.056976][ T8437] ? load_image+0x420/0x420 [ 452.061526][ T8437] ? __might_sleep+0xe0/0xe0 [ 452.066249][ T8437] ? __lock_acquire+0x7d80/0x7d80 [ 452.071321][ T8437] should_fail_ex+0x394/0x4c0 [ 452.076064][ T8437] should_failslab+0x9/0x20 [ 452.080665][ T8437] slab_pre_alloc_hook+0x59/0x300 [ 452.085752][ T8437] ? kvmalloc_node+0x70/0x180 [ 452.090479][ T8437] ? kvmalloc_node+0x70/0x180 [ 452.095225][ T8437] __kmem_cache_alloc_node+0x53/0x250 [ 452.100758][ T8437] ? kvmalloc_node+0x70/0x180 [ 452.105484][ T8437] __kmalloc_node+0xa6/0x240 [ 452.110139][ T8437] kvmalloc_node+0x70/0x180 [ 452.114694][ T8437] pfifo_fast_init+0x363/0x6a0 [ 452.119627][ T8437] qdisc_create_dflt+0x11e/0x430 [ 452.124620][ T8437] mq_init+0x2c7/0x660 [ 452.128759][ T8437] ? trace_net_dev_xmit_timeout+0x1c0/0x1c0 [ 452.134706][ T8437] ? qdisc_alloc+0x7a2/0xa80 [ 452.139371][ T8437] qdisc_create_dflt+0x11e/0x430 [ 452.144357][ T8437] ? dev_activate+0x1bb/0x1160 [ 452.149169][ T8437] dev_activate+0x1e0/0x1160 [ 452.153822][ T8437] __dev_open+0x347/0x430 [ 452.158285][ T8437] ? dev_open+0x190/0x190 [ 452.162674][ T8437] __dev_change_flags+0x1e8/0x6a0 [ 452.167760][ T8437] ? dev_load+0x21/0x1f0 [ 452.172082][ T8437] ? __lock_acquire+0x7d80/0x7d80 [ 452.177156][ T8437] ? dev_get_flags+0x1c0/0x1c0 [ 452.182089][ T8437] ? full_name_hash+0x92/0xe0 [ 452.186811][ T8437] dev_change_flags+0x7c/0x1a0 [ 452.191625][ T8437] dev_ioctl+0x7b4/0x1140 [ 452.196005][ T8437] sock_do_ioctl+0x239/0x310 [ 452.200722][ T8437] ? sock_show_fdinfo+0xb0/0xb0 [ 452.205702][ T8437] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 452.211747][ T8437] sock_ioctl+0x5be/0x7e0 [ 452.216141][ T8437] ? sock_poll+0x3e0/0x3e0 [ 452.220737][ T8437] ? bpf_lsm_file_ioctl+0x9/0x10 [ 452.225717][ T8437] ? security_file_ioctl+0x80/0xa0 [ 452.230875][ T8437] ? sock_poll+0x3e0/0x3e0 [ 452.235341][ T8437] __se_sys_ioctl+0xfd/0x170 [ 452.239984][ T8437] do_syscall_64+0x55/0xb0 [ 452.244454][ T8437] ? clear_bhb_loop+0x40/0x90 [ 452.249180][ T8437] ? clear_bhb_loop+0x40/0x90 [ 452.253907][ T8437] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.259849][ T8437] RIP: 0033:0x7ff1e839e159 [ 452.264304][ T8437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.283957][ T8437] RSP: 002b:00007ff1e65f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 452.292430][ T8437] RAX: ffffffffffffffda RBX: 00007ff1e8625fa0 RCX: 00007ff1e839e159 [ 452.300448][ T8437] RDX: 00002000000000c0 RSI: 0000000000008914 RDI: 0000000000000005 [ 452.308460][ T8437] RBP: 00007ff1e843506b R08: 0000000000000000 R09: 0000000000000000 [ 452.316484][ T8437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.324586][ T8437] R13: 00007ff1e8626038 R14: 00007ff1e8625fa0 R15: 00007ffcd189ea98 [ 452.332615][ T8437] [ 452.490321][ T8437] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 453.484350][ T8453] loop2: detected capacity change from 0 to 512 [ 455.700577][ T8476] netlink: 100 bytes leftover after parsing attributes in process `syz.3.745'. [ 455.870322][ T8480] loop2: detected capacity change from 0 to 1024 [ 455.910188][ T8480] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 455.947168][ T8480] JBD2: no valid journal superblock found [ 456.020333][ T8480] EXT4-fs (loop2): Could not load journal inode [ 458.543335][ T8492] loop3: detected capacity change from 0 to 512 [ 458.625711][ T7896] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 462.290542][ T8522] loop2: detected capacity change from 0 to 512 [ 463.761790][ T8515] bridge_slave_0: left allmulticast mode [ 463.767725][ T8515] bridge_slave_0: left promiscuous mode [ 463.777794][ T8515] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.804464][ T8515] bridge_slave_1: left allmulticast mode [ 463.812431][ T8515] bridge_slave_1: left promiscuous mode [ 463.818238][ T8515] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.841008][ T8515] bond0: (slave bond_slave_0): Releasing backup interface [ 463.863038][ T8515] bond0: (slave bond_slave_1): Releasing backup interface [ 463.903970][ T8515] team0: Port device team_slave_0 removed [ 463.941415][ T8515] team0: Port device team_slave_1 removed [ 463.948112][ T8515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.961512][ T8515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.971911][ T8515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.979818][ T8515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.591964][ T8544] loop3: detected capacity change from 0 to 512 [ 464.672436][ T7896] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 464.751175][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.767'. [ 466.935049][ T8569] loop4: detected capacity change from 0 to 512 [ 469.181394][ T8594] loop3: detected capacity change from 0 to 512 [ 471.184915][ T8618] FAULT_INJECTION: forcing a failure. [ 471.184915][ T8618] name failslab, interval 1, probability 0, space 0, times 0 [ 471.200879][ T8618] CPU: 0 PID: 8618 Comm: syz.0.803 Not tainted syzkaller #0 [ 471.208203][ T8618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 471.218280][ T8618] Call Trace: [ 471.221561][ T8618] [ 471.224492][ T8618] dump_stack_lvl+0x18c/0x250 [ 471.229236][ T8618] ? show_regs_print_info+0x20/0x20 [ 471.234466][ T8618] ? load_image+0x420/0x420 [ 471.238992][ T8618] ? __might_sleep+0xe0/0xe0 [ 471.243589][ T8618] ? __lock_acquire+0x7d80/0x7d80 [ 471.248645][ T8618] should_fail_ex+0x394/0x4c0 [ 471.253422][ T8618] should_failslab+0x9/0x20 [ 471.257997][ T8618] slab_pre_alloc_hook+0x59/0x300 [ 471.263041][ T8618] ? call_usermodehelper_setup+0x8e/0x260 [ 471.268766][ T8618] __kmem_cache_alloc_node+0x53/0x250 [ 471.274165][ T8618] ? call_usermodehelper_setup+0x8e/0x260 [ 471.279886][ T8618] kmalloc_trace+0x2a/0xe0 [ 471.284319][ T8618] call_usermodehelper_setup+0x8e/0x260 [ 471.289881][ T8618] ? __request_module+0x600/0x600 [ 471.294950][ T8618] __request_module+0x3bb/0x600 [ 471.299808][ T8618] ? module_enforce_rwx_sections+0x150/0x150 [ 471.305881][ T8618] ? inet6_create+0x80/0x1120 [ 471.310656][ T8618] ? rcu_read_unlock+0x8c/0xa0 [ 471.315425][ T8618] inet6_create+0x40c/0x1120 [ 471.320058][ T8618] ? inet6_create+0x80/0x1120 [ 471.324758][ T8618] __sock_create+0x49e/0x940 [ 471.329389][ T8618] __sys_socket+0xd7/0x1b0 [ 471.333817][ T8618] __x64_sys_socket+0x7a/0x90 [ 471.338517][ T8618] do_syscall_64+0x55/0xb0 [ 471.342955][ T8618] ? clear_bhb_loop+0x40/0x90 [ 471.347660][ T8618] ? clear_bhb_loop+0x40/0x90 [ 471.352346][ T8618] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 471.358252][ T8618] RIP: 0033:0x7fde4219e159 [ 471.362673][ T8618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.382327][ T8618] RSP: 002b:00007fde42ffe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 471.390745][ T8618] RAX: ffffffffffffffda RBX: 00007fde42425fa0 RCX: 00007fde4219e159 [ 471.398714][ T8618] RDX: 0000000000000002 RSI: 0000000000080002 RDI: 000000000000000a [ 471.406682][ T8618] RBP: 00007fde4223506b R08: 0000000000000000 R09: 0000000000000000 [ 471.414652][ T8618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.422636][ T8618] R13: 00007fde42426038 R14: 00007fde42425fa0 R15: 00007ffd143d53d8 [ 471.430641][ T8618] [ 471.474296][ T8623] loop3: detected capacity change from 0 to 512 [ 473.237512][ T8662] loop2: detected capacity change from 0 to 512 [ 473.267628][ T8662] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.822: corrupted in-inode xattr: invalid ea_ino [ 473.290339][ T8662] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.822: couldn't read orphan inode 15 (err -117) [ 473.375554][ T8662] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.446801][ T8676] loop3: detected capacity change from 0 to 512 [ 473.525273][ T8676] EXT4-fs (loop3): 1 truncate cleaned up [ 473.565246][ T8676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.729580][ T27] audit: type=1800 audit(1789968035.942:112): pid=8662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.822" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 474.044082][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.999321][ T8697] loop3: detected capacity change from 0 to 512 [ 475.039598][ T8699] netlink: 96 bytes leftover after parsing attributes in process `syz.4.835'. [ 475.060417][ T8699] netlink: 32 bytes leftover after parsing attributes in process `syz.4.835'. [ 475.515953][ T8705] loop4: detected capacity change from 0 to 512 [ 475.544724][ T8705] EXT4-fs: Ignoring removed bh option [ 475.564642][ T8705] EXT4-fs: quotafile must be on filesystem root [ 475.592851][ T8705] netlink: 36 bytes leftover after parsing attributes in process `syz.4.839'. [ 475.837916][ T5840] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 476.044216][ T5840] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.105066][ T5840] usb 1-1: Dual-Role OTG device on HNP port [ 476.119911][ T5840] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 476.129439][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.178756][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.186832][ T5840] usb 1-1: Product: HID Gadget [ 476.246278][ T5840] usb 1-1: SerialNumber: 0123456789 [ 476.282266][ C1] ------------[ cut here ]------------ [ 476.288250][ C1] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 476.295427][ C1] WARNING: CPU: 1 PID: 5142 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x263/0x440 [ 476.305555][ C1] Modules linked in: [ 476.309492][ C1] CPU: 1 PID: 5142 Comm: udevd Not tainted syzkaller #0 [ 476.316474][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 476.326565][ C1] RIP: 0010:usb_ep_enable+0x263/0x440 [ 476.331989][ C1] Code: 49 8b 0e 48 c7 c0 c0 0f 7b 8b 49 c7 c0 e0 0f 7b 8b 4c 0f 44 c0 48 c7 c7 80 0f 7b 8b 48 c7 c6 5c 27 a7 8c 89 ea e8 9d 03 95 fa <0f> 0b e9 e1 fe ff ff e8 91 3f cb fa 49 bc 00 00 00 00 00 fc ff df [ 476.351653][ C1] RSP: 0018:ffffc900001f0790 EFLAGS: 00010046 [ 476.357773][ C1] RAX: 87a2f69d3efb6a00 RBX: ffff88802294c0e0 RCX: ffff88807da11e00 [ 476.358802][ T8714] loop3: detected capacity change from 0 to 512 [ 476.365764][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 476.365814][ C1] RBP: 0000000000000081 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 476.388066][ C1] R10: dffffc0000000000 R11: ffffed10171e518b R12: dffffc0000000000 [ 476.396080][ C1] R13: ffff88802294c10d R14: ffff88802294c0e8 R15: ffff8880257f4d32 [ 476.404084][ C1] FS: 00007f7bcd153880(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 476.413044][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 476.419641][ C1] CR2: 00007ff1e91556c8 CR3: 000000001a284000 CR4: 00000000003506e0 [ 476.427630][ C1] Call Trace: [ 476.430923][ C1] [ 476.433788][ C1] hidg_set_alt+0x12a/0xa10 [ 476.438402][ C1] ? usb_gadget_set_state+0x12c/0x2a0 [ 476.443816][ C1] set_config+0x735/0xff0 [ 476.448195][ C1] composite_setup+0x1df4/0x33a0 [ 476.453172][ C1] configfs_composite_setup+0xc7/0x100 [ 476.458664][ C1] dummy_timer+0x1324/0x34e0 [ 476.463301][ C1] ? mark_lock+0x94/0x320 [ 476.467658][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 476.472698][ C1] ? lock_chain_count+0x20/0x20 [ 476.477580][ C1] ? dummy_free_streams+0x520/0x520 [ 476.482920][ C1] ? dummy_free_streams+0x520/0x520 [ 476.488137][ C1] __hrtimer_run_queues+0x525/0xc10 [ 476.493360][ C1] ? hrtimer_interrupt+0x980/0x980 [ 476.498498][ C1] ? read_tsc+0x9/0x20 [ 476.502601][ C1] hrtimer_run_softirq+0x177/0x290 [ 476.507772][ C1] handle_softirqs+0x27d/0x820 [ 476.512559][ C1] ? read_tsc+0x9/0x20 [ 476.516641][ C1] ? ktime_get+0x24b/0x280 [ 476.521074][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 476.525852][ C1] ? do_softirq+0x1a0/0x1a0 [ 476.530377][ C1] __irq_exit_rcu+0xd3/0x190 [ 476.534982][ C1] ? irq_exit_rcu+0x20/0x20 [ 476.539507][ C1] irq_exit_rcu+0x9/0x20 [ 476.543755][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 476.549399][ C1] [ 476.552341][ C1] [ 476.555287][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 476.561287][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 476.566583][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 476.586214][ C1] RSP: 0018:ffffc900032cf880 EFLAGS: 00000206 [ 476.592331][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 87a2f69d3efb6a00 [ 476.600329][ C1] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d3ba0 [ 476.608317][ C1] RBP: ffffc900032cf990 R08: dffffc0000000000 R09: 1ffffffff223d6a6 [ 476.616299][ C1] R10: dffffc0000000000 R11: fffffbfff223d6a7 R12: 1ffff92000659f1c [ 476.624285][ C1] R13: ffff88807d89d720 R14: 0000000000000246 R15: dffffc0000000000 [ 476.632291][ C1] ? __might_sleep+0xe0/0xe0 [ 476.636896][ C1] ? read_lock_is_recursive+0x20/0x20 [ 476.642305][ C1] ? __might_fault+0xaa/0x120 [ 476.647023][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 476.652071][ C1] ? __might_fault+0xaa/0x120 [ 476.656766][ C1] __might_fault+0xc6/0x120 [ 476.661291][ C1] ? __might_fault+0xaa/0x120 [ 476.665980][ C1] _copy_to_user+0x2a/0xa0 [ 476.670422][ C1] move_addr_to_user+0x146/0x1e0 [ 476.675383][ C1] ____sys_recvmsg+0x32c/0x5d0 [ 476.680173][ C1] ? __sys_recvmsg_sock+0x50/0x50 [ 476.685223][ C1] ? import_iovec+0x73/0xa0 [ 476.689749][ C1] ___sys_recvmsg+0x214/0x590 [ 476.694445][ C1] ? __sys_recvmsg+0x2a0/0x2a0 [ 476.699444][ C1] __x64_sys_recvmsg+0x21e/0x2f0 [ 476.704422][ C1] ? ___sys_recvmsg+0x590/0x590 [ 476.709328][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 476.714657][ C1] do_syscall_64+0x55/0xb0 [ 476.719125][ C1] ? clear_bhb_loop+0x40/0x90 [ 476.723839][ C1] ? clear_bhb_loop+0x40/0x90 [ 476.728547][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 476.734464][ C1] RIP: 0033:0x7f7bccaa7407 [ 476.738900][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 476.758543][ C1] RSP: 002b:00007ffd6bec3360 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 476.766972][ C1] RAX: ffffffffffffffda RBX: 00007f7bcd153880 RCX: 00007f7bccaa7407 [ 476.774998][ C1] RDX: 0000000000000000 RSI: 00007ffd6bec33f0 RDI: 0000000000000004 [ 476.783010][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 476.791019][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000056350a4569e0 [ 476.799006][ C1] R13: 00007ffd6bec34b0 R14: 00007ffd6bec33fc R15: 0000000000000000 [ 476.807178][ C1] [ 476.810209][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 476.817490][ C1] CPU: 1 PID: 5142 Comm: udevd Not tainted syzkaller #0 [ 476.824434][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 476.834520][ C1] Call Trace: [ 476.837926][ C1] [ 476.840783][ C1] dump_stack_lvl+0x18c/0x250 [ 476.845493][ C1] ? show_regs_print_info+0x20/0x20 [ 476.850704][ C1] ? load_image+0x420/0x420 [ 476.855226][ C1] panic+0x2ca/0x720 [ 476.859135][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 476.863660][ C1] __warn+0x2e0/0x470 [ 476.867653][ C1] ? usb_ep_enable+0x263/0x440 [ 476.872437][ C1] ? usb_ep_enable+0x263/0x440 [ 476.877216][ C1] report_bug+0x2be/0x4f0 [ 476.881621][ C1] ? usb_ep_enable+0x263/0x440 [ 476.886398][ C1] ? usb_ep_enable+0x263/0x440 [ 476.891172][ C1] ? usb_ep_enable+0x265/0x440 [ 476.895946][ C1] handle_bug+0xcf/0x120 [ 476.900201][ C1] exc_invalid_op+0x1a/0x50 [ 476.904713][ C1] asm_exc_invalid_op+0x1a/0x20 [ 476.909571][ C1] RIP: 0010:usb_ep_enable+0x263/0x440 [ 476.914964][ C1] Code: 49 8b 0e 48 c7 c0 c0 0f 7b 8b 49 c7 c0 e0 0f 7b 8b 4c 0f 44 c0 48 c7 c7 80 0f 7b 8b 48 c7 c6 5c 27 a7 8c 89 ea e8 9d 03 95 fa <0f> 0b e9 e1 fe ff ff e8 91 3f cb fa 49 bc 00 00 00 00 00 fc ff df [ 476.934596][ C1] RSP: 0018:ffffc900001f0790 EFLAGS: 00010046 [ 476.940677][ C1] RAX: 87a2f69d3efb6a00 RBX: ffff88802294c0e0 RCX: ffff88807da11e00 [ 476.948657][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 476.956733][ C1] RBP: 0000000000000081 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 476.964707][ C1] R10: dffffc0000000000 R11: ffffed10171e518b R12: dffffc0000000000 [ 476.972683][ C1] R13: ffff88802294c10d R14: ffff88802294c0e8 R15: ffff8880257f4d32 [ 476.980685][ C1] hidg_set_alt+0x12a/0xa10 [ 476.985219][ C1] ? usb_gadget_set_state+0x12c/0x2a0 [ 476.990613][ C1] set_config+0x735/0xff0 [ 476.994958][ C1] composite_setup+0x1df4/0x33a0 [ 476.999921][ C1] configfs_composite_setup+0xc7/0x100 [ 477.005394][ C1] dummy_timer+0x1324/0x34e0 [ 477.010020][ C1] ? mark_lock+0x94/0x320 [ 477.014388][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 477.019514][ C1] ? lock_chain_count+0x20/0x20 [ 477.024395][ C1] ? dummy_free_streams+0x520/0x520 [ 477.029887][ C1] ? dummy_free_streams+0x520/0x520 [ 477.035117][ C1] __hrtimer_run_queues+0x525/0xc10 [ 477.040347][ C1] ? hrtimer_interrupt+0x980/0x980 [ 477.045485][ C1] ? read_tsc+0x9/0x20 [ 477.049571][ C1] hrtimer_run_softirq+0x177/0x290 [ 477.055417][ C1] handle_softirqs+0x27d/0x820 [ 477.060208][ C1] ? read_tsc+0x9/0x20 [ 477.064287][ C1] ? ktime_get+0x24b/0x280 [ 477.068718][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 477.073492][ C1] ? do_softirq+0x1a0/0x1a0 [ 477.078041][ C1] __irq_exit_rcu+0xd3/0x190 [ 477.082636][ C1] ? irq_exit_rcu+0x20/0x20 [ 477.087155][ C1] irq_exit_rcu+0x9/0x20 [ 477.091492][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 477.097149][ C1] [ 477.100086][ C1] [ 477.103022][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 477.109014][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 477.114311][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 477.133927][ C1] RSP: 0018:ffffc900032cf880 EFLAGS: 00000206 [ 477.140007][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 87a2f69d3efb6a00 [ 477.147989][ C1] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d3ba0 [ 477.155972][ C1] RBP: ffffc900032cf990 R08: dffffc0000000000 R09: 1ffffffff223d6a6 [ 477.163953][ C1] R10: dffffc0000000000 R11: fffffbfff223d6a7 R12: 1ffff92000659f1c [ 477.171931][ C1] R13: ffff88807d89d720 R14: 0000000000000246 R15: dffffc0000000000 [ 477.179933][ C1] ? __might_sleep+0xe0/0xe0 [ 477.184556][ C1] ? read_lock_is_recursive+0x20/0x20 [ 477.189941][ C1] ? __might_fault+0xaa/0x120 [ 477.194626][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 477.199753][ C1] ? __might_fault+0xaa/0x120 [ 477.204463][ C1] __might_fault+0xc6/0x120 [ 477.209063][ C1] ? __might_fault+0xaa/0x120 [ 477.213747][ C1] _copy_to_user+0x2a/0xa0 [ 477.218286][ C1] move_addr_to_user+0x146/0x1e0 [ 477.223258][ C1] ____sys_recvmsg+0x32c/0x5d0 [ 477.228047][ C1] ? __sys_recvmsg_sock+0x50/0x50 [ 477.233177][ C1] ? import_iovec+0x73/0xa0 [ 477.237698][ C1] ___sys_recvmsg+0x214/0x590 [ 477.242392][ C1] ? __sys_recvmsg+0x2a0/0x2a0 [ 477.247277][ C1] __x64_sys_recvmsg+0x21e/0x2f0 [ 477.252232][ C1] ? ___sys_recvmsg+0x590/0x590 [ 477.257106][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 477.262313][ C1] do_syscall_64+0x55/0xb0 [ 477.266741][ C1] ? clear_bhb_loop+0x40/0x90 [ 477.271434][ C1] ? clear_bhb_loop+0x40/0x90 [ 477.276212][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.282117][ C1] RIP: 0033:0x7f7bccaa7407 [ 477.286541][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 477.306241][ C1] RSP: 002b:00007ffd6bec3360 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 477.314838][ C1] RAX: ffffffffffffffda RBX: 00007f7bcd153880 RCX: 00007f7bccaa7407 [ 477.322824][ C1] RDX: 0000000000000000 RSI: 00007ffd6bec33f0 RDI: 0000000000000004 [ 477.330799][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 477.338771][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000056350a4569e0 [ 477.346830][ C1] R13: 00007ffd6bec34b0 R14: 00007ffd6bec33fc R15: 0000000000000000 [ 477.354839][ C1] [ 477.357992][ C1] Kernel Offset: disabled [ 477.362376][ C1] Rebooting in 86400 seconds..