last executing test programs: 33.799131246s ago: executing program 1 (id=3137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_emit_ethernet(0x30, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000"], 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 33.173494118s ago: executing program 1 (id=3140): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x9, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x220, 0x1, 0xa, 0x38010000000000, 0x5, 0x6, 0x4000000004, 0x1, 0x1, 0x4000000000010, 0xffff, 0x6, 0x21, 0xff, 0xb08, 0x8000000000000001], 0x0, 0x80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 32.796141176s ago: executing program 1 (id=3142): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x30, 0x0, &(0x7f0000000140)="b4618023ff614931ed33730100010446b20aed02000000000100997d9cfb5868a5d6ae4ce52646f38b5528f9cccb5b03", 0x0, 0xfffff17c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 32.582559668s ago: executing program 1 (id=3144): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x800, &(0x7f0000000c80)={[{@dax_inode}, {@nolazytime}, {@dax_inode}, {@jqfmt_vfsv0}, {@dioread_lock}, {@usrjquota_path={'usrjquota', 0x3d, '.'}}, {@noauto_da_alloc}]}, 0x3, 0x236, &(0x7f0000000300)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfb0e00000000000000a9000ff8c37ee7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) mkdir(&(0x7f0000000840)='./file0\x00', 0x40) 31.697675757s ago: executing program 1 (id=3153): openat$dm_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4814) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb2}, 0x3}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000002f80)=""/168, 0xa8}, {&(0x7f0000001c40)=""/4060, 0xfdc}, {&(0x7f0000002c40)=""/131, 0x83}, {&(0x7f0000003040)=""/194, 0xc2}, {&(0x7f0000002d00)=""/271, 0x10f}, {&(0x7f0000002f40)=""/39, 0x27}, {&(0x7f0000000840)=""/161}, {&(0x7f0000003140)=""/4096}], 0x6}, 0x4}], 0x4, 0x0, 0x0) 31.084071938s ago: executing program 1 (id=3158): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r2, &(0x7f0000000080)='100000', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r4, &(0x7f00000001c0)='0', 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0xa, &(0x7f00000003c0)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000240)={0x0, 'syz_tun\x00', {0x4}, 0xa}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 30.522959804s ago: executing program 32 (id=3158): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r2, &(0x7f0000000080)='100000', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r4, &(0x7f00000001c0)='0', 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0xa, &(0x7f00000003c0)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000240)={0x0, 'syz_tun\x00', {0x4}, 0xa}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 12.424029562s ago: executing program 0 (id=3256): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000280)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f00000002c0)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000300)='PRIV', 0x4, 0xc00) pwrite64(r0, &(0x7f0000000340)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000440)='P', 0x1, 0x1e8000) r1 = syz_open_dev$loop(&(0x7f0000000480), 0x0, 0x202) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 12.079383416s ago: executing program 0 (id=3258): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xf, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34eac}]}, &(0x7f0000000540)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.756120709s ago: executing program 0 (id=3262): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x1a, 0x7, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000c60001001000000085100000010000009500000000000000852000000852030095"], &(0x7f00000009c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x3f, '\x00', 0x0, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) 11.572065877s ago: executing program 0 (id=3266): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) 3.5814791s ago: executing program 4 (id=3302): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB='H\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2a003300d0000800080211000001080211000000505050505050"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.37867567s ago: executing program 4 (id=3305): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000240)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000300)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x82, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r4, 0x0, 0x0) splice(r3, 0x0, r0, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000500)="cd89", 0x2}], 0x1) write$binfmt_script(r2, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "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"}, 0xfdef) 3.045527263s ago: executing program 2 (id=3306): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='tcp 2', 0x5) r1 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x0, 0x0}) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2.642622434s ago: executing program 2 (id=3307): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_emit_ethernet(0x30, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000022"], 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.340380814s ago: executing program 4 (id=3308): syz_mount_image$jfs(&(0x7f0000000280), &(0x7f0000000300)='./file1\x00', 0x1c002, &(0x7f0000000340)=ANY=[], 0x1, 0x5f12, &(0x7f000000ac80)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') preadv(r0, 0x0, 0x0, 0xa3, 0x0) 2.002387038s ago: executing program 2 (id=3309): nanosleep(&(0x7f0000000100)={0x3}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e"], 0x11) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 1.446475344s ago: executing program 0 (id=3310): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x4e60, @empty}, {0x2, 0x0, @empty}, 0x81, 0x0, 0x0, 0x0, 0x6ab6, &(0x7f00000001c0)='syz_tun\x00'}) r1 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r1, &(0x7f000000b4c0)=[{{&(0x7f0000000900)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_retopts={{0xc}}], 0xc}}, {{&(0x7f0000003500)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001140)}}], 0x2, 0x0) 1.292465059s ago: executing program 4 (id=3311): r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000100)={0x0, 0x5, 0x9c}) 1.247975984s ago: executing program 3 (id=3319): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) 1.247686114s ago: executing program 0 (id=3312): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x445a, &(0x7f0000001e80)="$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") r0 = creat(&(0x7f0000006300)='./bus\x00', 0x0) write$vhost_msg_v2(r0, &(0x7f0000006340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) truncate(&(0x7f00000073c0)='./bus\x00', 0x400005) 1.046801464s ago: executing program 3 (id=3313): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB='H\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2a003300d0000800080211000001080211000000505050505050"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 925.386016ms ago: executing program 3 (id=3314): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000900)={0x28, 0x0, 0x2710}, 0x10) r3 = accept(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001f40)=ANY=[@ANYBLOB="120000000400000004000000a400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000fc7158d77af2874ffcb21f2816c554495a6678451227b9230405fde017"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000009c0)={r4, &(0x7f0000000a00), &(0x7f0000000a40)=@tcp=r3, 0x1}, 0x20) recvmsg$can_bcm(r3, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 783.986001ms ago: executing program 4 (id=3315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f0001006970763668656164657200000800020000000000070003002000000014000000110001"], 0xec}}, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000009ac0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a27f2", 0xc, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0xf6}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 722.800907ms ago: executing program 4 (id=3316): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000240)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000300)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x82, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r4, 0x0, 0x0) splice(r3, 0x0, r0, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000500)="cd89", 0x2}], 0x1) write$binfmt_script(r2, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "5775ebb77549afc496bc5cc558c52be63e203db628daa190b16cc7216b9bfb1b0bd22d03f5e1cd7a3da150be3434e1d6c83af706cea87fffe560d236a8c26a760289f80eaa398ae77b0d26197822dd25b01733bd602efae482eced2ed31ee6ce67c841c25dfefcd739990462ff3626423e0e3ba7a4d4a86469f8cf3ac3d81d4f63be7d17a6caf4a8b071298bc35fdea671ea0025460ccfed3040fe1945a0d089bba38204ca6631e158a7717cf420623fad22082e3ae1b8e38748772095513a3f5028fb76790ef01caab610421c1ae48ffd68b5aefd4f399b8d28edddd9dde0d8afa1fd2df0d8c6ebbcf9493daea96589ee90969516953c83d70124dc91b26e3287986fdc096eda61a819b88e28facf71a064600e69747ab08f0379afde05c2b558f6058e2ef5c3a36ab3171bd99960ebb980380b7f76f8fce6987cf5eafb1384cefd64e1d214b14cff8f9ae739db32fb1e54d01856a3b277c3f02aeebe7f58f0708f4487afe3674a0a412461a9de083979f9c380a9336893f77c19f740aed24764a0165a52fa2d8152bb55f49fe1c1a52977f9244fdf648ef55acdbaab7827a33e5c66592b97b2b4ccf4d642d75a23a0bf43cb9dd6d4156cc58636f4d68d0370d827d0c6a0b0a3fb818e36d6716a49ec3bac8da32f9a8bd74c499768a4c62822d018ef9f7982ddf15e655670f9cec0162460e4b9a83a5f1cfd99dcb5dfe680039d9b9ee28132545ce12ff1f32c6ecf9181688260da9d4d610567eacf0c399e85c974fc752333c7d0ac1ba8e0213f07884fc77b0ba82aa058e596f04b7d44b409cd4a1fab3b3c0d4217493196f62e2cf9e4d9834e7f966ca42b76100ef5f6fa89700a0b4661056849331fb583b3e9659711ae466c61507319b7d1638ffca5f9130ca7fdb86276ada534473b4d2c21859a825ba6e502d2f912e224f1fdb70a57c42e2185a45edac6e09c1c7446dc889dd8ba711ac687257b35a1b923a960be298b680106299cd3ac4e06cae9352bfdd0427e13ce759b48140df351c8f9ae8fb9acabb9c3346e23433c4875d45ac7836d990cd13d35ac48700e315d7e9b11ca587cb9a764af1fda1bb8c36f15d1d642252e26a5c9d9c33a16dca4584f864467ad20b97ddffc6fcbbaf71716aa07e9f0c99bee7e22fac55dcf54f99af981bd0217b72a4cf46ce46f165d512fd49ff4e3cea29a63e0354177bfe5433b25c3496461b39153b68cbc5af714bde4043909c4679aedd01875badbb6f74cadcf9488769ebe8e173c746225f3decccfed3d295d90b29444b27c2e5a72943eb03d254940a65398e63d78f9b41ef8a17c0c2bd8e9057619ff39dc47105189d0c70a32c535790e68fff9c9a9ef708576c51bcc8868f8a2842b82af5c0466a3cb1fc229e3fd4434e2956d206fc8ca66c8494567db7034e223a4dd1313d3b2399616307fd3ef27acf6732a69cc5f"}, 0xfdef) 577.642641ms ago: executing program 3 (id=3317): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) cachestat(r0, 0xfffffffffffffffe, 0x0, 0x0) 431.993956ms ago: executing program 2 (id=3318): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010005000000000000", @ANYRES32=r2, @ANYBLOB="06005b0094"], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="2a003300d0000800080211000001080211000000505050505050"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 361.534093ms ago: executing program 3 (id=3320): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./gadget\x00', 0x1ef) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000140)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./gadget/dummy_udc\x00', 0x2, 0x84) write(r0, &(0x7f00000001c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff000000070581020002001201000200000040341278560001", 0x44) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000580)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./gadget/ep1in-bulk\x00', 0x2, 0x24) 186.07019ms ago: executing program 2 (id=3321): setns(0xc9, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xfffd, 0x0, @mcast2, 0x7}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010100}, 0x10, 0x0}, 0x20000004) 86.133871ms ago: executing program 3 (id=3322): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='tcp 2', 0x5) r1 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x0, 0x0}) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 0s ago: executing program 2 (id=3323): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040), 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) mknodat$md(0xffffffffffffff9c, &(0x7f0000000140)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000180)='./md0\x00', 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0xf6, 0xa) pipe(0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x2) fchdir(r1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) setpgid(0x0, r2) rename(&(0x7f0000000880)='./file2\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x720, 0x0, 0x0) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000280)={0x7, {0x1, 0x0}, 0x0, 0x6}) ioctl$RUN_ARRAY(r0, 0x400c0930, 0x0) kernel console output (not intermixed with test programs): 60444][T15646] netlink: 'syz.0.2580': attribute type 10 has an invalid length. [ 1288.488522][T15646] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.516366][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1288.527085][ T27] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1288.542310][T15646] bridge_slave_1: left allmulticast mode [ 1288.548810][ T27] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1288.563891][T15646] bridge_slave_1: left promiscuous mode [ 1288.569602][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.580262][T15646] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.602429][ T27] spcp8x5 2-1:1.0: SPCP8x5 converter detected [ 1288.609635][T15646] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1288.633548][ T27] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 1289.022309][T15636] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 1289.034471][T15636] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 1289.054002][T15636] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 1289.149850][T15636] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 1289.220378][T15508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1289.283029][T15635] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 1289.312219][ T175] usb 2-1: USB disconnect, device number 13 [ 1289.329247][T15508] veth0_vlan: entered promiscuous mode [ 1289.341728][ T175] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1289.377198][ T175] spcp8x5 2-1:1.0: device disconnected [ 1289.389615][T15508] veth1_vlan: entered promiscuous mode [ 1289.496122][T15508] veth0_macvtap: entered promiscuous mode [ 1289.514288][T15508] veth1_macvtap: entered promiscuous mode [ 1289.547707][T15508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1289.568720][T15508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.578794][T15508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1289.597006][T15508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.610109][T15508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1289.630667][T15508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.653465][T15508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1289.698479][T15508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1289.717134][T15508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.728676][T15508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1289.748751][T15508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.763415][T15508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1289.796164][T15508] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.808944][T15508] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.818338][T15508] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.829939][T15508] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.042346][ T9762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1290.054741][T15666] gadgetfs: bound to dummy_udc driver [ 1290.074855][ T9762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1290.131632][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1290.150042][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1290.181653][T15666] FAULT_INJECTION: forcing a failure. [ 1290.181653][T15666] name failslab, interval 1, probability 5, space 0, times 9996 [ 1290.224137][T15666] CPU: 0 PID: 15666 Comm: syz.2.2585 Not tainted syzkaller #0 [ 1290.231678][T15666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1290.241765][T15666] Call Trace: [ 1290.245069][T15666] [ 1290.248029][T15666] dump_stack_lvl+0x18c/0x250 [ 1290.252749][T15666] ? show_regs_print_info+0x20/0x20 [ 1290.257980][T15666] ? load_image+0x420/0x420 [ 1290.262536][T15666] ? __might_sleep+0xe0/0xe0 [ 1290.267158][T15666] ? __lock_acquire+0x7eb0/0x7eb0 [ 1290.272217][T15666] should_fail_ex+0x394/0x4c0 [ 1290.276940][T15666] should_failslab+0x9/0x20 [ 1290.281614][T15666] slab_pre_alloc_hook+0x59/0x300 [ 1290.286681][T15666] ? ima_add_digest_entry+0x56/0x350 [ 1290.292012][T15666] __kmem_cache_alloc_node+0x53/0x260 [ 1290.297409][T15666] ? ima_add_template_entry+0x1d4/0x7f0 [ 1290.302988][T15666] ? ima_add_digest_entry+0x56/0x350 [ 1290.308318][T15666] kmalloc_trace+0x2a/0xe0 [ 1290.312777][T15666] ima_add_digest_entry+0x56/0x350 [ 1290.317937][T15666] ima_add_template_entry+0x5b1/0x7f0 [ 1290.323353][T15666] ? ima_add_template_entry+0x1d4/0x7f0 [ 1290.328936][T15666] ? ima_get_binary_runtime_size+0x20/0x20 [ 1290.334780][T15666] ? ima_calc_field_array_hash+0x428/0x490 [ 1290.340618][T15666] ima_store_measurement+0x2b6/0x690 [ 1290.345945][T15666] ? ima_collect_measurement+0xa30/0xa30 [ 1290.351602][T15666] ? ima_d_path+0x184/0x240 [ 1290.356135][T15666] ? ima_get_hash_algo+0x91/0x4a0 [ 1290.361190][T15666] ? ima_get_cache_status+0xd0/0xd0 [ 1290.366417][T15666] process_measurement+0x1304/0x1d50 [ 1290.371839][T15666] ? ima_file_mmap+0x1d0/0x1d0 [ 1290.376639][T15666] ? ep_open+0x145/0x270 [ 1290.380953][T15666] ? lock_chain_count+0x20/0x20 [ 1290.385850][T15666] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1290.390913][T15666] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 1290.397105][T15666] ima_file_check+0xcc/0x110 [ 1290.401752][T15666] ? ima_bprm_check+0x200/0x200 [ 1290.406651][T15666] path_openat+0x2910/0x3270 [ 1290.411287][T15666] ? do_sys_openat2+0xda/0x1d0 [ 1290.416167][T15666] ? __x64_sys_openat+0x139/0x160 [ 1290.421230][T15666] ? verify_lock_unused+0x140/0x140 [ 1290.426475][T15666] ? do_filp_open+0x430/0x430 [ 1290.431213][T15666] do_filp_open+0x1f2/0x430 [ 1290.435746][T15666] ? vfs_tmpfile+0x620/0x620 [ 1290.440399][T15666] ? _raw_spin_unlock+0x28/0x40 [ 1290.445291][T15666] ? alloc_fd+0x590/0x640 [ 1290.449681][T15666] do_sys_openat2+0x134/0x1d0 [ 1290.454601][T15666] ? do_sys_open+0xe0/0xe0 [ 1290.459071][T15666] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1290.465084][T15666] ? lock_chain_count+0x20/0x20 [ 1290.469991][T15666] __x64_sys_openat+0x139/0x160 [ 1290.474889][T15666] do_syscall_64+0x55/0xb0 [ 1290.479355][T15666] ? clear_bhb_loop+0x40/0x90 [ 1290.484064][T15666] ? clear_bhb_loop+0x40/0x90 [ 1290.488782][T15666] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1290.494714][T15666] RIP: 0033:0x7f92e8f9f559 [ 1290.499160][T15666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1290.521092][T15666] RSP: 002b:00007f92e9df4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1290.529555][T15666] RAX: ffffffffffffffda RBX: 00007f92e9225fa0 RCX: 00007f92e8f9f559 [ 1290.537564][T15666] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 1290.545564][T15666] RBP: 00007f92e9036b20 R08: 0000000000000000 R09: 0000000000000000 [ 1290.553566][T15666] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 1290.561570][T15666] R13: 00007f92e9226038 R14: 00007f92e9225fa0 R15: 00007ffcdb7f2bb8 [ 1290.569653][T15666] [ 1290.622963][T15666] ima: OUT OF MEMORY ERROR creating queue entry [ 1290.633567][ T28] audit: type=1804 audit(1793090904.407:87): pid=15666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.2.2585" name="/newroot/83/gadget/ep1in-bulk" dev="gadgetfs" ino=34944 res=0 errno=0 [ 1290.720914][ T27] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1290.736380][ C1] gadgetfs: connected [ 1290.751691][T15663] gadgetfs: suspended from state 3 [ 1290.761179][T15663] gadgetfs: disconnected [ 1291.118606][T15678] device-mapper: table: 248:4: crypt: Error decoding and setting key (-EINVAL) [ 1291.148262][T15678] device-mapper: ioctl: error adding target to table [ 1291.626227][T15706] loop0: detected capacity change from 0 to 3904 [ 1291.695160][T15706] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1291.713262][T15706] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 1291.732742][T15706] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1291.742304][T15706] loop0: [ 1291.757517][ T5149] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1291.779004][ T5149] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 1291.802155][ T5149] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1291.836244][ T5149] loop0: [ 1292.344072][T15727] FAULT_INJECTION: forcing a failure. [ 1292.344072][T15727] name failslab, interval 1, probability 5, space 0, times 9995 [ 1292.364462][T15727] CPU: 1 PID: 15727 Comm: syz.0.2606 Not tainted syzkaller #0 [ 1292.371992][T15727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1292.382079][T15727] Call Trace: [ 1292.385382][T15727] [ 1292.388340][T15727] dump_stack_lvl+0x18c/0x250 [ 1292.393051][T15727] ? sctp_sendmsg+0x1519/0x27b0 [ 1292.397940][T15727] ? __x64_sys_sendto+0xde/0xf0 [ 1292.402817][T15727] ? show_regs_print_info+0x20/0x20 [ 1292.408072][T15727] ? load_image+0x420/0x420 [ 1292.412612][T15727] should_fail_ex+0x394/0x4c0 [ 1292.417321][T15727] should_failslab+0x9/0x20 [ 1292.421851][T15727] slab_pre_alloc_hook+0x59/0x300 [ 1292.426905][T15727] ? sctp_add_bind_addr+0x8c/0x360 [ 1292.432058][T15727] __kmem_cache_alloc_node+0x53/0x260 [ 1292.437483][T15727] ? sctp_add_bind_addr+0x8c/0x360 [ 1292.442630][T15727] kmalloc_trace+0x2a/0xe0 [ 1292.447086][T15727] sctp_add_bind_addr+0x8c/0x360 [ 1292.452077][T15727] sctp_copy_local_addr_list+0x31b/0x4e0 [ 1292.457772][T15727] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 1292.463553][T15727] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 1292.469669][T15727] ? sctp_v6_is_any+0x64/0x70 [ 1292.474380][T15727] ? sctp_copy_one_addr+0x8c/0x350 [ 1292.479538][T15727] sctp_bind_addr_copy+0xb3/0x3c0 [ 1292.484606][T15727] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1292.490996][T15727] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1292.496318][T15727] ? __sctp_connect+0xd80/0xd80 [ 1292.501198][T15727] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1292.506635][T15727] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1292.512215][T15727] ? security_sctp_bind_connect+0x89/0xb0 [ 1292.517988][T15727] sctp_sendmsg+0x1519/0x27b0 [ 1292.522710][T15727] ? sctp_getsockopt+0xb60/0xb60 [ 1292.527684][T15727] ? aa_sk_perm+0x7bb/0x8e0 [ 1292.532225][T15727] ? aa_af_perm+0x330/0x330 [ 1292.536759][T15727] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1292.543216][T15727] ? sock_rps_record_flow+0x19/0x3f0 [ 1292.548567][T15727] ? inet_sendmsg+0xce/0x2a0 [ 1292.553208][T15727] __sys_sendto+0x4a9/0x6b0 [ 1292.557740][T15727] ? __ia32_sys_getpeername+0x90/0x90 [ 1292.563170][T15727] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1292.569186][T15727] ? lock_chain_count+0x20/0x20 [ 1292.574082][T15727] __x64_sys_sendto+0xde/0xf0 [ 1292.578804][T15727] do_syscall_64+0x55/0xb0 [ 1292.583248][T15727] ? clear_bhb_loop+0x40/0x90 [ 1292.588040][T15727] ? clear_bhb_loop+0x40/0x90 [ 1292.592751][T15727] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1292.598696][T15727] RIP: 0033:0x7f8fce59f559 [ 1292.603137][T15727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1292.622774][T15727] RSP: 002b:00007f8fcf4b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1292.631213][T15727] RAX: ffffffffffffffda RBX: 00007f8fce825fa0 RCX: 00007f8fce59f559 [ 1292.639211][T15727] RDX: 0000000000034000 RSI: 00002000000017c0 RDI: 0000000000000003 [ 1292.647209][T15727] RBP: 00007f8fce636b20 R08: 0000200000001800 R09: 000000000000001c [ 1292.655227][T15727] R10: 0000000000044004 R11: 0000000000000246 R12: 0000000000000000 [ 1292.663230][T15727] R13: 00007f8fce826038 R14: 00007f8fce825fa0 R15: 00007ffc37a5ce48 [ 1292.671232][T15727] [ 1292.963208][T15734] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.50.0), cmd(9) [ 1293.282797][T15745] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2614'. [ 1293.539351][T15755] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2619'. [ 1293.722386][T15764] loop0: detected capacity change from 0 to 3904 [ 1293.776643][T15764] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1293.795765][T15764] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 1293.815874][T15764] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1293.836355][T15764] loop0: [ 1293.854171][ T5149] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1293.881908][ T5149] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 1293.890350][ T5149] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1293.908082][ T5149] loop0: [ 1294.422225][ T5772] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1294.615378][ T5772] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.636387][T15781] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2629'. [ 1294.637975][ T5772] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1294.661563][ T5772] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1294.688528][ T5772] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1294.714435][ T5772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1294.732846][ T5772] usb 3-1: Product: syz [ 1294.742351][ T5772] usb 3-1: Manufacturer: syz [ 1294.767841][T15772] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1294.804510][ T5772] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 1294.845325][ T5772] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1295.086295][ T5853] usb 3-1: USB disconnect, device number 11 [ 1295.112237][ T5853] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1295.137752][ T5853] garmin_gps 3-1:1.0: device disconnected [ 1295.153532][T15791] FAULT_INJECTION: forcing a failure. [ 1295.153532][T15791] name failslab, interval 1, probability 5, space 0, times 9994 [ 1295.223469][T15791] CPU: 0 PID: 15791 Comm: syz.1.2632 Not tainted syzkaller #0 [ 1295.231043][T15791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1295.241151][T15791] Call Trace: [ 1295.244475][T15791] [ 1295.247452][T15791] dump_stack_lvl+0x18c/0x250 [ 1295.252209][T15791] ? show_regs_print_info+0x20/0x20 [ 1295.257478][T15791] ? load_image+0x420/0x420 [ 1295.262059][T15791] ? __might_sleep+0xe0/0xe0 [ 1295.266719][T15791] ? __lock_acquire+0x7eb0/0x7eb0 [ 1295.271811][T15791] ? percpu_ref_put+0x12/0x100 [ 1295.276642][T15791] should_fail_ex+0x394/0x4c0 [ 1295.281402][T15791] should_failslab+0x9/0x20 [ 1295.286009][T15791] slab_pre_alloc_hook+0x59/0x300 [ 1295.291099][T15791] kmem_cache_alloc+0x5a/0x2d0 [ 1295.295913][T15791] ? vm_area_dup+0x61/0x270 [ 1295.300487][T15791] vm_area_dup+0x61/0x270 [ 1295.304881][T15791] __split_vma+0x1a8/0xc20 [ 1295.309360][T15791] ? init_vma_prep+0x160/0x160 [ 1295.314185][T15791] ? mmap_write_unlock+0x160/0x160 [ 1295.319396][T15791] ? split_vma+0x8f/0x110 [ 1295.323809][T15791] mlock_fixup+0x415/0x550 [ 1295.328315][T15791] apply_vma_lock_flags+0x2a7/0x3c0 [ 1295.333592][T15791] ? do_mlock+0x740/0x740 [ 1295.337982][T15791] ? down_write_killable+0x181/0x230 [ 1295.343329][T15791] do_mlock+0x4be/0x740 [ 1295.347544][T15791] ? lru_gen_add_folio+0xe00/0xe00 [ 1295.352695][T15791] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1295.358717][T15791] ? lock_chain_count+0x20/0x20 [ 1295.363607][T15791] ? syscall_enter_from_user_mode+0x25/0x80 [ 1295.369541][T15791] __x64_sys_mlock+0x60/0x70 [ 1295.374184][T15791] do_syscall_64+0x55/0xb0 [ 1295.378636][T15791] ? clear_bhb_loop+0x40/0x90 [ 1295.383357][T15791] ? clear_bhb_loop+0x40/0x90 [ 1295.388082][T15791] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1295.394012][T15791] RIP: 0033:0x7f248eb9f559 [ 1295.398467][T15791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1295.418130][T15791] RSP: 002b:00007f248fb07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1295.426585][T15791] RAX: ffffffffffffffda RBX: 00007f248ee25fa0 RCX: 00007f248eb9f559 [ 1295.434592][T15791] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 1295.442604][T15791] RBP: 00007f248ec36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1295.450598][T15791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1295.458598][T15791] R13: 00007f248ee26038 R14: 00007f248ee25fa0 R15: 00007ffee494b188 [ 1295.466637][T15791] [ 1295.730991][T15800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2635'. [ 1295.931051][T15805] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1295.971273][T15809] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2638'. [ 1296.150399][T15816] gadgetfs: bound to dummy_udc driver [ 1296.452009][ T5853] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1296.461909][ T5872] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1296.477566][ C0] gadgetfs: connected [ 1296.485116][ T5853] gadgetfs: disconnected [ 1296.672244][ C0] gadgetfs: connected [ 1296.680457][ T5853] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1296.698865][ T5872] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1296.715947][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.730471][ T5872] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1296.748011][ C0] gadgetfs: configuration #1 [ 1296.760911][ T5853] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input8 [ 1296.781898][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.806658][ T5872] usb 4-1: config 0 descriptor?? [ 1296.883737][ C1] usbtouchscreen 1-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 1296.923502][T15834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2651'. [ 1297.360000][ T28] audit: type=1800 audit(1793090911.137:88): pid=15846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2656" name="power" dev="configfs" ino=36156 res=0 errno=0 [ 1298.155261][T15869] device-mapper: table: 248:5: snapshot: Couldn't create exception store (-EINVAL) [ 1298.195585][T15869] device-mapper: ioctl: error adding target to table [ 1298.951998][ T5095] Bluetooth: hci2: command tx timeout [ 1298.963876][T15879] md: couldn't update array info. -22 [ 1298.978131][T15879] md: could not open device unknown-block(1,3). [ 1298.990983][T15879] md: md_import_device returned -16 [ 1299.106294][T15880] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 1299.221429][T15847] gadgetfs: suspended from state 3 [ 1299.227272][ T5872] usb 4-1: USB disconnect, device number 19 [ 1299.247481][T15847] gadgetfs: disconnected [ 1299.263421][ T5853] usb 1-1: USB disconnect, device number 16 [ 1299.758020][T15901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2679'. [ 1299.929294][T15908] 0: reclassify loop, rule prio 0, protocol 03 [ 1300.025656][T15910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2682'. [ 1300.319774][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.326388][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.468531][ T28] audit: type=1800 audit(1793090914.237:89): pid=15923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2687" name="file2" dev="sda1" ino=2052 res=0 errno=0 [ 1300.668890][T15929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2689'. [ 1300.754191][T15933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2693'. [ 1300.903015][ T5853] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1300.962341][T10840] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1301.032091][ T5095] Bluetooth: hci2: command tx timeout [ 1301.112393][ T5853] usb 1-1: Using ep0 maxpacket: 8 [ 1301.122969][ T5853] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 1301.137539][ T5853] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1301.149362][ T5853] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1301.162106][T10840] usb 2-1: Using ep0 maxpacket: 16 [ 1301.169106][ T5853] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1301.180891][ T5853] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1301.191583][ T5853] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1301.209122][T15931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1301.220295][ T5853] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1301.230478][T15931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1301.239867][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.251586][T10840] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1301.266010][T10840] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1301.275202][T10840] usb 2-1: can't read configurations, error -71 [ 1301.470794][ T5853] usb 1-1: GET_CAPABILITIES returned 0 [ 1301.476680][ T5853] usbtmc 1-1:16.0: can't read capabilities [ 1301.685122][ T5853] usb 1-1: USB disconnect, device number 17 [ 1302.001204][T15954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2702'. [ 1302.025667][ T28] audit: type=1800 audit(1793090915.797:90): pid=15953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2701" name="file2" dev="sda1" ino=2052 res=0 errno=0 [ 1302.519824][T15966] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 1302.717274][T15970] warning: `syz.1.2708' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1303.020176][T15975] md: couldn't update array info. -22 [ 1303.032280][ T5095] Bluetooth: hci0: command tx timeout [ 1303.046229][T15978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2711'. [ 1303.111947][ T5095] Bluetooth: hci2: command tx timeout [ 1303.130056][T15975] md1: detected capacity change from 3840 to 0 [ 1303.142046][T15975] md: md1 stopped. [ 1303.703206][ T5772] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1303.716615][T15998] block nbd0: Device being setup by another task [ 1303.914527][ T5772] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1303.926803][ T5772] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1303.940915][ T5772] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1303.951890][ T5772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.974085][ T5772] spcp8x5 2-1:1.0: SPCP8x5 converter detected [ 1303.985423][ T5772] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 1304.121463][T16001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2722'. [ 1304.374257][T15990] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 1304.392219][T15990] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 1304.411957][T15990] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 1304.428589][ T5095] block nbd0: Receive control failed (result -32) [ 1304.436573][T15997] block nbd0: shutting down sockets [ 1304.461656][T16009] input: syz1 as /devices/virtual/input/input9 [ 1304.591342][T15990] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 1304.607950][T16011] syz_tun: entered allmulticast mode [ 1304.617383][ T5872] usb 2-1: USB disconnect, device number 16 [ 1304.636589][ T5872] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1304.654714][T16011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2726'. [ 1304.664702][ T5872] spcp8x5 2-1:1.0: device disconnected [ 1304.672904][T16011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1304.683144][T16011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1304.692089][T16011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1304.705192][T16011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1304.937133][T16010] syz_tun: left allmulticast mode [ 1305.192012][ T5095] Bluetooth: hci2: command tx timeout [ 1305.353555][T16022] block nbd1: shutting down sockets [ 1305.593751][ T5095] Bluetooth: hci0: command tx timeout [ 1308.368314][T16087] program syz.0.2756 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1308.551905][ T5095] Bluetooth: hci0: command tx timeout [ 1308.560487][T16091] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 1308.567467][T16091] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1308.601058][T16092] vhci_hcd: xmit failed -107 [ 1308.609220][T16091] vhci_hcd vhci_hcd.0: Device attached [ 1308.630295][ T11] vhci_hcd: stop threads [ 1308.656558][ T11] vhci_hcd: release socket [ 1308.661138][ T11] vhci_hcd: disconnect device [ 1308.762163][T16029] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1308.816878][T16096] gadgetfs: bound to dummy_udc driver [ 1309.411229][T16118] block device autoloading is deprecated and will be removed. [ 1309.728882][T16129] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2771'. [ 1309.771978][T16118] md/raid10:md3: active with 1 out of 3 devices [ 1309.778989][T16118] md3: detected capacity change from 0 to 3840 [ 1309.993945][ T5095] Bluetooth: hci4: command tx timeout [ 1310.051204][T16137] Cannot find set identified by id 0 to match [ 1310.376808][T16155] Bluetooth: ISO socket layer initialized [ 1310.679703][T16161] 0: reclassify loop, rule prio 0, protocol 03 [ 1311.188729][T16178] gadgetfs: bound to dummy_udc driver [ 1311.241066][T16178] FAULT_INJECTION: forcing a failure. [ 1311.241066][T16178] name failslab, interval 1, probability 5, space 0, times 9993 [ 1311.283304][T16178] CPU: 0 PID: 16178 Comm: syz.3.2791 Not tainted syzkaller #0 [ 1311.290843][T16178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1311.300970][T16178] Call Trace: [ 1311.304329][T16178] [ 1311.307298][T16178] dump_stack_lvl+0x18c/0x250 [ 1311.312036][T16178] ? show_regs_print_info+0x20/0x20 [ 1311.317282][T16178] ? load_image+0x420/0x420 [ 1311.321833][T16178] ? __might_sleep+0xe0/0xe0 [ 1311.326482][T16178] ? __lock_acquire+0x7eb0/0x7eb0 [ 1311.331556][T16178] should_fail_ex+0x394/0x4c0 [ 1311.336273][T16178] should_failslab+0x9/0x20 [ 1311.340805][T16178] slab_pre_alloc_hook+0x59/0x300 [ 1311.345861][T16178] ? ima_eventname_init_common+0x1de/0x710 [ 1311.351697][T16178] ? ima_eventname_init_common+0x1de/0x710 [ 1311.357528][T16178] __kmem_cache_alloc_node+0x53/0x260 [ 1311.362944][T16178] ? ima_eventname_init_common+0x1de/0x710 [ 1311.368779][T16178] __kmalloc+0xa7/0x240 [ 1311.373006][T16178] ima_eventname_init_common+0x1de/0x710 [ 1311.378686][T16178] ? ima_eventname_init+0x30/0x30 [ 1311.383755][T16178] ? ima_alloc_init_template+0x172/0x6e0 [ 1311.389412][T16178] ? rcu_is_watching+0x15/0xb0 [ 1311.394230][T16178] ? ima_alloc_init_template+0x172/0x6e0 [ 1311.399897][T16178] ? __kmalloc+0xe5/0x240 [ 1311.404262][T16178] ? prepend_path+0x8a7/0x950 [ 1311.408969][T16178] ? ima_eventname_init_common+0x710/0x710 [ 1311.414796][T16178] ima_alloc_init_template+0x308/0x6e0 [ 1311.420295][T16178] ima_store_measurement+0x1db/0x690 [ 1311.425624][T16178] ? ima_collect_measurement+0xa30/0xa30 [ 1311.431289][T16178] ? ima_d_path+0x184/0x240 [ 1311.435826][T16178] ? ima_get_hash_algo+0x91/0x4a0 [ 1311.440886][T16178] ? ima_get_cache_status+0xd0/0xd0 [ 1311.446132][T16178] process_measurement+0x1304/0x1d50 [ 1311.451495][T16178] ? ima_file_mmap+0x1d0/0x1d0 [ 1311.456303][T16178] ? ep_open+0x145/0x270 [ 1311.460615][T16178] ? lock_chain_count+0x20/0x20 [ 1311.465515][T16178] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1311.470585][T16178] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 1311.476792][T16178] ima_file_check+0xcc/0x110 [ 1311.481434][T16178] ? ima_bprm_check+0x200/0x200 [ 1311.486368][T16178] path_openat+0x2910/0x3270 [ 1311.491017][T16178] ? do_sys_openat2+0xda/0x1d0 [ 1311.495823][T16178] ? __x64_sys_openat+0x139/0x160 [ 1311.500890][T16178] ? verify_lock_unused+0x140/0x140 [ 1311.506146][T16178] ? do_filp_open+0x430/0x430 [ 1311.510879][T16178] do_filp_open+0x1f2/0x430 [ 1311.515420][T16178] ? vfs_tmpfile+0x620/0x620 [ 1311.520081][T16178] ? _raw_spin_unlock+0x28/0x40 [ 1311.524970][T16178] ? alloc_fd+0x590/0x640 [ 1311.529349][T16178] do_sys_openat2+0x134/0x1d0 [ 1311.534077][T16178] ? do_sys_open+0xe0/0xe0 [ 1311.538537][T16178] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1311.544554][T16178] ? lock_chain_count+0x20/0x20 [ 1311.549444][T16178] __x64_sys_openat+0x139/0x160 [ 1311.554348][T16178] do_syscall_64+0x55/0xb0 [ 1311.558796][T16178] ? clear_bhb_loop+0x40/0x90 [ 1311.563516][T16178] ? clear_bhb_loop+0x40/0x90 [ 1311.568251][T16178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1311.574183][T16178] RIP: 0033:0x7f1abc99f559 [ 1311.578633][T16178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1311.598286][T16178] RSP: 002b:00007f1abd93d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1311.606757][T16178] RAX: ffffffffffffffda RBX: 00007f1abcc25fa0 RCX: 00007f1abc99f559 [ 1311.614763][T16178] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 1311.622763][T16178] RBP: 00007f1abca36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1311.630761][T16178] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 1311.638764][T16178] R13: 00007f1abcc26038 R14: 00007f1abcc25fa0 R15: 00007ffc42242728 [ 1311.646781][T16178] [ 1311.680593][ T5095] Bluetooth: hci2: command tx timeout [ 1311.698707][ T28] audit: type=1804 audit(1793090925.477:91): pid=16178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.3.2791" name="/newroot/44/gadget/ep1in-bulk" dev="gadgetfs" ino=38131 res=0 errno=0 [ 1312.190140][T16193] program syz.0.2797 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1312.769253][T16170] loop1: detected capacity change from 0 to 32768 [ 1312.829430][T16170] (syz.1.2786,16170,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "00000000000000000000003" or missing value [ 1312.913659][T16170] (syz.1.2786,16170,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1313.098836][T16191] loop3: detected capacity change from 0 to 32768 [ 1313.757488][ T5095] Bluetooth: hci4: link tx timeout [ 1313.763762][ T5095] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1313.804977][T16206] loop2: detected capacity change from 0 to 40427 [ 1313.854023][T16206] F2FS-fs (loop2): build fault injection attr: rate: 174, type: 0x7ffff [ 1314.223376][T16219] program syz.0.2808 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1315.080951][T16219] loop0: detected capacity change from 0 to 32768 [ 1315.174732][T16219] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1315.288429][T16219] XFS (loop0): Ending clean mount [ 1315.314972][T16219] XFS (loop0): Quotacheck needed: Please wait. [ 1315.390445][T16219] XFS (loop0): Quotacheck: Done. [ 1315.604898][T15097] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1315.836893][ T5095] Bluetooth: hci4: command 0x0406 tx timeout [ 1315.912057][ C0] net_ratelimit: 29 callbacks suppressed [ 1316.252467][T16264] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 1316.275140][ T5772] IPVS: starting estimator thread 0... [ 1316.372800][T16265] IPVS: using max 19 ests per chain, 45600 per kthread [ 1316.457327][T16269] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2825'. [ 1316.918336][T16289] block device autoloading is deprecated and will be removed. [ 1317.280023][T16289] md/raid10:md2: active with 1 out of 3 devices [ 1317.300732][T16289] md2: detected capacity change from 0 to 3840 [ 1318.379796][T16324] gadgetfs: bound to dummy_udc driver [ 1318.403377][T16324] FAULT_INJECTION: forcing a failure. [ 1318.403377][T16324] name failslab, interval 1, probability 5, space 0, times 9992 [ 1318.421016][T16324] CPU: 1 PID: 16324 Comm: syz.2.2847 Not tainted syzkaller #0 [ 1318.428541][T16324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1318.438657][T16324] Call Trace: [ 1318.441980][T16324] [ 1318.444929][T16324] dump_stack_lvl+0x18c/0x250 [ 1318.450202][T16324] ? show_regs_print_info+0x20/0x20 [ 1318.455464][T16324] ? load_image+0x420/0x420 [ 1318.455499][T16324] ? __might_sleep+0xe0/0xe0 [ 1318.455529][T16324] ? __lock_acquire+0x7eb0/0x7eb0 [ 1318.460281][T16324] should_fail_ex+0x394/0x4c0 [ 1318.460320][T16324] should_failslab+0x9/0x20 [ 1318.470186][T16324] slab_pre_alloc_hook+0x59/0x300 [ 1318.470218][T16324] ? ima_eventname_init_common+0x1de/0x710 [ 1318.479664][T16324] ? ima_eventname_init_common+0x1de/0x710 [ 1318.490610][T16324] __kmem_cache_alloc_node+0x53/0x260 [ 1318.501855][T16324] ? ima_eventname_init_common+0x1de/0x710 [ 1318.501885][T16324] __kmalloc+0xa7/0x240 [ 1318.511961][T16324] ima_eventname_init_common+0x1de/0x710 [ 1318.517656][T16324] ? ima_eventname_init+0x30/0x30 [ 1318.522741][T16324] ? ima_alloc_init_template+0x172/0x6e0 [ 1318.528436][T16324] ? rcu_is_watching+0x15/0xb0 [ 1318.533251][T16324] ? ima_alloc_init_template+0x172/0x6e0 [ 1318.533275][T16324] ? __kmalloc+0xe5/0x240 [ 1318.543332][T16324] ? prepend_path+0x8a7/0x950 [ 1318.543364][T16324] ? ima_eventname_init_common+0x710/0x710 [ 1318.553860][T16324] ima_alloc_init_template+0x308/0x6e0 [ 1318.553899][T16324] ima_store_measurement+0x1db/0x690 [ 1318.564694][T16324] ? ima_collect_measurement+0xa30/0xa30 [ 1318.570371][T16324] ? ima_d_path+0x184/0x240 [ 1318.574926][T16324] ? ima_get_hash_algo+0x91/0x4a0 [ 1318.580019][T16324] ? ima_get_cache_status+0xd0/0xd0 [ 1318.585280][T16324] process_measurement+0x1304/0x1d50 [ 1318.590649][T16324] ? ima_file_mmap+0x1d0/0x1d0 [ 1318.595505][T16324] ? ep_open+0x145/0x270 [ 1318.599842][T16324] ? lock_chain_count+0x20/0x20 [ 1318.604741][T16324] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1318.609857][T16324] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 1318.616076][T16324] ima_file_check+0xcc/0x110 [ 1318.620736][T16324] ? ima_bprm_check+0x200/0x200 [ 1318.625671][T16324] path_openat+0x2910/0x3270 [ 1318.630337][T16324] ? do_sys_openat2+0xda/0x1d0 [ 1318.635165][T16324] ? __x64_sys_openat+0x139/0x160 [ 1318.635860][ T5872] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1318.640272][T16324] ? verify_lock_unused+0x140/0x140 [ 1318.653087][T16324] ? do_filp_open+0x430/0x430 [ 1318.657848][T16324] do_filp_open+0x1f2/0x430 [ 1318.662389][T16324] ? vfs_tmpfile+0x620/0x620 [ 1318.667037][T16324] ? _raw_spin_unlock+0x28/0x40 [ 1318.671911][T16324] ? alloc_fd+0x590/0x640 [ 1318.676280][T16324] do_sys_openat2+0x134/0x1d0 [ 1318.681009][T16324] ? do_sys_open+0xe0/0xe0 [ 1318.685490][T16324] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1318.691506][T16324] ? lock_chain_count+0x20/0x20 [ 1318.696414][T16324] __x64_sys_openat+0x139/0x160 [ 1318.701322][T16324] do_syscall_64+0x55/0xb0 [ 1318.705792][T16324] ? clear_bhb_loop+0x40/0x90 [ 1318.710533][T16324] ? clear_bhb_loop+0x40/0x90 [ 1318.715269][T16324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1318.721220][T16324] RIP: 0033:0x7f92e8f9f559 [ 1318.725702][T16324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1318.745362][T16324] RSP: 002b:00007f92e9df4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1318.753829][T16324] RAX: ffffffffffffffda RBX: 00007f92e9225fa0 RCX: 00007f92e8f9f559 [ 1318.761836][T16324] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 1318.769859][T16324] RBP: 00007f92e9036b20 R08: 0000000000000000 R09: 0000000000000000 [ 1318.777853][T16324] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 1318.777871][T16324] R13: 00007f92e9226038 R14: 00007f92e9225fa0 R15: 00007ffcdb7f2bb8 [ 1318.794147][T16324] [ 1318.862599][ T28] audit: type=1804 audit(1793090932.637:92): pid=16324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.2.2847" name="/newroot/152/gadget/ep1in-bulk" dev="gadgetfs" ino=38950 res=0 errno=0 [ 1318.926768][ T5872] usb 1-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 1318.967621][ T5872] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1319.005272][ T5872] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1319.016377][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.054063][ T5872] usb 1-1: Product: syz [ 1319.058391][ T5872] usb 1-1: Manufacturer: syz [ 1319.083076][ T5872] usb 1-1: SerialNumber: syz [ 1319.116350][T16307] loop1: detected capacity change from 0 to 32768 [ 1319.174447][T16307] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1319.284224][T16307] XFS (loop1): Ending clean mount [ 1319.299872][T16307] XFS (loop1): Quotacheck needed: Please wait. [ 1319.348912][T16320] FAULT_INJECTION: forcing a failure. [ 1319.348912][T16320] name failslab, interval 1, probability 5, space 0, times 10000 [ 1319.382117][T16320] CPU: 1 PID: 16320 Comm: syz.0.2845 Not tainted syzkaller #0 [ 1319.389674][T16320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1319.399822][T16320] Call Trace: [ 1319.403150][T16320] [ 1319.406140][T16320] dump_stack_lvl+0x18c/0x250 [ 1319.410897][T16320] ? show_regs_print_info+0x20/0x20 [ 1319.416169][T16320] ? load_image+0x420/0x420 [ 1319.420745][T16320] ? __might_sleep+0xe0/0xe0 [ 1319.425577][T16320] ? __lock_acquire+0x7eb0/0x7eb0 [ 1319.430650][T16320] should_fail_ex+0x394/0x4c0 [ 1319.430692][T16320] should_failslab+0x9/0x20 [ 1319.439957][T16320] slab_pre_alloc_hook+0x59/0x300 [ 1319.445048][T16320] ? vidtv_channel_s302m_init+0x79/0x830 [ 1319.450741][T16320] __kmem_cache_alloc_node+0x53/0x260 [ 1319.456190][T16320] ? vidtv_channel_s302m_init+0x79/0x830 [ 1319.461890][T16320] kmalloc_trace+0x2a/0xe0 [ 1319.466368][T16320] vidtv_channel_s302m_init+0x79/0x830 [ 1319.466405][T16320] ? vidtv_mux_init+0x3b1/0x1950 [ 1319.476872][T16320] vidtv_channels_init+0x45/0xa0 [ 1319.481860][T16320] vidtv_mux_init+0x4d4/0x1950 [ 1319.486670][T16320] ? rcu_is_watching+0x15/0xb0 [ 1319.491476][T16320] vidtv_start_feed+0x36c/0x590 [ 1319.496375][T16320] ? vidtv_i2c_func+0x10/0x10 [ 1319.501090][T16320] ? vidtv_stop_feed+0x260/0x260 [ 1319.506074][T16320] ? _raw_spin_unlock_irq+0x23/0x50 [ 1319.511309][T16320] ? lockdep_hardirqs_on+0x98/0x150 [ 1319.516568][T16320] dmx_ts_feed_start_filtering+0x120/0x220 [ 1319.522439][T16320] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 1319.528418][T16320] dvb_dmxdev_filter_start+0x422/0x10a0 [ 1319.534030][T16320] dvb_demux_do_ioctl+0x491/0x530 [ 1319.539109][T16320] dvb_usercopy+0x195/0x2b0 [ 1319.543668][T16320] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 1319.549257][T16320] ? dvb_generic_ioctl+0xb0/0xb0 [ 1319.554257][T16320] ? dvb_demux_poll+0x210/0x210 [ 1319.559151][T16320] dvb_demux_ioctl+0x29/0x30 [ 1319.563799][T16320] __se_sys_ioctl+0xfd/0x170 [ 1319.568467][T16320] do_syscall_64+0x55/0xb0 [ 1319.572927][T16320] ? clear_bhb_loop+0x40/0x90 [ 1319.577647][T16320] ? clear_bhb_loop+0x40/0x90 [ 1319.582367][T16320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1319.588322][T16320] RIP: 0033:0x7f8fce59f559 [ 1319.592794][T16320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1319.612456][T16320] RSP: 002b:00007f8fcf4b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1319.620914][T16320] RAX: ffffffffffffffda RBX: 00007f8fce825fa0 RCX: 00007f8fce59f559 [ 1319.628914][T16320] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000006 [ 1319.636936][T16320] RBP: 00007f8fce636b20 R08: 0000000000000000 R09: 0000000000000000 [ 1319.644935][T16320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1319.652940][T16320] R13: 00007f8fce826038 R14: 00007f8fce825fa0 R15: 00007ffc37a5ce48 [ 1319.660960][T16320] [ 1319.678804][ T5872] usb 1-1: USB disconnect, device number 19 [ 1319.717020][T16320] FAULT_INJECTION: forcing a failure. [ 1319.717020][T16320] name failslab, interval 1, probability 5, space 0, times 9999 [ 1319.737136][T16320] CPU: 0 PID: 16320 Comm: syz.0.2845 Not tainted syzkaller #0 [ 1319.744695][T16320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1319.754810][T16320] Call Trace: [ 1319.758137][T16320] [ 1319.761119][T16320] dump_stack_lvl+0x18c/0x250 [ 1319.765869][T16320] ? show_regs_print_info+0x20/0x20 [ 1319.771225][T16320] ? load_image+0x420/0x420 [ 1319.775796][T16320] ? __lock_acquire+0x7eb0/0x7eb0 [ 1319.780895][T16320] should_fail_ex+0x394/0x4c0 [ 1319.785643][T16320] should_failslab+0x9/0x20 [ 1319.790213][T16320] slab_pre_alloc_hook+0x59/0x300 [ 1319.795303][T16320] ? __vmalloc_node_range+0x598/0x1320 [ 1319.800835][T16320] ? __vmalloc_node_range+0x598/0x1320 [ 1319.806368][T16320] __kmem_cache_alloc_node+0x53/0x260 [ 1319.811810][T16320] ? __vmalloc_node_range+0x598/0x1320 [ 1319.817350][T16320] __kmalloc_node+0xa6/0x240 [ 1319.822019][T16320] __vmalloc_node_range+0x598/0x1320 [ 1319.827405][T16320] ? free_vm_area+0x50/0x50 [ 1319.831966][T16320] ? kasan_quarantine_put+0xd8/0x220 [ 1319.837312][T16320] ? lockdep_hardirqs_on+0x98/0x150 [ 1319.842582][T16320] ? bpf_patch_insn_data+0x84/0x970 [ 1319.847856][T16320] vzalloc+0x79/0x90 [ 1319.851814][T16320] ? bpf_patch_insn_data+0x84/0x970 [ 1319.857076][T16320] bpf_patch_insn_data+0x84/0x970 [ 1319.862168][T16320] ? bpf_check+0xb890/0xfe50 [ 1319.866830][T16320] ? htab_map_gen_lookup+0x23/0x310 [ 1319.872094][T16320] bpf_check+0x9844/0xfe50 [ 1319.876680][T16320] ? bpf_get_btf_vmlinux+0x70/0x70 [ 1319.881857][T16320] ? mark_lock+0x94/0x320 [ 1319.886248][T16320] ? mark_lock+0x94/0x320 [ 1319.890658][T16320] ? __lock_acquire+0x1431/0x7eb0 [ 1319.891692][T16307] XFS (loop1): Quotacheck: Done. [ 1319.895747][T16320] ? mark_lock+0x94/0x320 [ 1319.895785][T16320] ? __lock_acquire+0x1431/0x7eb0 [ 1319.910193][T16320] ? verify_lock_unused+0x140/0x140 [ 1319.915499][T16320] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0 [ 1319.921405][T16320] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1319.927459][T16320] ? __lock_acquire+0x7eb0/0x7eb0 [ 1319.932584][T16320] ? lock_chain_count+0x20/0x20 [ 1319.937491][T16320] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 1319.943768][T16320] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 1319.950076][T16320] ? do_raw_spin_unlock+0x121/0x230 [ 1319.955359][T16320] ? __asan_memset+0x22/0x40 [ 1319.960014][T16320] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1319.965082][T16320] bpf_prog_load+0x10fa/0x1610 [ 1319.969899][T16320] ? map_freeze+0x420/0x420 [ 1319.974450][T16320] ? __might_fault+0xaa/0x120 [ 1319.979159][T16320] ? __might_fault+0xc6/0x120 [ 1319.979187][T16320] ? __might_fault+0xaa/0x120 [ 1319.979210][T16320] ? bpf_lsm_bpf+0x9/0x10 [ 1319.984192][T16320] ? security_bpf+0x7e/0xa0 [ 1319.984238][T16320] __sys_bpf+0x5ba/0x890 [ 1320.002515][T16320] ? bpf_link_show_fdinfo+0x560/0x560 [ 1320.007980][T16320] ? lock_chain_count+0x20/0x20 [ 1320.012904][T16320] __x64_sys_bpf+0x7c/0x90 [ 1320.017392][T16320] do_syscall_64+0x55/0xb0 [ 1320.021864][T16320] ? clear_bhb_loop+0x40/0x90 [ 1320.026580][T16320] ? clear_bhb_loop+0x40/0x90 [ 1320.031311][T16320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1320.037239][T16320] RIP: 0033:0x7f8fce59f559 [ 1320.041685][T16320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1320.061319][T16320] RSP: 002b:00007f8fcf4b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1320.069763][T16320] RAX: ffffffffffffffda RBX: 00007f8fce825fa0 RCX: 00007f8fce59f559 [ 1320.069784][T16320] RDX: 0000000000000094 RSI: 0000200000002680 RDI: 0000000000000005 [ 1320.085757][T16320] RBP: 00007f8fce636b20 R08: 0000000000000000 R09: 0000000000000000 [ 1320.085776][T16320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1320.085792][T16320] R13: 00007f8fce826038 R14: 00007f8fce825fa0 R15: 00007ffc37a5ce48 [ 1320.085826][T16320] [ 1320.145785][T16320] warn_alloc: 1 callbacks suppressed [ 1320.145804][T16320] syz.0.2845: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1320.175864][T16320] CPU: 0 PID: 16320 Comm: syz.0.2845 Not tainted syzkaller #0 [ 1320.183416][T16320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1320.193498][T16320] Call Trace: [ 1320.193510][T16320] [ 1320.193534][T16320] dump_stack_lvl+0x18c/0x250 [ 1320.199821][T16320] ? show_regs_print_info+0x20/0x20 [ 1320.209708][T16320] ? load_image+0x420/0x420 [ 1320.209743][T16320] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1320.220758][T16320] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1320.220797][T16320] warn_alloc+0x246/0x340 [ 1320.220825][T16320] ? zone_watermark_ok_safe+0x230/0x230 [ 1320.227696][T16320] ? __vmalloc_node_range+0x598/0x1320 [ 1320.227736][T16320] ? __vmalloc_node_range+0x598/0x1320 [ 1320.227769][T16320] ? rcu_is_watching+0x15/0xb0 [ 1320.253794][T16320] ? __vmalloc_node_range+0x598/0x1320 [ 1320.259324][T16320] ? __kmalloc_node+0xe4/0x240 [ 1320.264166][T16320] __vmalloc_node_range+0x661/0x1320 [ 1320.269536][T16320] ? free_vm_area+0x50/0x50 [ 1320.274095][T16320] ? kasan_quarantine_put+0xd8/0x220 [ 1320.279453][T16320] ? lockdep_hardirqs_on+0x98/0x150 [ 1320.284726][T16320] ? bpf_patch_insn_data+0x84/0x970 [ 1320.289991][T16320] vzalloc+0x79/0x90 [ 1320.293956][T16320] ? bpf_patch_insn_data+0x84/0x970 [ 1320.299222][T16320] bpf_patch_insn_data+0x84/0x970 [ 1320.304290][T16320] ? bpf_check+0xb890/0xfe50 [ 1320.308928][T16320] ? htab_map_gen_lookup+0x23/0x310 [ 1320.314160][T16320] bpf_check+0x9844/0xfe50 [ 1320.318678][T16320] ? bpf_get_btf_vmlinux+0x70/0x70 [ 1320.323856][T16320] ? mark_lock+0x94/0x320 [ 1320.328250][T16320] ? mark_lock+0x94/0x320 [ 1320.332652][T16320] ? __lock_acquire+0x1431/0x7eb0 [ 1320.337758][T16320] ? mark_lock+0x94/0x320 [ 1320.342149][T16320] ? __lock_acquire+0x1431/0x7eb0 [ 1320.347237][T16320] ? verify_lock_unused+0x140/0x140 [ 1320.347317][T16320] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0 [ 1320.358342][T16320] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1320.364387][T16320] ? __lock_acquire+0x7eb0/0x7eb0 [ 1320.369466][T16320] ? lock_chain_count+0x20/0x20 [ 1320.374374][T16320] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 1320.380683][T16320] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 1320.387026][T16320] ? do_raw_spin_unlock+0x121/0x230 [ 1320.392298][T16320] ? __asan_memset+0x22/0x40 [ 1320.396961][T16320] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1320.402032][T16320] bpf_prog_load+0x10fa/0x1610 [ 1320.406849][T16320] ? map_freeze+0x420/0x420 [ 1320.411424][T16320] ? __might_fault+0xaa/0x120 [ 1320.416174][T16320] ? __might_fault+0xc6/0x120 [ 1320.416201][T16320] ? __might_fault+0xaa/0x120 [ 1320.416227][T16320] ? bpf_lsm_bpf+0x9/0x10 [ 1320.425616][T16320] ? security_bpf+0x7e/0xa0 [ 1320.425662][T16320] __sys_bpf+0x5ba/0x890 [ 1320.439201][T16320] ? bpf_link_show_fdinfo+0x560/0x560 [ 1320.444652][T16320] ? lock_chain_count+0x20/0x20 [ 1320.449599][T16320] __x64_sys_bpf+0x7c/0x90 [ 1320.454080][T16320] do_syscall_64+0x55/0xb0 [ 1320.458556][T16320] ? clear_bhb_loop+0x40/0x90 [ 1320.463305][T16320] ? clear_bhb_loop+0x40/0x90 [ 1320.463347][T16320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1320.468290][T16320] RIP: 0033:0x7f8fce59f559 [ 1320.468318][T16320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1320.498615][T16320] RSP: 002b:00007f8fcf4b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1320.507118][T16320] RAX: ffffffffffffffda RBX: 00007f8fce825fa0 RCX: 00007f8fce59f559 [ 1320.515155][T16320] RDX: 0000000000000094 RSI: 0000200000002680 RDI: 0000000000000005 [ 1320.523164][T16320] RBP: 00007f8fce636b20 R08: 0000000000000000 R09: 0000000000000000 [ 1320.523182][T16320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1320.523196][T16320] R13: 00007f8fce826038 R14: 00007f8fce825fa0 R15: 00007ffc37a5ce48 [ 1320.523230][T16320] [ 1320.579400][T16320] Mem-Info: [ 1320.583453][T16320] active_anon:9932 inactive_anon:5 isolated_anon:0 [ 1320.583453][T16320] active_file:15982 inactive_file:40301 isolated_file:0 [ 1320.583453][T16320] unevictable:768 dirty:204 writeback:0 [ 1320.583453][T16320] slab_reclaimable:13195 slab_unreclaimable:95696 [ 1320.583453][T16320] mapped:24815 shmem:5460 pagetables:574 [ 1320.583453][T16320] sec_pagetables:0 bounce:0 [ 1320.583453][T16320] kernel_misc_reclaimable:0 [ 1320.583453][T16320] free:1333425 free_pcp:8478 free_cma:0 [ 1320.710782][T16320] Node 0 active_anon:39928kB inactive_anon:20kB active_file:63928kB inactive_file:161004kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99260kB dirty:812kB writeback:0kB shmem:20304kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11276kB pagetables:2296kB sec_pagetables:0kB all_unreclaimable? no [ 1320.771348][T16320] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1320.841625][T16320] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1320.912241][T16320] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 1320.928426][T16320] Node 0 DMA32 free:1410736kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:39992kB inactive_anon:20kB active_file:63928kB inactive_file:160176kB unevictable:1536kB writepending:808kB present:3129332kB managed:2567744kB mlocked:0kB bounce:0kB free_pcp:16404kB local_pcp:9360kB free_cma:0kB [ 1320.999397][T16320] lowmem_reserve[]: 0 0 0 0 0 [ 1321.009381][T16320] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1321.057092][T16320] lowmem_reserve[]: 0 0 0 0 0 [ 1321.090141][T16320] Node 1 Normal free:3907596kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16544kB local_pcp:6176kB free_cma:0kB [ 1321.120038][ C0] net_ratelimit: 34 callbacks suppressed [ 1321.150651][T16320] lowmem_reserve[]: 0 0 0 0 0 [ 1321.167721][T16320] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1321.194216][T16320] Node 0 DMA32: 11*4kB (E) 783*8kB (UME) 435*16kB (UME) 813*32kB (UME) 503*64kB (UME) 423*128kB (UME) 125*256kB (UM) 79*512kB (UME) 30*1024kB (UM) 21*2048kB (M) 278*4096kB (UM) = 1410484kB [ 1321.259865][T16320] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1321.302024][T16320] Node 1 Normal: 213*4kB (UME) 47*8kB (UME) 36*16kB (UME) 104*32kB (UME) 30*64kB (UME) 7*128kB (UME) 3*256kB (UME) 1*512kB (E) 1*1024kB (U) 1*2048kB (E) 951*4096kB (M) = 3907596kB [ 1321.421926][T16320] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1321.450946][T16320] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1321.489016][T16320] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1321.527182][T16320] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1321.561696][T16320] 62883 total pagecache pages [ 1321.582137][T16320] 5 pages in swap cache [ 1321.600066][T16320] Free swap = 124464kB [ 1321.621092][T16320] Total swap = 124996kB [ 1321.640672][T16320] 2097051 pages RAM [ 1321.649972][T16320] 0 pages HighMem/MovableOnly [ 1321.664509][T16320] 421729 pages reserved [ 1321.673335][T16320] 0 pages cma reserved [ 1321.949089][T16363] gadgetfs: bound to dummy_udc driver [ 1322.024538][T16363] FAULT_INJECTION: forcing a failure. [ 1322.024538][T16363] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1322.111956][T16363] CPU: 0 PID: 16363 Comm: syz.2.2858 Not tainted syzkaller #0 [ 1322.119512][T16363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1322.129612][T16363] Call Trace: [ 1322.132945][T16363] [ 1322.135927][T16363] dump_stack_lvl+0x18c/0x250 [ 1322.140725][T16363] ? show_regs_print_info+0x20/0x20 [ 1322.145983][T16363] ? load_image+0x420/0x420 [ 1322.150561][T16363] ? __stack_depot_save+0x1f/0x660 [ 1322.155756][T16363] should_fail_ex+0x394/0x4c0 [ 1322.160500][T16363] get_futex_key+0x136/0x1030 [ 1322.165243][T16363] ? futex_setup_timer+0xc0/0xc0 [ 1322.170271][T16363] futex_wake+0x127/0x4f0 [ 1322.174684][T16363] ? futex_wake_mark+0x150/0x150 [ 1322.179682][T16363] ? kasan_quarantine_put+0xd8/0x220 [ 1322.185048][T16363] do_futex+0x35d/0x3e0 [ 1322.189260][T16363] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1322.195255][T16363] __se_sys_futex+0x3a9/0x440 [ 1322.199988][T16363] ? __x64_sys_futex+0xf0/0xf0 [ 1322.204805][T16363] ? __x64_sys_futex+0x21/0xf0 [ 1322.209620][T16363] do_syscall_64+0x55/0xb0 [ 1322.214104][T16363] ? clear_bhb_loop+0x40/0x90 [ 1322.218816][T16363] ? clear_bhb_loop+0x40/0x90 [ 1322.218855][T16363] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1322.223874][T16363] RIP: 0033:0x7f92e8f9f559 [ 1322.223896][T16363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1322.223915][T16363] RSP: 002b:00007f92e9df40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1322.223945][T16363] RAX: ffffffffffffffda RBX: 00007f92e9225fa8 RCX: 00007f92e8f9f559 [ 1322.223962][T16363] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f92e9225fac [ 1322.223977][T16363] RBP: 00007f92e9225fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 1322.223991][T16363] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1322.224006][T16363] R13: 00007f92e9226038 R14: 00007ffcdb7f2ad0 R15: 00007ffcdb7f2bb8 [ 1322.224038][T16363] [ 1322.413165][T16368] program syz.3.2862 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1322.573161][T14935] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1322.719261][T16377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2865'. [ 1323.049123][T16381] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2867'. [ 1323.396041][T16370] nvme nvme0: failed to connect socket: -512 [ 1323.432791][T16393] loop0: detected capacity change from 0 to 512 [ 1323.489947][T16393] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2871: invalid indirect mapped block 256 (level 2) [ 1323.547760][T16393] EXT4-fs (loop0): 2 truncates cleaned up [ 1323.590260][T16393] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1323.639442][T16399] gadgetfs: bound to dummy_udc driver [ 1323.713849][T16399] FAULT_INJECTION: forcing a failure. [ 1323.713849][T16399] name failslab, interval 1, probability 5, space 0, times 9998 [ 1323.742309][T16399] CPU: 0 PID: 16399 Comm: syz.3.2872 Not tainted syzkaller #0 [ 1323.749939][T16399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1323.760044][T16399] Call Trace: [ 1323.763370][T16399] [ 1323.766346][T16399] dump_stack_lvl+0x18c/0x250 [ 1323.771110][T16399] ? show_regs_print_info+0x20/0x20 [ 1323.776390][T16399] ? load_image+0x420/0x420 [ 1323.780932][T16399] ? __might_sleep+0xe0/0xe0 [ 1323.785579][T16399] ? __lock_acquire+0x7eb0/0x7eb0 [ 1323.790670][T16399] should_fail_ex+0x394/0x4c0 [ 1323.795392][T16399] should_failslab+0x9/0x20 [ 1323.799930][T16399] slab_pre_alloc_hook+0x59/0x300 [ 1323.805009][T16399] ? ima_eventname_init_common+0x1de/0x710 [ 1323.810859][T16399] ? ima_eventname_init_common+0x1de/0x710 [ 1323.810895][T16399] __kmem_cache_alloc_node+0x53/0x260 [ 1323.822160][T16399] ? ima_eventname_init_common+0x1de/0x710 [ 1323.828038][T16399] __kmalloc+0xa7/0x240 [ 1323.832259][T16399] ima_eventname_init_common+0x1de/0x710 [ 1323.837975][T16399] ? ima_eventname_init+0x30/0x30 [ 1323.843046][T16399] ? ima_alloc_init_template+0x172/0x6e0 [ 1323.848706][T16399] ? rcu_is_watching+0x15/0xb0 [ 1323.853505][T16399] ? ima_alloc_init_template+0x172/0x6e0 [ 1323.859158][T16399] ? __kmalloc+0xe5/0x240 [ 1323.859195][T16399] ? prepend_path+0x8a7/0x950 [ 1323.859223][T16399] ? ima_eventname_init_common+0x710/0x710 [ 1323.859259][T16399] ima_alloc_init_template+0x308/0x6e0 [ 1323.859307][T16399] ima_store_measurement+0x1db/0x690 [ 1323.859340][T16399] ? ima_collect_measurement+0xa30/0xa30 [ 1323.859360][T16399] ? ima_d_path+0x184/0x240 [ 1323.859387][T16399] ? ima_get_hash_algo+0x91/0x4a0 [ 1323.859411][T16399] ? ima_get_cache_status+0xd0/0xd0 [ 1323.859446][T16399] process_measurement+0x1304/0x1d50 [ 1323.859495][T16399] ? ima_file_mmap+0x1d0/0x1d0 [ 1323.859530][T16399] ? ep_open+0x145/0x270 [ 1323.859585][T16399] ? lock_chain_count+0x20/0x20 [ 1323.864273][T16399] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1323.885797][T16399] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 1323.895954][T16399] ima_file_check+0xcc/0x110 [ 1323.906294][T16399] ? ima_bprm_check+0x200/0x200 [ 1323.916454][T16399] path_openat+0x2910/0x3270 [ 1323.950986][T16399] ? do_sys_openat2+0xda/0x1d0 [ 1323.955787][T16399] ? __x64_sys_openat+0x139/0x160 [ 1323.960854][T16399] ? verify_lock_unused+0x140/0x140 [ 1323.966086][T16399] ? do_filp_open+0x430/0x430 [ 1323.970846][T16399] do_filp_open+0x1f2/0x430 [ 1323.975397][T16399] ? vfs_tmpfile+0x620/0x620 [ 1323.980050][T16399] ? _raw_spin_unlock+0x28/0x40 [ 1323.984941][T16399] ? alloc_fd+0x590/0x640 [ 1323.989315][T16399] do_sys_openat2+0x134/0x1d0 [ 1323.994040][T16399] ? do_sys_open+0xe0/0xe0 [ 1323.998584][T16399] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1324.004599][T16399] ? lock_chain_count+0x20/0x20 [ 1324.009500][T16399] __x64_sys_openat+0x139/0x160 [ 1324.014403][T16399] do_syscall_64+0x55/0xb0 [ 1324.018851][T16399] ? clear_bhb_loop+0x40/0x90 [ 1324.023567][T16399] ? clear_bhb_loop+0x40/0x90 [ 1324.028283][T16399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1324.034221][T16399] RIP: 0033:0x7f1abc99f559 [ 1324.038673][T16399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1324.058306][T16399] RSP: 002b:00007f1abd93d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1324.066763][T16399] RAX: ffffffffffffffda RBX: 00007f1abcc25fa0 RCX: 00007f1abc99f559 [ 1324.074769][T16399] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 1324.082791][T16399] RBP: 00007f1abca36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1324.090787][T16399] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 1324.098788][T16399] R13: 00007f1abcc26038 R14: 00007f1abcc25fa0 R15: 00007ffc42242728 [ 1324.106798][T16399] [ 1324.160426][T16396] gadgetfs: suspended from state 2 [ 1324.184094][ T28] audit: type=1804 audit(1793090937.937:93): pid=16399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.3.2872" name="/newroot/68/gadget/ep1in-bulk" dev="gadgetfs" ino=39057 res=0 errno=0 [ 1324.207605][ T27] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1324.263072][T15097] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1324.569478][T16419] loop0: detected capacity change from 0 to 3904 [ 1324.587504][T16420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2880'. [ 1325.027068][T16435] loop1: detected capacity change from 0 to 2048 [ 1325.038752][T16435] EXT4-fs: Ignoring removed i_version option [ 1325.087688][T16435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1325.116694][T16435] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1325.675225][T16452] loop0: detected capacity change from 0 to 3904 [ 1325.757512][T16452] loop0: [ 1325.780651][ T5149] loop0: [ 1326.231860][ C0] net_ratelimit: 41 callbacks suppressed [ 1326.294256][T16468] program syz.2.2898 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1326.447365][T16470] gadgetfs: bound to dummy_udc driver [ 1326.478472][T16470] FAULT_INJECTION: forcing a failure. [ 1326.478472][T16470] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1326.496070][T16470] CPU: 0 PID: 16470 Comm: syz.3.2899 Not tainted syzkaller #0 [ 1326.503610][T16470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1326.513716][T16470] Call Trace: [ 1326.517038][T16470] [ 1326.520006][T16470] dump_stack_lvl+0x18c/0x250 [ 1326.524748][T16470] ? show_regs_print_info+0x20/0x20 [ 1326.529999][T16470] ? load_image+0x420/0x420 [ 1326.534561][T16470] ? __stack_depot_save+0x1f/0x660 [ 1326.539742][T16470] should_fail_ex+0x394/0x4c0 [ 1326.544485][T16470] get_futex_key+0x136/0x1030 [ 1326.549225][T16470] ? futex_setup_timer+0xc0/0xc0 [ 1326.554228][T16470] futex_wake+0x127/0x4f0 [ 1326.558628][T16470] ? futex_wake_mark+0x150/0x150 [ 1326.563624][T16470] ? kasan_quarantine_put+0xd8/0x220 [ 1326.568996][T16470] do_futex+0x35d/0x3e0 [ 1326.573228][T16470] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1326.579220][T16470] __se_sys_futex+0x3a9/0x440 [ 1326.583958][T16470] ? __x64_sys_futex+0xf0/0xf0 [ 1326.588777][T16470] ? __x64_sys_futex+0x21/0xf0 [ 1326.593603][T16470] do_syscall_64+0x55/0xb0 [ 1326.598053][T16470] ? clear_bhb_loop+0x40/0x90 [ 1326.598084][T16470] ? clear_bhb_loop+0x40/0x90 [ 1326.598114][T16470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1326.607484][T16470] RIP: 0033:0x7f1abc99f559 [ 1326.607508][T16470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1326.617836][T16470] RSP: 002b:00007f1abd93d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1326.646002][T16470] RAX: ffffffffffffffda RBX: 00007f1abcc25fa8 RCX: 00007f1abc99f559 [ 1326.654004][T16470] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1abcc25fac [ 1326.654027][T16470] RBP: 00007f1abcc25fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 1326.670028][T16470] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1326.678048][T16470] R13: 00007f1abcc26038 R14: 00007ffc42242640 R15: 00007ffc42242728 [ 1326.686103][T16470] [ 1326.703478][T16473] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1326.826525][T16435] overlayfs: failed to set xattr on upper [ 1326.877144][T16435] overlayfs: ...falling back to redirect_dir=nofollow. [ 1326.885892][T16435] overlayfs: ...falling back to index=off. [ 1326.895740][T16435] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1326.938886][T16482] loop0: detected capacity change from 0 to 3904 [ 1326.987232][T16482] loop0: [ 1327.014079][ T5149] loop0: [ 1327.097221][T14935] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1327.560573][T16500] program syz.3.2908 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1327.811443][T16505] gadgetfs: bound to dummy_udc driver [ 1327.843222][T16505] FAULT_INJECTION: forcing a failure. [ 1327.843222][T16505] name failslab, interval 1, probability 5, space 0, times 9997 [ 1327.861017][T16505] CPU: 1 PID: 16505 Comm: syz.1.2910 Not tainted syzkaller #0 [ 1327.868550][T16505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1327.878650][T16505] Call Trace: [ 1327.881968][T16505] [ 1327.884940][T16505] dump_stack_lvl+0x18c/0x250 [ 1327.889665][T16505] ? show_regs_print_info+0x20/0x20 [ 1327.894905][T16505] ? load_image+0x420/0x420 [ 1327.899447][T16505] ? __might_sleep+0xe0/0xe0 [ 1327.904074][T16505] ? __lock_acquire+0x7eb0/0x7eb0 [ 1327.909131][T16505] should_fail_ex+0x394/0x4c0 [ 1327.913842][T16505] should_failslab+0x9/0x20 [ 1327.918367][T16505] slab_pre_alloc_hook+0x59/0x300 [ 1327.923427][T16505] ? ima_add_digest_entry+0x56/0x350 [ 1327.928752][T16505] __kmem_cache_alloc_node+0x53/0x260 [ 1327.934148][T16505] ? ima_add_template_entry+0x1d4/0x7f0 [ 1327.939748][T16505] ? ima_add_digest_entry+0x56/0x350 [ 1327.945069][T16505] kmalloc_trace+0x2a/0xe0 [ 1327.949614][T16505] ima_add_digest_entry+0x56/0x350 [ 1327.954774][T16505] ima_add_template_entry+0x5b1/0x7f0 [ 1327.960187][T16505] ? ima_add_template_entry+0x1d4/0x7f0 [ 1327.965783][T16505] ? rcu_is_watching+0x15/0xb0 [ 1327.970583][T16505] ? ima_get_binary_runtime_size+0x20/0x20 [ 1327.976433][T16505] ? ima_calc_field_array_hash+0x428/0x490 [ 1327.982270][T16505] ima_store_measurement+0x2b6/0x690 [ 1327.987591][T16505] ? ima_collect_measurement+0xa30/0xa30 [ 1327.993250][T16505] ? ima_d_path+0x184/0x240 [ 1327.997786][T16505] ? ima_get_hash_algo+0x91/0x4a0 [ 1328.002839][T16505] ? ima_get_cache_status+0xd0/0xd0 [ 1328.008077][T16505] process_measurement+0x1304/0x1d50 [ 1328.013410][T16505] ? ima_file_mmap+0x1d0/0x1d0 [ 1328.018205][T16505] ? ep_open+0x145/0x270 [ 1328.022520][T16505] ? lock_chain_count+0x20/0x20 [ 1328.027404][T16505] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1328.032461][T16505] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 1328.038653][T16505] ima_file_check+0xcc/0x110 [ 1328.043286][T16505] ? ima_bprm_check+0x200/0x200 [ 1328.048202][T16505] path_openat+0x2910/0x3270 [ 1328.052845][T16505] ? do_sys_openat2+0xda/0x1d0 [ 1328.057642][T16505] ? __x64_sys_openat+0x139/0x160 [ 1328.062710][T16505] ? verify_lock_unused+0x140/0x140 [ 1328.067959][T16505] ? do_filp_open+0x430/0x430 [ 1328.072692][T16505] do_filp_open+0x1f2/0x430 [ 1328.077237][T16505] ? vfs_tmpfile+0x620/0x620 [ 1328.081892][T16505] ? _raw_spin_unlock+0x28/0x40 [ 1328.086775][T16505] ? alloc_fd+0x590/0x640 [ 1328.091145][T16505] do_sys_openat2+0x134/0x1d0 [ 1328.095871][T16505] ? do_sys_open+0xe0/0xe0 [ 1328.100323][T16505] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1328.106341][T16505] ? lock_chain_count+0x20/0x20 [ 1328.111233][T16505] __x64_sys_openat+0x139/0x160 [ 1328.116126][T16505] do_syscall_64+0x55/0xb0 [ 1328.120576][T16505] ? clear_bhb_loop+0x40/0x90 [ 1328.125289][T16505] ? clear_bhb_loop+0x40/0x90 [ 1328.130003][T16505] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1328.135931][T16505] RIP: 0033:0x7f248eb9f559 [ 1328.140380][T16505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1328.160093][T16505] RSP: 002b:00007f248fb07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1328.168552][T16505] RAX: ffffffffffffffda RBX: 00007f248ee25fa0 RCX: 00007f248eb9f559 [ 1328.176557][T16505] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 1328.184551][T16505] RBP: 00007f248ec36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1328.192560][T16505] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 1328.200552][T16505] R13: 00007f248ee26038 R14: 00007f248ee25fa0 R15: 00007ffee494b188 [ 1328.208567][T16505] [ 1328.218187][T16505] ima: OUT OF MEMORY ERROR creating queue entry [ 1328.266977][ T28] audit: type=1804 audit(1793090942.007:94): pid=16505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.1.2910" name="/newroot/131/gadget/ep1in-bulk" dev="gadgetfs" ino=39275 res=0 errno=0 [ 1328.843717][T16524] program syz.3.2917 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1330.485452][T16558] program syz.3.2929 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1331.271860][ C0] net_ratelimit: 40 callbacks suppressed [ 1331.659384][T16582] program syz.0.2939 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1331.827027][T16573] loop1: detected capacity change from 0 to 40427 [ 1331.858277][T16573] F2FS-fs (loop1): build fault injection attr: rate: 174, type: 0x7ffff [ 1332.176734][T16593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2944'. [ 1332.220307][T16593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1332.246773][T16593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1332.298796][T16593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1332.317145][T16593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1333.144663][T16617] md: could not open device unknown-block(1,4). [ 1333.173925][T16617] md: md_import_device returned -16 [ 1334.204539][T16648] md: could not open device unknown-block(1,4). [ 1334.239465][T16648] md: md_import_device returned -16 [ 1334.415410][T16635] loop1: detected capacity change from 0 to 32768 [ 1334.427995][T16635] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 scanned by syz.1.2960 (16635) [ 1334.451702][T16635] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 1334.466465][T16635] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 1334.476230][T16635] BTRFS info (device loop1): using free space tree [ 1334.561102][T16635] BTRFS info (device loop1): enabling ssd optimizations [ 1334.575219][T16635] BTRFS info (device loop1): auto enabling async discard [ 1334.981518][T16685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2974'. [ 1335.389011][ T28] audit: type=1800 audit(1793090949.167:95): pid=16691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2977" name="file2" dev="sda1" ino=2052 res=0 errno=0 [ 1335.646888][T16704] program syz.2.2980 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1335.955261][T16707] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 1336.005172][T16712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2984'. [ 1336.399617][T16721] md: could not open device unknown-block(1,4). [ 1336.412258][ T28] audit: type=1800 audit(1793090950.187:96): pid=16722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2988" name="file2" dev="sda1" ino=2052 res=0 errno=0 [ 1336.420351][T16721] md: md_import_device returned -16 [ 1336.622401][T16729] program syz.3.2991 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1336.791864][ C0] net_ratelimit: 49 callbacks suppressed [ 1337.544776][ T28] audit: type=1800 audit(1793090951.327:97): pid=16754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2999" name="file2" dev="sda1" ino=2052 res=0 errno=0 [ 1337.602662][T16756] md: could not open device unknown-block(1,6). [ 1337.631261][T16756] md: md_import_device returned -16 [ 1337.812606][T16764] program syz.2.3002 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1338.529957][T14935] BTRFS info (device loop1): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 1338.630380][ T28] audit: type=1800 audit(1793090952.407:98): pid=16787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3010" name="file2" dev="sda1" ino=2052 res=0 errno=0 [ 1338.884529][T16789] md: invalid raid superblock magic on ram0 [ 1338.907824][T16789] md: ram0 does not have a valid v0.0 superblock, not importing! [ 1338.924347][T16789] md: md_import_device returned -22 [ 1338.965338][T16795] program syz.2.3013 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1339.617331][ T28] audit: type=1800 audit(1793090953.397:99): pid=16816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3021" name="file2" dev="sda1" ino=2052 res=0 errno=0 [ 1339.840212][T16822] program syz.2.3024 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1339.893162][T16820] block device autoloading is deprecated and will be removed. [ 1340.872910][T16850] program syz.1.3034 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1340.943189][T16848] md: could not open device unknown-block(1,6). [ 1340.959779][T16848] md: md_import_device returned -16 [ 1341.175508][T16858] loop0: detected capacity change from 0 to 3904 [ 1341.295226][T16858] loop0: [ 1341.327497][ T5149] loop0: [ 1341.555552][T16868] loop2: detected capacity change from 0 to 4096 [ 1341.603506][T16868] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1341.696421][T16874] md: could not open device unknown-block(1,2). [ 1341.697124][T16868] ntfs3: loop2: ino=19, mi_enum_attr [ 1341.720421][T16868] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1341.722262][T16874] md: md_import_device returned -16 [ 1341.929343][ C0] net_ratelimit: 42 callbacks suppressed [ 1342.156761][T16887] loop0: detected capacity change from 0 to 3904 [ 1342.213821][T16887] loop0: [ 1342.239001][ T5149] loop0: [ 1342.414884][T16895] program syz.1.3054 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1342.586792][T16897] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3056'. [ 1342.683015][T16902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3057'. [ 1342.959123][T16912] loop0: detected capacity change from 0 to 3904 [ 1343.036906][T16912] loop0: [ 1343.050035][ T5149] loop0: [ 1343.717042][T16916] loop3: detected capacity change from 0 to 32768 [ 1343.738883][T16916] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.3064 (16916) [ 1343.808719][T16916] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1343.839636][T16916] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 1343.860887][T16916] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1343.897976][T16916] BTRFS info (device loop3): use zstd compression, level 3 [ 1343.914701][T16916] BTRFS info (device loop3): using free space tree [ 1344.029633][T16919] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.037757][T16919] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.059903][T16916] BTRFS info (device loop3): enabling ssd optimizations [ 1344.088143][T16916] BTRFS info (device loop3): auto enabling async discard [ 1344.181351][ T28] audit: type=1800 audit(1793090957.957:100): pid=16916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3064" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 1344.239163][ T28] audit: type=1800 audit(1793090958.007:101): pid=16916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3064" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 1345.331177][T16919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1346.356487][T16919] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.372499][T16919] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.394484][T16919] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.410861][T16919] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.521490][T15508] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1346.845451][T16940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3070'. [ 1346.947539][T16919] syz.2.3067 (16919) used greatest stack depth: 19536 bytes left [ 1347.170452][T16970] loop0: detected capacity change from 0 to 3904 [ 1347.233437][T16970] loop0: [ 1347.259790][ T5149] loop0: [ 1347.441894][ C1] net_ratelimit: 44 callbacks suppressed [ 1347.470400][T16978] program syz.2.3080 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1347.694023][T16982] ip6_vti0: entered promiscuous mode [ 1348.074339][T16990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3084'. [ 1348.095796][T16976] loop0: detected capacity change from 0 to 32768 [ 1348.156534][T16976] JBD2: Ignoring recovery information on journal [ 1348.307261][T16976] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1348.698340][T15097] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature [ 1348.718803][T15097] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1348.731721][T15097] OCFS2: File system is now read-only. [ 1348.737553][T15097] (syz-executor,15097,0):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30 [ 1348.750244][T15097] (syz-executor,15097,0):_ocfs2_free_clusters:2605 ERROR: status = -30 [ 1348.759050][T15097] (syz-executor,15097,0):ocfs2_sync_local_to_main:1001 ERROR: status = -30 [ 1348.769025][T15097] (syz-executor,15097,0):ocfs2_sync_local_to_main:1013 ERROR: status = -30 [ 1348.778021][T15097] (syz-executor,15097,0):ocfs2_shutdown_local_alloc:449 ERROR: status = -30 [ 1348.796860][T17007] program syz.3.3089 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1348.835353][T15097] ocfs2: Unmounting device (7,0) on (node local) [ 1348.938242][T17009] loop3: detected capacity change from 0 to 512 [ 1348.976887][T17009] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1348.984416][T16993] ceph: No mds server is up or the cluster is laggy [ 1349.004096][T17009] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1349.035205][T17009] EXT4-fs (loop3): group descriptors corrupted! [ 1349.187688][T17009] loop3: detected capacity change from 0 to 128 [ 1349.263020][T17009] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1349.344539][T17009] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1349.533326][T15508] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1349.753330][T17026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3095'. [ 1349.772191][T17026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1349.781737][T17011] loop1: detected capacity change from 0 to 32768 [ 1349.828915][T17011] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1349.929089][T17011] XFS (loop1): Ending clean mount [ 1349.942106][T17011] XFS (loop1): Quotacheck needed: Please wait. [ 1349.989755][T17011] XFS (loop1): Quotacheck: Done. [ 1350.148344][T14935] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1350.359511][T17044] md: could not open device unknown-block(1,4). [ 1350.387344][T17044] md: md_import_device returned -16 [ 1350.909072][T17063] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.50.0), cmd(3) [ 1350.927396][T17063] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.50.0), cmd(9) [ 1350.985426][T17067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3107'. [ 1351.371561][T17077] md: could not open device unknown-block(1,6). [ 1351.381446][T17077] md: md_import_device returned -16 [ 1351.612240][T17082] program syz.3.3113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1351.847580][T17072] loop2: detected capacity change from 0 to 32768 [ 1351.871537][T17072] (syz.2.3109,17072,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "0xffffffffffffffff" or missing value [ 1351.934185][T17072] (syz.2.3109,17072,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1352.344521][T17072] ªªªªªª: renamed from vlan0 [ 1352.504114][T17109] program syz.1.3123 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1352.631861][ C1] net_ratelimit: 36 callbacks suppressed [ 1353.274122][T17117] loop1: detected capacity change from 0 to 32768 [ 1353.294822][T17117] (syz.1.3125,17117,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 1353.337330][T17117] (syz.1.3125,17117,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1353.639488][T17119] loop0: detected capacity change from 0 to 32768 [ 1353.681384][T17119] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1353.811251][T17119] XFS (loop0): Ending clean mount [ 1353.821681][T17119] XFS (loop0): Quotacheck needed: Please wait. [ 1353.924332][T17146] program syz.2.3133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1353.937405][T17119] XFS (loop0): Quotacheck: Done. [ 1354.084369][T15097] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1354.268502][T17154] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3136'. [ 1354.662413][T17163] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3135'. [ 1354.695865][T17161] loop3: detected capacity change from 0 to 8192 [ 1354.782025][T17161] loop3: p1 p2 p3 [ 1354.788445][T17161] loop3: partition table partially beyond EOD, truncated [ 1354.812262][T17161] loop3: p1 start 51379968 is beyond EOD, truncated [ 1354.833782][T17161] loop3: p3 size 100663552 extends beyond EOD, truncated [ 1354.920886][ T5149] loop3: p1 p2 p3 [ 1354.925822][ T5149] loop3: partition table partially beyond EOD, truncated [ 1354.943224][ T5149] loop3: p1 start 51379968 is beyond EOD, truncated [ 1354.957258][ T5149] loop3: p3 size 100663552 extends beyond EOD, truncated [ 1355.031629][T17148] loop2: detected capacity change from 0 to 32768 [ 1355.049505][T17148] (syz.2.3134,17148,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "" or missing value [ 1355.068002][T17148] (syz.2.3134,17148,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1355.408766][T17175] program syz.1.3142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1355.599694][T17179] loop1: detected capacity change from 0 to 128 [ 1355.648635][T17179] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1355.716909][T17179] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1355.919241][T17179] loop1: detected capacity change from 128 to 64 [ 1355.930817][T17188] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3147'. [ 1355.955441][T17191] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5974: Out of memory [ 1356.029017][T17191] EXT4-fs error (device loop1): ext4_ext_tree_init:891: inode #13: comm syz.1.3144: mark_inode_dirty error [ 1356.072510][T17191] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5974: Out of memory [ 1356.115117][T17191] EXT4-fs error (device loop1): __ext4_new_inode:1358: inode #13: comm syz.1.3144: mark_inode_dirty error [ 1356.152470][T17191] EXT4-fs error (device loop1) in __ext4_new_inode:1360: Out of memory [ 1356.175202][T17191] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5974: Out of memory [ 1356.205465][T17191] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #13: comm syz.1.3144: mark_inode_dirty error [ 1356.241995][T17191] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -12) [ 1356.846753][T14935] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1356.875258][T17218] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3156'. [ 1357.064638][T17224] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3159'. [ 1357.187368][ T998] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.337890][ T998] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.526670][ T998] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.648833][ T998] bridge0: port 3(netdevsim0) entered disabled state [ 1357.716491][ T998] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 1357.741847][ T998] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 1357.759175][ T998] bridge0: port 3(netdevsim0) entered disabled state [ 1357.812534][ T998] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.831856][ C1] net_ratelimit: 34 callbacks suppressed [ 1358.481484][T17245] loop0: detected capacity change from 0 to 3904 [ 1358.515411][ T5095] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1358.535618][ T5095] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1358.544249][ T5095] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1358.557114][ T5095] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1358.567701][ T5095] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1358.582405][ T5095] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1358.696915][T17250] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3167'. [ 1358.844208][T17257] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3169'. [ 1359.488590][T17243] rxe_eth0 speed is unknown, defaulting to 1000 [ 1360.170422][T17284] loop0: detected capacity change from 0 to 3904 [ 1360.270134][T17286] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3178'. [ 1360.569062][T17290] program syz.0.3180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1360.632093][T15099] Bluetooth: hci3: command tx timeout [ 1361.362968][T17303] FAULT_INJECTION: forcing a failure. [ 1361.362968][T17303] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1361.406098][T17303] CPU: 0 PID: 17303 Comm: syz.3.3183 Not tainted syzkaller #0 [ 1361.413616][T17303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1361.413631][T17303] Call Trace: [ 1361.413641][T17303] [ 1361.413656][T17303] dump_stack_lvl+0x18c/0x250 [ 1361.423759][T17303] ? show_regs_print_info+0x20/0x20 [ 1361.423794][T17303] ? load_image+0x420/0x420 [ 1361.423821][T17303] ? get_user_pages_fast_only+0xa0/0xa0 [ 1361.423861][T17303] should_fail_ex+0x394/0x4c0 [ 1361.423889][T17303] get_futex_key+0x857/0x1030 [ 1361.423917][T17303] ? futex_setup_timer+0xc0/0xc0 [ 1361.445039][T17303] futex_wake+0x127/0x4f0 [ 1361.445075][T17303] ? futex_wake_mark+0x150/0x150 [ 1361.445131][T17303] do_futex+0x35d/0x3e0 [ 1361.445154][T17303] ? __might_fault+0xaa/0x120 [ 1361.445182][T17303] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1361.445217][T17303] ? __might_fault+0xc6/0x120 [ 1361.445245][T17303] mm_release+0x184/0x3a0 [ 1361.455496][T17303] ? exit_mm_release+0x30/0x30 [ 1361.455526][T17303] ? lockdep_hardirqs_on+0x98/0x150 [ 1361.465235][T17303] exit_mm+0xa4/0x340 [ 1361.465272][T17303] ? sysctl_delayacct+0x220/0x220 [ 1361.465295][T17303] ? do_exit+0x2530/0x2530 [ 1361.465335][T17303] do_exit+0x909/0x2530 [ 1361.465379][T17303] ? put_task_struct+0xc0/0xc0 [ 1361.465414][T17303] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1361.465440][T17303] ? get_signal+0x100e/0x1390 [ 1361.465464][T17303] ? lock_chain_count+0x20/0x20 [ 1361.465491][T17303] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1361.465517][T17303] do_group_exit+0x22d/0x2f0 [ 1361.465537][T17303] ? lockdep_hardirqs_on+0x98/0x150 [ 1361.465574][T17303] get_signal+0x12a6/0x1390 [ 1361.474906][T17303] arch_do_signal_or_restart+0xc2/0x7b0 [ 1361.483761][T17303] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1361.483787][T17303] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 1361.503530][T17303] ? get_sigframe_size+0x20/0x20 [ 1361.512784][T17303] ? exit_to_user_mode_loop+0x3b/0x110 [ 1361.512822][T17303] exit_to_user_mode_loop+0x70/0x110 [ 1361.512853][T17303] exit_to_user_mode_prepare+0xee/0x180 [ 1361.512884][T17303] syscall_exit_to_user_mode+0x1a/0x50 [ 1361.512904][T17303] do_syscall_64+0x61/0xb0 [ 1361.512930][T17303] ? clear_bhb_loop+0x40/0x90 [ 1361.512957][T17303] ? clear_bhb_loop+0x40/0x90 [ 1361.512987][T17303] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1361.513015][T17303] RIP: 0033:0x7f1abc99f559 [ 1361.513036][T17303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1361.513055][T17303] RSP: 002b:00007f1abd93d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1361.513078][T17303] RAX: fffffffffffffe00 RBX: 00007f1abcc25fa8 RCX: 00007f1abc99f559 [ 1361.513093][T17303] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1abcc25fa8 [ 1361.513107][T17303] RBP: 00007f1abcc25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1361.513120][T17303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1361.513133][T17303] R13: 00007f1abcc26038 R14: 00007ffc42242640 R15: 00007ffc42242728 [ 1361.522603][T17303] [ 1361.756910][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.763578][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.147811][ T998] hsr_slave_0: left promiscuous mode [ 1362.190713][ T998] hsr_slave_1: left promiscuous mode [ 1362.202226][ T998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1362.209693][ T998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1362.225430][T17282] loop2: detected capacity change from 0 to 65536 [ 1362.252572][ T998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1362.260061][ T998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1362.291174][T17282] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1362.302021][ T998] bridge_slave_1: left allmulticast mode [ 1362.307725][ T998] bridge_slave_1: left promiscuous mode [ 1362.326954][ T998] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.362173][ T998] bridge_slave_0: left allmulticast mode [ 1362.369919][T17313] loop0: detected capacity change from 0 to 3904 [ 1362.381751][T17282] XFS (loop2): Ending clean mount [ 1362.398415][ T998] bridge_slave_0: left promiscuous mode [ 1362.420838][T17282] XFS (loop2): Quotacheck needed: Please wait. [ 1362.427901][ T998] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.478074][T17313] loop0: [ 1362.486807][T17282] XFS (loop2): Quotacheck: Done. [ 1362.499047][ T5149] loop0: [ 1362.633380][T17282] XFS (loop2): EXPERIMENTAL online shrink feature in use. Use at your own risk! [ 1362.688179][ T998] batadv_slave_0: left allmulticast mode [ 1362.711904][T15099] Bluetooth: hci3: command tx timeout [ 1362.723856][ T998] batadv_slave_0: left promiscuous mode [ 1362.727017][T17326] program syz.3.3188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1362.750480][T17282] loop2: detected capacity change from 65536 to 0 [ 1362.757707][ T998] veth1_macvtap: left promiscuous mode [ 1362.763416][ T998] veth0_macvtap: left promiscuous mode [ 1362.772284][ T998] veth1_vlan: left promiscuous mode [ 1362.777797][ T998] veth0_vlan: left promiscuous mode [ 1362.795019][T17322] md/raid1:md0: active with 1 out of 2 mirrors [ 1362.824980][T17328] syz.2.3177: attempt to access beyond end of device [ 1362.824980][T17328] loop2: rw=4096, sector=32771, nr_sectors = 1 limit=0 [ 1362.862221][T17322] md0: detected capacity change from 0 to 4096 [ 1362.869473][T17328] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x223/0x400" at daddr 0x8003 len 1 error 5 [ 1362.902087][T17324] md0: detected capacity change from 4096 to 1024 [ 1363.031855][ C1] net_ratelimit: 33 callbacks suppressed [ 1363.096201][T14700] syz-executor: attempt to access beyond end of device [ 1363.096201][T14700] loop2: rw=432129, sector=32880, nr_sectors = 16 limit=0 [ 1363.147062][ T24] XFS (loop2): log I/O error -5 [ 1363.152975][ T24] XFS (loop2): Filesystem has been shut down due to log error (0x2). [ 1363.161071][ T24] XFS (loop2): Please unmount the filesystem and rectify the problem(s). [ 1363.180204][T14700] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1363.984584][T17343] loop0: detected capacity change from 0 to 3904 [ 1364.022715][T17343] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1364.051847][T17343] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1364.082258][T17343] loop0: [ 1364.122018][ T5149] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1364.134782][T17345] program syz.0.3196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1364.151925][ T5149] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1364.158665][ T5149] loop0: [ 1364.364117][T17349] loop3: detected capacity change from 0 to 4096 [ 1364.399106][T17349] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 1364.506293][T17349] ntfs3: loop3: ino=b, mi_enum_attr [ 1364.527441][T17349] ntfs3: loop3: Failed to load $Extend (-22). [ 1364.556932][T17349] ntfs3: loop3: Failed to initialize $Extend. [ 1364.795796][T15099] Bluetooth: hci3: command tx timeout [ 1365.263695][T17371] loop0: detected capacity change from 0 to 3904 [ 1365.313104][T17373] program syz.3.3205 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1365.325426][T17371] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1365.337829][T17371] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1365.346375][T17371] loop0: [ 1365.363551][ T5149] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1365.373806][ T5149] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1365.400742][ T5149] loop0: [ 1365.978975][ T998] team0 (unregistering): Port device team_slave_1 removed [ 1366.149755][ T998] team0 (unregistering): Port device team_slave_0 removed [ 1366.249846][T17382] loop0: detected capacity change from 0 to 32768 [ 1366.306311][ T998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1366.435231][ T28] audit: type=1800 audit(1793090980.217:102): pid=17382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3210" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 1366.476088][ T998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1366.893092][ T5095] Bluetooth: hci3: command tx timeout [ 1367.500200][T17391] loop0: detected capacity change from 0 to 3904 [ 1367.575440][T17391] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1367.585658][T17391] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1367.592691][T17391] loop0: [ 1367.616042][ T5149] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1367.633942][ T5149] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1367.640761][ T5149] loop0: [ 1367.655239][ T998] bond0 (unregistering): Released all slaves [ 1367.953482][T17243] chnl_net:caif_netlink_parms(): no params data found [ 1368.241858][ C1] net_ratelimit: 20 callbacks suppressed [ 1368.449952][T17243] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.457339][T17243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.464945][T17243] bridge_slave_0: entered allmulticast mode [ 1368.472775][T17243] bridge_slave_0: entered promiscuous mode [ 1368.482975][T17243] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.490331][T17243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.497695][T17243] bridge_slave_1: entered allmulticast mode [ 1368.505575][T17243] bridge_slave_1: entered promiscuous mode [ 1368.686750][T17243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1368.733053][T17243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1368.951961][ T5095] Bluetooth: hci2: command 0x0406 tx timeout [ 1369.048683][T17393] loop0: detected capacity change from 0 to 32768 [ 1369.060627][T17243] team0: Port device team_slave_0 added [ 1369.096791][T17243] team0: Port device team_slave_1 added [ 1369.345352][T17243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1369.361508][T17243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1369.452430][T17243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1369.622817][T17243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1369.629832][T17243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1369.691836][T17243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1369.980551][T17243] hsr_slave_0: entered promiscuous mode [ 1370.044774][T17243] hsr_slave_1: entered promiscuous mode [ 1370.056614][T17243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1370.087629][T17243] Cannot create hsr debugfs directory [ 1370.206512][T17426] program syz.3.3227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1370.258515][T17417] loop2: detected capacity change from 0 to 32768 [ 1370.979872][T17433] loop0: detected capacity change from 0 to 3904 [ 1371.013690][T17433] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1371.013711][T17433] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1371.013776][T17433] loop0: [ 1371.039272][ T5149] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1371.039291][ T5149] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1371.039364][ T5149] loop0: [ 1371.214803][T17424] loop0: detected capacity change from 0 to 32768 [ 1371.327555][T17243] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1371.370747][T17243] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1371.422956][T17243] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1371.558499][T17243] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1371.602078][ T5095] Bluetooth: hci3: command tx timeout [ 1371.759953][T17243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1371.977398][T17243] 8021q: adding VLAN 0 to HW filter on device team0 [ 1372.042611][ T9762] bridge0: port 1(bridge_slave_0) entered blocking state [ 1372.049833][ T9762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1372.083239][T17449] program syz.0.3235 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1372.095846][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 1372.103095][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1372.355852][T17454] loop0: detected capacity change from 0 to 3904 [ 1372.423118][T17454] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1372.442056][T17454] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1372.452655][T17454] loop0: [ 1372.878314][T17243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1372.890058][T17467] loop2: detected capacity change from 0 to 512 [ 1372.909291][T17467] EXT4-fs: Ignoring removed nobh option [ 1372.971153][T17467] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 1372.990382][T17467] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 1373.028182][T17467] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #13: comm syz.2.3243: inode has both inline data and extents flags [ 1373.059350][T17451] loop3: detected capacity change from 0 to 32768 [ 1373.076696][T17467] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.3243: couldn't read orphan inode 13 (err -117) [ 1373.116605][T17467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1373.154884][T17451] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1373.244258][T17481] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 1373.252619][T17481] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 1373.294489][T17451] XFS (loop3): Ending clean mount [ 1373.431844][ C0] net_ratelimit: 20 callbacks suppressed [ 1373.546816][T17451] XFS (loop3): User initiated shutdown received. [ 1373.574229][T17451] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 1373.609435][T17451] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 1373.716138][T15508] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1373.965586][T17243] veth0_vlan: entered promiscuous mode [ 1374.027615][T17243] veth1_vlan: entered promiscuous mode [ 1374.125875][T17494] loop0: detected capacity change from 0 to 3904 [ 1374.159131][T17243] veth0_macvtap: entered promiscuous mode [ 1374.205106][T17243] veth1_macvtap: entered promiscuous mode [ 1374.211547][T17494] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1374.243502][T17494] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1374.250405][T17494] loop0: [ 1374.305644][ T5149] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1374.327865][ T5149] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1374.342048][ T5149] loop0: [ 1374.355440][T17243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1374.376520][T17243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1374.423773][T17243] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.438675][T17243] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.448885][T17243] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.458722][T17243] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.682013][T16956] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1374.701932][ T9762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1374.709796][ T9762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1374.836677][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1374.857530][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1374.950104][T16956] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1374.984761][T16956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.125183][T17500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3250'. [ 1375.389318][T14700] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1375.435762][T16956] usb 4-1: Firmware version (0.0) predates our first public release. [ 1375.474906][T16956] usb 4-1: Please update to version 0.2 or newer [ 1375.515791][T17495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1375.624005][T16956] usb 4-1: USB disconnect, device number 20 [ 1375.719065][T17516] loop0: detected capacity change from 0 to 3904 [ 1375.836203][T17516] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1375.850228][T17516] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1375.870969][T17516] loop0: [ 1375.903067][ T5149] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1375.922053][ T5149] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1375.934331][ T5149] loop0: [ 1376.152039][T17520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3259'. [ 1376.325646][T17526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3261'. [ 1376.640584][T17538] batadv0: entered allmulticast mode [ 1376.670229][T17538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1376.695233][T17540] FAULT_INJECTION: forcing a failure. [ 1376.695233][T17540] name failslab, interval 1, probability 5, space 0, times 9995 [ 1376.745176][T17540] CPU: 0 PID: 17540 Comm: syz.2.3267 Not tainted syzkaller #0 [ 1376.752761][T17540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1376.762858][T17540] Call Trace: [ 1376.766182][T17540] [ 1376.769160][T17540] dump_stack_lvl+0x18c/0x250 [ 1376.773904][T17540] ? show_regs_print_info+0x20/0x20 [ 1376.779181][T17540] ? load_image+0x420/0x420 [ 1376.783747][T17540] ? __might_sleep+0xe0/0xe0 [ 1376.788400][T17540] ? __lock_acquire+0x7eb0/0x7eb0 [ 1376.793490][T17540] should_fail_ex+0x394/0x4c0 [ 1376.798262][T17540] should_failslab+0x9/0x20 [ 1376.802823][T17540] slab_pre_alloc_hook+0x59/0x300 [ 1376.807904][T17540] ? blk_alloc_queue_stats+0x4c/0xf0 [ 1376.813245][T17540] __kmem_cache_alloc_node+0x53/0x260 [ 1376.818663][T17540] ? blk_alloc_queue_stats+0x4c/0xf0 [ 1376.823982][T17540] kmalloc_trace+0x2a/0xe0 [ 1376.828440][T17540] blk_alloc_queue_stats+0x4c/0xf0 [ 1376.833581][T17540] blk_alloc_queue+0xab/0x4c0 [ 1376.838298][T17540] ? __blk_alloc_disk+0x12/0x80 [ 1376.843193][T17540] __blk_alloc_disk+0x19/0x80 [ 1376.847902][T17540] dm_create+0x46f/0xf90 [ 1376.852199][T17540] dev_create+0x1f8/0x400 [ 1376.856575][T17540] ? list_devices+0x8a0/0x8a0 [ 1376.861285][T17540] ? __might_fault+0xaa/0x120 [ 1376.865993][T17540] ? __might_fault+0xc6/0x120 [ 1376.870695][T17540] ? __might_fault+0xaa/0x120 [ 1376.875401][T17540] ? list_devices+0x8a0/0x8a0 [ 1376.880114][T17540] dm_ctl_ioctl+0x975/0xd00 [ 1376.884651][T17540] ? list_devices+0x8a0/0x8a0 [ 1376.889352][T17540] ? dm_poll+0x120/0x120 [ 1376.893653][T17540] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1376.898617][T17540] ? security_file_ioctl+0x80/0xa0 [ 1376.903764][T17540] ? dm_poll+0x120/0x120 [ 1376.908043][T17540] __se_sys_ioctl+0xfd/0x170 [ 1376.912664][T17540] do_syscall_64+0x55/0xb0 [ 1376.917108][T17540] ? clear_bhb_loop+0x40/0x90 [ 1376.921819][T17540] ? clear_bhb_loop+0x40/0x90 [ 1376.926527][T17540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1376.932482][T17540] RIP: 0033:0x7f92e8f9f559 [ 1376.936932][T17540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1376.956564][T17540] RSP: 002b:00007f92e9df4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1376.965016][T17540] RAX: ffffffffffffffda RBX: 00007f92e9225fa0 RCX: 00007f92e8f9f559 [ 1376.973018][T17540] RDX: 0000200000000240 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 1376.981014][T17540] RBP: 00007f92e9036b20 R08: 0000000000000000 R09: 0000000000000000 [ 1376.989011][T17540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1376.997024][T17540] R13: 00007f92e9226038 R14: 00007f92e9225fa0 R15: 00007ffcdb7f2bb8 [ 1377.005038][T17540] [ 1377.854860][T17562] program syz.3.3276 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1378.461605][T17558] loop4: detected capacity change from 0 to 32768 [ 1378.512561][T17558] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.3274 (17558) [ 1378.551868][ C0] net_ratelimit: 58 callbacks suppressed [ 1378.654971][T17558] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1378.689503][T17558] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1378.741911][T17558] BTRFS info (device loop4): setting nodatacow, compression disabled [ 1378.750087][T17558] BTRFS info (device loop4): disabling tree log [ 1378.800663][T17558] BTRFS info (device loop4): turning on async discard [ 1378.822381][T17558] BTRFS info (device loop4): max_inline at 0 [ 1378.828458][T17558] BTRFS info (device loop4): using free space tree [ 1378.895079][T17558] _btrfs_printk: 8 callbacks suppressed [ 1379.199698][T17600] program syz.3.3286 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1379.696823][T17610] loop2: detected capacity change from 0 to 128 [ 1379.857675][T17612] FAULT_INJECTION: forcing a failure. [ 1379.857675][T17612] name failslab, interval 1, probability 5, space 0, times 10000 [ 1379.879674][T17612] CPU: 0 PID: 17612 Comm: syz.2.3290 Not tainted syzkaller #0 [ 1379.887193][T17612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1379.897289][T17612] Call Trace: [ 1379.900626][T17612] [ 1379.903600][T17612] dump_stack_lvl+0x18c/0x250 [ 1379.908350][T17612] ? show_regs_print_info+0x20/0x20 [ 1379.913581][T17612] ? load_image+0x420/0x420 [ 1379.918409][T17612] ? __might_sleep+0xe0/0xe0 [ 1379.923084][T17612] ? __lock_acquire+0x7eb0/0x7eb0 [ 1379.928171][T17612] should_fail_ex+0x394/0x4c0 [ 1379.932909][T17612] should_failslab+0x9/0x20 [ 1379.937494][T17612] slab_pre_alloc_hook+0x59/0x300 [ 1379.942589][T17612] kmem_cache_alloc+0x5a/0x2d0 [ 1379.947402][T17612] ? __anon_vma_prepare+0x68/0x440 [ 1379.952589][T17612] __anon_vma_prepare+0x68/0x440 [ 1379.957626][T17612] ? __pte_alloc+0x113/0x2a0 [ 1379.962266][T17612] handle_mm_fault+0x3de7/0x4a40 [ 1379.967260][T17612] ? handle_mm_fault+0xe6/0x4a40 [ 1379.972282][T17612] ? numa_migrate_prep+0x350/0x350 [ 1379.977458][T17612] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 1379.982790][T17612] do_user_addr_fault+0x736/0x12d0 [ 1379.987976][T17612] exc_page_fault+0x64/0x100 [ 1379.992633][T17612] ? clear_bhb_loop+0x40/0x90 [ 1379.997382][T17612] asm_exc_page_fault+0x26/0x30 [ 1380.002296][T17612] RIP: 0033:0x7f92e8e562a3 [ 1380.006752][T17612] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 1380.026411][T17612] RSP: 002b:00007f92e9dd2470 EFLAGS: 00010202 [ 1380.032565][T17612] RAX: 0000000000000000 RBX: 00007f92e9dd2530 RCX: 00007f92dedf7000 [ 1380.036620][T17558] BTRFS info (device loop4): balance: start -d -m [ 1380.040561][T17612] RDX: 00007f92e9dd26d0 RSI: 0000000000000029 RDI: 00007f92e9dd25d0 [ 1380.040584][T17612] RBP: 0000000000000000 R08: 0000000000000009 R09: 00000000000001a4 [ 1380.040600][T17612] R10: 00000000000001ca R11: 00007f92e9dd2530 R12: 000000000000011e [ 1380.040614][T17612] R13: 00007f92e90571e0 R14: 0000000000000068 R15: 00007f92e9dd25d0 [ 1380.079476][T17612] [ 1380.125527][T17612] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1380.186731][T17558] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 1380.203011][T17612] loop2: detected capacity change from 0 to 8 [ 1380.209991][T17612] FAULT_INJECTION: forcing a failure. [ 1380.209991][T17612] name failslab, interval 1, probability 5, space 0, times 9998 [ 1380.223038][T17612] CPU: 0 PID: 17612 Comm: syz.2.3290 Not tainted syzkaller #0 [ 1380.230549][T17612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1380.240676][T17612] Call Trace: [ 1380.244003][T17612] [ 1380.246979][T17612] dump_stack_lvl+0x18c/0x250 [ 1380.251761][T17612] ? show_regs_print_info+0x20/0x20 [ 1380.257017][T17612] ? load_image+0x420/0x420 [ 1380.261587][T17612] ? __might_sleep+0xe0/0xe0 [ 1380.266219][T17612] ? __lock_acquire+0x7eb0/0x7eb0 [ 1380.271281][T17612] should_fail_ex+0x394/0x4c0 [ 1380.271322][T17612] should_failslab+0x9/0x20 [ 1380.280687][T17612] slab_pre_alloc_hook+0x59/0x300 [ 1380.285764][T17612] ? prepend_path+0x8a7/0x950 [ 1380.290500][T17612] ? tomoyo_encode+0x2ad/0x570 [ 1380.295329][T17612] ? tomoyo_encode+0x2ad/0x570 [ 1380.300148][T17612] __kmem_cache_alloc_node+0x53/0x260 [ 1380.305581][T17612] ? tomoyo_encode+0x2ad/0x570 [ 1380.310423][T17612] __kmalloc+0xa7/0x240 [ 1380.314651][T17612] tomoyo_encode+0x2ad/0x570 [ 1380.319314][T17612] tomoyo_realpath_from_path+0x57c/0x5c0 [ 1380.325028][T17612] ? tomoyo_domain+0xd6/0x120 [ 1380.329798][T17612] tomoyo_path_number_perm+0x248/0x5e0 [ 1380.335324][T17612] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1380.341043][T17612] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1380.346599][T17612] ? __fget_files+0x28/0x460 [ 1380.351261][T17612] security_file_ioctl+0x70/0xa0 [ 1380.356266][T17612] __se_sys_ioctl+0x48/0x170 [ 1380.360964][T17612] do_syscall_64+0x55/0xb0 [ 1380.365440][T17612] ? clear_bhb_loop+0x40/0x90 [ 1380.370172][T17612] ? clear_bhb_loop+0x40/0x90 [ 1380.374933][T17612] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1380.380884][T17612] RIP: 0033:0x7f92e8f9f1eb [ 1380.385348][T17612] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1380.405008][T17612] RSP: 002b:00007f92e9dd2e00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1380.413469][T17612] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f92e8f9f1eb [ 1380.421484][T17612] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000008 [ 1380.429507][T17612] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 1380.437547][T17612] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 1380.445566][T17612] R13: 00007f92e9dd2ea0 R14: 00000000000001e6 R15: 0000200000000e00 [ 1380.453646][T17612] [ 1380.544030][T17612] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1380.950216][T17612] FAULT_INJECTION: forcing a failure. [ 1380.950216][T17612] name failslab, interval 1, probability 5, space 0, times 9997 [ 1380.970266][T17558] BTRFS info (device loop4): found 1 extents, stage: move data extents [ 1381.001971][T17612] CPU: 0 PID: 17612 Comm: syz.2.3290 Not tainted syzkaller #0 [ 1381.009504][T17612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1381.019584][T17612] Call Trace: [ 1381.019654][T17612] [ 1381.019665][T17612] dump_stack_lvl+0x18c/0x250 [ 1381.019702][T17612] ? show_regs_print_info+0x20/0x20 [ 1381.019732][T17612] ? load_image+0x420/0x420 [ 1381.019755][T17612] ? __might_sleep+0xe0/0xe0 [ 1381.045483][T17612] ? __lock_acquire+0x7eb0/0x7eb0 [ 1381.045525][T17612] should_fail_ex+0x394/0x4c0 [ 1381.050590][T17612] should_failslab+0x9/0x20 [ 1381.050615][T17612] slab_pre_alloc_hook+0x59/0x300 [ 1381.064963][T17612] kmem_cache_alloc+0x5a/0x2d0 [ 1381.069799][T17612] ? ptlock_alloc+0x20/0x70 [ 1381.074334][T17612] ptlock_alloc+0x20/0x70 [ 1381.074361][T17612] pte_alloc_one+0xcc/0x540 [ 1381.074389][T17612] ? pfn_modify_allowed+0x560/0x560 [ 1381.083257][T17612] ? count_memcg_event_mm+0x36f/0x3c0 [ 1381.083305][T17612] __pte_alloc+0x22/0x2a0 [ 1381.083333][T17612] handle_mm_fault+0x3dc0/0x4a40 [ 1381.103315][T17612] ? handle_mm_fault+0xe6/0x4a40 [ 1381.108324][T17612] ? lock_vma_under_rcu+0x52c/0x660 [ 1381.113583][T17612] ? numa_migrate_prep+0x350/0x350 [ 1381.118742][T17612] ? lock_vma_under_rcu+0xe5/0x660 [ 1381.123944][T17612] ? do_user_addr_fault+0x1cb/0x12d0 [ 1381.129298][T17612] do_user_addr_fault+0xad2/0x12d0 [ 1381.134470][T17612] ? rcu_is_watching+0x15/0xb0 [ 1381.139310][T17612] exc_page_fault+0x64/0x100 [ 1381.143985][T17612] asm_exc_page_fault+0x26/0x30 [ 1381.148897][T17612] RIP: 0033:0x7f92e8e56358 [ 1381.153362][T17612] Code: 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 1381.173023][T17612] RSP: 002b:00007f92e9dd2470 EFLAGS: 00010202 [ 1381.179136][T17612] RAX: 0000000000609000 RBX: 00007f92e9dd2530 RCX: 000000000000001e [ 1381.187155][T17612] RDX: 00000000000001ff RSI: 0000000000000400 RDI: 00007f92e9dd25d0 [ 1381.195180][T17612] RBP: 000000000000001f R08: 00007f92dedf7000 R09: 0000000000000001 [ 1381.203222][T17612] R10: 0000200000037f82 R11: 0000000000037ffd R12: 0000000000000301 [ 1381.211307][T17612] R13: 00007f92e90571e0 R14: 0000000000000013 R15: 00007f92e9dd25d0 [ 1381.219398][T17612] [ 1381.301895][T17612] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1381.326908][T17558] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata [ 1381.345053][T17612] FAULT_INJECTION: forcing a failure. [ 1381.345053][T17612] name failslab, interval 1, probability 5, space 0, times 9996 [ 1381.358120][T17612] CPU: 0 PID: 17612 Comm: syz.2.3290 Not tainted syzkaller #0 [ 1381.365672][T17612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1381.375779][T17612] Call Trace: [ 1381.379103][T17612] [ 1381.382088][T17612] dump_stack_lvl+0x18c/0x250 [ 1381.386835][T17612] ? show_regs_print_info+0x20/0x20 [ 1381.392093][T17612] ? load_image+0x420/0x420 [ 1381.396629][T17612] ? __might_sleep+0xe0/0xe0 [ 1381.401256][T17612] ? __lock_acquire+0x7eb0/0x7eb0 [ 1381.406337][T17612] should_fail_ex+0x394/0x4c0 [ 1381.406373][T17612] should_failslab+0x9/0x20 [ 1381.406395][T17612] slab_pre_alloc_hook+0x59/0x300 [ 1381.406449][T17612] kmem_cache_alloc+0x5a/0x2d0 [ 1381.425467][T17612] ? ptlock_alloc+0x20/0x70 [ 1381.430039][T17612] ptlock_alloc+0x20/0x70 [ 1381.434426][T17612] pte_alloc_one+0xcc/0x540 [ 1381.438981][T17612] ? pfn_modify_allowed+0x560/0x560 [ 1381.444212][T17612] ? count_memcg_event_mm+0x36f/0x3c0 [ 1381.444254][T17612] __pte_alloc+0x22/0x2a0 [ 1381.454000][T17612] handle_mm_fault+0x3dc0/0x4a40 [ 1381.454032][T17612] ? handle_mm_fault+0xe6/0x4a40 [ 1381.454077][T17612] ? lock_vma_under_rcu+0x52c/0x660 [ 1381.469188][T17612] ? numa_migrate_prep+0x350/0x350 [ 1381.469218][T17612] ? lock_vma_under_rcu+0xe5/0x660 [ 1381.479628][T17612] ? do_user_addr_fault+0x1cb/0x12d0 [ 1381.484973][T17612] do_user_addr_fault+0xad2/0x12d0 [ 1381.490156][T17612] ? rcu_is_watching+0x15/0xb0 [ 1381.494989][T17612] exc_page_fault+0x64/0x100 [ 1381.499651][T17612] asm_exc_page_fault+0x26/0x30 [ 1381.504560][T17612] RIP: 0033:0x7f92e8e56358 [ 1381.509023][T17612] Code: 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 1381.528657][T17612] RSP: 002b:00007f92e9dd2470 EFLAGS: 00010202 [ 1381.528682][T17612] RAX: 0000000000809000 RBX: 00007f92e9dd2530 RCX: 000000000000001e [ 1381.528699][T17612] RDX: 00000000000000ff RSI: 0000000000000400 RDI: 00007f92e9dd25d0 [ 1381.528714][T17612] RBP: 000000000000001f R08: 00007f92dedf7000 R09: 0000000000000001 [ 1381.528729][T17612] R10: 0000200000037f82 R11: 0000000000037ffd R12: 0000000000000301 [ 1381.528744][T17612] R13: 00007f92e90571e0 R14: 0000000000000013 R15: 00007f92e9dd25d0 [ 1381.528777][T17612] [ 1381.644081][T17612] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1381.688099][T17612] FAULT_INJECTION: forcing a failure. [ 1381.688099][T17612] name failslab, interval 1, probability 5, space 0, times 9995 [ 1381.741087][T17612] CPU: 0 PID: 17612 Comm: syz.2.3290 Not tainted syzkaller #0 [ 1381.748625][T17612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1381.758740][T17612] Call Trace: [ 1381.762063][T17612] [ 1381.765068][T17612] dump_stack_lvl+0x18c/0x250 [ 1381.769790][T17612] ? show_regs_print_info+0x20/0x20 [ 1381.769823][T17612] ? load_image+0x420/0x420 [ 1381.769851][T17612] ? __might_sleep+0xe0/0xe0 [ 1381.784236][T17612] ? __lock_acquire+0x7eb0/0x7eb0 [ 1381.789333][T17612] should_fail_ex+0x394/0x4c0 [ 1381.794067][T17612] should_failslab+0x9/0x20 [ 1381.798644][T17612] slab_pre_alloc_hook+0x59/0x300 [ 1381.803729][T17612] ? mas_next_slot+0x910/0x980 [ 1381.808524][T17612] ? task_numa_work+0x921/0x1350 [ 1381.808551][T17612] __kmem_cache_alloc_node+0x53/0x260 [ 1381.808579][T17612] ? task_numa_work+0x921/0x1350 [ 1381.823891][T17612] kmalloc_trace+0x2a/0xe0 [ 1381.828397][T17612] task_numa_work+0x921/0x1350 [ 1381.833217][T17612] ? init_numa_balancing+0x400/0x400 [ 1381.838543][T17612] ? __might_sleep+0xe0/0xe0 [ 1381.838586][T17612] ? _raw_spin_unlock_irq+0x23/0x50 [ 1381.848451][T17612] ? lockdep_hardirqs_on+0x98/0x150 [ 1381.853707][T17612] task_work_run+0x1d4/0x260 [ 1381.858358][T17612] ? task_work_cancel+0x220/0x220 [ 1381.863441][T17612] ? exit_to_user_mode_loop+0x3b/0x110 [ 1381.868962][T17612] exit_to_user_mode_loop+0xe6/0x110 [ 1381.874302][T17612] exit_to_user_mode_prepare+0xee/0x180 [ 1381.879936][T17612] irqentry_exit_to_user_mode+0x9/0x30 [ 1381.885445][T17612] exc_page_fault+0x8c/0x100 [ 1381.890113][T17612] asm_exc_page_fault+0x26/0x30 [ 1381.895008][T17612] RIP: 0033:0x7f92e8e56358 [ 1381.899472][T17612] Code: 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 1381.919215][T17612] RSP: 002b:00007f92e9dd2470 EFLAGS: 00010202 [ 1381.925347][T17612] RAX: 0000000000809000 RBX: 00007f92e9dd2530 RCX: 000000000000001e [ 1381.933391][T17612] RDX: 00000000000000ff RSI: 0000000000000400 RDI: 00007f92e9dd25d0 [ 1381.941400][T17612] RBP: 000000000000001f R08: 00007f92dedf7000 R09: 0000000000000001 [ 1381.949414][T17612] R10: 0000200000037f82 R11: 0000000000037ffd R12: 0000000000000301 [ 1381.957426][T17612] R13: 00007f92e90571e0 R14: 0000000000000013 R15: 00007f92e9dd25d0 [ 1381.965462][T17612] [ 1381.978483][T17558] BTRFS info (device loop4): balance: canceled [ 1381.998052][T17614] loop3: detected capacity change from 0 to 32768 [ 1382.007898][T17612] FAULT_INJECTION: forcing a failure. [ 1382.007898][T17612] name failslab, interval 1, probability 5, space 0, times 9994 [ 1382.076239][T17614] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 1382.094047][T17612] CPU: 0 PID: 17612 Comm: syz.2.3290 Not tainted syzkaller #0 [ 1382.101599][T17612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1382.111718][T17612] Call Trace: [ 1382.115069][T17612] [ 1382.118041][T17612] dump_stack_lvl+0x18c/0x250 [ 1382.122792][T17612] ? show_regs_print_info+0x20/0x20 [ 1382.128046][T17612] ? load_image+0x420/0x420 [ 1382.132608][T17612] ? __might_sleep+0xe0/0xe0 [ 1382.137261][T17612] ? __lock_acquire+0x7eb0/0x7eb0 [ 1382.142345][T17612] should_fail_ex+0x394/0x4c0 [ 1382.147078][T17612] should_failslab+0x9/0x20 [ 1382.151633][T17612] slab_pre_alloc_hook+0x59/0x300 [ 1382.156721][T17612] kmem_cache_alloc+0x5a/0x2d0 [ 1382.161552][T17612] ? ptlock_alloc+0x20/0x70 [ 1382.166099][T17612] ptlock_alloc+0x20/0x70 [ 1382.170458][T17612] pte_alloc_one+0xcc/0x540 [ 1382.174994][T17612] ? pfn_modify_allowed+0x560/0x560 [ 1382.175025][T17612] ? count_memcg_event_mm+0x36f/0x3c0 [ 1382.175064][T17612] __pte_alloc+0x22/0x2a0 [ 1382.185690][T17612] handle_mm_fault+0x3dc0/0x4a40 [ 1382.185727][T17612] ? handle_mm_fault+0xe6/0x4a40 [ 1382.195027][T17612] ? lock_vma_under_rcu+0x52c/0x660 [ 1382.195059][T17612] ? numa_migrate_prep+0x350/0x350 [ 1382.205602][T17612] ? lock_vma_under_rcu+0xe5/0x660 [ 1382.205648][T17612] ? do_user_addr_fault+0x1cb/0x12d0 [ 1382.215904][T17612] do_user_addr_fault+0xad2/0x12d0 [ 1382.215946][T17612] ? rcu_is_watching+0x15/0xb0 [ 1382.226384][T17612] exc_page_fault+0x64/0x100 [ 1382.236190][T17612] asm_exc_page_fault+0x26/0x30 [ 1382.236227][T17612] RIP: 0033:0x7f92e8e5634e [ 1382.245643][T17612] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 1382.265304][T17612] RSP: 002b:00007f92e9dd2470 EFLAGS: 00010206 [ 1382.271450][T17612] RAX: 0000000000a09001 RBX: 00007f92e9dd2530 RCX: 0000000000000075 [ 1382.279468][T17612] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f92e9dd25d0 [ 1382.287495][T17612] RBP: 0000000000000102 R08: 00007f92dedf7000 R09: 0000000000a09000 [ 1382.295511][T17612] R10: 0000000000000000 R11: 00007f92e9dd2540 R12: 0000000000000001 [ 1382.303546][T17612] R13: 00007f92e90571e0 R14: 0000000000000000 R15: 00007f92e9dd25d0 [ 1382.311581][T17612] [ 1382.339141][T17614] JBD2: Ignoring recovery information on journal [ 1382.381903][T17612] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1382.493578][T17243] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1382.523280][T17614] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1383.601840][ C1] net_ratelimit: 42 callbacks suppressed [ 1383.602267][T17626] program syz.2.3295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1384.418986][T17640] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3301'. [ 1385.227445][T17652] netlink: 'syz.2.3306': attribute type 4 has an invalid length. [ 1386.243901][T15508] ocfs2: Unmounting device (7,3) on (node local) [ 1386.658737][T17658] loop4: detected capacity change from 0 to 32768 [ 1387.755893][T17668] loop0: detected capacity change from 0 to 32768 [ 1387.808460][T17668] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 1387.856226][T17668] JBD2: Ignoring recovery information on journal [ 1388.009606][T17668] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1388.165064][T17695] md: could not open device unknown-block(1,4). [ 1388.184715][T17695] md: md_import_device returned -16 [ 1388.194946][T17696] ------------[ cut here ]------------ [ 1388.201129][T17696] SVC: permsocks remain for nfsd [ 1388.228923][T17696] WARNING: CPU: 1 PID: 17696 at net/sunrpc/svc.c:645 svc_destroy+0x2ed/0x390 [ 1388.238264][T17696] Modules linked in: [ 1388.242407][T17696] CPU: 1 PID: 17696 Comm: syz.3.3322 Not tainted syzkaller #0 [ 1388.249898][T17696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1388.260073][T17696] RIP: 0010:svc_destroy+0x2ed/0x390 [ 1388.265434][T17696] Code: 24 49 83 c7 20 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 42 82 2d f8 49 8b 37 48 c7 c7 e0 11 fa 8b e8 e3 2a 9e f7 <0f> 0b e9 78 fd ff ff e8 b7 7c d4 f7 c6 05 9c ee c4 05 01 4c 89 e0 [ 1388.285422][T17696] RSP: 0018:ffffc900049a7ae0 EFLAGS: 00010246 [ 1388.291542][T17696] RAX: 708c18c717e1f400 RBX: ffff88805dcdac50 RCX: 0000000000080000 [ 1388.291564][T17696] RDX: ffffc9000cdda000 RSI: 0000000000034d87 RDI: 0000000000034d88 [ 1388.291583][T17696] RBP: ffffc900049a7cb8 R08: ffffc900049a76e7 R09: 1ffff92000934edc [ 1388.316385][T17696] R10: dffffc0000000000 R11: fffff52000934edd R12: ffff88805dcdac00 [ 1388.324570][T17696] R13: dffffc0000000000 R14: ffff88805dcdac50 R15: ffffffff8e3e1cc0 [ 1388.332650][T17696] FS: 00007f1abd93d6c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 1388.341641][T17696] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1388.349426][T17696] CR2: 00007f1abd91cd58 CR3: 0000000027e13000 CR4: 00000000003506e0 [ 1388.357565][T17696] Call Trace: [ 1388.360894][T17696] [ 1388.363948][T17696] write_ports+0xb99/0xfa0 [ 1388.368461][T17696] ? write_versions+0xe00/0xe00 [ 1388.373468][T17696] ? __lock_acquire+0x7eb0/0x7eb0 [ 1388.378714][T17696] ? __virt_addr_valid+0x10c/0x380 [ 1388.383930][T17696] ? __virt_addr_valid+0x10c/0x380 [ 1388.389087][T17696] ? __might_fault+0xaa/0x120 [ 1388.393902][T17696] ? __might_fault+0xc6/0x120 [ 1388.398632][T17696] ? __might_fault+0xaa/0x120 [ 1388.398671][T17696] ? simple_transaction_get+0x11d/0x140 [ 1388.409067][T17696] nfsctl_transaction_write+0x10c/0x150 [ 1388.414745][T17696] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 1388.420443][T17696] vfs_write+0x299/0x9a0 [ 1388.424875][T17696] ? file_end_write+0x250/0x250 [ 1388.429796][T17696] ? __fget_files+0x28/0x460 [ 1388.434629][T17696] ? __fget_files+0x3fc/0x460 [ 1388.439360][T17696] ? __fdget_pos+0x2a3/0x330 [ 1388.444087][T17696] ? ksys_write+0x74/0x260 [ 1388.448577][T17696] ksys_write+0x151/0x260 [ 1388.453043][T17696] ? __ia32_sys_read+0x90/0x90 [ 1388.457883][T17696] ? lockdep_hardirqs_on+0x98/0x150 [ 1388.463245][T17696] do_syscall_64+0x55/0xb0 [ 1388.467726][T17696] ? clear_bhb_loop+0x40/0x90 [ 1388.472535][T17696] ? clear_bhb_loop+0x40/0x90 [ 1388.477271][T17696] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1388.483407][T17696] RIP: 0033:0x7f1abc99f559 [ 1388.487871][T17696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1388.507620][T17696] RSP: 002b:00007f1abd93d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1388.516178][T17696] RAX: ffffffffffffffda RBX: 00007f1abcc25fa0 RCX: 00007f1abc99f559 [ 1388.524304][T17696] RDX: 0000000000000005 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1388.532384][T17696] RBP: 00007f1abca36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1388.540404][T17696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1388.548487][T17696] R13: 00007f1abcc26038 R14: 00007f1abcc25fa0 R15: 00007ffc42242728 [ 1388.556631][T17696] [ 1388.559694][T17696] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1388.567014][T17696] CPU: 1 PID: 17696 Comm: syz.3.3322 Not tainted syzkaller #0 [ 1388.574517][T17696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1388.584631][T17696] Call Trace: [ 1388.587954][T17696] [ 1388.590928][T17696] dump_stack_lvl+0x18c/0x250 [ 1388.595663][T17696] ? show_regs_print_info+0x20/0x20 [ 1388.600915][T17696] ? load_image+0x420/0x420 [ 1388.605502][T17696] panic+0x2ca/0x720 [ 1388.609462][T17696] ? bpf_jit_dump+0xd0/0xd0 [ 1388.614034][T17696] __warn+0x2e0/0x470 [ 1388.618089][T17696] ? svc_destroy+0x2ed/0x390 [ 1388.622731][T17696] ? svc_destroy+0x2ed/0x390 [ 1388.627366][T17696] report_bug+0x2be/0x4f0 [ 1388.631746][T17696] ? svc_destroy+0x2ed/0x390 [ 1388.633230][ C0] net_ratelimit: 26 callbacks suppressed [ 1388.633282][ C0] wireguard: wg0: Sending keepalive packet to peer 44 ([::1]:20003/0%0) [ 1388.642457][T17681] sctp: *** Chunk:ffff8880475ed280[ABORT] No TSN 0x0, length:8, chunk->skb->len:8, rtt_in_progress:0 [ 1388.642697][T17681] sctp: ***sctp_transmit_packet*** skb->len:20 [ 1388.642752][T17681] sctp: sctp_v6_xmit: skb:ffff88802a9fe000, len:20, src:0000:0000:0000:0000:0000:0000:0000:0001 dst:0000:0000:0000:0000:0000:0000:0000:0001 [ 1388.643534][T17681] sctp: sctp_do_sm[post-sfx]: error:0, asoc:0000000000000000[STATE_CLOSED] [ 1388.643876][T17681] sctp: sctp_packet_free: packet:ffff88801d37f308 [ 1388.644087][T17681] sctp: sctp_destroy_sock: sk:ffff88802f0ce300 [ 1388.644675][T17681] kcov: kcov_task_exit: t = ffff88801da40000, kcov->t = ffff88801da40000 [ 1388.711295][T17696] ? svc_destroy+0x2ed/0x390 [ 1388.715927][T17696] ? svc_destroy+0x2ef/0x390 [ 1388.720544][T17696] handle_bug+0xcf/0x120 [ 1388.724823][T17696] exc_invalid_op+0x1a/0x50 [ 1388.729361][T17696] asm_exc_invalid_op+0x1a/0x20 [ 1388.734239][T17696] RIP: 0010:svc_destroy+0x2ed/0x390 [ 1388.739465][T17696] Code: 24 49 83 c7 20 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 42 82 2d f8 49 8b 37 48 c7 c7 e0 11 fa 8b e8 e3 2a 9e f7 <0f> 0b e9 78 fd ff ff e8 b7 7c d4 f7 c6 05 9c ee c4 05 01 4c 89 e0 [ 1388.759109][T17696] RSP: 0018:ffffc900049a7ae0 EFLAGS: 00010246 [ 1388.765200][T17696] RAX: 708c18c717e1f400 RBX: ffff88805dcdac50 RCX: 0000000000080000 [ 1388.773198][T17696] RDX: ffffc9000cdda000 RSI: 0000000000034d87 RDI: 0000000000034d88 [ 1388.781214][T17696] RBP: ffffc900049a7cb8 R08: ffffc900049a76e7 R09: 1ffff92000934edc [ 1388.789214][T17696] R10: dffffc0000000000 R11: fffff52000934edd R12: ffff88805dcdac00 [ 1388.797238][T17696] R13: dffffc0000000000 R14: ffff88805dcdac50 R15: ffffffff8e3e1cc0 [ 1388.805253][T17696] write_ports+0xb99/0xfa0 [ 1388.809702][T17696] ? write_versions+0xe00/0xe00 [ 1388.814581][T17696] ? __lock_acquire+0x7eb0/0x7eb0 [ 1388.819648][T17696] ? __virt_addr_valid+0x10c/0x380 [ 1388.824789][T17696] ? __virt_addr_valid+0x10c/0x380 [ 1388.829926][T17696] ? __might_fault+0xaa/0x120 [ 1388.830257][ C0] virtqueue callback for ffff888020ec6800 (ffffffff849accf0) [ 1388.830423][ C0] virtqueue interrupt with no work for ffff888020ec6600 [ 1388.830449][ C0] virtqueue interrupt with no work for ffff888020ec6400 [ 1388.855883][T17696] ? __might_fault+0xc6/0x120 [ 1388.860587][T17696] ? __might_fault+0xaa/0x120 [ 1388.865303][T17696] ? simple_transaction_get+0x11d/0x140 [ 1388.870884][T17696] nfsctl_transaction_write+0x10c/0x150 [ 1388.876462][T17696] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 1388.882129][T17696] vfs_write+0x299/0x9a0 [ 1388.886413][T17696] ? file_end_write+0x250/0x250 [ 1388.891300][T17696] ? __fget_files+0x28/0x460 [ 1388.896009][T17696] ? __fget_files+0x3fc/0x460 [ 1388.900730][T17696] ? __fdget_pos+0x2a3/0x330 [ 1388.905352][T17696] ? ksys_write+0x74/0x260 [ 1388.909806][T17696] ksys_write+0x151/0x260 [ 1388.914169][T17696] ? __ia32_sys_read+0x90/0x90 [ 1388.918967][T17696] ? lockdep_hardirqs_on+0x98/0x150 [ 1388.924206][T17696] do_syscall_64+0x55/0xb0 [ 1388.928651][T17696] ? clear_bhb_loop+0x40/0x90 [ 1388.933373][T17696] ? clear_bhb_loop+0x40/0x90 [ 1388.938133][T17696] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1388.944078][T17696] RIP: 0033:0x7f1abc99f559 [ 1388.948522][T17696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1388.968159][T17696] RSP: 002b:00007f1abd93d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1388.976625][T17696] RAX: ffffffffffffffda RBX: 00007f1abcc25fa0 RCX: 00007f1abc99f559 [ 1388.984637][T17696] RDX: 0000000000000005 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1388.992658][T17696] RBP: 00007f1abca36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1389.000658][T17696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1389.008659][T17696] R13: 00007f1abcc26038 R14: 00007f1abcc25fa0 R15: 00007ffc42242728 [ 1389.016667][T17696] [ 1389.019844][T17696] Kernel Offset: disabled [ 1389.024329][T17696] Rebooting in 86400 seconds..