last executing test programs: 1m21.189170738s ago: executing program 3 (id=2114): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000840)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000008c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000940)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000009c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000a40), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b80)=0x6) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000a45000/0x3000)=nil, 0x3000, 0x100000d) unshare(0x400) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000a00)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000c00)='./bus\x00', 0x0, &(0x7f0000000080)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@debug}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@max_batch_time={'max_batch_time', 0x3d, 0x10}}], [{@smackfsroot={'smackfsroot', 0x3d, 'auto_da_alloc'}}, {@uid_lt}, {@context={'context', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#*r\xbc.-'}}, {@context={'context', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, ')]\xa5\x15\xcb\x1e\xe3\xf8R\xcc\xcf\x96{>\x9c\x1f\x06\xbc\x8f\xa9\xd8\x81}\x7f\xdfd\x0ef\xe2\xafE d\x1e\xb3\xea\xeb9C\xc9pG\xa8\x14\x13?v${q0y\n\x98\"\x06\x19`\x8a\x87\xb4\x1d}>\x92\xef\x84\xf3\xd5\x84Y\x03\xea\xe6\x1a\xc2\xe4\xc5\x7f\xf0\b\x96\xdf\x17(\xf6\x9cc\x14\xf6\xb7|\x18)\x06\b9\x06F\xfb\xa1\xd3\xbc\x1dR\x91\xf9\x921%\xad+\xf5\n\xdd\xec=B\xfe\xe7\x1b8\xf2]\x97\xdd[\x90\xaa\xacg\xdf\x13\xee\x1cn\x9d\x03>\x8b\x16\x8b\xbe\xba2Lly\xc0\xca\x10\xbe\xe7NE`\x0e3\x1a\x88\x0e)\xbd\x9f\x94\x98w\x9b\xc6\xd88'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@flag='lazytime'}]}, 0x1, 0x46e, &(0x7f0000000cc0)="$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") syz_genetlink_get_family_id$ethtool(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x40010) keyctl$reject(0x13, 0x0, 0x5, 0x2, 0xfffffffffffffffa) sendmsg$nl_generic(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000002600), &(0x7f0000002640)='./bus\x00', 0x3d7c9b, 0x0, 0x1, 0x0, &(0x7f0000002680)) 1m19.461597936s ago: executing program 3 (id=2122): socket$nl_netfilter(0x10, 0x3, 0xc) add_key(0x0, &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000800)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000900), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000940), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0x0, 0x0, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d80)={@fallback, r3, 0x26, 0x2010}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000ec0)="0000000001", 0x5) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000f00), 0x0) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)={0x1c, 0x1, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0xfffd}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xffff77e0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6040}, 0x0) r5 = fsopen(0x0, 0x1) fsmount(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x6, 0x14, &(0x7f0000000a40)=ANY=[@ANYBLOB="bf160000000000001801000020646c6500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000f000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b7040000ffffffffb70500000000000085000000550000001500020000000000bf01000000000000850000005600000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m16.639795067s ago: executing program 3 (id=2135): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) set_mempolicy(0x1, 0x0, 0x7) set_mempolicy(0x3, 0x0, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000480)={0xffffff23, 0xffffffffffffffff}) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x28) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) 1m15.64475219s ago: executing program 3 (id=2140): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=@filename='./dev/sda1\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000280)='./mnt\x00') r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x21) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r3, 0x200000) pwrite64(r3, &(0x7f00000000c0)='U', 0x1, 0x1fe) r4 = syz_open_dev$loop(&(0x7f00000003c0), 0x0, 0x2) mount(0x0, &(0x7f0000000600)='\x00', &(0x7f0000000640)='omfs\x00', 0x3800800, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, 0x0) 1m15.083438648s ago: executing program 3 (id=2143): socket$nl_netfilter(0x10, 0x3, 0xc) add_key(0x0, &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000800)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000900), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000940), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0x0, 0x0, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d80)={@fallback, r3, 0x26, 0x2010}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000ec0)="0000000001", 0x5) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000f00), 0x0) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)={0x1c, 0x1, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0xfffd}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xffff77e0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6040}, 0x0) r5 = fsopen(0x0, 0x1) fsmount(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x6, 0x14, &(0x7f0000000a40)=ANY=[@ANYBLOB="bf160000000000001801000020646c6500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000f000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b7040000ffffffffb70500000000000085000000550000001500020000000000bf01000000000000850000005600000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m10.98922661s ago: executing program 3 (id=2158): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETVESABLANK(r1, 0x560e, &(0x7f00000003c0)) 1m9.848161077s ago: executing program 32 (id=2158): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETVESABLANK(r1, 0x560e, &(0x7f00000003c0)) 17.07237466s ago: executing program 4 (id=2159): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000840)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000008c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000940)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000009c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000a40), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000009c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b80)=0x6) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000a45000/0x3000)=nil, 0x3000, 0x100000d) unshare(0x400) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000a00)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000c00)='./bus\x00', 0x0, &(0x7f0000000080)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@debug}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@max_batch_time={'max_batch_time', 0x3d, 0x10}}], [{@smackfsroot={'smackfsroot', 0x3d, 'auto_da_alloc'}}, {@uid_lt}, {@context={'context', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#*r\xbc.-'}}, {@context={'context', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, ')]\xa5\x15\xcb\x1e\xe3\xf8R\xcc\xcf\x96{>\x9c\x1f\x06\xbc\x8f\xa9\xd8\x81}\x7f\xdfd\x0ef\xe2\xafE d\x1e\xb3\xea\xeb9C\xc9pG\xa8\x14\x13?v${q0y\n\x98\"\x06\x19`\x8a\x87\xb4\x1d}>\x92\xef\x84\xf3\xd5\x84Y\x03\xea\xe6\x1a\xc2\xe4\xc5\x7f\xf0\b\x96\xdf\x17(\xf6\x9cc\x14\xf6\xb7|\x18)\x06\b9\x06F\xfb\xa1\xd3\xbc\x1dR\x91\xf9\x921%\xad+\xf5\n\xdd\xec=B\xfe\xe7\x1b8\xf2]\x97\xdd[\x90\xaa\xacg\xdf\x13\xee\x1cn\x9d\x03>\x8b\x16\x8b\xbe\xba2Lly\xc0\xca\x10\xbe\xe7NE`\x0e3\x1a\x88\x0e)\xbd\x9f\x94\x98w\x9b\xc6\xd88'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@flag='lazytime'}]}, 0x1, 0x46e, &(0x7f0000000cc0)="$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") syz_genetlink_get_family_id$ethtool(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x40010) keyctl$reject(0x13, 0x0, 0x5, 0x2, 0xfffffffffffffffa) sendmsg$nl_generic(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000002600), &(0x7f0000002640)='./bus\x00', 0x3d7c9b, 0x0, 0x1, 0x0, &(0x7f0000002680)) 12.970352913s ago: executing program 4 (id=2159): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000840)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000008c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000940)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000009c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000a40), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000009c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b80)=0x6) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000a45000/0x3000)=nil, 0x3000, 0x100000d) unshare(0x400) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000a00)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000c00)='./bus\x00', 0x0, &(0x7f0000000080)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@debug}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@max_batch_time={'max_batch_time', 0x3d, 0x10}}], [{@smackfsroot={'smackfsroot', 0x3d, 'auto_da_alloc'}}, {@uid_lt}, {@context={'context', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#*r\xbc.-'}}, {@context={'context', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, ')]\xa5\x15\xcb\x1e\xe3\xf8R\xcc\xcf\x96{>\x9c\x1f\x06\xbc\x8f\xa9\xd8\x81}\x7f\xdfd\x0ef\xe2\xafE d\x1e\xb3\xea\xeb9C\xc9pG\xa8\x14\x13?v${q0y\n\x98\"\x06\x19`\x8a\x87\xb4\x1d}>\x92\xef\x84\xf3\xd5\x84Y\x03\xea\xe6\x1a\xc2\xe4\xc5\x7f\xf0\b\x96\xdf\x17(\xf6\x9cc\x14\xf6\xb7|\x18)\x06\b9\x06F\xfb\xa1\xd3\xbc\x1dR\x91\xf9\x921%\xad+\xf5\n\xdd\xec=B\xfe\xe7\x1b8\xf2]\x97\xdd[\x90\xaa\xacg\xdf\x13\xee\x1cn\x9d\x03>\x8b\x16\x8b\xbe\xba2Lly\xc0\xca\x10\xbe\xe7NE`\x0e3\x1a\x88\x0e)\xbd\x9f\x94\x98w\x9b\xc6\xd88'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@flag='lazytime'}]}, 0x1, 0x46e, &(0x7f0000000cc0)="$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") syz_genetlink_get_family_id$ethtool(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x40010) keyctl$reject(0x13, 0x0, 0x5, 0x2, 0xfffffffffffffffa) sendmsg$nl_generic(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000002600), &(0x7f0000002640)='./bus\x00', 0x3d7c9b, 0x0, 0x1, 0x0, &(0x7f0000002680)) 9.910190349s ago: executing program 4 (id=2159): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000840)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000008c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000940)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000009c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000a40), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000009c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b80)=0x6) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000a45000/0x3000)=nil, 0x3000, 0x100000d) unshare(0x400) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000a00)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000c00)='./bus\x00', 0x0, &(0x7f0000000080)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@debug}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@max_batch_time={'max_batch_time', 0x3d, 0x10}}], [{@smackfsroot={'smackfsroot', 0x3d, 'auto_da_alloc'}}, {@uid_lt}, {@context={'context', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#*r\xbc.-'}}, {@context={'context', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, ')]\xa5\x15\xcb\x1e\xe3\xf8R\xcc\xcf\x96{>\x9c\x1f\x06\xbc\x8f\xa9\xd8\x81}\x7f\xdfd\x0ef\xe2\xafE d\x1e\xb3\xea\xeb9C\xc9pG\xa8\x14\x13?v${q0y\n\x98\"\x06\x19`\x8a\x87\xb4\x1d}>\x92\xef\x84\xf3\xd5\x84Y\x03\xea\xe6\x1a\xc2\xe4\xc5\x7f\xf0\b\x96\xdf\x17(\xf6\x9cc\x14\xf6\xb7|\x18)\x06\b9\x06F\xfb\xa1\xd3\xbc\x1dR\x91\xf9\x921%\xad+\xf5\n\xdd\xec=B\xfe\xe7\x1b8\xf2]\x97\xdd[\x90\xaa\xacg\xdf\x13\xee\x1cn\x9d\x03>\x8b\x16\x8b\xbe\xba2Lly\xc0\xca\x10\xbe\xe7NE`\x0e3\x1a\x88\x0e)\xbd\x9f\x94\x98w\x9b\xc6\xd88'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@flag='lazytime'}]}, 0x1, 0x46e, &(0x7f0000000cc0)="$eJzs27tvHEUYAPBv1y/ywiYKjzwAQ0CKeNixE0IKGhBIFCAhQRFKY18ik0uMYiPhyAKDUChRJHpqJP4CKmgQUCHRQh9FipCbBKpDe7drn+3z45zzXcj9ftJmZ252b+bb3cnN7ngD6FrD2T9JxP6I+DMiBmvZ1RsM11Z3lhYm/1lamEyiUnn376S63e2lhcli02K/fUWmNyL9MomjDeqdnb96caJcLl3J86Nzlz4anZ2/+uL0pYkLpQuly+Nnz54+NfbymfGXWhJnFtftI5/OHDv85vvX3548d/2DX79PivjXxNEiw5sVPluptLi6zjpQl056O9gQmtJT66bRV+3/g9ETKydvMN74oqONA3ZVpVKpPLJx8WIFuI8l0fw+O9gFuOcUP/TZ/W+xtGnocU+49WrtBiiL+06+1Ep6I8236Vtzf9tKwxFxbvHfb7Mlduc5BADAKj9m458XGo3/0qh/LvRgPocyFBEPRcTBiDgTEYci4uGI6raPRsRjTda/dpJk/fgnvbmjwLYpG/+9ks9trR7/FaO/GOrJcweq8fcl56fLpZP5MTkRfQNZfmyTOn56/Y+vNyqrH/9lS1Z/MRbM23Gzd6BI9+fruYm7i3rFrc8jjvQ2ij9ZnglIIuJwRBzZYR3Tz313bKOyrePfRAvmmfry9Z2lhcVYE38h2Xx+cvSBKJdOjhZXxXq//X7tnY3qv6v4WyA7/3sbXv/L8Q8l9fO1s9v62oH6zLW/vtrwnqa5679mamJuoj95Ly+urT6ZmJu7MhbRn7xVa3TUfT6+sm+RL7bP4j9xvHH/PxgrR+JoRGQX8eMR8UREPJm3/amIeDoijm9yMH557ZkPdx7/7srin2rq/M8X07vz/ZF/slzUONFz8ecfVlU6tJLc3vk/XU2dyD/Jzv9WcW2nXdu+mgEAAOB/Lo2I/ZGkI8vpNB0Zqf0N/6HYm5ZnZueePz/z8eWp2jsCQ9GXFk+6Buueh47lt/XV/GK5NF6fny6XTuXPjb/p2VPNj0zOlKc6HTx0uX3r+n9U+3/mRk+nWwfsOu9rQffS/6F76f/QvfR/6F4N+v+eTrQDaL9Gv/+fdaAdQPut6f+m/aCLuP+H7tWg/6edaAfQfo1///vb3g6grWb3xNYvyeeJG9t6o77pxFCrv1Bi68S+/PxfmZ2PxR19T6SdjGIgOn8M7+9Eh/9jAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaJH/AgAA///hQNuk") syz_genetlink_get_family_id$ethtool(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x40010) keyctl$reject(0x13, 0x0, 0x5, 0x2, 0xfffffffffffffffa) sendmsg$nl_generic(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000002600), &(0x7f0000002640)='./bus\x00', 0x3d7c9b, 0x0, 0x1, 0x0, &(0x7f0000002680)) 7.457221911s ago: executing program 2 (id=2313): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket(0x2b, 0x1, 0x1) setns(0xc9, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000001800)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000001840)='./proc\x00', &(0x7f0000001880)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f00000018c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001940)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000001980)='./config\x00', &(0x7f00000019c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001a40)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000001ac0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001b00)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001b40)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000001b80)='dummy_udc.0', 0xb) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r4, 0x29, 0x39, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, 0x0, 0x8) bind$rds(r3, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000280)={@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @multicast2}, 0x4, 0x2, 0x3, 0x2}}, {0x0}, 0x0, 0x5fc60890dce0b034}, 0xa0) listen(r1, 0x5) ioctl$sock_SIOCOUTQ(r1, 0x5411, 0x0) r5 = syz_open_dev$vim2m(0x0, 0x20000000204, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000200)={0x37, 0x2, 0x100, "11010000001400000100b64c0000005c4b7c1500", 0x34325241}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 7.287766899s ago: executing program 2 (id=2315): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1000, 0x1004000}) 7.094390269s ago: executing program 2 (id=2316): ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000340)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000440)={0x2, @win={{0x180, 0x55b, 0x9, 0x7}, 0x8, 0x5, 0x0, 0xffff7eff, 0x0, 0x9}}) 6.88904685s ago: executing program 2 (id=2317): mknodat$null(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2000094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000001f40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000003f80)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000060c0)={0x20, 0x0, 0x88, {0x0, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000008240)='./file0\x00', 0x101001, 0x0) umount2(0x0, 0x1) ppoll(&(0x7f0000000600)=[{r2, 0xc080}], 0x1, 0x0, 0x0, 0x0) 6.875102622s ago: executing program 4 (id=2159): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000840)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000008c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000940)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000009c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000a40), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000009c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b80)=0x6) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000a45000/0x3000)=nil, 0x3000, 0x100000d) unshare(0x400) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000a00)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000c00)='./bus\x00', 0x0, &(0x7f0000000080)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@debug}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@max_batch_time={'max_batch_time', 0x3d, 0x10}}], [{@smackfsroot={'smackfsroot', 0x3d, 'auto_da_alloc'}}, {@uid_lt}, {@context={'context', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#*r\xbc.-'}}, {@context={'context', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, ')]\xa5\x15\xcb\x1e\xe3\xf8R\xcc\xcf\x96{>\x9c\x1f\x06\xbc\x8f\xa9\xd8\x81}\x7f\xdfd\x0ef\xe2\xafE d\x1e\xb3\xea\xeb9C\xc9pG\xa8\x14\x13?v${q0y\n\x98\"\x06\x19`\x8a\x87\xb4\x1d}>\x92\xef\x84\xf3\xd5\x84Y\x03\xea\xe6\x1a\xc2\xe4\xc5\x7f\xf0\b\x96\xdf\x17(\xf6\x9cc\x14\xf6\xb7|\x18)\x06\b9\x06F\xfb\xa1\xd3\xbc\x1dR\x91\xf9\x921%\xad+\xf5\n\xdd\xec=B\xfe\xe7\x1b8\xf2]\x97\xdd[\x90\xaa\xacg\xdf\x13\xee\x1cn\x9d\x03>\x8b\x16\x8b\xbe\xba2Lly\xc0\xca\x10\xbe\xe7NE`\x0e3\x1a\x88\x0e)\xbd\x9f\x94\x98w\x9b\xc6\xd88'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@flag='lazytime'}]}, 0x1, 0x46e, &(0x7f0000000cc0)="$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") syz_genetlink_get_family_id$ethtool(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x40010) keyctl$reject(0x13, 0x0, 0x5, 0x2, 0xfffffffffffffffa) sendmsg$nl_generic(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000002600), &(0x7f0000002640)='./bus\x00', 0x3d7c9b, 0x0, 0x1, 0x0, &(0x7f0000002680)) 4.56054293s ago: executing program 0 (id=2318): mkdirat(0xffffffffffffff9c, &(0x7f0000001bc0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000001c00)='./mnt\x00', &(0x7f0000001c40)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001c80)='./mnt/trace_marker\x00', 0x1, 0x5a) write(r0, &(0x7f0000002180)="580217e69611ae5b08000000799e5ce1d61d9afb11faa71b27f1252829364cecbaaac6", 0x23) r1 = openat(0xffffffffffffff9c, &(0x7f00000021c0)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f0000002200)=""/16384, 0x4000) 4.5589473s ago: executing program 1 (id=2319): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="c4000000190001000000000010000000070000000000000000000000000000016401010200000000000000000000000000000500000000000a00008006"], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c4000000190001000000000010000000070000000100000000000000000000016401010200000000000000000000000000000500000000000a"], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) 4.417560635s ago: executing program 1 (id=2320): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000b00)={0xc0, 0x0, 0x10000}) 4.349037792s ago: executing program 0 (id=2321): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x490, &(0x7f0000000580)="$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") mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x701, 0x3, 0x240, 0x0, 0xb, 0x108, 0x108, 0x0, 0x1d8, 0x1c8, 0x1c8, 0x1d8, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'ip6erspan0\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'veth1_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x4, 0x1, [0x23, 0x9, 0x31, 0x1a, 0x36, 0x4, 0x31, 0x6, 0xd, 0x2f, 0x2a, 0x1f, 0x3b, 0x37, 0x2b, 0x20], 0x2, 0xa}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x6, 0xfd, 0xc, 0x42}]}, 0x10) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmmsg$inet(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="42ec6c47ba0e0db80258de8ff2d341c90000567f8770063d48589b38d002fbd9006400", 0x23}, {&(0x7f00000003c0)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)}], 0x1}}], 0x2, 0x48045) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x190) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000001300), 0x404, &(0x7f0000001340)=ANY=[]) close_range(r0, 0xffffffffffffffff, 0x0) 4.158720691s ago: executing program 1 (id=2322): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x200008c0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='8', @ANYBLOB="010000000000000000002001"], 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.993421839s ago: executing program 1 (id=2323): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket(0x2b, 0x1, 0x1) setns(0xc9, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000001800)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000001840)='./proc\x00', &(0x7f0000001880)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f00000018c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001940)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000001980)='./config\x00', &(0x7f00000019c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001a40)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000001ac0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001b00)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001b40)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000001b80)='dummy_udc.0', 0xb) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r4, 0x29, 0x39, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, 0x0, 0x8) bind$rds(r3, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000280)={@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @multicast2}, 0x4, 0x2, 0x3, 0x2}}, {0x0}, 0x0, 0x5fc60890dce0b034}, 0xa0) listen(r1, 0x5) ioctl$sock_SIOCOUTQ(r1, 0x5411, 0x0) r5 = syz_open_dev$vim2m(0x0, 0x20000000204, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000200)={0x37, 0x2, 0x100, "11010000001400000100b64c0000005c4b7c1500", 0x34325241}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 3.917526517s ago: executing program 0 (id=2324): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1000, 0x1004000}) 3.862247242s ago: executing program 4 (id=2159): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000840)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000008c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000940)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000009c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000a40), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000009c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b80)=0x6) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000a45000/0x3000)=nil, 0x3000, 0x100000d) unshare(0x400) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000a00)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000c00)='./bus\x00', 0x0, &(0x7f0000000080)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@debug}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@max_batch_time={'max_batch_time', 0x3d, 0x10}}], [{@smackfsroot={'smackfsroot', 0x3d, 'auto_da_alloc'}}, {@uid_lt}, {@context={'context', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#*r\xbc.-'}}, {@context={'context', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, ')]\xa5\x15\xcb\x1e\xe3\xf8R\xcc\xcf\x96{>\x9c\x1f\x06\xbc\x8f\xa9\xd8\x81}\x7f\xdfd\x0ef\xe2\xafE d\x1e\xb3\xea\xeb9C\xc9pG\xa8\x14\x13?v${q0y\n\x98\"\x06\x19`\x8a\x87\xb4\x1d}>\x92\xef\x84\xf3\xd5\x84Y\x03\xea\xe6\x1a\xc2\xe4\xc5\x7f\xf0\b\x96\xdf\x17(\xf6\x9cc\x14\xf6\xb7|\x18)\x06\b9\x06F\xfb\xa1\xd3\xbc\x1dR\x91\xf9\x921%\xad+\xf5\n\xdd\xec=B\xfe\xe7\x1b8\xf2]\x97\xdd[\x90\xaa\xacg\xdf\x13\xee\x1cn\x9d\x03>\x8b\x16\x8b\xbe\xba2Lly\xc0\xca\x10\xbe\xe7NE`\x0e3\x1a\x88\x0e)\xbd\x9f\x94\x98w\x9b\xc6\xd88'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@flag='lazytime'}]}, 0x1, 0x46e, &(0x7f0000000cc0)="$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") syz_genetlink_get_family_id$ethtool(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x40010) keyctl$reject(0x13, 0x0, 0x5, 0x2, 0xfffffffffffffffa) sendmsg$nl_generic(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000002600), &(0x7f0000002640)='./bus\x00', 0x3d7c9b, 0x0, 0x1, 0x0, &(0x7f0000002680)) 1.399599336s ago: executing program 0 (id=2325): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdir(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x24042, 0x0) mount$overlay(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x8, &(0x7f00000007c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0/file2\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000880)='./file0/file2\x00', 0x2081, 0x8) 1.398192096s ago: executing program 1 (id=2326): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000380), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000003c0)=0x8000) ppoll(&(0x7f0000000440)=[{0xffffffffffffffff, 0x1708}], 0x1, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f0000001480)="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", 0x1000) 1.396108676s ago: executing program 2 (id=2327): socket$nl_netfilter(0x10, 0x3, 0xc) add_key(0x0, &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000007c0)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000800)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000940), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0x0, 0x0, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d80)={@fallback, r3, 0x26, 0x2010}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000ec0)="0000000001", 0x5) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000f00), 0x0) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)={0x1c, 0x1, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0xfffd}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xffff77e0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6040}, 0x0) r5 = fsopen(0x0, 0x1) fsmount(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x6, 0x14, &(0x7f0000000a40)=ANY=[@ANYBLOB="bf160000000000001801000020646c6500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000f000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b7040000ffffffffb70500000000000085000000550000001500020000000000bf01000000000000850000005600000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.220619635s ago: executing program 0 (id=2328): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ae) clock_gettime(0xfffffffb, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x401, 0x0) write(r0, &(0x7f00000005c0)="8c", 0x1) 960.110252ms ago: executing program 0 (id=2329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x1001a, &(0x7f0000000300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80000001}}, {@debug}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x80000001}}]}, 0x1, 0x443, &(0x7f00000003c0)="$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") r3 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000840)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000880)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000008c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000009c0), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000a40), 0x10106, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b80)=0x6) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000c00)='./bus\x00', 0x80000b, &(0x7f0000000c40)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@debug}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@max_batch_time={'max_batch_time', 0x3d, 0x10}}]}, 0x1, 0x46e, &(0x7f0000000cc0)="$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") syz_genetlink_get_family_id$ethtool(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x40010) keyctl$reject(0x13, 0x0, 0x5, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) recvmmsg(r3, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x20000003}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001400)=""/70, 0x46}, {&(0x7f0000001480)=""/188, 0xbc}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/97, 0x61}, {&(0x7f00000025c0)=""/58, 0x3a}], 0x5}, 0x518}], 0x4, 0x40010000, 0x0) syz_mount_image$vfat(&(0x7f0000002600), &(0x7f0000002640)='./bus\x00', 0x3d3c9b, 0x0, 0x80, 0x0, &(0x7f0000002680)) renameat2(0xffffffffffffff9c, &(0x7f00000026c0)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000002700)='./file0/file0\x00', 0x2) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x68, r1, 0x401, 0x0, 0x0, {{0x1, 0x0, 0xffff}, {0x0, 0x410c}, {0x4c, 0x14, {0x9effffff, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x4000001) 323.533077ms ago: executing program 2 (id=2330): timer_create(0x2, 0x0, &(0x7f0000001880)=0x0) timer_settime(r0, 0x1, &(0x7f00000018c0)={{}, {0x0, 0x989680}}, 0x0) timer_gettime(r0, &(0x7f0000001900)) 66.738924ms ago: executing program 1 (id=2331): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x200008c0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='8', @ANYBLOB="010000000000000000002001"], 0x38}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 4 (id=2159): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000840)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000008c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000940)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000009c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000a40), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000009c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b80)=0x6) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000a45000/0x3000)=nil, 0x3000, 0x100000d) unshare(0x400) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000a00)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000c00)='./bus\x00', 0x0, &(0x7f0000000080)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@debug}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@max_batch_time={'max_batch_time', 0x3d, 0x10}}], [{@smackfsroot={'smackfsroot', 0x3d, 'auto_da_alloc'}}, {@uid_lt}, {@context={'context', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#*r\xbc.-'}}, {@context={'context', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, ')]\xa5\x15\xcb\x1e\xe3\xf8R\xcc\xcf\x96{>\x9c\x1f\x06\xbc\x8f\xa9\xd8\x81}\x7f\xdfd\x0ef\xe2\xafE d\x1e\xb3\xea\xeb9C\xc9pG\xa8\x14\x13?v${q0y\n\x98\"\x06\x19`\x8a\x87\xb4\x1d}>\x92\xef\x84\xf3\xd5\x84Y\x03\xea\xe6\x1a\xc2\xe4\xc5\x7f\xf0\b\x96\xdf\x17(\xf6\x9cc\x14\xf6\xb7|\x18)\x06\b9\x06F\xfb\xa1\xd3\xbc\x1dR\x91\xf9\x921%\xad+\xf5\n\xdd\xec=B\xfe\xe7\x1b8\xf2]\x97\xdd[\x90\xaa\xacg\xdf\x13\xee\x1cn\x9d\x03>\x8b\x16\x8b\xbe\xba2Lly\xc0\xca\x10\xbe\xe7NE`\x0e3\x1a\x88\x0e)\xbd\x9f\x94\x98w\x9b\xc6\xd88'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@flag='lazytime'}]}, 0x1, 0x46e, &(0x7f0000000cc0)="$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") syz_genetlink_get_family_id$ethtool(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x40010) keyctl$reject(0x13, 0x0, 0x5, 0x2, 0xfffffffffffffffa) sendmsg$nl_generic(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000002600), &(0x7f0000002640)='./bus\x00', 0x3d7c9b, 0x0, 0x1, 0x0, &(0x7f0000002680)) kernel console output (not intermixed with test programs): tlink_sendmsg+0x8d0/0xbf0 [ 576.938750][T12376] ? netlink_getsockopt+0x590/0x590 [ 576.943981][T12376] ? apparmor_socket_sendmsg+0x8e/0x330 [ 576.949579][T12376] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 576.954911][T12376] ? security_socket_sendmsg+0x80/0xa0 [ 576.960409][T12376] ? netlink_getsockopt+0x590/0x590 [ 576.965649][T12376] ____sys_sendmsg+0x61b/0x980 [ 576.970454][T12376] ? __asan_memset+0x22/0x40 [ 576.975078][T12376] ? __sys_sendmsg_sock+0x30/0x30 [ 576.980136][T12376] ? __import_iovec+0x5f2/0x850 [ 576.985041][T12376] ? import_iovec+0x73/0xa0 [ 576.989576][T12376] ___sys_sendmsg+0x2a6/0x360 [ 576.994287][T12376] ? __sys_sendmsg+0x2b0/0x2b0 [ 576.999116][T12376] ? exc_page_fault+0x8c/0x100 [ 577.003936][T12376] __se_sys_sendmsg+0x1d0/0x2c0 [ 577.008820][T12376] ? __x64_sys_sendmsg+0x80/0x80 [ 577.013804][T12376] ? lockdep_hardirqs_on+0x98/0x150 [ 577.019040][T12376] do_syscall_64+0x55/0xb0 [ 577.023495][T12376] ? clear_bhb_loop+0x40/0x90 [ 577.028206][T12376] ? clear_bhb_loop+0x40/0x90 [ 577.032927][T12376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.039135][T12376] RIP: 0033:0x7f4cb319fb19 [ 577.043601][T12376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.063247][T12376] RSP: 002b:00007f4cb13f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.071699][T12376] RAX: ffffffffffffffda RBX: 00007f4cb3425fa0 RCX: 00007f4cb319fb19 [ 577.079707][T12376] RDX: 000000000000c000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 577.087708][T12376] RBP: 00007f4cb3237b70 R08: 0000000000000000 R09: 0000000000000000 [ 577.095901][T12376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.103923][T12376] R13: 00007f4cb3426038 R14: 00007f4cb3425fa0 R15: 00007ffe9312c4a8 [ 577.111960][T12376] [ 577.133072][T11499] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 577.226495][T12380] loop2: detected capacity change from 0 to 128 [ 577.277860][T12376] infiniband syz0: Couldn't register device with driver model [ 577.288333][T12376] rdma_rxe: rxe_newlink: failed to add ip6tnl0 [ 577.303453][T12380] FAT-fs (loop2): Unrecognized mount option "18446744073709551615" or missing value [ 577.424361][T11493] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 577.449946][T12380] loop2: detected capacity change from 0 to 512 [ 577.465983][T11493] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 577.490079][T11493] Buffer I/O error on dev loop2, logical block 0, async page read [ 577.508577][T12380] EXT4-fs (loop2): Test dummy encryption mode enabled [ 577.551689][T12380] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.1938: inode has both inline data and extents flags [ 577.596026][T12380] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.1938: couldn't read orphan inode 15 (err -117) [ 577.640281][T12380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.786324][T12395] FAULT_INJECTION: forcing a failure. [ 577.786324][T12395] name failslab, interval 1, probability 0, space 0, times 0 [ 577.787300][T12396] FAULT_INJECTION: forcing a failure. [ 577.787300][T12396] name failslab, interval 1, probability 0, space 0, times 0 [ 577.799375][T12395] CPU: 1 PID: 12395 Comm: syz.3.1944 Not tainted syzkaller #0 [ 577.819816][T12395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 577.829926][T12395] Call Trace: [ 577.833241][T12395] [ 577.836204][T12395] dump_stack_lvl+0x18c/0x250 [ 577.841016][T12395] ? show_regs_print_info+0x20/0x20 [ 577.846286][T12395] ? load_image+0x420/0x420 [ 577.850834][T12395] ? __might_sleep+0xe0/0xe0 [ 577.855470][T12395] ? __lock_acquire+0x7eb0/0x7eb0 [ 577.860534][T12395] should_fail_ex+0x394/0x4c0 [ 577.865246][T12395] should_failslab+0x9/0x20 [ 577.869886][T12395] slab_pre_alloc_hook+0x59/0x300 [ 577.874989][T12395] kmem_cache_alloc_lru+0x4d/0x2c0 [ 577.880144][T12395] ? sock_alloc_inode+0x28/0xc0 [ 577.885040][T12395] sock_alloc_inode+0x28/0xc0 [ 577.889752][T12395] ? sockfs_init_fs_context+0xb0/0xb0 [ 577.895151][T12395] new_inode_pseudo+0x63/0x1d0 [ 577.899955][T12395] __sock_create+0x12d/0x940 [ 577.904591][T12395] ? __might_fault+0xaa/0x120 [ 577.909299][T12395] ? __might_fault+0xc6/0x120 [ 577.914012][T12395] __sys_socketpair+0x1c1/0x550 [ 577.918908][T12395] __x64_sys_socketpair+0x9b/0xb0 [ 577.923968][T12395] do_syscall_64+0x55/0xb0 [ 577.928422][T12395] ? clear_bhb_loop+0x40/0x90 [ 577.933143][T12395] ? clear_bhb_loop+0x40/0x90 [ 577.937870][T12395] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.943806][T12395] RIP: 0033:0x7f8ce5f9fb19 [ 577.948259][T12395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.967906][T12395] RSP: 002b:00007f8ce6eee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 577.976360][T12395] RAX: ffffffffffffffda RBX: 00007f8ce6225fa0 RCX: 00007f8ce5f9fb19 [ 577.984390][T12395] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 577.992393][T12395] RBP: 00007f8ce6037b70 R08: 0000000000000000 R09: 0000000000000000 [ 578.000393][T12395] R10: 0000200000000800 R11: 0000000000000246 R12: 0000000000000000 [ 578.008390][T12395] R13: 00007f8ce6226038 R14: 00007f8ce6225fa0 R15: 00007ffe57e22d28 [ 578.016409][T12395] [ 578.067642][T12395] socket: no more sockets [ 578.080043][T12396] CPU: 1 PID: 12396 Comm: syz.2.1938 Not tainted syzkaller #0 [ 578.087593][T12396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 578.097704][T12396] Call Trace: [ 578.101047][T12396] [ 578.104030][T12396] dump_stack_lvl+0x18c/0x250 [ 578.108788][T12396] ? show_regs_print_info+0x20/0x20 [ 578.114067][T12396] ? load_image+0x420/0x420 [ 578.118643][T12396] ? __might_sleep+0xe0/0xe0 [ 578.123292][T12396] ? __lock_acquire+0x7eb0/0x7eb0 [ 578.128463][T12396] should_fail_ex+0x394/0x4c0 [ 578.133192][T12396] should_failslab+0x9/0x20 [ 578.137741][T12396] slab_pre_alloc_hook+0x59/0x300 [ 578.142803][T12396] kmem_cache_alloc+0x5a/0x2d0 [ 578.147696][T12396] ? ext4_mb_new_blocks+0x547/0x42f0 [ 578.153044][T12396] ext4_mb_new_blocks+0x547/0x42f0 [ 578.158212][T12396] ? ext4_get_branch+0x5cb/0x730 [ 578.163231][T12396] ? ext4_mb_release_inode_pa+0xa30/0xa30 [ 578.168998][T12396] ? ext4_block_to_path+0x382/0x6f0 [ 578.174245][T12396] ext4_ind_map_blocks+0xf31/0x22a0 [ 578.179501][T12396] ? get_orlov_stats+0x4c0/0x4c0 [ 578.184504][T12396] ? down_read_killable+0x340/0x340 [ 578.189747][T12396] ext4_map_blocks+0x984/0x1a90 [ 578.194670][T12396] ? ext4_issue_zeroout+0x250/0x250 [ 578.199949][T12396] _ext4_get_block+0x1eb/0x480 [ 578.204751][T12396] ? percpu_ref_put+0x12/0x100 [ 578.209555][T12396] ? ext4_get_block+0x40/0x40 [ 578.214281][T12396] ext4_block_write_begin+0x55f/0x1540 [ 578.219784][T12396] ? ext4_es_is_delayed+0x40/0x40 [ 578.224859][T12396] ? folio_put+0xd0/0xd0 [ 578.229131][T12396] ? folio_mapping+0x1bd/0x4e0 [ 578.233932][T12396] ext4_write_begin+0x5ff/0x10b0 [ 578.238927][T12396] ? ext4_readahead+0x110/0x110 [ 578.243812][T12396] ? fault_in_readable+0xef/0x150 [ 578.248908][T12396] ? fault_in_iov_iter_readable+0xc3/0x300 [ 578.254757][T12396] generic_perform_write+0x2fe/0x5c0 [ 578.260094][T12396] ? generic_file_direct_write+0x3e0/0x3e0 [ 578.265941][T12396] ? file_modified_flags+0x230/0x260 [ 578.271262][T12396] ? ext4_write_checks+0x248/0x2c0 [ 578.276410][T12396] ext4_buffered_write_iter+0xd5/0x360 [ 578.281917][T12396] ext4_file_write_iter+0x1e7/0x1980 [ 578.287262][T12396] ? rcu_read_lock_any_held+0xb4/0x140 [ 578.292760][T12396] ? ext4_file_read_iter+0x660/0x660 [ 578.298115][T12396] vfs_write+0x474/0x9a0 [ 578.302407][T12396] ? file_end_write+0x250/0x250 [ 578.307307][T12396] ? __fget_files+0x3fc/0x460 [ 578.312039][T12396] ? __fdget+0x180/0x210 [ 578.316328][T12396] ? __x64_sys_pwrite64+0xf7/0x220 [ 578.321485][T12396] __x64_sys_pwrite64+0x198/0x220 [ 578.326557][T12396] ? ksys_pwrite64+0x1c0/0x1c0 [ 578.331377][T12396] ? lockdep_hardirqs_on+0x98/0x150 [ 578.336629][T12396] do_syscall_64+0x55/0xb0 [ 578.341106][T12396] ? clear_bhb_loop+0x40/0x90 [ 578.345860][T12396] ? clear_bhb_loop+0x40/0x90 [ 578.350599][T12396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 578.356805][T12396] RIP: 0033:0x7f551299fb19 [ 578.361290][T12396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.380958][T12396] RSP: 002b:00007f551392a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 578.389440][T12396] RAX: ffffffffffffffda RBX: 00007f5512c26090 RCX: 00007f551299fb19 [ 578.397468][T12396] RDX: 000000000000fdef RSI: 0000200000000540 RDI: 0000000000000006 [ 578.405487][T12396] RBP: 00007f5512a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 578.413499][T12396] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000 [ 578.421515][T12396] R13: 00007f5512c26128 R14: 00007f5512c26090 R15: 00007ffe44a43b58 [ 578.429553][T12396] [ 578.560792][T12401] fuse: Unknown parameter '0x0000000000000003' [ 578.603020][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 578.786998][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.543293][T12412] loop2: detected capacity change from 0 to 512 [ 580.585998][T12412] EXT4-fs: Ignoring removed i_version option [ 580.632470][T12412] EXT4-fs: Ignoring removed nobh option [ 580.676203][T12412] ext4: Unknown parameter 'smackfsroot' [ 581.021304][T12437] fuse: Unknown parameter 'fd0x0000000000000003' [ 582.206878][T12456] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 583.360217][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 584.351949][T12475] fuse: Unknown parameter 'fd0x0000000000000003' [ 584.619219][T12482] FAULT_INJECTION: forcing a failure. [ 584.619219][T12482] name failslab, interval 1, probability 0, space 0, times 0 [ 584.640569][T12482] CPU: 1 PID: 12482 Comm: syz.2.1974 Not tainted syzkaller #0 [ 584.648131][T12482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 584.658264][T12482] Call Trace: [ 584.661598][T12482] [ 584.664601][T12482] dump_stack_lvl+0x18c/0x250 [ 584.669359][T12482] ? show_regs_print_info+0x20/0x20 [ 584.674632][T12482] ? load_image+0x420/0x420 [ 584.679213][T12482] ? __might_sleep+0xe0/0xe0 [ 584.683881][T12482] ? __lock_acquire+0x7eb0/0x7eb0 [ 584.688992][T12482] should_fail_ex+0x394/0x4c0 [ 584.693741][T12482] should_failslab+0x9/0x20 [ 584.698343][T12482] slab_pre_alloc_hook+0x59/0x300 [ 584.703436][T12482] ? lockdep_softirqs_off+0x440/0x440 [ 584.708885][T12482] kmem_cache_alloc+0x5a/0x2d0 [ 584.713888][T12482] ? security_inode_alloc+0x34/0x110 [ 584.719271][T12482] security_inode_alloc+0x34/0x110 [ 584.724423][T12482] inode_init_always+0x914/0xc90 [ 584.729408][T12482] new_inode_pseudo+0x95/0x1d0 [ 584.734255][T12482] __sock_create+0x12d/0x940 [ 584.738903][T12482] ? __might_fault+0xaa/0x120 [ 584.743616][T12482] ? __might_fault+0xc6/0x120 [ 584.748338][T12482] __sys_socketpair+0x1c1/0x550 [ 584.753334][T12482] __x64_sys_socketpair+0x9b/0xb0 [ 584.758397][T12482] do_syscall_64+0x55/0xb0 [ 584.762857][T12482] ? clear_bhb_loop+0x40/0x90 [ 584.767581][T12482] ? clear_bhb_loop+0x40/0x90 [ 584.772305][T12482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 584.778261][T12482] RIP: 0033:0x7f551299fb19 [ 584.782737][T12482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.802472][T12482] RSP: 002b:00007f551395d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 584.810931][T12482] RAX: ffffffffffffffda RBX: 00007f5512c25fa0 RCX: 00007f551299fb19 [ 584.818940][T12482] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 584.826949][T12482] RBP: 00007f5512a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 584.834957][T12482] R10: 0000200000000800 R11: 0000000000000246 R12: 0000000000000000 [ 584.843137][T12482] R13: 00007f5512c26038 R14: 00007f5512c25fa0 R15: 00007ffe44a43b58 [ 584.851323][T12482] [ 584.854516][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.874896][T12482] socket: no more sockets [ 585.150334][T12494] loop1: detected capacity change from 0 to 512 [ 585.157784][T12494] EXT4-fs: Ignoring removed i_version option [ 585.164198][T12494] EXT4-fs: Ignoring removed nobh option [ 585.170552][T12494] ext4: Unknown parameter 'smackfsroot' [ 586.315755][T12501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.344090][T12501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.793047][ T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 587.253853][ T5096] Bluetooth: hci3: command 0x0405 tx timeout [ 587.503564][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 587.510915][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.533034][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.542853][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 587.591878][ T8] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 587.613074][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.645820][ T8] usb 2-1: config 0 descriptor?? [ 587.663314][T12517] FAULT_INJECTION: forcing a failure. [ 587.663314][T12517] name failslab, interval 1, probability 0, space 0, times 0 [ 587.682249][T12517] CPU: 1 PID: 12517 Comm: syz.2.1984 Not tainted syzkaller #0 [ 587.689839][T12517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 587.700052][T12517] Call Trace: [ 587.703385][T12517] [ 587.706383][T12517] dump_stack_lvl+0x18c/0x250 [ 587.711131][T12517] ? show_regs_print_info+0x20/0x20 [ 587.716424][T12517] ? load_image+0x420/0x420 [ 587.721006][T12517] ? __might_sleep+0xe0/0xe0 [ 587.725657][T12517] ? __lock_acquire+0x7eb0/0x7eb0 [ 587.730750][T12517] should_fail_ex+0x394/0x4c0 [ 587.735497][T12517] should_failslab+0x9/0x20 [ 587.740052][T12517] slab_pre_alloc_hook+0x59/0x300 [ 587.745144][T12517] ? lockdep_softirqs_off+0x440/0x440 [ 587.750590][T12517] kmem_cache_alloc+0x5a/0x2d0 [ 587.755413][T12517] ? security_inode_alloc+0x34/0x110 [ 587.760756][T12517] security_inode_alloc+0x34/0x110 [ 587.765952][T12517] inode_init_always+0x914/0xc90 [ 587.770961][T12517] new_inode_pseudo+0x95/0x1d0 [ 587.775794][T12517] __sock_create+0x12d/0x940 [ 587.780469][T12517] ? __might_fault+0xaa/0x120 [ 587.785208][T12517] ? __might_fault+0xc6/0x120 [ 587.789944][T12517] __sys_socketpair+0x1c1/0x550 [ 587.794872][T12517] __x64_sys_socketpair+0x9b/0xb0 [ 587.799959][T12517] do_syscall_64+0x55/0xb0 [ 587.804441][T12517] ? clear_bhb_loop+0x40/0x90 [ 587.809188][T12517] ? clear_bhb_loop+0x40/0x90 [ 587.813941][T12517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 587.819944][T12517] RIP: 0033:0x7f551299fb19 [ 587.824416][T12517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.844090][T12517] RSP: 002b:00007f551395d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 587.852589][T12517] RAX: ffffffffffffffda RBX: 00007f5512c25fa0 RCX: 00007f551299fb19 [ 587.860623][T12517] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 587.868656][T12517] RBP: 00007f5512a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 587.876688][T12517] R10: 0000200000000800 R11: 0000000000000246 R12: 0000000000000000 [ 587.884742][T12517] R13: 00007f5512c26038 R14: 00007f5512c25fa0 R15: 00007ffe44a43b58 [ 587.892804][T12517] [ 587.919618][T12517] socket: no more sockets [ 589.380595][ T8] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0001/input/input6 [ 589.531873][ T8] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0001/input/input7 [ 589.665747][ T8] kye 0003:0458:5011.0001: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 590.113475][ T5878] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 590.263218][ T8] usb 2-1: USB disconnect, device number 15 [ 590.530723][ T28] audit: type=1800 audit(1793796832.403:14): pid=12545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1993" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 590.673890][ T5878] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.723065][ T5878] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 590.760527][T12550] loop2: detected capacity change from 0 to 512 [ 590.768375][T12550] EXT4-fs: Ignoring removed i_version option [ 590.774962][T12550] EXT4-fs: Ignoring removed nobh option [ 590.780826][T12550] ext4: Unknown parameter 'smackfsroot' [ 590.846505][ T5878] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 590.940401][ T5878] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 591.005353][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 591.064053][ T5878] usb 4-1: Product: syz [ 591.098686][T12509] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 591.110141][ T5878] usb 4-1: Manufacturer: syz [ 591.152270][T12537] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 591.192634][ T5878] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 591.255623][ T5878] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 592.763255][ T5096] Bluetooth: hci3: command 0x0405 tx timeout [ 592.796156][ T5878] usb 4-1: USB disconnect, device number 8 [ 592.854814][ T5878] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 592.904179][ T5878] garmin_gps 4-1:1.0: device disconnected [ 593.510696][T12574] syz_tun: entered allmulticast mode [ 593.530454][T12574] syz_tun: left allmulticast mode [ 593.793845][T12576] FAULT_INJECTION: forcing a failure. [ 593.793845][T12576] name failslab, interval 1, probability 0, space 0, times 0 [ 593.832311][T12576] CPU: 1 PID: 12576 Comm: syz.0.2002 Not tainted syzkaller #0 [ 593.839864][T12576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 593.850063][T12576] Call Trace: [ 593.853441][T12576] [ 593.856941][T12576] dump_stack_lvl+0x18c/0x250 [ 593.861692][T12576] ? show_regs_print_info+0x20/0x20 [ 593.866966][T12576] ? load_image+0x420/0x420 [ 593.871570][T12576] ? __might_sleep+0xe0/0xe0 [ 593.876237][T12576] ? __lock_acquire+0x7eb0/0x7eb0 [ 593.881342][T12576] should_fail_ex+0x394/0x4c0 [ 593.886287][T12576] should_failslab+0x9/0x20 [ 593.890852][T12576] slab_pre_alloc_hook+0x59/0x300 [ 593.895944][T12576] kmem_cache_alloc_lru+0x4d/0x2c0 [ 593.901104][T12576] ? sock_alloc_inode+0x28/0xc0 [ 593.906014][T12576] sock_alloc_inode+0x28/0xc0 [ 593.910743][T12576] ? sockfs_init_fs_context+0xb0/0xb0 [ 593.916158][T12576] new_inode_pseudo+0x63/0x1d0 [ 593.920978][T12576] __sock_create+0x12d/0x940 [ 593.925626][T12576] ? __might_fault+0xaa/0x120 [ 593.930340][T12576] ? __might_fault+0xc6/0x120 [ 593.935053][T12576] __sys_socketpair+0x1c1/0x550 [ 593.939951][T12576] __x64_sys_socketpair+0x9b/0xb0 [ 593.945016][T12576] do_syscall_64+0x55/0xb0 [ 593.949474][T12576] ? clear_bhb_loop+0x40/0x90 [ 593.954201][T12576] ? clear_bhb_loop+0x40/0x90 [ 593.958924][T12576] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 593.964854][T12576] RIP: 0033:0x7f18f739fb19 [ 593.969785][T12576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.989706][T12576] RSP: 002b:00007f18f8305028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 593.998196][T12576] RAX: ffffffffffffffda RBX: 00007f18f7625fa0 RCX: 00007f18f739fb19 [ 594.006207][T12576] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 594.014225][T12576] RBP: 00007f18f7437b70 R08: 0000000000000000 R09: 0000000000000000 [ 594.022288][T12576] R10: 0000200000000800 R11: 0000000000000246 R12: 0000000000000000 [ 594.030307][T12576] R13: 00007f18f7626038 R14: 00007f18f7625fa0 R15: 00007ffc0d0a6608 [ 594.038327][T12576] [ 594.069231][T12576] socket: no more sockets [ 595.627151][T12591] loop2: detected capacity change from 0 to 512 [ 595.729012][T12591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.783130][T12591] ext4 filesystem being mounted at /509/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 595.818083][T12596] FAULT_INJECTION: forcing a failure. [ 595.818083][T12596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.865341][T12596] CPU: 1 PID: 12596 Comm: syz.0.2008 Not tainted syzkaller #0 [ 595.872914][T12596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 595.883011][T12596] Call Trace: [ 595.886333][T12596] [ 595.889299][T12596] dump_stack_lvl+0x18c/0x250 [ 595.894061][T12596] ? show_regs_print_info+0x20/0x20 [ 595.899317][T12596] ? load_image+0x420/0x420 [ 595.903873][T12596] ? __might_fault+0xaa/0x120 [ 595.908605][T12596] ? __lock_acquire+0x7eb0/0x7eb0 [ 595.913681][T12596] ? __virt_addr_valid+0x10c/0x380 [ 595.918850][T12596] should_fail_ex+0x394/0x4c0 [ 595.923586][T12596] _copy_from_user+0x2f/0xe0 [ 595.928481][T12596] strndup_user+0xb7/0x150 [ 595.932952][T12596] __se_sys_fsopen+0x3d/0x2c0 [ 595.937697][T12596] do_syscall_64+0x55/0xb0 [ 595.942165][T12596] ? clear_bhb_loop+0x40/0x90 [ 595.946894][T12596] ? clear_bhb_loop+0x40/0x90 [ 595.951655][T12596] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 595.957600][T12596] RIP: 0033:0x7f18f739fb19 [ 595.962058][T12596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.981724][T12596] RSP: 002b:00007f18f8305028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 595.990199][T12596] RAX: ffffffffffffffda RBX: 00007f18f7625fa0 RCX: 00007f18f739fb19 [ 595.998229][T12596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 596.006250][T12596] RBP: 00007f18f7437b70 R08: 0000000000000000 R09: 0000000000000000 [ 596.014378][T12596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.022407][T12596] R13: 00007f18f7626038 R14: 00007f18f7625fa0 R15: 00007ffc0d0a6608 [ 596.030444][T12596] [ 596.112592][T12600] loop1: detected capacity change from 0 to 512 [ 596.120512][T12600] EXT4-fs: Ignoring removed i_version option [ 596.126729][T12600] EXT4-fs: Ignoring removed nobh option [ 596.132564][T12600] ext4: Unknown parameter 'smackfsroot' [ 596.383724][T12509] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 596.435847][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.212877][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 598.317465][T12621] loop0: detected capacity change from 0 to 512 [ 598.393252][T12621] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 598.445566][T12621] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 598.473641][T12621] System zones: 1-12 [ 598.509817][T12621] EXT4-fs (loop0): 1 truncate cleaned up [ 598.532029][T12621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.163399][T12637] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5994: inode #12: comm syz.0.2015: bad extra_isize 62 (inode size 256) [ 599.226313][T12637] EXT4-fs (loop0): Remounting filesystem read-only [ 599.604345][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.591130][T12647] loop3: detected capacity change from 0 to 512 [ 600.598667][T12647] EXT4-fs: Ignoring removed i_version option [ 600.605442][T12647] EXT4-fs: Ignoring removed nobh option [ 600.611180][T12647] ext4: Unknown parameter 'smackfsroot' [ 600.849734][T12641] syz.0.2021: vmalloc error: size 33177600, failed to allocated page array size 64800, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 600.929043][T12641] CPU: 0 PID: 12641 Comm: syz.0.2021 Not tainted syzkaller #0 [ 600.936594][T12641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 600.946701][T12641] Call Trace: [ 600.950048][T12641] [ 600.953026][T12641] dump_stack_lvl+0x18c/0x250 [ 600.957775][T12641] ? show_regs_print_info+0x20/0x20 [ 600.963032][T12641] ? load_image+0x420/0x420 [ 600.967590][T12641] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 600.974079][T12641] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 600.980645][T12641] warn_alloc+0x246/0x340 [ 600.985036][T12641] ? zone_watermark_ok_safe+0x230/0x230 [ 600.990814][T12641] ? _raw_spin_unlock+0x28/0x40 [ 600.995760][T12641] ? __vb2_queue_alloc+0x78f/0x1410 [ 601.001151][T12641] __vmalloc_node_range+0x661/0x1320 [ 601.006529][T12641] ? free_vm_area+0x50/0x50 [ 601.011125][T12641] vmalloc_user+0x74/0x80 [ 601.015520][T12641] ? vb2_vmalloc_alloc+0xef/0x330 [ 601.020606][T12641] vb2_vmalloc_alloc+0xef/0x330 [ 601.025511][T12641] ? __copy_timestamp+0x1f0/0x1f0 [ 601.030585][T12641] __vb2_queue_alloc+0x78f/0x1410 [ 601.035714][T12641] vb2_core_reqbufs+0x9e8/0x10d0 [ 601.040725][T12641] ? vb2_verify_memory_type+0x570/0x570 [ 601.046339][T12641] __vb2_init_fileio+0x2ec/0xcc0 [ 601.051351][T12641] ? aa_file_perm+0x3e3/0xee0 [ 601.056097][T12641] ? futex_wait_queue+0x138/0x1b0 [ 601.061187][T12641] __vb2_perform_fileio+0x346/0x1590 [ 601.066535][T12641] ? __asan_memset+0x22/0x40 [ 601.071202][T12641] ? __fsnotify_parent+0x6d8/0x7c0 [ 601.076398][T12641] vb2_fop_read+0x28b/0x360 [ 601.080963][T12641] v4l2_read+0x19a/0x2c0 [ 601.085349][T12641] ? video_device_pipeline+0xa0/0xa0 [ 601.090719][T12641] vfs_read+0x298/0x990 [ 601.094948][T12641] ? kernel_read+0x1e0/0x1e0 [ 601.099597][T12641] ? __fget_files+0x28/0x460 [ 601.104244][T12641] ? __fget_files+0x3fc/0x460 [ 601.108989][T12641] ? __fdget_pos+0x1d8/0x330 [ 601.113635][T12641] ? ksys_read+0x74/0x260 [ 601.118023][T12641] ksys_read+0x151/0x260 [ 601.122332][T12641] ? vfs_write+0x9a0/0x9a0 [ 601.126810][T12641] ? lockdep_hardirqs_on+0x98/0x150 [ 601.132099][T12641] do_syscall_64+0x55/0xb0 [ 601.136570][T12641] ? clear_bhb_loop+0x40/0x90 [ 601.141307][T12641] ? clear_bhb_loop+0x40/0x90 [ 601.146039][T12641] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 601.151986][T12641] RIP: 0033:0x7f18f739fb19 [ 601.156451][T12641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.176125][T12641] RSP: 002b:00007f18f8305028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 601.184597][T12641] RAX: ffffffffffffffda RBX: 00007f18f7625fa0 RCX: 00007f18f739fb19 [ 601.192619][T12641] RDX: 0000000000000072 RSI: 0000200000003140 RDI: 0000000000000003 [ 601.200640][T12641] RBP: 00007f18f7437b70 R08: 0000000000000000 R09: 0000000000000000 [ 601.208653][T12641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.216672][T12641] R13: 00007f18f7626038 R14: 00007f18f7625fa0 R15: 00007ffc0d0a6608 [ 601.224715][T12641] [ 601.448164][T12641] Mem-Info: [ 601.668573][T12641] active_anon:40893 inactive_anon:20033 isolated_anon:0 [ 601.668573][T12641] active_file:3901 inactive_file:40330 isolated_file:0 [ 601.668573][T12641] unevictable:768 dirty:134 writeback:0 [ 601.668573][T12641] slab_reclaimable:11315 slab_unreclaimable:98156 [ 601.668573][T12641] mapped:27449 shmem:55550 pagetables:1081 [ 601.668573][T12641] sec_pagetables:0 bounce:0 [ 601.668573][T12641] kernel_misc_reclaimable:0 [ 601.668573][T12641] free:1285006 free_pcp:5522 free_cma:0 [ 602.579817][T12641] Node 0 active_anon:152072kB inactive_anon:80132kB active_file:15604kB inactive_file:161120kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98396kB dirty:532kB writeback:0kB shmem:209264kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11900kB pagetables:4324kB sec_pagetables:0kB all_unreclaimable? no [ 602.613260][T12641] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 602.644861][T12641] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 602.673234][T12641] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 602.679175][T12641] Node 0 DMA32 free:1219096kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:152124kB inactive_anon:80132kB active_file:15604kB inactive_file:160296kB unevictable:1536kB writepending:536kB present:3129332kB managed:2567744kB mlocked:0kB bounce:0kB free_pcp:16596kB local_pcp:12804kB free_cma:0kB [ 602.686972][ T5096] Bluetooth: hci3: command 0x0405 tx timeout [ 602.713931][T12641] lowmem_reserve[]: 0 0 0 0 0 [ 602.721211][T12641] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 602.773081][T12641] lowmem_reserve[]: 0 0 0 0 0 [ 602.778070][T12641] Node 1 Normal free:3904584kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17376kB local_pcp:10656kB free_cma:0kB [ 602.807919][T12659] loop3: detected capacity change from 0 to 512 [ 602.814328][T12641] lowmem_reserve[]: 0 0 0 0 0 [ 602.819117][T12641] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 602.832069][T12641] Node 0 DMA32: 448*4kB (ME) 501*8kB (UME) 323*16kB (ME) 94*32kB (UME) 40*64kB (UME) 33*128kB (UME) 21*256kB (M) 14*512kB (UM) 2*1024kB (M) 6*2048kB (UME) 286*4096kB (UM) = 1219096kB [ 602.851327][T12641] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 602.863821][T12641] Node 1 Normal: 198*4kB (UE) 46*8kB (UE) 40*16kB (UE) 138*32kB (UE) 44*64kB (UME) 8*128kB (UME) 5*256kB (UE) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3904584kB [ 602.914996][T12659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.950762][T12659] ext4 filesystem being mounted at /489/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 602.960692][T12641] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 602.999932][T12641] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 603.030782][T12641] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 603.040828][T12641] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 603.063972][T12641] 97004 total pagecache pages [ 603.079212][T12641] 3 pages in swap cache [ 603.102699][T12641] Free swap = 117016kB [ 603.107468][T12641] Total swap = 124996kB [ 603.111683][T12641] 2097051 pages RAM [ 603.130430][T12641] 0 pages HighMem/MovableOnly [ 603.143043][T12641] 421729 pages reserved [ 603.147323][T12641] 0 pages cma reserved [ 603.205011][T12667] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 603.232812][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.458870][T12669] loop2: detected capacity change from 0 to 512 [ 603.478490][T12669] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 603.629465][T12669] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 603.699014][T12669] System zones: 1-12 [ 603.724944][T12669] EXT4-fs (loop2): 1 truncate cleaned up [ 603.764446][T12669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 604.238048][T12686] EXT4-fs error (device loop2): __ext4_expand_extra_isize:5994: inode #12: comm syz.2.2030: bad extra_isize 62 (inode size 256) [ 604.256061][T12686] EXT4-fs (loop2): Remounting filesystem read-only [ 604.971812][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.672250][T12695] loop0: detected capacity change from 0 to 512 [ 605.679758][T12695] EXT4-fs: Ignoring removed i_version option [ 605.685902][T12695] EXT4-fs: Ignoring removed nobh option [ 605.691635][T12695] ext4: Unknown parameter 'smackfsroot' [ 606.431396][T12509] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 606.533210][T12701] FAULT_INJECTION: forcing a failure. [ 606.533210][T12701] name failslab, interval 1, probability 0, space 0, times 0 [ 606.583163][T12701] CPU: 0 PID: 12701 Comm: syz.3.2038 Not tainted syzkaller #0 [ 606.590719][T12701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 606.600857][T12701] Call Trace: [ 606.604191][T12701] [ 606.607175][T12701] dump_stack_lvl+0x18c/0x250 [ 606.611926][T12701] ? show_regs_print_info+0x20/0x20 [ 606.617216][T12701] ? load_image+0x420/0x420 [ 606.621784][T12701] ? __might_sleep+0xe0/0xe0 [ 606.626446][T12701] ? __lock_acquire+0x7eb0/0x7eb0 [ 606.631563][T12701] should_fail_ex+0x394/0x4c0 [ 606.636347][T12701] should_failslab+0x9/0x20 [ 606.640896][T12701] slab_pre_alloc_hook+0x59/0x300 [ 606.645985][T12701] kmem_cache_alloc_lru+0x4d/0x2c0 [ 606.651156][T12701] ? sock_alloc_inode+0x28/0xc0 [ 606.656104][T12701] sock_alloc_inode+0x28/0xc0 [ 606.660838][T12701] ? sockfs_init_fs_context+0xb0/0xb0 [ 606.666269][T12701] new_inode_pseudo+0x63/0x1d0 [ 606.671096][T12701] __sock_create+0x12d/0x940 [ 606.675760][T12701] ? __might_fault+0xaa/0x120 [ 606.680537][T12701] ? __might_fault+0xc6/0x120 [ 606.685285][T12701] __sys_socketpair+0x1c1/0x550 [ 606.690218][T12701] __x64_sys_socketpair+0x9b/0xb0 [ 606.695432][T12701] do_syscall_64+0x55/0xb0 [ 606.699918][T12701] ? clear_bhb_loop+0x40/0x90 [ 606.704684][T12701] ? clear_bhb_loop+0x40/0x90 [ 606.709416][T12701] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 606.715355][T12701] RIP: 0033:0x7f8ce5f9fb19 [ 606.719816][T12701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.739642][T12701] RSP: 002b:00007f8ce6eee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 606.748101][T12701] RAX: ffffffffffffffda RBX: 00007f8ce6225fa0 RCX: 00007f8ce5f9fb19 [ 606.756121][T12701] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 606.764133][T12701] RBP: 00007f8ce6037b70 R08: 0000000000000000 R09: 0000000000000000 [ 606.772144][T12701] R10: 0000200000000800 R11: 0000000000000246 R12: 0000000000000000 [ 606.780147][T12701] R13: 00007f8ce6226038 R14: 00007f8ce6225fa0 R15: 00007ffe57e22d28 [ 606.788252][T12701] [ 606.823411][T12701] socket: no more sockets [ 607.153615][T12713] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 607.955136][ T5096] Bluetooth: hci3: command 0x0405 tx timeout [ 609.343606][T12733] FAULT_INJECTION: forcing a failure. [ 609.343606][T12733] name failslab, interval 1, probability 0, space 0, times 0 [ 609.395579][T12733] CPU: 0 PID: 12733 Comm: syz.0.2050 Not tainted syzkaller #0 [ 609.403151][T12733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 609.413266][T12733] Call Trace: [ 609.416601][T12733] [ 609.419582][T12733] dump_stack_lvl+0x18c/0x250 [ 609.424331][T12733] ? show_regs_print_info+0x20/0x20 [ 609.429583][T12733] ? load_image+0x420/0x420 [ 609.434145][T12733] ? __might_sleep+0xe0/0xe0 [ 609.438800][T12733] ? __lock_acquire+0x7eb0/0x7eb0 [ 609.443887][T12733] should_fail_ex+0x394/0x4c0 [ 609.448635][T12733] should_failslab+0x9/0x20 [ 609.453184][T12733] slab_pre_alloc_hook+0x59/0x300 [ 609.458260][T12733] kmem_cache_alloc_lru+0x4d/0x2c0 [ 609.463439][T12733] ? sock_alloc_inode+0x28/0xc0 [ 609.468382][T12733] sock_alloc_inode+0x28/0xc0 [ 609.473107][T12733] ? sockfs_init_fs_context+0xb0/0xb0 [ 609.478561][T12733] new_inode_pseudo+0x63/0x1d0 [ 609.483403][T12733] __sock_create+0x12d/0x940 [ 609.488049][T12733] ? __might_fault+0xaa/0x120 [ 609.492777][T12733] ? __might_fault+0xc6/0x120 [ 609.497526][T12733] __sys_socketpair+0x1c1/0x550 [ 609.502422][T12733] __x64_sys_socketpair+0x9b/0xb0 [ 609.507517][T12733] do_syscall_64+0x55/0xb0 [ 609.512000][T12733] ? clear_bhb_loop+0x40/0x90 [ 609.516744][T12733] ? clear_bhb_loop+0x40/0x90 [ 609.521493][T12733] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 609.527472][T12733] RIP: 0033:0x7f18f739fb19 [ 609.531946][T12733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.551625][T12733] RSP: 002b:00007f18f8305028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 609.560139][T12733] RAX: ffffffffffffffda RBX: 00007f18f7625fa0 RCX: 00007f18f739fb19 [ 609.568164][T12733] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 609.576215][T12733] RBP: 00007f18f7437b70 R08: 0000000000000000 R09: 0000000000000000 [ 609.584238][T12733] R10: 0000200000000800 R11: 0000000000000246 R12: 0000000000000000 [ 609.592263][T12733] R13: 00007f18f7626038 R14: 00007f18f7625fa0 R15: 00007ffc0d0a6608 [ 609.600342][T12733] [ 609.828789][T12733] socket: no more sockets [ 610.733999][T12746] loop1: detected capacity change from 0 to 512 [ 610.839524][T12746] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.884110][T12746] ext4 filesystem being mounted at /499/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 611.024389][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.301388][T12758] loop0: detected capacity change from 0 to 512 [ 611.308733][T12758] EXT4-fs: Ignoring removed i_version option [ 611.314857][T12758] EXT4-fs: Ignoring removed nobh option [ 611.320590][T12758] ext4: Unknown parameter 'smackfsroot' [ 612.152839][T12509] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 613.423136][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 614.075599][T12787] loop1: detected capacity change from 0 to 256 [ 614.220152][T12509] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 614.625400][T12787] loop1: detected capacity change from 0 to 256 [ 614.670523][T12787] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 614.703762][T12787] FAT-fs (loop1): bogus number of directory entries (1) [ 614.711051][T12787] FAT-fs (loop1): Can't find a valid FAT filesystem [ 615.193231][T10927] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 615.387045][T10927] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 615.413185][T10927] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 615.433204][T10927] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 615.469659][T10927] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 615.483097][T10927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 615.497263][T10927] usb 4-1: Product: syz [ 615.501851][T10927] usb 4-1: Manufacturer: syz [ 615.525153][T12784] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 615.535586][T10927] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 615.847033][T10927] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 616.406748][ T8] usb 4-1: USB disconnect, device number 9 [ 616.453537][ T8] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 616.496224][ T8] garmin_gps 4-1:1.0: device disconnected [ 616.763340][T12817] loop0: detected capacity change from 0 to 512 [ 616.770642][T12817] EXT4-fs: Ignoring removed i_version option [ 616.776802][T12817] EXT4-fs: Ignoring removed nobh option [ 616.783126][T12817] ext4: Unknown parameter 'smackfsroot' [ 617.291214][T12509] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 617.540901][T12823] loop1: detected capacity change from 0 to 512 [ 617.603400][T12823] EXT4-fs (loop1): Test dummy encryption mode enabled [ 617.658886][T12823] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.2075: inode has both inline data and extents flags [ 617.743667][T12823] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.2075: couldn't read orphan inode 15 (err -117) [ 617.846081][T12823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.994642][T12823] FAULT_INJECTION: forcing a failure. [ 617.994642][T12823] name failslab, interval 1, probability 0, space 0, times 0 [ 618.007600][T12823] CPU: 0 PID: 12823 Comm: syz.1.2075 Not tainted syzkaller #0 [ 618.015137][T12823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 618.025345][T12823] Call Trace: [ 618.028712][T12823] [ 618.031697][T12823] dump_stack_lvl+0x18c/0x250 [ 618.036540][T12823] ? show_regs_print_info+0x20/0x20 [ 618.041828][T12823] ? load_image+0x420/0x420 [ 618.046517][T12823] ? __ext4_mark_inode_dirty+0x50d/0x720 [ 618.052230][T12823] should_fail_ex+0x394/0x4c0 [ 618.056997][T12823] should_failslab+0x9/0x20 [ 618.061596][T12823] slab_pre_alloc_hook+0x59/0x300 [ 618.066708][T12823] kmem_cache_alloc+0x5a/0x2d0 [ 618.071558][T12823] ? __es_insert_extent+0x706/0x17b0 [ 618.076958][T12823] __es_insert_extent+0x706/0x17b0 [ 618.082177][T12823] ext4_es_insert_extent+0x5b0/0x2dd0 [ 618.087649][T12823] ? ext4_es_scan_clu+0x240/0x240 [ 618.092764][T12823] ? down_read_killable+0x340/0x340 [ 618.098045][T12823] ext4_map_blocks+0xd22/0x1a90 [ 618.102990][T12823] ? ext4_issue_zeroout+0x250/0x250 [ 618.108287][T12823] _ext4_get_block+0x1eb/0x480 [ 618.113121][T12823] ? percpu_ref_put+0x12/0x100 [ 618.118082][T12823] ? ext4_get_block+0x40/0x40 [ 618.122848][T12823] ext4_block_write_begin+0x55f/0x1540 [ 618.128479][T12823] ? ext4_es_is_delayed+0x40/0x40 [ 618.133627][T12823] ? folio_put+0xd0/0xd0 [ 618.137945][T12823] ? folio_mapping+0x1bd/0x4e0 [ 618.142893][T12823] ext4_write_begin+0x5ff/0x10b0 [ 618.147956][T12823] ? ext4_readahead+0x110/0x110 [ 618.152893][T12823] ? fault_in_readable+0xef/0x150 [ 618.158000][T12823] ? fault_in_iov_iter_readable+0xc3/0x300 [ 618.163879][T12823] generic_perform_write+0x2fe/0x5c0 [ 618.169251][T12823] ? generic_file_direct_write+0x3e0/0x3e0 [ 618.175136][T12823] ? file_modified_flags+0x230/0x260 [ 618.180494][T12823] ? ext4_write_checks+0x248/0x2c0 [ 618.185675][T12823] ext4_buffered_write_iter+0xd5/0x360 [ 618.191209][T12823] ext4_file_write_iter+0x1e7/0x1980 [ 618.196671][T12823] ? rcu_read_lock_any_held+0xb4/0x140 [ 618.202188][T12823] ? ext4_file_read_iter+0x660/0x660 [ 618.207554][T12823] vfs_write+0x474/0x9a0 [ 618.211887][T12823] ? file_end_write+0x250/0x250 [ 618.216857][T12823] ? __fget_files+0x3fc/0x460 [ 618.221623][T12823] ? __fdget+0x180/0x210 [ 618.225934][T12823] ? __x64_sys_pwrite64+0xf7/0x220 [ 618.231114][T12823] __x64_sys_pwrite64+0x198/0x220 [ 618.236214][T12823] ? ksys_pwrite64+0x1c0/0x1c0 [ 618.241057][T12823] ? lockdep_hardirqs_on+0x98/0x150 [ 618.246338][T12823] do_syscall_64+0x55/0xb0 [ 618.250848][T12823] ? clear_bhb_loop+0x40/0x90 [ 618.255598][T12823] ? clear_bhb_loop+0x40/0x90 [ 618.260351][T12823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 618.266341][T12823] RIP: 0033:0x7f4cb319fb19 [ 618.270828][T12823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.290492][T12823] RSP: 002b:00007f4cb13c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 618.298974][T12823] RAX: ffffffffffffffda RBX: 00007f4cb3426090 RCX: 00007f4cb319fb19 [ 618.307001][T12823] RDX: 000000000000fdef RSI: 0000200000000540 RDI: 0000000000000006 [ 618.315056][T12823] RBP: 00007f4cb3237b70 R08: 0000000000000000 R09: 0000000000000000 [ 618.323095][T12823] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000 [ 618.331115][T12823] R13: 00007f4cb3426128 R14: 00007f4cb3426090 R15: 00007ffe9312c4a8 [ 618.339174][T12823] [ 618.853116][ T5096] Bluetooth: hci3: command 0x0405 tx timeout [ 618.944099][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.659000][T12849] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 619.763091][ T5774] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 619.966276][ T5774] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 619.986753][ T5774] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 620.011575][ T5774] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 620.079122][ T5774] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 620.100812][ T5774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 620.128215][ T5774] usb 2-1: Product: syz [ 620.148759][ T5774] usb 2-1: Manufacturer: syz [ 620.190875][T12840] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 620.228654][ T5774] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 620.297829][ T5774] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 621.042757][ T27] usb 2-1: USB disconnect, device number 16 [ 621.117363][ T27] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 621.147825][ T27] garmin_gps 2-1:1.0: device disconnected [ 622.042870][T12871] netlink: 'syz.2.2092': attribute type 10 has an invalid length. [ 622.306778][T12875] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 622.829088][T12884] loop3: detected capacity change from 0 to 512 [ 622.837002][T12884] EXT4-fs: Ignoring removed i_version option [ 622.843370][T12884] EXT4-fs: Ignoring removed nobh option [ 622.849190][T12884] ext4: Unknown parameter 'smackfsroot' [ 623.236309][T12509] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 623.889793][T12895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.947047][T12895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.634615][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.641040][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.763674][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 624.865841][T12899] loop1: detected capacity change from 0 to 256 [ 625.941265][T12908] loop0: detected capacity change from 0 to 512 [ 625.993283][T12908] EXT4-fs (loop0): Test dummy encryption mode enabled [ 626.052076][T12908] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.2105: inode has both inline data and extents flags [ 626.094701][T12908] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.2105: couldn't read orphan inode 15 (err -117) [ 626.128584][T12916] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 626.142585][T12908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.314702][T12912] FAULT_INJECTION: forcing a failure. [ 626.314702][T12912] name failslab, interval 1, probability 0, space 0, times 0 [ 626.327582][T12912] CPU: 0 PID: 12912 Comm: syz.0.2105 Not tainted syzkaller #0 [ 626.335101][T12912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 626.345212][T12912] Call Trace: [ 626.348538][T12912] [ 626.351517][T12912] dump_stack_lvl+0x18c/0x250 [ 626.356266][T12912] ? show_regs_print_info+0x20/0x20 [ 626.361524][T12912] ? load_image+0x420/0x420 [ 626.366098][T12912] ? __ext4_mark_inode_dirty+0x50d/0x720 [ 626.371895][T12912] should_fail_ex+0x394/0x4c0 [ 626.376652][T12912] should_failslab+0x9/0x20 [ 626.381215][T12912] slab_pre_alloc_hook+0x59/0x300 [ 626.386333][T12912] kmem_cache_alloc+0x5a/0x2d0 [ 626.391156][T12912] ? __es_insert_extent+0x706/0x17b0 [ 626.396515][T12912] __es_insert_extent+0x706/0x17b0 [ 626.401719][T12912] ext4_es_insert_extent+0x5b0/0x2dd0 [ 626.407168][T12912] ? ext4_es_scan_clu+0x240/0x240 [ 626.412263][T12912] ? down_read_killable+0x340/0x340 [ 626.417560][T12912] ext4_map_blocks+0xd22/0x1a90 [ 626.422499][T12912] ? ext4_issue_zeroout+0x250/0x250 [ 626.427787][T12912] _ext4_get_block+0x1eb/0x480 [ 626.432623][T12912] ? percpu_ref_put+0x12/0x100 [ 626.437458][T12912] ? ext4_get_block+0x40/0x40 [ 626.442241][T12912] ext4_block_write_begin+0x55f/0x1540 [ 626.447788][T12912] ? ext4_es_is_delayed+0x40/0x40 [ 626.452889][T12912] ? folio_put+0xd0/0xd0 [ 626.457189][T12912] ? folio_mapping+0x1bd/0x4e0 [ 626.462031][T12912] ext4_write_begin+0x5ff/0x10b0 [ 626.467060][T12912] ? ext4_readahead+0x110/0x110 [ 626.471971][T12912] ? fault_in_readable+0xef/0x150 [ 626.477071][T12912] ? fault_in_iov_iter_readable+0xc3/0x300 [ 626.482966][T12912] generic_perform_write+0x2fe/0x5c0 [ 626.488335][T12912] ? generic_file_direct_write+0x3e0/0x3e0 [ 626.494209][T12912] ? file_modified_flags+0x230/0x260 [ 626.499567][T12912] ? ext4_write_checks+0x248/0x2c0 [ 626.504748][T12912] ext4_buffered_write_iter+0xd5/0x360 [ 626.510300][T12912] ext4_file_write_iter+0x1e7/0x1980 [ 626.515679][T12912] ? rcu_read_lock_any_held+0xb4/0x140 [ 626.521240][T12912] ? ext4_file_read_iter+0x660/0x660 [ 626.526700][T12912] vfs_write+0x474/0x9a0 [ 626.531025][T12912] ? file_end_write+0x250/0x250 [ 626.535954][T12912] ? __fget_files+0x3fc/0x460 [ 626.540707][T12912] ? __fdget+0x180/0x210 [ 626.545014][T12912] ? __x64_sys_pwrite64+0xf7/0x220 [ 626.550205][T12912] __x64_sys_pwrite64+0x198/0x220 [ 626.555316][T12912] ? ksys_pwrite64+0x1c0/0x1c0 [ 626.560156][T12912] ? lockdep_hardirqs_on+0x98/0x150 [ 626.565456][T12912] do_syscall_64+0x55/0xb0 [ 626.569959][T12912] ? clear_bhb_loop+0x40/0x90 [ 626.574706][T12912] ? clear_bhb_loop+0x40/0x90 [ 626.579457][T12912] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 626.585414][T12912] RIP: 0033:0x7f18f739fb19 [ 626.589893][T12912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.609555][T12912] RSP: 002b:00007f18f82d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 626.618064][T12912] RAX: ffffffffffffffda RBX: 00007f18f7626090 RCX: 00007f18f739fb19 [ 626.626181][T12912] RDX: 000000000000fdef RSI: 0000200000000540 RDI: 0000000000000006 [ 626.634226][T12912] RBP: 00007f18f7437b70 R08: 0000000000000000 R09: 0000000000000000 [ 626.642258][T12912] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000 [ 626.650297][T12912] R13: 00007f18f7626128 R14: 00007f18f7626090 R15: 00007ffc0d0a6608 [ 626.658347][T12912] [ 626.761266][T12922] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2109'. [ 627.182288][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.669061][T12933] syzkaller1: entered promiscuous mode [ 627.692071][T12933] syzkaller1: entered allmulticast mode [ 628.087413][T12944] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 628.292172][T12949] loop2: detected capacity change from 0 to 128 [ 628.304834][T12949] FAT-fs (loop2): Unrecognized mount option "18446744073709551615" or missing value [ 628.625229][T12954] loop3: detected capacity change from 0 to 512 [ 628.632543][T12954] EXT4-fs: Ignoring removed i_version option [ 628.638707][T12954] EXT4-fs: Ignoring removed nobh option [ 628.644511][T12954] ext4: Unknown parameter 'smackfsroot' [ 628.864589][T12949] loop2: detected capacity change from 0 to 512 [ 628.882656][T12538] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 628.924283][T12949] EXT4-fs (loop2): Test dummy encryption mode enabled [ 628.978826][T12949] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.2119: inode has both inline data and extents flags [ 629.009740][T12949] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.2119: couldn't read orphan inode 15 (err -117) [ 629.103489][T12949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.326933][T12957] FAULT_INJECTION: forcing a failure. [ 629.326933][T12957] name failslab, interval 1, probability 0, space 0, times 0 [ 629.353064][T12957] CPU: 0 PID: 12957 Comm: syz.2.2119 Not tainted syzkaller #0 [ 629.360624][T12957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 629.370747][T12957] Call Trace: [ 629.374072][T12957] [ 629.377055][T12957] dump_stack_lvl+0x18c/0x250 [ 629.381815][T12957] ? show_regs_print_info+0x20/0x20 [ 629.387105][T12957] ? load_image+0x420/0x420 [ 629.391686][T12957] ? __might_sleep+0xe0/0xe0 [ 629.396385][T12957] ? __lock_acquire+0x7eb0/0x7eb0 [ 629.401501][T12957] should_fail_ex+0x394/0x4c0 [ 629.406259][T12957] should_failslab+0x9/0x20 [ 629.410829][T12957] slab_pre_alloc_hook+0x59/0x300 [ 629.415967][T12957] kmem_cache_alloc+0x5a/0x2d0 [ 629.420972][T12957] ? ext4_mb_new_blocks+0x547/0x42f0 [ 629.426371][T12957] ext4_mb_new_blocks+0x547/0x42f0 [ 629.431593][T12957] ? ext4_get_branch+0x5cb/0x730 [ 629.436611][T12957] ? ext4_mb_release_inode_pa+0xa30/0xa30 [ 629.442406][T12957] ? ext4_block_to_path+0x382/0x6f0 [ 629.447695][T12957] ext4_ind_map_blocks+0xf31/0x22a0 [ 629.452980][T12957] ? get_orlov_stats+0x4c0/0x4c0 [ 629.458037][T12957] ? down_read_killable+0x340/0x340 [ 629.463305][T12957] ext4_map_blocks+0x984/0x1a90 [ 629.468246][T12957] ? ext4_issue_zeroout+0x250/0x250 [ 629.473530][T12957] _ext4_get_block+0x1eb/0x480 [ 629.478364][T12957] ? percpu_ref_put+0x12/0x100 [ 629.483285][T12957] ? ext4_get_block+0x40/0x40 [ 629.488058][T12957] ext4_block_write_begin+0x55f/0x1540 [ 629.493623][T12957] ? ext4_es_is_delayed+0x40/0x40 [ 629.498733][T12957] ? folio_put+0xd0/0xd0 [ 629.503054][T12957] ? folio_mapping+0x1bd/0x4e0 [ 629.508017][T12957] ext4_write_begin+0x5ff/0x10b0 [ 629.513059][T12957] ? ext4_readahead+0x110/0x110 [ 629.518694][T12957] ? fault_in_readable+0xef/0x150 [ 629.523810][T12957] ? fault_in_iov_iter_readable+0xc3/0x300 [ 629.529698][T12957] generic_perform_write+0x2fe/0x5c0 [ 629.535096][T12957] ? generic_file_direct_write+0x3e0/0x3e0 [ 629.540979][T12957] ? file_modified_flags+0x230/0x260 [ 629.546431][T12957] ? ext4_write_checks+0x248/0x2c0 [ 629.551744][T12957] ext4_buffered_write_iter+0xd5/0x360 [ 629.557276][T12957] ext4_file_write_iter+0x1e7/0x1980 [ 629.562857][T12957] ? rcu_read_lock_any_held+0xb4/0x140 [ 629.568407][T12957] ? ext4_file_read_iter+0x660/0x660 [ 629.573868][T12957] vfs_write+0x474/0x9a0 [ 629.578185][T12957] ? file_end_write+0x250/0x250 [ 629.583120][T12957] ? __fget_files+0x3fc/0x460 [ 629.587881][T12957] ? __fdget+0x180/0x210 [ 629.592187][T12957] ? __x64_sys_pwrite64+0xf7/0x220 [ 629.597374][T12957] __x64_sys_pwrite64+0x198/0x220 [ 629.602487][T12957] ? ksys_pwrite64+0x1c0/0x1c0 [ 629.607330][T12957] ? lockdep_hardirqs_on+0x98/0x150 [ 629.612598][T12957] do_syscall_64+0x55/0xb0 [ 629.617076][T12957] ? clear_bhb_loop+0x40/0x90 [ 629.621993][T12957] ? clear_bhb_loop+0x40/0x90 [ 629.626737][T12957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 629.632689][T12957] RIP: 0033:0x7f551299fb19 [ 629.637605][T12957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.657285][T12957] RSP: 002b:00007f551392a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 629.665862][T12957] RAX: ffffffffffffffda RBX: 00007f5512c26090 RCX: 00007f551299fb19 [ 629.673899][T12957] RDX: 000000000000fdef RSI: 0000200000000540 RDI: 0000000000000005 [ 629.682026][T12957] RBP: 00007f5512a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 629.690190][T12957] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000 [ 629.698336][T12957] R13: 00007f5512c26128 R14: 00007f5512c26090 R15: 00007ffe44a43b58 [ 629.706398][T12957] [ 630.159589][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.379684][T12981] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 630.683560][ T5096] Bluetooth: hci3: command 0x0405 tx timeout [ 631.329951][T12996] loop2: detected capacity change from 0 to 512 [ 631.337388][T12996] EXT4-fs: Ignoring removed i_version option [ 631.343510][T12996] EXT4-fs: Ignoring removed nobh option [ 631.349332][T12996] ext4: Unknown parameter 'smackfsroot' [ 631.842610][T12509] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 632.224371][T13005] loop0: detected capacity change from 0 to 128 [ 632.273809][T13005] FAT-fs (loop0): Unrecognized mount option "18446744073709551615" or missing value [ 633.098720][T13008] FAULT_INJECTION: forcing a failure. [ 633.098720][T13008] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 633.123321][T13008] CPU: 0 PID: 13008 Comm: syz.0.2136 Not tainted syzkaller #0 [ 633.130885][T13008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 633.141024][T13008] Call Trace: [ 633.144381][T13008] [ 633.147364][T13008] dump_stack_lvl+0x18c/0x250 [ 633.152116][T13008] ? show_regs_print_info+0x20/0x20 [ 633.157384][T13008] ? load_image+0x420/0x420 [ 633.161956][T13008] ? __lock_acquire+0x7eb0/0x7eb0 [ 633.167056][T13008] should_fail_ex+0x394/0x4c0 [ 633.171812][T13008] prepare_alloc_pages+0x1e1/0x5b0 [ 633.176991][T13008] __alloc_pages+0x134/0x460 [ 633.181643][T13008] ? zone_statistics+0x170/0x170 [ 633.186662][T13008] __folio_alloc+0x10/0x20 [ 633.191132][T13008] vma_alloc_folio+0x474/0x8f0 [ 633.195960][T13008] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 633.201840][T13008] shmem_alloc_folio+0x1a9/0x2a0 [ 633.206844][T13008] ? folio_put+0xd0/0xd0 [ 633.211260][T13008] ? __vm_enough_memory+0x11a/0x370 [ 633.216541][T13008] ? shmem_inode_acct_block+0x35e/0x460 [ 633.222168][T13008] shmem_alloc_and_acct_folio+0x1cb/0x6c0 [ 633.227972][T13008] ? put_swap_device+0x230/0x230 [ 633.233019][T13008] ? xas_load+0x12b/0x140 [ 633.236487][T13013] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 633.237394][T13008] ? filemap_get_entry+0xce/0x3f0 [ 633.253547][T13008] ? filemap_get_entry+0xce/0x3f0 [ 633.258642][T13008] ? filemap_get_entry+0x375/0x3f0 [ 633.263854][T13008] ? page_cache_prev_miss+0x390/0x390 [ 633.269286][T13008] ? mark_lock+0x94/0x320 [ 633.273694][T13008] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 633.279776][T13008] ? do_user_addr_fault+0x61e/0x13e0 [ 633.285139][T13008] ? lock_chain_count+0x20/0x20 [ 633.290075][T13008] shmem_get_folio_gfp+0xe1d/0x2b40 [ 633.295373][T13008] shmem_write_begin+0xf2/0x430 [ 633.300304][T13008] generic_perform_write+0x2fe/0x5c0 [ 633.305718][T13008] ? generic_file_direct_write+0x3e0/0x3e0 [ 633.311610][T13008] ? file_update_time+0x192/0x1a0 [ 633.316716][T13008] shmem_file_write_iter+0xfb/0x120 [ 633.321994][T13008] vfs_write+0x474/0x9a0 [ 633.326330][T13008] ? file_end_write+0x250/0x250 [ 633.331257][T13008] ? __fget_files+0x3fc/0x460 [ 633.336057][T13008] ? __fdget+0x180/0x210 [ 633.340367][T13008] ? __x64_sys_pwrite64+0xf7/0x220 [ 633.345549][T13008] __x64_sys_pwrite64+0x198/0x220 [ 633.350651][T13008] ? ksys_pwrite64+0x1c0/0x1c0 [ 633.355518][T13008] ? lockdep_hardirqs_on+0x98/0x150 [ 633.360779][T13008] do_syscall_64+0x55/0xb0 [ 633.365259][T13008] ? clear_bhb_loop+0x40/0x90 [ 633.370014][T13008] ? clear_bhb_loop+0x40/0x90 [ 633.374770][T13008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 633.380727][T13008] RIP: 0033:0x7f18f739fb19 [ 633.385192][T13008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.405626][T13008] RSP: 002b:00007f18f82e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 633.414104][T13008] RAX: ffffffffffffffda RBX: 00007f18f7626090 RCX: 00007f18f739fb19 [ 633.422130][T13008] RDX: 000000000000fdef RSI: 0000200000000540 RDI: 0000000000000004 [ 633.430155][T13008] RBP: 00007f18f7437b70 R08: 0000000000000000 R09: 0000000000000000 [ 633.438191][T13008] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000 [ 633.446223][T13008] R13: 00007f18f7626128 R14: 00007f18f7626090 R15: 00007ffc0d0a6608 [ 633.454271][T13008] [ 633.486815][ T5096] Bluetooth: hci3: command 0x0405 tx timeout [ 633.579285][T13019] loop0: detected capacity change from 0 to 4096 [ 635.355380][T13042] loop0: detected capacity change from 0 to 512 [ 635.362835][T13042] EXT4-fs: Ignoring removed i_version option [ 635.369060][T13042] EXT4-fs: Ignoring removed nobh option [ 635.374861][T13042] ext4: Unknown parameter 'smackfsroot' [ 635.947387][T12509] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 636.345353][T13046] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 636.392769][T13048] loop1: detected capacity change from 0 to 512 [ 636.499879][T13048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.546349][T13048] ext4 filesystem being mounted at /525/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 636.632477][T13057] process 'syz.2.2152' launched './file0' with NULL argv: empty string added [ 636.716509][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.870919][ T5786] EXT4-fs error (device sda1): ext4_lookup:1860: inode #529: comm syz-executor: iget: checksum invalid [ 636.892211][ T5786] EXT4-fs error (device sda1): ext4_lookup:1860: inode #529: comm syz-executor: iget: checksum invalid [ 637.327173][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 638.137909][ T6229] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.695143][ T6229] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.819460][ T6229] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.975921][ T6229] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.027927][T13080] loop0: detected capacity change from 0 to 512 [ 639.046053][T13081] loop1: detected capacity change from 0 to 128 [ 639.064733][T13081] FAT-fs (loop1): Unrecognized mount option "18446744073709551615" or missing value [ 639.075091][T13080] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 639.138923][T13080] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 639.183272][T13080] System zones: 1-12 [ 639.196722][T12538] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 639.223453][T13080] EXT4-fs (loop0): 1 truncate cleaned up [ 639.230600][T13080] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 639.309094][T13087] loop2: detected capacity change from 0 to 512 [ 639.401913][T13087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.604107][T13087] ext4 filesystem being mounted at /549/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 639.625945][T13090] loop1: detected capacity change from 0 to 512 [ 639.683788][T13090] EXT4-fs (loop1): Test dummy encryption mode enabled [ 639.882594][T13095] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5994: inode #12: comm syz.0.2160: bad extra_isize 62 (inode size 256) [ 639.901794][T13095] EXT4-fs (loop0): Remounting filesystem read-only [ 639.917286][T13090] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.2161: inode has both inline data and extents flags [ 640.203105][T13090] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.2161: couldn't read orphan inode 15 (err -117) [ 640.316109][T13090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.353626][ T6229] tipc: Left network mode [ 640.496243][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.648831][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.674671][ T5096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 640.700558][ T5096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 640.724335][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 640.774933][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 640.793352][ T5096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 640.807695][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 641.783738][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.292001][T13140] loop1: detected capacity change from 0 to 512 [ 644.409134][T13140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.454281][T13140] ext4 filesystem being mounted at /531/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 644.483325][ T5096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 644.501967][ T5096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 644.511121][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 644.529449][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 644.539010][ T5096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 644.547658][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 646.058970][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.599661][T13188] loop1: detected capacity change from 0 to 512 [ 649.637157][T13188] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 649.753552][T13188] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 649.802820][T13188] System zones: 1-12 [ 649.851850][T13188] EXT4-fs (loop1): 1 truncate cleaned up [ 649.860199][T13188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 649.893334][ T6229] hsr_slave_0: left promiscuous mode [ 650.003132][ T6229] hsr_slave_1: left promiscuous mode [ 650.069536][ T6229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.108159][ T6229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.160310][ T6229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.194214][ T6229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.273640][ T6229] bridge_slave_1: left allmulticast mode [ 650.279378][ T6229] bridge_slave_1: left promiscuous mode [ 650.337708][ T6229] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.350176][ T6229] bridge_slave_0: left allmulticast mode [ 650.355977][ T6229] bridge_slave_0: left promiscuous mode [ 650.362016][ T6229] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.478187][T13206] EXT4-fs error (device loop1): __ext4_expand_extra_isize:5994: inode #12: comm syz.1.2180: bad extra_isize 62 (inode size 256) [ 650.519560][T13206] EXT4-fs (loop1): Remounting filesystem read-only [ 650.958821][T13212] FAULT_INJECTION: forcing a failure. [ 650.958821][T13212] name failslab, interval 1, probability 0, space 0, times 0 [ 651.046239][ T5096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 651.058415][ T5096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 651.069535][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 651.078319][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 651.088003][ T5096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 651.095590][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 651.115626][T13212] CPU: 1 PID: 13212 Comm: syz.2.2184 Not tainted syzkaller #0 [ 651.123203][T13212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 651.133325][T13212] Call Trace: [ 651.136670][T13212] [ 651.139663][T13212] dump_stack_lvl+0x18c/0x250 [ 651.144427][T13212] ? show_regs_print_info+0x20/0x20 [ 651.149711][T13212] ? load_image+0x420/0x420 [ 651.154338][T13212] ? __lock_acquire+0x7eb0/0x7eb0 [ 651.159457][T13212] should_fail_ex+0x394/0x4c0 [ 651.164216][T13212] should_failslab+0x9/0x20 [ 651.168788][T13212] slab_pre_alloc_hook+0x59/0x300 [ 651.173889][T13212] ? lookup_mnt+0x580/0x580 [ 651.178473][T13212] ? get_mountpoint+0x205/0x440 [ 651.183407][T13212] __kmem_cache_alloc_node+0x53/0x260 [ 651.188865][T13212] ? get_mountpoint+0x205/0x440 [ 651.193796][T13212] kmalloc_trace+0x2a/0xe0 [ 651.198303][T13212] get_mountpoint+0x205/0x440 [ 651.203098][T13212] do_lock_mount+0x441/0x530 [ 651.207783][T13212] ? mnt_warn_timestamp_expiry+0x2c0/0x2c0 [ 651.213666][T13212] ? do_raw_spin_unlock+0x121/0x230 [ 651.218974][T13212] ? ktime_get_real_seconds+0x9/0x20 [ 651.224344][T13212] ? mnt_warn_timestamp_expiry+0x12f/0x2c0 [ 651.230226][T13212] do_new_mount+0x385/0xa60 [ 651.234810][T13212] __se_sys_mount+0x2e7/0x3d0 [ 651.239576][T13212] ? __x64_sys_mount+0xc0/0xc0 [ 651.244395][T13212] ? lockdep_hardirqs_on+0x98/0x150 [ 651.249641][T13212] ? __x64_sys_mount+0x20/0xc0 [ 651.254446][T13212] do_syscall_64+0x55/0xb0 [ 651.258913][T13212] ? clear_bhb_loop+0x40/0x90 [ 651.263650][T13212] ? clear_bhb_loop+0x40/0x90 [ 651.268379][T13212] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 651.274312][T13212] RIP: 0033:0x7f551299fb19 [ 651.279039][T13212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.298704][T13212] RSP: 002b:00007f551395d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 651.307173][T13212] RAX: ffffffffffffffda RBX: 00007f5512c25fa0 RCX: 00007f551299fb19 [ 651.315224][T13212] RDX: 0000200000000800 RSI: 00002000000007c0 RDI: 0000000000000000 [ 651.323259][T13212] RBP: 00007f5512a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 651.331294][T13212] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.339329][T13212] R13: 00007f5512c26038 R14: 00007f5512c25fa0 R15: 00007ffe44a43b58 [ 651.347366][T13212] [ 651.381686][ T6229] veth1_macvtap: left promiscuous mode [ 651.401747][ T6229] veth0_macvtap: left promiscuous mode [ 651.411192][ T6229] veth1_vlan: left promiscuous mode [ 651.422177][ T6229] veth0_vlan: left promiscuous mode [ 651.632425][T13218] loop2: detected capacity change from 0 to 128 [ 651.664483][T13218] FAT-fs (loop2): Unrecognized mount option "18446744073709551615" or missing value [ 651.869492][T13220] loop2: detected capacity change from 0 to 512 [ 651.899590][T13220] EXT4-fs (loop2): Test dummy encryption mode enabled [ 651.947407][T13220] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.2185: inode has both inline data and extents flags [ 652.038177][T13220] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.2185: couldn't read orphan inode 15 (err -117) [ 652.057601][T13220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.305424][ T6229] bond1 (unregistering): Released all slaves [ 652.679458][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.047097][ T5096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 653.066231][ T5096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 653.077627][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 653.086831][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 653.096555][ T5096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 653.104631][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 654.760253][ T6229] team0 (unregistering): Port device team_slave_1 removed [ 655.633785][ T6229] team0 (unregistering): Port device team_slave_0 removed [ 655.853501][ T6229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.102489][ T6229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 656.330529][ T5096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 656.341044][ T5096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 656.350042][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 656.361895][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 656.370724][ T5096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 656.378244][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 657.734138][ T6229] bond0 (unregistering): Released all slaves [ 658.041621][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.653070][T13283] capability: warning: `syz.0.2197' uses 32-bit capabilities (legacy support in use) [ 659.122710][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 659.136428][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 659.145905][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 659.178323][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 659.195545][ T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 659.205070][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 659.224177][T13295] loop2: detected capacity change from 0 to 512 [ 659.257071][T13295] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 659.287547][T13295] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 659.325793][T13295] System zones: 1-12 [ 659.388816][T13295] EXT4-fs (loop2): 1 truncate cleaned up [ 659.405058][T13295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 659.956390][T13303] EXT4-fs error (device loop2): __ext4_expand_extra_isize:5994: inode #12: comm syz.2.2202: bad extra_isize 62 (inode size 256) [ 659.971520][T13303] EXT4-fs (loop2): Remounting filesystem read-only [ 660.689200][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.313107][ T5774] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 661.377261][T13318] loop1: detected capacity change from 0 to 128 [ 661.395153][T13318] FAT-fs (loop1): Unrecognized mount option "18446744073709551615" or missing value [ 661.515274][ T5774] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 661.535354][ T5774] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 661.555358][ T5096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 661.569040][ T5096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 661.575086][ T5774] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 661.593328][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 661.603221][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 661.609249][T13323] loop1: detected capacity change from 0 to 512 [ 661.620214][ T5096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 661.628055][ T5774] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 661.638645][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 661.645949][ T5774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 661.659530][T13323] EXT4-fs (loop1): Test dummy encryption mode enabled [ 661.696582][ T5774] usb 3-1: Product: syz [ 661.700828][ T5774] usb 3-1: Manufacturer: syz [ 661.722535][T13323] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.2207: inode has both inline data and extents flags [ 661.746939][T13323] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.2207: couldn't read orphan inode 15 (err -117) [ 661.761862][T13309] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 661.774385][ T5774] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 661.789589][T13323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.811906][ T5774] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 661.959607][T13323] FAULT_INJECTION: forcing a failure. [ 661.959607][T13323] name failslab, interval 1, probability 0, space 0, times 0 [ 662.003191][T13323] CPU: 1 PID: 13323 Comm: syz.1.2207 Not tainted syzkaller #0 [ 662.010758][T13323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 662.020855][T13323] Call Trace: [ 662.024176][T13323] [ 662.027150][T13323] dump_stack_lvl+0x18c/0x250 [ 662.031880][T13323] ? show_regs_print_info+0x20/0x20 [ 662.037121][T13323] ? load_image+0x420/0x420 [ 662.041663][T13323] ? __might_sleep+0xe0/0xe0 [ 662.046317][T13323] ? __lock_acquire+0x7eb0/0x7eb0 [ 662.051384][T13323] should_fail_ex+0x394/0x4c0 [ 662.056104][T13323] should_failslab+0x9/0x20 [ 662.060640][T13323] slab_pre_alloc_hook+0x59/0x300 [ 662.065707][T13323] kmem_cache_alloc+0x5a/0x2d0 [ 662.070529][T13323] ? ext4_mb_new_blocks+0x547/0x42f0 [ 662.075861][T13323] ext4_mb_new_blocks+0x547/0x42f0 [ 662.081035][T13323] ? ext4_get_branch+0x5cb/0x730 [ 662.086015][T13323] ? ext4_mb_release_inode_pa+0xa30/0xa30 [ 662.092163][T13323] ? ext4_block_to_path+0x382/0x6f0 [ 662.097464][T13323] ext4_ind_map_blocks+0xf31/0x22a0 [ 662.102822][T13323] ? get_orlov_stats+0x4c0/0x4c0 [ 662.107843][T13323] ? down_read_killable+0x340/0x340 [ 662.113099][T13323] ext4_map_blocks+0x984/0x1a90 [ 662.118028][T13323] ? ext4_issue_zeroout+0x250/0x250 [ 662.123292][T13323] _ext4_get_block+0x1eb/0x480 [ 662.128140][T13323] ? percpu_ref_put+0x12/0x100 [ 662.132957][T13323] ? ext4_get_block+0x40/0x40 [ 662.137977][T13323] ext4_block_write_begin+0x55f/0x1540 [ 662.143488][T13323] ? ext4_es_is_delayed+0x40/0x40 [ 662.148590][T13323] ? folio_put+0xd0/0xd0 [ 662.153051][T13323] ? folio_mapping+0x1bd/0x4e0 [ 662.157891][T13323] ext4_write_begin+0x5ff/0x10b0 [ 662.162894][T13323] ? ext4_readahead+0x110/0x110 [ 662.167839][T13323] ? fault_in_readable+0xef/0x150 [ 662.172911][T13323] ? fault_in_iov_iter_readable+0xc3/0x300 [ 662.178762][T13323] generic_perform_write+0x2fe/0x5c0 [ 662.184120][T13323] ? generic_file_direct_write+0x3e0/0x3e0 [ 662.189964][T13323] ? file_modified_flags+0x230/0x260 [ 662.195351][T13323] ? ext4_write_checks+0x248/0x2c0 [ 662.200539][T13323] ext4_buffered_write_iter+0xd5/0x360 [ 662.206072][T13323] ext4_file_write_iter+0x1e7/0x1980 [ 662.211437][T13323] ? rcu_read_lock_any_held+0xb4/0x140 [ 662.216948][T13323] ? ext4_file_read_iter+0x660/0x660 [ 662.222392][T13323] vfs_write+0x474/0x9a0 [ 662.226705][T13323] ? file_end_write+0x250/0x250 [ 662.231613][T13323] ? __fget_files+0x3fc/0x460 [ 662.236342][T13323] ? __fdget+0x180/0x210 [ 662.240626][T13323] ? __x64_sys_pwrite64+0xf7/0x220 [ 662.245798][T13323] __x64_sys_pwrite64+0x198/0x220 [ 662.250875][T13323] ? ksys_pwrite64+0x1c0/0x1c0 [ 662.255698][T13323] ? lockdep_hardirqs_on+0x98/0x150 [ 662.260939][T13323] do_syscall_64+0x55/0xb0 [ 662.265407][T13323] ? clear_bhb_loop+0x40/0x90 [ 662.270128][T13323] ? clear_bhb_loop+0x40/0x90 [ 662.274851][T13323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 662.280788][T13323] RIP: 0033:0x7f4cb319fb19 [ 662.285580][T13323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.305326][T13323] RSP: 002b:00007f4cb13c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 662.313782][T13323] RAX: ffffffffffffffda RBX: 00007f4cb3426090 RCX: 00007f4cb319fb19 [ 662.321823][T13323] RDX: 000000000000fdef RSI: 0000200000000540 RDI: 0000000000000006 [ 662.329844][T13323] RBP: 00007f4cb3237b70 R08: 0000000000000000 R09: 0000000000000000 [ 662.337848][T13323] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000 [ 662.345852][T13323] R13: 00007f4cb3426128 R14: 00007f4cb3426090 R15: 00007ffe9312c4a8 [ 662.353901][T13323] [ 662.643061][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.908779][ T5878] usb 3-1: USB disconnect, device number 8 [ 662.929800][ T5878] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 662.952334][ T5878] garmin_gps 3-1:1.0: device disconnected [ 663.581515][T13337] FAULT_INJECTION: forcing a failure. [ 663.581515][T13337] name failslab, interval 1, probability 0, space 0, times 0 [ 663.623237][T13337] CPU: 1 PID: 13337 Comm: syz.2.2210 Not tainted syzkaller #0 [ 663.630815][T13337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 663.640932][T13337] Call Trace: [ 663.644252][T13337] [ 663.647220][T13337] dump_stack_lvl+0x18c/0x250 [ 663.651963][T13337] ? show_regs_print_info+0x20/0x20 [ 663.657224][T13337] ? load_image+0x420/0x420 [ 663.661808][T13337] ? __lock_acquire+0x7eb0/0x7eb0 [ 663.666893][T13337] should_fail_ex+0x394/0x4c0 [ 663.671620][T13337] should_failslab+0x9/0x20 [ 663.676238][T13337] slab_pre_alloc_hook+0x59/0x300 [ 663.681536][T13337] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 663.687021][T13337] ? igmpv3_add_delrec+0xbe/0x7c0 [ 663.692339][T13337] __kmem_cache_alloc_node+0x53/0x260 [ 663.697968][T13337] ? igmpv3_add_delrec+0xbe/0x7c0 [ 663.703424][T13337] kmalloc_trace+0x2a/0xe0 [ 663.708206][T13337] igmpv3_add_delrec+0xbe/0x7c0 [ 663.713214][T13337] __igmp_group_dropped+0x6db/0x8e0 [ 663.718468][T13337] ? ip_mc_hash_remove+0x200/0x200 [ 663.723630][T13337] ? lockdep_rtnl_is_held+0x26/0x30 [ 663.728867][T13337] ? ip_mc_hash_remove+0x1c9/0x200 [ 663.734110][T13337] __ip_mc_dec_group+0x1f4/0x2d0 [ 663.739110][T13337] ip_mc_leave_group+0x3f9/0x4c0 [ 663.744097][T13337] ip_mc_msfilter+0x24f/0xa90 [ 663.748841][T13337] do_ip_setsockopt+0x2810/0x2d50 [ 663.754104][T13337] ? ip_sock_set_pktinfo+0x30/0x30 [ 663.759263][T13337] ? aa_sk_perm+0x7bb/0x8e0 [ 663.763809][T13337] ? aa_af_perm+0x330/0x330 [ 663.768362][T13337] ? __fget_files+0x28/0x460 [ 663.772993][T13337] ? aa_sock_opt_perm+0x74/0x100 [ 663.777976][T13337] ip_setsockopt+0x61/0x110 [ 663.782513][T13337] ? sock_common_recvmsg+0x190/0x190 [ 663.787849][T13337] do_sock_setsockopt+0x175/0x1a0 [ 663.792907][T13337] ? __fdget+0x180/0x210 [ 663.797222][T13337] __x64_sys_setsockopt+0x182/0x200 [ 663.802462][T13337] do_syscall_64+0x55/0xb0 [ 663.806921][T13337] ? clear_bhb_loop+0x40/0x90 [ 663.811642][T13337] ? clear_bhb_loop+0x40/0x90 [ 663.816379][T13337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 663.822311][T13337] RIP: 0033:0x7f551299fb19 [ 663.826782][T13337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.846519][T13337] RSP: 002b:00007f551395d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 663.854973][T13337] RAX: ffffffffffffffda RBX: 00007f5512c25fa0 RCX: 00007f551299fb19 [ 663.863151][T13337] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000003 [ 663.871151][T13337] RBP: 00007f5512a37b70 R08: 0000000000000057 R09: 0000000000000000 [ 663.879243][T13337] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 663.887282][T13337] R13: 00007f5512c26038 R14: 00007f5512c25fa0 R15: 00007ffe44a43b58 [ 663.895309][T13337] [ 664.948917][ T5096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 664.960441][ T5096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 664.970369][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 664.989307][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 665.013192][ T5096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 665.020933][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 665.312163][T13361] loop1: detected capacity change from 0 to 128 [ 665.326980][T13361] FAT-fs (loop1): Unrecognized mount option "18446744073709551615" or missing value [ 665.587600][T13361] loop1: detected capacity change from 0 to 512 [ 665.640484][T13361] EXT4-fs (loop1): Test dummy encryption mode enabled [ 665.677158][T13361] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.2218: inode has both inline data and extents flags [ 665.696842][T13361] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.2218: couldn't read orphan inode 15 (err -117) [ 665.711973][T13361] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.815241][T13363] FAULT_INJECTION: forcing a failure. [ 665.815241][T13363] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 665.828634][T13363] CPU: 1 PID: 13363 Comm: syz.1.2218 Not tainted syzkaller #0 [ 665.836146][T13363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 665.846316][T13363] Call Trace: [ 665.849624][T13363] [ 665.852590][T13363] dump_stack_lvl+0x18c/0x250 [ 665.857317][T13363] ? show_regs_print_info+0x20/0x20 [ 665.862554][T13363] ? load_image+0x420/0x420 [ 665.867094][T13363] ? __lock_acquire+0x7eb0/0x7eb0 [ 665.872161][T13363] should_fail_ex+0x394/0x4c0 [ 665.876875][T13363] prepare_alloc_pages+0x1e1/0x5b0 [ 665.882054][T13363] __alloc_pages+0x134/0x460 [ 665.886717][T13363] ? zone_statistics+0x170/0x170 [ 665.891698][T13363] ? __lock_acquire+0x7eb0/0x7eb0 [ 665.896859][T13363] ? alloc_pages+0x4e1/0x740 [ 665.901499][T13363] ? xas_load+0x11d/0x140 [ 665.906155][T13363] folio_alloc+0x1e/0x30 [ 665.910559][T13363] filemap_alloc_folio+0xdf/0x490 [ 665.915988][T13363] ? filemap_add_folio+0x3d0/0x3d0 [ 665.921173][T13363] ? __ext4_handle_dirty_metadata+0x2df/0x7f0 [ 665.927318][T13363] __filemap_get_folio+0x3fb/0xbe0 [ 665.932484][T13363] ext4_write_begin+0x2d8/0x10b0 [ 665.937496][T13363] ? __ext4_journal_stop+0x34/0x190 [ 665.942730][T13363] ? __might_sleep+0xe0/0xe0 [ 665.947378][T13363] ? ext4_write_end+0x83e/0xb80 [ 665.952368][T13363] ? ext4_readahead+0x110/0x110 [ 665.957555][T13363] ? fault_in_readable+0xef/0x150 [ 665.962829][T13363] ? fault_in_iov_iter_readable+0xc3/0x300 [ 665.968703][T13363] generic_perform_write+0x2fe/0x5c0 [ 665.974236][T13363] ? generic_file_direct_write+0x3e0/0x3e0 [ 665.980218][T13363] ? file_modified_flags+0x230/0x260 [ 665.985558][T13363] ? ext4_write_checks+0x248/0x2c0 [ 665.990727][T13363] ext4_buffered_write_iter+0xd5/0x360 [ 665.996233][T13363] ext4_file_write_iter+0x1e7/0x1980 [ 666.002213][T13363] ? rcu_read_lock_any_held+0xb4/0x140 [ 666.007846][T13363] ? ext4_file_read_iter+0x660/0x660 [ 666.013215][T13363] vfs_write+0x474/0x9a0 [ 666.017547][T13363] ? file_end_write+0x250/0x250 [ 666.023514][T13363] ? __fget_files+0x3fc/0x460 [ 666.028983][T13363] ? __fdget+0x180/0x210 [ 666.033308][T13363] ? __x64_sys_pwrite64+0xf7/0x220 [ 666.038761][T13363] __x64_sys_pwrite64+0x198/0x220 [ 666.043862][T13363] ? ksys_pwrite64+0x1c0/0x1c0 [ 666.049125][T13363] ? lockdep_hardirqs_on+0x98/0x150 [ 666.054868][T13363] do_syscall_64+0x55/0xb0 [ 666.059350][T13363] ? clear_bhb_loop+0x40/0x90 [ 666.064078][T13363] ? clear_bhb_loop+0x40/0x90 [ 666.068839][T13363] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 666.074780][T13363] RIP: 0033:0x7f4cb319fb19 [ 666.079242][T13363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.099065][T13363] RSP: 002b:00007f4cb13c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 666.107605][T13363] RAX: ffffffffffffffda RBX: 00007f4cb3426090 RCX: 00007f4cb319fb19 [ 666.115612][T13363] RDX: 000000000000fdef RSI: 0000200000000540 RDI: 0000000000000006 [ 666.123625][T13363] RBP: 00007f4cb3237b70 R08: 0000000000000000 R09: 0000000000000000 [ 666.132026][T13363] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000 [ 666.140062][T13363] R13: 00007f4cb3426128 R14: 00007f4cb3426090 R15: 00007ffe9312c4a8 [ 666.148278][T13363] [ 666.389204][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.717504][T13371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.736925][T13371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.294618][ T5096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 668.307739][ T5096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 668.317590][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 668.328550][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 668.338149][ T5096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 668.353116][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 670.699218][T13401] loop0: detected capacity change from 0 to 128 [ 670.720710][T13401] FAT-fs (loop0): Unrecognized mount option "18446744073709551615" or missing value [ 670.959188][T13409] loop0: detected capacity change from 0 to 512 [ 670.978430][T13409] EXT4-fs (loop0): Test dummy encryption mode enabled [ 671.034015][T13409] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.2230: inode has both inline data and extents flags [ 671.114594][T13409] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.2230: couldn't read orphan inode 15 (err -117) [ 671.136683][T13409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.232739][T13401] FAULT_INJECTION: forcing a failure. [ 671.232739][T13401] name failslab, interval 1, probability 0, space 0, times 0 [ 671.246463][T13401] CPU: 0 PID: 13401 Comm: syz.0.2230 Not tainted syzkaller #0 [ 671.254031][T13401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 671.264273][T13401] Call Trace: [ 671.267625][T13401] [ 671.270610][T13401] dump_stack_lvl+0x18c/0x250 [ 671.275361][T13401] ? show_regs_print_info+0x20/0x20 [ 671.280632][T13401] ? load_image+0x420/0x420 [ 671.285201][T13401] ? __ext4_mark_inode_dirty+0x50d/0x720 [ 671.290898][T13401] should_fail_ex+0x394/0x4c0 [ 671.295637][T13401] should_failslab+0x9/0x20 [ 671.300197][T13401] slab_pre_alloc_hook+0x59/0x300 [ 671.305287][T13401] kmem_cache_alloc+0x5a/0x2d0 [ 671.310110][T13401] ? __es_insert_extent+0x706/0x17b0 [ 671.315471][T13401] __es_insert_extent+0x706/0x17b0 [ 671.320677][T13401] ext4_es_insert_extent+0x5b0/0x2dd0 [ 671.326133][T13401] ? ext4_es_scan_clu+0x240/0x240 [ 671.331331][T13401] ? down_read_killable+0x340/0x340 [ 671.336608][T13401] ext4_map_blocks+0xd22/0x1a90 [ 671.341544][T13401] ? ext4_issue_zeroout+0x250/0x250 [ 671.346833][T13401] _ext4_get_block+0x1eb/0x480 [ 671.351758][T13401] ? percpu_ref_put+0x12/0x100 [ 671.356590][T13401] ? ext4_get_block+0x40/0x40 [ 671.361374][T13401] ext4_block_write_begin+0x55f/0x1540 [ 671.367053][T13401] ? ext4_es_is_delayed+0x40/0x40 [ 671.372191][T13401] ? folio_put+0xd0/0xd0 [ 671.376501][T13401] ? folio_mapping+0x1bd/0x4e0 [ 671.381353][T13401] ext4_write_begin+0x5ff/0x10b0 [ 671.386406][T13401] ? ext4_readahead+0x110/0x110 [ 671.391502][T13401] ? fault_in_readable+0xef/0x150 [ 671.396659][T13401] ? fault_in_iov_iter_readable+0xc3/0x300 [ 671.402549][T13401] generic_perform_write+0x2fe/0x5c0 [ 671.407930][T13401] ? generic_file_direct_write+0x3e0/0x3e0 [ 671.413823][T13401] ? file_modified_flags+0x230/0x260 [ 671.419181][T13401] ? ext4_write_checks+0x248/0x2c0 [ 671.424371][T13401] ext4_buffered_write_iter+0xd5/0x360 [ 671.429906][T13401] ext4_file_write_iter+0x1e7/0x1980 [ 671.435283][T13401] ? rcu_read_lock_any_held+0xb4/0x140 [ 671.440831][T13401] ? ext4_file_read_iter+0x660/0x660 [ 671.446215][T13401] vfs_write+0x474/0x9a0 [ 671.450539][T13401] ? file_end_write+0x250/0x250 [ 671.455468][T13401] ? __fget_files+0x3fc/0x460 [ 671.460319][T13401] ? __fdget+0x180/0x210 [ 671.464625][T13401] ? __x64_sys_pwrite64+0xf7/0x220 [ 671.469815][T13401] __x64_sys_pwrite64+0x198/0x220 [ 671.475030][T13401] ? ksys_pwrite64+0x1c0/0x1c0 [ 671.479869][T13401] ? lockdep_hardirqs_on+0x98/0x150 [ 671.485124][T13401] do_syscall_64+0x55/0xb0 [ 671.489689][T13401] ? clear_bhb_loop+0x40/0x90 [ 671.494428][T13401] ? clear_bhb_loop+0x40/0x90 [ 671.499188][T13401] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 671.505271][T13401] RIP: 0033:0x7f18f739fb19 [ 671.510267][T13401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.530031][T13401] RSP: 002b:00007f18f8305028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 671.538689][T13401] RAX: ffffffffffffffda RBX: 00007f18f7625fa0 RCX: 00007f18f739fb19 [ 671.546733][T13401] RDX: 000000000000fdef RSI: 0000200000000540 RDI: 0000000000000006 [ 671.554937][T13401] RBP: 00007f18f7437b70 R08: 0000000000000000 R09: 0000000000000000 [ 671.562990][T13401] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000 [ 671.571037][T13401] R13: 00007f18f7626038 R14: 00007f18f7625fa0 R15: 00007ffc0d0a6608 [ 671.579086][T13401] [ 671.965818][T13419] loop2: detected capacity change from 0 to 512 [ 672.868527][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.894488][T13419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 672.961923][ T5096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 672.972817][ T5096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 672.983206][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 672.983331][T13419] ext4 filesystem being mounted at /575/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 672.996539][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 673.052333][ T5096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 673.060337][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 673.237927][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.276029][T13431] FAULT_INJECTION: forcing a failure. [ 673.276029][T13431] name failslab, interval 1, probability 0, space 0, times 0 [ 673.313219][T13431] CPU: 1 PID: 13431 Comm: syz.0.2239 Not tainted syzkaller #0 [ 673.320780][T13431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 673.330911][T13431] Call Trace: [ 673.334244][T13431] [ 673.337224][T13431] dump_stack_lvl+0x18c/0x250 [ 673.342007][T13431] ? show_regs_print_info+0x20/0x20 [ 673.347575][T13431] ? load_image+0x420/0x420 [ 673.352146][T13431] ? __might_sleep+0xe0/0xe0 [ 673.356804][T13431] ? __lock_acquire+0x7eb0/0x7eb0 [ 673.361962][T13431] should_fail_ex+0x394/0x4c0 [ 673.366795][T13431] should_failslab+0x9/0x20 [ 673.371353][T13431] slab_pre_alloc_hook+0x59/0x300 [ 673.376430][T13431] ? kernfs_add_one+0x149/0x6b0 [ 673.381450][T13431] kmem_cache_alloc+0x5a/0x2d0 [ 673.386287][T13431] ? __kernfs_new_node+0xe5/0x7f0 [ 673.391391][T13431] __kernfs_new_node+0xe5/0x7f0 [ 673.396293][T13431] ? up_write+0x1be/0x410 [ 673.400669][T13431] ? kernfs_new_node+0x260/0x260 [ 673.405659][T13431] ? sysfs_do_create_link_sd+0x75/0x110 [ 673.411247][T13431] ? __lock_acquire+0x7eb0/0x7eb0 [ 673.416317][T13431] kernfs_new_node+0x14c/0x260 [ 673.421145][T13431] kernfs_create_link+0xa7/0x200 [ 673.426117][T13431] sysfs_do_create_link_sd+0x83/0x110 [ 673.431544][T13431] device_add_class_symlinks+0xb6/0x240 [ 673.437136][T13431] device_add+0x4f9/0xc40 [ 673.441500][T13431] device_create+0x26a/0x300 [ 673.446135][T13431] ? root_device_unregister+0x100/0x100 [ 673.451738][T13431] ? vsnprintf+0x1ac7/0x1ba0 [ 673.456549][T13431] bdi_register_va+0x97/0x6d0 [ 673.461273][T13431] super_setup_bdi_name+0xf9/0x200 [ 673.466424][T13431] ? __rwlock_init+0x150/0x150 [ 673.471400][T13431] ? vfs_get_tree+0x280/0x280 [ 673.476138][T13431] ? sget_fc+0x852/0x930 [ 673.480420][T13431] afs_get_tree+0x894/0x1090 [ 673.485059][T13431] ? bpf_lsm_capable+0x9/0x10 [ 673.489862][T13431] vfs_get_tree+0x8c/0x280 [ 673.494333][T13431] do_new_mount+0x24a/0xa60 [ 673.498907][T13431] __se_sys_mount+0x2e7/0x3d0 [ 673.503630][T13431] ? __x64_sys_mount+0xc0/0xc0 [ 673.508875][T13431] ? lockdep_hardirqs_on+0x98/0x150 [ 673.514280][T13431] ? __x64_sys_mount+0x20/0xc0 [ 673.519086][T13431] do_syscall_64+0x55/0xb0 [ 673.523556][T13431] ? clear_bhb_loop+0x40/0x90 [ 673.528272][T13431] ? clear_bhb_loop+0x40/0x90 [ 673.533035][T13431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 673.538972][T13431] RIP: 0033:0x7f18f739fb19 [ 673.543418][T13431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.563159][T13431] RSP: 002b:00007f18f8305028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 673.571643][T13431] RAX: ffffffffffffffda RBX: 00007f18f7625fa0 RCX: 00007f18f739fb19 [ 673.579669][T13431] RDX: 0000200000000280 RSI: 0000200000000180 RDI: 0000000000000000 [ 673.587672][T13431] RBP: 00007f18f7437b70 R08: 00002000000002c0 R09: 0000000000000000 [ 673.595673][T13431] R10: 0000000000014000 R11: 0000000000000246 R12: 0000000000000000 [ 673.603668][T13431] R13: 00007f18f7626038 R14: 00007f18f7625fa0 R15: 00007ffc0d0a6608 [ 673.611703][T13431] [ 673.616363][ T8] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 673.803076][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 673.815279][ T8] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 673.825703][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 673.837795][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 673.848897][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 673.861125][ T8] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 673.877548][ T8] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 673.889274][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.117866][ T8] usb 2-1: usb_control_msg returned -32 [ 674.123774][ T8] usbtmc 2-1:16.0: can't read capabilities [ 675.954279][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 675.966991][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 675.978781][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 675.988604][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 676.002811][ T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 676.010671][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 676.153594][ T5900] usb 2-1: USB disconnect, device number 17 [ 676.339230][T13453] overlayfs: failed to resolve './bus': -2 [ 677.801184][T13463] loop1: detected capacity change from 0 to 512 [ 677.827609][T13463] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 677.865402][T13463] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 677.883228][T13463] System zones: 1-12 [ 677.903781][T13463] EXT4-fs (loop1): 1 truncate cleaned up [ 677.921178][T13463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 678.305113][T13474] loop2: detected capacity change from 0 to 512 [ 678.354222][T13473] EXT4-fs error (device loop1): __ext4_expand_extra_isize:5994: inode #12: comm syz.1.2247: bad extra_isize 62 (inode size 256) [ 678.369055][T13473] EXT4-fs (loop1): Remounting filesystem read-only [ 678.374115][T13474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 678.403805][T13474] ext4 filesystem being mounted at /581/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 678.423655][ T5096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 678.436492][ T5096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 678.446136][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 678.456063][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 678.466398][ T5096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 678.476744][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 678.748015][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.771434][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.936965][T13481] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 680.631867][T13491] overlayfs: failed to resolve './bus': -2 [ 681.612706][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 681.691707][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 681.709394][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 681.722179][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 681.730133][ T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 681.741151][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 682.018494][T13514] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 683.812410][T13527] overlayfs: failed to resolve './bus': -2 [ 683.983054][ T5900] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 684.160345][ T5096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 684.171833][ T5096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 684.182990][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 684.183847][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 684.195718][ T5900] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 684.209003][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 684.214003][ T5900] usb 2-1: config 0 interface 0 has no altsetting 0 [ 684.225815][ T5096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 684.235027][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 684.244129][ T5900] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 684.260185][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.286974][ T5900] usb 2-1: Product: syz [ 684.299739][ T5900] usb 2-1: Manufacturer: syz [ 684.313700][ T5900] usb 2-1: SerialNumber: syz [ 684.362016][ T5900] usb 2-1: config 0 descriptor?? [ 684.643097][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 684.677348][ T5900] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 684.737560][ T5900] imon:send_packet: packet tx failed (-71) [ 684.763954][ T5900] imon 2-1:0.0: panel buttons/knobs setup failed [ 684.783194][ T5900] rc_core: Couldn't load IR keymap rc-imon-pad [ 684.789470][ T5900] Registered IR keymap rc-empty [ 684.794919][ T5900] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 684.805142][ T5900] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 684.816521][ T5900] imon:send_packet: packet tx failed (-71) [ 684.836668][ T5900] imon 2-1:0.0: remote input dev register failed [ 684.847691][ T5900] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 684.872325][ T5900] imon 2-1:0.0: unable to initialize intf0, err 0 [ 684.879426][ T5900] imon:imon_probe: failed to initialize context! [ 684.886515][ T5900] imon 2-1:0.0: unable to register, err -19 [ 684.900264][ T5900] usb 2-1: USB disconnect, device number 18 [ 685.264271][ T5900] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 685.455352][ T5900] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 685.467930][ T5900] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 685.479891][ T5900] usb 2-1: config 0 interface 0 has no altsetting 0 [ 685.490724][ T5900] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 685.500372][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.508761][ T5900] usb 2-1: Product: syz [ 685.513048][ T5900] usb 2-1: Manufacturer: syz [ 685.517683][ T5900] usb 2-1: SerialNumber: syz [ 685.525396][ T5900] usb 2-1: config 0 descriptor?? [ 685.532538][T13524] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 685.760720][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 685.770333][ T5900] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10 [ 685.986661][ T5900] rc_core: Couldn't load IR keymap rc-imon-pad [ 685.992968][ T5900] Registered IR keymap rc-empty [ 685.998049][ T5900] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 686.008907][ T5900] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 686.047846][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.054412][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.215032][ T5900] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 686.241184][ T5900] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 686.287000][ T5900] imon 2-1:0.0: iMON device (15c2:0045, intf0) on usb<2:19> initialized [ 686.426776][ T791] usb 2-1: USB disconnect, device number 19 [ 686.595258][T13549] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 687.591429][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 687.603211][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 687.613062][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 687.623138][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 687.631449][ T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 687.641090][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 687.804437][T13566] loop2: detected capacity change from 0 to 128 [ 687.812480][T13566] FAT-fs (loop2): Unrecognized mount option "18446744073709551615" or missing value [ 687.906303][T13213] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 687.958121][T13566] loop2: detected capacity change from 0 to 512 [ 687.958492][T13213] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 687.996571][T13566] EXT4-fs (loop2): Test dummy encryption mode enabled [ 688.017327][T13566] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.2279: inode has both inline data and extents flags [ 688.075390][T13566] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.2279: couldn't read orphan inode 15 (err -117) [ 688.117778][T13566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 688.723373][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.851528][T13574] Couldn't find request waiting for DGID: 0000:0000:0000:0000:0000:0000:0000:0000 [ 690.750175][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 690.762861][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 690.772594][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 690.910797][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 690.922057][ T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 690.930184][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 691.897582][T13601] FAULT_INJECTION: forcing a failure. [ 691.897582][T13601] name failslab, interval 1, probability 0, space 0, times 0 [ 691.910303][T13601] CPU: 0 PID: 13601 Comm: syz.2.2289 Not tainted syzkaller #0 [ 691.917835][T13601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 691.927924][T13601] Call Trace: [ 691.931244][T13601] [ 691.934249][T13601] dump_stack_lvl+0x18c/0x250 [ 691.939104][T13601] ? show_regs_print_info+0x20/0x20 [ 691.944530][T13601] ? load_image+0x420/0x420 [ 691.949072][T13601] should_fail_ex+0x394/0x4c0 [ 691.953805][T13601] ? __sigqueue_alloc+0x32/0x520 [ 691.958832][T13601] should_failslab+0x9/0x20 [ 691.963362][T13601] slab_pre_alloc_hook+0x59/0x300 [ 691.968510][T13601] ? __lock_acquire+0x7eb0/0x7eb0 [ 691.973581][T13601] ? __sigqueue_alloc+0x32/0x520 [ 691.978547][T13601] kmem_cache_alloc+0x5a/0x2d0 [ 691.983373][T13601] ? __sigqueue_alloc+0x40c/0x520 [ 691.988460][T13601] ? __sigqueue_alloc+0x32/0x520 [ 691.993437][T13601] __sigqueue_alloc+0x40c/0x520 [ 691.998332][T13601] __send_signal_locked+0x22f/0xe00 [ 692.003592][T13601] do_notify_parent+0xb26/0xd10 [ 692.008506][T13601] ? trace_signal_generate+0x1c0/0x1c0 [ 692.014015][T13601] ? __lock_acquire+0x7eb0/0x7eb0 [ 692.019093][T13601] release_task+0x1227/0x1690 [ 692.023869][T13601] ? do_exit+0x1888/0x2530 [ 692.028330][T13601] ? delayed_put_task_struct+0x2a0/0x2a0 [ 692.034411][T13601] ? _raw_write_lock_irq+0xbb/0xf0 [ 692.039709][T13601] ? _raw_write_lock_irqsave+0x100/0x100 [ 692.045401][T13601] ? _raw_write_unlock_irq+0x23/0x50 [ 692.050756][T13601] ? lockdep_hardirqs_on+0x98/0x150 [ 692.056004][T13601] do_exit+0x1888/0x2530 [ 692.060412][T13601] ? put_task_struct+0xc0/0xc0 [ 692.065225][T13601] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 692.071236][T13601] ? get_signal+0x100e/0x1390 [ 692.075947][T13601] ? lock_chain_count+0x20/0x20 [ 692.080855][T13601] ? _raw_spin_lock_irq+0xbb/0xf0 [ 692.085920][T13601] do_group_exit+0x22d/0x2f0 [ 692.090547][T13601] ? lockdep_hardirqs_on+0x98/0x150 [ 692.095784][T13601] get_signal+0x12a6/0x1390 [ 692.100433][T13601] arch_do_signal_or_restart+0xc2/0x7b0 [ 692.106047][T13601] ? __ia32_sys_get_robust_list+0x110/0x110 [ 692.111997][T13601] ? get_sigframe_size+0x20/0x20 [ 692.117011][T13601] ? exit_to_user_mode_loop+0x3b/0x110 [ 692.122569][T13601] exit_to_user_mode_loop+0x70/0x110 [ 692.127919][T13601] exit_to_user_mode_prepare+0xee/0x180 [ 692.133551][T13601] syscall_exit_to_user_mode+0x1a/0x50 [ 692.139051][T13601] do_syscall_64+0x61/0xb0 [ 692.143523][T13601] ? clear_bhb_loop+0x40/0x90 [ 692.148246][T13601] ? clear_bhb_loop+0x40/0x90 [ 692.152982][T13601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 692.158931][T13601] RIP: 0033:0x7f551299fb19 [ 692.163653][T13601] Code: Unable to access opcode bytes at 0x7f551299faef. [ 692.170813][T13601] RSP: 002b:00007f551395d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 692.179264][T13601] RAX: 0000000000000001 RBX: 00007f5512c25fa8 RCX: 00007f551299fb19 [ 692.187374][T13601] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5512c25fac [ 692.195392][T13601] RBP: 00007f5512c25fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 692.203410][T13601] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 692.211430][T13601] R13: 00007f5512c26038 R14: 00007ffe44a43a70 R15: 00007ffe44a43b58 [ 692.219464][T13601] [ 694.058943][T13605] loop1: detected capacity change from 0 to 128 [ 694.079936][T13605] FAT-fs (loop1): Unrecognized mount option "18446744073709551615" or missing value [ 694.167289][T13609] FAULT_INJECTION: forcing a failure. [ 694.167289][T13609] name failslab, interval 1, probability 0, space 0, times 0 [ 694.199770][T13609] CPU: 1 PID: 13609 Comm: syz.2.2292 Not tainted syzkaller #0 [ 694.201795][T13611] FAULT_INJECTION: forcing a failure. [ 694.201795][T13611] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 694.207305][T13609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 694.207362][T13609] Call Trace: [ 694.207373][T13609] [ 694.207384][T13609] dump_stack_lvl+0x18c/0x250 [ 694.207432][T13609] ? show_regs_print_info+0x20/0x20 [ 694.207463][T13609] ? load_image+0x420/0x420 [ 694.207492][T13609] ? __might_sleep+0xe0/0xe0 [ 694.207523][T13609] ? __lock_acquire+0x7eb0/0x7eb0 [ 694.207555][T13609] should_fail_ex+0x394/0x4c0 [ 694.207589][T13609] should_failslab+0x9/0x20 [ 694.207610][T13609] slab_pre_alloc_hook+0x59/0x300 [ 694.207635][T13609] ? call_usermodehelper_setup+0x8e/0x260 [ 694.207661][T13609] __kmem_cache_alloc_node+0x53/0x260 [ 694.207688][T13609] ? call_usermodehelper_setup+0x8e/0x260 [ 694.207712][T13609] kmalloc_trace+0x2a/0xe0 [ 694.297059][T13609] call_usermodehelper_setup+0x8e/0x260 [ 694.302650][T13609] ? __request_module+0x600/0x600 [ 694.307723][T13609] __request_module+0x3bb/0x600 [ 694.312615][T13609] ? module_enforce_rwx_sections+0x150/0x150 [ 694.318639][T13609] ? nvmf_dev_write+0x1bba/0x2b50 [ 694.323737][T13609] ? __kmem_cache_free+0xba/0x1f0 [ 694.328824][T13609] nvmf_dev_write+0x1d6b/0x2b50 [ 694.333799][T13609] ? asan.module_dtor+0x20/0x20 [ 694.338784][T13609] ? nvmf_host_put+0x190/0x190 [ 694.343577][T13609] ? aa_file_perm+0x11b/0xee0 [ 694.348294][T13609] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 694.354354][T13609] ? nvmf_host_put+0x190/0x190 [ 694.359151][T13609] ? vfs_write+0x283/0x9a0 [ 694.363616][T13609] ? nvmf_host_put+0x190/0x190 [ 694.368422][T13609] vfs_write+0x299/0x9a0 [ 694.372733][T13609] ? file_end_write+0x250/0x250 [ 694.377622][T13609] ? __fget_files+0x28/0x460 [ 694.382248][T13609] ? __fget_files+0x3fc/0x460 [ 694.386970][T13609] ? __fdget_pos+0x1d8/0x330 [ 694.391593][T13609] ? ksys_write+0x74/0x260 [ 694.396050][T13609] ksys_write+0x151/0x260 [ 694.400421][T13609] ? __ia32_sys_read+0x90/0x90 [ 694.405251][T13609] ? lockdep_hardirqs_on+0x98/0x150 [ 694.410583][T13609] do_syscall_64+0x55/0xb0 [ 694.415055][T13609] ? clear_bhb_loop+0x40/0x90 [ 694.419775][T13609] ? clear_bhb_loop+0x40/0x90 [ 694.424491][T13609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 694.430428][T13609] RIP: 0033:0x7f551299fb19 [ 694.434878][T13609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.454529][T13609] RSP: 002b:00007f551395d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 694.462981][T13609] RAX: ffffffffffffffda RBX: 00007f5512c25fa0 RCX: 00007f551299fb19 [ 694.471005][T13609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 694.479001][T13609] RBP: 00007f5512a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 694.487011][T13609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.495019][T13609] R13: 00007f5512c26038 R14: 00007f5512c25fa0 R15: 00007ffe44a43b58 [ 694.503068][T13609] [ 694.517364][T13611] CPU: 0 PID: 13611 Comm: syz.1.2291 Not tainted syzkaller #0 [ 694.524952][T13611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 694.535063][T13611] Call Trace: [ 694.538391][T13611] [ 694.541374][T13611] dump_stack_lvl+0x18c/0x250 [ 694.546124][T13611] ? show_regs_print_info+0x20/0x20 [ 694.551384][T13611] ? load_image+0x420/0x420 [ 694.555949][T13611] ? __lock_acquire+0x7eb0/0x7eb0 [ 694.561037][T13611] should_fail_ex+0x394/0x4c0 [ 694.565775][T13611] prepare_alloc_pages+0x1e1/0x5b0 [ 694.570946][T13611] __alloc_pages+0x134/0x460 [ 694.575599][T13611] ? zone_statistics+0x170/0x170 [ 694.580613][T13611] __folio_alloc+0x10/0x20 [ 694.585087][T13611] vma_alloc_folio+0x474/0x8f0 [ 694.589902][T13611] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 694.595767][T13611] shmem_alloc_folio+0x1a9/0x2a0 [ 694.600767][T13611] ? folio_put+0xd0/0xd0 [ 694.605090][T13611] ? __vm_enough_memory+0x11a/0x370 [ 694.610347][T13611] ? shmem_inode_acct_block+0x35e/0x460 [ 694.615955][T13611] shmem_alloc_and_acct_folio+0x1cb/0x6c0 [ 694.621734][T13611] ? put_swap_device+0x230/0x230 [ 694.626731][T13611] ? xas_load+0x12b/0x140 [ 694.631200][T13611] ? filemap_get_entry+0xce/0x3f0 [ 694.636365][T13611] ? filemap_get_entry+0xce/0x3f0 [ 694.641441][T13611] ? filemap_get_entry+0x375/0x3f0 [ 694.646592][T13611] ? page_cache_prev_miss+0x390/0x390 [ 694.652025][T13611] ? mark_lock+0x94/0x320 [ 694.656396][T13611] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 694.662419][T13611] ? do_user_addr_fault+0x61e/0x13e0 [ 694.667749][T13611] ? lock_chain_count+0x20/0x20 [ 694.672652][T13611] shmem_get_folio_gfp+0xe1d/0x2b40 [ 694.677935][T13611] shmem_write_begin+0xf2/0x430 [ 694.682858][T13611] generic_perform_write+0x2fe/0x5c0 [ 694.688203][T13611] ? generic_file_direct_write+0x3e0/0x3e0 [ 694.694083][T13611] ? file_update_time+0x192/0x1a0 [ 694.699154][T13611] shmem_file_write_iter+0xfb/0x120 [ 694.704414][T13611] vfs_write+0x474/0x9a0 [ 694.708738][T13611] ? file_end_write+0x250/0x250 [ 694.713657][T13611] ? __fget_files+0x3fc/0x460 [ 694.718415][T13611] ? __fdget+0x180/0x210 [ 694.722698][T13611] ? __x64_sys_pwrite64+0xf7/0x220 [ 694.727865][T13611] __x64_sys_pwrite64+0x198/0x220 [ 694.732953][T13611] ? ksys_pwrite64+0x1c0/0x1c0 [ 694.737773][T13611] ? lockdep_hardirqs_on+0x98/0x150 [ 694.743012][T13611] do_syscall_64+0x55/0xb0 [ 694.747469][T13611] ? clear_bhb_loop+0x40/0x90 [ 694.752213][T13611] ? clear_bhb_loop+0x40/0x90 [ 694.756939][T13611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 694.762873][T13611] RIP: 0033:0x7f4cb319fb19 [ 694.767328][T13611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.787063][T13611] RSP: 002b:00007f4cb13c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 694.795545][T13611] RAX: ffffffffffffffda RBX: 00007f4cb3426090 RCX: 00007f4cb319fb19 [ 694.803556][T13611] RDX: 000000000000fdef RSI: 0000200000000540 RDI: 0000000000000004 [ 694.811587][T13611] RBP: 00007f4cb3237b70 R08: 0000000000000000 R09: 0000000000000000 [ 694.819604][T13611] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000 [ 694.827614][T13611] R13: 00007f4cb3426128 R14: 00007f4cb3426090 R15: 00007ffe9312c4a8 [ 694.835641][T13611] [ 694.857092][T13609] nvme_fabrics: missing parameter 'transport=%s' [ 694.864101][T13609] nvme_fabrics: missing parameter 'nqn=%s' [ 695.563530][ T5096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 695.584816][ T5096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 695.600579][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 695.611477][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 695.621597][ T5096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 695.639931][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 698.285033][T13658] loop1: detected capacity change from 0 to 128 [ 698.293295][T13658] FAT-fs (loop1): Unrecognized mount option "18446744073709551615" or missing value [ 698.408673][T13660] FAULT_INJECTION: forcing a failure. [ 698.408673][T13660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.422032][T13660] CPU: 0 PID: 13660 Comm: syz.1.2306 Not tainted syzkaller #0 [ 698.429583][T13660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 698.439700][T13660] Call Trace: [ 698.443028][T13660] [ 698.446014][T13660] dump_stack_lvl+0x18c/0x250 [ 698.450767][T13660] ? show_regs_print_info+0x20/0x20 [ 698.456065][T13660] ? load_image+0x420/0x420 [ 698.460637][T13660] ? shmem_get_folio_gfp+0x14ae/0x2b40 [ 698.466167][T13660] ? __lock_acquire+0x7eb0/0x7eb0 [ 698.471271][T13660] ? __rwlock_init+0x150/0x150 [ 698.476105][T13660] should_fail_ex+0x394/0x4c0 [ 698.480850][T13660] copy_page_from_iter_atomic+0x29e/0x13d0 [ 698.486722][T13660] ? shmem_get_folio_gfp+0x2780/0x2b40 [ 698.491703][ T5096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 698.492247][T13660] ? iov_iter_zero+0x1160/0x1160 [ 698.492293][T13660] ? shmem_write_begin+0x1cf/0x430 [ 698.509717][T13660] generic_perform_write+0x353/0x5c0 [ 698.515117][T13660] ? generic_file_direct_write+0x3e0/0x3e0 [ 698.521003][T13660] ? file_update_time+0x192/0x1a0 [ 698.526105][T13660] shmem_file_write_iter+0xfb/0x120 [ 698.528173][ T5096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 698.531375][T13660] vfs_write+0x474/0x9a0 [ 698.531421][T13660] ? file_end_write+0x250/0x250 [ 698.545268][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 698.547498][T13660] ? __fget_files+0x3fc/0x460 [ 698.559249][T13660] ? __fdget+0x180/0x210 [ 698.561124][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 698.563541][T13660] ? __x64_sys_pwrite64+0xf7/0x220 [ 698.563584][T13660] __x64_sys_pwrite64+0x198/0x220 [ 698.563623][T13660] ? ksys_pwrite64+0x1c0/0x1c0 [ 698.575989][ T5096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 698.580847][T13660] ? lockdep_hardirqs_on+0x98/0x150 [ 698.580884][T13660] do_syscall_64+0x55/0xb0 [ 698.588675][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 698.592626][T13660] ? clear_bhb_loop+0x40/0x90 [ 698.592668][T13660] ? clear_bhb_loop+0x40/0x90 [ 698.618832][T13660] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 698.624796][T13660] RIP: 0033:0x7f4cb319fb19 [ 698.629269][T13660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.649020][T13660] RSP: 002b:00007f4cb13c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 698.657511][T13660] RAX: ffffffffffffffda RBX: 00007f4cb3426090 RCX: 00007f4cb319fb19 [ 698.665542][T13660] RDX: 000000000000fdef RSI: 0000200000000540 RDI: 0000000000000004 [ 698.673575][T13660] RBP: 00007f4cb3237b70 R08: 0000000000000000 R09: 0000000000000000 [ 698.681795][T13660] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000 [ 698.689820][T13660] R13: 00007f4cb3426128 R14: 00007f4cb3426090 R15: 00007ffe9312c4a8 [ 698.697873][T13660] [ 701.665506][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 701.678206][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 701.688405][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 701.702524][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 701.725884][ T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 701.733846][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 704.225934][T13700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2319'. [ 704.249321][T13700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2319'. [ 704.427564][T13705] loop0: detected capacity change from 0 to 512 [ 704.485393][T13705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.580490][T13705] ext4 filesystem being mounted at /620/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 704.707754][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 704.725738][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 704.743632][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 704.764072][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 704.772018][ T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 704.780750][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 704.821948][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.421312][T13724] overlayfs: failed to resolve './bus': -2 [ 707.710169][T13729] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 707.858793][T13731] loop0: detected capacity change from 0 to 512 [ 707.874175][T13731] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 707.917602][T13731] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 707.939992][T13731] System zones: 1-12 [ 707.957204][T13731] EXT4-fs (loop0): 1 truncate cleaned up [ 707.967249][T13731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 708.038255][ T5096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 708.052796][ T5096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 708.063157][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 708.073315][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 708.083677][ T5096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 708.092312][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 708.439938][T13737] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5994: inode #12: comm syz.0.2329: bad extra_isize 62 (inode size 256) [ 708.458706][T13737] EXT4-fs (loop0): Remounting filesystem read-only [ 708.847470][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.909156][T13742] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2331'. SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=2159 state=3 status=67 (errno 9: Bad file descriptor) [ 711.076921][ T2907] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.308936][ T2907] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.404588][ T2907] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.477886][ T2907] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.735623][ T2907] tipc: Left network mode [ 712.810822][ T2907] hsr_slave_0: left promiscuous mode [ 712.817116][ T2907] hsr_slave_1: left promiscuous mode [ 712.825253][ T2907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.832767][ T2907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.849008][ T2907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.857242][ T2907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 712.866046][ T2907] bridge_slave_1: left allmulticast mode [ 712.871834][ T2907] bridge_slave_1: left promiscuous mode [ 712.879976][ T2907] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.906086][ T2907] bridge_slave_0: left allmulticast mode [ 712.911812][ T2907] bridge_slave_0: left promiscuous mode [ 712.919442][ T2907] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.954318][ T2907] veth1_macvtap: left promiscuous mode [ 712.959959][ T2907] veth0_macvtap: left promiscuous mode [ 712.965821][ T2907] veth1_vlan: left promiscuous mode [ 712.971748][ T2907] veth0_vlan: left promiscuous mode [ 713.873247][ T2907] team0 (unregistering): Port device team_slave_1 removed [ 713.951802][ T2907] team0 (unregistering): Port device team_slave_0 removed [ 714.019211][ T2907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 714.088847][ T2907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 714.666172][ T2907] bond0 (unregistering): Released all slaves [ 715.159833][ T2907] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.239414][ T2907] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.325224][ T2907] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.385057][ T2907] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.554312][ T2907] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.627611][ T2907] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.679378][ T2907] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.756115][ T2907] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.812324][ T6229] infiniband syz2: set down [ 715.825006][ T5900] wg1 speed is unknown, defaulting to 1000 [ 715.847380][ T5900] wg1 speed is unknown, defaulting to 1000 [ 717.657363][ T2907] tipc: Left network mode [ 719.681996][ T2907] hsr_slave_0: left promiscuous mode [ 719.692142][ T2907] hsr_slave_1: left promiscuous mode [ 719.700293][ T2907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 719.708578][ T2907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 719.717327][ T2907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 719.725251][ T2907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.733715][ T2907] bridge_slave_1: left allmulticast mode [ 719.739430][ T2907] bridge_slave_1: left promiscuous mode [ 719.746480][ T2907] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.758098][ T2907] bridge_slave_0: left allmulticast mode [ 719.763925][ T2907] bridge_slave_0: left promiscuous mode [ 719.769730][ T2907] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.799592][ T2907] hsr_slave_0: left promiscuous mode [ 719.807216][ T2907] hsr_slave_1: left promiscuous mode [ 719.813847][ T2907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 719.821329][ T2907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 719.831031][ T2907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 719.838836][ T2907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.847039][ T2907] bridge_slave_1: left allmulticast mode [ 719.852859][ T2907] bridge_slave_1: left promiscuous mode [ 719.858829][ T2907] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.870663][ T2907] bridge_slave_0: left allmulticast mode [ 719.876484][ T2907] bridge_slave_0: left promiscuous mode [ 719.882590][ T2907] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.952264][ T2907] veth1_macvtap: left promiscuous mode [ 719.958046][ T2907] veth0_macvtap: left promiscuous mode [ 719.963903][ T2907] veth1_vlan: left promiscuous mode [ 719.969862][ T2907] veth0_vlan: left promiscuous mode [ 719.982547][ T2907] veth1_macvtap: left promiscuous mode [ 719.988487][ T2907] veth0_macvtap: left promiscuous mode [ 719.994242][ T2907] veth1_vlan: left promiscuous mode [ 719.999659][ T2907] veth0_vlan: left promiscuous mode