last executing test programs: 2m14.683272503s ago: executing program 3 (id=25): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0xa) 2m13.381102714s ago: executing program 3 (id=33): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440), 0x400, 0x0) 2m12.746941628s ago: executing program 3 (id=37): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xfb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x1035, {0x0, 0x0, 0x0, 0x0, 0x5}}) 2m12.382122681s ago: executing program 3 (id=42): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESOCT=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x126) 2m12.31337181s ago: executing program 3 (id=43): syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x18, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x7}}) 2m11.752612369s ago: executing program 3 (id=46): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x101, 0x800, 0x103, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x60ea, 0x4, 0xfffffffe, 0x146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90e, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8dd0, 0x0, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)) 2m11.096244333s ago: executing program 32 (id=46): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x101, 0x800, 0x103, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x60ea, 0x4, 0xfffffffe, 0x146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90e, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8dd0, 0x0, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)) 1m1.844526377s ago: executing program 0 (id=483): setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x48, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4389}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) 1m0.307481058s ago: executing program 0 (id=489): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x60200, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) close(0x4) 56.773881823s ago: executing program 0 (id=503): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x58, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x4844) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="400003"], 0x6) 55.066290112s ago: executing program 0 (id=506): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0xfd, 0x4, 0x7fff7ffc}]}) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1141099, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 54.513104331s ago: executing program 0 (id=509): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="824900008000050018003780080002000000000000000280080003008adec842050027"], 0x40}, 0x1, 0x0, 0x0, 0x20000c10}, 0x8000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) 53.358911266s ago: executing program 4 (id=513): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0) socket$tipc(0x1e, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 51.867624835s ago: executing program 2 (id=519): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_io_uring_setup(0x2461, &(0x7f00000002c0)={0x0, 0x6, 0x10000, 0x1, 0x131}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x800) 51.379471737s ago: executing program 2 (id=521): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x140}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 50.518107594s ago: executing program 4 (id=526): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 50.396575263s ago: executing program 2 (id=527): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000140), 0x400000000000287, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x4000010) close(r0) 50.054637067s ago: executing program 6 (id=529): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x484a8, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) unlink(&(0x7f0000000280)='./file1\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file2\x00', 0x0) 49.99054715s ago: executing program 5 (id=530): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x400, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000004080)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x7c65, 0xa334, 0x1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x6, 0xc) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1, 0x6) 49.853603205s ago: executing program 1 (id=531): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x8c5) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040), &(0x7f0000000ac0)=ANY=[], 0xdf5, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x0, 0x0, 0x2) 49.352660382s ago: executing program 0 (id=532): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1004010, &(0x7f0000000500)=ANY=[], 0xfc, 0x6071, &(0x7f0000001f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x17f) syz_open_dev$mtd(0x0, 0xfd2, 0x80001) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x48840, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) syz_usb_disconnect(0xffffffffffffffff) 49.046969322s ago: executing program 33 (id=532): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1004010, &(0x7f0000000500)=ANY=[], 0xfc, 0x6071, &(0x7f0000001f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x17f) syz_open_dev$mtd(0x0, 0xfd2, 0x80001) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x48840, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) syz_usb_disconnect(0xffffffffffffffff) 49.02527552s ago: executing program 1 (id=534): socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x82a0}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x4}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x24048060) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') 49.016785809s ago: executing program 2 (id=535): openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b2, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x1ffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x10000, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0xfffffd, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4c2e, 0x80020, 0x0, 0x312}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 49.016119132s ago: executing program 6 (id=536): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file5\x00', 0x82c0, 0x0) r1 = fanotify_init(0xf00, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x40000014}) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file5\x00', 0x2) 49.010094317s ago: executing program 4 (id=537): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=':', 0x1}], 0x1}}], 0x1, 0x80c4) sendto$inet(r0, &(0x7f0000000000)="d5", 0x1, 0x4000000, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 49.00977494s ago: executing program 5 (id=538): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00004fb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xe6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x33, 0x0, 0x0) 48.694711211s ago: executing program 5 (id=539): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x2, 0x3}, 0x10) close(0x3) 48.494843644s ago: executing program 6 (id=540): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x2c01, 0x0) ioctl$FE_READ_SIGNAL_STRENGTH(0xffffffffffffffff, 0x80026f47, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x12, &(0x7f0000000240)=0x8001, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x3, 0x8, 0x1ff}}, 0x28) socket(0x10, 0x3, 0x0) 48.097402122s ago: executing program 4 (id=541): mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) setreuid(0xee01, 0xee01) socket$nl_generic(0x10, 0x3, 0x10) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 47.971418315s ago: executing program 5 (id=542): socket$inet6(0xa, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x5, 0x14, 0x0, &(0x7f00000001c0)="2e9a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="850000002f000000840000000000000095000000000000008560fc2b2062f611fc2f864ef177d634e46e8dcfe61b4fb9f600344d592fee49e176fe6ad28fbcb1f9259bfc63e9030971917e30b6f42e8f9dd6ab0ce07312a135cd363aa7e5bcef8fd0e8c7d2082584156c52ebfd69e8e13b7a8b477abc86468e11b6242133ce882f05e16b91c37b3437347f6058b4489c759783b9d4dfb55d0085a26e41201a6d8c8ced33e10048e756a40538b32bf653fa3c831a4e60599ed7a0f999d18de9984522a7cdb6fc30015633a0132c9578b7da5bd7280a5f7e28fd858ba712020b23ef8a2785b6c146c48b48ca7e232d0489661396e9303b38aa5d26d06e2e676795fd2733f95da570bab301000000ffffffff2a2792a630d8fcdc"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) 47.859027368s ago: executing program 1 (id=543): sendmsg(0xffffffffffffffff, 0x0, 0x4000845) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) 47.738234796s ago: executing program 4 (id=544): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000020000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000027c0)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@multicast, @link_local, @val={@void, {0x9900, 0x0, 0x0, 0x6}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @multicast1}}}}, 0x0) 47.728142993s ago: executing program 6 (id=545): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000090000000000000003000000850000001300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xf, 0x0, &(0x7f00000008c0)="c1dfb080cd21d308098e000081007e", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 47.549707213s ago: executing program 2 (id=546): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000000)={0x0, 0x1209000, 0x800}, 0x20) r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) ioctl$sock_SIOCOUTQNSD(r1, 0x40106150, &(0x7f0000000000)) 47.482902373s ago: executing program 1 (id=547): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0x3, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xffd}]}}]}, 0x3c}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 46.970465431s ago: executing program 6 (id=548): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='7', 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000040)={0x4, r0, 0x1}) 46.87798377s ago: executing program 1 (id=549): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) write$vhost_msg_v2(r1, &(0x7f0000000680)={0x2, 0x0, {&(0x7f0000000d40)=""/219, 0xdb, 0x0, 0x2, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000380)=0x1) 46.73863436s ago: executing program 4 (id=550): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='ms_mode\x00', &(0x7f0000000400)='prefer-crc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 46.007839972s ago: executing program 5 (id=551): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000696000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000695000/0x1000)=nil, &(0x7f0000011000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x5, 0x26c}) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) landlock_restrict_self(0xffffffffffffffff, 0xc) 45.717360808s ago: executing program 5 (id=552): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8}) 45.162002969s ago: executing program 6 (id=553): mount$nfs(0x0, 0x0, 0x0, 0x90001, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x2cc31, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000100)=0x7) 44.179345763s ago: executing program 1 (id=554): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') r0 = open(&(0x7f00000001c0)='./mnt\x00', 0x8000, 0x129) getdents64(r0, 0x0, 0x0) 34.148061542s ago: executing program 2 (id=555): setns(0xc9, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x44, r2, 0x1, 0x30bd26, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 0s ago: executing program 34 (id=554): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0193acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417bb7f527c0bfebec112d57fc69fabb9b31ef97b2147930ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a3332978da70e9050417087c5ae034a735e8b448dd97014043159cbaacebfc912cf05f608e6214c04099fa311b747c37af702d134fb8eec487cfaea91150d1980464ff31cf86e3f3b950b204f6f67810c0826e4e5467c1588de9816bc627fb4662ac5fc8e38f19ec065550e5f9b16f72a91144a2e52ba9f2c6a7e2afbabc533ac731bb7ec51b8c585c2749469da331006ca4d49e136189d21ae50455834b2e75efd81c9d6352e5a814cf002f294475dab27a10d87516e405eff30", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') r0 = open(&(0x7f00000001c0)='./mnt\x00', 0x8000, 0x129) getdents64(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): slave_0) entered blocking state [ 110.880105][ T6019] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.880272][ T6019] bridge_slave_0: entered allmulticast mode [ 110.895766][ T6019] bridge_slave_0: entered promiscuous mode [ 110.902705][ T6019] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.907025][ T6019] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.907306][ T6019] bridge_slave_1: entered allmulticast mode [ 110.922506][ T6019] bridge_slave_1: entered promiscuous mode [ 111.148761][ T6019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.172415][ T6019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.335497][ T6019] team0: Port device team_slave_0 added [ 111.358899][ T6019] team0: Port device team_slave_1 added [ 111.506906][ C0] Unknown status report in ack skb [ 111.510510][ T6019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.510529][ T6019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.510560][ T6019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.520102][ T6019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.520123][ T6019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.520153][ T6019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.602800][ T5616] ocfs2: Unmounting device (7,5) on (node local) [ 111.786574][ T6224] netlink: 'syz.2.98': attribute type 1 has an invalid length. [ 112.102570][ T6019] hsr_slave_0: entered promiscuous mode [ 112.107279][ T6019] hsr_slave_1: entered promiscuous mode [ 112.108061][ T6019] debugfs: 'hsr0' already exists in 'hsr' [ 112.108082][ T6019] Cannot create hsr debugfs directory [ 112.485429][ T6246] loop5: detected capacity change from 0 to 256 [ 112.559797][ T6231] loop1: detected capacity change from 0 to 32768 [ 112.600761][ T6231] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.97 (6231) [ 112.638695][ T6246] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.638718][ T6246] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 112.722947][ T6246] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x38bc65dc, utbl_chksum : 0xe619d30d) [ 112.726883][ T6246] exFAT-fs (loop5): failed to load alloc-bitmap [ 112.726897][ T6246] exFAT-fs (loop5): failed to recognize exfat type [ 112.748211][ T6231] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 112.748246][ T6231] BTRFS info (device loop1): using sha256 checksum algorithm [ 112.790546][ T5271] 8021q: adding VLAN 0 to HW filter on device eth4 [ 112.837264][ T6260] loop0: detected capacity change from 0 to 256 [ 112.851635][ T6260] exfat: Deprecated parameter 'utf8' [ 112.851690][ T6260] exfat: Deprecated parameter 'namecase' [ 112.851793][ T6260] exfat: Deprecated parameter 'namecase' [ 112.851817][ T6260] exfat: Deprecated parameter 'utf8' [ 113.049831][ T6231] BTRFS info (device loop1): turning off barriers [ 113.049864][ T6231] BTRFS info (device loop1): enabling free space tree [ 113.068101][ T6260] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 113.068512][ T6260] exFAT-fs (loop0): failed to test first cluster bit of root dir(5) [ 113.259692][ T6272] loop5: detected capacity change from 0 to 512 [ 113.302000][ T6272] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 113.334972][ T5620] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 113.825333][ T13] IPVS: starting estimator thread 0... [ 113.901797][ T6300] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 113.913233][ T6298] IPVS: using max 29 ests per chain, 69600 per kthread [ 113.954408][ T5624] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 113.956820][ T6019] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 114.129800][ T5624] usb 6-1: Using ep0 maxpacket: 8 [ 114.144125][ T5624] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 114.173003][ T5624] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 114.173148][ T5624] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 114.173182][ T5624] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 114.173209][ T5624] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 173 [ 114.173254][ T5624] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.198392][ T5624] usb 6-1: config 0 descriptor?? [ 114.236769][ T6290] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 114.672219][ T6019] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.682646][ T6019] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 114.734022][ T5621] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 114.734960][ T5624] usb 6-1: USB disconnect, device number 3 [ 114.904277][ T6019] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.905670][ T6019] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 114.938202][ T6019] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.950276][ T6019] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 115.008537][ T6019] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 115.195123][ T31] audit: type=1326 audit(1791367801.620:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.2.113" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37759e199 code=0x7ffc0000 [ 115.196296][ T31] audit: type=1326 audit(1791367801.630:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.2.113" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37759e199 code=0x7ffc0000 [ 115.200487][ T31] audit: type=1326 audit(1791367801.630:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.2.113" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37759e199 code=0x7ffc0000 [ 115.202458][ T31] audit: type=1326 audit(1791367801.630:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.2.113" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37759e199 code=0x7ffc0000 [ 115.202822][ T31] audit: type=1326 audit(1791367801.630:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.2.113" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fc37759e199 code=0x7ffc0000 [ 115.202872][ T31] audit: type=1326 audit(1791367801.630:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.2.113" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37759e199 code=0x7ffc0000 [ 115.202926][ T31] audit: type=1326 audit(1791367801.630:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.2.113" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37759e199 code=0x7ffc0000 [ 115.309809][ T31] audit: type=1326 audit(1791367801.740:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.2.113" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37759e199 code=0x7ffc0000 [ 115.309870][ T31] audit: type=1326 audit(1791367801.740:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.2.113" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37759e199 code=0x7ffc0000 [ 115.407594][ T31] audit: type=1326 audit(1791367801.810:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.2.113" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc37759e199 code=0x7ffc0000 [ 115.608142][ T6019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.719888][ T6332] syzkaller0: entered promiscuous mode [ 115.719916][ T6332] syzkaller0: entered allmulticast mode [ 115.732852][ T6342] loop5: detected capacity change from 0 to 128 [ 115.746631][ T6342] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 115.767507][ T6332] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 115.770588][ T6019] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.837515][ T6345] loop4: detected capacity change from 0 to 256 [ 116.018274][ T6345] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.077138][ T6287] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.077254][ T6287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.210449][ T6287] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.210569][ T6287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.349622][ T6352] FAT-fs (loop4): error, invalid FAT chain (i_pos 196, last_block 8200) [ 116.349657][ T6352] FAT-fs (loop4): Filesystem has been set read-only [ 117.342029][ T6379] loop5: detected capacity change from 0 to 4096 [ 117.372438][ T6379] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 117.388230][ T6379] ntfs3(loop5): ino=0, mi_enum_attr [ 117.388258][ T6379] ntfs3(loop5): ino=0, Correct links count -> 1. [ 117.388559][ T6379] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 117.512153][ T6385] process 'syz.4.125' launched './file0' with NULL argv: empty string added [ 117.580228][ T6379] ntfs3(loop5): volume is dirty and "force" flag is not set! [ 118.179142][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.130'. [ 118.194407][ T5750] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 118.347107][ T5750] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 118.350432][ T5750] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.350486][ T5750] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 118.350517][ T5750] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 118.350563][ T5750] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.539071][ T6403] warning: `syz.2.132' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 118.881368][ T6418] netlink: 'syz.2.135': attribute type 1 has an invalid length. [ 118.912950][ T6019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.932756][ T5750] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 118.932783][ T5750] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 118.998399][ T5750] cxacru 6-1:1.0: probe with driver cxacru failed with error -71 [ 119.025254][ T5750] usb 6-1: USB disconnect, device number 4 [ 119.321434][ T6424] FAULT_INJECTION: forcing a failure. [ 119.321434][ T6424] name failslab, interval 1, probability 0, space 0, times 0 [ 119.321474][ T6424] CPU: 0 UID: 0 PID: 6424 Comm: syz.0.137 Not tainted syzkaller #0 PREEMPT(full) [ 119.321502][ T6424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 119.321517][ T6424] Call Trace: [ 119.321528][ T6424] [ 119.321539][ T6424] dump_stack_lvl+0xe8/0x150 [ 119.321582][ T6424] should_fail_ex+0x410/0x560 [ 119.321620][ T6424] should_failslab+0xa8/0x100 [ 119.321655][ T6424] ? do_getname+0x2e/0x250 [ 119.321689][ T6424] kmem_cache_alloc_noprof+0xa1/0x600 [ 119.321719][ T6424] ? do_getname+0x2e/0x250 [ 119.321753][ T6424] ? irqentry_exit+0x218/0x920 [ 119.321795][ T6424] do_getname+0x2e/0x250 [ 119.321827][ T6424] ? getname_flags+0x11/0x20 [ 119.321864][ T6424] __se_sys_statx+0xd7/0x2a0 [ 119.321908][ T6424] ? __pfx___se_sys_statx+0x10/0x10 [ 119.321951][ T6424] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.321981][ T6424] ? __se_sys_futex+0x3a8/0x450 [ 119.322026][ T6424] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.322054][ T6424] ? rcu_is_watching+0x16/0xb0 [ 119.322087][ T6424] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.322123][ T6424] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.322151][ T6424] ? __x64_sys_statx+0x20/0xc0 [ 119.322190][ T6424] do_syscall_64+0x166/0x520 [ 119.322232][ T6424] ? trace_irq_disable+0x3b/0x140 [ 119.322259][ T6424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.322291][ T6424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.322316][ T6424] RIP: 0033:0x7fb1f2f9e199 [ 119.322339][ T6424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.322359][ T6424] RSP: 002b:00007fb1f3d82028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 119.322386][ T6424] RAX: ffffffffffffffda RBX: 00007fb1f3225fa0 RCX: 00007fb1f2f9e199 [ 119.322404][ T6424] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000003 [ 119.322420][ T6424] RBP: 00007fb1f30358e0 R08: 0000000000000000 R09: 0000000000000000 [ 119.322436][ T6424] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 119.322451][ T6424] R13: 00007fb1f3226038 R14: 00007fb1f3225fa0 R15: 00007ffc65b196e8 [ 119.322490][ T6424] [ 120.054440][ T6019] veth0_vlan: entered promiscuous mode [ 120.081631][ T6019] veth1_vlan: entered promiscuous mode [ 120.132744][ T6452] FAULT_INJECTION: forcing a failure. [ 120.132744][ T6452] name failslab, interval 1, probability 0, space 0, times 0 [ 120.132783][ T6452] CPU: 0 UID: 0 PID: 6452 Comm: syz.0.144 Not tainted syzkaller #0 PREEMPT(full) [ 120.132810][ T6452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 120.132825][ T6452] Call Trace: [ 120.132835][ T6452] [ 120.132845][ T6452] dump_stack_lvl+0xe8/0x150 [ 120.132887][ T6452] should_fail_ex+0x410/0x560 [ 120.132925][ T6452] should_failslab+0xa8/0x100 [ 120.132962][ T6452] __kmalloc_cache_noprof+0xa3/0x600 [ 120.132990][ T6452] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.133022][ T6452] ? nd_alloc_stack+0x7d/0xf0 [ 120.133049][ T6452] ? nd_alloc_stack+0x7d/0xf0 [ 120.133080][ T6452] nd_alloc_stack+0x7d/0xf0 [ 120.133106][ T6452] pick_link+0xdb2/0xfe0 [ 120.133150][ T6452] ? read_word_at_a_time+0x16/0x20 [ 120.133186][ T6452] step_into_slowpath+0x58a/0x820 [ 120.133229][ T6452] ? __pfx_step_into_slowpath+0x10/0x10 [ 120.133271][ T6452] ? inode_permission+0x2bc/0x5f0 [ 120.133313][ T6452] link_path_walk+0xd5e/0x1910 [ 120.133375][ T6452] path_lookupat+0xe4/0x8c0 [ 120.133430][ T6452] filename_lookup+0x265/0x5d0 [ 120.133475][ T6452] ? __pfx_filename_lookup+0x10/0x10 [ 120.133542][ T6452] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.133571][ T6452] ? strncpy_from_user+0x150/0x2c0 [ 120.133605][ T6452] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.133634][ T6452] ? do_getname+0x151/0x250 [ 120.133672][ T6452] user_path_at+0x40/0x160 [ 120.133701][ T6452] __se_sys_mount+0x2dc/0x420 [ 120.133752][ T6452] ? __pfx___se_sys_mount+0x10/0x10 [ 120.133797][ T6452] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.133825][ T6452] ? __x64_sys_mount+0x20/0xc0 [ 120.133866][ T6452] do_syscall_64+0x166/0x520 [ 120.133904][ T6452] ? trace_irq_disable+0x3b/0x140 [ 120.133932][ T6452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.133964][ T6452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.133990][ T6452] RIP: 0033:0x7fb1f2f9e199 [ 120.134012][ T6452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.134032][ T6452] RSP: 002b:00007fb1f3d82028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 120.134058][ T6452] RAX: ffffffffffffffda RBX: 00007fb1f3225fa0 RCX: 00007fb1f2f9e199 [ 120.134077][ T6452] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000000 [ 120.134093][ T6452] RBP: 00007fb1f30358e0 R08: 0000200000000200 R09: 0000000000000000 [ 120.134110][ T6452] R10: 0000000000100422 R11: 0000000000000246 R12: 0000000000000000 [ 120.134126][ T6452] R13: 00007fb1f3226038 R14: 00007fb1f3225fa0 R15: 00007ffc65b196e8 [ 120.134164][ T6452] [ 120.256031][ T6019] veth0_macvtap: entered promiscuous mode [ 120.289428][ T6019] veth1_macvtap: entered promiscuous mode [ 120.461753][ T6456] loop1: detected capacity change from 0 to 2048 [ 120.486182][ T6019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.567721][ T6019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.586293][ T6456] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.693511][ T6287] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.693565][ T6287] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.693605][ T6287] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.693645][ T6287] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.830300][ T31] kauditd_printk_skb: 32 callbacks suppressed [ 120.830324][ T31] audit: type=1800 audit(1791367807.260:44): pid=6456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.147" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 121.140210][ T3329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.140238][ T3329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.245650][ T5956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.245677][ T5956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.246611][ T5956] wlan1: Trigger new scan to find an IBSS to join [ 121.485788][ T5342] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 121.634283][ T5342] usb 5-1: Using ep0 maxpacket: 8 [ 121.637774][ T5342] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 121.655128][ T5342] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 121.655194][ T5342] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.655219][ T5342] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.655246][ T5342] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 121.655273][ T5342] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.655319][ T5342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.902301][ T5342] usb 5-1: usb_control_msg returned -32 [ 121.902354][ T5342] usbtmc 5-1:16.0: can't read capabilities [ 122.585334][ T6489] netlink: 36 bytes leftover after parsing attributes in process `syz.2.156'. [ 122.616186][ T6489] netlink: 36 bytes leftover after parsing attributes in process `syz.2.156'. [ 122.910213][ T6496] loop1: detected capacity change from 0 to 128 [ 123.018850][ T6496] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.046243][ T6496] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.076635][ T6498] macvlan2: entered promiscuous mode [ 123.076661][ T6498] macvlan2: entered allmulticast mode [ 123.079292][ T6498] dummy0: entered allmulticast mode [ 123.080068][ T6498] dummy0: entered promiscuous mode [ 123.107606][ T6498] team0: Port device macvlan2 added [ 123.493578][ T6505] netlink: 'syz.0.163': attribute type 10 has an invalid length. [ 123.553538][ T5620] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.709724][ T6512] netlink: 'syz.0.163': attribute type 10 has an invalid length. [ 123.744873][ T6505] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 123.749302][ T6505] team0: Port device netdevsim1 added [ 123.766777][ C0] vcan0: j1939_tp_rxtimer: 0xffff888052c48400: rx timeout, send abort [ 123.889473][ T6512] team0: Port device netdevsim1 removed [ 123.951816][ T6512] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 123.972861][ T6512] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 124.204970][ T13] wlan1: Trigger new scan to find an IBSS to join [ 124.268198][ C0] vcan0: j1939_tp_rxtimer: 0xffff888052c48400: abort rx timeout. Force session deactivation [ 124.270786][ C0] vcan0: j1939_tp_rxtimer: 0xffff888052c4a000: rx timeout, send abort [ 124.402920][ T1212] usb 5-1: USB disconnect, device number 5 [ 124.770838][ C0] vcan0: j1939_tp_rxtimer: 0xffff888052c4a000: abort rx timeout. Force session deactivation [ 125.277659][ T6588] loop4: detected capacity change from 0 to 2048 [ 125.382421][ T6588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 125.421190][ T1212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 125.476757][ T1212] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 125.492924][ T6588] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #12: comm syz.4.173: corrupted in-inode xattr: e_value size too large [ 125.548836][ T6588] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #12: comm syz.4.173: corrupted in-inode xattr: e_value size too large [ 125.750774][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 125.980344][ T6596] fido_id[6596]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 126.240921][ T6614] vcan0: tx drop: invalid da for name 0x0004000000400000 [ 126.453571][ T6616] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 126.453599][ T6616] overlayfs: failed to set xattr on upper [ 126.453608][ T6616] overlayfs: ...falling back to redirect_dir=nofollow. [ 126.453618][ T6616] overlayfs: ...falling back to metacopy=off. [ 126.453627][ T6616] overlayfs: ...falling back to index=off. [ 126.453637][ T6616] overlayfs: ...falling back to uuid=null. [ 126.621528][ T6609] loop0: detected capacity change from 0 to 32768 [ 126.653492][ T6621] ip_tables: iptables: counters copy to user failed while replacing table [ 126.666638][ T6609] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 126.666660][ T6609] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 126.773894][ T6609] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 126.886943][ T5750] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 126.886967][ T5750] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 127.246639][ T88] wlan1: Trigger new scan to find an IBSS to join [ 127.414035][ T5750] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 527ms [ 127.436007][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.6.193'. [ 127.436086][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.6.193'. [ 127.436123][ T6643] netlink: 20 bytes leftover after parsing attributes in process `syz.6.193'. [ 127.439775][ T5750] gfs2: fsid=syz:syz.0: jid=0: Done [ 127.440683][ T6609] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 128.147756][ T6563] wlan1: Creating new IBSS network, BSSID ba:b6:0e:2e:21:56 [ 128.194256][ T5342] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 128.282618][ T6639] loop2: detected capacity change from 0 to 32768 [ 128.354665][ T5342] usb 2-1: Using ep0 maxpacket: 32 [ 128.357198][ T5342] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 128.357773][ T5342] usb 2-1: config 0 has no interfaces? [ 128.360784][ T5342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.360813][ T5342] usb 2-1: Product: syz [ 128.360830][ T5342] usb 2-1: Manufacturer: syz [ 128.360847][ T5342] usb 2-1: SerialNumber: syz [ 128.374174][ T5342] usb 2-1: config 0 descriptor?? [ 128.501977][ T6639] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 128.767801][ T31] audit: type=1800 audit(1791367815.200:45): pid=6639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.189" name="file1" dev="loop2" ino=17059 res=0 errno=0 [ 128.874524][ T6668] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 128.874641][ T6668] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 128.922731][ T6668] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 128.945125][ T6668] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 128.945199][ T6668] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 128.981373][ T6668] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 129.008322][ T6639] syz.2.189 (6639) used greatest stack depth: 19024 bytes left [ 129.056634][ T6668] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 129.056732][ T6668] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 129.094416][ T6668] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 129.104932][ T6668] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 129.105004][ T6668] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 129.157903][ T6668] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 129.199848][ T6668] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 129.199929][ T6668] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 129.208230][ T5619] ocfs2: Unmounting device (7,2) on (node local) [ 129.245016][ T6668] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 129.276231][ T6668] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.276326][ T6668] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 129.287948][ T6688] netlink: 52 bytes leftover after parsing attributes in process `syz.0.198'. [ 129.321563][ T6668] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 129.335004][ T6688] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.335652][ T6688] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.363112][ T6688] netlink: 52 bytes leftover after parsing attributes in process `syz.0.198'. [ 129.375193][ T6662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.383359][ T6662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.458247][ T6662] loop5: detected capacity change from 0 to 7 [ 129.493919][ T6662] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 129.493953][ T6662] loop5: partition table partially beyond EOD, truncated [ 129.494180][ T6662] loop5: p1 size 2214597121 extends beyond EOD, truncated [ 129.613002][ T5342] usb 2-1: USB disconnect, device number 4 [ 129.671416][ T6694] ip_tables: iptables: counters copy to user failed while replacing table [ 129.869127][ T5632] udevd[5632]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 130.012345][ T6708] loop4: detected capacity change from 0 to 512 [ 130.047046][ T6707] ip_tables: iptables: counters copy to user failed while replacing table [ 130.086812][ T6708] EXT4-fs error (device loop4): __ext4_iget:5592: inode #11: block 1: comm syz.4.207: invalid block [ 130.087011][ T6708] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 130.092557][ T6707] ip_tables: iptables: counters copy to user failed while replacing table [ 130.093317][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 130.093338][ C1] EXT4-fs (loop4): initial error at time 1791367816: __ext4_iget:5592: inode 11: block 1 [ 130.093380][ C1] EXT4-fs (loop4): last error at time 1791367816: __ext4_iget:5592: inode 11: block 1 [ 130.155513][ T6708] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.207: couldn't read orphan inode 11 (err -117) [ 130.155717][ T6708] loop4: lost filesystem error report for type 5 error -117 [ 130.162679][ T6708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.206764][ T6703] fuse: root generation should be zero [ 130.335040][ T6708] EXT4-fs error (device loop4): htree_dirblock_to_tree:1051: inode #2: comm syz.4.207: Directory hole found for htree leaf block 0 [ 130.533452][ T5633] Bluetooth: hci2: command 0x0c1a tx timeout [ 131.005997][ T5633] Bluetooth: hci5: command 0x0c1a tx timeout [ 131.102323][ T5633] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.163203][ T5633] Bluetooth: hci3: command 0x0c1a tx timeout [ 131.198314][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.243572][ T5633] Bluetooth: hci4: command 0x0c1a tx timeout [ 131.273902][ T6737] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 131.326006][ T5633] Bluetooth: hci0: command 0x0c1a tx timeout [ 131.513547][ T6747] loop1: detected capacity change from 0 to 512 [ 131.521863][ T6747] EXT4-fs: Ignoring removed nobh option [ 131.553223][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 131.576050][ T6747] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 131.576074][ T6747] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 131.669160][ T6747] EXT4-fs (loop1): 1 truncate cleaned up [ 131.671723][ T6747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.704665][ T10] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 131.707087][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.707113][ T10] usb 6-1: config 0 has no interfaces? [ 131.709539][ T10] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 131.709565][ T10] usb 6-1: Product: syz [ 131.723817][ T10] usb 6-1: config 0 descriptor?? [ 131.779288][ T6747] syz.1.217 (pid 6747) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 131.977300][ T5342] usb 6-1: USB disconnect, device number 5 [ 132.143995][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.210828][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.210917][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.603656][ T5633] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.619888][ T6784] hsr0: entered promiscuous mode [ 133.093214][ T5633] Bluetooth: hci5: command 0x0c1a tx timeout [ 133.163268][ T5633] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.244018][ T5633] Bluetooth: hci3: command 0x0c1a tx timeout [ 133.323254][ T5633] Bluetooth: hci4: command 0x0c1a tx timeout [ 133.403674][ T5633] Bluetooth: hci0: command 0x0c1a tx timeout [ 133.607470][ T6786] hsr_slave_0: left promiscuous mode [ 133.655750][ T6781] loop2: detected capacity change from 0 to 131072 [ 133.673154][ T6786] hsr_slave_1: left promiscuous mode [ 133.682357][ T6781] F2FS-fs (loop2): invalid crc value [ 133.812333][ T6781] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 133.830353][ T6781] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 133.992006][ T6799] Illegal XDP return value 306073633 on prog (id 24) dev N/A, expect packet loss! [ 134.267249][ T6806] loop4: detected capacity change from 0 to 512 [ 134.285102][ T6806] EXT4-fs: Ignoring removed bh option [ 134.350821][ T6806] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 134.350857][ T6806] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 134.350882][ T6806] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.235: Corrupt directory, running e2fsck is recommended [ 134.367901][ T6806] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 134.368019][ T6806] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.235: corrupted in-inode xattr: e_name out of bounds [ 134.368049][ T6806] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 134.383595][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 134.383623][ C1] EXT4-fs (loop4): initial error at time 1791367820: ext4_iget_extra_inode:5210: inode 15 [ 134.383660][ C1] EXT4-fs (loop4): last error at time 1791367820: ext4_iget_extra_inode:5210: inode 15 [ 134.394967][ T6808] netlink: 'syz.5.236': attribute type 1 has an invalid length. [ 134.394990][ T6808] netlink: 'syz.5.236': attribute type 22 has an invalid length. [ 134.395738][ T6808] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.398277][ T6808] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.431971][ T6806] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.235: couldn't read orphan inode 15 (err -117) [ 134.432011][ T6806] loop4: lost filesystem error report for type 5 error -117 [ 134.440392][ T6806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.492227][ T6806] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 134.492264][ T6806] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 134.492286][ T6806] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.235: Corrupt directory, running e2fsck is recommended [ 134.548342][ T6806] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 134.548378][ T6806] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 134.548399][ T6806] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.235: Corrupt directory, running e2fsck is recommended [ 134.623264][ T6806] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 134.623303][ T6806] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 134.623324][ T6806] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.235: Corrupt directory, running e2fsck is recommended [ 134.628223][ T6806] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 134.636204][ T6806] EXT4-fs error (device loop4): ext4_readdir:280: inode #2: block 3: comm syz.4.235: path /38/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 134.693324][ T5633] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.722916][ T6806] EXT4-fs error (device loop4): ext4_readdir:280: inode #2: block 8: comm syz.4.235: path /38/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 134.861555][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.063885][ T6821] loop5: detected capacity change from 0 to 1024 [ 135.157127][ T6823] loop0: detected capacity change from 0 to 512 [ 135.170334][ T5633] Bluetooth: hci5: command 0x0c1a tx timeout [ 135.226565][ T6823] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.242: iget: bad extended attribute block 134217728 [ 135.226606][ T6823] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.230186][ T6823] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.242: couldn't read orphan inode 15 (err -117) [ 135.230222][ T6823] loop0: lost filesystem error report for type 5 error -117 [ 135.246674][ T5633] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.262009][ T6823] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.323249][ T5633] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.403317][ T5633] Bluetooth: hci4: command 0x0c1a tx timeout [ 135.483148][ T5633] Bluetooth: hci0: command 0x0c1a tx timeout [ 136.142638][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.402772][ T6851] netlink: 'syz.0.248': attribute type 1 has an invalid length. [ 136.500319][ T6851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.620319][ T6853] bond1: (slave geneve2): making interface the new active one [ 136.644578][ T6853] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 136.869454][ T6861] loop4: detected capacity change from 0 to 2048 [ 136.931265][ T6840] loop6: detected capacity change from 0 to 32768 [ 136.978450][ T6861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.978555][ T6861] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.170047][ T6840] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 137.344166][ T6840] XFS (loop6): Ending clean mount [ 137.367055][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.234'. [ 137.502888][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.517369][ T5633] Bluetooth: hci5: unexpected event for opcode 0x0c03 [ 137.535308][ T5633] Bluetooth: hci5: unexpected event for opcode 0x1003 [ 137.537693][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 10 > 9 [ 137.537727][ T5633] Bluetooth: hci5: unexpected event for opcode 0x1001 [ 137.547383][ T5633] Bluetooth: hci5: unexpected event for opcode 0x1009 [ 137.548724][ T5633] Bluetooth: hci5: unexpected event for opcode 0x0c56 [ 137.636248][ T6845] loop5: detected capacity change from 0 to 32768 [ 137.652217][ T6845] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.246 (6845) [ 137.710384][ T6019] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 137.791674][ T6845] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 137.791719][ T6845] BTRFS info (device loop5): using blake2b checksum algorithm [ 138.128220][ T6845] BTRFS info (device loop5): enabling ssd optimizations [ 138.128254][ T6845] BTRFS info (device loop5): turning on async discard [ 138.128273][ T6845] BTRFS info (device loop5): enabling free space tree [ 138.128293][ T6845] BTRFS info (device loop5): use zstd compression, level 3 [ 138.517465][ T31] audit: type=1800 audit(1791367824.950:46): pid=6845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.246" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 138.639802][ T6915] loop6: detected capacity change from 0 to 256 [ 138.728261][ T6915] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8604b368, utbl_chksum : 0xe619d30d) [ 138.728634][ T6915] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 138.736199][ T6915] exFAT-fs (loop6): failed to load alloc-bitmap [ 138.736214][ T6915] exFAT-fs (loop6): failed to recognize exfat type [ 138.789944][ T6881] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 138.936087][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.056881][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 139.059191][ T5616] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 139.409926][ T6920] fido_id[6920]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 140.181345][ T6956] jffs2: notice: (6956) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 140.472962][ T6965] FAULT_INJECTION: forcing a failure. [ 140.472962][ T6965] name fail_futex, interval 1, probability 0, space 0, times 1 [ 140.473009][ T6965] CPU: 0 UID: 0 PID: 6965 Comm: syz.1.277 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.473047][ T6965] Tainted: [L]=SOFTLOCKUP [ 140.473058][ T6965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 140.473073][ T6965] Call Trace: [ 140.473084][ T6965] [ 140.473095][ T6965] dump_stack_lvl+0xe8/0x150 [ 140.473139][ T6965] should_fail_ex+0x410/0x560 [ 140.473179][ T6965] get_futex_key+0x1b4/0x1580 [ 140.473227][ T6965] ? __pfx_get_futex_key+0x10/0x10 [ 140.473268][ T6965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.473299][ T6965] ? update_se+0x90/0x1080 [ 140.473336][ T6965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.473374][ T6965] futex_wait_setup+0x4a/0x590 [ 140.473407][ T6965] ? __futex_wait+0xdf/0x400 [ 140.473438][ T6965] __futex_wait+0x15f/0x400 [ 140.473471][ T6965] ? __pfx___futex_wait+0x10/0x10 [ 140.473501][ T6965] ? __pfx_futex_wake_mark+0x10/0x10 [ 140.473532][ T6965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.473562][ T6965] ? try_to_wake_up+0x8c5/0x14d0 [ 140.473602][ T6965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.473638][ T6965] futex_wait+0x121/0x390 [ 140.473666][ T6965] ? __pfx_futex_wait+0x10/0x10 [ 140.473706][ T6965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.473736][ T6965] ? __mutex_unlock_slowpath+0x731/0x900 [ 140.473783][ T6965] do_futex+0x3e7/0x4e0 [ 140.473825][ T6965] ? __pfx_do_futex+0x10/0x10 [ 140.473858][ T6965] ? kfree+0x4d/0x650 [ 140.473893][ T6965] __se_sys_futex+0x3a8/0x450 [ 140.473937][ T6965] ? __pfx___se_sys_futex+0x10/0x10 [ 140.473973][ T6965] ? rcu_is_watching+0x16/0xb0 [ 140.474014][ T6965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.474044][ T6965] ? __x64_sys_futex+0x21/0xf0 [ 140.474085][ T6965] do_syscall_64+0x166/0x520 [ 140.474124][ T6965] ? trace_irq_disable+0x3b/0x140 [ 140.474152][ T6965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.474185][ T6965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.474212][ T6965] RIP: 0033:0x7f591219e199 [ 140.474235][ T6965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.474261][ T6965] RSP: 002b:00007f591310f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 140.474289][ T6965] RAX: ffffffffffffffda RBX: 00007f5912425fa8 RCX: 00007f591219e199 [ 140.474308][ T6965] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5912425fa8 [ 140.474324][ T6965] RBP: 00007f5912425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 140.474341][ T6965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.474356][ T6965] R13: 00007f5912426038 R14: 00007fff147a1fc0 R15: 00007fff147a20a8 [ 140.474394][ T6965] [ 140.897197][ T6974] evm: overlay not supported [ 141.044866][ T6978] device-mapper: ioctl: Invalid target message parameters. [ 141.273471][ T6986] FAULT_INJECTION: forcing a failure. [ 141.273471][ T6986] name failslab, interval 1, probability 0, space 0, times 0 [ 141.273513][ T6986] CPU: 1 UID: 0 PID: 6986 Comm: syz.5.287 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.273546][ T6986] Tainted: [L]=SOFTLOCKUP [ 141.273555][ T6986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 141.273570][ T6986] Call Trace: [ 141.273579][ T6986] [ 141.273590][ T6986] dump_stack_lvl+0xe8/0x150 [ 141.273633][ T6986] should_fail_ex+0x410/0x560 [ 141.273672][ T6986] should_failslab+0xa8/0x100 [ 141.273710][ T6986] __kmalloc_cache_noprof+0xa3/0x600 [ 141.273740][ T6986] ? __kmalloc_noprof+0x1ab/0x720 [ 141.273766][ T6986] ? apply_wqattrs_prepare+0x124/0xdc0 [ 141.273800][ T6986] ? apply_wqattrs_prepare+0x124/0xdc0 [ 141.273843][ T6986] apply_wqattrs_prepare+0x124/0xdc0 [ 141.273877][ T6986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.273906][ T6986] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 141.273931][ T6986] ? pcpu_alloc_noprof+0x100f/0x1900 [ 141.273960][ T6986] ? pcpu_alloc_noprof+0x1036/0x1900 [ 141.274004][ T6986] __alloc_workqueue+0x11be/0x1fe0 [ 141.274037][ T6986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.274077][ T6986] alloc_workqueue_noprof+0xe3/0x210 [ 141.274105][ T6986] ? net_generic+0x1e/0x240 [ 141.274140][ T6986] ? net_generic+0x1e/0x240 [ 141.274179][ T6986] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 141.274203][ T6986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.274245][ T6986] ? net_generic+0x1e/0x240 [ 141.274279][ T6986] ? net_generic+0x1e/0x240 [ 141.274315][ T6986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.274348][ T6986] bond_init+0xd4/0x8b0 [ 141.274380][ T6986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.274413][ T6986] ? __pfx_bond_init+0x10/0x10 [ 141.274444][ T6986] ? __kmalloc_cache_noprof+0x14d/0x600 [ 141.274471][ T6986] ? register_netdevice+0x57e/0x1eb0 [ 141.274495][ T6986] ? register_netdevice+0x57e/0x1eb0 [ 141.274529][ T6986] register_netdevice+0x6a1/0x1eb0 [ 141.274554][ T6986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.274586][ T6986] ? trace_kmalloc+0x2a/0xf0 [ 141.274616][ T6986] ? alloc_netdev_mqs+0xd44/0x12a0 [ 141.274642][ T6986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.274671][ T6986] ? __kvmalloc_node_noprof+0x52f/0x820 [ 141.274707][ T6986] ? __pfx_register_netdevice+0x10/0x10 [ 141.274758][ T6986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.274787][ T6986] ? validate_linkmsg+0x765/0x950 [ 141.274830][ T6986] bond_newlink+0x48/0xd0 [ 141.274865][ T6986] ? __pfx_bond_newlink+0x10/0x10 [ 141.274903][ T6986] rtnl_newlink_create+0x305/0x7b0 [ 141.274936][ T6986] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 141.274966][ T6986] ? __pfx___mutex_lock+0x10/0x10 [ 141.275003][ T6986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.275044][ T6986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.275073][ T6986] ? ns_capable+0x89/0xe0 [ 141.275113][ T6986] rtnl_newlink+0x166d/0x1c30 [ 141.275168][ T6986] ? __pfx_rtnl_newlink+0x10/0x10 [ 141.275203][ T6986] ? do_syscall_64+0x166/0x520 [ 141.275243][ T6986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.275308][ T6986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.275341][ T6986] ? kasan_quarantine_put+0xbb/0x1f0 [ 141.275369][ T6986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.275398][ T6986] ? lockdep_hardirqs_on+0x7b/0x110 [ 141.275434][ T6986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.275467][ T6986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.275496][ T6986] ? kmem_cache_free+0x182/0x650 [ 141.275544][ T6986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.275573][ T6986] ? __lock_acquire+0x747/0x2de0 [ 141.275605][ T6986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.275641][ T6986] ? __local_bh_enable_ip+0xd6/0x140 [ 141.275674][ T6986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.275703][ T6986] ? lockdep_hardirqs_on+0x7b/0x110 [ 141.275738][ T6986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.275766][ T6986] ? __local_bh_enable_ip+0xd6/0x140 [ 141.275809][ T6986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.275838][ T6986] ? lock_acquire+0x115/0x350 [ 141.275870][ T6986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.275911][ T6986] ? __pfx_rtnl_newlink+0x10/0x10 [ 141.275946][ T6986] rtnetlink_rcv_msg+0x802/0xc00 [ 141.275988][ T6986] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 141.276023][ T6986] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 141.276058][ T6986] ? ref_tracker_free+0x689/0x830 [ 141.276097][ T6986] ? __pfx_ref_tracker_free+0x10/0x10 [ 141.276130][ T6986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.276159][ T6986] ? __asan_memcpy+0x40/0x70 [ 141.276184][ T6986] ? __skb_clone+0x5c/0x6c0 [ 141.276225][ T6986] netlink_rcv_skb+0x226/0x4a0 [ 141.276255][ T6986] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 141.276294][ T6986] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 141.276337][ T6986] ? netlink_deliver_tap+0x2e/0x1b0 [ 141.276365][ T6986] ? netlink_deliver_tap+0x2e/0x1b0 [ 141.276400][ T6986] netlink_unicast+0x7bd/0x940 [ 141.276438][ T6986] netlink_sendmsg+0x813/0xb40 [ 141.276479][ T6986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.276517][ T6986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.276550][ T6986] ? apparmor_socket_sendmsg+0x18b/0x360 [ 141.276582][ T6986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.276614][ T6986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.276642][ T6986] sock_sendmsg_nosec+0x13a/0x180 [ 141.276676][ T6986] ____sys_sendmsg+0x54e/0x850 [ 141.276723][ T6986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.276765][ T6986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.276800][ T6986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.276829][ T6986] ? import_iovec+0x73/0xa0 [ 141.276869][ T6986] ___sys_sendmsg+0x2a5/0x360 [ 141.276906][ T6986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.276935][ T6986] ? __lock_acquire+0x747/0x2de0 [ 141.276967][ T6986] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.277012][ T6986] ? futex_wait+0x2a2/0x390 [ 141.277073][ T6986] ? __fget_files+0x2a/0x420 [ 141.277109][ T6986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.277137][ T6986] ? __fget_files+0x3a2/0x420 [ 141.277188][ T6986] __x64_sys_sendmsg+0x1b1/0x290 [ 141.277232][ T6986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.277265][ T6986] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 141.277315][ T6986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 141.277359][ T6986] do_syscall_64+0x166/0x520 [ 141.277396][ T6986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.277429][ T6986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.277454][ T6986] RIP: 0033:0x7f809979e199 [ 141.277478][ T6986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.277497][ T6986] RSP: 002b:00007f809a746028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.277525][ T6986] RAX: ffffffffffffffda RBX: 00007f8099a25fa0 RCX: 00007f809979e199 [ 141.277543][ T6986] RDX: 0000000020040040 RSI: 0000200000000000 RDI: 0000000000000003 [ 141.277565][ T6986] RBP: 00007f80998358e0 R08: 0000000000000000 R09: 0000000000000000 [ 141.277580][ T6986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.277596][ T6986] R13: 00007f8099a26038 R14: 00007f8099a25fa0 R15: 00007ffc81869f98 [ 141.277636][ T6986] [ 142.661994][ T6995] capability: warning: `syz.6.290' uses deprecated v2 capabilities in a way that may be insecure [ 142.684969][ T6993] FAULT_INJECTION: forcing a failure. [ 142.684969][ T6993] name failslab, interval 1, probability 0, space 0, times 0 [ 142.685011][ T6993] CPU: 0 UID: 0 PID: 6993 Comm: syz.0.289 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.685046][ T6993] Tainted: [L]=SOFTLOCKUP [ 142.685055][ T6993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 142.685070][ T6993] Call Trace: [ 142.685079][ T6993] [ 142.685091][ T6993] dump_stack_lvl+0xe8/0x150 [ 142.685136][ T6993] should_fail_ex+0x410/0x560 [ 142.685177][ T6993] should_failslab+0xa8/0x100 [ 142.685214][ T6993] __kmalloc_noprof+0xfe/0x720 [ 142.685244][ T6993] ? vb2_core_reqbufs+0x931/0x1470 [ 142.685268][ T6993] ? vb2_core_reqbufs+0x931/0x1470 [ 142.685300][ T6993] vb2_core_reqbufs+0x931/0x1470 [ 142.685343][ T6993] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 142.685367][ T6993] ? vb2_verify_memory_type+0x1fc/0x570 [ 142.685396][ T6993] ? vb2_reqbufs+0x399/0x630 [ 142.685446][ T6993] v4l2_m2m_ioctl_reqbufs+0x10d/0x200 [ 142.685483][ T6993] __video_do_ioctl+0x8af/0xc70 [ 142.685524][ T6993] ? __pfx___video_do_ioctl+0x10/0x10 [ 142.685569][ T6993] video_usercopy+0x860/0x1430 [ 142.685606][ T6993] ? __pfx___video_do_ioctl+0x10/0x10 [ 142.685637][ T6993] ? __pfx_video_usercopy+0x10/0x10 [ 142.685679][ T6993] ? __fget_files+0x2a/0x420 [ 142.685721][ T6993] ? __fget_files+0x2a/0x420 [ 142.685762][ T6993] ? __fget_files+0x3a2/0x420 [ 142.685803][ T6993] v4l2_ioctl+0x18d/0x1e0 [ 142.685832][ T6993] ? __pfx_v4l2_ioctl+0x10/0x10 [ 142.685858][ T6993] __se_sys_ioctl+0xfc/0x170 [ 142.685892][ T6993] do_syscall_64+0x166/0x520 [ 142.685930][ T6993] ? trace_irq_disable+0x3b/0x140 [ 142.685958][ T6993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.685990][ T6993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.686015][ T6993] RIP: 0033:0x7fb1f2f9e199 [ 142.686035][ T6993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.686054][ T6993] RSP: 002b:00007fb1f3d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.686080][ T6993] RAX: ffffffffffffffda RBX: 00007fb1f3225fa0 RCX: 00007fb1f2f9e199 [ 142.686099][ T6993] RDX: 00002000000007c0 RSI: 00000000c0145608 RDI: 0000000000000004 [ 142.686116][ T6993] RBP: 00007fb1f30358e0 R08: 0000000000000000 R09: 0000000000000000 [ 142.686131][ T6993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.686146][ T6993] R13: 00007fb1f3226038 R14: 00007fb1f3225fa0 R15: 00007ffc65b196e8 [ 142.686184][ T6993] [ 142.953226][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 143.128829][ T9] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 143.130054][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.130105][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 143.130135][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 143.130180][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.680455][ T9] cxacru 7-1:1.0: send of cm 0x91 failed (-71) [ 143.680487][ T9] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 143.680502][ T9] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 143.742530][ T9] cxacru 7-1:1.0: probe with driver cxacru failed with error -71 [ 143.807321][ T9] usb 7-1: USB disconnect, device number 2 [ 143.851739][ T7011] tipc: Started in network mode [ 143.851766][ T7011] tipc: Node identity 1000004, cluster identity 4711 [ 143.851781][ T7011] tipc: Node number set to 16777220 [ 143.893972][ T7014] FAULT_INJECTION: forcing a failure. [ 143.893972][ T7014] name failslab, interval 1, probability 0, space 0, times 0 [ 143.894064][ T7014] CPU: 1 UID: 0 PID: 7014 Comm: syz.4.297 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.894098][ T7014] Tainted: [L]=SOFTLOCKUP [ 143.894107][ T7014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 143.894122][ T7014] Call Trace: [ 143.894131][ T7014] [ 143.894142][ T7014] dump_stack_lvl+0xe8/0x150 [ 143.894184][ T7014] should_fail_ex+0x410/0x560 [ 143.894223][ T7014] should_failslab+0xa8/0x100 [ 143.894261][ T7014] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 143.894294][ T7014] ? ima_collect_measurement+0x5b8/0xa00 [ 143.894326][ T7014] ? ima_collect_measurement+0x5b8/0xa00 [ 143.894359][ T7014] ? ima_collect_measurement+0x5b8/0xa00 [ 143.894389][ T7014] krealloc_node_align_noprof+0x19a/0x390 [ 143.894428][ T7014] ima_collect_measurement+0x5b8/0xa00 [ 143.894469][ T7014] ? __pfx_ima_collect_measurement+0x10/0x10 [ 143.894509][ T7014] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.894538][ T7014] ? trace_contention_end+0x3d/0x140 [ 143.894609][ T7014] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 143.894658][ T7014] process_measurement+0x1272/0x1c10 [ 143.894704][ T7014] ? __pfx_process_measurement+0x10/0x10 [ 143.894797][ T7014] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.894826][ T7014] ? tomoyo_find_next_domain+0x1713/0x1a90 [ 143.894877][ T7014] ima_bprm_check+0x121/0x180 [ 143.894919][ T7014] ? __pfx_ima_bprm_check+0x10/0x10 [ 143.894956][ T7014] ? tomoyo_bprm_check_security+0xef/0x180 [ 143.894986][ T7014] ? tomoyo_bprm_check_security+0xef/0x180 [ 143.895011][ T7014] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.895041][ T7014] ? tomoyo_bprm_check_security+0x161/0x180 [ 143.895072][ T7014] security_bprm_check+0xcd/0x240 [ 143.895107][ T7014] bprm_execve+0x888/0x1590 [ 143.895153][ T7014] ? __pfx_bprm_execve+0x10/0x10 [ 143.895175][ T7014] ? do_raw_spin_unlock+0xf5/0x200 [ 143.895217][ T7014] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.895245][ T7014] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.895279][ T7014] do_execveat_common+0x4f4/0x670 [ 143.895316][ T7014] __x64_sys_execve+0x97/0xc0 [ 143.895346][ T7014] do_syscall_64+0x166/0x520 [ 143.895382][ T7014] ? trace_irq_disable+0x3b/0x140 [ 143.895408][ T7014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.895437][ T7014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.895462][ T7014] RIP: 0033:0x7f05bfb9e199 [ 143.895484][ T7014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.895505][ T7014] RSP: 002b:00007f05c0b47028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 143.895531][ T7014] RAX: ffffffffffffffda RBX: 00007f05bfe25fa0 RCX: 00007f05bfb9e199 [ 143.895549][ T7014] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 143.895564][ T7014] RBP: 00007f05bfc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 143.895578][ T7014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.895590][ T7011] tipc: Enabled bearer , priority 0 [ 143.895597][ T7014] R13: 00007f05bfe26038 R14: 00007f05bfe25fa0 R15: 00007ffeae053b18 [ 143.895639][ T7014] [ 143.897193][ T31] audit: type=1800 audit(1791367830.330:47): pid=7014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.297" name="file0" dev="tmpfs" ino=285 res=0 errno=0 [ 144.336311][ T7019] tipc: New replicast peer: 172.20.20.187 [ 144.337976][ T7019] tipc: Enabled bearer , priority 10 [ 145.012777][ T7047] loop6: detected capacity change from 0 to 128 [ 145.042232][ T7047] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 145.191861][ T7044] loop1: detected capacity change from 0 to 32768 [ 145.192952][ T7044] xfs: Deprecated parameter 'noikeep' [ 145.192970][ T7044] XFS: noikeep mount option is deprecated. [ 145.244970][ T7044] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 145.518059][ T7077] loop0: detected capacity change from 0 to 512 [ 145.541176][ T7077] EXT4-fs: Ignoring removed mblk_io_submit option [ 145.612955][ T7077] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.310: corrupted in-inode xattr: e_value size too large [ 145.612998][ T7077] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 145.613123][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 145.613145][ C0] EXT4-fs (loop0): initial error at time 1791367832: ext4_iget_extra_inode:5210: inode 15 [ 145.613179][ C0] EXT4-fs (loop0): last error at time 1791367832: ext4_iget_extra_inode:5210: inode 15 [ 145.629466][ T7077] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.310: couldn't read orphan inode 15 (err -117) [ 145.629505][ T7077] loop0: lost filesystem error report for type 5 error -117 [ 145.654858][ T7077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.656007][ T7044] XFS (loop1): Ending clean mount [ 145.701759][ T7044] XFS (loop1): Quotacheck needed: Please wait. [ 145.855927][ T31] audit: type=1800 audit(1791367832.290:48): pid=7072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.308" name="file1" dev="loop6" ino=94 res=0 errno=0 [ 145.878529][ T31] audit: type=1800 audit(1791367832.310:49): pid=7078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.308" name="file1" dev="loop6" ino=94 res=0 errno=0 [ 146.070691][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.130192][ T7044] XFS (loop1): Quotacheck: Done. [ 146.370264][ T7084] loop6: detected capacity change from 0 to 512 [ 146.371443][ T7084] ext3: Unknown parameter 'nouser_xattr' [ 146.457382][ T7087] netlink: 20 bytes leftover after parsing attributes in process `syz.2.313'. [ 146.470826][ T5620] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 146.711075][ T7090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.313'. [ 146.711111][ T7090] nbd: nbd64 already in use [ 146.869694][ T7093] netlink: 20 bytes leftover after parsing attributes in process `syz.0.315'. [ 147.026578][ T7097] erspan1: entered promiscuous mode [ 147.464300][ T7107] xt_hashlimit: size too large, truncated to 1048576 [ 148.156158][ T1212] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 148.243757][ T5633] block nbd0: Receive control failed (result -107) [ 148.246549][ T7137] nbd0: detected capacity change from 0 to 18 [ 148.252165][ T1955] block nbd0: Dead connection, failed to find a fallback [ 148.252193][ T1955] block nbd0: shutting down sockets [ 148.252321][ T1955] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 148.252438][ T1955] Buffer I/O error on dev nbd0, logical block 0, async page read [ 148.253865][ T1955] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 148.253898][ T1955] Buffer I/O error on dev nbd0, logical block 0, async page read [ 148.254022][ T1955] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 148.254454][ T1955] Buffer I/O error on dev nbd0, logical block 0, async page read [ 148.254598][ T1955] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 148.254627][ T1955] Buffer I/O error on dev nbd0, logical block 0, async page read [ 148.254808][ T1955] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 148.254837][ T1955] Buffer I/O error on dev nbd0, logical block 0, async page read [ 148.254987][ T1955] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 148.255016][ T1955] Buffer I/O error on dev nbd0, logical block 0, async page read [ 148.256628][ T1955] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 148.256658][ T1955] Buffer I/O error on dev nbd0, logical block 0, async page read [ 148.256779][ T1955] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 148.256808][ T1955] Buffer I/O error on dev nbd0, logical block 0, async page read [ 148.256846][ T5632] ldm_validate_partition_table(): Disk read failed. [ 148.256943][ T1955] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 148.256972][ T1955] Buffer I/O error on dev nbd0, logical block 0, async page read [ 148.257090][ T1955] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 148.257119][ T1955] Buffer I/O error on dev nbd0, logical block 0, async page read [ 148.257374][ T5632] Dev nbd0: unable to read RDB block 0 [ 148.257731][ T5632] nbd0: unable to read partition table [ 148.257984][ T5632] nbd0: partition table beyond EOD, truncated [ 148.310957][ T5624] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 148.375322][ T5632] ldm_validate_partition_table(): Disk read failed. [ 148.376341][ T5632] Dev nbd0: unable to read RDB block 0 [ 148.380452][ T5632] nbd0: unable to read partition table [ 148.380683][ T5632] nbd0: partition table beyond EOD, truncated [ 148.390266][ T7137] nbd0: detected capacity change from 18 to 8589934592 [ 148.390523][ T1212] usb 2-1: Using ep0 maxpacket: 32 [ 148.452404][ T1212] usb 2-1: New USB device found, idVendor=1bac, idProduct=0304, bcdDevice= 0.00 [ 148.485158][ T5624] usb 5-1: Using ep0 maxpacket: 8 [ 148.485348][ T1212] usb 2-1: too many endpoints for config 0 interface 0 altsetting 6: 255, using maximum allowed: 30 [ 148.491541][ T5624] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 148.491709][ T1212] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.491746][ T1212] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 148.491777][ T1212] usb 2-1: config 0 interface 0 has no altsetting 0 [ 148.506793][ T1212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.583615][ T5624] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 148.583677][ T5624] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.583702][ T5624] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.583729][ T5624] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.583762][ T5624] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.583809][ T5624] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.701193][ T1212] usb 2-1: config 0 descriptor?? [ 148.936641][ T5624] usb 5-1: usb_control_msg returned -32 [ 148.936728][ T5624] usbtmc 5-1:16.0: can't read capabilities [ 149.175711][ T9] usb 5-1: USB disconnect, device number 6 [ 149.385130][ T1212] input: HID 1bac:0304 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1BAC:0304.0003/input/input7 [ 149.683800][ T1212] hid-generic 0003:1BAC:0304.0003: input,hidraw0: USB HID vd.8f Joystick [HID 1bac:0304] on usb-dummy_hcd.1-1/input0 [ 149.718821][ T1212] usb 2-1: USB disconnect, device number 5 [ 149.991797][ T7159] fido_id[7159]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 150.311273][ T7174] FAULT_INJECTION: forcing a failure. [ 150.311273][ T7174] name failslab, interval 1, probability 0, space 0, times 0 [ 150.311319][ T7174] CPU: 0 UID: 0 PID: 7174 Comm: syz.6.342 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.311353][ T7174] Tainted: [L]=SOFTLOCKUP [ 150.311363][ T7174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 150.311378][ T7174] Call Trace: [ 150.311388][ T7174] [ 150.311398][ T7174] dump_stack_lvl+0xe8/0x150 [ 150.311441][ T7174] should_fail_ex+0x410/0x560 [ 150.311480][ T7174] should_failslab+0xa8/0x100 [ 150.311519][ T7174] __kmalloc_cache_noprof+0xa3/0x600 [ 150.311548][ T7174] ? __get_fs_type+0x21/0x280 [ 150.311576][ T7174] ? alloc_fs_context+0x66/0xd00 [ 150.311602][ T7174] ? alloc_fs_context+0x66/0xd00 [ 150.311639][ T7174] alloc_fs_context+0x66/0xd00 [ 150.311669][ T7174] ? __get_fs_type+0x267/0x280 [ 150.311702][ T7174] fs_context_for_submount+0x28/0xa0 [ 150.311734][ T7174] trace_automount+0x86/0x180 [ 150.311763][ T7174] ? __pfx_trace_automount+0x10/0x10 [ 150.311790][ T7174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.311824][ T7174] ? try_to_unlazy_next+0x752/0xcb0 [ 150.311871][ T7174] __traverse_mounts+0x2fe/0x5d0 [ 150.311923][ T7174] step_into_slowpath+0x4ba/0x820 [ 150.311971][ T7174] ? __pfx_step_into_slowpath+0x10/0x10 [ 150.312009][ T7174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.312042][ T7174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.312082][ T7174] link_path_walk+0xd5e/0x1910 [ 150.312145][ T7174] path_openat+0x1c9/0x1d60 [ 150.312199][ T7174] do_file_open+0x23e/0x4a0 [ 150.312235][ T7174] ? __pfx_do_file_open+0x10/0x10 [ 150.312298][ T7174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.312328][ T7174] ? _raw_spin_unlock+0x28/0x50 [ 150.312361][ T7174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.312396][ T7174] ? alloc_fd+0x651/0x6c0 [ 150.312445][ T7174] do_sys_openat2+0x115/0x200 [ 150.312481][ T7174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.312511][ T7174] ? __se_sys_futex+0x3a8/0x450 [ 150.312548][ T7174] ? __pfx_do_sys_openat2+0x10/0x10 [ 150.312591][ T7174] ? rcu_is_watching+0x16/0xb0 [ 150.312626][ T7174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.312661][ T7174] __x64_sys_openat+0x138/0x170 [ 150.312704][ T7174] do_syscall_64+0x166/0x520 [ 150.312742][ T7174] ? trace_irq_disable+0x3b/0x140 [ 150.312771][ T7174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.312804][ T7174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.312830][ T7174] RIP: 0033:0x7f2343f9e199 [ 150.312853][ T7174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.312873][ T7174] RSP: 002b:00007f2344dc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 150.312901][ T7174] RAX: ffffffffffffffda RBX: 00007f2344225fa0 RCX: 00007f2343f9e199 [ 150.312920][ T7174] RDX: 0000000000080201 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 150.312938][ T7174] RBP: 00007f23440358e0 R08: 0000000000000000 R09: 0000000000000000 [ 150.312955][ T7174] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 150.312970][ T7174] R13: 00007f2344226038 R14: 00007f2344225fa0 R15: 00007ffd1bd876c8 [ 150.313010][ T7174] [ 151.233658][ T7194] service_operation: orangefs_mount -- wait timed out; aborting attempt. [ 151.233688][ T7194] orangefs_mount: mount request failed with -110 [ 151.280600][ T7156] loop5: detected capacity change from 0 to 32768 [ 151.358240][ T7156] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 151.449670][ T7156] XFS (loop5): Ending clean mount [ 151.597029][ T7156] XFS (loop5): Quotacheck needed: Please wait. [ 152.020525][ T7156] XFS (loop5): Quotacheck: Done. [ 152.335593][ T5616] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 152.903298][ T1212] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 153.068903][ T1212] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 153.072121][ T1212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.072150][ T1212] usb 1-1: Product: syz [ 153.072167][ T1212] usb 1-1: Manufacturer: syz [ 153.072184][ T1212] usb 1-1: SerialNumber: syz [ 153.130779][ T1212] usb 1-1: config 0 descriptor?? [ 153.146825][ T1212] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 153.237290][ T7236] FAULT_INJECTION: forcing a failure. [ 153.237290][ T7236] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 153.237333][ T7236] CPU: 0 UID: 0 PID: 7236 Comm: syz.5.358 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.237366][ T7236] Tainted: [L]=SOFTLOCKUP [ 153.237375][ T7236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 153.237390][ T7236] Call Trace: [ 153.237400][ T7236] [ 153.237410][ T7236] dump_stack_lvl+0xe8/0x150 [ 153.237452][ T7236] should_fail_ex+0x410/0x560 [ 153.237492][ T7236] _copy_from_user+0x2d/0xb0 [ 153.237529][ T7236] bpf_vlog_reverse_ubuf+0x110/0x3e0 [ 153.237566][ T7236] bpf_vlog_finalize+0x154/0x3f0 [ 153.237598][ T7236] bpf_log_attr_finalize+0x80/0x1e0 [ 153.237628][ T7236] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 153.237659][ T7236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.237697][ T7236] btf_new_fd+0x36c/0xc20 [ 153.237742][ T7236] __sys_bpf+0xd2e/0xd90 [ 153.237784][ T7236] ? __pfx___sys_bpf+0x10/0x10 [ 153.237818][ T7236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.237847][ T7236] ? do_futex+0x3e7/0x4e0 [ 153.237916][ T7236] ? rcu_is_watching+0x16/0xb0 [ 153.237950][ T7236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.237985][ T7236] __x64_sys_bpf+0xba/0xd0 [ 153.238017][ T7236] do_syscall_64+0x166/0x520 [ 153.238056][ T7236] ? trace_irq_disable+0x3b/0x140 [ 153.238083][ T7236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.238115][ T7236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.238140][ T7236] RIP: 0033:0x7f809979e199 [ 153.238163][ T7236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.238184][ T7236] RSP: 002b:00007f809a746028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 153.238210][ T7236] RAX: ffffffffffffffda RBX: 00007f8099a25fa0 RCX: 00007f809979e199 [ 153.238229][ T7236] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 153.238244][ T7236] RBP: 00007f80998358e0 R08: 0000000000000000 R09: 0000000000000000 [ 153.238260][ T7236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.238275][ T7236] R13: 00007f8099a26038 R14: 00007f8099a25fa0 R15: 00007ffc81869f98 [ 153.238314][ T7236] [ 153.775795][ T7241] tipc: Started in network mode [ 153.775823][ T7241] tipc: Node identity 1001001, cluster identity 4711 [ 153.775838][ T7241] tipc: Node number set to 16781313 [ 153.809461][ T7241] tipc: Enabled bearer , priority 0 [ 154.323181][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 154.474110][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 154.475802][ T9] usb 7-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 154.475948][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 154.479073][ T9] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 154.479103][ T9] usb 7-1: Product: syz [ 154.479120][ T9] usb 7-1: Manufacturer: syz [ 154.479137][ T9] usb 7-1: SerialNumber: syz [ 154.540045][ T9] usb 7-1: config 0 descriptor?? [ 154.548518][ T7249] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 154.576534][ T9] usb 7-1: selecting invalid altsetting 0 [ 154.790405][ T7249] usb 7-1: BOGUS urb xfer, pipe 0 != type 3 [ 155.322947][ T1212] gspca_stk1135: reg_w 0xf err -71 [ 155.324001][ T1212] gspca_stk1135: serial bus timeout: status=0x00 [ 155.324015][ T1212] gspca_stk1135: Sensor write failed [ 155.324053][ T1212] gspca_stk1135: serial bus timeout: status=0x00 [ 155.324063][ T1212] gspca_stk1135: Sensor write failed [ 155.324097][ T1212] gspca_stk1135: serial bus timeout: status=0x00 [ 155.324108][ T1212] gspca_stk1135: Sensor read failed [ 155.324145][ T1212] gspca_stk1135: serial bus timeout: status=0x00 [ 155.324156][ T1212] gspca_stk1135: Sensor read failed [ 155.324164][ T1212] gspca_stk1135: Detected sensor type unknown (0x0) [ 155.324206][ T1212] gspca_stk1135: serial bus timeout: status=0x00 [ 155.324216][ T1212] gspca_stk1135: Sensor read failed [ 155.324253][ T1212] gspca_stk1135: serial bus timeout: status=0x00 [ 155.324264][ T1212] gspca_stk1135: Sensor read failed [ 155.324300][ T1212] gspca_stk1135: serial bus timeout: status=0x00 [ 155.324312][ T1212] gspca_stk1135: Sensor write failed [ 155.324349][ T1212] gspca_stk1135: serial bus timeout: status=0x00 [ 155.324360][ T1212] gspca_stk1135: Sensor write failed [ 155.324437][ T1212] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 155.429715][ T1212] usb 1-1: USB disconnect, device number 2 [ 155.755919][ T5743] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 155.822848][ T7278] loop4: detected capacity change from 0 to 4096 [ 155.840538][ T7278] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 155.904570][ T5743] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 155.906297][ T5743] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 155.906328][ T5743] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.906350][ T5743] usb 3-1: config 0 has no interface number 0 [ 155.911281][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.911313][ T5743] usb 3-1: Product: syz [ 155.911331][ T5743] usb 3-1: Manufacturer: syz [ 155.911348][ T5743] usb 3-1: SerialNumber: syz [ 155.938092][ T7278] ntfs3(loop4): ino=19, mi_enum_attr [ 155.938131][ T7278] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 155.982342][ T7278] ntfs3(loop4): ino=1a, mi_enum_attr [ 155.982507][ T7278] ntfs3(loop4): ino=1a, mi_enum_attr [ 155.982526][ T7278] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 156.007009][ T5743] usb 3-1: config 0 descriptor?? [ 156.030144][ T5743] uvcvideo 3-1:0.64: probe with driver uvcvideo failed with error -22 [ 156.251039][ T7272] device-mapper: ioctl: only supply one of name or uuid, cmd(5) [ 156.265100][ T5743] usb 3-1: USB disconnect, device number 2 [ 156.298228][ T7284] loop1: detected capacity change from 0 to 512 [ 156.309809][ T7284] EXT4-fs: Ignoring removed bh option [ 156.381265][ T7284] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 156.521482][ T7284] EXT4-fs (loop1): 1 truncate cleaned up [ 156.567691][ T7284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.677329][ T7247] snd-usb-audio 7-1:0.0: Runtime PM usage count underflow! [ 156.680865][ T5743] usb 7-1: USB disconnect, device number 3 [ 156.698101][ T5750] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 156.868236][ T5750] usb 6-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 156.868291][ T5750] usb 6-1: too many configurations: 164, using maximum allowed: 8 [ 156.868837][ T5750] usb 6-1: config 0 has no interfaces? [ 156.870613][ T5750] usb 6-1: config 0 has no interfaces? [ 156.871125][ T5750] usb 6-1: config 0 has no interfaces? [ 156.871604][ T5750] usb 6-1: config 0 has no interfaces? [ 156.883732][ T5750] usb 6-1: config 0 has no interfaces? [ 156.888590][ T5750] usb 6-1: config 0 has no interfaces? [ 156.889075][ T5750] usb 6-1: config 0 has no interfaces? [ 156.903151][ T5750] usb 6-1: config 0 has no interfaces? [ 156.903192][ T5750] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.957796][ T5750] usb 6-1: config 0 descriptor?? [ 156.993456][ T1212] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 157.032678][ T6572] IPVS: starting estimator thread 0... [ 157.125778][ T7302] IPVS: using max 25 ests per chain, 60000 per kthread [ 157.144024][ T1212] usb 2-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 157.146091][ T1212] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.146117][ T1212] usb 2-1: config 0 has no interfaces? [ 157.146150][ T1212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.152553][ T1212] usb 2-1: config 0 descriptor?? [ 157.209604][ T5342] usb 6-1: USB disconnect, device number 6 [ 157.332946][ T7307] FAULT_INJECTION: forcing a failure. [ 157.332946][ T7307] name failslab, interval 1, probability 0, space 0, times 0 [ 157.332988][ T7307] CPU: 0 UID: 0 PID: 7307 Comm: syz.2.388 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.333022][ T7307] Tainted: [L]=SOFTLOCKUP [ 157.333031][ T7307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 157.333051][ T7307] Call Trace: [ 157.333061][ T7307] [ 157.333071][ T7307] dump_stack_lvl+0xe8/0x150 [ 157.333118][ T7307] should_fail_ex+0x410/0x560 [ 157.333155][ T7307] ? __alloc_skb+0x1db/0x7a0 [ 157.333190][ T7307] should_failslab+0xa8/0x100 [ 157.333226][ T7307] ? __alloc_skb+0x1db/0x7a0 [ 157.333259][ T7307] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 157.333294][ T7307] ? __alloc_skb+0x18d/0x7a0 [ 157.333330][ T7307] ? __alloc_skb+0x1db/0x7a0 [ 157.333372][ T7307] __alloc_skb+0x1db/0x7a0 [ 157.333414][ T7307] alloc_skb_with_frags+0xc6/0x760 [ 157.333452][ T7307] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.333482][ T7307] ? rcu_is_watching+0x16/0xb0 [ 157.333516][ T7307] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.333546][ T7307] ? trace_sched_exit_tp+0x3a/0x130 [ 157.333584][ T7307] sock_alloc_send_pskb+0x878/0x990 [ 157.333634][ T7307] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 157.333659][ T7307] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 157.333695][ T7307] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.333723][ T7307] ? ref_tracker_alloc+0x2d7/0x4b0 [ 157.333758][ T7307] ? __pfx___schedule+0x10/0x10 [ 157.333796][ T7307] ? dst_alloc+0x12a/0x170 [ 157.333830][ T7307] __ip_append_data+0x29ea/0x3cf0 [ 157.333862][ T7307] ? __lock_acquire+0x747/0x2de0 [ 157.333907][ T7307] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.333941][ T7307] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 157.333993][ T7307] ? ipv4_mtu+0x23/0x670 [ 157.334023][ T7307] ? __pfx___ip_append_data+0x10/0x10 [ 157.334054][ T7307] ? ipv4_mtu+0x561/0x670 [ 157.334079][ T7307] ? ipv4_mtu+0x23/0x670 [ 157.334107][ T7307] ? __pfx_ipv4_mtu+0x10/0x10 [ 157.334132][ T7307] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.334162][ T7307] ? ip_setup_cork+0x512/0x920 [ 157.334197][ T7307] ip_append_data+0x10d/0x190 [ 157.334233][ T7307] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 157.334268][ T7307] udp_sendmsg+0x3ef/0x2140 [ 157.334310][ T7307] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.334361][ T7307] ? __pfx_udp_sendmsg+0x10/0x10 [ 157.334391][ T7307] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.334434][ T7307] ? tomoyo_supervisor+0x4d2/0x1560 [ 157.334504][ T7307] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.334533][ T7307] ? begin_current_label_crit_section+0x2a3/0x830 [ 157.334585][ T7307] udpv6_sendmsg+0x915/0x2610 [ 157.334639][ T7307] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 157.334705][ T7307] ? __pfx_current_check_autobind_udp_socket+0x10/0x10 [ 157.334779][ T7307] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.334808][ T7307] ? inet_send_prepare+0x5b/0x260 [ 157.334841][ T7307] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.334870][ T7307] ? inet6_sendmsg+0xe4/0x120 [ 157.334901][ T7307] ? __pfx_inet6_sendmsg+0x10/0x10 [ 157.334928][ T7307] sock_sendmsg_nosec+0x90/0x180 [ 157.334963][ T7307] ____sys_sendmsg+0x54e/0x850 [ 157.335010][ T7307] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.335061][ T7307] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.335091][ T7307] ? import_iovec+0x73/0xa0 [ 157.335131][ T7307] ___sys_sendmsg+0x2a5/0x360 [ 157.335170][ T7307] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.335199][ T7307] ? __lock_acquire+0x747/0x2de0 [ 157.335233][ T7307] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.335287][ T7307] ? __pfx_futex_wake_mark+0x10/0x10 [ 157.335344][ T7307] ? __fget_files+0x2a/0x420 [ 157.335381][ T7307] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.335410][ T7307] ? __fget_files+0x3a2/0x420 [ 157.335461][ T7307] __sys_sendmmsg+0x273/0x4d0 [ 157.335508][ T7307] ? __pfx___sys_sendmmsg+0x10/0x10 [ 157.335546][ T7307] ? do_futex+0x3e7/0x4e0 [ 157.335590][ T7307] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 157.335652][ T7307] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.335680][ T7307] ? rcu_is_watching+0x16/0xb0 [ 157.335723][ T7307] __x64_sys_sendmmsg+0xa0/0xc0 [ 157.335754][ T7307] do_syscall_64+0x166/0x520 [ 157.335791][ T7307] ? trace_irq_disable+0x3b/0x140 [ 157.335819][ T7307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.335852][ T7307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.335880][ T7307] RIP: 0033:0x7fc37759e199 [ 157.335903][ T7307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.335925][ T7307] RSP: 002b:00007fc378474028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 157.335952][ T7307] RAX: ffffffffffffffda RBX: 00007fc377825fa0 RCX: 00007fc37759e199 [ 157.335972][ T7307] RDX: 0000000000000001 RSI: 00002000000016c0 RDI: 0000000000000003 [ 157.335989][ T7307] RBP: 00007fc3776358e0 R08: 0000000000000000 R09: 0000000000000000 [ 157.336005][ T7307] R10: 000000002800c844 R11: 0000000000000246 R12: 0000000000000000 [ 157.336022][ T7307] R13: 00007fc377826038 R14: 00007fc377825fa0 R15: 00007ffcda444958 [ 157.336062][ T7307] [ 157.493790][ T5342] usb 2-1: USB disconnect, device number 6 [ 158.028832][ T7321] CIFS: Attempting to mount //127.0.0.1/share [ 158.162159][ T7327] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 0 [ 158.162426][ T7327] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 158.211676][ T5342] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 158.217115][ T7321] CIFS: VFS: cifs_mount failed w/return code = -112 [ 158.307013][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.379130][ T5342] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 158.383843][ T5342] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 158.383871][ T5342] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 158.383913][ T5342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.428134][ T5342] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 158.491270][ T5342] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 159.067519][ T5624] usb 5-1: USB disconnect, device number 7 [ 159.074170][ T7354] SPCP8x5 ttyUSB0: failed to set control lines: -71 [ 159.074537][ T7354] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -19) [ 159.137527][ T5624] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 159.138000][ T5624] spcp8x5 5-1:1.0: device disconnected [ 159.640400][ T7370] netlink: 'syz.6.409': attribute type 10 has an invalid length. [ 159.713241][ T7370] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 159.720920][ T7373] loop6: detected capacity change from 0 to 8 [ 159.745781][ T7370] team0: Port device netdevsim1 added [ 159.859406][ T7373] SQUASHFS error: lzo decompression failed, data probably corrupt [ 159.859437][ T7373] SQUASHFS error: Failed to read block 0x28d: -5 [ 159.859450][ T7373] SQUASHFS error: Unable to read metadata cache entry [28b] [ 159.859462][ T7373] SQUASHFS error: Unable to read inode 0x11f [ 159.947672][ T7370] netlink: 'syz.6.409': attribute type 10 has an invalid length. [ 159.953856][ T1212] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 159.994379][ T7370] team0: Port device netdevsim1 removed [ 159.998419][ T7370] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 160.034594][ T7370] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 160.121773][ T1212] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.132111][ T1212] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.132148][ T1212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.132177][ T1212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 160.132202][ T1212] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.132250][ T1212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.151859][ T1212] usb 3-1: config 0 descriptor?? [ 160.367185][ T6561] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 160.439819][ T5750] libceph: connect (1)[c::]:6789 error -101 [ 160.456104][ T5750] libceph: mon0 (1)[c::]:6789 connect error [ 160.473151][ T5750] libceph: connect (1)[c::]:6789 error -101 [ 160.474977][ T5750] libceph: mon0 (1)[c::]:6789 connect error [ 160.476945][ T7367] ceph: No mds server is up or the cluster is laggy [ 160.879686][ T1212] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 160.983778][ T7398] netlink: 'syz.0.417': attribute type 22 has an invalid length. [ 160.983808][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.417'. [ 161.132266][ T7398] netlink: 'syz.0.417': attribute type 22 has an invalid length. [ 161.132294][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.417'. [ 161.132451][ T7398] Zero length message leads to an empty skb [ 161.149880][ T7401] loop5: detected capacity change from 0 to 2048 [ 161.154675][ T6286] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.155656][ T6286] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.155699][ T6286] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.155739][ T6286] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.159913][ T7401] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 161.198259][ T7401] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.534884][ T5342] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 161.683416][ T5342] usb 2-1: Using ep0 maxpacket: 16 [ 161.700365][ T5342] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 161.714137][ T5342] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.714178][ T5342] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.714204][ T5342] usb 2-1: config 0 interface 0 has no altsetting 0 [ 161.714245][ T5342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.761500][ T5342] usb 2-1: config 0 descriptor?? [ 162.219238][ T5342] hid (null): unknown global tag 0xe [ 162.219270][ T5342] hid (null): bogus close delimiter [ 162.219288][ T5342] hid (null): unknown global tag 0xe [ 162.222572][ T5342] hid (null): usage index exceeded [ 162.222593][ T5342] hid (null): global environment stack underflow [ 162.332199][ T7422] syzkaller1: entered promiscuous mode [ 162.332226][ T7422] syzkaller1: entered allmulticast mode [ 162.397817][ T7429] netlink: 55 bytes leftover after parsing attributes in process `syz.4.430'. [ 162.459686][ T7429] netlink: 'syz.4.430': attribute type 4 has an invalid length. [ 162.462578][ T9] usb 2-1: USB disconnect, device number 7 [ 162.828961][ T7442] loop5: detected capacity change from 0 to 7 [ 162.869583][ T7442] loop5: [ 162.869617][ T7442] loop5: partition table partially beyond EOD, truncated [ 162.937036][ T7445] loop4: detected capacity change from 0 to 1024 [ 162.996383][ T7445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.129586][ T31] audit: type=1800 audit(1791367849.560:50): pid=7445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.436" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 163.166713][ T7455] syz_tun: entered allmulticast mode [ 163.172430][ T7454] syz_tun: left allmulticast mode [ 163.195588][ T7451] FAULT_INJECTION: forcing a failure. [ 163.195588][ T7451] name failslab, interval 1, probability 0, space 0, times 0 [ 163.195634][ T7451] CPU: 0 UID: 0 PID: 7451 Comm: syz.6.438 Tainted: G L syzkaller #0 PREEMPT(full) [ 163.195668][ T7451] Tainted: [L]=SOFTLOCKUP [ 163.195678][ T7451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 163.195693][ T7451] Call Trace: [ 163.195703][ T7451] [ 163.195714][ T7451] dump_stack_lvl+0xe8/0x150 [ 163.195764][ T7451] should_fail_ex+0x410/0x560 [ 163.195809][ T7451] should_failslab+0xa8/0x100 [ 163.195847][ T7451] __kmalloc_noprof+0xfe/0x720 [ 163.195875][ T7451] ? __kmalloc_noprof+0x1ab/0x720 [ 163.195901][ T7451] ? __vb2_queue_alloc+0x2a0/0x1660 [ 163.195926][ T7451] ? __vb2_queue_alloc+0x2a0/0x1660 [ 163.195959][ T7451] __vb2_queue_alloc+0x2a0/0x1660 [ 163.196016][ T7451] vb2_core_reqbufs+0xc3f/0x1470 [ 163.196063][ T7451] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 163.196087][ T7451] ? vb2_verify_memory_type+0x1fc/0x570 [ 163.196117][ T7451] ? vb2_reqbufs+0x399/0x630 [ 163.196169][ T7451] v4l2_m2m_ioctl_reqbufs+0x10d/0x200 [ 163.196206][ T7451] __video_do_ioctl+0x8af/0xc70 [ 163.196247][ T7451] ? __pfx___video_do_ioctl+0x10/0x10 [ 163.196293][ T7451] video_usercopy+0x860/0x1430 [ 163.196331][ T7451] ? __pfx___video_do_ioctl+0x10/0x10 [ 163.196362][ T7451] ? __pfx_video_usercopy+0x10/0x10 [ 163.196405][ T7451] ? __fget_files+0x2a/0x420 [ 163.196447][ T7451] ? __fget_files+0x2a/0x420 [ 163.196483][ T7451] ? __fget_files+0x3a2/0x420 [ 163.196525][ T7451] v4l2_ioctl+0x18d/0x1e0 [ 163.196553][ T7451] ? __pfx_v4l2_ioctl+0x10/0x10 [ 163.196580][ T7451] __se_sys_ioctl+0xfc/0x170 [ 163.196614][ T7451] do_syscall_64+0x166/0x520 [ 163.196652][ T7451] ? trace_irq_disable+0x3b/0x140 [ 163.196680][ T7451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.196713][ T7451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.196738][ T7451] RIP: 0033:0x7f2343f9e199 [ 163.196762][ T7451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.196788][ T7451] RSP: 002b:00007f2344dc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.196815][ T7451] RAX: ffffffffffffffda RBX: 00007f2344225fa0 RCX: 00007f2343f9e199 [ 163.196834][ T7451] RDX: 0000200000000180 RSI: 00000000c0145608 RDI: 0000000000000004 [ 163.196851][ T7451] RBP: 00007f23440358e0 R08: 0000000000000000 R09: 0000000000000000 [ 163.196867][ T7451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.196883][ T7451] R13: 00007f2344226038 R14: 00007f2344225fa0 R15: 00007ffd1bd876c8 [ 163.196923][ T7451] [ 163.269447][ T7457] loop1: detected capacity change from 0 to 1024 [ 163.369844][ T7457] hfsplus: xattr search failed [ 163.496605][ T10] usb 3-1: USB disconnect, device number 3 [ 163.636482][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.6.442'. [ 163.721388][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.6.442'. [ 163.947985][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.949489][ T7473] bridge0: port 3(syz_tun) entered blocking state [ 163.949667][ T7473] bridge0: port 3(syz_tun) entered disabled state [ 163.952097][ T7473] syz_tun: entered allmulticast mode [ 163.996057][ T7473] syz_tun: entered promiscuous mode [ 163.996762][ T7473] bridge0: port 3(syz_tun) entered blocking state [ 163.996861][ T7473] bridge0: port 3(syz_tun) entered forwarding state [ 164.034762][ T7473] netlink: 5 bytes leftover after parsing attributes in process `syz.2.445'. [ 164.034790][ T7473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.445'. [ 164.284037][ T5621] Bluetooth: hci6: command 0x1003 tx timeout [ 164.284113][ T5633] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 164.347372][ T7483] ref_ctr_offset mismatch. inode: 0x128 offset: 0x0 ref_ctr_offset(old): 0x30 ref_ctr_offset(new): 0x0 [ 164.921795][ T7503] FAULT_INJECTION: forcing a failure. [ 164.921795][ T7503] name failslab, interval 1, probability 0, space 0, times 0 [ 164.921840][ T7503] CPU: 1 UID: 0 PID: 7503 Comm: syz.5.457 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.921875][ T7503] Tainted: [L]=SOFTLOCKUP [ 164.921885][ T7503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 164.921900][ T7503] Call Trace: [ 164.921911][ T7503] [ 164.921922][ T7503] dump_stack_lvl+0xe8/0x150 [ 164.921966][ T7503] should_fail_ex+0x410/0x560 [ 164.922007][ T7503] should_failslab+0xa8/0x100 [ 164.922050][ T7503] __kmalloc_cache_noprof+0xa3/0x600 [ 164.922083][ T7503] ? tcp_md5_do_add+0x13c/0x390 [ 164.922123][ T7503] ? tcp_md5_do_add+0x13c/0x390 [ 164.922162][ T7503] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.922199][ T7503] tcp_md5_do_add+0x13c/0x390 [ 164.922244][ T7503] tcp_v6_parse_md5_keys+0x550/0x670 [ 164.922284][ T7503] ? __pfx_tcp_v6_parse_md5_keys+0x10/0x10 [ 164.922343][ T7503] ? do_tcp_setsockopt+0x8f1/0x1f80 [ 164.922389][ T7503] ? __local_bh_enable_ip+0xd6/0x140 [ 164.922425][ T7503] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.922468][ T7503] do_tcp_setsockopt+0x1250/0x1f80 [ 164.922517][ T7503] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 164.922567][ T7503] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.922599][ T7503] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.922634][ T7503] ? aa_sock_opt_perm+0xe1/0x1e0 [ 164.922676][ T7503] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.922706][ T7503] ? tcp_setsockopt+0x3d/0xe0 [ 164.922730][ T7503] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 164.922768][ T7503] do_sock_setsockopt+0x17c/0x1b0 [ 164.922814][ T7503] __x64_sys_setsockopt+0x13d/0x1b0 [ 164.922861][ T7503] do_syscall_64+0x166/0x520 [ 164.922900][ T7503] ? trace_irq_disable+0x3b/0x140 [ 164.922929][ T7503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.922965][ T7503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.922991][ T7503] RIP: 0033:0x7f809979e199 [ 164.923014][ T7503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.923037][ T7503] RSP: 002b:00007f809a746028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 164.923067][ T7503] RAX: ffffffffffffffda RBX: 00007f8099a25fa0 RCX: 00007f809979e199 [ 164.923088][ T7503] RDX: 000000000000000e RSI: 0000000000000006 RDI: 0000000000000003 [ 164.923104][ T7503] RBP: 00007f80998358e0 R08: 00000000000000d8 R09: 0000000000000000 [ 164.923121][ T7503] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 164.923138][ T7503] R13: 00007f8099a26038 R14: 00007f8099a25fa0 R15: 00007ffc81869f98 [ 164.923179][ T7503] [ 167.104544][ T7525] tipc: Started in network mode [ 167.104570][ T7525] tipc: Node identity 4, cluster identity 4711 [ 167.104585][ T7525] tipc: Node number set to 4 [ 167.206731][ T7526] tipc: Enabled bearer , priority 0 [ 167.483231][ T31] audit: type=1800 audit(1791367853.870:51): pid=7530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.469" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 168.320043][ T7542] FAULT_INJECTION: forcing a failure. [ 168.320043][ T7542] name failslab, interval 1, probability 0, space 0, times 0 [ 168.320085][ T7542] CPU: 1 UID: 0 PID: 7542 Comm: syz.0.471 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.320121][ T7542] Tainted: [L]=SOFTLOCKUP [ 168.320130][ T7542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 168.320146][ T7542] Call Trace: [ 168.320156][ T7542] [ 168.320167][ T7542] dump_stack_lvl+0xe8/0x150 [ 168.320211][ T7542] should_fail_ex+0x410/0x560 [ 168.320250][ T7542] should_failslab+0xa8/0x100 [ 168.320288][ T7542] __kmalloc_noprof+0xfe/0x720 [ 168.320322][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.320353][ T7542] ? crypto_alloc_tfm_node+0x3b5/0x3e0 [ 168.320385][ T7542] ? public_key_verify_signature+0x2d0/0x9e0 [ 168.320418][ T7542] ? public_key_verify_signature+0x2d0/0x9e0 [ 168.320459][ T7542] public_key_verify_signature+0x2d0/0x9e0 [ 168.320508][ T7542] ? __pfx_public_key_verify_signature+0x10/0x10 [ 168.320544][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.320589][ T7542] ? asymmetric_key_generate_id+0x60/0x170 [ 168.320616][ T7542] ? asymmetric_key_id_same+0x67/0xe0 [ 168.320646][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.320682][ T7542] x509_check_for_self_signed+0x326/0x430 [ 168.320723][ T7542] x509_cert_parse+0x622/0x7a0 [ 168.320761][ T7542] x509_key_preparse+0x64/0x6d0 [ 168.320795][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.320825][ T7542] ? down_read+0x2be/0x330 [ 168.320856][ T7542] asymmetric_key_preparse+0xb9/0x1b0 [ 168.320892][ T7542] __key_create_or_update+0x354/0xa70 [ 168.320945][ T7542] ? __pfx___key_create_or_update+0x10/0x10 [ 168.320981][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.321016][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.321046][ T7542] ? lookup_user_key+0xb68/0x1150 [ 168.321095][ T7542] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 168.321141][ T7542] key_create_or_update+0x42/0x60 [ 168.321183][ T7542] __se_sys_add_key+0x349/0x420 [ 168.321216][ T7542] ? __pfx___se_sys_add_key+0x10/0x10 [ 168.321247][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.321284][ T7542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.321320][ T7542] ? __x64_sys_add_key+0x20/0xc0 [ 168.321351][ T7542] do_syscall_64+0x166/0x520 [ 168.321388][ T7542] ? trace_irq_disable+0x3b/0x140 [ 168.321417][ T7542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.321450][ T7542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.321476][ T7542] RIP: 0033:0x7fb1f2f9e199 [ 168.321500][ T7542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.321521][ T7542] RSP: 002b:00007fb1f3d82028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 168.321549][ T7542] RAX: ffffffffffffffda RBX: 00007fb1f3225fa0 RCX: 00007fb1f2f9e199 [ 168.321568][ T7542] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 168.321586][ T7542] RBP: 00007fb1f30358e0 R08: ffffffffffffffff R09: 0000000000000000 [ 168.321604][ T7542] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 168.321621][ T7542] R13: 00007fb1f3226038 R14: 00007fb1f3225fa0 R15: 00007ffc65b196e8 [ 168.321662][ T7542] [ 168.772098][ T1212] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 170.301277][ T10] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 170.845902][ T5621] Bluetooth: hci3: command 0x0c1a tx timeout [ 171.053965][ T1212] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 171.054014][ T1212] usb 7-1: no configurations [ 171.054030][ T1212] usb 7-1: can't read configurations, error -22 [ 171.056385][ T7580] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 171.092985][ T10] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 171.376893][ T10] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 171.376929][ T10] usb 3-1: config 0 has no interface number 0 [ 171.376977][ T10] usb 3-1: config 0 interface 41 has no altsetting 0 [ 171.562988][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.563022][ T10] usb 3-1: Product: syz [ 171.563039][ T10] usb 3-1: Manufacturer: syz [ 171.581734][ T10] usb 3-1: SerialNumber: syz [ 171.644111][ T10] usb 3-1: config 0 descriptor?? [ 172.015829][ T7587] loop4: detected capacity change from 0 to 256 [ 172.041030][ T7587] vfat: Unknown parameter 'roˆ³;·ƒyæxlate' [ 172.437892][ T7590] loop5: detected capacity change from 0 to 4096 [ 172.470101][ T7596] netlink: 12 bytes leftover after parsing attributes in process `syz.6.490'. [ 172.490827][ T7590] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 172.690864][ T10] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 172.753554][ T6534] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.753610][ T6534] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.754005][ T6534] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.754048][ T6534] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.754225][ T7596] netlink: 12 bytes leftover after parsing attributes in process `syz.6.490'. [ 172.898216][ T7590] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 173.173747][ T10] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 173.173787][ T10] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 173.174008][ T10] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 173.378948][ T10] usb 3-1: USB disconnect, device number 4 [ 174.306709][ T7611] loop6: detected capacity change from 0 to 4096 [ 174.330887][ T7611] EXT4-fs: Ignoring removed orlov option [ 174.345834][ T7611] EXT4-fs (loop6): Test dummy encryption mode enabled [ 174.478554][ T7611] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.771240][ T7609] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 175.261542][ T6019] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.513391][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.499'. [ 176.381039][ T7606] loop5: detected capacity change from 0 to 32768 [ 176.479505][ T7640] xt_hashlimit: size too large, truncated to 1048576 [ 176.802746][ T7606] (syz.5.494,7606,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 176.826004][ T7606] (syz.5.494,7606,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 176.860750][ T7606] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 176.920887][ T7606] (syz.5.494,7606,0):ocfs2_initialize_super:2225 ERROR: status = -12 [ 176.921867][ T7606] (syz.5.494,7606,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 179.210685][ T7664] FAULT_INJECTION: forcing a failure. [ 179.210685][ T7664] name failslab, interval 1, probability 0, space 0, times 0 [ 179.210730][ T7664] CPU: 1 UID: 0 PID: 7664 Comm: syz.2.514 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.210764][ T7664] Tainted: [L]=SOFTLOCKUP [ 179.210774][ T7664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 179.210789][ T7664] Call Trace: [ 179.210799][ T7664] [ 179.210810][ T7664] dump_stack_lvl+0xe8/0x150 [ 179.210852][ T7664] should_fail_ex+0x410/0x560 [ 179.210891][ T7664] should_failslab+0xa8/0x100 [ 179.210930][ T7664] ? sctp_get_port_local+0x6bd/0x1700 [ 179.210967][ T7664] kmem_cache_alloc_noprof+0xa1/0x600 [ 179.210993][ T7664] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 179.211032][ T7664] ? sctp_get_port_local+0x6bd/0x1700 [ 179.211075][ T7664] sctp_get_port_local+0x6bd/0x1700 [ 179.211109][ T7664] ? lock_acquire+0x115/0x350 [ 179.211150][ T7664] ? __pfx_sctp_get_port_local+0x10/0x10 [ 179.211187][ T7664] ? sctp_bind_addr_match+0x30/0x2b0 [ 179.211215][ T7664] ? sctp_bind_addr_match+0x28b/0x2b0 [ 179.211242][ T7664] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.211284][ T7664] sctp_do_bind+0x4d9/0x9a0 [ 179.211329][ T7664] sctp_connect_new_asoc+0x270/0x6b0 [ 179.211368][ T7664] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 179.211412][ T7664] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.211442][ T7664] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.211472][ T7664] ? security_sctp_bind_connect+0x7e/0x2c0 [ 179.211508][ T7664] sctp_sendmsg+0x159b/0x2d00 [ 179.211557][ T7664] ? __pfx_futex_wake_mark+0x10/0x10 [ 179.211583][ T7664] ? __pfx_sctp_sendmsg+0x10/0x10 [ 179.211620][ T7664] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.211670][ T7664] ? aa_sock_msg_perm+0xf5/0x210 [ 179.211705][ T7664] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.211734][ T7664] ? sock_rps_record_flow+0x19/0x350 [ 179.211769][ T7664] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.211799][ T7664] ? inet_sendmsg+0x298/0x320 [ 179.211832][ T7664] ? __pfx_inet_sendmsg+0x10/0x10 [ 179.211861][ T7664] sock_sendmsg_nosec+0x10e/0x180 [ 179.211897][ T7664] __sys_sendto+0x408/0x5a0 [ 179.211941][ T7664] ? __pfx___sys_sendto+0x10/0x10 [ 179.212009][ T7664] ? rcu_is_watching+0x16/0xb0 [ 179.212043][ T7664] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.212079][ T7664] __x64_sys_sendto+0xde/0x100 [ 179.212121][ T7664] do_syscall_64+0x166/0x520 [ 179.212158][ T7664] ? trace_irq_disable+0x3b/0x140 [ 179.212186][ T7664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.212220][ T7664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.212246][ T7664] RIP: 0033:0x7fc37759e199 [ 179.212269][ T7664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.212297][ T7664] RSP: 002b:00007fc378474028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 179.212325][ T7664] RAX: ffffffffffffffda RBX: 00007fc377825fa0 RCX: 00007fc37759e199 [ 179.212344][ T7664] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000003 [ 179.212360][ T7664] RBP: 00007fc3776358e0 R08: 0000200000000240 R09: 000000000000001c [ 179.212378][ T7664] R10: 000000000004c810 R11: 0000000000000246 R12: 0000000000000000 [ 179.212395][ T7664] R13: 00007fc377826038 R14: 00007fc377825fa0 R15: 00007ffcda444958 [ 179.212435][ T7664] [ 180.636049][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.5.517'. [ 183.562247][ T7727] gretap1: entered allmulticast mode [ 183.676351][ T7727] team0: Port device gretap1 added [ 183.736501][ T7733] bridge0: port 3(team0) entered blocking state [ 183.736655][ T7733] bridge0: port 3(team0) entered disabled state [ 183.800511][ T7733] team0: entered allmulticast mode [ 183.800538][ T7733] team_slave_0: entered allmulticast mode [ 183.800572][ T7733] team_slave_1: entered allmulticast mode [ 183.902336][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 183.915431][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 183.918161][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 183.940720][ T5621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 183.954325][ T5621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 184.039199][ T7733] team0: entered promiscuous mode [ 184.039225][ T7733] team_slave_0: entered promiscuous mode [ 184.092254][ T7733] team_slave_1: entered promiscuous mode [ 184.092441][ T7733] gretap1: entered promiscuous mode [ 184.124931][ T7733] bridge0: port 3(team0) entered blocking state [ 184.125085][ T7733] bridge0: port 3(team0) entered forwarding state [ 185.133563][ T6563] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.135590][ T88] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.135638][ T88] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.161456][ T6286] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.234412][ T5750] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 185.383958][ T5750] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 185.385262][ T5750] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.385319][ T5750] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 185.385351][ T5750] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 185.385396][ T5750] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.777173][ T7767] FAULT_INJECTION: forcing a failure. [ 185.777173][ T7767] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 185.777217][ T7767] CPU: 1 UID: 0 PID: 7767 Comm: syz.6.548 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.777255][ T7767] Tainted: [L]=SOFTLOCKUP [ 185.777265][ T7767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 185.777281][ T7767] Call Trace: [ 185.777291][ T7767] [ 185.777302][ T7767] dump_stack_lvl+0xe8/0x150 [ 185.777346][ T7767] should_fail_ex+0x410/0x560 [ 185.777385][ T7767] prepare_alloc_pages+0x223/0x600 [ 185.777424][ T7767] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 185.777462][ T7767] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 185.777499][ T7767] ? __pfx_policy_nodemask+0x10/0x10 [ 185.777536][ T7767] ? rcu_is_watching+0x16/0xb0 [ 185.777578][ T7767] alloc_pages_mpol+0x21e/0x390 [ 185.777621][ T7767] alloc_pages_noprof+0xb1/0x2b0 [ 185.777660][ T7767] system_heap_allocate+0x44d/0xf70 [ 185.777701][ T7767] ? __pfx_system_heap_allocate+0x10/0x10 [ 185.777735][ T7767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.777781][ T7767] dma_heap_ioctl+0x4a7/0x6d0 [ 185.777815][ T7767] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 185.777867][ T7767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.777896][ T7767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.777927][ T7767] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 185.777958][ T7767] __se_sys_ioctl+0xfc/0x170 [ 185.777993][ T7767] do_syscall_64+0x166/0x520 [ 185.778030][ T7767] ? trace_irq_disable+0x3b/0x140 [ 185.778059][ T7767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.778096][ T7767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.778122][ T7767] RIP: 0033:0x7f2343f9e199 [ 185.778146][ T7767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.778168][ T7767] RSP: 002b:00007f2344dc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.778195][ T7767] RAX: ffffffffffffffda RBX: 00007f2344225fa0 RCX: 00007f2343f9e199 [ 185.778214][ T7767] RDX: 0000200000000040 RSI: 00000000c0184800 RDI: 0000000000000003 [ 185.778231][ T7767] RBP: 00007f23440358e0 R08: 0000000000000000 R09: 0000000000000000 [ 185.778248][ T7767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.778264][ T7767] R13: 00007f2344226038 R14: 00007f2344225fa0 R15: 00007ffd1bd876c8 [ 185.778304][ T7767] [ 186.126906][ T5621] Bluetooth: hci3: command tx timeout [ 186.432697][ T5750] cxacru 3-1:1.0: send of cm 0x91 failed (-71) [ 186.432752][ T5750] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 186.432768][ T5750] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 186.496242][ T5750] cxacru 3-1:1.0: probe with driver cxacru failed with error -71 [ 186.526749][ T5750] usb 3-1: USB disconnect, device number 5 [ 186.645522][ T7779] FAULT_INJECTION: forcing a failure. [ 186.645522][ T7779] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 186.645705][ T7779] CPU: 1 UID: 0 PID: 7779 Comm: syz.5.552 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.645741][ T7779] Tainted: [L]=SOFTLOCKUP [ 186.645750][ T7779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 186.645766][ T7779] Call Trace: [ 186.645776][ T7779] [ 186.645788][ T7779] dump_stack_lvl+0xe8/0x150 [ 186.645846][ T7779] should_fail_ex+0x410/0x560 [ 186.645886][ T7779] prepare_alloc_pages+0x223/0x600 [ 186.645926][ T7779] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 186.645962][ T7779] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 186.645992][ T7779] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 186.646028][ T7779] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 186.646065][ T7779] ? __pfx_policy_nodemask+0x10/0x10 [ 186.646107][ T7779] __alloc_pages_noprof+0x10/0x100 [ 186.646140][ T7779] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 186.646169][ T7779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.646208][ T7779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.646238][ T7779] ? alloc_pages_noprof+0x140/0x2b0 [ 186.646280][ T7779] __kasan_populate_vmalloc+0xb7/0x1c0 [ 186.646314][ T7779] alloc_vmap_area+0xd1a/0x1420 [ 186.646373][ T7779] ? __pfx_alloc_vmap_area+0x10/0x10 [ 186.646409][ T7779] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 186.646441][ T7779] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 186.646470][ T7779] ? __get_vm_area_node+0x155/0x2f0 [ 186.646515][ T7779] __get_vm_area_node+0x200/0x2f0 [ 186.646569][ T7779] __vmalloc_node_range_noprof+0x343/0x1540 [ 186.646599][ T7779] ? vb2_vmalloc_alloc+0xef/0x360 [ 186.646662][ T7779] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 186.646687][ T7779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.646720][ T7779] ? __kasan_kmalloc+0x93/0xb0 [ 186.646757][ T7779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.646786][ T7779] ? __kmalloc_cache_noprof+0x321/0x600 [ 186.646827][ T7779] vmalloc_user_noprof+0xad/0xe0 [ 186.646854][ T7779] ? vb2_vmalloc_alloc+0xef/0x360 [ 186.646883][ T7779] vb2_vmalloc_alloc+0xef/0x360 [ 186.646911][ T7779] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 186.646941][ T7779] __vb2_queue_alloc+0xa0b/0x1660 [ 186.647003][ T7779] vb2_core_reqbufs+0xc3f/0x1470 [ 186.647047][ T7779] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 186.647079][ T7779] ? __video_do_ioctl+0x473/0xc70 [ 186.647112][ T7779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.647141][ T7779] ? vb2_verify_memory_type+0x1fc/0x570 [ 186.647171][ T7779] vb2_ioctl_reqbufs+0x4bb/0x850 [ 186.647215][ T7779] __video_do_ioctl+0x8af/0xc70 [ 186.647255][ T7779] ? __pfx___video_do_ioctl+0x10/0x10 [ 186.647301][ T7779] video_usercopy+0x860/0x1430 [ 186.647340][ T7779] ? __pfx___video_do_ioctl+0x10/0x10 [ 186.647371][ T7779] ? __pfx_video_usercopy+0x10/0x10 [ 186.647414][ T7779] ? __fget_files+0x2a/0x420 [ 186.647457][ T7779] ? __fget_files+0x2a/0x420 [ 186.647493][ T7779] ? __fget_files+0x3a2/0x420 [ 186.647536][ T7779] v4l2_ioctl+0x18d/0x1e0 [ 186.647564][ T7779] ? __pfx_v4l2_ioctl+0x10/0x10 [ 186.647591][ T7779] __se_sys_ioctl+0xfc/0x170 [ 186.647626][ T7779] do_syscall_64+0x166/0x520 [ 186.647664][ T7779] ? trace_irq_disable+0x3b/0x140 [ 186.647692][ T7779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.647725][ T7779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.647752][ T7779] RIP: 0033:0x7f809979e199 [ 186.647776][ T7779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.647803][ T7779] RSP: 002b:00007f809a746028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.647831][ T7779] RAX: ffffffffffffffda RBX: 00007f8099a25fa0 RCX: 00007f809979e199 [ 186.647850][ T7779] RDX: 00002000000007c0 RSI: 00000000c0145608 RDI: 0000000000000004 [ 186.647868][ T7779] RBP: 00007f80998358e0 R08: 0000000000000000 R09: 0000000000000000 [ 186.647884][ T7779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.647900][ T7779] R13: 00007f8099a26038 R14: 00007f8099a25fa0 R15: 00007ffc81869f98 [ 186.647940][ T7779] [ 186.699697][ T7779] syz.5.552: vmalloc error: size 831488, align 0x1000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 186.699894][ T7779] CPU: 1 UID: 0 PID: 7779 Comm: syz.5.552 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.699927][ T7779] Tainted: [L]=SOFTLOCKUP [ 186.699936][ T7779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 186.699952][ T7779] Call Trace: [ 186.699962][ T7779] [ 186.699973][ T7779] dump_stack_lvl+0xe8/0x150 [ 186.700015][ T7779] warn_alloc+0x24d/0x270 [ 186.700046][ T7779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.700076][ T7779] ? lockdep_hardirqs_on+0x7b/0x110 [ 186.700117][ T7779] ? __pfx_warn_alloc+0x10/0x10 [ 186.700144][ T7779] ? kfree+0x1c5/0x650 [ 186.700175][ T7779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.700205][ T7779] ? __get_vm_area_node+0x219/0x2f0 [ 186.700254][ T7779] __vmalloc_node_range_noprof+0x36b/0x1540 [ 186.700314][ T7779] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 186.700340][ T7779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.700369][ T7779] ? __kasan_kmalloc+0x93/0xb0 [ 186.700407][ T7779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.700436][ T7779] ? __kmalloc_cache_noprof+0x321/0x600 [ 186.700471][ T7779] vmalloc_user_noprof+0xad/0xe0 [ 186.700498][ T7779] ? vb2_vmalloc_alloc+0xef/0x360 [ 186.700529][ T7779] vb2_vmalloc_alloc+0xef/0x360 [ 186.700557][ T7779] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 186.700587][ T7779] __vb2_queue_alloc+0xa0b/0x1660 [ 186.700645][ T7779] vb2_core_reqbufs+0xc3f/0x1470 [ 186.700688][ T7779] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 186.700720][ T7779] ? __video_do_ioctl+0x473/0xc70 [ 186.700752][ T7779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.700781][ T7779] ? vb2_verify_memory_type+0x1fc/0x570 [ 186.700819][ T7779] vb2_ioctl_reqbufs+0x4bb/0x850 [ 186.700862][ T7779] __video_do_ioctl+0x8af/0xc70 [ 186.700902][ T7779] ? __pfx___video_do_ioctl+0x10/0x10 [ 186.700948][ T7779] video_usercopy+0x860/0x1430 [ 186.700985][ T7779] ? __pfx___video_do_ioctl+0x10/0x10 [ 186.701017][ T7779] ? __pfx_video_usercopy+0x10/0x10 [ 186.701059][ T7779] ? __fget_files+0x2a/0x420 [ 186.701102][ T7779] ? __fget_files+0x2a/0x420 [ 186.701139][ T7779] ? __fget_files+0x3a2/0x420 [ 186.701181][ T7779] v4l2_ioctl+0x18d/0x1e0 [ 186.701209][ T7779] ? __pfx_v4l2_ioctl+0x10/0x10 [ 186.701236][ T7779] __se_sys_ioctl+0xfc/0x170 [ 186.701270][ T7779] do_syscall_64+0x166/0x520 [ 186.701312][ T7779] ? trace_irq_disable+0x3b/0x140 [ 186.701341][ T7779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.701373][ T7779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.701399][ T7779] RIP: 0033:0x7f809979e199 [ 186.701424][ T7779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.701446][ T7779] RSP: 002b:00007f809a746028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.701472][ T7779] RAX: ffffffffffffffda RBX: 00007f8099a25fa0 RCX: 00007f809979e199 [ 186.701491][ T7779] RDX: 00002000000007c0 RSI: 00000000c0145608 RDI: 0000000000000004 [ 186.701508][ T7779] RBP: 00007f80998358e0 R08: 0000000000000000 R09: 0000000000000000 [ 186.701525][ T7779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.701541][ T7779] R13: 00007f8099a26038 R14: 00007f8099a25fa0 R15: 00007ffc81869f98 [ 186.701581][ T7779] [ 187.207609][ T7779] Mem-Info: [ 187.207631][ T7779] active_anon:8173 inactive_anon:0 isolated_anon:0 [ 187.207631][ T7779] active_file:0 inactive_file:57612 isolated_file:0 [ 187.207631][ T7779] unevictable:0 dirty:537 writeback:0 [ 187.207631][ T7779] slab_reclaimable:10866 slab_unreclaimable:105335 [ 187.207631][ T7779] mapped:35091 shmem:1038 pagetables:1465 [ 187.207631][ T7779] sec_pagetables:0 bounce:0 [ 187.207631][ T7779] kernel_misc_reclaimable:0 [ 187.207631][ T7779] free:1272964 free_pcp:12737 free_cma:0 [ 187.207700][ T7779] Node 0 active_anon:32692kB inactive_anon:0kB active_file:0kB inactive_file:230236kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140364kB dirty:2148kB writeback:0kB shmem:4152kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14720kB pagetables:5736kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 187.207769][ T7779] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 187.207843][ T7779] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 187.207916][ T7779] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 187.207966][ T7779] Node 0 DMA32 free:1130072kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:32692kB inactive_anon:0kB active_file:0kB inactive_file:230236kB unevictable:0kB writepending:2148kB zspages:0kB present:3129332kB managed:2546824kB mlocked:0kB bounce:0kB free_pcp:50948kB local_pcp:35308kB free_cma:0kB [ 187.208042][ T7779] lowmem_reserve[]: 0 0 0 0 0 [ 187.208088][ T7779] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 187.208158][ T7779] lowmem_reserve[]: 0 0 0 0 0 [ 187.208204][ T7779] Node 1 Normal free:3946424kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 187.208277][ T7779] lowmem_reserve[]: 0 0 0 0 0 [ 187.208324][ T7779] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 187.208500][ T7779] Node 0 DMA32: 1413*4kB (UME) 1092*8kB (UME) 664*16kB (UME) 714*32kB (UME) 334*64kB (UME) 156*128kB (UME) 60*256kB (UME) 17*512kB (ME) 17*1024kB (UME) 10*2048kB (UME) 239*4096kB (UM) = 1130100kB [ 187.208714][ T7779] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 187.208853][ T7779] Node 1 Normal: 2*4kB (UM) 4*8kB (UM) 3*16kB (UM) 3*32kB (UM) 8*64kB (UM) 4*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 0*2048kB 962*4096kB (M) = 3946424kB [ 187.209074][ T7779] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 187.884633][ T7779] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 187.884663][ T7779] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 187.884684][ T7779] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 187.884704][ T7779] 58604 total pagecache pages [ 187.884715][ T7779] 0 pages in swap cache [ 187.884724][ T7779] Free swap = 124996kB [ 187.884734][ T7779] Total swap = 124996kB [ 187.884746][ T7779] 2097051 pages RAM [ 187.884755][ T7779] 0 pages HighMem/MovableOnly [ 187.884764][ T7779] 428729 pages reserved [ 187.884774][ T7779] 0 pages cma reserved [ 188.222817][ T5621] Bluetooth: hci3: command tx timeout [ 189.017756][ T7780] ceph: No mds server is up or the cluster is laggy [ 190.359414][ T5621] Bluetooth: hci3: command tx timeout [ 192.272581][ C0] sched: DL replenish lagged too much [ 192.701898][ T5621] Bluetooth: hci3: command tx timeout [ 194.511566][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.524277][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.503756][ T6573] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 255.273980][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.288859][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 309.649239][ T5633] Bluetooth: hci3: command 0x0406 tx timeout [ 318.684842][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.699801][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.378756][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.394703][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.173609][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.188651][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.577986][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.592004][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.123094][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 502.130087][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6019/1:b..l [ 502.138025][ C1] rcu: (detected by 1, t=10503 jiffies, g=28477, q=656533 ncpus=2) [ 502.146021][ C1] task:syz-executor state:R running task stack:21800 pid:6019 tgid:6019 ppid:6012 task_flags:0x400140 flags:0x00080000 [ 502.159550][ C1] Call Trace: [ 502.162838][ C1] [ 502.165788][ C1] __schedule+0x17db/0x58f0 [ 502.170341][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.176018][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.181676][ C1] ? __lock_acquire+0x747/0x2de0 [ 502.186636][ C1] ? __pfx___schedule+0x10/0x10 [ 502.191519][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.197184][ C1] ? __lock_acquire+0x747/0x2de0 [ 502.202171][ C1] preempt_schedule_irq+0x4b/0x90 [ 502.207230][ C1] irqentry_exit+0x14f/0x920 [ 502.211856][ C1] ? trace_irq_disable+0x3b/0x140 [ 502.216904][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 502.222902][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 502.228206][ C1] Code: ff ff ff e8 20 ee 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 82 38 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 4a d9 6c ff cc 48 8d 3d 37 38 da [ 502.247829][ C1] RSP: 0018:ffffc90004ef7140 EFLAGS: 00000292 [ 502.253921][ C1] RAX: 33ca4cbbe68fee00 RBX: 0000000000000000 RCX: 0000000000000046 [ 502.261905][ C1] RDX: 000000009d278aff RSI: ffffffff8e69fda2 RDI: ffffffff8c6dad80 [ 502.269897][ C1] RBP: ffff88807895be80 R08: ffffffff817811df R09: 0000000000000000 [ 502.277885][ C1] R10: dffffc0000000000 R11: ffffffff81b2c4a0 R12: ffffffff8ed5c8a0 [ 502.285876][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 502.293869][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 502.300052][ C1] ? unwind_next_frame+0x8f/0x2550 [ 502.305197][ C1] ? __reset_page_owner+0x71/0x1f0 [ 502.310308][ C1] ? unwind_next_frame+0x8f/0x2550 [ 502.315414][ C1] unwind_next_frame+0xac/0x2550 [ 502.320342][ C1] ? unwind_next_frame+0x8f/0x2550 [ 502.325450][ C1] ? save_stack+0x122/0x230 [ 502.329940][ C1] ? unwind_next_frame+0x8f/0x2550 [ 502.335046][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 502.341186][ C1] arch_stack_walk+0x11b/0x150 [ 502.345945][ C1] ? __reset_page_owner+0x71/0x1f0 [ 502.351050][ C1] stack_trace_save+0xa9/0x100 [ 502.355808][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 502.361169][ C1] ? __lock_acquire+0x747/0x2de0 [ 502.366304][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.371950][ C1] save_stack+0x122/0x230 [ 502.376281][ C1] ? __pfx_save_stack+0x10/0x10 [ 502.381120][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.386754][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.392383][ C1] ? page_ext_put+0x97/0xc0 [ 502.396880][ C1] __reset_page_owner+0x71/0x1f0 [ 502.401815][ C1] __free_frozen_pages+0xc93/0xd90 [ 502.406918][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.412544][ C1] __slab_free+0x274/0x2c0 [ 502.416948][ C1] ? lock_acquire+0x115/0x350 [ 502.421617][ C1] ? qlist_free_all+0x8e/0x100 [ 502.426372][ C1] qlist_free_all+0x99/0x100 [ 502.430951][ C1] kasan_quarantine_reduce+0x148/0x160 [ 502.436400][ C1] __kasan_kmalloc+0x22/0xb0 [ 502.440986][ C1] __kmalloc_noprof+0x36b/0x720 [ 502.445827][ C1] ? rcu_is_watching+0x16/0xb0 [ 502.450585][ C1] ? __kmalloc_noprof+0x1ab/0x720 [ 502.455595][ C1] ? tomoyo_realpath_from_path+0xef/0x640 [ 502.461312][ C1] ? tomoyo_realpath_from_path+0xef/0x640 [ 502.467034][ C1] tomoyo_realpath_from_path+0xef/0x640 [ 502.472585][ C1] tomoyo_check_open_permission+0x229/0x470 [ 502.478471][ C1] ? tomoyo_check_open_permission+0x1d3/0x470 [ 502.484528][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 502.490931][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.496553][ C1] ? __asan_memset+0x22/0x50 [ 502.501155][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.506815][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.512451][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.518073][ C1] ? tomoyo_file_open+0x163/0x220 [ 502.523094][ C1] security_file_open+0xa9/0x240 [ 502.528030][ C1] do_dentry_open+0x4a0/0x1380 [ 502.532828][ C1] vfs_open+0x3b/0x340 [ 502.536896][ C1] ? path_openat+0x1428/0x1d60 [ 502.541652][ C1] path_openat+0x1443/0x1d60 [ 502.546250][ C1] do_file_open+0x23e/0x4a0 [ 502.550746][ C1] ? __pfx_do_file_open+0x10/0x10 [ 502.555774][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.561397][ C1] ? _raw_spin_unlock+0x28/0x50 [ 502.566265][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.571973][ C1] ? alloc_fd+0x651/0x6c0 [ 502.576313][ C1] do_sys_openat2+0x115/0x200 [ 502.580998][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 502.586193][ C1] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 502.591915][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 502.598007][ C1] __x64_sys_openat+0x138/0x170 [ 502.602862][ C1] do_syscall_64+0x166/0x520 [ 502.607446][ C1] ? trace_irq_disable+0x3b/0x140 [ 502.612459][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.618605][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.624488][ C1] RIP: 0033:0x7f2343f9d4bc [ 502.628888][ C1] RSP: 002b:00007ffd1bd879c0 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 502.637285][ C1] RAX: ffffffffffffffda RBX: 00000000000000b7 RCX: 00007f2343f9d4bc [ 502.645237][ C1] RDX: 0000000000090800 RSI: 00007f2344035215 RDI: 00000000ffffff9c [ 502.653194][ C1] RBP: 00007ffd1bd87a6c R08: 0000000000000000 R09: 0000000000000000 [ 502.661151][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000046 [ 502.669107][ C1] R13: 0000000000000000 R14: 000000000004b4f2 R15: 00007ffd1bd87ac0 [ 502.677080][ C1] [ 502.680089][ C1] rcu: rcu_preempt kthread starved for 1201 jiffies! g28477 f0x2 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 502.691034][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 502.701021][ C1] rcu: RCU grace-period kthread stack dump: [ 502.706916][ C1] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 502.720448][ C1] Call Trace: [ 502.723732][ C1] [ 502.726670][ C1] __schedule+0x17db/0x58f0 [ 502.731201][ C1] ? __lock_acquire+0x747/0x2de0 [ 502.736174][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 502.741323][ C1] ? __pfx___schedule+0x10/0x10 [ 502.746195][ C1] ? lock_acquire+0x115/0x350 [ 502.750895][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.756550][ C1] ? schedule+0x90/0x2b0 [ 502.760817][ C1] schedule+0x164/0x2b0 [ 502.764999][ C1] schedule_timeout+0x152/0x2c0 [ 502.769867][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 502.775256][ C1] ? __pfx_process_timeout+0x10/0x10 [ 502.780563][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.786209][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 502.792032][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.797678][ C1] ? prepare_to_swait_event+0x322/0x350 [ 502.803251][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 502.808134][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 502.814310][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 502.819609][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 502.824847][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 502.829454][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 502.834666][ C1] ? __kthread_parkme+0x71/0x1f0 [ 502.839627][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.845273][ C1] ? __kthread_parkme+0x199/0x1f0 [ 502.850338][ C1] kthread+0x38b/0x480 [ 502.854425][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 502.859639][ C1] ? __pfx_kthread+0x10/0x10 [ 502.864246][ C1] ret_from_fork+0x514/0xb70 [ 502.868856][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 502.873983][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.879634][ C1] ? __switch_to+0xc89/0x1420 [ 502.884334][ C1] ? __pfx_kthread+0x10/0x10 [ 502.888939][ C1] ret_from_fork_asm+0x1a/0x30 [ 502.893749][ C1] [ 502.896767][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 502.903084][ C1] Sending NMI from CPU 1 to CPUs 0: [ 502.908292][ C0] NMI backtrace for cpu 0 [ 502.908315][ C0] CPU: 0 UID: 0 PID: 6566 Comm: kworker/u8:49 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.908355][ C0] Tainted: [L]=SOFTLOCKUP [ 502.908364][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 502.908380][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 502.908415][ C0] RIP: 0010:rcu_is_watching+0x36/0xb0 [ 502.908448][ C0] Code: 05 5f 03 e9 11 e8 6a d6 3a 0a 89 c3 83 f8 08 73 66 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd d0 a7 6e 8e 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 7b 87 8b 00 48 c7 c3 18 da 96 93 [ 502.908467][ C0] RSP: 0018:ffffc90000006d98 EFLAGS: 00000216 [ 502.908487][ C0] RAX: 1ffffffff1cdd4fa RBX: 0000000000000000 RCX: 8000000000000102 [ 502.908504][ C0] RDX: ffffc90000006f01 RSI: ffffffff8c6dad60 RDI: ffffffff8c6dad20 [ 502.908522][ C0] RBP: 1ffffffff2226101 R08: ffffc90000007fe8 R09: ffffc90000006f18 [ 502.908539][ C0] R10: dffffc0000000000 R11: fffff52000000de5 R12: ffffc90000000000 [ 502.908557][ C0] R13: ffffffff817811df R14: ffffffff8e6ea7d0 R15: dffffc0000000000 [ 502.908576][ C0] FS: 0000000000000000(0000) GS:ffff888124cc6000(0000) knlGS:0000000000000000 [ 502.908595][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 502.908611][ C0] CR2: 00007fc3777f34b8 CR3: 000000002a670000 CR4: 0000000000350ef0 [ 502.908630][ C0] Call Trace: [ 502.908639][ C0] [ 502.908650][ C0] lock_release+0x4b/0x3c0 [ 502.908676][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.908705][ C0] ? deref_stack_reg+0x18e/0x220 [ 502.908734][ C0] ? unwind_next_frame+0x8f/0x2550 [ 502.908762][ C0] unwind_next_frame+0x1baa/0x2550 [ 502.908794][ C0] ? handle_softirqs+0x226/0x860 [ 502.908824][ C0] ? unwind_next_frame+0x8f/0x2550 [ 502.908853][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 502.908879][ C0] arch_stack_walk+0x11b/0x150 [ 502.908910][ C0] ? do_softirq+0x77/0xd0 [ 502.908942][ C0] stack_trace_save+0xa9/0x100 [ 502.908966][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 502.908990][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.909017][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 502.909053][ C0] kasan_save_track+0x3e/0x80 [ 502.909080][ C0] ? kasan_save_track+0x3e/0x80 [ 502.909106][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 502.909134][ C0] ? kmem_cache_alloc_node_noprof+0x354/0x610 [ 502.909158][ C0] ? __alloc_skb+0x27a/0x7a0 [ 502.909190][ C0] ? synproxy_send_client_synack+0x175/0xde0 [ 502.909222][ C0] ? nft_synproxy_eval_v4+0x362/0x4e0 [ 502.909256][ C0] ? nft_synproxy_do_eval+0x389/0x5d0 [ 502.909290][ C0] ? nft_do_chain+0x132b/0x1b10 [ 502.909324][ C0] ? nft_do_chain_ipv4+0x195/0x290 [ 502.909361][ C0] ? nf_hook_slow+0xc5/0x220 [ 502.909389][ C0] ? NF_HOOK+0x21f/0x3c0 [ 502.909421][ C0] ? NF_HOOK+0x336/0x3c0 [ 502.909453][ C0] ? process_backlog+0xa6b/0x18b0 [ 502.909483][ C0] ? __napi_poll+0xaa/0x330 [ 502.909511][ C0] ? net_rx_action+0x61d/0xf50 [ 502.909541][ C0] ? handle_softirqs+0x226/0x860 [ 502.909597][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.909627][ C0] __kasan_slab_alloc+0x6c/0x80 [ 502.909657][ C0] kmem_cache_alloc_node_noprof+0x354/0x610 [ 502.909683][ C0] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 502.909707][ C0] ? __alloc_skb+0x27a/0x7a0 [ 502.909737][ C0] ? __alloc_skb+0x27a/0x7a0 [ 502.909773][ C0] __alloc_skb+0x27a/0x7a0 [ 502.909808][ C0] synproxy_send_client_synack+0x175/0xde0 [ 502.909842][ C0] ? lock_acquire+0x115/0x350 [ 502.909867][ C0] ? synproxy_pernet+0x45/0x270 [ 502.909911][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 502.909942][ C0] ? nft_synproxy_do_eval+0x4c4/0x5d0 [ 502.909977][ C0] ? synproxy_pernet+0x45/0x270 [ 502.910012][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.910042][ C0] nft_synproxy_eval_v4+0x362/0x4e0 [ 502.910081][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 502.910118][ C0] ? nf_ip_checksum+0x13c/0x510 [ 502.910152][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.910182][ C0] nft_synproxy_do_eval+0x389/0x5d0 [ 502.910216][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.910243][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 502.910282][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 502.910324][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.910358][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.910387][ C0] nft_do_chain+0x132b/0x1b10 [ 502.910434][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 502.910474][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 502.910504][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.910531][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 502.910583][ C0] nft_do_chain_ipv4+0x195/0x290 [ 502.910617][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 502.910651][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 502.910688][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.910714][ C0] ? iptable_mangle_hook+0x18a/0x4c0 [ 502.910750][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.910779][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 502.910815][ C0] nf_hook_slow+0xc5/0x220 [ 502.910848][ C0] NF_HOOK+0x21f/0x3c0 [ 502.910881][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.910909][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 502.910944][ C0] ? NF_HOOK+0x9e/0x3c0 [ 502.910977][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 502.911013][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 502.911049][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.911078][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.911105][ C0] ? ip_local_deliver+0x113/0x190 [ 502.911142][ C0] NF_HOOK+0x336/0x3c0 [ 502.911177][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 502.911211][ C0] ? NF_HOOK+0x9e/0x3c0 [ 502.911243][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 502.911279][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 502.911312][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.911342][ C0] ? ip_rcv_core+0x88d/0xd50 [ 502.911379][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 502.911413][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 502.911448][ C0] process_backlog+0xa6b/0x18b0 [ 502.911483][ C0] ? process_backlog+0x3de/0x18b0 [ 502.911523][ C0] __napi_poll+0xaa/0x330 [ 502.911554][ C0] net_rx_action+0x61d/0xf50 [ 502.911594][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 502.911646][ C0] handle_softirqs+0x226/0x860 [ 502.911679][ C0] ? do_softirq+0x77/0xd0 [ 502.911712][ C0] ? cfg80211_inform_single_bss_data+0x1491/0x1be0 [ 502.911738][ C0] do_softirq+0x77/0xd0 [ 502.911767][ C0] [ 502.911775][ C0] [ 502.911783][ C0] __local_bh_enable_ip+0x100/0x140 [ 502.911814][ C0] cfg80211_inform_single_bss_data+0x1491/0x1be0 [ 502.911846][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 502.911889][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.911916][ C0] ? _ieee802_11_parse_elems_full+0x2c0/0x48f0 [ 502.911943][ C0] ? cfg80211_inform_bss_data+0x24b/0x3cc0 [ 502.911970][ C0] cfg80211_inform_bss_data+0x263/0x3cc0 [ 502.912014][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 502.912063][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.912090][ C0] ? __lock_acquire+0x747/0x2de0 [ 502.912126][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.912153][ C0] ? cfg80211_defragment_element+0x3e/0x360 [ 502.912180][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.912210][ C0] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 502.912239][ C0] ? ieee80211_bss_info_update+0x30f/0xa50 [ 502.912280][ C0] ieee80211_bss_info_update+0x791/0xa50 [ 502.912319][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 502.912357][ C0] ? sta_info_get+0x4f/0x300 [ 502.912399][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.912428][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 502.912467][ C0] ieee80211_ibss_rx_queued_mgmt+0x1ce3/0x2c40 [ 502.912508][ C0] ? process_scheduled_works+0xc3d/0x1630 [ 502.912543][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 502.912577][ C0] ? __lock_acquire+0x747/0x2de0 [ 502.912602][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 502.912653][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.912680][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 502.912713][ C0] ? kcov_remote_start+0x9c/0x7e0 [ 502.912745][ C0] ? kcov_remote_start+0x1a6/0x7e0 [ 502.912771][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.912801][ C0] ieee80211_iface_work+0x78a/0x1010 [ 502.912846][ C0] cfg80211_wiphy_work+0x29e/0x420 [ 502.912876][ C0] ? process_scheduled_works+0x97a/0x1630 [ 502.912907][ C0] process_scheduled_works+0xc3d/0x1630 [ 502.912937][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.912985][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 502.913020][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.913047][ C0] ? assign_work+0x3cf/0x5d0 [ 502.913084][ C0] worker_thread+0xa47/0xfb0 [ 502.913135][ C0] kthread+0x38b/0x480 [ 502.913158][ C0] ? __pfx_worker_thread+0x10/0x10 [ 502.913188][ C0] ? __pfx_kthread+0x10/0x10 [ 502.913212][ C0] ret_from_fork+0x514/0xb70 [ 502.913237][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 502.913258][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.913285][ C0] ? __switch_to+0xc89/0x1420 [ 502.913320][ C0] ? __pfx_kthread+0x10/0x10 [ 502.913347][ C0] ret_from_fork_asm+0x1a/0x30 [ 502.913394][ C0]