last executing test programs: 1m4.13160208s ago: executing program 3 (id=147): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000680)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, 0x0}, 0x48043) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f00000002c0)=@udp=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r1], 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffe, 0x0, 0x9, 0x0, &(0x7f0000000580)='\x00\x00\x00\x00\x00\x00\x00\x00\n', 0x0}, 0x50) 1m2.786233971s ago: executing program 3 (id=157): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz71NAzEABeBn3Q/nCjaAMdiAgpoJGOQQ47ACBT0jMAuSI+cuGSFJ8X2FC7/3ZDlcVS1JhvG5JG3tFw93WzCmJ2WvTfn+HctH8pg1rR07yxb9vE5L2v2w9PbfS/2s+2bux397Pz1VMqcmT+U8zdvXxT4KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADfsEAAA//865g4i") r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000002180)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='statm\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 1m2.092739482s ago: executing program 3 (id=163): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv4=@empty, [0x0, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0x101000000], 0x80, 0x54, 0x0, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x3ff, 0x18}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x9000000000000, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3, 0x18}, {0x8000000000000}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000001a40)={@local, @random="7f9cc9043860", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1b9646", 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x0, 0x0, 0x3}}}}}}}, 0x0) 1m0.691191328s ago: executing program 3 (id=172): r0 = syz_ublk_setup_io_uring(0x277c, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@bsdgroups}, {@noblock_validity}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffffa}}], [{@pcr={'pcr', 0x3d, 0x6}}, {@smackfstransmute={'smackfstransmute', 0x3d, '%+'}}, {@uid_lt}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0xfd, 0x57e, &(0x7f0000001240)="$eJzs3U1rG9caAOB3ZClfzr12IIR77+ISyKIpIXJs9yOFQtJlaUMD7T4VtmKC5ShYcojdQJNFs+mmhEIpDZT+gO67DP0D/RWBNhBKMO2iFFxGHjmKJfkrcqVGzwOTnKMZzTlHZ96jMzOSFcDQOpn+k4v4b0R8kUSMtazLR7by5Pp2q09vz6RLEmtrH/6axIVN+0qy/0ezzH8i4sfPIs7k2sutLa/MlyqV8mKWn6gv3JioLa+cvbZQmivPla9PTU+ff3166q033+hZW1+9/PvXHzx89/znp1a/+v7xsftJXIyj2bq0XT0o4k5r5mTpzyxViIubNpzsQWGDJOl3BdiTkSzOC5GOAWMxkkU98PL7NCLWgCGViH8YUs15QPPcvkfnwf8YT95ZPwFqb39+/dpIHGqcGx1ZTZ47M0rPd8d7UH5axg+/PLifLrH1dYjD2+QBduXO3Yg4l8+3j39JNv7t3bnGxeOtbS5j2N5/oJ8epvOf5E5EW/znNuY/0WH+M9ohdvfi2T7WpzPt8Z973INiukrnf293nP9uDF3jI1nuX405XyG5eq1SPhcR/46I01E4mOa3up9zfvXRWrd1rfO/dEnLb84Fs3o8zh98/jmzpXrpRdrc6sndiP91nP8mG/2fdOj/9PW4vMMyTpQf/L/buu3bv7/Wvot4pWP/P7ujlWx9f3KicTxMNI+Kdr/dO/FTt/L73f60/49s3f7xpPV+ba3rrrreOPr20B/lbuv2evwfSD5qpA9kj90q1euLkxEHkvfzo5sfn3r23Ga+uX3a/tOnOsf/Vsd/Olp93PWleN694/e6bjoI/T+7q/7ffeLRe5980638nfX/a43U6eyRnYx/O63gi7x2AAAAAAAAMGhyEXE0klxxI53LFYvrn+84HkdylWqtfuZqden6bDS+KzsehVzzTvdYy+chJrPPwzbzU5vy0xFxLCK+HDncyBdnqpXZfjceAAAAAAAAAAAAAAAAAAAABsRol+//p34e6XftgH3X+GGDg/2uBdAP2/7kfy9+6QkYSNvGP/DS2n38uzIALwvv/zC8xD8ML/EPw2un8V8Y2+eKAH877/8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAA9NTlS5fSZW316e2ZND97c3lpvnrz7Gy5Nl9cWJopzlQXbxTnqtW5Srk4U13Ybn+VavXG5FQs3Zqol2v1idryypWF6tL1+pVrC6W58pVywR8bBgAAAAAAAAAAAAAAAAAAgDa15ZX5UqVSXpTomrgQA1GN/Wzguj09PT8orZDoaaLPAxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtPgrAAD//20CM10=") sigaltstack(0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000001180)={0x0}) 59.758671507s ago: executing program 3 (id=182): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000080)={0x3}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000140)={0x200d}) 55.463420641s ago: executing program 3 (id=199): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "97c6e5c022b54c6e01b65660c23e2072121e3abaa079b86c68786694adfc6023d285b4dddea6bb5e36126e910840b462b36660c2e2aa14245c328b69992477ec", 0x400013}, 0x48, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') mount(0x0, &(0x7f0000001a00)='mnt\x00', 0x0, 0x1d049, 0x0) 54.906424907s ago: executing program 32 (id=199): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "97c6e5c022b54c6e01b65660c23e2072121e3abaa079b86c68786694adfc6023d285b4dddea6bb5e36126e910840b462b36660c2e2aa14245c328b69992477ec", 0x400013}, 0x48, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') mount(0x0, &(0x7f0000001a00)='mnt\x00', 0x0, 0x1d049, 0x0) 26.837165354s ago: executing program 4 (id=358): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bind$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x4000, &(0x7f00000004c0)=ANY=[], 0x3, 0x599, &(0x7f0000000dc0)="$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") 25.809883565s ago: executing program 4 (id=367): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000044) socket$inet6(0xa, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a0000000000000600"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 25.506555717s ago: executing program 4 (id=369): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='test_file\x00', 0x42, 0x1ff) write(r1, &(0x7f00000001c0), 0x2000000) write(r0, &(0x7f0000000240)='/proc/self/cwd/test_file,0x0,0x1', 0x20) 23.871494197s ago: executing program 4 (id=377): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x21a70d1, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./sys\x00', &(0x7f0000000940)='sysfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='\x00', 0x9801) move_mount(r0, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) 23.098320592s ago: executing program 4 (id=383): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000440)={0x1, 0x1, 0x201, 0xfffffffffffffffe}) fcntl$lock(r0, 0x26, &(0x7f00000004c0)) fcntl$lock(r0, 0x7, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 22.321870425s ago: executing program 4 (id=386): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) preadv(r0, &(0x7f0000001e80)=[{&(0x7f0000001c80)=""/236, 0xec}], 0x1, 0x5, 0x6) 20.820335095s ago: executing program 33 (id=386): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) preadv(r0, &(0x7f0000001e80)=[{&(0x7f0000001c80)=""/236, 0xec}], 0x1, 0x5, 0x6) 16.952645482s ago: executing program 0 (id=412): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 16.369810479s ago: executing program 0 (id=413): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updsa={0xec, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x2, '\x00', 0xfd}, @in=@multicast2}, {@in=@empty, 0x0, 0x32}, @in=@loopback, {}, {0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10}}, 0xec}}, 0x0) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b3, 0x800, 0x1, 0x2082, 0x0, 0x0}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r4, 0x84, 0xb, 0xfffffffffffffffe, &(0x7f0000000040)=0x41) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd_index=0x9, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 15.600428371s ago: executing program 0 (id=418): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newtclass={0x6c, 0x28, 0x601, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0xfff1}, {0x8, 0xfff1}, {0x0, 0xa}}, [@tclass_kind_options=@c_htb={{0x8}, {0x40, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x9, 0x1, 0xfffe, 0x3f1, 0x2, 0x8}, {0x8, 0x0, 0x8, 0x7b, 0x7ff, 0x4}, 0x4, 0x5, 0xffff, 0x8, 0x102}}, @TCA_HTB_CEIL64={0xc, 0x7, 0xfffffffffffffffb}]}}]}, 0x6c}}, 0x20000000) 14.792109701s ago: executing program 0 (id=421): r0 = userfaultfd(0x80801) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x89901) move_mount(r2, &(0x7f00000003c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000440)='\x00', 0x89901) close_range(r0, 0xffffffffffffffff, 0x0) 13.960776424s ago: executing program 0 (id=426): read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000300), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0xd) r1 = open(&(0x7f0000000380)='./bus\x00', 0x143142, 0x80) ftruncate(r1, 0x2007ffb) sendfile(r0, r1, 0x0, 0x1000000201002) 13.218638697s ago: executing program 0 (id=430): syz_usb_connect(0x0, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040991100b00000000000010902200001010080320904000002000000000705810200020007050202"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0x40) mount(0x0, &(0x7f00000004c0)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/gnss0\x00', 0x1001, 0x0) close(0x3) write$FUSE_INTERRUPT(r0, 0x0, 0x0) 12.456408974s ago: executing program 34 (id=430): syz_usb_connect(0x0, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040991100b00000000000010902200001010080320904000002000000000705810200020007050202"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0x40) mount(0x0, &(0x7f00000004c0)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/gnss0\x00', 0x1001, 0x0) close(0x3) write$FUSE_INTERRUPT(r0, 0x0, 0x0) 10.744277625s ago: executing program 2 (id=441): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) listen(r1, 0x5) accept$inet(r1, 0x0, 0x0) 8.748447275s ago: executing program 2 (id=448): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000003c0)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) accept4$bt_l2cap(r0, 0x0, 0x0, 0x80800) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e130100c900", @ANYRES32=r0], 0x16) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 7.419021177s ago: executing program 2 (id=452): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000000)='10', 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) 7.369232248s ago: executing program 5 (id=453): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000080)='7', 0x1) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) 6.744954417s ago: executing program 2 (id=454): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x40, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0xffffffffffffffac, &(0x7f00000001c0)="9001000000000000") syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 5.170023396s ago: executing program 6 (id=457): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r1, &(0x7f0000001600), &(0x7f0000001700)=@udp=r0}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000002000)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000003000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000004000)={r2, 0x0, 0xe, 0x0, &(0x7f0000005000)="00112233445566778899aabbccdd", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.744158703s ago: executing program 1 (id=459): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x1000, 0x2, 0xf5ff}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x88) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000700)={0x1, &(0x7f0000000740)=[{0x6, 0x10, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.687053912s ago: executing program 5 (id=460): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000480)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) 4.456950314s ago: executing program 5 (id=461): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) syz_io_uring_setup(0x4fae, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x4}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000)) 4.050684828s ago: executing program 6 (id=462): r0 = io_uring_setup(0x650b, &(0x7f0000000080)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) pipe2(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000980)=ANY=[], 0xffffff6a) pipe2(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) tee(r1, r3, 0xfffffffffffffc01, 0x0) tee(r1, r3, 0x60000000000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.781498231s ago: executing program 1 (id=463): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x4a) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000100)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r1 = dup(r0) read$FUSE(r1, &(0x7f0000001800)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000003840)={0x50, 0x0, r2, {0x7, 0x2d, 0x3, 0x804200, 0x6, 0xd, 0x8, 0x2, 0x0, 0x0, 0x10, 0x200}}, 0x50) 3.691542417s ago: executing program 6 (id=464): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000fc0)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000001040)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000001080)={r2, r1}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000010c0)={0x1, &(0x7f0000001100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.367479073s ago: executing program 1 (id=465): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf25"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) pipe(&(0x7f00000001c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x129c81, 0x0) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000c00)="15ed", 0x2, r0) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r2, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 3.28228136s ago: executing program 6 (id=466): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000004440)=[{{0x0, 0x0, 0x0}, 0x8}, {{&(0x7f0000001380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001400)=""/170}, {&(0x7f00000014c0)=""/186}, {&(0x7f0000001580)=""/162}, {&(0x7f0000001640)=""/200}, {&(0x7f0000001740)=""/208}, {&(0x7f0000001840)=""/206}, {&(0x7f0000001940)=""/211}, {&(0x7f0000001a40)=""/170}]}, 0x7f}, {{&(0x7f0000001b80), 0x0, &(0x7f0000004300)=[{&(0x7f0000001c00)=""/2}, {&(0x7f0000001c40)=""/195}, {&(0x7f0000001d40)=""/208}, {&(0x7f0000001e40)=""/100}, {&(0x7f0000001ec0)=""/4096}, {&(0x7f0000002ec0)=""/201}, {&(0x7f0000002fc0)=""/164}, {&(0x7f0000003080)=""/252}, {&(0x7f0000003180)=""/32}, {&(0x7f0000003300)=""/4096}], 0x0, &(0x7f00000043c0)=""/69}, 0x2}], 0x400000000000262, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket(0x1, 0x803, 0x0) 3.013068456s ago: executing program 2 (id=467): prlimit64(0x0, 0xe, &(0x7f000000bd00)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f000000ce80)=0x4) setns(0xc9, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f000000cec0)={0x0, 0x0, &(0x7f000000cf00)={&(0x7f000000cf40)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) 2.920183802s ago: executing program 5 (id=468): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000300)=[0x0], 0x1, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 2.785676611s ago: executing program 1 (id=469): socket(0x28, 0x5, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e22, @loopback}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000280)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1b, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 2.517420958s ago: executing program 1 (id=470): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000004c0)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000500)=0xf) ioctl$TCSBRK(r1, 0x400455c8, 0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000580)=0xc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000001880)=0xc0) 1.194151804s ago: executing program 6 (id=471): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='personality\x00') capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x81, 0xffffffff}) pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 416.654705ms ago: executing program 5 (id=472): mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x3, 0x10000051}, &(0x7f0000000200), &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd589, 0x80, 0x2, 0x1e1}, &(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000180)) syz_io_uring_submit(r3, r1, r2, &(0x7f0000000280)=@IORING_OP_FUTEX_WAITV={0x35, 0x4, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[{0x100000001, 0x0, 0x82}], 0x1, 0x0, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000006c0)='\x00\x00\x00\x00\x00', 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_enter(r0, 0x64ec, 0xfffffffd, 0x6a, 0x0, 0x0) 360.243223ms ago: executing program 2 (id=473): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000000000602, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x1fe000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000240)=0x4000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x400000000a882, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 271.425913ms ago: executing program 6 (id=474): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x200}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000600)={'wlan0\x00', 0x1}) 235.098553ms ago: executing program 7 (id=389): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000500)='j', 0x1, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='cdg', 0x3) shutdown(r0, 0x1) 142.304851ms ago: executing program 1 (id=475): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='27', 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x40000000000004, 0x0, 0x2, 0x6}}, 0x20) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x1c9400, 0x0) 0s ago: executing program 5 (id=476): r0 = userfaultfd(0x80001) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @main=@item_4={0x3, 0x0, 0xa, "8e41d54c"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local, @main=@item_012={0x2, 0x0, 0x8, "008c"}, @main=@item_4={0x3, 0x0, 0xc, "c71d5f70"}, @global=@item_012={0x0, 0x1, 0x9}, @main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): hing+0x13/0xc0 [ 151.311684][ T5644] ? kernel_text_address+0x8d/0x100 [ 151.311724][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.311770][ T5644] ? __kernel_text_address+0xd/0x30 [ 151.311884][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.311934][ T5644] ? check_prev_add+0x354/0xe60 [ 151.311981][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.312034][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.312082][ T5644] ? rcu_is_watching+0x13/0xc0 [ 151.312126][ T5644] f2fs_write_data_pages+0x799/0x16d0 [ 151.312186][ T5644] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 151.312226][ T5644] ? lock_acquire+0x1d1/0x380 [ 151.312286][ T5644] ? do_writepages+0x4b5/0x600 [ 151.312344][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.312398][ T5644] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 151.312451][ T5644] do_writepages+0x278/0x600 [ 151.312519][ T5644] ? __pfx_do_writepages+0x10/0x10 [ 151.312578][ T5644] ? do_raw_spin_unlock+0x145/0x1e0 [ 151.312641][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.312688][ T5644] ? _raw_spin_unlock+0x28/0x50 [ 151.312740][ T5644] filemap_writeback+0x22d/0x2e0 [ 151.312808][ T5644] ? __pfx_filemap_writeback+0x10/0x10 [ 151.312936][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.312984][ T5644] ? find_held_lock+0x2b/0x80 [ 151.313021][ T5644] ? f2fs_sync_dirty_inodes+0x4cb/0xb10 [ 151.313066][ T5644] ? f2fs_sync_dirty_inodes+0x4cb/0xb10 [ 151.313108][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.313171][ T5644] f2fs_sync_dirty_inodes+0x587/0xb10 [ 151.313234][ T5644] f2fs_write_checkpoint+0x5c4/0x6130 [ 151.313279][ T5644] ? do_raw_spin_lock+0x128/0x260 [ 151.313336][ T5644] ? find_held_lock+0x2b/0x80 [ 151.313385][ T5644] ? _raw_spin_unlock_irq+0x23/0x50 [ 151.313434][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.313487][ T5644] ? __wait_for_common+0x1f2/0x500 [ 151.313536][ T5644] ? __pfx_schedule_timeout+0x10/0x10 [ 151.313586][ T5644] ? __pfx___wait_for_common+0x10/0x10 [ 151.313638][ T5644] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 151.313682][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.313730][ T5644] ? mark_held_locks+0x40/0x70 [ 151.313788][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.313836][ T5644] ? rcu_is_watching+0x13/0xc0 [ 151.313874][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.313921][ T5644] ? kthread_stop+0x280/0x630 [ 151.313990][ T5644] kill_f2fs_super+0x3f7/0x4b0 [ 151.314035][ T5644] ? __pfx_kill_f2fs_super+0x10/0x10 [ 151.314077][ T5644] ? lockdep_hardirqs_on+0x7d/0x110 [ 151.314129][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.314201][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.314252][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.314318][ T5644] deactivate_locked_super+0xbd/0x130 [ 151.314375][ T5644] deactivate_super+0xea/0x110 [ 151.314429][ T5644] cleanup_mnt+0xb7/0x160 [ 151.314486][ T5644] task_work_run+0x150/0x240 [ 151.314530][ T5644] ? __pfx_task_work_run+0x10/0x10 [ 151.314575][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.314634][ T5644] exit_to_user_mode_loop+0x1d8/0x700 [ 151.314695][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.314743][ T5644] ? rcu_is_watching+0x13/0xc0 [ 151.314788][ T5644] do_syscall_64+0x661/0x790 [ 151.314846][ T5644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.314888][ T5644] RIP: 0033:0x7fb52f7a0797 [ 151.314920][ T5644] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 151.314959][ T5644] RSP: 002b:00007fff36f0b938 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 151.314998][ T5644] RAX: 0000000000000000 RBX: 00007fb52f835f93 RCX: 00007fb52f7a0797 [ 151.315024][ T5644] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff36f0b9f0 [ 151.315049][ T5644] RBP: 00007fff36f0b9f0 R08: 00007fff36f0c9f0 R09: 00000000ffffffff [ 151.315075][ T5644] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff36f0ca80 [ 151.315100][ T5644] R13: 00007fb52f835f93 R14: 0000000000024e06 R15: 00007fff36f0cac0 [ 151.315158][ T5644] [ 151.440561][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.440694][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.537740][ T5644] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 151.623359][ T24] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 151.801458][ T24] usb 1-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 151.827568][ T24] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 151.827613][ T24] usb 1-1: config 0 has no interface number 0 [ 151.827667][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 151.827707][ T24] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 151.827757][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 151.827803][ T24] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 151.827851][ T24] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 151.827899][ T24] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 151.827967][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.841677][ T24] usb 1-1: config 0 descriptor?? [ 151.851562][ T6702] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 151.851710][ T6702] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.188503][ T24] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 152.452461][ T6702] ldusb 1-1:0.55: Write buffer overflow, 2147479472 bytes dropped [ 152.470406][ T24] usb 1-1: USB disconnect, device number 5 [ 152.493844][ T24] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 152.658509][ T6719] FAULT_INJECTION: forcing a failure. [ 152.658509][ T6719] name failslab, interval 1, probability 0, space 0, times 0 [ 152.658560][ T6719] CPU: 0 UID: 0 PID: 6719 Comm: syz.2.260 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.658614][ T6719] Tainted: [L]=SOFTLOCKUP [ 152.658634][ T6719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 152.658656][ T6719] Call Trace: [ 152.658668][ T6719] [ 152.658682][ T6719] dump_stack_lvl+0x100/0x190 [ 152.658748][ T6719] should_fail_ex.cold+0x5/0xa [ 152.658805][ T6719] should_failslab+0xc2/0x120 [ 152.658862][ T6719] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 152.658914][ T6719] ? __d_alloc+0x34/0xad0 [ 152.658961][ T6719] __d_alloc+0x34/0xad0 [ 152.659005][ T6719] d_alloc+0x4a/0x1e0 [ 152.659047][ T6719] lookup_one_qstr_excl+0x171/0x250 [ 152.659098][ T6719] start_dirop+0x59/0xb0 [ 152.659155][ T6719] simple_start_creating+0xf9/0x110 [ 152.659219][ T6719] ? __pfx_simple_start_creating+0x10/0x10 [ 152.659281][ T6719] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.659331][ T6719] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.659378][ T6719] ? do_raw_spin_lock+0x128/0x260 [ 152.659435][ T6719] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.659484][ T6719] ? find_held_lock+0x2b/0x80 [ 152.659528][ T6719] rpc_new_dir+0x27/0x420 [ 152.659588][ T6719] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.659650][ T6719] rpc_populate.constprop.0+0x125/0x1c0 [ 152.659692][ T6719] ? d_instantiate+0x8f/0xb0 [ 152.659737][ T6719] ? __pfx_rpc_fill_super+0x10/0x10 [ 152.659777][ T6719] rpc_fill_super+0x2bd/0x4f0 [ 152.659817][ T6719] ? __pfx_rpc_fill_super+0x10/0x10 [ 152.659855][ T6719] get_tree_keyed+0x114/0x1d0 [ 152.659916][ T6719] vfs_get_tree+0x92/0x320 [ 152.659957][ T6719] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.660008][ T6719] vfs_cmd_create+0xd7/0x2a0 [ 152.660065][ T6719] __do_sys_fsconfig+0x55a/0xcb0 [ 152.660123][ T6719] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 152.660180][ T6719] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.660241][ T6719] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.660298][ T6719] do_syscall_64+0x123/0x790 [ 152.660356][ T6719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.660397][ T6719] RIP: 0033:0x7f867c79f559 [ 152.660428][ T6719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.660467][ T6719] RSP: 002b:00007f867d707028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 152.660505][ T6719] RAX: ffffffffffffffda RBX: 00007f867ca25fa0 RCX: 00007f867c79f559 [ 152.660532][ T6719] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 152.660557][ T6719] RBP: 00007f867c836b50 R08: 0000000000000000 R09: 0000000000000000 [ 152.660582][ T6719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.660607][ T6719] R13: 00007f867ca26038 R14: 00007f867ca25fa0 R15: 00007ffe1e368148 [ 152.660669][ T6719] [ 152.668472][ T6719] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 152.873564][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 153.458531][ T6731] loop2: detected capacity change from 0 to 512 [ 153.472388][ T6731] ext4: Unknown parameter 'noacl' [ 154.070643][ T6748] warning: `syz.0.266' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 154.128582][ T6754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.230695][ T6761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.270964][ T6754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.286332][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 154.432235][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 154.433050][ T24] usb 6-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00 [ 154.434385][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.434448][ T24] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.434499][ T24] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.434541][ T24] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 154.434592][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 154.434644][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.441224][ T24] usb 6-1: config 0 descriptor?? [ 154.685767][ T6488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.131601][ T24] logitech-djreceiver 0003:046D:C53A.0004: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.5-1/input0 [ 155.510494][ T5294] 8021q: adding VLAN 0 to HW filter on device eth4 [ 155.769671][ T6798] logitech-djreceiver 0003:046D:C53A.0004: pid 6798 passed too short report [ 155.934002][ T5655] usb 6-1: USB disconnect, device number 5 [ 155.981250][ T88] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 156.633936][ T6488] veth0_vlan: entered promiscuous mode [ 156.707566][ T6488] veth1_vlan: entered promiscuous mode [ 156.890727][ T6488] veth0_macvtap: entered promiscuous mode [ 156.928307][ T6488] veth1_macvtap: entered promiscuous mode [ 157.046065][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.097309][ T6824] FAULT_INJECTION: forcing a failure. [ 157.097309][ T6824] name failslab, interval 1, probability 0, space 0, times 0 [ 157.097364][ T6824] CPU: 0 UID: 0 PID: 6824 Comm: syz.5.283 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.097423][ T6824] Tainted: [L]=SOFTLOCKUP [ 157.097438][ T6824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 157.097462][ T6824] Call Trace: [ 157.097475][ T6824] [ 157.097490][ T6824] dump_stack_lvl+0x100/0x190 [ 157.097560][ T6824] should_fail_ex.cold+0x5/0xa [ 157.097620][ T6824] should_failslab+0xc2/0x120 [ 157.097688][ T6824] __kmalloc_cache_node_noprof+0x94/0x710 [ 157.097743][ T6824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.097794][ T6824] ? register_lock_class+0x3f/0x7b0 [ 157.097850][ T6824] ? blkg_alloc+0xbd/0xf80 [ 157.097911][ T6824] blkg_alloc+0xbd/0xf80 [ 157.097965][ T6824] ? __pfx___might_resched+0x10/0x10 [ 157.098018][ T6824] ? __xas_nomem+0x1b4/0x670 [ 157.098071][ T6824] ? xas_load+0x44/0x5c0 [ 157.098135][ T6824] blkcg_init_disk+0x17e/0x700 [ 157.098192][ T6824] ? __pfx_blkcg_init_disk+0x10/0x10 [ 157.098245][ T6824] ? lock_acquire+0x1d1/0x380 [ 157.098300][ T6824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.098349][ T6824] ? find_held_lock+0x2b/0x80 [ 157.098388][ T6824] ? __alloc_disk_node+0x2cf/0x730 [ 157.098427][ T6824] ? __alloc_disk_node+0x2cf/0x730 [ 157.098464][ T6824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.098525][ T6824] __alloc_disk_node+0x2f1/0x730 [ 157.098573][ T6824] __blk_alloc_disk+0xd2/0x170 [ 157.098612][ T6824] ? __pfx___blk_alloc_disk+0x10/0x10 [ 157.098650][ T6824] ? __pfx___debug_object_init+0x10/0x10 [ 157.098721][ T6824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.098770][ T6824] ? lockdep_init_map_type+0x5c/0x250 [ 157.098827][ T6824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.098876][ T6824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.098925][ T6824] ? lockdep_init_map_type+0x5c/0x250 [ 157.098988][ T6824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.099045][ T6824] dm_create+0x5e8/0x1530 [ 157.099117][ T6824] dev_create+0x121/0x2a0 [ 157.099161][ T6824] ? __pfx_dev_create+0x10/0x10 [ 157.099217][ T6824] ctl_ioctl+0x4d2/0xcc0 [ 157.099256][ T6824] ? __pfx_dev_create+0x10/0x10 [ 157.099301][ T6824] ? __pfx_ctl_ioctl+0x10/0x10 [ 157.099389][ T6824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.099440][ T6824] ? __fget_files+0x21f/0x3d0 [ 157.099516][ T6824] dm_ctl_ioctl+0x22/0x30 [ 157.099553][ T6824] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 157.099598][ T6824] __x64_sys_ioctl+0x18e/0x210 [ 157.099657][ T6824] do_syscall_64+0x123/0x790 [ 157.099717][ T6824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.099760][ T6824] RIP: 0033:0x7f016299f559 [ 157.099792][ T6824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.099832][ T6824] RSP: 002b:00007f01638c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.099870][ T6824] RAX: ffffffffffffffda RBX: 00007f0162c25fa0 RCX: 00007f016299f559 [ 157.099898][ T6824] RDX: 00002000000003c0 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 157.099924][ T6824] RBP: 00007f0162a36b50 R08: 0000000000000000 R09: 0000000000000000 [ 157.099950][ T6824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.099982][ T6824] R13: 00007f0162c26038 R14: 00007f0162c25fa0 R15: 00007fff76f782a8 [ 157.100036][ T6824] [ 157.101500][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.382826][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.382894][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.382954][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.383014][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.676251][ T6828] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 157.906063][ T6837] loop2: detected capacity change from 0 to 64 [ 157.918298][ T6837] hfs: unable to locate alternate MDB [ 157.918315][ T6837] hfs: continuing without an alternate MDB [ 158.443676][ T6850] loop0: detected capacity change from 0 to 1024 [ 158.451984][ T6850] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.475454][ T6850] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 158.518066][ T6850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.607605][ T6800] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 158.729121][ T6856] loop2: detected capacity change from 0 to 1024 [ 158.751451][ T6856] EXT4-fs: Ignoring removed bh option [ 158.849553][ T6856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 158.849700][ T6856] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.949231][ T3006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.949264][ T3006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.236820][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.236854][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.302624][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.295'. [ 159.407080][ T5639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.521363][ T5640] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 160.513469][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 160.664102][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 160.666045][ T29] usb 7-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 160.667902][ T29] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 160.667970][ T29] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 160.668046][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 160.668094][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 160.668139][ T29] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.668206][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.976120][ T29] usb 7-1: usb_control_msg returned -32 [ 160.976183][ T29] usbtmc 7-1:16.0: can't read capabilities [ 161.160030][ T6898] batman_adv: batadv0: Adding interface: syzkaller0 [ 161.160057][ T6898] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.160111][ T6898] batman_adv: batadv0: Interface activated: syzkaller0 [ 161.213507][ T6897] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 161.277784][ T6900] netlink: 28 bytes leftover after parsing attributes in process `syz.4.308'. [ 161.277833][ T6900] netlink: 'syz.4.308': attribute type 7 has an invalid length. [ 161.277856][ T6900] netlink: 'syz.4.308': attribute type 8 has an invalid length. [ 161.277879][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.308'. [ 161.363045][ T6897] batman_adv: batadv0: Removing interface: syzkaller0 [ 161.380051][ T6902] FAULT_INJECTION: forcing a failure. [ 161.380051][ T6902] name failslab, interval 1, probability 0, space 0, times 0 [ 161.380103][ T6902] CPU: 0 UID: 0 PID: 6902 Comm: syz.2.309 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.380163][ T6902] Tainted: [L]=SOFTLOCKUP [ 161.380176][ T6902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 161.380201][ T6902] Call Trace: [ 161.380213][ T6902] [ 161.380227][ T6902] dump_stack_lvl+0x100/0x190 [ 161.380295][ T6902] should_fail_ex.cold+0x5/0xa [ 161.380353][ T6902] should_failslab+0xc2/0x120 [ 161.380413][ T6902] __kmalloc_cache_noprof+0x91/0x6d0 [ 161.380456][ T6902] ? nf_tables_addchain.constprop.0+0x1067/0x1ca0 [ 161.380541][ T6902] nf_tables_addchain.constprop.0+0x1067/0x1ca0 [ 161.380609][ T6902] ? nft_chain_lookup+0x58d/0xa60 [ 161.380653][ T6902] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.380711][ T6902] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.380758][ T6902] ? nft_chain_lookup+0x59c/0xa60 [ 161.380806][ T6902] ? __kasan_kmalloc+0xaa/0xb0 [ 161.380860][ T6902] ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10 [ 161.380935][ T6902] ? __pfx_nft_chain_lookup+0x10/0x10 [ 161.380979][ T6902] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.381027][ T6902] ? __lock_acquire+0x5c0/0x1f40 [ 161.381118][ T6902] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.381167][ T6902] ? nla_strcmp+0xff/0x130 [ 161.381223][ T6902] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.381271][ T6902] ? nft_table_lookup.part.0+0x1e3/0x230 [ 161.381320][ T6902] nf_tables_newchain+0x1824/0x2a50 [ 161.381385][ T6902] ? net_generic+0xba/0x2a0 [ 161.381430][ T6902] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.381492][ T6902] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.381549][ T6902] ? __pfx_nf_tables_newchain+0x10/0x10 [ 161.381618][ T6902] ? __pfx___nla_validate_parse+0x10/0x10 [ 161.381677][ T6902] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.381725][ T6902] ? lock_acquire+0x1d1/0x380 [ 161.381776][ T6902] ? net_generic+0x25/0x2a0 [ 161.381830][ T6902] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.381878][ T6902] ? __nla_parse+0x40/0x60 [ 161.381938][ T6902] nfnetlink_rcv_batch+0x1410/0x2880 [ 161.382014][ T6902] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 161.382060][ T6902] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.382111][ T6902] ? __dev_queue_xmit+0xa2e/0x48d0 [ 161.382166][ T6902] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.382214][ T6902] ? lockdep_hardirqs_on+0x7d/0x110 [ 161.382266][ T6902] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.382314][ T6902] ? __local_bh_enable_ip+0xa5/0x120 [ 161.382426][ T6902] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.382474][ T6902] ? __nla_parse+0x40/0x60 [ 161.382543][ T6902] nfnetlink_rcv+0x3bd/0x440 [ 161.382598][ T6902] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 161.382660][ T6902] netlink_unicast+0x668/0x950 [ 161.382729][ T6902] ? __pfx_netlink_unicast+0x10/0x10 [ 161.382805][ T6902] netlink_sendmsg+0x9ac/0x10c0 [ 161.382876][ T6902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.382949][ T6902] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.382996][ T6902] ? apparmor_socket_sendmsg+0x165/0x280 [ 161.383052][ T6902] ? ____sys_sendmsg+0xa99/0xc30 [ 161.383092][ T6902] ____sys_sendmsg+0xa99/0xc30 [ 161.383130][ T6902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.383198][ T6902] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.383264][ T6902] ___sys_sendmsg+0x190/0x1e0 [ 161.383311][ T6902] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.383355][ T6902] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.383402][ T6902] ? futex_wait+0x11e/0x370 [ 161.383472][ T6902] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.383532][ T6902] ? find_held_lock+0x2b/0x80 [ 161.383603][ T6902] __sys_sendmsg+0x160/0x210 [ 161.383662][ T6902] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.383739][ T6902] ? srso_alias_return_thunk+0x5/0xfbef5 [ 161.383802][ T6902] do_syscall_64+0x123/0x790 [ 161.383862][ T6902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.383903][ T6902] RIP: 0033:0x7f867c79f559 [ 161.383934][ T6902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.383974][ T6902] RSP: 002b:00007f867d707028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.384012][ T6902] RAX: ffffffffffffffda RBX: 00007f867ca25fa0 RCX: 00007f867c79f559 [ 161.384040][ T6902] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 161.384065][ T6902] RBP: 00007f867c836b50 R08: 0000000000000000 R09: 0000000000000000 [ 161.384090][ T6902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.384115][ T6902] R13: 00007f867ca26038 R14: 00007f867ca25fa0 R15: 00007ffe1e368148 [ 161.384168][ T6902] [ 161.420771][ T6904] usbtmc 7-1:16.0: CHECK_CLEAR_STATUS returned 1e [ 161.655782][ T9] usb 7-1: USB disconnect, device number 2 [ 161.838917][ T6911] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 162.191949][ T6917] loop0: detected capacity change from 0 to 1024 [ 162.251500][ T6917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.410746][ T30] audit: type=1804 audit(1793581825.356:17): pid=6917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.313" name="/newroot/58/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 162.558597][ T6919] netlink: 'syz.2.314': attribute type 1 has an invalid length. [ 163.099237][ T5639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.256297][ T6944] FAULT_INJECTION: forcing a failure. [ 163.256297][ T6944] name failslab, interval 1, probability 0, space 0, times 0 [ 163.256356][ T6944] CPU: 0 UID: 0 PID: 6944 Comm: syz.5.321 Tainted: G L syzkaller #0 PREEMPT(full) [ 163.256413][ T6944] Tainted: [L]=SOFTLOCKUP [ 163.256427][ T6944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 163.256451][ T6944] Call Trace: [ 163.256464][ T6944] [ 163.256478][ T6944] dump_stack_lvl+0x100/0x190 [ 163.256559][ T6944] should_fail_ex.cold+0x5/0xa [ 163.256618][ T6944] should_failslab+0xc2/0x120 [ 163.256679][ T6944] kmem_cache_alloc_noprof+0x92/0x6a0 [ 163.256731][ T6944] ? __kernfs_new_node+0xd2/0xa10 [ 163.256798][ T6944] __kernfs_new_node+0xd2/0xa10 [ 163.256862][ T6944] ? __pfx___kernfs_new_node+0x10/0x10 [ 163.256924][ T6944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.256973][ T6944] ? lock_acquire+0x1d1/0x380 [ 163.257024][ T6944] ? kernfs_root+0x23/0x2a0 [ 163.257073][ T6944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.257121][ T6944] ? find_held_lock+0x2b/0x80 [ 163.257159][ T6944] ? kernfs_root+0xee/0x2a0 [ 163.257207][ T6944] ? kernfs_root+0xee/0x2a0 [ 163.257255][ T6944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.257318][ T6944] kernfs_new_node+0x194/0x200 [ 163.257381][ T6944] ? __pfx_kernfs_new_node+0x10/0x10 [ 163.257445][ T6944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.257510][ T6944] __kernfs_create_file+0x53/0x350 [ 163.257557][ T6944] sysfs_add_file_mode_ns+0x207/0x3c0 [ 163.257618][ T6944] internal_create_group+0x593/0xfb0 [ 163.257682][ T6944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.257732][ T6944] ? __pfx_internal_create_group+0x10/0x10 [ 163.257793][ T6944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.257841][ T6944] ? kernfs_create_link+0x1f1/0x280 [ 163.257892][ T6944] internal_create_groups+0x9d/0x150 [ 163.257951][ T6944] device_add+0xf60/0x1970 [ 163.257995][ T6944] ? __pfx_device_add+0x10/0x10 [ 163.258031][ T6944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.258079][ T6944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.258126][ T6944] ? lockdep_init_map_type+0x5c/0x250 [ 163.258181][ T6944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.258228][ T6944] ? __init_waitqueue_head+0xca/0x150 [ 163.258287][ T6944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.258344][ T6944] netdev_register_kobject+0x1df/0x410 [ 163.258401][ T6944] register_netdevice+0x1313/0x26b0 [ 163.258477][ T6944] ? __pfx_register_netdevice+0x10/0x10 [ 163.258554][ T6944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.258605][ T6944] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 163.258666][ T6944] batadv_meshif_newlink+0x8f/0xc0 [ 163.258724][ T6944] rtnl_newlink+0x1697/0x2620 [ 163.258778][ T6944] ? __pfx_rtnl_newlink+0x10/0x10 [ 163.258818][ T6944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.258864][ T6944] ? rcu_is_watching+0x13/0xc0 [ 163.258904][ T6944] ? kasan_quarantine_put+0x104/0x240 [ 163.258963][ T6944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.259025][ T6944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.259080][ T6944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.259131][ T6944] ? __dev_queue_xmit+0xa2e/0x48d0 [ 163.259186][ T6944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.259233][ T6944] ? lock_acquire+0x1d1/0x380 [ 163.259283][ T6944] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 163.259321][ T6944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.259369][ T6944] ? find_held_lock+0x2b/0x80 [ 163.259407][ T6944] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 163.259444][ T6944] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 163.259479][ T6944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.259540][ T6944] ? __pfx_rtnl_newlink+0x10/0x10 [ 163.259580][ T6944] rtnetlink_rcv_msg+0x95e/0xe90 [ 163.259623][ T6944] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 163.259687][ T6944] netlink_rcv_skb+0x159/0x420 [ 163.259750][ T6944] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 163.259793][ T6944] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 163.259873][ T6944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.259922][ T6944] ? netlink_deliver_tap+0x1ae/0xb50 [ 163.259990][ T6944] netlink_unicast+0x668/0x950 [ 163.260059][ T6944] ? __pfx_netlink_unicast+0x10/0x10 [ 163.260133][ T6944] netlink_sendmsg+0x9ac/0x10c0 [ 163.260203][ T6944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.260274][ T6944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.260322][ T6944] ? apparmor_socket_sendmsg+0x165/0x280 [ 163.260378][ T6944] ? ____sys_sendmsg+0xa99/0xc30 [ 163.260418][ T6944] ____sys_sendmsg+0xa99/0xc30 [ 163.260457][ T6944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.260534][ T6944] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.260601][ T6944] ___sys_sendmsg+0x190/0x1e0 [ 163.260648][ T6944] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.260692][ T6944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.260740][ T6944] ? futex_wait+0x11e/0x370 [ 163.260810][ T6944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.260859][ T6944] ? find_held_lock+0x2b/0x80 [ 163.260931][ T6944] __sys_sendmsg+0x160/0x210 [ 163.260990][ T6944] ? __pfx___sys_sendmsg+0x10/0x10 [ 163.261065][ T6944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.261122][ T6944] do_syscall_64+0x123/0x790 [ 163.261179][ T6944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.261221][ T6944] RIP: 0033:0x7f016299f559 [ 163.261253][ T6944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.261292][ T6944] RSP: 002b:00007f01638c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.261331][ T6944] RAX: ffffffffffffffda RBX: 00007f0162c25fa0 RCX: 00007f016299f559 [ 163.261358][ T6944] RDX: 0000000020000840 RSI: 0000200000000480 RDI: 0000000000000004 [ 163.261383][ T6944] RBP: 00007f0162a36b50 R08: 0000000000000000 R09: 0000000000000000 [ 163.261408][ T6944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.261433][ T6944] R13: 00007f0162c26038 R14: 00007f0162c25fa0 R15: 00007fff76f782a8 [ 163.261495][ T6944] [ 163.575419][ T6938] serio: Serial port ptm0 [ 164.250373][ T6959] FAULT_INJECTION: forcing a failure. [ 164.250373][ T6959] name failslab, interval 1, probability 0, space 0, times 0 [ 164.250430][ T6959] CPU: 1 UID: 0 PID: 6959 Comm: syz.0.327 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.250490][ T6959] Tainted: [L]=SOFTLOCKUP [ 164.250505][ T6959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 164.250531][ T6959] Call Trace: [ 164.250543][ T6959] [ 164.250558][ T6959] dump_stack_lvl+0x100/0x190 [ 164.250631][ T6959] should_fail_ex.cold+0x5/0xa [ 164.250692][ T6959] should_failslab+0xc2/0x120 [ 164.250756][ T6959] __kmalloc_noprof+0xfc/0x840 [ 164.250808][ T6959] ? do_sys_poll+0x273/0xf00 [ 164.250879][ T6959] do_sys_poll+0x273/0xf00 [ 164.250937][ T6959] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 164.251002][ T6959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.251062][ T6959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.251115][ T6959] ? rcu_is_watching+0x13/0xc0 [ 164.251154][ T6959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.251211][ T6959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.251266][ T6959] ? __pfx_do_sys_poll+0x10/0x10 [ 164.251326][ T6959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.251375][ T6959] ? __lock_acquire+0x5c0/0x1f40 [ 164.251473][ T6959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.251523][ T6959] ? futex_unqueue+0x13d/0x2c0 [ 164.251657][ T6959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.251707][ T6959] ? do_futex+0x190/0x440 [ 164.251749][ T6959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.251798][ T6959] ? set_user_sigmask+0x1e1/0x270 [ 164.251840][ T6959] ? __pfx_set_user_sigmask+0x10/0x10 [ 164.251877][ T6959] ? key_put+0x62/0x2e0 [ 164.251932][ T6959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.251996][ T6959] __x64_sys_ppoll+0x2b5/0x350 [ 164.252067][ T6959] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 164.252151][ T6959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.252210][ T6959] do_syscall_64+0x123/0x790 [ 164.252273][ T6959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.252316][ T6959] RIP: 0033:0x7f71a5d9f559 [ 164.252348][ T6959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.252389][ T6959] RSP: 002b:00007f71a6cdc028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 164.252429][ T6959] RAX: ffffffffffffffda RBX: 00007f71a6025fa0 RCX: 00007f71a5d9f559 [ 164.252457][ T6959] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 0000200000000840 [ 164.252484][ T6959] RBP: 00007f71a5e36b50 R08: 0000000000000000 R09: 0000000000000000 [ 164.252510][ T6959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.252535][ T6959] R13: 00007f71a6026038 R14: 00007f71a6025fa0 R15: 00007fffa4ae86f8 [ 164.252588][ T6959] [ 164.314303][ T6958] FAULT_INJECTION: forcing a failure. [ 164.314303][ T6958] name failslab, interval 1, probability 0, space 0, times 0 [ 164.314358][ T6958] CPU: 1 UID: 0 PID: 6958 Comm: syz.4.329 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.314414][ T6958] Tainted: [L]=SOFTLOCKUP [ 164.314429][ T6958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 164.314453][ T6958] Call Trace: [ 164.314466][ T6958] [ 164.314480][ T6958] dump_stack_lvl+0x100/0x190 [ 164.314550][ T6958] should_fail_ex.cold+0x5/0xa [ 164.314609][ T6958] should_failslab+0xc2/0x120 [ 164.314669][ T6958] __kmalloc_cache_noprof+0x91/0x6d0 [ 164.314712][ T6958] ? percpu_ref_init+0xec/0x3f0 [ 164.314764][ T6958] ? __pfx_free_ioctx_reqs+0x10/0x10 [ 164.314810][ T6958] percpu_ref_init+0xec/0x3f0 [ 164.314852][ T6958] ? __init_waitqueue_head+0xca/0x150 [ 164.314917][ T6958] ioctx_alloc+0x3ee/0x21d0 [ 164.314975][ T6958] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.315032][ T6958] ? __might_fault+0xc5/0x140 [ 164.315093][ T6958] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.315141][ T6958] ? find_held_lock+0x2b/0x80 [ 164.315181][ T6958] ? __pfx_ioctx_alloc+0x10/0x10 [ 164.315245][ T6958] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.315308][ T6958] __x64_sys_io_setup+0xc9/0x220 [ 164.315363][ T6958] do_syscall_64+0x123/0x790 [ 164.315421][ T6958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.315466][ T6958] RIP: 0033:0x7f1b3eb9f559 [ 164.315496][ T6958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.315536][ T6958] RSP: 002b:00007f1b3fa5b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 164.315573][ T6958] RAX: ffffffffffffffda RBX: 00007f1b3ee25fa0 RCX: 00007f1b3eb9f559 [ 164.315601][ T6958] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000008 [ 164.315625][ T6958] RBP: 00007f1b3ec36b50 R08: 0000000000000000 R09: 0000000000000000 [ 164.315650][ T6958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.315675][ T6958] R13: 00007f1b3ee26038 R14: 00007f1b3ee25fa0 R15: 00007ffd53fcc6c8 [ 164.315729][ T6958] [ 165.225423][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 165.280478][ T6979] FAULT_INJECTION: forcing a failure. [ 165.280478][ T6979] name failslab, interval 1, probability 0, space 0, times 0 [ 165.280563][ T6979] CPU: 0 UID: 0 PID: 6979 Comm: syz.2.337 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.280620][ T6979] Tainted: [L]=SOFTLOCKUP [ 165.280635][ T6979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 165.280659][ T6979] Call Trace: [ 165.280672][ T6979] [ 165.280687][ T6979] dump_stack_lvl+0x100/0x190 [ 165.280757][ T6979] should_fail_ex.cold+0x5/0xa [ 165.280816][ T6979] should_failslab+0xc2/0x120 [ 165.280878][ T6979] __kmalloc_noprof+0xfc/0x840 [ 165.280930][ T6979] ? __list_lru_init+0x100/0x530 [ 165.280995][ T6979] __list_lru_init+0x100/0x530 [ 165.281059][ T6979] sget_fc+0xa80/0x1e10 [ 165.281126][ T6979] ? __pfx_set_anon_super_fc+0x10/0x10 [ 165.281178][ T6979] ? __pfx_sget_fc+0x10/0x10 [ 165.281227][ T6979] ? refcount_dec_not_one+0x136/0x1b0 [ 165.281287][ T6979] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 165.281344][ T6979] ? __kasan_kmalloc+0xaa/0xb0 [ 165.281400][ T6979] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.281449][ T6979] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 165.281496][ T6979] ? __kasan_kmalloc+0xaa/0xb0 [ 165.281556][ T6979] ? __pfx_mqueue_fill_super+0x10/0x10 [ 165.281624][ T6979] get_tree_nodev+0x28/0x190 [ 165.281682][ T6979] mqueue_get_tree+0xf1/0x130 [ 165.281748][ T6979] vfs_get_tree+0x92/0x320 [ 165.281796][ T6979] fc_mount_longterm+0x1a/0x270 [ 165.281860][ T6979] mq_init_ns+0x482/0x820 [ 165.281911][ T6979] copy_ipcs+0x3d8/0x7e0 [ 165.281962][ T6979] create_new_namespaces+0x20a/0xac0 [ 165.282018][ T6979] ? security_capable+0x80/0x260 [ 165.282070][ T6979] unshare_nsproxy_namespaces+0xf6/0x210 [ 165.282132][ T6979] ksys_unshare+0x44f/0x980 [ 165.282182][ T6979] ? __pfx_ksys_unshare+0x10/0x10 [ 165.282235][ T6979] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.282305][ T6979] __x64_sys_unshare+0x31/0x40 [ 165.282355][ T6979] do_syscall_64+0x123/0x790 [ 165.282416][ T6979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.282458][ T6979] RIP: 0033:0x7f867c79f559 [ 165.282501][ T6979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.282542][ T6979] RSP: 002b:00007f867d707028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 165.282582][ T6979] RAX: ffffffffffffffda RBX: 00007f867ca25fa0 RCX: 00007f867c79f559 [ 165.282610][ T6979] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400 [ 165.282636][ T6979] RBP: 00007f867c836b50 R08: 0000000000000000 R09: 0000000000000000 [ 165.282662][ T6979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.282686][ T6979] R13: 00007f867ca26038 R14: 00007f867ca25fa0 R15: 00007ffe1e368148 [ 165.282740][ T6979] [ 165.472643][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 165.483087][ T9] usb 6-1: New USB device found: idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 165.591127][ T9] usb 6-1: config 2 has an invalid interface number: 88 but max is 0 [ 165.591174][ T9] usb 6-1: config 2 has no interface number 0 [ 165.591234][ T9] usb 6-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 165.591283][ T9] usb 6-1: config 2 interface 88 has no altsetting 0 [ 165.631582][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 165.631628][ T9] usb 6-1: Product: syz [ 165.631657][ T9] usb 6-1: Manufacturer: syz [ 165.631686][ T9] usb 6-1: SerialNumber: syz [ 165.658849][ T6975] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 165.894699][ T6975] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 166.368571][ T7002] netlink: 'syz.2.344': attribute type 4 has an invalid length. [ 166.369226][ T30] audit: type=1326 audit(1793581829.316:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.6.343" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7239f559 code=0x7fc00000 [ 166.392407][ T5655] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 166.396491][ T30] audit: type=1326 audit(1793581829.346:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.6.343" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f1b7239f559 code=0x7fc00000 [ 166.399650][ T30] audit: type=1326 audit(1793581829.346:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.6.343" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7239f559 code=0x7fc00000 [ 166.542439][ T5655] usb 5-1: Using ep0 maxpacket: 16 [ 166.545312][ T5655] usb 5-1: New USB device found: idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 166.549046][ T5655] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.549100][ T5655] usb 5-1: config 0 interface 0 has no altsetting 0 [ 166.570631][ T5655] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.570673][ T5655] usb 5-1: Product: syz [ 166.570699][ T5655] usb 5-1: Manufacturer: syz [ 166.570726][ T5655] usb 5-1: SerialNumber: syz [ 166.619643][ T5655] usb 5-1: config 0 descriptor?? [ 166.802876][ T7010] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 166.930083][ T9] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 166.930359][ T9] asix 6-1:2.88: probe with driver asix failed with error -71 [ 166.984062][ T9] usb 6-1: USB disconnect, device number 6 [ 167.062963][ T5655] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 167.332643][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 167.392281][ T5655] rc_core: IR keymap rc-imon-pad not found [ 167.392307][ T5655] Registered IR keymap rc-empty [ 167.392817][ T5655] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 167.392851][ T5655] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 167.433037][ T5655] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 167.470413][ T5655] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 167.485979][ T5655] imon 5-1:0.0: iMON device (15c2:0041) on usb<5:3> initialized [ 167.487607][ T24] usb 3-1: New USB device found: idVendor=0525, idProduct=1080, bcdDevice=1.00 [ 167.489938][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.642084][ T7031] FAULT_INJECTION: forcing a failure. [ 167.642084][ T7031] name failslab, interval 1, probability 0, space 0, times 0 [ 167.643990][ T7031] CPU: 0 UID: 0 PID: 7031 Comm: syz.5.353 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.644050][ T7031] Tainted: [L]=SOFTLOCKUP [ 167.644064][ T7031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 167.644088][ T7031] Call Trace: [ 167.644102][ T7031] [ 167.644116][ T7031] dump_stack_lvl+0x100/0x190 [ 167.644185][ T7031] should_fail_ex.cold+0x5/0xa [ 167.644246][ T7031] should_failslab+0xc2/0x120 [ 167.644309][ T7031] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 167.644362][ T7031] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.644413][ T7031] ? __d_alloc+0x34/0xad0 [ 167.644463][ T7031] __d_alloc+0x34/0xad0 [ 167.644508][ T7031] ? __pfx_simple_offset_add+0x10/0x10 [ 167.644560][ T7031] d_alloc+0x4a/0x1e0 [ 167.644605][ T7031] shmem_rename2+0x15c/0x3e0 [ 167.644655][ T7031] ? __pfx_shmem_rename2+0x10/0x10 [ 167.644705][ T7031] vfs_rename+0xca7/0x2130 [ 167.644778][ T7031] ? __pfx_vfs_rename+0x10/0x10 [ 167.644860][ T7031] ovl_check_rename_whiteout+0x28d/0x620 [ 167.644919][ T7031] ? __pfx_ovl_check_rename_whiteout+0x10/0x10 [ 167.644963][ T7031] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.645011][ T7031] ? task_work_add+0x201/0x3b0 [ 167.645075][ T7031] ? __fput_deferred+0x217/0x4a0 [ 167.645116][ T7031] ? __pfx___fput_deferred+0x10/0x10 [ 167.645177][ T7031] ovl_fill_super+0x11f0/0x5fc0 [ 167.645260][ T7031] ? __pfx_ovl_fill_super+0x10/0x10 [ 167.645313][ T7031] ? ovl_next_opt+0x143/0x1c0 [ 167.645356][ T7031] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.645405][ T7031] ? rcu_is_watching+0x13/0xc0 [ 167.645446][ T7031] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.645500][ T7031] ? apparmor_capable+0x1d7/0x4d0 [ 167.645557][ T7031] ? __pfx_ovl_fill_super+0x10/0x10 [ 167.645598][ T7031] get_tree_nodev+0xe3/0x190 [ 167.645655][ T7031] vfs_get_tree+0x92/0x320 [ 167.645699][ T7031] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.645751][ T7031] path_mount+0x7d0/0x2850 [ 167.645809][ T7031] ? __pfx_path_mount+0x10/0x10 [ 167.645853][ T7031] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.645901][ T7031] ? lockdep_hardirqs_on+0x7d/0x110 [ 167.645962][ T7031] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.646011][ T7031] ? kmem_cache_free+0x127/0x6c0 [ 167.646071][ T7031] ? __x64_sys_mount+0x293/0x310 [ 167.646117][ T7031] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.646167][ T7031] __x64_sys_mount+0x293/0x310 [ 167.646218][ T7031] ? __pfx___x64_sys_mount+0x10/0x10 [ 167.646274][ T7031] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.646333][ T7031] do_syscall_64+0x123/0x790 [ 167.646392][ T7031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.646436][ T7031] RIP: 0033:0x7f016299f559 [ 167.646468][ T7031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.646516][ T7031] RSP: 002b:00007f01638c9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 167.646555][ T7031] RAX: ffffffffffffffda RBX: 00007f0162c25fa0 RCX: 00007f016299f559 [ 167.646583][ T7031] RDX: 0000200000000940 RSI: 0000200000000900 RDI: 0000000000000000 [ 167.646609][ T7031] RBP: 00007f0162a36b50 R08: 0000200000000980 R09: 0000000000000000 [ 167.646636][ T7031] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 167.646662][ T7031] R13: 00007f0162c26038 R14: 00007f0162c25fa0 R15: 00007fff76f782a8 [ 167.646717][ T7031] [ 168.036101][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 168.038616][ T5649] usb 5-1: USB disconnect, device number 3 [ 168.210468][ T24] net1080 3-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.2-1, NetChip TurboCONNECT, d6:0a:19:b9:69:7a [ 168.455030][ T5655] usb 3-1: USB disconnect, device number 2 [ 168.465475][ T5655] net1080 3-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.2-1, NetChip TurboCONNECT [ 168.488779][ T7044] loop0: detected capacity change from 0 to 512 [ 168.503860][ T7044] EXT4-fs: Ignoring removed bh option [ 168.524697][ T7044] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 168.602488][ T7044] EXT4-fs error (device loop0): ext4_iget_extra_inode:6026: inode #15: comm syz.0.354: corrupted in-inode xattr: e_value size too large [ 168.602725][ T7044] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 168.608660][ T7044] EXT4-fs error (device loop0): ext4_orphan_get:1407: comm syz.0.354: couldn't read orphan inode 15 (err -117) [ 168.608714][ T7044] loop0: lost filesystem error report for type 5 error -117 [ 168.624805][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 168.624842][ C0] EXT4-fs (loop0): initial error at time 1793581831: ext4_iget_extra_inode:6026: inode 15 [ 168.624892][ C0] EXT4-fs (loop0): last error at time 1793581831: ext4_orphan_get:1407 [ 168.804442][ T7044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.975567][ T7051] FAULT_INJECTION: forcing a failure. [ 168.975567][ T7051] name failslab, interval 1, probability 0, space 0, times 0 [ 168.975618][ T7051] CPU: 1 UID: 0 PID: 7051 Comm: syz.1.357 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.975673][ T7051] Tainted: [L]=SOFTLOCKUP [ 168.975687][ T7051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 168.975710][ T7051] Call Trace: [ 168.975722][ T7051] [ 168.975737][ T7051] dump_stack_lvl+0x100/0x190 [ 168.975802][ T7051] should_fail_ex.cold+0x5/0xa [ 168.975858][ T7051] should_failslab+0xc2/0x120 [ 168.975916][ T7051] __kmalloc_flags_noprof+0x122/0x8e0 [ 168.975966][ T7051] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.976013][ T7051] ? __lock_acquire+0x5c0/0x1f40 [ 168.976066][ T7051] ? alloc_slab_obj_exts+0x6a/0x170 [ 168.976116][ T7051] alloc_slab_obj_exts+0x6a/0x170 [ 168.976168][ T7051] __memcg_slab_post_alloc_hook+0x3f3/0x10b0 [ 168.976228][ T7051] ? kasan_unpoison+0x27/0x60 [ 168.976282][ T7051] __kvmalloc_node_noprof+0x74b/0x9b0 [ 168.976332][ T7051] ? pti_set_user_pgtbl+0x31/0x50 [ 168.976400][ T7051] ? xt_alloc_table_info+0x44/0xa0 [ 168.976461][ T7051] xt_alloc_table_info+0x44/0xa0 [ 168.976513][ T7051] do_arpt_set_ctl+0x572/0x1490 [ 168.976559][ T7051] ? nf_sockopt_find.isra.0+0x2a/0x290 [ 168.976599][ T7051] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.976645][ T7051] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.976692][ T7051] ? find_held_lock+0x2b/0x80 [ 168.976728][ T7051] ? nf_sockopt_find.isra.0+0x222/0x290 [ 168.976771][ T7051] ? nf_sockopt_find.isra.0+0x222/0x290 [ 168.976819][ T7051] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 168.976858][ T7051] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.976904][ T7051] ? __mutex_unlock_slowpath+0x35d/0x930 [ 168.976971][ T7051] ? sockopt_release_sock+0x5c/0x70 [ 168.977035][ T7051] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 168.977111][ T7051] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.977161][ T7051] ? nf_sockopt_find.isra.0+0x222/0x290 [ 168.977211][ T7051] nf_setsockopt+0x8d/0xf0 [ 168.977260][ T7051] ip_setsockopt+0xcb/0xf0 [ 168.977329][ T7051] tcp_setsockopt+0xa7/0x100 [ 168.977371][ T7051] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 168.977447][ T7051] do_sock_setsockopt+0xf3/0x1d0 [ 168.977520][ T7051] __sys_setsockopt+0x195/0x220 [ 168.977587][ T7051] __x64_sys_setsockopt+0xbd/0x160 [ 168.977643][ T7051] ? do_syscall_64+0xae/0x790 [ 168.977695][ T7051] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.977745][ T7051] ? lockdep_hardirqs_on+0x7d/0x110 [ 168.977798][ T7051] do_syscall_64+0x123/0x790 [ 168.977857][ T7051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.977899][ T7051] RIP: 0033:0x7fb52f79f559 [ 168.977931][ T7051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.977979][ T7051] RSP: 002b:00007fb52d9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 168.978019][ T7051] RAX: ffffffffffffffda RBX: 00007fb52fa25fa0 RCX: 00007fb52f79f559 [ 168.978047][ T7051] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000005 [ 168.978072][ T7051] RBP: 00007fb52f836b50 R08: 0000000000000518 R09: 0000000000000000 [ 168.978099][ T7051] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 168.978125][ T7051] R13: 00007fb52fa26038 R14: 00007fb52fa25fa0 R15: 00007fff36f0c6c8 [ 168.978179][ T7051] [ 169.011412][ T7051] x_tables: unsorted underflow at hook 3 [ 169.017740][ T7044] EXT4-fs warning (device loop0): dx_probe:800: inode #2: comm syz.0.354: Unrecognised inode hash code 4 [ 169.017787][ T7044] EXT4-fs warning (device loop0): dx_probe:933: inode #2: comm syz.0.354: Corrupt directory, running e2fsck is recommended [ 169.017933][ T7044] EXT4-fs error (device loop0): ext4_iget_extra_inode:6026: inode #12: comm syz.0.354: corrupted in-inode xattr: bad e_name length [ 169.142558][ T7056] EXT4-fs warning (device loop0): dx_probe:800: inode #2: comm syz.0.354: Unrecognised inode hash code 4 [ 169.142609][ T7056] EXT4-fs warning (device loop0): dx_probe:933: inode #2: comm syz.0.354: Corrupt directory, running e2fsck is recommended [ 169.143093][ T7056] EXT4-fs warning (device loop0): dx_probe:800: inode #2: comm syz.0.354: Unrecognised inode hash code 4 [ 169.143138][ T7056] EXT4-fs warning (device loop0): dx_probe:933: inode #2: comm syz.0.354: Corrupt directory, running e2fsck is recommended [ 169.260958][ T7055] loop4: detected capacity change from 0 to 164 [ 169.637805][ T7064] capability: warning: `syz.2.362' uses deprecated v2 capabilities in a way that may be insecure [ 169.648655][ T5639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.787495][ T7067] netlink: 20 bytes leftover after parsing attributes in process `syz.1.365'. [ 169.937143][ T30] audit: type=1326 audit(1793581832.886:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7069 comm="syz.2.366" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f867c79f559 code=0x0 [ 169.948903][ T7073] netlink: 20 bytes leftover after parsing attributes in process `syz.4.367'. [ 169.953586][ T7073] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 169.953607][ T7073] IPv6: NLM_F_CREATE should be set when creating new route [ 169.954038][ T7073] netlink: 20 bytes leftover after parsing attributes in process `syz.4.367'. [ 170.097938][ T7067] FAULT_INJECTION: forcing a failure. [ 170.097938][ T7067] name failslab, interval 1, probability 0, space 0, times 0 [ 170.097993][ T7067] CPU: 1 UID: 0 PID: 7067 Comm: syz.1.365 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.098051][ T7067] Tainted: [L]=SOFTLOCKUP [ 170.098066][ T7067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 170.098090][ T7067] Call Trace: [ 170.098103][ T7067] [ 170.098121][ T7067] dump_stack_lvl+0x100/0x190 [ 170.098190][ T7067] should_fail_ex.cold+0x5/0xa [ 170.098250][ T7067] should_failslab+0xc2/0x120 [ 170.098311][ T7067] kmem_cache_alloc_noprof+0x92/0x6a0 [ 170.098364][ T7067] ? __kernfs_new_node+0xd2/0xa10 [ 170.098433][ T7067] __kernfs_new_node+0xd2/0xa10 [ 170.098505][ T7067] ? __pfx___kernfs_new_node+0x10/0x10 [ 170.098568][ T7067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.098618][ T7067] ? lock_acquire+0x1d1/0x380 [ 170.098670][ T7067] ? kernfs_root+0x23/0x2a0 [ 170.098721][ T7067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.098770][ T7067] ? find_held_lock+0x2b/0x80 [ 170.098808][ T7067] ? kernfs_root+0xee/0x2a0 [ 170.098858][ T7067] ? kernfs_root+0xee/0x2a0 [ 170.098906][ T7067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.098968][ T7067] kernfs_new_node+0x194/0x200 [ 170.099031][ T7067] ? __pfx_kernfs_new_node+0x10/0x10 [ 170.099093][ T7067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.099142][ T7067] ? kernfs_add_one+0x213/0xb40 [ 170.099211][ T7067] __kernfs_create_file+0x53/0x350 [ 170.099259][ T7067] sysfs_add_file_mode_ns+0x207/0x3c0 [ 170.099321][ T7067] internal_create_group+0x593/0xfb0 [ 170.099385][ T7067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.099437][ T7067] ? __pfx_internal_create_group+0x10/0x10 [ 170.099504][ T7067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.099554][ T7067] ? kernfs_create_link+0x1f1/0x280 [ 170.099605][ T7067] internal_create_groups+0x9d/0x150 [ 170.099665][ T7067] device_add+0x7c8/0x1970 [ 170.099712][ T7067] ? __pfx_device_add+0x10/0x10 [ 170.099750][ T7067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.099799][ T7067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.099848][ T7067] ? lockdep_init_map_type+0x5c/0x250 [ 170.099905][ T7067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.099954][ T7067] ? __init_waitqueue_head+0xca/0x150 [ 170.100014][ T7067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.100074][ T7067] netdev_register_kobject+0x1df/0x410 [ 170.100133][ T7067] register_netdevice+0x1313/0x26b0 [ 170.100216][ T7067] ? __pfx_register_netdevice+0x10/0x10 [ 170.100298][ T7067] br_dev_newlink+0x6a/0x170 [ 170.100349][ T7067] ? __pfx_br_dev_newlink+0x10/0x10 [ 170.100399][ T7067] rtnl_newlink+0x1697/0x2620 [ 170.100456][ T7067] ? __pfx_rtnl_newlink+0x10/0x10 [ 170.100505][ T7067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.100555][ T7067] ? rcu_is_watching+0x13/0xc0 [ 170.100596][ T7067] ? kasan_quarantine_put+0x104/0x240 [ 170.100657][ T7067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.100722][ T7067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.100779][ T7067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.100832][ T7067] ? __dev_queue_xmit+0xa2e/0x48d0 [ 170.100889][ T7067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.100939][ T7067] ? lock_acquire+0x1d1/0x380 [ 170.100991][ T7067] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 170.101030][ T7067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.101079][ T7067] ? find_held_lock+0x2b/0x80 [ 170.101117][ T7067] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 170.101155][ T7067] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 170.101192][ T7067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.101246][ T7067] ? __pfx_rtnl_newlink+0x10/0x10 [ 170.101287][ T7067] rtnetlink_rcv_msg+0x95e/0xe90 [ 170.101331][ T7067] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 170.101395][ T7067] netlink_rcv_skb+0x159/0x420 [ 170.101460][ T7067] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 170.101512][ T7067] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 170.101593][ T7067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.101642][ T7067] ? netlink_deliver_tap+0x1ae/0xb50 [ 170.101710][ T7067] netlink_unicast+0x668/0x950 [ 170.101780][ T7067] ? __pfx_netlink_unicast+0x10/0x10 [ 170.101861][ T7067] netlink_sendmsg+0x9ac/0x10c0 [ 170.101935][ T7067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.102012][ T7067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.102063][ T7067] ? apparmor_socket_sendmsg+0x165/0x280 [ 170.102123][ T7067] ? ____sys_sendmsg+0xa99/0xc30 [ 170.102164][ T7067] ____sys_sendmsg+0xa99/0xc30 [ 170.102204][ T7067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.102272][ T7067] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.102340][ T7067] ___sys_sendmsg+0x190/0x1e0 [ 170.102389][ T7067] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.102434][ T7067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.102484][ T7067] ? futex_wait+0x11e/0x370 [ 170.102567][ T7067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.102616][ T7067] ? find_held_lock+0x2b/0x80 [ 170.102689][ T7067] __sys_sendmsg+0x160/0x210 [ 170.102751][ T7067] ? __pfx___sys_sendmsg+0x10/0x10 [ 170.102831][ T7067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.102892][ T7067] do_syscall_64+0x123/0x790 [ 170.102953][ T7067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.102994][ T7067] RIP: 0033:0x7fb52f79f559 [ 170.103026][ T7067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.103065][ T7067] RSP: 002b:00007fb52d9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.103103][ T7067] RAX: ffffffffffffffda RBX: 00007fb52fa25fa0 RCX: 00007fb52f79f559 [ 170.103130][ T7067] RDX: 0000000000004000 RSI: 0000200000000300 RDI: 0000000000000004 [ 170.103156][ T7067] RBP: 00007fb52f836b50 R08: 0000000000000000 R09: 0000000000000000 [ 170.103182][ T7067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.103207][ T7067] R13: 00007fb52fa26038 R14: 00007fb52fa25fa0 R15: 00007fff36f0c6c8 [ 170.103261][ T7067] [ 170.360156][ T7077] xt_hashlimit: size too large, truncated to 1048576 [ 170.972546][ T7085] loop1: detected capacity change from 0 to 4096 [ 171.270569][ T7085] overlayfs: upper fs does not support tmpfile. [ 171.276999][ T7085] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 171.839030][ T7101] loop6: detected capacity change from 0 to 128 [ 172.104823][ T7106] FAULT_INJECTION: forcing a failure. [ 172.104823][ T7106] name failslab, interval 1, probability 0, space 0, times 0 [ 172.104876][ T7106] CPU: 0 UID: 60928 PID: 7106 Comm: syz.5.379 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.104935][ T7106] Tainted: [L]=SOFTLOCKUP [ 172.104949][ T7106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 172.104973][ T7106] Call Trace: [ 172.104985][ T7106] [ 172.104999][ T7106] dump_stack_lvl+0x100/0x190 [ 172.105068][ T7106] should_fail_ex.cold+0x5/0xa [ 172.105126][ T7106] should_failslab+0xc2/0x120 [ 172.105186][ T7106] __kmalloc_cache_noprof+0x91/0x6d0 [ 172.105226][ T7106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.105275][ T7106] ? __kasan_kmalloc+0xaa/0xb0 [ 172.105326][ T7106] ? mqueue_init_fs_context+0x4b/0x690 [ 172.105380][ T7106] mqueue_init_fs_context+0x4b/0x690 [ 172.105428][ T7106] alloc_fs_context+0x607/0xf40 [ 172.105493][ T7106] mq_init_ns+0x16e/0x820 [ 172.105542][ T7106] copy_ipcs+0x3d8/0x7e0 [ 172.105592][ T7106] create_new_namespaces+0x20a/0xac0 [ 172.105646][ T7106] ? security_capable+0x80/0x260 [ 172.105695][ T7106] unshare_nsproxy_namespaces+0xf6/0x210 [ 172.105753][ T7106] ksys_unshare+0x44f/0x980 [ 172.105801][ T7106] ? __pfx_ksys_unshare+0x10/0x10 [ 172.105852][ T7106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.105920][ T7106] __x64_sys_unshare+0x31/0x40 [ 172.105968][ T7106] do_syscall_64+0x123/0x790 [ 172.106026][ T7106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.106067][ T7106] RIP: 0033:0x7f016299f559 [ 172.106098][ T7106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.106138][ T7106] RSP: 002b:00007f01638c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 172.106179][ T7106] RAX: ffffffffffffffda RBX: 00007f0162c25fa0 RCX: 00007f016299f559 [ 172.106206][ T7106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 172.106231][ T7106] RBP: 00007f0162a36b50 R08: 0000000000000000 R09: 0000000000000000 [ 172.106256][ T7106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.106281][ T7106] R13: 00007f0162c26038 R14: 00007f0162c25fa0 R15: 00007fff76f782a8 [ 172.106334][ T7106] [ 172.360936][ T7115] FAULT_INJECTION: forcing a failure. [ 172.360936][ T7115] name failslab, interval 1, probability 0, space 0, times 0 [ 172.360990][ T7115] CPU: 0 UID: 0 PID: 7115 Comm: syz.2.380 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.361054][ T7115] Tainted: [L]=SOFTLOCKUP [ 172.361068][ T7115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 172.361093][ T7115] Call Trace: [ 172.361106][ T7115] [ 172.361121][ T7115] dump_stack_lvl+0x100/0x190 [ 172.361190][ T7115] should_fail_ex.cold+0x5/0xa [ 172.361249][ T7115] should_failslab+0xc2/0x120 [ 172.361315][ T7115] __kmalloc_cache_noprof+0x91/0x6d0 [ 172.361358][ T7115] ? ____ip_mc_inc_group+0x40b/0x10d0 [ 172.361415][ T7115] ____ip_mc_inc_group+0x40b/0x10d0 [ 172.361466][ T7115] ? __pfx_____ip_mc_inc_group+0x10/0x10 [ 172.361518][ T7115] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.361576][ T7115] __ip_mc_join_group+0x451/0x5e0 [ 172.361635][ T7115] do_mcast_group_source+0x282/0x2f0 [ 172.361701][ T7115] ? __pfx_do_mcast_group_source+0x10/0x10 [ 172.361761][ T7115] ? check_prev_add+0xfe/0xe60 [ 172.361819][ T7115] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.361866][ T7115] ? __lock_acquire+0xe8b/0x1f40 [ 172.361960][ T7115] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.362018][ T7115] ? __local_bh_enable_ip+0xa5/0x120 [ 172.362062][ T7115] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.362111][ T7115] ? lockdep_hardirqs_on+0x7d/0x110 [ 172.362172][ T7115] do_ip_setsockopt+0x8a4/0x3310 [ 172.362241][ T7115] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 172.362303][ T7115] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.362353][ T7115] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.362406][ T7115] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.362454][ T7115] ? futex_wait+0x11e/0x370 [ 172.362520][ T7115] ip_setsockopt+0x5a/0xf0 [ 172.362586][ T7115] sctp_setsockopt+0x161/0xb370 [ 172.362646][ T7115] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.362695][ T7115] ? __fget_files+0x34/0x3d0 [ 172.362761][ T7115] ? __pfx_sctp_setsockopt+0x10/0x10 [ 172.362822][ T7115] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.362871][ T7115] ? aa_sock_opt_perm+0x114/0x1e0 [ 172.362913][ T7115] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.362961][ T7115] ? sock_common_setsockopt+0x2e/0xf0 [ 172.363036][ T7115] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 172.363109][ T7115] do_sock_setsockopt+0xf3/0x1d0 [ 172.363182][ T7115] __sys_setsockopt+0x195/0x220 [ 172.363247][ T7115] __x64_sys_setsockopt+0xbd/0x160 [ 172.363302][ T7115] ? do_syscall_64+0xae/0x790 [ 172.363352][ T7115] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.363400][ T7115] ? lockdep_hardirqs_on+0x7d/0x110 [ 172.363452][ T7115] do_syscall_64+0x123/0x790 [ 172.363509][ T7115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.363549][ T7115] RIP: 0033:0x7f867c79f559 [ 172.363581][ T7115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.363621][ T7115] RSP: 002b:00007f867d707028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 172.363659][ T7115] RAX: ffffffffffffffda RBX: 00007f867ca25fa0 RCX: 00007f867c79f559 [ 172.363686][ T7115] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000003 [ 172.363711][ T7115] RBP: 00007f867c836b50 R08: 0000000000000108 R09: 0000000000000000 [ 172.363736][ T7115] R10: 0000200000000a80 R11: 0000000000000246 R12: 0000000000000000 [ 172.363762][ T7115] R13: 00007f867ca26038 R14: 00007f867ca25fa0 R15: 00007ffe1e368148 [ 172.363816][ T7115] [ 172.576889][ T5649] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 172.738075][ T5649] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 172.749983][ T5649] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 172.750034][ T5649] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 172.750096][ T5649] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 172.750144][ T5649] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 172.766348][ T5649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.766389][ T5649] usb 2-1: Product: syz [ 172.766415][ T5649] usb 2-1: Manufacturer: syz [ 172.766442][ T5649] usb 2-1: SerialNumber: syz [ 172.856259][ T7114] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 172.895375][ T5655] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 173.007402][ T5655] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 173.135461][ T7114] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 173.136245][ T7114] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 173.507489][ T7137] FAULT_INJECTION: forcing a failure. [ 173.507489][ T7137] name failslab, interval 1, probability 0, space 0, times 0 [ 173.507548][ T7137] CPU: 0 UID: 0 PID: 7137 Comm: syz.0.388 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.507608][ T7137] Tainted: [L]=SOFTLOCKUP [ 173.507623][ T7137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 173.507649][ T7137] Call Trace: [ 173.507662][ T7137] [ 173.507678][ T7137] dump_stack_lvl+0x100/0x190 [ 173.507750][ T7137] should_fail_ex.cold+0x5/0xa [ 173.507812][ T7137] should_failslab+0xc2/0x120 [ 173.507876][ T7137] __kmalloc_node_noprof+0xff/0x870 [ 173.507927][ T7137] ? __get_vm_area_node+0x1ff/0x350 [ 173.507983][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.508042][ T7137] ? __get_vm_area_node+0x22b/0x350 [ 173.508097][ T7137] ? __vmalloc_node_range_noprof+0x424/0x1440 [ 173.508170][ T7137] __vmalloc_node_range_noprof+0x424/0x1440 [ 173.508250][ T7137] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 173.508325][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.508382][ T7137] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 173.508446][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.508501][ T7137] ? rcu_is_watching+0x13/0xc0 [ 173.508542][ T7137] ? trace_hrtimer_start+0x77/0x220 [ 173.508590][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.508646][ T7137] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 173.508712][ T7137] __vmalloc_node_noprof+0xad/0xf0 [ 173.508774][ T7137] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 173.508848][ T7137] __vmalloc_noprof+0xa3/0x120 [ 173.508909][ T7137] ? __pfx___vmalloc_noprof+0x10/0x10 [ 173.508974][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.509030][ T7137] ? rcu_is_watching+0x13/0xc0 [ 173.509072][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.509121][ T7137] ? apparmor_capable+0x1d7/0x4d0 [ 173.509177][ T7137] bpf_prog_alloc_no_stats+0x58/0x690 [ 173.509240][ T7137] ? security_capable+0x80/0x260 [ 173.509291][ T7137] bpf_prog_alloc+0x3b/0x200 [ 173.509352][ T7137] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 173.509425][ T7137] bpf_prog_load+0x4a3/0x2b20 [ 173.509478][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.509541][ T7137] ? __pfx_bpf_prog_load+0x10/0x10 [ 173.509591][ T7137] ? lock_acquire+0x1d1/0x380 [ 173.509652][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.509737][ T7137] __sys_bpf+0x146f/0x4b60 [ 173.509806][ T7137] ? __pfx___sys_bpf+0x10/0x10 [ 173.509857][ T7137] ? find_held_lock+0x2b/0x80 [ 173.509897][ T7137] ? futex_wake+0x4ea/0x5e0 [ 173.509951][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.510011][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.510089][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.510140][ T7137] ? vm_mmap_pgoff+0x101/0x490 [ 173.510192][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.510267][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.510317][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.510366][ T7137] ? __x64_sys_futex+0x358/0x4d0 [ 173.510412][ T7137] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 173.510463][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.510514][ T7137] ? xfd_validate_state+0x129/0x190 [ 173.510571][ T7137] ? __x64_sys_bpf+0xce/0x140 [ 173.510625][ T7137] __x64_sys_bpf+0xce/0x140 [ 173.510682][ T7137] ? do_syscall_64+0xae/0x790 [ 173.510740][ T7137] do_syscall_64+0x123/0x790 [ 173.510799][ T7137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.510843][ T7137] RIP: 0033:0x7f71a5d9f559 [ 173.510876][ T7137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.510916][ T7137] RSP: 002b:00007f71a6cdc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 173.510956][ T7137] RAX: ffffffffffffffda RBX: 00007f71a6025fa0 RCX: 00007f71a5d9f559 [ 173.510984][ T7137] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 173.511016][ T7137] RBP: 00007f71a5e36b50 R08: 0000000000000000 R09: 0000000000000000 [ 173.511042][ T7137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.511067][ T7137] R13: 00007f71a6026038 R14: 00007f71a6025fa0 R15: 00007fffa4ae86f8 [ 173.511121][ T7137] [ 173.706725][ T7137] syz.0.388: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 173.707036][ T7137] CPU: 1 UID: 0 PID: 7137 Comm: syz.0.388 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.707091][ T7137] Tainted: [L]=SOFTLOCKUP [ 173.707106][ T7137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 173.707133][ T7137] Call Trace: [ 173.707146][ T7137] [ 173.707161][ T7137] dump_stack_lvl+0x100/0x190 [ 173.707228][ T7137] warn_alloc.cold+0x9e/0xb2 [ 173.707273][ T7137] ? __pfx_warn_alloc+0x10/0x10 [ 173.707314][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.707363][ T7137] ? dump_stack_lvl+0x17c/0x190 [ 173.707424][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.707475][ T7137] ? rcu_is_watching+0x13/0xc0 [ 173.707516][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.707565][ T7137] ? __kasan_kmalloc+0x8a/0xb0 [ 173.707623][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.707670][ T7137] ? __kmalloc_node_noprof+0x360/0x870 [ 173.707719][ T7137] ? __get_vm_area_node+0x1ff/0x350 [ 173.707772][ T7137] ? __get_vm_area_node+0x22b/0x350 [ 173.707823][ T7137] ? __vmalloc_node_range_noprof+0x424/0x1440 [ 173.707892][ T7137] __vmalloc_node_range_noprof+0x107c/0x1440 [ 173.707969][ T7137] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 173.708045][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.708099][ T7137] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 173.708160][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.708208][ T7137] ? rcu_is_watching+0x13/0xc0 [ 173.708248][ T7137] ? trace_hrtimer_start+0x77/0x220 [ 173.708293][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.708347][ T7137] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 173.708409][ T7137] __vmalloc_node_noprof+0xad/0xf0 [ 173.708466][ T7137] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 173.708535][ T7137] __vmalloc_noprof+0xa3/0x120 [ 173.708592][ T7137] ? __pfx___vmalloc_noprof+0x10/0x10 [ 173.708653][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.708700][ T7137] ? rcu_is_watching+0x13/0xc0 [ 173.708740][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.708788][ T7137] ? apparmor_capable+0x1d7/0x4d0 [ 173.708842][ T7137] bpf_prog_alloc_no_stats+0x58/0x690 [ 173.708904][ T7137] ? security_capable+0x80/0x260 [ 173.708951][ T7137] bpf_prog_alloc+0x3b/0x200 [ 173.709016][ T7137] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 173.709083][ T7137] bpf_prog_load+0x4a3/0x2b20 [ 173.709133][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.709193][ T7137] ? __pfx_bpf_prog_load+0x10/0x10 [ 173.709241][ T7137] ? lock_acquire+0x1d1/0x380 [ 173.709299][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.709381][ T7137] __sys_bpf+0x146f/0x4b60 [ 173.709446][ T7137] ? __pfx___sys_bpf+0x10/0x10 [ 173.709494][ T7137] ? find_held_lock+0x2b/0x80 [ 173.709532][ T7137] ? futex_wake+0x4ea/0x5e0 [ 173.709584][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.709634][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.709710][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.709759][ T7137] ? vm_mmap_pgoff+0x101/0x490 [ 173.709809][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.709881][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.709928][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.709980][ T7137] ? __x64_sys_futex+0x358/0x4d0 [ 173.710024][ T7137] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 173.710074][ T7137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.710121][ T7137] ? xfd_validate_state+0x129/0x190 [ 173.710177][ T7137] ? __x64_sys_bpf+0xce/0x140 [ 173.710228][ T7137] __x64_sys_bpf+0xce/0x140 [ 173.710283][ T7137] ? do_syscall_64+0xae/0x790 [ 173.710338][ T7137] do_syscall_64+0x123/0x790 [ 173.710394][ T7137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.710436][ T7137] RIP: 0033:0x7f71a5d9f559 [ 173.710468][ T7137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.710507][ T7137] RSP: 002b:00007f71a6cdc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 173.710544][ T7137] RAX: ffffffffffffffda RBX: 00007f71a6025fa0 RCX: 00007f71a5d9f559 [ 173.710571][ T7137] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 173.710596][ T7137] RBP: 00007f71a5e36b50 R08: 0000000000000000 R09: 0000000000000000 [ 173.710621][ T7137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.710646][ T7137] R13: 00007f71a6026038 R14: 00007f71a6025fa0 R15: 00007fffa4ae86f8 [ 173.710700][ T7137] [ 173.776641][ T7114] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 173.776828][ T7114] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 173.789221][ T7137] Mem-Info: [ 173.789239][ T7137] active_anon:8468 inactive_anon:0 isolated_anon:0 [ 173.789239][ T7137] active_file:0 inactive_file:55380 isolated_file:0 [ 173.789239][ T7137] unevictable:0 dirty:605 writeback:0 [ 173.789239][ T7137] slab_reclaimable:11299 slab_unreclaimable:102093 [ 173.789239][ T7137] mapped:32272 shmem:2262 pagetables:1453 [ 173.789239][ T7137] sec_pagetables:0 bounce:0 [ 173.789239][ T7137] kernel_misc_reclaimable:0 [ 173.789239][ T7137] free:1286334 free_pcp:11032 free_cma:0 [ 173.789371][ T7137] Node 0 active_anon:33872kB inactive_anon:0kB active_file:0kB inactive_file:221308kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129088kB dirty:2416kB writeback:0kB shmem:9048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13060kB pagetables:5688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 173.789482][ T7137] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 173.789630][ T7137] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 173.789774][ T7137] lowmem_reserve[]: 0 2447 2449 2449 2449 [ 173.789843][ T7137] Node 0 DMA32 free:1202444kB boost:0kB min:33784kB low:42228kB high:50672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:33872kB inactive_anon:0kB active_file:0kB inactive_file:221308kB unevictable:0kB writepending:2416kB zspages:0kB present:3129332kB managed:2506412kB mlocked:0kB bounce:0kB free_pcp:44124kB local_pcp:20824kB free_cma:0kB [ 173.790066][ T7137] lowmem_reserve[]: 0 0 1 1 1 [ 173.790163][ T7137] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1760kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 173.790276][ T7137] lowmem_reserve[]: 0 0 0 0 0 [ 173.790371][ T7137] Node 1 Normal free:3927532kB boost:0kB min:56088kB low:70108kB high:84128kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 173.790516][ T7137] lowmem_reserve[]: 0 0 0 0 0 [ 173.790583][ T7137] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 173.790869][ T7137] Node 0 DMA32: 1745*4kB (UME) 1671*8kB (UME) 917*16kB (UME) 490*32kB (UME) 370*64kB (UME) 207*128kB (UME) 85*256kB (UME) 19*512kB (M) 11*1024kB (UM) 5*2048kB (ME) 256*4096kB (UM) = 1202444kB [ 173.818210][ T7137] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 173.818474][ T7137] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 7*16kB (UM) 9*32kB (UM) 9*64kB (UM) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (M) 957*4096kB (UM) = 3927532kB [ 173.818841][ T7137] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 173.818873][ T7137] Node 0 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 173.818933][ T7137] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 173.818965][ T7137] Node 1 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 173.819002][ T7137] 57686 total pagecache pages [ 173.819016][ T7137] 0 pages in swap cache [ 173.819029][ T7137] Free swap = 124996kB [ 173.819043][ T7137] Total swap = 124996kB [ 173.819087][ T7137] 2097051 pages RAM [ 173.819100][ T7137] 0 pages HighMem/MovableOnly [ 173.819113][ T7137] 438392 pages reserved [ 173.819126][ T7137] 0 pages cma reserved [ 174.004667][ T5649] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 174.004707][ T5649] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 174.004740][ T5649] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 174.211284][ T5649] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 174.267382][ T5649] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 174.319706][ T5649] usb 2-1: USB disconnect, device number 5 [ 174.336101][ T5649] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 175.187943][ T5648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 175.204557][ T5648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 175.206413][ T5648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 175.209063][ T5648] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 175.209798][ T5648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 175.309831][ T7161] netlink: 'syz.1.394': attribute type 11 has an invalid length. [ 175.963364][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 176.094732][ T7180] FAULT_INJECTION: forcing a failure. [ 176.094732][ T7180] name failslab, interval 1, probability 0, space 0, times 0 [ 176.094786][ T7180] CPU: 1 UID: 0 PID: 7180 Comm: syz.5.399 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.094843][ T7180] Tainted: [L]=SOFTLOCKUP [ 176.094858][ T7180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 176.094881][ T7180] Call Trace: [ 176.094894][ T7180] [ 176.094908][ T7180] dump_stack_lvl+0x100/0x190 [ 176.094975][ T7180] should_fail_ex.cold+0x5/0xa [ 176.095034][ T7180] should_failslab+0xc2/0x120 [ 176.095095][ T7180] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 176.095156][ T7180] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.095207][ T7180] ? kstrdup_const+0x63/0x80 [ 176.095292][ T7180] kstrdup+0x51/0xe0 [ 176.095353][ T7180] kstrdup_const+0x63/0x80 [ 176.095411][ T7180] kvasprintf_const+0x10f/0x1a0 [ 176.095475][ T7180] kobject_set_name_vargs+0x5a/0x140 [ 176.095528][ T7180] dev_set_name+0xc7/0x100 [ 176.095574][ T7180] ? __pfx_dev_set_name+0x10/0x10 [ 176.095618][ T7180] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 176.095683][ T7180] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.095731][ T7180] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.095777][ T7180] ? lockdep_init_map_type+0x5c/0x250 [ 176.095834][ T7180] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.095881][ T7180] ? __init_waitqueue_head+0xca/0x150 [ 176.095940][ T7180] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.095998][ T7180] netdev_register_kobject+0xc5/0x410 [ 176.096057][ T7180] register_netdevice+0x1313/0x26b0 [ 176.096135][ T7180] ? __pfx_register_netdevice+0x10/0x10 [ 176.096198][ T7180] ? net_generic+0xea/0x2a0 [ 176.096255][ T7180] ppp_dev_configure+0x8e6/0xbc0 [ 176.096313][ T7180] ppp_ioctl+0x9ef/0x27b0 [ 176.096360][ T7180] ? __fget_files+0x34/0x3d0 [ 176.096425][ T7180] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.096472][ T7180] ? find_held_lock+0x2b/0x80 [ 176.096521][ T7180] ? __pfx_ppp_ioctl+0x10/0x10 [ 176.096579][ T7180] ? __fget_files+0x21f/0x3d0 [ 176.096651][ T7180] ? __pfx_ppp_ioctl+0x10/0x10 [ 176.096704][ T7180] __x64_sys_ioctl+0x18e/0x210 [ 176.096761][ T7180] do_syscall_64+0x123/0x790 [ 176.096820][ T7180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.096862][ T7180] RIP: 0033:0x7f016299f559 [ 176.096892][ T7180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.096931][ T7180] RSP: 002b:00007f01638c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.096969][ T7180] RAX: ffffffffffffffda RBX: 00007f0162c25fa0 RCX: 00007f016299f559 [ 176.096996][ T7180] RDX: 000000110c230007 RSI: 00000000c004743e RDI: 0000000000000004 [ 176.097021][ T7180] RBP: 00007f0162a36b50 R08: 0000000000000000 R09: 0000000000000000 [ 176.097046][ T7180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.097071][ T7180] R13: 00007f0162c26038 R14: 00007f0162c25fa0 R15: 00007fff76f782a8 [ 176.097125][ T7180] [ 176.188794][ T9] usb 7-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 176.220414][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.220488][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.444847][ T9] usb 7-1: config 0 descriptor?? [ 176.707539][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 176.707676][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 176.731449][ T9] usb 7-1: USB disconnect, device number 3 [ 176.791591][ T1174] IPVS: starting estimator thread 0... [ 176.901928][ T7201] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 176.906036][ T7200] IPVS: using max 22 ests per chain, 52800 per kthread [ 177.260791][ T7155] rxe_eth0 speed is unknown, defaulting to 1000 [ 177.264626][ T5648] Bluetooth: hci4: command tx timeout [ 177.292774][ T5887] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 177.444925][ T5887] usb 7-1: New USB device found: idVendor=0458, idProduct=5003, bcdDevice=0.40 [ 177.446317][ T5887] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.446389][ T5887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.450515][ T7212] loop0: detected capacity change from 0 to 2048 [ 177.514443][ T5887] usb 7-1: config 0 descriptor?? [ 177.643630][ T7212] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.032220][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 178.194568][ T9] usb 2-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 178.195998][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.196061][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.196105][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 178.196173][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.252972][ T7205] loop2: detected capacity change from 0 to 32768 [ 178.276293][ T7205] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.404 (7205) [ 178.300027][ T9] usb 2-1: config 0 descriptor?? [ 178.364611][ T5887] aiptek 7-1:0.0: Aiptek using 400 ms programming speed [ 178.424055][ T5887] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input8 [ 178.496828][ T7205] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 178.496882][ T7205] BTRFS info (device loop2): using crc32c checksum algorithm [ 178.683952][ T50] usb 7-1: USB disconnect, device number 4 [ 178.684060][ C0] aiptek 7-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 178.750698][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 178.750744][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 178.750780][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 178.750816][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 178.750851][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 178.750887][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 178.750921][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 178.750956][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 178.750999][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 178.751033][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 178.891609][ T7205] BTRFS info (device loop2): turning on async discard [ 178.891650][ T7205] BTRFS info (device loop2): enabling free space tree [ 178.891681][ T7205] BTRFS info (device loop2): enabling auto defrag [ 178.891710][ T7205] BTRFS info (device loop2): force zlib compression, level 3 [ 178.891747][ T7205] BTRFS info (device loop2): max_inline set to 0 [ 178.964927][ T9] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 178.990747][ T5887] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 179.070644][ T5649] usb 2-1: USB disconnect, device number 6 [ 179.153547][ T5887] usb 6-1: Using ep0 maxpacket: 16 [ 179.160591][ T5887] usb 6-1: New USB device found: idVendor=05d1, idProduct=2001, bcdDevice=28.00 [ 179.177260][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.204493][ T5887] usb 6-1: config 0 descriptor?? [ 179.232368][ T5887] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 179.237290][ T5887] usb 6-1: Detected FT2233HP [ 179.343327][ T5648] Bluetooth: hci4: command tx timeout [ 179.417517][ T5887] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 179.421818][ T5887] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 179.585410][ T5640] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 179.644776][ T7258] fido_id[7258]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 180.061428][ T7274] FAULT_INJECTION: forcing a failure. [ 180.061428][ T7274] name failslab, interval 1, probability 0, space 0, times 0 [ 180.061482][ T7274] CPU: 1 UID: 60928 PID: 7274 Comm: syz.2.415 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.061545][ T7274] Tainted: [L]=SOFTLOCKUP [ 180.061559][ T7274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 180.061582][ T7274] Call Trace: [ 180.061595][ T7274] [ 180.061610][ T7274] dump_stack_lvl+0x100/0x190 [ 180.061680][ T7274] should_fail_ex.cold+0x5/0xa [ 180.061739][ T7274] should_failslab+0xc2/0x120 [ 180.061800][ T7274] __kmalloc_cache_noprof+0x91/0x6d0 [ 180.061844][ T7274] ? alloc_ucounts+0x13d/0x5c0 [ 180.061916][ T7274] alloc_ucounts+0x13d/0x5c0 [ 180.061981][ T7274] ? __pfx_alloc_ucounts+0x10/0x10 [ 180.062042][ T7274] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.062111][ T7274] inc_ucount+0x7f/0x390 [ 180.062180][ T7274] ? __pfx_inc_ucount+0x10/0x10 [ 180.062243][ T7274] ? __pfx_copy_mnt_ns+0x10/0x10 [ 180.062292][ T7274] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.062351][ T7274] copy_utsname+0x263/0x660 [ 180.062411][ T7274] create_new_namespaces+0x16a/0xac0 [ 180.062464][ T7274] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.062517][ T7274] ? security_capable+0x80/0x260 [ 180.062567][ T7274] unshare_nsproxy_namespaces+0xf6/0x210 [ 180.062626][ T7274] ksys_unshare+0x44f/0x980 [ 180.062675][ T7274] ? __pfx_ksys_unshare+0x10/0x10 [ 180.062726][ T7274] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.062792][ T7274] __x64_sys_unshare+0x31/0x40 [ 180.062840][ T7274] do_syscall_64+0x123/0x790 [ 180.062899][ T7274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.062941][ T7274] RIP: 0033:0x7f867c79f559 [ 180.062972][ T7274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.063012][ T7274] RSP: 002b:00007f867d707028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 180.063052][ T7274] RAX: ffffffffffffffda RBX: 00007f867ca25fa0 RCX: 00007f867c79f559 [ 180.063079][ T7274] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002e000480 [ 180.063104][ T7274] RBP: 00007f867c836b50 R08: 0000000000000000 R09: 0000000000000000 [ 180.063130][ T7274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.063155][ T7274] R13: 00007f867ca26038 R14: 00007f867ca25fa0 R15: 00007ffe1e368148 [ 180.063207][ T7274] [ 180.405490][ T30] audit: type=1800 audit(1793581843.346:22): pid=7277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.417" name="file0" dev="overlay" ino=387 res=0 errno=-22 [ 180.548028][ T7286] loop2: detected capacity change from 0 to 1024 [ 180.573649][ T7155] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.573790][ T7155] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.573972][ T7155] bridge_slave_0: entered allmulticast mode [ 180.591409][ T7155] bridge_slave_0: entered promiscuous mode [ 180.614284][ T7155] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.614408][ T7155] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.614591][ T7155] bridge_slave_1: entered allmulticast mode [ 180.654342][ T7155] bridge_slave_1: entered promiscuous mode [ 180.681814][ T7286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 180.681993][ T7286] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.746922][ T7155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.750988][ T7155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.796308][ T7246] ftdi_sio ttyUSB0: ftdi_set_termios FAILED to set databits/stopbits/parity [ 180.797694][ T7246] ftdi_sio ttyUSB0: ftdi_set_termios urb failed to set baudrate [ 180.802974][ T7246] ftdi_sio ttyUSB0: failed to set flow control: -32 [ 180.831998][ T7155] team0: Port device team_slave_0 added [ 180.841112][ T7155] team0: Port device team_slave_1 added [ 180.864967][ T7246] ftdi_sio ttyUSB0: failed to get modem status: -32 [ 180.867954][ T7286] EXT4-fs error (device loop2): ext4_map_blocks:951: inode #15: comm syz.2.419: lblock 0 mapped to illegal pblock 0 (length 6) [ 180.869173][ T7246] ftdi_sio ttyUSB0: error from flowcontrol urb [ 180.881904][ T7155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.881927][ T7155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.881974][ T7155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.884282][ T7155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.884302][ T7155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.884349][ T7155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.998342][ T7286] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 180.998392][ T7286] EXT4-fs (loop2): This should not happen!! Data will be lost [ 180.998392][ T7286] [ 181.001021][ T50] usb 6-1: USB disconnect, device number 7 [ 181.003984][ T7155] hsr_slave_0: entered promiscuous mode [ 181.041615][ T7294] EXT4-fs error (device loop2): ext4_map_blocks:951: inode #15: block 8: comm syz.2.419: lblock 8 mapped to illegal pblock 8 (length 8) [ 181.062654][ T50] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 181.063284][ T50] ftdi_sio 6-1:0.0: device disconnected [ 181.084178][ T7155] hsr_slave_1: entered promiscuous mode [ 181.086675][ T7294] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 181.086721][ T7294] EXT4-fs (loop2): This should not happen!! Data will be lost [ 181.086721][ T7294] [ 181.093999][ T7155] debugfs: 'hsr0' already exists in 'hsr' [ 181.094024][ T7155] Cannot create hsr debugfs directory [ 181.237718][ T7298] loop1: detected capacity change from 0 to 2048 [ 181.309933][ T5640] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 181.311435][ T7298] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.423392][ T5648] Bluetooth: hci4: command tx timeout [ 182.130533][ T7318] netlink: 24 bytes leftover after parsing attributes in process `syz.5.428'. [ 182.130607][ T7318] netlink: 16 bytes leftover after parsing attributes in process `syz.5.428'. [ 182.993902][ T7155] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 183.019631][ T7155] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 183.023403][ T7155] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 183.047437][ T7155] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 183.049155][ T7155] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 183.060478][ T7155] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 183.062020][ T7155] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 183.094420][ T7155] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 183.513704][ T5648] Bluetooth: hci4: command tx timeout [ 183.526504][ T7155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.579030][ T7155] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.593319][ T5649] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 183.633319][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.633444][ T2998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.672806][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.672959][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.679709][ T7337] syz.5.434 (7337) used greatest stack depth: 20016 bytes left [ 183.679933][ T7342] syz.5.434 (7342) used greatest stack depth: 19576 bytes left [ 183.746157][ T5649] usb 7-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 183.757575][ T5649] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.757638][ T5649] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 183.757678][ T5649] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 183.757721][ T5649] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.757785][ T5649] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.974207][ T5643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 183.979021][ T5643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 183.979991][ T5643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 184.007135][ T5643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 184.010410][ T5643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 184.560718][ T7362] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 184.607220][ T7364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.439'. [ 184.951107][ T5649] gud 7-1:1.0: USB-1: Failed to add properties (ret=-5) [ 184.951175][ T5649] gud 7-1:1.0: Failed to get connectors (error=-5) [ 184.951215][ T5649] gud 7-1:1.0: probe with driver gud failed with error -5 [ 185.275602][ T50] usb 7-1: USB disconnect, device number 5 [ 185.833512][ T7349] rxe_eth0 speed is unknown, defaulting to 1000 [ 185.877834][ T7392] loop1: detected capacity change from 0 to 256 [ 185.889246][ T7392] exfat: Bad value for 'uid' [ 185.889273][ T7392] exfat: Bad value for 'uid' [ 186.062787][ T5648] Bluetooth: hci0: command tx timeout [ 186.600844][ T7155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.209214][ T5648] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 187.209257][ T5648] CPU: 0 UID: 0 PID: 5648 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.209326][ T5648] Tainted: [L]=SOFTLOCKUP [ 187.209341][ T5648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 187.209368][ T5648] Workqueue: hci2 hci_rx_work [ 187.209422][ T5648] Call Trace: [ 187.209436][ T5648] [ 187.209450][ T5648] dump_stack_lvl+0x100/0x190 [ 187.209523][ T5648] sysfs_warn_dup.cold+0x1c/0x28 [ 187.209594][ T5648] sysfs_create_dir_ns+0x24b/0x2b0 [ 187.209647][ T5648] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 187.209697][ T5648] ? find_held_lock+0x2b/0x80 [ 187.209737][ T5648] ? kobject_add_internal+0x25f/0x930 [ 187.209778][ T5648] ? kobject_add_internal+0x25f/0x930 [ 187.209823][ T5648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.209873][ T5648] ? do_raw_spin_unlock+0x145/0x1e0 [ 187.209941][ T5648] kobject_add_internal+0x2c8/0x930 [ 187.209991][ T5648] kobject_add+0x16a/0x1e0 [ 187.210032][ T5648] ? __pfx_kobject_add+0x10/0x10 [ 187.210071][ T5648] ? class_to_subsys+0x10f/0x150 [ 187.210117][ T5648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.210169][ T5648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.210218][ T5648] ? kobject_put+0xb9/0x640 [ 187.210253][ T5648] ? _raw_spin_unlock+0x28/0x50 [ 187.210311][ T5648] device_add+0x294/0x1970 [ 187.210351][ T5648] ? __pfx_dev_set_name+0x10/0x10 [ 187.210395][ T5648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.210446][ T5648] ? __pfx_device_add+0x10/0x10 [ 187.210485][ T5648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.210541][ T5648] ? mgmt_send_event_skb+0x2fb/0x460 [ 187.210604][ T5648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.210667][ T5648] hci_conn_add_sysfs+0x1a3/0x260 [ 187.210737][ T5648] le_conn_complete_evt+0x12f9/0x2200 [ 187.210807][ T5648] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 187.210864][ T5648] ? hci_event_packet+0x186/0xcd0 [ 187.210916][ T5648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.210979][ T5648] hci_le_conn_complete_evt+0x23c/0x3a0 [ 187.211039][ T5648] ? skb_pull_data+0x15f/0x1e0 [ 187.211089][ T5648] hci_le_meta_evt+0x34a/0x5f0 [ 187.211150][ T5648] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 187.211220][ T5648] hci_event_packet+0x51c/0xcd0 [ 187.211277][ T5648] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 187.211342][ T5648] ? __pfx_hci_event_packet+0x10/0x10 [ 187.211406][ T5648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.211456][ T5648] ? lockdep_hardirqs_on+0x7d/0x110 [ 187.211514][ T5648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.211574][ T5648] hci_rx_work+0x6ea/0x10c0 [ 187.211637][ T5648] process_one_work+0xac7/0x1b10 [ 187.211702][ T5648] ? __pfx_process_one_work+0x10/0x10 [ 187.211746][ T5648] ? lock_acquire+0x1d1/0x380 [ 187.211813][ T5648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.211870][ T5648] worker_thread+0x5ef/0xe50 [ 187.211933][ T5648] ? kthread+0x13a/0x450 [ 187.211995][ T5648] ? __pfx_worker_thread+0x10/0x10 [ 187.212035][ T5648] kthread+0x373/0x450 [ 187.212098][ T5648] ? __pfx_kthread+0x10/0x10 [ 187.212166][ T5648] ret_from_fork+0x730/0xd60 [ 187.212215][ T5648] ? save_fpregs_to_fpstate+0x19c/0x270 [ 187.212277][ T5648] ? __pfx_ret_from_fork+0x10/0x10 [ 187.212327][ T5648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.212375][ T5648] ? rcu_is_watching+0x13/0xc0 [ 187.212415][ T5648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.212465][ T5648] ? __switch_to+0x800/0x10e0 [ 187.212534][ T5648] ? __switch_to_asm+0x39/0x70 [ 187.212586][ T5648] ? __pfx_kthread+0x10/0x10 [ 187.212654][ T5648] ret_from_fork_asm+0x1a/0x30 [ 187.212725][ T5648] [ 187.226673][ T5648] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 187.226732][ T5648] Bluetooth: hci2: failed to register connection device [ 187.459250][ T7394] loop5: detected capacity change from 0 to 32768 [ 187.495103][ T5792] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 187.495315][ T7394] xfs: Deprecated parameter 'ikeep' [ 187.495341][ T7394] XFS: ikeep mount option is deprecated. [ 187.495366][ T7394] xfs: Deprecated parameter 'ikeep' [ 187.495389][ T7394] XFS: ikeep mount option is deprecated. [ 187.667747][ T7394] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 187.726035][ T5792] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 187.738410][ T5792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.924358][ T7394] XFS (loop5): Ending clean mount [ 187.999278][ T30] audit: type=1800 audit(1793581850.946:23): pid=7394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.443" name="file1" dev="loop5" ino=9286 res=0 errno=-22 [ 188.078529][ T5792] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 188.143156][ T5643] Bluetooth: hci0: command tx timeout [ 188.213823][ T5641] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 188.238311][ T7441] FAULT_INJECTION: forcing a failure. [ 188.238311][ T7441] name failslab, interval 1, probability 0, space 0, times 0 [ 188.238363][ T7441] CPU: 0 UID: 0 PID: 7441 Comm: syz.2.452 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.238419][ T7441] Tainted: [L]=SOFTLOCKUP [ 188.238434][ T7441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 188.238458][ T7441] Call Trace: [ 188.238471][ T7441] [ 188.238485][ T7441] dump_stack_lvl+0x100/0x190 [ 188.238555][ T7441] should_fail_ex.cold+0x5/0xa [ 188.238618][ T7441] should_failslab+0xc2/0x120 [ 188.238679][ T7441] __kvmalloc_node_noprof+0x113/0x9b0 [ 188.238733][ T7441] ? __pfx___mutex_lock+0x10/0x10 [ 188.238786][ T7441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.238835][ T7441] ? trace_contention_end+0x126/0x160 [ 188.238891][ T7441] ? nf_hook_entries_grow+0x255/0x870 [ 188.238962][ T7441] nf_hook_entries_grow+0x255/0x870 [ 188.239052][ T7441] __nf_register_net_hook+0x116/0x850 [ 188.239125][ T7441] nf_register_net_hook+0xdb/0x170 [ 188.239199][ T7441] nf_register_net_hooks+0x5d/0xd0 [ 188.239268][ T7441] nf_defrag_ipv4_enable+0xb8/0x120 [ 188.239319][ T7441] nf_ct_netns_do_get+0x28d/0x610 [ 188.239386][ T7441] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 188.239451][ T7441] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 188.239502][ T7441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.239550][ T7441] ? rcu_is_watching+0x13/0xc0 [ 188.239605][ T7441] nf_ct_netns_get+0x3d/0x160 [ 188.239644][ T7441] connmark_tg_check+0x60/0xd0 [ 188.239709][ T7441] ? __pfx_connmark_tg_check+0x10/0x10 [ 188.239771][ T7441] xt_check_target+0x117/0x1c0 [ 188.239826][ T7441] find_check_entry.isra.0+0x79c/0x990 [ 188.239901][ T7441] ? __pfx_find_check_entry.isra.0+0x10/0x10 [ 188.239981][ T7441] ? kasan_quarantine_put+0x104/0x240 [ 188.240040][ T7441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.240095][ T7441] ? translate_table+0xaf2/0x1630 [ 188.240153][ T7441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.240200][ T7441] ? kfree+0x22b/0x6d0 [ 188.240234][ T7441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.240282][ T7441] ? xt_check_table_hooks+0x206/0x330 [ 188.240337][ T7441] translate_table+0xbcd/0x1630 [ 188.240418][ T7441] ? __pfx_translate_table+0x10/0x10 [ 188.240494][ T7441] do_ipt_set_ctl+0x689/0xcf0 [ 188.240554][ T7441] ? nf_sockopt_find.isra.0+0x222/0x290 [ 188.240598][ T7441] ? nf_sockopt_find.isra.0+0x222/0x290 [ 188.240647][ T7441] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 188.240707][ T7441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.240756][ T7441] ? __mutex_unlock_slowpath+0x35d/0x930 [ 188.240815][ T7441] ? sockopt_release_sock+0x5c/0x70 [ 188.240878][ T7441] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 188.240954][ T7441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.241011][ T7441] ? nf_sockopt_find.isra.0+0x222/0x290 [ 188.241062][ T7441] nf_setsockopt+0x8d/0xf0 [ 188.241111][ T7441] ip_setsockopt+0xcb/0xf0 [ 188.241179][ T7441] udp_setsockopt+0x64/0xb0 [ 188.241232][ T7441] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 188.241305][ T7441] do_sock_setsockopt+0xf3/0x1d0 [ 188.241377][ T7441] __sys_setsockopt+0x195/0x220 [ 188.241444][ T7441] __x64_sys_setsockopt+0xbd/0x160 [ 188.241498][ T7441] ? do_syscall_64+0xae/0x790 [ 188.241549][ T7441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.241596][ T7441] ? lockdep_hardirqs_on+0x7d/0x110 [ 188.241649][ T7441] do_syscall_64+0x123/0x790 [ 188.241707][ T7441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.241748][ T7441] RIP: 0033:0x7f867c79f559 [ 188.241780][ T7441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.241819][ T7441] RSP: 002b:00007f867d707028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 188.241857][ T7441] RAX: ffffffffffffffda RBX: 00007f867ca25fa0 RCX: 00007f867c79f559 [ 188.241884][ T7441] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 188.241908][ T7441] RBP: 00007f867c836b50 R08: 0000000000000230 R09: 0000000000000000 [ 188.241934][ T7441] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.241960][ T7441] R13: 00007f867ca26038 R14: 00007f867ca25fa0 R15: 00007ffe1e368148 [ 188.242021][ T7441] [ 188.459072][ T7441] cannot load conntrack support for proto=2 [ 188.833962][ T7447] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 189.010584][ T7451] @0Ù: renamed from bond_slave_1 (while UP) [ 189.116604][ T29] usb 2-1: USB disconnect, device number 7 [ 189.172296][ T50] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 189.232268][ T5655] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 189.326638][ T50] usb 6-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 189.326700][ T50] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 189.328614][ T50] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.328684][ T50] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.328735][ T50] usb 6-1: config 0 interface 0 has no altsetting 0 [ 189.330022][ T50] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.330090][ T50] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.330140][ T50] usb 6-1: config 0 interface 0 has no altsetting 0 [ 189.359940][ T50] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.360018][ T50] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.360069][ T50] usb 6-1: config 0 interface 0 has no altsetting 0 [ 189.383211][ T5655] usb 3-1: Using ep0 maxpacket: 16 [ 189.384788][ T5655] usb 3-1: New USB device found: idVendor=04d8, idProduct=00dd, bcdDevice=0.00 [ 189.389030][ T5655] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.389082][ T5655] usb 3-1: config 0 interface 0 has no altsetting 0 [ 189.389130][ T5655] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.406682][ T5655] usb 3-1: config 0 descriptor?? [ 189.439742][ T50] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.439813][ T50] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.439863][ T50] usb 6-1: config 0 interface 0 has no altsetting 0 [ 189.482063][ T50] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.482184][ T50] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.482235][ T50] usb 6-1: config 0 interface 0 has no altsetting 0 [ 189.520914][ T50] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.520988][ T50] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.521044][ T50] usb 6-1: config 0 interface 0 has no altsetting 0 [ 189.567159][ T50] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.567231][ T50] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.567282][ T50] usb 6-1: config 0 interface 0 has no altsetting 0 [ 189.596501][ T50] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.596575][ T50] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.596626][ T50] usb 6-1: config 0 interface 0 has no altsetting 0 [ 189.632959][ T50] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 189.633011][ T50] usb 6-1: Product: syz [ 189.633040][ T50] usb 6-1: Manufacturer: syz [ 189.633067][ T50] usb 6-1: SerialNumber: syz [ 189.645727][ T50] usb 6-1: config 0 descriptor?? [ 189.696943][ T50] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 189.755147][ T5655] usbhid 3-1:0.0: can't add hid device: -71 [ 189.755290][ T5655] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 189.788497][ T5655] usb 3-1: USB disconnect, device number 3 [ 189.856002][ T7155] veth0_vlan: entered promiscuous mode [ 190.039394][ T7349] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.040309][ T7349] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.040478][ T7349] bridge_slave_0: entered allmulticast mode [ 190.047587][ T7349] bridge_slave_0: entered promiscuous mode [ 190.066108][ T7155] veth1_vlan: entered promiscuous mode [ 190.069576][ T7349] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.069794][ T7349] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.069951][ T7349] bridge_slave_1: entered allmulticast mode [ 190.080766][ T7349] bridge_slave_1: entered promiscuous mode [ 190.124748][ C0] usb 6-1: yurex_control_callback - control failed: -2 [ 190.141941][ T24] usb 6-1: USB disconnect, device number 8 [ 190.183516][ T24] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 190.222566][ T5643] Bluetooth: hci0: command tx timeout [ 190.271188][ T7349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.291636][ T7349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.325083][ T7464] netlink: 'syz.1.456': attribute type 1 has an invalid length. [ 190.342554][ T5655] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 190.386269][ T7464] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.424394][ T7466] bond1: option tlb_dynamic_lb: unable to set because the bond device is up [ 190.428780][ T7349] team0: Port device team_slave_0 added [ 190.470217][ T7349] team0: Port device team_slave_1 added [ 190.493828][ T5655] usb 3-1: Using ep0 maxpacket: 16 [ 190.494709][ T5655] usb 3-1: New USB device found: idVendor=04d8, idProduct=00dd, bcdDevice=0.00 [ 190.497699][ T5655] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.497752][ T5655] usb 3-1: config 0 interface 0 has no altsetting 0 [ 190.497801][ T5655] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.529303][ T5655] usb 3-1: config 0 descriptor?? [ 190.615843][ T7470] FAULT_INJECTION: forcing a failure. [ 190.615843][ T7470] name failslab, interval 1, probability 0, space 0, times 0 [ 190.615897][ T7470] CPU: 1 UID: 0 PID: 7470 Comm: syz.1.458 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.615959][ T7470] Tainted: [L]=SOFTLOCKUP [ 190.615973][ T7470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 190.615998][ T7470] Call Trace: [ 190.616011][ T7470] [ 190.616027][ T7470] dump_stack_lvl+0x100/0x190 [ 190.616095][ T7470] should_fail_ex.cold+0x5/0xa [ 190.616156][ T7470] should_failslab+0xc2/0x120 [ 190.616218][ T7470] __kmalloc_noprof+0xfc/0x840 [ 190.616271][ T7470] ? ip_options_get+0xa4/0x4f0 [ 190.616329][ T7470] ip_options_get+0xa4/0x4f0 [ 190.616374][ T7470] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 190.616445][ T7470] ? __pfx_ip_options_get+0x10/0x10 [ 190.616490][ T7470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.616553][ T7470] ? __local_bh_enable_ip+0xa5/0x120 [ 190.616597][ T7470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.616645][ T7470] ? lockdep_hardirqs_on+0x7d/0x110 [ 190.616706][ T7470] do_ip_setsockopt+0x1c95/0x3310 [ 190.616777][ T7470] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 190.616845][ T7470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.616894][ T7470] ? rcu_read_lock_any_held+0x6a/0x90 [ 190.616937][ T7470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.616985][ T7470] ? find_held_lock+0x2b/0x80 [ 190.617030][ T7470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.617078][ T7470] ? lock_acquire+0x1d1/0x380 [ 190.617140][ T7470] ip_setsockopt+0x5a/0xf0 [ 190.617207][ T7470] tcp_setsockopt+0xa7/0x100 [ 190.617249][ T7470] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 190.617323][ T7470] do_sock_setsockopt+0xf3/0x1d0 [ 190.617395][ T7470] __sys_setsockopt+0x195/0x220 [ 190.617461][ T7470] __x64_sys_setsockopt+0xbd/0x160 [ 190.617524][ T7470] ? do_syscall_64+0xae/0x790 [ 190.617576][ T7470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.617626][ T7470] ? lockdep_hardirqs_on+0x7d/0x110 [ 190.617677][ T7470] do_syscall_64+0x123/0x790 [ 190.617734][ T7470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.617775][ T7470] RIP: 0033:0x7fb52f79f559 [ 190.617807][ T7470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.617848][ T7470] RSP: 002b:00007fb52d9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 190.617887][ T7470] RAX: ffffffffffffffda RBX: 00007fb52fa25fa0 RCX: 00007fb52f79f559 [ 190.617915][ T7470] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 190.617940][ T7470] RBP: 00007fb52f836b50 R08: 0000000000000000 R09: 0000000000000000 [ 190.617966][ T7470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.617991][ T7470] R13: 00007fb52fa26038 R14: 00007fb52fa25fa0 R15: 00007fff36f0c6c8 [ 190.618045][ T7470] [ 190.627989][ T7349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.628020][ T7349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.628068][ T7349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.646232][ T7349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.646257][ T7349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.646305][ T7349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.708720][ T7155] veth0_macvtap: entered promiscuous mode [ 190.905303][ T7349] hsr_slave_0: entered promiscuous mode [ 190.907688][ T7349] hsr_slave_1: entered promiscuous mode [ 190.909737][ T7349] debugfs: 'hsr0' already exists in 'hsr' [ 190.909760][ T7349] Cannot create hsr debugfs directory [ 190.913970][ T7155] veth1_macvtap: entered promiscuous mode [ 191.207321][ T7155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.346643][ T5655] mcp2221 0003:04D8:00DD.0007: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 191.448901][ T7155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.825199][ T24] usb 3-1: USB disconnect, device number 4 [ 191.976662][ T7349] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 191.992060][ T7349] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 192.005937][ T7349] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 192.010724][ T7349] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 192.011966][ T7349] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 192.053396][ T7349] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 192.060503][ T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.060534][ T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.087533][ T7349] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 192.109797][ T7349] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 192.115492][ T88] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.174206][ T31] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.176475][ T88] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.176549][ T88] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.302455][ T5648] Bluetooth: hci0: command tx timeout [ 192.329183][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.329215][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.689567][ T7349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.765826][ T7349] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.802052][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.802244][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.060831][ T7507] infiniband syz0: set down [ 193.060865][ T7507] infiniband syz0: added bond0 [ 193.089874][ T7507] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 193.089943][ T7507] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 193.090036][ T7507] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 193.138559][ T7507] RDS/IB: syz0: added [ 193.138632][ T7507] smc: adding ib device syz0 with port count 1 [ 193.138660][ T7507] smc: ib device syz0 port 1 has no pnetid [ 193.166200][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.166328][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.245167][ T7349] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 193.245208][ T7349] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.582599][ T5643] Bluetooth: hci2: command 0x0406 tx timeout [ 194.060896][ T7349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.612707][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.612775][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.889297][ T7349] veth0_vlan: entered promiscuous mode [ 194.911069][ T7349] veth1_vlan: entered promiscuous mode [ 194.959768][ T7349] veth0_macvtap: entered promiscuous mode [ 194.974568][ T7349] veth1_macvtap: entered promiscuous mode [ 195.009742][ T7349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.029482][ T7349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.062397][ T2998] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.062467][ T2998] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.062529][ T2998] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.062590][ T2998] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.409792][ T7539] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x28 pfn:0x773b9 [ 195.409836][ T7539] memcg:ffff88801db6ee80 [ 195.409852][ T7539] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 195.409898][ T7539] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 195.409935][ T7539] raw: 0000000000000028 0000000000000000 00000001ffffffff ffff88801db6ee80 [ 195.409958][ T7539] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 195.409982][ T7539] page_owner tracks the page as allocated [ 195.409996][ T7539] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 7539, tgid 7539 (syz.2.473), ts 195409760480 [ 195.410065][ T7539] post_alloc_hook+0xfd/0x120 [ 195.410130][ T7539] get_page_from_freelist+0x1113/0x35e0 [ 195.410170][ T7539] __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 195.410212][ T7539] alloc_pages_mpol+0x201/0x560 [ 195.410269][ T7539] folio_alloc_noprof+0x22/0x250 [ 195.410306][ T7539] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 195.410369][ T7539] filemap_alloc_folio_noprof+0x5e/0x80 [ 195.410429][ T7539] page_cache_ra_order+0x539/0xed0 [ 195.410471][ T7539] filemap_fault+0x1953/0x3140 [ 195.410518][ T7539] __do_fault+0x10b/0x440 [ 195.410553][ T7539] do_fault+0x585/0x1890 [ 195.410598][ T7539] __handle_mm_fault+0x150b/0x2f60 [ 195.410654][ T7539] handle_mm_fault+0x363/0xa20 [ 195.410709][ T7539] do_user_addr_fault+0x59c/0x12f0 [ 195.410766][ T7539] exc_page_fault+0x6f/0xd0 [ 195.410812][ T7539] asm_exc_page_fault+0x26/0x30 [ 195.410850][ T7539] page last free pid 5887 tgid 5887 ts 195246864874 stack trace: [ 195.410876 ** replaying previous printk message ** [ 195.410876][ T7539] __free_frozen_pages+0x7b4/0x1110 [ 195.410948][ T7539] tlb_remove_table_rcu+0x2cf/0x380 [ 195.411002][ T7539] rcu_core+0x5f0/0x1220 [ 195.411064][ T7539] handle_softirqs+0x216/0xa20 [ 195.411101][ T7539] __irq_exit_rcu+0x178/0x220 [ 195.411139][ T7539] irq_exit_rcu+0x9/0x30 [ 195.411177][ T7539] sysvec_call_function_single+0xa3/0xc0 [ 195.411224][ T7539] asm_sysvec_call_function_single+0x1a/0x20 [ 195.411616][ T7539] ------------[ cut here ]------------ [ 195.411630][ T7539] kernel BUG at mm/filemap.c:858! [ 195.558306][ T7349] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 195.592978][ T7539] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 195.662054][ T7539] CPU: 0 UID: 0 PID: 7539 Comm: syz.2.473 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.672842][ T7539] Tainted: [L]=SOFTLOCKUP [ 195.677165][ T7539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 195.684657][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.684685][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.687764][ T7349] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 195.705938][ T2998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.705964][ T2998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.725010][ T7539] RIP: 0010:__filemap_add_folio+0xfe6/0x1290 [ 195.731026][ T7539] Code: 10 bb ff 48 c7 c6 80 56 1f 8c 4c 89 ef e8 c2 53 13 00 90 0f 0b e8 ca 10 bb ff 48 c7 c6 e0 56 1f 8c 4c 89 ef e8 ab 53 13 00 90 <0f> 0b e8 b3 10 bb ff 90 0f 0b 90 e9 12 fc ff ff e8 a5 10 bb ff 48 [ 195.750652][ T7539] RSP: 0018:ffffc90004da77d8 EFLAGS: 00010293 [ 195.756729][ T7539] RAX: 0000000000000000 RBX: 0000000000112cc0 RCX: 0000000000000000 [ 195.764701][ T7539] RDX: ffff88802bfbbe80 RSI: ffffffff82667858 RDI: ffff88802bfbc344 [ 195.772675][ T7539] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 195.780647][ T7539] R10: ffffffff8fef6e6b R11: 0000000000000001 R12: 0000000000000002 [ 195.788620][ T7539] R13: ffffea0001dcee40 R14: 0000000000000000 R15: 1ffff920009b4f26 [ 195.796602][ T7539] FS: 0000555578dcc500(0000) GS:ffff88812247a000(0000) knlGS:0000000000000000 [ 195.805540][ T7539] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 195.812138][ T7539] CR2: 00007fa8f2dfa6a0 CR3: 000000005b908000 CR4: 0000000000350ef0 [ 195.820125][ T7539] Call Trace: [ 195.823407][ T7539] [ 195.826342][ T7539] ? rcu_is_watching+0x13/0xc0 [ 195.831129][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.836790][ T7539] ? lock_acquire+0x1d1/0x380 [ 195.841491][ T7539] ? __pfx___filemap_add_folio+0x10/0x10 [ 195.847152][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.852819][ T7539] filemap_add_folio+0x1d3/0x640 [ 195.857777][ T7539] ? __pfx_filemap_add_folio+0x10/0x10 [ 195.863253][ T7539] ? __pfx___css_rstat_updated+0x10/0x10 [ 195.868925][ T7539] page_cache_ra_order+0x602/0xed0 [ 195.874063][ T7539] filemap_fault+0x1953/0x3140 [ 195.878859][ T7539] ? __pfx_filemap_fault+0x10/0x10 [ 195.883988][ T7539] ? __pte_offset_map+0x9a/0x470 [ 195.888953][ T7539] ? lockdep_hardirqs_on+0x7d/0x110 [ 195.894188][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.899863][ T7539] __do_fault+0x10b/0x440 [ 195.904216][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.909879][ T7539] do_fault+0x585/0x1890 [ 195.914152][ T7539] ? __pfx_filemap_map_pages+0x10/0x10 [ 195.919656][ T7539] ? __pfx_do_fault+0x10/0x10 [ 195.924368][ T7539] ? rcu_read_unlock+0x2d/0xb0 [ 195.929171][ T7539] ? rcu_read_unlock+0x2d/0xb0 [ 195.934011][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.939675][ T7539] __handle_mm_fault+0x150b/0x2f60 [ 195.944825][ T7539] ? lock_vma_under_rcu+0x11d/0x590 [ 195.950050][ T7539] ? __pfx___handle_mm_fault+0x10/0x10 [ 195.955541][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.961202][ T7539] ? lock_vma_under_rcu+0x17c/0x590 [ 195.966441][ T7539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.972105][ T7539] handle_mm_fault+0x363/0xa20 [ 195.976913][ T7539] do_user_addr_fault+0x59c/0x12f0 [ 195.982064][ T7539] exc_page_fault+0x6f/0xd0 [ 195.986594][ T7539] asm_exc_page_fault+0x26/0x30 [ 195.991456][ T7539] RIP: 0033:0x7f867c76dc88 [ 195.995878][ T7539] Code: fc 89 37 c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 c5 fa 7f 07 c5 fa 7f 4c 17 f0 c3 66 0f 1f 84 00 00 00 00 00 48 8b 4c 16 f8 48 8b 36 <48> 89 37 48 89 4c 17 f8 c3 c5 fe 6f 54 16 e0 c5 fe 6f 5c 16 c0 c5 [ 196.015511][ T7539] RSP: 002b:00007ffe1e3682a8 EFLAGS: 00010202 [ 196.021602][ T7539] RAX: 0000200000000280 RBX: 0000000000000004 RCX: 0030626c6c756e2f [ 196.029586][ T7539] RDX: 000000000000000c RSI: 6c756e2f7665642f RDI: 0000200000000280 [ 196.037571][ T7539] RBP: fffffffffffffffe R08: 0000001b2c220000 R09: 0000000000000001 [ 196.045551][ T7539] R10: 7ffffffffffffff3 R11: 0000000000000009 R12: 00007ffe1e3683d0 [ 196.053528][ T7539] R13: 00007f867ca25fac R14: 000000000002fab5 R15: 00007ffe1e3683b0 [ 196.061525][ T7539] [ 196.064541][ T7539] Modules linked in: [ 196.072055][ T7539] ---[ end trace 0000000000000000 ]--- [ 196.103883][ T7539] RIP: 0010:__filemap_add_folio+0xfe6/0x1290 [ 196.103943][ T7539] Code: 10 bb ff 48 c7 c6 80 56 1f 8c 4c 89 ef e8 c2 53 13 00 90 0f 0b e8 ca 10 bb ff 48 c7 c6 e0 56 1f 8c 4c 89 ef e8 ab 53 13 00 90 <0f> 0b e8 b3 10 bb ff 90 0f 0b 90 e9 12 fc ff ff e8 a5 10 bb ff 48 [ 196.103981][ T7539] RSP: 0018:ffffc90004da77d8 EFLAGS: 00010293 [ 196.104021][ T7539] RAX: 0000000000000000 RBX: 0000000000112cc0 RCX: 0000000000000000 [ 196.104046][ T7539] RDX: ffff88802bfbbe80 RSI: ffffffff82667858 RDI: ffff88802bfbc344 [ 196.104073][ T7539] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 196.104097][ T7539] R10: ffffffff8fef6e6b R11: 0000000000000001 R12: 0000000000000002 [ 196.104122][ T7539] R13: ffffea0001dcee40 R14: 0000000000000000 R15: 1ffff920009b4f26 [ 196.104150][ T7539] FS: 0000555578dcc500(0000) GS:ffff88812247a000(0000) knlGS:0000000000000000 [ 196.104185][ T7539] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.104212][ T7539] CR2: 00007fb53055da08 CR3: 000000005b908000 CR4: 0000000000350ef0 [ 196.104241][ T7539] Kernel panic - not syncing: Fatal exception [ 196.205228][ T7539] Kernel Offset: disabled [ 196.209547][ T7539] Rebooting in 86400 seconds..