last executing test programs: 1m35.948089402s ago: executing program 3 (id=136): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000002680)="e7", 0x1) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7e6b, 0x0, 0x3}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x800, 0x0, 0x0, 0x0, 0xbdc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1m34.088609117s ago: executing program 1 (id=147): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m33.028384443s ago: executing program 1 (id=153): socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000080), 0x86, 0x48e, &(0x7f0000000400)="$eJzs3EtvVFUcAPD/nXaKFUoLPnkoo0hsRFtaUFmYGI0mbExMdKHLWipBChioiRAiaAwujZ9AXZr4CVzpxqgrjVvdGxNi2IguzJj7KlM6rdPpTKcyv18y7Tn3dc7/nnt6H+dOA+hbtfRHErEtIn6JiNE8u3SBWv7rxvVLs39dvzSbRL3+yh9Jttyf1y/NlotuK35vLbY5XomofJjEniblnr9w8dTM/PzcuSI/uXD67cnzFy4+cfL0zIm5E3Nnpo8ePXJ46umnpp/sSJwjaV13v3d2765jr3/y0mw93vj+y7T+A8X8xjhyY+susxa1GI56vbJk6lD288C6t765jDSkk8EeVoQ1SY//tLmqWf8fjYG42Xij8eIHPa0c0FX1er2+Y9nU/KxYOZBk84HblT4O/ao846f3v+VnY69Aeuvac/kNUBr3jeKTzxmM9L49Gcvv2Ae6VP62iHjtyt+fpp9o+hwCAKCzvk6vfx5vdv1XiXsblttejA2NRcTBiNgZEXdFxN0RcU9Etux9EXH/Gsuv3ZLPy682TPlpuN3YWpFe/z1TjG0tvf5bHLUZGyhyI1n81eTNk/Nzh4p9Mh7VLWl+apUyvnnh54+zRJNIag3Xf+knLb+8Fizq8fvglqXrHJ9ZmFlv3KVr70fsHny2SfzJ4khAEhG7ImJ3G9tP99nJx77Ym6a3b10+/7/jX0UHxpnqn0c8mrf/lbgl/lKSl7TS+OTkHTE/d2iyPCqW++HHqy835huP7loWRpvxd0Da/nc2Pf6L+MtuUI7Xnl97GVd//WjFe5p2j/+h5NUsPVRMe3dmYeHcVMRQMWHJ9Omb65b5cvk0/vH9zfv/zoh/PivW2xMR6UH8QEQ8GBH7iro/FBEPR8T+VeL/7vlH3lp9D/W2/Y+v1v4RY0kRf+rc4sB964mBU99+tVL5rbX/kSw1Xkxp5e9fqxVsd78BAADA/0klG4NOKhOL6UplYiJ/h7987HKwFu+cOZ6PVY9FtVI+6RpteB46VTwbLvPTt+QPR8SO7E2j4Sw/MXt2fqTHsUO/27pC/0/91q2XXoDNY03jaEn36gFsPN/XhP7VvP939b0rYJNw/of+pf9D/2rW/y9H3OhBVYAN5vwP/av1/u+NALjdOP9D/9L/oS8t/0r8cPGvE9r5pv/NxM5j61p9rYnqBpbV4cRAl7Ycjf+0owuJqPR817WfqGyGauwrElsiotW1Lje0aXna7kYNq/M9/KMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQQf8GAAD//4F+194=") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x6, 0x10, 0x0, 0x7fff7ffe}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m32.868673387s ago: executing program 3 (id=155): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000d80)='./tracing\x00', &(0x7f0000000dc0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e00)='./tracing/uprobe_events\x00', 0x601, 0xd) 1m32.645762562s ago: executing program 3 (id=156): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') r0 = open(&(0x7f00000001c0)='./mnt\x00', 0x8000, 0x129) lseek(r0, 0x2, 0x0) getdents64(r0, 0x0, 0x0) 1m32.504365516s ago: executing program 1 (id=157): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="e0"], 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m32.395725998s ago: executing program 3 (id=158): socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000080)={[{@inlinecrypt}, {@debug}, {@usrquota}, {@lazytime}]}, 0x1, 0x50f, &(0x7f0000000fc0)="$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") creat(&(0x7f00000000c0)='./file1\x00', 0x31) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e20, 0x0, 0x4e24, 0x80, 0x2, 0xa0, 0xa0, 0x29}, {0x104, 0x5, 0x3, 0x9, 0x0, 0x2000002, 0x9, 0x4}, {0x401, 0x5, 0x6, 0x2}, 0x0, 0xfffffffe, 0x2, 0x0, 0x2, 0x3}, {{@in6=@remote, 0x4d4, 0x32}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3505, 0x0, 0x1, 0x9, 0x8, 0x0, 0x6}}, 0xe8) r0 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x8210, 0x2, 0x0, 0x42}, &(0x7f00000000c0), &(0x7f0000011000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) 1m32.010909347s ago: executing program 1 (id=159): mkdirat(0xffffffffffffff9c, &(0x7f0000009f00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000009f40)='./debug\x00', &(0x7f0000009f80)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000009fc0)='./debug/dynamic_debug/control\x00', 0x802, 0x88) write(r0, &(0x7f000000a000)='+p', 0x2) syz_mount_image$ocfs2(&(0x7f0000000480), &(0x7f000000a080)='./debug/dynamic_debug/control\x00', 0x1263808, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32], 0xfc, 0x4714, &(0x7f000000a100)="$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") r1 = openat$comedi(0xffffffffffffff9c, &(0x7f000000e840)='/dev/comedi4\x00', 0x100400, 0x0) ioctl$COMEDI_INSNLIST(r1, 0x8010640b, &(0x7f000000e880)={0x6666666666662e7, &(0x7f000000e8c0)}) 1m31.805621332s ago: executing program 3 (id=162): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) listen(r0, 0x5) r1 = socket$inet_smc(0x2b, 0x1, 0x0) accept(r0, 0x0, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) 1m31.217252047s ago: executing program 3 (id=163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x3c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0xe}}]}}]}, 0x3c}}, 0x0) 1m31.09537358s ago: executing program 32 (id=163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x3c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0xe}}]}}]}, 0x3c}}, 0x0) 1m29.305052003s ago: executing program 1 (id=170): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x10000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000100)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000108)=0x4, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f000000010c)=0x4, 0x4) bind$xdp(r0, &(0x7f0000000200)={0x2c, 0x0, 0x2, 0x0, 0x0}, 0x10) recvmmsg(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, 0x0}, 0xec4d}], 0x2, 0x40, 0x0) 1m28.59822635s ago: executing program 1 (id=175): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905899b", @ANYRESOCT], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000008c0), 0x4cc6, 0x84803) 1m27.070812787s ago: executing program 33 (id=175): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905899b", @ANYRESOCT], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000008c0), 0x4cc6, 0x84803) 1m14.093703712s ago: executing program 0 (id=227): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)='3', 0x1}], 0x1, 0x800, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) 1m13.576723855s ago: executing program 0 (id=229): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c00000010003904000040000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300f7"], 0x5c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1m13.212975664s ago: executing program 0 (id=231): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x7f, r2}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, 0x1a, r2}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) 1m12.560696949s ago: executing program 0 (id=232): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x909842, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) 1m11.628792832s ago: executing program 0 (id=234): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x42080, 0x0, 0x0, 0x0, 0x0, 0x0) 1m11.364169519s ago: executing program 0 (id=237): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x60b, 0x0) 56.207477576s ago: executing program 34 (id=237): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x60b, 0x0) 10.560315744s ago: executing program 6 (id=406): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaac8f, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000011000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.451335661s ago: executing program 6 (id=413): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='100', 0x3) pipe(0x0) mkdirat(0xffffffffffffffff, 0x0, 0x1ff) mount(0x0, &(0x7f0000001000)='./dev\x00', &(0x7f0000001040)='devtmpfs\x00', 0x0, 0x0) unshare(0x40000000) 7.231664255s ago: executing program 7 (id=424): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x84, 0x2c, 0x401, 0x4000, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x20, 0x7}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) write(r0, &(0x7f0000000700)="ffffffffffffc011223344554305", 0xe) 6.60189893s ago: executing program 7 (id=428): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000000480)='GPL\x00', 0x2, 0xfd90, &(0x7f00000004c0)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000600), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000640)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000740)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="400104"], 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.563515311s ago: executing program 6 (id=429): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x9}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x54, &(0x7f0000000000)='wg2\x00', 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x803, 0x9, 0x0, 0x400, 0x80, 0x89, 0xfffffffffffffffd, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.003275725s ago: executing program 6 (id=432): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22ffe6) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x48, 0x1, 0xc, 0x5}, {0x6}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 5.849149508s ago: executing program 7 (id=433): setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x57) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000140)=""/80, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000004100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x25000}) 5.600085544s ago: executing program 7 (id=436): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000100)={0x20, 0xe, 0xf, "cf0d416510d44a33a84085a068b520"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 5.078475937s ago: executing program 4 (id=440): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x12, r2, 0x937d000) r3 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x10d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x60, 0x1, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0xa, 0x10, 0x1, {0x22, 0xf77}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xda, 0x7, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xc5, 0x8, 0x8}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x0, 0x3b, 0x5, 0x8, 0x8}, 0xd5, &(0x7f0000000140)={0x5, 0xf, 0xd5, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x101, 0xff00, 0x7, [0xc0]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "f93ba1e69d10bfabe9955558a5d790aa"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x8, 0x9, 0x1000}, @generic={0x8f, 0x10, 0x4, "0818ef4cbf1b16b15c333d08925c65999f5b1d0ddd94e9ed8cde0e486bbfe49e853ec5f6111ca8699e61d5e45687850b194b704e4d610e4d87892921c4f7a8ff1c3a27c1d07e99a7f8a31d2c5b3d193c4dba501fd07db727dddb7f825a343c52c08802f989361d7eae851991aa04c9f49c05c39ce5f74376ecfe0c7515adaa777ab045e337069756429086b9"}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x0, 0xf, 0x200, [0x101df80]}]}, 0x1, [{0xdc, &(0x7f0000000240)=@string={0xdc, 0x3, "5f63a32e97b6038a0e33cea330204846c37fadec338a369ed1c57dd696c30bc489d093ca041470cfcb2e5138f3c77b632580dbf1dedbfaae389276358a6c9751afbc7d4a26999c73c04dd742b67ef5ea85013d1f47cd1268ce6a88f3ba5a0bea405d99768065cff84b32f6b29b86e09f23de22993ba77800a3ef754154efd2ebabf34d24daed45addde536b07ba74ae38a4cc77b0558a52f953246d5fdf36d23cd69913844ca690236d4d267cf6dc12f03fe215d034621e25aa029e95b0737d08b8e0eedaf4f5ff58d96dc6a6ad56780221b151ca282ddb4005c"}}]}) syz_usb_control_io$hid(r3, &(0x7f0000000540)={0x24, &(0x7f0000000380)={0x0, 0x19, 0xd4, {0xd4, 0x31, "28b8a3af0d32fdbd08ca241a3a4e9951275d79c986c68225bc9bf8f9a06c083ac2d80a83596adbf593ceef2e7e007952642535669489597686ce7ba25cdd710a18d024ffc2d8cb4d30a86a4ce1ac3ba744f02b9a3e66242a603e0a4d8908e02ae27845dce45a0b32b32fc2ae920e4bf332375be9b4af798e1672880fb3b1c2d0079e93ce2c251307c88e5eda9d12e1e873c0f9155ebf76589b05a4aaa51e39e212d459c961336ae6fe26fd3bc26195e680048498b50bc8358d63e2db8756105947a080af894da0bb12985ee08a6998a25ff7"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x447}}, &(0x7f00000004c0)={0x0, 0x22, 0x21, {[@global=@item_012={0x2, 0x1, 0x6, 'tG'}, @global=@item_4={0x3, 0x1, 0x8, "271abe33"}, @local=@item_012={0x0, 0x2, 0xe}, @global=@item_4={0x3, 0x1, 0xb, "d62699c3"}, @main=@item_4={0x3, 0x0, 0xb, "d38f7730"}, @local=@item_012={0x2, 0x2, 0x5, "4aca"}, @local=@item_4={0x3, 0x2, 0xb, "2070be12"}, @local=@item_012={0x0, 0x2, 0x8}, @global=@item_4={0x3, 0x1, 0xa, "f4017634"}]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc, 0xd, 0x1, {0x22, 0xea}}}}, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x20, 0x11, 0xf4, "81569b0cb3039ef7546440bc56da3ec293bdda529cf3c39751ec8d26713cfc55dab72d386df53d22804228b5a4f2254763d206c7d296008376512848bdedc5c8b3aacfc80550a8d580976dad1f3f80ad48bb3b9b9ebb5a709763b540890a9413386b36f225542224ed2c594cab761dde4eef96c48cee2e5629362214e3a92d4641b04826e4c46615eaf0647b7ac59ab123a46376876b310d7750831ed39fdb9d0dd2730083338504c61a6640d7e6af2153d8676dca6f61979fc1621fff1ee43bf832f21bbe15275b28d5591c106453153fa758a1cf7ef10f01c7fa5a4c86a5fa22c9a9c37ad93588c4708ff96fd49534232d5b63"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xad}, &(0x7f00000006c0)={0x0, 0x8, 0x1}, &(0x7f0000000700)={0x20, 0x1, 0x1d, "cd561be1fbfac4e04f927245489926bf0c76dc6a45840cab083886796a"}, &(0x7f0000000740)={0x20, 0x3, 0x1, 0x9}}) futex(0x0, 0x10b, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) pwritev(r1, &(0x7f0000001c80)=[{&(0x7f0000001880)="89", 0x1}], 0x1, 0x80000000, 0x6a) 4.645850127s ago: executing program 6 (id=443): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56561, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x0, 0xfe7d, 0xd, 0x2, 0x4, 0x9, 0x1}}, {0x6, 0x2, [0xfffc]}}]}]}, 0x5c}}, 0x8014) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x810, &(0x7f0000000140)={[{@enospc_debug}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@notreelog}, {@discard_async}, {@max_inline={'max_inline', 0x3d, [0x78, 0x33, 0x70, 0x34, 0x70, 0x36]}}]}, 0x1, 0x50f3, &(0x7f0000000880)="$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") sendto$inet(r3, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 4.302124346s ago: executing program 5 (id=445): sendmmsg(0xffffffffffffffff, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)}], 0x1}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{0xffff1000, 0xeeee8000, 0x4, 0xf6, 0x2, 0xf3, 0xd7, 0x8, 0x7, 0x1, 0x9, 0x1}, {0x50000, 0xc0a0c0f0f5000ded, 0xd, 0x5, 0x3, 0x8, 0x5, 0x0, 0x80, 0xfc, 0xfc, 0x4}, {0x200000, 0x4000, 0xb, 0x6, 0xff, 0x3, 0x0, 0x6, 0xef, 0x27, 0xd5, 0x2}, {0x4000, 0x6000, 0x9, 0x9, 0x8f, 0x4, 0x81, 0xfc, 0xb, 0x1, 0x19, 0x3}, {0xffffffff, 0x0, 0x3, 0x2, 0x6, 0x1, 0x9, 0x2, 0x3, 0x3, 0x0, 0xe4}, {0x200000, 0xffff1000, 0xf, 0x0, 0x3, 0x0, 0xde, 0x9, 0x3, 0x0, 0x4, 0x30}, {0xdddd0000, 0x9000, 0xc, 0x3, 0x8, 0x3, 0x2, 0x9, 0x91, 0x8, 0x9, 0x88}, {0x8000000, 0xeeee0000, 0x10, 0x6, 0xc2, 0x8, 0x6, 0x9, 0x7, 0x3, 0x80, 0x68}, {0x6000, 0x8000}, {0xe9eb89d253be8b8b, 0x9}, 0x50000, 0x0, 0x0, 0x400408, 0x3, 0x8000, 0xeeef0000, [0x6, 0x5, 0x5, 0xe]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x2008, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.71294032s ago: executing program 5 (id=447): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x4f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x3ffff9, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85ff, 0x101, 0x286, 0x0, 0x0, 0x1, 0x8, 0x5, 0x101, 0x100000002], 0x4, 0x290fc4}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.630200212s ago: executing program 2 (id=448): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./myconfig\x00', &(0x7f0000000300)='configfs\x00', 0x2000000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./myconfig/usb_gadget/g1/functions/SourceSink.0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/SourceSink.0/pattern\x00', 0x1, 0x0) rmdir(&(0x7f0000000800)='./myconfig/usb_gadget/g1/functions/SourceSink.0\x00') syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 3.441305397s ago: executing program 2 (id=449): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x20, 0x1, {{0x0, 0x0, 0x2}}}]}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000600)=ANY=[], 0x3a) 2.917152559s ago: executing program 2 (id=450): r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x4, 0x200, 0x8, 0x84, 0x2, 0x7, 0xc4, 0x1, 0x0, 0x9, 0x1, 0x8, 0x9}, {0x8, 0xaef2, 0xa, 0x5, 0xc, 0x1, 0x9, 0x10, 0x6, 0x16, 0x1, 0x6, 0x12005}, {0xfffffffc, 0x807, 0xa, 0x13, 0x2, 0x14, 0x40, 0xfb, 0x72, 0xfb, 0x1, 0x3, 0x2}], 0x11}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x1, 0x400000000006, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0xffe, 0x0, 0x2a, 0x14, 0xffff, 0x0, 0x0, 0x8, 0x7], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.660385846s ago: executing program 5 (id=451): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x80, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_ACT={0x4c, 0x3, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000, 0x20, 0x7}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[], 0xfdef) 2.4978764s ago: executing program 2 (id=452): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000a00)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 2.242667216s ago: executing program 5 (id=453): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2002, 0xa) 2.218312966s ago: executing program 2 (id=454): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="c3", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) write(r1, &(0x7f0000000040)="b4dbb0a7d7d9aba7846bc351cad49b064925919b0a", 0x15) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0xd, @loopback, 0xe91}}}, 0x84) 1.933148633s ago: executing program 4 (id=455): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xd54895b78f604514) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000022c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000042c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000043c0)="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", 0x2000, &(0x7f00000063c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006480)={0x6a, 0x0, 0x100, [{{0x4, 0x3, 0x8, 0x3, 0x9, 0x10005, {0x6, 0x9, 0x4, 0xa, 0x8, 0x0, 0x2, 0x1, 0x6, 0x8000, 0xde, 0x0, 0x0, 0x8001, 0x80000000}}, {0x400000000000001, 0x1, 0x1, 0x32540194, '\x00'}}, {{0x4, 0x1, 0x7fd, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x3, 0x9, 0x3, 0x6, 0x5, 0x2, 0x2, 0x6, 0x7, 0x6000, 0x0, r2, r3, 0x1, 0x3}}, {0x0, 0x7, 0x1, 0x300, '\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) 1.789413377s ago: executing program 5 (id=456): setresgid(0xee00, 0xee01, 0x0) setfsgid(0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@delalloc}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}]}, 0x4, 0x4f6, &(0x7f0000000540)="$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") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) fchown(r0, 0xffffffffffffffff, 0xee01) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r2, r2, 0x0, 0xfffe80) 1.787592257s ago: executing program 7 (id=457): fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='270', 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)='*', 0xfdef}], 0x1) 1.481031544s ago: executing program 4 (id=458): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x2000008, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.325937548s ago: executing program 6 (id=459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000080)=ANY=[], 0x25, 0x20d, &(0x7f0000000400)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) lseek(r1, 0x2, 0x0) getdents(r1, 0x0, 0x58) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000003c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000005f80)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 638.237935ms ago: executing program 2 (id=460): r0 = inotify_init() r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=2.1,nodfs\x00') r2 = accept(r1, 0x0, 0x0) sendto$inet(r2, &(0x7f0000002000)="00000080fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100100200000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000000000000000800000000000", 0x84, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 426.23333ms ago: executing program 4 (id=461): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x60000000000, 0x7, 0xfffffffffffffffd, 0x41, 0xc3d, 0x0, 0x100, 0x1000000003, 0xa1a, 0x7, 0x5, 0x79, 0x3, 0x3], 0x3332d000, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000400)=@x86={0x1, 0xb, 0x5, 0x0, 0x5, 0x1, 0x2, 0x5, 0xff, 0xf6, 0x5, 0x9, 0x0, 0x1, 0x8, 0x2, 0x6, 0x4, 0x7f, '\x00', 0xdc, 0xe8}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x9, 0x0, 0x6, 0x6, 0xa}, {0x2, 0xa000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x9}, {0xeeee0000, 0x1000, 0x3, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0xc2, 0x6, 0x6, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0xeeee0000, 0x0, 0x78, 0x8, 0x0, 0xff, 0x1c, 0xa3, 0xed, 0x5}, {0xeeee8000, 0xfec00000, 0xa, 0x1, 0x0, 0x0, 0x7, 0x20, 0x0, 0x0, 0x0, 0x14}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x3000, 0xfffe}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0xe, 0xf801, 0x3000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 311.152923ms ago: executing program 7 (id=462): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000001, 0x0, 0x3}, @loopback, @private=0xa010101}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x5}, 0x0) write(r0, &(0x7f00000004c0)="6943c37ad6b725c8d784a002772cbf93b5c0fbbed155bfc0", 0x18) 311.001603ms ago: executing program 5 (id=463): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70ad2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xe}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x0, 0xa, 0x80, 0xf, 0x0, 0x7, 0x2, 0x8, 0x6, 0xabb, 0xa, 0x0, 0x9c, 0xf, 0x8, 0x1}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 189.179036ms ago: executing program 4 (id=464): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)="7042b44497151f598cce0084e6469d1110511a23ca06a885fbf2ed294987d96e2e90ee089513ba6e8627059f70a63634f4334fb65429b7db6dee0d901e5cc846f1c0369185056ba924068d8e18009309b5417996583f7b0a0bc2580046edb6755172a2869d1bcc3f154f850a4fe829bb43a2059f03b39c15c8eda7ab30b9c9a2ee0a203fb08039238bcd6a5e836350baedf9402d60c1b52ee703ad4d8ec5976224558de062e0ebd521276ea905fe2977161c1125c5a7c927cdc05054bacf8326b86d8073d0baef0b6e7617a4", 0xcc}], 0x1, 0x7ff, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x2, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 4 (id=465): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) gettid() unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0) kernel console output (not intermixed with test programs): usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.573090][ T4759] EXT4-fs (loop2): Test dummy encryption mode enabled [ 96.593431][ T4759] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 96.652718][ T4759] EXT4-fs error (device loop2): ext4_orphan_get:1436: comm syz.2.145: bad orphan inode 131083 [ 96.675968][ T4759] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 96.697220][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 96.743493][ T4759] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 96.997194][ T13] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 97.017581][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.038143][ T13] usb 5-1: Product: syz [ 97.045362][ T4780] FAULT_INJECTION: forcing a failure. [ 97.045362][ T4780] name failslab, interval 1, probability 0, space 0, times 0 [ 97.054476][ T13] usb 5-1: Manufacturer: syz [ 97.077274][ T13] usb 5-1: SerialNumber: syz [ 97.108920][ T13] usb 5-1: config 0 descriptor?? [ 97.137154][ T4780] CPU: 0 PID: 4780 Comm: syz.2.151 Not tainted syzkaller #0 [ 97.146815][ T4780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 97.158877][ T4780] Call Trace: [ 97.162518][ T4780] [ 97.165990][ T4780] dump_stack_lvl+0x188/0x250 [ 97.170780][ T4780] ? show_regs_print_info+0x20/0x20 [ 97.176178][ T4780] ? load_image+0x410/0x410 [ 97.181058][ T4780] ? __might_sleep+0xf0/0xf0 [ 97.186725][ T4780] ? __lock_acquire+0x7d40/0x7d40 [ 97.192031][ T4780] ? crypto_alg_lookup+0x186/0x1d0 [ 97.197266][ T4780] should_fail+0x383/0x4b0 [ 97.201972][ T4780] should_failslab+0x5/0x20 [ 97.206653][ T4780] slab_pre_alloc_hook+0x51/0xc0 [ 97.211691][ T4780] __kmalloc_node+0x6d/0x3a0 [ 97.217219][ T4780] ? crypto_create_tfm_node+0x72/0x340 [ 97.222973][ T4780] crypto_create_tfm_node+0x72/0x340 [ 97.229033][ T4780] ? crypto_alg_mod_lookup+0x47f/0x6d0 [ 97.235012][ T4780] crypto_alloc_tfm_node+0x177/0x360 [ 97.240605][ T4780] sctp_inet_listen+0x5b0/0xa90 [ 97.245677][ T4780] ? sctp_sock_migrate+0xf70/0xf70 [ 97.252013][ T4780] ? aa_sk_perm+0x7dc/0x910 [ 97.256649][ T4780] ? aa_af_perm+0x340/0x340 [ 97.261497][ T4780] ? bpf_lsm_socket_listen+0x5/0x10 [ 97.267479][ T4780] __sys_listen+0x19d/0x220 [ 97.272765][ T4780] __x64_sys_listen+0x56/0x60 [ 97.278598][ T4780] do_syscall_64+0x4c/0xa0 [ 97.283731][ T4780] ? clear_bhb_loop+0x30/0x80 [ 97.288865][ T4780] ? clear_bhb_loop+0x30/0x80 [ 97.293657][ T4780] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.299804][ T4780] RIP: 0033:0x7f2cb3a63559 [ 97.304249][ T4780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.325167][ T4780] RSP: 002b:00007f2cb1cbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 97.334339][ T4780] RAX: ffffffffffffffda RBX: 00007f2cb3ceafa0 RCX: 00007f2cb3a63559 [ 97.343155][ T4780] RDX: 0000000000000000 RSI: 00000000fffffff8 RDI: 0000000000000003 [ 97.351407][ T4780] RBP: 00007f2cb3afa8b0 R08: 0000000000000000 R09: 0000000000000000 [ 97.360541][ T4780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.370110][ T4780] R13: 00007f2cb3ceb038 R14: 00007f2cb3ceafa0 R15: 00007ffdf49c9dc8 [ 97.378643][ T4780] [ 97.395696][ T4306] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.405849][ T13] gspca_main: spca508-2.14.0 probing 041e:4018 [ 97.429945][ T4780] sctp: failed to load transform for md5: -12 [ 97.509453][ T4785] loop1: detected capacity change from 0 to 512 [ 97.543263][ T4787] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 97.575632][ T4785] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 97.593940][ T4785] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c01c, mo2=0002] [ 97.615404][ T4256] usb 4-1: USB disconnect, device number 4 [ 97.622312][ T13] gspca_spca508: reg_read err -32 [ 97.677264][ T13] gspca_spca508: reg_read err -32 [ 97.687320][ T4785] System zones: 1-12 [ 97.692500][ T4785] EXT4-fs (loop1): orphan cleanup on readonly fs [ 97.700430][ T4306] usb 1-1: Using ep0 maxpacket: 16 [ 97.720548][ T13] gspca_spca508: reg_read err -32 [ 97.756601][ T4785] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #13: comm syz.1.153: iget: bad i_size value: 12154761577498 [ 97.805642][ T4785] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.153: couldn't read orphan inode 13 (err -117) [ 97.839276][ T4785] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.862739][ T4306] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 97.892442][ T4785] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #2: block 3: comm syz.1.153: lblock 0 mapped to illegal pblock 3 (length 1) [ 97.900858][ T4306] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 55, changing to 9 [ 97.958590][ T4785] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.153: error -117 reading directory block [ 97.982881][ T13] gspca_spca508: reg_read err -71 [ 98.003057][ T4306] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 8496, setting to 1024 [ 98.015220][ T13] gspca_spca508: reg write: error -71 [ 98.034275][ T13] spca508: probe of 5-1:0.0 failed with error -71 [ 98.061749][ T4306] usb 1-1: config 0 interface 0 has no altsetting 0 [ 98.081153][ T13] usb 5-1: USB disconnect, device number 3 [ 98.228856][ T4802] loop3: detected capacity change from 0 to 512 [ 98.272472][ T4306] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 98.295126][ T4306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.296099][ T4802] EXT4-fs (loop3): inline encryption not supported [ 98.314610][ T4306] usb 1-1: Product: syz [ 98.324533][ T4306] usb 1-1: Manufacturer: syz [ 98.337120][ T4306] usb 1-1: SerialNumber: syz [ 98.358351][ T4306] usb 1-1: config 0 descriptor?? [ 98.440116][ T4802] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec018, mo2=0002] [ 98.477136][ T4802] System zones: 0-2, 18-18, 34-35 [ 98.493137][ T4802] EXT4-fs (loop3): mounted filesystem without journal. Opts: inlinecrypt,debug,usrquota,lazytime,,errors=continue. Quota mode: writeback. [ 98.518999][ T4802] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.660787][ T4306] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 98.698050][ T4196] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 98.755032][ T4196] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 99.004555][ T2239] usb 1-1: USB disconnect, device number 4 [ 99.156904][ T4814] loop1: detected capacity change from 0 to 32768 [ 99.272868][ T4196] syz-executor (4196) used greatest stack depth: 20144 bytes left [ 99.345630][ T4316] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.449273][ T4813] loop2: detected capacity change from 0 to 32768 [ 99.459123][ T4316] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.574016][ T4316] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.647620][ T4813] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.160 (4813) [ 99.706491][ T4316] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.944073][ T4813] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 99.978413][ T4828] kvm: vcpu 0: requested 230 ns lapic timer period limited to 200000 ns [ 100.021644][ T4825] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.105538][ T4813] BTRFS info (device loop2): force zlib compression, level 3 [ 100.191866][ T4813] BTRFS error (device loop2): unrecognized mount option 'fragment=data' [ 100.306466][ T4813] BTRFS error (device loop2): open_ctree failed: -22 [ 100.427111][ T2283] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 100.681302][ T2283] usb 5-1: Using ep0 maxpacket: 32 [ 100.743335][ T4824] loop0: detected capacity change from 0 to 32768 [ 100.807179][ T2283] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 100.816870][ T2283] usb 5-1: config 2 has no interface number 0 [ 100.866307][ T2283] usb 5-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 100.936473][ T2283] usb 5-1: config 2 interface 88 has no altsetting 0 [ 101.137563][ T2283] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 101.187352][ T2283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 101.230820][ T2283] usb 5-1: Product: syz [ 101.235730][ T2283] usb 5-1: Manufacturer: syz [ 101.235759][ T2283] usb 5-1: SerialNumber: syz [ 101.324440][ T4832] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 101.613948][ T4832] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 101.877065][ T4302] Bluetooth: hci3: command 0x0409 tx timeout [ 101.915562][ T4825] chnl_net:caif_netlink_parms(): no params data found [ 101.974997][ T4870] loop2: detected capacity change from 0 to 512 [ 102.517135][ C0] net_ratelimit: 16 callbacks suppressed [ 102.709423][ T2283] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 102.767108][ T4870] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.176: inode has both inline data and extents flags [ 102.795288][ T4870] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.176: couldn't read orphan inode 15 (err -117) [ 102.890886][ T2283] asix: probe of 5-1:2.88 failed with error -71 [ 103.086616][ T4870] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,,errors=continue. Quota mode: writeback. [ 103.116943][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 103.272912][ T2283] usb 5-1: USB disconnect, device number 4 [ 103.366953][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 104.333093][ T4256] Bluetooth: hci3: command 0x041b tx timeout [ 105.056702][ T4895] loop4: detected capacity change from 0 to 512 [ 105.604369][ T4895] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,errors=remount-ro,mb_optimize_scan=0x0000000000000001,delalloc,data_err=ignore,. Quota mode: writeback. [ 105.631691][ T4895] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.042634][ T4895] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #2: comm syz.4.178: corrupted inode contents [ 106.166059][ T4825] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.263423][ T4895] EXT4-fs (loop4): Remounting filesystem read-only [ 106.292450][ T4825] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.307069][ T4895] EXT4-fs error (device loop4): ext4_dirty_inode:6087: inode #2: comm syz.4.178: mark_inode_dirty error [ 106.340385][ T4895] EXT4-fs (loop4): Remounting filesystem read-only [ 106.397290][ T4895] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #2: comm syz.4.178: corrupted inode contents [ 106.427572][ T4825] device bridge_slave_0 entered promiscuous mode [ 106.473903][ T4895] EXT4-fs (loop4): Remounting filesystem read-only [ 106.527482][ T4825] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.542352][ T4895] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.178: mark_inode_dirty error [ 106.583267][ T4825] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.612361][ T4895] EXT4-fs (loop4): Remounting filesystem read-only [ 106.624046][ T4825] device bridge_slave_1 entered promiscuous mode [ 106.667280][ T4937] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #2: comm syz.4.178: corrupted inode contents [ 106.693561][ T4316] device hsr_slave_0 left promiscuous mode [ 106.728620][ T4316] device hsr_slave_1 left promiscuous mode [ 106.734505][ T4937] EXT4-fs (loop4): Remounting filesystem read-only [ 106.745905][ T4316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.747320][ T4937] EXT4-fs error (device loop4): ext4_dirty_inode:6087: inode #2: comm syz.4.178: mark_inode_dirty error [ 106.783578][ T4256] Bluetooth: hci3: command 0x040f tx timeout [ 106.787162][ T4316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.791991][ T4937] EXT4-fs (loop4): Remounting filesystem read-only [ 106.824440][ T4937] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #2: comm syz.4.178: corrupted inode contents [ 106.851128][ T4316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.859273][ T4316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.873761][ T4316] device bridge_slave_1 left promiscuous mode [ 106.883515][ T4316] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.912576][ T4316] device bridge_slave_0 left promiscuous mode [ 106.919466][ T4316] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.927839][ T4937] EXT4-fs (loop4): Remounting filesystem read-only [ 107.001739][ T4938] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #2: comm syz.4.178: corrupted inode contents [ 107.015425][ T4316] device veth1_macvtap left promiscuous mode [ 107.039066][ T4316] device veth0_macvtap left promiscuous mode [ 107.055820][ T4316] device veth1_vlan left promiscuous mode [ 107.063724][ T4316] device veth0_vlan left promiscuous mode [ 107.091369][ T4938] EXT4-fs (loop4): Remounting filesystem read-only [ 107.099749][ T4948] loop0: detected capacity change from 0 to 32768 [ 107.112087][ T4938] EXT4-fs error (device loop4): ext4_append:88: inode #2: comm syz.4.178: mark_inode_dirty error [ 107.138377][ T4935] loop2: detected capacity change from 0 to 32768 [ 107.157911][ T4938] EXT4-fs (loop4): Remounting filesystem read-only [ 107.166455][ T4938] EXT4-fs error (device loop4) in ext4_append:100: Corrupt filesystem [ 107.185369][ T4938] EXT4-fs (loop4): Remounting filesystem read-only [ 107.314206][ T4948] XFS (loop0): Mounting V5 Filesystem [ 107.501578][ T4948] XFS (loop0): Ending clean mount [ 107.556981][ C1] net_ratelimit: 53 callbacks suppressed [ 107.670497][ T4198] XFS (loop0): Unmounting Filesystem [ 108.377036][ T4256] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 108.455550][ T4316] team0 (unregistering): Port device team_slave_1 removed [ 108.517421][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 108.565609][ T4316] team0 (unregistering): Port device team_slave_0 removed [ 108.600328][ T4316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.720599][ T4316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.797392][ T4256] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.838303][ T4885] Bluetooth: hci3: command 0x0419 tx timeout [ 108.894579][ T4984] loop4: detected capacity change from 0 to 8192 [ 109.001000][ T4984] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.022176][ T4256] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.037271][ T4256] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.077014][ T4256] usb 3-1: Product: syz [ 109.089331][ T4256] usb 3-1: Manufacturer: syz [ 109.107035][ T4256] usb 3-1: SerialNumber: syz [ 109.175599][ T4316] bond0 (unregistering): Released all slaves [ 109.372806][ T4969] udc-core: couldn't find an available UDC or it's busy [ 109.407365][ T4969] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 109.500541][ T4256] cdc_ether 3-1:1.0: skipping garbage [ 109.515034][ T4945] rxe_eth0 speed is unknown, defaulting to 1000 [ 109.522919][ T4256] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 109.573804][ T4256] usb 3-1: USB disconnect, device number 3 [ 109.642821][ T4825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.727606][ T4825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.808832][ T4988] loop0: detected capacity change from 0 to 32768 [ 109.820981][ T5002] gadgetfs: bound to dummy_udc driver [ 109.972235][ T4825] team0: Port device team_slave_0 added [ 110.023988][ T4825] team0: Port device team_slave_1 added [ 110.077188][ T4256] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 110.357155][ T4256] usb 3-1: Using ep0 maxpacket: 8 [ 110.364415][ T4825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.387172][ T4825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.516777][ T5020] loop0: detected capacity change from 0 to 4096 [ 110.524824][ T4256] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 110.531583][ T4825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.549982][ T4256] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 110.583722][ T5020] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 110.597172][ T4261] Bluetooth: hci0: command 0x041b tx timeout [ 110.603785][ T4256] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.683089][ T4256] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 110.727323][ T4256] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 110.759684][ T4256] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.778812][ T4256] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 110.794663][ T4256] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.874235][ T4825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.891877][ T4825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.921581][ T4825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.147358][ T4256] usb 3-1: usb_control_msg returned -71 [ 111.154307][ T4256] usbtmc 3-1:16.0: can't read capabilities [ 111.184661][ T1171] ntfs3: loop0: ino=1b, Internal error [ 111.235763][ T4825] device hsr_slave_0 entered promiscuous mode [ 111.267176][ T1171] ntfs3: loop0: ntfs3_write_inode r=1b failed, -22. [ 111.312904][ T4256] usb 3-1: USB disconnect, device number 4 [ 111.360026][ T4825] device hsr_slave_1 entered promiscuous mode [ 111.433144][ T4825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.456869][ T4825] Cannot create hsr debugfs directory [ 111.478699][ T5033] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 111.539693][ T5033] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 111.848719][ T5052] loop2: detected capacity change from 0 to 512 [ 111.979347][ T5052] EXT4-fs (loop2): Ignoring removed nobh option [ 112.026032][ T4945] chnl_net:caif_netlink_parms(): no params data found [ 112.074927][ T5052] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.205: corrupted in-inode xattr [ 112.158488][ T5052] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.205: couldn't read orphan inode 15 (err -117) [ 112.242786][ T5052] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,quota,noload,user_xattr,block_validity,noinit_itable,grpquota,max_dir_size_kb=0x0000000000000009,nobh,,errors=continue. Quota mode: writeback. [ 112.410399][ T5052] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #2: block 4: comm syz.2.205: lblock 1 mapped to illegal pblock 4 (length 1) [ 112.497256][ T5067] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.507478][ T5067] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.516446][ T5067] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.525697][ T5067] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.597007][ C1] net_ratelimit: 39 callbacks suppressed [ 112.677267][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 113.027243][ T5087] FAULT_INJECTION: forcing a failure. [ 113.027243][ T5087] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 113.041765][ T5087] CPU: 0 PID: 5087 Comm: syz.2.210 Not tainted syzkaller #0 [ 113.049528][ T5087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 113.049582][ T5087] Call Trace: [ 113.049591][ T5087] [ 113.049600][ T5087] dump_stack_lvl+0x188/0x250 [ 113.049626][ T5087] ? show_regs_print_info+0x20/0x20 [ 113.049644][ T5087] ? load_image+0x410/0x410 [ 113.049666][ T5087] ? _raw_spin_lock_irq+0xb7/0xf0 [ 113.064019][ T5087] ? _raw_spin_lock_irqsave+0x100/0x100 [ 113.082101][ T5087] should_fail+0x383/0x4b0 [ 113.082152][ T5087] copy_page_from_iter_atomic+0x42e/0x14d0 [ 113.082183][ T5087] ? pipe_zero+0x380/0x380 [ 113.082205][ T5087] ? shmem_write_begin+0xcd/0x1a0 [ 113.082230][ T5087] generic_perform_write+0x30b/0x550 [ 113.082248][ T5087] ? atime_needs_update+0x770/0x770 [ 113.082279][ T5087] ? grab_cache_page_write_begin+0xa0/0xa0 [ 113.082298][ T5087] ? file_remove_privs+0x5d0/0x5d0 [ 113.082329][ T5087] ? rwsem_write_trylock+0x135/0x1c0 [ 113.082354][ T5087] ? clear_nonspinnable+0x60/0x60 [ 113.082384][ T5087] __generic_file_write_iter+0x261/0x4e0 [ 113.082402][ T5087] ? generic_write_checks+0x3be/0x460 [ 113.082429][ T5087] generic_file_write_iter+0xa6/0x1b0 [ 113.082451][ T5087] vfs_write+0x748/0xd70 [ 113.082475][ T5087] ? file_end_write+0x250/0x250 [ 113.082504][ T5087] ? mutex_lock_nested+0x17/0x20 [ 113.082522][ T5087] ? __fdget_pos+0x2bf/0x370 [ 113.082539][ T5087] ? ksys_write+0x70/0x260 [ 113.082557][ T5087] ksys_write+0x153/0x260 [ 113.107572][ T5087] ? __ia32_sys_read+0x80/0x80 [ 113.107603][ T5087] ? lockdep_hardirqs_on+0x94/0x140 [ 113.107627][ T5087] do_syscall_64+0x4c/0xa0 [ 113.107643][ T5087] ? clear_bhb_loop+0x30/0x80 [ 113.107660][ T5087] ? clear_bhb_loop+0x30/0x80 [ 113.124040][ T5087] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.124070][ T5087] RIP: 0033:0x7f2cb3a63559 [ 113.158349][ T5087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.158368][ T5087] RSP: 002b:00007f2cb1cbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 113.158387][ T5087] RAX: ffffffffffffffda RBX: 00007f2cb3ceafa0 RCX: 00007f2cb3a63559 [ 113.158400][ T5087] RDX: 000000000001000a RSI: 00002000000013c0 RDI: 0000000000000004 [ 113.158410][ T5087] RBP: 00007f2cb3afa8b0 R08: 0000000000000000 R09: 0000000000000000 [ 113.158421][ T5087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.158431][ T5087] R13: 00007f2cb3ceb038 R14: 00007f2cb3ceafa0 R15: 00007ffdf49c9dc8 [ 113.158457][ T5087] [ 113.455998][ T4945] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.486565][ T4945] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.524764][ T4945] device bridge_slave_0 entered promiscuous mode [ 113.632918][ T4945] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.647161][ T4945] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.675100][ T4945] device bridge_slave_1 entered promiscuous mode [ 113.863030][ T4945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.918876][ T4945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.983470][ T4825] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 114.061489][ T4825] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 114.149045][ T4825] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 114.193398][ T4945] team0: Port device team_slave_0 added [ 114.226117][ T4825] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 114.234835][ T5085] loop4: detected capacity change from 0 to 40427 [ 114.282369][ T4945] team0: Port device team_slave_1 added [ 114.304833][ T5085] F2FS-fs (loop4): invalid crc value [ 114.391076][ T5085] F2FS-fs (loop4): Found nat_bits in checkpoint [ 114.464883][ T4945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.488635][ T4945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.573094][ T4945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.588994][ T5085] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 114.622908][ T4316] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.686761][ T4945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.706444][ T4945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.747160][ T4945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.757421][ T4261] Bluetooth: hci0: command 0x0419 tx timeout [ 114.760481][ T5120] attempt to access beyond end of device [ 114.760481][ T5120] loop4: rw=2049, want=45104, limit=40427 [ 114.876776][ T4316] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.070734][ T4316] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.225875][ T4945] device hsr_slave_0 entered promiscuous mode [ 115.254675][ T4945] device hsr_slave_1 entered promiscuous mode [ 115.276124][ T4945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.317195][ T4945] Cannot create hsr debugfs directory [ 115.365768][ T4316] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.376614][ T5132] loop2: detected capacity change from 0 to 40427 [ 115.407349][ T5132] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 115.415878][ T5132] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 115.572965][ T5132] F2FS-fs (loop2): Found nat_bits in checkpoint [ 115.686895][ T4825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.882768][ T5132] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 115.952137][ T5132] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 116.113032][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.162301][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.244210][ T4825] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.418610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.486155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.516792][ T5168] FAULT_INJECTION: forcing a failure. [ 116.516792][ T5168] name fail_futex, interval 1, probability 0, space 0, times 1 [ 116.540343][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.547853][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.607707][ T5168] CPU: 1 PID: 5168 Comm: syz.0.227 Not tainted syzkaller #0 [ 116.615492][ T5168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 116.627088][ T5168] Call Trace: [ 116.630867][ T5168] [ 116.634320][ T5168] dump_stack_lvl+0x188/0x250 [ 116.639842][ T5168] ? __kasan_kmalloc+0xaf/0xe0 [ 116.645269][ T5168] ? show_regs_print_info+0x20/0x20 [ 116.650675][ T5168] ? load_image+0x410/0x410 [ 116.655305][ T5168] should_fail+0x383/0x4b0 [ 116.660282][ T5168] get_futex_key+0x1a1/0x12d0 [ 116.665915][ T5168] ? __lock_acquire+0x13b3/0x7d40 [ 116.671594][ T5168] ? futex_wait_restart+0x250/0x250 [ 116.676936][ T5168] futex_wake+0x101/0x540 [ 116.681664][ T5168] ? futex_wait+0x680/0x680 [ 116.687177][ T5168] ? verify_lock_unused+0x140/0x140 [ 116.693832][ T5168] ? verify_lock_unused+0x140/0x140 [ 116.699533][ T5168] ? keyctl_restrict_keyring+0x1ba/0x220 [ 116.706407][ T5168] do_futex+0xd83/0x12b0 [ 116.711455][ T5168] ? rcu_is_watching+0x11/0xa0 [ 116.711480][ T5168] ? __se_sys_keyctl+0x6a1/0xa20 [ 116.711508][ T5168] ? futex_exit_release+0x1c0/0x1c0 [ 116.711531][ T5168] ? __context_tracking_exit+0x4c/0x80 [ 116.711554][ T5168] __se_sys_futex+0x389/0x420 [ 116.711574][ T5168] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 116.711597][ T5168] ? __x64_sys_futex+0xf0/0xf0 [ 116.711620][ T5168] ? __x64_sys_futex+0x1d/0xf0 [ 116.711637][ T5168] do_syscall_64+0x4c/0xa0 [ 116.740657][ T5168] ? clear_bhb_loop+0x30/0x80 [ 116.740691][ T5168] ? clear_bhb_loop+0x30/0x80 [ 116.740715][ T5168] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.740736][ T5168] RIP: 0033:0x7f8b13d4d559 [ 116.740756][ T5168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.754658][ T5168] RSP: 002b:00007f8b11fa50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 116.754693][ T5168] RAX: ffffffffffffffda RBX: 00007f8b13fd4fa8 RCX: 00007f8b13d4d559 [ 116.754704][ T5168] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8b13fd4fac [ 116.790927][ T5168] RBP: 00007f8b13fd4fa0 R08: 001bf4126e97890b R09: 0000000000000000 [ 116.839894][ T5168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.839916][ T5168] R13: 00007f8b13fd5038 R14: 00007fff2beecb30 R15: 00007fff2beecc18 [ 116.839940][ T5168] [ 116.978164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.023049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.066995][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 117.101566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.129947][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.142968][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.201400][ T5177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.229'. [ 117.329877][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.341857][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 117.371614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.451394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.480070][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.490415][ T7] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 117.507350][ T7] usb 5-1: config 0 has no interface number 0 [ 117.527117][ T7] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 117.552811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.565089][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.616438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 117.644670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 117.655796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.676074][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 117.697549][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.726862][ C0] net_ratelimit: 50 callbacks suppressed [ 117.757310][ T7] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 117.771753][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.780688][ T7] usb 5-1: Product: syz [ 117.786349][ T7] usb 5-1: Manufacturer: syz [ 117.800135][ T7] usb 5-1: SerialNumber: syz [ 117.816874][ T7] usb 5-1: config 0 descriptor?? [ 117.843325][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 117.857579][ T5172] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 118.131959][ T5172] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 118.228119][ T4945] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 118.333750][ T4945] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 118.425039][ T4945] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 118.473692][ T4945] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 118.549587][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.570835][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.737351][ T4825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.807288][ T7] asix 5-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 119.037533][ T7] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 119.094505][ T7] asix 5-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 119.147514][ T7] asix: probe of 5-1:0.188 failed with error -71 [ 119.254520][ T7] usb 5-1: USB disconnect, device number 5 [ 119.286455][ T5228] x86/PAT: syz.0.234:5228 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 119.306727][ T5230] loop2: detected capacity change from 0 to 1024 [ 119.344361][ T4945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.389202][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.456239][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.508074][ T4945] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.646602][ T4876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.697701][ T4876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.733967][ T4876] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.743075][ T4876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.828013][ T4876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.865772][ T4876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.915922][ T4876] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.924061][ T4876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.941495][ T4876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.990594][ T4876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.017912][ T4876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.030026][ T4876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.082596][ T4876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.115691][ T4876] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 120.176233][ T4316] device hsr_slave_0 left promiscuous mode [ 120.205166][ T4316] device hsr_slave_1 left promiscuous mode [ 120.237120][ T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 120.254454][ T4316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.280995][ T4316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.314250][ T4316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.336273][ T4316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.346538][ T4316] device bridge_slave_1 left promiscuous mode [ 120.377226][ T4316] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.396874][ T4316] device bridge_slave_0 left promiscuous mode [ 120.409035][ T4316] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.490835][ T4316] device veth1_macvtap left promiscuous mode [ 120.510217][ T4316] device veth0_macvtap left promiscuous mode [ 120.516607][ T4316] device veth1_vlan left promiscuous mode [ 120.544042][ T4316] device veth0_vlan left promiscuous mode [ 120.597351][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 120.625737][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 120.674267][ T21] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 120.724980][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.752398][ T21] usb 5-1: config 0 descriptor?? [ 121.027323][ T21] ath6kl: Failed to submit usb control message: -71 [ 121.034640][ T21] ath6kl: unable to send the bmi data to the device: -71 [ 121.082674][ T21] ath6kl: Unable to send get target info: -71 [ 121.767112][ T4265] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 121.825081][ T4316] team0 (unregistering): Port device team_slave_1 removed [ 121.910590][ T4316] team0 (unregistering): Port device team_slave_0 removed [ 121.957703][ T4316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.016218][ T4316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.178054][ T4265] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 122.213709][ T4265] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.258834][ T4265] usb 3-1: config 0 interface 0 has no altsetting 0 [ 122.268978][ T4265] usb 3-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 122.287558][ T4265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.311252][ T4265] usb 3-1: config 0 descriptor?? [ 122.347305][ T5268] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 122.472746][ T4316] bond0 (unregistering): Released all slaves [ 122.635123][ T4945] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 122.722988][ T4945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.771676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 122.795545][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.824763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.861098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.907840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.969631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.035797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 123.076972][ C1] net_ratelimit: 47 callbacks suppressed [ 123.088359][ T21] ath6kl: Failed to init ath6kl core: -71 [ 123.197418][ T4265] usbhid 3-1:0.0: can't add hid device: -71 [ 123.206837][ T4265] usbhid: probe of 3-1:0.0 failed with error -71 [ 123.207312][ T21] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 123.272916][ T4876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.313459][ T4265] usb 3-1: USB disconnect, device number 5 [ 123.334919][ T21] usb 5-1: USB disconnect, device number 6 [ 123.380665][ T4876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.626854][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 123.697497][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.748180][ T5281] netlink: 'syz.4.246': attribute type 2 has an invalid length. [ 123.808385][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.888993][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.971500][ T5293] device-mapper: dirty region log: region count exceeds limit of 4294967295 [ 124.008336][ T4825] device veth0_vlan entered promiscuous mode [ 124.045150][ T5293] device-mapper: table: 248:0: mirror: Error creating mirror dirty log [ 124.067529][ T5293] device-mapper: ioctl: error adding target to table [ 124.153476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.229187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.314115][ T4825] device veth1_vlan entered promiscuous mode [ 124.380475][ T4945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.496522][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.537824][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.568986][ T5307] FAULT_INJECTION: forcing a failure. [ 124.568986][ T5307] name failslab, interval 1, probability 0, space 0, times 0 [ 124.614194][ T4825] device veth0_macvtap entered promiscuous mode [ 124.643346][ T5312] syz.4.251 uses obsolete (PF_INET,SOCK_PACKET) [ 124.689658][ T5307] CPU: 1 PID: 5307 Comm: syz.2.250 Not tainted syzkaller #0 [ 124.703842][ T5307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 124.703865][ T5307] Call Trace: [ 124.703875][ T5307] [ 124.703884][ T5307] dump_stack_lvl+0x188/0x250 [ 124.703911][ T5307] ? show_regs_print_info+0x20/0x20 [ 124.703929][ T5307] ? load_image+0x410/0x410 [ 124.703948][ T5307] ? __lock_acquire+0x7d40/0x7d40 [ 124.703968][ T5307] ? aa_get_newest_label+0xf5/0x5a0 [ 124.703988][ T5307] should_fail+0x383/0x4b0 [ 124.704012][ T5307] should_failslab+0x5/0x20 [ 124.704029][ T5307] slab_pre_alloc_hook+0x51/0xc0 [ 124.704047][ T5307] ? __se_sys_fsopen+0xae/0x320 [ 124.704069][ T5307] __kmalloc_track_caller+0x69/0x330 [ 124.704085][ T5307] ? __se_sys_fsopen+0xae/0x320 [ 124.704101][ T5307] ? security_capable+0x85/0xb0 [ 124.704115][ T5307] ? strnlen_user+0x150/0x250 [ 124.704134][ T5307] strndup_user+0x71/0x150 [ 124.704150][ T5307] __se_sys_fsopen+0xae/0x320 [ 124.704170][ T5307] do_syscall_64+0x4c/0xa0 [ 124.727266][ T5307] ? clear_bhb_loop+0x30/0x80 [ 124.742476][ T5307] ? clear_bhb_loop+0x30/0x80 [ 124.742515][ T5307] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.742536][ T5307] RIP: 0033:0x7f2cb3a63559 [ 124.742554][ T5307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.742568][ T5307] RSP: 002b:00007f2cb1cbb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 124.742588][ T5307] RAX: ffffffffffffffda RBX: 00007f2cb3ceafa0 RCX: 00007f2cb3a63559 [ 124.757337][ T5307] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000fc0 [ 124.757360][ T5307] RBP: 00007f2cb3afa8b0 R08: 0000000000000000 R09: 0000000000000000 [ 124.757369][ T5307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.757549][ T5307] R13: 00007f2cb3ceb038 R14: 00007f2cb3ceafa0 R15: 00007ffdf49c9dc8 [ 124.757582][ T5307] [ 124.913474][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.210871][ T4825] device veth1_macvtap entered promiscuous mode [ 125.323246][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.368205][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.503744][ T4825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.570606][ T4825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.625822][ T4825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.661529][ T4825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.726699][ T4825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.749766][ T4825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.775413][ T4825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.982020][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 126.017862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 126.050610][ T4825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.087349][ T4825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.124145][ T4825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.164789][ T4825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.213013][ T4825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.239084][ T4825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.257062][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.283249][ T4825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.334385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 126.395882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 126.431902][ T5335] FAULT_INJECTION: forcing a failure. [ 126.431902][ T5335] name fail_futex, interval 1, probability 0, space 0, times 0 [ 126.472273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 126.497564][ T5335] CPU: 1 PID: 5335 Comm: syz.4.256 Not tainted syzkaller #0 [ 126.505399][ T5335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 126.516400][ T5335] Call Trace: [ 126.516419][ T5335] [ 126.516428][ T5335] dump_stack_lvl+0x188/0x250 [ 126.516452][ T5335] ? _raw_spin_unlock+0x40/0x40 [ 126.516472][ T5335] ? show_regs_print_info+0x20/0x20 [ 126.516490][ T5335] ? load_image+0x410/0x410 [ 126.516507][ T5335] ? stack_depot_save+0x41b/0x460 [ 126.516526][ T5335] ? kfree+0xef/0x2a0 [ 126.516545][ T5335] should_fail+0x383/0x4b0 [ 126.524424][ T5335] get_futex_key+0x1a1/0x12d0 [ 126.524455][ T5335] ? __lock_acquire+0x13b3/0x7d40 [ 126.568862][ T5335] ? futex_wait_restart+0x250/0x250 [ 126.574275][ T5335] futex_wake+0x101/0x540 [ 126.579115][ T5335] ? futex_wait+0x680/0x680 [ 126.584148][ T5335] ? verify_lock_unused+0x140/0x140 [ 126.589645][ T5335] ? verify_lock_unused+0x140/0x140 [ 126.595291][ T5335] ? lockdep_hardirqs_on+0x94/0x140 [ 126.601458][ T5335] do_futex+0xd83/0x12b0 [ 126.606406][ T5335] ? slab_free_freelist_hook+0xec/0x170 [ 126.613072][ T5335] ? btf_new_fd+0x58e/0x910 [ 126.618430][ T5335] ? kfree+0xef/0x2a0 [ 126.623993][ T5335] ? futex_exit_release+0x1c0/0x1c0 [ 126.630584][ T5335] ? __context_tracking_exit+0x4c/0x80 [ 126.636438][ T5335] __se_sys_futex+0x389/0x420 [ 126.641329][ T5335] ? __x64_sys_futex+0xf0/0xf0 [ 126.646586][ T5335] ? __x64_sys_futex+0x1d/0xf0 [ 126.651928][ T5335] do_syscall_64+0x4c/0xa0 [ 126.657035][ T5335] ? clear_bhb_loop+0x30/0x80 [ 126.662018][ T5335] ? clear_bhb_loop+0x30/0x80 [ 126.667020][ T5335] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.674344][ T5335] RIP: 0033:0x7fd358d17559 [ 126.680140][ T5335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.701658][ T5335] RSP: 002b:00007fd356f6f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 126.712288][ T5335] RAX: ffffffffffffffda RBX: 00007fd358f9efa8 RCX: 00007fd358d17559 [ 126.724659][ T5335] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd358f9efac [ 126.735149][ T5335] RBP: 00007fd358f9efa0 R08: 00172f5dcaa6d92b R09: 0000000000000000 [ 126.743856][ T5335] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 126.752709][ T5335] R13: 00007fd358f9f038 R14: 00007ffe186cf5d0 R15: 00007ffe186cf6b8 [ 126.762265][ T5335] [ 126.765820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.830136][ T4825] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.853622][ T4825] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.896227][ T4825] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.937007][ T4302] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 126.942354][ T4825] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.995954][ T4945] device veth0_vlan entered promiscuous mode [ 127.039895][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 127.050172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.068064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.099572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.131961][ T4945] device veth1_vlan entered promiscuous mode [ 127.282456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 127.308284][ T4302] usb 3-1: not running at top speed; connect to a high speed hub [ 127.358185][ T5335] loop4: detected capacity change from 0 to 512 [ 127.373833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 127.427323][ T4302] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.490010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.509078][ T5335] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.550407][ T4302] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 127.571916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.595486][ T4302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.629624][ T5335] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.651075][ T4945] device veth0_macvtap entered promiscuous mode [ 127.679409][ T4945] device veth1_macvtap entered promiscuous mode [ 127.777736][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.793177][ T4302] usb 3-1: Found UVC 1.00 device (046d:0825) [ 127.821872][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.841040][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.851303][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.881173][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.906376][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.933450][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.970614][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.992678][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.045769][ T4945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.102369][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.118482][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.172847][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.177025][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.236177][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.277021][ C0] net_ratelimit: 71 callbacks suppressed [ 128.277472][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.332384][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.377832][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.413063][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.453337][ T4302] uvcvideo 3-1:1.1: Failed to set UVC probe control : -71 (exp. 26). [ 128.456963][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.490294][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.507386][ T4302] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 128.532715][ T4302] uvcvideo 3-1:1.1: Failed to initialize the device (-5). [ 128.548806][ T4945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.573481][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 128.614750][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 128.646419][ T4302] usb 3-1: USB disconnect, device number 6 [ 128.710038][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 128.751763][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 128.829880][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.919200][ T4945] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.985767][ T4945] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.051018][ T4945] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.084176][ T4945] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.211561][ T4879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.286693][ T4879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.374173][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 129.598410][ T4879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.648655][ T4879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.732920][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 129.863389][ T4880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.941022][ T4880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.048590][ T1340] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 130.095959][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.227895][ T5358] loop4: detected capacity change from 0 to 32768 [ 130.347513][ T1340] usb 3-1: Using ep0 maxpacket: 8 [ 130.364353][ T5358] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.259 (5358) [ 130.537304][ T1340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 130.538260][ T5358] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 130.628343][ T1340] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 130.689268][ T1340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.717018][ T5358] BTRFS info (device loop4): setting nodatasum [ 130.749698][ T5358] BTRFS info (device loop4): force zlib compression, level 3 [ 130.763386][ T1340] usb 3-1: config 0 descriptor?? [ 130.791339][ T5358] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 130.857831][ T5358] BTRFS info (device loop4): use lzo compression, level 0 [ 130.937502][ T5358] BTRFS info (device loop4): turning on flush-on-commit [ 130.992662][ T5358] BTRFS info (device loop4): enabling auto defrag [ 131.063831][ T1340] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 131.065945][ T5358] BTRFS info (device loop4): max_inline at 0 [ 131.227132][ T5358] BTRFS info (device loop4): turning on sync discard [ 131.367112][ T5358] BTRFS info (device loop4): using free space tree [ 131.446472][ T5358] BTRFS info (device loop4): has skinny extents [ 131.889473][ T5423] netlink: 12 bytes leftover after parsing attributes in process `syz.5.265'. [ 131.908430][ T4302] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 131.921201][ T5358] BTRFS info (device loop4): enabling ssd optimizations [ 131.931878][ T5423] netlink: 'syz.5.265': attribute type 12 has an invalid length. [ 131.975296][ T4306] usb 3-1: USB disconnect, device number 7 [ 132.022934][ T5423] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.037420][ T5423] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.050009][ T5423] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.061974][ T5423] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.319561][ T4302] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.374106][ T4302] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.426204][ T4302] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.524297][ T4302] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.577926][ T4302] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.620621][ T4302] usb 7-1: config 0 descriptor?? [ 132.940056][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.950445][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.113225][ T4302] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 133.305301][ T4302] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 133.567842][ C0] net_ratelimit: 90 callbacks suppressed [ 133.830141][ T5481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'. [ 133.854068][ T5480] loop4: detected capacity change from 0 to 512 [ 133.876617][ T5478] overlayfs: conflicting lowerdir path [ 133.912173][ T1340] usb 7-1: USB disconnect, device number 2 [ 134.128326][ T5480] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.434867][ T5491] loop5: detected capacity change from 0 to 4095 [ 134.550120][ C1] blk_update_request: I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 134.572915][ C0] blk_update_request: I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.595817][ C0] Buffer I/O error on dev loop5, logical block 480, async page read [ 134.687250][ C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0 [ 134.755128][ C1] blk_update_request: I/O error, dev loop5, sector 1048 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0 [ 134.787865][ C1] blk_update_request: I/O error, dev loop5, sector 2072 op 0x0:(READ) flags 0x80700 phys_seg 60 prio class 0 [ 134.951412][ C0] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.987968][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 135.157515][ T5495] netlink: 'syz.6.277': attribute type 27 has an invalid length. [ 135.488774][ C0] Illegal XDP return value 16128, expect packet loss! [ 135.809247][ T5495] bond0: (slave bond_slave_0): Releasing backup interface [ 136.695473][ T5566] netlink: 16 bytes leftover after parsing attributes in process `syz.4.282'. [ 137.047229][ T5498] rxe_eth0 speed is unknown, defaulting to 1000 [ 137.161069][ T23] Bluetooth: hci5: command 0x0409 tx timeout [ 137.217493][ T5554] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.332377][ T5554] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.771861][ T5554] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.843328][ T5554] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.924085][ T5598] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 138.142196][ T5554] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.219635][ T5554] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.361145][ T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 138.484397][ T5554] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.509017][ T5554] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.668671][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 138.687037][ T9] net_ratelimit: 63 callbacks suppressed [ 138.877410][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 139.008237][ T23] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 139.213465][ T4256] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 139.230169][ T23] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 139.308191][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.364372][ T23] usb 3-1: Product: syz [ 139.394199][ T23] usb 3-1: Manufacturer: syz [ 139.418824][ T23] usb 3-1: SerialNumber: syz [ 139.488380][ T4302] Bluetooth: hci5: command 0x041b tx timeout [ 139.669117][ T4256] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.714085][ T4256] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 139.733265][ T4256] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.792055][ T23] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 139.820327][ T23] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 139.905706][ T5623] loop4: detected capacity change from 0 to 32768 [ 139.961753][ T4256] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 140.012912][ T4256] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.072111][ T5623] JBD2: Ignoring recovery information on journal [ 140.072417][ T4256] usb 6-1: Product: syz [ 140.120949][ T4256] usb 6-1: Manufacturer: syz [ 140.145340][ T4256] usb 6-1: SerialNumber: syz [ 140.207874][ T5621] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 140.219623][ T23] usb 3-1: 2:1 : bogus bTerminalLink 6 [ 140.269841][ T4256] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 140.337277][ T5498] chnl_net:caif_netlink_parms(): no params data found [ 140.347113][ T4256] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 140.407054][ T5623] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 140.452030][ T4256] usbserial_generic 6-1:1.0: generic converter detected [ 140.521917][ T23] usb 3-1: USB disconnect, device number 8 [ 140.573611][ T4256] usb 6-1: generic converter now attached to ttyUSB0 [ 140.733228][ T4300] udevd[4300]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.784265][ T4187] ocfs2: Unmounting device (7,4) on (node local) [ 140.847365][ T4256] usb 6-1: USB disconnect, device number 2 [ 140.950541][ T4256] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 141.008914][ T4256] usbserial_generic 6-1:1.0: device disconnected [ 141.267089][ T23] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 141.557092][ T4302] Bluetooth: hci5: command 0x040f tx timeout [ 141.621292][ T23] usb 7-1: Using ep0 maxpacket: 32 [ 141.679984][ T5498] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.731708][ T5498] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.767619][ T23] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 141.797828][ T5498] device bridge_slave_0 entered promiscuous mode [ 141.832662][ T5498] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.860284][ T5668] loop5: detected capacity change from 0 to 32768 [ 141.867486][ T5498] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.921091][ T5498] device bridge_slave_1 entered promiscuous mode [ 141.922485][ T5668] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.306 (5668) [ 142.027660][ T23] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 142.239170][ T23] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 142.373704][ T23] usb 7-1: Product: syz [ 142.497782][ T23] usb 7-1: Manufacturer: syz [ 142.582948][ T23] usb 7-1: SerialNumber: syz [ 142.836705][ T23] usb 7-1: config 0 descriptor?? [ 143.028629][ T5655] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 143.712340][ T4261] Bluetooth: hci5: command 0x0419 tx timeout [ 143.722477][ C0] net_ratelimit: 46 callbacks suppressed [ 143.725450][ T5668] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 144.134006][ T23] usb 7-1: USB disconnect, device number 3 [ 144.199946][ T5668] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 144.851877][ T5668] BTRFS info (device loop5): use zstd compression, level 3 [ 145.163603][ T5668] BTRFS info (device loop5): using free space tree [ 145.480282][ T5668] BTRFS info (device loop5): has skinny extents [ 146.339031][ T5668] BTRFS error (device loop5): open_ctree failed: -12 [ 146.444037][ T5498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.492981][ T5724] batman_adv: batadv0: Adding interface: syzkaller0 [ 146.517111][ T5724] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.593104][ T5736] loop2: detected capacity change from 0 to 128 [ 146.612545][ T4355] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by udevd (4355) [ 146.658605][ T5724] batman_adv: batadv0: Interface activated: syzkaller0 [ 146.669144][ T5736] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 146.799710][ T5736] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 146.840241][ T5498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.880785][ T5740] FAULT_INJECTION: forcing a failure. [ 146.880785][ T5740] name failslab, interval 1, probability 0, space 0, times 0 [ 146.954697][ T5736] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 147.050990][ T5715] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 147.056709][ T5736] FAT-fs (loop2): Filesystem has been set read-only [ 147.095699][ T5740] CPU: 0 PID: 5740 Comm: syz.5.316 Not tainted syzkaller #0 [ 147.107657][ T5740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 147.122657][ T5740] Call Trace: [ 147.127545][ T5740] [ 147.132491][ T5740] dump_stack_lvl+0x188/0x250 [ 147.141096][ T5740] ? show_regs_print_info+0x20/0x20 [ 147.148786][ T5740] ? load_image+0x410/0x410 [ 147.154916][ T5740] ? __might_sleep+0xf0/0xf0 [ 147.162198][ T5740] ? __lock_acquire+0x7d40/0x7d40 [ 147.171504][ T5740] ? tomoyo_get_local_path+0x62a/0x780 [ 147.181109][ T5740] should_fail+0x383/0x4b0 [ 147.192484][ T5740] should_failslab+0x5/0x20 [ 147.202871][ T5740] slab_pre_alloc_hook+0x51/0xc0 [ 147.210179][ T5740] __kmalloc+0x6b/0x340 [ 147.219047][ T5740] ? tomoyo_encode+0x28a/0x550 [ 147.229460][ T5740] tomoyo_encode+0x28a/0x550 [ 147.239319][ T5740] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 147.251673][ T5740] tomoyo_check_open_permission+0x1eb/0x410 [ 147.264404][ T5740] ? tomoyo_check_path_number_acl+0x280/0x280 [ 147.278424][ T5740] ? __lock_acquire+0x7d40/0x7d40 [ 147.288785][ T5740] ? __rwlock_init+0x140/0x140 [ 147.298365][ T5740] ? do_raw_spin_lock+0x128/0x2f0 [ 147.298416][ T5740] ? preempt_count_add+0x8d/0x190 [ 147.298434][ T5740] ? hook_file_open+0xf1/0x230 [ 147.327285][ T5740] ? tomoyo_file_open+0xe9/0x170 [ 147.339618][ T5740] security_file_open+0x5e/0xa0 [ 147.347527][ T5740] do_dentry_open+0x321/0xf90 [ 147.356254][ T5740] ? vfs_open+0x2b/0x80 [ 147.363610][ T5740] path_openat+0x2718/0x2fb0 [ 147.371434][ T5740] ? do_filp_open+0x400/0x400 [ 147.378304][ T5740] do_filp_open+0x1df/0x400 [ 147.388180][ T5740] ? vfs_tmpfile+0x300/0x300 [ 147.397745][ T5740] ? noop_direct_IO+0x10/0x10 [ 147.404903][ T5740] ? _raw_spin_unlock+0x24/0x40 [ 147.411633][ T5740] ? alloc_fd+0x59e/0x650 [ 147.420766][ T5740] do_sys_openat2+0x14b/0x500 [ 147.428931][ T5740] ? __lock_acquire+0x7d40/0x7d40 [ 147.436413][ T5740] ? do_sys_open+0xe0/0xe0 [ 147.446249][ T5740] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 147.456386][ T5740] ? lock_chain_count+0x20/0x20 [ 147.463320][ T5740] __x64_sys_openat+0x135/0x160 [ 147.469802][ T5740] do_syscall_64+0x4c/0xa0 [ 147.478254][ T5740] ? clear_bhb_loop+0x30/0x80 [ 147.486305][ T5740] ? clear_bhb_loop+0x30/0x80 [ 147.492344][ T5740] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 147.501814][ T5740] RIP: 0033:0x7f04dba71d8e [ 147.508192][ T5740] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 147.539645][ T5740] RSP: 002b:00007f04d9d08ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 147.548966][ T5740] RAX: ffffffffffffffda RBX: 00007f04d9d096c0 RCX: 00007f04dba71d8e [ 147.558318][ T5740] RDX: 0000000000000002 RSI: 00007f04d9d08f90 RDI: ffffffffffffff9c [ 147.567872][ T5740] RBP: 00007f04dbb488b0 R08: 0000000000000000 R09: 0000000000000000 [ 147.582644][ T5740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.595157][ T5740] R13: 00007f04dbd39038 R14: 00007f04dbd38fa0 R15: 00007ffed74666b8 [ 147.609637][ T5740] [ 147.651995][ T5715] batman_adv: batadv0: Removing interface: syzkaller0 [ 147.842284][ T5750] FAULT_INJECTION: forcing a failure. [ 147.842284][ T5750] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 147.926992][ T5750] CPU: 0 PID: 5750 Comm: syz.2.317 Not tainted syzkaller #0 [ 147.940281][ T5750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 147.954210][ T5750] Call Trace: [ 147.958720][ T5750] [ 147.962666][ T5750] dump_stack_lvl+0x188/0x250 [ 147.971384][ T5750] ? show_regs_print_info+0x20/0x20 [ 147.980809][ T5750] ? load_image+0x410/0x410 [ 147.989200][ T5750] ? __lock_acquire+0x7d40/0x7d40 [ 147.996840][ T5750] should_fail+0x383/0x4b0 [ 148.002641][ T5750] prepare_alloc_pages+0x1e3/0x5b0 [ 148.009754][ T5750] __alloc_pages+0x11b/0x480 [ 148.012335][ T5740] ERROR: Out of memory at tomoyo_realpath_from_path. [ 148.017447][ T5750] ? zone_statistics+0x170/0x170 [ 148.017485][ T5750] ? __rwlock_init+0x140/0x140 [ 148.017508][ T5750] ? alloc_pages+0x452/0x560 [ 148.017530][ T5750] __get_free_pages+0x8/0x30 [ 148.017549][ T5750] kasan_populate_vmalloc_pte+0x21/0xc0 [ 148.017566][ T5750] __apply_to_page_range+0x987/0xd10 [ 148.017593][ T5750] ? kasan_populate_vmalloc+0x70/0x70 [ 148.017615][ T5750] alloc_vmap_area+0x19e8/0x1b30 [ 148.017648][ T5750] ? vm_map_ram+0xba0/0xba0 [ 148.017675][ T5750] __get_vm_area_node+0x14f/0x2d0 [ 148.017699][ T5750] __vmalloc_node_range+0xef/0x8b0 [ 148.017719][ T5750] ? packet_set_ring+0x773/0x24a0 [ 148.017739][ T5750] ? zone_statistics+0x170/0x170 [ 148.017766][ T5750] ? packet_set_ring+0x773/0x24a0 [ 148.017786][ T5750] vzalloc+0x75/0x80 [ 148.017803][ T5750] ? packet_set_ring+0x773/0x24a0 [ 148.039040][ T5750] packet_set_ring+0x773/0x24a0 [ 148.039095][ T5750] ? packet_mmap+0x510/0x510 [ 148.039116][ T5750] ? __lock_acquire+0x7d40/0x7d40 [ 148.039135][ T5750] ? __local_bh_enable_ip+0x136/0x1c0 [ 148.055792][ T5750] ? lockdep_hardirqs_on+0x94/0x140 [ 148.055830][ T5750] ? __might_fault+0xb3/0x110 [ 148.055849][ T5750] ? _copy_from_user+0x111/0x170 [ 148.055871][ T5750] packet_setsockopt+0x1362/0x1af0 [ 148.086922][ T5750] ? __might_sleep+0xf0/0xf0 [ 148.086964][ T5750] ? packet_ioctl+0x240/0x240 [ 148.086984][ T5750] ? rcu_lock_release+0x9/0x20 [ 148.087009][ T5750] ? aa_sk_perm+0x7dc/0x910 [ 148.087032][ T5750] ? aa_af_perm+0x340/0x340 [ 148.087048][ T5750] ? __fget_files+0x402/0x470 [ 148.087066][ T5750] ? aa_sock_opt_perm+0x74/0x100 [ 148.087082][ T5750] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 148.087101][ T5750] ? security_socket_setsockopt+0x7a/0xa0 [ 148.087120][ T5750] ? packet_ioctl+0x240/0x240 [ 148.087139][ T5750] __sys_setsockopt+0x2bf/0x3d0 [ 148.087164][ T5750] __x64_sys_setsockopt+0xb1/0xc0 [ 148.087186][ T5750] do_syscall_64+0x4c/0xa0 [ 148.087205][ T5750] ? clear_bhb_loop+0x30/0x80 [ 148.087224][ T5750] ? clear_bhb_loop+0x30/0x80 [ 148.087241][ T5750] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.113928][ T5750] RIP: 0033:0x7f2cb3a63559 [ 148.144500][ T5750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.144524][ T5750] RSP: 002b:00007f2cb1cbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 148.144543][ T5750] RAX: ffffffffffffffda RBX: 00007f2cb3ceafa0 RCX: 00007f2cb3a63559 [ 148.144556][ T5750] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000004 [ 148.144566][ T5750] RBP: 00007f2cb3afa8b0 R08: 000000000000001c R09: 0000000000000000 [ 148.144704][ T5750] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 148.171582][ T5750] R13: 00007f2cb3ceb038 R14: 00007f2cb3ceafa0 R15: 00007ffdf49c9dc8 [ 148.171621][ T5750] [ 148.320293][ T5750] syz.2.317: vmalloc error: size 16777216, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 148.495585][ T5750] ,cpuset= [ 148.548191][ T5750] syz2 [ 148.570025][ T5750] ,mems_allowed=0-1 [ 148.691208][ T5498] team0: Port device team_slave_0 added [ 148.738395][ T5498] team0: Port device team_slave_1 added [ 148.756963][ C0] net_ratelimit: 48 callbacks suppressed [ 149.119350][ T5750] [ 149.140682][ T5750] CPU: 0 PID: 5750 Comm: syz.2.317 Not tainted syzkaller #0 [ 149.140707][ T5750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 149.178258][ T5750] Call Trace: [ 149.184457][ T5750] [ 149.188872][ T5750] dump_stack_lvl+0x188/0x250 [ 149.196435][ T5750] ? rcu_lock_release+0x5/0x20 [ 149.196476][ T5750] ? show_regs_print_info+0x20/0x20 [ 149.196495][ T5750] ? load_image+0x410/0x410 [ 149.196513][ T5750] ? __rcu_read_unlock+0x78/0xd0 [ 149.196533][ T5750] warn_alloc+0x245/0x320 [ 149.196556][ T5750] ? zone_watermark_ok_safe+0x250/0x250 [ 149.196571][ T5750] ? __get_vm_area_node+0x164/0x2d0 [ 149.196588][ T5750] ? kfree+0xef/0x2a0 [ 149.196611][ T5750] __vmalloc_node_range+0x2b1/0x8b0 [ 149.211167][ T5750] ? zone_statistics+0x170/0x170 [ 149.224410][ T5750] ? packet_set_ring+0x773/0x24a0 [ 149.237880][ T5750] vzalloc+0x75/0x80 [ 149.251817][ T5750] ? packet_set_ring+0x773/0x24a0 [ 149.264204][ T5750] packet_set_ring+0x773/0x24a0 [ 149.264244][ T5750] ? packet_mmap+0x510/0x510 [ 149.274905][ T5750] ? __lock_acquire+0x7d40/0x7d40 [ 149.274935][ T5750] ? __local_bh_enable_ip+0x136/0x1c0 [ 149.274952][ T5750] ? lockdep_hardirqs_on+0x94/0x140 [ 149.274974][ T5750] ? __might_fault+0xb3/0x110 [ 149.274993][ T5750] ? _copy_from_user+0x111/0x170 [ 149.275009][ T5750] packet_setsockopt+0x1362/0x1af0 [ 149.309014][ T5750] ? __might_sleep+0xf0/0xf0 [ 149.325108][ T5750] ? packet_ioctl+0x240/0x240 [ 149.337255][ T5750] ? rcu_lock_release+0x9/0x20 [ 149.347504][ T5750] ? aa_sk_perm+0x7dc/0x910 [ 149.352413][ T5750] ? aa_af_perm+0x340/0x340 [ 149.352440][ T5750] ? __fget_files+0x402/0x470 [ 149.352463][ T5750] ? aa_sock_opt_perm+0x74/0x100 [ 149.352480][ T5750] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 149.352497][ T5750] ? security_socket_setsockopt+0x7a/0xa0 [ 149.352514][ T5750] ? packet_ioctl+0x240/0x240 [ 149.352532][ T5750] __sys_setsockopt+0x2bf/0x3d0 [ 149.352554][ T5750] __x64_sys_setsockopt+0xb1/0xc0 [ 149.352572][ T5750] do_syscall_64+0x4c/0xa0 [ 149.363239][ T5750] ? clear_bhb_loop+0x30/0x80 [ 149.363267][ T5750] ? clear_bhb_loop+0x30/0x80 [ 149.363287][ T5750] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 149.376499][ T5750] RIP: 0033:0x7f2cb3a63559 [ 149.388666][ T5750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.388685][ T5750] RSP: 002b:00007f2cb1cbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 149.388705][ T5750] RAX: ffffffffffffffda RBX: 00007f2cb3ceafa0 RCX: 00007f2cb3a63559 [ 149.388717][ T5750] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000004 [ 149.388728][ T5750] RBP: 00007f2cb3afa8b0 R08: 000000000000001c R09: 0000000000000000 [ 149.388739][ T5750] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 149.400571][ T5750] R13: 00007f2cb3ceb038 R14: 00007f2cb3ceafa0 R15: 00007ffdf49c9dc8 [ 149.410989][ T5750] [ 149.666866][ T5498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.718140][ T5498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.768300][ T5750] Mem-Info: [ 149.795868][ T5750] active_anon:343 inactive_anon:6679 isolated_anon:0 [ 149.795868][ T5750] active_file:4925 inactive_file:36523 isolated_file:0 [ 149.795868][ T5750] unevictable:768 dirty:98 writeback:25 [ 149.795868][ T5750] slab_reclaimable:21046 slab_unreclaimable:100871 [ 149.795868][ T5750] mapped:30159 shmem:1664 pagetables:675 bounce:0 [ 149.795868][ T5750] kernel_misc_reclaimable:0 [ 149.795868][ T5750] free:1362375 free_pcp:11816 free_cma:0 [ 150.252465][ T5498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.689891][ T5750] Node 0 active_anon:1340kB inactive_anon:26688kB active_file:19500kB inactive_file:146092kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120684kB dirty:468kB writeback:0kB shmem:4576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11952kB pagetables:2868kB all_unreclaimable? no [ 150.727715][ T5750] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 151.143268][ T5750] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 151.201346][ T5750] lowmem_reserve[]: 0 2523 [ 151.209843][ T5750] 2524 2524 2524 [ 151.270546][ T5750] Node 0 [ 151.295370][ T5750] DMA32 free:1521280kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1340kB inactive_anon:26784kB active_file:19500kB inactive_file:146092kB unevictable:1536kB writepending:476kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:41852kB local_pcp:20848kB free_cma:0kB [ 151.474283][ T5498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.559144][ T5498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.992697][ T5750] lowmem_reserve[]: 0 0 0 0 0 [ 152.017332][ T5498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.089076][ T5750] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 152.701860][ T5750] lowmem_reserve[]: [ 152.702478][ T5750] 0 [ 152.730041][ T5750] 0 0 0 0 [ 152.733141][ T5750] Node 1 Normal free:3903652kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:4168kB local_pcp:1804kB free_cma:0kB [ 152.766320][ T5750] lowmem_reserve[]: 0 0 0 0 0 [ 152.771470][ T5750] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 152.787366][ T5750] Node 0 DMA32: 566*4kB (UME) 473*8kB (UME) 274*16kB (UME) 251*32kB (UME) 90*64kB (UME) 52*128kB (UME) 16*256kB (UM) 16*512kB (UME) 10*1024kB [ 152.806450][ T5750] (M) 1*2048kB (M) 359*4096kB (M) = 1525920kB [ 152.812744][ T5750] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 152.826880][ T5750] Node 1 Normal: 126*4kB (UME) 34*8kB (UME) 31*16kB (UME) 168*32kB (UME) 67*64kB (UME) 20*128kB (UE) 8*256kB (UM) 2*512kB (U) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3903672kB [ 152.850016][ T5750] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 152.860765][ T5750] Node 0 hugepages_total=12 hugepages_free=12 hugepages_surp=0 hugepages_size=2048kB [ 152.860787][ T5750] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 152.887086][ T5750] Node 1 hugepages_total=11 hugepages_free=11 hugepages_surp=0 hugepages_size=2048kB [ 153.013139][ T5750] 43112 total pagecache pages [ 153.057086][ T5750] 0 pages in swap cache [ 153.084855][ T5750] Swap cache stats: add 0, delete 0, find 0/0 [ 153.113402][ T5750] Free swap = 124996kB [ 153.155910][ T5750] Total swap = 124996kB [ 153.167456][ T5750] 2097051 pages RAM [ 153.182706][ T5750] 0 pages HighMem/MovableOnly [ 153.240374][ T5750] 415313 pages reserved [ 153.308366][ T5750] 0 pages cma reserved [ 153.415069][ T5498] device hsr_slave_0 entered promiscuous mode [ 153.536481][ T5814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.326'. [ 153.554011][ T5498] device hsr_slave_1 entered promiscuous mode [ 153.593021][ T5498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.634633][ T5498] Cannot create hsr debugfs directory [ 154.037313][ C1] net_ratelimit: 50 callbacks suppressed [ 154.733645][ T5554] device hsr_slave_0 left promiscuous mode [ 154.763398][ T5554] device hsr_slave_1 left promiscuous mode [ 154.781715][ T5809] loop5: detected capacity change from 0 to 32768 [ 154.833937][ T5554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.849080][ T5554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.897400][ T5554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.959419][ T5554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.996142][ T5850] FAULT_INJECTION: forcing a failure. [ 154.996142][ T5850] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 155.019092][ T5554] device bridge_slave_1 left promiscuous mode [ 155.035799][ T5554] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.094043][ T5554] device bridge_slave_0 left promiscuous mode [ 155.102702][ T5850] CPU: 0 PID: 5850 Comm: syz.4.330 Not tainted syzkaller #0 [ 155.112817][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 155.128571][ T5850] Call Trace: [ 155.134805][ T5850] [ 155.137939][ T5850] dump_stack_lvl+0x188/0x250 [ 155.143456][ T5850] ? show_regs_print_info+0x20/0x20 [ 155.151402][ T5850] ? load_image+0x410/0x410 [ 155.157378][ T5850] ? __lock_acquire+0x7d40/0x7d40 [ 155.163178][ T5850] should_fail+0x383/0x4b0 [ 155.163216][ T5850] prepare_alloc_pages+0x1e3/0x5b0 [ 155.163245][ T5850] __alloc_pages+0x11b/0x480 [ 155.163262][ T5850] ? zone_statistics+0x170/0x170 [ 155.176785][ T5850] ? __rwlock_init+0x140/0x140 [ 155.192095][ T5850] ? alloc_pages+0x452/0x560 [ 155.197131][ T5850] __get_free_pages+0x8/0x30 [ 155.203184][ T5850] kasan_populate_vmalloc_pte+0x21/0xc0 [ 155.209246][ T5850] __apply_to_page_range+0x987/0xd10 [ 155.216924][ T5850] ? kasan_populate_vmalloc+0x70/0x70 [ 155.223394][ T5850] alloc_vmap_area+0x19e8/0x1b30 [ 155.229579][ T5850] ? vm_map_ram+0xba0/0xba0 [ 155.234757][ T5850] __get_vm_area_node+0x14f/0x2d0 [ 155.240886][ T5850] __vmalloc_node_range+0xef/0x8b0 [ 155.246278][ T5850] ? array_map_alloc+0x428/0x6f0 [ 155.246307][ T5850] ? apparmor_capable+0x12c/0x190 [ 155.246326][ T5850] ? bpf_lsm_capable+0x5/0x10 [ 155.262508][ T5850] bpf_map_area_mmapable_alloc+0xad/0xd0 [ 155.269921][ T5850] ? array_map_alloc+0x428/0x6f0 [ 155.275497][ T5850] array_map_alloc+0x428/0x6f0 [ 155.280452][ T5850] map_create+0x481/0x2330 [ 155.285899][ T5850] ? bpf_lsm_bpf+0x5/0x10 [ 155.290756][ T5850] __sys_bpf+0x30a/0x6f0 [ 155.298089][ T5850] ? bpf_link_show_fdinfo+0x380/0x380 [ 155.306597][ T5850] __x64_sys_bpf+0x78/0x90 [ 155.311978][ T5850] do_syscall_64+0x4c/0xa0 [ 155.317230][ T5850] ? clear_bhb_loop+0x30/0x80 [ 155.323270][ T5850] ? clear_bhb_loop+0x30/0x80 [ 155.329051][ T5850] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 155.336734][ T5850] RIP: 0033:0x7fd358d17559 [ 155.341867][ T5850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.375307][ T5850] RSP: 002b:00007fd356f6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 155.387781][ T5850] RAX: ffffffffffffffda RBX: 00007fd358f9efa0 RCX: 00007fd358d17559 [ 155.398426][ T5850] RDX: 0000000000000048 RSI: 0000200000000280 RDI: 0000000000000000 [ 155.409099][ T5850] RBP: 00007fd358dae8b0 R08: 0000000000000000 R09: 0000000000000000 [ 155.418150][ T5850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.428441][ T5850] R13: 00007fd358f9f038 R14: 00007fd358f9efa0 R15: 00007ffe186cf6b8 [ 155.441487][ T5850] [ 155.460903][ T5554] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.580573][ T5554] device veth1_macvtap left promiscuous mode [ 155.604884][ T5554] device veth0_macvtap left promiscuous mode [ 155.678951][ T5554] device veth1_vlan left promiscuous mode [ 155.940507][ T5554] device veth0_vlan left promiscuous mode [ 159.236954][ C1] net_ratelimit: 50 callbacks suppressed [ 160.044112][ T5554] team0 (unregistering): Port device team_slave_1 removed [ 160.076368][ T5554] team0 (unregistering): Port device team_slave_0 removed [ 160.115368][ T5554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.153580][ T5554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.332895][ T5554] bond0 (unregistering): Released all slaves [ 160.429543][ T5882] FAULT_INJECTION: forcing a failure. [ 160.429543][ T5882] name failslab, interval 1, probability 0, space 0, times 0 [ 160.460814][ T5882] CPU: 0 PID: 5882 Comm: syz.6.334 Not tainted syzkaller #0 [ 160.469635][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 160.481122][ T5882] Call Trace: [ 160.484781][ T5882] [ 160.487859][ T5882] dump_stack_lvl+0x188/0x250 [ 160.493012][ T5882] ? show_regs_print_info+0x20/0x20 [ 160.499441][ T5882] ? load_image+0x410/0x410 [ 160.504342][ T5882] ? __might_sleep+0xf0/0xf0 [ 160.509219][ T5882] ? __lock_acquire+0x7d40/0x7d40 [ 160.514627][ T5882] ? __kasan_kmalloc+0xc6/0xe0 [ 160.520021][ T5882] should_fail+0x383/0x4b0 [ 160.524929][ T5882] should_failslab+0x5/0x20 [ 160.529712][ T5882] slab_pre_alloc_hook+0x51/0xc0 [ 160.534905][ T5882] __kmalloc+0x6b/0x340 [ 160.539350][ T5882] ? tnode_new+0xbf/0x370 [ 160.543703][ T5882] tnode_new+0xbf/0x370 [ 160.548199][ T5882] resize+0x3e7/0x2620 [ 160.552390][ T5882] ? lockdep_rtnl_is_held+0x22/0x30 [ 160.557692][ T5882] fib_insert_alias+0xea0/0x1280 [ 160.562837][ T5882] fib_trie_unmerge+0x308/0xce0 [ 160.567924][ T5882] fib_unmerge+0xbc/0x350 [ 160.572535][ T5882] fib4_rule_configure+0xe0/0xb00 [ 160.578763][ T5882] fib_nl_newrule+0x131a/0x1e00 [ 160.584184][ T5882] ? __lock_acquire+0x7d40/0x7d40 [ 160.589316][ T5882] ? do_raw_spin_lock+0x128/0x2f0 [ 160.595026][ T5882] ? __rwlock_init+0x140/0x140 [ 160.600383][ T5882] ? do_raw_spin_unlock+0x11d/0x230 [ 160.605706][ T5882] ? fib_rules_seq_read+0xf0/0xf0 [ 160.611063][ T5882] ? __mutex_lock_common+0x147b/0x2400 [ 160.616744][ T5882] ? fib_rules_seq_read+0xf0/0xf0 [ 160.621972][ T5882] rtnetlink_rcv_msg+0x7f1/0xf10 [ 160.627412][ T5882] ? lock_chain_count+0x20/0x20 [ 160.633102][ T5882] ? rtnetlink_bind+0x80/0x80 [ 160.638668][ T5882] ? __local_bh_enable_ip+0x136/0x1c0 [ 160.644758][ T5882] ? lockdep_hardirqs_on+0x94/0x140 [ 160.651707][ T5882] ? __local_bh_enable_ip+0x136/0x1c0 [ 160.657789][ T5882] ? _local_bh_enable+0xa0/0xa0 [ 160.657817][ T5882] ? __dev_queue_xmit+0x1b64/0x2e50 [ 160.657848][ T5882] ? dev_queue_xmit+0x20/0x20 [ 160.657866][ T5882] ? memcpy+0x3c/0x60 [ 160.668628][ T5882] ? __copy_skb_header+0x3ba/0x4f0 [ 160.677563][ T5882] netlink_rcv_skb+0x1e9/0x430 [ 160.677586][ T5882] ? rtnetlink_bind+0x80/0x80 [ 160.677606][ T5882] ? netlink_ack+0xb10/0xb10 [ 160.687853][ T5882] netlink_unicast+0x78f/0x940 [ 160.687886][ T5882] netlink_sendmsg+0x8ba/0xbe0 [ 160.697766][ T5882] ? netlink_getsockopt+0x570/0x570 [ 160.697786][ T5882] ? aa_sock_msg_perm+0x94/0x150 [ 160.697807][ T5882] ? apparmor_socket_sendmsg+0x88/0x230 [ 160.707806][ T5882] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 160.707828][ T5882] ? security_socket_sendmsg+0x7c/0xa0 [ 160.707848][ T5882] ? netlink_getsockopt+0x570/0x570 [ 160.718828][ T5882] ____sys_sendmsg+0x5be/0x8f0 [ 160.718857][ T5882] ? __sys_sendmsg_sock+0x30/0x30 [ 160.730098][ T5882] ? import_iovec+0x6f/0xa0 [ 160.730124][ T5882] ___sys_sendmsg+0x236/0x2e0 [ 160.741614][ T5882] ? __sys_sendmsg+0x290/0x290 [ 160.741676][ T5882] __se_sys_sendmsg+0x1b7/0x2a0 [ 160.752835][ T5882] ? __x64_sys_sendmsg+0x80/0x80 [ 160.762800][ T5882] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 160.773008][ T5882] ? lockdep_hardirqs_on+0x94/0x140 [ 160.785929][ T5882] do_syscall_64+0x4c/0xa0 [ 160.795867][ T5882] ? clear_bhb_loop+0x30/0x80 [ 160.801152][ T5882] ? clear_bhb_loop+0x30/0x80 [ 160.801175][ T5882] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.801193][ T5882] RIP: 0033:0x7f2f2bf09559 [ 160.801212][ T5882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.813238][ T5882] RSP: 002b:00007f2f2a161028 EFLAGS: 00000246 [ 160.840397][ T5882] ORIG_RAX: 000000000000002e [ 160.840415][ T5882] RAX: ffffffffffffffda RBX: 00007f2f2c190fa0 RCX: 00007f2f2bf09559 [ 160.840429][ T5882] RDX: 8c755b2713612558 RSI: 00002000000001c0 RDI: 0000000000000004 [ 160.840439][ T5882] RBP: 00007f2f2bfa08b0 R08: 0000000000000000 R09: 0000000000000000 [ 160.840449][ T5882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.840460][ T5882] R13: 00007f2f2c191038 R14: 00007f2f2c190fa0 R15: 00007ffd442b8548 [ 160.840486][ T5882] [ 160.939993][ T5888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.337'. [ 160.956112][ T5889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.337'. [ 161.349617][ T5498] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 161.412828][ T5498] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 161.523883][ T5498] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 161.571813][ T5912] loop5: detected capacity change from 0 to 1024 [ 163.071087][ T5498] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 164.516947][ C1] net_ratelimit: 35 callbacks suppressed [ 164.565149][ T5912] EXT4-fs: error -4 creating inode table initialization thread [ 164.630172][ T5912] EXT4-fs (loop5): mount failed [ 165.586907][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 165.868419][ T5498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.936908][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 166.076904][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 166.572055][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.694563][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.835717][ T5498] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.367749][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.504629][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.723804][ T4884] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.732105][ T4884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.204117][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.491736][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.710187][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.748041][ T4884] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.764024][ T4884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.838391][ T5963] netlink: 'syz.4.351': attribute type 1 has an invalid length. [ 169.001413][ T5963] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.040356][ T5976] FAULT_INJECTION: forcing a failure. [ 169.040356][ T5976] name failslab, interval 1, probability 0, space 0, times 0 [ 169.059595][ T5976] CPU: 0 PID: 5976 Comm: syz.5.353 Not tainted syzkaller #0 [ 169.067472][ T5976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 169.079040][ T5976] Call Trace: [ 169.079058][ T5976] [ 169.079068][ T5976] dump_stack_lvl+0x188/0x250 [ 169.079095][ T5976] ? show_regs_print_info+0x20/0x20 [ 169.079113][ T5976] ? load_image+0x410/0x410 [ 169.079131][ T5976] ? __might_sleep+0xf0/0xf0 [ 169.079149][ T5976] ? __lock_acquire+0x7d40/0x7d40 [ 169.079173][ T5976] should_fail+0x383/0x4b0 [ 169.086412][ T5976] should_failslab+0x5/0x20 [ 169.120030][ T5976] slab_pre_alloc_hook+0x51/0xc0 [ 169.131289][ T5976] kmem_cache_alloc_node+0x47/0x2c0 [ 169.131319][ T5976] ? alloc_vmap_area+0x199/0x1b30 [ 169.131347][ T5976] alloc_vmap_area+0x199/0x1b30 [ 169.131393][ T5976] ? vm_map_ram+0xba0/0xba0 [ 169.142949][ T5976] __get_vm_area_node+0x14f/0x2d0 [ 169.153621][ T5976] ? aa_get_newest_label+0xf5/0x5a0 [ 169.167356][ T5976] __vmalloc_node_range+0xef/0x8b0 [ 169.167391][ T5976] ? bpf_jit_binary_alloc+0x120/0x240 [ 169.167423][ T5976] module_alloc+0x81/0x90 [ 169.182366][ T5976] ? bpf_jit_binary_alloc+0x120/0x240 [ 169.182398][ T5976] bpf_jit_binary_alloc+0x120/0x240 [ 169.182412][ T5976] ? bpf_int_jit_compile+0xc4d0/0xc4d0 [ 169.182432][ T5976] bpf_int_jit_compile+0xb2f5/0xc4d0 [ 169.194212][ T5976] ? kfree+0xef/0x2a0 [ 169.194256][ T5976] ? stack_trace_snprint+0xe0/0xe0 [ 169.194287][ T5976] ? emit_bpf_dispatcher+0x1050/0x1050 [ 169.207764][ T5976] bpf_prog_select_runtime+0x46f/0x7b0 [ 169.207793][ T5976] ? bpf_prog_realloc+0x142/0x1c0 [ 169.217904][ T5976] bpf_prepare_filter+0x100e/0x11b0 [ 169.217930][ T5976] ? seccomp_attach_filter+0xbb0/0xbb0 [ 169.217952][ T5976] ? bpf_prog_create+0x1f0/0x1f0 [ 169.229035][ T5976] ? kmemdup+0x3d/0x50 [ 169.229058][ T5976] ? memcpy+0x3c/0x60 [ 169.229075][ T5976] bpf_prog_create_from_user+0x2cc/0x420 [ 169.229098][ T5976] ? seccomp_attach_filter+0xbb0/0xbb0 [ 169.229117][ T5976] do_seccomp+0x808/0x16a0 [ 169.253452][ T5976] ? __lock_acquire+0x7d40/0x7d40 [ 169.253499][ T5976] ? prctl_set_seccomp+0x60/0x60 [ 169.253516][ T5976] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 169.253541][ T5976] ? lockdep_hardirqs_on+0x94/0x140 [ 169.264645][ T5976] do_syscall_64+0x4c/0xa0 [ 169.275195][ T5976] ? clear_bhb_loop+0x30/0x80 [ 169.285318][ T5976] ? clear_bhb_loop+0x30/0x80 [ 169.296429][ T5976] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.309176][ T5976] RIP: 0033:0x7f04dbab1559 [ 169.309204][ T5976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.309217][ T5976] RSP: 002b:00007f04d9d09028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 169.309236][ T5976] RAX: ffffffffffffffda RBX: 00007f04dbd38fa0 RCX: 00007f04dbab1559 [ 169.323168][ T5976] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000001 [ 169.323191][ T5976] RBP: 00007f04dbb488b0 R08: 0000000000000000 R09: 0000000000000000 [ 169.323202][ T5976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.323210][ T5976] R13: 00007f04dbd39038 R14: 00007f04dbd38fa0 R15: 00007ffed74666b8 [ 169.323236][ T5976] [ 169.452432][ T5976] syz.5.353: vmalloc error: size 4096, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 169.574662][ T5964] bond1: (slave veth3): Enslaving as an active interface with a down link [ 169.681488][ T5965] bond1: (slave veth0_virt_wifi): making interface the new active one [ 169.732339][ T5965] device veth0_virt_wifi entered promiscuous mode [ 169.765414][ T5965] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 169.796980][ C1] net_ratelimit: 41 callbacks suppressed [ 169.820956][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.852300][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.917381][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.967207][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.008756][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 170.100352][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.128473][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.168440][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.239651][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.269898][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.337815][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.393984][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.447240][ T5498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.654448][ T5976] CPU: 0 PID: 5976 Comm: syz.5.353 Not tainted syzkaller #0 [ 170.663232][ T5976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 170.675746][ T5976] Call Trace: [ 170.679122][ T5976] [ 170.679132][ T5976] dump_stack_lvl+0x188/0x250 [ 170.679154][ T5976] ? rcu_lock_release+0x5/0x20 [ 170.679172][ T5976] ? show_regs_print_info+0x20/0x20 [ 170.679189][ T5976] ? load_image+0x410/0x410 [ 170.679216][ T5976] warn_alloc+0x245/0x320 [ 170.679238][ T5976] ? zone_watermark_ok_safe+0x250/0x250 [ 170.679265][ T5976] ? __get_vm_area_node+0x164/0x2d0 [ 170.679282][ T5976] ? aa_get_newest_label+0xf5/0x5a0 [ 170.679304][ T5976] __vmalloc_node_range+0x2b1/0x8b0 [ 170.679331][ T5976] module_alloc+0x81/0x90 [ 170.679348][ T5976] ? bpf_jit_binary_alloc+0x120/0x240 [ 170.679364][ T5976] bpf_jit_binary_alloc+0x120/0x240 [ 170.679380][ T5976] ? bpf_int_jit_compile+0xc4d0/0xc4d0 [ 170.679402][ T5976] bpf_int_jit_compile+0xb2f5/0xc4d0 [ 170.679421][ T5976] ? kfree+0xef/0x2a0 [ 170.679452][ T5976] ? stack_trace_snprint+0xe0/0xe0 [ 170.679484][ T5976] ? emit_bpf_dispatcher+0x1050/0x1050 [ 170.703275][ T5976] bpf_prog_select_runtime+0x46f/0x7b0 [ 170.729800][ T5976] ? bpf_prog_realloc+0x142/0x1c0 [ 170.729826][ T5976] bpf_prepare_filter+0x100e/0x11b0 [ 170.729847][ T5976] ? seccomp_attach_filter+0xbb0/0xbb0 [ 170.752292][ T5976] ? bpf_prog_create+0x1f0/0x1f0 [ 170.804713][ T5976] ? kmemdup+0x3d/0x50 [ 170.808895][ T5976] ? memcpy+0x3c/0x60 [ 170.813343][ T5976] bpf_prog_create_from_user+0x2cc/0x420 [ 170.819654][ T5976] ? seccomp_attach_filter+0xbb0/0xbb0 [ 170.825864][ T5976] do_seccomp+0x808/0x16a0 [ 170.826028][ T5988] loop4: detected capacity change from 0 to 8192 [ 170.831281][ T5976] ? __lock_acquire+0x7d40/0x7d40 [ 170.831317][ T5976] ? prctl_set_seccomp+0x60/0x60 [ 170.831334][ T5976] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 170.831360][ T5976] ? lockdep_hardirqs_on+0x94/0x140 [ 170.831384][ T5976] do_syscall_64+0x4c/0xa0 [ 170.831400][ T5976] ? clear_bhb_loop+0x30/0x80 [ 170.831417][ T5976] ? clear_bhb_loop+0x30/0x80 [ 170.831437][ T5976] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.844059][ T5976] RIP: 0033:0x7f04dbab1559 [ 170.887874][ T5976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.908517][ T5976] RSP: 002b:00007f04d9d09028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 170.917575][ T5976] RAX: ffffffffffffffda RBX: 00007f04dbd38fa0 RCX: 00007f04dbab1559 [ 170.927000][ T5976] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000001 [ 170.927022][ T5976] RBP: 00007f04dbb488b0 R08: 0000000000000000 R09: 0000000000000000 [ 170.927032][ T5976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.927049][ T5976] R13: 00007f04dbd39038 R14: 00007f04dbd38fa0 R15: 00007ffed74666b8 [ 170.927073][ T5976] [ 171.026044][ T5988] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 171.035990][ T5976] Mem-Info: [ 171.039942][ T5976] active_anon:349 inactive_anon:7312 isolated_anon:0 [ 171.039942][ T5976] active_file:5176 inactive_file:36281 isolated_file:0 [ 171.039942][ T5976] unevictable:768 dirty:134 writeback:0 [ 171.039942][ T5976] slab_reclaimable:21038 slab_unreclaimable:99166 [ 171.039942][ T5976] mapped:29552 shmem:2690 pagetables:655 bounce:0 [ 171.039942][ T5976] kernel_misc_reclaimable:0 [ 171.039942][ T5976] free:1363649 free_pcp:10297 free_cma:0 [ 171.162448][ T5988] REISERFS (device loop4): using ordered data mode [ 171.207084][ T5988] reiserfs: using flush barriers [ 171.277593][ T5988] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 171.403274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.414779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.467142][ T5976] Node 0 active_anon:1464kB inactive_anon:28636kB active_file:20504kB inactive_file:145124kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118408kB dirty:536kB writeback:0kB shmem:8680kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11572kB pagetables:2720kB all_unreclaimable? no [ 171.583056][ T5988] REISERFS (device loop4): checking transaction log (loop4) [ 171.608921][ T5498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.957138][ T5976] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 172.007856][ T5988] REISERFS (device loop4): Using tea hash to sort names [ 172.010717][ T6019] kvm: pic: non byte write [ 172.015706][ T5988] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 172.040373][ T6019] kvm: pic: non byte write [ 172.055878][ T6019] kvm: pic: non byte write [ 172.093820][ T5976] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 172.243254][ T5976] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 172.262920][ T5976] Node 0 DMA32 free:1531932kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:3520kB inactive_anon:26608kB active_file:22520kB inactive_file:145192kB unevictable:1536kB writepending:632kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:37596kB local_pcp:21108kB free_cma:0kB [ 172.427085][ T5976] lowmem_reserve[]: 0 0 0 0 0 [ 172.432208][ T5976] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 172.596247][ T5976] lowmem_reserve[]: 0 0 0 0 0 [ 172.627169][ T5976] Node 1 Normal free:3905184kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:2656kB local_pcp:852kB free_cma:0kB [ 172.781665][ T5976] lowmem_reserve[]: 0 0 0 0 0 [ 172.807133][ T5976] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 172.834050][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.850289][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.859781][ T5976] Node 0 DMA32: 559*4kB (UM) 85*8kB (UME) 94*16kB (UME) 501*32kB (UME) 133*64kB (UME) 64*128kB (UME) 18*256kB (UM) 16*512kB (UME) 10*1024kB (M) 1*2048kB (M) 359*4096kB (M) = 1532708kB [ 172.961145][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.974832][ T5976] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 173.017776][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.029774][ T5498] device veth0_vlan entered promiscuous mode [ 173.047841][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.062778][ T5976] Node 1 Normal: 157*4kB (UME) 35*8kB (UME) 31*16kB (UME) 167*32kB (UME) 75*64kB (UME) 23*128kB (UE) 7*256kB (UM) 4*512kB (U) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3905436kB [ 173.084254][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.111157][ T6042] kvm: MONITOR instruction emulated as NOP! [ 173.133763][ T5498] device veth1_vlan entered promiscuous mode [ 173.170939][ T5976] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 173.227223][ T6047] input: syz1 as /devices/virtual/input/input8 [ 173.244081][ T5976] Node 0 hugepages_total=12 hugepages_free=12 hugepages_surp=0 hugepages_size=2048kB [ 173.304829][ T5976] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 173.361584][ T5976] Node 1 hugepages_total=11 hugepages_free=11 hugepages_surp=0 hugepages_size=2048kB [ 173.393058][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 173.426999][ T5976] 43163 total pagecache pages [ 173.437892][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 173.456926][ T5976] 0 pages in swap cache [ 173.466046][ T5976] Swap cache stats: add 0, delete 0, find 0/0 [ 173.496424][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 173.508757][ T5976] Free swap = 124996kB [ 173.532621][ T5976] Total swap = 124996kB [ 173.546952][ T5976] 2097051 pages RAM [ 173.557148][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.576282][ T5976] 0 pages HighMem/MovableOnly [ 173.581340][ T5976] 415313 pages reserved [ 173.585512][ T5976] 0 pages cma reserved [ 173.617496][ T5498] device veth0_macvtap entered promiscuous mode [ 173.665274][ T5498] device veth1_macvtap entered promiscuous mode [ 173.771592][ T5498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.813173][ T5498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.857083][ T5498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.929879][ T5498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.967175][ T5498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.009712][ T5498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.068876][ T5498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.120191][ T5498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.158534][ T5498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.202176][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 174.220613][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 174.252491][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.302950][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.377283][ T5498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.418438][ T5498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.447059][ T5498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.489357][ T5498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.517684][ T5498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.564668][ T5498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.602355][ T5498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.633970][ T5498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.666543][ T5498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.685476][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.710493][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.749251][ T5498] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.760341][ T5498] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.779049][ T5498] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.791416][ T5498] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.887420][ T5498] net_ratelimit: 50 callbacks suppressed [ 175.098120][ T5554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.113567][ T5554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.176108][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 175.272981][ T5554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.292092][ T5554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.344281][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 175.407146][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fbdb800: rx timeout, send abort [ 175.644681][ T6125] loop6: detected capacity change from 0 to 1024 [ 175.714648][ T6132] loop5: detected capacity change from 0 to 7 [ 175.808438][ T6132] loop5: [ 175.811908][ T6132] loop5: partition table partially beyond EOD, truncated [ 175.919447][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fbdb800: abort rx timeout. Force session deactivation [ 176.045952][ T6104] loop4: detected capacity change from 0 to 40427 [ 176.224677][ T6104] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 176.267166][ T6104] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 176.321010][ T6104] F2FS-fs (loop4): invalid crc value [ 176.429513][ T6104] F2FS-fs (loop4): Found nat_bits in checkpoint [ 176.686248][ T6104] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 176.737228][ T6104] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 177.136409][ T5552] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 177.160973][ T5552] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 177.549415][ T6184] capability: warning: `syz.6.391' uses 32-bit capabilities (legacy support in use) [ 177.654431][ T6181] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 177.674908][ T6181] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 178.236006][ T6211] loop2: detected capacity change from 0 to 16 [ 178.425291][ T6211] erofs: (device loop2): mounted with root inode @ nid 36. [ 178.539020][ T6211] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 4095 of nid 36 [ 178.598407][ T6211] erofs: (device loop2): z_erofs_readpage: failed to read, err [-95] [ 178.616915][ T6211] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 179.440356][ T6218] loop4: detected capacity change from 0 to 32768 [ 179.489737][ T6218] (syz.4.399,6218,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "jourVĪl_async_com" or missing value [ 179.556247][ T6218] (syz.4.399,6218,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 179.802663][ T6250] loop4: detected capacity change from 0 to 64 [ 179.824108][ T6224] loop5: detected capacity change from 0 to 40427 [ 179.900898][ T6224] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 179.963530][ T6224] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 180.046727][ C0] net_ratelimit: 94 callbacks suppressed [ 180.063825][ T6224] F2FS-fs (loop5): invalid crc value [ 180.139933][ T6224] F2FS-fs (loop5): Found nat_bits in checkpoint [ 180.365614][ T6267] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 180.447181][ T6224] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 180.476020][ T6224] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 180.588584][ T6259] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 180.616298][ T6260] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 180.640939][ T6259] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 180.700469][ T6260] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 180.872137][ T5552] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 180.944523][ T5552] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 181.091777][ T6288] device veth0_macvtap left promiscuous mode [ 181.125314][ T6264] loop4: detected capacity change from 0 to 512 [ 181.187875][ T6264] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 181.266578][ T6264] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 181.308375][ T6264] EXT4-fs (loop4): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 181.344786][ T6264] EXT4-fs (loop4): DAX unsupported by block device. [ 181.637029][ T5552] device veth0_virt_wifi left promiscuous mode [ 181.692266][ T6299] input: syz0 as /devices/virtual/input/input9 [ 181.752663][ T6292] rxe_eth0 speed is unknown, defaulting to 1000 [ 182.867067][ T6332] tipc: Started in network mode [ 182.894375][ T6332] tipc: Node identity c62577a48bbb, cluster identity 4711 [ 182.944524][ T6332] tipc: Enabled bearer , priority 10 [ 183.017567][ T6326] tipc: Resetting bearer [ 183.078011][ T6326] tipc: Disabling bearer [ 183.256977][ T6341] loop5: detected capacity change from 0 to 512 [ 183.315395][ T6341] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 183.362948][ T6341] EXT4-fs warning (device loop5): dx_probe:893: inode #2: comm syz.5.422: dx entry: limit 1024 != root limit 124 [ 183.375645][ T6341] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.422: Corrupt directory, running e2fsck is recommended [ 183.397682][ T6341] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 183.410445][ T6341] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.422: corrupted in-inode xattr [ 183.423781][ T6341] EXT4-fs (loop5): Remounting filesystem read-only [ 183.423850][ T6341] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.422: couldn't read orphan inode 15 (err -117) [ 183.450246][ T6341] EXT4-fs (loop5): Remounting filesystem read-only [ 183.457915][ T6341] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,grpquota,init_itable,dioread_nolock,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 184.405972][ T6370] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 184.466847][ T6370] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 184.499147][ T6380] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 184.579040][ T6380] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 184.933910][ T6402] netlink: 24 bytes leftover after parsing attributes in process `syz.4.434'. [ 185.226172][ T5447] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 185.316180][ C0] net_ratelimit: 57 callbacks suppressed [ 185.386381][ T6421] input: syz0 as /devices/virtual/input/input10 [ 185.616096][ T5447] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 185.638982][ T5447] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 185.695231][ T5447] usb 8-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 185.729452][ T5447] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.878471][ T5447] usb 8-1: probing VID:PID(0424:012C) [ 185.936034][ T4885] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 185.960939][ T5447] usb 8-1: vub300 testing BULK IN EndPoint(0) 81 [ 185.994950][ T5447] usb 8-1: vub300 testing BULK OUT EndPoint(1) 02 [ 186.003925][ T5447] usb 8-1: vub300 testing BULK IN EndPoint(2) 83 [ 186.020700][ T5447] usb 8-1: vub300 testing BULK OUT EndPoint(3) 04 [ 186.042808][ T5447] usb 8-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 186.316211][ T5447] usb 8-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 186.356264][ T4885] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.402010][ T4885] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.465076][ T4885] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 186.504355][ T4885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.536161][ T5447] usb 8-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 186.621345][ T4885] option 5-1:1.0: GSM modem (1-port) converter detected [ 186.654419][ T4885] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 187.266091][ T6473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.449'. [ 187.288227][ T6473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.449'. [ 187.322740][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'. [ 187.710114][ T6441] loop6: detected capacity change from 0 to 32768 [ 187.827146][ T6441] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.443 (6441) [ 187.922663][ T6441] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 187.976433][ T6441] BTRFS info (device loop6): setting nodatacow, compression disabled [ 188.050375][ T6441] BTRFS info (device loop6): disabling tree log [ 188.110461][ T6441] BTRFS info (device loop6): turning on async discard [ 188.135807][ T6441] BTRFS info (device loop6): max_inline at 0 [ 188.180561][ T6441] BTRFS info (device loop6): using free space tree [ 188.230183][ T6441] BTRFS info (device loop6): has skinny extents [ 188.523384][ T4885] usb 5-1: USB disconnect, device number 7 [ 188.543012][ T4885] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 188.569298][ T4885] option 5-1:1.0: device disconnected [ 188.685718][ T9] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 188.874335][ T3852] device veth0_macvtap entered promiscuous mode [ 189.073390][ T6528] FAULT_INJECTION: forcing a failure. [ 189.073390][ T6528] name failslab, interval 1, probability 0, space 0, times 0 [ 189.131416][ T6534] loop5: detected capacity change from 0 to 512 [ 189.198704][ T6528] CPU: 0 PID: 6528 Comm: syz.7.457 Not tainted syzkaller #0 [ 189.206653][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 189.217525][ T6528] Call Trace: [ 189.220913][ T6528] [ 189.224125][ T6528] dump_stack_lvl+0x188/0x250 [ 189.228980][ T6528] ? show_regs_print_info+0x20/0x20 [ 189.234570][ T6528] ? load_image+0x410/0x410 [ 189.240014][ T6528] ? __might_sleep+0xf0/0xf0 [ 189.245085][ T6528] ? __lock_acquire+0x7d40/0x7d40 [ 189.250742][ T6528] should_fail+0x383/0x4b0 [ 189.250776][ T6528] should_failslab+0x5/0x20 [ 189.250795][ T6528] slab_pre_alloc_hook+0x51/0xc0 [ 189.250814][ T6528] __kmalloc_node_track_caller+0x68/0x3a0 [ 189.261549][ T6528] ? alloc_skb_with_frags+0xa7/0x720 [ 189.281265][ T6528] ? __alloc_skb+0xf4/0x750 [ 189.285978][ T6528] ? alloc_skb_with_frags+0xa7/0x720 [ 189.291472][ T6528] __alloc_skb+0x22c/0x750 [ 189.296150][ T6528] alloc_skb_with_frags+0xa7/0x720 [ 189.301827][ T6528] ? l2cap_sock_alloc_skb_cb+0xc4/0x440 [ 189.308367][ T6528] sock_alloc_send_pskb+0x87f/0x9a0 [ 189.314560][ T6528] ? __lock_acquire+0x7d40/0x7d40 [ 189.319882][ T6528] ? sock_kzfree_s+0x50/0x50 [ 189.324673][ T6528] ? _copy_from_iter+0x36f/0x1160 [ 189.330907][ T6528] l2cap_sock_alloc_skb_cb+0xdd/0x440 [ 189.336740][ T6528] ? l2cap_sock_get_peer_pid_cb+0x60/0x60 [ 189.342929][ T6528] ? __virt_addr_valid+0x3c6/0x470 [ 189.348376][ T6528] ? __phys_addr_symbol+0x2b/0x70 [ 189.353707][ T6528] ? __check_object_size+0x30c/0x410 [ 189.359351][ T6528] ? l2cap_sock_get_peer_pid_cb+0x60/0x60 [ 189.365828][ T6528] l2cap_skbuff_fromiovec+0x224/0x4f0 [ 189.371938][ T6528] l2cap_chan_send+0x414/0x2420 [ 189.377056][ T6528] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 189.383826][ T6528] ? l2cap_sock_sendmsg+0x199/0x2b0 [ 189.389242][ T6528] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 189.395760][ T6528] ? l2cap_conn_put+0xb0/0xb0 [ 189.400528][ T6528] ? __local_bh_enable_ip+0x136/0x1c0 [ 189.406013][ T6528] l2cap_sock_sendmsg+0x1aa/0x2b0 [ 189.411229][ T6528] sock_write_iter+0x2a6/0x3a0 [ 189.416107][ T6528] ? sock_read_iter+0x380/0x380 [ 189.421171][ T6528] do_iter_readv_writev+0x47d/0x5f0 [ 189.426672][ T6528] ? aa_path_link+0x8a0/0x8a0 [ 189.431976][ T6528] ? generic_file_rw_checks+0x280/0x280 [ 189.437802][ T6528] ? common_file_perm+0x171/0x1c0 [ 189.437829][ T6528] ? fsnotify_perm+0x5d/0x560 [ 189.437845][ T6528] ? security_file_permission+0x75/0xa0 [ 189.448255][ T6528] do_iter_write+0x1f8/0x7a0 [ 189.448290][ T6528] ? import_iovec+0x6f/0xa0 [ 189.448309][ T6528] do_writev+0x281/0x480 [ 189.448331][ T6528] ? do_readv+0x460/0x460 [ 189.460038][ T6528] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 189.460069][ T6528] ? lock_chain_count+0x20/0x20 [ 189.460091][ T6528] ? lockdep_hardirqs_on+0x94/0x140 [ 189.475247][ T6528] do_syscall_64+0x4c/0xa0 [ 189.487700][ T6528] ? clear_bhb_loop+0x30/0x80 [ 189.487728][ T6528] ? clear_bhb_loop+0x30/0x80 [ 189.487747][ T6528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 189.487766][ T6528] RIP: 0033:0x7fdce8976559 [ 189.487784][ T6528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.503549][ T6528] RSP: 002b:00007fdce6bce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 189.503576][ T6528] RAX: ffffffffffffffda RBX: 00007fdce8bfdfa0 RCX: 00007fdce8976559 [ 189.503589][ T6528] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000005 [ 189.503600][ T6528] RBP: 00007fdce8a0d8b0 R08: 0000000000000000 R09: 0000000000000000 [ 189.503610][ T6528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.503620][ T6528] R13: 00007fdce8bfe038 R14: 00007fdce8bfdfa0 R15: 00007fff9edbad68 [ 189.523301][ T6528] [ 189.625998][ T1340] usb 8-1: USB disconnect, device number 2 [ 189.651355][ T5447] usb 8-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 189.691693][ T6534] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled [ 189.836530][ T6534] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,usrjquota=./file0,,errors=continue. Quota mode: writeback. [ 189.858076][ T6547] CIFS: Attempting to mount \\127.0.0.1\share [ 189.907475][ T6534] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.975384][ T6549] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 0 [ 190.016795][ T1340] USB vub300 remote SDIO host controller[0] now disconnected [ 190.106036][ T6547] CIFS: VFS: cifs_mount failed w/return code = -112 [ 190.186875][ T6555] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 190.375420][ C0] net_ratelimit: 56 callbacks suppressed [ 190.679752][ C1] [ 190.682301][ C1] ================================ [ 190.688307][ C1] WARNING: inconsistent lock state [ 190.695040][ C1] syzkaller #0 Not tainted [ 190.700029][ C1] -------------------------------- [ 190.705581][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 190.710398][ T3852] netdevsim netdevsim1 eth5: bond_netdev_event received NETDEV_CHANGE [ 190.712807][ C1] kworker/1:19/5453 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 190.728396][ C1] ffff888024c0c710 ((work_completion)(&(&host->detect)->work)){+.?.}-{0:0}, at: __flush_work+0xfa/0x210 [ 190.732060][ C0] virtqueue callback for ffff888020c68400 (ffffffff85497fd0) [ 190.741552][ C1] {SOFTIRQ-ON-W} state was registered at: [ 190.749721][ C0] No more buffers in queue [ 190.755693][ C1] lock_acquire+0x19f/0x400 [ 190.755724][ C1] process_one_work+0x7ba/0xff0 [ 190.760347][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 190.765316][ C1] worker_thread+0xad7/0x12a0 [ 190.765336][ C1] kthread+0x42e/0x520 [ 190.765349][ C1] ret_from_fork+0x1f/0x30 [ 190.770467][ C0] No more buffers in queue [ 190.776563][ C1] irq event stamp: 4564 [ 190.776576][ C1] hardirqs last enabled at (4564): [] __cancel_work_timer+0x36a/0x560 [ 190.776605][ C1] hardirqs last disabled at (4563): [] try_to_grab_pending+0xfb/0x820 [ 190.782150][ C0] tcp_in_window: START [ 190.786710][ C1] softirqs last enabled at (3796): [] __irq_exit_rcu+0x13b/0x230 [ 190.786736][ C1] softirqs last disabled at (4481): [] __irq_exit_rcu+0x13b/0x230 [ 190.791507][ C0] tcp_in_window: [ 190.796418][ C1] [ 190.796418][ C1] other info that might help us debug this: [ 190.796452][ C1] Possible unsafe locking scenario: [ 190.796452][ C1] [ 190.796457][ C1] CPU0 [ 190.796461][ C1] ---- [ 190.796464][ C1] lock((work_completion)(&(&host->detect)->work)); [ 190.800621][ C0] seq=434297507 ack=1410051794+(0) sack=1410051794+(0) win=24567 end=434297508 [ 190.811438][ C1] [ 190.811448][ C1] lock((work_completion)(&(&host->detect)->work)); [ 190.811463][ C1] [ 190.811463][ C1] *** DEADLOCK *** [ 190.811463][ C1] [ 190.811468][ C1] 3 locks held by kworker/1:19/5453: [ 190.811479][ C1] #0: ffff888017870938 [ 190.823158][ C0] tcp_in_window: sender end=434297507 maxend=435635747 maxwin=3144576 scale=7 receiver end=1410051794 maxend=1413196370 maxwin=1343232 scale=7 [ 190.827916][ C1] ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 190.839747][ C0] tcp_in_window: [ 190.849515][ C1] #1: ffffc9000356fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 190.853450][ C0] seq=434297507 ack=1410051794+(0) sack=1410051794+(0) win=24567 end=434297508 [ 190.862126][ C1] #2: ffffc90000dd0bc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xca/0x540 [ 190.869922][ C0] tcp_in_window: sender end=434297507 maxend=435635747 maxwin=3144576 scale=7 receiver end=1410051794 maxend=1413196370 maxwin=1343232 scale=7 [ 190.873437][ C1] [ 190.873437][ C1] stack backtrace: [ 190.873449][ C1] CPU: 1 PID: 5453 Comm: kworker/1:19 Not tainted syzkaller #0 [ 190.876965][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 190.884141][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 190.893344][ C0] tcp_in_window: res=1 sender end=434297508 maxend=435635747 maxwin=3144576 receiver end=1410051794 maxend=1413196370 maxwin=1343232 [ 190.896865][ C1] Workqueue: events pwq_unbound_release_workfn [ 190.896892][ C1] Call Trace: [ 190.904028][ C0] tcp_conntracks: [ 190.912623][ C1] [ 190.912638][ C1] dump_stack_lvl+0x188/0x250 [ 190.912663][ C1] ? show_regs_print_info+0x20/0x20 [ 190.918233][ C0] syn=0 ack=1 fin=1 rst=0 old=3 new=4 [ 190.922628][ C1] valid_state+0x13b/0x1d0 [ 190.939965][ T4893] bond1: (slave veth3): Send learning packet: mac aa:aa:aa:aa:aa:2d vlan 0 [ 190.948911][ C1] mark_lock_irq+0xa9/0x900 [ 190.948941][ C1] ? stack_trace_save+0xa6/0xf0 [ 190.948956][ C1] ? save_trace+0xad0/0xad0 [ 190.948974][ C1] ? save_trace+0x5a/0xad0 [ 190.953187][ C0] virtqueue callback for ffff888020c68400 (ffffffff85497fd0) [ 190.966508][ C1] ? __lock_acquire+0x13b3/0x7d40 [ 190.975868][ C0] No more buffers in queue [ 190.987206][ C1] mark_lock+0x208/0x320 [ 190.987237][ C1] __lock_acquire+0xd77/0x7d40 [ 190.987259][ C1] ? mark_lock+0x94/0x320 [ 191.002316][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 191.008261][ C1] ? verify_lock_unused+0x140/0x140 [ 191.008294][ C1] ? mark_lock+0x94/0x320 [ 191.015943][ C0] No more buffers in queue [ 191.021356][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 191.031854][ C0] tcp_in_window: START [ 191.046310][ C1] ? verify_lock_unused+0x140/0x140 [ 191.046343][ C1] ? __rwlock_init+0x140/0x140 [ 191.053316][ C0] tcp_in_window: [ 191.056686][ C1] ? debug_object_assert_init+0x1e8/0x2f0 [ 191.056720][ C1] lock_acquire+0x19f/0x400 [ 191.060549][ C0] seq=434297507 ack=1410051794+(0) sack=1410051794+(0) win=24567 end=434297508 [ 191.063486][ C1] ? __flush_work+0xfa/0x210 [ 191.069628][ C0] tcp_in_window: sender end=434297508 maxend=435635747 maxwin=3144576 scale=7 receiver end=1410051794 maxend=1413196370 maxwin=1343232 scale=7 [ 191.075245][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 191.082050][ C0] tcp_in_window: [ 191.086950][ C1] ? read_lock_is_recursive+0x10/0x10 [ 191.086981][ C1] ? kobject_put+0x25c/0x450 [ 191.096232][ C0] seq=434297507 ack=1410051794+(0) sack=1410051794+(0) win=24567 end=434297508 [ 191.096259][ C0] tcp_in_window: sender end=434297508 maxend=435635747 maxwin=3144576 scale=7 receiver end=1410051794 maxend=1413196370 maxwin=1343232 scale=7 [ 191.096280][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 191.101040][ C1] ? call_timer_fn+0x17b/0x540 [ 191.106166][ C0] tcp_in_window: res=1 sender end=434297508 maxend=435635747 maxwin=3144576 receiver end=1410051794 maxend=1413196370 maxwin=1343232 [ 191.110843][ C1] ? __run_timers+0x56c/0x810 [ 191.115524][ C0] tcp_conntracks: [ 191.124041][ C1] ? run_timer_softirq+0x63/0xf0 [ 191.129370][ C0] syn=0 ack=1 fin=1 rst=0 old=4 new=6 [ 191.133994][ C1] __flush_work+0x116/0x210 [ 191.138619][ C0] nf_conntrack: normal packet for ffff8880798e4180 [ 191.143166][ C1] ? __flush_work+0xfa/0x210 [ 191.147716][ C0] tcp_in_window: START [ 191.153735][ C1] ? flush_work+0x20/0x20 [ 191.159038][ C0] tcp_in_window: [ 191.163415][ C1] ? __timer_delete+0x6c/0x220 [ 191.167911][ C0] seq=1410051794 ack=434297508+(0) sack=434297508+(0) win=10494 end=1410051794 [ 191.173875][ C1] ? mark_lock+0x94/0x320 [ 191.173879][ C0] virtqueue callback for ffff888020c68400 (ffffffff85497fd0) [ 191.173897][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 191.178172][ C0] tcp_in_window: sender end=1410051794 maxend=1413196370 maxwin=1343232 scale=7 receiver end=434297508 maxend=435635747 maxwin=3144576 scale=7 [ 191.184061][ C1] ? lock_chain_count+0x20/0x20 [ 191.189349][ C0] tcp_in_window: [ 191.193116][ C1] ? kasan_quarantine_put+0x39/0x210 [ 191.200604][ C0] seq=1410051794 ack=434297508+(0) sack=434297508+(0) win=10494 end=1410051794 [ 191.205403][ C1] ? kasan_quarantine_put+0xd4/0x210 [ 191.205424][ C1] ? __cancel_work_timer+0x36a/0x560 [ 191.215948][ C0] tcp_in_window: sender end=1410051794 maxend=1413196370 maxwin=1343232 scale=7 receiver end=434297508 maxend=435635747 maxwin=3144576 scale=7 [ 191.220955][ C1] __cancel_work_timer+0x3f4/0x560 [ 191.236420][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 191.242627][ C1] ? slab_free_freelist_hook+0xec/0x170 [ 191.246669][ C0] tcp_in_window: res=1 sender end=1410051794 maxend=1413196370 maxwin=1343232 receiver end=434297508 maxend=435640740 maxwin=3144576 [ 191.254419][ C1] ? cancel_work_sync+0x20/0x20 [ 191.259279][ C0] tcp_conntracks: [ 191.268682][ C1] ? kobject_put+0x25c/0x450 [ 191.268704][ C1] ? kfree+0xef/0x2a0 [ 191.285210][ C0] syn=0 ack=1 fin=0 rst=0 old=6 new=7 [ 191.290722][ C1] ? kobject_put+0x41d/0x450 [ 191.290748][ C1] ? kref_get+0x70/0x70 [ 191.295786][ C0] No more buffers in queue [ 191.309622][ C1] mmc_free_host+0x15/0x30 [ 191.309649][ C1] call_timer_fn+0x17b/0x540 [ 191.309665][ C1] ? kref_get+0x70/0x70 [ 191.309671][ C0] virtqueue callback for ffff88801f728b00 (ffffffff84450960) [ 191.309685][ C1] ? __run_timers+0x810/0x810 [ 191.309703][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 191.309724][ C0] virtqueue interrupt with no work for ffff88801f728a00 [ 191.309721][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 191.309734][ C0] virtqueue interrupt with no work for ffff88801f728900 [ 191.309742][ C1] ? kref_get+0x70/0x70 [ 191.309757][ C1] __run_timers+0x56c/0x810 [ 191.314673][ C0] eth0: xmit ffff88807c8008c0 42:01:0a:80:00:01 [ 191.318797][ C1] ? detach_timer+0x2b0/0x2b0 [ 191.318831][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 191.323888][ C0] Added buffer head 0 to ffff888020c68500 [ 191.329813][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 191.329835][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 191.329842][ C0] virtqueue callback for ffff888020c68500 (ffffffff854980c0) [ 191.329856][ C1] run_timer_softirq+0x63/0xf0 [ 191.644841][ C1] handle_softirqs+0x336/0x830 [ 191.649656][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 191.654593][ C1] ? do_softirq+0x210/0x210 [ 191.659257][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 191.664742][ C1] __irq_exit_rcu+0x13b/0x230 [ 191.669428][ C1] ? irq_exit_rcu+0x20/0x20 [ 191.674009][ C1] irq_exit_rcu+0x5/0x20 [ 191.678438][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 191.684329][ C1] [ 191.687534][ C1] [ 191.690574][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 191.696752][ C1] RIP: 0010:lockdep_unregister_key+0x4d3/0x520 [ 191.703426][ C1] Code: 48 3b 84 24 80 00 00 00 75 39 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 79 7d 64 08 41 f7 c4 00 02 00 00 74 90 fb 84 db <75> 8f eb a0 0f 0b e9 44 ff ff ff 0f 0b e9 b0 fe ff ff 0f 0b e9 fd [ 191.724368][ C1] RSP: 0018:ffffc9000356fb20 EFLAGS: 00000202 [ 191.730520][ C1] RAX: dffffc0000000000 RBX: ffff888019fd8101 RCX: 4275e775dd361800 [ 191.739376][ C1] RDX: 0000000000000001 RSI: ffffffff8a2b39e0 RDI: ffffffff8a7a4c00 [ 191.748069][ C1] RBP: ffffc9000356fbf0 R08: ffffffff90fe6df7 R09: 1ffffffff21fcdbe [ 191.756204][ C1] R10: dffffc0000000000 R11: fffffbfff21fcdbf R12: 0000000000000207 [ 191.764348][ C1] R13: ffff888019fd8129 R14: ffffffff90fe5028 R15: 1ffff920006adf68 [ 191.772605][ C1] ? lockdep_reset_lock+0x300/0x300 [ 191.777888][ C1] ? read_lock_is_recursive+0x10/0x10 [ 191.783726][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 191.789873][ C1] ? _raw_spin_unlock+0x40/0x40 [ 191.794899][ C1] pwq_unbound_release_workfn+0x262/0x2b0 [ 191.800904][ C1] process_one_work+0x867/0xff0 [ 191.806021][ C1] ? worker_detach_from_pool+0x240/0x240 [ 191.812208][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 191.817763][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 191.823054][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 191.828656][ C1] ? wq_worker_running+0x97/0x170 [ 191.834032][ C1] worker_thread+0xad7/0x12a0 [ 191.839090][ C1] kthread+0x42e/0x520 [ 191.843263][ C1] ? rcu_lock_release+0x20/0x20 [ 191.848394][ C1] ? kthread_blkcg+0xd0/0xd0 [ 191.853170][ C1] ret_from_fork+0x1f/0x30 [ 191.857956][ C1] [ 191.861028][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:3031 [ 191.861745][ C0] wireguard: wg1: Sending keepalive packet to peer 34 (127.0.0.1:20003) [ 191.870349][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5453, name: kworker/1:19 [ 191.879637][ C0] wireguard: wg0: Sending keepalive packet to peer 20 ([::1]:20003/0%0) [ 191.888548][ C1] INFO: lockdep is turned off. [ 191.888555][ C1] Preemption disabled at: [ 191.897082][ C0] wireguard: wg0: Sending keepalive packet to peer 8 ([::1]:20003/0%0) [ 191.901987][ C1] [] handle_softirqs+0xfd/0x830 [ 191.907249][ C0] Sent skb ffff88807c8008c0 [ 191.915421][ C1] CPU: 1 PID: 5453 Comm: kworker/1:19 Not tainted syzkaller #0 [ 191.922827][ C0] No more buffers in queue [ 191.927390][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 191.927406][ C1] Workqueue: events pwq_unbound_release_workfn [ 191.927429][ C1] Call Trace: [ 191.927436][ C1] [ 191.927443][ C1] dump_stack_lvl+0x188/0x250 [ 191.935903][ C0] No more buffers in queue [ 191.941014][ C1] ? lock_chain_count+0x20/0x20 [ 191.952381][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 191.958831][ C1] ? show_regs_print_info+0x20/0x20 [ 191.958854][ C1] ? load_image+0x410/0x410 [ 191.962478][ C0] No more buffers in queue [ 191.965317][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 191.965349][ C1] ___might_sleep+0x493/0x610 [ 191.970162][ C0] tcp_in_window: START [ 191.975818][ C1] ? handle_softirqs+0xfd/0x830 [ 191.975848][ C1] ? __might_sleep+0xf0/0xf0 [ 191.975863][ C1] ? lock_release+0xb5/0x8a0 [ 191.981066][ C0] tcp_in_window: [ 191.987754][ C1] ? __flush_work+0x11a/0x210 [ 191.987787][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 191.987804][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 191.987821][ C1] ? kobject_put+0x25c/0x450 [ 191.993308][ C0] seq=434297507 ack=1410051794+(0) sack=1410051794+(0) win=24567 end=434297508 [ 191.998593][ C1] start_flush_work+0x2e/0x830 [ 191.998621][ C1] __flush_work+0x148/0x210 [ 191.998636][ C1] ? flush_work+0x20/0x20 [ 191.998653][ C1] ? lock_chain_count+0x20/0x20 [ 191.998669][ C1] ? kasan_quarantine_put+0x39/0x210 [ 191.998684][ C1] ? kasan_quarantine_put+0xd4/0x210 [ 191.998699][ C1] ? __cancel_work_timer+0x36a/0x560 [ 192.003366][ C0] tcp_in_window: sender end=434297508 maxend=435640740 maxwin=3144576 scale=7 receiver end=1410051794 maxend=1413196370 maxwin=1343232 scale=7 [ 192.009946][ C1] __cancel_work_timer+0x3f4/0x560 [ 192.009971][ C1] ? slab_free_freelist_hook+0xec/0x170 [ 192.015274][ C0] tcp_in_window: [ 192.019501][ C1] ? cancel_work_sync+0x20/0x20 [ 192.025040][ C0] seq=434297507 ack=1410051794+(0) sack=1410051794+(0) win=24567 end=434297508 [ 192.030051][ C1] ? kobject_put+0x25c/0x450 [ 192.030075][ C1] ? kfree+0xef/0x2a0 [ 192.030090][ C1] ? kobject_put+0x41d/0x450 [ 192.035236][ C0] tcp_in_window: sender end=434297508 maxend=435640740 maxwin=3144576 scale=7 receiver end=1410051794 maxend=1413196370 maxwin=1343232 scale=7 [ 192.039113][ C1] ? kref_get+0x70/0x70 [ 192.043964][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 192.050191][ C1] mmc_free_host+0x15/0x30 [ 192.050211][ C1] call_timer_fn+0x17b/0x540 [ 192.055462][ C0] tcp_in_window: res=1 sender end=434297508 maxend=435640740 maxwin=3144576 receiver end=1410051794 maxend=1413196370 maxwin=1343232 [ 192.060367][ C1] ? kref_get+0x70/0x70 [ 192.069936][ C0] tcp_conntracks: [ 192.075130][ C1] ? __run_timers+0x810/0x810 [ 192.079656][ C0] syn=0 ack=1 fin=1 rst=0 old=7 new=7 [ 192.084241][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 192.089544][ C0] nf_conntrack: normal packet for ffff8880798e4180 [ 192.094836][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 192.100233][ C0] tcp_in_window: START [ 192.106061][ C1] ? kref_get+0x70/0x70 [ 192.106083][ C1] __run_timers+0x56c/0x810 [ 192.121468][ C0] tcp_in_window: [ 192.126894][ C1] ? detach_timer+0x2b0/0x2b0 [ 192.132820][ C0] seq=1410051794 ack=434297508+(0) sack=434297508+(0) win=10494 end=1410051794 [ 192.136620][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 192.136645][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 192.141833][ C0] tcp_in_window: sender end=1410051794 maxend=1413196370 maxwin=1343232 scale=7 receiver end=434297508 maxend=435640740 maxwin=3144576 scale=7 [ 192.151184][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 192.151214][ C1] run_timer_softirq+0x63/0xf0 [ 192.155798][ C0] tcp_in_window: [ 192.159850][ C1] handle_softirqs+0x336/0x830 [ 192.164691][ C0] seq=1410051794 ack=434297508+(0) sack=434297508+(0) win=10494 end=1410051794 [ 192.180129][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 192.180156][ C1] ? do_softirq+0x210/0x210 [ 192.184472][ C0] tcp_in_window: sender end=1410051794 maxend=1413196370 maxwin=1343232 scale=7 receiver end=434297508 maxend=435640740 maxwin=3144576 scale=7 [ 192.189849][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 192.189874][ C1] __irq_exit_rcu+0x13b/0x230 [ 192.194645][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 192.199399][ C1] ? irq_exit_rcu+0x20/0x20 [ 192.199429][ C1] irq_exit_rcu+0x5/0x20 [ 192.199443][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 192.213422][ C0] tcp_in_window: res=1 sender end=1410051794 maxend=1413196370 maxwin=1343232 receiver end=434297508 maxend=435640740 maxwin=3144576 [ 192.217676][ C1] [ 192.217683][ C1] [ 192.217689][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 192.221387][ C0] tcp_conntracks: [ 192.226515][ C1] RIP: 0010:lockdep_unregister_key+0x4d3/0x520 [ 192.226537][ C1] Code: 48 3b 84 24 80 00 00 00 75 39 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 79 7d 64 08 41 f7 c4 00 02 00 00 74 90 fb 84 db <75> 8f eb a0 0f 0b e9 44 ff ff ff 0f 0b e9 b0 fe ff ff 0f 0b e9 fd [ 192.232267][ C0] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 192.237994][ C1] RSP: 0018:ffffc9000356fb20 EFLAGS: 00000202 [ 192.238016][ C1] RAX: dffffc0000000000 RBX: ffff888019fd8101 RCX: 4275e775dd361800 [ 192.238027][ C1] RDX: 0000000000000001 RSI: ffffffff8a2b39e0 RDI: ffffffff8a7a4c00 [ 192.238038][ C1] RBP: ffffc9000356fbf0 R08: ffffffff90fe6df7 R09: 1ffffffff21fcdbe [ 192.238049][ C1] R10: dffffc0000000000 R11: fffffbfff21fcdbf R12: 0000000000000207 [ 192.244700][ C0] No more buffers in queue [ 192.249977][ C1] R13: ffff888019fd8129 R14: ffffffff90fe5028 R15: 1ffff920006adf68 [ 192.249999][ C1] ? lockdep_reset_lock+0x300/0x300 [ 192.254403][ C0] eth0: xmit ffff888055906000 42:01:0a:80:00:01 [ 192.258642][ C1] ? read_lock_is_recursive+0x10/0x10 [ 192.258663][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 192.263866][ C0] Added buffer head 0 to ffff888020c68500 [ 192.267480][ C1] ? _raw_spin_unlock+0x40/0x40 [ 192.267499][ C1] pwq_unbound_release_workfn+0x262/0x2b0 [ 192.267508][ C0] virtqueue callback for ffff888020c68500 (ffffffff854980c0) [ 192.267524][ C1] process_one_work+0x867/0xff0 [ 192.273139][ C0] Sent skb ffff888055906000 [ 192.282131][ C1] ? worker_detach_from_pool+0x240/0x240 [ 192.282158][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 192.288164][ C0] No more buffers in queue [ 192.292953][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 192.324065][ T3852] net eth5: siw: event 4 [ 192.328277][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 192.328307][ C1] ? wq_worker_running+0x97/0x170 [ 192.348019][ T4893] bond1: (slave veth0_virt_wifi): Send learning packet: mac 3e:0b:33:a0:36:71 vlan 0 [ 192.363136][ C1] worker_thread+0xad7/0x12a0 [ 192.363176][ C1] kthread+0x42e/0x520 [ 192.363192][ C1] ? rcu_lock_release+0x20/0x20 [ 192.363209][ C1] ? kthread_blkcg+0xd0/0xd0 [ 192.645883][ C1] ret_from_fork+0x1f/0x30 [ 192.650486][ C1] [ 192.653747][ C1] kobject: 'mmc0' (ffff888024c0c008): kobject_cleanup, parent 0000000000000000 [ 192.663282][ C1] kobject: 'mmc0' (ffff888024c0c008): calling ktype release [ 192.663363][ T1340] Added buffer head 0 to ffff88801f728b00 [ 192.670952][ C1] ODEBUG: object ffffc90000dd09a0 is NOT on stack ffffc90003568000, but annotated. [ 192.671315][ C1] ------------[ cut here ]------------ [ 192.677717][ C0] virtqueue callback for ffff88801f728b00 (ffffffff84450960) [ 192.687139][ C1] WARNING: CPU: 1 PID: 5453 at lib/debugobjects.c:561 __debug_object_init+0x4c0/0xc80 [ 192.693328][ C0] virtqueue interrupt with no work for ffff88801f728a00 [ 192.700923][ C1] Modules linked in: [ 192.710899][ C0] virtqueue interrupt with no work for ffff88801f728900 [ 192.718257][ C1] [ 192.725497][ T1340] Added buffer head 0 to ffff88801f728b00 [ 192.729466][ C1] CPU: 1 PID: 5453 Comm: kworker/1:19 Tainted: G W syzkaller #0 [ 192.729489][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 192.752552][ T3852] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::7cc8:a7fc:2180:3cf7 in wq:ffffffff974d9858 [ 192.760448][ C1] Workqueue: events pwq_unbound_release_workfn [ 192.760481][ C1] RIP: 0010:__debug_object_init+0x4c0/0xc80 [ 192.760504][ C1] Code: 16 d2 54 13 48 c7 c1 00 54 7a 8a 48 c7 c7 60 54 7a 8a 84 c0 48 0f 45 f9 4c 89 ee e8 ca ee c9 05 48 be 00 00 00 00 00 fc ff df <0f> 0b e9 4d fd ff ff 83 3d 42 d1 54 13 00 4c 89 6c 24 28 0f 84 23 [ 192.760517][ C1] RSP: 0018:ffffc90000dd07e0 EFLAGS: 00010046 [ 192.760532][ C1] RAX: 0000000000000050 RBX: 0000000000000001 RCX: 4275e775dd361800 [ 192.772795][ T3852] IPv6: now = 4294956383, schedule = 4294968400, rounded schedule = 4294968500 => 4294968400 [ 192.778847][ C1] RDX: 0000000000000100 RSI: dffffc0000000000 RDI: 0000000000000000 [ 192.778861][ C1] RBP: ffffc90000dd0950 R08: ffffffff8d1139a3 R09: 1ffffffff1a22734 [ 192.778872][ C1] R10: dffffc0000000000 R11: fffffbfff1a22735 R12: f8f8f8f8f8f8f8f8 [ 192.778885][ C1] R13: ffffc90000dd09a0 R14: ffff88807ba28020 R15: ffff88805fa3f428 [ 192.867049][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 192.876084][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.883069][ C1] CR2: 00007ff7e653fa90 CR3: 000000002bfb0000 CR4: 00000000003506e0 [ 192.891452][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 192.901018][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 192.909569][ C1] Call Trace: [ 192.912890][ C1] [ 192.916403][ C1] ? lockdep_softirqs_off+0x430/0x430 [ 192.922257][ C1] ? ___might_sleep+0xd5/0x610 [ 192.927225][ C1] ? debug_object_init+0x10/0x10 [ 192.932546][ C1] ? lockdep_softirqs_off+0x430/0x430 [ 192.938030][ C1] ? rcu_is_watching+0x11/0xa0 [ 192.943378][ C1] ? __might_sleep+0xf0/0xf0 [ 192.948512][ C1] ? lock_release+0xb5/0x8a0 [ 192.953219][ C1] ? __init_swait_queue_head+0xa4/0x140 [ 192.959523][ C1] __synchronize_srcu+0x229/0x350 [ 192.964861][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 192.971016][ C1] ? _raw_spin_unlock+0x40/0x40 [ 192.977865][ C1] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 192.984141][ C1] ? synchronize_srcu+0x18f/0x1b0 [ 192.989486][ C1] wakeup_source_unregister+0x112/0x190 [ 192.995568][ C1] mmc_host_classdev_release+0x43/0xf0 [ 192.998055][ T3852] lapb19: bond_netdev_event received NETDEV_PRE_UP [ 193.001228][ C1] ? mmc_free_host+0x30/0x30 [ 193.001255][ C1] device_release+0x92/0x1c0 [ 193.009517][ T3852] net lapb19: siw: event 14 [ 193.014683][ C1] kobject_put+0x217/0x450 [ 193.014711][ C1] ? kref_get+0x70/0x70 [ 193.022183][ T3852] lapb19: bond_netdev_event received NETDEV_UP [ 193.025323][ C1] call_timer_fn+0x17b/0x540 [ 193.025356][ C1] ? kref_get+0x70/0x70 [ 193.025373][ C1] ? __run_timers+0x810/0x810 [ 193.025393][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 193.030583][ T3852] net lapb19: siw: event 1 [ 193.034453][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 193.034476][ C1] ? kref_get+0x70/0x70 [ 193.034494][ C1] __run_timers+0x56c/0x810 [ 193.049095][ T3852] netdevsim netdevsim1 eth6: bond_netdev_event received NETDEV_CHANGE [ 193.050060][ C1] ? detach_timer+0x2b0/0x2b0 [ 193.060193][ T3852] net eth6: siw: event 4 [ 193.061005][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 193.087221][ T3852] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::8b8c:6b66:36c5:c754 in wq:ffffffff974d9858 [ 193.090078][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 193.090110][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 193.096936][ T3852] IPv6: now = 4294956418, schedule = 4294968500, rounded schedule = 4294968600 => 4294968500 [ 193.099755][ C1] run_timer_softirq+0x63/0xf0 [ 193.099783][ C1] handle_softirqs+0x336/0x830 [ 193.110260][ T3852] netdevsim netdevsim1 eth7: bond_netdev_event received NETDEV_CHANGE [ 193.119672][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 193.119700][ C1] ? do_softirq+0x210/0x210 [ 193.119714][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 193.125811][ T3852] net eth7: siw: event 4 [ 193.132365][ C1] __irq_exit_rcu+0x13b/0x230 [ 193.132395][ C1] ? irq_exit_rcu+0x20/0x20 [ 193.132414][ C1] irq_exit_rcu+0x5/0x20 [ 193.167429][ T3852] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::5738:59a:ff02:2ccf in wq:ffffffff974d9858 [ 193.169523][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 193.169554][ C1] [ 193.169562][ C1] [ 193.175998][ T3852] IPv6: now = 4294956423, schedule = 4294968500, rounded schedule = 4294968600 => 4294968500 [ 193.181413][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 193.181444][ C1] RIP: 0010:lockdep_unregister_key+0x4d3/0x520 [ 193.189346][ T3852] netdevsim netdevsim1 eth8: bond_netdev_event received NETDEV_CHANGE [ 193.190944][ C1] Code: 48 3b 84 24 80 00 00 00 75 39 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 79 7d 64 08 41 f7 c4 00 02 00 00 74 90 fb 84 db <75> 8f eb a0 0f 0b e9 44 ff ff ff 0f 0b e9 b0 fe ff ff 0f 0b e9 fd [ 193.190966][ C1] RSP: 0018:ffffc9000356fb20 EFLAGS: 00000202 [ 193.197267][ T3521] sd 0:0:1:0: cmd ffff888024d96928 CDB: 0x2a [ 193.201626][ C1] [ 193.201634][ C1] RAX: dffffc0000000000 RBX: ffff888019fd8101 RCX: 4275e775dd361800 [ 193.201646][ C1] RDX: 0000000000000001 RSI: ffffffff8a2b39e0 RDI: ffffffff8a7a4c00 [ 193.201658][ C1] RBP: ffffc9000356fbf0 R08: ffffffff90fe6df7 R09: 1ffffffff21fcdbe [ 193.214888][ T3521] Added buffer head 133 to ffff888023030e00 [ 193.220646][ C1] R10: dffffc0000000000 R11: fffffbfff21fcdbf R12: 0000000000000207 [ 193.224529][ T3852] net eth8: siw: event 4 [ 193.227011][ C1] R13: ffff888019fd8129 R14: ffffffff90fe5028 R15: 1ffff920006adf68 [ 193.227034][ C1] ? lockdep_reset_lock+0x300/0x300 [ 193.227057][ C1] ? read_lock_is_recursive+0x10/0x10 [ 193.375655][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 193.382359][ C1] ? _raw_spin_unlock+0x40/0x40 [ 193.388198][ C1] pwq_unbound_release_workfn+0x262/0x2b0 [ 193.394513][ C1] process_one_work+0x867/0xff0 [ 193.399382][ C1] ? worker_detach_from_pool+0x240/0x240 [ 193.405936][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 193.411253][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 193.416631][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 193.422394][ C1] ? wq_worker_running+0x97/0x170 [ 193.428123][ C1] worker_thread+0xad7/0x12a0 [ 193.433723][ C1] kthread+0x42e/0x520 [ 193.439095][ C1] ? rcu_lock_release+0x20/0x20 [ 193.444843][ C1] ? kthread_blkcg+0xd0/0xd0 [ 193.450169][ C1] ret_from_fork+0x1f/0x30 [ 193.454607][ C1] [ 193.458094][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 193.466505][ C1] CPU: 1 PID: 5453 Comm: kworker/1:19 Tainted: G W syzkaller #0 [ 193.476493][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 193.488053][ C1] Workqueue: events pwq_unbound_release_workfn [ 193.494729][ C1] Call Trace: [ 193.497998][ C1] [ 193.500828][ C1] dump_stack_lvl+0x188/0x250 [ 193.505927][ C1] ? show_regs_print_info+0x20/0x20 [ 193.511295][ C1] ? load_image+0x410/0x410 [ 193.515946][ C1] panic+0x2f8/0x850 [ 193.520111][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 193.524896][ C1] ? ret_from_fork+0x1f/0x30 [ 193.530458][ C1] ? __debug_object_init+0x4c0/0xc80 [ 193.536455][ C1] __warn+0x248/0x2b0 [ 193.540603][ C1] ? __debug_object_init+0x4c0/0xc80 [ 193.546665][ C1] report_bug+0x1b9/0x2e0 [ 193.550992][ C1] handle_bug+0x3a/0x70 [ 193.555220][ C1] exc_invalid_op+0x16/0x40 [ 193.560392][ C1] asm_exc_invalid_op+0x16/0x20 [ 193.566380][ C1] RIP: 0010:__debug_object_init+0x4c0/0xc80 [ 193.573077][ C1] Code: 16 d2 54 13 48 c7 c1 00 54 7a 8a 48 c7 c7 60 54 7a 8a 84 c0 48 0f 45 f9 4c 89 ee e8 ca ee c9 05 48 be 00 00 00 00 00 fc ff df <0f> 0b e9 4d fd ff ff 83 3d 42 d1 54 13 00 4c 89 6c 24 28 0f 84 23 [ 193.593315][ C1] RSP: 0018:ffffc90000dd07e0 EFLAGS: 00010046 [ 193.599936][ C1] RAX: 0000000000000050 RBX: 0000000000000001 RCX: 4275e775dd361800 [ 193.608372][ C1] RDX: 0000000000000100 RSI: dffffc0000000000 RDI: 0000000000000000 [ 193.616752][ C1] RBP: ffffc90000dd0950 R08: ffffffff8d1139a3 R09: 1ffffffff1a22734 [ 193.624947][ C1] R10: dffffc0000000000 R11: fffffbfff1a22735 R12: f8f8f8f8f8f8f8f8 [ 193.633189][ C1] R13: ffffc90000dd09a0 R14: ffff88807ba28020 R15: ffff88805fa3f428 [ 193.641335][ C1] ? lockdep_softirqs_off+0x430/0x430 [ 193.647195][ C1] ? ___might_sleep+0xd5/0x610 [ 193.652118][ C1] ? debug_object_init+0x10/0x10 [ 193.657359][ C1] ? lockdep_softirqs_off+0x430/0x430 [ 193.665179][ C1] ? rcu_is_watching+0x11/0xa0 [ 193.670452][ C1] ? __might_sleep+0xf0/0xf0 [ 193.675047][ C1] ? lock_release+0xb5/0x8a0 [ 193.680250][ C1] ? __init_swait_queue_head+0xa4/0x140 [ 193.686564][ C1] __synchronize_srcu+0x229/0x350 [ 193.692124][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 193.699158][ C1] ? _raw_spin_unlock+0x40/0x40 [ 193.704284][ C1] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 193.709992][ C1] ? synchronize_srcu+0x18f/0x1b0 [ 193.715220][ C1] wakeup_source_unregister+0x112/0x190 [ 193.721240][ C1] mmc_host_classdev_release+0x43/0xf0 [ 193.727578][ C1] ? mmc_free_host+0x30/0x30 [ 193.732901][ C1] device_release+0x92/0x1c0 [ 193.737509][ C1] kobject_put+0x217/0x450 [ 193.742624][ C1] ? kref_get+0x70/0x70 [ 193.747289][ C1] call_timer_fn+0x17b/0x540 [ 193.752783][ C1] ? kref_get+0x70/0x70 [ 193.757587][ C1] ? __run_timers+0x810/0x810 [ 193.763247][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 193.768885][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 193.774587][ C1] ? kref_get+0x70/0x70 [ 193.779299][ C1] __run_timers+0x56c/0x810 [ 193.784319][ C1] ? detach_timer+0x2b0/0x2b0 [ 193.790025][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 193.796575][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 193.802576][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 193.810703][ C1] run_timer_softirq+0x63/0xf0 [ 193.819847][ C1] handle_softirqs+0x336/0x830 [ 193.829528][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 193.837007][ C1] ? do_softirq+0x210/0x210 [ 193.844260][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 193.850873][ C1] __irq_exit_rcu+0x13b/0x230 [ 193.856876][ C1] ? irq_exit_rcu+0x20/0x20 [ 193.862112][ C1] irq_exit_rcu+0x5/0x20 [ 193.868128][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 193.876052][ C1] [ 193.880422][ C1] [ 193.883888][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 193.891328][ C1] RIP: 0010:lockdep_unregister_key+0x4d3/0x520 [ 193.899197][ C1] Code: 48 3b 84 24 80 00 00 00 75 39 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 79 7d 64 08 41 f7 c4 00 02 00 00 74 90 fb 84 db <75> 8f eb a0 0f 0b e9 44 ff ff ff 0f 0b e9 b0 fe ff ff 0f 0b e9 fd [ 193.923567][ C1] RSP: 0018:ffffc9000356fb20 EFLAGS: 00000202 [ 193.930606][ C1] RAX: dffffc0000000000 RBX: ffff888019fd8101 RCX: 4275e775dd361800 [ 193.941375][ C1] RDX: 0000000000000001 RSI: ffffffff8a2b39e0 RDI: ffffffff8a7a4c00 [ 193.954611][ C1] RBP: ffffc9000356fbf0 R08: ffffffff90fe6df7 R09: 1ffffffff21fcdbe [ 193.963546][ C1] R10: dffffc0000000000 R11: fffffbfff21fcdbf R12: 0000000000000207 [ 193.972590][ C1] R13: ffff888019fd8129 R14: ffffffff90fe5028 R15: 1ffff920006adf68 [ 193.981914][ C1] ? lockdep_reset_lock+0x300/0x300 [ 193.987794][ C1] ? read_lock_is_recursive+0x10/0x10 [ 193.993631][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 193.999807][ C1] ? _raw_spin_unlock+0x40/0x40 [ 194.004873][ C1] pwq_unbound_release_workfn+0x262/0x2b0 [ 194.011056][ C1] process_one_work+0x867/0xff0 [ 194.016828][ C1] ? worker_detach_from_pool+0x240/0x240 [ 194.024463][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 194.032314][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 194.039790][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 194.046829][ C1] ? wq_worker_running+0x97/0x170 [ 194.052621][ C1] worker_thread+0xad7/0x12a0 [ 194.057861][ C1] kthread+0x42e/0x520 [ 194.062288][ C1] ? rcu_lock_release+0x20/0x20 [ 194.069225][ C1] ? kthread_blkcg+0xd0/0xd0 [ 194.075102][ C1] ret_from_fork+0x1f/0x30 [ 194.080236][ C1] [ 195.202669][ C1] Shutting down cpus with NMI [ 195.208956][ C1] Kernel Offset: disabled [ 195.215107][ C1] Rebooting in 86400 seconds..