last executing test programs: 11m55.783342197s ago: executing program 32 (id=718): prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000000000/0x4000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = memfd_create(&(0x7f0000000240)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\x0e\b$\x16\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r1, 0x0) read$FUSE(r0, &(0x7f00000046c0)={0x2020}, 0x2067) 9m24.490560041s ago: executing program 33 (id=1839): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x68, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0xa]}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24049094}, 0x0) 9m17.367474193s ago: executing program 34 (id=1988): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) keyctl$session_to_parent(0x12) 7m57.387685717s ago: executing program 35 (id=2612): syz_open_dev$dmmidi(&(0x7f0000000000), 0x2, 0x109841) r0 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 6m11.493456276s ago: executing program 36 (id=3390): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) rmdir(&(0x7f00000001c0)='./file0\x00') 6m5.058318846s ago: executing program 37 (id=3328): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) sync() pipe(0x0) 5m41.406113766s ago: executing program 38 (id=3545): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/trace\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000007000)={0x2020}, 0x2020) preadv2(r0, &(0x7f0000002780)=[{&(0x7f0000000780)=""/4096, 0xfdef}], 0x1, 0x7fc, 0xffffffff, 0x10) read$watch_queue(r0, &(0x7f0000000280)=""/157, 0x9d) 5m19.007455247s ago: executing program 39 (id=3653): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d8001c000831cf64e59a180081064e81f782db44fd56170d", 0x18}], 0x1}, 0x8040) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r2}) 3m18.484780725s ago: executing program 8 (id=4349): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) connect$pppoe(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r0, 0x0, 0x0) 3m17.000315798s ago: executing program 40 (id=4351): syz_usb_connect(0x6, 0xffffffffffffff7d, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x21fd, 0xdd36, 0x80, 0x1df, 0x81}) ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x3800) 3m16.976430498s ago: executing program 8 (id=4358): r0 = msgget(0x3, 0x710) msgget(0x2, 0x624) msgget(0x1, 0x240) msgctl$IPC_RMID(r0, 0x0) msgget(0x3, 0x693) msgget(0x0, 0x200) 3m16.649305915s ago: executing program 8 (id=4362): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) listen(r0, 0x5) 3m15.448928086s ago: executing program 8 (id=4370): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) clock_adjtime(0xffffffd3, 0x0) ptrace(0x10, r0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000759, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@sb={'sb', 0x3d, 0x9}, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x17}}, {@jqfmt_vfsv1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xe}}, {@lazytime}, {@resuid}, {@nolazytime}, {@test_dummy_encryption_v1}, {@resgid}, {@lazytime}, {@sysvgroups}, {@bsdgroups}], [{@obj_user={'obj_user', 0x3d, 'nodioread_nolock'}}, {@obj_role}], 0x2c}, 0x0, 0x51b, &(0x7f0000001300)="$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") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") 3m14.276106467s ago: executing program 8 (id=4375): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x6a040000) 3m13.156122398s ago: executing program 8 (id=4382): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x1a, r2, 0x1, 0x3, 0x6, @broadcast}, 0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r2, {0xe, 0x1}}}, 0x24}}, 0x4) 3m12.38314803s ago: executing program 41 (id=4382): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x1a, r2, 0x1, 0x3, 0x6, @broadcast}, 0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r2, {0xe, 0x1}}}, 0x24}}, 0x4) 3m4.450282622s ago: executing program 4 (id=4431): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 3m4.148500902s ago: executing program 4 (id=4433): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@compress}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$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") r0 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x1, 0x0, 0x5, 0x85, 0x1, 0xfffffff7, {0x100000000005, 0xff, 0x5, 0x7fffffff, 0x200, 0x10001, 0xd, 0x535, 0x5, 0x0, 0x200000, 0x0, 0x0, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080)=0x1d, 0x7f03) 3m2.937093918s ago: executing program 4 (id=4441): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ppoll(&(0x7f0000000200)=[{r1, 0x1}], 0x1, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000100)="569534ab1bbe0e03", 0x8}], 0x1) 3m2.099122556s ago: executing program 4 (id=4446): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 3m1.425644908s ago: executing program 4 (id=4450): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x2, [@decl_tag={0xb, 0x0, 0x0, 0x11, 0x4, 0x7}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x2, 0x1}, {}, {0xd, 0xfffffffe}, {0x10}, {0x1, 0x100003}]}]}}, 0x0, 0x6a, 0x0, 0x0, 0x1}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 3m1.324848114s ago: executing program 4 (id=4451): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r2, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x89, 0x0, 0x100000}, 0x20) 3m0.522315554s ago: executing program 42 (id=4451): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r2, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x89, 0x0, 0x100000}, 0x20) 2m29.816962741s ago: executing program 9 (id=4620): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000000)="ebe301e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e34", 0xc3}, {&(0x7f0000000600)="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", 0x187}], 0x4, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2m29.162424542s ago: executing program 9 (id=4626): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0x81}}, {@minixdf}, {@bh}, {@delalloc}, {@dioread_nolock}, {@noquota}]}, 0x1, 0x4ac, &(0x7f0000000540)="$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") mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @address_reply={0x2a}}}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 2m28.234242475s ago: executing program 9 (id=4630): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7, 0x4}]}) socket$packet(0x11, 0x3, 0x300) close_range(r1, 0xffffffffffffffff, 0x0) 2m26.905701518s ago: executing program 9 (id=4644): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0, 0x5}) 2m25.355174894s ago: executing program 9 (id=4650): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd28, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x8, 0x6, 0x3c, 0xffffffffffffffff, 0x200000000000, 0x4000000000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffff, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3501, 0x4, 0xef9a5e7037ee9545, 0x0, 0x0, 0x0, 0x1}]}]}, 0xfc}}, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20004008, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) 2m24.29072376s ago: executing program 9 (id=4659): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) setreuid(0xee01, 0xee01) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2d, 'cpu'}]}, 0x5) 2m8.904387513s ago: executing program 43 (id=4659): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) setreuid(0xee01, 0xee01) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2d, 'cpu'}]}, 0x5) 1m54.682930186s ago: executing program 0 (id=4847): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50) socket(0x10, 0x803, 0x0) mkdir(&(0x7f0000000140)='./sys\x00', 0x14a) mount(0x0, &(0x7f0000001700)='./sys\x00', &(0x7f0000001800)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) write(r0, &(0x7f0000001d00)='0 4 0 2', 0x7) 1m54.125567905s ago: executing program 0 (id=4852): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000980)=@ethtool_per_queue_op={0x4b, 0xe, [0x81, 0x9, 0x3, 0x0, 0x10000, 0x6, 0x800, 0x4, 0x5, 0x2, 0x5, 0x7, 0x2, 0xfff, 0x81, 0x33, 0x9, 0xffffff7f, 0x3c4, 0x2, 0x1000, 0x80000000, 0x8, 0x5, 0x7, 0x3, 0x7, 0x99ee, 0x5, 0xffffffff, 0x7f, 0x9, 0xff, 0x12dd829d, 0x0, 0x7, 0x8c5c, 0x4, 0xe, 0x4, 0x4, 0xfffff231, 0x7fffffff, 0x9, 0x7fffffff, 0x3, 0xffffffff, 0x8001, 0x6, 0x6, 0x2, 0x8, 0x7, 0xffff8001, 0xb, 0x5, 0x1, 0xfffffffe, 0x6, 0x401, 0x8, 0x86, 0x24000, 0x75a, 0x4, 0x6, 0x0, 0x0, 0x0, 0xc25f, 0xfffffff8, 0x81, 0xd, 0x5, 0x100, 0x7, 0x0, 0x5, 0x4d, 0xfffffc01, 0x9, 0xc7, 0x7f, 0x1, 0x1, 0x3, 0x3, 0x4, 0xd7f, 0x6, 0x8001, 0x7fffffff, 0x1, 0x3, 0xffffff81, 0xe2, 0x80, 0x5a, 0x5, 0x9, 0x200, 0x7, 0x5, 0x4, 0x7, 0x1, 0x6, 0x10001, 0x8, 0x1, 0xc, 0x80000000, 0x1, 0xf, 0x0, 0x3f1, 0x1, 0x3, 0x101, 0x9, 0x8a, 0x3, 0x7, 0x5, 0x96, 0x7fb, 0x3, 0x3]}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) 1m52.674805401s ago: executing program 0 (id=4856): r0 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x26e1, 0xfffffffb) 1m51.644165648s ago: executing program 0 (id=4863): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x400, &(0x7f0000000240)=ANY=[], 0x0, 0x1b6, &(0x7f00000002c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000080)="703a749f8c742f6576656e7431202e2f66696c65303a30783020", 0x1a) 1m51.418519405s ago: executing program 0 (id=4865): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB='nouser_xattr,heartbeat=none,dir_resv_level=00000000000000000250,barrier=00000000000000000004,dir_resv_level=00000000000000000002,localflocks,localalloc=00000000000000000004,coherency=buffered,nointr,acl,localalloc=00000000000022251008,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5e726f6c653d275e9b148af1147134daaeaad1251d12de0c417d242a2a252c2e2cb2a74084d068fa9b9038bf597c6fdafa6fadbea47b"], 0x1, 0x4431, &(0x7f0000008940)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r1, 0x0, 0x0) getdents64(r1, 0xfffffffffffffffe, 0x29) 1m48.149761875s ago: executing program 0 (id=4878): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64=0x0], 0x1, 0x1f5, &(0x7f0000000600)="$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") capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x101, 0x4000, 0x0, 0xffffffff}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2002, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 1m32.638403024s ago: executing program 44 (id=4878): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64=0x0], 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x101, 0x4000, 0x0, 0xffffffff}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2002, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 44.099282273s ago: executing program 1 (id=5187): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x810000a0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x5000180) 43.870129963s ago: executing program 1 (id=5188): timer_create(0x2, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x44040200) timer_delete(0x0) 42.70231619s ago: executing program 1 (id=5192): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) kexec_load(0x2, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x116094000, 0x400000041000000}], 0x0) 42.179345784s ago: executing program 1 (id=5197): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) 42.012939677s ago: executing program 1 (id=5200): r0 = gettid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000340)={0x5, 0x0, 0xfffffe3f, 0xfffffffd, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb", 0x388, 0x800}) readv(r1, &(0x7f0000001d40)=[{&(0x7f0000000380)=""/217, 0xd9}], 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000a40)) rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0xfffffffc, 0xfffffffc, 0xffffffff}) 40.763664701s ago: executing program 1 (id=5208): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12000000060000000400000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) close(0x4) 39.659135012s ago: executing program 45 (id=5208): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12000000060000000400000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) close(0x4) 6.402336834s ago: executing program 7 (id=5324): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x541}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) mmap(&(0x7f00002a3000/0x2000)=nil, 0x2000, 0x3000000, 0x31, 0xffffffffffffffff, 0x2000) 6.00827361s ago: executing program 5 (id=5326): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'sed\x00', 0x1, 0xa8a, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 5.788355991s ago: executing program 2 (id=5327): r0 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000540)=0x7b1) 5.65500007s ago: executing program 3 (id=5328): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) 5.428153456s ago: executing program 5 (id=5330): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 5.018315203s ago: executing program 2 (id=5331): r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x77) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x900000) lsetxattr$security_ima(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), &(0x7f0000000040)=ANY=[@ANYBLOB="0407"], 0x2, 0x1) dup3(r1, r0, 0x80000) finit_module(r1, 0x0, 0x0) 4.599879658s ago: executing program 6 (id=5332): socket$l2tp(0x2, 0x2, 0x73) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ptrace(0x10, r0) ptrace(0x4206, r0) ptrace$cont(0x1f, r0, 0x100000000, 0x2681) 4.350158102s ago: executing program 3 (id=5333): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x400) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756965742c646f74732c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d72656c617865642c646f733178666c6f7070792c6e66732c646f74732c6e6f646f74732c0052bbde30ad1b84bbd4c68ac5df60afc617ca0829fb9a153080d7fe1db0f2c220c8"], 0x1, 0x255, &(0x7f0000001980)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000580), 0x4, 0xbaf, &(0x7f00000017c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x10}) 4.317088874s ago: executing program 7 (id=5334): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x842, &(0x7f0000000680)=ANY=[@ANYBLOB="696f636861727365743d6370313235302c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c74696d655f6f66667365743d3078303030303030303030303030303031652c756d61736b3d30303030303030303030303031353736313035323131332c756d61736b3d30303030303030303030303030303030303030303137342c646d61736b3d3030303030303030303030303030363031302c666d61736b3d30303030303030303030303030303030303030303030302c616c6c6f775f7574696d653d30303030303030303030303030303030303030303036342c7379735f747a2c000000000000b84974a4647e1629f375432f41042ec4fcf5706a510d085e109807ea9c36edc97802f8ae6bce00f4d453d0e704a56fb7ed35ddb60cb64fd4892d76f4550ec3150e2e4f0a2157381ba1864880d601b8c4ac1e8eb0c8bcb450e2fe2ce4176031562a639026158eef77926324e9d49a4698108ae3f39e3897202e060cd9d4bfa3750011278c673394c9a14fe5b25831d4585bdad875df96c940bc29656b13c299bd71da385449d953d5187674f888f02f437a5459690fbee7b13a3335f9291121821d0f95336d73ffb9314d86bb288b1939306532ec4f783f5d8016f11fd8c46bce04d9eb3c9148f0dc5acac38bfea6f010c36ead47f6e74a000000000000000000", @ANYRESOCT=0x0], 0x1, 0x1531, &(0x7f0000001f40)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) 3.853831368s ago: executing program 5 (id=5335): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6000000d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000a}) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) 3.530251819s ago: executing program 6 (id=5336): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000500)={0x18, 0x0, {0x1, @empty, 'wg0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) write$ppp(r1, &(0x7f00000001c0)="ab29", 0x2) 3.342743281s ago: executing program 7 (id=5337): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa0028000}) 3.330067465s ago: executing program 2 (id=5338): syz_open_dev$vbi(&(0x7f00000002c0), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x134) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) pselect6(0x40, &(0x7f00000001c0)={0xe, 0x80, 0x5, 0x2, 0x1, 0x0, 0x3ff, 0x8}, &(0x7f0000000200)={0x0, 0x100000001, 0x5, 0x3, 0x4, 0x10, 0x959, 0x9}, 0x0, &(0x7f0000000280)={0x0, 0x989680}, 0x0) 3.114271569s ago: executing program 5 (id=5339): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) 2.733310046s ago: executing program 6 (id=5340): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x30, r3, 0x1, 0x70bd25, 0x3, {0x7}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x2400c046) 2.342606805s ago: executing program 3 (id=5341): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r1, r0, 0x0, 0x7ffffffd) 2.169703079s ago: executing program 7 (id=5342): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0) 2.118774569s ago: executing program 2 (id=5343): futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.023274439s ago: executing program 5 (id=5344): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x4000) read(r0, &(0x7f00000002c0)=""/153, 0x99) 1.767880105s ago: executing program 6 (id=5345): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR_DATA={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4) 1.680985554s ago: executing program 3 (id=5346): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x6}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.604873447s ago: executing program 7 (id=5347): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) 1.42363756s ago: executing program 2 (id=5348): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) 761.410739ms ago: executing program 3 (id=5349): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="88", 0x1}], 0x1}, 0x45) sendmsg$inet(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="b8", 0x1}], 0x1}, 0x4015) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x14002) close_range(r0, 0xffffffffffffffff, 0x0) 724.635089ms ago: executing program 5 (id=5350): mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff00000007058102400000070502024000000705830308"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RVERSION(r1, &(0x7f0000000140)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) 663.891461ms ago: executing program 6 (id=5351): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) timer_create(0x5, &(0x7f0000000280)={0x0, 0x3f, 0x4, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x3938700}}, 0x0) 374.912022ms ago: executing program 7 (id=5352): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xf, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r3, r1}) 68.483616ms ago: executing program 2 (id=5353): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x2853090, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 8.627396ms ago: executing program 6 (id=5354): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3, 0x2}}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=5355): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="8c0000000002010300000000000000000200001030000a80040002800800014000000001200002800c00028005"], 0x8c}, 0x1, 0x0, 0x0, 0x40810}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3f, 0x0}, @in=@local, 0xee24, 0x0, 0x10, 0x3, 0x2}, {0x81000, 0x200000004, 0x40000000007, 0xffffffff, 0x100000000, 0x0, 0x200000003, 0x9}, {0x2, 0x0, 0x0, 0x7}, 0x5, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in6=@loopback, 0x34fe, 0x4, 0x8, 0x0, 0x9075, 0xef, 0x10000}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) kernel console output (not intermixed with test programs): erformance. Setting the MTU to 1532 would solve the problem. [ 776.485005][T21434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.926281][T21434] hsr_slave_0: entered promiscuous mode [ 776.935174][T21434] hsr_slave_1: entered promiscuous mode [ 776.944198][T21434] debugfs: 'hsr0' already exists in 'hsr' [ 776.950046][T21434] Cannot create hsr debugfs directory [ 777.140235][T21613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4811'. [ 777.993906][ T5615] Bluetooth: hci8: command tx timeout [ 778.234703][ T5725] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 778.332140][T21649] loop3: detected capacity change from 0 to 256 [ 778.395898][ T5725] usb 7-1: Using ep0 maxpacket: 16 [ 778.401954][ T5725] usb 7-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 778.413643][ T5725] usb 7-1: config 0 has an invalid interface number: 98 but max is 0 [ 778.413687][ T5725] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.413731][ T5725] usb 7-1: config 0 has no interface number 0 [ 778.413784][ T5725] usb 7-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 778.413822][ T5725] usb 7-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 778.413857][ T5725] usb 7-1: config 0 interface 98 has no altsetting 0 [ 778.472201][ T5725] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.472752][ T5725] usb 7-1: Product: syz [ 778.489636][ T5725] usb 7-1: Manufacturer: syz [ 778.489938][ T5725] usb 7-1: SerialNumber: syz [ 778.507374][ T5725] usb 7-1: config 0 descriptor?? [ 778.515279][T21642] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 778.515511][T21642] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 778.742418][T21642] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 778.742616][T21642] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 779.013014][T21608] loop1: detected capacity change from 0 to 32768 [ 779.230552][T21608] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 779.401705][T21608] XFS (loop1): Ending clean mount [ 779.439254][T21434] netdevsim netdevsim7 eth8 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 779.786572][T19913] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 779.797346][ T5725] asix 7-1:0.98 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 779.797652][ T5725] asix 7-1:0.98: probe with driver asix failed with error -71 [ 779.835637][ T5725] usb 7-1: USB disconnect, device number 21 [ 780.296922][T21434] netdevsim netdevsim7 eth7 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 780.572560][T21683] xt_hashlimit: size too large, truncated to 1048576 [ 781.320411][T21694] loop6: detected capacity change from 0 to 4096 [ 781.420883][T21434] netdevsim netdevsim7 eth6 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 781.608557][T21703] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 781.720732][ T30] audit: type=1800 audit(1788753670.832:388): pid=21694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4834" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 782.048067][T21434] netdevsim netdevsim7 eth5 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 782.952242][T21735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4845'. [ 783.154969][T21742] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 3 [ 783.179012][ T983] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 783.346917][T21747] loop6: detected capacity change from 0 to 16 [ 783.367009][ T983] usb 6-1: New USB device found, idVendor=0007, idProduct=0000, bcdDevice= 0.00 [ 783.378087][ T983] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 783.378141][ T983] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 783.378190][ T983] usb 6-1: config 0 interface 0 has no altsetting 0 [ 783.378233][ T983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.470554][ T983] usb 6-1: config 0 descriptor?? [ 783.475275][T21747] erofs (device loop6): invalid ishare xattr prefix id 0 [ 784.327184][ T983] usbhid 6-1:0.0: can't add hid device: -71 [ 784.327304][ T983] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 784.337749][ T983] usb 6-1: USB disconnect, device number 21 [ 785.013295][T21768] loop6: detected capacity change from 0 to 512 [ 785.041464][T21768] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 785.041852][T21768] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.4855: corrupted in-inode xattr: e_value size too large [ 785.041885][T21768] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 785.042185][T21768] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.4855: couldn't read orphan inode 15 (err -117) [ 785.042216][T21768] loop6: lost filesystem error report for type 5 error -117 [ 785.097358][T21768] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 785.174559][T21434] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 785.226909][ T30] audit: type=1800 audit(1788753674.332:389): pid=21768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4855" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=21 res=0 errno=0 [ 785.271809][T21434] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 785.283383][T21434] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 785.452109][T16052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.528844][T21434] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 785.543727][T21434] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 785.642420][T21434] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 785.667290][T21434] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 785.805909][T21434] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 785.902454][T21791] FAULT_INJECTION: forcing a failure. [ 785.902454][T21791] name failslab, interval 1, probability 0, space 0, times 0 [ 785.902534][T21791] CPU: 0 UID: 0 PID: 21791 Comm: syz.5.4861 Tainted: G L syzkaller #0 PREEMPT(full) [ 785.902586][T21791] Tainted: [L]=SOFTLOCKUP [ 785.902595][T21791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 785.902610][T21791] Call Trace: [ 785.902621][T21791] [ 785.902636][T21791] dump_stack_lvl+0xe8/0x150 [ 785.902679][T21791] should_fail_ex+0x410/0x560 [ 785.902727][T21791] should_failslab+0xa8/0x100 [ 785.902761][T21791] __kmalloc_cache_noprof+0xa3/0x600 [ 785.902789][T21791] ? percpu_ref_init+0xc5/0x350 [ 785.902826][T21791] ? percpu_ref_init+0xc5/0x350 [ 785.902870][T21791] ? __pfx_free_ioctx_reqs+0x10/0x10 [ 785.902896][T21791] percpu_ref_init+0xc5/0x350 [ 785.902934][T21791] ? __pfx_free_ioctx_users+0x10/0x10 [ 785.902964][T21791] ioctx_alloc+0x23f/0x830 [ 785.902999][T21791] __se_sys_io_setup+0x7b/0x1d0 [ 785.903041][T21791] do_syscall_64+0x166/0x520 [ 785.903066][T21791] ? trace_irq_disable+0x3b/0x140 [ 785.903093][T21791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.903127][T21791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.903153][T21791] RIP: 0033:0x7fa12cd9e159 [ 785.903177][T21791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.903198][T21791] RSP: 002b:00007fa12aff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 785.903225][T21791] RAX: ffffffffffffffda RBX: 00007fa12d025fa0 RCX: 00007fa12cd9e159 [ 785.903245][T21791] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000006 [ 785.903261][T21791] RBP: 00007fa12ce35024 R08: 0000000000000000 R09: 0000000000000000 [ 785.903278][T21791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.903294][T21791] R13: 00007fa12d026038 R14: 00007fa12d025fa0 R15: 00007ffcf0773a38 [ 785.903334][T21791] [ 786.121533][T21794] bond0: (slave syz_tun): Releasing backup interface [ 786.190270][T21794] bridge_slave_1: left allmulticast mode [ 786.200786][T21794] bridge_slave_1: left promiscuous mode [ 786.206907][T21794] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.261808][T21799] loop6: detected capacity change from 0 to 4096 [ 786.281519][T21799] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 786.301731][T21794] bond0: (slave bond_slave_0): Releasing backup interface [ 786.311878][T21799] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 786.407340][T21794] bond0: (slave bond_slave_1): Releasing backup interface [ 786.553564][T21794] team0: Port device team_slave_0 removed [ 786.622795][T21794] team0: Port device team_slave_1 removed [ 786.630480][T21794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 786.630552][T21794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 786.667927][T21794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 786.667980][T21794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 786.728164][T21794] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 786.976355][T21799] bridge0: port 1(syz_tun) entered blocking state [ 786.976484][T21799] bridge0: port 1(syz_tun) entered disabled state [ 787.006112][T21799] syz_tun: entered allmulticast mode [ 787.468783][T16052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.742387][T21434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.878519][T21434] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.923064][T15910] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.923202][T15910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.990466][T15907] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 788.037997][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.038151][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.140271][T21839] loop3: detected capacity change from 0 to 128 [ 788.174529][T21839] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 788.191574][T21839] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 788.621391][T21843] loop6: detected capacity change from 0 to 512 [ 788.631708][T21843] EXT4-fs: Ignoring removed orlov option [ 788.631757][T21843] EXT4-fs: Ignoring removed mblk_io_submit option [ 788.675156][T21843] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.4874: corrupted in-inode xattr: e_value size too large [ 788.675283][T21843] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 788.690006][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 788.690037][ C1] EXT4-fs (loop6): initial error at time 1788753677: ext4_iget_extra_inode:5210: inode 15 [ 788.690074][ C1] EXT4-fs (loop6): last error at time 1788753677: ext4_iget_extra_inode:5210: inode 15 [ 788.736709][T21843] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.4874: couldn't read orphan inode 15 (err -117) [ 788.750156][T21843] loop6: lost filesystem error report for type 5 error -117 [ 788.761818][T21843] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 788.830804][ T30] audit: type=1800 audit(1788753677.942:390): pid=21843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4874" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 788.862521][T21843] Invalid ELF header magic: != ELF [ 789.074843][T20012] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 789.336413][T16052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.364473][T21873] loop5: detected capacity change from 0 to 131072 [ 791.366586][T21873] F2FS-fs (loop5): Invalid log sectorsize (67108873) [ 791.366609][T21873] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 791.367397][T21873] F2FS-fs (loop5): invalid crc value [ 791.482208][T21873] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 791.496422][T21873] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 791.496471][T21873] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 792.552189][T21434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.886067][T21914] loop1: detected capacity change from 0 to 512 [ 792.939873][T21914] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.4889: bg 0: block 5: invalid block bitmap [ 792.939942][T21914] loop1: lost filesystem error report for type 5 error -117 [ 792.992680][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 792.992730][ C0] EXT4-fs (loop1): initial error at time 1788753682: ext4_validate_block_bitmap:436 [ 792.992784][ C0] EXT4-fs (loop1): last error at time 1788753682: ext4_validate_block_bitmap:436 [ 793.059991][T21914] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 793.085607][T21914] loop1: lost filesystem error report for type 5 error -117 [ 793.086415][T21914] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.4889: invalid indirect mapped block 3 (level 2) [ 793.107881][T21914] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 793.112502][T21914] EXT4-fs (loop1): 1 orphan inode deleted [ 793.129262][T21914] EXT4-fs (loop1): 1 truncate cleaned up [ 793.137256][T21914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 793.224804][T21914] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #2: comm syz.1.4889: directory missing '.' [ 793.440085][T19913] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.480814][T21896] loop3: detected capacity change from 0 to 32768 [ 793.535187][T21896] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 793.804316][T21896] XFS (loop3): Ending clean mount [ 793.959781][ T30] audit: type=1800 audit(1788753683.072:391): pid=21896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4885" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 793.985453][T21896] XFS (loop3): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 794.397610][T20012] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 794.663622][ T187] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 794.676496][T21434] veth0_vlan: entered promiscuous mode [ 794.717272][T21434] veth1_vlan: entered promiscuous mode [ 794.813866][ T187] usb 2-1: Using ep0 maxpacket: 8 [ 794.815123][ T187] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 794.816346][ T187] usb 2-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30 [ 794.816395][ T187] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.816448][ T187] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 794.816479][ T187] usb 2-1: config 0 interface 0 has no altsetting 0 [ 794.816515][ T187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.821389][ T187] usb 2-1: config 0 descriptor?? [ 795.066399][T21434] veth0_macvtap: entered promiscuous mode [ 795.109669][T21434] veth1_macvtap: entered promiscuous mode [ 795.295048][T21434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.390956][T21434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 795.426010][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.426749][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.427017][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.427337][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.695747][ T187] hid-alps 0003:044E:120C.0043: failed read register (-71) [ 795.695879][ T187] hid-alps 0003:044E:120C.0043: failed T4_PRM_ID_CONFIG_3 (-71) [ 795.713058][ T187] hid-alps 0003:044E:120C.0043: hidraw0: USB HID v0.00 Joystick [HID 044e:120c] on usb-dummy_hcd.1-1/input0 [ 795.726651][ T187] usb 2-1: USB disconnect, device number 47 [ 795.782540][T15913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.782600][T15913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.094685][T21958] fido_id[21958]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 796.395783][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.415062][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.993398][T21975] netlink: 'syz.3.4901': attribute type 4 has an invalid length. [ 797.322938][T21982] loop3: detected capacity change from 0 to 8192 [ 797.372044][T21982] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 798.737890][T22011] loop3: detected capacity change from 0 to 2048 [ 798.835685][T22011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 798.934811][T22011] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 799.098601][T22011] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 799.098672][T22011] EXT4-fs (loop3): This should not happen!! Data will be lost [ 799.098672][T22011] [ 799.098716][T22011] EXT4-fs (loop3): Total free blocks count 0 [ 799.098733][T22011] EXT4-fs (loop3): Free/Dirty block details [ 799.098838][T22011] EXT4-fs (loop3): free_blocks=4096 [ 799.099055][T22011] EXT4-fs (loop3): dirty_blocks=16 [ 799.099073][T22011] EXT4-fs (loop3): Block reservation details [ 799.099089][T22011] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 799.238824][T22020] loop1: detected capacity change from 0 to 2048 [ 799.287751][T22020] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 799.799070][T20012] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.875945][T21998] loop6: detected capacity change from 0 to 32768 [ 799.896109][T22005] loop5: detected capacity change from 0 to 32768 [ 799.903303][T21998] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4908 (21998) [ 799.919910][T21998] BTRFS info (device loop6): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 799.919967][T21998] BTRFS info (device loop6): using sha256 checksum algorithm [ 800.040951][T22005] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 800.184431][T21998] BTRFS info (device loop6): turning off barriers [ 800.184491][T21998] BTRFS info (device loop6): enabling free space tree [ 800.191820][T22005] XFS (loop5): Ending clean mount [ 800.426802][T16052] BTRFS info (device loop6): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 800.455090][T22005] XFS (loop5): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 800.637644][T16619] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 800.839240][T22061] openvswitch: netlink: Missing valid actions attribute. [ 800.839303][T22061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 801.989518][T22082] netlink: 'syz.7.4926': attribute type 10 has an invalid length. [ 802.049603][T22085] loop3: detected capacity change from 0 to 64 [ 802.076601][T22082] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.086389][T22082] bond0: (slave team0): Enslaving as an active interface with an up link [ 802.429639][T22089] netlink: 'syz.5.4929': attribute type 15 has an invalid length. [ 802.429692][T22089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4929'. [ 802.584855][T22089] netlink: 'syz.5.4929': attribute type 15 has an invalid length. [ 802.584907][T22089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4929'. [ 802.600313][ T1110] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 802.600362][ T1110] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 802.600404][ T1110] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 802.600444][ T1110] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 804.064094][ T5271] 8021q: adding VLAN 0 to HW filter on device eth12 [ 805.539293][T22133] loop5: detected capacity change from 0 to 32768 [ 805.583296][T22133] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 805.583339][T22133] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 805.817996][T22145] loop3: detected capacity change from 0 to 128 [ 805.844518][T22133] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 805.856851][T19307] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 805.864663][T19307] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 805.978048][T22145] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 806.000438][T22145] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 806.055528][T22148] loop7: detected capacity change from 0 to 128 [ 806.078076][T22148] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 806.078157][T22148] hpfs: filesystem error: improperly stopped [ 806.078191][T22148] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 806.078287][T22148] hpfs: You really don't want any checks? You are crazy... [ 806.078305][T22148] hpfs: Code page index out of array [ 806.078314][T22148] hpfs: code page support is disabled [ 806.086417][T22148] hpfs: hpfs_map_4sectors(): unaligned read [ 806.086497][T22148] hpfs: hpfs_map_4sectors(): unaligned read [ 806.086509][T22148] hpfs: filesystem error: unable to find root dir [ 806.170836][T22151] EXT4-fs (loop3): shut down requested (0) [ 806.250430][T19307] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 385ms [ 806.265331][T19307] gfs2: fsid=syz:syz.0: jid=0: Done [ 806.265395][T22133] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 806.589506][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 806.603735][ T5615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 806.621890][ T5615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 806.634100][ T5615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 806.636660][T15910] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.646053][ T5615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 806.738904][T20012] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 807.035073][T22163] FAULT_INJECTION: forcing a failure. [ 807.035073][T22163] name failslab, interval 1, probability 0, space 0, times 0 [ 807.035136][T22163] CPU: 0 UID: 0 PID: 22163 Comm: syz.6.4939 Tainted: G L syzkaller #0 PREEMPT(full) [ 807.035173][T22163] Tainted: [L]=SOFTLOCKUP [ 807.035183][T22163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 807.035199][T22163] Call Trace: [ 807.035210][T22163] [ 807.035222][T22163] dump_stack_lvl+0xe8/0x150 [ 807.035265][T22163] should_fail_ex+0x410/0x560 [ 807.035314][T22163] should_failslab+0xa8/0x100 [ 807.035346][T22163] ? anon_vma_clone+0x3f3/0x9f0 [ 807.035384][T22163] kmem_cache_alloc_noprof+0xa1/0x600 [ 807.035427][T22163] ? anon_vma_clone+0x3f3/0x9f0 [ 807.035466][T22163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.035503][T22163] anon_vma_clone+0x3f3/0x9f0 [ 807.035552][T22163] vma_modify+0x17a1/0x1f40 [ 807.035600][T22163] vma_modify_flags+0x2a4/0x3c0 [ 807.035634][T22163] ? __pfx_vma_modify_flags+0x10/0x10 [ 807.035683][T22163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.035725][T22163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.035765][T22163] mlock_fixup+0x40c/0x930 [ 807.035809][T22163] ? __pfx_mlock_fixup+0x10/0x10 [ 807.035843][T22163] ? mas_find+0x6d6/0xcb0 [ 807.035877][T22163] apply_mlockall_flags+0x323/0x420 [ 807.035913][T22163] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 807.035948][T22163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.035995][T22163] ? __pfx_down_write_killable+0x10/0x10 [ 807.036026][T22163] ? rcu_is_watching+0x16/0xb0 [ 807.036071][T22163] __ia32_sys_munlockall+0x101/0x210 [ 807.036106][T22163] do_syscall_64+0x166/0x520 [ 807.036132][T22163] ? trace_irq_disable+0x3b/0x140 [ 807.036158][T22163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.036192][T22163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.036218][T22163] RIP: 0033:0x7f27cfb9e159 [ 807.036242][T22163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 807.036264][T22163] RSP: 002b:00007f27d0ac7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 807.036291][T22163] RAX: ffffffffffffffda RBX: 00007f27cfe25fa0 RCX: 00007f27cfb9e159 [ 807.036311][T22163] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 807.036334][T22163] RBP: 00007f27cfe25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 807.036351][T22163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 807.036367][T22163] R13: 00007f27cfe26038 R14: 00007f27cfe25fa0 R15: 00007ffeb13eaef8 [ 807.036407][T22163] [ 807.324004][T15910] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.591427][T15910] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.085219][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.085305][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.307715][T15910] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.575159][T22189] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 808.724259][ T5628] Bluetooth: hci1: command tx timeout [ 809.169895][T22192] gre1: entered promiscuous mode [ 809.169947][T22192] gre1: entered allmulticast mode [ 809.528546][T22210] loop5: detected capacity change from 0 to 128 [ 809.673772][ T1110] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 809.686219][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 809.825101][T22218] netlink: 'syz.7.4953': attribute type 2 has an invalid length. [ 809.834914][T22218] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4953'. [ 810.187476][T22218] : entered promiscuous mode [ 810.224541][T15913] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 810.581765][T22234] loop6: detected capacity change from 0 to 2048 [ 810.594080][ T5271] 8021q: adding VLAN 0 to HW filter on device eth13 [ 810.595169][ T1006] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 810.626875][T22234] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 810.699823][T15910] bridge_slave_1: left promiscuous mode [ 810.706468][T15910] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.740139][T15910] bridge_slave_0: left allmulticast mode [ 810.740209][T15910] bridge_slave_0: left promiscuous mode [ 810.746095][T15910] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.789395][T22243] No fuse device found [ 810.789470][T22243] No fuse device found [ 810.789505][T22243] No fuse device found [ 810.789540][T22243] No fuse device found [ 810.789575][T22243] No fuse device found [ 810.789609][T22243] No fuse device found [ 810.789643][T22243] No fuse device found [ 810.789676][T22243] No fuse device found [ 810.794651][ T5628] Bluetooth: hci1: command tx timeout [ 810.803913][T22243] No fuse device found [ 810.803955][T22243] No fuse device found [ 811.534145][T22254] loop6: detected capacity change from 0 to 2048 [ 811.599406][T22254] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 811.599539][T22254] ext4 filesystem being mounted at /274/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 811.783681][T22265] FAULT_INJECTION: forcing a failure. [ 811.783681][T22265] name failslab, interval 1, probability 0, space 0, times 0 [ 811.816845][T22265] CPU: 0 UID: 0 PID: 22265 Comm: syz.5.4967 Tainted: G L syzkaller #0 PREEMPT(full) [ 811.816889][T22265] Tainted: [L]=SOFTLOCKUP [ 811.816900][T22265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 811.816916][T22265] Call Trace: [ 811.816927][T22265] [ 811.816938][T22265] dump_stack_lvl+0xe8/0x150 [ 811.816981][T22265] should_fail_ex+0x410/0x560 [ 811.817032][T22265] should_failslab+0xa8/0x100 [ 811.817067][T22265] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 811.817111][T22265] ? __d_alloc+0x37/0x6f0 [ 811.817147][T22265] ? __d_alloc+0x37/0x6f0 [ 811.817194][T22265] __d_alloc+0x37/0x6f0 [ 811.817230][T22265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 811.817260][T22265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 811.817290][T22265] ? hashlen_string+0xb6/0x110 [ 811.817329][T22265] d_alloc_name+0xba/0x270 [ 811.817370][T22265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 811.817402][T22265] ? __pfx_d_alloc_name+0x10/0x10 [ 811.817445][T22265] ? dput+0x39/0x60 [ 811.817477][T22265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 811.817507][T22265] ? proc_setup_self+0x129/0x1c0 [ 811.817538][T22265] proc_setup_thread_self+0x48/0x1c0 [ 811.817565][T22265] ? __pfx_proc_fill_super+0x10/0x10 [ 811.817598][T22265] get_tree_nodev+0xbb/0x150 [ 811.817640][T22265] vfs_get_tree+0x92/0x2a0 [ 811.817669][T22265] do_new_mount+0x319/0xdc0 [ 811.817705][T22265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 811.817748][T22265] ? __pfx_do_new_mount+0x10/0x10 [ 811.817785][T22265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 811.817815][T22265] ? ns_capable+0x89/0xe0 [ 811.817851][T22265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 811.817881][T22265] ? path_mount+0x647/0x1050 [ 811.817919][T22265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 811.817950][T22265] ? user_path_at+0xd4/0x160 [ 811.817991][T22265] __se_sys_mount+0x31d/0x420 [ 811.818034][T22265] ? __pfx___se_sys_mount+0x10/0x10 [ 811.818077][T22265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 811.818107][T22265] ? __x64_sys_mount+0x20/0xc0 [ 811.818146][T22265] do_syscall_64+0x166/0x520 [ 811.818172][T22265] ? trace_irq_disable+0x3b/0x140 [ 811.818199][T22265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.818236][T22265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.818263][T22265] RIP: 0033:0x7fa12cd9e159 [ 811.818286][T22265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.818309][T22265] RSP: 002b:00007fa12aff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 811.818336][T22265] RAX: ffffffffffffffda RBX: 00007fa12d025fa0 RCX: 00007fa12cd9e159 [ 811.818355][T22265] RDX: 0000200000000240 RSI: 00002000000000c0 RDI: 0000000000000000 [ 811.818373][T22265] RBP: 00007fa12ce35024 R08: 0000000000000000 R09: 0000000000000000 [ 811.818390][T22265] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 811.818407][T22265] R13: 00007fa12d026038 R14: 00007fa12d025fa0 R15: 00007ffcf0773a38 [ 811.818447][T22265] [ 811.952838][T22265] proc_fill_super: can't allocate /proc/thread-self [ 812.166294][T16052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.307076][T15910] gretap0 (unregistering): left promiscuous mode [ 812.461319][T15910] bond2 (unregistering): (slave gretap1): Removing an active aggregator [ 812.486470][T15910] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 812.560154][T22279] loop5: detected capacity change from 0 to 1024 [ 812.611630][T22279] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 812.611766][T22279] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 812.725031][T22286] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: comm syz.5.4972: lblock 0 mapped to illegal pblock 0 (length 1) [ 812.734065][ T30] audit: type=1800 audit(1788753701.852:392): pid=22279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4972" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 812.780498][T22286] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 812.780557][T22286] EXT4-fs (loop5): This should not happen!! Data will be lost [ 812.780557][T22286] [ 812.873212][ T5628] Bluetooth: hci1: command tx timeout [ 812.978568][T15910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 813.006938][T16619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 813.020236][T15910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 813.101001][T15910] bond0 (unregistering): Released all slaves [ 813.160462][T15910] bond1 (unregistering): Released all slaves [ 813.260652][T15910] bond2 (unregistering): Released all slaves [ 813.611978][ T5271] 8021q: adding VLAN 0 to HW filter on device eth14 [ 813.995085][T22305] jffs2: notice: (22305) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 814.019154][T22308] loop5: detected capacity change from 0 to 128 [ 814.020294][T22308] EXT4-fs: Ignoring removed mblk_io_submit option [ 814.093099][T22308] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 814.093276][T22308] System zones: 1-3, 19-19, 35-36 [ 814.129900][T22308] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 814.131924][T22308] ext4 filesystem being mounted at /272/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 814.447297][T16619] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 814.806692][T15910] dummy0: left promiscuous mode [ 814.921415][T15910] hsr_slave_0: left promiscuous mode [ 814.922607][T15910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 814.942799][T15910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 814.953526][ T5628] Bluetooth: hci1: command tx timeout [ 814.977627][T15910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 814.977676][T15910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 815.059191][T22332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4985'. [ 815.080488][T15910] veth1_macvtap: left promiscuous mode [ 815.080540][T15910] veth0_macvtap: left promiscuous mode [ 815.080680][T15910] veth1_vlan: left promiscuous mode [ 815.080717][T15910] veth0_vlan: left promiscuous mode [ 815.207738][T22330] loop1: detected capacity change from 0 to 4096 [ 815.249664][T22330] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 815.308696][T22330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.740941][T22316] loop6: detected capacity change from 0 to 32768 [ 815.749123][T22316] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4981 (22316) [ 815.816985][T22316] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 815.817050][T22316] BTRFS info (device loop6): using sha256 checksum algorithm [ 815.907675][T22316] BTRFS info (device loop6): enabling ssd optimizations [ 815.916465][T22316] BTRFS info (device loop6): turning on sync discard [ 815.923617][T22316] BTRFS info (device loop6): enabling free space tree [ 816.259627][T16052] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 816.475650][T15910] team0 (unregistering): Port device team_slave_1 removed [ 816.605829][T15910] team0 (unregistering): Port device team_slave_0 removed [ 817.612502][T22329] bridge_slave_0: left allmulticast mode [ 817.612566][T22329] bridge_slave_0: left promiscuous mode [ 817.616935][T22329] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.652600][T22329] bridge_slave_1: left allmulticast mode [ 817.658909][T22329] bridge_slave_1: left promiscuous mode [ 817.660573][T22329] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.724609][T22329] bond0: (slave bond_slave_0): Releasing backup interface [ 817.774806][T22329] bond0: (slave bond_slave_1): Releasing backup interface [ 817.833563][T22329] team0: Port device team_slave_0 removed [ 817.860450][T22366] loop5: detected capacity change from 0 to 256 [ 817.878565][T22329] team0: Port device team_slave_1 removed [ 817.883869][T22329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 817.883892][T22329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 817.909646][T22366] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 817.928493][T22329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 817.928541][T22329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 817.966274][T22329] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 818.224484][T22369] sg_write: data in/out 483340/136 bytes for SCSI command 0x0-- guessing data in; [ 818.224484][T22369] program syz.7.4992 not setting count and/or reply_len properly [ 818.517134][ T5271] 8021q: adding VLAN 0 to HW filter on device eth15 [ 818.709628][T19913] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.245192][ T30] audit: type=1326 audit(1788753708.362:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22382 comm="syz.5.4999" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa12cd9e159 code=0x0 [ 819.742741][ T983] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 819.896450][ T983] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 819.898062][ T983] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 819.898090][ T983] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 819.898133][ T983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.919255][ T983] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 819.935807][T22155] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.935922][T22155] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.936067][T22155] bridge_slave_0: entered allmulticast mode [ 819.938827][ T983] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 819.940834][T22155] bridge_slave_0: entered promiscuous mode [ 819.959218][T22155] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.959408][T22155] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.959550][T22155] bridge_slave_1: entered allmulticast mode [ 819.975389][T22155] bridge_slave_1: entered promiscuous mode [ 820.242876][T22155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.260745][T22155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.465917][T22399] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 820.496256][T22399] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 820.502823][T22399] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 820.549038][T22399] SPCP8x5 ttyUSB0: Set UART format 0x104 failed (error = -32) [ 820.887195][T22155] team0: Port device team_slave_0 added [ 820.934180][T22155] team0: Port device team_slave_1 added [ 821.095768][ T983] usb 4-1: USB disconnect, device number 40 [ 821.216759][ T983] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 821.221514][ T983] spcp8x5 4-1:1.0: device disconnected [ 821.266859][T22155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 821.266908][T22155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.266940][T22155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 821.287493][T22155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 821.287511][T22155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.287607][T22155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 821.470947][ T5271] 8021q: adding VLAN 0 to HW filter on device eth16 [ 821.580247][T22438] FAULT_INJECTION: forcing a failure. [ 821.580247][T22438] name failslab, interval 1, probability 0, space 0, times 0 [ 821.580312][T22438] CPU: 1 UID: 0 PID: 22438 Comm: syz.7.5012 Tainted: G L syzkaller #0 PREEMPT(full) [ 821.580344][T22438] Tainted: [L]=SOFTLOCKUP [ 821.580353][T22438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 821.580367][T22438] Call Trace: [ 821.580378][T22438] [ 821.580389][T22438] dump_stack_lvl+0xe8/0x150 [ 821.580432][T22438] should_fail_ex+0x410/0x560 [ 821.580479][T22438] should_failslab+0xa8/0x100 [ 821.580515][T22438] __kmalloc_noprof+0xfe/0x720 [ 821.580541][T22438] ? load_msg+0xd1/0x3b0 [ 821.580571][T22438] ? load_msg+0xd1/0x3b0 [ 821.580609][T22438] load_msg+0xd1/0x3b0 [ 821.580647][T22438] do_msgrcv+0x278/0x13f0 [ 821.580684][T22438] ? __pfx_do_msg_fill+0x10/0x10 [ 821.580722][T22438] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 821.580757][T22438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 821.580788][T22438] ? __se_sys_futex+0x3a8/0x450 [ 821.580823][T22438] ? __pfx_do_msgrcv+0x10/0x10 [ 821.580862][T22438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 821.580892][T22438] ? rcu_is_watching+0x16/0xb0 [ 821.580924][T22438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 821.580961][T22438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 821.580993][T22438] ? __x64_sys_msgrcv+0x20/0xd0 [ 821.581031][T22438] do_syscall_64+0x166/0x520 [ 821.581056][T22438] ? trace_irq_disable+0x3b/0x140 [ 821.581082][T22438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.581116][T22438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.581142][T22438] RIP: 0033:0x7ff78759e159 [ 821.581165][T22438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.581187][T22438] RSP: 002b:00007ff7884c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 821.581214][T22438] RAX: ffffffffffffffda RBX: 00007ff787825fa0 RCX: 00007ff78759e159 [ 821.581234][T22438] RDX: 00000000ffffff4e RSI: 0000200000002fc0 RDI: 0000000000000000 [ 821.581257][T22438] RBP: 00007ff787635024 R08: 0000000000004800 R09: 0000000000000000 [ 821.581274][T22438] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 821.581291][T22438] R13: 00007ff787826038 R14: 00007ff787825fa0 R15: 00007ffc848f5aa8 [ 821.581331][T22438] [ 821.732480][T22155] hsr_slave_0: entered promiscuous mode [ 821.751515][T22155] hsr_slave_1: entered promiscuous mode [ 821.833641][T22155] debugfs: 'hsr0' already exists in 'hsr' [ 821.833666][T22155] Cannot create hsr debugfs directory [ 823.258601][T22469] loop1: detected capacity change from 0 to 32768 [ 823.271820][T22469] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5021 (22469) [ 823.303701][T22469] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 823.303757][T22469] BTRFS info (device loop1): using sha256 checksum algorithm [ 823.492296][T22469] BTRFS info (device loop1): rebuilding free space tree [ 823.530327][T22469] BTRFS info (device loop1): disabling free space tree [ 823.530418][T22469] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 823.530463][T22469] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 823.568532][T22469] BTRFS info (device loop1): setting nodatasum [ 823.568584][T22469] BTRFS info (device loop1): setting nodatacow [ 823.568604][T22469] BTRFS info (device loop1): enabling ssd optimizations [ 823.568624][T22469] BTRFS info (device loop1): using spread ssd allocation scheme [ 823.568644][T22469] BTRFS info (device loop1): turning off barriers [ 823.568663][T22469] BTRFS info (device loop1): turning on flush-on-commit [ 823.568683][T22469] BTRFS info (device loop1): turning on sync discard [ 823.568702][T22469] BTRFS info (device loop1): force clearing of disk cache [ 824.193009][T22155] netdevsim netdevsim2 eth12 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 824.328576][T19913] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 824.738110][T22501] loop1: detected capacity change from 0 to 512 [ 824.810973][T22501] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.5026: inode has both inline data and extents flags [ 824.811034][T22501] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 824.811602][T22501] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.5026: couldn't read orphan inode 15 (err -117) [ 824.811650][T22501] loop1: lost filesystem error report for type 5 error -117 [ 824.825346][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 824.825369][ C1] EXT4-fs (loop1): initial error at time 1788753713: ext4_orphan_get:1403: inode 15 [ 824.825404][ C1] EXT4-fs (loop1): last error at time 1788753713: ext4_orphan_get:1408 [ 824.982234][T22501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 825.032349][T22471] loop6: detected capacity change from 0 to 32768 [ 825.266716][T22471] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 825.466994][T19913] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.537926][ T5628] Bluetooth: hci0: command 0x0406 tx timeout [ 825.835433][T22155] netdevsim netdevsim2 eth11 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 825.927361][T16052] ocfs2: Unmounting device (7,6) on (node local) [ 826.061902][T22529] FAULT_INJECTION: forcing a failure. [ 826.061902][T22529] name failslab, interval 1, probability 0, space 0, times 0 [ 826.061972][T22529] CPU: 0 UID: 0 PID: 22529 Comm: syz.7.5036 Tainted: G L syzkaller #0 PREEMPT(full) [ 826.062006][T22529] Tainted: [L]=SOFTLOCKUP [ 826.062015][T22529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 826.062030][T22529] Call Trace: [ 826.062040][T22529] [ 826.062051][T22529] dump_stack_lvl+0xe8/0x150 [ 826.062094][T22529] should_fail_ex+0x410/0x560 [ 826.062142][T22529] should_failslab+0xa8/0x100 [ 826.062177][T22529] __kmalloc_cache_noprof+0xa3/0x600 [ 826.062206][T22529] ? __kmalloc_noprof+0x1ab/0x720 [ 826.062232][T22529] ? mpi_alloc+0x52/0x140 [ 826.062264][T22529] ? mpi_alloc+0x52/0x140 [ 826.062300][T22529] mpi_alloc+0x52/0x140 [ 826.062331][T22529] mpi_read_raw_data+0x139/0x970 [ 826.062383][T22529] rsa_set_pub_key+0x30a/0x5b0 [ 826.062432][T22529] ? __pfx_rsa_set_pub_key+0x10/0x10 [ 826.062483][T22529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 826.062514][T22529] ? __kmalloc_noprof+0x38c/0x720 [ 826.062536][T22529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 826.062573][T22529] rsassa_pkcs1_set_pub_key+0xba/0x1a0 [ 826.062617][T22529] public_key_verify_signature+0x57a/0x9e0 [ 826.062661][T22529] ? __pfx_public_key_verify_signature+0x10/0x10 [ 826.062706][T22529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 826.062750][T22529] ? asymmetric_key_generate_id+0x60/0x170 [ 826.062786][T22529] ? asymmetric_key_id_same+0x67/0xe0 [ 826.062826][T22529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 826.062861][T22529] x509_check_for_self_signed+0x326/0x430 [ 826.062896][T22529] x509_cert_parse+0x622/0x7a0 [ 826.062928][T22529] x509_key_preparse+0x64/0x6d0 [ 826.062954][T22529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 826.062984][T22529] ? down_read+0x2be/0x330 [ 826.063019][T22529] asymmetric_key_preparse+0xb9/0x1b0 [ 826.063061][T22529] __key_create_or_update+0x3a9/0xa80 [ 826.063103][T22529] ? __pfx___key_create_or_update+0x10/0x10 [ 826.063133][T22529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 826.063168][T22529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 826.063197][T22529] ? lookup_user_key+0xb68/0x1150 [ 826.063239][T22529] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 826.063283][T22529] key_create_or_update+0x42/0x60 [ 826.063319][T22529] __se_sys_add_key+0x349/0x420 [ 826.063360][T22529] ? __pfx___se_sys_add_key+0x10/0x10 [ 826.063398][T22529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 826.063435][T22529] ? srso_alias_return_thunk+0x5/0xfbef5 [ 826.063465][T22529] ? __x64_sys_add_key+0x20/0xc0 [ 826.063504][T22529] do_syscall_64+0x166/0x520 [ 826.063530][T22529] ? trace_irq_disable+0x3b/0x140 [ 826.063572][T22529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.063606][T22529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.063633][T22529] RIP: 0033:0x7ff78759e159 [ 826.063657][T22529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.063678][T22529] RSP: 002b:00007ff7884c2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 826.063704][T22529] RAX: ffffffffffffffda RBX: 00007ff787825fa0 RCX: 00007ff78759e159 [ 826.063724][T22529] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 826.063742][T22529] RBP: 00007ff787635024 R08: ffffffffffffffff R09: 0000000000000000 [ 826.063760][T22529] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 826.063776][T22529] R13: 00007ff787826038 R14: 00007ff787825fa0 R15: 00007ffc848f5aa8 [ 826.063816][T22529] [ 826.529029][T22155] netdevsim netdevsim2 eth10 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 826.689038][T22540] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5038'. [ 826.727799][T22540] netlink: 165 bytes leftover after parsing attributes in process `syz.5.5038'. [ 827.221026][T22155] netdevsim netdevsim2 eth9 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 827.612396][T22563] FAULT_INJECTION: forcing a failure. [ 827.612396][T22563] name failslab, interval 1, probability 0, space 0, times 0 [ 827.612459][T22563] CPU: 0 UID: 0 PID: 22563 Comm: syz.5.5047 Tainted: G L syzkaller #0 PREEMPT(full) [ 827.612496][T22563] Tainted: [L]=SOFTLOCKUP [ 827.612506][T22563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 827.612522][T22563] Call Trace: [ 827.612532][T22563] [ 827.612543][T22563] dump_stack_lvl+0xe8/0x150 [ 827.612586][T22563] should_fail_ex+0x410/0x560 [ 827.612639][T22563] should_failslab+0xa8/0x100 [ 827.612674][T22563] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 827.612717][T22563] ? __d_alloc+0x37/0x6f0 [ 827.612760][T22563] ? __d_alloc+0x37/0x6f0 [ 827.612809][T22563] __d_alloc+0x37/0x6f0 [ 827.612854][T22563] d_alloc_pseudo+0x21/0xc0 [ 827.612895][T22563] alloc_path_pseudo+0x107/0x220 [ 827.612927][T22563] ? srso_alias_return_thunk+0x5/0xfbef5 [ 827.612961][T22563] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 827.612995][T22563] ? srso_alias_return_thunk+0x5/0xfbef5 [ 827.613024][T22563] ? do_raw_spin_lock+0x12b/0x2f0 [ 827.613069][T22563] alloc_file_pseudo+0xa8/0x1e0 [ 827.613106][T22563] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 827.613139][T22563] ? srso_alias_return_thunk+0x5/0xfbef5 [ 827.613169][T22563] ? _raw_spin_unlock+0x28/0x50 [ 827.613206][T22563] ? alloc_fd+0x651/0x6c0 [ 827.613245][T22563] sock_alloc_file+0xb8/0x2e0 [ 827.613280][T22563] ? __sys_socket+0x12b/0x1b0 [ 827.613322][T22563] __sys_socket+0x13f/0x1b0 [ 827.613366][T22563] __x64_sys_socket+0x7a/0x90 [ 827.613407][T22563] do_syscall_64+0x166/0x520 [ 827.613432][T22563] ? trace_irq_disable+0x3b/0x140 [ 827.613458][T22563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.613492][T22563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.613518][T22563] RIP: 0033:0x7fa12cd9e159 [ 827.613541][T22563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.613562][T22563] RSP: 002b:00007fa12afd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 827.613590][T22563] RAX: ffffffffffffffda RBX: 00007fa12d026090 RCX: 00007fa12cd9e159 [ 827.613610][T22563] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 827.613626][T22563] RBP: 00007fa12ce35024 R08: 0000000000000000 R09: 0000000000000000 [ 827.613643][T22563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.613659][T22563] R13: 00007fa12d026128 R14: 00007fa12d026090 R15: 00007ffcf0773a38 [ 827.613699][T22563] [ 827.768989][T22566] netlink: 'syz.3.5049': attribute type 1 has an invalid length. [ 828.067108][T22566] 8021q: adding VLAN 0 to HW filter on device bond1 [ 828.162428][T22570] bond1: entered promiscuous mode [ 828.162480][T22570] bond1: entered allmulticast mode [ 829.233722][T22155] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 829.256583][T22155] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 829.266304][T22155] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 829.298793][T22155] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 829.307039][T22155] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 829.321661][T22155] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 829.332480][T22155] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 829.374500][T22155] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 829.760606][T22618] loop6: detected capacity change from 0 to 16 [ 829.833953][T22618] erofs (device loop6): mounted with root inode @ nid 36. [ 830.101691][T22155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 830.220638][T22155] 8021q: adding VLAN 0 to HW filter on device team0 [ 830.229178][T22584] loop7: detected capacity change from 0 to 32768 [ 830.290117][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.290256][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 830.386846][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.386988][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 830.484279][ T30] audit: type=1800 audit(1788753719.602:394): pid=22584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5053" name="file1" dev="loop7" ino=4 res=0 errno=0 [ 830.532204][T22584] jfs_unlink: dtDelete returned -2 [ 830.602875][T17545] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 830.632866][ T5615] Bluetooth: hci4: command 0x0406 tx timeout [ 830.728014][T22604] loop5: detected capacity change from 0 to 40427 [ 830.729128][T22604] F2FS-fs: heap/no_heap options were deprecated [ 830.760723][T22604] F2FS-fs (loop5): build fault injection rate: 19 [ 830.760765][T22604] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 830.773592][T17545] usb 7-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 830.775197][T17545] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 830.775225][T17545] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 830.778946][T17545] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.778975][T17545] usb 7-1: Product: syz [ 830.778994][T17545] usb 7-1: Manufacturer: syz [ 830.779013][T17545] usb 7-1: SerialNumber: syz [ 830.818474][T22604] F2FS-fs (loop5): invalid crc value [ 830.831886][T17545] usb 7-1: NFC: intf ffff88807a24e000 id ffffffff8f859520 [ 830.924452][T22604] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940 [ 831.399481][T17545] nfcmrvl 7-1:1.0: NFC: registered with nci successfully [ 831.401693][T22604] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0 [ 831.455691][T17545] usb 7-1: USB disconnect, device number 22 [ 831.501730][T17545] usb 7-1: NFC: intf ffff88807a24e000 [ 831.550046][T22604] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 831.585620][T22604] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 831.713938][T22604] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0 [ 831.731217][T22604] F2FS-fs (loop5): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x110/0xab0 [ 831.811226][T22668] FAULT_INJECTION: forcing a failure. [ 831.811226][T22668] name failslab, interval 1, probability 0, space 0, times 0 [ 831.811291][T22668] CPU: 1 UID: 0 PID: 22668 Comm: syz.7.5069 Tainted: G L syzkaller #0 PREEMPT(full) [ 831.811329][T22668] Tainted: [L]=SOFTLOCKUP [ 831.811340][T22668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 831.811355][T22668] Call Trace: [ 831.811366][T22668] [ 831.811377][T22668] dump_stack_lvl+0xe8/0x150 [ 831.811420][T22668] should_fail_ex+0x410/0x560 [ 831.811468][T22668] should_failslab+0xa8/0x100 [ 831.811505][T22668] ? security_inode_alloc+0x39/0x310 [ 831.811537][T22668] kmem_cache_alloc_noprof+0xa1/0x600 [ 831.811576][T22668] ? make_kgid+0x1d1/0x6a0 [ 831.811615][T22668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.811647][T22668] ? security_inode_alloc+0x39/0x310 [ 831.811686][T22668] security_inode_alloc+0x39/0x310 [ 831.811722][T22668] inode_init_always_gfp+0x97e/0xd30 [ 831.811762][T22668] ? __pfx_aio_alloc_inode+0x10/0x10 [ 831.811797][T22668] alloc_inode+0x82/0x1b0 [ 831.811830][T22668] alloc_anon_inode+0x1e/0x340 [ 831.811868][T22668] aio_setup_ring+0x104/0xe20 [ 831.811895][T22668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.811924][T22668] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 831.811966][T22668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.811995][T22668] ? pcpu_alloc_noprof+0x1036/0x1900 [ 831.812034][T22668] ? __pfx_aio_setup_ring+0x10/0x10 [ 831.812075][T22668] ioctx_alloc+0x313/0x830 [ 831.812098][T22668] ? __might_fault+0xaf/0x130 [ 831.812135][T22668] __se_sys_io_setup+0x7b/0x1d0 [ 831.812173][T22668] do_syscall_64+0x166/0x520 [ 831.812196][T22668] ? trace_irq_disable+0x3b/0x140 [ 831.812227][T22668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.812255][T22668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.812279][T22668] RIP: 0033:0x7ff78759e159 [ 831.812300][T22668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.812318][T22668] RSP: 002b:00007ff7884c2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 831.812341][T22668] RAX: ffffffffffffffda RBX: 00007ff787825fa0 RCX: 00007ff78759e159 [ 831.812359][T22668] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000008001 [ 831.812376][T22668] RBP: 00007ff787635024 R08: 0000000000000000 R09: 0000000000000000 [ 831.812392][T22668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 831.812405][T22668] R13: 00007ff787826038 R14: 00007ff787825fa0 R15: 00007ffc848f5aa8 [ 831.812443][T22668] [ 832.168625][T16619] syz-executor: attempt to access beyond end of device [ 832.168625][T16619] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 832.208387][T16619] CPU: 1 UID: 0 PID: 16619 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 832.208431][T16619] Tainted: [L]=SOFTLOCKUP [ 832.208441][T16619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 832.208457][T16619] Call Trace: [ 832.208467][T16619] [ 832.208478][T16619] dump_stack_lvl+0xe8/0x150 [ 832.208522][T16619] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 832.208562][T16619] f2fs_write_end_bio+0x1211/0x16e0 [ 832.208606][T16619] ? blkg_put+0x22/0x240 [ 832.208656][T16619] __submit_merged_bio+0x258/0x6a0 [ 832.208689][T16619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 832.208719][T16619] ? rcu_is_watching+0x16/0xb0 [ 832.208756][T16619] f2fs_submit_merged_write+0x27d/0x380 [ 832.208797][T16619] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 832.208838][T16619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 832.208876][T16619] f2fs_sync_node_pages+0x1055/0x1210 [ 832.208906][T16619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 832.208961][T16619] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 832.209033][T16619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 832.209073][T16619] f2fs_write_checkpoint+0xf91/0x2710 [ 832.209112][T16619] ? __lock_acquire+0x747/0x2de0 [ 832.209176][T16619] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 832.209214][T16619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 832.209313][T16619] kill_f2fs_super+0x2dd/0x700 [ 832.209363][T16619] ? __pfx_kill_f2fs_super+0x10/0x10 [ 832.209416][T16619] ? call_rcu+0x64d/0x8b0 [ 832.209446][T16619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 832.209475][T16619] ? lockdep_hardirqs_on+0x7b/0x110 [ 832.209501][T16619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 832.209548][T16619] deactivate_locked_super+0xbc/0x110 [ 832.209589][T16619] cleanup_mnt+0x3d3/0x460 [ 832.209620][T16619] task_work_run+0x1d9/0x270 [ 832.209653][T16619] ? __pfx_task_work_run+0x10/0x10 [ 832.209693][T16619] exit_to_user_mode_loop+0x204/0x770 [ 832.209720][T16619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 832.209749][T16619] ? rcu_is_watching+0x16/0xb0 [ 832.209786][T16619] do_syscall_64+0x328/0x520 [ 832.209810][T16619] ? trace_irq_disable+0x3b/0x140 [ 832.209836][T16619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.209870][T16619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.209896][T16619] RIP: 0033:0x7fa12cd9f397 [ 832.209919][T16619] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 832.209941][T16619] RSP: 002b:00007ffcf0772ca8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 832.209968][T16619] RAX: 0000000000000000 RBX: 00007fa12ce34474 RCX: 00007fa12cd9f397 [ 832.209986][T16619] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf0772d60 [ 832.210003][T16619] RBP: 00007ffcf0772d60 R08: 00007ffcf0773d60 R09: 00000000ffffffff [ 832.210022][T16619] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf0773df0 [ 832.210038][T16619] R13: 00007fa12ce34474 R14: 00000000000cb113 R15: 00007ffcf0773e30 [ 832.210077][T16619] [ 832.214448][T16619] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 832.356295][T16619] CPU: 0 UID: 0 PID: 16619 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 832.356334][T16619] Tainted: [L]=SOFTLOCKUP [ 832.356344][T16619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 832.356360][T16619] Call Trace: [ 832.356371][T16619] [ 832.356383][T16619] dump_stack_lvl+0xe8/0x150 [ 832.356427][T16619] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 832.356469][T16619] f2fs_write_end_bio+0x1211/0x16e0 [ 832.356546][T16619] __submit_merged_bio+0x258/0x6a0 [ 832.356580][T16619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 832.356612][T16619] ? rcu_is_watching+0x16/0xb0 [ 832.356654][T16619] f2fs_submit_merged_write+0x27d/0x380 [ 832.356697][T16619] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 832.356742][T16619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 832.356791][T16619] f2fs_sync_node_pages+0x1055/0x1210 [ 832.356823][T16619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 832.356882][T16619] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 832.356966][T16619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 832.357009][T16619] f2fs_write_checkpoint+0xf91/0x2710 [ 832.357048][T16619] ? __lock_acquire+0x747/0x2de0 [ 832.357123][T16619] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 832.357161][T16619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 832.357277][T16619] kill_f2fs_super+0x2dd/0x700 [ 832.357330][T16619] ? __pfx_kill_f2fs_super+0x10/0x10 [ 832.357388][T16619] ? call_rcu+0x64d/0x8b0 [ 832.357419][T16619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 832.357449][T16619] ? lockdep_hardirqs_on+0x7b/0x110 [ 832.357475][T16619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 832.357525][T16619] deactivate_locked_super+0xbc/0x110 [ 832.357565][T16619] cleanup_mnt+0x3d3/0x460 [ 832.357598][T16619] task_work_run+0x1d9/0x270 [ 832.357634][T16619] ? __pfx_task_work_run+0x10/0x10 [ 832.357678][T16619] exit_to_user_mode_loop+0x204/0x770 [ 832.357705][T16619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 832.357734][T16619] ? rcu_is_watching+0x16/0xb0 [ 832.357777][T16619] do_syscall_64+0x328/0x520 [ 832.357802][T16619] ? trace_irq_disable+0x3b/0x140 [ 832.357829][T16619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.357865][T16619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.357892][T16619] RIP: 0033:0x7fa12cd9f397 [ 832.357917][T16619] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 832.357938][T16619] RSP: 002b:00007ffcf0772ca8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 832.357966][T16619] RAX: 0000000000000000 RBX: 00007fa12ce34474 RCX: 00007fa12cd9f397 [ 832.357984][T16619] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf0772d60 [ 832.358001][T16619] RBP: 00007ffcf0772d60 R08: 00007ffcf0773d60 R09: 00000000ffffffff [ 832.358020][T16619] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf0773df0 [ 832.358036][T16619] R13: 00007fa12ce34474 R14: 00000000000cb113 R15: 00007ffcf0773e30 [ 832.358083][T16619] [ 832.388696][T16619] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 832.845546][T22684] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 833.403113][T19307] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 833.553661][T19307] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 833.564232][T19307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.564292][T19307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.564395][T19307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.606849][T19307] usb 2-1: config 0 descriptor?? [ 834.035666][T22155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 834.068973][T19307] hid_parser_main: 25 callbacks suppressed [ 834.084223][T19307] playstation 0003:054C:0DF2.0044: unknown main item tag 0x0 [ 834.093546][T19307] playstation 0003:054C:0DF2.0044: unknown main item tag 0x0 [ 834.093598][T19307] playstation 0003:054C:0DF2.0044: unknown main item tag 0x0 [ 834.093632][T19307] playstation 0003:054C:0DF2.0044: unknown main item tag 0x0 [ 834.093665][T19307] playstation 0003:054C:0DF2.0044: unknown main item tag 0x0 [ 834.157068][T19307] playstation 0003:054C:0DF2.0044: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 834.269865][T19307] playstation 0003:054C:0DF2.0044: Failed to retrieve feature with reportID 9: -32 [ 834.272432][T19307] playstation 0003:054C:0DF2.0044: Failed to retrieve DualSense pairing info: -32 [ 834.272522][T19307] playstation 0003:054C:0DF2.0044: Failed to get MAC address from DualSense [ 834.272548][T19307] playstation 0003:054C:0DF2.0044: Failed to create dualsense. [ 834.332230][T19307] playstation 0003:054C:0DF2.0044: probe with driver playstation failed with error -32 [ 834.371087][T19307] usb 2-1: USB disconnect, device number 48 [ 834.457431][T22155] veth0_vlan: entered promiscuous mode [ 834.558813][T22711] fido_id[22711]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 834.579963][T22155] veth1_vlan: entered promiscuous mode [ 834.874469][T22155] veth0_macvtap: entered promiscuous mode [ 834.914263][T22155] veth1_macvtap: entered promiscuous mode [ 835.044641][T22155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 835.101951][T22155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 835.245269][ T1006] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.245359][ T1006] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.362488][T22727] loop6: detected capacity change from 0 to 4096 [ 835.435614][T22727] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 835.543417][ T1153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.594059][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.621481][T22727] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 835.998073][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.998120][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.306516][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.306560][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.499340][T22787] loop1: detected capacity change from 0 to 128 [ 838.543837][T22787] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 838.562334][T22787] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 838.875159][T22777] loop3: detected capacity change from 0 to 131072 [ 838.916586][T22777] F2FS-fs (loop3): invalid crc value [ 838.986089][T19913] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 839.089004][T22777] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 839.119616][T22777] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 839.353262][T22809] loop1: detected capacity change from 0 to 512 [ 839.484677][T22809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 839.484811][T22809] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 839.543351][T22809] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #2: comm syz.1.5108: corrupted inode contents [ 839.547938][T22809] EXT4-fs error (device loop1): ext4_dirty_inode:6731: inode #2: comm syz.1.5108: mark_inode_dirty error [ 839.552206][T22809] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #2: comm syz.1.5108: corrupted inode contents [ 839.585529][T22809] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #2: comm syz.1.5108: corrupted inode contents [ 839.676371][T22809] EXT4-fs error (device loop1): ext4_dirty_inode:6731: inode #2: comm syz.1.5108: mark_inode_dirty error [ 839.680874][T22809] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #2: comm syz.1.5108: corrupted inode contents [ 839.687492][T22809] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.5108: mark_inode_dirty error [ 839.705733][T22816] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #2: comm syz.1.5108: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 839.705733][T22816] [ 839.728604][T22816] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #2: comm syz.1.5108: corrupted inode contents [ 839.737666][T22816] EXT4-fs error (device loop1): ext4_append:88: inode #2: comm syz.1.5108: mark_inode_dirty error [ 839.747558][T22816] EXT4-fs error (device loop1) in ext4_append:100: Corrupt filesystem [ 840.154980][T19913] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.723024][ T5741] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 840.886272][ T5741] usb 7-1: Using ep0 maxpacket: 16 [ 840.892202][ T5741] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 840.907952][ T5741] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 840.908013][ T5741] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 840.940290][ T5741] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.949373][ T5741] usb 7-1: Product: syz [ 840.954157][ T5741] usb 7-1: Manufacturer: syz [ 840.958883][ T5741] usb 7-1: SerialNumber: syz [ 841.006785][ T5741] usb 7-1: config 0 descriptor?? [ 841.026061][ T5741] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 841.026121][ T5741] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 841.109938][T22834] loop7: detected capacity change from 0 to 2048 [ 841.188822][T22834] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 841.188949][T22834] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 841.232047][T22838] loop1: detected capacity change from 0 to 128 [ 841.267047][T22838] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 841.267128][T22838] hpfs: filesystem error: improperly stopped [ 841.267145][T22838] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 841.267161][T22838] hpfs: You really don't want any checks? You are crazy... [ 841.267177][T22838] hpfs: Code page index out of array [ 841.267186][T22838] hpfs: code page support is disabled [ 841.277908][T22838] hpfs: hpfs_map_4sectors(): unaligned read [ 841.278001][T22838] hpfs: hpfs_map_4sectors(): unaligned read [ 841.278013][T22838] hpfs: filesystem error: unable to find root dir [ 841.334267][T22838] hpfs: hpfs_map_4sectors(): unaligned read [ 841.399396][T21434] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.695850][T22844] FAULT_INJECTION: forcing a failure. [ 841.695850][T22844] name failslab, interval 1, probability 0, space 0, times 0 [ 841.695919][T22844] CPU: 1 UID: 0 PID: 22844 Comm: syz.7.5121 Tainted: G L syzkaller #0 PREEMPT(full) [ 841.695957][T22844] Tainted: [L]=SOFTLOCKUP [ 841.695968][T22844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 841.695983][T22844] Call Trace: [ 841.695993][T22844] [ 841.696004][T22844] dump_stack_lvl+0xe8/0x150 [ 841.696045][T22844] should_fail_ex+0x410/0x560 [ 841.696093][T22844] should_failslab+0xa8/0x100 [ 841.696127][T22844] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 841.696170][T22844] ? __d_alloc+0x37/0x6f0 [ 841.696205][T22844] ? __d_alloc+0x37/0x6f0 [ 841.696243][T22844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.696280][T22844] __d_alloc+0x37/0x6f0 [ 841.696318][T22844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.696353][T22844] path_from_stashed+0x35c/0x580 [ 841.696402][T22844] pidfs_alloc_file+0xff/0x290 [ 841.696441][T22844] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 841.696489][T22844] pidfd_prepare+0xfd/0x170 [ 841.696527][T22844] __se_sys_pidfd_open+0xd5/0x260 [ 841.696554][T22844] ? __pfx___se_sys_pidfd_open+0x10/0x10 [ 841.696595][T22844] do_syscall_64+0x166/0x520 [ 841.696621][T22844] ? trace_irq_disable+0x3b/0x140 [ 841.696647][T22844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.696680][T22844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.696706][T22844] RIP: 0033:0x7ff78759e159 [ 841.696730][T22844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.696751][T22844] RSP: 002b:00007ff7884c2018 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 841.696781][T22844] RAX: ffffffffffffffda RBX: 00007ff787825fa0 RCX: 00007ff78759e159 [ 841.696807][T22844] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000007e [ 841.696823][T22844] RBP: 00007ff787635024 R08: 0000000000000000 R09: 0000000000000000 [ 841.696840][T22844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.696856][T22844] R13: 00007ff787826038 R14: 00007ff787825fa0 R15: 00007ffc848f5aa8 [ 841.696896][T22844] [ 841.722341][ T5741] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 841.885478][ T5741] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 842.087559][ T5741] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 842.094742][ T5741] em28xx 7-1:0.0: No AC97 audio processor [ 842.152798][ T5741] usb 7-1: USB disconnect, device number 23 [ 842.163796][ T5741] em28xx 7-1:0.0: Disconnecting em28xx [ 842.184408][ T5741] em28xx: Freeing device [ 842.995200][T22865] overlayfs: upper fs does not support file handles, falling back to index=off. [ 843.624364][T22876] loop2: detected capacity change from 0 to 65536 [ 843.625434][T22876] xfs: Deprecated parameter 'noattr2' [ 843.625478][T22876] XFS: noattr2 mount option is deprecated. [ 843.692429][T22876] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 843.783095][T22876] XFS (loop2): Ending clean mount [ 843.992083][T22898] loop1: detected capacity change from 0 to 64 [ 844.095341][T22898] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. Mounting read-only. [ 844.601416][T22155] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 844.658246][T22908] syzkaller1: entered allmulticast mode [ 844.899457][ T30] audit: type=1326 audit(1788753734.012:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22913 comm="syz.5.5140" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa12cd9e159 code=0x0 [ 845.290045][ T5725] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 845.444015][ T5725] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 845.446600][ T5725] usb 2-1: config 127 has an invalid interface number: 57 but max is 0 [ 845.446628][ T5725] usb 2-1: config 127 has no interface number 0 [ 845.446673][ T5725] usb 2-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 845.455595][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.455622][ T5725] usb 2-1: Product: syz [ 845.455640][ T5725] usb 2-1: Manufacturer: syz [ 845.455658][ T5725] usb 2-1: SerialNumber: syz [ 845.470058][T22921] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 845.897474][T22921] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 846.310070][ T5725] asix 2-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 846.310128][ T5725] asix 2-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 846.310394][ T5725] asix 2-1:127.57: probe with driver asix failed with error -71 [ 846.347202][ T5725] usb 2-1: USB disconnect, device number 49 [ 846.582767][ T5741] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 846.747494][ T5741] usb 3-1: Using ep0 maxpacket: 16 [ 846.756367][ T5741] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 846.781933][ T5741] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.781993][ T5741] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.782040][ T5741] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 846.782078][ T5741] usb 3-1: config 0 interface 0 has no altsetting 0 [ 846.782121][ T5741] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.837578][ T5741] usb 3-1: config 0 descriptor?? [ 847.274395][ T5741] hid (null): report_id 1392508928 is invalid [ 847.534946][ T5725] usb 3-1: USB disconnect, device number 30 [ 847.745728][T22974] loop3: detected capacity change from 0 to 512 [ 847.765901][T22974] EXT4-fs (loop3): Test dummy encryption mode enabled [ 847.765988][T22974] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 847.785576][T22965] loop7: detected capacity change from 0 to 32768 [ 847.810874][T22965] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 847.810918][T22965] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 847.858203][T22974] EXT4-fs (loop3): 1 truncate cleaned up [ 847.860336][T22974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 847.873838][T22965] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 847.876079][T20801] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 847.876097][T20801] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 847.916155][ T983] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 848.082760][ T983] usb 2-1: Using ep0 maxpacket: 32 [ 848.090415][ T983] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 848.101273][ T983] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 848.112895][ T983] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 848.126559][ T983] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 848.126607][ T983] usb 2-1: Product: syz [ 848.126648][ T983] usb 2-1: Manufacturer: syz [ 848.126673][ T983] usb 2-1: SerialNumber: syz [ 848.155368][ T983] usb 2-1: config 0 descriptor?? [ 848.270916][T20012] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.444839][T22985] loop2: detected capacity change from 0 to 1024 [ 848.533145][T20801] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 657ms [ 848.533391][T20801] gfs2: fsid=syz:syz.0: jid=0: Done [ 848.533674][T22965] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 848.582127][T22985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 848.699692][T22985] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 848.807010][T22997] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 848.917149][ T30] audit: type=1800 audit(1788753738.032:396): pid=22965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5158" name="file1" dev="loop7" ino=9378 res=0 errno=0 [ 849.116138][T17545] usb 2-1: USB disconnect, device number 50 [ 849.261507][T22155] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.442391][T23000] loop5: detected capacity change from 0 to 32768 [ 849.571065][ T30] audit: type=1800 audit(1788753738.642:397): pid=23000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5167" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 849.794147][T23006] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5170'. [ 851.027508][T23023] loop1: detected capacity change from 0 to 32768 [ 851.243151][T23023] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 851.256825][T23023] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 851.317414][T23023] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 851.902051][T23023] XFS (loop1): Tail block (0x10) overwrite detected. Updated to 0x30 [ 851.920981][T23023] XFS (loop1): Ending clean mount [ 851.963347][T23025] loop6: detected capacity change from 0 to 131072 [ 851.965977][T23025] F2FS-fs (loop6): invalid crc value [ 851.994240][ T983] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 852.099167][T23025] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 852.106299][T23025] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 852.273896][ T983] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 852.284122][ T983] usb 6-1: config 0 has no interfaces? [ 852.284182][ T983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.304866][ T983] usb 6-1: config 0 descriptor?? [ 852.369308][T19913] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 853.514289][ T983] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 853.681650][ T983] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 853.692135][ T983] usb 4-1: config 0 has no interfaces? [ 853.701601][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.701646][ T983] usb 4-1: Product: syz [ 853.701681][ T983] usb 4-1: Manufacturer: syz [ 853.701707][ T983] usb 4-1: SerialNumber: syz [ 853.732902][T19307] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 853.745003][ T983] usb 4-1: config 0 descriptor?? [ 853.883005][T19307] usb 3-1: Using ep0 maxpacket: 32 [ 853.889063][T19307] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 853.900487][T19307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.968946][T19307] usb 3-1: config 0 descriptor?? [ 853.987592][T19307] gspca_main: sq930x-2.14.0 probing 041e:403c [ 854.649208][T17545] usb 4-1: USB disconnect, device number 41 [ 854.724121][T19307] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 854.724245][T19307] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 854.746322][T19307] usb 3-1: USB disconnect, device number 31 [ 854.901101][T17545] usb 6-1: USB disconnect, device number 22 [ 855.081178][T23101] FAULT_INJECTION: forcing a failure. [ 855.081178][T23101] name failslab, interval 1, probability 0, space 0, times 0 [ 855.081242][T23101] CPU: 1 UID: 0 PID: 23101 Comm: syz.1.5192 Tainted: G L syzkaller #0 PREEMPT(full) [ 855.081280][T23101] Tainted: [L]=SOFTLOCKUP [ 855.081290][T23101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 855.081307][T23101] Call Trace: [ 855.081317][T23101] [ 855.081329][T23101] dump_stack_lvl+0xe8/0x150 [ 855.081378][T23101] should_fail_ex+0x410/0x560 [ 855.081429][T23101] should_failslab+0xa8/0x100 [ 855.081464][T23101] __kmalloc_cache_noprof+0xa3/0x600 [ 855.081493][T23101] ? do_kimage_alloc_init+0x4e/0x280 [ 855.081533][T23101] ? do_kimage_alloc_init+0x4e/0x280 [ 855.081574][T23101] ? lock_acquire+0x115/0x350 [ 855.081606][T23101] do_kimage_alloc_init+0x4e/0x280 [ 855.081649][T23101] do_kexec_load+0x12f/0x7c0 [ 855.081690][T23101] ? __pfx_do_kexec_load+0x10/0x10 [ 855.081723][T23101] ? srso_alias_return_thunk+0x5/0xfbef5 [ 855.081754][T23101] ? _copy_from_user+0x94/0xb0 [ 855.081789][T23101] __se_sys_kexec_load+0x134/0x160 [ 855.081825][T23101] do_syscall_64+0x166/0x520 [ 855.081851][T23101] ? trace_irq_disable+0x3b/0x140 [ 855.081878][T23101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.081912][T23101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.081939][T23101] RIP: 0033:0x7f5a43d9e159 [ 855.081962][T23101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.081983][T23101] RSP: 002b:00007f5a44b96028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 855.082011][T23101] RAX: ffffffffffffffda RBX: 00007f5a44025fa0 RCX: 00007f5a43d9e159 [ 855.082031][T23101] RDX: 0000200000000140 RSI: 0000000000000001 RDI: 0000000000000002 [ 855.082048][T23101] RBP: 00007f5a43e35024 R08: 0000000000000000 R09: 0000000000000000 [ 855.082065][T23101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.082082][T23101] R13: 00007f5a44026038 R14: 00007f5a44025fa0 R15: 00007fffd9502858 [ 855.082123][T23101] [ 855.446536][T23110] input: syz0 as /devices/virtual/input/input74 [ 855.550815][T23114] loop3: detected capacity change from 0 to 2048 [ 855.619108][ T187] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 855.667874][T23114] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 855.712273][ T30] audit: type=1800 audit(1788753744.822:398): pid=23114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5198" name="file1" dev="loop3" ino=1367 res=0 errno=0 [ 855.857146][ T187] usb 6-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 855.862108][ T187] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 32768, setting to 1024 [ 855.948109][ T187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.948164][ T187] usb 6-1: Product: syz [ 855.948202][ T187] usb 6-1: Manufacturer: syz [ 855.948227][ T187] usb 6-1: SerialNumber: syz [ 856.110038][ T187] ums-onetouch 6-1:1.0: USB Mass Storage device detected [ 856.170327][T23123] loop6: detected capacity change from 0 to 1024 [ 856.182809][ T187] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/input/input75 [ 856.233079][ T5628] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 856.286964][ T187] scsi host1: usb-storage 6-1:1.0 [ 856.476595][ T187] usb 6-1: USB disconnect, device number 23 [ 856.477265][T23129] loop2: detected capacity change from 0 to 128 [ 856.482882][ C0] input input75: can't resubmit intr, dummy_hcd.5-1/input0, retval -19 [ 856.499064][T23129] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 856.499170][T23129] hpfs: filesystem error: improperly stopped [ 856.499190][T23129] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 856.499279][T23129] hpfs: You really don't want any checks? You are crazy... [ 856.500313][T23129] hpfs: hpfs_map_sector(): read error [ 856.500335][T23129] hpfs: code page support is disabled [ 856.510761][T23129] hpfs: hpfs_map_4sectors(): unaligned read [ 856.510853][T23129] hpfs: hpfs_map_4sectors(): unaligned read [ 856.510866][T23129] hpfs: filesystem error: unable to find root dir [ 856.533965][T23129] hpfs: hpfs_map_4sectors(): unaligned read [ 856.534262][T23129] hpfs: hpfs_map_sector(): read error [ 856.538301][T23129] hpfs: hpfs_map_4sectors(): unaligned read [ 856.538331][T23129] hpfs: hpfs_map_sector(): read error [ 856.856633][T23134] loop3: detected capacity change from 0 to 2048 [ 856.952562][T23134] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 856.952827][T23134] UDF-fs: Scanning with blocksize 512 failed [ 857.030455][T23134] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 857.180125][ T30] audit: type=1800 audit(1788753746.292:399): pid=23134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5204" name="file1" dev="loop3" ino=818 res=0 errno=0 [ 857.232765][T17545] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 857.385885][T17545] usb 3-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00 [ 857.397579][T17545] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 857.409513][T17545] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.421540][T17545] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.432370][T17545] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 857.454717][T17545] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.462933][T17545] usb 3-1: Product: syz [ 857.467226][T17545] usb 3-1: Manufacturer: syz [ 857.471981][T17545] usb 3-1: SerialNumber: syz [ 857.723594][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.998767][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.491042][T23164] FAULT_INJECTION: forcing a failure. [ 858.491042][T23164] name failslab, interval 1, probability 0, space 0, times 0 [ 858.491106][T23164] CPU: 1 UID: 0 PID: 23164 Comm: syz.6.5216 Tainted: G L syzkaller #0 PREEMPT(full) [ 858.491144][T23164] Tainted: [L]=SOFTLOCKUP [ 858.491154][T23164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 858.491170][T23164] Call Trace: [ 858.491180][T23164] [ 858.491192][T23164] dump_stack_lvl+0xe8/0x150 [ 858.491235][T23164] should_fail_ex+0x410/0x560 [ 858.491284][T23164] should_failslab+0xa8/0x100 [ 858.491318][T23164] __kmalloc_cache_noprof+0xa3/0x600 [ 858.491348][T23164] ? f_setown+0xe4/0x300 [ 858.491385][T23164] ? f_setown+0xe4/0x300 [ 858.491424][T23164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.491461][T23164] f_setown+0xe4/0x300 [ 858.491505][T23164] do_fcntl+0x6cd/0x1a30 [ 858.491529][T23164] ? trace_irq_disable+0x3b/0x140 [ 858.491564][T23164] ? __pfx_do_fcntl+0x10/0x10 [ 858.491595][T23164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.491629][T23164] ? __fget_files+0x2a/0x420 [ 858.491668][T23164] ? __fget_files+0x2a/0x420 [ 858.491703][T23164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.491742][T23164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.491829][T23164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.491865][T23164] __se_sys_fcntl+0xc8/0x150 [ 858.491910][T23164] do_syscall_64+0x166/0x520 [ 858.491936][T23164] ? trace_irq_disable+0x3b/0x140 [ 858.491961][T23164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.491990][T23164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.492017][T23164] RIP: 0033:0x7f27cfb9e159 [ 858.492040][T23164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.492062][T23164] RSP: 002b:00007f27d0ac7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 858.492090][T23164] RAX: ffffffffffffffda RBX: 00007f27cfe25fa0 RCX: 00007f27cfb9e159 [ 858.492110][T23164] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000003 [ 858.492126][T23164] RBP: 00007f27cfc35024 R08: 0000000000000000 R09: 0000000000000000 [ 858.492143][T23164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 858.492159][T23164] R13: 00007f27cfe26038 R14: 00007f27cfe25fa0 R15: 00007ffeb13eaef8 [ 858.492200][T23164] [ 858.644030][T23162] ushc 3-1:1.0: probe with driver ushc failed with error -110 [ 859.007422][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 859.026374][ T5615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 859.074974][ T5615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 859.116780][T23157] loop5: detected capacity change from 0 to 131072 [ 859.120489][T23157] F2FS-fs (loop5): Invalid log sectorsize (67108873) [ 859.120513][T23157] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 859.121371][T23157] F2FS-fs (loop5): invalid crc value [ 859.124506][ T5615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 859.140372][ T5615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 859.245026][T23157] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 859.254576][T23157] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 859.254603][T23157] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 859.343144][ T187] usb 3-1: USB disconnect, device number 32 [ 859.516886][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.166670][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.359028][ T5628] Bluetooth: hci0: command tx timeout [ 861.628333][T15906] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 20002 - 0 [ 861.692857][ T187] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 861.784143][T15906] netdevsim netdevsim1 eth6: set [1, 0] type 2 family 0 port 20002 - 0 [ 861.848168][ T187] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 861.856048][ T187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.922205][ T187] usb 4-1: config 0 descriptor?? [ 861.970672][ T187] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 862.294544][ T12] netdevsim netdevsim1 eth7: set [1, 0] type 2 family 0 port 20002 - 0 [ 862.294634][ T12] netdevsim netdevsim1 eth8: set [1, 0] type 2 family 0 port 20002 - 0 [ 862.425994][ T187] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 863.285913][ T187] gspca_cpia1: usb_control_msg 03, error -71 [ 863.285960][ T187] cpia1 4-1:0.0: unexpected systemstate: 00 [ 863.358365][ T187] usb 4-1: USB disconnect, device number 42 [ 863.433290][ T5628] Bluetooth: hci0: command tx timeout [ 863.549705][T23245] loop7: detected capacity change from 0 to 128 [ 863.557686][T23245] EXT4-fs (loop7): Test dummy encryption mode enabled [ 863.604072][T23245] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 863.623979][T23245] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 863.785645][T23250] smpboot: CPU 1 is now offline [ 864.555105][T23233] loop5: detected capacity change from 0 to 32768 [ 864.653366][T21434] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 864.672011][T23233] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 864.887394][T23233] XFS (loop5): Ending clean mount [ 865.202072][T23276] loop7: detected capacity change from 0 to 512 [ 865.329583][T23276] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 865.329627][T23276] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 865.329658][T23276] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.5241: Corrupt directory, running e2fsck is recommended [ 865.410903][T23272] loop2: detected capacity change from 0 to 4096 [ 865.512178][T23276] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 865.522786][ T5628] Bluetooth: hci0: command tx timeout [ 865.530143][T23276] EXT4-fs error (device loop7): ext4_iget_extra_inode:5210: inode #15: comm syz.7.5241: corrupted in-inode xattr: e_name out of bounds [ 865.544788][T23276] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 865.552681][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 865.552724][ C0] EXT4-fs (loop7): initial error at time 1788753754: ext4_iget_extra_inode:5210: inode 15 [ 865.552793][ C0] EXT4-fs (loop7): last error at time 1788753754: ext4_iget_extra_inode:5210: inode 15 [ 865.583100][T23276] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.5241: couldn't read orphan inode 15 (err -117) [ 865.583127][T23276] loop7: lost filesystem error report for type 5 error -117 [ 865.684118][T23276] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 865.731576][T23276] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 865.731620][T23276] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 865.731654][T23276] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.5241: Corrupt directory, running e2fsck is recommended [ 865.813797][T23276] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 865.813842][T23276] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 865.813872][T23276] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.5241: Corrupt directory, running e2fsck is recommended [ 865.866963][T23276] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 865.866990][T23276] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 865.867006][T23276] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.5241: Corrupt directory, running e2fsck is recommended [ 865.914614][T23279] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 866.067208][T23272] ntfs3(loop2): Failed to load $Extend (-22). [ 866.067247][T23272] ntfs3(loop2): Failed to initialize $Extend. [ 866.271913][T21434] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 866.885919][ T13] bond0 (unregistering): Released all slaves [ 867.069278][T23291] bridge_slave_1: entered promiscuous mode [ 867.079650][T23293] bridge_slave_1: left promiscuous mode [ 867.403618][T16619] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 867.607250][ T5628] Bluetooth: hci0: command tx timeout [ 868.390569][ T13] IPVS: stopping backup sync thread 21178 ... [ 868.560973][T23312] ceph: No mds server is up or the cluster is laggy [ 868.569836][T20801] libceph: connect (1)[c::]:6789 error -101 [ 868.570087][T20801] libceph: mon0 (1)[c::]:6789 connect error [ 868.868329][T23325] FAULT_INJECTION: forcing a failure. [ 868.868329][T23325] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 868.868377][T23325] CPU: 0 UID: 0 PID: 23325 Comm: syz.5.5256 Tainted: G L syzkaller #0 PREEMPT(full) [ 868.868404][T23325] Tainted: [L]=SOFTLOCKUP [ 868.868412][T23325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 868.868423][T23325] Call Trace: [ 868.868432][T23325] [ 868.868441][T23325] dump_stack_lvl+0xe8/0x150 [ 868.868473][T23325] should_fail_ex+0x410/0x560 [ 868.868510][T23325] prepare_alloc_pages+0x223/0x600 [ 868.868536][T23325] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 868.868562][T23325] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 868.868587][T23325] ? __pfx_policy_nodemask+0x10/0x10 [ 868.868612][T23325] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 868.868640][T23325] alloc_pages_mpol+0x21e/0x390 [ 868.868670][T23325] ___kmalloc_large_node+0x4f/0x120 [ 868.868703][T23325] __kmalloc_large_noprof+0x1a/0x90 [ 868.868734][T23325] ksys_ioperm+0x15e/0x670 [ 868.868761][T23325] do_syscall_64+0x166/0x520 [ 868.868780][T23325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.868805][T23325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.868829][T23325] RIP: 0033:0x7fa12cd9e159 [ 868.868847][T23325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.868862][T23325] RSP: 002b:00007fa12aff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ad [ 868.868882][T23325] RAX: ffffffffffffffda RBX: 00007fa12d025fa0 RCX: 00007fa12cd9e159 [ 868.868897][T23325] RDX: 000000000000163f RSI: 0000000000000003 RDI: 0000000000000001 [ 868.868908][T23325] RBP: 00007fa12ce35024 R08: 0000000000000000 R09: 0000000000000000 [ 868.868921][T23325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 868.868932][T23325] R13: 00007fa12d026038 R14: 00007fa12d025fa0 R15: 00007ffcf0773a38 [ 868.868962][T23325] [ 869.127736][T20801] libceph: connect (1)[c::]:6789 error -101 [ 869.127891][T20801] libceph: mon0 (1)[c::]:6789 connect error [ 869.947667][T23327] loop6: detected capacity change from 0 to 131072 [ 869.956208][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.956253][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.997657][T23327] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0) [ 869.997693][T23327] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 870.020798][T23327] F2FS-fs (loop6): invalid crc value [ 870.140815][T23327] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 870.162308][T23327] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 870.162342][T23327] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 870.195180][T20801] libceph: connect (1)[c::]:6789 error -101 [ 870.195334][T20801] libceph: mon0 (1)[c::]:6789 connect error [ 871.313967][ T5734] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 871.498564][ T5734] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 871.518342][ T5734] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 871.518383][ T5734] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 871.518409][ T5734] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 871.518435][ T5734] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 871.518472][ T5734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.593284][T23344] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 871.593456][T23344] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 871.593550][T23344] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 871.593688][T23344] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 871.799665][ T5734] cxacru 6-1:1.0: send of cm 0x90 failed (-71) [ 871.871413][T23352] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm cxacru: No space for directory leaf checksum. Please run e2fsck -D. [ 871.871460][T23352] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm cxacru: checksumming directory block 0 [ 871.871641][T23352] cxacru 6-1:1.0: loading /lib/firmware/updates/syzkaller/cxacru-fw.bin failed with error -74 [ 871.871725][T23352] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm cxacru: No space for directory leaf checksum. Please run e2fsck -D. [ 871.871752][T23352] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm cxacru: checksumming directory block 0 [ 871.871885][T23352] cxacru 6-1:1.0: loading /lib/firmware/updates/cxacru-fw.bin failed with error -74 [ 871.871964][T23352] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm cxacru: No space for directory leaf checksum. Please run e2fsck -D. [ 871.871990][T23352] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm cxacru: checksumming directory block 0 [ 871.872115][T23352] cxacru 6-1:1.0: loading /lib/firmware/syzkaller/cxacru-fw.bin failed with error -74 [ 871.872200][T23352] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm cxacru: No space for directory leaf checksum. Please run e2fsck -D. [ 871.872225][T23352] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm cxacru: checksumming directory block 0 [ 871.872351][T23352] cxacru 6-1:1.0: loading /lib/firmware/cxacru-fw.bin failed with error -74 [ 871.872381][T23352] cxacru 6-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -74 [ 871.872403][T23352] cxacru 6-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 872.569508][T23361] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5265'. [ 872.569816][T23361] unsupported nlmsg_type 40 [ 872.652049][T23360] loop3: detected capacity change from 0 to 512 [ 872.670107][T23360] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 872.708079][T23360] EXT4-fs (loop3): 1 truncate cleaned up [ 872.735292][T23360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 872.785625][T23358] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 872.921102][ T5741] usb 6-1: USB disconnect, device number 24 [ 873.246187][T20012] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.001370][T23385] loop3: detected capacity change from 0 to 512 [ 874.195541][T23385] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 874.367071][ T13] hsr_slave_0: left promiscuous mode [ 874.447397][ T13] hsr_slave_1: left promiscuous mode [ 874.602182][ T13] veth1_macvtap: left promiscuous mode [ 874.602237][ T13] veth0_macvtap: left promiscuous mode [ 874.602338][ T13] veth1_vlan: left promiscuous mode [ 874.602401][ T13] veth0_vlan: left promiscuous mode [ 875.092048][T15913] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 876.671765][T23412] loop7: detected capacity change from 0 to 128 [ 876.747088][T23412] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 876.771520][T23403] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 876.771554][T23403] device-mapper: raid: Choosing default region size of 4MiB [ 876.851178][T23412] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 876.868889][T23412] ext2 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 877.628189][T21434] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 877.931369][T23403] device-mapper: table: 248:0: raid: RAID device lookup failure (-ENOENT) [ 877.962805][T23403] device-mapper: ioctl: error adding target to table [ 878.429238][T23431] loop2: detected capacity change from 0 to 164 [ 878.651416][T23433] gadgetfs: bound to dummy_udc driver [ 878.942054][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 879.189108][T23165] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.200609][T23165] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.200762][T23165] bridge_slave_0: entered allmulticast mode [ 879.259452][T23165] bridge_slave_0: entered promiscuous mode [ 879.415918][T23439] rnbd_client L610: Mapping device /dev/ram0 on session s., (access_mode: rw, nr_poll_queues: 0) [ 879.416015][T23439] rtrs_client L2826: pathname cannot contain / and . [ 879.731741][T23165] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.740001][T23165] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.748816][T23165] bridge_slave_1: entered allmulticast mode [ 879.787868][T23165] bridge_slave_1: entered promiscuous mode [ 880.304211][T23165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.056769][T23165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 881.123946][ T187] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 881.288787][ T187] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 881.300928][ T187] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.300998][ T187] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.301031][ T187] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 881.301072][ T187] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.358036][ T187] usb 7-1: config 0 descriptor?? [ 881.690039][T23165] team0: Port device team_slave_0 added [ 881.746136][T23165] team0: Port device team_slave_1 added [ 881.915796][ T187] plantronics 0003:047F:FFFF.0046: reserved main item tag 0xd [ 882.058348][ T187] plantronics 0003:047F:FFFF.0046: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 882.395031][T23165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.407909][T23165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.435674][T23165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.438400][T23165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.438414][T23165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.438437][T23165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.513453][ T9] usb 7-1: USB disconnect, device number 24 [ 882.547812][T23494] loop5: detected capacity change from 0 to 512 [ 882.572224][T23494] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 882.626444][T23494] EXT4-fs (loop5): 1 truncate cleaned up [ 882.742124][T23494] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 883.339302][T23165] hsr_slave_0: entered promiscuous mode [ 883.340236][T23165] hsr_slave_1: entered promiscuous mode [ 883.371722][T23499] fido_id[23499]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 884.061330][T16619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.406004][T23503] loop2: detected capacity change from 0 to 32768 [ 885.474816][T23521] loop6: detected capacity change from 0 to 8192 [ 885.501672][T23521] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 885.514931][T23503] JBD2: Ignoring recovery information on journal [ 885.715604][T23503] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 886.077094][ T30] audit: type=1804 audit(1788753775.182:400): pid=23528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5305" name="/newroot/36/file1/bus" dev="loop2" ino=17059 res=1 errno=0 [ 886.129975][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 887.002887][T23534] loop6: detected capacity change from 0 to 131072 [ 887.070038][T23534] F2FS-fs (loop6): Wrong secs_per_zone / total_sections (512, 24) [ 887.070075][T23534] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 887.070110][T23534] F2FS-fs (loop6): Test dummy encryption mode enabled [ 887.088922][T23534] F2FS-fs (loop6): invalid crc value [ 887.159207][T23534] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 887.159274][T23534] loop6: lost filesystem error report for type 5 error -117 [ 887.178633][T23534] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 887.193445][T23534] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0 [ 887.193468][T23534] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 887.193489][T23534] F2FS-fs (loop6): Start checkpoint disabled! [ 887.249103][T23534] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0 [ 887.261468][T23534] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 887.261503][T23534] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 887.384552][T23534] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 887.682077][T22155] ocfs2: Unmounting device (7,2) on (node local) [ 887.991099][T23542] binder: 23540:23542 ioctl c018620c 200000000200 returned -22 [ 888.275239][T23542] loop2: detected capacity change from 0 to 1024 [ 888.301144][T23542] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 888.301241][T23542] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 888.342931][T23542] jbd2_journal_init_inode: Cannot locate journal superblock [ 888.342966][T23542] EXT4-fs (loop2): Could not load journal inode [ 888.974718][T23550] loop3: detected capacity change from 0 to 128 [ 889.057095][T23550] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 889.084475][T23550] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 889.393763][T20801] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 889.559145][T20801] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 889.583416][T20801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.583453][T20801] usb 3-1: Product: syz [ 889.583479][T20801] usb 3-1: Manufacturer: syz [ 889.583497][T20801] usb 3-1: SerialNumber: syz [ 889.636964][T20801] usb 3-1: config 0 descriptor?? [ 889.675598][T20801] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 889.773122][ T187] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 889.934172][ T187] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 889.945435][ T187] usb 4-1: config 0 has no interfaces? [ 889.945477][ T187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.987065][ T187] usb 4-1: config 0 descriptor?? [ 890.335931][ T187] usb 4-1: USB disconnect, device number 43 [ 890.922415][T23165] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.958843][T20801] gspca_stk1135: reg_w 0xd err -71 [ 890.959904][T20801] gspca_stk1135: serial bus timeout: status=0x00 [ 890.959941][T20801] gspca_stk1135: Sensor write failed [ 890.959977][T20801] gspca_stk1135: serial bus timeout: status=0x00 [ 890.959991][T20801] gspca_stk1135: Sensor write failed [ 890.960025][T20801] gspca_stk1135: serial bus timeout: status=0x00 [ 890.960039][T20801] gspca_stk1135: Sensor read failed [ 890.960075][T20801] gspca_stk1135: serial bus timeout: status=0x00 [ 890.960088][T20801] gspca_stk1135: Sensor read failed [ 890.960101][T20801] gspca_stk1135: Detected sensor type unknown (0x0) [ 890.960139][T20801] gspca_stk1135: serial bus timeout: status=0x00 [ 890.960153][T20801] gspca_stk1135: Sensor read failed [ 890.960188][T20801] gspca_stk1135: serial bus timeout: status=0x00 [ 890.960202][T20801] gspca_stk1135: Sensor read failed [ 890.960237][T20801] gspca_stk1135: serial bus timeout: status=0x00 [ 890.960258][T20801] gspca_stk1135: Sensor write failed [ 890.960293][T20801] gspca_stk1135: serial bus timeout: status=0x00 [ 890.960306][T20801] gspca_stk1135: Sensor write failed [ 890.960371][T20801] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 891.142574][T20801] usb 3-1: USB disconnect, device number 33 [ 892.078525][T23174] Bluetooth: hci8: command 0x0406 tx timeout [ 893.470181][T23597] Invalid ELF header magic: != ELF [ 893.507155][T23165] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.806659][T23603] loop7: detected capacity change from 0 to 256 [ 893.899242][T23605] loop3: detected capacity change from 0 to 512 [ 893.930474][T23603] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 894.559568][T23605] syz.3.5333: attempt to access beyond end of device [ 894.559568][T23605] loop3: rw=8390659, sector=336, nr_sectors = 16128 limit=512 [ 894.668261][T23613] FAULT_INJECTION: forcing a failure. [ 894.668261][T23613] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 894.668311][T23613] CPU: 0 UID: 0 PID: 23613 Comm: syz.2.5338 Tainted: G L syzkaller #0 PREEMPT(full) [ 894.668338][T23613] Tainted: [L]=SOFTLOCKUP [ 894.668346][T23613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 894.668358][T23613] Call Trace: [ 894.668366][T23613] [ 894.668375][T23613] dump_stack_lvl+0xe8/0x150 [ 894.668407][T23613] should_fail_ex+0x410/0x560 [ 894.668444][T23613] prepare_alloc_pages+0x223/0x600 [ 894.668472][T23613] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 894.668497][T23613] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 894.668523][T23613] ? __pfx_policy_nodemask+0x10/0x10 [ 894.668547][T23613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.668570][T23613] ? __mutex_lock+0x30b/0x1550 [ 894.668592][T23613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.668618][T23613] alloc_pages_mpol+0x21e/0x390 [ 894.668645][T23613] ? vb2_core_reqbufs+0x931/0x1470 [ 894.668672][T23613] ___kmalloc_large_node+0x4f/0x120 [ 894.668706][T23613] __kmalloc_large_node_noprof+0x18/0x90 [ 894.668739][T23613] __kmalloc_noprof+0x3fb/0x720 [ 894.668759][T23613] ? vb2_core_reqbufs+0x931/0x1470 [ 894.668790][T23613] vb2_core_reqbufs+0x931/0x1470 [ 894.668829][T23613] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 894.668853][T23613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.668880][T23613] ? __kmalloc_cache_noprof+0x14d/0x600 [ 894.668898][T23613] ? __vb2_init_fileio+0x1e2/0x1040 [ 894.668931][T23613] ? __vb2_init_fileio+0x1e2/0x1040 [ 894.668965][T23613] __vb2_init_fileio+0x310/0x1040 [ 894.668991][T23613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.669028][T23613] vb2_core_poll+0x4b0/0x830 [ 894.669059][T23613] vb2_fop_poll+0x196/0x310 [ 894.669086][T23613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.669112][T23613] ? __pfx_vb2_fop_poll+0x10/0x10 [ 894.669140][T23613] v4l2_poll+0x147/0x2c0 [ 894.669165][T23613] ? __pfx_v4l2_poll+0x10/0x10 [ 894.669192][T23613] do_select+0x1067/0x17f0 [ 894.669244][T23613] ? __pfx_do_select+0x10/0x10 [ 894.669267][T23613] ? trace_sched_exit_tp+0x3a/0x130 [ 894.669297][T23613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.669319][T23613] ? __lock_acquire+0x747/0x2de0 [ 894.669338][T23613] ? __pfx___pollwait+0x10/0x10 [ 894.669365][T23613] ? __pfx_pollwake+0x10/0x10 [ 894.669393][T23613] ? __pfx_pollwake+0x10/0x10 [ 894.669421][T23613] ? __pfx_pollwake+0x10/0x10 [ 894.669486][T23613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.669520][T23613] core_sys_select+0x86d/0xb40 [ 894.669560][T23613] ? __pfx_core_sys_select+0x10/0x10 [ 894.669606][T23613] ? __pfx_set_user_sigmask+0x10/0x10 [ 894.669633][T23613] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 894.669661][T23613] __se_sys_pselect6+0x267/0x320 [ 894.669691][T23613] ? __pfx___se_sys_pselect6+0x10/0x10 [ 894.669723][T23613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.669748][T23613] ? __x64_sys_pselect6+0x21/0xf0 [ 894.669775][T23613] do_syscall_64+0x166/0x520 [ 894.669794][T23613] ? trace_irq_disable+0x3b/0x140 [ 894.669813][T23613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.669838][T23613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.669858][T23613] RIP: 0033:0x7f646939e159 [ 894.669876][T23613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.669892][T23613] RSP: 002b:00007f646a1d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 894.669972][T23613] RAX: ffffffffffffffda RBX: 00007f6469625fa0 RCX: 00007f646939e159 [ 894.669987][T23613] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000040 [ 894.670000][T23613] RBP: 00007f6469435024 R08: 0000200000000280 R09: 0000000000000000 [ 894.670014][T23613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 894.670025][T23613] R13: 00007f6469626038 R14: 00007f6469625fa0 R15: 00007ffd4d0ea5c8 [ 894.670055][T23613] [ 894.965600][T23165] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.339280][T23615] futex_wake_op: syz.5.5339 tries to shift op by 144; fix this program [ 895.339505][T23615] futex_wake_op: syz.5.5339 tries to shift op by 144; fix this program [ 895.565158][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 896.329529][T23165] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.174329][T23649] FAULT_INJECTION: forcing a failure. [ 897.174329][T23649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 897.174380][T23649] CPU: 0 UID: 0 PID: 23649 Comm: syz.6.5351 Tainted: G L syzkaller #0 PREEMPT(full) [ 897.174410][T23649] Tainted: [L]=SOFTLOCKUP [ 897.174418][T23649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 897.174429][T23649] Call Trace: [ 897.174438][T23649] [ 897.174446][T23649] dump_stack_lvl+0xe8/0x150 [ 897.174479][T23649] should_fail_ex+0x410/0x560 [ 897.174515][T23649] _copy_from_user+0x2d/0xb0 [ 897.174539][T23649] get_itimerspec64+0x1ca/0x310 [ 897.174566][T23649] ? __pfx_get_itimerspec64+0x10/0x10 [ 897.174592][T23649] ? __pfx_do_futex+0x10/0x10 [ 897.174623][T23649] __x64_sys_timer_settime+0x15c/0x270 [ 897.174652][T23649] ? __pfx___x64_sys_timer_settime+0x10/0x10 [ 897.174685][T23649] ? srso_alias_return_thunk+0x5/0xfbef5 [ 897.174718][T23649] do_syscall_64+0x166/0x520 [ 897.174737][T23649] ? trace_irq_disable+0x3b/0x140 [ 897.174756][T23649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.174781][T23649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.174800][T23649] RIP: 0033:0x7f27cfb9e159 [ 897.174818][T23649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.174833][T23649] RSP: 002b:00007f27d0ac7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 897.174853][T23649] RAX: ffffffffffffffda RBX: 00007f27cfe25fa0 RCX: 00007f27cfb9e159 [ 897.174868][T23649] RDX: 0000200000000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 897.174880][T23649] RBP: 00007f27cfc35024 R08: 0000000000000000 R09: 0000000000000000 [ 897.174893][T23649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 897.174904][T23649] R13: 00007f27cfe26038 R14: 00007f27cfe25fa0 R15: 00007ffeb13eaef8 [ 897.174940][T23649] [ 897.674361][ T31] INFO: task syz.9.4659:21076 blocked for more than 143 seconds. [ 897.674404][ T31] Tainted: G L syzkaller #0 [ 897.674430][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 897.674444][ T31] task:syz.9.4659 state:D stack:28552 pid:21076 tgid:21074 ppid:20281 task_flags:0x400140 flags:0x00080002 [ 897.674512][ T31] Call Trace: [ 897.674525][ T31] [ 897.674543][ T31] __schedule+0x17db/0x58f0 [ 897.674582][ T31] ? __lock_acquire+0x747/0x2de0 [ 897.674622][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 897.674658][ T31] ? __pfx___schedule+0x10/0x10 [ 897.674690][ T31] ? lock_acquire+0x115/0x350 [ 897.674720][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 897.674750][ T31] ? schedule+0x90/0x2b0 [ 897.674787][ T31] schedule+0x164/0x2b0 [ 897.674822][ T31] cgroup_lock_and_drain_offline+0x51a/0x650 [ 897.674870][ T31] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 897.674907][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 897.674940][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 897.674985][ T31] cgroup_kn_lock_live+0x120/0x230 [ 897.675022][ T31] cgroup_subtree_control_write+0x4b5/0x1080 [ 897.675071][ T31] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 897.675107][ T31] ? kernfs_root+0x1c/0x230 [ 897.675130][ T31] ? kernfs_root+0x1c/0x230 [ 897.675153][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 897.675181][ T31] ? kernfs_root+0x1ea/0x230 [ 897.675206][ T31] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 897.675241][ T31] cgroup_file_write+0x331/0x8f0 [ 897.675273][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 897.675306][ T31] ? __pfx_cgroup_file_write+0x10/0x10 [ 897.675340][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 897.675367][ T31] ? __kmalloc_noprof+0x38c/0x720 [ 897.675396][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 897.675427][ T31] ? __pfx_cgroup_file_write+0x10/0x10 [ 897.675458][ T31] kernfs_fop_write_iter+0x3a4/0x540 [ 897.675493][ T31] vfs_write+0x612/0xba0 [ 897.675535][ T31] ? __pfx_vfs_write+0x10/0x10 [ 897.675578][ T31] ? __fget_files+0x2a/0x420 [ 897.675614][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 897.675646][ T31] ksys_write+0x150/0x270 [ 897.675682][ T31] ? __pfx_ksys_write+0x10/0x10 [ 897.675726][ T31] do_syscall_64+0x166/0x520 [ 897.675750][ T31] ? trace_irq_disable+0x3b/0x140 [ 897.711885][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.711921][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.711942][ T31] RIP: 0033:0x7f53dd39e159 [ 897.711967][ T31] RSP: 002b:00007f53de262028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 897.711987][ T31] RAX: ffffffffffffffda RBX: 00007f53dd625fa0 RCX: 00007f53dd39e159 [ 897.712002][ T31] RDX: 0000000000000005 RSI: 0000200000000040 RDI: 0000000000000005 [ 897.712015][ T31] RBP: 00007f53dd435024 R08: 0000000000000000 R09: 0000000000000000 [ 897.712028][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 897.712040][ T31] R13: 00007f53dd626038 R14: 00007f53dd625fa0 R15: 00007ffec28275f8 [ 897.712071][ T31] [ 897.712109][ T31] [ 897.712109][ T31] Showing all locks held in the system: [ 897.712119][ T31] locks held by pr/ttyS0/16: 1, last CPU#0: [ 897.712133][ T31] #0: ffffffff8ec36338 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 897.712188][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 897.712201][ T31] #0: ffffffff8ed5c760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 897.712281][ T31] locks held by udevd/4976: 2, last CPU#0: [ 897.712294][ T31] #0: ffffffff8f4efff8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 897.712343][ T31] #1: ffffffff8ed5c760 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 897.712395][ T31] locks held by getty/5367: 1, last CPU#0: [ 897.712407][ T31] #0: ffffffff8ed5c760 (rcu_read_lock){....}-{1:3}, at: aa_file_perm+0x18b/0x15f0 [ 897.712462][ T31] locks held by udevd/5636: 2, last CPU#0: [ 897.712476][ T31] #0: ffff88807f5c2460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 897.712527][ T31] #1: ffffffff8f4efff8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 897.712575][ T31] locks held by kworker/0:4/5741: 5, on CPU#0: [ 897.712691][ T31] #0: ffff888022e9ed40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 897.712748][ T31] #1: ffffc900049b7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 897.712801][ T31] #2: ffff8880295531d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 897.712850][ T31] #3: ffff888052f311d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 897.712905][ T31] #4: ffff88802bc171a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 897.712964][ T31] locks held by kworker/u8:14/8620: 6, last CPU#0: [ 897.712978][ T31] #0: ffff88801c2ce140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 897.713030][ T31] #1: ffffc900033e7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 897.713083][ T31] #2: ffffffff90242ca8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 897.713131][ T31] #3: ffff88802518a128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 897.713179][ T31] #4: ffff88802518f258 (&devlink->lock_key#20){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 897.713231][ T31] #5: ffffffff90251500 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 897.713284][ T31] locks held by syz-executor/16052: 2, last CPU#0: [ 897.713297][ T31] #0: ffff888034331f00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 897.713359][ T31] #1: ffffffff8ed5c760 (rcu_read_lock){....}-{1:3}, at: psi_task_switch+0x57/0x7d0 [ 897.820069][ T31] locks held by syz-executor/20012: 4, last CPU#0: [ 897.820084][ T31] #0: ffffffff8ee36170 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 897.820140][ T31] #1: ffff8880247cf678 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 897.820196][ T31] #2: ffff888012624378 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 897.820257][ T31] #3: ffffffff8ed5c760 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 897.820316][ T31] locks held by syz.9.4659/21076: 3, on CPU#1: [ 897.820329][ T31] #0: ffff88807f1b6630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 897.820384][ T31] #1: ffff88807732a460 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 897.820445][ T31] #2: ffff88802bc4cc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 897.820498][ T31] locks held by syz-executor/21422: 1, last CPU#0: [ 897.820512][ T31] #0: ffffffff8ed5c760 (rcu_read_lock){....}-{1:3}, at: __update_page_owner_free_handle+0x2e/0x4a0 [ 897.820566][ T31] locks held by syz-executor/22155: 4, last CPU#0: [ 897.820579][ T31] #0: ffffffff8ee36170 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 897.820631][ T31] #1: ffff888012625038 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 897.820685][ T31] #2: ffff8880126203b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 897.820745][ T31] #3: ffffffff8ed5c760 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 897.820802][ T31] locks held by syz-executor/23165: 6, last CPU#0: [ 897.820816][ T31] #0: ffff88807fe8c460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 897.820875][ T31] #1: ffff888066919880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 897.820926][ T31] #2: ffff888028a91c38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 897.820987][ T31] #3: ffffffff8fac90c0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 897.821033][ T31] #4: ffff88807989f128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 897.821084][ T31] #5: ffff888039329258 (&devlink->lock_key#16){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 897.821140][ T31] locks held by cxacru/23352: 1, on CPU#0: [ 897.821154][ T31] #0: ffffffff8ebf7cc8 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 897.821207][ T31] locks held by sed/23652: 1, last CPU#0: [ 897.821220][ T31] #0: ffff88801b13e9b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 897.821272][ T31] [ 897.821278][ T31] ============================================= [ 897.821278][ T31] [ 897.821286][ T31] NMI backtrace for cpu 0 [ 897.821302][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 897.821325][ T31] Tainted: [L]=SOFTLOCKUP [ 897.821333][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 897.821344][ T31] Call Trace: [ 897.821353][ T31] [ 897.821361][ T31] dump_stack_lvl+0xe8/0x150 [ 897.821391][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 897.821418][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 897.821450][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 897.821479][ T31] sys_info+0x135/0x170 [ 897.821505][ T31] watchdog+0xfd7/0x1030 [ 897.821531][ T31] ? watchdog+0x1c7/0x1030 [ 897.821556][ T31] kthread+0x38b/0x480 [ 897.821575][ T31] ? __pfx_watchdog+0x10/0x10 [ 897.821593][ T31] ? __pfx_kthread+0x10/0x10 [ 897.821613][ T31] ret_from_fork+0x514/0xb70 [ 897.821634][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 897.821663][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 897.821685][ T31] ? __switch_to+0xc89/0x1420 [ 897.821714][ T31] ? __pfx_kthread+0x10/0x10 [ 897.821735][ T31] ret_from_fork_asm+0x1a/0x30 [ 897.821777][ T31] [ 897.984645][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 898.647197][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 898.657875][ T31] Tainted: [L]=SOFTLOCKUP [ 898.662178][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 898.672234][ T31] Call Trace: [ 898.675494][ T31] [ 898.678409][ T31] vpanic+0x56d/0xa60 [ 898.682389][ T31] ? __pfx___schedule+0x10/0x10 [ 898.687234][ T31] ? __pfx_vpanic+0x10/0x10 [ 898.691748][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 898.697377][ T31] panic+0xc5/0xd0 [ 898.701091][ T31] ? __pfx_panic+0x10/0x10 [ 898.705495][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 898.710948][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 898.716318][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 898.722460][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 898.728602][ T31] watchdog+0x1030/0x1030 [ 898.732922][ T31] ? watchdog+0x1c7/0x1030 [ 898.737324][ T31] kthread+0x38b/0x480 [ 898.741375][ T31] ? __pfx_watchdog+0x10/0x10 [ 898.746047][ T31] ? __pfx_kthread+0x10/0x10 [ 898.750646][ T31] ret_from_fork+0x514/0xb70 [ 898.755217][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 898.760318][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 898.765930][ T31] ? __switch_to+0xc89/0x1420 [ 898.770597][ T31] ? __pfx_kthread+0x10/0x10 [ 898.775167][ T31] ret_from_fork_asm+0x1a/0x30 [ 898.779932][ T31] [ 898.783053][ T31] Kernel Offset: disabled [ 898.787352][ T31] Rebooting in 86400 seconds..