last executing test programs: 4m28.735358363s ago: executing program 5 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x20, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x408c0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x102080, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) socket$nl_netfilter(0x10, 0x3, 0xc) 4m28.512549537s ago: executing program 5 (id=24): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb, 0x1, 0x2}, 0x10) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f0000b8f000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000570000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 4m25.681292223s ago: executing program 5 (id=31): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000007009e000000000000801810850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m24.5116586s ago: executing program 5 (id=36): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010888, &(0x7f0000007400)=ANY=[], 0x1, 0x6174, &(0x7f0000001280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 4m23.643938849s ago: executing program 5 (id=40): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000c80)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000000)='\x00', 0x1, 0xc891, 0x0, 0x0) shutdown(r0, 0x1) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0xa0}, 0x1}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 4m22.152274027s ago: executing program 5 (id=47): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff70, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}, 0x1, 0x0, 0x0, 0x200408c1}, 0x0) 4m21.473172957s ago: executing program 32 (id=47): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff70, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}, 0x1, 0x0, 0x0, 0x200408c1}, 0x0) 2m58.391152644s ago: executing program 1 (id=513): syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) openat$panthor(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m57.987726223s ago: executing program 1 (id=515): creat(&(0x7f0000000140)='./file0\x00', 0x40) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 2m57.577417344s ago: executing program 1 (id=518): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x1, 0x20002f7}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m56.46733305s ago: executing program 1 (id=526): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000640)={[{@fat=@showexec}, {@shortname_mixed}, {@utf8no}, {@utf8no}, {@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_winnt}, {@fat=@sys_immutable}, {@fat=@discard}, {@shortname_winnt}, {@numtail}]}, 0x0, 0x2b2, &(0x7f0000002f40)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 2m55.762624101s ago: executing program 1 (id=528): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20004055) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4040) r0 = syz_io_uring_setup(0x6c40, &(0x7f0000000540)={0x0, 0xd128, 0x100, 0x0, 0x2083, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000200)=[{&(0x7f00000009c0)=""/89, 0x59}], 0x1) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000002c0)={0x38, &(0x7f0000000040)=[{0x3d, '\x00', @data, 0x4db6}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_SETXATTR={0x2a, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 2m54.52886313s ago: executing program 1 (id=536): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x80, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2m53.771231652s ago: executing program 33 (id=536): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x80, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2m53.71025234s ago: executing program 4 (id=543): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2m53.41614302s ago: executing program 4 (id=547): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) r2 = getpid() sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)='\x00', 0x1}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee00}}}], 0x20, 0x10}, 0x4008000) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2002) 2m53.104054519s ago: executing program 4 (id=549): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2m51.920890604s ago: executing program 4 (id=558): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x290d010, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0xa65400, 0x0) 2m51.302128741s ago: executing program 4 (id=562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r2, &(0x7f0000000000)='7', 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 2m50.542549682s ago: executing program 4 (id=567): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) setsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000000280)=0x5, 0x4) 2m49.935362918s ago: executing program 34 (id=567): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) setsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000000280)=0x5, 0x4) 2m31.217778985s ago: executing program 2 (id=672): syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000540)='./file0\x00', 0x800000, &(0x7f00000003c0), 0x1, 0x528, &(0x7f0000000580)="$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") sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010"], 0x1e4}, 0x1, 0x0, 0x0, 0x41}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x40000007fff, 0xb) write(r1, &(0x7f0000000100)="b4", 0x1) 2m29.994692661s ago: executing program 2 (id=678): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) lstat(&(0x7f00000074c0)='./file0\x00', 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x4e74, 0x1c080, 0xa, 0x20002f7}) 2m29.673560325s ago: executing program 2 (id=679): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "04e7ffffff00", "fc094e36a7e397030000007e580400030000000000000000ffff00", "c700", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 2m29.447497554s ago: executing program 2 (id=681): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x5, 0x4, 0x4, 0x100, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0}, &(0x7f00000001c0), &(0x7f00000002c0)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 2m29.252394025s ago: executing program 2 (id=682): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r1, 0x0, 0x482, &(0x7f0000000100)="060000007f00000100150000000000006d6800"/44, 0x2c) setsockopt(r1, 0x0, 0x487, &(0x7f0000000200)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f00000100150000010000000100"/68, 0x44) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) 2m28.166417638s ago: executing program 2 (id=690): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='udp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x0, 0x0) read(r1, &(0x7f0000000100)=""/128, 0x80) close(r1) 2m13.024254572s ago: executing program 35 (id=690): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='udp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x0, 0x0) read(r1, &(0x7f0000000100)=""/128, 0x80) close(r1) 5.415298076s ago: executing program 7 (id=1741): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000600)={'sit0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x700, 0x0, 0x200, 0x5, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x68, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}}}}}) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x101, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 3.926839359s ago: executing program 7 (id=1750): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1f9) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x240, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x1000, 0x3}, 0x0) sendfile(r0, r1, 0x0, 0x820fffe82) 3.535207272s ago: executing program 0 (id=1752): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000001c0)="15", 0x1}], 0x1}}], 0x1, 0x20000000) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000180)={0x0, 0x4, 0x3ff}, 0x8) 3.399951063s ago: executing program 8 (id=1754): socket$inet6(0xa, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x6, 0x2) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xde9f, 0x1000, 0x2, 0x15b}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x800, 0x1000000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b75, 0x800, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1b6e, 0x200, 0x1, 0x2f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xe1}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x6, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 2.889535494s ago: executing program 3 (id=1758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.887770672s ago: executing program 6 (id=1759): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x2389, 0x4) setns(0xc9, 0x0) fanotify_mark(0xffffffffffffffff, 0x41, 0x8000038, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x34, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='>'}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x4}]}, 0x34}}, 0xc840) 2.752064162s ago: executing program 6 (id=1760): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r0, 0x6) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) 2.708011673s ago: executing program 9 (id=1761): timer_create(0x3, 0x0, &(0x7f0000000440)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f00000002c0)={{0x77359400}, {0x77359400}}, 0x0) 2.706930951s ago: executing program 3 (id=1762): io_uring_setup(0x1757, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a0000060001000500000008000b"], 0x48}}, 0x20000034) close(r0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 2.706152714s ago: executing program 8 (id=1763): r0 = dup(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1b5) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) 2.641331613s ago: executing program 6 (id=1764): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x53, 0x20040000) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 2.527178029s ago: executing program 3 (id=1765): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x343, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x401, 0xfe, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f0000000200)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_submit(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.506986199s ago: executing program 0 (id=1766): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x40094) r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) 2.427329973s ago: executing program 8 (id=1767): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x82, 0x1, "ce"}, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 2.400522455s ago: executing program 7 (id=1768): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f00000b3000/0x4000)=nil, 0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000080)='4', 0x1) 2.375758603s ago: executing program 6 (id=1769): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) read(r0, &(0x7f00000006c0)=""/165, 0xa5) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.879552761s ago: executing program 0 (id=1770): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000140)='./file0\x00') mkdirat(r0, &(0x7f0000000340)='./file0\x00', 0xf3) mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) 1.829078139s ago: executing program 8 (id=1771): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0'}, 0xb) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) 1.700862373s ago: executing program 9 (id=1772): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)="010000000705810240000007058102000200", 0x12) write(r1, 0x0, 0x0) 1.68315202s ago: executing program 3 (id=1773): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x58}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x40000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffff8000}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x7, 0x5}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xffff}, {0x85, 0x0, 0x0, 0x81}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 1.583737986s ago: executing program 7 (id=1774): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'dummy0\x00'}) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='+dummy0', 0x7) 1.573748576s ago: executing program 0 (id=1775): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x490420, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0a200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) lseek(r2, 0x7fff, 0x4) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000004c80)={0x0, &(0x7f0000004240)={0x18, 0x0, 0x8, {0x4aa8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.273736951s ago: executing program 0 (id=1776): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="64b1de932e628eee8a0a89a94e5f750f399c7b1c35ac914dd6fc80d007beda93780f095b542decee786afeec8991e630bd7ebe6cdd3df5c82a54b9ba0f7e6f7cdd6729eb18e61f5296ad1df8ead0378b1cee4f7f6fef15d2b4b38d1e028e32d5584c080fcbe799a4eedfef7cbf95cb8435bf921ea828aaff4d73a74a44076e29eea4eab04413f2cc2081a0f05bec00b2ef34bd524f004ef0740ff6bc880b2847", 0xa0}, {&(0x7f0000000700)="6731a9da84a7f1d212561a21cd729eb4a2e7f2c859d2682f4601b2befc6bfd956ab32128d13f450ac5ef76ffcf2a43f71d5011ad9e4fd63b36", 0x39}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000008c0)="1a4327465638b8670e9ef99039dc0f60eb2cde85b2639882576537b3beb8b09ca7dd2c4972f132eb493ac7a3dd19bf1a9b8aacd86b333646a9e5342d840708bcd9aa55104cfedd028566dffeaf06fdb5f2d372c586b0b89c64700b3d9abdadd9f9fc7a36e68d46b7c9f80f6bd975de3ed294ef", 0x73}, {&(0x7f0000000980)="70c12f0fa84f4fcbfdb9e33365085ad18b6b869d3b7d05d8f7610180cb11c7f13b66eeb4156bfbb3f635a7dfde1719e1f90fe56dbf21f901857a7eafcf9fde47342a2d78eeb82a302413a3bfdb1c939d405fa6a8234f082b80073226b42969805f104a28759b329d3b6afc406f0d36cbc7d0a61ccbfb631af5416206c4c57c76bd167a93d23cf3783c3febaf24be3685637891f8380306980cd8505739", 0x9d}, {&(0x7f0000000a40)="73778c0d766ea105fb79d14c301c6080916c289dc3cfad072f0c96f3fefe267e50eed86d9dfc2921cfe6832450c74b23b3053fb0b963449a26650154545ebfa628468dd509ed54f0aefa06c53ee50750a8f75171be2ccf7a0028f94b6aabf6840340d42157adb59b312e95fb21235f2218b20122fe6a70986f5898d64dfb232a5ed4b5e33d2fc3d4625f96ea7e33efc27bacf87905e1fa8220799ffd2e29c67f48e620a307ed4adb8877506211626dedb8faef37535e9ae3b631078ca2f380a3389ca59c8aa73a27651d4a56ac19950c4bd9d149dbb783b01ce1d8ea832b73847494cf5c32919a5f587996b7b7779762f3", 0xf1}, {&(0x7f0000000b40)="abf5afe05d4f96614c55e2f4df6e139dbd36b34c6a2b15fd05000e53386f5afad3466fe4dc987d0d6f43b83de758521a3df4da6263843c6c3c449953489752d7d0dfc0a307b6413fb553528a04d888cb07cfb8b4698d47ab8d1627b4c6401e0ee5fdb4dcdbd98b78a17e8aa80d2e042f76dd6b22de5542bd5bdde2ce3e0878fe70", 0x81}], 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="d8"], 0xd8}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="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", 0x363) 1.204211674s ago: executing program 7 (id=1777): rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x26) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x21, 0x0, 0x4) 965.390146ms ago: executing program 3 (id=1778): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x74, r2, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048014) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40) 925.082284ms ago: executing program 9 (id=1779): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$eJzs3ctvW1kZAPDv3jycyWQmGZgFoAHKMFBQVTtxZ6LRbBhWI4RGQsySRSckThTFiaPYGZrQRbpkj0QlVrDiHwCJBVJX7JFYwI5NWSDxqEANEgsjX19nnIcbq03sNv79pCufe47t75xa9xzrc3NPACPrWkQcRMRkRHwcEbN5fZIf8X77aD3v8aO7y4eP7i4n0Wx+9M8ka2/VRddrWl7O33MqIr7/QcQPkxNB/xhR39vfWKpWKzt5VamxuV2q7+3fXN9cWqusVbbK5cWFxfl3b71TvqCR/vqo9LvffvHhHw6++eNWt2byuu5xXKT20CeO4rSMR8R3LyPYEIzl45l8mhc/1Yu4SGlEfCYi3syu/9kYyz7N445/TN+K/NIGAF5QzeZsNGe7zwGAqy7NcmBJWsxzATORpsViO4f3ekyn1Vq9cWO1tru10s6VzcVEurpercznucK5mEhW18crC1m5c16tlE+c34qI1yLip4WXsvPicq26MswvPgAwwl4+sf7/p9Be/wGAK67r1/zCMPsBAAyO/80HAKPH+g8Ao8f6DwCjx/oPAKPH+g8Ao8f6DwAj5Xsfftg6mof5/a9XPtnb3ah9cnOlUt8obu4uF5drO9vFtVptLbtnz+Z571et1bYX3o7dO6VGpd4o1ff2b2/Wdrcat7P7et+uTAxkVADAk7z25Qd/TiLi4L2XsiO67vd/7lr9xmX3DrhM6bA7AAzN2LA7AAzN6d2+gFEhHw90bdF7r6t66lThpPt9vX2a7xsKPEeuf/4Z8v/AC03+H0bX0+X/fZeHq0D+H0ZXs5nY8x8ARowcP5Cc0979+/98s+ukv9//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4EqayY4kLeZ7gc9EmhaLEa9ExFxMJKvr1cp8RLwaEX8qTBRa5wsRYd8gAHiRpX9L8v2/rs++NXOydbLw30L2GBE/+vlHP7uz1GjsLERMJv86qm/cz+vLw+g/AHCezjrdWcc7Hj+6u9w5Btmfv3+7vbloK+5hfrRbxmM8e5zKcg3T/07y87bW95WxC4h/cC8iPnfW+JMsNzKX73x6Mn4r9isDjZ8ei59mbe3H1r/FZy+gLzBqHrTmn/fPuv7SuJY9nn39T2Uz1LPrzH+Hp+a/9Gj+G+sx/13rN8bbv//OqcrmbLvtXsQXxiMOO2/eNf904ic94r/VZ/y/vPGlN3u1NX8RcT3OGn9yLFapsbldqu/t31zfXFqrrFW2yuXFhcX5d2+9Uy5lOepSJ1N92j/eu/Fqr/it8U/3iD91zvi/1uf4f/m/j3/wlSfE/8ZXz/78X39C/Naa+PU+4y9N/2aqV1sr/kqP8Z/3+d/oM/7Dv+6v9PlUAGAA6nv7G0vVamXnsgvp5YfICknEwQCG0y4UfvWTDwYV6xIL8Xx0Q+F5Kgx7ZgIu26cX/bB7AgAAAAAAAAAAAAAA9DKIPyca9hgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//2KH0wQ=") ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) r0 = open(0x0, 0x8000, 0x50) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) unshare(0x24020400) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) recvmmsg(r0, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f00000029c0), 0x0, &(0x7f0000002a00)=""/96, 0x60}, 0xc8a}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x120, 0x0) setresuid(0x0, 0xee00, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) 891.913717ms ago: executing program 7 (id=1780): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f0000000340)="0b000000010003", 0x7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000002180)={{0x12, 0x1, 0x201, 0x17, 0x5c, 0x87, 0x20, 0x9fb, 0x602e, 0xc6a7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x3e, 0x20, 0x9, "", [{{0x9, 0x4, 0x3, 0x6b, 0x0, 0x54, 0x67, 0x2, 0xc}}]}}]}}, &(0x7f00000028c0)={0x0, 0x0, 0x5, &(0x7f0000002640)={0x5, 0xf, 0x5}}) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0xb95a}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7f}], 0x3, 0x12002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc010000000000000010000000424600140003007866726d3000"/56], 0x50}}, 0x0) 777.904526ms ago: executing program 6 (id=1781): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="ac184d"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000200), 0x1, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000280)={0x1, 0x95, 0x1, &(0x7f0000000240)={0x21, "ae4095a05045db3967a2d0bbb17ecd023d06b38eb7da595e6a36f89632ee3ba916"}}) 687.662609ms ago: executing program 8 (id=1782): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x0, 0x20004801) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r3) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="02"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000140)={r2, 0x2}, 0x8) 605.888074ms ago: executing program 9 (id=1783): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000841}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 495.97104ms ago: executing program 8 (id=1784): add_key(&(0x7f0000000080)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={r0, r1+10000000}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xfffffee2) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000480)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) 246.489451ms ago: executing program 3 (id=1785): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) read$FUSE(r0, &(0x7f000000cdc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000240)=ANY=[], 0x1, 0xc42, &(0x7f0000000540)="$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") syz_fuse_handle_req(r0, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) ioctl$FS_IOC_RESVSP(r1, 0x40086602, &(0x7f0000002740)={0x0, 0x1, 0x3}) 230.942029ms ago: executing program 9 (id=1786): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70100000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 149.367373ms ago: executing program 9 (id=1787): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='&', 0x1}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001080)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000d295"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001140)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r5, r3, 0x4, r2}, 0x10) 95.393929ms ago: executing program 0 (id=1788): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xffffffff]}, 0x8, 0x800) r1 = gettid() timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x3, 0x100}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) 0s ago: executing program 6 (id=1789): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03030800030016000c004524"], 0x3a) kernel console output (not intermixed with test programs): d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.296916][ T8117] RSP: 002b:00007ff363211028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 215.296942][ T8117] RAX: ffffffffffffffda RBX: 00007ff362625fa0 RCX: 00007ff36239e159 [ 215.296962][ T8117] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 215.296979][ T8117] RBP: 00007ff36243506b R08: 0000000000000000 R09: 0000000000000000 [ 215.296995][ T8117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.297011][ T8117] R13: 00007ff362626038 R14: 00007ff362625fa0 R15: 00007fff60ccb0c8 [ 215.297052][ T8117] [ 215.396938][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.397058][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.572379][ T5754] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 216.697948][ T5754] usb 1-1: USB disconnect, device number 8 [ 216.876295][ T8197] loop2: detected capacity change from 0 to 164 [ 216.949136][ T5732] udevd[5732]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.004761][ T8197] isofs_fill_super: root inode is not a directory. Corrupted media? [ 217.185594][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 217.559934][ T7701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.043590][ T7777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.742271][ T7701] veth0_vlan: entered promiscuous mode [ 218.778516][ T7701] veth1_vlan: entered promiscuous mode [ 218.828994][ T7701] veth0_macvtap: entered promiscuous mode [ 218.841862][ T7701] veth1_macvtap: entered promiscuous mode [ 218.918168][ T7701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.942023][ T8260] netlink: 'syz.6.684': attribute type 39 has an invalid length. [ 219.046074][ T7701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.110229][ T7263] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.111870][ T6528] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.111921][ T6528] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.111964][ T6528] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.406855][ T7263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.406884][ T7263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.813402][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 219.816895][ T7777] veth0_vlan: entered promiscuous mode [ 219.847129][ T7263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.847156][ T7263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.908148][ T7777] veth1_vlan: entered promiscuous mode [ 219.975208][ T31] audit: type=1804 audit(1790241734.534:189): pid=8278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.690" name="/newroot/136/nfsd/portlist" dev="nfsd" ino=13 res=1 errno=0 [ 220.004332][ T8277] overlayfs: failed to clone upperpath [ 220.093156][ T8282] netlink: 12 bytes leftover after parsing attributes in process `syz.6.693'. [ 220.436810][ T7777] veth0_macvtap: entered promiscuous mode [ 220.528897][ T7777] veth1_macvtap: entered promiscuous mode [ 220.698354][ T7777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.753316][ T7777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.820242][ T4395] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.822976][ T4395] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.823636][ T4395] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.823683][ T4395] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.909946][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.6.697'. [ 221.394890][ T4395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.394944][ T4395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.568124][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.703'. [ 221.677990][ T6528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.678018][ T6528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.102803][ T5273] 8021q: adding VLAN 0 to HW filter on device eth11 [ 222.457378][ T8347] fuse: fd is not a fuse device [ 223.462397][ T8387] netlink: 12 bytes leftover after parsing attributes in process `syz.7.721'. [ 224.490180][ T31] audit: type=1326 audit(1790241739.044:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.6.730" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062679e159 code=0x7ffc0000 [ 224.491121][ T31] audit: type=1326 audit(1790241739.054:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.6.730" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062679e159 code=0x7ffc0000 [ 224.498040][ T31] audit: type=1326 audit(1790241739.054:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.6.730" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f062679e159 code=0x7ffc0000 [ 224.498196][ T31] audit: type=1326 audit(1790241739.054:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.6.730" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062679e159 code=0x7ffc0000 [ 224.498439][ T31] audit: type=1326 audit(1790241739.054:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.6.730" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062679e159 code=0x7ffc0000 [ 224.535261][ T31] audit: type=1326 audit(1790241739.094:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.6.730" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f062679e159 code=0x7ffc0000 [ 224.535332][ T31] audit: type=1326 audit(1790241739.094:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.6.730" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062679e159 code=0x7ffc0000 [ 224.535384][ T31] audit: type=1326 audit(1790241739.094:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.6.730" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062679e159 code=0x7ffc0000 [ 224.541787][ T31] audit: type=1326 audit(1790241739.104:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.6.730" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f062679e159 code=0x7ffc0000 [ 224.544914][ T5273] 8021q: adding VLAN 0 to HW filter on device eth12 [ 225.459646][ T5849] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 225.609916][ T5849] usb 1-1: Using ep0 maxpacket: 16 [ 225.612433][ T5849] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 225.616166][ T5849] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.616202][ T5849] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.616229][ T5849] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 225.616261][ T5849] usb 1-1: config 0 interface 0 has no altsetting 0 [ 225.616299][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.646384][ T5849] usb 1-1: config 0 descriptor?? [ 225.732931][ T8440] team0 (unregistering): Port device team_slave_0 removed [ 225.768934][ T8440] team0 (unregistering): Port device team_slave_1 removed [ 225.798538][ T8445] FAULT_INJECTION: forcing a failure. [ 225.798538][ T8445] name failslab, interval 1, probability 0, space 0, times 0 [ 225.798586][ T8445] CPU: 0 UID: 0 PID: 8445 Comm: syz.7.738 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.798623][ T8445] Tainted: [L]=SOFTLOCKUP [ 225.798633][ T8445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 225.798650][ T8445] Call Trace: [ 225.798661][ T8445] [ 225.798672][ T8445] dump_stack_lvl+0xe8/0x150 [ 225.798718][ T8445] should_fail_ex+0x410/0x560 [ 225.798768][ T8445] ? __pfx_sock_alloc_inode+0x10/0x10 [ 225.798799][ T8445] should_failslab+0xa8/0x100 [ 225.798836][ T8445] ? __pfx_sock_alloc_inode+0x10/0x10 [ 225.798863][ T8445] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 225.798906][ T8445] ? vfs_get_tree+0x92/0x2a0 [ 225.798932][ T8445] ? __se_sys_mount+0x31d/0x420 [ 225.798969][ T8445] ? sock_alloc_inode+0x2c/0x1a0 [ 225.798995][ T8445] ? sock_alloc_inode+0x2c/0x1a0 [ 225.799025][ T8445] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.799062][ T8445] ? __pfx_sock_alloc_inode+0x10/0x10 [ 225.799090][ T8445] sock_alloc_inode+0x2c/0x1a0 [ 225.799118][ T8445] ? __pfx_sock_alloc_inode+0x10/0x10 [ 225.799145][ T8445] alloc_inode+0x6a/0x1b0 [ 225.799183][ T8445] __sock_create+0x12d/0x9d0 [ 225.799224][ T8445] p9_fd_create_unix+0x220/0x4f0 [ 225.799265][ T8445] ? __pfx_p9_fd_create_unix+0x10/0x10 [ 225.799316][ T8445] ? __kmalloc_cache_noprof+0x321/0x600 [ 225.799345][ T8445] ? __kmalloc_cache_noprof+0x14d/0x600 [ 225.799383][ T8445] p9_client_create+0x3e5/0xc60 [ 225.799432][ T8445] ? __pfx_p9_client_create+0x10/0x10 [ 225.799488][ T8445] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.799532][ T8445] v9fs_session_init+0x46/0xd40 [ 225.799573][ T8445] ? __kmalloc_cache_noprof+0x14d/0x600 [ 225.799599][ T8445] ? v9fs_get_tree+0xaa/0xac0 [ 225.799627][ T8445] ? v9fs_get_tree+0xaa/0xac0 [ 225.799663][ T8445] v9fs_get_tree+0xbd/0xac0 [ 225.799692][ T8445] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 225.799725][ T8445] ? __pfx_v9fs_get_tree+0x10/0x10 [ 225.799765][ T8445] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.799802][ T8445] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.799839][ T8445] vfs_get_tree+0x92/0x2a0 [ 225.799870][ T8445] do_new_mount+0x319/0xdc0 [ 225.799907][ T8445] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.799946][ T8445] ? __pfx_do_new_mount+0x10/0x10 [ 225.799986][ T8445] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.800017][ T8445] ? ns_capable+0x89/0xe0 [ 225.800056][ T8445] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.800088][ T8445] ? path_mount+0x647/0x1050 [ 225.800128][ T8445] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.800160][ T8445] ? user_path_at+0xd4/0x160 [ 225.800204][ T8445] __se_sys_mount+0x31d/0x420 [ 225.800250][ T8445] ? __pfx___se_sys_mount+0x10/0x10 [ 225.800295][ T8445] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.800326][ T8445] ? __x64_sys_mount+0x20/0xc0 [ 225.800368][ T8445] do_syscall_64+0x166/0x520 [ 225.800402][ T8445] ? trace_irq_disable+0x3b/0x140 [ 225.800431][ T8445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.800466][ T8445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.800494][ T8445] RIP: 0033:0x7fe71539e159 [ 225.800518][ T8445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.800546][ T8445] RSP: 002b:00007fe716196028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 225.800575][ T8445] RAX: ffffffffffffffda RBX: 00007fe715625fa0 RCX: 00007fe71539e159 [ 225.800595][ T8445] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000200000000040 [ 225.800615][ T8445] RBP: 00007fe71543506b R08: 0000200000000440 R09: 0000000000000000 [ 225.800634][ T8445] R10: 0000000000208002 R11: 0000000000000246 R12: 0000000000000000 [ 225.800651][ T8445] R13: 00007fe715626038 R14: 00007fe715625fa0 R15: 00007ffca33e8d78 [ 225.800693][ T8445] [ 225.828313][ T8445] socket: no more sockets [ 225.828329][ T8445] 9pnet_fd: p9_fd_create_unix (8445): problem creating socket [ 226.769332][ T5620] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 226.929368][ T5620] usb 8-1: Using ep0 maxpacket: 32 [ 226.930300][ T5620] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 226.931977][ T5620] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.932014][ T5620] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.932061][ T5620] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.986272][ T5620] usb 8-1: config 0 descriptor?? [ 227.078964][ T8466] loop0: detected capacity change from 0 to 2048 [ 227.108516][ T5620] hub 8-1:0.0: USB hub found [ 227.158192][ T8466] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.207198][ T5620] hub 8-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 227.311291][ T8466] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.747: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 227.356176][ T8466] EXT4-fs (loop0): Remounting filesystem read-only [ 227.669053][ T5620] hid-generic 0003:046D:C31C.0002: unknown main item tag 0x0 [ 227.814385][ T8481] ip_tables: iptables: counters copy to user failed while replacing table [ 228.017407][ T5620] hid-generic 0003:046D:C31C.0002: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.7-1/input0 [ 228.108591][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.604159][ T8495] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.750'. [ 228.604219][ T8495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.750'. [ 228.929669][ T5620] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 229.048389][ T52] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 229.368559][ T5620] usbhid 8-1:0.0: reset_resume error -1 [ 229.709168][ T4939] usb 8-1: USB disconnect, device number 2 [ 230.812944][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'. [ 230.881541][ T5849] usbhid 1-1:0.0: can't add hid device: -32 [ 230.881665][ T5849] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 230.884442][ T8528] netlink: 'syz.0.764': attribute type 8 has an invalid length. [ 231.131949][ T8533] netlink: 24 bytes leftover after parsing attributes in process `syz.8.766'. [ 231.156741][ T8535] loop7: detected capacity change from 0 to 2048 [ 231.274465][ T8535] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.762449][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 232.190085][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 232.340184][ T10] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 232.340955][ T10] usb 8-1: config 0 has no interfaces? [ 232.343613][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.343642][ T10] usb 8-1: Product: syz [ 232.343661][ T10] usb 8-1: Manufacturer: syz [ 232.343679][ T10] usb 8-1: SerialNumber: syz [ 232.402847][ T10] usb 8-1: config 0 descriptor?? [ 232.562133][ T8565] netlink: 24 bytes leftover after parsing attributes in process `syz.0.779'. [ 232.738217][ T8548] mmap: syz.7.771 (8548): VmData 37654528 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 233.122414][ T985] usb 8-1: USB disconnect, device number 3 [ 234.460618][ T8579] pimreg: entered allmulticast mode [ 234.572746][ T8580] pimreg: left allmulticast mode [ 235.446518][ T5625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 235.465062][ T5625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 235.465853][ T5625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 235.467767][ T5625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 235.468820][ T5625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 237.599759][ T52] Bluetooth: hci6: command tx timeout [ 238.020171][ T8689] Invalid ELF header len 7 [ 239.189951][ T8711] tipc: New replicast peer: 172.20.20.187 [ 239.190446][ T8711] tipc: Enabled bearer , priority 10 [ 239.699556][ T52] Bluetooth: hci6: command tx timeout [ 239.749145][ T252] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.204210][ T4939] tipc: Node number set to 1126177069 [ 240.634187][ T252] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.786376][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.789147][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.806545][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.825181][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.826003][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 241.317637][ T8754] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.321921][ T8754] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.769943][ T52] Bluetooth: hci6: command tx timeout [ 241.774132][ T8616] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.774253][ T8616] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.774443][ T8616] bridge_slave_0: entered allmulticast mode [ 241.781981][ T8616] bridge_slave_0: entered promiscuous mode [ 241.788254][ T8616] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.788376][ T8616] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.788542][ T8616] bridge_slave_1: entered allmulticast mode [ 241.795430][ T8616] bridge_slave_1: entered promiscuous mode [ 241.842966][ T8787] loop8: detected capacity change from 0 to 512 [ 241.966598][ T8787] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.966717][ T8787] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.008224][ T37] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.008335][ T37] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.036876][ T8784] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.835: bg 0: block 264: padding at end of block bitmap is not set [ 242.091239][ T8795] fuse: fd is not a fuse device [ 242.175930][ T8784] __quota_error: 45 callbacks suppressed [ 242.175956][ T8784] Quota error (device loop8): write_blk: dquota write failed [ 242.175976][ T8784] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5 [ 242.176210][ T8784] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 242.194467][ T8784] EXT4-fs error (device loop8): ext4_acquire_dquot:7069: comm syz.8.835: Failed to acquire dquot type 1 [ 242.196938][ T8787] Quota error (device loop8): write_blk: dquota write failed [ 242.196962][ T8787] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5 [ 242.197133][ T8787] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 242.197176][ T8787] EXT4-fs error (device loop8): ext4_acquire_dquot:7069: comm syz.8.835: Failed to acquire dquot type 1 [ 242.322632][ T8802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.839'. [ 242.411287][ T7777] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.439610][ T252] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.460627][ T7265] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.462754][ T7265] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.497741][ T8616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.724622][ T8616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.882645][ T52] Bluetooth: hci3: command tx timeout [ 242.892661][ T252] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.956637][ T8616] team0: Port device team_slave_0 added [ 242.972929][ T8616] team0: Port device team_slave_1 added [ 243.109707][ T8616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.109730][ T8616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.109762][ T8616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.112096][ T8616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.112114][ T8616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.112144][ T8616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.453886][ T8616] hsr_slave_0: entered promiscuous mode [ 243.458375][ T8616] hsr_slave_1: entered promiscuous mode [ 243.473345][ T8616] debugfs: 'hsr0' already exists in 'hsr' [ 243.473372][ T8616] Cannot create hsr debugfs directory [ 243.587739][ T8837] CIFS: Attempting to mount //127.0.0.1/share [ 243.654147][ T8832] syzkaller0: entered promiscuous mode [ 243.654181][ T8832] syzkaller0: entered allmulticast mode [ 243.836656][ T8843] overlayfs: failed to clone upperpath [ 243.843015][ T52] Bluetooth: hci6: command tx timeout [ 244.393749][ T8837] CIFS: VFS: Error connecting to socket. Aborting operation. [ 244.394009][ T8837] CIFS: VFS: cifs_mount failed w/return code = -4 [ 244.937445][ T8872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.851'. [ 244.974003][ T52] Bluetooth: hci3: command tx timeout [ 247.042296][ T52] Bluetooth: hci3: command tx timeout [ 248.041516][ T8896] xt_hashlimit: size too large, truncated to 1048576 [ 248.211952][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.861'. [ 248.317689][ T8905] netlink: 24 bytes leftover after parsing attributes in process `syz.3.862'. [ 248.574200][ T8913] 9p: Bad value for 'rfdno' [ 248.802695][ T252] bridge_slave_1: left allmulticast mode [ 248.802731][ T252] bridge_slave_1: left promiscuous mode [ 248.803024][ T252] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.837530][ T252] bridge_slave_0: left allmulticast mode [ 248.837565][ T252] bridge_slave_0: left promiscuous mode [ 248.837849][ T252] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.121223][ T52] Bluetooth: hci3: command tx timeout [ 249.708863][ T31] audit: type=1326 audit(1790241764.264:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8934 comm="syz.3.868" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf4f9e159 code=0x7ffc0000 [ 249.736346][ T31] audit: type=1326 audit(1790241764.264:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8934 comm="syz.3.868" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf4f9e159 code=0x7ffc0000 [ 249.736410][ T31] audit: type=1326 audit(1790241764.274:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8934 comm="syz.3.868" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf4f9e159 code=0x7ffc0000 [ 249.736454][ T31] audit: type=1326 audit(1790241764.274:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8934 comm="syz.3.868" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf4f9e159 code=0x7ffc0000 [ 249.791008][ T31] audit: type=1326 audit(1790241764.334:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8934 comm="syz.3.868" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fccf4f9e159 code=0x7ffc0000 [ 249.791071][ T31] audit: type=1326 audit(1790241764.334:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8934 comm="syz.3.868" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fccf4f9dec2 code=0x7ffc0000 [ 250.130601][ T252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.141184][ T252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.171392][ T252] bond0 (unregistering): Released all slaves [ 250.194411][ T31] audit: type=1326 audit(1790241764.754:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8934 comm="syz.3.868" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fccf4f5e98e code=0x7ffc0000 [ 250.399906][ T8938] smc: net device team0 applied user defined pnetid SYZ2 [ 250.504370][ T8939] smc: removing net device team0 with user defined pnetid SYZ2 [ 250.569875][ T8939] team0 (unregistering): Port device team_slave_1 removed [ 250.592995][ T8939] team0 (unregistering): Port device vlan0 removed [ 251.088759][ T31] audit: type=1326 audit(1790241765.644:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8934 comm="syz.3.868" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fccf4f9df87 code=0x7ffc0000 [ 251.154835][ T31] audit: type=1326 audit(1790241765.714:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8934 comm="syz.3.868" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fccf4f5e98e code=0x7ffc0000 [ 251.179415][ T31] audit: type=1326 audit(1790241765.724:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8934 comm="syz.3.868" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fccf4f5e98e code=0x7ffc0000 [ 251.409488][ T8957] random: crng reseeded on system resumption [ 251.466950][ T8959] netlink: 256 bytes leftover after parsing attributes in process `syz.0.873'. [ 251.468244][ T8959] FAULT_INJECTION: forcing a failure. [ 251.468244][ T8959] name failslab, interval 1, probability 0, space 0, times 0 [ 251.474413][ T8959] CPU: 1 UID: 0 PID: 8959 Comm: syz.0.873 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.474453][ T8959] Tainted: [L]=SOFTLOCKUP [ 251.474463][ T8959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 251.474479][ T8959] Call Trace: [ 251.474490][ T8959] [ 251.474501][ T8959] dump_stack_lvl+0xe8/0x150 [ 251.474545][ T8959] should_fail_ex+0x410/0x560 [ 251.474583][ T8959] should_failslab+0xa8/0x100 [ 251.474620][ T8959] __kmalloc_cache_node_noprof+0xaa/0x620 [ 251.474651][ T8959] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 251.474677][ T8959] ? __alloc_workqueue+0x956/0x1fe0 [ 251.474703][ T8959] ? __alloc_workqueue+0x956/0x1fe0 [ 251.474730][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.474768][ T8959] __alloc_workqueue+0x956/0x1fe0 [ 251.474801][ T8959] ? vsnprintf+0xe42/0xef0 [ 251.474843][ T8959] alloc_workqueue_noprof+0xe3/0x210 [ 251.474882][ T8959] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 251.474927][ T8959] ieee802154_register_hw+0x20e/0x8e0 [ 251.474965][ T8959] ? __pfx_ieee802154_register_hw+0x10/0x10 [ 251.474997][ T8959] ? trace_kmem_cache_alloc+0x80/0xe0 [ 251.475036][ T8959] ? __kmalloc_cache_noprof+0x14d/0x600 [ 251.475065][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.475095][ T8959] ? __raw_spin_lock_init+0x45/0x100 [ 251.475137][ T8959] hwsim_add_one+0x4ee/0x1490 [ 251.475185][ T8959] genl_family_rcv_msg_doit+0x233/0x340 [ 251.475230][ T8959] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 251.475279][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.475315][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.475345][ T8959] ? security_capable+0x7e/0x2c0 [ 251.475386][ T8959] genl_rcv_msg+0x614/0x7a0 [ 251.475426][ T8959] ? __pfx_genl_rcv_msg+0x10/0x10 [ 251.475458][ T8959] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 251.475511][ T8959] netlink_rcv_skb+0x226/0x4a0 [ 251.475553][ T8959] ? __pfx_genl_rcv_msg+0x10/0x10 [ 251.475588][ T8959] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 251.475647][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.475677][ T8959] ? down_read+0x2be/0x330 [ 251.475718][ T8959] genl_rcv+0x28/0x40 [ 251.475749][ T8959] netlink_unicast+0x7bd/0x940 [ 251.475802][ T8959] netlink_sendmsg+0x813/0xb40 [ 251.475841][ T8959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.475876][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.475906][ T8959] ? apparmor_socket_sendmsg+0x98/0x360 [ 251.475934][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.475968][ T8959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.475993][ T8959] sock_sendmsg_nosec+0x13a/0x180 [ 251.476026][ T8959] ____sys_sendmsg+0x54e/0x850 [ 251.476070][ T8959] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.476111][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.476147][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.476177][ T8959] ? import_iovec+0x73/0xa0 [ 251.476216][ T8959] ___sys_sendmsg+0x2a5/0x360 [ 251.476250][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.476280][ T8959] ? __lock_acquire+0x747/0x2de0 [ 251.476319][ T8959] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.476362][ T8959] ? futex_wait+0x2a2/0x390 [ 251.476439][ T8959] ? __fget_files+0x2a/0x420 [ 251.476474][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.476503][ T8959] ? __fget_files+0x3a2/0x420 [ 251.476553][ T8959] __x64_sys_sendmsg+0x1b1/0x290 [ 251.476589][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.476623][ T8959] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 251.476669][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.476714][ T8959] do_syscall_64+0x166/0x520 [ 251.476747][ T8959] ? trace_irq_disable+0x3b/0x140 [ 251.476774][ T8959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.476809][ T8959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.476836][ T8959] RIP: 0033:0x7ff36239e159 [ 251.476860][ T8959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.476881][ T8959] RSP: 002b:00007ff3631f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.476909][ T8959] RAX: ffffffffffffffda RBX: 00007ff362626090 RCX: 00007ff36239e159 [ 251.476929][ T8959] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 251.476946][ T8959] RBP: 00007ff36243506b R08: 0000000000000000 R09: 0000000000000000 [ 251.476963][ T8959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.476979][ T8959] R13: 00007ff362626128 R14: 00007ff362626090 R15: 00007fff60ccb0c8 [ 251.477020][ T8959] [ 252.517971][ T252] hsr_slave_0: left promiscuous mode [ 252.581051][ T252] hsr_slave_1: left promiscuous mode [ 252.582233][ T252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.582258][ T252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.621091][ T252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.621120][ T252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.685123][ T252] veth1_macvtap: left promiscuous mode [ 252.685186][ T252] veth0_macvtap: left promiscuous mode [ 252.686417][ T252] veth1_vlan: left promiscuous mode [ 252.686495][ T252] veth0_vlan: left promiscuous mode [ 253.915317][ T252] team0 (unregistering): Port device team_slave_1 removed [ 253.970880][ T252] team0 (unregistering): Port device team_slave_0 removed [ 254.741005][ T8616] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 254.769999][ T8616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 254.786043][ T8616] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 254.832974][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 254.832998][ T31] audit: type=1326 audit(1790241769.384:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9010 comm="syz.3.889" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccf4f9e159 code=0x0 [ 254.882929][ T8616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 254.897981][ T8616] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 255.015793][ T8616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 255.116308][ T8616] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 255.161881][ T8616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 255.283530][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.283604][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.845121][ T9047] xt_hashlimit: size too large, truncated to 1048576 [ 255.928197][ T8763] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.928400][ T8763] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.928554][ T8763] bridge_slave_0: entered allmulticast mode [ 255.958679][ T8763] bridge_slave_0: entered promiscuous mode [ 255.988605][ T8763] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.988729][ T8763] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.988914][ T8763] bridge_slave_1: entered allmulticast mode [ 256.020158][ T8763] bridge_slave_1: entered promiscuous mode [ 256.212408][ T8763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.234191][ T8763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.411077][ T9057] loop0: detected capacity change from 0 to 8192 [ 256.434185][ T9057] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 256.464528][ T8763] team0: Port device team_slave_0 added [ 256.515657][ T8763] team0: Port device team_slave_1 added [ 256.825596][ T8763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.825624][ T8763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.825656][ T8763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.900439][ T8763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.900461][ T8763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.900496][ T8763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.246469][ T8763] hsr_slave_0: entered promiscuous mode [ 257.250232][ T8763] hsr_slave_1: entered promiscuous mode [ 257.254790][ T8763] debugfs: 'hsr0' already exists in 'hsr' [ 257.254815][ T8763] Cannot create hsr debugfs directory [ 257.350766][ T8616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.522162][ T9090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.522747][ T9090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.937174][ T8616] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.065771][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.065988][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.115104][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.115258][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.153539][ T9116] netlink: 'syz.8.907': attribute type 4 has an invalid length. [ 258.389580][ T9126] netlink: 'syz.8.910': attribute type 10 has an invalid length. [ 258.477284][ T9121] loop0: detected capacity change from 0 to 4096 [ 258.494271][ T9121] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 258.537892][ T9122] bridge0: port 3(macsec1) entered blocking state [ 258.538111][ T9122] bridge0: port 3(macsec1) entered disabled state [ 258.538282][ T9122] macsec1: entered allmulticast mode [ 258.625763][ T9122] macsec1: entered promiscuous mode [ 258.736546][ T31] audit: type=1800 audit(1790241773.294:268): pid=9129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.909" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 258.915197][ T50] ntfs3(loop0): ino=1e, ni_find_attr [ 259.110004][ T5849] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 259.281246][ T5849] usb 9-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 259.282581][ T5849] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.516617][ T5849] usb 9-1: NFC: Reader power on cmd error 0 [ 259.516649][ T5849] pn533_usb 9-1:1.0: NFC: Couldn't poweron the reader (error -22) [ 259.516799][ T5849] pn533_usb 9-1:1.0: probe with driver pn533_usb failed with error -22 [ 259.564687][ T5849] usb 9-1: USB disconnect, device number 2 [ 259.718150][ T9156] fuse: fd is not a fuse device [ 259.996157][ T9166] overlayfs: failed to clone upperpath [ 260.515423][ T8763] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 260.540563][ T8763] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 260.543652][ T8763] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 260.563762][ T8763] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 260.575097][ T8763] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 260.615468][ T8763] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 260.637580][ T8763] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 260.676801][ T8763] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 261.134271][ T8763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.173136][ T8616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.217656][ T8763] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.252146][ T7263] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.252270][ T7263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.288042][ T7263] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.288158][ T7263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.299105][ T8616] veth0_vlan: entered promiscuous mode [ 262.385463][ T8616] veth1_vlan: entered promiscuous mode [ 262.385617][ T9243] loop0: detected capacity change from 0 to 32768 [ 262.386726][ T9243] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 262.403620][ T9243] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.939 (9243) [ 262.448119][ T9243] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 262.448158][ T9243] BTRFS info (device loop0): using crc32c checksum algorithm [ 262.622798][ T9243] BTRFS info (device loop0): rebuilding free space tree [ 262.644579][ T9243] BTRFS info (device loop0): disabling free space tree [ 262.644703][ T9243] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 262.644731][ T9243] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 262.649014][ T9269] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 262.661394][ T9243] BTRFS info (device loop0): enabling ssd optimizations [ 262.661425][ T9243] BTRFS info (device loop0): turning on async discard [ 262.661444][ T9243] BTRFS info (device loop0): force clearing of disk cache [ 262.661465][ T9243] BTRFS info (device loop0): use zstd compression, level 3 [ 262.803566][ T8616] veth0_macvtap: entered promiscuous mode [ 262.898969][ T8616] veth1_macvtap: entered promiscuous mode [ 262.912295][ T9273] overlayfs: failed to clone upperpath [ 262.986770][ T9273] overlayfs: failed to clone upperpath [ 263.102879][ T8616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.209155][ T8616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.460071][ T6526] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.522387][ T7267] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.732916][ T7270] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.749615][ T9284] netlink: 'syz.6.945': attribute type 4 has an invalid length. [ 263.800849][ T9285] netlink: 'syz.6.945': attribute type 4 has an invalid length. [ 263.834179][ T9287] loop8: detected capacity change from 0 to 512 [ 263.869568][ T9287] EXT4-fs error (device loop8): ext4_orphan_get:1403: inode #15: comm syz.8.946: iget: bad i_size value: 38620345925642 [ 263.869611][ T9287] fserror_report: 1 callbacks suppressed [ 263.869625][ T9287] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 263.879117][ T9287] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.946: couldn't read orphan inode 15 (err -117) [ 263.879181][ T9287] loop8: lost filesystem error report for type 5 error -117 [ 263.879260][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 263.879281][ C0] EXT4-fs (loop8): initial error at time 1790241778: ext4_orphan_get:1403: inode 15 [ 263.879317][ C0] EXT4-fs (loop8): last error at time 1790241778: ext4_orphan_get:1403: inode 15 [ 263.967004][ T9287] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.016946][ T9284] lo: entered allmulticast mode [ 264.031478][ T80] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.135360][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.135386][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.261962][ T9289] EXT4-fs error (device loop8): ext4_validate_block_bitmap:436: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 264.295124][ T5611] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 264.428770][ T7777] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.452443][ T4395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.452468][ T4395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.634547][ T9303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.635095][ T9303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.786862][ T9307] netlink: 2028 bytes leftover after parsing attributes in process `syz.9.787'. [ 264.786890][ T9307] netlink: 24 bytes leftover after parsing attributes in process `syz.9.787'. [ 264.789839][ T8763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.094927][ T9314] FAULT_INJECTION: forcing a failure. [ 265.094927][ T9314] name failslab, interval 1, probability 0, space 0, times 0 [ 265.094970][ T9314] CPU: 1 UID: 0 PID: 9314 Comm: syz.8.953 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.095003][ T9314] Tainted: [L]=SOFTLOCKUP [ 265.095012][ T9314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 265.095026][ T9314] Call Trace: [ 265.095036][ T9314] [ 265.095048][ T9314] dump_stack_lvl+0xe8/0x150 [ 265.095091][ T9314] should_fail_ex+0x410/0x560 [ 265.095126][ T9314] should_failslab+0xa8/0x100 [ 265.095161][ T9314] __kmalloc_noprof+0xfe/0x720 [ 265.095187][ T9314] ? mpi_resize+0x7d/0x210 [ 265.095217][ T9314] ? mpi_resize+0x7d/0x210 [ 265.095248][ T9314] ? __se_sys_add_key+0x349/0x420 [ 265.095292][ T9314] mpi_resize+0x7d/0x210 [ 265.095328][ T9314] mpi_powm+0xbe7/0x2480 [ 265.095384][ T9314] ? __pfx_mpi_powm+0x10/0x10 [ 265.095418][ T9314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.095447][ T9314] ? lockdep_hardirqs_on+0x7b/0x110 [ 265.095478][ T9314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.095510][ T9314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.095539][ T9314] ? kfree+0x1c5/0x650 [ 265.095575][ T9314] ? rsa_enc+0x2e0/0x480 [ 265.095615][ T9314] rsa_enc+0x338/0x480 [ 265.095660][ T9314] ? __pfx_rsa_enc+0x10/0x10 [ 265.095691][ T9314] ? __virt_addr_valid+0x137/0x390 [ 265.095725][ T9314] ? __virt_addr_valid+0x2e8/0x390 [ 265.095760][ T9314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.095789][ T9314] ? sg_init_one+0xf5/0x1c0 [ 265.095832][ T9314] rsassa_pkcs1_verify+0x52b/0xbb0 [ 265.095878][ T9314] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 265.095924][ T9314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.095954][ T9314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.095981][ T9314] ? rsassa_pkcs1_set_pub_key+0x13d/0x1a0 [ 265.096011][ T9314] public_key_verify_signature+0x79b/0x9e0 [ 265.096056][ T9314] ? __pfx_public_key_verify_signature+0x10/0x10 [ 265.096087][ T9314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.096131][ T9314] ? asymmetric_key_generate_id+0x60/0x170 [ 265.096154][ T9314] ? asymmetric_key_id_same+0x67/0xe0 [ 265.096197][ T9314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.096231][ T9314] x509_check_for_self_signed+0x326/0x430 [ 265.096268][ T9314] x509_cert_parse+0x622/0x7a0 [ 265.096303][ T9314] x509_key_preparse+0x64/0x6d0 [ 265.096333][ T9314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.096362][ T9314] ? down_read+0x2be/0x330 [ 265.096403][ T9314] asymmetric_key_preparse+0xb9/0x1b0 [ 265.096431][ T9314] __key_create_or_update+0x3a9/0xa80 [ 265.096477][ T9314] ? __pfx___key_create_or_update+0x10/0x10 [ 265.096508][ T9314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.096542][ T9314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.096571][ T9314] ? lookup_user_key+0xb68/0x1150 [ 265.096616][ T9314] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 265.096664][ T9314] ? __pfx_keyring_search_iterator+0x10/0x10 [ 265.096709][ T9314] key_create_or_update+0x42/0x60 [ 265.096748][ T9314] __se_sys_add_key+0x349/0x420 [ 265.096820][ T9314] ? __pfx___se_sys_add_key+0x10/0x10 [ 265.096880][ T9314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.096917][ T9314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.096945][ T9314] ? __x64_sys_add_key+0x20/0xc0 [ 265.096987][ T9314] do_syscall_64+0x166/0x520 [ 265.097019][ T9314] ? trace_irq_disable+0x3b/0x140 [ 265.097045][ T9314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.097078][ T9314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.097104][ T9314] RIP: 0033:0x7fd31479e159 [ 265.097127][ T9314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.097147][ T9314] RSP: 002b:00007fd31571b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 265.097173][ T9314] RAX: ffffffffffffffda RBX: 00007fd314a25fa0 RCX: 00007fd31479e159 [ 265.097192][ T9314] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 265.097209][ T9314] RBP: 00007fd31483506b R08: 000000001444548d R09: 0000000000000000 [ 265.097226][ T9314] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 265.097242][ T9314] R13: 00007fd314a26038 R14: 00007fd314a25fa0 R15: 00007ffe79e40c08 [ 265.097281][ T9314] [ 265.625735][ T9320] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 265.832965][ T31] audit: type=1800 audit(1790241780.394:269): pid=9328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.957" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 266.327888][ T9331] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 266.388963][ T9345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.964'. [ 266.537111][ T9350] bond2 (unregistering): Released all slaves [ 266.662529][ T8763] veth0_vlan: entered promiscuous mode [ 266.722454][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 266.843064][ T8763] veth1_vlan: entered promiscuous mode [ 266.889657][ T9] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 266.895593][ T9] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 266.895624][ T9] usb 9-1: Product: syz [ 266.895642][ T9] usb 9-1: SerialNumber: syz [ 266.936242][ T9] usb 9-1: config 0 descriptor?? [ 267.017966][ T8763] veth0_macvtap: entered promiscuous mode [ 267.047633][ T8763] veth1_macvtap: entered promiscuous mode [ 267.108987][ T8763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.145382][ T9] hso 9-1:0.0: Failed to find BULK eps [ 267.169138][ T8763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.270957][ T6529] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.271015][ T6529] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.271059][ T6529] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.271102][ T6529] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.349498][ T9] usb 9-1: USB disconnect, device number 3 [ 267.756396][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.756432][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.875887][ T9375] fuse: fd is not a fuse device [ 267.912934][ T9365] loop0: detected capacity change from 0 to 32768 [ 267.990780][ T6529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.990807][ T6529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.279397][ T5762] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 268.430171][ T5762] usb 10-1: Using ep0 maxpacket: 32 [ 268.432533][ T5762] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 268.433718][ T5762] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.433781][ T5762] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.433826][ T5762] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.443697][ T5762] usb 10-1: config 0 descriptor?? [ 268.940724][ T5762] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 268.940767][ T5762] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 269.094211][ T5762] ft260 0003:0403:6030.0003: chip code: 0000 0000 [ 269.156334][ T9403] fuse: fd is not a fuse device [ 269.330085][ T5762] ft260 0003:0403:6030.0003: failed to retrieve system status [ 269.330561][ T5762] ft260 0003:0403:6030.0003: probe with driver ft260 failed with error -71 [ 269.366864][ T9405] loop0: detected capacity change from 0 to 164 [ 269.397693][ T5762] usb 10-1: USB disconnect, device number 2 [ 269.673827][ T9411] loop7: detected capacity change from 0 to 512 [ 269.962316][ T9420] ip_tables: iptables: counters copy to user failed while replacing table [ 270.619681][ T5848] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 270.773725][ T5848] usb 10-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 270.778241][ T5848] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.778278][ T5848] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.778312][ T5848] usb 10-1: config 0 interface 0 has no altsetting 0 [ 270.778351][ T5848] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.866420][ T5848] usb 10-1: config 0 descriptor?? [ 271.412899][ T9434] FAULT_INJECTION: forcing a failure. [ 271.412899][ T9434] name failslab, interval 1, probability 0, space 0, times 0 [ 271.412946][ T9434] CPU: 1 UID: 0 PID: 9434 Comm: syz.8.1000 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.412981][ T9434] Tainted: [L]=SOFTLOCKUP [ 271.412992][ T9434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 271.413009][ T9434] Call Trace: [ 271.413019][ T9434] [ 271.413030][ T9434] dump_stack_lvl+0xe8/0x150 [ 271.413076][ T9434] should_fail_ex+0x410/0x560 [ 271.413115][ T9434] should_failslab+0xa8/0x100 [ 271.413152][ T9434] __kmalloc_cache_node_noprof+0xaa/0x620 [ 271.413182][ T9434] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 271.413208][ T9434] ? __alloc_workqueue+0x956/0x1fe0 [ 271.413234][ T9434] ? __alloc_workqueue+0x956/0x1fe0 [ 271.413262][ T9434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.413300][ T9434] __alloc_workqueue+0x956/0x1fe0 [ 271.413329][ T9434] ? vsnprintf+0xe42/0xef0 [ 271.413368][ T9434] alloc_workqueue_noprof+0xe3/0x210 [ 271.413394][ T9434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.413425][ T9434] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 271.413457][ T9434] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 271.413484][ T9434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.413516][ T9434] nci_register_device+0x3ff/0xa00 [ 271.413562][ T9434] ? __pfx_nci_register_device+0x10/0x10 [ 271.413598][ T9434] ? __raw_spin_lock_init+0x45/0x100 [ 271.413639][ T9434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.413669][ T9434] ? __raw_spin_lock_init+0x45/0x100 [ 271.413708][ T9434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.413738][ T9434] ? __init_waitqueue_head+0xa8/0x150 [ 271.413780][ T9434] virtual_ncidev_open+0x129/0x1a0 [ 271.413827][ T9434] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 271.413860][ T9434] misc_open+0x2d5/0x350 [ 271.413905][ T9434] chrdev_open+0x4d9/0x600 [ 271.413940][ T9434] ? __pfx_chrdev_open+0x10/0x10 [ 271.413970][ T9434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.414001][ T9434] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 271.414038][ T9434] ? __pfx_chrdev_open+0x10/0x10 [ 271.414068][ T9434] do_dentry_open+0x816/0x1380 [ 271.414116][ T9434] vfs_open+0x3b/0x340 [ 271.414145][ T9434] ? path_openat+0x1428/0x1d60 [ 271.414175][ T9434] path_openat+0x1443/0x1d60 [ 271.414226][ T9434] do_file_open+0x23e/0x4a0 [ 271.414260][ T9434] ? __pfx_do_file_open+0x10/0x10 [ 271.414319][ T9434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.414349][ T9434] ? _raw_spin_unlock+0x28/0x50 [ 271.414377][ T9434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.414406][ T9434] ? alloc_fd+0x651/0x6c0 [ 271.414454][ T9434] do_sys_openat2+0x115/0x200 [ 271.414488][ T9434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.414520][ T9434] ? __se_sys_futex+0x3a8/0x450 [ 271.414558][ T9434] ? __pfx_do_sys_openat2+0x10/0x10 [ 271.414601][ T9434] ? rcu_is_watching+0x16/0xb0 [ 271.414636][ T9434] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.414675][ T9434] __x64_sys_openat+0x138/0x170 [ 271.414716][ T9434] do_syscall_64+0x166/0x520 [ 271.414750][ T9434] ? trace_irq_disable+0x3b/0x140 [ 271.414778][ T9434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.414972][ T9434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.415007][ T9434] RIP: 0033:0x7fd31479e159 [ 271.415032][ T9434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.415056][ T9434] RSP: 002b:00007fd31571b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 271.415085][ T9434] RAX: ffffffffffffffda RBX: 00007fd314a25fa0 RCX: 00007fd31479e159 [ 271.415106][ T9434] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 271.415126][ T9434] RBP: 00007fd31483506b R08: 0000000000000000 R09: 0000000000000000 [ 271.415144][ T9434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.415160][ T9434] R13: 00007fd314a26038 R14: 00007fd314a25fa0 R15: 00007ffe79e40c08 [ 271.415205][ T9434] [ 271.867095][ T5848] hid-multitouch 0003:0EEF:72C4.0004: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.9-1/input0 [ 271.875614][ T9438] fuse: fd is not a fuse device [ 271.892273][ T5848] usb 10-1: USB disconnect, device number 3 [ 272.263550][ T9442] fido_id[9442]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 272.413295][ T9451] bridge_slave_0: left allmulticast mode [ 272.413330][ T9451] bridge_slave_0: left promiscuous mode [ 272.413569][ T9451] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.455043][ T9451] bridge_slave_1: left allmulticast mode [ 272.455074][ T9451] bridge_slave_1: left promiscuous mode [ 272.455297][ T9451] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.505013][ T9451] bond0: (slave bond_slave_0): Releasing backup interface [ 272.666346][ T9451] bond0: (slave bond_slave_1): Releasing backup interface [ 272.741772][ T9451] team0: Port device team_slave_0 removed [ 272.794405][ T9451] team0: Port device team_slave_1 removed [ 272.798727][ T9451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.798754][ T9451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.826170][ T9451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.826200][ T9451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.850912][ T9451] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 272.858193][ T9458] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 274.374152][ T9475] netlink: 'syz.6.1015': attribute type 2 has an invalid length. [ 274.374180][ T9475] netlink: 'syz.6.1015': attribute type 1 has an invalid length. [ 274.659418][ T5762] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 274.820274][ T5762] usb 10-1: unable to get BOS descriptor or descriptor too short [ 274.820993][ T5762] usb 10-1: not running at top speed; connect to a high speed hub [ 274.821030][ T5762] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 274.823926][ T5762] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 274.823966][ T5762] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 274.823993][ T5762] usb 10-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 274.824015][ T5762] usb 10-1: config 14 has no interface number 0 [ 274.824035][ T5762] usb 10-1: config 14 has no interface number 1 [ 274.824106][ T5762] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 274.824137][ T5762] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 274.824167][ T5762] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 274.824198][ T5762] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 274.824229][ T5762] usb 10-1: config 14 interface 57 has no altsetting 0 [ 274.824251][ T5762] usb 10-1: config 14 interface 228 has no altsetting 0 [ 274.833696][ T5762] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.833726][ T5762] usb 10-1: Product: syz [ 274.833744][ T5762] usb 10-1: Manufacturer: syz [ 274.833762][ T5762] usb 10-1: SerialNumber: syz [ 275.313091][ T52] Bluetooth: hci1: unexpected event for opcode 0x0c2d [ 275.331078][ T9503] FAULT_INJECTION: forcing a failure. [ 275.331078][ T9503] name failslab, interval 1, probability 0, space 0, times 0 [ 275.331124][ T9503] CPU: 0 UID: 0 PID: 9503 Comm: syz.7.1027 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.331161][ T9503] Tainted: [L]=SOFTLOCKUP [ 275.331171][ T9503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 275.331188][ T9503] Call Trace: [ 275.331199][ T9503] [ 275.331210][ T9503] dump_stack_lvl+0xe8/0x150 [ 275.331257][ T9503] should_fail_ex+0x410/0x560 [ 275.331294][ T9503] should_failslab+0xa8/0x100 [ 275.331331][ T9503] __kvmalloc_node_noprof+0x176/0x820 [ 275.331375][ T9503] ? nf_hook_entries_grow+0x287/0x740 [ 275.331406][ T9503] ? nf_hook_entries_grow+0x287/0x740 [ 275.331435][ T9503] ? __pfx___mutex_lock+0x10/0x10 [ 275.331476][ T9503] nf_hook_entries_grow+0x287/0x740 [ 275.331517][ T9503] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.331556][ T9503] __nf_register_net_hook+0x2c9/0x930 [ 275.331595][ T9503] ? nf_register_net_hook+0xc8/0x190 [ 275.331629][ T9503] nf_register_net_hook+0xb2/0x190 [ 275.331662][ T9503] nf_register_net_hooks+0x44/0x1b0 [ 275.331699][ T9503] nf_ct_netns_do_get+0x3bf/0x5c0 [ 275.331737][ T9503] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 275.331770][ T9503] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.331802][ T9503] ? trace_contention_end+0x3d/0x140 [ 275.331847][ T9503] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.331875][ T9503] ? nf_ct_netns_get+0xe9/0x320 [ 275.331910][ T9503] helper_mt_check+0x74/0x150 [ 275.331957][ T9503] xt_check_match+0x602/0xce0 [ 275.332001][ T9503] ? __pfx_xt_check_match+0x10/0x10 [ 275.332040][ T9503] ? pcpu_alloc_noprof+0x1036/0x1900 [ 275.332091][ T9503] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.332131][ T9503] ? xt_find_match+0x213/0x260 [ 275.332177][ T9503] translate_table+0x1498/0x1f80 [ 275.332244][ T9503] ? __pfx_translate_table+0x10/0x10 [ 275.332277][ T9503] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.332307][ T9503] ? lock_acquire+0x115/0x350 [ 275.332337][ T9503] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.332413][ T9503] ? _copy_from_user+0x94/0xb0 [ 275.332449][ T9503] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.332488][ T9503] do_ipt_set_ctl+0xa53/0xe20 [ 275.332531][ T9503] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.332563][ T9503] ? rcu_is_watching+0x16/0xb0 [ 275.332597][ T9503] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 275.332639][ T9503] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.332681][ T9503] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.332714][ T9503] ? __mutex_unlock_slowpath+0x731/0x900 [ 275.332758][ T9503] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 275.332812][ T9503] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.332854][ T9503] nf_setsockopt+0x26f/0x290 [ 275.332893][ T9503] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 275.332930][ T9503] do_sock_setsockopt+0x17c/0x1b0 [ 275.332972][ T9503] __x64_sys_setsockopt+0x13d/0x1b0 [ 275.333016][ T9503] do_syscall_64+0x166/0x520 [ 275.333050][ T9503] ? trace_irq_disable+0x3b/0x140 [ 275.333088][ T9503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.333123][ T9503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.333150][ T9503] RIP: 0033:0x7f0f7419e159 [ 275.333175][ T9503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.333196][ T9503] RSP: 002b:00007f0f75051028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 275.333225][ T9503] RAX: ffffffffffffffda RBX: 00007f0f74425fa0 RCX: 00007f0f7419e159 [ 275.333246][ T9503] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 275.333261][ T9503] RBP: 00007f0f7423506b R08: 00000000000003e0 R09: 0000000000000000 [ 275.333279][ T9503] R10: 0000200000000ac0 R11: 0000000000000246 R12: 0000000000000000 [ 275.333295][ T9503] R13: 00007f0f74426038 R14: 00007f0f74425fa0 R15: 00007ffe95546698 [ 275.333339][ T9503] [ 275.335013][ T9503] xt_helper: cannot load conntrack support for proto=2 [ 275.368078][ T5762] legousbtower 10-1:14.57: interrupt endpoints not found [ 275.763982][ T5762] legousbtower 10-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 276.132408][ T5762] legousbtower 10-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 276.499588][ T5848] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 276.606574][ T9540] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1044'. [ 276.659331][ T5848] usb 8-1: Using ep0 maxpacket: 32 [ 276.660118][ T5848] usb 8-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 276.661503][ T5848] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 276.661539][ T5848] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 276.661571][ T5848] usb 8-1: config 0 interface 0 has no altsetting 0 [ 276.661607][ T5848] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.728698][ T5848] usb 8-1: config 0 descriptor?? [ 277.116367][ T9556] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1050'. [ 277.152165][ T5762] usb 10-1: USB disconnect, device number 4 [ 277.188180][ T5762] legousbtower 10-1:14.228: LEGO USB Tower #-160 now disconnected [ 277.520990][ T9562] FAULT_INJECTION: forcing a failure. [ 277.520990][ T9562] name failslab, interval 1, probability 0, space 0, times 0 [ 277.521062][ T9562] CPU: 0 UID: 0 PID: 9562 Comm: syz.8.1052 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.521099][ T9562] Tainted: [L]=SOFTLOCKUP [ 277.521109][ T9562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 277.521125][ T9562] Call Trace: [ 277.521136][ T9562] [ 277.521147][ T9562] dump_stack_lvl+0xe8/0x150 [ 277.521195][ T9562] should_fail_ex+0x410/0x560 [ 277.521233][ T9562] should_failslab+0xa8/0x100 [ 277.521269][ T9562] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 277.521300][ T9562] ? kasprintf+0xe2/0x140 [ 277.521329][ T9562] ? kasprintf+0xe2/0x140 [ 277.521375][ T9562] kvasprintf+0xeb/0x1a0 [ 277.521403][ T9562] ? __page_table_check_ptes_set+0x6f/0x340 [ 277.521431][ T9562] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.521461][ T9562] ? __pfx_kvasprintf+0x10/0x10 [ 277.521506][ T9562] kasprintf+0xe2/0x140 [ 277.521543][ T9562] ? __pfx_kasprintf+0x10/0x10 [ 277.521579][ T9562] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.521606][ T9562] ? vmap+0x1ef/0x300 [ 277.521643][ T9562] relay_open_buf+0x4bb/0xda0 [ 277.521690][ T9562] relay_open+0x413/0x900 [ 277.521727][ T9562] blk_trace_setup_prepare+0x425/0x5a0 [ 277.521762][ T9562] blk_trace_setup+0x2f5/0x520 [ 277.521795][ T9562] ? __pfx_blk_trace_setup+0x10/0x10 [ 277.521843][ T9562] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.521870][ T9562] ? snprintf+0xe8/0x140 [ 277.521918][ T9562] blk_trace_ioctl+0x37f/0x910 [ 277.521951][ T9562] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 277.521983][ T9562] ? kasan_quarantine_put+0xbb/0x1f0 [ 277.522007][ T9562] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.522039][ T9562] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.522069][ T9562] ? tomoyo_path_number_perm+0x219/0x5f0 [ 277.522098][ T9562] ? tomoyo_path_number_perm+0x219/0x5f0 [ 277.522125][ T9562] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.522154][ T9562] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.522181][ T9562] ? do_vfs_ioctl+0x116f/0x1530 [ 277.522210][ T9562] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 277.522249][ T9562] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.522276][ T9562] ? hook_file_ioctl+0x1f2/0x600 [ 277.522302][ T9562] ? kasan_quarantine_put+0xbb/0x1f0 [ 277.522356][ T9562] blkdev_ioctl+0x4c1/0x740 [ 277.522391][ T9562] ? __pfx_blkdev_ioctl+0x10/0x10 [ 277.522419][ T9562] ? __fget_files+0x2a/0x420 [ 277.522455][ T9562] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.522482][ T9562] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.522510][ T9562] ? __pfx_blkdev_ioctl+0x10/0x10 [ 277.522541][ T9562] __se_sys_ioctl+0xfc/0x170 [ 277.522569][ T9562] do_syscall_64+0x166/0x520 [ 277.522598][ T9562] ? trace_irq_disable+0x3b/0x140 [ 277.522622][ T9562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.522652][ T9562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.522675][ T9562] RIP: 0033:0x7fd31479e159 [ 277.522698][ T9562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.522720][ T9562] RSP: 002b:00007fd31571b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.522749][ T9562] RAX: ffffffffffffffda RBX: 00007fd314a25fa0 RCX: 00007fd31479e159 [ 277.522769][ T9562] RDX: 0000200000000440 RSI: 00000000c0481273 RDI: 0000000000000003 [ 277.522786][ T9562] RBP: 00007fd31483506b R08: 0000000000000000 R09: 0000000000000000 [ 277.522803][ T9562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.522819][ T9562] R13: 00007fd314a26038 R14: 00007fd314a25fa0 R15: 00007ffe79e40c08 [ 277.522859][ T9562] [ 278.006061][ T9572] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1054'. [ 278.188247][ T5848] hid-alps 0003:044E:120B.0005: failed read register (-71) [ 278.188357][ T5848] hid-alps 0003:044E:120B.0005: failed U1_NUM_SENS_X (-71) [ 278.216245][ T5848] hid-alps 0003:044E:120B.0005: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.7-1/input0 [ 278.240693][ T5848] usb 8-1: USB disconnect, device number 4 [ 278.436164][ T9579] fido_id[9579]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 278.894310][ T9576] 9pnet_fd: p9_fd_create_tcp (9576): problem connecting socket to 127.0.0.1 [ 281.530339][ T9631] trusted_key: encrypted_key: insufficient parameters specified [ 282.651642][ T9614] loop7: detected capacity change from 0 to 256 [ 283.026763][ T9656] jffs2: notice: (9656) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 283.968949][ T9693] fuse: fd is not a fuse device [ 284.197885][ T9695] fuse: fd is not a fuse device [ 285.600219][ T9716] loop7: detected capacity change from 0 to 256 [ 286.298949][ T9733] capability: warning: `syz.6.1114' uses deprecated v2 capabilities in a way that may be insecure [ 287.510033][ T9760] mmap: syz.3.1124 (9760) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 287.770553][ T9768] loop9: detected capacity change from 0 to 64 [ 288.321300][ T9786] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1133'. [ 289.431528][ T9799] syz_tun: entered allmulticast mode [ 289.483763][ T9799] syz_tun: left allmulticast mode [ 289.677589][ T9800] uprobe: syz.9.1141:9800 failed to unregister, leaking uprobe [ 289.968304][ T9814] netlink: 'syz.7.1144': attribute type 15 has an invalid length. [ 289.968341][ T9814] netlink: 11870 bytes leftover after parsing attributes in process `syz.7.1144'. [ 290.118131][ T9814] netlink: 'syz.7.1144': attribute type 6 has an invalid length. [ 290.118159][ T9814] netlink: 'syz.7.1144': attribute type 7 has an invalid length. [ 290.118177][ T9814] netlink: 'syz.7.1144': attribute type 11 has an invalid length. [ 290.118195][ T9814] netlink: 'syz.7.1144': attribute type 15 has an invalid length. [ 290.118212][ T9814] netlink: 'syz.7.1144': attribute type 16 has an invalid length. [ 290.118229][ T9814] netlink: 'syz.7.1144': attribute type 21 has an invalid length. [ 290.118246][ T9814] netlink: 'syz.7.1144': attribute type 25 has an invalid length. [ 290.118263][ T9814] netlink: 'syz.7.1144': attribute type 27 has an invalid length. [ 290.118279][ T9814] netlink: 'syz.7.1144': attribute type 28 has an invalid length. [ 290.250753][ T31] audit: type=1326 audit(1790241804.814:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.6.1148" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f062679e159 code=0x0 [ 290.353082][ T9826] fuse: fd is not a fuse device [ 290.427674][ T9829] netlink: 11575 bytes leftover after parsing attributes in process `syz.7.1150'. [ 290.427710][ T9829] netlink: 116 bytes leftover after parsing attributes in process `syz.7.1150'. [ 291.095618][ T9833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.143546][ T9833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.959515][ T6526] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.961766][ T7267] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.961822][ T7267] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.961864][ T7267] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.094077][ T9886] fuse: fd is not a fuse device [ 293.718483][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1173'. [ 294.636610][ T9924] loop7: detected capacity change from 0 to 1024 [ 294.707365][ T9924] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 294.858023][ T9924] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #3: block 2: comm syz.7.1178: lblock 2 mapped to illegal pblock 2 (length 1) [ 294.858062][ T9924] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 294.860467][ C1] EXT4-fs (loop7): initial error at time 1790241809: ext4_map_blocks:790: inode 3: block 2 [ 294.860514][ C1] EXT4-fs (loop7): last error at time 1790241809: ext4_map_blocks:790: inode 3: block 2 [ 294.929529][ T9924] EXT4-fs (loop7): Remounting filesystem read-only [ 294.929562][ T9924] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 294.929681][ T9924] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 294.929801][ T9924] EXT4-fs (loop7): 1 orphan inode deleted [ 294.948269][ T9933] netlink: 15143 bytes leftover after parsing attributes in process `syz.6.1181'. [ 294.997953][ T9924] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.300033][ T8763] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.877450][ T9952] fuse: fd is not a fuse device [ 296.598520][ T9961] fuse: fd is not a fuse device [ 297.927513][ T9965] loop7: detected capacity change from 0 to 131072 [ 297.939275][ T9965] F2FS-fs (loop7): Wrong secs_per_zone / total_sections (512, 24) [ 297.939307][ T9965] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 297.939339][ T9965] F2FS-fs (loop7): Test dummy encryption mode enabled [ 297.943989][ T9965] F2FS-fs (loop7): invalid crc value [ 298.042347][ T9965] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 298.043967][ T9965] loop7: lost filesystem error report for type 5 error -117 [ 298.059562][ T9965] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 298.065387][ T9965] F2FS-fs (loop7): f2fs_disable_checkpoint starts, unusable: 0 [ 298.065416][ T9965] F2FS-fs (loop7): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 298.065490][ T9965] F2FS-fs (loop7): Start checkpoint disabled! [ 298.076160][ T9965] F2FS-fs (loop7): f2fs_disable_checkpoint finishes, err:0 [ 298.097381][ T9965] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 298.097414][ T9965] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 298.123428][ T9974] futex_wake_op: syz.3.1198 tries to shift op by 144; fix this program [ 298.123707][ T9974] futex_wake_op: syz.3.1198 tries to shift op by 144; fix this program [ 298.238856][ T9965] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 298.302767][ T9965] fscrypt: AES-256-XTS using blk-crypto-fallback [ 300.149475][ T5740] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 300.222410][T10007] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 300.302967][ T5740] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 300.393735][ T5740] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.393800][ T5740] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.438097][ T5740] usb 10-1: config 0 descriptor?? [ 300.663857][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1212'. [ 300.663889][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1212'. [ 300.677908][ T5740] usbhid 10-1:0.0: can't add hid device: -71 [ 300.678024][ T5740] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 300.711823][ T5740] usb 10-1: USB disconnect, device number 5 [ 301.220568][ T5740] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 301.370200][ T5740] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 301.377079][ T5740] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.377138][ T5740] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.392855][ T5740] usb 10-1: config 0 descriptor?? [ 301.595238][T10025] overlayfs: failed to clone upperpath [ 301.708428][T10027] fuse: fd is not a fuse device [ 302.300115][ T5740] aiptek 10-1:0.0: Aiptek using 400 ms programming speed [ 302.304014][T10002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.306492][T10002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.316139][ T5740] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input10 [ 302.812628][T10047] fuse: fd is not a fuse device [ 303.005468][ T5740] usb 10-1: USB disconnect, device number 6 [ 303.005585][ C1] aiptek 10-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 303.095805][T10049] validate_nla: 2 callbacks suppressed [ 303.095831][T10049] netlink: 'syz.0.1227': attribute type 1 has an invalid length. [ 303.362450][T10049] 8021q: adding VLAN 0 to HW filter on device bond2 [ 303.787464][T10054] bond2: (slave geneve2): making interface the new active one [ 303.837964][T10054] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 304.031302][T10091] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.099945][T10069] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.110042][ T7264] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.112987][ T1296] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.673386][ T12] IPVS: starting estimator thread 0... [ 304.771658][ T9851] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 304.799368][T10108] IPVS: using max 26 ests per chain, 62400 per kthread [ 304.929348][ T9851] usb 8-1: Using ep0 maxpacket: 8 [ 305.070049][ T9851] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 305.071252][ T9851] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 305.071282][ T9851] usb 8-1: config 0 has no interface number 0 [ 305.124175][ T9851] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.124211][ T9851] usb 8-1: Product: syz [ 305.124230][ T9851] usb 8-1: Manufacturer: syz [ 305.124249][ T9851] usb 8-1: SerialNumber: syz [ 305.164136][ T9851] usb 8-1: config 0 descriptor?? [ 305.397450][ T9851] uvcvideo 8-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 305.397557][ T9851] uvcvideo 8-1:0.31: No valid video chain found. [ 305.716089][ T9851] usb 8-1: USB disconnect, device number 5 [ 307.459396][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 13 (since boot) is 1013 jiffies old. [ 308.639626][ T5625] Bluetooth: hci3: command 0x2016 tx timeout [ 308.817860][T10198] ip_tables: iptables: counters copy to user failed while replacing table [ 308.831922][T10198] tipc: Enabled bearer , priority 10 [ 308.940723][T10201] overlayfs: failed to clone upperpath [ 308.948444][T10201] overlayfs: failed to clone upperpath [ 309.286502][T10208] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1278'. [ 309.311348][T10212] fuse: fd is not a fuse device [ 309.317744][T10208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.836896][T10192] loop7: detected capacity change from 0 to 32768 [ 309.847220][T10192] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1271 (10192) [ 309.906842][T10192] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 309.906883][T10192] BTRFS info (device loop7): using sha256 checksum algorithm [ 310.132707][T10239] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1288'. [ 310.622822][T10192] BTRFS info (device loop7): enabling ssd optimizations [ 310.622857][T10192] BTRFS info (device loop7): turning on async discard [ 310.622877][T10192] BTRFS info (device loop7): enabling free space tree [ 310.822875][T10253] netlink: 'syz.3.1293': attribute type 4 has an invalid length. [ 310.866591][ T8763] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 311.363478][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1297'. [ 311.597760][T10273] FAULT_INJECTION: forcing a failure. [ 311.597760][T10273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.597807][T10273] CPU: 1 UID: 0 PID: 10273 Comm: syz.7.1299 Tainted: G L syzkaller #0 PREEMPT(full) [ 311.597845][T10273] Tainted: [L]=SOFTLOCKUP [ 311.597856][T10273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 311.597873][T10273] Call Trace: [ 311.597883][T10273] [ 311.597895][T10273] dump_stack_lvl+0xe8/0x150 [ 311.597945][T10273] should_fail_ex+0x410/0x560 [ 311.597986][T10273] _copy_to_user+0x31/0xb0 [ 311.598026][T10273] bpf_verifier_vlog+0x606/0x900 [ 311.598071][T10273] __btf_verifier_log+0xe2/0x140 [ 311.598121][T10273] ? __pfx___btf_verifier_log+0x10/0x10 [ 311.598172][T10273] ? btf_parse_hdr+0x1da/0x810 [ 311.598210][T10273] btf_parse_hdr+0x3c1/0x810 [ 311.598247][T10273] btf_new_fd+0x32f/0xbb0 [ 311.598290][T10273] __sys_bpf+0xd2e/0xd90 [ 311.598335][T10273] ? __pfx___sys_bpf+0x10/0x10 [ 311.598372][T10273] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.598418][T10273] ? do_futex+0x3e7/0x4e0 [ 311.598500][T10273] ? rcu_is_watching+0x16/0xb0 [ 311.598534][T10273] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.598574][T10273] __x64_sys_bpf+0xba/0xd0 [ 311.598605][T10273] do_syscall_64+0x166/0x520 [ 311.598640][T10273] ? trace_irq_disable+0x3b/0x140 [ 311.598667][T10273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.598699][T10273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.598724][T10273] RIP: 0033:0x7f0f7419e159 [ 311.598747][T10273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.598771][T10273] RSP: 002b:00007f0f75051028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 311.598802][T10273] RAX: ffffffffffffffda RBX: 00007f0f74425fa0 RCX: 00007f0f7419e159 [ 311.598824][T10273] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 311.598843][T10273] RBP: 00007f0f7423506b R08: 0000000000000000 R09: 0000000000000000 [ 311.598861][T10273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.598878][T10273] R13: 00007f0f74426038 R14: 00007f0f74425fa0 R15: 00007ffe95546698 [ 311.598919][T10273] [ 312.805664][ T52] Bluetooth: hci3: command 0x2016 tx timeout [ 314.144051][T10325] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1317'. [ 314.503311][T10337] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 315.451038][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1332'. [ 315.451071][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1332'. [ 315.553932][T10371] FAULT_INJECTION: forcing a failure. [ 315.553932][T10371] name failslab, interval 1, probability 0, space 0, times 0 [ 315.553980][T10371] CPU: 1 UID: 0 PID: 10371 Comm: syz.7.1335 Tainted: G L syzkaller #0 PREEMPT(full) [ 315.554017][T10371] Tainted: [L]=SOFTLOCKUP [ 315.554026][T10371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 315.554042][T10371] Call Trace: [ 315.554053][T10371] [ 315.554064][T10371] dump_stack_lvl+0xe8/0x150 [ 315.554108][T10371] should_fail_ex+0x410/0x560 [ 315.554150][T10371] should_failslab+0xa8/0x100 [ 315.554184][T10371] ? skb_clone+0x212/0x3a0 [ 315.554223][T10371] kmem_cache_alloc_noprof+0xa1/0x600 [ 315.554268][T10371] ? skb_clone+0x212/0x3a0 [ 315.554314][T10371] skb_clone+0x212/0x3a0 [ 315.554353][T10371] ? pfkey_broadcast_one+0x7d/0x360 [ 315.554400][T10371] pfkey_broadcast_one+0x9b/0x360 [ 315.554451][T10371] ? pfkey_broadcast+0x39b/0x3e0 [ 315.554495][T10371] pfkey_broadcast+0x3a8/0x3e0 [ 315.554536][T10371] ? pfkey_broadcast+0x48/0x3e0 [ 315.554579][T10371] pfkey_sendmsg+0xf02/0x11d0 [ 315.554618][T10371] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.554649][T10371] ? trace_sched_exit_tp+0x3a/0x130 [ 315.554696][T10371] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 315.554764][T10371] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.554796][T10371] ? aa_sock_msg_perm+0x144/0x210 [ 315.554840][T10371] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.554873][T10371] ? apparmor_socket_sendmsg+0x18b/0x360 [ 315.554903][T10371] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.554937][T10371] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 315.554976][T10371] sock_sendmsg_nosec+0x13a/0x180 [ 315.555010][T10371] ____sys_sendmsg+0x54e/0x850 [ 315.555058][T10371] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.555099][T10371] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.555138][T10371] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.555177][T10371] ? import_iovec+0x73/0xa0 [ 315.555218][T10371] ___sys_sendmsg+0x2a5/0x360 [ 315.555253][T10371] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.555288][T10371] ? __lock_acquire+0x747/0x2de0 [ 315.555323][T10371] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.555369][T10371] ? futex_wait+0x2a2/0x390 [ 315.555458][T10371] ? __fget_files+0x2a/0x420 [ 315.555499][T10371] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.555536][T10371] ? __fget_files+0x3a2/0x420 [ 315.555596][T10371] __x64_sys_sendmsg+0x1b1/0x290 [ 315.555644][T10371] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.555683][T10371] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 315.555730][T10371] ? srso_alias_return_thunk+0x5/0xfbef5 [ 315.555776][T10371] do_syscall_64+0x166/0x520 [ 315.555811][T10371] ? trace_irq_disable+0x3b/0x140 [ 315.555841][T10371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.555877][T10371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.555905][T10371] RIP: 0033:0x7f0f7419e159 [ 315.555930][T10371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.555951][T10371] RSP: 002b:00007f0f75051028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.555980][T10371] RAX: ffffffffffffffda RBX: 00007f0f74425fa0 RCX: 00007f0f7419e159 [ 315.556001][T10371] RDX: 0000000020000010 RSI: 0000200000000180 RDI: 0000000000000005 [ 315.556018][T10371] RBP: 00007f0f7423506b R08: 0000000000000000 R09: 0000000000000000 [ 315.556035][T10371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.556050][T10371] R13: 00007f0f74426038 R14: 00007f0f74425fa0 R15: 00007ffe95546698 [ 315.556090][T10371] [ 316.023214][T10379] netlink: 'syz.9.1338': attribute type 10 has an invalid length. [ 316.109790][T10377] bridge0: port 3(macsec1) entered blocking state [ 316.112120][T10377] bridge0: port 3(macsec1) entered disabled state [ 316.112300][T10377] macsec1: entered allmulticast mode [ 316.136721][T10377] macsec1: entered promiscuous mode [ 316.727001][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.727158][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.751457][T10403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1348'. [ 316.769353][ T9849] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 316.919518][ T9849] usb 10-1: Using ep0 maxpacket: 8 [ 316.920375][ T9849] usb 10-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 316.922042][ T9849] usb 10-1: config 0 has an invalid interface number: 186 but max is 0 [ 316.922071][ T9849] usb 10-1: config 0 has no interface number 0 [ 316.922120][ T9849] usb 10-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 316.922151][ T9849] usb 10-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 316.922180][ T9849] usb 10-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 316.922210][ T9849] usb 10-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 316.922242][ T9849] usb 10-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 316.924500][ T9849] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.924529][ T9849] usb 10-1: Product: syz [ 316.924548][ T9849] usb 10-1: Manufacturer: syz [ 316.924566][ T9849] usb 10-1: SerialNumber: syz [ 317.028403][ T9849] usb 10-1: config 0 descriptor?? [ 317.315748][ T9849] iowarrior 10-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 317.342371][T10410] FAULT_INJECTION: forcing a failure. [ 317.342371][T10410] name failslab, interval 1, probability 0, space 0, times 0 [ 317.342427][T10410] CPU: 0 UID: 0 PID: 10410 Comm: syz.7.1351 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.342465][T10410] Tainted: [L]=SOFTLOCKUP [ 317.342477][T10410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 317.342494][T10410] Call Trace: [ 317.342505][T10410] [ 317.342518][T10410] dump_stack_lvl+0xe8/0x150 [ 317.342570][T10410] should_fail_ex+0x410/0x560 [ 317.342610][T10410] should_failslab+0xa8/0x100 [ 317.342648][T10410] __kmalloc_noprof+0xfe/0x720 [ 317.342677][T10410] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 317.342705][T10410] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 317.342742][T10410] __memcg_list_lru_alloc+0x1d9/0x760 [ 317.342783][T10410] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 317.342811][T10410] ? xa_load+0x60/0x210 [ 317.342863][T10410] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.342900][T10410] __memcg_slab_post_alloc_hook+0x3c3/0xd90 [ 317.342934][T10410] ? __memcg_slab_post_alloc_hook+0x202/0xd90 [ 317.342973][T10410] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.343010][T10410] kmem_cache_alloc_lru_noprof+0x351/0x5f0 [ 317.343060][T10410] ? kmem_cache_alloc_lru_noprof+0x153/0x5f0 [ 317.343101][T10410] ? __d_alloc+0x37/0x6f0 [ 317.343141][T10410] ? __d_alloc+0x37/0x6f0 [ 317.343187][T10410] __d_alloc+0x37/0x6f0 [ 317.343234][T10410] d_make_root+0x41/0x80 [ 317.343259][T10410] devpts_fill_super+0x1eb/0x520 [ 317.343299][T10410] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.343332][T10410] ? __pfx_devpts_fill_super+0x10/0x10 [ 317.343372][T10410] get_tree_nodev+0xbb/0x150 [ 317.343425][T10410] vfs_get_tree+0x92/0x2a0 [ 317.343454][T10410] do_new_mount+0x319/0xdc0 [ 317.343491][T10410] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.343528][T10410] ? __pfx_do_new_mount+0x10/0x10 [ 317.343567][T10410] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.343598][T10410] ? ns_capable+0x89/0xe0 [ 317.343637][T10410] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.343668][T10410] ? path_mount+0x647/0x1050 [ 317.343708][T10410] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.343739][T10410] ? user_path_at+0xd4/0x160 [ 317.343782][T10410] __se_sys_mount+0x31d/0x420 [ 317.343827][T10410] ? __pfx___se_sys_mount+0x10/0x10 [ 317.343872][T10410] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.343903][T10410] ? __x64_sys_mount+0x20/0xc0 [ 317.343943][T10410] do_syscall_64+0x166/0x520 [ 317.343978][T10410] ? trace_irq_disable+0x3b/0x140 [ 317.344007][T10410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.344042][T10410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.344070][T10410] RIP: 0033:0x7f0f7419e159 [ 317.344094][T10410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.344116][T10410] RSP: 002b:00007f0f75051028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 317.344146][T10410] RAX: ffffffffffffffda RBX: 00007f0f74425fa0 RCX: 00007f0f7419e159 [ 317.344167][T10410] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000000000000000 [ 317.344185][T10410] RBP: 00007f0f7423506b R08: 0000000000000000 R09: 0000000000000000 [ 317.344202][T10410] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 317.344218][T10410] R13: 00007f0f74426038 R14: 00007f0f74425fa0 R15: 00007ffe95546698 [ 317.344261][T10410] [ 317.371817][T10410] devpts: get root dentry failed [ 317.871696][ T5804] usb 10-1: USB disconnect, device number 7 [ 318.162121][T10427] device-mapper: ioctl: The device has no table. [ 318.166317][T10427] device-mapper: ioctl: The device has no table. [ 318.379692][T10423] device-mapper: table: 248:1: ultipath: unknown target type [ 318.379721][T10423] device-mapper: ioctl: error adding target to table [ 319.801552][ T31] audit: type=1326 audit(1790241834.364:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.8.1367" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31479e159 code=0x7ffc0000 [ 319.801624][ T31] audit: type=1326 audit(1790241834.364:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.8.1367" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31479e159 code=0x7ffc0000 [ 319.873275][ T31] audit: type=1326 audit(1790241834.424:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.8.1367" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd31479e159 code=0x7ffc0000 [ 319.873381][ T31] audit: type=1326 audit(1790241834.424:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.8.1367" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31479e159 code=0x7ffc0000 [ 319.873445][ T31] audit: type=1326 audit(1790241834.424:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.8.1367" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31479e159 code=0x7ffc0000 [ 319.873527][ T31] audit: type=1326 audit(1790241834.434:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.8.1367" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fd31479e159 code=0x7ffc0000 [ 319.873583][ T31] audit: type=1326 audit(1790241834.434:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.8.1367" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31479e159 code=0x7ffc0000 [ 319.873654][ T31] audit: type=1326 audit(1790241834.434:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.8.1367" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31479e159 code=0x7ffc0000 [ 319.873710][ T31] audit: type=1326 audit(1790241834.434:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.8.1367" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd31479e159 code=0x7ffc0000 [ 319.873759][ T31] audit: type=1326 audit(1790241834.434:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.8.1367" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31479e159 code=0x7ffc0000 [ 320.097088][T10461] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1368'. [ 320.411661][T10470] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1371'. [ 321.611177][T10508] fuse: fd is not a fuse device [ 322.042372][T10520] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1389'. [ 323.772073][T10557] netlink: 'syz.3.1400': attribute type 1 has an invalid length. [ 323.883822][T10564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1403'. [ 323.921376][T10557] 8021q: adding VLAN 0 to HW filter on device bond2 [ 323.927267][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 323.960255][T10563] bond2: entered promiscuous mode [ 324.092030][T10566] bond2: (slave dummy0): making interface the new active one [ 324.094685][T10566] dummy0: entered promiscuous mode [ 324.114730][T10566] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 324.154048][T10556] bond2: left promiscuous mode [ 324.154078][T10556] dummy0: left promiscuous mode [ 325.298284][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1416'. [ 325.761688][T10620] overlayfs: failed to clone upperpath [ 326.136743][T10629] overlayfs: failed to clone upperpath [ 326.285309][ T5625] Bluetooth: hci1: unexpected event for opcode 0x200a [ 326.287020][ T5625] Bluetooth: hci1: unexpected event for opcode 0x0c13 [ 326.789439][ T9850] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 327.311936][ T9850] usb 10-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 327.315128][ T9850] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 327.315166][ T9850] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 327.315212][ T9850] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.318581][ T9850] usb 10-1: config 0 descriptor?? [ 327.331554][T10659] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1438'. [ 327.680442][ T9850] usbhid 10-1:0.0: can't add hid device: -71 [ 327.680568][ T9850] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 327.742018][ T9850] usb 10-1: USB disconnect, device number 8 [ 328.814045][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1451'. [ 329.144394][T10703] fuse: fd is not a fuse device [ 329.964188][T10725] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 330.504131][T10747] Set syz0 is full, maxelem 0 reached [ 330.572820][T10753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1470'. [ 330.632444][T10755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1470'. [ 330.909585][ T252] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.909643][ T252] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.909688][ T252] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.909730][ T252] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.534185][T10811] loop7: detected capacity change from 0 to 512 [ 332.563802][T10811] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 332.563954][T10811] System zones: 1-12 [ 332.569423][T10811] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #12: comm syz.7.1486: missing EA_INODE flag [ 332.569453][T10811] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 332.579008][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 332.579034][ C1] EXT4-fs (loop7): initial error at time 1700000004: ext4_xattr_inode_iget:437: inode 12 [ 332.579072][ C1] EXT4-fs (loop7): last error at time 1700000004: ext4_xattr_inode_iget:437: inode 12 [ 332.583371][T10811] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.1486: error while reading EA inode 12 err=-117 [ 332.583405][T10811] loop7: lost filesystem error report for type 5 error -117 [ 332.591028][T10811] EXT4-fs (loop7): 1 orphan inode deleted [ 332.620341][T10811] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.697692][T10811] FAULT_INJECTION: forcing a failure. [ 332.697692][T10811] name failslab, interval 1, probability 0, space 0, times 0 [ 332.697737][T10811] CPU: 1 UID: 0 PID: 10811 Comm: syz.7.1486 Tainted: G L syzkaller #0 PREEMPT(full) [ 332.697774][T10811] Tainted: [L]=SOFTLOCKUP [ 332.697784][T10811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 332.697802][T10811] Call Trace: [ 332.697812][T10811] [ 332.697823][T10811] dump_stack_lvl+0xe8/0x150 [ 332.697871][T10811] should_fail_ex+0x410/0x560 [ 332.697910][T10811] should_failslab+0xa8/0x100 [ 332.697959][T10811] __kmalloc_cache_noprof+0xa3/0x600 [ 332.697988][T10811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.698023][T10811] ? super_dev_alloc+0x4e/0x100 [ 332.698049][T10811] ? super_dev_alloc+0x4e/0x100 [ 332.698078][T10811] ? __list_lru_init+0x4fe/0x5d0 [ 332.698114][T10811] super_dev_alloc+0x4e/0x100 [ 332.698145][T10811] sget_fc+0xf65/0x1a40 [ 332.698189][T10811] ? __pfx_kernfs_test_super+0x10/0x10 [ 332.698238][T10811] ? __pfx_kernfs_set_super+0x10/0x10 [ 332.698284][T10811] ? __pfx_sget_fc+0x10/0x10 [ 332.698321][T10811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.698355][T10811] ? __kasan_kmalloc+0x93/0xb0 [ 332.698389][T10811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.698421][T10811] ? __kmalloc_cache_noprof+0x321/0x600 [ 332.698450][T10811] ? __kmalloc_cache_noprof+0x14d/0x600 [ 332.698476][T10811] ? kernfs_get_tree+0xc4/0x980 [ 332.698514][T10811] ? kernfs_get_tree+0xc4/0x980 [ 332.698564][T10811] kernfs_get_tree+0x1e9/0x980 [ 332.698602][T10811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.698635][T10811] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 332.698670][T10811] ? __pfx_kernfs_get_tree+0x10/0x10 [ 332.698713][T10811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.698746][T10811] ? apparmor_capable+0x126/0x170 [ 332.698794][T10811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.698826][T10811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.698869][T10811] vfs_get_tree+0x92/0x2a0 [ 332.698900][T10811] do_new_mount+0x319/0xdc0 [ 332.698937][T10811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.699003][T10811] ? __pfx_do_new_mount+0x10/0x10 [ 332.699045][T10811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.699078][T10811] ? ns_capable+0x89/0xe0 [ 332.699119][T10811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.699152][T10811] ? path_mount+0x647/0x1050 [ 332.699193][T10811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.699226][T10811] ? user_path_at+0xd4/0x160 [ 332.699273][T10811] __se_sys_mount+0x31d/0x420 [ 332.699321][T10811] ? __pfx___se_sys_mount+0x10/0x10 [ 332.699369][T10811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.699402][T10811] ? __x64_sys_mount+0x20/0xc0 [ 332.699444][T10811] do_syscall_64+0x166/0x520 [ 332.699481][T10811] ? trace_irq_disable+0x3b/0x140 [ 332.699510][T10811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.699547][T10811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.699576][T10811] RIP: 0033:0x7f0f7419e159 [ 332.699601][T10811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.699625][T10811] RSP: 002b:00007f0f75051028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 332.699654][T10811] RAX: ffffffffffffffda RBX: 00007f0f74425fa0 RCX: 00007f0f7419e159 [ 332.699676][T10811] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 332.699695][T10811] RBP: 00007f0f7423506b R08: 0000000000000000 R09: 0000000000000000 [ 332.699714][T10811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.699731][T10811] R13: 00007f0f74426038 R14: 00007f0f74425fa0 R15: 00007ffe95546698 [ 332.699777][T10811] [ 332.816632][T10815] fuse: fd is not a fuse device [ 333.207038][ T8763] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.330879][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1491'. [ 333.330912][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1491'. [ 333.500412][T10829] overlayfs: failed to clone upperpath [ 333.538021][T10826] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1490'. [ 334.045367][T10851] netlink: 'syz.3.1501': attribute type 3 has an invalid length. [ 334.988662][T10885] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.000946][T10885] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.001207][T10885] bridge_slave_0: entered allmulticast mode [ 335.003636][T10885] bridge_slave_0: entered promiscuous mode [ 335.082410][T10885] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.112465][T10885] bridge_slave_0 (unregistering): left allmulticast mode [ 335.112503][T10885] bridge_slave_0 (unregistering): left promiscuous mode [ 335.118974][T10885] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.682865][T10891] debugfs: Bad value for 'source' [ 335.687745][ T5625] Bluetooth: hci0: unexpected event for opcode 0x0c03 [ 335.694433][ T5625] Bluetooth: hci0: unexpected event for opcode 0xfc1e [ 335.694543][ T5625] Bluetooth: hci0: unexpected event for opcode 0xfc1e [ 336.008164][T10901] fuse: fd is not a fuse device [ 336.082211][T10904] overlayfs: failed to clone upperpath [ 336.509587][T10911] loop9: detected capacity change from 0 to 256 [ 336.599794][T10919] fuse: fd is not a fuse device [ 336.874025][T10911] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 337.628706][T10932] fuse: fd is not a fuse device [ 338.144985][T10944] loop9: detected capacity change from 0 to 2048 [ 338.355617][T10953] fuse: fd is not a fuse device [ 338.497486][T10956] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1540'. [ 338.585108][T10958] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1540'. [ 338.632275][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 338.632299][ T31] audit: type=1326 audit(1700000010.860:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10959 comm="syz.6.1542" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062679e159 code=0x7ffc0000 [ 338.632570][ T31] audit: type=1326 audit(1700000010.860:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10959 comm="syz.6.1542" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062679e159 code=0x7ffc0000 [ 338.633067][ T31] audit: type=1326 audit(1700000010.860:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10959 comm="syz.6.1542" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062679e159 code=0x7ffc0000 [ 338.633315][ T31] audit: type=1326 audit(1700000010.860:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10959 comm="syz.6.1542" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f062679e159 code=0x7ffc0000 [ 338.633564][ T31] audit: type=1326 audit(1700000010.860:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10959 comm="syz.6.1542" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062679e159 code=0x7ffc0000 [ 338.633888][ T31] audit: type=1326 audit(1700000010.860:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10959 comm="syz.6.1542" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062679e159 code=0x7ffc0000 [ 338.634155][ T31] audit: type=1326 audit(1700000010.860:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10959 comm="syz.6.1542" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062679e159 code=0x7ffc0000 [ 338.634537][ T31] audit: type=1326 audit(1700000010.860:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10959 comm="syz.6.1542" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062679e159 code=0x7ffc0000 [ 338.634768][ T31] audit: type=1326 audit(1700000010.860:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10959 comm="syz.6.1542" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f062679e159 code=0x7ffc0000 [ 338.636733][ T31] audit: type=1326 audit(1700000010.860:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10959 comm="syz.6.1542" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062679e159 code=0x7ffc0000 [ 338.691597][T10956] bond3: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 338.692134][T10958] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 339.323479][T10981] overlayfs: failed to clone upperpath [ 340.037043][T10994] FAULT_INJECTION: forcing a failure. [ 340.037043][T10994] name failslab, interval 1, probability 0, space 0, times 0 [ 340.037089][T10994] CPU: 0 UID: 0 PID: 10994 Comm: syz.9.1554 Tainted: G L syzkaller #0 PREEMPT(full) [ 340.037124][T10994] Tainted: [L]=SOFTLOCKUP [ 340.037134][T10994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 340.037150][T10994] Call Trace: [ 340.037160][T10994] [ 340.037171][T10994] dump_stack_lvl+0xe8/0x150 [ 340.037216][T10994] should_fail_ex+0x410/0x560 [ 340.037254][T10994] should_failslab+0xa8/0x100 [ 340.037292][T10994] __kmalloc_cache_noprof+0xa3/0x600 [ 340.037321][T10994] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 340.037352][T10994] ? io_uring_alloc_task_context+0x17d/0x6c0 [ 340.037395][T10994] ? io_uring_alloc_task_context+0x17d/0x6c0 [ 340.037448][T10994] io_uring_alloc_task_context+0x17d/0x6c0 [ 340.037492][T10994] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 340.037536][T10994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.037568][T10994] ? alloc_file_pseudo+0x156/0x1e0 [ 340.037608][T10994] __io_uring_add_tctx_node+0x48d/0x630 [ 340.037643][T10994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.037677][T10994] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 340.037710][T10994] ? __anon_inode_getfile+0x169/0x200 [ 340.037749][T10994] io_uring_create+0x596/0x990 [ 340.037796][T10994] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 340.037832][T10994] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 340.037888][T10994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.037918][T10994] ? rcu_is_watching+0x16/0xb0 [ 340.037951][T10994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.038003][T10994] do_syscall_64+0x166/0x520 [ 340.038038][T10994] ? trace_irq_disable+0x3b/0x140 [ 340.038066][T10994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.038101][T10994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.038127][T10994] RIP: 0033:0x7f746d99e159 [ 340.038152][T10994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.038174][T10994] RSP: 002b:00007f746e8d2fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 340.038202][T10994] RAX: ffffffffffffffda RBX: 0000200000000140 RCX: 00007f746d99e159 [ 340.038222][T10994] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000002862 [ 340.038240][T10994] RBP: 00007f746da3506b R08: 0000000000000000 R09: 0000000000000000 [ 340.038258][T10994] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 340.038274][T10994] R13: 0000000000000000 R14: 00002000000001c0 R15: 00007fffe3fcbd78 [ 340.038315][T10994] [ 340.324878][T10999] overlayfs: failed to clone upperpath [ 340.456482][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880513ab000: rx timeout, send abort [ 340.527488][T11011] overlayfs: failed to clone upperpath [ 340.957248][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880513abc00: rx timeout, send abort [ 340.957391][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880513ab000: abort rx timeout. Force session deactivation [ 341.013549][T11021] kAFS: unable to lookup cell 'testcell' [ 341.457295][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880513abc00: abort rx timeout. Force session deactivation [ 341.527744][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880513a9400: rx timeout, send abort [ 341.528302][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880513a9400: 0x00100: (3) A timeout occurred and this is the connection abort to close the session. [ 342.957655][T11062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1578'. [ 342.957687][T11062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1578'. [ 343.095726][T11066] loop2: detected capacity change from 0 to 7 [ 343.115025][T11066] Dev loop2: unable to read RDB block 7 [ 343.115069][T11066] loop2: unable to read partition table [ 343.115287][T11066] loop2: partition table beyond EOD, truncated [ 343.115308][T11066] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 343.350334][T11071] overlayfs: failed to clone upperpath [ 343.396281][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1579'. [ 343.840424][ T9849] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 344.002593][ T9849] usb 10-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 344.006097][ T9849] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.006136][ T9849] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.006168][ T9849] usb 10-1: config 0 interface 0 has no altsetting 0 [ 344.006207][ T9849] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.009758][ T9849] usb 10-1: config 0 descriptor?? [ 344.636031][ T9849] sony 0003:054C:0268.0006: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 344.828688][ T9849] sony 0003:054C:0268.0006: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.9-1/input0 [ 344.828733][ T9849] sony 0003:054C:0268.0006: failed to claim input [ 344.999004][ T9849] usb 10-1: USB disconnect, device number 9 [ 345.141866][T11115] fido_id[11115]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 346.023438][T11144] xt_MASQUERADE: bad rangesize 177 [ 346.950703][ T9849] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 347.002447][T11170] 9pnet: p9_errstr2errno: server reported unknown error [ 347.002447][T11170] ñ'IÓ$íÛ·=¼ [ 347.109094][ T9849] usb 10-1: Using ep0 maxpacket: 16 [ 347.114538][ T9849] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 347.119745][ T9849] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.119774][ T9849] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 347.135940][ T9849] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.135974][ T9849] usb 10-1: Product: syz [ 347.135992][ T9849] usb 10-1: Manufacturer: syz [ 347.136009][ T9849] usb 10-1: SerialNumber: syz [ 347.164453][ T5886] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 347.256087][T11183] fuse: fd is not a fuse device [ 347.339601][ T5886] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 347.345239][ T5886] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.345298][ T5886] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.389129][ T5886] usb 8-1: config 0 descriptor?? [ 347.456847][ T9849] usb 10-1: 0:2 : does not exist [ 347.467260][ T9849] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 347.642850][ T5886] usbhid 8-1:0.0: can't add hid device: -71 [ 347.642969][ T5886] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 347.670560][ T5886] usb 8-1: USB disconnect, device number 6 [ 347.919496][ T9849] usb 10-1: USB disconnect, device number 10 [ 348.019605][T11204] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1619'. [ 348.209064][ T9850] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 348.232507][ T5732] udevd[5732]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 348.359954][ T9850] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 348.363634][ T9850] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.363684][ T9850] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.417355][ T9850] usb 8-1: config 0 descriptor?? [ 348.524074][T11219] netlink: 'syz.8.1625': attribute type 11 has an invalid length. [ 348.524104][T11219] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1625'. [ 348.832320][T11233] fuse: fd is not a fuse device [ 349.061822][T11172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.062344][T11172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.073056][T11172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.073613][T11172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.260866][ T9850] aiptek 8-1:0.0: Aiptek using 400 ms programming speed [ 349.269409][ T9850] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input12 [ 349.393669][T11248] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1635'. [ 349.393746][T11248] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1635'. [ 349.676168][ T9850] usb 8-1: USB disconnect, device number 7 [ 349.676267][ C1] aiptek 8-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 350.513554][T11279] fuse: fd is not a fuse device [ 350.698893][ T9849] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 350.920640][ T9849] usb 8-1: Using ep0 maxpacket: 32 [ 350.921413][ T9849] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 350.927629][ T9849] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.927667][ T9849] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.927711][ T9849] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.936831][ T9849] usb 8-1: config 0 descriptor?? [ 351.347574][T11263] loop9: detected capacity change from 0 to 40427 [ 351.533874][T11263] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 351.533912][T11263] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 351.535270][T11263] F2FS-fs (loop9): invalid crc value [ 351.734324][ T9849] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 351.804473][ T9849] usb 8-1: USB disconnect, device number 8 [ 351.958413][T11304] fido_id[11304]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 352.192940][T11263] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 352.210437][T11263] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 352.210473][T11263] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 352.739257][ T10] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 352.846131][T11317] fuse: fd is not a fuse device [ 352.901908][ T10] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 352.905178][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 352.905214][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 352.951064][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.951106][ T10] usb 8-1: Product: syz [ 352.951124][ T10] usb 8-1: Manufacturer: syz [ 352.951143][ T10] usb 8-1: SerialNumber: syz [ 353.052544][ T10] usb 8-1: config 0 descriptor?? [ 353.075578][T11308] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 353.075745][T11308] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 353.375617][T11308] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 353.375781][T11308] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 353.492243][T11322] netlink: 'syz.0.1662': attribute type 10 has an invalid length. [ 353.559845][T11322] netlink: 'syz.0.1662': attribute type 10 has an invalid length. [ 354.413830][ T10] dm9601 8-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 354.669772][ T10] dm9601 8-1:0.0 eth13: register 'dm9601' at usb-dummy_hcd.7-1, Davicom DM96xx USB 10/100 Ethernet, ae:c0:5b:ae:b4:63 [ 354.728227][ T10] usb 8-1: USB disconnect, device number 9 [ 354.759315][ T10] dm9601 8-1:0.0 eth13: unregister 'dm9601' usb-dummy_hcd.7-1, Davicom DM96xx USB 10/100 Ethernet [ 355.566475][T11358] overlayfs: failed to clone upperpath [ 355.587019][T11341] vlan0: left promiscuous mode [ 355.594518][T11341] bond1: left promiscuous mode [ 355.594546][T11341] wireguard0: left promiscuous mode [ 355.700364][T10060] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.700535][T10060] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.700588][T10060] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.700621][T10060] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.700663][T10060] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.700696][T10060] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.700737][T10060] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.700770][T10060] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.985538][ T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 356.168973][ T10] usb 8-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 356.170391][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 356.170446][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.222964][T11356] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 356.227175][ T10] opticon 8-1:1.0: opticon converter detected [ 356.247945][ T10] usb 8-1: opticon converter now attached to ttyUSB0 [ 357.251056][ T10] usb 8-1: USB disconnect, device number 10 [ 357.430757][ T10] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 357.431315][ T10] opticon 8-1:1.0: device disconnected [ 359.632461][T11435] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1701'. [ 359.718568][T11438] fuse: fd is not a fuse device [ 359.757751][ T5625] Bluetooth: hci6: command 0x0406 tx timeout [ 359.826711][T11445] fuse: fd is not a fuse device [ 359.839409][T11439] vlan2: entered allmulticast mode [ 359.839434][T11439] bond1: entered allmulticast mode [ 360.904282][T11489] netlink: 63579 bytes leftover after parsing attributes in process `syz.0.1722'. [ 361.717917][T11514] loop9: detected capacity change from 0 to 256 [ 361.724692][T11514] FAT-fs (loop9): data area starts beyond volume (32 > 0) [ 361.724724][T11514] FAT-fs (loop9): Can't find a valid FAT filesystem [ 362.103887][T11524] overlayfs: failed to clone upperpath [ 364.435862][T11560] loop9: detected capacity change from 0 to 2048 [ 364.447066][T11560] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found! [ 364.462081][T11560] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 364.622458][T11573] syz_tun: entered allmulticast mode [ 364.654545][T11566] syz_tun: left allmulticast mode [ 364.958724][ T5625] Bluetooth: hci3: command 0x2016 tx timeout [ 365.245117][T11592] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1762'. [ 365.723004][T11608] futex_wake_op: syz.6.1769 tries to shift op by 144; fix this program [ 366.070765][T11610] overlayfs: failed to clone upperpath [ 366.102195][T11608] futex_wake_op: syz.6.1769 tries to shift op by 144; fix this program [ 366.377323][T11625] fuse: fd is not a fuse device [ 366.378018][T11616] gadgetfs: bound to dummy_udc driver [ 366.466994][T11624] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 366.617133][ T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 366.618586][ C0] gadgetfs: connected [ 366.619655][ T10] gadgetfs: disconnected [ 366.726242][T11614] gadgetfs: suspended from state 2 [ 366.922306][T11634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1778'. [ 366.967445][T11636] loop9: detected capacity change from 0 to 512 [ 366.986890][ T10] usb 2-1: device not accepting address 4, error -71 [ 367.028585][T11637] netlink: 'syz.3.1778': attribute type 10 has an invalid length. [ 367.082805][T11636] EXT4-fs error (device loop9): ext4_orphan_get:1429: comm syz.9.1779: bad orphan inode 11862016 [ 367.082844][T11636] loop9: lost filesystem error report for type 5 error -117 [ 367.085672][T11636] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 367.085776][T11636] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.232796][ T8616] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 367.326879][ T9851] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 367.395207][T11637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 367.444830][T11637] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 367.479013][ T9851] usb 8-1: Using ep0 maxpacket: 32 [ 367.481089][ T9851] usb 8-1: New USB device found, idVendor=09fb, idProduct=602e, bcdDevice=c6.a7 [ 367.482081][ T9851] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 367.482105][ T9851] usb 8-1: config 1 has no interface number 0 [ 367.482132][ T9851] usb 8-1: config 1 interface 3 has no altsetting 0 [ 367.486996][ T9851] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.487024][ T9851] usb 8-1: Product: syz [ 367.487039][ T9851] usb 8-1: Manufacturer: syz [ 367.487054][ T9851] usb 8-1: SerialNumber: syz [ 367.769769][ T9851] ftdi_sio 8-1:1.3: FTDI USB Serial Device converter detected [ 367.778683][ T9851] ftdi_sio ttyUSB0: unknown device type: 0xc6a7 [ 367.797924][ T9851] usb 8-1: USB disconnect, device number 11 [ 367.820609][ T9851] ftdi_sio 8-1:1.3: device disconnected [ 367.828992][T11659] fuse: fd is not a fuse device [ 367.919209][ T32] INFO: task syz.2.690:8278 blocked for more than 143 seconds. [ 367.919244][ T32] Tainted: G L syzkaller #0 [ 367.919260][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 367.919271][ T32] task:syz.2.690 state:D stack:26504 pid:8278 tgid:8274 ppid:5613 task_flags:0x400040 flags:0x00080002 [ 367.919357][ T32] Call Trace: [ 367.919368][ T32] [ 367.919385][ T32] __schedule+0x17db/0x58f0 [ 367.919461][ T32] ? __pfx___schedule+0x10/0x10 [ 367.919512][ T32] ? schedule+0x90/0x2b0 [ 367.919549][ T32] schedule+0x164/0x2b0 [ 367.919583][ T32] schedule_preempt_disabled+0x13/0x30 [ 367.919615][ T32] __mutex_lock+0x7c1/0x1550 [ 367.919656][ T32] ? __mutex_lock+0x5d4/0x1550 [ 367.919698][ T32] ? write_ports+0xb5/0xd10 [ 367.919737][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 367.919775][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.919831][ T32] write_ports+0xb5/0xd10 [ 367.919870][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.919905][ T32] ? __pfx_write_ports+0x10/0x10 [ 367.919942][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.919985][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.920026][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.920060][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.920092][ T32] ? simple_transaction_get+0x12d/0x160 [ 367.920168][ T32] nfsctl_transaction_read+0x171/0x1c0 [ 367.920211][ T32] ? __pfx_nfsctl_transaction_read+0x10/0x10 [ 367.920250][ T32] vfs_read+0x213/0xa80 [ 367.920300][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 367.920338][ T32] ? __pfx_vfs_read+0x10/0x10 ** replaying previous printk message ** [ 367.920338][ T32] ? __pfx_vfs_read+0x10/0x10 [ 367.920383][ T32] ? __fget_files+0x2a/0x420 [ 367.920426][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.920458][ T32] ? __fget_files+0x3a2/0x420 [ 367.920502][ T32] ? __fget_files+0x2a/0x420 [ 367.920547][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.920585][ T32] ksys_read+0x150/0x270 [ 367.920632][ T32] ? __pfx_ksys_read+0x10/0x10 [ 367.920689][ T32] do_syscall_64+0x166/0x520 [ 367.920725][ T32] ? trace_irq_disable+0x3b/0x140 [ 367.920754][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.920790][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.920819][ T32] RIP: 0033:0x7f3488f9e159 [ 367.920843][ T32] RSP: 002b:00007f3489da1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 367.920872][ T32] RAX: ffffffffffffffda RBX: 00007f3489226090 RCX: 00007f3488f9e159 [ 367.920894][ T32] RDX: 0000000000000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 367.920912][ T32] RBP: 00007f348903506b R08: 0000000000000000 R09: 0000000000000000 [ 367.920931][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.920948][ T32] R13: 00007f3489226128 R14: 00007f3489226090 R15: 00007ffc957b0188 [ 367.920993][ T32] [ 367.921074][ T32] [ 367.921074][ T32] Showing all locks held in the system: [ 367.921088][ T32] locks held by kworker/0:1/10: 3, last CPU#0: [ 367.921107][ T32] #0: ffff8880226f8140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.921189][ T32] #1: ffffc900000f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.921263][ T32] #2: ffff888021fd91d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 367.921336][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 367.921355][ T32] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 367.921448][ T32] locks held by getty/5371: 2, on CPU#1: [ 367.921466][ T32] #0: ffff8880355060a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 367.921552][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 367.921630][ T32] locks held by udevd/5732: 2, on CPU#1: [ 367.921648][ T32] #0: ffff88807f57a460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 367.921720][ T32] #1: ffff88807b39b8d0 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: lookup_open+0x242/0x1a40 [ 367.921796][ T32] locks held by syz-executor/5998: 4, last CPU#0: [ 367.921814][ T32] #0: ffffffff8ee363f0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 367.921886][ T32] #1: ffff88807ed9a9f8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 367.921965][ T32] #2: ffff888029c036b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 367.922050][ T32] #3: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 367.922125][ T32] locks held by udevd/6010: 4, last CPU#1: [ 367.922144][ T32] #0: ffff88807f57a460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 367.922216][ T32] #1: ffff88807b39b8d0 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: __start_renaming+0x148/0x410 [ 367.922310][ T32] #2: ffff888026210890 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: lock_two_nondirectories+0xe7/0x180 [ 367.922395][ T32] #3: ffff8880529c7520 (&sb->s_type->i_mutex_key#15/4){+.+.}-{4:4}, at: vfs_rename+0x696/0xef0 [ 367.922498][ T32] locks held by syz.2.690/8275: 3, on CPU#0: [ 367.922517][ T32] #0: ffff888076787eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 367.922592][ T32] #1: ffff88807b482460 (sb_writers#36){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 367.922673][ T32] #2: ffffffff8f09f5c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 367.922744][ T32] locks held by syz.2.690/8278: 2, on CPU#0: [ 367.922763][ T32] #0: ffff8880298b55f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 367.922837][ T32] #1: ffffffff8f09f5c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 367.922917][ T32] locks held by kworker/1:11/9850: 4, on CPU#1: [ 367.922936][ T32] #0: ffff88801b68ed40 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.923011][ T32] #1: ffffc900068dfc40 ((work_completion)(&(&ssp->srcu_sup->work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.923086][ T32] #2: ffffffff8ee35f28 (&ssp->srcu_sup->srcu_gp_mutex){+.+.}-{4:4}, at: process_srcu+0x6c/0x16f0 [ 367.923154][ T32] #3: ffffffff8ed62ce8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 367.923229][ T32] locks held by kworker/1:12/9851: 3, last CPU#1: [ 367.923247][ T32] #0: ffff8880226f8140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.923321][ T32] #1: ffffc90006a37c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.923395][ T32] #2: ffff888020f5d1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 367.923469][ T32] locks held by kworker/u8:49/10088: 3, last CPU#1: [ 367.923493][ T32] #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.923567][ T32] #1: ffffc9000484fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.923642][ T32] #2: ffff88803279e258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 367.923730][ T32] locks held by syz.8.1784/11651: 3, last CPU#0: [ 367.923749][ T32] #0: ffff888079cd42b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 367.923825][ T32] #1: ffff888034afc460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 367.923907][ T32] #2: ffff88807fc4bed8 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 367.923987][ T32] locks held by syz.8.1784/11652: 1, on CPU#1: [ 367.924005][ T32] #0: ffff888026642370 (&sig->exec_update_lock){++++}-{4:4}, at: landlock_restrict_sibling_threads+0x271/0x11f0 [ 367.924081][ T32] locks held by syz.3.1785/11659: 2, last CPU#1: [ 367.924100][ T32] #0: ffff88801c2fa460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 367.924180][ T32] #1: ffff8880784add00 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 367.924262][ T32] locks held by syz.0.1788/11660: 5, last CPU#1: [ 367.924282][ T32] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: lock_vma_under_rcu+0x1d1/0x500 [ 367.924360][ T32] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 367.924425][ T32] #2: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: fs_reclaim_acquire+0x7c/0x100 [ 367.924501][ T32] #3: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: page_table_check_set+0x127/0x530 [ 367.924572][ T32] #4: ffff888075148cd8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 367.924657][ T32] [ 367.924664][ T32] ============================================= [ 367.924664][ T32] [ 367.924676][ T32] NMI backtrace for cpu 0 [ 367.924696][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 367.924730][ T32] Tainted: [L]=SOFTLOCKUP [ 367.924740][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 367.924755][ T32] Call Trace: [ 367.924765][ T32] [ 367.924775][ T32] dump_stack_lvl+0xe8/0x150 [ 367.924815][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 367.924843][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 367.924887][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 367.924919][ T32] sys_info+0x135/0x170 [ 367.924958][ T32] watchdog+0xfd7/0x1030 [ 367.924995][ T32] ? watchdog+0x1c7/0x1030 [ 367.925031][ T32] kthread+0x38b/0x480 [ 367.925059][ T32] ? __pfx_watchdog+0x10/0x10 [ 367.925082][ T32] ? __pfx_kthread+0x10/0x10 [ 367.925111][ T32] ret_from_fork+0x514/0xb70 [ 367.925141][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 367.925164][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.925194][ T32] ? __switch_to+0xc89/0x1420 [ 367.925233][ T32] ? __pfx_kthread+0x10/0x10 [ 367.925261][ T32] ret_from_fork_asm+0x1a/0x30 [ 367.925319][ T32] [ 367.925329][ T32] Sending NMI from CPU 0 to CPUs 1: [ 367.925359][ C1] NMI backtrace for cpu 1 [ 367.925378][ C1] CPU: 1 UID: 0 PID: 11659 Comm: syz.3.1785 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.925409][ C1] Tainted: [L]=SOFTLOCKUP [ 367.925418][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 367.925432][ C1] RIP: 0010:stack_depot_save_flags+0xad/0x7f0 [ 367.925464][ C1] Code: c0 06 41 31 c0 01 ef 45 89 c1 41 c1 c1 08 44 29 c5 41 31 e9 41 01 f8 44 29 cf 44 89 c9 c1 c1 10 31 f9 45 01 c1 89 c8 c1 c0 13 <41> 29 c8 44 31 c0 44 01 c9 41 29 c1 89 c5 c1 c5 04 44 31 cd 01 c8 [ 367.925484][ C1] RSP: 0018:ffffc9002314f288 EFLAGS: 00000a87 [ 367.925505][ C1] RAX: 0000000038a6649b RBX: 0000000000140cca RCX: 00000000cc936714 [ 367.925522][ C1] RDX: ffffc9002314f35c RSI: 000000000000000d RDI: 000000004f4a7cb6 [ 367.925538][ C1] RBP: 00000000d68e54f5 R08: 0000000097ba2d66 R09: 00000000b35cb13f [ 367.925554][ C1] R10: 000000000000000e R11: ffffffff81b293f0 R12: dffffc0000000000 [ 367.925571][ C1] R13: 1ffff11005d03001 R14: ffffc9002314f320 R15: 1ffff92004629e60 [ 367.925593][ C1] FS: 00007fccf5ee16c0(0000) GS:ffff888124dcb000(0000) knlGS:0000000000000000 [ 367.925614][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 367.925630][ C1] CR2: 00007ff3626192b0 CR3: 00000000433ee000 CR4: 0000000000350ef0 [ 367.925649][ C1] Call Trace: [ 367.925658][ C1] [ 367.925673][ C1] save_stack+0x130/0x230 [ 367.925703][ C1] ? __pfx_save_stack+0x10/0x10 [ 367.925728][ C1] ? __lock_acquire+0x747/0x2de0 [ 367.925752][ C1] ? post_alloc_hook+0x1f9/0x250 [ 367.925786][ C1] ? get_page_from_freelist+0x2209/0x2280 [ 367.925813][ C1] ? __alloc_frozen_pages_noprof+0x217/0x5a0 [ 367.925840][ C1] ? alloc_pages_mpol+0x21e/0x390 [ 367.925871][ C1] ? folio_alloc_mpol_noprof+0x39/0x160 [ 367.925901][ C1] ? shmem_alloc_and_add_folio+0x43e/0xf60 [ 367.925933][ C1] ? shmem_get_folio_gfp+0x5da/0x16d0 [ 367.925963][ C1] ? shmem_write_begin+0x16c/0x330 [ 367.926000][ C1] ? generic_perform_write+0x2d5/0x8f0 [ 367.926036][ C1] ? shmem_file_write_iter+0xf8/0x120 [ 367.926067][ C1] ? vfs_write+0x612/0xba0 [ 367.926101][ C1] ? ksys_write+0x150/0x270 [ 367.926135][ C1] ? do_syscall_64+0x166/0x520 [ 367.926165][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.926192][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.926227][ C1] __set_page_owner+0x8d/0x4c0 [ 367.926257][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 367.926283][ C1] ? seqcount_lockdep_reader_access+0x89/0xc0 [ 367.926317][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.926345][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 367.926377][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.926409][ C1] post_alloc_hook+0x1f9/0x250 [ 367.926447][ C1] get_page_from_freelist+0x2209/0x2280 [ 367.926485][ C1] ? lock_acquire+0x115/0x350 [ 367.926517][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.926551][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.926586][ C1] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 367.926616][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 367.926646][ C1] ? __pfx_policy_nodemask+0x10/0x10 [ 367.926684][ C1] alloc_pages_mpol+0x21e/0x390 [ 367.926726][ C1] folio_alloc_mpol_noprof+0x39/0x160 [ 367.926767][ C1] shmem_alloc_and_add_folio+0x43e/0xf60 [ 367.926800][ C1] ? filemap_get_entry+0xcd/0x3f0 [ 367.926835][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.926867][ C1] ? __pfx_filemap_get_entry+0x10/0x10 [ 367.926898][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 367.926934][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.926962][ C1] ? shmem_allowable_huge_orders+0x325/0x6c0 [ 367.927007][ C1] shmem_get_folio_gfp+0x5da/0x16d0 [ 367.927051][ C1] shmem_write_begin+0x16c/0x330 [ 367.927087][ C1] generic_perform_write+0x2d5/0x8f0 [ 367.927134][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 367.927171][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.927198][ C1] ? preempt_count_add+0x6a/0x140 [ 367.927233][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.927261][ C1] ? mnt_put_write_access_file+0xbc/0x100 [ 367.927287][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.927315][ C1] ? file_update_time_flags+0x3ab/0x440 [ 367.927342][ C1] shmem_file_write_iter+0xf8/0x120 [ 367.927378][ C1] vfs_write+0x612/0xba0 [ 367.927421][ C1] ? __pfx_vfs_write+0x10/0x10 [ 367.927465][ C1] ? __fget_files+0x2a/0x420 [ 367.927500][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.927532][ C1] ksys_write+0x150/0x270 [ 367.927569][ C1] ? __pfx_ksys_write+0x10/0x10 [ 367.927603][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.927641][ C1] do_syscall_64+0x166/0x520 [ 367.927670][ C1] ? trace_irq_disable+0x3b/0x140 [ 367.927696][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.927724][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.927748][ C1] RIP: 0033:0x7fccf4f5e98e [ 367.927768][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 367.927788][ C1] RSP: 002b:00007fccf5ee0da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 367.927811][ C1] RAX: ffffffffffffffda RBX: 00007fccf5ee16c0 RCX: 00007fccf4f5e98e [ 367.927829][ C1] RDX: 0000000000100000 RSI: 00007fcceac00000 RDI: 0000000000000004 [ 367.927845][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 367.927860][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 367.927874][ C1] R13: 00007fccf5ee0ee0 R14: 00007fccf5ee0ea0 R15: 00007fcceac00000 [ 367.927904][ C1] [ 368.094349][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 369.430841][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 369.441676][ T32] Tainted: [L]=SOFTLOCKUP [ 369.446016][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 369.456081][ T32] Call Trace: [ 369.459371][ T32] [ 369.462306][ T32] vpanic+0x56d/0xa60 [ 369.466353][ T32] ? __pfx___schedule+0x10/0x10 [ 369.471220][ T32] ? __pfx_vpanic+0x10/0x10 [ 369.475741][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 369.481398][ T32] panic+0xc5/0xd0 [ 369.485142][ T32] ? __pfx_panic+0x10/0x10 [ 369.489569][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 369.495061][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 369.500451][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 369.506626][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 369.512832][ T32] watchdog+0x1030/0x1030 [ 369.517194][ T32] ? watchdog+0x1c7/0x1030 [ 369.521620][ T32] kthread+0x38b/0x480 [ 369.525746][ T32] ? __pfx_watchdog+0x10/0x10 [ 369.530513][ T32] ? __pfx_kthread+0x10/0x10 [ 369.535469][ T32] ret_from_fork+0x514/0xb70 [ 369.540162][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 369.545291][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 369.550981][ T32] ? __switch_to+0xc89/0x1420 [ 369.555691][ T32] ? __pfx_kthread+0x10/0x10 [ 369.560379][ T32] ret_from_fork_asm+0x1a/0x30 [ 369.565199][ T32] [ 369.568721][ T32] Kernel Offset: disabled [ 369.573059][ T32] Rebooting in 86400 seconds..