last executing test programs: 24.812339394s ago: executing program 2 (id=80): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 24.693882836s ago: executing program 2 (id=81): setns(0xc9, 0x0) r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004010, 0x0, 0x0) 24.496998246s ago: executing program 2 (id=84): mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./sys\x00', &(0x7f0000000a40)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./sys/bus/acpi/devices/PNP0C0F:00/uid\x00', 0x0, 0x0) read(r0, &(0x7f0000000ac0)=""/256, 0x100) 24.419246474s ago: executing program 2 (id=85): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x40d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, 0x69b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 23.658758871s ago: executing program 2 (id=89): mkdir(&(0x7f0000000040)='./cgroup/../file0\x00', 0x4d) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mlock2(&(0x7f0000fee000/0x10000)=nil, 0x10000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r1 = getpid() bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc_mnt\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) mount$bind(&(0x7f0000000440)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f0000000480)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x0, 0x221490, 0x0) 22.623610165s ago: executing program 2 (id=92): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x4c}}, 0x0) 7.480803715s ago: executing program 0 (id=145): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000f40)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_uuid={0x0, '\x00', {'CRP-syz', 0x0, '1\x00'}}, [@clone={0x0, 0x3000, 0x0, 0x70, 'clone\x00', {@ram_num={'1:', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '16', ' 0 2 hydration_threshold 4'}}]}) 7.438044959s ago: executing program 32 (id=92): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x4c}}, 0x0) 7.185781804s ago: executing program 0 (id=148): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='file net/sctp/* +p', 0x12) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f00000001c0)={&(0x7f0000000200)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000280)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x80000001, 0x30}, 0xc) r2 = dup(r1) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[], 0x32600) syz_usb_connect(0x0, 0x3f, &(0x7f0000000380)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x2}}, 0x20) 6.296979214s ago: executing program 3 (id=149): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x46, 0x0, &(0x7f0000000280)) 5.588848346s ago: executing program 3 (id=151): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x6000000d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)={0x2000000a}) ppoll(&(0x7f00000001c0)=[{r1, 0x280}], 0x1, &(0x7f0000000200), 0x0, 0x0) 5.265291158s ago: executing program 3 (id=153): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000100)={r0, r0, 0xc, 0x0, 0x0, 0x9, 0x1, 0x4f3, 0x1009, 0x209, 0x1, 0x1, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000200)={0x2, &(0x7f0000000240)=[{@none}, {}]}) 4.620665744s ago: executing program 3 (id=156): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x122, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000540)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000580)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c"], 0x4a) 4.304793505s ago: executing program 1 (id=157): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='file net/sctp/* +p', 0x12) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f00000001c0)={&(0x7f0000000200)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000280)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x80000001, 0x30}, 0xc) r2 = dup(r1) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000340)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) syz_usb_connect(0x0, 0x3f, &(0x7f0000000380)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0) 3.932831493s ago: executing program 0 (id=158): r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000001140)=0xc) syz_mount_image$exfat(&(0x7f0000001180), &(0x7f00000011c0)='./file0\x00', 0x2000084c, &(0x7f0000001300)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYRES32=0x0, @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x1, 0x14f5, &(0x7f00000013c0)="$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") syz_open_procfs(0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200040, &(0x7f00000002c0)=ANY=[], 0x2, 0x710, &(0x7f00000002c0)="$eJzs3U1sHGfdAPD/rNdrb6o6bpumeaVK9duigrDIl+WCudQghIxUQRUkOFuN01jZfGC7yO0Bu1CJKweuSOVgLnACISQkpEjlDLfCzeJUgcSlp6QSDJqv9azjXa/txk7g94vG83zM88x/npl9Znej1QTwP2thOpp3ox0L06+tZ/ntrZnO9tbMzSLd6ETEWEQ0Ipq1VskHEfNRLPF/WUFV0W8/P12eu/Lhx9sfFblmuTSi+NPuH2CzT/l8PbNZLjEVESPl+gh6+nvjcP2N7SST7shkUb+0O3o4KaMRkfb43tmdmr2kI7VM39c78PhIivvmAyYjTkXEeHVD2yyKG8cb3VAONBdtPrw4AAAA4JFx+t5GxHpMnHQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Dgpn/+flMv9Kj0VSfX8/8/UNm+dYKiDDY5svErcbRxHMAAAAAAAAADwcL1wL355JU0nqnyaROM7I2WmXa7fitVYakacj/VYjLVYi5W4FBGTtY7up2m6tnIpXsxzZz5J0zSeKFrGSk/Ly7tattYX19ZWLg8ZcPuoRwwAAAAAAAAA/1VenR3L1z+MhZg46WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAuiRgpVvlypkpPRqMZEeMR0cq224z4c5V+hDQP2uDuw4kDAAAATthoT+70vbgX6zFR5dMk/8x/Nv/cPx5vxa1Yi+VYi04sxdX8u4DiU39je2tjentr5ma2lN1+68luv1/5584+fjOxb1B5j1F897D3ns/lW7TjWiznJefjjbgdnbgajbxl5lwVTy2umnezmJJXC2kaY8MM19VynR35T8r1sWjvt8FkPiKj3RG5mMWWFOP41OCRqJ+dIeze06VodL/5OdN/T9WXMelYRDHoA/eS/DtNi9SpqiTiiW8MHPP8ehk90MEcye6RuFy7+s4OHvOIz/72V9+93rl143qyOX1sl9GhvLB38djfqjNUjURhM5ZipjYSzw09EtdWH/GR6Kv3m8ZGPNtNL8TX49sxHVPxeqzEcnw/FmMtlmIqvpanFsvrOfs7OXik5ntyr+8XU6s8LyO7Yvr/08V6UEwv5m0nYjm+GbfjaizFK/m/y3EpvhizMRtztTP87BAzbSN7xb/Xe3p/1z/4lz5XJrKJ78c7E+Axvrr7ycb1qdq41ufcybyuXtLIJ7zM0we4Hw2eGys7t6zsTPyo9ho8ed2RGI/uXaKK7plqBEb3HImf59PKaufWjZXri3d29Zts7r2/l6P38I8wkfzr9OHb7iG7Xp7uzhG9V0dW98wDdX/Jx6tV/o9LUdd7x21F/KLdrdvvldoq38M92NPlaKVj8VxE/KyMNqvLZHN41u5crV32fms8r/skTdPi/RYAj7xTnz/Vav+j/af2++332tfbr41/dexLY8+3YvSPo19uXhx5ufF88ut4P34Q+39CBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9rX69js3FjudpZVdiTRNN/pUPZRENCN6Sv7w+9o2+bPGImL4DrOt5xsReUkzysQQzf8eEWXJxuEO593DDsJfy3NyLAM+IJEMvfF43+unTNx+sjyc+2maHvvhVM9qO3DztHRip+BTTlSPyHqgKmlG9Gl1ItMRcIwurN28c2H17Xe+sHxz8c2lN5duzc3Ozl2cm31l5sK15c5j+oxOYCj5vT5/n3PSkQAAAAAAAAAAAADDGu7HOcmNxShKmnv9imC/5gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABHsDAdzbuRxKWL5y9m+e2tmU62VOlsPZJveT8iGhGRTEUkH0TMR7HEZK27pN9+NiOufPjx9kdFrlku+faNox/FZrnEVBnuVFkx2rvd+F6N043dm1X9JXk/d2r9HU5SLiPdkvkj9Qefkv8EAAD//wfSDpk=") mknod$loop(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x0) 3.76678749s ago: executing program 4 (id=159): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f000001aa40)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f000001ac80)={0x0, 0x0, &(0x7f000001acc0)={&(0x7f000001ad00)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d0005800900010070707470"], 0xbc}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f000001ae00)={0x2, 0x3039, @loopback}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f000001ae40)={0x2, 0x6bb, @loopback}, 0x10) 3.472863419s ago: executing program 3 (id=160): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff30"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3.459562681s ago: executing program 4 (id=161): r0 = socket$key(0xf, 0x3, 0x2) flistxattr(r0, 0x0, 0x0) 3.309377656s ago: executing program 0 (id=162): syz_usb_connect(0x0, 0x2b, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) 3.224200914s ago: executing program 4 (id=163): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x26) 3.16751129s ago: executing program 4 (id=164): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$dupfd(r0, 0x407, 0xffffffffffffffff) 3.053328052s ago: executing program 4 (id=165): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x8, &(0x7f0000000380)=ANY=[], 0x1, 0x1520, &(0x7f0000001f80)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000140)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008000000", @ANYRES32=r2], 0x40}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000003600)='./bus\x00', 0x8840, 0xa2) r3 = socket$alg(0x26, 0x5, 0x0) r4 = accept$alg(r3, 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x2) openat(0xffffffffffffff9c, &(0x7f0000003640)='./bus\x00', 0x1c1002, 0x12) r5 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) flock(0xffffffffffffffff, 0x2) socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r5, &(0x7f00000006c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000700)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000740)="f149300d5f039fdeffbccae168b3965548db07b5ce548f159fd7fae294ebe253795fd0afe6ce14f43f03f5afd0f7d651054a65cc4a7328ae56ee23758ce00bb14e25ab52efc66cd70e4e00190600000000000000fb964e22e3989c0c0f47fa834d227bf0e2fd5a0c19057f8100de08cc", 0x70, 0x4008245, 0x0, 0x0) recvfrom$inet(r5, &(0x7f00000008c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.665595971s ago: executing program 1 (id=166): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000004b00)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000004c40)='./cifs\x00', 0x1da) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc040) mount(&(0x7f0000004c80)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000004cc0)='./cifs\x00', &(0x7f0000004d00)='cifs\x00', 0x0, &(0x7f0000004d40)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,,ass=root,vers=2.1,nodfs\x00') r1 = accept(r0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) sendto$inet(r1, &(0x7f0000004dc0)="00000080fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100100200"/85, 0x55, 0x2, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, 0x0, 0x1) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) 2.492316378s ago: executing program 4 (id=167): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='file net/sctp/* +p', 0x12) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f00000001c0)={&(0x7f0000000200)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000280)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x80000001, 0x30}, 0xc) r2 = dup(r1) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[], 0x32600) syz_usb_connect(0x0, 0x3f, &(0x7f0000000380)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x2}}, 0x20) 1.560370673s ago: executing program 1 (id=168): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480), 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)='\x00'/185, &(0x7f0000000140)='\x00'/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)='\x00'/57, 0x0, 0x0, 0x8000000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1.535946265s ago: executing program 3 (id=169): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x122, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000540)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000580)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c"], 0x4a) 540.116856ms ago: executing program 1 (id=170): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f000001aa40)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f000001ae00)={0x2, 0x3039, @loopback}, 0x10) connect$inet(r2, &(0x7f000001ae40)={0x2, 0x6bb, @loopback}, 0x10) 379.341912ms ago: executing program 1 (id=171): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f00000004c0)=0x0) read$eventfd(r2, &(0x7f0000000500), 0x8) io_submit(r3, 0x3, &(0x7f0000000540)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0xd5, r2, 0x0, 0x0, 0x3, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x5, 0x4, r0, 0x0, 0x0, 0x5, 0x0, 0x2, r2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x80, r1, &(0x7f0000000640)="d264e4b796fb4676ea248ab23559f163a6d016e9e320797507a7602b19eef5e6c45e7915351547d3df3e1a0e90337e9780d268d46e4c6a3531e97cec4204", 0x3e, 0x5, 0x0, 0x3, r2}]) 68.858493ms ago: executing program 0 (id=172): r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000340)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2000}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000380)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) 68.597093ms ago: executing program 1 (id=173): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x8, &(0x7f0000000080)={[{@data_err_ignore}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@noquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x200004}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@grpquota}, {@inlinecrypt}, {@nodelalloc}]}, 0x1, 0x48d, &(0x7f0000000980)="$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") 0s ago: executing program 0 (id=174): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r1, &(0x7f0000000280)=[{0x0}], 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) syz_mount_image$ext4(&(0x7f0000000380)='ext2\x00', &(0x7f0000000140)='./sys\x00', 0x3018019, &(0x7f0000000180)={[{@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@oldalloc}]}, 0x1, 0x405, &(0x7f0000000cc0)="$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") syz_mount_image$btrfs(&(0x7f0000013400), &(0x7f0000013440)='./file0\x00', 0x82ef803788e1a230, &(0x7f0000013480), 0x3, 0x55e6, &(0x7f0000008640)="$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") syz_usb_connect(0x5, 0x2d, 0x0, 0x0) r3 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) mount(0x0, &(0x7f0000018b00)='./sys\x00', &(0x7f0000018b40)='sysfs\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): h1_to_team: link becomes ready [ 84.893371][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.902248][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.912996][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.921496][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.930220][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.939502][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.948845][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.957888][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.965076][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.974299][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.982937][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.032197][ T4291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.056781][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.068039][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.076568][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.083733][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.091886][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.101254][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.112363][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.122238][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.131004][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.159001][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.173118][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.190329][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.199213][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.216486][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.226056][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.237149][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.247005][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.264773][ T4291] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.294343][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.312219][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.319828][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.357548][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.365259][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.378744][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.390593][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.397827][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.413448][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.427115][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.436849][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.444018][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.455315][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.484695][ T4288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.525314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.542261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.550927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.577183][ T4288] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.602946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.614415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.624988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.635636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.644777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.653379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.661023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.669352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.686927][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.726466][ T4291] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.738445][ T4291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.757673][ T4277] device veth0_vlan entered promiscuous mode [ 85.765557][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.776821][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.785529][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.792721][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.800641][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.810037][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.818983][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.827837][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.836700][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.848552][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.857663][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.867516][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.876272][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.884434][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.892372][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.900042][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.936845][ T4277] device veth1_vlan entered promiscuous mode [ 85.966745][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.978578][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.997482][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.010003][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.020667][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.035510][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.042801][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.058144][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.067001][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.078791][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.092459][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.129653][ T4276] device veth0_vlan entered promiscuous mode [ 86.138946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.149886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.168559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.177356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.202903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.217355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.227584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.246568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.257412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.271320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.321292][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.329475][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.347252][ T4276] device veth1_vlan entered promiscuous mode [ 86.358561][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.367119][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.377840][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.386888][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.396451][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.422849][ T4291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.436740][ T4288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.450263][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.461930][ T4277] device veth0_macvtap entered promiscuous mode [ 86.473630][ T4277] device veth1_macvtap entered promiscuous mode [ 86.475757][ T4295] Bluetooth: hci0: command 0x040f tx timeout [ 86.479934][ T4294] Bluetooth: hci3: command 0x040f tx timeout [ 86.495404][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 86.504972][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 86.523135][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.531417][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.545199][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.553632][ T4285] Bluetooth: hci4: command 0x040f tx timeout [ 86.559660][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 86.569418][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.580872][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.590148][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.605548][ T4275] device veth0_vlan entered promiscuous mode [ 86.620146][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 86.629479][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.639683][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.648424][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.658139][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.666183][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.686780][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.712774][ T4276] device veth0_macvtap entered promiscuous mode [ 86.727619][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.737232][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.753848][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.780210][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.789733][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.823190][ T4275] device veth1_vlan entered promiscuous mode [ 86.833525][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.852864][ T4276] device veth1_macvtap entered promiscuous mode [ 86.872003][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.880254][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.889228][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.901127][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.913869][ T4277] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.932052][ T4277] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.940794][ T4277] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.961148][ T4277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.997384][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.008574][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.023414][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.054059][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 87.088356][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 87.096825][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.106513][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.132913][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.152578][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.168923][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.183697][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.195698][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.208483][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.241503][ T4275] device veth0_macvtap entered promiscuous mode [ 87.272826][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.281187][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.293071][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.303211][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.310753][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.344619][ T4288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.354817][ T4276] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.366195][ T4276] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.377069][ T4276] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.386026][ T4276] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.398002][ T4275] device veth1_macvtap entered promiscuous mode [ 87.479156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.495366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.504988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.514645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.541954][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.552755][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.565352][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.575949][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.587504][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.619282][ T4288] device veth0_vlan entered promiscuous mode [ 87.627196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.639092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.648042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.657027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.666677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.676612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.686819][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.697921][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.708359][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.719018][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.730678][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.757382][ T4288] device veth1_vlan entered promiscuous mode [ 87.767486][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.776469][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.785429][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.795626][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.804239][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.820508][ T4275] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.830126][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.840574][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.849647][ T4275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.859019][ T4275] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.869082][ T4275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.889823][ T4291] device veth0_vlan entered promiscuous mode [ 87.908724][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.917650][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.926880][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.968380][ T4291] device veth1_vlan entered promiscuous mode [ 88.044048][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.056115][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.064962][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 88.075858][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 88.084502][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.093549][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 88.101699][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.109825][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.118532][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.126791][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.135871][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.155155][ T4288] device veth0_macvtap entered promiscuous mode [ 88.190072][ T4288] device veth1_macvtap entered promiscuous mode [ 88.198624][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 88.211151][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.220277][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.228927][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.239509][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.256429][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.272242][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.295654][ T4291] device veth0_macvtap entered promiscuous mode [ 88.309641][ T4291] device veth1_macvtap entered promiscuous mode [ 88.324151][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.338020][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.349405][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.370523][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.381456][ T4291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.413951][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.428426][ T4291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.438873][ T4291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.450023][ T4291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.461353][ T4291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.477690][ T4291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.499326][ T4291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.520900][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.532921][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.550285][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.561503][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 88.561780][ T4294] Bluetooth: hci3: command 0x0419 tx timeout [ 88.567717][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 88.591609][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.601519][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.612833][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.625845][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.636557][ T4294] Bluetooth: hci2: command 0x0419 tx timeout [ 88.636591][ T4294] Bluetooth: hci4: command 0x0419 tx timeout [ 88.652705][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.665600][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.678260][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.690418][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.700960][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.711100][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.721844][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.733256][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.740948][ T4291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.752467][ T4291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.762632][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.769149][ T4291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.780438][ T4291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.790759][ T4291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.796837][ T4404] binder: 4403:4404 ioctl c0306201 200000000580 returned -14 [ 88.802802][ T4291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.821186][ T4291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.839627][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.861976][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.881266][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.896517][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.915635][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.926962][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.943190][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.957407][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.977589][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.989457][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.004548][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.016903][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.029457][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.046535][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.068992][ T4291] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.080346][ T4291] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.090986][ T4291] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.100623][ T4291] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.124816][ T4288] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.152215][ T4288] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.161109][ T4288] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.169990][ T4288] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.233033][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.240908][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.288455][ T4406] loop1: detected capacity change from 0 to 32768 [ 89.299582][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.309630][ T4406] ======================================================= [ 89.309630][ T4406] WARNING: The mand mount option has been deprecated and [ 89.309630][ T4406] and is ignored by this kernel. Remove the mand [ 89.309630][ T4406] option from the mount to silence this warning. [ 89.309630][ T4406] ======================================================= [ 89.979126][ T4406] XFS (loop1): Mounting V5 Filesystem [ 90.081123][ T4370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.139821][ T4370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.158294][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.170778][ T4423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.184746][ T4423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.224354][ T4410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.287277][ T4410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.297710][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.309362][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.362693][ T4406] XFS (loop1): Ending clean mount [ 90.395947][ T4370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.425463][ T4430] ip_tables: iptables: counters copy to user failed while replacing table [ 90.429230][ T4370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.463921][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.481302][ T4430] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8'. [ 90.814897][ T4443] syz.2.11 uses obsolete (PF_INET,SOCK_PACKET) [ 91.061915][ T4356] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 91.503163][ T4445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.646660][ T4455] device-mapper: table: 248:0: clone: Device size larger than destination device (-EINVAL) [ 91.684751][ T4455] device-mapper: ioctl: error adding target to table [ 91.851650][ T4282] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.975620][ T4464] ALSA: seq fatal error: cannot create timer (-22) [ 92.031001][ T4464] loop2: detected capacity change from 0 to 1024 [ 92.051673][ T4282] usb 1-1: Using ep0 maxpacket: 8 [ 92.060634][ T4464] hfsplus: unable to parse mount options [ 92.089726][ T4282] usb 1-1: config 0 has no interfaces? [ 92.123365][ T4282] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 92.133615][ T4282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.135402][ T4466] Bluetooth: MGMT ver 1.22 [ 92.177286][ T4466] Bluetooth: hci0: service_discovery: too big uuid_count value 38932 [ 92.178039][ T4282] usb 1-1: config 0 descriptor?? [ 92.382526][ T4472] CIFS: Attempting to mount \\127.0.0.1\share [ 92.388318][ T4474] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.440379][ T4475] CIFS: VFS: data area offset 65 overlaps SMB2 header 129 [ 92.453036][ T4475] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0x8 [ 92.681485][ T4472] CIFS: VFS: cifs_mount failed w/return code = -5 [ 93.181719][ T4356] usb 2-1: unable to get BOS descriptor or descriptor too short [ 93.201077][ T4356] usb 2-1: no configurations [ 93.209743][ T4356] usb 2-1: can't read configurations, error -22 [ 93.223119][ T4277] XFS (loop1): Unmounting Filesystem [ 93.250247][ T27] usb 1-1: USB disconnect, device number 2 [ 93.397119][ T4503] loop2: detected capacity change from 0 to 512 [ 93.409905][ T4503] EXT4-fs: Invalid want_extra_isize 153 [ 93.617888][ T4508] FAULT_INJECTION: forcing a failure. [ 93.617888][ T4508] name failslab, interval 1, probability 0, space 0, times 1 [ 93.631036][ T4508] CPU: 1 PID: 4508 Comm: syz.1.33 Not tainted syzkaller #0 [ 93.638256][ T4508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 93.648364][ T4508] Call Trace: [ 93.651692][ T4508] [ 93.654645][ T4508] dump_stack_lvl+0x188/0x24e [ 93.659371][ T4508] ? lock_chain_count+0x20/0x20 [ 93.664255][ T4508] ? show_regs_print_info+0x12/0x12 [ 93.669495][ T4508] ? load_image+0x410/0x410 [ 93.674025][ T4508] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 93.680021][ T4508] should_fail_ex+0x390/0x4c0 [ 93.684715][ T4508] should_failslab+0x5/0x20 [ 93.689228][ T4508] slab_pre_alloc_hook+0x59/0x300 [ 93.694264][ T4508] ? hash_ipportnet4_add+0x27f8/0x3360 [ 93.699737][ T4508] __kmem_cache_alloc_node+0x4f/0x270 [ 93.705123][ T4508] ? hash_ipportnet4_add+0x27f8/0x3360 [ 93.710597][ T4508] __kmalloc+0xa3/0x240 [ 93.714757][ T4508] ? hash_ipportnet4_add+0x6d9/0x3360 [ 93.720170][ T4508] hash_ipportnet4_add+0x27f8/0x3360 [ 93.725500][ T4508] hash_ipportnet4_uadt+0xf5b/0x13a0 [ 93.730803][ T4508] ? hash_ipportnet4_uadt+0x13a0/0x13a0 [ 93.736360][ T4508] ? hash_ipportnet4_kadt+0x620/0x620 [ 93.741759][ T4508] call_ad+0x181/0xb00 [ 93.745874][ T4508] ? ip_set_ad+0x9c0/0x9c0 [ 93.750309][ T4508] ? __nla_parse+0x3c/0x50 [ 93.754735][ T4508] ip_set_ad+0x816/0x9c0 [ 93.758995][ T4508] ? ip_set_dump_done+0x310/0x310 [ 93.764058][ T4508] nfnetlink_rcv_msg+0xcab/0x1290 [ 93.769113][ T4508] ? nfnetlink_rcv_msg+0x224/0x1290 [ 93.774341][ T4508] ? nfnetlink_unbind+0x160/0x160 [ 93.779371][ T4508] ? kasan_save_free_info+0x27/0x40 [ 93.784612][ T4508] netlink_rcv_skb+0x1ef/0x440 [ 93.789390][ T4508] ? nfnetlink_unbind+0x160/0x160 [ 93.794438][ T4508] ? netlink_ack+0x1160/0x1160 [ 93.799217][ T4508] ? bpf_lsm_capable+0x5/0x10 [ 93.803900][ T4508] ? security_capable+0x85/0xb0 [ 93.808767][ T4508] nfnetlink_rcv+0x2b0/0x2470 [ 93.813469][ T4508] ? __local_bh_enable_ip+0x136/0x1c0 [ 93.818874][ T4508] ? _local_bh_enable+0xa0/0xa0 [ 93.823732][ T4508] ? __dev_queue_xmit+0x274/0x3a70 [ 93.828844][ T4508] ? __dev_queue_xmit+0x274/0x3a70 [ 93.833965][ T4508] ? __dev_queue_xmit+0x1496/0x3a70 [ 93.839173][ T4508] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 93.844732][ T4508] ? ref_tracker_free+0x682/0x830 [ 93.849761][ T4508] ? refcount_inc+0x70/0x70 [ 93.854276][ T4508] ? memcpy+0x3c/0x60 [ 93.858264][ T4508] ? __copy_skb_header+0x3ba/0x4f0 [ 93.863387][ T4508] ? __skb_clone+0x446/0x6c0 [ 93.867994][ T4508] ? netlink_deliver_tap+0x2e/0x1b0 [ 93.873232][ T4508] ? __netlink_deliver_tap+0x7a9/0x7e0 [ 93.878742][ T4508] ? __lock_acquire+0x7ea0/0x7ea0 [ 93.883788][ T4508] ? netlink_deliver_tap+0x2e/0x1b0 [ 93.889004][ T4508] netlink_unicast+0x7ad/0x920 [ 93.893819][ T4508] netlink_sendmsg+0x8ad/0xbd0 [ 93.898595][ T4508] ? netlink_getsockopt+0x550/0x550 [ 93.903800][ T4508] ? apparmor_socket_sendmsg+0x8a/0x330 [ 93.909355][ T4508] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 93.914656][ T4508] ? security_socket_sendmsg+0x7c/0xa0 [ 93.920121][ T4508] ? netlink_getsockopt+0x550/0x550 [ 93.925331][ T4508] ____sys_sendmsg+0x5ed/0x9a0 [ 93.930132][ T4508] ? __sys_sendmsg_sock+0x30/0x30 [ 93.935166][ T4508] ? __import_iovec+0x306/0x510 [ 93.940036][ T4508] ? import_iovec+0x6f/0xa0 [ 93.944582][ T4508] ___sys_sendmsg+0x2a2/0x360 [ 93.949295][ T4508] ? __sys_sendmsg+0x2a0/0x2a0 [ 93.954111][ T4508] __se_sys_sendmsg+0x1c3/0x2b0 [ 93.958974][ T4508] ? __x64_sys_sendmsg+0x80/0x80 [ 93.963932][ T4508] ? lockdep_hardirqs_on+0x94/0x140 [ 93.969152][ T4508] do_syscall_64+0x4c/0xa0 [ 93.973582][ T4508] ? clear_bhb_loop+0x60/0xb0 [ 93.978273][ T4508] ? clear_bhb_loop+0x60/0xb0 [ 93.982962][ T4508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.988860][ T4508] RIP: 0033:0x7f8cebfa8f19 [ 93.993290][ T4508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.012901][ T4508] RSP: 002b:00007f8cecddc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.021324][ T4508] RAX: ffffffffffffffda RBX: 00007f8cec225fa0 RCX: 00007f8cebfa8f19 [ 94.029305][ T4508] RDX: 0000000000000080 RSI: 000020000001fd80 RDI: 0000000000000005 [ 94.037281][ T4508] RBP: 00007f8cec037f6d R08: 0000000000000000 R09: 0000000000000000 [ 94.045256][ T4508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.053229][ T4508] R13: 00007f8cec226038 R14: 00007f8cec225fa0 R15: 00007ffc53ed2398 [ 94.061221][ T4508] [ 94.175940][ T4513] CIFS: Attempting to mount \\127.0.0.1\share [ 94.275449][ T4511] loop2: detected capacity change from 0 to 4096 [ 94.316615][ T129] cfg80211: failed to load regulatory.db [ 94.355414][ T4511] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 94.580410][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 94.591838][ T4356] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.751693][ T4356] usb 2-1: device descriptor read/64, error -71 [ 94.872500][ T4356] usb usb2-port1: attempt power cycle [ 95.007297][ T4513] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 95.034500][ T4513] CIFS: VFS: cifs_mount failed w/return code = -11 [ 95.288520][ T4356] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 95.332498][ T4356] usb 2-1: device descriptor read/8, error -71 [ 95.359791][ T4557] FAULT_INJECTION: forcing a failure. [ 95.359791][ T4557] name failslab, interval 1, probability 0, space 0, times 0 [ 95.372537][ T4557] CPU: 0 PID: 4557 Comm: syz.4.47 Not tainted syzkaller #0 [ 95.379763][ T4557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 95.389853][ T4557] Call Trace: [ 95.393153][ T4557] [ 95.396102][ T4557] dump_stack_lvl+0x188/0x24e [ 95.400819][ T4557] ? lock_chain_count+0x20/0x20 [ 95.405711][ T4557] ? show_regs_print_info+0x12/0x12 [ 95.410957][ T4557] ? load_image+0x410/0x410 [ 95.415495][ T4557] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 95.421437][ T4557] should_fail_ex+0x390/0x4c0 [ 95.426162][ T4557] should_failslab+0x5/0x20 [ 95.430708][ T4557] slab_pre_alloc_hook+0x59/0x300 [ 95.435769][ T4557] ? hash_ipportnet4_add+0x27f8/0x3360 [ 95.441277][ T4557] __kmem_cache_alloc_node+0x4f/0x270 [ 95.446693][ T4557] ? hash_ipportnet4_add+0x27f8/0x3360 [ 95.452207][ T4557] __kmalloc+0xa3/0x240 [ 95.456392][ T4557] ? hash_ipportnet4_add+0x6d9/0x3360 [ 95.461802][ T4557] hash_ipportnet4_add+0x27f8/0x3360 [ 95.467170][ T4557] hash_ipportnet4_uadt+0xf5b/0x13a0 [ 95.472504][ T4557] ? hash_ipportnet4_uadt+0x13a0/0x13a0 [ 95.478091][ T4557] ? hash_ipportnet4_kadt+0x620/0x620 [ 95.483529][ T4557] call_ad+0x181/0xb00 [ 95.487650][ T4557] ? ip_set_ad+0x9c0/0x9c0 [ 95.492121][ T4557] ? __nla_parse+0x3c/0x50 [ 95.496594][ T4557] ip_set_ad+0x816/0x9c0 [ 95.500891][ T4557] ? ip_set_dump_done+0x310/0x310 [ 95.506030][ T4557] nfnetlink_rcv_msg+0xcab/0x1290 [ 95.511101][ T4557] ? nfnetlink_rcv_msg+0x224/0x1290 [ 95.516375][ T4557] ? nfnetlink_unbind+0x160/0x160 [ 95.521435][ T4557] ? kasan_save_free_info+0x27/0x40 [ 95.526717][ T4557] netlink_rcv_skb+0x1ef/0x440 [ 95.531518][ T4557] ? nfnetlink_unbind+0x160/0x160 [ 95.536576][ T4557] ? netlink_ack+0x1160/0x1160 [ 95.541381][ T4557] ? bpf_lsm_capable+0x5/0x10 [ 95.546090][ T4557] ? security_capable+0x85/0xb0 [ 95.550991][ T4557] nfnetlink_rcv+0x2b0/0x2470 [ 95.555758][ T4557] ? __local_bh_enable_ip+0x136/0x1c0 [ 95.561174][ T4557] ? _local_bh_enable+0xa0/0xa0 [ 95.566059][ T4557] ? __dev_queue_xmit+0x274/0x3a70 [ 95.571195][ T4557] ? __dev_queue_xmit+0x274/0x3a70 [ 95.576340][ T4557] ? __dev_queue_xmit+0x1496/0x3a70 [ 95.581573][ T4557] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 95.587165][ T4557] ? ref_tracker_free+0x682/0x830 [ 95.592225][ T4557] ? refcount_inc+0x70/0x70 [ 95.596770][ T4557] ? memcpy+0x3c/0x60 [ 95.600790][ T4557] ? __copy_skb_header+0x3ba/0x4f0 [ 95.605942][ T4557] ? __skb_clone+0x446/0x6c0 [ 95.610583][ T4557] ? netlink_deliver_tap+0x2e/0x1b0 [ 95.615821][ T4557] ? __netlink_deliver_tap+0x7a9/0x7e0 [ 95.621337][ T4557] ? __lock_acquire+0x7ea0/0x7ea0 [ 95.626406][ T4557] ? netlink_deliver_tap+0x2e/0x1b0 [ 95.631710][ T4557] netlink_unicast+0x7ad/0x920 [ 95.636521][ T4557] netlink_sendmsg+0x8ad/0xbd0 [ 95.641336][ T4557] ? netlink_getsockopt+0x550/0x550 [ 95.646572][ T4557] ? apparmor_socket_sendmsg+0x8a/0x330 [ 95.652161][ T4557] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 95.657482][ T4557] ? security_socket_sendmsg+0x7c/0xa0 [ 95.662972][ T4557] ? netlink_getsockopt+0x550/0x550 [ 95.668204][ T4557] ____sys_sendmsg+0x5ed/0x9a0 [ 95.673039][ T4557] ? __sys_sendmsg_sock+0x30/0x30 [ 95.679757][ T4557] ? __import_iovec+0x306/0x510 [ 95.684662][ T4557] ? import_iovec+0x6f/0xa0 [ 95.689214][ T4557] ___sys_sendmsg+0x2a2/0x360 [ 95.693950][ T4557] ? __sys_sendmsg+0x2a0/0x2a0 [ 95.698799][ T4557] __se_sys_sendmsg+0x1c3/0x2b0 [ 95.703699][ T4557] ? __x64_sys_sendmsg+0x80/0x80 [ 95.708693][ T4557] ? lockdep_hardirqs_on+0x94/0x140 [ 95.713984][ T4557] do_syscall_64+0x4c/0xa0 [ 95.718448][ T4557] ? clear_bhb_loop+0x60/0xb0 [ 95.723168][ T4557] ? clear_bhb_loop+0x60/0xb0 [ 95.727892][ T4557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.733829][ T4557] RIP: 0033:0x7f67233a8f19 [ 95.738269][ T4557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.757903][ T4557] RSP: 002b:00007f672419b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.766352][ T4557] RAX: ffffffffffffffda RBX: 00007f6723625fa0 RCX: 00007f67233a8f19 [ 95.774355][ T4557] RDX: 0000000000000080 RSI: 000020000001fd80 RDI: 0000000000000005 [ 95.782356][ T4557] RBP: 00007f6723437f6d R08: 0000000000000000 R09: 0000000000000000 [ 95.790358][ T4557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.798356][ T4557] R13: 00007f6723626038 R14: 00007f6723625fa0 R15: 00007ffd89602078 [ 95.806383][ T4557] [ 95.971944][ T4356] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 96.023424][ T4356] usb 2-1: device descriptor read/8, error -71 [ 96.097017][ T4578] netlink: 44 bytes leftover after parsing attributes in process `syz.0.54'. [ 96.143154][ T4356] usb usb2-port1: unable to enumerate USB device [ 96.222762][ T4581] loop0: detected capacity change from 0 to 128 [ 96.222918][ T27] rxe_eth0 speed is unknown, defaulting to 1000 [ 96.310493][ T4581] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 96.324935][ T4586] loop3: detected capacity change from 0 to 128 [ 96.352221][ T14] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.352742][ T4586] EXT4-fs: Ignoring removed bh option [ 96.368932][ T4581] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.458717][ T4586] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 96.532982][ T4586] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.553557][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 96.571901][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 96.591762][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 96.633795][ T14] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 96.656838][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.670504][ T14] usb 5-1: Product: syz [ 96.684377][ T14] usb 5-1: Manufacturer: syz [ 96.699757][ T14] usb 5-1: SerialNumber: syz [ 96.720854][ T14] usb 5-1: config 0 descriptor?? [ 96.968327][ T14] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 97.181343][ T14] usb 5-1: USB disconnect, device number 2 [ 97.290923][ T4288] EXT4-fs (loop3): unmounting filesystem. [ 97.469883][ T4605] loop0: detected capacity change from 0 to 32768 [ 97.499245][ T4605] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.60 (4605) [ 97.575703][ T4605] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 97.587360][ T4618] FAULT_INJECTION: forcing a failure. [ 97.587360][ T4618] name failslab, interval 1, probability 0, space 0, times 0 [ 97.600447][ T4618] CPU: 1 PID: 4618 Comm: syz.1.63 Not tainted syzkaller #0 [ 97.607675][ T4618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 97.617788][ T4618] Call Trace: [ 97.621088][ T4618] [ 97.624054][ T4618] dump_stack_lvl+0x188/0x24e [ 97.628769][ T4618] ? lock_chain_count+0x20/0x20 [ 97.633659][ T4618] ? show_regs_print_info+0x12/0x12 [ 97.638893][ T4618] ? load_image+0x410/0x410 [ 97.643419][ T4618] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 97.649357][ T4618] should_fail_ex+0x390/0x4c0 [ 97.654070][ T4618] should_failslab+0x5/0x20 [ 97.658597][ T4618] slab_pre_alloc_hook+0x59/0x300 [ 97.663656][ T4618] ? hash_ipportnet4_add+0x27f8/0x3360 [ 97.669118][ T4618] __kmem_cache_alloc_node+0x4f/0x270 [ 97.674495][ T4618] ? hash_ipportnet4_add+0x27f8/0x3360 [ 97.679952][ T4618] __kmalloc+0xa3/0x240 [ 97.684107][ T4618] ? hash_ipportnet4_add+0x6d9/0x3360 [ 97.689485][ T4618] hash_ipportnet4_add+0x27f8/0x3360 [ 97.694794][ T4618] hash_ipportnet4_uadt+0xf5b/0x13a0 [ 97.700084][ T4618] ? hash_ipportnet4_uadt+0x13a0/0x13a0 [ 97.705635][ T4618] ? hash_ipportnet4_kadt+0x620/0x620 [ 97.711019][ T4618] ? __local_bh_enable_ip+0x136/0x1c0 [ 97.716387][ T4618] ? lockdep_hardirqs_on+0x94/0x140 [ 97.721586][ T4618] ? _local_bh_enable+0xa0/0xa0 [ 97.726443][ T4618] call_ad+0x350/0xb00 [ 97.730521][ T4618] ? ip_set_ad+0x9c0/0x9c0 [ 97.734946][ T4618] ? __nla_parse+0x3c/0x50 [ 97.739365][ T4618] ip_set_ad+0x816/0x9c0 [ 97.743618][ T4618] ? ip_set_dump_done+0x310/0x310 [ 97.748687][ T4618] nfnetlink_rcv_msg+0xcab/0x1290 [ 97.753716][ T4618] ? nfnetlink_rcv_msg+0x224/0x1290 [ 97.759816][ T4618] ? nfnetlink_unbind+0x160/0x160 [ 97.764858][ T4618] ? kasan_save_free_info+0x27/0x40 [ 97.770094][ T4618] netlink_rcv_skb+0x1ef/0x440 [ 97.774957][ T4618] ? nfnetlink_unbind+0x160/0x160 [ 97.780030][ T4618] ? netlink_ack+0x1160/0x1160 [ 97.784810][ T4618] ? bpf_lsm_capable+0x5/0x10 [ 97.789492][ T4618] ? security_capable+0x85/0xb0 [ 97.794370][ T4618] nfnetlink_rcv+0x2b0/0x2470 [ 97.799055][ T4618] ? __local_bh_enable_ip+0x136/0x1c0 [ 97.804444][ T4618] ? _local_bh_enable+0xa0/0xa0 [ 97.809395][ T4618] ? __dev_queue_xmit+0x274/0x3a70 [ 97.814511][ T4618] ? __dev_queue_xmit+0x274/0x3a70 [ 97.819625][ T4618] ? __dev_queue_xmit+0x1496/0x3a70 [ 97.824837][ T4618] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 97.830387][ T4618] ? ref_tracker_free+0x682/0x830 [ 97.835418][ T4618] ? refcount_inc+0x70/0x70 [ 97.839916][ T4618] ? memcpy+0x3c/0x60 [ 97.843914][ T4618] ? __copy_skb_header+0x3ba/0x4f0 [ 97.849041][ T4618] ? __skb_clone+0x446/0x6c0 [ 97.853652][ T4618] ? netlink_deliver_tap+0x2e/0x1b0 [ 97.858857][ T4618] ? __netlink_deliver_tap+0x7a9/0x7e0 [ 97.864319][ T4618] ? __lock_acquire+0x7ea0/0x7ea0 [ 97.869354][ T4618] ? netlink_deliver_tap+0x2e/0x1b0 [ 97.874578][ T4618] netlink_unicast+0x7ad/0x920 [ 97.879364][ T4618] netlink_sendmsg+0x8ad/0xbd0 [ 97.884137][ T4618] ? netlink_getsockopt+0x550/0x550 [ 97.889341][ T4618] ? apparmor_socket_sendmsg+0x8a/0x330 [ 97.894886][ T4618] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 97.900176][ T4618] ? security_socket_sendmsg+0x7c/0xa0 [ 97.905659][ T4618] ? netlink_getsockopt+0x550/0x550 [ 97.910864][ T4618] ____sys_sendmsg+0x5ed/0x9a0 [ 97.915633][ T4618] ? __sys_sendmsg_sock+0x30/0x30 [ 97.920653][ T4618] ? __import_iovec+0x306/0x510 [ 97.925518][ T4618] ? import_iovec+0x6f/0xa0 [ 97.930023][ T4618] ___sys_sendmsg+0x2a2/0x360 [ 97.934706][ T4618] ? __sys_sendmsg+0x2a0/0x2a0 [ 97.939507][ T4618] __se_sys_sendmsg+0x1c3/0x2b0 [ 97.944370][ T4618] ? __x64_sys_sendmsg+0x80/0x80 [ 97.949322][ T4618] ? lockdep_hardirqs_on+0x94/0x140 [ 97.954524][ T4618] do_syscall_64+0x4c/0xa0 [ 97.958942][ T4618] ? clear_bhb_loop+0x60/0xb0 [ 97.963638][ T4618] ? clear_bhb_loop+0x60/0xb0 [ 97.968317][ T4618] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.975236][ T4618] RIP: 0033:0x7f8cebfa8f19 [ 97.979694][ T4618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.000110][ T4618] RSP: 002b:00007f8cecddc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.008550][ T4618] RAX: ffffffffffffffda RBX: 00007f8cec225fa0 RCX: 00007f8cebfa8f19 [ 98.016531][ T4618] RDX: 0000000000000080 RSI: 000020000001fd80 RDI: 0000000000000005 [ 98.024511][ T4618] RBP: 00007f8cec037f6d R08: 0000000000000000 R09: 0000000000000000 [ 98.032482][ T4618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.040471][ T4618] R13: 00007f8cec226038 R14: 00007f8cec225fa0 R15: 00007ffc53ed2398 [ 98.048493][ T4618] [ 98.112236][ T4605] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 98.164564][ T4605] BTRFS info (device loop0): use zlib compression, level 3 [ 98.191931][ T4605] BTRFS info (device loop0): using free space tree [ 98.307479][ T4645] FAULT_INJECTION: forcing a failure. [ 98.307479][ T4645] name failslab, interval 1, probability 5, space 0, times 100 [ 98.321144][ T4645] CPU: 0 PID: 4645 Comm: syz.1.66 Not tainted syzkaller #0 [ 98.328378][ T4645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 98.338456][ T4645] Call Trace: [ 98.341750][ T4645] [ 98.345075][ T4645] dump_stack_lvl+0x188/0x24e [ 98.350150][ T4645] ? show_regs_print_info+0x12/0x12 [ 98.355474][ T4645] ? load_image+0x410/0x410 [ 98.360033][ T4645] ? __might_sleep+0xd0/0xd0 [ 98.365155][ T4645] ? __lock_acquire+0x7ea0/0x7ea0 [ 98.370193][ T4645] should_fail_ex+0x390/0x4c0 [ 98.374886][ T4645] should_failslab+0x5/0x20 [ 98.380626][ T4645] slab_pre_alloc_hook+0x59/0x300 [ 98.385663][ T4645] ? __se_sys_memfd_create+0xee/0x340 [ 98.391040][ T4645] __kmem_cache_alloc_node+0x4f/0x270 [ 98.396434][ T4645] ? __se_sys_memfd_create+0xee/0x340 [ 98.401829][ T4645] __kmalloc+0xa3/0x240 [ 98.406010][ T4645] __se_sys_memfd_create+0xee/0x340 [ 98.411267][ T4645] do_syscall_64+0x4c/0xa0 [ 98.415701][ T4645] ? clear_bhb_loop+0x60/0xb0 [ 98.420409][ T4645] ? clear_bhb_loop+0x60/0xb0 [ 98.425130][ T4645] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.431052][ T4645] RIP: 0033:0x7f8cebfa8f19 [ 98.436196][ T4645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.456093][ T4645] RSP: 002b:00007f8cecddbe08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 98.464515][ T4645] RAX: ffffffffffffffda RBX: 00000000000055a8 RCX: 00007f8cebfa8f19 [ 98.472493][ T4645] RDX: 00007f8cecddbee0 RSI: 0000000000000000 RDI: 00007f8cec038160 [ 98.480468][ T4645] RBP: 00002000000006c0 R08: 00000000ffffffff R09: 0000000000000000 [ 98.488448][ T4645] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000440 [ 98.496442][ T4645] R13: 00007f8cecddbee0 R14: 00007f8cecddbea0 R15: 0000200000000480 [ 98.504431][ T4645] [ 98.524344][ T4644] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.557309][ T4651] device bond_slave_0 entered promiscuous mode [ 98.563791][ T4651] device bond_slave_1 entered promiscuous mode [ 98.570891][ T4651] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 98.571730][ T4605] BTRFS info (device loop0): enabling ssd optimizations [ 98.581329][ T4651] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 98.655196][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 98.715331][ T4644] netlink: 14 bytes leftover after parsing attributes in process `syz.4.64'. [ 98.731092][ T4644] device bond_slave_0 left promiscuous mode [ 98.755084][ T4644] device bond_slave_1 left promiscuous mode [ 99.009295][ T4644] bond1: (slave macvlan2): Removing an active aggregator [ 99.028012][ T4644] bond1: (slave macvlan2): Releasing backup interface [ 99.153003][ T4644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.181140][ T4645] FAULT_INJECTION: forcing a failure. [ 99.181140][ T4645] name failslab, interval 1, probability 5, space 0, times 98 [ 99.206623][ T4641] loop2: detected capacity change from 0 to 32768 [ 99.216238][ T4644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.242198][ T4645] CPU: 0 PID: 4645 Comm: syz.1.66 Not tainted syzkaller #0 [ 99.249505][ T4645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 99.259594][ T4645] Call Trace: [ 99.262898][ T4645] [ 99.265844][ T4645] dump_stack_lvl+0x188/0x24e [ 99.269739][ T4641] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.65 (4641) [ 99.270544][ T4645] ? show_regs_print_info+0x12/0x12 [ 99.286388][ T4645] ? load_image+0x410/0x410 [ 99.290936][ T4645] ? __might_sleep+0xd0/0xd0 [ 99.295722][ T4645] ? __lock_acquire+0x7ea0/0x7ea0 [ 99.300799][ T4645] should_fail_ex+0x390/0x4c0 [ 99.305519][ T4645] should_failslab+0x5/0x20 [ 99.310061][ T4645] slab_pre_alloc_hook+0x59/0x300 [ 99.315121][ T4645] ? __lock_acquire+0x7ea0/0x7ea0 [ 99.320182][ T4645] kmem_cache_alloc_lru+0x49/0x2e0 [ 99.325330][ T4645] ? xas_nomem+0x146/0x1e0 [ 99.329793][ T4645] xas_nomem+0x146/0x1e0 [ 99.334073][ T4645] shmem_add_to_page_cache+0xa4b/0x1c90 [ 99.339656][ T4645] ? __filemap_get_folio+0x10f/0xde0 [ 99.344992][ T4645] ? put_page+0x270/0x270 [ 99.349364][ T4645] ? _raw_spin_lock_irq+0xb7/0xf0 [ 99.354432][ T4645] ? _raw_spin_unlock_irq+0x1f/0x40 [ 99.359685][ T4645] ? lockdep_hardirqs_on+0x94/0x140 [ 99.365018][ T4645] shmem_get_folio_gfp+0x1663/0x35e0 [ 99.370378][ T4645] shmem_write_begin+0xee/0x3f0 [ 99.375291][ T4645] generic_perform_write+0x2fa/0x5c0 [ 99.380697][ T4645] ? generic_file_direct_write+0x330/0x330 [ 99.381122][ T4644] bond0 (unregistering): Released all slaves [ 99.386523][ T4645] ? __file_remove_privs+0x5f0/0x5f0 [ 99.386546][ T4645] ? rwsem_write_trylock+0x135/0x1c0 [ 99.386565][ T4645] ? clear_nonspinnable+0x60/0x60 [ 99.386582][ T4645] ? generic_write_checks_count+0x363/0x440 [ 99.386605][ T4645] __generic_file_write_iter+0x148/0x2a0 [ 99.386633][ T4645] generic_file_write_iter+0xab/0x2e0 [ 99.386659][ T4645] vfs_write+0x482/0x9a0 [ 99.400943][ T4641] overlayfs: missing 'lowerdir' [ 99.403196][ T4645] ? file_end_write+0x250/0x250 [ 99.403226][ T4645] ? __fget_files+0x3fc/0x460 [ 99.403256][ T4645] ? __fdget_pos+0x1d4/0x360 [ 99.403276][ T4645] ? ksys_write+0x70/0x260 [ 99.403291][ T4645] ksys_write+0x14d/0x260 [ 99.403309][ T4645] ? __ia32_sys_read+0x80/0x80 [ 99.403326][ T4645] ? lockdep_hardirqs_on+0x94/0x140 [ 99.467389][ T4645] do_syscall_64+0x4c/0xa0 [ 99.471849][ T4645] ? clear_bhb_loop+0x60/0xb0 [ 99.476559][ T4645] ? clear_bhb_loop+0x60/0xb0 [ 99.481264][ T4645] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.487186][ T4645] RIP: 0033:0x7f8cebf6974e [ 99.488316][ T4444] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (4444) [ 99.491658][ T4645] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 99.491676][ T4645] RSP: 002b:00007f8cecddbda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 99.491695][ T4645] RAX: ffffffffffffffda RBX: 00007f8cecddc6c0 RCX: 00007f8cebf6974e [ 99.491707][ T4645] RDX: 00000000013bd7ef RSI: 00007f8ce1df7000 RDI: 0000000000000008 [ 99.491719][ T4645] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 99.491728][ T4645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 99.491738][ T4645] R13: 00007f8cecddbee0 R14: 00007f8cecddbea0 R15: 00007f8ce1df7000 [ 99.491766][ T4645] [ 99.719555][ T4275] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 99.986462][ T4673] loop2: detected capacity change from 0 to 128 [ 100.057530][ T4673] EXT4-fs: Ignoring removed bh option [ 100.074880][ T4676] loop4: detected capacity change from 0 to 16 [ 100.205784][ T4676] erofs: (device loop4): mounted with root inode @ nid 36. [ 100.206419][ T4673] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 100.276029][ T4676] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 100.276592][ T4673] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.313901][ T4676] erofs: (device loop4): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 100.336042][ T4676] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 100.377448][ T4676] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 100.407716][ T4676] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 100.434997][ T4676] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 100.464156][ T26] audit: type=1800 audit(1794313866.253:2): pid=4676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.74" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 100.783183][ T4683] loop1: detected capacity change from 0 to 32768 [ 100.803100][ T4413] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.820204][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 100.993598][ T4413] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.014816][ T4413] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 101.034593][ T4413] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.069768][ T4413] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 101.085672][ T4413] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 101.114746][ T4413] usb 1-1: Product: syz [ 101.118973][ T4413] usb 1-1: Manufacturer: syz [ 101.145002][ T4692] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 101.168815][ T4413] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 101.204529][ T4413] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 101.394417][ T14] usb 1-1: USB disconnect, device number 3 [ 101.417298][ T14] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 101.439738][ T14] garmin_gps 1-1:1.0: device disconnected [ 101.485030][ T4712] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.525491][ T4714] device bond_slave_0 entered promiscuous mode [ 101.531775][ T4714] device bond_slave_1 entered promiscuous mode [ 101.578024][ T4707] loop3: detected capacity change from 0 to 32768 [ 101.580668][ T4714] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 101.609967][ T4717] loop4: detected capacity change from 0 to 512 [ 101.616528][ T4707] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.83 (4707) [ 101.633918][ T4714] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 101.646035][ T4707] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 101.653269][ T4712] netlink: 14 bytes leftover after parsing attributes in process `syz.2.85'. [ 101.661982][ T4707] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 101.676983][ T4707] BTRFS info (device loop3): use zlib compression, level 3 [ 101.686271][ T4707] BTRFS info (device loop3): using free space tree [ 101.693104][ T4712] device bond_slave_0 left promiscuous mode [ 101.698810][ T4717] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 101.699265][ T4712] device bond_slave_1 left promiscuous mode [ 101.787869][ T4712] bond1: (slave macvlan2): Removing an active aggregator [ 101.808405][ T4712] bond1: (slave macvlan2): Releasing backup interface [ 101.852011][ T4712] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.911842][ T4707] BTRFS info (device loop3): enabling ssd optimizations [ 101.927480][ T4712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.955356][ T26] audit: type=1800 audit(1794313867.743:3): pid=4707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.83" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 101.962563][ T4291] EXT4-fs (loop4): unmounting filesystem. [ 101.989018][ T4712] bond0 (unregistering): Released all slaves [ 102.091478][ T4739] overlayfs: missing 'workdir' [ 102.140600][ T4740] loop0: detected capacity change from 0 to 128 [ 102.179918][ T4740] EXT4-fs: Ignoring removed bh option [ 102.224441][ T4740] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 102.243471][ T4288] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 102.278097][ T4740] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.979292][ T4753] loop4: detected capacity change from 0 to 512 [ 103.195363][ T4396] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 11 /dev/loop3 scanned by udevd (4396) [ 103.367966][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 103.449022][ T4755] FAULT_INJECTION: forcing a failure. [ 103.449022][ T4755] name failslab, interval 1, probability 5, space 0, times 99 [ 103.474498][ T4753] EXT4-fs (loop4): Test dummy encryption mode enabled [ 103.514835][ T4753] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.91: inode has both inline data and extents flags [ 103.533504][ T4755] CPU: 0 PID: 4755 Comm: syz.3.90 Not tainted syzkaller #0 [ 103.540771][ T4755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 103.550838][ T4755] Call Trace: [ 103.554120][ T4755] [ 103.557053][ T4755] dump_stack_lvl+0x188/0x24e [ 103.561743][ T4755] ? show_regs_print_info+0x12/0x12 [ 103.566946][ T4755] ? load_image+0x410/0x410 [ 103.572802][ T4755] ? __might_sleep+0xd0/0xd0 [ 103.577412][ T4755] ? __lock_acquire+0x7ea0/0x7ea0 [ 103.582457][ T4755] should_fail_ex+0x390/0x4c0 [ 103.587150][ T4755] should_failslab+0x5/0x20 [ 103.591660][ T4755] slab_pre_alloc_hook+0x59/0x300 [ 103.596724][ T4755] ? __lock_acquire+0x7ea0/0x7ea0 [ 103.601773][ T4755] kmem_cache_alloc_lru+0x49/0x2e0 [ 103.606911][ T4755] ? xas_nomem+0x146/0x1e0 [ 103.611360][ T4755] xas_nomem+0x146/0x1e0 [ 103.615625][ T4755] shmem_add_to_page_cache+0xa4b/0x1c90 [ 103.621183][ T4755] ? __filemap_get_folio+0x10f/0xde0 [ 103.626485][ T4755] ? put_page+0x270/0x270 [ 103.630821][ T4755] ? _raw_spin_lock_irq+0xb7/0xf0 [ 103.635854][ T4755] ? _raw_spin_unlock_irq+0x1f/0x40 [ 103.641056][ T4755] ? lockdep_hardirqs_on+0x94/0x140 [ 103.646263][ T4755] shmem_get_folio_gfp+0x1663/0x35e0 [ 103.651581][ T4755] shmem_write_begin+0xee/0x3f0 [ 103.656455][ T4755] generic_perform_write+0x2fa/0x5c0 [ 103.661768][ T4755] ? generic_file_direct_write+0x330/0x330 [ 103.667616][ T4755] ? __file_remove_privs+0x5f0/0x5f0 [ 103.672921][ T4755] ? rwsem_write_trylock+0x135/0x1c0 [ 103.678219][ T4755] ? clear_nonspinnable+0x60/0x60 [ 103.683248][ T4755] ? generic_write_checks_count+0x363/0x440 [ 103.689155][ T4755] __generic_file_write_iter+0x148/0x2a0 [ 103.694799][ T4755] generic_file_write_iter+0xab/0x2e0 [ 103.700221][ T4755] vfs_write+0x482/0x9a0 [ 103.704469][ T4755] ? file_end_write+0x250/0x250 [ 103.709326][ T4755] ? __fget_files+0x3fc/0x460 [ 103.714016][ T4755] ? __fdget_pos+0x1d4/0x360 [ 103.718613][ T4755] ? ksys_write+0x70/0x260 [ 103.723033][ T4755] ksys_write+0x14d/0x260 [ 103.727364][ T4755] ? __ia32_sys_read+0x80/0x80 [ 103.732132][ T4755] ? lockdep_hardirqs_on+0x94/0x140 [ 103.737332][ T4755] do_syscall_64+0x4c/0xa0 [ 103.741750][ T4755] ? clear_bhb_loop+0x60/0xb0 [ 103.746456][ T4755] ? clear_bhb_loop+0x60/0xb0 [ 103.751161][ T4755] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.757058][ T4755] RIP: 0033:0x7f8f8ff6974e [ 103.761503][ T4755] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.781117][ T4755] RSP: 002b:00007f8f90db1da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.789537][ T4755] RAX: ffffffffffffffda RBX: 00007f8f90db26c0 RCX: 00007f8f8ff6974e [ 103.797559][ T4755] RDX: 00000000013bd7ef RSI: 00007f8f85df7000 RDI: 0000000000000008 [ 103.805539][ T4755] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.813514][ T4755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 103.821489][ T4755] R13: 00007f8f90db1ee0 R14: 00007f8f90db1ea0 R15: 00007f8f85df7000 [ 103.829479][ T4755] [ 103.858477][ T4753] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.91: couldn't read orphan inode 15 (err -117) [ 103.886980][ T4753] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 103.925301][ T4753] FAULT_INJECTION: forcing a failure. [ 103.925301][ T4753] name failslab, interval 1, probability 5, space 0, times 98 [ 103.928913][ T4755] FAULT_INJECTION: forcing a failure. [ 103.928913][ T4755] name failslab, interval 1, probability 5, space 0, times 98 [ 103.960372][ T4753] CPU: 0 PID: 4753 Comm: syz.4.91 Not tainted syzkaller #0 [ 103.967640][ T4753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 103.978335][ T4753] Call Trace: [ 103.981640][ T4753] [ 103.984592][ T4753] dump_stack_lvl+0x188/0x24e [ 103.989300][ T4753] ? show_regs_print_info+0x12/0x12 [ 103.994533][ T4753] ? load_image+0x410/0x410 [ 103.999075][ T4753] ? __lock_acquire+0x7ea0/0x7ea0 [ 104.004151][ T4753] should_fail_ex+0x390/0x4c0 [ 104.008851][ T4753] should_failslab+0x5/0x20 [ 104.013374][ T4753] slab_pre_alloc_hook+0x59/0x300 [ 104.018433][ T4753] ? __split_vma+0x4f0/0x4f0 [ 104.023069][ T4753] kmem_cache_alloc+0x56/0x2f0 [ 104.027858][ T4753] ? vm_area_dup+0x23/0x1a0 [ 104.032379][ T4753] vm_area_dup+0x23/0x1a0 [ 104.036723][ T4753] __split_vma+0xb9/0x4f0 [ 104.041094][ T4753] ? mas_preallocate+0x1c0/0x3b0 [ 104.046093][ T4753] do_mas_align_munmap+0x399/0x12d0 [ 104.051321][ T4753] ? verify_lock_unused+0x140/0x140 [ 104.056537][ T4753] ? do_mas_munmap+0x2b0/0x2b0 [ 104.061321][ T4753] ? mtree_range_walk+0x664/0x780 [ 104.066372][ T4753] ? mas_walk+0x15f/0x180 [ 104.070721][ T4753] ? mas_find+0x1ba/0x220 [ 104.075074][ T4753] do_mas_munmap+0x240/0x2b0 [ 104.079702][ T4753] do_munmap+0xeb/0x140 [ 104.083883][ T4753] ? mtree_load+0x100/0xa70 [ 104.088406][ T4753] ? do_mas_align_munmap+0x12d0/0x12d0 [ 104.093879][ T4753] ? mtree_load+0x91f/0xa70 [ 104.098407][ T4753] ? mas_alloc_nodes+0x880/0x880 [ 104.103359][ T4753] ? rwsem_write_trylock+0x135/0x1c0 [ 104.108672][ T4753] mremap_to+0x310/0x5c0 [ 104.112923][ T4753] __se_sys_mremap+0x691/0x1120 [ 104.117781][ T4753] ? __ia32_sys_get_robust_list+0x100/0x100 [ 104.123686][ T4753] ? __x64_sys_mremap+0xc0/0xc0 [ 104.128548][ T4753] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 104.134547][ T4753] ? lock_chain_count+0x20/0x20 [ 104.139448][ T4753] ? lockdep_hardirqs_on+0x94/0x140 [ 104.144649][ T4753] ? __x64_sys_mremap+0x1c/0xc0 [ 104.149503][ T4753] do_syscall_64+0x4c/0xa0 [ 104.153932][ T4753] ? clear_bhb_loop+0x60/0xb0 [ 104.158615][ T4753] ? clear_bhb_loop+0x60/0xb0 [ 104.163310][ T4753] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.169216][ T4753] RIP: 0033:0x7f67233a8f19 [ 104.173632][ T4753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.193275][ T4753] RSP: 002b:00007f672419b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 104.201714][ T4753] RAX: ffffffffffffffda RBX: 00007f6723625fa0 RCX: 00007f67233a8f19 [ 104.209743][ T4753] RDX: 0000000000400000 RSI: 0000000000002000 RDI: 000020000020e000 [ 104.217749][ T4753] RBP: 00007f6723437f6d R08: 000020000082a000 R09: 0000000000000000 [ 104.225723][ T4753] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 104.233697][ T4753] R13: 00007f6723626038 R14: 00007f6723625fa0 R15: 00007ffd89602078 [ 104.241686][ T4753] [ 104.265761][ T4755] CPU: 1 PID: 4755 Comm: syz.3.90 Not tainted syzkaller #0 [ 104.273021][ T4755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 104.283103][ T4755] Call Trace: [ 104.286406][ T4755] [ 104.289355][ T4755] dump_stack_lvl+0x188/0x24e [ 104.294067][ T4755] ? show_regs_print_info+0x12/0x12 [ 104.299295][ T4755] ? load_image+0x410/0x410 [ 104.303823][ T4755] ? __might_sleep+0xd0/0xd0 [ 104.308489][ T4755] ? __lock_acquire+0x7ea0/0x7ea0 [ 104.313546][ T4755] should_fail_ex+0x390/0x4c0 [ 104.318242][ T4755] should_failslab+0x5/0x20 [ 104.322760][ T4755] slab_pre_alloc_hook+0x59/0x300 [ 104.327809][ T4755] ? memcg_alloc_slab_cgroups+0x81/0x120 [ 104.333466][ T4755] __kmem_cache_alloc_node+0x4f/0x270 [ 104.338860][ T4755] ? memcg_alloc_slab_cgroups+0x81/0x120 [ 104.344514][ T4755] __kmalloc_node+0xa2/0x240 [ 104.349129][ T4755] memcg_alloc_slab_cgroups+0x81/0x120 [ 104.354615][ T4755] slab_post_alloc_hook+0xba/0x490 [ 104.359751][ T4755] kmem_cache_alloc+0x18b/0x2f0 [ 104.364622][ T4755] ? __alloc_file+0x25/0x230 [ 104.369233][ T4755] __alloc_file+0x25/0x230 [ 104.373675][ T4755] alloc_empty_file+0x90/0x180 [ 104.378459][ T4755] alloc_file+0x5b/0x5f0 [ 104.382727][ T4755] alloc_file_pseudo+0x180/0x200 [ 104.387693][ T4755] ? alloc_empty_file_noaccount+0x80/0x80 [ 104.393458][ T4755] __shmem_file_setup+0x1cf/0x290 [ 104.398538][ T4755] ? shmem_file_setup+0x13/0x30 [ 104.403424][ T4755] __se_sys_memfd_create+0x1e1/0x340 [ 104.408770][ T4755] do_syscall_64+0x4c/0xa0 [ 104.413217][ T4755] ? clear_bhb_loop+0x60/0xb0 [ 104.417931][ T4755] ? clear_bhb_loop+0x60/0xb0 [ 104.422640][ T4755] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.428561][ T4755] RIP: 0033:0x7f8f8ffa8f19 [ 104.432992][ T4755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.452632][ T4755] RSP: 002b:00007f8f90db1e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 104.461077][ T4755] RAX: ffffffffffffffda RBX: 000000000000550e RCX: 00007f8f8ffa8f19 [ 104.469101][ T4755] RDX: 00007f8f90db1ee0 RSI: 0000000000000000 RDI: 00007f8f90038160 [ 104.477270][ T4755] RBP: 000020000000cec0 R08: 00000000ffffffff R09: 0000000000000000 [ 104.485267][ T4755] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000006e00 [ 104.493260][ T4755] R13: 00007f8f90db1ee0 R14: 00007f8f90db1ea0 R15: 000020000000cdc0 [ 104.501270][ T4755] [ 104.604411][ T4753] FAULT_INJECTION: forcing a failure. [ 104.604411][ T4753] name failslab, interval 1, probability 5, space 0, times 96 [ 104.628305][ T4753] CPU: 0 PID: 4753 Comm: syz.4.91 Not tainted syzkaller #0 [ 104.635559][ T4753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 104.645638][ T4753] Call Trace: [ 104.648938][ T4753] [ 104.651889][ T4753] dump_stack_lvl+0x188/0x24e [ 104.656601][ T4753] ? show_regs_print_info+0x12/0x12 [ 104.661836][ T4753] ? load_image+0x410/0x410 [ 104.666384][ T4753] ? __might_sleep+0xd0/0xd0 [ 104.671012][ T4753] ? __lock_acquire+0x7ea0/0x7ea0 [ 104.676067][ T4753] ? __se_sys_memfd_create+0xee/0x340 [ 104.681462][ T4753] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.687560][ T4753] should_fail_ex+0x390/0x4c0 [ 104.692276][ T4753] should_failslab+0x5/0x20 [ 104.696806][ T4753] slab_pre_alloc_hook+0x59/0x300 [ 104.701863][ T4753] kmem_cache_alloc_lru+0x49/0x2e0 [ 104.706996][ T4753] ? shmem_alloc_inode+0x24/0x40 [ 104.711975][ T4753] shmem_alloc_inode+0x24/0x40 [ 104.716770][ T4753] ? shmem_match+0x160/0x160 [ 104.721384][ T4753] new_inode_pseudo+0x5f/0x1c0 [ 104.726185][ T4753] new_inode+0x25/0x1d0 [ 104.730465][ T4753] shmem_get_inode+0x327/0xbc0 [ 104.735337][ T4753] ? _raw_spin_unlock+0x24/0x40 [ 104.740240][ T4753] __shmem_file_setup+0x10b/0x290 [ 104.745303][ T4753] ? shmem_file_setup+0x13/0x30 [ 104.750200][ T4753] __se_sys_memfd_create+0x1e1/0x340 [ 104.755527][ T4753] do_syscall_64+0x4c/0xa0 [ 104.759979][ T4753] ? clear_bhb_loop+0x60/0xb0 [ 104.764689][ T4753] ? clear_bhb_loop+0x60/0xb0 [ 104.769395][ T4753] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.775369][ T4753] RIP: 0033:0x7f67233a8f19 [ 104.779811][ T4753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.799465][ T4753] RSP: 002b:00007f672419ae08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 104.807914][ T4753] RAX: ffffffffffffffda RBX: 00000000000005aa RCX: 00007f67233a8f19 [ 104.810960][ T4755] FAULT_INJECTION: forcing a failure. [ 104.810960][ T4755] name failslab, interval 1, probability 5, space 0, times 96 [ 104.815891][ T4753] RDX: 00007f672419aee0 RSI: 0000000000000000 RDI: 00007f6723438160 [ 104.815910][ T4753] RBP: 0000200000001000 R08: 00000000ffffffff R09: 0000000000000003 [ 104.815922][ T4753] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000080 [ 104.815933][ T4753] R13: 00007f672419aee0 R14: 00007f672419aea0 R15: 0000200000000180 [ 104.815958][ T4753] [ 104.974782][ T4755] CPU: 1 PID: 4755 Comm: syz.3.90 Not tainted syzkaller #0 [ 104.982042][ T4755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 104.992115][ T4755] Call Trace: [ 104.995407][ T4755] [ 104.998348][ T4755] dump_stack_lvl+0x188/0x24e [ 105.003057][ T4755] ? show_regs_print_info+0x12/0x12 [ 105.008283][ T4755] ? load_image+0x410/0x410 [ 105.012817][ T4755] ? __might_sleep+0xd0/0xd0 [ 105.017430][ T4755] ? __lock_acquire+0x7ea0/0x7ea0 [ 105.022490][ T4755] should_fail_ex+0x390/0x4c0 [ 105.027200][ T4755] should_failslab+0x5/0x20 [ 105.031726][ T4755] slab_pre_alloc_hook+0x59/0x300 [ 105.036769][ T4755] kmem_cache_alloc+0x56/0x2f0 [ 105.041558][ T4755] ? ptlock_alloc+0x1c/0x60 [ 105.046096][ T4755] ptlock_alloc+0x1c/0x60 [ 105.050455][ T4755] pte_alloc_one+0xc0/0x310 [ 105.055003][ T4755] ? pfn_modify_allowed+0x560/0x560 [ 105.060232][ T4755] ? count_memcg_event_mm+0x36b/0x3c0 [ 105.065636][ T4755] ? __lock_acquire+0x7ea0/0x7ea0 [ 105.070688][ T4755] ? count_memcg_event_mm+0x8a/0x3c0 [ 105.076023][ T4755] ? put_page+0x270/0x270 [ 105.080388][ T4755] __pte_alloc+0x21/0x150 [ 105.084751][ T4755] handle_mm_fault+0x34b1/0x3d40 [ 105.089708][ T4755] ? mt_find+0x157/0x830 [ 105.093994][ T4755] ? numa_migrate_prep+0x250/0x250 [ 105.099139][ T4755] ? lock_chain_count+0x20/0x20 [ 105.104031][ T4755] ? lock_mm_and_find_vma+0xae/0x2f0 [ 105.108584][ T4753] FAULT_INJECTION: forcing a failure. [ 105.108584][ T4753] name failslab, interval 1, probability 5, space 0, times 95 [ 105.109327][ T4755] do_user_addr_fault+0x5a9/0xbb0 [ 105.109367][ T4755] exc_page_fault+0x60/0x100 [ 105.131790][ T4755] asm_exc_page_fault+0x22/0x30 [ 105.136672][ T4755] RIP: 0033:0x7f8f8fe565ce [ 105.141109][ T4755] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 105.160743][ T4755] RSP: 002b:00007f8f90db1470 EFLAGS: 00010206 [ 105.166834][ T4755] RAX: 0000000001009001 RBX: 00007f8f90db1530 RCX: 0000000000000038 [ 105.174825][ T4755] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f8f90db15d0 [ 105.182820][ T4755] RBP: 0000000000000102 R08: 00007f8f85df7000 R09: 0000000001009000 [ 105.190814][ T4755] R10: 0000000000000000 R11: 00007f8f90db1540 R12: 0000000000000001 [ 105.198807][ T4755] R13: 00007f8f900587c0 R14: 0000000000000000 R15: 00007f8f90db15d0 [ 105.206818][ T4755] [ 105.209875][ T4753] CPU: 0 PID: 4753 Comm: syz.4.91 Not tainted syzkaller #0 [ 105.217105][ T4753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 105.227171][ T4753] Call Trace: [ 105.230457][ T4753] [ 105.233395][ T4753] dump_stack_lvl+0x188/0x24e [ 105.238086][ T4753] ? show_regs_print_info+0x12/0x12 [ 105.243288][ T4753] ? load_image+0x410/0x410 [ 105.247801][ T4753] ? __might_sleep+0xd0/0xd0 [ 105.252389][ T4753] ? __lock_acquire+0x7ea0/0x7ea0 [ 105.257425][ T4753] should_fail_ex+0x390/0x4c0 [ 105.262107][ T4753] should_failslab+0x5/0x20 [ 105.266610][ T4753] slab_pre_alloc_hook+0x59/0x300 [ 105.271636][ T4753] ? call_usermodehelper_setup+0x8a/0x260 [ 105.277362][ T4753] __kmem_cache_alloc_node+0x4f/0x270 [ 105.282753][ T4753] ? call_usermodehelper_setup+0x8a/0x260 [ 105.288486][ T4753] kmalloc_trace+0x26/0xe0 [ 105.292907][ T4753] call_usermodehelper_setup+0x8a/0x260 [ 105.298463][ T4753] ? __request_module+0xa00/0xa00 [ 105.303512][ T4753] __request_module+0x406/0xa00 [ 105.308399][ T4753] ? lock_chain_count+0x20/0x20 [ 105.313282][ T4753] ? copy_regset_to_user+0x1f0/0x1f0 [ 105.318575][ T4753] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 105.324823][ T4753] ? crypto_alg_lookup+0x2cf/0x350 [ 105.329946][ T4753] ? __up_read+0x2b4/0x6b0 [ 105.334391][ T4753] ? up_read+0x20/0x20 [ 105.338487][ T4753] ? __crypto_alg_lookup+0x48a/0x4c0 [ 105.343800][ T4753] crypto_alg_mod_lookup+0x96/0x570 [ 105.349036][ T4753] crypto_alloc_tfm_node+0x14e/0x360 [ 105.354356][ T4753] cryptd_alloc_skcipher+0x102/0x220 [ 105.359685][ T4753] ? pcrypt_init_padata+0x100/0x100 [ 105.364899][ T4753] ? __kmem_cache_alloc_node+0x19d/0x270 [ 105.370540][ T4753] ? crypto_create_tfm_node+0x73/0x380 [ 105.376000][ T4753] ? rcu_is_watching+0x11/0xa0 [ 105.380777][ T4753] simd_skcipher_init+0x63/0x140 [ 105.385750][ T4753] crypto_create_tfm_node+0x151/0x380 [ 105.391125][ T4753] ? crypto_alg_mod_lookup+0x1a9/0x570 [ 105.396589][ T4753] crypto_alloc_tfm_node+0x177/0x360 [ 105.401881][ T4753] fscrypt_prepare_key+0x89/0x350 [ 105.406925][ T4753] fscrypt_setup_v2_file_key+0x335/0x6f0 [ 105.412565][ T4753] ? refcount_inc+0x70/0x70 [ 105.417074][ T4753] ? fscrypt_find_master_key+0x6d4/0x7b0 [ 105.422728][ T4753] ? down_read+0x1a8/0x2d0 [ 105.427160][ T4753] fscrypt_setup_encryption_info+0x684/0xbf0 [ 105.433156][ T4753] ? fscrypt_get_encryption_info+0x440/0x440 [ 105.439175][ T4753] fscrypt_prepare_new_inode+0x213/0x2e0 [ 105.444846][ T4753] ? fscrypt_setup_encryption_info+0xbf0/0xbf0 [ 105.451115][ T4753] ? new_inode+0x1b9/0x1d0 [ 105.455660][ T4753] __ext4_new_inode+0x7aa/0x3b40 [ 105.460621][ T4753] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 105.466373][ T4753] ? dquot_initialize+0x20/0x20 [ 105.471230][ T4753] ? d_splice_alias+0x110/0x320 [ 105.476095][ T4753] ? ext4_lookup+0x305/0x710 [ 105.480713][ T4753] ext4_create+0x234/0x470 [ 105.485164][ T4753] ? ext4_lookup+0x710/0x710 [ 105.489772][ T4753] ? inode_permission+0xef/0x480 [ 105.494708][ T4753] ? bpf_lsm_inode_create+0x5/0x10 [ 105.499835][ T4753] ? security_inode_create+0xb3/0x100 [ 105.505250][ T4753] ? ext4_lookup+0x710/0x710 [ 105.509848][ T4753] path_openat+0x11b9/0x2f10 [ 105.514471][ T4753] ? do_filp_open+0x420/0x420 [ 105.519162][ T4753] do_filp_open+0x1ee/0x420 [ 105.523700][ T4753] ? vfs_tmpfile+0x490/0x490 [ 105.528308][ T4753] ? _raw_spin_unlock+0x24/0x40 [ 105.533159][ T4753] ? alloc_fd+0x590/0x640 [ 105.537499][ T4753] do_sys_openat2+0x14b/0x4f0 [ 105.542192][ T4753] ? do_sys_open+0xe0/0xe0 [ 105.546636][ T4753] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 105.552621][ T4753] ? lock_chain_count+0x20/0x20 [ 105.557479][ T4753] __x64_sys_openat+0x135/0x160 [ 105.562341][ T4753] do_syscall_64+0x4c/0xa0 [ 105.566777][ T4753] ? clear_bhb_loop+0x60/0xb0 [ 105.571459][ T4753] ? clear_bhb_loop+0x60/0xb0 [ 105.576145][ T4753] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.582058][ T4753] RIP: 0033:0x7f67233a8f19 [ 105.586472][ T4753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.606104][ T4753] RSP: 002b:00007f672419b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 105.614519][ T4753] RAX: ffffffffffffffda RBX: 00007f6723625fa0 RCX: 00007f67233a8f19 [ 105.622492][ T4753] RDX: 0000000000141442 RSI: 00002000000015c0 RDI: ffffffffffffff9c [ 105.630467][ T4753] RBP: 00007f6723437f6d R08: 0000000000000000 R09: 0000000000000000 [ 105.638467][ T4753] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000000 [ 105.646441][ T4753] R13: 00007f6723626038 R14: 00007f6723625fa0 R15: 00007ffd89602078 [ 105.654433][ T4753] [ 105.673756][ T4755] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 105.742570][ T4753] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 105.897460][ T4291] EXT4-fs (loop4): unmounting filesystem. [ 106.001689][ T4749] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 106.161615][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 106.193317][ T4749] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.220847][ T4749] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 106.247157][ T4749] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.274460][ T4749] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 106.289904][ T4749] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 106.299367][ T4749] usb 2-1: Product: syz [ 106.308036][ T4749] usb 2-1: Manufacturer: syz [ 106.350484][ T4777] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 106.368947][ T4749] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 106.369140][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 106.390343][ T4749] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 106.418470][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 106.448836][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 106.472316][ T14] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 106.491673][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.499733][ T14] usb 1-1: Product: syz [ 106.511895][ T14] usb 1-1: Manufacturer: syz [ 106.711601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 106.721608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 106.731583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 106.741584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 106.751591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 106.761585][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 106.771591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 106.781581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 106.791585][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 106.801583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 107.989459][ T14] usb 1-1: SerialNumber: syz [ 107.998323][ T14] usb 1-1: config 0 descriptor?? [ 108.031392][ T4750] usb 2-1: USB disconnect, device number 6 [ 108.060000][ T4750] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 108.092510][ T4750] garmin_gps 2-1:1.0: device disconnected [ 108.104860][ T4787] loop3: detected capacity change from 0 to 32768 [ 108.147329][ T4787] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 108.160364][ T4787] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 108.170736][ T4787] BTRFS info (device loop3): use zlib compression, level 3 [ 108.178136][ T4787] BTRFS info (device loop3): using free space tree [ 108.226858][ T14] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 108.436503][ T4787] BTRFS info (device loop3): enabling ssd optimizations [ 108.632497][ T26] audit: type=1800 audit(1794313874.333:4): pid=4787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.101" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 108.716222][ T4808] overlayfs: missing 'workdir' [ 109.069159][ T4750] usb 1-1: USB disconnect, device number 4 [ 109.142738][ T4288] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 109.320647][ T4811] loop1: detected capacity change from 0 to 4096 [ 109.458574][ T4815] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.536426][ T26] audit: type=1800 audit(1794313875.323:5): pid=4811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.103" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 109.670450][ T26] audit: type=1800 audit(1794313875.323:6): pid=4811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.103" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 109.732835][ T4820] FAULT_INJECTION: forcing a failure. [ 109.732835][ T4820] name failslab, interval 1, probability 5, space 0, times 92 [ 109.745693][ T4820] CPU: 1 PID: 4820 Comm: syz.4.102 Not tainted syzkaller #0 [ 109.753005][ T4820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 109.763150][ T4820] Call Trace: [ 109.763180][ T4820] [ 109.763189][ T4820] dump_stack_lvl+0x188/0x24e [ 109.774234][ T4820] ? lock_chain_count+0x20/0x20 [ 109.779122][ T4820] ? show_regs_print_info+0x12/0x12 [ 109.784357][ T4820] ? load_image+0x410/0x410 [ 109.788897][ T4820] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 109.794831][ T4820] should_fail_ex+0x390/0x4c0 [ 109.799555][ T4820] should_failslab+0x5/0x20 [ 109.804093][ T4820] slab_pre_alloc_hook+0x59/0x300 [ 109.809160][ T4820] ? hash_ipportnet4_add+0xf14/0x3360 [ 109.814580][ T4820] __kmem_cache_alloc_node+0x4f/0x270 [ 109.820008][ T4820] ? hash_ipportnet4_add+0xf14/0x3360 [ 109.825675][ T4820] __kmalloc+0xa3/0x240 [ 109.829889][ T4820] ? hash_ipportnet4_add+0x6d9/0x3360 [ 109.835386][ T4820] hash_ipportnet4_add+0xf14/0x3360 [ 109.840658][ T4820] ? ip_set_range_to_cidr+0x16a/0x1d0 [ 109.840697][ T4820] hash_ipportnet4_uadt+0xf5b/0x13a0 [ 109.840728][ T4820] ? hash_ipportnet4_uadt+0x13a0/0x13a0 [ 109.846271][ T4820] ? hash_ipportnet4_kadt+0x620/0x620 [ 109.862707][ T4820] call_ad+0x181/0xb00 [ 109.862745][ T4820] ? ip_set_ad+0x9c0/0x9c0 [ 109.862781][ T4820] ? __nla_parse+0x3c/0x50 [ 109.866980][ T4820] ip_set_ad+0x816/0x9c0 [ 109.867020][ T4820] ? ip_set_dump_done+0x310/0x310 [ 109.885376][ T4820] nfnetlink_rcv_msg+0xcab/0x1290 [ 109.890441][ T4820] ? nfnetlink_rcv_msg+0x224/0x1290 [ 109.895677][ T4820] ? nfnetlink_unbind+0x160/0x160 [ 109.900707][ T4820] ? kasan_save_free_info+0x27/0x40 [ 109.900775][ T4820] netlink_rcv_skb+0x1ef/0x440 [ 109.900800][ T4820] ? nfnetlink_unbind+0x160/0x160 [ 109.910878][ T4820] ? netlink_ack+0x1160/0x1160 [ 109.920703][ T4820] ? bpf_lsm_capable+0x5/0x10 [ 109.925413][ T4820] ? security_capable+0x85/0xb0 [ 109.930306][ T4820] nfnetlink_rcv+0x2b0/0x2470 [ 109.935021][ T4820] ? __local_bh_enable_ip+0x136/0x1c0 [ 109.940425][ T4820] ? _local_bh_enable+0xa0/0xa0 [ 109.945289][ T4820] ? __dev_queue_xmit+0x274/0x3a70 [ 109.945312][ T4820] ? __dev_queue_xmit+0x274/0x3a70 [ 109.945330][ T4820] ? __dev_queue_xmit+0x1496/0x3a70 [ 109.945353][ T4820] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 109.945384][ T4820] ? ref_tracker_free+0x682/0x830 [ 109.960921][ T4820] ? refcount_inc+0x70/0x70 [ 109.971458][ T4820] ? memcpy+0x3c/0x60 [ 109.971484][ T4820] ? __copy_skb_header+0x3ba/0x4f0 [ 109.971517][ T4820] ? __skb_clone+0x446/0x6c0 [ 109.971545][ T4820] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.971566][ T4820] ? __netlink_deliver_tap+0x7a9/0x7e0 [ 109.980032][ T4820] ? __lock_acquire+0x7ea0/0x7ea0 [ 109.980070][ T4820] ? netlink_deliver_tap+0x2e/0x1b0 [ 110.005763][ T4820] netlink_unicast+0x7ad/0x920 [ 110.005803][ T4820] netlink_sendmsg+0x8ad/0xbd0 [ 110.015752][ T4820] ? netlink_getsockopt+0x550/0x550 [ 110.025720][ T4820] ? apparmor_socket_sendmsg+0x8a/0x330 [ 110.025748][ T4820] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 110.031427][ T4820] ? security_socket_sendmsg+0x7c/0xa0 [ 110.042249][ T4820] ? netlink_getsockopt+0x550/0x550 [ 110.042279][ T4820] ____sys_sendmsg+0x5ed/0x9a0 [ 110.042309][ T4820] ? __sys_sendmsg_sock+0x30/0x30 [ 110.042328][ T4820] ? __import_iovec+0x306/0x510 [ 110.062492][ T4820] ? import_iovec+0x6f/0xa0 [ 110.067039][ T4820] ___sys_sendmsg+0x2a2/0x360 [ 110.071732][ T4820] ? __sys_sendmsg+0x2a0/0x2a0 [ 110.076578][ T4820] __se_sys_sendmsg+0x1c3/0x2b0 [ 110.081454][ T4820] ? __x64_sys_sendmsg+0x80/0x80 [ 110.086449][ T4820] ? lockdep_hardirqs_on+0x94/0x140 [ 110.091684][ T4820] do_syscall_64+0x4c/0xa0 [ 110.096131][ T4820] ? clear_bhb_loop+0x60/0xb0 [ 110.100840][ T4820] ? clear_bhb_loop+0x60/0xb0 [ 110.105551][ T4820] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.111474][ T4820] RIP: 0033:0x7f67233a8f19 [ 110.115940][ T4820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.135550][ T4820] RSP: 002b:00007f672419b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.143969][ T4820] RAX: ffffffffffffffda RBX: 00007f6723625fa0 RCX: 00007f67233a8f19 [ 110.143987][ T4820] RDX: 0000000000000080 RSI: 000020000001fd80 RDI: 0000000000000005 [ 110.143998][ T4820] RBP: 00007f6723437f6d R08: 0000000000000000 R09: 0000000000000000 [ 110.144008][ T4820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.144017][ T4820] R13: 00007f6723626038 R14: 00007f6723625fa0 R15: 00007ffd89602078 [ 110.144044][ T4820] [ 110.637189][ T4844] loop1: detected capacity change from 0 to 512 [ 110.655639][ T4844] EXT4-fs (loop1): Test dummy encryption mode enabled [ 110.707274][ T4844] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.110: inode has both inline data and extents flags [ 110.740983][ T4844] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.110: couldn't read orphan inode 15 (err -117) [ 110.815478][ T4848] Zero length message leads to an empty skb [ 110.836663][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 110.844322][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 110.871359][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.885685][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.897418][ T4844] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 110.986816][ T4844] FAULT_INJECTION: forcing a failure. [ 110.986816][ T4844] name failslab, interval 1, probability 5, space 0, times 90 [ 111.062274][ T4844] CPU: 1 PID: 4844 Comm: syz.1.110 Not tainted syzkaller #0 [ 111.069619][ T4844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 111.079704][ T4844] Call Trace: [ 111.083003][ T4844] [ 111.085951][ T4844] dump_stack_lvl+0x188/0x24e [ 111.090666][ T4844] ? show_regs_print_info+0x12/0x12 [ 111.095904][ T4844] ? load_image+0x410/0x410 [ 111.100449][ T4844] ? __might_sleep+0xd0/0xd0 [ 111.105077][ T4844] ? __lock_acquire+0x7ea0/0x7ea0 [ 111.110150][ T4844] should_fail_ex+0x390/0x4c0 [ 111.114874][ T4844] should_failslab+0x5/0x20 [ 111.119408][ T4844] slab_pre_alloc_hook+0x59/0x300 [ 111.124458][ T4844] kmem_cache_alloc+0x56/0x2f0 [ 111.129234][ T4844] ? mas_alloc_nodes+0x2ec/0x880 [ 111.134261][ T4844] mas_alloc_nodes+0x2ec/0x880 [ 111.139069][ T4844] mas_preallocate+0x162/0x3b0 [ 111.143874][ T4844] __vma_adjust+0x2ff/0x1d00 [ 111.148526][ T4844] ? validate_mm+0x2e0/0x2e0 [ 111.153165][ T4844] ? up_write+0x1b6/0x410 [ 111.157521][ T4844] ? anon_vma_clone+0x475/0x4c0 [ 111.162392][ T4844] __split_vma+0x3a2/0x4f0 [ 111.162426][ T4844] do_mas_align_munmap+0x399/0x12d0 [ 111.162464][ T4844] ? verify_lock_unused+0x140/0x140 [ 111.177304][ T4844] ? do_mas_munmap+0x2b0/0x2b0 [ 111.177346][ T4844] ? mtree_range_walk+0x664/0x780 [ 111.177381][ T4844] ? mas_walk+0x15f/0x180 [ 111.191535][ T4844] ? mas_find+0x1ba/0x220 [ 111.195879][ T4844] do_mas_munmap+0x240/0x2b0 [ 111.195920][ T4844] do_munmap+0xeb/0x140 [ 111.195941][ T4844] ? mtree_load+0x100/0xa70 [ 111.195961][ T4844] ? do_mas_align_munmap+0x12d0/0x12d0 [ 111.195980][ T4844] ? mtree_load+0x91f/0xa70 [ 111.196007][ T4844] ? mas_alloc_nodes+0x880/0x880 [ 111.196025][ T4844] ? rwsem_write_trylock+0x135/0x1c0 [ 111.196050][ T4844] mremap_to+0x310/0x5c0 [ 111.196072][ T4844] __se_sys_mremap+0x691/0x1120 [ 111.196096][ T4844] ? __ia32_sys_get_robust_list+0x100/0x100 [ 111.196122][ T4844] ? __x64_sys_mremap+0xc0/0xc0 [ 111.196143][ T4844] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 111.196170][ T4844] ? lock_chain_count+0x20/0x20 [ 111.196199][ T4844] ? lockdep_hardirqs_on+0x94/0x140 [ 111.196217][ T4844] ? __x64_sys_mremap+0x1c/0xc0 [ 111.196237][ T4844] do_syscall_64+0x4c/0xa0 [ 111.196260][ T4844] ? clear_bhb_loop+0x60/0xb0 [ 111.196282][ T4844] ? clear_bhb_loop+0x60/0xb0 [ 111.196307][ T4844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.196331][ T4844] RIP: 0033:0x7f8cebfa8f19 [ 111.196349][ T4844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.196364][ T4844] RSP: 002b:00007f8cecddc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 111.196383][ T4844] RAX: ffffffffffffffda RBX: 00007f8cec225fa0 RCX: 00007f8cebfa8f19 [ 111.196396][ T4844] RDX: 0000000000400000 RSI: 0000000000002000 RDI: 000020000020e000 [ 111.215107][ T4844] RBP: 00007f8cec037f6d R08: 000020000082a000 R09: 0000000000000000 [ 111.215122][ T4844] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 111.215132][ T4844] R13: 00007f8cec226038 R14: 00007f8cec225fa0 R15: 00007ffc53ed2398 [ 111.215159][ T4844] [ 111.410288][ T4844] FAULT_INJECTION: forcing a failure. [ 111.410288][ T4844] name failslab, interval 1, probability 5, space 0, times 89 [ 111.439189][ T4844] CPU: 1 PID: 4844 Comm: syz.1.110 Not tainted syzkaller #0 [ 111.446520][ T4844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 111.446537][ T4844] Call Trace: [ 111.446544][ T4844] [ 111.446553][ T4844] dump_stack_lvl+0x188/0x24e [ 111.446586][ T4844] ? show_regs_print_info+0x12/0x12 [ 111.446606][ T4844] ? load_image+0x410/0x410 [ 111.460089][ T4844] ? __might_sleep+0xd0/0xd0 [ 111.482004][ T4844] ? __lock_acquire+0x7ea0/0x7ea0 [ 111.487070][ T4844] ? __se_sys_memfd_create+0xee/0x340 [ 111.492478][ T4844] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.498586][ T4844] should_fail_ex+0x390/0x4c0 [ 111.503299][ T4844] should_failslab+0x5/0x20 [ 111.507839][ T4844] slab_pre_alloc_hook+0x59/0x300 [ 111.512895][ T4844] kmem_cache_alloc_lru+0x49/0x2e0 [ 111.518012][ T4844] ? shmem_alloc_inode+0x24/0x40 [ 111.522963][ T4844] shmem_alloc_inode+0x24/0x40 [ 111.522989][ T4844] ? shmem_match+0x160/0x160 [ 111.523009][ T4844] new_inode_pseudo+0x5f/0x1c0 [ 111.523034][ T4844] new_inode+0x25/0x1d0 [ 111.523055][ T4844] shmem_get_inode+0x327/0xbc0 [ 111.527973][ T4844] ? _raw_spin_unlock+0x24/0x40 [ 111.551277][ T4844] __shmem_file_setup+0x10b/0x290 [ 111.556337][ T4844] ? shmem_file_setup+0x13/0x30 [ 111.561217][ T4844] __se_sys_memfd_create+0x1e1/0x340 [ 111.566513][ T4844] do_syscall_64+0x4c/0xa0 [ 111.566541][ T4844] ? clear_bhb_loop+0x60/0xb0 [ 111.566565][ T4844] ? clear_bhb_loop+0x60/0xb0 [ 111.575635][ T4844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.575663][ T4844] RIP: 0033:0x7f8cebfa8f19 [ 111.575678][ T4844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.575691][ T4844] RSP: 002b:00007f8cecddbe08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 111.586227][ T4844] RAX: ffffffffffffffda RBX: 00000000000005aa RCX: 00007f8cebfa8f19 [ 111.586242][ T4844] RDX: 00007f8cecddbee0 RSI: 0000000000000000 RDI: 00007f8cec038160 [ 111.586253][ T4844] RBP: 0000200000001000 R08: 00000000ffffffff R09: 0000000000000003 [ 111.586263][ T4844] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000080 [ 111.586273][ T4844] R13: 00007f8cecddbee0 R14: 00007f8cecddbea0 R15: 0000200000000180 [ 111.586299][ T4844] [ 111.696329][ T4844] FAULT_INJECTION: forcing a failure. [ 111.696329][ T4844] name failslab, interval 1, probability 5, space 0, times 88 [ 111.726170][ T4858] loop3: detected capacity change from 0 to 256 [ 111.731660][ T4844] CPU: 1 PID: 4844 Comm: syz.1.110 Not tainted syzkaller #0 [ 111.739742][ T4844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 111.749822][ T4844] Call Trace: [ 111.753124][ T4844] [ 111.756080][ T4844] dump_stack_lvl+0x188/0x24e [ 111.760803][ T4844] ? show_regs_print_info+0x12/0x12 [ 111.766021][ T4844] ? load_image+0x410/0x410 [ 111.770541][ T4844] ? __might_sleep+0xd0/0xd0 [ 111.775139][ T4844] ? __lock_acquire+0x7ea0/0x7ea0 [ 111.775171][ T4844] should_fail_ex+0x390/0x4c0 [ 111.775196][ T4844] should_failslab+0x5/0x20 [ 111.775212][ T4844] slab_pre_alloc_hook+0x59/0x300 [ 111.775238][ T4844] kmem_cache_alloc_lru+0x49/0x2e0 [ 111.799597][ T4844] ? __d_alloc+0x2e/0x6e0 [ 111.803963][ T4844] __d_alloc+0x2e/0x6e0 [ 111.808156][ T4844] d_alloc_parallel+0xdc/0x1590 [ 111.813123][ T4844] ? __d_lookup+0x8b/0x7c0 [ 111.817566][ T4844] ? __lock_acquire+0x7ea0/0x7ea0 [ 111.822643][ T4844] ? __d_lookup+0x8b/0x7c0 [ 111.822667][ T4844] ? d_hash_and_lookup+0x1b0/0x1b0 [ 111.822684][ T4844] ? rwsem_write_trylock+0x135/0x1c0 [ 111.822707][ T4844] ? clear_nonspinnable+0x60/0x60 [ 111.842558][ T4844] path_openat+0x949/0x2f10 [ 111.847109][ T4844] ? kasan_set_track+0x60/0x70 [ 111.851890][ T4844] ? verify_lock_unused+0x140/0x140 [ 111.851924][ T4844] ? do_filp_open+0x420/0x420 [ 111.851961][ T4844] do_filp_open+0x1ee/0x420 [ 111.857309][ T4844] ? vfs_tmpfile+0x490/0x490 [ 111.871234][ T4844] ? _raw_spin_unlock+0x24/0x40 [ 111.876119][ T4844] ? alloc_fd+0x590/0x640 [ 111.880507][ T4844] do_sys_openat2+0x14b/0x4f0 [ 111.886370][ T4844] ? do_sys_open+0xe0/0xe0 [ 111.890978][ T4844] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 111.896969][ T4844] ? lock_chain_count+0x20/0x20 [ 111.896996][ T4844] __x64_sys_openat+0x135/0x160 [ 111.897021][ T4844] do_syscall_64+0x4c/0xa0 [ 111.897043][ T4844] ? clear_bhb_loop+0x60/0xb0 [ 111.906722][ T4844] ? clear_bhb_loop+0x60/0xb0 [ 111.920542][ T4844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.926449][ T4844] RIP: 0033:0x7f8cebfa8f19 [ 111.926472][ T4844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.926487][ T4844] RSP: 002b:00007f8cecddc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 111.926508][ T4844] RAX: ffffffffffffffda RBX: 00007f8cec225fa0 RCX: 00007f8cebfa8f19 [ 111.950663][ T4844] RDX: 0000000000141442 RSI: 00002000000015c0 RDI: ffffffffffffff9c [ 111.950682][ T4844] RBP: 00007f8cec037f6d R08: 0000000000000000 R09: 0000000000000000 [ 111.950692][ T4844] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000000 [ 111.950702][ T4844] R13: 00007f8cec226038 R14: 00007f8cec225fa0 R15: 00007ffc53ed2398 [ 111.950726][ T4844] [ 111.959639][ T4409] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 112.031276][ T4858] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.154575][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 112.209605][ T4409] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.252112][ T4409] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 112.293491][ T4409] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.336913][ T4409] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 112.364691][ T4409] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 112.381366][ T4409] usb 1-1: Product: syz [ 112.406511][ T4409] usb 1-1: Manufacturer: syz [ 112.429864][ T4853] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 112.444201][ T4409] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 112.466115][ T4409] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 112.523660][ T4856] loop4: detected capacity change from 0 to 32768 [ 112.566219][ T4856] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.114 (4856) [ 112.608459][ T4856] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 112.619753][ T4856] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 112.643648][ T4856] BTRFS info (device loop4): use zlib compression, level 3 [ 112.650977][ T4856] BTRFS info (device loop4): using free space tree [ 112.713926][ T4750] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 112.721685][ T129] usb 1-1: USB disconnect, device number 5 [ 112.750844][ T4864] loop3: detected capacity change from 0 to 4096 [ 112.760449][ T4856] BTRFS info (device loop4): enabling ssd optimizations [ 112.793881][ T129] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 112.804860][ T129] garmin_gps 1-1:1.0: device disconnected [ 112.831050][ T26] audit: type=1800 audit(1794313878.613:7): pid=4856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.114" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 112.906753][ T4883] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.923365][ T4750] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.936753][ T4884] overlayfs: missing 'workdir' [ 112.947391][ T26] audit: type=1800 audit(1794313878.733:8): pid=4864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.118" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 113.006336][ T4750] usb 2-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 113.016040][ T26] audit: type=1800 audit(1794313878.763:9): pid=4864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.118" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 113.070229][ T4750] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.099377][ T4291] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 113.147769][ T4750] usb-storage 2-1:1.0: USB Mass Storage device detected [ 113.244180][ T4750] usb-storage 2-1:1.0: Quirks match for vid 0451 pid 5416: 2 [ 113.404653][ T4750] usb 2-1: USB disconnect, device number 7 [ 114.197473][ T4895] loop3: detected capacity change from 0 to 32768 [ 114.228112][ T4895] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.121 (4895) [ 114.250280][ T4905] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 114.304269][ T4895] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 114.339727][ T4895] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 114.370208][ T4895] BTRFS info (device loop3): use zlib compression, level 3 [ 114.391617][ C1] net_ratelimit: 76 callbacks suppressed [ 114.406002][ T4895] BTRFS info (device loop3): using free space tree [ 114.463861][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 114.472774][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 114.524758][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.567718][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.628655][ T4895] BTRFS info (device loop3): enabling ssd optimizations [ 114.824753][ T4932] loop1: detected capacity change from 0 to 512 [ 114.869707][ T4932] EXT4-fs (loop1): Test dummy encryption mode enabled [ 114.922341][ T4932] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.126: inode has both inline data and extents flags [ 114.995835][ T4932] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.126: couldn't read orphan inode 15 (err -117) [ 115.075019][ T4932] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 115.249981][ T4288] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 115.588174][ T4932] FAULT_INJECTION: forcing a failure. [ 115.588174][ T4932] name failslab, interval 1, probability 5, space 0, times 86 [ 115.631675][ T4932] CPU: 1 PID: 4932 Comm: syz.1.126 Not tainted syzkaller #0 [ 115.639022][ T4932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 115.649085][ T4932] Call Trace: [ 115.652366][ T4932] [ 115.655299][ T4932] dump_stack_lvl+0x188/0x24e [ 115.659998][ T4932] ? show_regs_print_info+0x12/0x12 [ 115.665205][ T4932] ? load_image+0x410/0x410 [ 115.669715][ T4932] ? __might_sleep+0xd0/0xd0 [ 115.674310][ T4932] ? __lock_acquire+0x7ea0/0x7ea0 [ 115.679343][ T4932] ? do_syscall_64+0x4c/0xa0 [ 115.683945][ T4932] should_fail_ex+0x390/0x4c0 [ 115.688639][ T4932] should_failslab+0x5/0x20 [ 115.693147][ T4932] slab_pre_alloc_hook+0x59/0x300 [ 115.698185][ T4932] ? __request_module+0x338/0xa00 [ 115.703224][ T4932] __kmem_cache_alloc_node+0x4f/0x270 [ 115.708649][ T4932] ? __request_module+0x338/0xa00 [ 115.713686][ T4932] __kmalloc_node_track_caller+0xa0/0x240 [ 115.719422][ T4932] kstrdup+0x37/0x70 [ 115.723362][ T4932] __request_module+0x338/0xa00 [ 115.728226][ T4932] ? copy_regset_to_user+0x1f0/0x1f0 [ 115.733529][ T4932] ? up_read+0x20/0x20 [ 115.737604][ T4932] ? cryptomgr_notify+0x605/0xa40 [ 115.742651][ T4932] ? blocking_notifier_call_chain+0x18c/0x1b0 [ 115.748728][ T4932] crypto_alg_mod_lookup+0x2f5/0x570 [ 115.754021][ T4932] crypto_alloc_tfm_node+0x14e/0x360 [ 115.759315][ T4932] cryptd_alloc_skcipher+0x102/0x220 [ 115.764614][ T4932] ? pcrypt_init_padata+0x100/0x100 [ 115.769838][ T4932] ? __kmem_cache_alloc_node+0x19d/0x270 [ 115.775479][ T4932] ? crypto_create_tfm_node+0x73/0x380 [ 115.780942][ T4932] ? rcu_is_watching+0x11/0xa0 [ 115.785716][ T4932] simd_skcipher_init+0x63/0x140 [ 115.790664][ T4932] crypto_create_tfm_node+0x151/0x380 [ 115.796039][ T4932] ? crypto_alg_mod_lookup+0x1a9/0x570 [ 115.801500][ T4932] crypto_alloc_tfm_node+0x177/0x360 [ 115.806807][ T4932] fscrypt_prepare_key+0x89/0x350 [ 115.811867][ T4932] fscrypt_setup_v2_file_key+0x335/0x6f0 [ 115.817513][ T4932] ? refcount_inc+0x70/0x70 [ 115.822025][ T4932] ? fscrypt_find_master_key+0x6d4/0x7b0 [ 115.827721][ T4932] ? down_read+0x1a8/0x2d0 [ 115.832154][ T4932] fscrypt_setup_encryption_info+0x684/0xbf0 [ 115.838149][ T4932] ? fscrypt_get_encryption_info+0x440/0x440 [ 115.844151][ T4932] fscrypt_prepare_new_inode+0x213/0x2e0 [ 115.849803][ T4932] ? fscrypt_setup_encryption_info+0xbf0/0xbf0 [ 115.855972][ T4932] ? new_inode+0x1b9/0x1d0 [ 115.860397][ T4932] __ext4_new_inode+0x7aa/0x3b40 [ 115.865361][ T4932] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 115.871094][ T4932] ? dquot_initialize+0x20/0x20 [ 115.875945][ T4932] ? d_splice_alias+0x110/0x320 [ 115.880806][ T4932] ? ext4_lookup+0x305/0x710 [ 115.885427][ T4932] ext4_create+0x234/0x470 [ 115.889862][ T4932] ? ext4_lookup+0x710/0x710 [ 115.894458][ T4932] ? inode_permission+0xef/0x480 [ 115.899392][ T4932] ? bpf_lsm_inode_create+0x5/0x10 [ 115.904511][ T4932] ? security_inode_create+0xb3/0x100 [ 115.909901][ T4932] ? ext4_lookup+0x710/0x710 [ 115.914498][ T4932] path_openat+0x11b9/0x2f10 [ 115.919129][ T4932] ? do_filp_open+0x420/0x420 [ 115.923830][ T4932] do_filp_open+0x1ee/0x420 [ 115.928346][ T4932] ? vfs_tmpfile+0x490/0x490 [ 115.932958][ T4932] ? _raw_spin_unlock+0x24/0x40 [ 115.937847][ T4932] ? alloc_fd+0x590/0x640 [ 115.942191][ T4932] do_sys_openat2+0x14b/0x4f0 [ 115.946878][ T4932] ? do_sys_open+0xe0/0xe0 [ 115.951302][ T4932] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 115.957309][ T4932] ? lock_chain_count+0x20/0x20 [ 115.962172][ T4932] __x64_sys_openat+0x135/0x160 [ 115.967034][ T4932] do_syscall_64+0x4c/0xa0 [ 115.971459][ T4932] ? clear_bhb_loop+0x60/0xb0 [ 115.976150][ T4932] ? clear_bhb_loop+0x60/0xb0 [ 115.980840][ T4932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.986749][ T4932] RIP: 0033:0x7f8cebfa8f19 [ 115.991172][ T4932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.010788][ T4932] RSP: 002b:00007f8cecddc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 116.019204][ T4932] RAX: ffffffffffffffda RBX: 00007f8cec225fa0 RCX: 00007f8cebfa8f19 [ 116.019228][ T4932] RDX: 0000000000141442 RSI: 00002000000015c0 RDI: ffffffffffffff9c [ 116.035149][ T4932] RBP: 00007f8cec037f6d R08: 0000000000000000 R09: 0000000000000000 [ 116.035165][ T4932] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000000 [ 116.051103][ T4932] R13: 00007f8cec226038 R14: 00007f8cec225fa0 R15: 00007ffc53ed2398 [ 116.051137][ T4932] [ 116.063472][ T4282] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 116.132778][ T4932] FAULT_INJECTION: forcing a failure. [ 116.132778][ T4932] name failslab, interval 1, probability 5, space 0, times 85 [ 116.173084][ T4932] CPU: 0 PID: 4932 Comm: syz.1.126 Not tainted syzkaller #0 [ 116.180424][ T4932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 116.190516][ T4932] Call Trace: [ 116.193790][ T4932] [ 116.193802][ T4932] dump_stack_lvl+0x188/0x24e [ 116.193835][ T4932] ? show_regs_print_info+0x12/0x12 [ 116.193860][ T4932] ? load_image+0x410/0x410 [ 116.211173][ T4932] ? __might_sleep+0xd0/0xd0 [ 116.215773][ T4932] ? __lock_acquire+0x7ea0/0x7ea0 [ 116.220829][ T4932] ? kernel_text_address+0x9c/0xd0 [ 116.225982][ T4932] should_fail_ex+0x390/0x4c0 [ 116.230696][ T4932] should_failslab+0x5/0x20 [ 116.235244][ T4932] slab_pre_alloc_hook+0x59/0x300 [ 116.240301][ T4932] ? __kthread_create_on_node+0x129/0x540 [ 116.246054][ T4932] __kmem_cache_alloc_node+0x4f/0x270 [ 116.251442][ T4932] ? __kthread_create_on_node+0x129/0x540 [ 116.251478][ T4932] kmalloc_trace+0x26/0xe0 [ 116.257326][ T4932] ? cryptomgr_notify+0xa40/0xa40 [ 116.266818][ T4932] __kthread_create_on_node+0x129/0x540 [ 116.266851][ T4932] ? kthread_create_on_node+0x140/0x140 [ 116.272502][ T4932] ? blocking_notifier_call_chain+0x103/0x1b0 [ 116.272535][ T4932] ? ext4_create+0x234/0x470 [ 116.272551][ T4932] ? path_openat+0x11b9/0x2f10 [ 116.293698][ T4932] ? do_filp_open+0x1ee/0x420 [ 116.298398][ T4932] ? do_sys_openat2+0x14b/0x4f0 [ 116.303287][ T4932] ? __x64_sys_openat+0x135/0x160 [ 116.308343][ T4932] ? do_syscall_64+0x4c/0xa0 [ 116.312966][ T4932] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.319076][ T4932] ? cryptomgr_notify+0xa40/0xa40 [ 116.324110][ T4932] ? cryptomgr_notify+0xa40/0xa40 [ 116.329161][ T4932] kthread_create_on_node+0xe8/0x140 [ 116.334494][ T4932] ? tsk_fork_get_node+0x60/0x60 [ 116.339499][ T4932] ? cryptomgr_notify+0x519/0xa40 [ 116.344555][ T4932] cryptomgr_notify+0x843/0xa40 [ 116.349443][ T4932] blocking_notifier_call_chain+0x103/0x1b0 [ 116.355342][ T4932] crypto_alg_mod_lookup+0x306/0x570 [ 116.355367][ T4932] crypto_alloc_tfm_node+0x14e/0x360 [ 116.355395][ T4932] cryptd_alloc_skcipher+0x102/0x220 [ 116.365936][ T4932] ? pcrypt_init_padata+0x100/0x100 [ 116.365973][ T4932] ? __kmem_cache_alloc_node+0x19d/0x270 [ 116.376423][ T4932] ? crypto_create_tfm_node+0x73/0x380 [ 116.376449][ T4932] ? rcu_is_watching+0x11/0xa0 [ 116.387532][ T4932] simd_skcipher_init+0x63/0x140 [ 116.387564][ T4932] crypto_create_tfm_node+0x151/0x380 [ 116.397488][ T4932] ? crypto_alg_mod_lookup+0x1a9/0x570 [ 116.408287][ T4932] crypto_alloc_tfm_node+0x177/0x360 [ 116.408319][ T4932] fscrypt_prepare_key+0x89/0x350 [ 116.413724][ T4932] fscrypt_setup_v2_file_key+0x335/0x6f0 [ 116.413755][ T4932] ? refcount_inc+0x70/0x70 [ 116.413777][ T4932] ? fscrypt_find_master_key+0x6d4/0x7b0 [ 116.413809][ T4932] ? down_read+0x1a8/0x2d0 [ 116.424594][ T4932] fscrypt_setup_encryption_info+0x684/0xbf0 [ 116.424633][ T4932] ? fscrypt_get_encryption_info+0x440/0x440 [ 116.434750][ T4932] fscrypt_prepare_new_inode+0x213/0x2e0 [ 116.434782][ T4932] ? fscrypt_setup_encryption_info+0xbf0/0xbf0 [ 116.434811][ T4932] ? new_inode+0x1b9/0x1d0 [ 116.445335][ T4932] __ext4_new_inode+0x7aa/0x3b40 [ 116.445383][ T4932] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 116.456974][ T4932] ? dquot_initialize+0x20/0x20 [ 116.456997][ T4932] ? d_splice_alias+0x110/0x320 [ 116.457018][ T4932] ? ext4_lookup+0x305/0x710 [ 116.457039][ T4932] ext4_create+0x234/0x470 [ 116.457070][ T4932] ? ext4_lookup+0x710/0x710 [ 116.467588][ T4932] ? inode_permission+0xef/0x480 [ 116.478210][ T4932] ? bpf_lsm_inode_create+0x5/0x10 [ 116.506387][ T4932] ? security_inode_create+0xb3/0x100 [ 116.517048][ T4932] ? ext4_lookup+0x710/0x710 [ 116.521669][ T4932] path_openat+0x11b9/0x2f10 [ 116.526313][ T4932] ? do_filp_open+0x420/0x420 [ 116.531045][ T4932] do_filp_open+0x1ee/0x420 [ 116.535587][ T4932] ? vfs_tmpfile+0x490/0x490 [ 116.540224][ T4932] ? _raw_spin_unlock+0x24/0x40 [ 116.545104][ T4932] ? alloc_fd+0x590/0x640 [ 116.549471][ T4932] do_sys_openat2+0x14b/0x4f0 [ 116.554178][ T4932] ? do_sys_open+0xe0/0xe0 [ 116.558628][ T4932] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 116.564646][ T4932] ? lock_chain_count+0x20/0x20 [ 116.569535][ T4932] __x64_sys_openat+0x135/0x160 [ 116.574425][ T4932] do_syscall_64+0x4c/0xa0 [ 116.578867][ T4932] ? clear_bhb_loop+0x60/0xb0 [ 116.583615][ T4932] ? clear_bhb_loop+0x60/0xb0 [ 116.588326][ T4932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.594252][ T4932] RIP: 0033:0x7f8cebfa8f19 [ 116.598689][ T4932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.618321][ T4932] RSP: 002b:00007f8cecddc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 116.626761][ T4932] RAX: ffffffffffffffda RBX: 00007f8cec225fa0 RCX: 00007f8cebfa8f19 [ 116.634758][ T4932] RDX: 0000000000141442 RSI: 00002000000015c0 RDI: ffffffffffffff9c [ 116.642754][ T4932] RBP: 00007f8cec037f6d R08: 0000000000000000 R09: 0000000000000000 [ 116.650752][ T4932] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000000 [ 116.658732][ T4932] R13: 00007f8cec226038 R14: 00007f8cec225fa0 R15: 00007ffc53ed2398 [ 116.658771][ T4932] [ 116.674386][ T4282] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.713879][ T4282] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 116.767409][ T4282] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.812815][ T4282] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 116.852146][ T4282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 116.895943][ T4282] usb 5-1: Product: syz [ 116.900158][ T4282] usb 5-1: Manufacturer: syz [ 116.932926][ T4944] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 116.952891][ T4282] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 116.991272][ T4932] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 117.035406][ T4282] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 117.046292][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 117.195601][ T4282] usb 5-1: USB disconnect, device number 3 [ 117.222194][ T4282] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 117.244034][ T4282] garmin_gps 5-1:1.0: device disconnected [ 117.431473][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 117.455819][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.470431][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.271646][ T4355] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 118.343892][ T4977] loop3: detected capacity change from 0 to 32768 [ 118.388256][ T4977] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.139 (4977) [ 118.464279][ T4977] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 118.480413][ T4355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 118.517697][ T4977] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 118.529980][ T4355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 118.567283][ T4977] BTRFS info (device loop3): use zlib compression, level 3 [ 118.574968][ T4355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 118.595945][ T4977] BTRFS info (device loop3): using free space tree [ 118.637650][ T4355] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 118.648447][ C0] ipvlan_process_outbound: 2 callbacks suppressed [ 118.700579][ T4355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.711848][ T4355] usb 2-1: Product: syz [ 118.716180][ T4355] usb 2-1: Manufacturer: syz [ 118.720802][ T4355] usb 2-1: SerialNumber: syz [ 118.730453][ T4355] usb 2-1: config 0 descriptor?? [ 118.866954][ T4977] BTRFS info (device loop3): enabling ssd optimizations [ 118.948691][ T4355] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 118.952348][ T4282] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 119.133785][ T4947] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 119.173571][ T4282] usb 5-1: Using ep0 maxpacket: 32 [ 119.182915][ T7] usb 2-1: USB disconnect, device number 8 [ 119.189817][ T4282] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.208041][ T4282] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 119.233878][ T4282] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 119.243974][ T4282] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 119.257968][ T4294] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.268355][ T4294] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.283292][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.293134][ T4282] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.303801][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.311128][ T4282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 119.319477][ T4282] usb 5-1: SerialNumber: syz [ 119.328928][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 119.331653][ T4947] usb 1-1: Using ep0 maxpacket: 8 [ 119.345920][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 119.378202][ T4947] usb 1-1: config 0 has no interfaces? [ 119.392060][ T4999] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 119.399347][ T4999] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 119.416297][ T4947] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 119.434189][ T4282] hub 5-1:1.0: bad descriptor, ignoring hub [ 119.442087][ T4282] hub: probe of 5-1:1.0 failed with error -5 [ 119.448815][ T4282] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 119.494550][ T4947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.506235][ T4947] usb 1-1: config 0 descriptor?? [ 119.566393][ T4288] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 119.724001][ T4282] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 119.751593][ C1] net_ratelimit: 54 callbacks suppressed [ 119.841603][ T5022] rxe_eth0 speed is unknown, defaulting to 1000 [ 119.853882][ T4282] usb 5-1: USB disconnect, device number 4 [ 119.959200][ T4370] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.018891][ T5027] loop1: detected capacity change from 0 to 1024 [ 120.100596][ T4370] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.278990][ T4370] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.673483][ T5036] hfsplus: xattr searching failed [ 120.692544][ T5036] hfsplus: xattr searching failed [ 120.758270][ T5036] hfsplus: b-tree write err: -5, ino 3 [ 120.947123][ T4370] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.443995][ T4295] Bluetooth: hci1: command 0x0409 tx timeout [ 121.804376][ T4816] usb 1-1: USB disconnect, device number 6 [ 121.926153][ T5022] chnl_net:caif_netlink_parms(): no params data found [ 121.977153][ T5063] loop0: detected capacity change from 0 to 256 [ 122.011921][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 122.050409][ T5063] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 122.111280][ T5067] netlink: 32 bytes leftover after parsing attributes in process `syz.4.159'. [ 122.231596][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 122.238480][ T7] usb 2-1: config 0 has no interfaces? [ 122.255399][ T7] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 122.302224][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.339507][ T7] usb 2-1: config 0 descriptor?? [ 122.556490][ T7] usb 2-1: USB disconnect, device number 9 [ 122.701775][ T4947] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 122.804977][ T5088] loop4: detected capacity change from 0 to 256 [ 122.861856][ T4749] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 122.882603][ T5088] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.897693][ T5088] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 122.907855][ T4947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 122.920096][ T4947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 122.950544][ T4947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 122.979085][ T5088] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 122.998954][ T5022] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.006442][ T5022] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.015907][ T4947] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 123.031887][ T5088] exFAT-fs (loop4): failed to load alloc-bitmap [ 123.038258][ T5088] exFAT-fs (loop4): failed to recognize exfat type [ 123.041642][ T4749] usb 1-1: device descriptor read/64, error -71 [ 123.052709][ T4947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.060746][ T4947] usb 4-1: Product: syz [ 123.083615][ T5022] device bridge_slave_0 entered promiscuous mode [ 123.097033][ T4947] usb 4-1: Manufacturer: syz [ 123.109922][ T4947] usb 4-1: SerialNumber: syz [ 123.139366][ T4947] usb 4-1: config 0 descriptor?? [ 123.231747][ T5022] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.238980][ T5022] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.265380][ T5022] device bridge_slave_1 entered promiscuous mode [ 123.278479][ T5092] CIFS: Attempting to mount \\127.0.0.1\share [ 123.316943][ T4749] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 123.378128][ T4947] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 123.481823][ T4749] usb 1-1: device descriptor read/64, error -71 [ 123.501204][ T5022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.512386][ T4295] Bluetooth: hci1: command 0x041b tx timeout [ 123.576676][ T4947] usb 4-1: USB disconnect, device number 2 [ 123.601963][ T4749] usb usb1-port1: attempt power cycle [ 123.647673][ T5022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.752388][ T4816] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 123.829614][ T5022] team0: Port device team_slave_0 added [ 123.851237][ T5022] team0: Port device team_slave_1 added [ 123.941667][ T4816] usb 5-1: Using ep0 maxpacket: 8 [ 123.948569][ T4816] usb 5-1: config 0 has no interfaces? [ 123.954547][ T4816] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 123.987891][ T4816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.010867][ T5022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.018465][ T4749] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 124.026117][ T5022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.058760][ T4816] usb 5-1: config 0 descriptor?? [ 124.066570][ T5022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.082752][ T4749] usb 1-1: device descriptor read/8, error -71 [ 124.097097][ T5092] CIFS: VFS: cifs_mount failed w/return code = -112 [ 124.135778][ T5022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.168137][ T5022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.238576][ T5022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.361742][ T4749] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 124.422398][ T4749] usb 1-1: device descriptor read/8, error -71 [ 124.535589][ T5022] device hsr_slave_0 entered promiscuous mode [ 124.542225][ T4749] usb usb1-port1: unable to enumerate USB device [ 124.573618][ T5022] device hsr_slave_1 entered promiscuous mode [ 124.602387][ T5022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.621808][ T5022] Cannot create hsr debugfs directory [ 124.733196][ T4370] device hsr_slave_0 left promiscuous mode [ 124.769060][ T4370] device hsr_slave_1 left promiscuous mode [ 124.782547][ T4370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.800116][ T4370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.821426][ T4370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.838061][ T4370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.857037][ T4370] device bridge_slave_1 left promiscuous mode [ 124.871573][ C0] net_ratelimit: 58 callbacks suppressed [ 124.877184][ T4370] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.925128][ T4370] device bridge_slave_0 left promiscuous mode [ 124.932831][ T4370] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.005240][ T4370] device veth1_macvtap left promiscuous mode [ 125.012761][ T4370] device veth0_macvtap left promiscuous mode [ 125.019575][ T4370] device veth1_vlan left promiscuous mode [ 125.026402][ T4370] device veth0_vlan left promiscuous mode [ 125.539369][ T4370] bond1 (unregistering): Released all slaves [ 125.591697][ T4295] Bluetooth: hci1: command 0x040f tx timeout [ 125.775985][ T5131] loop1: detected capacity change from 0 to 512 [ 125.807330][ T5131] EXT4-fs: inline encryption not supported [ 125.889555][ T5131] ------------[ cut here ]------------ [ 125.895378][ T5131] EA inode 11 i_nlink=0 [ 125.901475][ T5131] WARNING: CPU: 1 PID: 5131 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x4fe/0x560 [ 125.916181][ T5131] Modules linked in: [ 125.920095][ T5131] CPU: 1 PID: 5131 Comm: syz.1.173 Not tainted syzkaller #0 [ 125.927440][ T5131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 125.937791][ T5131] RIP: 0010:ext4_xattr_inode_update_ref+0x4fe/0x560 [ 125.944518][ T5131] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 b5 85 9b ff 49 8b 34 24 48 c7 c7 c0 b0 c0 8a 44 89 fa e8 92 83 15 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 4c 8b 74 24 08 4c 8b 64 24 10 [ 125.964201][ T5131] RSP: 0018:ffffc900032e7380 EFLAGS: 00010246 [ 125.970291][ T5131] RAX: 3d5e2bc685155c00 RBX: ffff888071d24ae0 RCX: 0000000000080000 [ 125.978352][ T5131] RDX: ffffc9000c7c9000 RSI: 0000000000010443 RDI: 0000000000010444 [ 125.986436][ T5131] RBP: ffffc900032e7470 R08: ffffc900032e7007 R09: 1ffff9200065ce00 [ 125.994463][ T5131] R10: dffffc0000000000 R11: fffff5200065ce01 R12: ffff888071d24928 [ 126.002486][ T5131] R13: dffffc0000000000 R14: ffff888071d248e8 R15: 0000000000000000 [ 126.002508][ T5131] FS: 00007f8cecddc6c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 126.002526][ T5131] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.002541][ T5131] CR2: 00007f5b46e2f9f6 CR3: 000000005ee9c000 CR4: 00000000003506e0 [ 126.002558][ T5131] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 126.002570][ T5131] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 126.002582][ T5131] Call Trace: [ 126.002590][ T5131] [ 126.002607][ T5131] ? ext4_xattr_block_csum+0x560/0x560 [ 126.002647][ T5131] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 126.002674][ T5131] ext4_xattr_inode_dec_ref_all+0xadc/0x1050 [ 126.002708][ T5131] ? errseq_check+0x3c/0x70 [ 126.019645][ T5131] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 126.034181][ T5131] ? __ext4_journal_ensure_credits+0x450/0x450 [ 126.053547][ T5131] ext4_xattr_delete_inode+0xada/0xca0 [ 126.061911][ T5131] ? ext4_expand_extra_isize_ea+0x1d50/0x1d50 [ 126.074112][ T5131] ? __ext4_mark_inode_dirty+0x52e/0x7b0 [ 126.084244][ T5131] ext4_evict_inode+0xc1e/0x10e0 [ 126.084277][ T5131] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 126.090645][ T5131] ? do_raw_spin_unlock+0x11d/0x230 [ 126.090672][ T5131] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 126.090693][ T5131] evict+0x4b2/0x9d0 [ 126.090722][ T5131] ? proc_nr_inodes+0x2f0/0x2f0 [ 126.090742][ T5131] ? do_raw_spin_unlock+0x11d/0x230 [ 126.090762][ T5131] ? _raw_spin_unlock+0x24/0x40 [ 126.090785][ T5131] ? iput+0x79f/0x9c0 [ 126.090813][ T5131] ext4_orphan_cleanup+0xdfe/0x1650 [ 126.090841][ T5131] ? ext4_orphan_file_block_trigger+0x430/0x430 [ 126.090864][ T5131] ? ext4_orphan_del+0xc90/0xc90 [ 126.090885][ T5131] ? ext4_register_li_request+0x17e/0x920 [ 126.090905][ T5131] ? errseq_check_and_advance+0x62/0x120 [ 126.090936][ T5131] ext4_fill_super+0x6cd4/0x77b0 [ 126.090986][ T5131] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 126.091033][ T5131] ? set_blocksize+0x1d0/0x470 [ 126.091057][ T5131] ? sb_set_blocksize+0xa5/0xe0 [ 126.091079][ T5131] get_tree_bdev+0x3e6/0x610 [ 126.139206][ T5131] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 126.149515][ T5131] vfs_get_tree+0x88/0x270 [ 126.158715][ T5131] do_new_mount+0x247/0xa50 [ 126.169897][ T5131] __se_sys_mount+0x2e3/0x3d0 [ 126.202111][ T5131] ? __x64_sys_mount+0xc0/0xc0 [ 126.217340][ T5131] ? lockdep_hardirqs_on+0x94/0x140 [ 126.226575][ T5131] ? __x64_sys_mount+0x1c/0xc0 [ 126.236560][ T5131] do_syscall_64+0x4c/0xa0 [ 126.245725][ T5131] ? clear_bhb_loop+0x60/0xb0 [ 126.245754][ T5131] ? clear_bhb_loop+0x60/0xb0 [ 126.255128][ T5131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.261030][ T5131] RIP: 0033:0x7f8cebfaa18a [ 126.261054][ T5131] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.285142][ T5131] RSP: 002b:00007f8cecddbe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 126.285170][ T5131] RAX: ffffffffffffffda RBX: 00007f8cecddbee0 RCX: 00007f8cebfaa18a [ 126.301631][ T5131] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 00007f8cecddbea0 [ 126.309633][ T5131] RBP: 0000200000000000 R08: 00007f8cecddbee0 R09: 0000000000000008 [ 126.317693][ T5131] R10: 0000000000000008 R11: 0000000000000246 R12: 0000200000000040 [ 126.325762][ T5131] R13: 00007f8cecddbea0 R14: 000000000000048d R15: 000000000000002c [ 126.333831][ T5131] [ 126.336883][ T5131] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 126.344165][ T5131] CPU: 1 PID: 5131 Comm: syz.1.173 Not tainted syzkaller #0 [ 126.351490][ T5131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 126.361556][ T5131] Call Trace: [ 126.364855][ T5131] [ 126.367784][ T5131] dump_stack_lvl+0x188/0x24e [ 126.372467][ T5131] ? memcpy+0x3c/0x60 [ 126.376442][ T5131] ? show_regs_print_info+0x12/0x12 [ 126.381637][ T5131] ? load_image+0x410/0x410 [ 126.386137][ T5131] panic+0x2d3/0x710 [ 126.390033][ T5131] ? bpf_jit_dump+0xd0/0xd0 [ 126.391822][ T4352] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 126.392370][ C0] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 126.392389][ C0] kcov: kcov_start: t = ffff88802be0bc00, size = 262144, area = ffffc90002312000 [ 126.392418][ C0] kcov: kcov_move_area: ffffc90017904000 1048576 <= ffffc90002312000 8 [ 126.392668][ C0] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 126.392684][ C0] kcov: kcov_start: t = ffff8880187d3c00, size = 262144, area = ffffc90002312000 [ 126.392711][ C0] kcov: kcov_move_area: ffffc90017904000 1048576 <= ffffc90002312000 8 [ 126.425590][ T5096] kcov: kcov_task_exit: t = ffff88807a253c00, kcov->t = ffff88807a253c00 [ 126.461415][ T5131] __warn+0x2f8/0x4f0 [ 126.465402][ T5131] ? ext4_xattr_inode_update_ref+0x4fe/0x560 [ 126.471421][ T5131] ? ext4_xattr_inode_update_ref+0x4fe/0x560 [ 126.477440][ T5131] report_bug+0x2ba/0x4f0 [ 126.481801][ T5131] ? ext4_xattr_inode_update_ref+0x4fe/0x560 [ 126.487792][ T5131] handle_bug+0x3a/0x70 [ 126.491943][ T5131] exc_invalid_op+0x16/0x40 [ 126.496443][ T5131] asm_exc_invalid_op+0x16/0x20 [ 126.501307][ T5131] RIP: 0010:ext4_xattr_inode_update_ref+0x4fe/0x560 [ 126.507900][ T5131] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 b5 85 9b ff 49 8b 34 24 48 c7 c7 c0 b0 c0 8a 44 89 fa e8 92 83 15 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 4c 8b 74 24 08 4c 8b 64 24 10 [ 126.527511][ T5131] RSP: 0018:ffffc900032e7380 EFLAGS: 00010246 [ 126.533579][ T5131] RAX: 3d5e2bc685155c00 RBX: ffff888071d24ae0 RCX: 0000000000080000 [ 126.541545][ T5131] RDX: ffffc9000c7c9000 RSI: 0000000000010443 RDI: 0000000000010444 [ 126.549521][ T5131] RBP: ffffc900032e7470 R08: ffffc900032e7007 R09: 1ffff9200065ce00 [ 126.557489][ T5131] R10: dffffc0000000000 R11: fffff5200065ce01 R12: ffff888071d24928 [ 126.565471][ T5131] R13: dffffc0000000000 R14: ffff888071d248e8 R15: 0000000000000000 [ 126.573463][ T5131] ? ext4_xattr_block_csum+0x560/0x560 [ 126.578936][ T5131] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 126.585005][ T5131] ext4_xattr_inode_dec_ref_all+0xadc/0x1050 [ 126.590993][ T5131] ? errseq_check+0x3c/0x70 [ 126.595500][ T5131] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 126.601144][ T5131] ? __ext4_journal_ensure_credits+0x450/0x450 [ 126.607309][ T5131] ext4_xattr_delete_inode+0xada/0xca0 [ 126.612780][ T5131] ? ext4_expand_extra_isize_ea+0x1d50/0x1d50 [ 126.618849][ T5131] ? __ext4_mark_inode_dirty+0x52e/0x7b0 [ 126.624483][ T5131] ext4_evict_inode+0xc1e/0x10e0 [ 126.629422][ T5131] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 126.635313][ T5131] ? do_raw_spin_unlock+0x11d/0x230 [ 126.640530][ T5131] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 126.646450][ T5131] evict+0x4b2/0x9d0 [ 126.650358][ T5131] ? proc_nr_inodes+0x2f0/0x2f0 [ 126.655210][ T5131] ? do_raw_spin_unlock+0x11d/0x230 [ 126.660426][ T5131] ? _raw_spin_unlock+0x24/0x40 [ 126.665276][ T5131] ? iput+0x79f/0x9c0 [ 126.669287][ T5131] ext4_orphan_cleanup+0xdfe/0x1650 [ 126.674494][ T5131] ? ext4_orphan_file_block_trigger+0x430/0x430 [ 126.680738][ T5131] ? ext4_orphan_del+0xc90/0xc90 [ 126.685681][ T5131] ? ext4_register_li_request+0x17e/0x920 [ 126.691399][ T5131] ? errseq_check_and_advance+0x62/0x120 [ 126.697054][ T5131] ext4_fill_super+0x6cd4/0x77b0 [ 126.702025][ T5131] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 126.708291][ T5131] ? set_blocksize+0x1d0/0x470 [ 126.713058][ T5131] ? sb_set_blocksize+0xa5/0xe0 [ 126.717903][ T5131] get_tree_bdev+0x3e6/0x610 [ 126.722522][ T5131] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 126.728791][ T5131] vfs_get_tree+0x88/0x270 [ 126.733232][ T5131] do_new_mount+0x247/0xa50 [ 126.737740][ T5131] __se_sys_mount+0x2e3/0x3d0 [ 126.742426][ T5131] ? __x64_sys_mount+0xc0/0xc0 [ 126.747190][ T5131] ? lockdep_hardirqs_on+0x94/0x140 [ 126.752387][ T5131] ? __x64_sys_mount+0x1c/0xc0 [ 126.757184][ T5131] do_syscall_64+0x4c/0xa0 [ 126.761628][ T5131] ? clear_bhb_loop+0x60/0xb0 [ 126.766302][ T5131] ? clear_bhb_loop+0x60/0xb0 [ 126.770978][ T5131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.776872][ T5131] RIP: 0033:0x7f8cebfaa18a [ 126.781307][ T5131] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.800918][ T5131] RSP: 002b:00007f8cecddbe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 126.809334][ T5131] RAX: ffffffffffffffda RBX: 00007f8cecddbee0 RCX: 00007f8cebfaa18a [ 126.817326][ T5131] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 00007f8cecddbea0 [ 126.825316][ T5131] RBP: 0000200000000000 R08: 00007f8cecddbee0 R09: 0000000000000008 [ 126.833306][ T5131] R10: 0000000000000008 R11: 0000000000000246 R12: 0000200000000040 [ 126.841295][ T5131] R13: 00007f8cecddbea0 R14: 000000000000048d R15: 000000000000002c [ 126.849288][ T5131] [ 126.852590][ T5131] Kernel Offset: disabled [ 126.856961][ T5131] Rebooting in 86400 seconds..