last executing test programs: 12.011604613s ago: executing program 3 (id=1888): openat$snapshot(0xffffff9c, &(0x7f0000000480), 0x1, 0x0) 9.958991394s ago: executing program 3 (id=1893): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='typec_fusb302 0x2', 0x11) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/i2c-dev/i2c-1/device/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='typec_fusb', 0xa) 8.881609761s ago: executing program 2 (id=1895): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='10', 0x2) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/interval\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) write(0xffffffffffffffff, &(0x7f0000000300)='1', 0x1) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 8.815541682s ago: executing program 0 (id=1896): ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) keyctl$assume_authority(0x10, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x1000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0xc, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) pselect6(0x40, &(0x7f0000000180)={0x6, 0x3, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f0000000440)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 8.813952932s ago: executing program 3 (id=1897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x355, &(0x7f0000000500)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x80) openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x3, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 8.712399365s ago: executing program 2 (id=1898): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0xfff8, 0x8, 0x0, 0x1, r1}, 0x0) 8.544213929s ago: executing program 2 (id=1899): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 7.349559698s ago: executing program 3 (id=1900): socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x20341, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x3, 0x407, 0x8, 0x801003e, 0x80, '\v\b\x00', 0x9, 0xfffffff5}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x12) r2 = dup(r1) read$FUSE(r2, &(0x7f0000001b80)={0x2020}, 0x2020) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xc100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000000145802, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x103381) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) r5 = socket(0x2c, 0x803, 0xffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000005b80)={'ip6gre0\x00', 0x0}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x21, r6, 0x8, 0xffff) r7 = dup(r4) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000480)={{0x6, 0x6, 0x4a7, 0x6, 'syz1\x00', 0x6}, 0x5, 0x3, 0xb4, r6, 0x7, 0x3, 'syz1\x00', &(0x7f0000000180)=['\x00z\x05c\xeap\xeb\x029\xf4\xfd\tocQ;\xfa\xf4\x19\xe2\xdd@NTg\xe8\xd1\xa4\xcf<*\xd8\x98Q>\x97Q*7\xaa\xb9\xee\x95\x96\xbf\f\"\xbdE%\xed\xe6\xb8\x05\x80\x9d\xb2\x87n\xd5\xd8\x10\xcc<\xb1\x19\xce\xe0;\x85\x06\xa9(\xa1\a\xd1\xe3\r\xaa\f\xca#\x93+\xd7~\x9fI\x82h\xcb\xd6\x9a\xd3\x12\xfd\xfb/@\xd3\b\xdf\xc0\xe4ry\x81\xfdX\xa2\xa4\xa3})\x7f\xf3\'\xd3PeY\xd8Zp', '^\x00', '#\x00', '\x00', '-\x00', ':]))', '\x00\x00\x01\x00\x00\x00\x00\x00\x00'], 0x90}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 7.201870342s ago: executing program 0 (id=1902): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='file1\x00', 0x42, 0x1ff) ftruncate(r1, 0x1000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='file2\x00', 0x42, 0x1ff) ftruncate(r2, 0x1000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='file3\x00', 0x42, 0x1ff) ftruncate(r3, 0x1000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev/loop0\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./dev/loop1\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./dev/loop2\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/loop3\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r3) r8 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r8, &(0x7f0000001100)='md0\x00', 0x4) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/md0\x00', 0x2, 0x0) ioctl(r9, 0x40480923, &(0x7f0000001300)="000000005a00000003000000000000000500000000040000040000000300000000000000010000000000000000000000030000000400000000000000000000000000000000100000") ioctl(r9, 0x400c0930, 0x0) 7.084056105s ago: executing program 2 (id=1903): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000a80)={0x8, 0xd, 0x4, 0x400, 0x0, {}, {0x7, 0x2, 0x3f, 0x48, 0x35, 0x6, "1027e665"}, 0x5f17, 0x4, {}, 0x10001}) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, &(0x7f0000000880)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000b00)={0x19, 0x1, {0x7, @usage=0xa60000000000, 0x0, 0x3, 0x80000000, 0x10001, 0x6000000, 0xffffffffffffffff, 0x84, @struct={0x3, 0x6}, 0x5, 0x100, [0x1000, 0x3, 0x7, 0x1, 0x342648d2, 0x1]}, {0x4, @struct={0x2, 0x2}, 0x0, 0x400, 0x7, 0xa, 0x2, 0xfffffffffffffff9, 0x420, @usage=0x9, 0x3, 0x40, [0xfff, 0x5, 0x8, 0xffff, 0x6, 0x192f3f7c]}, {0xdbc, @usage=0x3ff, 0x0, 0xfffffffffffff110, 0x8, 0x7, 0x51d, 0x9, 0xc0, @usage=0xe00000000, 0xf46, 0x9, [0x0, 0x8, 0xc3a, 0x0, 0x10, 0x6]}, {0xfffffffffffffae6, 0xfff, 0x800}}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000780)=ANY=[@ANYRESHEX=r8, @ANYRESOCT=r3, @ANYRESDEC=r7, @ANYRESDEC=r5]) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r1, r10, &(0x7f0000000200)={0x0, 0xbc38, 0x400, 0x3, 0xb2, 0x0, r1}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1819, 0x0, 0x1, 0x8002ad, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x1, 0x9, 0x102, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x200, 0x3, 0x800102c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x1000, 0x2, 0x21b, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r9, '\x00', {0x1, 0x46a, 0x0, 0x0}}, 0x0) 5.085923204s ago: executing program 1 (id=1904): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1e7}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7, 0xf0}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x20000000) 4.951143577s ago: executing program 3 (id=1905): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000a80)={0x8, 0xd, 0x4, 0x400, 0x0, {}, {0x7, 0x2, 0x3f, 0x48, 0x35, 0x6, "1027e665"}, 0x5f17, 0x4, {}, 0x10001}) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, &(0x7f0000000880), &(0x7f0000000100), &(0x7f0000000140)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1, 0x7ffffd, 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={0x0}}, 0x0) r4 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x38, 0x0, &(0x7f00007d0000)) openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x2, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x6, 0x1, 0x2800, 0x2, 0xbb6, 0x0, 0x28, {0x80008, 0xffffffff}, 0xd0, 0x9}}) 4.606090656s ago: executing program 0 (id=1906): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='typec_fusb302 0x2', 0x11) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/i2c-dev/i2c-1/device/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='typec_fusb302 0', 0xf) 4.471204819s ago: executing program 1 (id=1907): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='10', 0x2) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/interval\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) write(0xffffffffffffffff, &(0x7f0000000300)='1', 0x1) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 4.385382221s ago: executing program 0 (id=1908): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x355, &(0x7f0000000500)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x80) openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x3, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 4.081204109s ago: executing program 1 (id=1909): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) write(0xffffffffffffffff, &(0x7f0000000340), 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10120, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) syz_open_dev$vcsn(0x0, 0xd0f, 0x103000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sk_skb}, 0x94) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.380170801s ago: executing program 0 (id=1910): ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) keyctl$assume_authority(0x10, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x1000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0xc, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) pselect6(0x40, &(0x7f0000000180)={0x6, 0x3, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f0000000440)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 2.379746971s ago: executing program 1 (id=1911): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 1.846831764s ago: executing program 2 (id=1912): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x44) write(0xffffffffffffffff, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$nci(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="e87d1120c34370074c8c3159e585e1e7d9d64a51aed756c6943ef9fd32f2845cbdf2adf9b97e6be3d8dea2bee1471e88037c2ffb589116b46549ed728fa80200000000000000565d0879d80203c98a72320180f58b97c9e7006bc20e6abd9264e308eca7ef78d98a2d6b410d2b15e6e0"], 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init() writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) openat$snapshot(0xffffff9c, &(0x7f0000000480), 0x1, 0x0) 1.637357199s ago: executing program 3 (id=1913): socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x20341, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x3, 0x407, 0x8, 0x801003e, 0x80, '\v\b\x00', 0x9, 0xfffffff5}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x12) r2 = dup(r1) read$FUSE(r2, &(0x7f0000001b80)={0x2020}, 0x2020) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xc100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000000145802, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x103381) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) r5 = socket(0x2c, 0x803, 0xffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000005b80)={'ip6gre0\x00', 0x0}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x21, r6, 0x8, 0xffff) r7 = dup(r4) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000480)={{0x6, 0x6, 0x4a7, 0x6, 'syz1\x00', 0x6}, 0x5, 0x3, 0xb4, r6, 0x7, 0x3, 'syz1\x00', &(0x7f0000000180)=['\x00z\x05c\xeap\xeb\x029\xf4\xfd\tocQ;\xfa\xf4\x19\xe2\xdd@NTg\xe8\xd1\xa4\xcf<*\xd8\x98Q>\x97Q*7\xaa\xb9\xee\x95\x96\xbf\f\"\xbdE%\xed\xe6\xb8\x05\x80\x9d\xb2\x87n\xd5\xd8\x10\xcc<\xb1\x19\xce\xe0;\x85\x06\xa9(\xa1\a\xd1\xe3\r\xaa\f\xca#\x93+\xd7~\x9fI\x82h\xcb\xd6\x9a\xd3\x12\xfd\xfb/@\xd3\b\xdf\xc0\xe4ry\x81\xfdX\xa2\xa4\xa3})\x7f\xf3\'\xd3PeY\xd8Zp', '^\x00', '#\x00', '\x00', '-\x00', ':]))', '\x00\x00\x01\x00\x00\x00\x00\x00\x00'], 0x90}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 364.75588ms ago: executing program 0 (id=1914): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='file1\x00', 0x42, 0x1ff) ftruncate(r1, 0x1000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='file2\x00', 0x42, 0x1ff) ftruncate(r2, 0x1000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='file3\x00', 0x42, 0x1ff) ftruncate(r3, 0x1000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev/loop0\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./dev/loop1\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./dev/loop2\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/loop3\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r3) r8 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r8, &(0x7f0000001100)='md0\x00', 0x4) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/md0\x00', 0x2, 0x0) ioctl(r9, 0x40140921, &(0x7f0000001400)="0000000007000000000000000000000006000000") ioctl(r9, 0x400c0930, 0x0) 321.132122ms ago: executing program 2 (id=1915): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1e7}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7, 0xf0}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x20000000) 268.204023ms ago: executing program 1 (id=1916): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='typec_fusb302 0x2', 0x11) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/i2c-dev/i2c-1/device/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='typec_fusb302 0', 0xf) 0s ago: executing program 1 (id=1917): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='10', 0x2) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/interval\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/times\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1', 0x1) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) kernel console output (not intermixed with test programs): tirq work is pending, handler #140!!! [ 177.633184][ T6859] FAT-fs (loop0): Directory bread(block 68) failed [ 177.639860][ T6859] FAT-fs (loop0): Directory bread(block 69) failed [ 177.667559][ T6859] FAT-fs (loop0): Directory bread(block 70) failed [ 177.683672][ T6859] FAT-fs (loop0): Directory bread(block 71) failed [ 177.732610][ T6859] FAT-fs (loop0): Directory bread(block 72) failed [ 177.768853][ T6859] FAT-fs (loop0): Directory bread(block 73) failed [ 179.137916][ T6875] loop0: detected capacity change from 0 to 2048 [ 179.254681][ T6875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.287805][ T6875] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.513049][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.718531][ T6884] rt1719: probe of 0-0049 failed with error -5 [ 179.759551][ T6884] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 180.047962][ T6886] tipc: Enabled bearer , priority 0 [ 180.063751][ T6884] binder: 6883:6884 ioctl c0306201 0 returned -14 [ 180.114717][ T6885] tipc: Disabling bearer [ 180.500877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 180.790893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 180.890879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 180.920877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 180.990868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 181.120879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 181.150861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 181.160873][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 181.180878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 182.205199][ T6898] loop1: detected capacity change from 0 to 256 [ 182.401773][ T6898] FAT-fs (loop1): Directory bread(block 64) failed [ 182.414724][ T6898] FAT-fs (loop1): Directory bread(block 65) failed [ 182.422507][ T6898] FAT-fs (loop1): Directory bread(block 66) failed [ 182.429410][ T6898] FAT-fs (loop1): Directory bread(block 67) failed [ 182.436971][ T6898] FAT-fs (loop1): Directory bread(block 68) failed [ 182.444199][ T6898] FAT-fs (loop1): Directory bread(block 69) failed [ 182.451549][ T6898] FAT-fs (loop1): Directory bread(block 70) failed [ 182.459784][ T6898] FAT-fs (loop1): Directory bread(block 71) failed [ 182.491494][ T6898] FAT-fs (loop1): Directory bread(block 72) failed [ 182.536676][ T6898] FAT-fs (loop1): Directory bread(block 73) failed [ 184.369281][ T6915] loop2: detected capacity change from 0 to 2048 [ 184.461989][ T6915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.511209][ T6915] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.239307][ T6915] syz.2.351 (6915) used greatest stack depth: 20792 bytes left [ 185.485743][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.898888][ T6940] tipc: Enabled bearer , priority 0 [ 185.950447][ T6938] tipc: Disabling bearer [ 185.969497][ T6942] block device autoloading is deprecated and will be removed. [ 187.338501][ T6956] syzkaller0: entered promiscuous mode [ 187.344425][ T6956] syzkaller0: entered allmulticast mode [ 190.688195][ T6960] loop3: detected capacity change from 0 to 2048 [ 194.511608][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.518164][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.279704][ T6993] tipc: Enabling of bearer rejected, failed to enable media [ 195.710570][ T7001] loop2: detected capacity change from 0 to 2048 [ 195.740096][ T7000] syzkaller0: entered promiscuous mode [ 195.749338][ T7000] syzkaller0: entered allmulticast mode [ 195.792497][ T7001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.849501][ T7001] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.977041][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.540087][ T7019] syz.0.379 uses obsolete (PF_INET,SOCK_PACKET) [ 202.051236][ T7032] tipc: Enabling of bearer rejected, already enabled [ 202.892221][ T7037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.385'. [ 202.989025][ T7039] mtrr: base(0x61616161000) is not aligned on a size(0x61616161000) boundary [ 204.272056][ T7057] virtio-fs: tag not found [ 204.681704][ T6852] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 204.931048][ T6852] usb 2-1: Using ep0 maxpacket: 32 [ 205.047485][ T6852] usb 2-1: config 0 has no interfaces? [ 205.146788][ T6852] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 205.184063][ T6852] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 205.231414][ T6852] usb 2-1: Product: syz [ 205.315075][ T6852] usb 2-1: Manufacturer: syz [ 205.350420][ T6852] usb 2-1: SerialNumber: syz [ 205.474619][ T6852] usb 2-1: config 0 descriptor?? [ 205.531196][ T7067] tipc: Enabled bearer , priority 0 [ 205.845968][ T7058] tipc: Disabling bearer [ 207.634423][ T6852] usb 2-1: USB disconnect, device number 3 [ 210.024346][ T7100] tipc: Enabled bearer , priority 0 [ 210.602877][ T7099] tipc: Disabling bearer [ 211.953810][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 212.084029][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 212.090157][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 212.116429][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 212.176206][ T7132] loop0: detected capacity change from 0 to 32768 [ 212.257081][ T7132] loop1: detected capacity change from 0 to 32768 [ 212.381906][ T7138] loop2: detected capacity change from 0 to 32768 [ 212.554035][ T7132] loop3: detected capacity change from 0 to 32768 [ 216.375515][ T7157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.573539][ T7158] tipc: Enabled bearer , priority 0 [ 216.669737][ T7149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.683947][ T7165] syz_tun: entered allmulticast mode [ 216.747974][ T7164] syz_tun: left allmulticast mode [ 216.782814][ T7150] tipc: Disabling bearer [ 218.703786][ T7193] tipc: Enabled bearer , priority 0 [ 218.844236][ T7191] tipc: Disabling bearer [ 219.091562][ T7202] ieee802154 phy0 wpan0: encryption failed: -22 [ 221.627772][ T7225] tipc: Enabled bearer , priority 0 [ 221.663765][ T7224] tipc: Disabling bearer [ 222.845063][ T5787] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 224.486049][ T7254] syzkaller0: entered promiscuous mode [ 224.528795][ T7254] syzkaller0: entered allmulticast mode [ 224.583027][ T7257] tipc: Enabled bearer , priority 0 [ 224.662968][ T7253] tipc: Resetting bearer [ 224.834086][ T7253] tipc: Disabling bearer [ 225.168470][ T7261] typec_fusb302 0-0022: I2C/SMBus block functionality not supported! [ 225.211775][ T7261] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22 [ 225.459376][ T7263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.597138][ T7263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.655369][ T7263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.390433][ T7283] netlink: 36 bytes leftover after parsing attributes in process `syz.0.463'. [ 227.558649][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'. [ 228.562371][ T7285] tipc: Enabling of bearer rejected, already enabled [ 235.028589][ T7274] syz.3.460 (7274): drop_caches: 3 [ 235.198234][ T7316] loop3: detected capacity change from 0 to 256 [ 235.373277][ T7316] FAT-fs (loop3): Directory bread(block 64) failed [ 235.403948][ T7316] FAT-fs (loop3): Directory bread(block 65) failed [ 235.415213][ T7316] FAT-fs (loop3): Directory bread(block 66) failed [ 235.453327][ T7316] FAT-fs (loop3): Directory bread(block 67) failed [ 235.469632][ T7316] FAT-fs (loop3): Directory bread(block 68) failed [ 235.501355][ T7316] FAT-fs (loop3): Directory bread(block 69) failed [ 235.508745][ T7316] FAT-fs (loop3): Directory bread(block 70) failed [ 235.523175][ T7316] FAT-fs (loop3): Directory bread(block 71) failed [ 235.535560][ T7316] FAT-fs (loop3): Directory bread(block 72) failed [ 235.542689][ T7316] FAT-fs (loop3): Directory bread(block 73) failed [ 238.858356][ T7345] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.868390][ T7345] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.877569][ T7345] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.886611][ T7345] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.965484][ T7345] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.974843][ T7345] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.984524][ T7345] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.993588][ T7345] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.201084][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 239.242680][ T7348] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.251686][ T7348] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.260520][ T7348] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.269379][ T7348] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.373439][ T7348] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.382769][ T7348] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.392179][ T7348] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.401247][ T7348] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.443814][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 239.461484][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 239.541487][ T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 239.569588][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.627371][ T8] usb 2-1: config 0 descriptor?? [ 239.650264][ T7347] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 239.693559][ T8] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 240.160532][ T7356] tipc: Enabling of bearer rejected, already enabled [ 240.601480][ T7363] loop0: detected capacity change from 0 to 256 [ 240.672246][ T7363] FAT-fs (loop0): Directory bread(block 64) failed [ 240.719968][ T7363] FAT-fs (loop0): Directory bread(block 65) failed [ 240.747778][ T7363] FAT-fs (loop0): Directory bread(block 66) failed [ 240.798421][ T7363] FAT-fs (loop0): Directory bread(block 67) failed [ 240.834754][ T7363] FAT-fs (loop0): Directory bread(block 68) failed [ 240.873509][ T7363] FAT-fs (loop0): Directory bread(block 69) failed [ 240.899779][ T7363] FAT-fs (loop0): Directory bread(block 70) failed [ 240.971008][ T7363] FAT-fs (loop0): Directory bread(block 71) failed [ 240.978009][ T7363] FAT-fs (loop0): Directory bread(block 72) failed [ 241.008446][ T7363] FAT-fs (loop0): Directory bread(block 73) failed [ 242.539723][ T6820] usb 2-1: USB disconnect, device number 4 [ 242.997082][ T7380] syzkaller0: entered promiscuous mode [ 243.092502][ T7380] syzkaller0: entered allmulticast mode [ 243.644038][ T7389] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.063731][ T7389] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.779080][ T7389] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.896836][ T7402] loop1: detected capacity change from 0 to 256 [ 246.933288][ T7402] FAT-fs (loop1): Directory bread(block 64) failed [ 246.961521][ T7402] FAT-fs (loop1): Directory bread(block 65) failed [ 246.982626][ T7402] FAT-fs (loop1): Directory bread(block 66) failed [ 247.014209][ T7402] FAT-fs (loop1): Directory bread(block 67) failed [ 247.042340][ T7402] FAT-fs (loop1): Directory bread(block 68) failed [ 247.064866][ T7402] FAT-fs (loop1): Directory bread(block 69) failed [ 247.072591][ T7402] FAT-fs (loop1): Directory bread(block 70) failed [ 247.093593][ T7402] FAT-fs (loop1): Directory bread(block 71) failed [ 247.101558][ T7402] FAT-fs (loop1): Directory bread(block 72) failed [ 247.113936][ T7389] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.168313][ T7402] FAT-fs (loop1): Directory bread(block 73) failed [ 248.844896][ T7407] netlink: 76 bytes leftover after parsing attributes in process `syz.0.500'. [ 248.955205][ T7389] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.999572][ T7389] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.139674][ T7389] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.209668][ T7389] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.219516][ T7410] kvm: pic: non byte read [ 249.225304][ T7410] kvm: pic: non byte read [ 249.244905][ T7410] kvm: pic: level sensitive irq not supported [ 249.245049][ T7410] kvm: pic: non byte read [ 249.291496][ T7410] kvm: pic: level sensitive irq not supported [ 249.291588][ T7410] kvm: pic: non byte read [ 249.341491][ T7410] kvm: pic: level sensitive irq not supported [ 249.341576][ T7410] kvm: pic: non byte read [ 249.426533][ T7410] kvm: pic: level sensitive irq not supported [ 249.426591][ T7410] kvm: pic: non byte read [ 249.458457][ T7410] kvm: pic: level sensitive irq not supported [ 249.458514][ T7410] kvm: pic: non byte read [ 249.481741][ T7410] kvm: pic: level sensitive irq not supported [ 249.481839][ T7410] kvm: pic: non byte read [ 249.499414][ T7410] kvm: pic: level sensitive irq not supported [ 249.499490][ T7410] kvm: pic: non byte read [ 249.517802][ T7410] kvm: pic: level sensitive irq not supported [ 249.517879][ T7410] kvm: pic: non byte read [ 249.529888][ T7410] kvm: pic: level sensitive irq not supported [ 249.530165][ T7410] kvm: pic: level sensitive irq not supported [ 250.083261][ T7422] tipc: Enabling of bearer rejected, already enabled [ 250.367032][ T7428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.391388][ T7428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.736765][ T7433] loop3: detected capacity change from 0 to 256 [ 250.801267][ T7433] FAT-fs (loop3): Directory bread(block 64) failed [ 250.839185][ T7433] FAT-fs (loop3): Directory bread(block 65) failed [ 250.894146][ T7433] FAT-fs (loop3): Directory bread(block 66) failed [ 250.950050][ T7433] FAT-fs (loop3): Directory bread(block 67) failed [ 250.979420][ T7433] FAT-fs (loop3): Directory bread(block 68) failed [ 251.002990][ T7433] FAT-fs (loop3): Directory bread(block 69) failed [ 251.020103][ T7433] FAT-fs (loop3): Directory bread(block 70) failed [ 251.136799][ T7433] FAT-fs (loop3): Directory bread(block 71) failed [ 251.237801][ T7433] FAT-fs (loop3): Directory bread(block 72) failed [ 251.352980][ T7433] FAT-fs (loop3): Directory bread(block 73) failed [ 252.620368][ T7450] usbip-vudc usbip-vudc.0: gadget not bound [ 252.962877][ T7453] syzkaller0: entered promiscuous mode [ 252.991017][ T7453] syzkaller0: entered allmulticast mode [ 253.043952][ T7454] tipc: Enabled bearer , priority 0 [ 253.093941][ T7452] tipc: Resetting bearer [ 253.205844][ T7452] tipc: Disabling bearer [ 254.814906][ T7486] loop0: detected capacity change from 0 to 256 [ 255.681475][ T7486] FAT-fs (loop0): Directory bread(block 64) failed [ 255.729952][ T7486] FAT-fs (loop0): Directory bread(block 65) failed [ 255.749154][ T7486] FAT-fs (loop0): Directory bread(block 66) failed [ 255.789741][ T7486] FAT-fs (loop0): Directory bread(block 67) failed [ 255.828395][ T7486] FAT-fs (loop0): Directory bread(block 68) failed [ 255.858279][ T7486] FAT-fs (loop0): Directory bread(block 69) failed [ 255.889621][ T7486] FAT-fs (loop0): Directory bread(block 70) failed [ 255.936702][ T7486] FAT-fs (loop0): Directory bread(block 71) failed [ 255.946432][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.963380][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.983134][ T7486] FAT-fs (loop0): Directory bread(block 72) failed [ 255.990027][ T7486] FAT-fs (loop0): Directory bread(block 73) failed [ 256.220515][ T7496] netlink: 36 bytes leftover after parsing attributes in process `syz.1.527'. [ 256.861400][ T7496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.527'. [ 257.243652][ T7502] syzkaller0: entered promiscuous mode [ 257.265075][ T7502] syzkaller0: entered allmulticast mode [ 257.331413][ T7505] tipc: Enabled bearer , priority 0 [ 257.375077][ T7499] tipc: Resetting bearer [ 257.475861][ T7499] tipc: Disabling bearer [ 257.997380][ T7520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'. [ 259.737449][ T7531] loop1: detected capacity change from 0 to 256 [ 259.845746][ T7531] FAT-fs (loop1): Directory bread(block 64) failed [ 259.894590][ T7531] FAT-fs (loop1): Directory bread(block 65) failed [ 259.934365][ T7531] FAT-fs (loop1): Directory bread(block 66) failed [ 259.956177][ T7531] FAT-fs (loop1): Directory bread(block 67) failed [ 259.976850][ T7531] FAT-fs (loop1): Directory bread(block 68) failed [ 259.990238][ T7531] FAT-fs (loop1): Directory bread(block 69) failed [ 260.010667][ T7531] FAT-fs (loop1): Directory bread(block 70) failed [ 260.049607][ T7531] FAT-fs (loop1): Directory bread(block 71) failed [ 260.068254][ T7531] FAT-fs (loop1): Directory bread(block 72) failed [ 260.088327][ T7531] FAT-fs (loop1): Directory bread(block 73) failed [ 261.312838][ T7552] tipc: Enabling of bearer rejected, failed to enable media [ 262.261119][ T6820] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 262.451071][ T6820] usb 2-1: Using ep0 maxpacket: 32 [ 262.534065][ T6820] usb 2-1: unable to get BOS descriptor or descriptor too short [ 262.555067][ T6820] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 262.563962][ T6820] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 262.572914][ T6820] usb 2-1: config 14 has no interface number 0 [ 262.579222][ T6820] usb 2-1: config 14 has no interface number 1 [ 262.593723][ T6820] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 262.609451][ T6820] usb 2-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 262.668788][ T6820] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 262.699772][ T6820] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.736223][ T6820] usb 2-1: config 14 interface 57 has no altsetting 0 [ 262.754851][ T6820] usb 2-1: config 14 interface 228 has no altsetting 0 [ 262.788390][ T6820] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 262.827761][ T6820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.837057][ T6820] usb 2-1: Product: syz [ 262.852565][ T6820] usb 2-1: Manufacturer: syz [ 262.857642][ T6820] usb 2-1: SerialNumber: syz [ 263.338769][ T6820] legousbtower 2-1:14.57: interrupt endpoints not found [ 263.790983][ T6820] legousbtower 2-1:14.228: interrupt endpoints not found [ 264.689626][ T7577] loop2: detected capacity change from 0 to 256 [ 264.897636][ T7577] FAT-fs (loop2): Directory bread(block 64) failed [ 264.915471][ T7577] FAT-fs (loop2): Directory bread(block 65) failed [ 264.933562][ T7577] FAT-fs (loop2): Directory bread(block 66) failed [ 264.955875][ T7577] FAT-fs (loop2): Directory bread(block 67) failed [ 264.977822][ T7577] FAT-fs (loop2): Directory bread(block 68) failed [ 265.008089][ T7577] FAT-fs (loop2): Directory bread(block 69) failed [ 265.016655][ T7577] FAT-fs (loop2): Directory bread(block 70) failed [ 265.024899][ T7577] FAT-fs (loop2): Directory bread(block 71) failed [ 265.031993][ T7577] FAT-fs (loop2): Directory bread(block 72) failed [ 265.038843][ T7577] FAT-fs (loop2): Directory bread(block 73) failed [ 265.721114][ T6852] usb 2-1: USB disconnect, device number 5 [ 265.960330][ T7562] syz.3.546 (7562): drop_caches: 2 [ 266.412647][ T7590] tipc: Enabling of bearer rejected, failed to enable media [ 267.333243][ T7603] syz_tun: entered promiscuous mode [ 267.815841][ T7610] netlink: 44 bytes leftover after parsing attributes in process `syz.3.554'. [ 268.966964][ T7610] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.975053][ T7610] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.160522][ T7617] gretap1: entered allmulticast mode [ 269.338690][ T7616] netlink: 'syz.1.560': attribute type 1 has an invalid length. [ 269.722642][ T8] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 269.973342][ T8] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 269.981397][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 269.993058][ T8] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 270.022884][ T8] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 270.030433][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 270.049433][ T8] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 270.069863][ T8] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 270.089481][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 270.109562][ T8] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 270.134109][ T8] usb 4-1: string descriptor 0 read error: -22 [ 270.148701][ T8] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 270.158647][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.202502][ T8] adutux 4-1:168.0: interrupt endpoints not found [ 270.418430][ T6852] usb 4-1: USB disconnect, device number 5 [ 270.832123][ T7637] tipc: Enabling of bearer rejected, failed to enable media [ 271.707442][ T7653] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 272.705095][ T7564] Set syz1 is full, maxelem 65536 reached [ 273.561813][ T7654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.722346][ T7697] random: crng reseeded on system resumption [ 275.868788][ T7698] tipc: Enabling of bearer rejected, failed to enable media [ 276.787300][ T9] kernel write not supported for file [eventfd] (pid: 9 comm: kworker/0:1) [ 277.904080][ T7704] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 277.938689][ T7718] zero sized request [ 279.458381][ T7740] tipc: Enabling of bearer rejected, failed to enable media [ 279.494515][ T7739] loop0: detected capacity change from 0 to 32768 [ 279.541857][ T7739] loop1: detected capacity change from 0 to 32768 [ 279.581809][ T7739] loop2: detected capacity change from 0 to 32768 [ 279.630645][ T7739] loop3: detected capacity change from 0 to 32768 [ 283.653925][ T7752] netlink: 'syz.1.591': attribute type 1 has an invalid length. [ 283.878376][ T7752] 8021q: adding VLAN 0 to HW filter on device bond2 [ 283.929470][ T7754] 8021q: adding VLAN 0 to HW filter on device bond2 [ 283.955143][ T7754] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 283.976109][ T7754] bond2: (slave gre1): Error -95 calling set_mac_address [ 284.107556][ T7756] gretap1: entered promiscuous mode [ 284.125212][ T7756] bond2: (slave gretap1): making interface the new active one [ 284.138219][ T7756] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 284.167288][ T7765] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 284.194401][ T7752] 8021q: adding VLAN 0 to HW filter on device bond3 [ 284.203464][ T7752] bond2: (slave bond3): Enslaving as an active interface with a down link [ 284.825455][ T7752] bond2 (unregistering): (slave gretap1): Releasing active interface [ 285.829597][ T7752] bond2 (unregistering): (slave bond3): Releasing active interface [ 285.852454][ T7752] bond2 (unregistering): Released all slaves [ 287.786473][ T7792] loop3: detected capacity change from 0 to 512 [ 287.847225][ T7792] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 287.885100][ T7792] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.600: corrupted in-inode xattr: e_value size too large [ 287.911332][ T7792] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.600: couldn't read orphan inode 15 (err -117) [ 287.933144][ T7792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.255409][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.641182][ T7813] loop3: detected capacity change from 0 to 512 [ 292.713748][ T7813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.779580][ T7813] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.954381][ T5787] block nbd2: Receive control failed (result -32) [ 293.955903][ T7819] block nbd2: shutting down sockets [ 294.122834][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.105453][ T7840] FAULT_INJECTION: forcing a failure. [ 296.105453][ T7840] name failslab, interval 1, probability 10, space 0, times 1 [ 296.119932][ C1] FAULT_INJECTION: forcing a failure. [ 296.119932][ C1] name failslab, interval 1, probability 10, space 0, times 1 [ 296.133210][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 296.140285][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 296.150410][ C1] Call Trace: [ 296.153757][ C1] [ 296.156648][ C1] dump_stack_lvl+0x18c/0x250 [ 296.161411][ C1] ? show_regs_print_info+0x20/0x20 [ 296.166682][ C1] ? load_image+0x420/0x420 [ 296.171241][ C1] ? mark_lock+0x94/0x320 [ 296.175610][ C1] ? verify_lock_unused+0x140/0x140 [ 296.180846][ C1] ? mark_lock+0x94/0x320 [ 296.185210][ C1] should_fail_ex+0x394/0x4c0 [ 296.189952][ C1] should_failslab+0x9/0x20 [ 296.194507][ C1] slab_pre_alloc_hook+0x59/0x300 [ 296.199577][ C1] ? __lock_acquire+0x1262/0x7d80 [ 296.204662][ C1] kmem_cache_alloc_node+0x5e/0x310 [ 296.209918][ C1] ? __alloc_skb+0x103/0x2c0 [ 296.214547][ C1] __alloc_skb+0x103/0x2c0 [ 296.219008][ C1] __netdev_alloc_skb+0x10c/0x500 [ 296.224076][ C1] ? kmalloc_reserve+0x240/0x240 [ 296.229063][ C1] __ieee80211_beacon_get+0xd5d/0x1520 [ 296.234565][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 296.240175][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 296.245689][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 296.252565][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 296.258151][ C1] __iterate_interfaces+0x225/0x4c0 [ 296.263414][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 296.269701][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 296.276944][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 296.283235][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 296.290327][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 296.295574][ C1] ? hw_scan_work+0xf10/0xf10 [ 296.300372][ C1] __hrtimer_run_queues+0x525/0xc10 [ 296.305645][ C1] ? hrtimer_interrupt+0x980/0x980 [ 296.310840][ C1] ? read_tsc+0x9/0x20 [ 296.314969][ C1] hrtimer_run_softirq+0x177/0x290 [ 296.320136][ C1] handle_softirqs+0x27d/0x820 [ 296.324935][ C1] ? read_tsc+0x9/0x20 [ 296.329042][ C1] ? ktime_get+0x24b/0x280 [ 296.333507][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 296.338326][ C1] ? do_softirq+0x1a0/0x1a0 [ 296.342896][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 296.348138][ C1] __irq_exit_rcu+0xd3/0x190 [ 296.352807][ C1] ? irq_exit_rcu+0x20/0x20 [ 296.357377][ C1] irq_exit_rcu+0x9/0x20 [ 296.361704][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 296.367389][ C1] [ 296.370355][ C1] [ 296.373315][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 296.379342][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 296.385024][ C1] Code: 5e 1c 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d a3 6a 3b 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 296.404676][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c2 [ 296.410782][ C1] RAX: 722d29dd70533900 RBX: ffffffff81630c31 RCX: 722d29dd70533900 [ 296.418797][ C1] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d0660 [ 296.426815][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36bab R09: 1ffff110171e6d75 [ 296.434834][ C1] R10: dffffc0000000000 R11: ffffed10171e6d76 R12: 1ffff92000030fc8 [ 296.442840][ C1] R13: dffffc0000000000 R14: 1ffff110036ce780 R15: 0000000000000000 [ 296.450860][ C1] ? do_idle+0x221/0x5c0 [ 296.455169][ C1] default_idle+0x13/0x20 [ 296.459544][ C1] default_idle_call+0x6c/0xa0 [ 296.464352][ C1] do_idle+0x221/0x5c0 [ 296.468470][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 296.473728][ C1] ? do_idle+0x10/0x5c0 [ 296.477938][ C1] cpu_startup_entry+0x43/0x60 [ 296.482735][ C1] start_secondary+0xee/0xf0 [ 296.487350][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 296.493475][ C1] [ 296.694151][ T7840] CPU: 0 PID: 7840 Comm: syz.1.614 Not tainted syzkaller #0 [ 296.701542][ T7840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 296.708034][ T7844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.615'. [ 296.711658][ T7840] Call Trace: [ 296.711669][ T7840] [ 296.711679][ T7840] dump_stack_lvl+0x18c/0x250 [ 296.711713][ T7840] ? show_regs_print_info+0x20/0x20 [ 296.711737][ T7840] ? load_image+0x420/0x420 [ 296.725860][ T7844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.615'. [ 296.726902][ T7840] ? __might_sleep+0xe0/0xe0 [ 296.734130][ T7844] netlink: 'syz.0.615': attribute type 1 has an invalid length. [ 296.736783][ T7840] ? __lock_acquire+0x7d80/0x7d80 [ 296.746491][ T7844] netlink: 52 bytes leftover after parsing attributes in process `syz.0.615'. [ 296.750146][ T7840] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 296.757370][ T7844] netlink: 52 bytes leftover after parsing attributes in process `syz.0.615'. [ 296.762388][ T7840] should_fail_ex+0x394/0x4c0 [ 296.762430][ T7840] should_failslab+0x9/0x20 [ 296.762462][ T7840] slab_pre_alloc_hook+0x59/0x300 [ 296.762501][ T7840] kmem_cache_alloc+0x5a/0x2c0 [ 296.772567][ T7844] netlink: 'syz.0.615': attribute type 1 has an invalid length. [ 296.776371][ T7840] ? getname_flags+0xbb/0x500 [ 296.782629][ T7844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.615'. [ 296.791227][ T7840] getname_flags+0xbb/0x500 [ 296.791271][ T7840] do_sys_openat2+0xda/0x1d0 [ 296.840788][ T7840] ? do_sys_open+0xe0/0xe0 [ 296.845266][ T7840] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 296.851298][ T7840] ? lock_chain_count+0x20/0x20 [ 296.856209][ T7840] __x64_sys_openat+0x139/0x160 [ 296.861140][ T7840] do_syscall_64+0x55/0xb0 [ 296.865620][ T7840] ? clear_bhb_loop+0x40/0x90 [ 296.870346][ T7840] ? clear_bhb_loop+0x40/0x90 [ 296.875073][ T7840] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.881017][ T7840] RIP: 0033:0x7fa7ea59de99 [ 296.885509][ T7840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.905197][ T7840] RSP: 002b:00007fa7e87f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 296.913704][ T7840] RAX: ffffffffffffffda RBX: 00007fa7ea825fa0 RCX: 00007fa7ea59de99 [ 296.921734][ T7840] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 296.929758][ T7840] RBP: 00007fa7ea633eaf R08: 0000000000000000 R09: 0000000000000000 [ 296.937778][ T7840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.945826][ T7840] R13: 00007fa7ea826038 R14: 00007fa7ea825fa0 R15: 00007ffca93cdf08 [ 296.953874][ T7840] [ 297.291968][ T7848] 0: reclassify loop, rule prio 0, protocol 03 [ 297.620019][ T7852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.719979][ T7852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.751584][ T7858] random: crng reseeded on system resumption [ 297.856631][ T7852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.076113][ T7860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.892087][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'. [ 298.973939][ T7863] 8021q: adding VLAN 0 to HW filter on device bond2 [ 298.981395][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'. [ 298.990333][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'. [ 298.999234][ T7862] bond0: left allmulticast mode [ 299.006231][ T7862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.015341][ T7862] bond2: (slave bond0): making interface the new active one [ 299.024478][ T7862] bond2: (slave bond0): Enslaving as an active interface with an up link [ 299.160192][ T7862] bond2: (slave bond0): Releasing active interface [ 299.179518][ T7862] bridge_slave_0: left promiscuous mode [ 299.185765][ T7862] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.248863][ T7862] bridge_slave_1: left promiscuous mode [ 299.255058][ T7862] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.265881][ T7862] bond0: (slave bond_slave_0): Releasing backup interface [ 299.274967][ T7862] bond0: (slave bond_slave_1): Releasing backup interface [ 299.287326][ T7862] team0: Port device team_slave_0 removed [ 299.296285][ T7862] team0: Port device team_slave_1 removed [ 299.302604][ T7862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.310629][ T7862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.320275][ T7862] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 299.334679][ T7862] team0: Port device netdevsim0 removed [ 299.440474][ T7862] syz.1.621 (7862) used greatest stack depth: 19368 bytes left [ 299.948141][ T7874] netlink: 28 bytes leftover after parsing attributes in process `syz.1.624'. [ 299.976478][ T7874] netlink: 28 bytes leftover after parsing attributes in process `syz.1.624'. [ 300.729028][ T7900] 9pnet_virtio: no channels available for device syz [ 302.064510][ T7914] loop3: detected capacity change from 0 to 1024 [ 302.102342][ T7916] __nla_validate_parse: 6 callbacks suppressed [ 302.102363][ T7916] netlink: 28 bytes leftover after parsing attributes in process `syz.2.637'. [ 302.135128][ T7916] netlink: 28 bytes leftover after parsing attributes in process `syz.2.637'. [ 302.157875][ T7917] netlink: 28 bytes leftover after parsing attributes in process `syz.2.637'. [ 302.185617][ T7917] netlink: 28 bytes leftover after parsing attributes in process `syz.2.637'. [ 302.205201][ T7914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 302.321186][ T7914] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.633877][ T7920] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 303.711140][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 303.725140][ T7920] EXT4-fs (loop3): Remounting filesystem read-only [ 304.898040][ T7947] tipc: Enabling of bearer rejected, failed to enable media [ 305.333259][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 306.243921][ T7959] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 306.683429][ T7972] syzkaller0: entered promiscuous mode [ 306.689045][ T7972] syzkaller0: entered allmulticast mode [ 306.705162][ T7972] TC_ACT_REPEAT abuse ? [ 308.538879][ T7974] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.547127][ T7974] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.134058][ T7974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.195169][ T7974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.790577][ T7974] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.800292][ T7974] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.809764][ T7974] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.819742][ T7974] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.108804][ T7994] tipc: Enabling of bearer rejected, failed to enable media [ 310.347192][ T8003] 9pnet_virtio: no channels available for device syz [ 310.465664][ T8001] loop0: detected capacity change from 0 to 1024 [ 310.599986][ T8001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 310.663436][ T8001] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.324018][ T8009] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 315.408889][ T8009] EXT4-fs (loop0): Remounting filesystem read-only [ 315.437634][ T8016] random: crng reseeded on system resumption [ 315.834227][ T8033] loop1: detected capacity change from 0 to 256 [ 316.943763][ T8033] FAT-fs (loop1): Directory bread(block 64) failed [ 316.950683][ T8033] FAT-fs (loop1): Directory bread(block 65) failed [ 316.978678][ T8033] FAT-fs (loop1): Directory bread(block 66) failed [ 317.011450][ T8033] FAT-fs (loop1): Directory bread(block 67) failed [ 317.026974][ T8033] FAT-fs (loop1): Directory bread(block 68) failed [ 317.034378][ T8033] FAT-fs (loop1): Directory bread(block 69) failed [ 317.041405][ T8033] FAT-fs (loop1): Directory bread(block 70) failed [ 317.048305][ T8033] FAT-fs (loop1): Directory bread(block 71) failed [ 317.056085][ T8033] FAT-fs (loop1): Directory bread(block 72) failed [ 317.063835][ T8033] FAT-fs (loop1): Directory bread(block 73) failed [ 317.329246][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 317.423043][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.429495][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.950361][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 318.969731][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 318.979889][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 318.991055][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 319.014618][ T8065] 9pnet_virtio: no channels available for device syz [ 319.354782][ T8063] tipc: Enabling of bearer rejected, failed to enable media [ 319.869783][ T8071] loop2: detected capacity change from 0 to 256 [ 321.190222][ T8071] FAT-fs (loop2): Directory bread(block 64) failed [ 321.231957][ T8071] FAT-fs (loop2): Directory bread(block 65) failed [ 321.238739][ T8071] FAT-fs (loop2): Directory bread(block 66) failed [ 321.315351][ T28] audit: type=1800 audit(1785238606.088:49): pid=8074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.672" name="bus" dev="ramfs" ino=15657 res=0 errno=0 [ 321.341114][ T8071] FAT-fs (loop2): Directory bread(block 67) failed [ 321.347905][ T8071] FAT-fs (loop2): Directory bread(block 68) failed [ 321.405472][ T8071] FAT-fs (loop2): Directory bread(block 69) failed [ 321.431540][ T8071] FAT-fs (loop2): Directory bread(block 70) failed [ 321.507742][ T8071] FAT-fs (loop2): Directory bread(block 71) failed [ 321.586991][ T8071] FAT-fs (loop2): Directory bread(block 72) failed [ 321.606057][ T8071] FAT-fs (loop2): Directory bread(block 73) failed [ 323.224417][ T8105] tipc: Enabling of bearer rejected, failed to enable media [ 329.332607][ T8128] netlink: 28 bytes leftover after parsing attributes in process `syz.2.687'. [ 329.342100][ T8128] netlink: 28 bytes leftover after parsing attributes in process `syz.2.687'. [ 329.825404][ T8132] loop2: detected capacity change from 0 to 256 [ 330.018814][ T8132] FAT-fs (loop2): Directory bread(block 64) failed [ 330.077981][ T8132] FAT-fs (loop2): Directory bread(block 65) failed [ 330.096175][ T8132] FAT-fs (loop2): Directory bread(block 66) failed [ 330.141308][ T8132] FAT-fs (loop2): Directory bread(block 67) failed [ 330.193086][ T8132] FAT-fs (loop2): Directory bread(block 68) failed [ 330.230371][ T5856] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 330.243100][ T8132] FAT-fs (loop2): Directory bread(block 69) failed [ 330.286895][ T8132] FAT-fs (loop2): Directory bread(block 70) failed [ 330.332730][ T8132] FAT-fs (loop2): Directory bread(block 71) failed [ 330.339598][ T5856] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 330.364735][ T8132] FAT-fs (loop2): Directory bread(block 72) failed [ 330.387641][ T8132] FAT-fs (loop2): Directory bread(block 73) failed [ 331.218376][ T8139] fido_id[8139]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 336.350220][ T8172] pimreg3: entered allmulticast mode [ 336.638784][ T8175] loop3: detected capacity change from 0 to 256 [ 336.775916][ T8175] FAT-fs (loop3): Directory bread(block 64) failed [ 336.798325][ T8175] FAT-fs (loop3): Directory bread(block 65) failed [ 336.841026][ T8175] FAT-fs (loop3): Directory bread(block 66) failed [ 336.847739][ T8175] FAT-fs (loop3): Directory bread(block 67) failed [ 336.880553][ T8175] FAT-fs (loop3): Directory bread(block 68) failed [ 336.901039][ T8175] FAT-fs (loop3): Directory bread(block 69) failed [ 336.907933][ T8175] FAT-fs (loop3): Directory bread(block 70) failed [ 336.940893][ T8175] FAT-fs (loop3): Directory bread(block 71) failed [ 336.947762][ T8175] FAT-fs (loop3): Directory bread(block 72) failed [ 337.032766][ T8175] FAT-fs (loop3): Directory bread(block 73) failed [ 341.482559][ T8192] netlink: 'syz.3.703': attribute type 29 has an invalid length. [ 341.521308][ T8192] netlink: 'syz.3.703': attribute type 29 has an invalid length. [ 341.554397][ T8192] netlink: 'syz.3.703': attribute type 29 has an invalid length. [ 341.582678][ T8192] netlink: 'syz.3.703': attribute type 29 has an invalid length. [ 343.329962][ T8216] loop3: detected capacity change from 0 to 256 [ 343.446198][ T8216] FAT-fs (loop3): Directory bread(block 64) failed [ 343.467912][ T8216] FAT-fs (loop3): Directory bread(block 65) failed [ 343.490931][ T8216] FAT-fs (loop3): Directory bread(block 66) failed [ 343.529552][ T8216] FAT-fs (loop3): Directory bread(block 67) failed [ 343.542010][ T5787] Bluetooth: Fragment is too long (len 14, expected 2) [ 343.553869][ T8216] FAT-fs (loop3): Directory bread(block 68) failed [ 343.560671][ T8216] FAT-fs (loop3): Directory bread(block 69) failed [ 343.700418][ T8216] FAT-fs (loop3): Directory bread(block 70) failed [ 343.827758][ T8216] FAT-fs (loop3): Directory bread(block 71) failed [ 343.969297][ T8216] FAT-fs (loop3): Directory bread(block 72) failed [ 344.121624][ T8216] FAT-fs (loop3): Directory bread(block 73) failed [ 344.776464][ T8226] syzkaller0: entered promiscuous mode [ 344.791368][ T8226] syzkaller0: entered allmulticast mode [ 344.828940][ T8226] tipc: Enabled bearer , priority 0 [ 344.920738][ T8225] tipc: Resetting bearer [ 344.975234][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 345.005146][ T8225] tipc: Disabling bearer [ 345.191204][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 345.282031][ T8] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 345.425376][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.737496][ T8] usb 2-1: config 0 descriptor?? [ 345.990608][ T8] as10x_usb: device has been detected [ 346.030396][ T8] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 346.994308][ T8] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 347.787487][ T8] as10x_usb: error during firmware upload part1 [ 347.899577][ T8] Registered device nBox DVB-T Dongle [ 348.374848][ T8] usb 2-1: USB disconnect, device number 6 [ 348.539603][ T8] Unregistered device nBox DVB-T Dongle [ 348.577386][ T8] as10x_usb: device has been disconnected [ 348.907620][ T8264] lo speed is unknown, defaulting to 1000 [ 348.927952][ T8264] lo speed is unknown, defaulting to 1000 [ 348.948590][ T8267] loop3: detected capacity change from 0 to 256 [ 348.988154][ T8264] lo speed is unknown, defaulting to 1000 [ 349.043227][ T8264] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 349.056130][ T8267] FAT-fs (loop3): Directory bread(block 64) failed [ 349.076799][ T8267] FAT-fs (loop3): Directory bread(block 65) failed [ 349.096647][ T8267] FAT-fs (loop3): Directory bread(block 66) failed [ 349.123777][ T8267] FAT-fs (loop3): Directory bread(block 67) failed [ 349.133548][ T8264] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 349.142542][ T8267] FAT-fs (loop3): Directory bread(block 68) failed [ 349.161403][ T8267] FAT-fs (loop3): Directory bread(block 69) failed [ 349.174737][ T8267] FAT-fs (loop3): Directory bread(block 70) failed [ 349.192087][ T8267] FAT-fs (loop3): Directory bread(block 71) failed [ 349.204649][ T8267] FAT-fs (loop3): Directory bread(block 72) failed [ 349.214219][ T8267] FAT-fs (loop3): Directory bread(block 73) failed [ 349.297362][ T8264] lo speed is unknown, defaulting to 1000 [ 349.341650][ T8264] lo speed is unknown, defaulting to 1000 [ 349.365802][ T8264] lo speed is unknown, defaulting to 1000 [ 349.408470][ T8264] lo speed is unknown, defaulting to 1000 [ 349.614977][ T8270] syzkaller0: entered promiscuous mode [ 349.620576][ T8270] syzkaller0: entered allmulticast mode [ 349.673708][ T8270] tipc: Enabled bearer , priority 0 [ 349.719589][ T8269] tipc: Resetting bearer [ 349.818892][ T8269] tipc: Disabling bearer [ 350.009489][ T8276] lo speed is unknown, defaulting to 1000 [ 351.309179][ T8291] loop2: detected capacity change from 0 to 256 [ 351.400987][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 351.429712][ T8291] FAT-fs (loop2): Directory bread(block 64) failed [ 351.449586][ T8291] FAT-fs (loop2): Directory bread(block 65) failed [ 351.485794][ T8291] FAT-fs (loop2): Directory bread(block 66) failed [ 351.507686][ T8291] FAT-fs (loop2): Directory bread(block 67) failed [ 351.567472][ T8291] FAT-fs (loop2): Directory bread(block 68) failed [ 351.627246][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 351.660949][ T8291] FAT-fs (loop2): Directory bread(block 69) failed [ 351.667922][ T8291] FAT-fs (loop2): Directory bread(block 70) failed [ 351.713718][ T8] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 351.807052][ T8291] FAT-fs (loop2): Directory bread(block 71) failed [ 351.815319][ T8] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 351.917232][ T8291] FAT-fs (loop2): Directory bread(block 72) failed [ 351.959389][ T8] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 352.044336][ T8291] FAT-fs (loop2): Directory bread(block 73) failed [ 355.503596][ T8] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 355.531298][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.539567][ T8] usb 2-1: Product: syz [ 355.771094][ T8] usb 2-1: Manufacturer: syz [ 355.871419][ T8] usb 2-1: can't set config #155, error -71 [ 355.879670][ T8] usb 2-1: USB disconnect, device number 7 [ 356.292817][ T8305] syzkaller0: entered promiscuous mode [ 356.303635][ T8305] syzkaller0: entered allmulticast mode [ 356.335563][ T8305] tipc: Enabled bearer , priority 0 [ 356.357843][ T8304] tipc: Resetting bearer [ 356.684805][ T8304] tipc: Disabling bearer [ 356.842300][ T8310] lo speed is unknown, defaulting to 1000 [ 357.888251][ T8325] loop2: detected capacity change from 0 to 256 [ 358.065356][ T8325] FAT-fs (loop2): Directory bread(block 64) failed [ 358.078984][ T8325] FAT-fs (loop2): Directory bread(block 65) failed [ 358.108290][ T8325] FAT-fs (loop2): Directory bread(block 66) failed [ 358.122716][ T8330] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 358.127163][ T8325] FAT-fs (loop2): Directory bread(block 67) failed [ 358.195605][ T8325] FAT-fs (loop2): Directory bread(block 68) failed [ 358.211136][ T8325] FAT-fs (loop2): Directory bread(block 69) failed [ 358.237592][ T8325] FAT-fs (loop2): Directory bread(block 70) failed [ 358.352146][ T8325] FAT-fs (loop2): Directory bread(block 71) failed [ 358.359748][ T8325] FAT-fs (loop2): Directory bread(block 72) failed [ 358.377809][ T8325] FAT-fs (loop2): Directory bread(block 73) failed [ 359.469513][ T8343] syzkaller0: entered promiscuous mode [ 359.521843][ T8343] syzkaller0: entered allmulticast mode [ 359.712000][ T8344] tipc: Enabled bearer , priority 0 [ 360.029743][ T8342] tipc: Resetting bearer [ 360.181256][ T8342] tipc: Disabling bearer [ 360.756083][ T8350] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 363.777644][ T8382] lo speed is unknown, defaulting to 1000 [ 365.772829][ T5787] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 366.529489][ T8466] syzkaller0: entered promiscuous mode [ 366.556194][ T8466] syzkaller0: entered allmulticast mode [ 366.622161][ T8462] tipc: Enabled bearer , priority 0 [ 366.641019][ T8470] PM: suspend entry (s2idle) [ 366.674844][ T8470] PM: Unsupported test mode for suspend to idle, please choose none/freezer/devices/platform. [ 366.721783][ T8461] tipc: Resetting bearer [ 366.729177][ T8471] mmap: syz.0.772 (8471) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 366.773283][ T8470] PM: suspend exit [ 367.056379][ T8461] tipc: Disabling bearer [ 367.973949][ T8484] lo speed is unknown, defaulting to 1000 [ 374.043747][ T8515] syzkaller0: entered promiscuous mode [ 374.120938][ T8515] syzkaller0: entered allmulticast mode [ 374.155285][ T8517] tipc: Enabled bearer , priority 0 [ 374.292623][ T8513] tipc: Resetting bearer [ 374.428899][ T8513] tipc: Disabling bearer [ 374.665498][ T28] audit: type=1800 audit(1785238659.468:50): pid=8522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.784" name="num_groups" dev="configfs" ino=17307 res=0 errno=0 [ 374.685925][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.484211][ T8541] syzkaller0: entered promiscuous mode [ 375.489955][ T8541] syzkaller0: entered allmulticast mode [ 375.512209][ T8541] tipc: Enabled bearer , priority 0 [ 375.533197][ T8540] tipc: Resetting bearer [ 375.576737][ T8540] tipc: Disabling bearer [ 375.590986][ T6257] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 375.669024][ T8547] usb 1-1: USB disconnect, device number 4 [ 375.910410][ T8537] kvm: pic: single mode not supported [ 375.910632][ T8537] kvm: MONITOR instruction emulated as NOP! [ 375.931934][ T8537] kvm: pic: single mode not supported [ 375.962410][ T8537] picdev_read: 7 callbacks suppressed [ 375.962430][ T8537] kvm: pic: non byte read [ 375.984170][ T8537] kvm: pic: non byte read [ 375.989040][ T8537] kvm: pic: non byte read [ 375.996469][ T8537] kvm: pic: non byte read [ 376.005399][ T8537] kvm: pic: non byte read [ 376.010217][ T8537] kvm: pic: non byte read [ 376.017344][ T8537] kvm: pic: non byte read [ 376.027167][ T8537] kvm: pic: non byte read [ 376.034549][ T8537] kvm: pic: non byte read [ 376.039339][ T8537] kvm: pic: non byte read [ 376.070967][ T6845] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 376.167044][ T6257] usb 3-1: unable to get BOS descriptor or descriptor too short [ 376.190055][ T6257] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 376.210827][ T6257] usb 3-1: can't read configurations, error -71 [ 376.281144][ T6845] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 376.289409][ T6845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.300858][ T6845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.310644][ T6845] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 376.323983][ T6845] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 376.333195][ T6845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.344049][ T6845] usb 2-1: config 0 descriptor?? [ 376.464543][ T8552] 9pnet_virtio: no channels available for device syz [ 376.536096][ T5787] Bluetooth: hci2: unexpected event for opcode 0x080e [ 376.771975][ T6845] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x3 [ 376.785429][ T6845] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 376.807996][ T6845] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 377.046873][ T6852] usb 2-1: USB disconnect, device number 8 [ 377.331069][ T6257] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 377.510978][ T6257] usb 3-1: Using ep0 maxpacket: 8 [ 377.518810][ T6257] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.529357][ T6257] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 377.542894][ T6257] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 377.553052][ T6257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.572081][ T6257] usb 3-1: config 0 descriptor?? [ 377.605425][ T8543] lvs 8-0:1.0: Bind LVS driver with SS root Hub only [ 377.621689][ T8543] lvs: probe of 8-0:1.0 failed with error -22 [ 377.651733][ T8543] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 377.673133][ T8543] lvs: probe of 1-0:1.0 failed with error -22 [ 377.727236][ T8569] tipc: Enabling of bearer rejected, already enabled [ 377.840625][ T6257] usb 3-1: USB disconnect, device number 4 [ 378.826048][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.840193][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.647544][ T8610] syzkaller0: entered promiscuous mode [ 382.666820][ T8610] syzkaller0: entered allmulticast mode [ 382.739175][ T8610] tipc: Enabled bearer , priority 0 [ 382.759607][ T8609] tipc: Resetting bearer [ 382.814638][ T8609] tipc: Disabling bearer [ 383.505581][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'. [ 383.517460][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'. [ 383.528194][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'. [ 383.538916][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'. [ 383.548389][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'. [ 383.564475][ T8631] 9pnet_virtio: no channels available for device syz [ 383.720885][ T6845] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 386.584092][ T8642] tipc: Enabling of bearer rejected, already enabled [ 386.811904][ T6845] usb 2-1: device not accepting address 9, error -71 [ 387.051914][ T8] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 387.962365][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.833'. [ 387.976811][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.833'. [ 387.987487][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.833'. [ 387.997396][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.833'. [ 388.021684][ T8663] 9pnet_virtio: no channels available for device syz [ 388.127337][ T8] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 388.210727][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 388.324740][ T8] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 388.392610][ T8] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 388.473744][ T8] usb 4-1: Product: syz [ 388.515286][ T8] usb 4-1: Manufacturer: syz [ 388.560048][ T8] usb 4-1: SerialNumber: syz [ 388.743335][ T8] usb 4-1: config 0 descriptor?? [ 388.795291][ T8646] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 388.874885][ T8] usb 4-1: selecting invalid altsetting 0 [ 388.990700][ T5787] Bluetooth: hci2: hardware error 0x07 [ 389.033192][ T8673] syzkaller0: entered promiscuous mode [ 389.038743][ T8673] syzkaller0: entered allmulticast mode [ 389.049595][ T8673] tipc: Enabled bearer , priority 0 [ 389.057994][ T8672] tipc: Resetting bearer [ 389.119448][ T8672] tipc: Disabling bearer [ 389.143622][ T5856] usb 4-1: USB disconnect, device number 6 [ 389.220256][ T8677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.239661][ T8677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.317254][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.841'. [ 389.452141][ T8682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.841'. [ 389.603631][ T5084] Bluetooth: hci1: adv larger than maximum supported [ 389.603710][ T5084] Bluetooth: hci1: Malformed LE Event: 0x0d [ 391.182592][ T8694] loop5: detected capacity change from 0 to 8392703 [ 391.208866][ T5787] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 391.226075][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 2 [ 391.235885][ C1] I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 2 [ 391.246063][ C1] I/O error, dev loop5, sector 2048 op 0x0:(READ) flags 0x80700 phys_seg 38 prio class 2 [ 391.251859][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 391.265329][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 391.301771][ C1] I/O error, dev loop5, sector 8392448 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 391.336632][ C0] I/O error, dev loop5, sector 8392448 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 391.346495][ C0] Buffer I/O error on dev loop5, logical block 1049056, async page read [ 391.688651][ T8699] syzkaller0: entered promiscuous mode [ 391.694310][ T8699] syzkaller0: entered allmulticast mode [ 391.750284][ T8699] tipc: Enabled bearer , priority 0 [ 392.120297][ T8698] tipc: Resetting bearer [ 392.178998][ T8698] tipc: Disabling bearer [ 393.267357][ T8713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.854'. [ 393.933875][ T8727] netlink: 'syz.1.857': attribute type 2 has an invalid length. [ 394.726860][ T8737] genirq: Flags mismatch irq 4. 00000000 (pcl818) vs. 00000000 (ttyS0) [ 395.537253][ T8742] lo speed is unknown, defaulting to 1000 [ 397.132643][ T8765] ntfs3: nullb0: Primary boot signature is not NTFS. [ 397.155100][ T8765] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 401.297058][ T8799] lo speed is unknown, defaulting to 1000 [ 401.645117][ T8806] lo speed is unknown, defaulting to 1000 [ 401.645821][ T8803] tipc: Enabled bearer , priority 0 [ 401.745723][ T8801] tipc: Disabling bearer [ 403.408479][ T5787] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 403.418208][ T5787] CPU: 1 PID: 5787 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 403.425801][ T5787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 403.435891][ T5787] Workqueue: hci1 hci_rx_work [ 403.440757][ T5787] Call Trace: [ 403.444090][ T5787] [ 403.447031][ T5787] dump_stack_lvl+0x18c/0x250 [ 403.451830][ T5787] ? show_regs_print_info+0x20/0x20 [ 403.457086][ T5787] ? load_image+0x420/0x420 [ 403.461702][ T5787] sysfs_create_dir_ns+0x26e/0x2a0 [ 403.466894][ T5787] ? __lock_acquire+0x7d80/0x7d80 [ 403.471959][ T5787] ? sysfs_warn_dup+0xa0/0xa0 [ 403.476648][ T5787] ? do_raw_spin_unlock+0x121/0x230 [ 403.481867][ T5787] kobject_add_internal+0x617/0xc90 [ 403.487168][ T5787] kobject_add+0x164/0x240 [ 403.491607][ T5787] ? kobject_init+0x1d0/0x1d0 [ 403.496303][ T5787] ? get_device_parent+0x366/0x390 [ 403.501465][ T5787] device_add+0x3fa/0xc40 [ 403.505831][ T5787] hci_conn_add_sysfs+0xd5/0x1e0 [ 403.510868][ T5787] le_conn_complete_evt+0xe9f/0x1480 [ 403.516434][ T5787] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 403.522703][ T5787] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 403.528435][ T5787] ? mutex_unlock+0x10/0x10 [ 403.533012][ T5787] ? skb_pull_data+0xf0/0x1f0 [ 403.537779][ T5787] hci_le_conn_complete_evt+0x187/0x440 [ 403.543386][ T5787] ? hci_remote_host_features_evt+0x150/0x150 [ 403.549502][ T5787] hci_event_packet+0x7b4/0x1280 [ 403.554469][ T5787] ? __lock_acquire+0x7d80/0x7d80 [ 403.559518][ T5787] ? lock_chain_count+0x20/0x20 [ 403.564415][ T5787] ? bis_list+0x290/0x290 [ 403.568789][ T5787] ? lockdep_hardirqs_on+0x98/0x150 [ 403.574032][ T5787] ? hci_send_to_monitor+0xd7/0x4f0 [ 403.579251][ T5787] hci_rx_work+0x43a/0xd60 [ 403.583710][ T5787] ? process_scheduled_works+0x975/0x1600 [ 403.589488][ T5787] process_scheduled_works+0xa60/0x1600 [ 403.595086][ T5787] ? worker_attach_to_pool+0x370/0x370 [ 403.600566][ T5787] ? assign_work+0x3cc/0x5d0 [ 403.605178][ T5787] worker_thread+0xa5e/0xfe0 [ 403.609831][ T5787] kthread+0x2fa/0x390 [ 403.613946][ T5787] ? pr_cont_work+0x550/0x550 [ 403.618661][ T5787] ? kthread_blkcg+0xd0/0xd0 [ 403.623281][ T5787] ret_from_fork+0x48/0x80 [ 403.627772][ T5787] ? kthread_blkcg+0xd0/0xd0 [ 403.632383][ T5787] ret_from_fork_asm+0x11/0x20 [ 403.637210][ T5787] [ 403.641136][ T5787] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 403.655622][ T5787] Bluetooth: hci1: failed to register connection device [ 403.824309][ T8840] tipc: Enabling of bearer rejected, already enabled [ 404.160516][ T8848] lo speed is unknown, defaulting to 1000 [ 404.692430][ T6257] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 404.806443][ T8862] netlink: 20 bytes leftover after parsing attributes in process `syz.3.897'. [ 404.943137][ T6257] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.972107][ T6257] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 404.997506][ T6257] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 405.007144][ T6257] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 405.015762][ T6257] usb 2-1: Manufacturer: syz [ 405.027289][ T6257] usb 2-1: config 0 descriptor?? [ 405.079169][ T8865] tipc: Enabling of bearer rejected, already enabled [ 407.489858][ T6845] usb 2-1: USB disconnect, device number 11 [ 408.464844][ T8900] lo speed is unknown, defaulting to 1000 [ 408.621532][ T8907] 9pnet_virtio: no channels available for device syz [ 409.050674][ T8919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.063134][ T8919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.129155][ T8887] tipc: Resetting bearer [ 409.150501][ T28] audit: type=1800 audit(1785238693.958:51): pid=8924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.913" name="num_groups" dev="configfs" ino=19713 res=0 errno=0 [ 409.198348][ T8917] syzkaller0: entered promiscuous mode [ 409.207793][ T8917] syzkaller0: entered allmulticast mode [ 409.231240][ T8917] tipc: Enabled bearer , priority 0 [ 409.298015][ T8913] tipc: Resetting bearer [ 409.355955][ T8913] tipc: Disabling bearer [ 411.865274][ T8951] lo speed is unknown, defaulting to 1000 [ 414.528453][ T8976] syzkaller0: entered promiscuous mode [ 414.548745][ T8976] syzkaller0: entered allmulticast mode [ 414.613742][ T8976] tipc: Enabled bearer , priority 0 [ 414.670105][ T8973] tipc: Resetting bearer [ 414.782699][ T8973] tipc: Disabling bearer [ 417.796256][ T9017] syzkaller0: entered promiscuous mode [ 417.807357][ T9017] syzkaller0: entered allmulticast mode [ 417.868049][ T9017] tipc: Enabled bearer , priority 0 [ 417.950471][ T9016] tipc: Resetting bearer [ 418.082765][ T9016] tipc: Disabling bearer [ 418.316828][ T9028] lo speed is unknown, defaulting to 1000 [ 419.494327][ T9041] lo speed is unknown, defaulting to 1000 [ 422.581355][ T9074] tipc: Enabling of bearer rejected, failed to enable media [ 423.399740][ T9094] lo speed is unknown, defaulting to 1000 [ 423.823331][ T9109] lo speed is unknown, defaulting to 1000 [ 423.909856][ T9116] syzkaller0: entered promiscuous mode [ 423.915832][ T9116] syzkaller0: entered allmulticast mode [ 423.926922][ T9116] tipc: Enabled bearer , priority 0 [ 423.935481][ T9112] tipc: Resetting bearer [ 424.009984][ T9112] tipc: Disabling bearer [ 425.559516][ T9159] lo speed is unknown, defaulting to 1000 [ 426.706466][ T9171] tipc: Enabling of bearer rejected, already enabled [ 428.543888][ T9194] syzkaller0: entered promiscuous mode [ 428.549436][ T9194] syzkaller0: entered allmulticast mode [ 428.583382][ T9194] tipc: Enabled bearer , priority 0 [ 428.611860][ T9193] tipc: Resetting bearer [ 428.715537][ T9193] tipc: Disabling bearer [ 428.891709][ T9202] netlink: 36 bytes leftover after parsing attributes in process `syz.3.981'. [ 429.010941][ T9203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.981'. [ 431.914291][ T9229] lo speed is unknown, defaulting to 1000 [ 431.987445][ T9231] syzkaller0: entered promiscuous mode [ 432.007912][ T9231] syzkaller0: entered allmulticast mode [ 432.118800][ T9231] tipc: Enabled bearer , priority 0 [ 432.182014][ T9230] tipc: Resetting bearer [ 432.295206][ T9230] tipc: Disabling bearer [ 435.158037][ T9260] syzkaller0: entered promiscuous mode [ 435.165960][ T9260] syzkaller0: entered allmulticast mode [ 435.193397][ T9260] tipc: Enabled bearer , priority 0 [ 435.213486][ T9256] tipc: Resetting bearer [ 435.332851][ T9256] tipc: Disabling bearer [ 437.191859][ T9280] lo speed is unknown, defaulting to 1000 [ 440.264340][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.279271][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.582257][ T9297] tipc: Enabling of bearer rejected, already enabled [ 441.468319][ T9316] syzkaller0: entered promiscuous mode [ 441.474074][ T9316] syzkaller0: entered allmulticast mode [ 441.484144][ T9316] tipc: Enabled bearer , priority 0 [ 441.510976][ T9315] tipc: Resetting bearer [ 441.560586][ T9315] tipc: Disabling bearer [ 441.633405][ T9319] usbip-vudc usbip-vudc.0: failed to lookup sock [ 445.026212][ T9343] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1032'. [ 445.155786][ T9344] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1032'. [ 446.167770][ T9355] misc userio: The device must be registered before sending interrupts [ 446.190354][ T9353] syzkaller0: entered promiscuous mode [ 446.215055][ T9353] syzkaller0: entered allmulticast mode [ 446.230302][ T9353] tipc: Enabled bearer , priority 0 [ 446.240083][ T9352] tipc: Resetting bearer [ 446.294378][ T9352] tipc: Disabling bearer [ 447.036338][ T9381] syzkaller0: entered promiscuous mode [ 447.051266][ T9381] syzkaller0: entered allmulticast mode [ 447.084909][ T9381] tipc: Enabled bearer , priority 0 [ 447.159918][ T9380] tipc: Resetting bearer [ 447.793731][ T9380] tipc: Disabling bearer [ 450.491069][ T9413] misc userio: The device must be registered before sending interrupts [ 450.643262][ T9419] tipc: Enabling of bearer rejected, already enabled [ 453.785653][ T9436] 9pnet_fd: Insufficient options for proto=fd [ 454.149512][ T9448] syzkaller0: entered promiscuous mode [ 454.161716][ T9448] syzkaller0: entered allmulticast mode [ 454.180410][ T9448] tipc: Enabled bearer , priority 0 [ 454.208366][ T9447] tipc: Resetting bearer [ 454.288361][ T9447] tipc: Disabling bearer [ 454.317063][ T9453] misc userio: The device must be registered before sending interrupts [ 454.443261][ T9455] 9pnet_fd: Insufficient options for proto=fd [ 454.515111][ T9457] netlink: 'syz.2.1077': attribute type 1 has an invalid length. [ 454.590125][ T9457] 8021q: adding VLAN 0 to HW filter on device bond1 [ 454.662308][ T9462] 8021q: adding VLAN 0 to HW filter on device bond1 [ 454.669318][ T9462] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 454.710696][ T9462] bond1: (slave gre1): Error -95 calling set_mac_address [ 454.778159][ T9457] gretap1: entered promiscuous mode [ 454.787610][ T9457] bond1: (slave gretap1): making interface the new active one [ 454.821379][ T9457] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 454.899418][ T9467] 8021q: adding VLAN 0 to HW filter on device bond2 [ 454.916659][ T9467] bond1: (slave bond2): Enslaving as an active interface with a down link [ 455.255663][ T9470] bond1 (unregistering): (slave gretap1): Releasing active interface [ 455.305064][ T9470] bond1 (unregistering): (slave bond2): Releasing active interface [ 455.324499][ T9470] bond1 (unregistering): Released all slaves [ 455.360667][ T9484] 9pnet_fd: Insufficient options for proto=fd [ 455.860180][ T9500] misc userio: No port type given on /dev/userio [ 455.933093][ T9503] misc userio: The device must be registered before sending interrupts [ 456.202589][ T9510] 9pnet_fd: Insufficient options for proto=fd [ 457.157868][ T9535] 9pnet_fd: Insufficient options for proto=fd [ 458.040225][ T9554] misc userio: No port type given on /dev/userio [ 458.102800][ T9555] misc userio: The device must be registered before sending interrupts [ 459.339919][ T9575] 9pnet_fd: Insufficient options for proto=fd [ 459.398440][ T9579] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 460.576913][ T9595] misc userio: No port type given on /dev/userio [ 460.647268][ T9599] misc userio: The device must be registered before sending interrupts [ 465.367826][ T9704] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 467.261169][ T9729] UDC core: g1: couldn't find an available UDC or it's busy [ 467.571408][ T28] audit: type=1800 audit(1785238752.368:52): pid=9725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1187" name="bus" dev="ramfs" ino=22182 res=0 errno=0 [ 468.103939][ T9694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.225448][ T9694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.260152][ T9752] UDC core: g1: couldn't find an available UDC or it's busy [ 468.831253][ T9763] misc userio: Invalid payload size [ 468.862661][ T9763] misc userio: No port type given on /dev/userio [ 468.925409][ T9766] misc userio: The device must be registered before sending interrupts [ 468.978913][ T9694] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.988163][ T9694] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.996916][ T9694] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.005577][ T9694] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.311572][ T9775] UDC core: g1: couldn't find an available UDC or it's busy [ 469.603847][ T9789] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 470.013097][ T9808] UDC core: g1: couldn't find an available UDC or it's busy [ 470.137902][ T9813] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 470.182260][ T9815] misc userio: Invalid payload size [ 470.188250][ T9815] misc userio: No port type given on /dev/userio [ 470.261241][ T9818] misc userio: The device must be registered before sending interrupts [ 470.706226][ T9837] UDC core: g1: couldn't find an available UDC or it's busy [ 470.722402][ T9839] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 471.219373][ T9860] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 471.418793][ T9868] UDC core: g1: couldn't find an available UDC or it's busy [ 471.638395][ T9875] misc userio: Invalid payload size [ 471.648603][ T9875] misc userio: No port type given on /dev/userio [ 471.661249][ T6845] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 471.753572][ T9880] misc userio: The device must be registered before sending interrupts [ 471.861536][ T9884] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 471.871551][ T6845] usb 3-1: Using ep0 maxpacket: 32 [ 471.884289][ T6845] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 471.902119][ T6845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.925075][ T6845] usb 3-1: config 0 descriptor?? [ 471.956302][ T6845] as10x_usb: device has been detected [ 471.967236][ T6845] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 472.031110][ T6845] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 472.063597][ T6845] as10x_usb: error during firmware upload part1 [ 472.087862][ T6845] Registered device nBox DVB-T Dongle [ 474.420935][ T5860] usb 3-1: USB disconnect, device number 5 [ 474.544056][ T5860] Unregistered device nBox DVB-T Dongle [ 474.545608][ T5860] as10x_usb: device has been disconnected [ 474.606575][ T9919] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 474.640544][ T9921] misc userio: Invalid payload size [ 474.701003][ T9924] misc userio: The device must be registered before sending interrupts [ 476.569709][ T9943] 9pnet_fd: Insufficient options for proto=fd [ 476.951559][ T9957] misc userio: Invalid payload size [ 477.023781][ T9964] misc userio: The device must be registered before sending interrupts [ 477.226793][ T9971] 9pnet_fd: Insufficient options for proto=fd [ 477.756195][ T9992] 9pnet_fd: Insufficient options for proto=fd [ 478.309400][T10012] misc userio: Invalid payload size [ 478.368024][T10014] misc userio: The device must be registered before sending interrupts [ 478.415584][T10017] 9pnet_fd: Insufficient options for proto=fd [ 478.996626][T10039] 9pnet_fd: Insufficient options for proto=fd [ 479.486036][T10065] 9pnet_fd: Insufficient options for proto=fd [ 487.193790][T10149] syzkaller0: entered promiscuous mode [ 487.199489][T10149] syzkaller0: entered allmulticast mode [ 490.261143][ T5084] Bluetooth: hci4: command 0x1003 tx timeout [ 490.269563][ T5787] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 490.446073][T10175] misc userio: Invalid payload size [ 490.514588][T10177] loop1: detected capacity change from 0 to 256 [ 490.583974][T10177] FAT-fs (loop1): Directory bread(block 64) failed [ 490.590586][T10177] FAT-fs (loop1): Directory bread(block 65) failed [ 490.623605][T10177] FAT-fs (loop1): Directory bread(block 66) failed [ 490.630299][T10177] FAT-fs (loop1): Directory bread(block 67) failed [ 490.652058][T10177] FAT-fs (loop1): Directory bread(block 68) failed [ 490.664165][T10177] FAT-fs (loop1): Directory bread(block 69) failed [ 490.671268][T10177] FAT-fs (loop1): Directory bread(block 70) failed [ 490.677882][T10177] FAT-fs (loop1): Directory bread(block 71) failed [ 490.711232][T10177] FAT-fs (loop1): Directory bread(block 72) failed [ 490.717844][T10177] FAT-fs (loop1): Directory bread(block 73) failed [ 495.648684][T10190] syzkaller0: entered promiscuous mode [ 495.725916][T10190] syzkaller0: entered allmulticast mode [ 496.254475][T10203] misc userio: Invalid payload size [ 499.619650][T10227] syzkaller0: entered promiscuous mode [ 499.647567][T10227] syzkaller0: entered allmulticast mode [ 499.952985][T10235] misc userio: Invalid payload size [ 500.182679][T10245] overlayfs: failed to resolve './bus': -2 [ 501.704968][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.729863][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.362322][T10257] syzkaller0: entered promiscuous mode [ 503.393736][T10257] syzkaller0: entered allmulticast mode [ 503.754547][T10273] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 504.024353][T10284] overlayfs: failed to resolve './bus': -2 [ 506.858629][T10291] syzkaller0: entered promiscuous mode [ 506.927518][T10291] syzkaller0: entered allmulticast mode [ 507.294358][T10308] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 507.616181][ T8675] udevd[8675]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 508.110002][T10337] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 508.165989][T10338] syzkaller0: entered promiscuous mode [ 508.196843][T10338] syzkaller0: entered allmulticast mode [ 510.661970][T10399] PM: suspend entry (s2idle) [ 510.694795][T10399] PM: Unsupported test mode for suspend to idle, please choose none/freezer/devices/platform. [ 510.743073][T10399] PM: suspend exit [ 511.794780][T10407] syzkaller0: entered promiscuous mode [ 511.800339][T10407] syzkaller0: entered allmulticast mode [ 514.791960][T10490] syzkaller0: entered promiscuous mode [ 514.797524][T10490] syzkaller0: entered allmulticast mode [ 514.820512][T10493] fuse: Bad value for 'fd' [ 516.083622][T10521] fuse: Bad value for 'fd' [ 516.802533][T10543] fuse: Bad value for 'fd' [ 517.255214][T10550] syzkaller0: entered promiscuous mode [ 517.269606][T10550] syzkaller0: entered allmulticast mode [ 521.512255][T10588] syzkaller0: entered promiscuous mode [ 521.517825][T10588] syzkaller0: entered allmulticast mode [ 525.584269][T10667] syzkaller0: entered promiscuous mode [ 525.600175][T10667] syzkaller0: entered allmulticast mode [ 526.112046][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1556'. [ 526.126285][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1556'. [ 526.136184][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1556'. [ 526.146318][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1556'. [ 526.169634][T10687] 9pnet_virtio: no channels available for device syz [ 527.372341][T10701] syzkaller0: entered promiscuous mode [ 527.377901][T10701] syzkaller0: entered allmulticast mode [ 527.495435][T10707] syz_tun: entered promiscuous mode [ 531.261824][T10751] syzkaller0: entered promiscuous mode [ 531.267456][T10751] syzkaller0: entered allmulticast mode [ 535.505559][T10790] syzkaller0: entered promiscuous mode [ 535.547286][T10790] syzkaller0: entered allmulticast mode [ 536.869143][T10792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.523772][T10825] syzkaller0: entered promiscuous mode [ 538.531107][T10825] syzkaller0: entered allmulticast mode [ 540.876369][T10851] syzkaller0: entered promiscuous mode [ 540.891149][T10851] syzkaller0: entered allmulticast mode [ 542.202777][T10878] syzkaller0: entered promiscuous mode [ 542.208510][T10878] syzkaller0: entered allmulticast mode [ 542.218318][T10878] tipc: Enabling of bearer rejected, failed to enable media [ 544.429531][T10885] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.202794][T10885] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.206135][T10885] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.542056][T10885] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.787848][T10885] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.811315][T10885] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.848653][T10885] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.893326][T10885] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.010842][T10910] syzkaller0: entered promiscuous mode [ 547.031203][T10910] syzkaller0: entered allmulticast mode [ 547.051205][T10910] tipc: Enabling of bearer rejected, failed to enable media [ 547.930015][T10933] syzkaller0: entered promiscuous mode [ 547.940805][T10933] syzkaller0: entered allmulticast mode [ 547.966339][T10933] tipc: Enabling of bearer rejected, failed to enable media [ 548.926401][T10965] tipc: Enabling of bearer rejected, failed to enable media [ 549.609415][T10992] syzkaller0: entered promiscuous mode [ 549.615042][T10994] fuse: Bad value for 'group_id' [ 549.621881][T10992] syzkaller0: entered allmulticast mode [ 549.633442][T10992] tipc: Enabling of bearer rejected, failed to enable media [ 549.953891][T11002] loop3: detected capacity change from 0 to 256 [ 550.025696][T11002] FAT-fs (loop3): Directory bread(block 64) failed [ 550.045738][T11002] FAT-fs (loop3): Directory bread(block 65) failed [ 550.093357][T11002] FAT-fs (loop3): Directory bread(block 66) failed [ 550.100021][T11002] FAT-fs (loop3): Directory bread(block 67) failed [ 550.150985][T11002] FAT-fs (loop3): Directory bread(block 68) failed [ 550.161423][T11002] FAT-fs (loop3): Directory bread(block 69) failed [ 550.168126][T11002] FAT-fs (loop3): Directory bread(block 70) failed [ 550.188242][T11002] FAT-fs (loop3): Directory bread(block 71) failed [ 550.205678][T11002] FAT-fs (loop3): Directory bread(block 72) failed [ 550.220979][T11002] FAT-fs (loop3): Directory bread(block 73) failed [ 550.222558][T11012] fuse: Bad value for 'group_id' [ 550.903610][T11024] tipc: Enabling of bearer rejected, failed to enable media [ 551.797318][T11037] fuse: Bad value for 'group_id' [ 552.132915][T11044] syzkaller0: entered promiscuous mode [ 552.139312][T11044] syzkaller0: entered allmulticast mode [ 552.148914][T11044] tipc: Enabling of bearer rejected, failed to enable media [ 552.523320][T11056] netlink: 'syz.2.1706': attribute type 8 has an invalid length. [ 552.986799][T11065] loop1: detected capacity change from 0 to 256 [ 553.058660][T11065] FAT-fs (loop1): Directory bread(block 64) failed [ 553.080274][T11067] syzkaller0: entered promiscuous mode [ 553.087877][T11065] FAT-fs (loop1): Directory bread(block 65) failed [ 553.103590][T11067] syzkaller0: entered allmulticast mode [ 553.111709][T11065] FAT-fs (loop1): Directory bread(block 66) failed [ 553.139864][T11067] tipc: Enabling of bearer rejected, failed to enable media [ 553.150266][T11065] FAT-fs (loop1): Directory bread(block 67) failed [ 553.171696][T11065] FAT-fs (loop1): Directory bread(block 68) failed [ 553.203406][T11065] FAT-fs (loop1): Directory bread(block 69) failed [ 553.218186][T11065] FAT-fs (loop1): Directory bread(block 70) failed [ 553.225629][T11065] FAT-fs (loop1): Directory bread(block 71) failed [ 553.247831][T11065] FAT-fs (loop1): Directory bread(block 72) failed [ 553.281173][T11065] FAT-fs (loop1): Directory bread(block 73) failed [ 554.768077][T11085] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 556.010384][T11096] tipc: Enabling of bearer rejected, failed to enable media [ 556.226728][T11105] typec_fusb302 0-0002: I2C/SMBus block functionality not supported! [ 556.239450][T11105] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x02 [ 556.684536][T11113] loop0: detected capacity change from 0 to 256 [ 556.840815][T11113] FAT-fs (loop0): Directory bread(block 64) failed [ 556.891212][T11113] FAT-fs (loop0): Directory bread(block 65) failed [ 556.933642][T11113] FAT-fs (loop0): Directory bread(block 66) failed [ 556.956536][T11113] FAT-fs (loop0): Directory bread(block 67) failed [ 556.991105][T11113] FAT-fs (loop0): Directory bread(block 68) failed [ 557.027983][T11113] FAT-fs (loop0): Directory bread(block 69) failed [ 557.081511][T11113] FAT-fs (loop0): Directory bread(block 70) failed [ 557.107106][T11113] FAT-fs (loop0): Directory bread(block 71) failed [ 557.131085][T11113] FAT-fs (loop0): Directory bread(block 72) failed [ 557.155512][T11113] FAT-fs (loop0): Directory bread(block 73) failed [ 558.388476][T11124] syzkaller0: entered promiscuous mode [ 558.394075][T11124] syzkaller0: entered allmulticast mode [ 558.514054][T11128] i2c i2c-0: new_device: Extra parameters [ 558.789220][T11137] loop0: detected capacity change from 0 to 256 [ 558.877981][T11137] FAT-fs (loop0): Directory bread(block 64) failed [ 558.886501][T11137] FAT-fs (loop0): Directory bread(block 65) failed [ 558.901711][T11137] FAT-fs (loop0): Directory bread(block 66) failed [ 558.916656][T11137] FAT-fs (loop0): Directory bread(block 67) failed [ 558.936042][T11137] FAT-fs (loop0): Directory bread(block 68) failed [ 558.959072][T11137] FAT-fs (loop0): Directory bread(block 69) failed [ 558.969077][T11137] FAT-fs (loop0): Directory bread(block 70) failed [ 558.975765][T11137] FAT-fs (loop0): Directory bread(block 71) failed [ 558.998302][T11137] FAT-fs (loop0): Directory bread(block 72) failed [ 559.011390][T11137] FAT-fs (loop0): Directory bread(block 73) failed [ 559.401656][T11143] loop0: detected capacity change from 0 to 32768 [ 559.420786][T11143] loop1: detected capacity change from 0 to 32768 [ 559.454813][T11143] loop2: detected capacity change from 0 to 32768 [ 559.500962][T11143] loop3: detected capacity change from 0 to 32768 [ 559.773672][T11152] ntfs3: nullb0: Primary boot signature is not NTFS. [ 559.780577][T11152] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 559.886879][T11143] md/raid:md0: not clean -- starting background reconstruction [ 559.926733][T11143] md/raid:md0: device loop1 operational as raid disk 1 [ 560.021210][T11143] md/raid:md0: device loop0 operational as raid disk 0 [ 560.392498][T11143] md/raid:md0: cannot start dirty degraded array. [ 560.479251][T11158] syzkaller0: entered promiscuous mode [ 560.500390][T11158] syzkaller0: entered allmulticast mode [ 560.896114][T11143] md/raid:md0: failed to run raid set. [ 560.907909][T11163] i2c i2c-0: new_device: Extra parameters [ 560.917477][T11143] md: pers->run() failed ... [ 562.535813][T11183] syzkaller0: entered promiscuous mode [ 562.554910][T11183] syzkaller0: entered allmulticast mode [ 562.728792][T11185] ntfs3: nullb0: Primary boot signature is not NTFS. [ 562.737447][T11185] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 562.953191][T11193] random: crng reseeded on system resumption [ 563.144238][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.457184][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.530069][T11195] loop2: detected capacity change from 0 to 256 [ 565.715823][T11195] FAT-fs (loop2): Directory bread(block 64) failed [ 565.801298][T11199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1760'. [ 566.548127][T11199] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 566.590404][T11195] FAT-fs (loop2): Directory bread(block 65) failed [ 566.612886][T11195] FAT-fs (loop2): Directory bread(block 66) failed [ 566.619593][T11195] FAT-fs (loop2): Directory bread(block 67) failed [ 566.627246][T11195] FAT-fs (loop2): Directory bread(block 68) failed [ 566.634799][T11195] FAT-fs (loop2): Directory bread(block 69) failed [ 566.641914][T11195] FAT-fs (loop2): Directory bread(block 70) failed [ 566.649701][T11195] FAT-fs (loop2): Directory bread(block 71) failed [ 566.664894][T11195] FAT-fs (loop2): Directory bread(block 72) failed [ 566.680522][T11195] FAT-fs (loop2): Directory bread(block 73) failed [ 566.724863][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1760'. [ 566.743884][T11201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1760'. [ 566.756446][T11202] bridge_slave_0: left allmulticast mode [ 566.773174][T11202] bridge_slave_0: left promiscuous mode [ 566.978804][T11202] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.379119][T11202] bridge_slave_1: left allmulticast mode [ 567.426167][T11202] bridge_slave_1: left promiscuous mode [ 567.451858][T11202] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.536986][T11202] bond0: (slave bond_slave_0): Releasing backup interface [ 567.567390][T11212] i2c i2c-0: new_device: Extra parameters [ 567.631276][T11202] bond0: (slave bond_slave_1): Releasing backup interface [ 567.687219][T11202] team0: Port device team_slave_0 removed [ 567.746429][T11202] team0: Port device team_slave_1 removed [ 567.753569][T11202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.788488][T11202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.856482][T11214] loop2: detected capacity change from 0 to 32768 [ 567.894192][T11214] loop3: detected capacity change from 0 to 32768 [ 567.939423][T11214] md: array md0 already has disks! [ 567.966630][T11214] md: could not open device unknown-block(7,0). [ 567.992770][T11214] md: error, md_import_device() returned -16 [ 568.013362][T11214] md: could not open device unknown-block(7,1). [ 568.028479][T11214] md: error, md_import_device() returned -16 [ 568.153210][T11214] md/raid:md0: not clean -- starting background reconstruction [ 568.185912][T11214] md/raid:md0: device loop1 operational as raid disk 1 [ 568.207120][T11214] md/raid:md0: device loop0 operational as raid disk 0 [ 568.258306][T11214] md/raid:md0: cannot start dirty degraded array. [ 568.356052][T11214] md/raid:md0: failed to run raid set. [ 568.369741][T11214] md: pers->run() failed ... [ 568.629177][T11222] ntfs3: nullb0: Primary boot signature is not NTFS. [ 568.652207][T11222] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 573.513027][T11240] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 573.886455][T11252] loop3: detected capacity change from 0 to 256 [ 574.013984][T11256] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x02 (-16) [ 574.034616][T11252] FAT-fs (loop3): Directory bread(block 64) failed [ 574.042503][T11252] FAT-fs (loop3): Directory bread(block 65) failed [ 574.049231][T11252] FAT-fs (loop3): Directory bread(block 66) failed [ 574.071242][T11252] FAT-fs (loop3): Directory bread(block 67) failed [ 574.078015][T11252] FAT-fs (loop3): Directory bread(block 68) failed [ 574.121590][T11252] FAT-fs (loop3): Directory bread(block 69) failed [ 574.128374][T11252] FAT-fs (loop3): Directory bread(block 70) failed [ 574.163808][T11252] FAT-fs (loop3): Directory bread(block 71) failed [ 574.170528][T11252] FAT-fs (loop3): Directory bread(block 72) failed [ 574.183725][T11252] FAT-fs (loop3): Directory bread(block 73) failed [ 576.199779][T11271] fuse: Unknown parameter 'grou00000000000000000000' [ 576.624965][T11277] FAULT_INJECTION: forcing a failure. [ 576.624965][T11277] name failslab, interval 1, probability 10, space 0, times 1 [ 576.625248][ T8259] FAULT_INJECTION: forcing a failure. [ 576.625248][ T8259] name failslab, interval 1, probability 10, space 0, times 1 [ 576.644355][ T8675] FAULT_INJECTION: forcing a failure. [ 576.644355][ T8675] name failslab, interval 1, probability 10, space 0, times 1 [ 576.651684][ T8259] CPU: 1 PID: 8259 Comm: udevd Not tainted syzkaller #0 [ 576.671015][ T8259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 576.681097][ T8259] Call Trace: [ 576.684396][ T8259] [ 576.687353][ T8259] dump_stack_lvl+0x18c/0x250 [ 576.692064][ T8259] ? show_regs_print_info+0x20/0x20 [ 576.697286][ T8259] ? load_image+0x420/0x420 [ 576.701822][ T8259] ? __lock_acquire+0x7d80/0x7d80 [ 576.706881][ T8259] should_fail_ex+0x394/0x4c0 [ 576.711642][ T8259] should_failslab+0x9/0x20 [ 576.716230][ T8259] slab_pre_alloc_hook+0x59/0x300 [ 576.721316][ T8259] kmem_cache_alloc+0x5a/0x2c0 [ 576.726116][ T8259] ? vm_area_alloc+0x10e/0x1d0 [ 576.730916][ T8259] vm_area_alloc+0x10e/0x1d0 [ 576.735535][ T8259] mmap_region+0xcfa/0x2090 [ 576.740089][ T8259] ? file_mmap_ok+0x170/0x170 [ 576.744809][ T8259] ? cap_mmap_addr+0x157/0x2b0 [ 576.749645][ T8259] do_mmap+0x98f/0x10a0 [ 576.753842][ T8259] ? mlock_future_ok+0xf0/0xf0 [ 576.758637][ T8259] ? down_write+0x200/0x200 [ 576.763182][ T8259] vm_mmap_pgoff+0x1c4/0x3f0 [ 576.767809][ T8259] ? account_locked_vm+0x200/0x200 [ 576.772955][ T8259] ? ksys_mmap_pgoff+0xf3/0x720 [ 576.777835][ T8259] ? __x64_sys_mmap+0x7a/0x130 [ 576.782652][ T8259] do_syscall_64+0x55/0xb0 [ 576.787095][ T8259] ? clear_bhb_loop+0x40/0x90 [ 576.791906][ T8259] ? clear_bhb_loop+0x40/0x90 [ 576.796616][ T8259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.802556][ T8259] RIP: 0033:0x7f336991d822 [ 576.807000][ T8259] Code: 00 00 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 76 5b 5d c3 0f 1f 00 48 8b 05 a1 35 0d 00 64 [ 576.826631][ T8259] RSP: 002b:00007ffc97481f08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 576.835079][ T8259] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f336991d822 [ 576.843103][ T8259] RDX: 0000000000000003 RSI: 0000000000000200 RDI: 0000000000000000 [ 576.851094][ T8259] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 576.859083][ T8259] R10: 0000000000000022 R11: 0000000000000246 R12: 00000000000001f6 [ 576.867102][ T8259] R13: 000000000000fe00 R14: 000055ea193cd0b0 R15: 0000000000007e00 [ 576.875128][ T8259] [ 576.878490][ T8675] CPU: 1 PID: 8675 Comm: udevd Not tainted syzkaller #0 [ 576.885580][ T8675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 576.895679][ T8675] Call Trace: [ 576.898996][ T8675] [ 576.901966][ T8675] dump_stack_lvl+0x18c/0x250 [ 576.906698][ T8675] ? show_regs_print_info+0x20/0x20 [ 576.911946][ T8675] ? load_image+0x420/0x420 [ 576.916514][ T8675] ? __might_sleep+0xe0/0xe0 [ 576.921168][ T8675] ? __lock_acquire+0x7d80/0x7d80 [ 576.926255][ T8675] should_fail_ex+0x394/0x4c0 [ 576.930989][ T8675] should_failslab+0x9/0x20 [ 576.935582][ T8675] slab_pre_alloc_hook+0x59/0x300 [ 576.940629][ T8675] ? kernfs_fop_open+0x3d2/0xc60 [ 576.945646][ T8675] __kmem_cache_alloc_node+0x53/0x250 [ 576.951060][ T8675] ? kernfs_fop_open+0x3d2/0xc60 [ 576.956029][ T8675] kmalloc_trace+0x2a/0xe0 [ 576.960478][ T8675] kernfs_fop_open+0x3d2/0xc60 [ 576.965263][ T8675] ? fsnotify_perm+0x271/0x5e0 [ 576.970044][ T8675] do_dentry_open+0x880/0x14b0 [ 576.974827][ T8675] ? kernfs_fop_mmap+0x570/0x570 [ 576.979789][ T8675] path_openat+0x284f/0x3270 [ 576.984407][ T8675] ? do_sys_openat2+0xda/0x1d0 [ 576.989187][ T8675] ? __x64_sys_openat+0x139/0x160 [ 576.994255][ T8675] ? verify_lock_unused+0x140/0x140 [ 576.999468][ T8675] ? do_filp_open+0x430/0x430 [ 577.004172][ T8675] do_filp_open+0x1f2/0x430 [ 577.008711][ T8675] ? vfs_tmpfile+0x620/0x620 [ 577.013338][ T8675] ? _raw_spin_unlock+0x28/0x40 [ 577.018210][ T8675] ? alloc_fd+0x590/0x640 [ 577.022591][ T8675] do_sys_openat2+0x134/0x1d0 [ 577.027284][ T8675] ? do_sys_open+0xe0/0xe0 [ 577.031719][ T8675] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 577.037713][ T8675] ? lock_chain_count+0x20/0x20 [ 577.042589][ T8675] __x64_sys_openat+0x139/0x160 [ 577.047480][ T8675] do_syscall_64+0x55/0xb0 [ 577.051932][ T8675] ? clear_bhb_loop+0x40/0x90 [ 577.056642][ T8675] ? clear_bhb_loop+0x40/0x90 [ 577.061342][ T8675] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.067282][ T8675] RIP: 0033:0x7f33698a7407 [ 577.071721][ T8675] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 577.091359][ T8675] RSP: 002b:00007ffc9747e930 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 577.099783][ T8675] RAX: ffffffffffffffda RBX: 00007f3369f73880 RCX: 00007f33698a7407 [ 577.107758][ T8675] RDX: 0000000000080000 RSI: 00007ffc9747eab0 RDI: ffffffffffffff9c [ 577.115746][ T8675] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 577.123738][ T8675] R10: 0000000000000000 R11: 0000000000000202 R12: 000055e9fb8887f5 [ 577.131719][ T8675] R13: 000055e9fb8887f5 R14: 0000000000000001 R15: 000055e9fb8a3140 [ 577.139710][ T8675] [ 577.143336][T11277] CPU: 1 PID: 11277 Comm: syz.0.1782 Not tainted syzkaller #0 [ 577.150856][T11277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 577.160950][T11277] Call Trace: [ 577.164270][T11277] [ 577.167234][T11277] dump_stack_lvl+0x18c/0x250 [ 577.171973][T11277] ? show_regs_print_info+0x20/0x20 [ 577.177272][T11277] ? load_image+0x420/0x420 [ 577.181858][T11277] ? __might_sleep+0xe0/0xe0 [ 577.186510][T11277] ? __lock_acquire+0x7d80/0x7d80 [ 577.191597][T11277] ? percpu_ref_put+0x12/0x100 [ 577.196437][T11277] should_fail_ex+0x394/0x4c0 [ 577.201205][T11277] should_failslab+0x9/0x20 [ 577.205771][T11277] slab_pre_alloc_hook+0x59/0x300 [ 577.210899][T11277] kmem_cache_alloc+0x5a/0x2c0 [ 577.215745][T11277] ? vm_area_dup+0x61/0x270 [ 577.220309][T11277] vm_area_dup+0x61/0x270 [ 577.224695][T11277] __split_vma+0x1a8/0xc20 [ 577.229176][T11277] ? mmap_write_unlock+0x160/0x160 [ 577.234363][T11277] do_vmi_align_munmap+0x310/0x16a0 [ 577.239630][T11277] ? do_vmi_munmap+0x2d0/0x2d0 [ 577.244471][T11277] ? mtree_range_walk+0x68c/0x7b0 [ 577.249559][T11277] ? mas_find_setup+0x47f/0x590 [ 577.254459][T11277] do_vmi_munmap+0x252/0x2d0 [ 577.259117][T11277] __vm_munmap+0x19e/0x3c0 [ 577.263597][T11277] ? vm_munmap+0x20/0x20 [ 577.267891][T11277] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 577.273938][T11277] ? syscall_enter_from_user_mode+0x25/0x80 [ 577.279912][T11277] __x64_sys_munmap+0x60/0x70 [ 577.284649][T11277] do_syscall_64+0x55/0xb0 [ 577.289150][T11277] ? clear_bhb_loop+0x40/0x90 [ 577.293881][T11277] ? clear_bhb_loop+0x40/0x90 [ 577.298608][T11277] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.304547][T11277] RIP: 0033:0x7fd463d9de99 [ 577.309028][T11277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.328688][T11277] RSP: 002b:00007fd464d17028 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 577.337165][T11277] RAX: ffffffffffffffda RBX: 00007fd464025fa0 RCX: 00007fd463d9de99 [ 577.345190][T11277] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000200000ffc000 [ 577.353208][T11277] RBP: 00007fd463e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 577.361232][T11277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.369248][T11277] R13: 00007fd464026038 R14: 00007fd464025fa0 R15: 00007ffe511451e8 [ 577.377289][T11277] [ 577.462835][T11283] random: crng reseeded on system resumption [ 579.664967][T11286] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x02 (-16) [ 583.751418][T11296] lo speed is unknown, defaulting to 1000 [ 583.899966][T11298] ntfs3: nullb0: Primary boot signature is not NTFS. [ 583.914612][T11303] fuse: Unknown parameter 'grou00000000000000000000' [ 583.922528][T11298] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 586.539544][T11318] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x02 (-16) [ 586.873754][T11325] gretap1: entered allmulticast mode [ 587.038443][T11330] fuse: Unknown parameter 'grou00000000000000000000' [ 587.280510][T11335] lo speed is unknown, defaulting to 1000 [ 587.609208][T11341] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x02 (-16) [ 588.343505][T11351] gretap2: entered allmulticast mode [ 588.429231][T11353] fuse: Unknown parameter 'group_i00000000000000000000' [ 588.504759][T11355] usbip-vudc usbip-vudc.0: failed to lookup sock [ 588.752872][T11361] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x02 (-16) [ 589.063154][T11367] lo speed is unknown, defaulting to 1000 [ 590.195672][T11380] fuse: Unknown parameter 'group_i00000000000000000000' [ 590.448287][T11386] overlayfs: failed to resolve './bus': -2 [ 591.925674][T11398] lo speed is unknown, defaulting to 1000 [ 592.086750][T11403] netlink: 'syz.0.1829': attribute type 1 has an invalid length. [ 592.167126][T11405] gretap1: entered allmulticast mode [ 592.349239][T11407] fuse: Unknown parameter 'group_i00000000000000000000' [ 592.749485][T11416] ntfs3: nullb0: Primary boot signature is not NTFS. [ 592.760926][T11414] overlayfs: failed to resolve './bus': -2 [ 592.780072][T11416] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 593.114466][T11306] Set syz1 is full, maxelem 65536 reached [ 594.500743][ T28] audit: type=1800 audit(1785238879.298:53): pid=11424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1835" name="bus" dev="ramfs" ino=27888 res=0 errno=0 [ 594.899515][T11435] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x02 (-16) [ 595.134439][T11443] overlayfs: failed to resolve './bus': -2 [ 595.389545][T11447] lo speed is unknown, defaulting to 1000 [ 597.828572][T11468] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x02 (-16) [ 598.058219][T11476] ntfs3: nullb0: Primary boot signature is not NTFS. [ 598.071022][T11476] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 599.027626][T11480] lo speed is unknown, defaulting to 1000 [ 599.653310][T11492] loop2: detected capacity change from 0 to 32768 [ 599.682874][T11492] loop3: detected capacity change from 0 to 32768 [ 599.697895][T11492] md: array md0 already has disks! [ 599.728624][T11492] md: could not open device unknown-block(7,0). [ 599.750850][T11492] md: error, md_import_device() returned -16 [ 599.945362][T11492] md/raid:md0: not clean -- starting background reconstruction [ 600.057217][T11492] md/raid:md0: device loop1 operational as raid disk 1 [ 600.069126][T11492] md/raid:md0: device loop0 operational as raid disk 0 [ 600.247646][T11492] md/raid:md0: cannot start dirty degraded array. [ 600.432627][T11492] md/raid:md0: failed to run raid set. [ 600.461654][T11492] md: pers->run() failed ... [ 600.535058][T11502] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x02 (-16) [ 601.314672][T11519] lo speed is unknown, defaulting to 1000 [ 602.195926][T11527] ntfs3: nullb0: Primary boot signature is not NTFS. [ 602.229685][T11527] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 602.389636][T11532] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x02 (-16) [ 602.508496][T11535] random: crng reseeded on system resumption [ 602.877319][T11537] loop2: detected capacity change from 0 to 32768 [ 602.909381][T11537] loop3: detected capacity change from 0 to 32768 [ 602.946455][T11537] md: array md0 already has disks! [ 603.153755][T11537] md/raid:md0: not clean -- starting background reconstruction [ 603.191281][T11537] md/raid:md0: device loop1 operational as raid disk 1 [ 603.213710][T11537] md/raid:md0: device loop0 operational as raid disk 0 [ 603.306302][T11537] md/raid:md0: cannot start dirty degraded array. [ 603.434478][T11537] md/raid:md0: failed to run raid set. [ 603.471966][T11537] md: pers->run() failed ... [ 603.851361][T11553] lo speed is unknown, defaulting to 1000 [ 604.650494][T11563] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x02 (-16) [ 605.046609][T11571] random: crng reseeded on system resumption [ 605.339957][T11576] loop2: detected capacity change from 0 to 32768 [ 605.354928][T11576] loop3: detected capacity change from 0 to 32768 [ 605.467408][T11576] md: array md0 already has disks! [ 606.452793][ T28] audit: type=1800 audit(1785238891.268:54): pid=11577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1889" name="bus" dev="ramfs" ino=28193 res=0 errno=0 [ 606.474390][T11576] md/raid:md0: not clean -- starting background reconstruction [ 606.507435][T11576] md/raid:md0: device loop1 operational as raid disk 1 [ 606.588894][T11576] md/raid:md0: device loop0 operational as raid disk 0 [ 606.789081][T11576] md/raid:md0: couldn't allocate thread. [ 606.933768][T11576] md: pers->run() failed ... [ 607.762755][T11586] lo speed is unknown, defaulting to 1000 [ 608.012406][T11589] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x02 (-16) [ 608.245584][T11597] loop3: detected capacity change from 0 to 256 [ 608.325576][T11597] FAT-fs (loop3): Directory bread(block 64) failed [ 608.355043][T11597] FAT-fs (loop3): Directory bread(block 65) failed [ 608.383986][T11597] FAT-fs (loop3): Directory bread(block 66) failed [ 608.402117][T11597] FAT-fs (loop3): Directory bread(block 67) failed [ 608.409426][T11597] FAT-fs (loop3): Directory bread(block 68) failed [ 608.428879][T11597] FAT-fs (loop3): Directory bread(block 69) failed [ 608.436252][T11597] FAT-fs (loop3): Directory bread(block 70) failed [ 608.446201][T11597] FAT-fs (loop3): Directory bread(block 71) failed [ 608.454179][T11597] FAT-fs (loop3): Directory bread(block 72) failed [ 608.464693][T11597] FAT-fs (loop3): Directory bread(block 73) failed [ 609.873642][T11609] loop2: detected capacity change from 0 to 32768 [ 609.905645][T11609] loop3: detected capacity change from 0 to 32768 [ 609.996810][T11616] random: crng reseeded on system resumption [ 610.146455][T11609] md: array md0 already has disks! [ 611.828283][T11618] md/raid:md0: not clean -- starting background reconstruction [ 611.955381][T11618] md/raid:md0: device loop1 operational as raid disk 1 [ 611.962477][T11618] md/raid:md0: device loop0 operational as raid disk 0 [ 612.077398][T11618] md/raid:md0: couldn't allocate thread. [ 612.224965][T11618] md: pers->run() failed ... [ 612.435788][T11635] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x02 (-16) [ 613.686354][T11645] lo speed is unknown, defaulting to 1000 [ 615.363565][T11658] random: crng reseeded on system resumption [ 616.709783][T11662] loop2: detected capacity change from 0 to 32768 [ 616.789314][T11662] loop3: detected capacity change from 0 to 32768 [ 616.817810][T11667] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x02 (-16) [ 616.831477][T11662] md: could not open device unknown-block(7,0). [ 616.855748][T11662] md: error, md_import_device() returned -16 [ 617.078542][T11662] md/raid:md0: not clean -- starting background reconstruction [ 617.121906][T11675] FAULT_INJECTION: forcing a failure. [ 617.121906][T11675] name failslab, interval 1, probability 10, space 0, times 1 [ 617.126287][ T8675] FAULT_INJECTION: forcing a failure. [ 617.126287][ T8675] name failslab, interval 1, probability 10, space 0, times 1 [ 617.140841][ T8259] FAULT_INJECTION: forcing a failure. [ 617.140841][ T8259] name failslab, interval 1, probability 10, space 0, times 1 [ 617.149740][T11662] FAULT_INJECTION: forcing a failure. [ 617.149740][T11662] name failslab, interval 1, probability 10, space 0, times 1 [ 617.172066][ T5128] FAULT_INJECTION: forcing a failure. [ 617.172066][ T5128] name failslab, interval 1, probability 10, space 0, times 1 [ 617.187168][ T8675] CPU: 0 PID: 8675 Comm: udevd Not tainted syzkaller #0 [ 617.194161][ T8675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 617.204245][ T8675] Call Trace: [ 617.207551][ T8675] [ 617.210514][ T8675] dump_stack_lvl+0x18c/0x250 [ 617.215234][ T8675] ? show_regs_print_info+0x20/0x20 [ 617.220458][ T8675] ? load_image+0x420/0x420 [ 617.224997][ T8675] ? __might_sleep+0xe0/0xe0 [ 617.229620][ T8675] ? __lock_acquire+0x7d80/0x7d80 [ 617.234680][ T8675] should_fail_ex+0x394/0x4c0 [ 617.239396][ T8675] should_failslab+0x9/0x20 [ 617.243936][ T8675] slab_pre_alloc_hook+0x59/0x300 [ 617.248997][ T8675] ? mt_find+0x169/0x640 [ 617.253266][ T8675] kmem_cache_alloc+0x5a/0x2c0 [ 617.258055][ T8675] ? __anon_vma_prepare+0x68/0x440 [ 617.263190][ T8675] __anon_vma_prepare+0x68/0x440 [ 617.268155][ T8675] ? handle_mm_fault+0xe6/0x4a50 [ 617.273116][ T8675] handle_mm_fault+0x3ded/0x4a50 [ 617.278084][ T8675] ? handle_mm_fault+0xe6/0x4a50 [ 617.283065][ T8675] ? numa_migrate_prep+0x350/0x350 [ 617.288212][ T8675] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 617.293553][ T8675] do_user_addr_fault+0x736/0x12d0 [ 617.298709][ T8675] exc_page_fault+0x64/0x100 [ 617.303333][ T8675] asm_exc_page_fault+0x26/0x30 [ 617.308211][ T8675] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 617.314043][ T8675] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 617.333678][ T8675] RSP: 0018:ffffc90004627918 EFLAGS: 00050206 [ 617.339774][ T8675] RAX: ffffffff842f9601 RBX: 1ffff920008c4fb7 RCX: 0000000000000200 [ 617.347774][ T8675] RDX: 0000000000000000 RSI: ffff88807dc3a000 RDI: 00007f3369f5b000 [ 617.355775][ T8675] RBP: ffffc90004627a78 R08: ffff88807dc3a1ff R09: 1ffff1100fb8743f [ 617.363768][ T8675] R10: dffffc0000000000 R11: ffffed100fb87440 R12: ffff88807dc3a000 [ 617.371766][ T8675] R13: 0000000000000200 R14: 0000000000000200 R15: ffffc90004627dc8 [ 617.379769][ T8675] ? _copy_to_iter+0x171/0x1110 [ 617.384687][ T8675] _copy_to_iter+0x24f/0x1110 [ 617.389452][ T8675] ? filemap_read+0xf20/0xf20 [ 617.394169][ T8675] ? iov_iter_init+0x1e0/0x1e0 [ 617.398984][ T8675] ? folio_mark_accessed+0x203/0x14a0 [ 617.404418][ T8675] ? folio_activate_fn+0x2000/0x2000 [ 617.409747][ T8675] ? page_copy_sane+0x4e/0x270 [ 617.414549][ T8675] copy_page_to_iter+0xa7/0x150 [ 617.419439][ T8675] filemap_read+0x830/0xf20 [ 617.423985][ T8675] ? filemap_get_folios_tag+0x840/0x840 [ 617.429574][ T8675] ? down_read+0x1ac/0x2e0 [ 617.434136][ T8675] blkdev_read_iter+0x34a/0x480 [ 617.439058][ T8675] vfs_read+0x486/0x990 [ 617.443250][ T8675] ? kernel_read+0x1e0/0x1e0 [ 617.447875][ T8675] ? down_write+0x200/0x200 [ 617.452428][ T8675] ? __fdget_pos+0x1d8/0x330 [ 617.457053][ T8675] ksys_read+0x151/0x260 [ 617.461336][ T8675] ? vfs_write+0x9a0/0x9a0 [ 617.465788][ T8675] ? lockdep_hardirqs_on+0x98/0x150 [ 617.471044][ T8675] do_syscall_64+0x55/0xb0 [ 617.475489][ T8675] ? clear_bhb_loop+0x40/0x90 [ 617.480208][ T8675] ? clear_bhb_loop+0x40/0x90 [ 617.484911][ T8675] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 617.490832][ T8675] RIP: 0033:0x7f33698a7407 [ 617.495274][ T8675] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 617.514916][ T8675] RSP: 002b:00007ffc97481ed0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 617.523365][ T8675] RAX: ffffffffffffffda RBX: 00007f3369f73880 RCX: 00007f33698a7407 [ 617.531361][ T8675] RDX: 0000000000000200 RSI: 00007f3369f5b000 RDI: 0000000000000009 [ 617.539362][ T8675] RBP: 000055ea193cfc50 R08: 0000000000000000 R09: 0000000000000000 [ 617.547366][ T8675] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000003c [ 617.555364][ T8675] R13: 0000000000fff000 R14: 000055ea193cd038 R15: 00007f336a09a39c [ 617.563377][ T8675] [ 617.566507][ C0] vkms_vblank_simulate: vblank timer overrun [ 617.573987][T11662] CPU: 0 PID: 11662 Comm: syz.0.1914 Not tainted syzkaller #0 [ 617.579941][ T8425] FAULT_INJECTION: forcing a failure. [ 617.579941][ T8425] name failslab, interval 1, probability 10, space 0, times 1 [ 617.581486][T11662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 617.581508][T11662] Call Trace: [ 617.581517][T11662] [ 617.581528][T11662] dump_stack_lvl+0x18c/0x250 [ 617.581566][T11662] ? show_regs_print_info+0x20/0x20 [ 617.581589][T11662] ? load_image+0x420/0x420 [ 617.625410][T11662] ? __might_sleep+0xe0/0xe0 [ 617.630053][T11662] ? __lock_acquire+0x7d80/0x7d80 [ 617.635140][T11662] should_fail_ex+0x394/0x4c0 [ 617.639866][T11662] should_failslab+0x9/0x20 [ 617.644437][T11662] slab_pre_alloc_hook+0x59/0x300 [ 617.649532][T11662] ? kvmalloc_node+0x70/0x180 [ 617.654248][T11662] ? kvmalloc_node+0x70/0x180 [ 617.658963][T11662] __kmem_cache_alloc_node+0x53/0x250 [ 617.664394][T11662] ? kvmalloc_node+0x70/0x180 [ 617.669104][T11662] __kmalloc_node+0xa6/0x240 [ 617.673738][T11662] kvmalloc_node+0x70/0x180 [ 617.678275][T11662] raid456_cpu_up_prepare+0x1db/0x420 [ 617.683802][T11662] ? alloc_stripe+0x2e0/0x2e0 [ 617.688514][T11662] cpuhp_invoke_callback+0x481/0x7e0 [ 617.693845][T11662] ? alloc_stripe+0x2e0/0x2e0 [ 617.698566][T11662] cpuhp_issue_call+0x3ed/0x740 [ 617.703465][T11662] __cpuhp_state_add_instance_cpuslocked+0x22a/0x570 [ 617.710188][T11662] __cpuhp_state_add_instance+0x25/0x40 [ 617.715773][T11662] raid5_alloc_percpu+0x67/0x220 [ 617.720743][T11662] setup_conf+0x1693/0x2a30 [ 617.725295][T11662] ? __add_stripe_bio+0x770/0x770 [ 617.730353][T11662] raid5_run+0x8ac/0x2a00 [ 617.734725][T11662] ? md_run+0xa3c/0x2210 [ 617.739093][T11662] ? mempool_free+0x320/0x320 [ 617.743835][T11662] ? mempool_init+0x3a/0x50 [ 617.748392][T11662] md_run+0x10b3/0x2210 [ 617.752622][T11662] do_md_run+0x34/0x410 [ 617.756814][T11662] md_ioctl+0x20f4/0x24d0 [ 617.761184][T11662] ? blkdev_common_ioctl+0x10ee/0x2580 [ 617.766677][T11662] ? md_release+0x1e0/0x1e0 [ 617.771213][T11662] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 617.776904][T11662] ? blkdev_bszset+0x1f0/0x1f0 [ 617.781700][T11662] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 617.787226][T11662] ? md_release+0x1e0/0x1e0 [ 617.791797][T11662] blkdev_ioctl+0x5b2/0x730 [ 617.796339][T11662] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 617.801845][T11662] ? bpf_lsm_file_ioctl+0x9/0x10 [ 617.806852][T11662] ? security_file_ioctl+0x80/0xa0 [ 617.811997][T11662] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 617.817498][T11662] __se_sys_ioctl+0xfd/0x170 [ 617.822132][T11662] do_syscall_64+0x55/0xb0 [ 617.826576][T11662] ? clear_bhb_loop+0x40/0x90 [ 617.831309][T11662] ? clear_bhb_loop+0x40/0x90 [ 617.836024][T11662] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 617.841971][T11662] RIP: 0033:0x7fd463d9de99 [ 617.846422][T11662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.866061][T11662] RSP: 002b:00007fd464d17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 617.874509][T11662] RAX: ffffffffffffffda RBX: 00007fd464025fa0 RCX: 00007fd463d9de99 [ 617.882507][T11662] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 000000000000000c [ 617.890502][T11662] RBP: 00007fd463e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 617.898514][T11662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 617.906510][T11662] R13: 00007fd464026038 R14: 00007fd464025fa0 R15: 00007ffe511451e8 [ 617.914529][T11662] [ 617.917572][ T8425] CPU: 1 PID: 8425 Comm: kworker/u4:17 Not tainted syzkaller #0 [ 617.917644][ C0] vkms_vblank_simulate: vblank timer overrun [ 617.925236][ T8425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 617.941346][ T8425] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 617.948390][ T8425] Call Trace: [ 617.951711][ T8425] [ 617.954670][ T8425] dump_stack_lvl+0x18c/0x250 [ 617.959406][ T8425] ? show_regs_print_info+0x20/0x20 [ 617.964650][ T8425] ? load_image+0x420/0x420 [ 617.969226][ T8425] should_fail_ex+0x394/0x4c0 [ 617.973991][ T8425] should_failslab+0x9/0x20 [ 617.978536][ T8425] slab_pre_alloc_hook+0x59/0x300 [ 617.983611][ T8425] ? ip_finish_output2+0xb6d/0x1260 [ 617.988908][ T8425] kmem_cache_alloc_node+0x5e/0x310 [ 617.994166][ T8425] ? ip_finish_output2+0xe81/0x1260 [ 617.999397][ T8425] ? __alloc_skb+0x103/0x2c0 [ 618.004025][ T8425] __alloc_skb+0x103/0x2c0 [ 618.008491][ T8425] ip_frag_next+0xcd/0xb00 [ 618.012994][ T8425] ? ip_do_fragment+0x7fa/0x1750 [ 618.017977][ T8425] ip_do_fragment+0x778/0x1750 [ 618.022786][ T8425] ? nf_hook+0xa2/0x390 [ 618.026995][ T8425] ? ip_fragment+0x210/0x210 [ 618.031637][ T8425] ip_output+0x2a5/0x3a0 [ 618.035913][ T8425] ? ip_output+0x5a/0x3a0 [ 618.040279][ T8425] iptunnel_xmit+0x4d0/0x910 [ 618.045014][ T8425] udp_tunnel_xmit_skb+0x22f/0x380 [ 618.050213][ T8425] send4+0x992/0xdc0 [ 618.054162][ T8425] ? send4+0x216/0xdc0 [ 618.058279][ T8425] ? wg_socket_send_skb_to_peer+0x1c0/0x1c0 [ 618.064229][ T8425] wg_socket_send_skb_to_peer+0xd1/0x1c0 [ 618.069900][ T8425] wg_packet_handshake_send_worker+0x207/0x360 [ 618.076092][ T8425] ? wg_prev_queue_dequeue+0x1e0/0x1e0 [ 618.081616][ T8425] ? _raw_spin_unlock_irq+0x23/0x50 [ 618.086855][ T8425] ? process_scheduled_works+0x975/0x1600 [ 618.092616][ T8425] ? process_scheduled_works+0x975/0x1600 [ 618.098386][ T8425] process_scheduled_works+0xa60/0x1600 [ 618.104000][ T8425] ? worker_attach_to_pool+0x370/0x370 [ 618.109497][ T8425] ? assign_work+0x3cc/0x5d0 [ 618.114125][ T8425] worker_thread+0xa5e/0xfe0 [ 618.118782][ T8425] kthread+0x2fa/0x390 [ 618.122875][ T8425] ? pr_cont_work+0x550/0x550 [ 618.127591][ T8425] ? kthread_blkcg+0xd0/0xd0 [ 618.132207][ T8425] ret_from_fork+0x48/0x80 [ 618.136686][ T8425] ? kthread_blkcg+0xd0/0xd0 [ 618.141310][ T8425] ret_from_fork_asm+0x11/0x20 [ 618.146121][ T8425] [ 618.149164][ T5128] CPU: 0 PID: 5128 Comm: klogd Not tainted syzkaller #0 [ 618.156154][ T5128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 618.166249][ T5128] Call Trace: [ 618.169563][ T5128] [ 618.172532][ T5128] dump_stack_lvl+0x18c/0x250 [ 618.177261][ T5128] ? show_regs_print_info+0x20/0x20 [ 618.182507][ T5128] ? load_image+0x420/0x420 [ 618.187062][ T5128] ? __might_sleep+0xe0/0xe0 [ 618.191695][ T5128] ? __lock_acquire+0x7d80/0x7d80 [ 618.196763][ T5128] should_fail_ex+0x394/0x4c0 [ 618.201474][ T5128] should_failslab+0x9/0x20 [ 618.206011][ T5128] slab_pre_alloc_hook+0x59/0x300 [ 618.211083][ T5128] kmem_cache_alloc_node+0x5e/0x310 [ 618.216346][ T5128] ? __alloc_skb+0x103/0x2c0 [ 618.221004][ T5128] __alloc_skb+0x103/0x2c0 [ 618.225478][ T5128] alloc_skb_with_frags+0xcd/0x7a0 [ 618.230645][ T5128] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 618.236598][ T5128] ? lockdep_hardirqs_on+0x98/0x150 [ 618.241843][ T5128] ? aa_label_sk_perm+0x4d4/0x660 [ 618.246919][ T5128] sock_alloc_send_pskb+0x883/0x9a0 [ 618.252262][ T5128] ? sock_kzfree_s+0x50/0x50 [ 618.256896][ T5128] ? do_raw_spin_lock+0x11f/0x2b0 [ 618.261967][ T5128] ? __rwlock_init+0x150/0x150 [ 618.266776][ T5128] ? do_raw_spin_unlock+0x121/0x230 [ 618.272024][ T5128] unix_dgram_sendmsg+0x5a9/0x16e0 [ 618.277213][ T5128] ? aa_af_perm+0x330/0x330 [ 618.281769][ T5128] ? unix_dgram_poll+0x680/0x680 [ 618.286750][ T5128] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 618.293224][ T5128] ? apparmor_socket_sendmsg+0x8e/0x330 [ 618.298812][ T5128] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 618.304139][ T5128] ? security_socket_sendmsg+0x80/0xa0 [ 618.309635][ T5128] __sys_sendto+0x4a9/0x6b0 [ 618.314179][ T5128] ? __ia32_sys_getpeername+0x90/0x90 [ 618.319601][ T5128] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 618.325623][ T5128] ? lock_chain_count+0x20/0x20 [ 618.330520][ T5128] __x64_sys_sendto+0xde/0xf0 [ 618.335233][ T5128] do_syscall_64+0x55/0xb0 [ 618.339685][ T5128] ? clear_bhb_loop+0x40/0x90 [ 618.344396][ T5128] ? clear_bhb_loop+0x40/0x90 [ 618.349106][ T5128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 618.355032][ T5128] RIP: 0033:0x7f5acd107407 [ 618.359477][ T5128] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 618.379121][ T5128] RSP: 002b:00007ffe24295500 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 618.387603][ T5128] RAX: ffffffffffffffda RBX: 00007f5accfb7c80 RCX: 00007f5acd107407 [ 618.395613][ T5128] RDX: 0000000000000055 RSI: 00007ffe24295640 RDI: 0000000000000003 [ 618.403627][ T5128] RBP: 00007ffe24295a70 R08: 0000000000000000 R09: 0000000000000000 [ 618.411650][ T5128] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffe24295a88 [ 618.419653][ T5128] R13: 00007ffe24295640 R14: 000000000000003a R15: 00007ffe24295640 [ 618.427661][ T5128] [ 618.430758][ C0] vkms_vblank_simulate: vblank timer overrun [ 618.437568][ T8259] CPU: 0 PID: 8259 Comm: udevd Not tainted syzkaller #0 [ 618.444560][ T8259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 618.454660][ T8259] Call Trace: [ 618.457989][ T8259] [ 618.460986][ T8259] dump_stack_lvl+0x18c/0x250 [ 618.465719][ T8259] ? show_regs_print_info+0x20/0x20 [ 618.470931][ T8259] ? load_image+0x420/0x420 [ 618.475451][ T8259] ? __lock_acquire+0x7d80/0x7d80 [ 618.480486][ T8259] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 618.486234][ T8259] ? lockdep_hardirqs_on+0x98/0x150 [ 618.491486][ T8259] should_fail_ex+0x394/0x4c0 [ 618.496214][ T8259] should_failslab+0x9/0x20 [ 618.500764][ T8259] slab_pre_alloc_hook+0x59/0x300 [ 618.505849][ T8259] ? mas_next_slot+0x910/0x980 [ 618.510666][ T8259] kmem_cache_alloc+0x5a/0x2c0 [ 618.515488][ T8259] ? vm_area_alloc+0x24/0x1d0 [ 618.520217][ T8259] vm_area_alloc+0x24/0x1d0 [ 618.524766][ T8259] mmap_region+0xcfa/0x2090 [ 618.529346][ T8259] ? file_mmap_ok+0x170/0x170 [ 618.534095][ T8259] ? cap_mmap_addr+0x157/0x2b0 [ 618.538930][ T8259] do_mmap+0x98f/0x10a0 [ 618.543185][ T8259] ? mlock_future_ok+0xf0/0xf0 [ 618.548006][ T8259] ? down_write+0x200/0x200 [ 618.552575][ T8259] vm_mmap_pgoff+0x1c4/0x3f0 [ 618.557235][ T8259] ? account_locked_vm+0x200/0x200 [ 618.562455][ T8259] ? ksys_mmap_pgoff+0xf3/0x720 [ 618.567385][ T8259] ? __x64_sys_mmap+0x7a/0x130 [ 618.572206][ T8259] do_syscall_64+0x55/0xb0 [ 618.576676][ T8259] ? clear_bhb_loop+0x40/0x90 [ 618.581398][ T8259] ? clear_bhb_loop+0x40/0x90 [ 618.586139][ T8259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 618.592091][ T8259] RIP: 0033:0x7f336991d822 [ 618.596553][ T8259] Code: 00 00 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 76 5b 5d c3 0f 1f 00 48 8b 05 a1 35 0d 00 64 [ 618.616204][ T8259] RSP: 002b:00007ffc97481f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 618.624666][ T8259] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f336991d822 [ 618.632686][ T8259] RDX: 0000000000000003 RSI: 0000000000000200 RDI: 0000000000000000 [ 618.640697][ T8259] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 618.648714][ T8259] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000000 [ 618.656730][ T8259] R13: 0000000000fb6200 R14: 000055ea193cfcb0 R15: 0000000000fce200 [ 618.664761][ T8259] [ 618.667887][ C0] vkms_vblank_simulate: vblank timer overrun [ 618.674704][T11675] CPU: 0 PID: 11675 Comm: syz.1.1917 Not tainted syzkaller #0 [ 618.682215][T11675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 618.692312][T11675] Call Trace: [ 618.695631][T11675] [ 618.698597][T11675] dump_stack_lvl+0x18c/0x250 [ 618.703334][T11675] ? show_regs_print_info+0x20/0x20 [ 618.708591][T11675] ? load_image+0x420/0x420 [ 618.713153][T11675] ? __might_sleep+0xe0/0xe0 [ 618.717801][T11675] ? __lock_acquire+0x7d80/0x7d80 [ 618.722882][T11675] ? percpu_ref_put+0x12/0x100 [ 618.727693][T11675] should_fail_ex+0x394/0x4c0 [ 618.732438][T11675] should_failslab+0x9/0x20 [ 618.737011][T11675] slab_pre_alloc_hook+0x59/0x300 [ 618.742104][T11675] kmem_cache_alloc+0x5a/0x2c0 [ 618.746926][T11675] ? vm_area_dup+0x61/0x270 [ 618.751489][T11675] vm_area_dup+0x61/0x270 [ 618.755873][T11675] __split_vma+0x1a8/0xc20 [ 618.760351][T11675] ? mmap_write_unlock+0x160/0x160 [ 618.765538][T11675] do_vmi_align_munmap+0x310/0x16a0 [ 618.770802][T11675] ? do_vmi_munmap+0x2d0/0x2d0 [ 618.775635][T11675] ? mtree_range_walk+0x68c/0x7b0 [ 618.780729][T11675] ? mas_find_setup+0x47f/0x590 [ 618.785637][T11675] do_vmi_munmap+0x252/0x2d0 [ 618.790299][T11675] __vm_munmap+0x19e/0x3c0 [ 618.794780][T11675] ? vm_munmap+0x20/0x20 [ 618.795614][T11662] raid456_cpu_up_prepare: failed memory allocation for cpu0 [ 618.799059][T11675] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 618.812391][T11675] ? syscall_enter_from_user_mode+0x25/0x80 [ 618.818349][T11675] __x64_sys_munmap+0x60/0x70 [ 618.823117][T11675] do_syscall_64+0x55/0xb0 [ 618.827594][T11675] ? clear_bhb_loop+0x40/0x90 [ 618.832330][T11675] ? clear_bhb_loop+0x40/0x90 [ 618.837056][T11675] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 618.837746][T11662] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 618.842973][T11675] RIP: 0033:0x7fa7ea59de99 [ 618.854691][T11662] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 618.859116][T11675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.867526][T11662] CPU: 1 PID: 11662 Comm: syz.0.1914 Not tainted syzkaller #0 [ 618.887132][T11675] RSP: 002b:00007fa7e87f6028 EFLAGS: 00000246 [ 618.894589][T11662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 618.894603][T11662] RIP: 0010:__cpuhp_state_remove_instance+0x217/0x2e0 [ 618.900668][T11675] ORIG_RAX: 000000000000000b [ 618.910729][T11662] Code: 8b 3b 48 89 1c 24 48 83 c3 08 49 89 de 49 c1 ee 03 43 80 3c 2e 00 74 08 48 89 df e8 b3 4f 8e 00 4c 8b 23 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 3a 50 8e 00 4d 89 3c 24 4d 85 ff [ 618.917489][T11675] RAX: ffffffffffffffda RBX: 00007fa7ea825fa0 RCX: 00007fa7ea59de99 [ 618.922163][T11662] RSP: 0018:ffffc9000344f790 EFLAGS: 00010246 [ 618.941776][T11675] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000200000ffc000 [ 618.949758][T11662] [ 618.949765][T11662] RAX: 0000000000000000 RBX: ffff8880245e8430 RCX: 0000000000080000 [ 618.955823][T11675] RBP: 00007fa7ea633eaf R08: 0000000000000000 R09: 0000000000000000 [ 618.963794][T11662] RDX: ffffc9000b9a1000 RSI: 000000000007ffff RDI: 0000000000080000 [ 618.966124][T11675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.974099][T11662] RBP: 1ffff110048bd085 R08: ffffffff8e8c7caf R09: 1ffffffff1d18f95 [ 618.982075][T11675] R13: 00007fa7ea826038 R14: 00007fa7ea825fa0 R15: 00007ffca93cdf08 [ 618.990050][T11662] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: 0000000000000000 [ 618.998041][T11675] [ 619.005997][T11662] R13: dffffc0000000000 R14: 1ffff110048bd086 R15: 0000000000000000 [ 619.014323][ C0] vkms_vblank_simulate: vblank timer overrun [ 619.021958][T11662] FS: 00007fd464d176c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 619.048154][T11662] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 619.054785][T11662] CR2: 00007fca2cca3bb8 CR3: 000000002bc95000 CR4: 00000000003506e0 [ 619.062785][T11662] Call Trace: [ 619.066087][T11662] [ 619.069046][T11662] free_conf+0x294/0x4b0 [ 619.073318][T11662] setup_conf+0x16c4/0x2a30 [ 619.077863][T11662] ? __add_stripe_bio+0x770/0x770 [ 619.082948][T11662] raid5_run+0x8ac/0x2a00 [ 619.087309][T11662] ? md_run+0xa3c/0x2210 [ 619.091584][T11662] ? mempool_free+0x320/0x320 [ 619.096287][T11662] ? mempool_init+0x3a/0x50 [ 619.100841][T11662] md_run+0x10b3/0x2210 [ 619.105030][T11662] do_md_run+0x34/0x410 [ 619.109210][T11662] md_ioctl+0x20f4/0x24d0 [ 619.113570][T11662] ? blkdev_common_ioctl+0x10ee/0x2580 [ 619.119058][T11662] ? md_release+0x1e0/0x1e0 [ 619.123588][T11662] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 619.129250][T11662] ? blkdev_bszset+0x1f0/0x1f0 [ 619.134038][T11662] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 619.139543][T11662] ? md_release+0x1e0/0x1e0 [ 619.144071][T11662] blkdev_ioctl+0x5b2/0x730 [ 619.148601][T11662] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 619.154093][T11662] ? bpf_lsm_file_ioctl+0x9/0x10 [ 619.159053][T11662] ? security_file_ioctl+0x80/0xa0 [ 619.164206][T11662] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 619.169689][T11662] __se_sys_ioctl+0xfd/0x170 [ 619.174329][T11662] do_syscall_64+0x55/0xb0 [ 619.178786][T11662] ? clear_bhb_loop+0x40/0x90 [ 619.183506][T11662] ? clear_bhb_loop+0x40/0x90 [ 619.188226][T11662] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 619.194143][T11662] RIP: 0033:0x7fd463d9de99 [ 619.198578][T11662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.218206][T11662] RSP: 002b:00007fd464d17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 619.226646][T11662] RAX: ffffffffffffffda RBX: 00007fd464025fa0 RCX: 00007fd463d9de99 [ 619.234641][T11662] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 000000000000000c [ 619.242627][T11662] RBP: 00007fd463e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 619.250616][T11662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.258604][T11662] R13: 00007fd464026038 R14: 00007fd464025fa0 R15: 00007ffe511451e8 [ 619.266604][T11662] [ 619.269655][T11662] Modules linked in: [ 619.320912][T11662] ---[ end trace 0000000000000000 ]--- [ 619.327182][T11662] RIP: 0010:__cpuhp_state_remove_instance+0x217/0x2e0 [ 619.339424][T11662] Code: 8b 3b 48 89 1c 24 48 83 c3 08 49 89 de 49 c1 ee 03 43 80 3c 2e 00 74 08 48 89 df e8 b3 4f 8e 00 4c 8b 23 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 3a 50 8e 00 4d 89 3c 24 4d 85 ff [ 619.395681][T11662] RSP: 0018:ffffc9000344f790 EFLAGS: 00010246 [ 619.422528][T11662] RAX: 0000000000000000 RBX: ffff8880245e8430 RCX: 0000000000080000 [ 619.435930][T11662] RDX: ffffc9000b9a1000 RSI: 000000000007ffff RDI: 0000000000080000 [ 619.478763][T11662] RBP: 1ffff110048bd085 R08: ffffffff8e8c7caf R09: 1ffffffff1d18f95 [ 619.490607][T11662] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: 0000000000000000 [ 619.510946][T11662] R13: dffffc0000000000 R14: 1ffff110048bd086 R15: 0000000000000000 [ 619.519039][T11662] FS: 00007fd464d176c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 619.530093][T11662] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 619.538137][T11662] CR2: 00007f3369f6f000 CR3: 000000002bc95000 CR4: 00000000003506f0 [ 619.546661][T11662] Kernel panic - not syncing: Fatal exception [ 619.553344][T11662] Kernel Offset: disabled [ 619.557697][T11662] Rebooting in 86400 seconds..