last executing test programs: 2.871393499s ago: executing program 1 (id=1834): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, 0x0, 0x99db2319038923ce) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1, @ANYRES8], 0x3c}, 0x1, 0x0, 0x0, 0xc881}, 0x10) 2.765263513s ago: executing program 1 (id=1837): timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x20, 0x4, 0x0, 0x8}, {0x6, 0x1, 0x0, 0xa}]}) timer_create(0xfffffffffffffffd, 0x0, 0x0) timer_delete(r0) socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ftruncate(0xffffffffffffffff, 0x2000009) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff004) 2.23774308s ago: executing program 0 (id=1842): r0 = socket$inet(0x2, 0x1, 0x6) connect(r0, 0x0, 0x0) 2.154635802s ago: executing program 0 (id=1843): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000001380)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000012c0)={r3, 0x8002, 0x7fff, 0x0, 0x0, [0x0], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)) close_range(r5, 0xffffffffffffffff, 0x0) 2.144289823s ago: executing program 0 (id=1844): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)='\n', 0x1) 1.856434012s ago: executing program 0 (id=1848): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x135}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x2, 0x3, @mcast2}, 0x1c, &(0x7f00000002c0)=[{}], 0x1}, 0x30008b08) 1.855376732s ago: executing program 1 (id=1849): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) execve(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb0100180000000000000028000000"], &(0x7f0000000040)=""/3, 0x44, 0x3, 0x1, 0x5}, 0x28) 1.083720216s ago: executing program 0 (id=1850): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x89) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile(r2, r1, 0x0, 0x7ffff000) 986.631379ms ago: executing program 3 (id=1851): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) 962.81137ms ago: executing program 1 (id=1853): fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80), 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_max_data_len={{0xe}, {0x7, 0xb, 0x0, 0x3, 0x800}}}}, 0xf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 914.626911ms ago: executing program 3 (id=1854): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x99db2319038923ce) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1, @ANYRES8], 0x3c}, 0x1, 0x0, 0x0, 0xc881}, 0x10) 871.837953ms ago: executing program 3 (id=1855): mount$overlay(0x0, 0x0, &(0x7f00000002c0), 0x8, 0x0) setuid(0xee01) openat$tun(0xffffffffffffff9c, 0x0, 0x2a0140, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0x13e, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cubic', 0x62) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) shutdown(r0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001400b59500000c00"], 0x18}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)={r1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e25, @multicast2}, 0x314, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xdc) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x105042, 0x0) chdir(0x0) r3 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) fsopen(&(0x7f0000000180)='proc\x00', 0x1) 725.651277ms ago: executing program 2 (id=1858): add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000480)="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", 0x1ca, 0xfffffffffffffffd) 724.484457ms ago: executing program 2 (id=1859): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000180)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0'}, 0x6b) 638.6956ms ago: executing program 2 (id=1860): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r1, 0x3e}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1}, 0x20004801) 571.940922ms ago: executing program 3 (id=1861): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) execve(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb0100180000000000000028000000"], &(0x7f0000000040)=""/3, 0x44, 0x3, 0x1, 0x5}, 0x28) 502.889894ms ago: executing program 2 (id=1862): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) 235.908463ms ago: executing program 2 (id=1863): unshare(0x22020600) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000480)={@cgroup=r1, r0, 0x2f, 0x2018, 0x4}, 0x20) 187.184754ms ago: executing program 1 (id=1864): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0900000004000000080000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xb, &(0x7f0000000200)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x6}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 185.913785ms ago: executing program 3 (id=1865): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, 0x0, 0x99db2319038923ce) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0, @ANYRES8], 0x3c}, 0x1, 0x0, 0x0, 0xc881}, 0x10) 78.598408ms ago: executing program 0 (id=1866): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@private=0xa010101, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x6c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 78.383917ms ago: executing program 2 (id=1867): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) 53.368469ms ago: executing program 3 (id=1868): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x2, 0x3}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000001680)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, r2, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x3}}, 0x20) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r3, &(0x7f0000000250)='/dev/zram0,0', 0xb3) 0s ago: executing program 1 (id=1869): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x100000001}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0), 0x0, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): fuse: Unknown parameter '0x0000000000000003' [ 89.210416][ T6187] binder: 6186:6187 ioctl c0306201 0 returned -14 [ 89.447195][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.125'. [ 89.596093][ T6206] fuse: Unknown parameter '0x0000000000000003' [ 89.608418][ T6207] loop3: detected capacity change from 0 to 128 [ 89.676553][ T6209] binder: 6208:6209 ioctl c0306201 0 returned -14 [ 89.686776][ T5767] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 89.800232][ T6211] can0: slcan on pts0. [ 90.067630][ T6210] can0 (unregistered): slcan off pts0. [ 91.002976][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'. [ 91.234234][ T6241] binder: 6240:6241 ioctl c0306201 0 returned -14 [ 91.516120][ T6253] loop0: detected capacity change from 0 to 128 [ 91.637011][ T5767] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 93.090267][ T6296] loop2: detected capacity change from 0 to 128 [ 93.312016][ T5767] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.100554][ T6306] loop1: detected capacity change from 0 to 1024 [ 94.184573][ T6306] ======================================================= [ 94.184573][ T6306] WARNING: The mand mount option has been deprecated and [ 94.184573][ T6306] and is ignored by this kernel. Remove the mand [ 94.184573][ T6306] option from the mount to silence this warning. [ 94.184573][ T6306] ======================================================= [ 94.239154][ T6306] ext3: Unknown parameter 'smackfstransmute' [ 94.457878][ T6315] loop1: detected capacity change from 0 to 128 [ 94.539068][ T6315] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.567320][ T6315] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.111401][ T5772] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.564727][ T6361] warning: `syz.3.172' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.837693][ T6367] netlink: 'syz.1.175': attribute type 8 has an invalid length. [ 96.863116][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.175'. [ 96.931860][ T6373] netlink: 156 bytes leftover after parsing attributes in process `syz.3.172'. [ 97.924050][ T6391] tipc: Failed to obtain node identity [ 97.933231][ T6391] tipc: Enabling of bearer rejected, failed to enable media [ 98.115676][ T6397] netlink: 'syz.2.187': attribute type 8 has an invalid length. [ 98.141444][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.187'. [ 98.565898][ T6411] fuse: Unknown parameter 'user_id00000000000000000000' [ 101.066593][ T6461] loop3: detected capacity change from 0 to 1024 [ 101.102973][ T6461] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.172875][ T6466] Cannot find set identified by id 0 to match [ 101.186552][ T6461] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e002c028, mo2=0102] [ 101.195221][ T6461] System zones: 0-1, 3-12 [ 101.201796][ T6461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.283853][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.309308][ T6471] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.217'. [ 101.663966][ T6484] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 102.382754][ T6498] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 102.396238][ T42] kernel read not supported for file /video9 (pid: 42 comm: kworker/1:1) [ 102.417941][ T6504] mac80211_hwsim hwsim0 wlan0: left allmulticast mode [ 102.938806][ T6516] FAULT_INJECTION: forcing a failure. [ 102.938806][ T6516] name failslab, interval 1, probability 0, space 0, times 1 [ 102.954899][ T6516] CPU: 1 PID: 6516 Comm: syz.0.233 Not tainted syzkaller #0 [ 102.962254][ T6516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.972353][ T6516] Call Trace: [ 102.975686][ T6516] [ 102.978646][ T6516] dump_stack_lvl+0x18c/0x250 [ 102.983385][ T6516] ? show_regs_print_info+0x20/0x20 [ 102.988626][ T6516] ? load_image+0x420/0x420 [ 102.993175][ T6516] ? __might_sleep+0xe0/0xe0 [ 102.997820][ T6516] ? __lock_acquire+0x7eb0/0x7eb0 [ 103.002892][ T6516] should_fail_ex+0x394/0x4c0 [ 103.007622][ T6516] should_failslab+0x9/0x20 [ 103.012172][ T6516] slab_pre_alloc_hook+0x59/0x300 [ 103.017250][ T6516] ? x509_get_sig_params+0x215/0x860 [ 103.022570][ T6516] ? x509_get_sig_params+0x215/0x860 [ 103.027902][ T6516] __kmem_cache_alloc_node+0x53/0x250 [ 103.033335][ T6516] ? x509_get_sig_params+0x215/0x860 [ 103.038661][ T6516] __kmalloc+0xa7/0x240 [ 103.042870][ T6516] x509_get_sig_params+0x215/0x860 [ 103.048025][ T6516] ? __asan_memcpy+0x40/0x70 [ 103.052666][ T6516] x509_cert_parse+0x4af/0x7b0 [ 103.057483][ T6516] x509_key_preparse+0x64/0x6c0 [ 103.062376][ T6516] ? down_read+0x1ac/0x2e0 [ 103.066837][ T6516] asymmetric_key_preparse+0xa9/0x140 [ 103.072263][ T6516] __key_create_or_update+0x3a6/0xa60 [ 103.077689][ T6516] ? key_create_or_update+0x60/0x60 [ 103.082924][ T6516] ? bpf_lsm_key_permission+0x9/0x10 [ 103.088250][ T6516] ? lookup_user_key+0xb66/0x1140 [ 103.093313][ T6516] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 103.099335][ T6516] key_create_or_update+0x42/0x60 [ 103.104405][ T6516] __se_sys_add_key+0x34f/0x410 [ 103.109334][ T6516] ? __x64_sys_add_key+0xc0/0xc0 [ 103.114381][ T6516] ? lockdep_hardirqs_on+0x98/0x150 [ 103.119623][ T6516] ? __x64_sys_add_key+0x20/0xc0 [ 103.124619][ T6516] do_syscall_64+0x55/0xb0 [ 103.129083][ T6516] ? clear_bhb_loop+0x40/0x90 [ 103.133789][ T6516] ? clear_bhb_loop+0x40/0x90 [ 103.138509][ T6516] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.144442][ T6516] RIP: 0033:0x7f185cb9e159 [ 103.148889][ T6516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.168531][ T6516] RSP: 002b:00007f185daad028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 103.176978][ T6516] RAX: ffffffffffffffda RBX: 00007f185ce25fa0 RCX: 00007f185cb9e159 [ 103.184980][ T6516] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 103.192982][ T6516] RBP: 00007f185cc3506b R08: ffffffffffffffff R09: 0000000000000000 [ 103.200979][ T6516] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 103.208971][ T6516] R13: 00007f185ce26038 R14: 00007f185ce25fa0 R15: 00007ffda5edbe28 [ 103.216994][ T6516] [ 103.220133][ C1] vkms_vblank_simulate: vblank timer overrun [ 104.728873][ T6555] syz.0.241 uses obsolete (PF_INET,SOCK_PACKET) [ 104.765196][ T2134] smpboot: CPU 1 is now offline [ 105.164641][ T6563] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.242'. [ 106.220846][ T6587] loop0: detected capacity change from 0 to 512 [ 106.288676][ T6587] EXT4-fs: Ignoring removed nobh option [ 106.364818][ T6587] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 106.417210][ T6587] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 106.554251][ T6587] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #13: comm syz.0.250: inode has both inline data and extents flags [ 106.627749][ T6587] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.250: couldn't read orphan inode 13 (err -117) [ 106.724988][ T6587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.847909][ T6587] EXT4-fs (loop0): shut down requested (2) [ 107.003530][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.104961][ T6649] loop1: detected capacity change from 0 to 128 [ 109.108953][ T6671] loop0: detected capacity change from 0 to 512 [ 109.238199][ T6671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.366419][ T6671] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.568749][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.966835][ T6703] loop1: detected capacity change from 0 to 128 [ 110.673589][ T6715] netlink: 'syz.3.286': attribute type 72 has an invalid length. [ 110.692959][ T6715] netlink: 'syz.3.286': attribute type 8 has an invalid length. [ 111.174119][ T6737] netlink: 'syz.1.297': attribute type 72 has an invalid length. [ 111.186480][ T6737] netlink: 'syz.1.297': attribute type 8 has an invalid length. [ 111.310523][ T6743] loop1: detected capacity change from 0 to 128 [ 112.077142][ T6757] netlink: 892 bytes leftover after parsing attributes in process `syz.3.306'. [ 112.222605][ T6761] netlink: 'syz.0.308': attribute type 8 has an invalid length. [ 112.260282][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.308'. [ 112.590485][ T6779] netlink: 892 bytes leftover after parsing attributes in process `syz.0.317'. [ 112.620472][ T6781] loop1: detected capacity change from 0 to 128 [ 114.208377][ T6790] netlink: 'syz.1.320': attribute type 8 has an invalid length. [ 114.241356][ T6790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 114.462903][ T6804] netlink: 892 bytes leftover after parsing attributes in process `syz.0.327'. [ 114.488649][ T6806] loop3: detected capacity change from 0 to 128 [ 114.533287][ T5767] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 115.224700][ T6817] netlink: 'syz.2.333': attribute type 8 has an invalid length. [ 115.233682][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.333'. [ 115.580686][ T6829] FAULT_INJECTION: forcing a failure. [ 115.580686][ T6829] name failslab, interval 1, probability 0, space 0, times 0 [ 115.640367][ T6829] CPU: 0 PID: 6829 Comm: syz.2.339 Not tainted syzkaller #0 [ 115.647679][ T6829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.657717][ T6829] Call Trace: [ 115.660981][ T6829] [ 115.663899][ T6829] dump_stack_lvl+0x18c/0x250 [ 115.668589][ T6829] ? show_regs_print_info+0x20/0x20 [ 115.673785][ T6829] ? load_image+0x420/0x420 [ 115.678282][ T6829] ? __might_sleep+0xe0/0xe0 [ 115.682866][ T6829] ? __lock_acquire+0x7eb0/0x7eb0 [ 115.687886][ T6829] should_fail_ex+0x394/0x4c0 [ 115.692563][ T6829] should_failslab+0x9/0x20 [ 115.697062][ T6829] slab_pre_alloc_hook+0x59/0x300 [ 115.702081][ T6829] ? asymmetric_key_generate_id+0xf0/0x150 [ 115.707874][ T6829] ? x509_key_preparse+0x225/0x6c0 [ 115.712968][ T6829] ? x509_key_preparse+0x225/0x6c0 [ 115.718073][ T6829] __kmem_cache_alloc_node+0x53/0x250 [ 115.723457][ T6829] ? x509_key_preparse+0x225/0x6c0 [ 115.728553][ T6829] __kmalloc+0xa7/0x240 [ 115.732737][ T6829] x509_key_preparse+0x225/0x6c0 [ 115.737679][ T6829] asymmetric_key_preparse+0xa9/0x140 [ 115.743072][ T6829] __key_create_or_update+0x3a6/0xa60 [ 115.748449][ T6829] ? key_create_or_update+0x60/0x60 [ 115.753637][ T6829] ? bpf_lsm_key_permission+0x9/0x10 [ 115.758913][ T6829] ? lookup_user_key+0xb66/0x1140 [ 115.763926][ T6829] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 115.769893][ T6829] key_create_or_update+0x42/0x60 [ 115.774909][ T6829] __se_sys_add_key+0x34f/0x410 [ 115.779765][ T6829] ? __x64_sys_add_key+0xc0/0xc0 [ 115.784701][ T6829] ? lockdep_hardirqs_on+0x98/0x150 [ 115.789902][ T6829] ? __x64_sys_add_key+0x20/0xc0 [ 115.794848][ T6829] do_syscall_64+0x55/0xb0 [ 115.799255][ T6829] ? clear_bhb_loop+0x40/0x90 [ 115.803916][ T6829] ? clear_bhb_loop+0x40/0x90 [ 115.808591][ T6829] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.814492][ T6829] RIP: 0033:0x7f1f47b9e159 [ 115.818891][ T6829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.838481][ T6829] RSP: 002b:00007f1f48b09028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 115.846880][ T6829] RAX: ffffffffffffffda RBX: 00007f1f47e25fa0 RCX: 00007f1f47b9e159 [ 115.854855][ T6829] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 115.862807][ T6829] RBP: 00007f1f47c3506b R08: ffffffffffffffff R09: 0000000000000000 [ 115.870780][ T6829] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 115.878731][ T6829] R13: 00007f1f47e26038 R14: 00007f1f47e25fa0 R15: 00007fffd3203a08 [ 115.886696][ T6829] [ 115.889809][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.049202][ T6827] 9pnet_fd: Insufficient options for proto=fd [ 116.077356][ T6836] netlink: 24 bytes leftover after parsing attributes in process `syz.1.342'. [ 116.264116][ T6842] loop1: detected capacity change from 0 to 128 [ 116.927372][ T6860] netlink: 24 bytes leftover after parsing attributes in process `syz.0.352'. [ 117.085478][ T6865] process 'syz.0.354' launched './proc/thread-self/fail-nth' with NULL argv: empty string added [ 117.742319][ T6882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.361'. [ 118.990293][ T6890] loop3: detected capacity change from 0 to 128 [ 120.128656][ T6908] netlink: 24 bytes leftover after parsing attributes in process `syz.3.371'. [ 120.507262][ T6919] loop2: detected capacity change from 0 to 128 [ 121.482081][ T6943] loop2: detected capacity change from 0 to 512 [ 121.514592][ T6943] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿ01777777777777777777777" or missing value [ 121.604290][ T5767] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 121.839565][ T6952] loop2: detected capacity change from 0 to 512 [ 121.901329][ T6952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.968828][ T6952] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 122.000685][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.092669][ T6952] EXT4-fs error (device loop2): ext4_readdir:223: inode #12: comm syz.2.390: path (unknown): directory fails checksum at offset 0 [ 122.219677][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.396653][ T6967] loop2: detected capacity change from 0 to 128 [ 123.862715][ T6981] tipc: Started in network mode [ 123.885214][ T6981] tipc: Node identity 4, cluster identity 4711 [ 123.929022][ T6981] tipc: Node number set to 4 [ 123.951926][ T3494] tipc: Subscription rejected, illegal request [ 124.410141][ T7001] loop3: detected capacity change from 0 to 128 [ 125.407077][ T7016] loop3: detected capacity change from 0 to 1024 [ 125.434116][ T7016] EXT4-fs: Ignoring removed oldalloc option [ 125.486288][ T7016] EXT4-fs: Ignoring removed orlov option [ 125.536288][ T7016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.597173][ T7016] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.882230][ T5810] kernel write not supported for file 265/net/vlan/vlan1 (pid: 5810 comm: kworker/0:3) [ 126.679713][ T7042] loop0: detected capacity change from 0 to 128 [ 127.293561][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 127.837478][ T7057] netlink: 156 bytes leftover after parsing attributes in process `syz.1.426'. [ 129.704594][ T7089] gadgetfs: bound to dummy_udc driver [ 129.824627][ T7092] loop1: detected capacity change from 0 to 128 [ 130.466684][ T7106] netlink: 156 bytes leftover after parsing attributes in process `syz.2.439'. [ 131.427454][ T7118] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 132.468964][ T7132] loop3: detected capacity change from 0 to 128 [ 133.068164][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.075351][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.298649][ T7144] netlink: 156 bytes leftover after parsing attributes in process `syz.0.452'. [ 134.861481][ T7165] ip_tables: iptables: counters copy to user failed while replacing table [ 135.382131][ T7171] IPVS: rr: UDP [::1]:8080 - no destination available [ 135.396546][ T5810] IPVS: starting estimator thread 0... [ 135.457106][ T7176] FAULT_INJECTION: forcing a failure. [ 135.457106][ T7176] name failslab, interval 1, probability 0, space 0, times 0 [ 135.501781][ T7172] IPVS: using max 34 ests per chain, 81600 per kthread [ 135.514527][ T7176] CPU: 0 PID: 7176 Comm: syz.2.463 Not tainted syzkaller #0 [ 135.521839][ T7176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.531899][ T7176] Call Trace: [ 135.535170][ T7176] [ 135.538088][ T7176] dump_stack_lvl+0x18c/0x250 [ 135.542782][ T7176] ? show_regs_print_info+0x20/0x20 [ 135.547979][ T7176] ? load_image+0x420/0x420 [ 135.552482][ T7176] ? __lock_acquire+0x7eb0/0x7eb0 [ 135.557503][ T7176] should_fail_ex+0x394/0x4c0 [ 135.562187][ T7176] should_failslab+0x9/0x20 [ 135.566691][ T7176] slab_pre_alloc_hook+0x59/0x300 [ 135.571717][ T7176] ? handler_new_ref+0x244/0x920 [ 135.576649][ T7176] ? handler_new_ref+0x244/0x920 [ 135.581579][ T7176] __kmem_cache_alloc_node+0x53/0x250 [ 135.586952][ T7176] ? handler_new_ref+0x244/0x920 [ 135.591888][ T7176] __kmalloc+0xa7/0x240 [ 135.596045][ T7176] handler_new_ref+0x244/0x920 [ 135.600825][ T7176] ? v4l2_ctrl_type_op_equal+0x220/0x220 [ 135.606454][ T7176] v4l2_ctrl_new+0x11f3/0x16e0 [ 135.611222][ T7176] v4l2_ctrl_new_std+0x24b/0x300 [ 135.616167][ T7176] ? handler_new_ref+0x920/0x920 [ 135.621102][ T7176] ? mutex_unlock+0x10/0x10 [ 135.625607][ T7176] ? find_ref_lock+0x425/0x470 [ 135.630363][ T7176] ? __kmem_cache_alloc_node+0x194/0x250 [ 135.636000][ T7176] handler_new_ref+0x153/0x920 [ 135.640767][ T7176] ? v4l2_ctrl_type_op_equal+0x220/0x220 [ 135.646398][ T7176] v4l2_ctrl_new+0x11f3/0x16e0 [ 135.651170][ T7176] v4l2_ctrl_new_std+0x24b/0x300 [ 135.656110][ T7176] ? handler_new_ref+0x920/0x920 [ 135.661045][ T7176] ? kvmalloc_node+0x70/0x180 [ 135.665723][ T7176] ? kvmalloc_node+0x70/0x180 [ 135.670429][ T7176] ? media_request_object_init+0x8c/0xe0 [ 135.676077][ T7176] ? v4l2_ctrl_handler_init_class+0x208/0x2d0 [ 135.682142][ T7176] vim2m_open+0x155/0x640 [ 135.686470][ T7176] v4l2_open+0x208/0x340 [ 135.690711][ T7176] chrdev_open+0x58c/0x600 [ 135.695127][ T7176] ? cd_forget+0x160/0x160 [ 135.699554][ T7176] ? fsnotify_perm+0x3ed/0x5e0 [ 135.704332][ T7176] do_dentry_open+0x880/0x14b0 [ 135.709102][ T7176] ? cd_forget+0x160/0x160 [ 135.713516][ T7176] path_openat+0x284f/0x3270 [ 135.718111][ T7176] ? do_sys_openat2+0xda/0x1d0 [ 135.722882][ T7176] ? __x64_sys_openat+0x139/0x160 [ 135.727899][ T7176] ? verify_lock_unused+0x140/0x140 [ 135.733091][ T7176] ? do_filp_open+0x430/0x430 [ 135.737767][ T7176] do_filp_open+0x1f2/0x430 [ 135.742266][ T7176] ? vfs_tmpfile+0x620/0x620 [ 135.746861][ T7176] ? _raw_spin_unlock+0x28/0x40 [ 135.751706][ T7176] ? alloc_fd+0x590/0x640 [ 135.756035][ T7176] do_sys_openat2+0x134/0x1d0 [ 135.760714][ T7176] ? do_sys_open+0xe0/0xe0 [ 135.765126][ T7176] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 135.771106][ T7176] ? lock_chain_count+0x20/0x20 [ 135.776069][ T7176] ? lock_chain_count+0x20/0x20 [ 135.780954][ T7176] __x64_sys_openat+0x139/0x160 [ 135.785812][ T7176] do_syscall_64+0x55/0xb0 [ 135.790229][ T7176] ? clear_bhb_loop+0x40/0x90 [ 135.794913][ T7176] ? clear_bhb_loop+0x40/0x90 [ 135.799598][ T7176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.805512][ T7176] RIP: 0033:0x7f1f47b5e98e [ 135.809930][ T7176] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 135.829536][ T7176] RSP: 002b:00007f1f48b08b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 135.837953][ T7176] RAX: ffffffffffffffda RBX: 00007f1f48b096c0 RCX: 00007f1f47b5e98e [ 135.845934][ T7176] RDX: 0000000000000000 RSI: 00007f1f48b08c00 RDI: ffffffffffffff9c [ 135.853906][ T7176] RBP: 00007f1f48b08c00 R08: 0000000000000000 R09: 0000000000000000 [ 135.861870][ T7176] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 135.869830][ T7176] R13: 00007f1f47e26038 R14: 00007f1f47e25fa0 R15: 00007fffd3203a08 [ 135.877807][ T7176] [ 135.880879][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.285703][ T7181] netlink: 156 bytes leftover after parsing attributes in process `syz.0.465'. [ 136.386567][ T7185] netlink: 'syz.1.466': attribute type 72 has an invalid length. [ 136.544727][ T7192] loop1: detected capacity change from 0 to 128 [ 137.225404][ T7195] 9pnet_fd: Insufficient options for proto=fd [ 137.250948][ T7213] loop1: detected capacity change from 0 to 1024 [ 137.269411][ T7213] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.314821][ T7213] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e002c028, mo2=0102] [ 137.353745][ T7213] System zones: 0-1, 3-12 [ 137.374488][ T7213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.431527][ T7218] netlink: 20 bytes leftover after parsing attributes in process `syz.3.479'. [ 137.493312][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.902157][ T7240] gadgetfs: bound to dummy_udc driver [ 138.933719][ T7237] sl0: header compression turned on [ 139.043751][ T7245] loop2: detected capacity change from 0 to 1024 [ 139.092549][ T7245] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.197993][ T7245] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e002c028, mo2=0102] [ 139.266751][ T7245] System zones: 0-1, 3-12 [ 139.282153][ T2134] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 139.308325][ T7245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.341959][ C0] gadgetfs: connected [ 139.346578][ T2134] gadgetfs: disconnected [ 139.505291][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.536679][ C0] gadgetfs: connected [ 139.554232][ T2134] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 139.606139][ T2134] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 139.649343][ T2134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.705427][ C0] gadgetfs: configuration #1 [ 139.745331][ T7233] gadgetfs: suspended from state 3 [ 139.751347][ T7233] gadgetfs: disconnected [ 139.829668][ T2134] usb 1-1: USB disconnect, device number 2 [ 141.107373][ T7291] loop2: detected capacity change from 0 to 128 [ 141.594563][ T7305] gadgetfs: bound to dummy_udc driver [ 141.662367][ T7308] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.671499][ T7308] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.680195][ T7308] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.688987][ T7308] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.768043][ T7308] bond0: (slave vxlan1): Enslaving as an active interface with an up link [ 141.856072][ T7288] 9pnet_fd: Insufficient options for proto=fd [ 142.144938][ T7322] Bluetooth: MGMT ver 1.22 [ 142.460222][ T7329] loop2: detected capacity change from 0 to 128 [ 142.756089][ T5767] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 143.487721][ T7355] syzkaller0: entered promiscuous mode [ 143.533062][ T7355] syzkaller0: entered allmulticast mode [ 144.227547][ T7371] loop3: detected capacity change from 0 to 512 [ 144.306514][ T7371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.567722][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.127626][ T7385] netlink: 156 bytes leftover after parsing attributes in process `syz.3.521'. [ 145.215214][ T7366] 9pnet_fd: Insufficient options for proto=fd [ 146.403950][ T7415] loop1: detected capacity change from 0 to 128 [ 147.841801][ T7426] 9pnet_fd: Insufficient options for proto=fd [ 148.787285][ T7482] netlink: 17 bytes leftover after parsing attributes in process `syz.1.548'. [ 149.861869][ T7514] loop2: detected capacity change from 0 to 128 [ 150.841117][ T7531] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 151.282728][ T7531] loop1: detected capacity change from 0 to 128 [ 152.029365][ T7530] sched: RT throttling activated [ 154.162399][ T7531] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 154.162609][ T7531] EXT4-fs: failed to create workqueue [ 154.177516][ T7531] EXT4-fs (loop1): mount failed [ 155.108175][ T7564] overlayfs: missing 'lowerdir' [ 155.399609][ T7570] loop1: detected capacity change from 0 to 1024 [ 155.445728][ T7570] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.524664][ T7570] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e002c028, mo2=0102] [ 155.583326][ T7570] System zones: 0-1, 3-12 [ 155.609476][ T7570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.748676][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.929134][ T7594] overlayfs: missing 'lowerdir' [ 156.034380][ T7599] loop2: detected capacity change from 0 to 128 [ 156.258241][ T7603] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.581'. [ 156.827206][ T7620] overlayfs: missing 'lowerdir' [ 156.999916][ T7625] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.591'. [ 157.347914][ T7635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.596'. [ 158.025478][ T7659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.605'. [ 158.639050][ T7678] loop3: detected capacity change from 0 to 128 [ 158.712772][ T5767] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 158.892616][ T7680] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(3) [ 159.419081][ T7687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.614'. [ 160.372277][ T7707] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(3) [ 160.716242][ T7715] loop3: detected capacity change from 0 to 512 [ 161.800779][ T7715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.002348][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.154394][ T7730] loop3: detected capacity change from 0 to 128 [ 162.353751][ T7732] device-mapper: ioctl: name not supplied when creating device [ 163.358013][ T7756] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.637'. [ 164.717330][ T7767] device-mapper: ioctl: name not supplied when creating device [ 164.974915][ T7774] bridge0: port 3(vxlan1) entered blocking state [ 165.008764][ T7774] bridge0: port 3(vxlan1) entered disabled state [ 165.040397][ T7774] vxlan1: entered allmulticast mode [ 165.052433][ T7779] loop1: detected capacity change from 0 to 512 [ 165.069238][ T7774] vxlan1: entered promiscuous mode [ 165.206311][ T7780] netlink: 156 bytes leftover after parsing attributes in process `syz.2.645'. [ 165.300606][ T7779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.549258][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.759808][ T7798] device-mapper: ioctl: name not supplied when creating device [ 166.773028][ T7799] loop2: detected capacity change from 0 to 128 [ 167.294938][ T7816] netlink: 156 bytes leftover after parsing attributes in process `syz.0.655'. [ 167.454972][ T7820] netlink: 32 bytes leftover after parsing attributes in process `syz.0.658'. [ 168.822471][ T7830] device-mapper: ioctl: name not supplied when creating device [ 169.188146][ T7841] netlink: 156 bytes leftover after parsing attributes in process `syz.1.666'. [ 171.344295][ T7861] device-mapper: ioctl: name not supplied when creating device [ 171.955483][ T7881] overlayfs: missing 'workdir' [ 173.482470][ T7892] device-mapper: ioctl: name not supplied when creating device [ 173.955619][ T7909] overlayfs: missing 'workdir' [ 174.273511][ T7921] device-mapper: ioctl: name not supplied when creating device [ 174.396141][ T7923] binder: BINDER_SET_CONTEXT_MGR already set [ 174.414277][ T7923] binder: 7922:7923 ioctl 4018620d 200000000240 returned -16 [ 175.006796][ T7943] device-mapper: ioctl: name not supplied when creating device [ 176.108457][ T7968] Cannot find map_set index 32 as target [ 176.297317][ T7977] device-mapper: ioctl: name not supplied when creating device [ 176.732365][ T7985] loop2: detected capacity change from 0 to 128 [ 178.608718][ T8028] FAULT_INJECTION: forcing a failure. [ 178.608718][ T8028] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 178.652096][ T8028] CPU: 0 PID: 8028 Comm: syz.1.733 Not tainted syzkaller #0 [ 178.659406][ T8028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.669444][ T8028] Call Trace: [ 178.672704][ T8028] [ 178.675617][ T8028] dump_stack_lvl+0x18c/0x250 [ 178.680288][ T8028] ? show_regs_print_info+0x20/0x20 [ 178.685471][ T8028] ? load_image+0x420/0x420 [ 178.689956][ T8028] ? __might_fault+0xaa/0x120 [ 178.694619][ T8028] ? __lock_acquire+0x7eb0/0x7eb0 [ 178.699629][ T8028] should_fail_ex+0x394/0x4c0 [ 178.704309][ T8028] _copy_to_user+0x2f/0xa0 [ 178.708716][ T8028] put_timespec64+0xc9/0x130 [ 178.713312][ T8028] ? get_timespec64+0x1b0/0x1b0 [ 178.718173][ T8028] __x64_sys_clock_gettime+0x21e/0x280 [ 178.723637][ T8028] ? lock_chain_count+0x20/0x20 [ 178.728480][ T8028] ? __ia32_sys_clock_settime+0x2a0/0x2a0 [ 178.734185][ T8028] ? lockdep_hardirqs_on+0x98/0x150 [ 178.739376][ T8028] do_syscall_64+0x55/0xb0 [ 178.743777][ T8028] ? clear_bhb_loop+0x40/0x90 [ 178.748435][ T8028] ? clear_bhb_loop+0x40/0x90 [ 178.753098][ T8028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.758984][ T8028] RIP: 0033:0x7fbb2399e159 [ 178.763384][ T8028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.782976][ T8028] RSP: 002b:00007fbb2479a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 178.791376][ T8028] RAX: ffffffffffffffda RBX: 00007fbb23c25fa0 RCX: 00007fbb2399e159 [ 178.799348][ T8028] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 178.807298][ T8028] RBP: 00007fbb23a3506b R08: 0000000000000000 R09: 0000000000000000 [ 178.815267][ T8028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.823225][ T8028] R13: 00007fbb23c26038 R14: 00007fbb23c25fa0 R15: 00007fff63fe2c28 [ 178.831190][ T8028] [ 178.834249][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.709556][ T8053] FAULT_INJECTION: forcing a failure. [ 180.709556][ T8053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.709575][ T8053] CPU: 0 PID: 8053 Comm: syz.1.743 Not tainted syzkaller #0 [ 180.709587][ T8053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.709593][ T8053] Call Trace: [ 180.709598][ T8053] [ 180.709602][ T8053] dump_stack_lvl+0x18c/0x250 [ 180.709624][ T8053] ? show_regs_print_info+0x20/0x20 [ 180.709639][ T8053] ? load_image+0x420/0x420 [ 180.709653][ T8053] ? __might_fault+0xaa/0x120 [ 180.709666][ T8053] ? __lock_acquire+0x7eb0/0x7eb0 [ 180.709681][ T8053] should_fail_ex+0x394/0x4c0 [ 180.709699][ T8053] _copy_to_user+0x2f/0xa0 [ 180.709713][ T8053] put_timespec64+0xc9/0x130 [ 180.709729][ T8053] ? get_timespec64+0x1b0/0x1b0 [ 180.709747][ T8053] __x64_sys_clock_gettime+0x21e/0x280 [ 180.709759][ T8053] ? lock_chain_count+0x20/0x20 [ 180.709771][ T8053] ? __ia32_sys_clock_settime+0x2a0/0x2a0 [ 180.709784][ T8053] ? lockdep_hardirqs_on+0x98/0x150 [ 180.709798][ T8053] do_syscall_64+0x55/0xb0 [ 180.709812][ T8053] ? clear_bhb_loop+0x40/0x90 [ 180.709822][ T8053] ? clear_bhb_loop+0x40/0x90 [ 180.709832][ T8053] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 180.709847][ T8053] RIP: 0033:0x7fbb2399e159 [ 180.709857][ T8053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.709866][ T8053] RSP: 002b:00007fbb2479a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 180.709879][ T8053] RAX: ffffffffffffffda RBX: 00007fbb23c25fa0 RCX: 00007fbb2399e159 [ 180.709887][ T8053] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 180.709893][ T8053] RBP: 00007fbb23a3506b R08: 0000000000000000 R09: 0000000000000000 [ 180.709900][ T8053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.709907][ T8053] R13: 00007fbb23c26038 R14: 00007fbb23c25fa0 R15: 00007fff63fe2c28 [ 180.709922][ T8053] [ 180.848427][ T8046] 9pnet_fd: Insufficient options for proto=fd [ 181.506984][ T8063] loop3: detected capacity change from 0 to 128 [ 189.389854][ T8125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.768'. [ 189.420001][ T8123] loop2: detected capacity change from 0 to 2048 [ 189.437693][ T8125] bridge0: port 3(batadv1) entered blocking state [ 189.469573][ T8123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.486728][ T8125] bridge0: port 3(batadv1) entered disabled state [ 189.515617][ T8125] batadv1: entered allmulticast mode [ 189.540326][ T8125] batadv1: entered promiscuous mode [ 189.548967][ T8123] ext4 filesystem being mounted at /174/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 189.580435][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.722283][ T8135] Cannot find map_set index 32 as target [ 189.735774][ T8123] fs-verity: sha512 using implementation "sha512-avx2" [ 189.943753][ T11] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 189.953783][ T11] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 190.008369][ T8142] FAULT_INJECTION: forcing a failure. [ 190.008369][ T8142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.037367][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.055893][ T8142] CPU: 0 PID: 8142 Comm: syz.3.773 Not tainted syzkaller #0 [ 190.063189][ T8142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.073228][ T8142] Call Trace: [ 190.076492][ T8142] [ 190.079425][ T8142] dump_stack_lvl+0x18c/0x250 [ 190.084095][ T8142] ? show_regs_print_info+0x20/0x20 [ 190.089282][ T8142] ? load_image+0x420/0x420 [ 190.093769][ T8142] ? __might_fault+0xaa/0x120 [ 190.098429][ T8142] ? __lock_acquire+0x7eb0/0x7eb0 [ 190.103461][ T8142] ? __virt_addr_valid+0x10c/0x380 [ 190.108562][ T8142] should_fail_ex+0x394/0x4c0 [ 190.113231][ T8142] _copy_to_user+0x2f/0xa0 [ 190.117631][ T8142] bpf_verifier_vlog+0x5ac/0x840 [ 190.122562][ T8142] btf_verifier_log+0x11e/0x1a0 [ 190.127401][ T8142] ? btf_parse_graph_root+0xb00/0xb00 [ 190.132768][ T8142] btf_check_all_metas+0x9a7/0xaf0 [ 190.137868][ T8142] btf_parse_type_sec+0xfc/0x1960 [ 190.142888][ T8142] ? btf_check_sec_info+0x350/0x350 [ 190.148075][ T8142] ? __virt_addr_valid+0x10c/0x380 [ 190.153171][ T8142] ? btf_verifier_log+0x1a0/0x1a0 [ 190.158180][ T8142] ? btf_parse_hdr+0x545/0x700 [ 190.162925][ T8142] ? btf_parse_str_sec+0x20d/0x2a0 [ 190.168019][ T8142] btf_new_fd+0x440/0x9e0 [ 190.172339][ T8142] ? bpf_btf_show_fdinfo+0x80/0x80 [ 190.177464][ T8142] ? capable+0x88/0xe0 [ 190.181521][ T8142] __sys_bpf+0x670/0x890 [ 190.185765][ T8142] ? bpf_link_show_fdinfo+0x560/0x560 [ 190.191125][ T8142] ? lock_chain_count+0x20/0x20 [ 190.195963][ T8142] __x64_sys_bpf+0x7c/0x90 [ 190.200361][ T8142] do_syscall_64+0x55/0xb0 [ 190.204766][ T8142] ? clear_bhb_loop+0x40/0x90 [ 190.209427][ T8142] ? clear_bhb_loop+0x40/0x90 [ 190.214085][ T8142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.219962][ T8142] RIP: 0033:0x7f204219e159 [ 190.224387][ T8142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.243996][ T8142] RSP: 002b:00007f204304e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 190.252391][ T8142] RAX: ffffffffffffffda RBX: 00007f2042425fa0 RCX: 00007f204219e159 [ 190.260345][ T8142] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 190.268302][ T8142] RBP: 00007f204223506b R08: 0000000000000000 R09: 0000000000000000 [ 190.276254][ T8142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.284206][ T8142] R13: 00007f2042426038 R14: 00007f2042425fa0 R15: 00007fff7f183c58 [ 190.292173][ T8142] [ 190.295295][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.280737][ T8160] gadgetfs: bound to dummy_udc driver [ 192.802463][ T8191] FAULT_INJECTION: forcing a failure. [ 192.802463][ T8191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.843327][ T8191] CPU: 0 PID: 8191 Comm: syz.3.792 Not tainted syzkaller #0 [ 192.850640][ T8191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.860679][ T8191] Call Trace: [ 192.863961][ T8191] [ 192.866881][ T8191] dump_stack_lvl+0x18c/0x250 [ 192.871556][ T8191] ? show_regs_print_info+0x20/0x20 [ 192.876742][ T8191] ? load_image+0x420/0x420 [ 192.881233][ T8191] ? __lock_acquire+0x7eb0/0x7eb0 [ 192.886245][ T8191] ? __virt_addr_valid+0x10c/0x380 [ 192.891349][ T8191] should_fail_ex+0x394/0x4c0 [ 192.896017][ T8191] _copy_from_user+0x2f/0xe0 [ 192.900592][ T8191] bpf_vlog_reverse_ubuf+0xbb/0x3a0 [ 192.905800][ T8191] bpf_vlog_finalize+0x1b3/0x3e0 [ 192.910727][ T8191] btf_new_fd+0x4ca/0x9e0 [ 192.915049][ T8191] ? bpf_btf_show_fdinfo+0x80/0x80 [ 192.920170][ T8191] ? capable+0x88/0xe0 [ 192.924226][ T8191] __sys_bpf+0x670/0x890 [ 192.928468][ T8191] ? bpf_link_show_fdinfo+0x560/0x560 [ 192.933827][ T8191] ? lock_chain_count+0x20/0x20 [ 192.938666][ T8191] __x64_sys_bpf+0x7c/0x90 [ 192.943066][ T8191] do_syscall_64+0x55/0xb0 [ 192.947467][ T8191] ? clear_bhb_loop+0x40/0x90 [ 192.952123][ T8191] ? clear_bhb_loop+0x40/0x90 [ 192.956787][ T8191] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.962663][ T8191] RIP: 0033:0x7f204219e159 [ 192.967060][ T8191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.986648][ T8191] RSP: 002b:00007f204304e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 192.995042][ T8191] RAX: ffffffffffffffda RBX: 00007f2042425fa0 RCX: 00007f204219e159 [ 193.002994][ T8191] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 193.010943][ T8191] RBP: 00007f204223506b R08: 0000000000000000 R09: 0000000000000000 [ 193.018893][ T8191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.026841][ T8191] R13: 00007f2042426038 R14: 00007f2042425fa0 R15: 00007fff7f183c58 [ 193.034803][ T8191] [ 193.037926][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.292847][ T8198] loop3: detected capacity change from 0 to 128 [ 193.319946][ T8200] fuse: Bad value for 'fd' [ 193.344069][ T8161] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 193.749630][ T8207] loop1: detected capacity change from 0 to 2048 [ 193.835270][ T8207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.884106][ T8207] ext4 filesystem being mounted at /219/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 193.915572][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.075349][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.389621][ T8227] fuse: Bad value for 'fd' [ 194.507046][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.514538][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.125536][ T8237] syzkaller1: entered promiscuous mode [ 195.131080][ T8237] syzkaller1: entered allmulticast mode [ 195.745212][ T8244] loop3: detected capacity change from 0 to 2048 [ 195.787503][ T8244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.859249][ T8244] ext4 filesystem being mounted at /209/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 195.890757][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.947188][ T8253] fuse: Bad value for 'fd' [ 196.055272][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.168960][ T8258] 9pnet_fd: Insufficient options for proto=fd [ 196.340860][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.820'. [ 196.725775][ T8268] netlink: 48 bytes leftover after parsing attributes in process `syz.1.821'. [ 196.908270][ T8275] loop1: detected capacity change from 0 to 2048 [ 196.946835][ T8277] vlan2: entered promiscuous mode [ 196.975768][ T8275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.028403][ T8275] ext4 filesystem being mounted at /227/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 197.059952][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.241364][ T8283] 9pnet_fd: Insufficient options for proto=fd [ 197.260667][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.413014][ T8289] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 197.458646][ T8289] device-mapper: ioctl: error adding target to table [ 197.568369][ T8296] netlink: 48 bytes leftover after parsing attributes in process `syz.0.832'. [ 197.685215][ T8302] loop3: detected capacity change from 0 to 128 [ 197.745928][ T8161] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 198.248014][ T8309] 9pnet_fd: Insufficient options for proto=fd [ 198.407397][ T8317] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 198.433692][ T8317] device-mapper: ioctl: error adding target to table [ 199.801161][ T8332] netlink: 156 bytes leftover after parsing attributes in process `syz.2.846'. [ 200.097451][ T8340] 9pnet_fd: Insufficient options for proto=fd [ 200.290257][ T8349] device-mapper: table: 248:0: multipath: priority group count mismatch (-EINVAL) [ 200.322762][ T8349] device-mapper: ioctl: error adding target to table [ 200.418360][ T8354] loop2: detected capacity change from 0 to 128 [ 201.034003][ T8360] netlink: 156 bytes leftover after parsing attributes in process `syz.0.858'. [ 201.679408][ T8379] device-mapper: table: 248:0: multipath: priority group count mismatch (-EINVAL) [ 201.704360][ T8379] device-mapper: ioctl: error adding target to table [ 202.004199][ T8384] netlink: 156 bytes leftover after parsing attributes in process `syz.0.868'. [ 202.150958][ T8390] loop1: detected capacity change from 0 to 128 [ 202.217072][ T8161] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 202.917307][ T8408] device-mapper: table: 248:0: multipath: priority group count mismatch (-EINVAL) [ 202.929195][ T8408] device-mapper: ioctl: error adding target to table [ 203.593357][ T8431] loop2: detected capacity change from 0 to 128 [ 205.617340][ T8470] loop2: detected capacity change from 0 to 128 [ 205.688134][ T8161] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 206.650985][ T8491] loop2: detected capacity change from 0 to 8192 [ 206.689233][ T8491] loop2: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 206.707086][ T8491] loop2: p3 start 986112 is beyond EOD, [ 206.798350][ C0] vkms_vblank_simulate: vblank timer overrun [ 206.840841][ T8491] truncated [ 206.845546][ T8491] loop2: p5 start 986112 is beyond EOD, truncated [ 206.859098][ T8491] loop2: p6 start 986112 is beyond EOD, truncated [ 206.869302][ T8491] loop2: p7 start 986112 is beyond EOD, truncated [ 206.879085][ T8491] loop2: p8 start 986112 is beyond EOD, truncated [ 206.885848][ T8491] loop2: p9 start 986112 is beyond EOD, truncated [ 206.895446][ T8491] loop2: p10 start 986112 is beyond EOD, truncated [ 206.902232][ T8491] loop2: p11 start 986112 is beyond EOD, truncated [ 206.908910][ T8491] loop2: p12 start 986112 is beyond EOD, truncated [ 206.918575][ T8491] loop2: p13 start 986112 is beyond EOD, truncated [ 206.927724][ T8491] loop2: p14 start 986112 is beyond EOD, truncated [ 206.937368][ T8491] loop2: p15 start 986112 is beyond EOD, truncated [ 206.944271][ T8491] loop2: p16 start 986112 is beyond EOD, truncated [ 206.955174][ T8491] loop2: p17 start 986112 is beyond EOD, truncated [ 206.961938][ T8491] loop2: p18 start 986112 is beyond EOD, truncated [ 206.968639][ T8491] loop2: p19 start 986112 is beyond EOD, truncated [ 206.978276][ T8491] loop2: p20 start 986112 is beyond EOD, truncated [ 206.985166][ T8491] loop2: p21 start 986112 is beyond EOD, truncated [ 206.994751][ T8491] loop2: p22 start 986112 is beyond EOD, truncated [ 207.001609][ T8491] loop2: p23 start 986112 is beyond EOD, truncated [ 207.008222][ T8491] loop2: p24 start 986112 is beyond EOD, truncated [ 207.018021][ T8491] loop2: p25 start 986112 is beyond EOD, truncated [ 207.044627][ T8491] loop2: p26 start 986112 is beyond EOD, truncated [ 207.064811][ T8491] loop2: p27 start 986112 is beyond EOD, truncated [ 207.084370][ T8491] loop2: p28 start 986112 is beyond EOD, truncated [ 207.123059][ T8491] loop2: p29 start 986112 is beyond EOD, truncated [ 207.163570][ T8491] loop2: p30 start 986112 is beyond EOD, truncated [ 207.244505][ T8491] loop2: p31 start 986112 is beyond EOD, truncated [ 207.270366][ T8491] loop2: p32 start 986112 is beyond EOD, truncated [ 207.298101][ T8491] loop2: p33 start 986112 is beyond EOD, truncated [ 207.328213][ T8491] loop2: p34 start 986112 is beyond EOD, truncated [ 207.345894][ T8491] loop2: p35 start 986112 is beyond EOD, truncated [ 207.355746][ T8491] loop2: p36 start 986112 is beyond EOD, truncated [ 207.364117][ T8491] loop2: p37 start 986112 is beyond EOD, truncated [ 207.400908][ T8491] loop2: p38 start 986112 is beyond EOD, truncated [ 207.425947][ T8491] loop2: p39 start 986112 is beyond EOD, truncated [ 207.475355][ T8491] loop2: p40 start 986112 is beyond EOD, truncated [ 207.505810][ T8491] loop2: p41 start 986112 is beyond EOD, truncated [ 207.548033][ T8491] loop2: p42 start 986112 is beyond EOD, truncated [ 207.608553][ T8491] loop2: p43 start 986112 is beyond EOD, truncated [ 207.655908][ T8491] loop2: p44 start 986112 is beyond EOD, truncated [ 207.697313][ T8491] loop2: p45 start 986112 is beyond EOD, truncated [ 207.737004][ T8491] loop2: p46 start 986112 is beyond EOD, truncated [ 207.771488][ T8491] loop2: p47 start 986112 is beyond EOD, truncated [ 207.804446][ T8491] loop2: p48 start 986112 is beyond EOD, truncated [ 207.832210][ T8491] loop2: p49 start 986112 is beyond EOD, truncated [ 207.860572][ T8491] loop2: p50 start 986112 is beyond EOD, truncated [ 207.892877][ T8491] loop2: p51 start 986112 is beyond EOD, truncated [ 207.920479][ T8491] loop2: p52 start 986112 is beyond EOD, truncated [ 207.938787][ T8517] loop3: detected capacity change from 0 to 128 [ 207.953853][ T8491] loop2: p53 start 986112 is beyond EOD, truncated [ 207.984829][ T8491] loop2: p54 start 986112 is beyond EOD, truncated [ 208.000964][ T8491] loop2: p55 start 986112 is beyond EOD, truncated [ 208.008460][ T8128] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 208.152285][ T8491] loop2: p56 start 986112 is beyond EOD, truncated [ 208.390774][ T8491] loop2: p57 start 986112 is beyond EOD, truncated [ 208.437095][ T8491] loop2: p58 start 986112 is beyond EOD, truncated [ 208.473947][ T8491] loop2: p59 start 986112 is beyond EOD, truncated [ 208.509584][ T8491] loop2: p60 start 986112 is beyond EOD, truncated [ 208.533877][ T8491] loop2: p61 start 986112 is beyond EOD, truncated [ 208.556970][ T8491] loop2: p62 start 986112 is beyond EOD, truncated [ 208.589597][ T8491] loop2: p63 start 986112 is beyond EOD, truncated [ 208.615125][ T8491] loop2: p64 start 986112 is beyond EOD, truncated [ 208.637390][ T8491] loop2: p65 start 986112 is beyond EOD, truncated [ 208.657323][ T8491] loop2: p66 start 986112 is beyond EOD, truncated [ 208.674746][ T8491] loop2: p67 start 986112 is beyond EOD, truncated [ 208.692725][ T8491] loop2: p68 start 986112 is beyond EOD, truncated [ 208.714955][ T8491] loop2: p69 start 986112 is beyond EOD, truncated [ 208.751984][ T8491] loop2: p70 start 986112 is beyond EOD, truncated [ 208.840038][ T8491] loop2: p71 start 986112 is beyond EOD, truncated [ 208.880444][ T8491] loop2: p72 start 986112 is beyond EOD, truncated [ 208.925702][ T8491] loop2: p73 start 986112 is beyond EOD, truncated [ 208.967912][ T8491] loop2: p74 start 986112 is beyond EOD, truncated [ 209.010772][ T8491] loop2: p75 start 986112 is beyond EOD, truncated [ 209.053860][ T8491] loop2: p76 start 986112 is beyond EOD, truncated [ 209.082813][ T8491] loop2: p77 start 986112 is beyond EOD, truncated [ 209.113404][ T8491] loop2: p78 start 986112 is beyond EOD, truncated [ 209.134953][ T8491] loop2: p79 start 986112 is beyond EOD, truncated [ 209.157643][ T8491] loop2: p80 start 986112 is beyond EOD, truncated [ 209.192413][ T8491] loop2: p81 start 986112 is beyond EOD, truncated [ 209.224876][ T8491] loop2: p82 start 986112 is beyond EOD, truncated [ 209.253155][ T8491] loop2: p83 start 986112 is beyond EOD, truncated [ 209.285521][ T8491] loop2: p84 start 986112 is beyond EOD, truncated [ 209.323145][ T8491] loop2: p85 start 986112 is beyond EOD, truncated [ 209.338850][ T8491] loop2: p86 start 986112 is beyond EOD, truncated [ 209.367994][ T8491] loop2: p87 start 986112 is beyond EOD, truncated [ 209.400798][ T8491] loop2: p88 start 986112 is beyond EOD, truncated [ 209.434835][ T8491] loop2: p89 start 986112 is beyond EOD, truncated [ 209.476899][ T8491] loop2: p90 start 986112 is beyond EOD, truncated [ 209.516360][ T8491] loop2: p91 start 986112 is beyond EOD, truncated [ 209.557456][ T8491] loop2: p92 start 986112 is beyond EOD, truncated [ 209.590761][ T8491] loop2: p93 start 986112 is beyond EOD, truncated [ 209.631928][ T8491] loop2: p94 start 986112 is beyond EOD, truncated [ 209.664521][ T8491] loop2: p95 start 986112 is beyond EOD, truncated [ 209.696075][ T8491] loop2: p96 start 986112 is beyond EOD, truncated [ 209.729495][ T8491] loop2: p97 start 986112 is beyond EOD, truncated [ 209.757564][ T8491] loop2: p98 start 986112 is beyond EOD, truncated [ 209.787027][ T8491] loop2: p99 start 986112 is beyond EOD, truncated [ 209.815881][ T8491] loop2: p100 start 986112 is beyond EOD, truncated [ 209.854815][ T8491] loop2: p101 start 986112 is beyond EOD, truncated [ 209.918705][ T8491] loop2: p102 start 986112 is beyond EOD, truncated [ 209.965334][ T8491] loop2: p103 start 986112 is beyond EOD, truncated [ 209.998791][ T8560] loop3: detected capacity change from 0 to 128 [ 210.008863][ T8491] loop2: p104 start 986112 is beyond EOD, truncated [ 210.046040][ T8491] loop2: p105 start 986112 is beyond EOD, truncated [ 210.075501][ T8128] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 210.211578][ T8491] loop2: p106 start 986112 is beyond EOD, truncated [ 210.451766][ T8491] loop2: p107 start 986112 is beyond EOD, truncated [ 210.511783][ T8491] loop2: p108 start 986112 is beyond EOD, truncated [ 210.578207][ T8491] loop2: p109 start 986112 is beyond EOD, truncated [ 210.628033][ T8491] loop2: p110 start 986112 is beyond EOD, truncated [ 210.669913][ T8491] loop2: p111 start 986112 is beyond EOD, truncated [ 210.707373][ T8491] loop2: p112 start 986112 is beyond EOD, truncated [ 212.081461][ T8491] loop2: p113 start 986112 is beyond EOD, truncated [ 214.063556][ T8491] loop2: p114 start 986112 is beyond EOD, truncated [ 214.084906][ T8491] loop2: p115 start 986112 is beyond EOD, truncated [ 214.404043][ T8491] loop2: p116 start 986112 is beyond EOD, truncated [ 214.453863][ T8491] loop2: p117 start 986112 is beyond EOD, truncated [ 214.485320][ T8491] loop2: p118 start 986112 is beyond EOD, truncated [ 214.524112][ T8491] loop2: p119 start 986112 is beyond EOD, truncated [ 214.555551][ T8491] loop2: p120 start 986112 is beyond EOD, truncated [ 214.564357][ T8586] binder: BINDER_SET_CONTEXT_MGR already set [ 214.586835][ T8586] binder: 8582:8586 ioctl 4018620d 200000004a80 returned -16 [ 214.603817][ T8491] loop2: p121 start 986112 is beyond EOD, truncated [ 214.636047][ T8491] loop2: p122 start 986112 is beyond EOD, truncated [ 214.667384][ T8491] loop2: p123 start 986112 is beyond EOD, truncated [ 214.698560][ T8491] loop2: p124 start 986112 is beyond EOD, truncated [ 214.729490][ T8491] loop2: p125 start 986112 is beyond EOD, truncated [ 214.763562][ T8491] loop2: p126 start 986112 is beyond EOD, truncated [ 214.785965][ T8491] loop2: p127 start 986112 is beyond EOD, truncated [ 214.804857][ T8491] loop2: p128 start 986112 is beyond EOD, truncated [ 214.824699][ T8491] loop2: p129 start 986112 is beyond EOD, truncated [ 214.844439][ T8491] loop2: p130 start 986112 is beyond EOD, truncated [ 214.860441][ T8491] loop2: p131 start 986112 is beyond EOD, truncated [ 214.878388][ T8491] loop2: p132 start 986112 is beyond EOD, truncated [ 214.897016][ T8491] loop2: p133 start 986112 is beyond EOD, truncated [ 214.915587][ T8491] loop2: p134 start 986112 is beyond EOD, truncated [ 214.934109][ T8491] loop2: p135 start 986112 is beyond EOD, truncated [ 214.965501][ T8491] loop2: p136 start 986112 is beyond EOD, truncated [ 214.999428][ T8491] loop2: p137 start 986112 is beyond EOD, truncated [ 215.028940][ T8491] loop2: p138 start 986112 is beyond EOD, truncated [ 215.065096][ T8491] loop2: p139 start 986112 is beyond EOD, truncated [ 215.093221][ T8491] loop2: p140 start 986112 is beyond EOD, truncated [ 215.122470][ T8491] loop2: p141 start 986112 is beyond EOD, truncated [ 215.148231][ T8491] loop2: p142 start 986112 is beyond EOD, truncated [ 215.170359][ T8491] loop2: p143 start 986112 is beyond EOD, truncated [ 215.193672][ T8491] loop2: p144 start 986112 is beyond EOD, truncated [ 215.209973][ T8491] loop2: p145 start 986112 is beyond EOD, truncated [ 215.233881][ T8491] loop2: p146 start 986112 is beyond EOD, truncated [ 215.256221][ T8491] loop2: p147 start 986112 is beyond EOD, truncated [ 215.280310][ T8491] loop2: p148 start 986112 is beyond EOD, truncated [ 215.316213][ T8491] loop2: p149 start 986112 is beyond EOD, truncated [ 215.358847][ T8491] loop2: p150 start 986112 is beyond EOD, truncated [ 215.409255][ T8491] loop2: p151 start 986112 is beyond EOD, truncated [ 215.443785][ T8491] loop2: p152 start 986112 is beyond EOD, truncated [ 215.476072][ T8491] loop2: p153 start 986112 is beyond EOD, truncated [ 215.507911][ T8491] loop2: p154 start 986112 is beyond EOD, truncated [ 215.543432][ T8491] loop2: p155 start 986112 is beyond EOD, truncated [ 215.591979][ T8491] loop2: p156 start 986112 is beyond EOD, truncated [ 215.638810][ T8491] loop2: p157 start 986112 is beyond EOD, truncated [ 215.683042][ T8491] loop2: p158 start 986112 is beyond EOD, truncated [ 215.730139][ T8491] loop2: p159 start 986112 is beyond EOD, truncated [ 215.770796][ T8491] loop2: p160 start 986112 is beyond EOD, truncated [ 215.809073][ T8491] loop2: p161 start 986112 is beyond EOD, truncated [ 215.860428][ T8491] loop2: p162 start 986112 is beyond EOD, truncated [ 215.900949][ T8491] loop2: p163 start 986112 is beyond EOD, truncated [ 215.935304][ T8491] loop2: p164 start 986112 is beyond EOD, truncated [ 215.989362][ T8491] loop2: p165 start 986112 is beyond EOD, truncated [ 216.038556][ T8491] loop2: p166 start 986112 is beyond EOD, truncated [ 216.085698][ T8491] loop2: p167 start 986112 is beyond EOD, truncated [ 216.126305][ T8491] loop2: p168 start 986112 is beyond EOD, truncated [ 216.137506][ T8628] loop1: detected capacity change from 0 to 512 [ 216.168822][ T8491] loop2: p169 start 986112 is beyond EOD, truncated [ 216.252865][ T8491] loop2: p170 start 986112 is beyond EOD, truncated [ 216.304351][ T8491] loop2: p171 start 986112 is beyond EOD, truncated [ 216.361884][ T8491] loop2: p172 start 986112 is beyond EOD, truncated [ 216.429606][ T8491] loop2: p173 start 986112 is beyond EOD, truncated [ 216.474518][ T8628] EXT4-fs (loop1): Test dummy encryption mode enabled [ 216.491141][ T8491] loop2: p174 start 986112 is beyond EOD, truncated [ 216.532844][ T8491] loop2: p175 start 986112 is beyond EOD, truncated [ 216.567834][ T8628] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.947: inode has both inline data and extents flags [ 216.584993][ T8491] loop2: p176 start 986112 is beyond EOD, truncated [ 216.615795][ T8491] loop2: p177 start 986112 is beyond EOD, truncated [ 216.648090][ T8628] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.947: couldn't read orphan inode 15 (err -117) [ 216.675351][ T8491] loop2: p178 start 986112 is beyond EOD, truncated [ 216.719283][ T8491] loop2: p179 start 986112 is beyond EOD, truncated [ 216.742088][ T8628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.790019][ T8491] loop2: p180 start 986112 is beyond EOD, truncated [ 216.826681][ T8491] loop2: p181 start 986112 is beyond EOD, truncated [ 216.886452][ T8491] loop2: p182 start 986112 is beyond EOD, truncated [ 216.944281][ T8491] loop2: p183 start 986112 is beyond EOD, truncated [ 216.980446][ T8491] loop2: p184 start 986112 is beyond EOD, truncated [ 217.031110][ T8491] loop2: p185 start 986112 is beyond EOD, truncated [ 217.054018][ T8657] binder: BINDER_SET_CONTEXT_MGR already set [ 217.085692][ T8657] binder: 8653:8657 ioctl 4018620d 200000004a80 returned -16 [ 217.095199][ T8491] loop2: p186 start 986112 is beyond EOD, truncated [ 217.136405][ T8491] loop2: p187 start 986112 is beyond EOD, truncated [ 217.149070][ T8628] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 217.190455][ T8491] loop2: p188 start 986112 is beyond EOD, truncated [ 217.225529][ T8491] loop2: p189 start 986112 is beyond EOD, truncated [ 217.268859][ T8491] loop2: p190 start 986112 is beyond EOD, truncated [ 217.305864][ T8491] loop2: p191 start 986112 is beyond EOD, truncated [ 217.339038][ T8491] loop2: p192 start 986112 is beyond EOD, truncated [ 217.377890][ T8491] loop2: p193 start 986112 is beyond EOD, truncated [ 217.414428][ T8491] loop2: p194 start 986112 is beyond EOD, truncated [ 217.433258][ T8628] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 217.447921][ T8491] loop2: p195 start 986112 is beyond EOD, truncated [ 217.484531][ T8491] loop2: p196 start 986112 is beyond EOD, truncated [ 217.518913][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.528162][ T8491] loop2: p197 start 986112 is beyond EOD, truncated [ 217.554386][ T8491] loop2: p198 start 986112 is beyond EOD, truncated [ 217.608603][ T8491] loop2: p199 start 986112 is beyond EOD, truncated [ 217.635770][ T8491] loop2: p200 start 986112 is beyond EOD, truncated [ 217.669280][ T8491] loop2: p201 start 986112 is beyond EOD, truncated [ 217.697839][ T8491] loop2: p202 start 986112 is beyond EOD, truncated [ 217.729226][ T8491] loop2: p203 start 986112 is beyond EOD, truncated [ 217.760115][ T8491] loop2: p204 start 986112 is beyond EOD, truncated [ 217.791706][ T8491] loop2: p205 start 986112 is beyond EOD, truncated [ 217.859815][ T8491] loop2: p206 start 986112 is beyond EOD, truncated [ 217.901170][ T8491] loop2: p207 start 986112 is beyond EOD, truncated [ 217.949208][ T8491] loop2: p208 start 986112 is beyond EOD, truncated [ 218.010590][ T8491] loop2: p209 start 986112 is beyond EOD, truncated [ 218.028069][ T8491] loop2: p210 start 986112 is beyond EOD, truncated [ 218.051999][ T8491] loop2: p211 start 986112 is beyond EOD, truncated [ 218.085003][ T8491] loop2: p212 start 986112 is beyond EOD, truncated [ 218.119549][ T8491] loop2: p213 start 986112 is beyond EOD, truncated [ 218.154481][ T8491] loop2: p214 start 986112 is beyond EOD, truncated [ 218.202261][ T8677] device-mapper: table: 248:0: multipath: not enough path parameters (-EINVAL) [ 218.212651][ T8491] loop2: p215 start 986112 is beyond EOD, truncated [ 218.237214][ T8677] device-mapper: ioctl: error adding target to table [ 218.249421][ T8491] loop2: p216 start 986112 is beyond EOD, truncated [ 218.288088][ T8491] loop2: p217 start 986112 is beyond EOD, truncated [ 218.336658][ T8491] loop2: p218 start 986112 is beyond EOD, truncated [ 218.386309][ T8491] loop2: p219 start 986112 is beyond EOD, truncated [ 218.436656][ T8491] loop2: p220 start 986112 is beyond EOD, truncated [ 218.488026][ T8491] loop2: p221 start 986112 is beyond EOD, truncated [ 218.555772][ T8491] loop2: p222 start 986112 is beyond EOD, truncated [ 218.605553][ T8491] loop2: p223 start 986112 is beyond EOD, truncated [ 218.655153][ T8491] loop2: p224 start 986112 is beyond EOD, truncated [ 218.707985][ T8491] loop2: p225 start 986112 is beyond EOD, truncated [ 218.761305][ T8491] loop2: p226 start 986112 is beyond EOD, truncated [ 218.813530][ T8491] loop2: p227 start 986112 is beyond EOD, truncated [ 218.894056][ T8491] loop2: p228 start 986112 is beyond EOD, truncated [ 218.956339][ T8491] loop2: p229 start 986112 is beyond EOD, truncated [ 219.009164][ T8491] loop2: p230 start 986112 is beyond EOD, truncated [ 219.063914][ T8491] loop2: p231 start 986112 is beyond EOD, truncated [ 219.070568][ T8491] loop2: p232 start 986112 is beyond EOD, truncated [ 219.187018][ T8491] loop2: p233 start 986112 is beyond EOD, truncated [ 219.255880][ T8713] device-mapper: table: 248:0: multipath: not enough path parameters (-EINVAL) [ 219.271807][ T8491] loop2: p234 start 986112 is beyond EOD, truncated [ 219.278439][ T8491] loop2: p235 start 986112 is beyond EOD, truncated [ 219.305456][ T8713] device-mapper: ioctl: error adding target to table [ 219.372348][ T8491] loop2: p236 start 986112 is beyond EOD, truncated [ 219.441539][ T8491] loop2: p237 start 986112 is beyond EOD, truncated [ 219.492174][ T8491] loop2: p238 start 986112 is beyond EOD, truncated [ 219.563874][ T8491] loop2: p239 start 986112 is beyond EOD, truncated [ 219.635141][ T8491] loop2: p240 start 986112 is beyond EOD, truncated [ 219.689567][ T8491] loop2: p241 start 986112 is beyond EOD, truncated [ 219.738975][ T8491] loop2: p242 start 986112 is beyond EOD, truncated [ 219.787501][ T8491] loop2: p243 start 986112 is beyond EOD, truncated [ 219.838765][ T8491] loop2: p244 start 986112 is beyond EOD, truncated [ 219.890645][ T8491] loop2: p245 start 986112 is beyond EOD, truncated [ 219.942093][ T8491] loop2: p246 start 986112 is beyond EOD, truncated [ 219.992371][ T8491] loop2: p247 start 986112 is beyond EOD, truncated [ 220.055411][ T8491] loop2: p248 start 986112 is beyond EOD, truncated [ 220.124634][ T8491] loop2: p249 start 986112 is beyond EOD, truncated [ 220.177236][ T8491] loop2: p250 start 986112 is beyond EOD, truncated [ 220.225712][ T8491] loop2: p251 start 986112 is beyond EOD, truncated [ 220.274363][ T8743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.972'. [ 220.288852][ T8491] loop2: p252 start 986112 is beyond EOD, truncated [ 220.327713][ T8491] loop2: p253 start 986112 is beyond EOD, truncated [ 220.378471][ T8491] loop2: p254 start 986112 is beyond EOD, truncated [ 220.426699][ T8491] loop2: p255 start 986112 is beyond EOD, truncated [ 220.802829][ T8128] udevd[8128]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 220.819590][ T8161] udevd[8161]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 220.845113][ T8753] bridge0: port 3(vxlan1) entered blocking state [ 220.886337][ T8753] bridge0: port 3(vxlan1) entered disabled state [ 220.927362][ T8756] fuse: Unknown parameter 'user_i00000000000000000000' [ 220.944329][ T8753] vxlan1: entered allmulticast mode [ 220.963892][ T8753] vxlan1: entered promiscuous mode [ 225.927553][ T8824] device-mapper: table: 248:0: multipath: Unknown 'queue_mode' requested (-EINVAL) [ 225.982280][ T8824] device-mapper: ioctl: error adding target to table [ 226.203655][ T8832] fuse: Unknown parameter 'user_i00000000000000000000' [ 226.447303][ T8839] bridge0: port 4(vxlan1) entered blocking state [ 226.469728][ T8839] bridge0: port 4(vxlan1) entered disabled state [ 226.489967][ T8839] vxlan1: entered allmulticast mode [ 226.514963][ T8839] vxlan1: entered promiscuous mode [ 228.464558][ T8873] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.473462][ T8873] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.933062][ T8905] fuse: Unknown parameter 'user_id00000000000000000000' [ 229.280797][ T8873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.317659][ T8873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.650419][ T8873] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.664155][ T8873] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.673660][ T8873] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.687110][ T8873] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.758086][ T8962] fuse: Unknown parameter 'user_id00000000000000000000' [ 232.027249][ T8966] X25: unknown FF in state 3 [ 232.057508][ T8972] capability: warning: `syz.2.1037' uses 32-bit capabilities (legacy support in use) [ 233.235936][ T8974] WARNING! power/level is deprecated; use power/control instead [ 233.396440][ T8982] fuse: Unknown parameter 'user_id00000000000000000000' [ 236.173249][ T9048] loop2: detected capacity change from 0 to 128 [ 236.278498][ T8821] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 237.706464][ T9087] fuse: Bad value for 'fd' [ 237.997267][ T9099] loop1: detected capacity change from 0 to 128 [ 239.031787][ T9123] fuse: Unknown parameter '0x0000000000000003' [ 239.277499][ T9132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1080'. [ 239.699193][ T9144] loop3: detected capacity change from 0 to 128 [ 239.761177][ T8821] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 240.438708][ T9161] fuse: Unknown parameter '0x0000000000000003' [ 241.311504][ T9195] loop3: detected capacity change from 0 to 128 [ 241.519337][ T9197] fuse: Unknown parameter '0x0000000000000003' [ 242.229308][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1104'. [ 242.498294][ T9224] fuse: Unknown parameter '0x0000000000000003' [ 242.649059][ T9229] loop3: detected capacity change from 0 to 128 [ 243.636876][ T9251] fuse: Unknown parameter '0x0000000000000003' [ 244.224049][ T9273] loop3: detected capacity change from 0 to 128 [ 244.758460][ T9278] fuse: Unknown parameter '0x0000000000000003' [ 244.789410][ T9280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1132'. [ 244.829268][ T9280] vlan1: entered promiscuous mode [ 245.816390][ T9309] loop3: detected capacity change from 0 to 128 [ 246.744145][ T9328] fuse: Unknown parameter 'group_i00000000000000000000' [ 247.237598][ T9351] loop3: detected capacity change from 0 to 128 [ 248.787231][ T9393] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.959692][ T9401] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 249.414612][ T9412] fuse: Unknown parameter 'group_id00000000000000000000' [ 250.387189][ T9439] fuse: Unknown parameter 'group_id00000000000000000000' [ 250.719006][ T9446] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.907684][ T9452] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1202'. [ 250.925728][ T9452] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 251.067215][ T9457] fuse: Unknown parameter 'group_id00000000000000000000' [ 251.185791][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1206'. [ 251.642166][ T9476] fuse: Bad value for 'user_id' [ 252.147520][ T9498] capability: warning: `syz.1.1223' uses deprecated v2 capabilities in a way that may be insecure [ 252.185813][ T9499] ieee802154 phy0 wpan0: encryption failed: -22 [ 252.347448][ T9503] fuse: Bad value for 'user_id' [ 252.862490][ T9517] loop1: detected capacity change from 0 to 512 [ 252.931909][ T9517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.027742][ T9517] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.064693][ T9524] fuse: Bad value for 'user_id' [ 253.106417][ T9517] EXT4-fs error (device loop1): ext4_get_verity_descriptor_location:335: inode #15: comm syz.1.1232: verity file corrupted; can't find descriptor [ 253.179299][ T9517] fs-verity (loop1, inode 15): Error -117 getting verity descriptor size [ 253.267851][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.313619][ T9533] binder: 9529:9533 ioctl 4018620d 0 returned -22 [ 253.824012][ T9553] loop1: detected capacity change from 0 to 128 [ 254.040629][ T9553] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 254.090077][ T9553] ext4 filesystem being mounted at /343/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 254.144967][ T9553] syz.1.1246 (pid 9553) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 254.174489][ T9559] ip_tables: iptables: counters copy to user failed while replacing table [ 254.210783][ T9561] loop2: detected capacity change from 0 to 512 [ 254.231269][ T5772] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 254.245154][ T9561] EXT4-fs: quotafile must be on filesystem root [ 254.941842][ T9581] fuse: Bad value for 'fd' [ 254.953454][ T9583] loop3: detected capacity change from 0 to 128 [ 254.996245][ T9583] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 255.027630][ T9587] binder: 9584:9587 ioctl 4018620d 0 returned -22 [ 255.056064][ T9583] ext4 filesystem being mounted at /342/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 255.214485][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 255.742773][ T9607] loop3: detected capacity change from 0 to 128 [ 255.771979][ T9607] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 255.838353][ T9607] ext4 filesystem being mounted at /347/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 255.929498][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 255.951220][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.957533][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.976260][ T9612] Illegal XDP return value 1177467316 on prog (id 30) dev syz_tun, expect packet loss! [ 256.372047][ T9622] can: request_module (can-proto-3) failed. [ 256.412158][ T9633] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 256.681705][ T9643] loop2: detected capacity change from 0 to 128 [ 256.704073][ T9621] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 256.738127][ T9643] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 256.822843][ T9643] ext4 filesystem being mounted at /277/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 256.979655][ T5783] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 257.200002][ T9659] FAULT_INJECTION: forcing a failure. [ 257.200002][ T9659] name failslab, interval 1, probability 0, space 0, times 0 [ 257.212979][ T9659] CPU: 0 PID: 9659 Comm: syz.0.1286 Not tainted syzkaller #0 [ 257.220342][ T9659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 257.230396][ T9659] Call Trace: [ 257.233672][ T9659] [ 257.236600][ T9659] dump_stack_lvl+0x18c/0x250 [ 257.241288][ T9659] ? show_regs_print_info+0x20/0x20 [ 257.246490][ T9659] ? load_image+0x420/0x420 [ 257.250996][ T9659] should_fail_ex+0x394/0x4c0 [ 257.255681][ T9659] ? __sigqueue_alloc+0x32/0x520 [ 257.260610][ T9659] should_failslab+0x9/0x20 [ 257.265116][ T9659] slab_pre_alloc_hook+0x59/0x300 [ 257.270140][ T9659] ? __lock_acquire+0x7eb0/0x7eb0 [ 257.275165][ T9659] ? __sigqueue_alloc+0x32/0x520 [ 257.280100][ T9659] kmem_cache_alloc+0x5a/0x2c0 [ 257.284877][ T9659] ? __sigqueue_alloc+0x40c/0x520 [ 257.289896][ T9659] ? __sigqueue_alloc+0x32/0x520 [ 257.294828][ T9659] __sigqueue_alloc+0x40c/0x520 [ 257.299674][ T9659] __send_signal_locked+0x22f/0xe00 [ 257.304877][ T9659] send_signal_locked+0x7dc/0x940 [ 257.309906][ T9659] ? signal_wake_up_state+0x120/0x120 [ 257.315280][ T9659] ? _raw_spin_lock+0x40/0x40 [ 257.319956][ T9659] ? __up_read+0x2b8/0x6b0 [ 257.324369][ T9659] force_sig_info_to_task+0x347/0x490 [ 257.329752][ T9659] force_sig_fault+0xf1/0x150 [ 257.334434][ T9659] ? force_sig_fault_to_task+0x140/0x140 [ 257.340086][ T9659] ? __bad_area_nosemaphore+0x31e/0x690 [ 257.345635][ T9659] exc_page_fault+0x64/0x100 [ 257.350227][ T9659] asm_exc_page_fault+0x26/0x30 [ 257.355078][ T9659] RIP: 0033:0x7f185cb88fe1 [ 257.359488][ T9659] Code: 00 0f 1f 84 00 00 00 00 00 48 85 f6 74 37 49 89 f0 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 5f 02 00 00 fd 74 0f c5 fd d7 c1 48 83 fe 20 76 11 85 c0 74 6d f3 0f bc c0 [ 257.379100][ T9659] RSP: 002b:00007f185daabf48 EFLAGS: 00010283 [ 257.385166][ T9659] RAX: 0000000000000000 RBX: 00007f185daac014 RCX: 0000000000000000 [ 257.393137][ T9659] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 257.401103][ T9659] RBP: 0000000000000006 R08: 000000000000000f R09: 0000000000000000 [ 257.409075][ T9659] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 257.417048][ T9659] R13: 00007f185daabfb0 R14: 00007f185ce25fa0 R15: 0000000000000000 [ 257.425052][ T9659] [ 257.428195][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.696335][ T9672] loop3: detected capacity change from 0 to 128 [ 257.744736][ T9672] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 257.801434][ T9672] ext4 filesystem being mounted at /357/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 257.915239][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 258.415252][ T9703] loop1: detected capacity change from 0 to 128 [ 258.474956][ T9703] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 258.548962][ T9703] ext4 filesystem being mounted at /353/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 258.678260][ T5772] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 259.009454][ T9727] fuse: Unknown parameter 'fd0x0000000000000003' [ 259.068627][ T9725] syzkaller0: entered promiscuous mode [ 259.088882][ T9725] syzkaller0: entered allmulticast mode [ 259.176175][ T9732] loop2: detected capacity change from 0 to 128 [ 259.208587][ T9734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1317'. [ 259.233399][ T9732] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 259.276173][ T9734] vlan2: entered promiscuous mode [ 259.287847][ T9732] ext4 filesystem being mounted at /287/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 259.400188][ T5783] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 259.969704][ T9759] loop3: detected capacity change from 0 to 2048 [ 260.046807][ T9759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.107344][ T9759] ext4 filesystem being mounted at /366/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 260.285414][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.511606][ T9811] fuse: Bad value for 'fd' [ 262.480765][ T9832] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(9) [ 262.648338][ T9836] fuse: Invalid rootmode [ 263.273391][ T9850] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(10) [ 263.335458][ T9852] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 263.387653][ T9854] netlink: 'syz.0.1371': attribute type 10 has an invalid length. [ 263.407091][ T9854] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1371'. [ 263.433011][ T9854] netlink: 'syz.0.1371': attribute type 10 has an invalid length. [ 263.455431][ T9854] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1371'. [ 263.741148][ T9859] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(9) [ 263.796024][ T9861] fuse: Invalid rootmode [ 264.096173][ T9871] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(10) [ 264.237643][ T9876] loop3: detected capacity change from 0 to 128 [ 264.338263][ T9876] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 264.392979][ T9876] ext4 filesystem being mounted at /384/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 264.493904][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 264.609840][ T9885] fuse: Invalid rootmode [ 264.948651][ T9897] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 264.956894][ T9896] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(10) [ 265.240157][ T9901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1393'. [ 266.352823][ T9901] vlan2: entered promiscuous mode [ 266.480227][ T9905] loop2: detected capacity change from 0 to 128 [ 266.556881][ T9908] fuse: Bad value for 'rootmode' [ 266.776439][ T9914] loop3: detected capacity change from 0 to 2048 [ 266.802390][ T9905] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 266.908561][ T9914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.982220][ T9914] ext4 filesystem being mounted at /391/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 267.031556][ T9920] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 267.045881][ T9905] ext4 filesystem being mounted at /300/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 267.287714][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.416661][ T5783] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 267.529835][ T9931] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1405'. [ 267.592014][ T9931] vlan1: entered promiscuous mode [ 267.695895][ T9936] fuse: Bad value for 'rootmode' [ 267.709448][ T9935] autofs4:pid:9935:autofs_fill_super: called with bogus options [ 267.980613][ T9945] device-mapper: table: 248:0: zero-length target [ 268.016599][ T9945] device-mapper: ioctl: error adding target to table [ 268.145755][ T9951] loop2: detected capacity change from 0 to 128 [ 268.380520][ T9960] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1418'. [ 268.413598][ T9951] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 268.466405][ T9965] autofs4:pid:9965:autofs_fill_super: called with bogus options [ 268.513188][ T9951] ext4 filesystem being mounted at /302/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 268.606840][ T9969] binder: 9967:9969 ioctl c0306201 200000000080 returned -14 [ 268.640593][ T9970] loop1: detected capacity change from 0 to 2048 [ 268.652132][ T9972] device-mapper: table: 248:0: zero-length target [ 268.659912][ T9969] binder: 9967:9969 ioctl c0306201 2000000003c0 returned -14 [ 268.680309][ T9972] device-mapper: ioctl: error adding target to table [ 268.764383][ T9970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.842944][ T9970] ext4 filesystem being mounted at /382/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 268.883987][ T5783] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 269.069873][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.353951][ T9993] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1430'. [ 269.410329][ T9993] vlan2: entered promiscuous mode [ 269.421428][ T9995] autofs4:pid:9995:autofs_fill_super: called with bogus options [ 269.568114][T10002] loop3: detected capacity change from 0 to 128 [ 269.620205][T10004] loop1: detected capacity change from 0 to 512 [ 269.645983][T10002] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 269.714266][T10002] ext4 filesystem being mounted at /402/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 269.727636][T10004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.818303][T10004] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.882241][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 270.024010][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.250479][T10021] can: request_module (can-proto-3) failed. [ 270.319416][T10032] autofs4:pid:10032:autofs_fill_super: called with bogus options [ 270.529733][T10039] loop1: detected capacity change from 0 to 128 [ 270.566906][T10039] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 270.592463][T10041] loop3: detected capacity change from 0 to 512 [ 270.633632][T10041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.660224][T10039] ext4 filesystem being mounted at /387/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 270.702818][T10041] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.780026][ T5772] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 270.790027][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.926647][T10046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1449'. [ 271.095975][T10054] autofs4:pid:10054:autofs_fill_super: called with bogus options [ 271.597389][T10080] can: request_module (can-proto-3) failed. [ 271.857343][T10091] autofs4:pid:10091:autofs_fill_super: called with bogus options [ 272.454599][T10115] autofs4:pid:10115:autofs_fill_super: called with bogus options [ 272.946150][T10138] can: request_module (can-proto-3) failed. [ 273.305664][T10157] loop1: detected capacity change from 0 to 512 [ 273.328727][T10157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.356969][T10157] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.378741][T10157] EXT4-fs (loop1): shut down requested (0) [ 273.424174][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.556154][T10163] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 273.742740][T10169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1495'. [ 274.292694][T10181] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 274.369782][T10184] can: request_module (can-proto-3) failed. [ 274.772750][T10198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1505'. [ 276.097848][T10228] can: request_module (can-proto-3) failed. [ 276.544115][T10248] binder: 10246:10248 ioctl c0306201 200000000080 returned -14 [ 276.803462][T10257] fuse: Unknown parameter 'user_i00000000000000000000' [ 277.152021][T10272] binder: 10271:10272 ioctl c0306201 200000000080 returned -14 [ 277.170557][ T3494] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 277.385664][T10285] can: request_module (can-proto-3) failed. [ 278.064955][T10289] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1543'. [ 278.188398][T10293] loop1: detected capacity change from 0 to 128 [ 278.236364][T10293] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 278.272301][T10293] ext4 filesystem being mounted at /418/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 278.312078][ T5772] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 278.486781][T10303] binder: 10302:10303 ioctl c0306201 200000000080 returned -14 [ 279.155880][T10312] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1552'. [ 279.326825][T10317] can: request_module (can-proto-3) failed. [ 279.549439][T10324] binder: 10323:10324 ioctl c0306201 200000000080 returned -14 [ 279.563243][T10324] binder: 10323:10324 ioctl c0306201 2000000003c0 returned -14 [ 279.609168][T10326] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 279.739587][T10329] can: request_module (can-proto-3) failed. [ 280.042559][T10267] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 280.255929][T10336] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1561'. [ 280.434404][T10345] binder: 10344:10345 ioctl c0306201 200000000080 returned -14 [ 280.450741][T10347] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 280.461481][T10345] binder: 10344:10345 ioctl c0306201 2000000003c0 returned -14 [ 280.815688][T10359] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1573'. [ 280.951504][T10366] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 280.974846][T10369] binder: 10368:10369 ioctl c0306201 200000000080 returned -14 [ 280.998976][T10369] binder: 10368:10369 ioctl c0306201 2000000003c0 returned -14 [ 281.114148][T10370] can: request_module (can-proto-3) failed. [ 281.202715][ T27] audit: type=1326 audit(1791058622.464:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10375 comm="syz.0.1580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185cb9e159 code=0x7ffc0000 [ 281.284549][ T27] audit: type=1326 audit(1791058622.504:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10375 comm="syz.0.1580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185cb9e159 code=0x7ffc0000 [ 281.384521][ T27] audit: type=1326 audit(1791058622.504:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10375 comm="syz.0.1580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185cb9e159 code=0x7ffc0000 [ 281.435625][T10385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1584'. [ 281.489579][ T27] audit: type=1326 audit(1791058622.584:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10375 comm="syz.0.1580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185cb9e159 code=0x7ffc0000 [ 281.513564][ C0] vkms_vblank_simulate: vblank timer overrun [ 281.621833][ T27] audit: type=1326 audit(1791058622.584:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10375 comm="syz.0.1580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185cb9e159 code=0x7ffc0000 [ 281.645792][ C0] vkms_vblank_simulate: vblank timer overrun [ 281.680786][T10394] syzkaller1: entered promiscuous mode [ 281.695857][T10396] binder: 10395:10396 ioctl c0306201 200000000080 returned -14 [ 281.713154][T10394] syzkaller1: entered allmulticast mode [ 281.733031][T10396] binder: 10395:10396 ioctl c0306201 2000000003c0 returned -14 [ 281.771922][T10396] binder_alloc: 10395: binder_alloc_buf, no vma [ 281.982991][T10404] binder_alloc: 10403: pid 10403 spamming oneway? 1 buffers allocated for a total size of 4096 [ 282.136420][T10410] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1594'. [ 282.184067][T10410] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1594'. [ 282.308422][T10415] loop1: detected capacity change from 0 to 8 [ 282.504174][T10424] Cannot find set identified by id 0 to match [ 282.696507][T10428] can: request_module (can-proto-3) failed. [ 282.788704][T10434] binder: 10433:10434 ioctl c0306201 200000000080 returned -14 [ 282.824167][T10434] binder: 10433:10434 ioctl c0306201 2000000003c0 returned -14 [ 282.857663][T10434] binder_alloc: 10433: binder_alloc_buf, no vma [ 283.399349][T10454] loop2: detected capacity change from 0 to 512 [ 283.474702][T10454] EXT4-fs (loop2): invalid journal inode [ 283.526227][T10454] EXT4-fs (loop2): can't get journal size [ 283.616558][T10454] EXT4-fs (loop2): 1 truncate cleaned up [ 283.657602][T10454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.908027][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.356588][T10484] can: request_module (can-proto-3) failed. [ 284.460047][T10478] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.468056][T10478] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.901901][T10478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.948861][T10478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.294402][T10478] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.308897][T10478] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.320608][T10478] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.333816][T10478] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.428240][T10478] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.437367][T10478] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.446347][T10478] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.455273][T10478] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.484727][T10496] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 285.647038][T10501] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 285.722675][T10501] device-mapper: ioctl: error adding target to table [ 286.083986][T10517] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 286.096419][T10517] bond1 (unregistering): Released all slaves [ 286.532804][T10528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1635'. [ 286.576958][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1635'. [ 286.633993][T10529] can: request_module (can-proto-3) failed. [ 286.683805][T10534] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 286.723243][T10534] device-mapper: ioctl: error adding target to table [ 286.824505][T10536] binder: 10535:10536 ioctl c0306201 200000000080 returned -14 [ 286.853958][T10536] binder: BINDER_SET_CONTEXT_MGR already set [ 286.870041][T10538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1638'. [ 286.889409][T10536] binder: 10535:10536 ioctl 4018620d 200000000040 returned -16 [ 286.905057][T10539] binder: 10535:10539 ioctl c0306201 2000000003c0 returned -14 [ 287.328828][T10546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1642'. [ 288.137026][T10561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1645'. [ 288.166876][T10561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1645'. [ 288.184209][T10563] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 288.194653][T10563] device-mapper: ioctl: error adding target to table [ 288.280599][T10565] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1647'. [ 288.298671][T10567] binder: 10566:10567 ioctl c0306201 200000000080 returned -14 [ 288.316946][T10567] binder: BINDER_SET_CONTEXT_MGR already set [ 288.330847][T10567] binder: 10566:10567 ioctl 4018620d 200000000040 returned -16 [ 288.363920][T10567] binder: 10566:10567 ioctl c0306201 2000000003c0 returned -14 [ 288.949569][T10579] can: request_module (can-proto-3) failed. [ 289.620833][T10591] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 289.656544][T10591] device-mapper: ioctl: error adding target to table [ 289.677100][T10594] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1657'. [ 289.824478][T10600] binder: 10595:10600 ioctl c0306201 200000000080 returned -14 [ 289.853921][T10600] binder: BINDER_SET_CONTEXT_MGR already set [ 289.870209][T10600] binder: 10595:10600 ioctl 4018620d 200000000040 returned -16 [ 289.890925][T10600] binder: 10595:10600 ioctl c0306201 2000000003c0 returned -14 [ 290.693009][T10617] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 290.714857][T10617] device-mapper: ioctl: error adding target to table [ 290.787934][T10620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1668'. [ 290.800719][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1668'. [ 290.974496][T10624] loop1: detected capacity change from 0 to 512 [ 291.007004][T10624] EXT4-fs (loop1): invalid journal inode [ 291.055879][T10624] EXT4-fs (loop1): can't get journal size [ 291.097317][T10624] EXT4-fs (loop1): 1 truncate cleaned up [ 291.128523][T10624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.275279][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.619111][T10644] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 291.633815][T10645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1678'. [ 291.656636][T10644] device-mapper: ioctl: error adding target to table [ 291.672026][T10645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1678'. [ 293.513290][T10656] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 293.560116][T10658] binder: 10657:10658 ioctl c0306201 2000000003c0 returned -14 [ 293.744951][T10665] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 293.794954][T10665] device-mapper: ioctl: error adding target to table [ 293.870971][T10668] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1688'. [ 293.924837][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1688'. [ 294.576559][T10688] loop3: detected capacity change from 0 to 1024 [ 294.595319][T10688] EXT4-fs: Ignoring removed nomblk_io_submit option [ 294.655703][T10688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.892452][T10697] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 294.935685][T10699] loop1: detected capacity change from 0 to 512 [ 294.943445][T10697] device-mapper: ioctl: error adding target to table [ 294.968001][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.988426][T10699] EXT4-fs (loop1): invalid journal inode [ 295.034693][T10699] EXT4-fs (loop1): can't get journal size [ 295.084980][T10699] EXT4-fs (loop1): 1 truncate cleaned up [ 295.153641][T10699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.336523][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.784156][T10732] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 295.797558][T10734] loop3: detected capacity change from 0 to 128 [ 295.841603][T10732] device-mapper: ioctl: error adding target to table [ 295.869982][T10734] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 295.910006][T10734] ext4 filesystem being mounted at /468/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 297.109203][T10740] loop2: detected capacity change from 0 to 512 [ 297.153262][T10740] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 297.207017][T10740] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 297.222719][T10740] Quota error (device loop2): write_blk: dquota write failed [ 297.230379][T10740] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 297.239556][T10740] Quota error (device loop2): write_blk: dquota write failed [ 297.247182][T10740] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 297.257181][T10740] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.1712: Failed to acquire dquot type 1 [ 297.272320][T10740] EXT4-fs (loop2): 1 truncate cleaned up [ 297.278671][T10740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.330113][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 297.544155][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.917261][T10765] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 297.965822][T10765] device-mapper: ioctl: error adding target to table [ 298.046705][T10770] loop1: detected capacity change from 0 to 512 [ 298.101500][T10770] EXT4-fs (loop1): invalid journal inode [ 298.137397][T10770] EXT4-fs (loop1): can't get journal size [ 298.193316][T10770] EXT4-fs (loop1): 1 truncate cleaned up [ 298.333370][T10770] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.274242][T10780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 299.283145][T10780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 299.291962][T10780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 299.300746][T10780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 299.599250][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.728765][T10791] loop3: detected capacity change from 0 to 128 [ 299.778626][T10791] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 299.835804][T10791] ext4 filesystem being mounted at /474/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 299.971767][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 300.238967][T10812] can: request_module (can-proto-3) failed. [ 300.368149][T10820] syzkaller0: entered promiscuous mode [ 300.384101][T10820] syzkaller0: entered allmulticast mode [ 300.524756][T10827] loop2: detected capacity change from 0 to 128 [ 300.559446][T10827] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 300.615839][T10827] ext4 filesystem being mounted at /380/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 300.725113][ T5783] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 300.774222][T10837] FAULT_INJECTION: forcing a failure. [ 300.774222][T10837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.827982][T10837] CPU: 0 PID: 10837 Comm: syz.1.1749 Not tainted syzkaller #0 [ 300.835468][T10837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 300.845512][T10837] Call Trace: [ 300.848777][T10837] [ 300.851691][T10837] dump_stack_lvl+0x18c/0x250 [ 300.856367][T10837] ? show_regs_print_info+0x20/0x20 [ 300.861575][T10837] ? load_image+0x420/0x420 [ 300.866064][T10837] ? __lock_acquire+0x7eb0/0x7eb0 [ 300.871071][T10837] ? __virt_addr_valid+0x10c/0x380 [ 300.876171][T10837] should_fail_ex+0x394/0x4c0 [ 300.880839][T10837] _copy_to_user+0x2f/0xa0 [ 300.885239][T10837] bpf_vlog_reverse_ubuf+0x312/0x3a0 [ 300.890514][T10837] bpf_vlog_finalize+0x12b/0x3e0 [ 300.895444][T10837] btf_new_fd+0x4ca/0x9e0 [ 300.899782][T10837] ? bpf_btf_show_fdinfo+0x80/0x80 [ 300.904879][T10837] ? capable+0x88/0xe0 [ 300.908937][T10837] __sys_bpf+0x670/0x890 [ 300.913164][T10837] ? bpf_link_show_fdinfo+0x560/0x560 [ 300.918526][T10837] ? lock_chain_count+0x20/0x20 [ 300.923364][T10837] __x64_sys_bpf+0x7c/0x90 [ 300.927766][T10837] do_syscall_64+0x55/0xb0 [ 300.932174][T10837] ? clear_bhb_loop+0x40/0x90 [ 300.936833][T10837] ? clear_bhb_loop+0x40/0x90 [ 300.941492][T10837] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 300.947375][T10837] RIP: 0033:0x7fbb2399e159 [ 300.951775][T10837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.971374][T10837] RSP: 002b:00007fbb2479a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 300.979772][T10837] RAX: ffffffffffffffda RBX: 00007fbb23c25fa0 RCX: 00007fbb2399e159 [ 300.987725][T10837] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 300.995676][T10837] RBP: 00007fbb23a3506b R08: 0000000000000000 R09: 0000000000000000 [ 301.003628][T10837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.011584][T10837] R13: 00007fbb23c26038 R14: 00007fbb23c25fa0 R15: 00007fff63fe2c28 [ 301.019549][T10837] [ 301.218047][T10849] loop3: detected capacity change from 0 to 512 [ 301.277377][T10849] EXT4-fs (loop3): invalid journal inode [ 301.325813][T10849] EXT4-fs (loop3): can't get journal size [ 301.353563][T10849] EXT4-fs (loop3): 1 truncate cleaned up [ 301.378127][T10849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.503077][T10858] batman_adv: batadv0: Adding interface: syzkaller0 [ 301.523839][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.539438][T10858] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.744753][T10858] batman_adv: batadv0: Interface activated: syzkaller0 [ 301.766397][T10856] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 302.017523][T10856] batman_adv: batadv0: Removing interface: syzkaller0 [ 302.179191][T10871] can: request_module (can-proto-3) failed. [ 302.817121][T10889] tipc: Started in network mode [ 302.826953][T10889] tipc: Node identity 4, cluster identity 4711 [ 302.834470][T10889] tipc: Node number set to 4 [ 303.015122][T10899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1770'. [ 303.381609][T10907] syzkaller1: entered promiscuous mode [ 303.387086][T10907] syzkaller1: entered allmulticast mode [ 303.820441][T10925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1778'. [ 303.868934][T10925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.888152][T10923] can: request_module (can-proto-3) failed. [ 304.390282][T10947] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 304.639987][T10952] FAULT_INJECTION: forcing a failure. [ 304.639987][T10952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.875113][T10953] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1788'. [ 304.916060][T10952] CPU: 0 PID: 10952 Comm: syz.0.1787 Not tainted syzkaller #0 [ 304.923557][T10952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 304.933612][T10952] Call Trace: [ 304.936886][T10952] [ 304.939802][T10952] dump_stack_lvl+0x18c/0x250 [ 304.944474][T10952] ? show_regs_print_info+0x20/0x20 [ 304.949658][T10952] ? load_image+0x420/0x420 [ 304.954146][T10952] ? __lock_acquire+0x7eb0/0x7eb0 [ 304.959156][T10952] ? __virt_addr_valid+0x10c/0x380 [ 304.964286][T10952] should_fail_ex+0x394/0x4c0 [ 304.968959][T10952] _copy_from_user+0x2f/0xe0 [ 304.973544][T10952] bpf_vlog_reverse_ubuf+0xbb/0x3a0 [ 304.978765][T10952] bpf_vlog_finalize+0x174/0x3e0 [ 304.983692][T10952] btf_new_fd+0x4ca/0x9e0 [ 304.988012][T10952] ? bpf_btf_show_fdinfo+0x80/0x80 [ 304.993130][T10952] ? capable+0x88/0xe0 [ 304.997193][T10952] __sys_bpf+0x670/0x890 [ 305.001420][T10952] ? bpf_link_show_fdinfo+0x560/0x560 [ 305.006782][T10952] ? lock_chain_count+0x20/0x20 [ 305.011646][T10952] __x64_sys_bpf+0x7c/0x90 [ 305.016047][T10952] do_syscall_64+0x55/0xb0 [ 305.020461][T10952] ? clear_bhb_loop+0x40/0x90 [ 305.025120][T10952] ? clear_bhb_loop+0x40/0x90 [ 305.029777][T10952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 305.035655][T10952] RIP: 0033:0x7f185cb9e159 [ 305.040054][T10952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.059663][T10952] RSP: 002b:00007f185daad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 305.068063][T10952] RAX: ffffffffffffffda RBX: 00007f185ce25fa0 RCX: 00007f185cb9e159 [ 305.076019][T10952] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 305.083975][T10952] RBP: 00007f185cc3506b R08: 0000000000000000 R09: 0000000000000000 [ 305.091944][T10952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.099914][T10952] R13: 00007f185ce26038 R14: 00007f185ce25fa0 R15: 00007ffda5edbe28 [ 305.107893][T10952] [ 305.646603][T10965] FAULT_INJECTION: forcing a failure. [ 305.646603][T10965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.693843][T10965] CPU: 0 PID: 10965 Comm: syz.2.1792 Not tainted syzkaller #0 [ 305.701332][T10965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 305.711370][T10965] Call Trace: [ 305.714634][T10965] [ 305.717555][T10965] dump_stack_lvl+0x18c/0x250 [ 305.722230][T10965] ? show_regs_print_info+0x20/0x20 [ 305.727414][T10965] ? load_image+0x420/0x420 [ 305.731903][T10965] ? __might_fault+0xaa/0x120 [ 305.736582][T10965] ? __lock_acquire+0x7eb0/0x7eb0 [ 305.741591][T10965] ? __virt_addr_valid+0x10c/0x380 [ 305.746707][T10965] should_fail_ex+0x394/0x4c0 [ 305.751376][T10965] _copy_from_user+0x2f/0xe0 [ 305.755953][T10965] strndup_user+0xb7/0x150 [ 305.760357][T10965] __se_sys_mount+0xe2/0x3d0 [ 305.764949][T10965] ? __x64_sys_mount+0xc0/0xc0 [ 305.769698][T10965] ? lockdep_hardirqs_on+0x98/0x150 [ 305.774897][T10965] ? __x64_sys_mount+0x20/0xc0 [ 305.779649][T10965] do_syscall_64+0x55/0xb0 [ 305.784075][T10965] ? clear_bhb_loop+0x40/0x90 [ 305.788738][T10965] ? clear_bhb_loop+0x40/0x90 [ 305.793398][T10965] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 305.799281][T10965] RIP: 0033:0x7f1f47b9e159 [ 305.803697][T10965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.823302][T10965] RSP: 002b:00007f1f48b09028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 305.831700][T10965] RAX: ffffffffffffffda RBX: 00007f1f47e25fa0 RCX: 00007f1f47b9e159 [ 305.839657][T10965] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 305.847609][T10965] RBP: 00007f1f47c3506b R08: 00002000000002c0 R09: 0000000000000000 [ 305.855565][T10965] R10: 0000000000114000 R11: 0000000000000246 R12: 0000000000000000 [ 305.863520][T10965] R13: 00007f1f47e26038 R14: 00007f1f47e25fa0 R15: 00007fffd3203a08 [ 305.871485][T10965] [ 306.008678][T10978] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 306.238731][T10985] can: request_module (can-proto-3) failed. [ 306.279906][T10991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1800'. [ 306.318234][T10993] FAULT_INJECTION: forcing a failure. [ 306.318234][T10993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.346856][T10993] CPU: 0 PID: 10993 Comm: syz.1.1801 Not tainted syzkaller #0 [ 306.354357][T10993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 306.364413][T10993] Call Trace: [ 306.367679][T10993] [ 306.370593][T10993] dump_stack_lvl+0x18c/0x250 [ 306.375265][T10993] ? show_regs_print_info+0x20/0x20 [ 306.380466][T10993] ? load_image+0x420/0x420 [ 306.384954][T10993] ? __lock_acquire+0x7eb0/0x7eb0 [ 306.389962][T10993] ? __virt_addr_valid+0x10c/0x380 [ 306.395059][T10993] should_fail_ex+0x394/0x4c0 [ 306.399730][T10993] _copy_from_user+0x2f/0xe0 [ 306.404304][T10993] bpf_vlog_reverse_ubuf+0x122/0x3a0 [ 306.409582][T10993] bpf_vlog_finalize+0x12b/0x3e0 [ 306.414503][T10993] btf_new_fd+0x4ca/0x9e0 [ 306.418821][T10993] ? bpf_btf_show_fdinfo+0x80/0x80 [ 306.423917][T10993] ? capable+0x88/0xe0 [ 306.427974][T10993] __sys_bpf+0x670/0x890 [ 306.432201][T10993] ? bpf_link_show_fdinfo+0x560/0x560 [ 306.437561][T10993] ? lock_chain_count+0x20/0x20 [ 306.442399][T10993] __x64_sys_bpf+0x7c/0x90 [ 306.446797][T10993] do_syscall_64+0x55/0xb0 [ 306.451202][T10993] ? clear_bhb_loop+0x40/0x90 [ 306.455859][T10993] ? clear_bhb_loop+0x40/0x90 [ 306.460531][T10993] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 306.466426][T10993] RIP: 0033:0x7fbb2399e159 [ 306.470826][T10993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.490423][T10993] RSP: 002b:00007fbb2479a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 306.498821][T10993] RAX: ffffffffffffffda RBX: 00007fbb23c25fa0 RCX: 00007fbb2399e159 [ 306.506776][T10993] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 306.514730][T10993] RBP: 00007fbb23a3506b R08: 0000000000000000 R09: 0000000000000000 [ 306.522682][T10993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.530638][T10993] R13: 00007fbb23c26038 R14: 00007fbb23c25fa0 R15: 00007fff63fe2c28 [ 306.538602][T10993] [ 306.881211][T11005] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 307.322099][T11021] FAULT_INJECTION: forcing a failure. [ 307.322099][T11021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.359481][T11021] CPU: 0 PID: 11021 Comm: syz.0.1812 Not tainted syzkaller #0 [ 307.366970][T11021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 307.377018][T11021] Call Trace: [ 307.380284][T11021] [ 307.383202][T11021] dump_stack_lvl+0x18c/0x250 [ 307.387875][T11021] ? show_regs_print_info+0x20/0x20 [ 307.393061][T11021] ? load_image+0x420/0x420 [ 307.397552][T11021] ? __lock_acquire+0x7eb0/0x7eb0 [ 307.402560][T11021] ? __virt_addr_valid+0x10c/0x380 [ 307.407660][T11021] should_fail_ex+0x394/0x4c0 [ 307.412327][T11021] _copy_from_user+0x2f/0xe0 [ 307.416903][T11021] bpf_vlog_reverse_ubuf+0x122/0x3a0 [ 307.422199][T11021] bpf_vlog_finalize+0x12b/0x3e0 [ 307.427129][T11021] btf_new_fd+0x4ca/0x9e0 [ 307.431448][T11021] ? bpf_btf_show_fdinfo+0x80/0x80 [ 307.436546][T11021] ? capable+0x88/0xe0 [ 307.440610][T11021] __sys_bpf+0x670/0x890 [ 307.444857][T11021] ? bpf_link_show_fdinfo+0x560/0x560 [ 307.450221][T11021] ? lock_chain_count+0x20/0x20 [ 307.455069][T11021] __x64_sys_bpf+0x7c/0x90 [ 307.459479][T11021] do_syscall_64+0x55/0xb0 [ 307.463885][T11021] ? clear_bhb_loop+0x40/0x90 [ 307.468544][T11021] ? clear_bhb_loop+0x40/0x90 [ 307.473205][T11021] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.479090][T11021] RIP: 0033:0x7f185cb9e159 [ 307.483494][T11021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.503100][T11021] RSP: 002b:00007f185daad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 307.511500][T11021] RAX: ffffffffffffffda RBX: 00007f185ce25fa0 RCX: 00007f185cb9e159 [ 307.519457][T11021] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 307.527410][T11021] RBP: 00007f185cc3506b R08: 0000000000000000 R09: 0000000000000000 [ 307.535365][T11021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.543321][T11021] R13: 00007f185ce26038 R14: 00007f185ce25fa0 R15: 00007ffda5edbe28 [ 307.551287][T11021] [ 307.840299][T11037] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 307.959144][T11039] can: request_module (can-proto-3) failed. [ 308.520419][T11058] device-mapper: ioctl: Target spec extends beyond end of parameters [ 308.540221][T11058] device-mapper: ioctl: unable to find target [ 308.546939][T11060] FAULT_INJECTION: forcing a failure. [ 308.546939][T11060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.575604][T11060] CPU: 0 PID: 11060 Comm: syz.2.1826 Not tainted syzkaller #0 [ 308.583081][T11060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 308.593122][T11060] Call Trace: [ 308.596388][T11060] [ 308.599304][T11060] dump_stack_lvl+0x18c/0x250 [ 308.603972][T11060] ? show_regs_print_info+0x20/0x20 [ 308.609157][T11060] ? load_image+0x420/0x420 [ 308.613646][T11060] ? __lock_acquire+0x7eb0/0x7eb0 [ 308.618652][T11060] ? __virt_addr_valid+0x10c/0x380 [ 308.623748][T11060] should_fail_ex+0x394/0x4c0 [ 308.628418][T11060] _copy_from_user+0x2f/0xe0 [ 308.632994][T11060] bpf_vlog_reverse_ubuf+0x122/0x3a0 [ 308.638289][T11060] bpf_vlog_finalize+0x12b/0x3e0 [ 308.643217][T11060] btf_new_fd+0x4ca/0x9e0 [ 308.647536][T11060] ? bpf_btf_show_fdinfo+0x80/0x80 [ 308.652630][T11060] ? capable+0x88/0xe0 [ 308.656708][T11060] __sys_bpf+0x670/0x890 [ 308.660955][T11060] ? bpf_link_show_fdinfo+0x560/0x560 [ 308.666314][T11060] ? lock_chain_count+0x20/0x20 [ 308.671151][T11060] __x64_sys_bpf+0x7c/0x90 [ 308.675551][T11060] do_syscall_64+0x55/0xb0 [ 308.679953][T11060] ? clear_bhb_loop+0x40/0x90 [ 308.684611][T11060] ? clear_bhb_loop+0x40/0x90 [ 308.689269][T11060] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.695150][T11060] RIP: 0033:0x7f1f47b9e159 [ 308.699548][T11060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.719140][T11060] RSP: 002b:00007f1f48b09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 308.727536][T11060] RAX: ffffffffffffffda RBX: 00007f1f47e25fa0 RCX: 00007f1f47b9e159 [ 308.735490][T11060] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 308.743442][T11060] RBP: 00007f1f47c3506b R08: 0000000000000000 R09: 0000000000000000 [ 308.751396][T11060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.759347][T11060] R13: 00007f1f47e26038 R14: 00007f1f47e25fa0 R15: 00007fffd3203a08 [ 308.767316][T11060] [ 308.796009][T11062] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 309.245036][ T27] audit: type=1326 audit(1791058650.514:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11082 comm="syz.1.1837" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb2399e159 code=0x0 [ 309.268408][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.311836][T11085] FAULT_INJECTION: forcing a failure. [ 309.311836][T11085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.346750][T11085] CPU: 0 PID: 11085 Comm: syz.0.1838 Not tainted syzkaller #0 [ 309.354249][T11085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 309.364289][T11085] Call Trace: [ 309.367553][T11085] [ 309.370467][T11085] dump_stack_lvl+0x18c/0x250 [ 309.375162][T11085] ? show_regs_print_info+0x20/0x20 [ 309.380346][T11085] ? load_image+0x420/0x420 [ 309.384836][T11085] ? __lock_acquire+0x7eb0/0x7eb0 [ 309.389852][T11085] ? __virt_addr_valid+0x10c/0x380 [ 309.394954][T11085] should_fail_ex+0x394/0x4c0 [ 309.399626][T11085] _copy_from_user+0x2f/0xe0 [ 309.404199][T11085] bpf_vlog_reverse_ubuf+0xbb/0x3a0 [ 309.409406][T11085] ? btf_verifier_log+0x1a0/0x1a0 [ 309.414418][T11085] bpf_vlog_finalize+0x12b/0x3e0 [ 309.419344][T11085] btf_new_fd+0x4ca/0x9e0 [ 309.423663][T11085] ? bpf_btf_show_fdinfo+0x80/0x80 [ 309.428760][T11085] ? capable+0x88/0xe0 [ 309.432816][T11085] __sys_bpf+0x670/0x890 [ 309.437043][T11085] ? bpf_link_show_fdinfo+0x560/0x560 [ 309.442403][T11085] ? lock_chain_count+0x20/0x20 [ 309.447243][T11085] __x64_sys_bpf+0x7c/0x90 [ 309.451642][T11085] do_syscall_64+0x55/0xb0 [ 309.456046][T11085] ? clear_bhb_loop+0x40/0x90 [ 309.460709][T11085] ? clear_bhb_loop+0x40/0x90 [ 309.465385][T11085] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.471268][T11085] RIP: 0033:0x7f185cb9e159 [ 309.475668][T11085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.495255][T11085] RSP: 002b:00007f185daad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 309.503655][T11085] RAX: ffffffffffffffda RBX: 00007f185ce25fa0 RCX: 00007f185cb9e159 [ 309.511608][T11085] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 309.519561][T11085] RBP: 00007f185cc3506b R08: 0000000000000000 R09: 0000000000000000 [ 309.527515][T11085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.535471][T11085] R13: 00007f185ce26038 R14: 00007f185ce25fa0 R15: 00007ffda5edbe28 [ 309.543433][T11085] [ 309.546540][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.561091][T11088] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 309.657539][T11092] tipc: Started in network mode [ 309.665374][T11092] tipc: Node identity 4, cluster identity 4711 [ 309.672067][T11092] tipc: Node number set to 4 [ 310.293650][T11107] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1846'. [ 310.327807][T11107] syzkaller1: entered promiscuous mode [ 310.333757][T11107] syzkaller1: entered allmulticast mode [ 310.396737][T11111] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1846'. [ 310.535234][T11114] FAULT_INJECTION: forcing a failure. [ 310.535234][T11114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.550895][T11116] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 310.588791][T11114] CPU: 0 PID: 11114 Comm: syz.1.1849 Not tainted syzkaller #0 [ 310.596288][T11114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 310.606329][T11114] Call Trace: [ 310.609592][T11114] [ 310.612511][T11114] dump_stack_lvl+0x18c/0x250 [ 310.617181][T11114] ? show_regs_print_info+0x20/0x20 [ 310.622368][T11114] ? load_image+0x420/0x420 [ 310.626856][T11114] ? __lock_acquire+0x7eb0/0x7eb0 [ 310.631866][T11114] ? __virt_addr_valid+0x10c/0x380 [ 310.636967][T11114] should_fail_ex+0x394/0x4c0 [ 310.641633][T11114] _copy_to_user+0x2f/0xa0 [ 310.646036][T11114] bpf_vlog_reverse_ubuf+0x2ad/0x3a0 [ 310.651310][T11114] bpf_vlog_finalize+0x12b/0x3e0 [ 310.656251][T11114] btf_new_fd+0x4ca/0x9e0 [ 310.660592][T11114] ? bpf_btf_show_fdinfo+0x80/0x80 [ 310.665750][T11114] ? capable+0x88/0xe0 [ 310.669817][T11114] __sys_bpf+0x670/0x890 [ 310.674071][T11114] ? bpf_link_show_fdinfo+0x560/0x560 [ 310.679444][T11114] ? lock_chain_count+0x20/0x20 [ 310.684305][T11114] __x64_sys_bpf+0x7c/0x90 [ 310.688707][T11114] do_syscall_64+0x55/0xb0 [ 310.693115][T11114] ? clear_bhb_loop+0x40/0x90 [ 310.697775][T11114] ? clear_bhb_loop+0x40/0x90 [ 310.702436][T11114] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.708322][T11114] RIP: 0033:0x7fbb2399e159 [ 310.712737][T11114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.732330][T11114] RSP: 002b:00007fbb2479a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 310.740728][T11114] RAX: ffffffffffffffda RBX: 00007fbb23c25fa0 RCX: 00007fbb2399e159 [ 310.748697][T11114] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 310.756650][T11114] RBP: 00007fbb23a3506b R08: 0000000000000000 R09: 0000000000000000 [ 310.764604][T11114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.772571][T11114] R13: 00007fbb23c26038 R14: 00007fbb23c25fa0 R15: 00007fff63fe2c28 [ 310.780535][T11114] [ 310.783667][ C0] vkms_vblank_simulate: vblank timer overrun [ 311.432628][T11150] FAULT_INJECTION: forcing a failure. [ 311.432628][T11150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.457155][T11150] CPU: 0 PID: 11150 Comm: syz.3.1861 Not tainted syzkaller #0 [ 311.464642][T11150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.474687][T11150] Call Trace: [ 311.477969][T11150] [ 311.480889][T11150] dump_stack_lvl+0x18c/0x250 [ 311.485572][T11150] ? show_regs_print_info+0x20/0x20 [ 311.490757][T11150] ? load_image+0x420/0x420 [ 311.495247][T11150] ? __lock_acquire+0x7eb0/0x7eb0 [ 311.500269][T11150] ? __virt_addr_valid+0x10c/0x380 [ 311.505371][T11150] should_fail_ex+0x394/0x4c0 [ 311.510038][T11150] _copy_from_user+0x2f/0xe0 [ 311.514612][T11150] bpf_vlog_reverse_ubuf+0xbb/0x3a0 [ 311.519797][T11150] ? btf_verifier_log+0x1a0/0x1a0 [ 311.524806][T11150] bpf_vlog_finalize+0x12b/0x3e0 [ 311.529731][T11150] btf_new_fd+0x4ca/0x9e0 [ 311.534069][T11150] ? bpf_btf_show_fdinfo+0x80/0x80 [ 311.539168][T11150] ? capable+0x88/0xe0 [ 311.543224][T11150] __sys_bpf+0x670/0x890 [ 311.547454][T11150] ? bpf_link_show_fdinfo+0x560/0x560 [ 311.552817][T11150] ? lock_chain_count+0x20/0x20 [ 311.557656][T11150] __x64_sys_bpf+0x7c/0x90 [ 311.562058][T11150] do_syscall_64+0x55/0xb0 [ 311.566486][T11150] ? clear_bhb_loop+0x40/0x90 [ 311.571174][T11150] ? clear_bhb_loop+0x40/0x90 [ 311.575835][T11150] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 311.581716][T11150] RIP: 0033:0x7f204219e159 [ 311.586118][T11150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.605714][T11150] RSP: 002b:00007f204304e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 311.614111][T11150] RAX: ffffffffffffffda RBX: 00007f2042425fa0 RCX: 00007f204219e159 [ 311.622088][T11150] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 311.630043][T11150] RBP: 00007f204223506b R08: 0000000000000000 R09: 0000000000000000 [ 311.637995][T11150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.645950][T11150] R13: 00007f2042426038 R14: 00007f2042425fa0 R15: 00007fff7f183c58 [ 311.653914][T11150] [ 311.657010][ C0] vkms_vblank_simulate: vblank timer overrun [ 311.964552][T11164] divide error: 0000 [#1] PREEMPT SMP KASAN [ 311.970478][T11164] CPU: 0 PID: 11164 Comm: syz.3.1868 Not tainted syzkaller #0 [ 311.977913][T11164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.987950][T11164] RIP: 0010:block2mtd_setup2+0x57d/0xe30 [ 311.993569][T11164] Code: 37 fc 49 8b 1c 24 48 83 c3 60 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 fd 0d 37 fc 48 8b 03 48 63 4c 24 10 48 99 <48> f7 f9 48 89 d3 31 ff 48 89 d6 e8 73 6a de fb 48 85 db 48 8b 5c [ 312.013156][T11164] RSP: 0018:ffffc90003b67a00 EFLAGS: 00010246 [ 312.019207][T11164] RAX: 0000000000000000 RBX: ffff888148c92a40 RCX: 0000000000000000 [ 312.027189][T11164] RDX: 0000000000000000 RSI: 000000000fc00000 RDI: 0000000001f00000 [ 312.035155][T11164] RBP: ffffc90003b67bf8 R08: ffff88802231c45f R09: 1ffff1100446388b [ 312.043126][T11164] R10: dffffc0000000000 R11: ffffed100446388c R12: ffff888148c923c0 [ 312.051089][T11164] R13: dffffc0000000000 R14: ffff888027062000 R15: 1ffff11004e0c402 [ 312.059043][T11164] FS: 00007f204304e6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 312.067955][T11164] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.074521][T11164] CR2: 000000110c3b3f56 CR3: 00000000250f5000 CR4: 00000000003506f0 [ 312.082490][T11164] Call Trace: [ 312.085755][T11164] [ 312.088674][T11164] ? block2mtd_setup+0xd0/0xd0 [ 312.093423][T11164] ? rcu_is_watching+0x15/0xb0 [ 312.098180][T11164] ? mutex_lock_nested+0x20/0x20 [ 312.103097][T11164] ? __virt_addr_valid+0x10c/0x380 [ 312.108193][T11164] ? kernfs_fop_write_iter+0x1dc/0x520 [ 312.113628][T11164] block2mtd_setup+0x27/0xd0 [ 312.118200][T11164] param_attr_store+0x20e/0x300 [ 312.123049][T11164] ? param_attr_show+0x170/0x170 [ 312.127966][T11164] ? sysfs_kf_read+0x360/0x360 [ 312.132705][T11164] module_attr_store+0x5f/0x80 [ 312.137445][T11164] kernfs_fop_write_iter+0x3a4/0x520 [ 312.142706][T11164] vfs_write+0x474/0x9a0 [ 312.146936][T11164] ? file_end_write+0x250/0x250 [ 312.151766][T11164] ? __fget_files+0x3fc/0x460 [ 312.156425][T11164] ? __fdget_pos+0x2a3/0x330 [ 312.160999][T11164] ? ksys_write+0x74/0x260 [ 312.165397][T11164] ksys_write+0x151/0x260 [ 312.169734][T11164] ? __ia32_sys_read+0x90/0x90 [ 312.174481][T11164] ? lockdep_hardirqs_on+0x98/0x150 [ 312.179663][T11164] do_syscall_64+0x55/0xb0 [ 312.184063][T11164] ? clear_bhb_loop+0x40/0x90 [ 312.188716][T11164] ? clear_bhb_loop+0x40/0x90 [ 312.193369][T11164] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.199248][T11164] RIP: 0033:0x7f204219e159 [ 312.203670][T11164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.223280][T11164] RSP: 002b:00007f204304e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 312.231673][T11164] RAX: ffffffffffffffda RBX: 00007f2042425fa0 RCX: 00007f204219e159 [ 312.239625][T11164] RDX: 00000000000000b3 RSI: 0000200000000250 RDI: 0000000000000005 [ 312.247600][T11164] RBP: 00007f204223506b R08: 0000000000000000 R09: 0000000000000000 [ 312.255551][T11164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.263543][T11164] R13: 00007f2042426038 R14: 00007f2042425fa0 R15: 00007fff7f183c58 [ 312.271500][T11164] [ 312.274510][T11164] Modules linked in: [ 312.278493][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.313466][T11166] syzkaller0: entered promiscuous mode [ 312.320447][T11166] syzkaller0: entered allmulticast mode [ 312.377103][T11164] ---[ end trace 0000000000000000 ]--- [ 312.385452][T11164] RIP: 0010:block2mtd_setup2+0x57d/0xe30 [ 312.402976][T11164] Code: 37 fc 49 8b 1c 24 48 83 c3 60 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 fd 0d 37 fc 48 8b 03 48 63 4c 24 10 48 99 <48> f7 f9 48 89 d3 31 ff 48 89 d6 e8 73 6a de fb 48 85 db 48 8b 5c [ 312.439495][T11164] RSP: 0018:ffffc90003b67a00 EFLAGS: 00010246 [ 312.454534][T11164] RAX: 0000000000000000 RBX: ffff888148c92a40 RCX: 0000000000000000 [ 312.469240][T11164] RDX: 0000000000000000 RSI: 000000000fc00000 RDI: 0000000001f00000 [ 312.483213][T11164] RBP: ffffc90003b67bf8 R08: ffff88802231c45f R09: 1ffff1100446388b [ 312.496717][T11164] R10: dffffc0000000000 R11: ffffed100446388c R12: ffff888148c923c0 [ 312.510958][T11164] R13: dffffc0000000000 R14: ffff888027062000 R15: 1ffff11004e0c402 [ 312.526257][T11164] FS: 00007f204304e6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 312.540829][T11164] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.554163][T11164] CR2: 0000001b2da1dff8 CR3: 00000000250f5000 CR4: 00000000003506f0 [ 312.563915][T11164] Kernel panic - not syncing: Fatal exception [ 312.570032][T11164] Kernel Offset: disabled [ 312.574341][T11164] Rebooting in 86400 seconds..