last executing test programs: 3.078576568s ago: executing program 3 (id=265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, r2, {0xe, 0xc}, {}, {0x10, 0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_ACT={0x4}, @TCA_BPF_FD={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) 3.00352686s ago: executing program 1 (id=266): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) munlockall() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') 2.601678791s ago: executing program 3 (id=271): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000780)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0xfded, &(0x7f00000007c0)={@local, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x64, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffa888}]}}, {"589bd78d2b71fe4b714665685135bf21072faafe96ec294d6c6539d4a740dea160dc1ee679706182018004878d22ec3cb6480fb088206fd0f5ffbd92e72bad8d1bcb2b9b613a84ad03c81acb638d608181625bd00c12cfe1514eebec0d2d3cdadca2e3c308e8595d5269701e0491674a51e87405fd955e7e46116c8b97da1fc719a824a9fc394b98445011cdecca5b715a3eeb84bd168efd80ab8dd7a308"}}}}}}, 0x0) 2.190611962s ago: executing program 3 (id=274): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2509000000280002800800020002000080080001000020000014000380080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x24040021) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a8018000480"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 2.078700625s ago: executing program 0 (id=276): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x7, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x4]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) 1.966378037s ago: executing program 1 (id=277): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000240)='W\t', 0x2}], 0x1) 1.807793842s ago: executing program 0 (id=279): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 1.807256922s ago: executing program 3 (id=280): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000080)=0x1) 1.634887076s ago: executing program 1 (id=282): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/md0\x00', 0x2, 0x0) ioctl(r0, 0x40480923, &(0x7f0000000300)="000000000000000000000000000000000a000000000400000200") ioctl(r0, 0x40140921, &(0x7f0000000420)="0100000001") ioctl(r0, 0x932, 0x0) 1.49940785s ago: executing program 1 (id=283): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x32, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000380)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfc, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x40, 0x100, @void}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000017c0)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x3, 0x100, @val=0x80}}}}}}}, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/174, 0xae}], 0x1) 1.49910578s ago: executing program 2 (id=284): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x5, 0x0, 0x6, {[@timestamp={0x8, 0xa, 0x4ba0884c, 0x200}]}}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x4, {[@timestamp={0x8, 0xa, 0xffffa888}]}}}}}}}, 0x0) 1.440119491s ago: executing program 2 (id=285): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/route\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000740)=[{&(0x7f0000000200)='3', 0x1}], 0x1, 0x800, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 991.541173ms ago: executing program 0 (id=286): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000540)="000102030405060708090a0b0c0d0e0f", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write(r1, 0x0, 0x0) read$alg(r1, &(0x7f0000005f00)=""/512, 0x200) 981.561424ms ago: executing program 1 (id=287): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000300)=0x80000001, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340)={0x4, 0x3}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000003c0)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000400)={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) read(r0, &(0x7f0000000bc0)=""/4096, 0x1000) 919.841136ms ago: executing program 2 (id=288): pwrite64$ublk_ch(0xffffffffffffffff, &(0x7f0000000540)=@buf_1k="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", 0x1000, 0x81) writev(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000300)="aaf9cbbebec1c21b2b97fe8378b1a6f9b362b0ce28d64dcae763a477474cd92e109fff8cbeb8da39e130c0e87879555d7d691c5ffa0ac0fa49a8957e4836da102348dff8d9bf765e0ac0d619a539ea3d1bf88e4ed805f6577386bc995636ac2cea14b9677bdfb1914b421322ef4e955bc5147abd6102bd0a10ee2e48b60974cdd83be5c49500f9b91f88934faad163a176b3a9e397069e026a81e8dc2d094d1ccf11663075c478f859ad127e9b4e7a57fb3b687a7028a38d612c45d10ae18ea4e3", 0xc1}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 913.002885ms ago: executing program 3 (id=289): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000008c0)=[{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000003c0)="be1c40114d26f4f247484a4893025f47b6", 0x11}], 0x1, 0x0, 0x0, 0x408d0}], 0x1, 0xc0041) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000b00)=""/111, 0x6f}], 0x1}, 0x18dfd) 807.341748ms ago: executing program 1 (id=290): r0 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287"], 0x0) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000340)={0x0, 0x10, 0x1, "c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x87, 0x5, &(0x7f00000000c0)={0x10, "8105d6c721100f00000000400000a8267d87000200"}}) syz_usb_control_io$uac2(r0, 0x0, 0x0) 703.436051ms ago: executing program 2 (id=291): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 631.071843ms ago: executing program 0 (id=292): mount(0x0, 0x0, 0x0, 0x800040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) migrate_pages(0x0, 0x10, &(0x7f0000000180)=0x3fe, 0x0) 545.092435ms ago: executing program 2 (id=293): r0 = userfaultfd(0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 471.560877ms ago: executing program 3 (id=294): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1a, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0xa0000004}) 156.988946ms ago: executing program 0 (id=295): bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000000)="00f5c99b135db6626527a1a7d692", 0xe}, {&(0x7f0000000440)="a8738151e646c314a2caa0930f3901fb24517802c1bbe7103aae6fbf841305a8bea561f254a996fa73ea28ee2611490993c30c85102098cc3fa30929fc511ee0a728e6ae8ac4452b52b07d7bc7f3cc884bea5f2502df2ab1b75b32", 0x5b}], 0x2) 153.015956ms ago: executing program 2 (id=296): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000080)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x37, 0x38, 0x39, 0x67, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) write$FUSE_BMAP(r0, &(0x7f00000025c0)={0x2, 0xffffffffffffffda, 0x0, {0xfdffffbffffffff9}}, 0x18) io_setup(0x1ff, &(0x7f00000001c0)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0xc8, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 0s ago: executing program 0 (id=297): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r0, &(0x7f0000000000)='27', 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.183' (ED25519) to the list of known hosts. [ 84.304791][ T5761] cgroup: Unknown subsys name 'net' [ 84.420109][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.119278][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.354914][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.363430][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.379942][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.388053][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.396055][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.404430][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.413357][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.413928][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.428706][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.431211][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.439279][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.451940][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.451938][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.466925][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.468733][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.474212][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.481556][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.497133][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.505055][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.510472][ T5085] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.523542][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.524663][ T5085] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.538263][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.539969][ T5085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.990602][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 89.100071][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.107393][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.117000][ T5773] bridge_slave_0: entered allmulticast mode [ 89.125976][ T5773] bridge_slave_0: entered promiscuous mode [ 89.159044][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.166367][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.174897][ T5773] bridge_slave_1: entered allmulticast mode [ 89.182117][ T5773] bridge_slave_1: entered promiscuous mode [ 89.229383][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 89.262292][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.298832][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.349604][ T5773] team0: Port device team_slave_0 added [ 89.378005][ T5773] team0: Port device team_slave_1 added [ 89.398180][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 89.469324][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.476346][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.502642][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.538680][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.545941][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.572774][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.585198][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 89.677018][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.684899][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.692907][ T5775] bridge_slave_0: entered allmulticast mode [ 89.700523][ T5775] bridge_slave_0: entered promiscuous mode [ 89.752056][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.759434][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.766683][ T5775] bridge_slave_1: entered allmulticast mode [ 89.774234][ T5775] bridge_slave_1: entered promiscuous mode [ 89.800889][ T5773] hsr_slave_0: entered promiscuous mode [ 89.808744][ T5773] hsr_slave_1: entered promiscuous mode [ 89.852423][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.859761][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.866961][ T5774] bridge_slave_0: entered allmulticast mode [ 89.874937][ T5774] bridge_slave_0: entered promiscuous mode [ 89.924860][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.932874][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.940227][ T5774] bridge_slave_1: entered allmulticast mode [ 89.947942][ T5774] bridge_slave_1: entered promiscuous mode [ 89.973284][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.980790][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.988195][ T5776] bridge_slave_0: entered allmulticast mode [ 89.995599][ T5776] bridge_slave_0: entered promiscuous mode [ 90.012265][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.024628][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.053651][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.063192][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.073741][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.083709][ T5776] bridge_slave_1: entered allmulticast mode [ 90.091256][ T5776] bridge_slave_1: entered promiscuous mode [ 90.133097][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.190601][ T5774] team0: Port device team_slave_0 added [ 90.205523][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.220543][ T5774] team0: Port device team_slave_1 added [ 90.231031][ T5775] team0: Port device team_slave_0 added [ 90.247615][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.293987][ T5775] team0: Port device team_slave_1 added [ 90.344313][ T5776] team0: Port device team_slave_0 added [ 90.351387][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.358406][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.387902][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.402014][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.409115][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.435391][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.458342][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.465569][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.492647][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.506942][ T5776] team0: Port device team_slave_1 added [ 90.543879][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.551200][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.578128][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.581066][ T5779] Bluetooth: hci2: command tx timeout [ 90.594852][ T5085] Bluetooth: hci0: command tx timeout [ 90.638432][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.646151][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.658813][ T5085] Bluetooth: hci1: command tx timeout [ 90.672201][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.689171][ T5779] Bluetooth: hci3: command tx timeout [ 90.735930][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.743136][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.769275][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.793395][ T5774] hsr_slave_0: entered promiscuous mode [ 90.803066][ T5774] hsr_slave_1: entered promiscuous mode [ 90.810148][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.818162][ T5774] Cannot create hsr debugfs directory [ 90.870763][ T5775] hsr_slave_0: entered promiscuous mode [ 90.877610][ T5775] hsr_slave_1: entered promiscuous mode [ 90.884350][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.892117][ T5775] Cannot create hsr debugfs directory [ 91.010383][ T5776] hsr_slave_0: entered promiscuous mode [ 91.017191][ T5776] hsr_slave_1: entered promiscuous mode [ 91.023893][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.032066][ T5776] Cannot create hsr debugfs directory [ 91.123074][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.137267][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.175820][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.186723][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.416796][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.428802][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.440889][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.469499][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.581509][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.606121][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.641371][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.652135][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.730556][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.743449][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.756542][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.767768][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.857879][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.913014][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.934746][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.966206][ T3453] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.973820][ T3453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.005618][ T3453] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.012920][ T3453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.043954][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.088882][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.096150][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.112431][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.119683][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.166427][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.249978][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.323294][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.382271][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.406732][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.441193][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.448392][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.474262][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.481588][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.543709][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.551019][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.564420][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.571697][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.634663][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.649913][ T5779] Bluetooth: hci2: command tx timeout [ 92.655590][ T5085] Bluetooth: hci0: command tx timeout [ 92.720034][ T5779] Bluetooth: hci3: command tx timeout [ 92.725615][ T5085] Bluetooth: hci1: command tx timeout [ 92.817468][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.943397][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.965549][ T5773] veth0_vlan: entered promiscuous mode [ 93.012581][ T5773] veth1_vlan: entered promiscuous mode [ 93.084356][ T5774] veth0_vlan: entered promiscuous mode [ 93.144929][ T5774] veth1_vlan: entered promiscuous mode [ 93.165571][ T5773] veth0_macvtap: entered promiscuous mode [ 93.193195][ T5773] veth1_macvtap: entered promiscuous mode [ 93.273394][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.290703][ T5774] veth0_macvtap: entered promiscuous mode [ 93.306265][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.319484][ T5774] veth1_macvtap: entered promiscuous mode [ 93.328175][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.354886][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.367664][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.376802][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.385962][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.423964][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.518330][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.532312][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.546233][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.598517][ T5775] veth0_vlan: entered promiscuous mode [ 93.602562][ T3453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.622837][ T3453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.631660][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.647739][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.659286][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.702846][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.716125][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.725638][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.734860][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.796970][ T5775] veth1_vlan: entered promiscuous mode [ 93.827264][ T5776] veth0_vlan: entered promiscuous mode [ 93.847610][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.858113][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.867579][ T5776] veth1_vlan: entered promiscuous mode [ 93.976620][ T5776] veth0_macvtap: entered promiscuous mode [ 94.033123][ T5776] veth1_macvtap: entered promiscuous mode [ 94.054025][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.063529][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.073716][ T5775] veth0_macvtap: entered promiscuous mode [ 94.125685][ T5775] veth1_macvtap: entered promiscuous mode [ 94.186958][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.198589][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.206548][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.206597][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.206615][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.215411][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.253742][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.267266][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.274157][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.285369][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.295957][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.307299][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.325186][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.337064][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.347254][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.357857][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.368804][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.381135][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.393077][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.406686][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.416879][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.431297][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.442006][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.463770][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.475876][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.487073][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.497957][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.511595][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.522400][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.535509][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.548043][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.557403][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.567016][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.576727][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.737640][ T5085] Bluetooth: hci0: command tx timeout [ 94.743887][ T5779] Bluetooth: hci2: command tx timeout [ 94.784173][ T3453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.800109][ T5085] Bluetooth: hci1: command tx timeout [ 94.805615][ T5085] Bluetooth: hci3: command tx timeout [ 94.819207][ T3453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.867936][ T5850] syz.1.5[5850]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.902158][ T5850] loop1: detected capacity change from 0 to 128 [ 94.970880][ T5850] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 95.019890][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.022852][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.027850][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.074759][ T5850] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.103571][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.173630][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.205970][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.461937][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.587323][ T5860] FAULT_INJECTION: forcing a failure. [ 95.587323][ T5860] name failslab, interval 1, probability 0, space 0, times 1 [ 95.627057][ T5862] xs_local_setup_socket: unhandled error (13) connecting to /var/run/gssproxy.sock [ 95.647874][ T5860] CPU: 1 PID: 5860 Comm: syz.2.3 Not tainted syzkaller #0 [ 95.655184][ T5860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 95.665312][ T5860] Call Trace: [ 95.668668][ T5860] [ 95.671661][ T5860] dump_stack_lvl+0x18c/0x250 [ 95.676391][ T5860] ? show_regs_print_info+0x20/0x20 [ 95.681719][ T5860] ? load_image+0x420/0x420 [ 95.686300][ T5860] ? __might_sleep+0xe0/0xe0 [ 95.690931][ T5860] ? __lock_acquire+0x7eb0/0x7eb0 [ 95.695993][ T5860] should_fail_ex+0x394/0x4c0 [ 95.700748][ T5860] should_failslab+0x9/0x20 [ 95.705390][ T5860] slab_pre_alloc_hook+0x59/0x300 [ 95.710451][ T5860] kmem_cache_alloc+0x5a/0x2c0 [ 95.715264][ T5860] ? security_file_alloc+0x34/0x120 [ 95.720508][ T5860] security_file_alloc+0x34/0x120 [ 95.725590][ T5860] init_file+0x94/0x1f0 [ 95.729779][ T5860] alloc_empty_file+0xb7/0x1d0 [ 95.734593][ T5860] alloc_file+0x5b/0x600 [ 95.738967][ T5860] alloc_file_pseudo+0x184/0x210 [ 95.743974][ T5860] ? fput+0x1a0/0x1a0 [ 95.748009][ T5860] ? __lock_acquire+0x7eb0/0x7eb0 [ 95.753077][ T5860] ? __local_bh_enable_ip+0x13a/0x1c0 [ 95.758491][ T5860] ? _local_bh_enable+0xa0/0xa0 [ 95.763386][ T5860] anon_inode_getfile+0xc5/0x1a0 [ 95.768389][ T5860] bpf_link_prime+0xa6/0x1d0 [ 95.773019][ T5860] tcx_link_attach+0x218/0x960 [ 95.777831][ T5860] ? tcx_prog_query+0x140/0x140 [ 95.782722][ T5860] ? __fget_files+0x3fc/0x460 [ 95.787477][ T5860] ? bpf_prog_attach_check_attach_type+0x188/0x440 [ 95.794036][ T5860] link_create+0x390/0x720 [ 95.798526][ T5860] __sys_bpf+0x4d7/0x890 [ 95.803275][ T5860] ? bpf_link_show_fdinfo+0x560/0x560 [ 95.809413][ T5860] ? lock_chain_count+0x20/0x20 [ 95.814347][ T5860] __x64_sys_bpf+0x7c/0x90 [ 95.818807][ T5860] do_syscall_64+0x55/0xb0 [ 95.823268][ T5860] ? clear_bhb_loop+0x40/0x90 [ 95.827975][ T5860] ? clear_bhb_loop+0x40/0x90 [ 95.832715][ T5860] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.838655][ T5860] RIP: 0033:0x7f0360b9e1d9 [ 95.843131][ T5860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.862810][ T5860] RSP: 002b:00007f03619f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 95.871288][ T5860] RAX: ffffffffffffffda RBX: 00007f0360e25fa0 RCX: 00007f0360b9e1d9 [ 95.879320][ T5860] RDX: 0000000000000010 RSI: 0000200000000580 RDI: 000000000000001c [ 95.887358][ T5860] RBP: 00007f0360c35888 R08: 0000000000000000 R09: 0000000000000000 [ 95.895362][ T5860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.903899][ T5860] R13: 00007f0360e26038 R14: 00007f0360e25fa0 R15: 00007ffea5f7a118 [ 95.911932][ T5860] [ 96.013150][ T5864] loop3: detected capacity change from 0 to 256 [ 96.125017][ T5864] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 96.546896][ T5871] loop2: detected capacity change from 0 to 32768 [ 96.553867][ T5821] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.627036][ T5871] XFS (loop2): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 96.734845][ T5871] XFS (loop2): Ending clean mount [ 96.759231][ T5821] usb 4-1: Using ep0 maxpacket: 32 [ 96.784148][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.799352][ T5085] Bluetooth: hci0: command tx timeout [ 96.805761][ T5779] Bluetooth: hci2: command tx timeout [ 96.813579][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.839343][ T5821] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 96.866568][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.880840][ T5085] Bluetooth: hci3: command tx timeout [ 96.886329][ T5085] Bluetooth: hci1: command tx timeout [ 96.918869][ T5821] usb 4-1: config 0 descriptor?? [ 96.976123][ T5821] hub 4-1:0.0: USB hub found [ 97.157239][ T5775] XFS (loop2): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 97.187697][ T5821] hub 4-1:0.0: 1 port detected [ 97.379300][ T5848] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.390569][ T8] cfg80211: failed to load regulatory.db [ 97.553448][ T5884] loop0: detected capacity change from 0 to 40427 [ 97.611977][ T5848] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 97.627139][ T5888] loop2: detected capacity change from 0 to 4096 [ 97.639980][ T5884] F2FS-fs (loop0): invalid crc value [ 97.648023][ T5848] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 97.678509][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.723695][ T5884] F2FS-fs (loop0): Found nat_bits in checkpoint [ 97.853877][ T5884] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 97.869177][ T5888] ntfs3: loop2: ino=9, mi_enum_attr [ 97.897736][ T5888] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 97.933962][ T972] hub 4-1:0.0: activate --> -90 [ 97.964736][ T5888] ntfs3: loop2: ino=9, mi_enum_attr [ 97.981524][ T5848] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device [ 97.990952][ T5888] ntfs3: loop2: ino=b, mi_enum_attr [ 97.996414][ T5888] ntfs3: loop2: Failed to load $Extend (-22). [ 98.029235][ T5848] wwan wwan0: port wwan0qmi0 attached [ 98.035027][ T5888] ntfs3: loop2: Failed to initialize $Extend. [ 98.241261][ T5884] syz.0.13: attempt to access beyond end of device [ 98.241261][ T5884] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 98.260278][ T5848] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, b6:4d:a1:39:7f:0e [ 98.301563][ T5884] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 98.352021][ T972] usb 4-1-port1: config error [ 98.373781][ T972] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 98.390827][ T5848] usb 4-1: USB disconnect, device number 2 [ 98.394546][ T972] usb 4-1-port1: connect-debounce failed [ 98.601885][ T5821] usb 2-1: USB disconnect, device number 2 [ 98.633730][ T5821] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 98.753754][ T5821] wwan wwan0: port wwan0qmi0 disconnected [ 99.278241][ T5911] loop3: detected capacity change from 0 to 128 [ 99.300955][ T5911] ======================================================= [ 99.300955][ T5911] WARNING: The mand mount option has been deprecated and [ 99.300955][ T5911] and is ignored by this kernel. Remove the mand [ 99.300955][ T5911] option from the mount to silence this warning. [ 99.300955][ T5911] ======================================================= [ 99.422524][ T5911] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 99.660260][ T5918] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 99.728654][ T5918] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 99.839140][ T5848] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.055361][ T5848] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.078707][ T5848] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 100.105990][ T5848] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 100.138346][ T5848] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 100.178148][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.493928][ T5920] loop2: detected capacity change from 0 to 32768 [ 100.605993][ T5920] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 100.645821][ T5848] cxacru 2-1:1.0: send of cm 0x91 failed (-71) [ 100.675822][ T5947] loop3: detected capacity change from 0 to 2048 [ 100.692863][ T5848] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 100.708852][ T5947] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 100.719022][ T5848] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 100.759213][ T5848] cxacru: probe of 2-1:1.0 failed with error -71 [ 100.790045][ T5947] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.830186][ T5848] usb 2-1: USB disconnect, device number 3 [ 100.836332][ T5920] XFS (loop2): Ending clean mount [ 100.911306][ T5920] XFS (loop2): Quotacheck needed: Please wait. [ 101.053876][ T5920] XFS (loop2): Quotacheck: Done. [ 101.272387][ T5775] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 101.306404][ T5952] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.375491][ T5954] program syz.3.26 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.844193][ T5971] input: syz0 as /devices/virtual/input/input5 [ 101.939354][ T5822] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 102.021455][ T5978] CUSE: unknown device info "" [ 102.026428][ T5978] CUSE: unknown device info "" [ 102.032030][ T5978] CUSE: unknown device info "ÿw" [ 102.037026][ T5978] CUSE: zero length info key specified [ 102.142800][ T5822] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.167930][ T5822] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 102.190878][ T5822] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 102.215358][ T5822] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 102.236181][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.680967][ T5822] cxacru 2-1:1.0: send of cm 0x91 failed (-71) [ 102.709073][ T5822] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 102.730176][ T5822] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 102.752025][ T5822] cxacru: probe of 2-1:1.0 failed with error -71 [ 102.796340][ T5822] usb 2-1: USB disconnect, device number 4 [ 102.841786][ T5984] loop3: detected capacity change from 0 to 32768 [ 102.862756][ T5984] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.39 (5984) [ 102.865566][ T5985] loop0: detected capacity change from 0 to 32768 [ 102.950443][ T5985] (syz.0.38,5985,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 102.971255][ T5984] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 102.982825][ T5984] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 102.997028][ T5985] (syz.0.38,5985,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 103.013168][ T5984] BTRFS info (device loop3): using free space tree [ 103.101289][ T5985] JBD2: Ignoring recovery information on journal [ 103.196166][ T5984] BTRFS info (device loop3): enabling ssd optimizations [ 103.271296][ T5985] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 103.408755][ T28] audit: type=1800 audit(1791834349.738:2): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.39" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 103.483789][ T6012] FAULT_INJECTION: forcing a failure. [ 103.483789][ T6012] name failslab, interval 1, probability 0, space 0, times 0 [ 103.507887][ T6012] CPU: 0 PID: 6012 Comm: syz.1.43 Not tainted syzkaller #0 [ 103.515191][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 103.525431][ T6012] Call Trace: [ 103.528783][ T6012] [ 103.531773][ T6012] dump_stack_lvl+0x18c/0x250 [ 103.536522][ T6012] ? show_regs_print_info+0x20/0x20 [ 103.541968][ T6012] ? load_image+0x420/0x420 [ 103.546556][ T6012] ? __lock_acquire+0x7eb0/0x7eb0 [ 103.551676][ T6012] should_fail_ex+0x394/0x4c0 [ 103.556447][ T6012] should_failslab+0x9/0x20 [ 103.561026][ T6012] slab_pre_alloc_hook+0x59/0x300 [ 103.566472][ T6012] kmem_cache_alloc_lru+0x4d/0x2b0 [ 103.571848][ T6012] ? __d_alloc+0x31/0x710 [ 103.576246][ T6012] ? read_lock_is_recursive+0x20/0x20 [ 103.581695][ T6012] __d_alloc+0x31/0x710 [ 103.585915][ T6012] ? hashlen_string+0xb8/0x110 [ 103.590743][ T6012] d_alloc_name+0xbb/0x320 [ 103.595227][ T6012] ? down_write+0x16e/0x200 [ 103.599796][ T6012] ? d_alloc_pseudo+0x70/0x70 [ 103.604550][ T6012] ? proc_setup_self+0x206/0x2c0 [ 103.609555][ T6012] proc_setup_thread_self+0xaf/0x2c0 [ 103.614917][ T6012] ? proc_fill_super+0x518/0x730 [ 103.619927][ T6012] ? proc_reconfigure+0x370/0x370 [ 103.625013][ T6012] get_tree_nodev+0xb5/0x140 [ 103.629677][ T6012] vfs_get_tree+0x8c/0x280 [ 103.634197][ T6012] do_new_mount+0x24a/0xa40 [ 103.638781][ T6012] __se_sys_mount+0x2e7/0x3d0 [ 103.643582][ T6012] ? __x64_sys_mount+0xc0/0xc0 [ 103.648428][ T6012] ? lockdep_hardirqs_on+0x98/0x150 [ 103.653705][ T6012] ? __x64_sys_mount+0x20/0xc0 [ 103.658553][ T6012] do_syscall_64+0x55/0xb0 [ 103.663084][ T6012] ? clear_bhb_loop+0x40/0x90 [ 103.667831][ T6012] ? clear_bhb_loop+0x40/0x90 [ 103.672572][ T6012] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.678547][ T6012] RIP: 0033:0x7ff61599e1d9 [ 103.683030][ T6012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.702700][ T6012] RSP: 002b:00007ff61687d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 103.711179][ T6012] RAX: ffffffffffffffda RBX: 00007ff615c25fa0 RCX: 00007ff61599e1d9 [ 103.719213][ T6012] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000 [ 103.727249][ T6012] RBP: 00007ff615a35888 R08: 0000000000000000 R09: 0000000000000000 [ 103.735283][ T6012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.743301][ T6012] R13: 00007ff615c26038 R14: 00007ff615c25fa0 R15: 00007fffc974a4b8 [ 103.751392][ T6012] [ 103.779127][ T6012] proc_fill_super: can't allocate /proc/thread-self [ 103.818461][ T28] audit: type=1804 audit(1791834350.148:3): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.38" name="/newroot/11/file0/file0" dev="loop0" ino=16978 res=1 errno=0 [ 104.069944][ T5774] ocfs2: Unmounting device (7,0) on (node local) [ 104.291151][ T5776] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 104.759495][ T6027] syzkaller1: entered promiscuous mode [ 104.775994][ T6027] syzkaller1: entered allmulticast mode [ 105.224350][ T6043] FAULT_INJECTION: forcing a failure. [ 105.224350][ T6043] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 105.238464][ T6043] CPU: 0 PID: 6043 Comm: syz.0.55 Not tainted syzkaller #0 [ 105.245733][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 105.255910][ T6043] Call Trace: [ 105.259225][ T6043] [ 105.262221][ T6043] dump_stack_lvl+0x18c/0x250 [ 105.266947][ T6043] ? show_regs_print_info+0x20/0x20 [ 105.272182][ T6043] ? load_image+0x420/0x420 [ 105.276739][ T6043] ? __lock_acquire+0x7eb0/0x7eb0 [ 105.281826][ T6043] should_fail_ex+0x394/0x4c0 [ 105.286566][ T6043] prepare_alloc_pages+0x1e1/0x5b0 [ 105.291743][ T6043] __alloc_pages+0x134/0x460 [ 105.296402][ T6043] ? zone_statistics+0x170/0x170 [ 105.301393][ T6043] ? alloc_pages+0x4e1/0x740 [ 105.306015][ T6043] ? do_raw_spin_unlock+0x121/0x230 [ 105.311274][ T6043] __get_free_pages+0xc/0x30 [ 105.315895][ T6043] kasan_populate_vmalloc_pte+0x35/0x100 [ 105.321754][ T6043] __apply_to_page_range+0x860/0xdd0 [ 105.327080][ T6043] ? kasan_populate_vmalloc+0x70/0x70 [ 105.332503][ T6043] ? apply_to_page_range+0x50/0x50 [ 105.337649][ T6043] ? do_raw_spin_unlock+0x121/0x230 [ 105.342892][ T6043] alloc_vmap_area+0x1d26/0x1e50 [ 105.347887][ T6043] ? vm_map_ram+0xcf0/0xcf0 [ 105.352467][ T6043] ? rcu_is_watching+0x15/0xb0 [ 105.357334][ T6043] __get_vm_area_node+0x162/0x370 [ 105.362411][ T6043] __vmalloc_node_range+0x36f/0x1320 [ 105.367738][ T6043] ? snd_dma_alloc_dir_pages+0x15c/0x230 [ 105.373413][ T6043] ? do_alloc_pages+0xed/0x260 [ 105.378221][ T6043] ? rcu_is_watching+0x15/0xb0 [ 105.383040][ T6043] ? trace_contention_end+0x39/0xe0 [ 105.388302][ T6043] ? __mutex_lock+0x30d/0xc80 [ 105.393027][ T6043] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 105.398760][ T6043] ? free_vm_area+0x50/0x50 [ 105.403313][ T6043] ? mutex_unlock+0x10/0x10 [ 105.407852][ T6043] ? snd_dma_alloc_dir_pages+0x15c/0x230 [ 105.413517][ T6043] vmalloc+0x79/0x90 [ 105.417456][ T6043] ? snd_dma_alloc_dir_pages+0x15c/0x230 [ 105.423148][ T6043] snd_dma_alloc_dir_pages+0x15c/0x230 [ 105.428642][ T6043] do_alloc_pages+0x11c/0x260 [ 105.433354][ T6043] snd_pcm_lib_malloc_pages+0x338/0x750 [ 105.438941][ T6043] snd_pcm_hw_params+0x818/0x1d10 [ 105.444037][ T6043] ? slab_free_freelist_hook+0x130/0x1a0 [ 105.449728][ T6043] ? snd_pcm_hw_param_first+0x654/0xb00 [ 105.455309][ T6043] ? snd_pcm_forward+0x6d0/0x6d0 [ 105.460286][ T6043] ? snd_pcm_hw_param_near+0x3da/0x460 [ 105.465789][ T6043] snd_pcm_oss_change_params_locked+0x1ee3/0x3be0 [ 105.472271][ T6043] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 105.477424][ T6043] ? mutex_lock_nested+0x20/0x20 [ 105.482413][ T6043] snd_pcm_oss_make_ready+0x117/0x330 [ 105.487824][ T6043] snd_pcm_oss_get_ptr+0xd8/0xd20 [ 105.492895][ T6043] ? snd_pcm_oss_get_trigger+0x150/0x150 [ 105.499015][ T6043] ? __fget_files+0x28/0x460 [ 105.503741][ T6043] snd_pcm_oss_ioctl+0x81a/0xdc0 [ 105.508720][ T6043] ? bpf_lsm_file_ioctl+0x9/0x10 [ 105.513693][ T6043] ? snd_pcm_oss_poll+0x8c0/0x8c0 [ 105.518871][ T6043] __se_sys_ioctl+0xfd/0x170 [ 105.523609][ T6043] do_syscall_64+0x55/0xb0 [ 105.528062][ T6043] ? clear_bhb_loop+0x40/0x90 [ 105.532800][ T6043] ? clear_bhb_loop+0x40/0x90 [ 105.537526][ T6043] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.543496][ T6043] RIP: 0033:0x7fc6e3d9e1d9 [ 105.547942][ T6043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.567861][ T6043] RSP: 002b:00007fc6e1ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.576306][ T6043] RAX: ffffffffffffffda RBX: 00007fc6e4025fa0 RCX: 00007fc6e3d9e1d9 [ 105.584338][ T6043] RDX: 0000200000000180 RSI: 00000000800c5011 RDI: 0000000000000004 [ 105.592361][ T6043] RBP: 00007fc6e3e35888 R08: 0000000000000000 R09: 0000000000000000 [ 105.600364][ T6043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.608372][ T6043] R13: 00007fc6e4026038 R14: 00007fc6e4025fa0 R15: 00007fff1c7db4b8 [ 105.616390][ T6043] [ 105.637617][ T6043] syz.0.55: vmalloc error: size 2097152, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 105.653172][ T6043] CPU: 1 PID: 6043 Comm: syz.0.55 Not tainted syzkaller #0 [ 105.660444][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 105.670718][ T6043] Call Trace: [ 105.674029][ T6043] [ 105.676988][ T6043] dump_stack_lvl+0x18c/0x250 [ 105.681764][ T6043] ? show_regs_print_info+0x20/0x20 [ 105.687013][ T6043] ? load_image+0x420/0x420 [ 105.691576][ T6043] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 105.698065][ T6043] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 105.704624][ T6043] warn_alloc+0x246/0x340 [ 105.709003][ T6043] ? slab_free_freelist_hook+0x130/0x1a0 [ 105.714719][ T6043] ? zone_watermark_ok_safe+0x230/0x230 [ 105.723120][ T6043] ? __get_vm_area_node+0x17b/0x370 [ 105.730827][ T6043] ? __get_vm_area_node+0x17b/0x370 [ 105.736090][ T6043] __vmalloc_node_range+0x394/0x1320 [ 105.741430][ T6043] ? do_alloc_pages+0xed/0x260 [ 105.746233][ T6043] ? rcu_is_watching+0x15/0xb0 [ 105.751235][ T6043] ? trace_contention_end+0x39/0xe0 [ 105.756474][ T6043] ? __mutex_lock+0x30d/0xc80 [ 105.761192][ T6043] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 105.766865][ T6043] ? free_vm_area+0x50/0x50 [ 105.771515][ T6043] ? mutex_unlock+0x10/0x10 [ 105.776054][ T6043] ? snd_dma_alloc_dir_pages+0x15c/0x230 [ 105.781729][ T6043] vmalloc+0x79/0x90 [ 105.785667][ T6043] ? snd_dma_alloc_dir_pages+0x15c/0x230 [ 105.791337][ T6043] snd_dma_alloc_dir_pages+0x15c/0x230 [ 105.796838][ T6043] do_alloc_pages+0x11c/0x260 [ 105.801553][ T6043] snd_pcm_lib_malloc_pages+0x338/0x750 [ 105.807136][ T6043] snd_pcm_hw_params+0x818/0x1d10 [ 105.812208][ T6043] ? slab_free_freelist_hook+0x130/0x1a0 [ 105.817875][ T6043] ? snd_pcm_hw_param_first+0x654/0xb00 [ 105.823452][ T6043] ? snd_pcm_forward+0x6d0/0x6d0 [ 105.828426][ T6043] ? snd_pcm_hw_param_near+0x3da/0x460 [ 105.833936][ T6043] snd_pcm_oss_change_params_locked+0x1ee3/0x3be0 [ 105.840429][ T6043] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 105.845591][ T6043] ? mutex_lock_nested+0x20/0x20 [ 105.850602][ T6043] snd_pcm_oss_make_ready+0x117/0x330 [ 105.856034][ T6043] snd_pcm_oss_get_ptr+0xd8/0xd20 [ 105.861104][ T6043] ? snd_pcm_oss_get_trigger+0x150/0x150 [ 105.866768][ T6043] ? __fget_files+0x28/0x460 [ 105.871404][ T6043] snd_pcm_oss_ioctl+0x81a/0xdc0 [ 105.876382][ T6043] ? bpf_lsm_file_ioctl+0x9/0x10 [ 105.881525][ T6043] ? snd_pcm_oss_poll+0x8c0/0x8c0 [ 105.886591][ T6043] __se_sys_ioctl+0xfd/0x170 [ 105.891223][ T6043] do_syscall_64+0x55/0xb0 [ 105.895666][ T6043] ? clear_bhb_loop+0x40/0x90 [ 105.900465][ T6043] ? clear_bhb_loop+0x40/0x90 [ 105.905180][ T6043] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.911128][ T6043] RIP: 0033:0x7fc6e3d9e1d9 [ 105.915570][ T6043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.935209][ T6043] RSP: 002b:00007fc6e1ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.943653][ T6043] RAX: ffffffffffffffda RBX: 00007fc6e4025fa0 RCX: 00007fc6e3d9e1d9 [ 105.951664][ T6043] RDX: 0000200000000180 RSI: 00000000800c5011 RDI: 0000000000000004 [ 105.959676][ T6043] RBP: 00007fc6e3e35888 R08: 0000000000000000 R09: 0000000000000000 [ 105.967701][ T6043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.975715][ T6043] R13: 00007fc6e4026038 R14: 00007fc6e4025fa0 R15: 00007fff1c7db4b8 [ 105.983729][ T6043] [ 106.042647][ T6043] Mem-Info: [ 106.050439][ T6043] active_anon:6874 inactive_anon:0 isolated_anon:0 [ 106.050439][ T6043] active_file:1204 inactive_file:39958 isolated_file:0 [ 106.050439][ T6043] unevictable:768 dirty:1889 writeback:0 [ 106.050439][ T6043] slab_reclaimable:10425 slab_unreclaimable:91411 [ 106.050439][ T6043] mapped:24637 shmem:2489 pagetables:571 [ 106.050439][ T6043] sec_pagetables:0 bounce:0 [ 106.050439][ T6043] kernel_misc_reclaimable:0 [ 106.050439][ T6043] free:1359624 free_pcp:9842 free_cma:0 [ 106.139115][ T6043] Node 0 active_anon:22996kB inactive_anon:0kB active_file:4816kB inactive_file:159624kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98548kB dirty:7540kB writeback:0kB shmem:4020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10468kB pagetables:2184kB sec_pagetables:0kB all_unreclaimable? no [ 106.197896][ T6043] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 106.239081][ T6043] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 106.267981][ T6043] lowmem_reserve[]: 0 2505 2506 2506 2506 [ 106.275311][ T6043] Node 0 DMA32 free:1533392kB boost:0kB min:34508kB low:43132kB high:51756kB reserved_highatomic:0KB active_anon:22824kB inactive_anon:0kB active_file:4916kB inactive_file:158540kB unevictable:1536kB writepending:7532kB present:3129332kB managed:2569932kB mlocked:0kB bounce:0kB free_pcp:23268kB local_pcp:10948kB free_cma:0kB [ 106.308231][ T6043] lowmem_reserve[]: 0 0 1 1 1 [ 106.314402][ T6043] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:1084kB unevictable:0kB writepending:8kB present:1048576kB managed:1128kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 106.347135][ T6043] lowmem_reserve[]: 0 0 0 0 0 [ 106.352367][ T6043] Node 1 Normal free:3889520kB boost:0kB min:55380kB low:69224kB high:83068kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:16kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20832kB local_pcp:13280kB free_cma:0kB [ 106.361378][ T5779] Bluetooth: hci4: command 0x1003 tx timeout [ 106.389310][ T5085] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 106.392968][ T6043] lowmem_reserve[]: 0 0 0 0 0 [ 106.469256][ T6043] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 106.514266][ T6043] Node 0 DMA32: 494*4kB (UME) 1191*8kB (UME) 394*16kB (UME) 73*32kB (UM) 47*64kB (UM) 43*128kB (ME) 11*256kB (UM) 3*512kB (M) 3*1024kB (UM) 3*2048kB (UME) 364*4096kB (UM) = 1533168kB [ 106.537352][ T6043] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 106.550453][ T6043] Node 1 Normal: 262*4kB (UE) 67*8kB (UME) 40*16kB (UME) 60*32kB (UME) 15*64kB (UE) 7*128kB (UME) 0*256kB 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3889520kB [ 106.585341][ T6043] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 106.595775][ T6043] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 106.605262][ T6043] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 106.616003][ T6043] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 106.626588][ T6043] 42549 total pagecache pages [ 106.631414][ T6043] 0 pages in swap cache [ 106.635714][ T6043] Free swap = 124984kB [ 106.647493][ T6043] Total swap = 124996kB [ 106.652322][ T6043] 2097051 pages RAM [ 106.656187][ T6043] 0 pages HighMem/MovableOnly [ 106.661001][ T6043] 421118 pages reserved [ 106.665379][ T6043] 0 pages cma reserved [ 107.027371][ T6065] loop2: detected capacity change from 0 to 1024 [ 107.079127][ T972] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.097004][ T6065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.109183][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.258516][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.271873][ T972] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 107.299084][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 107.320207][ T972] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 107.340278][ T8] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 107.348450][ T8] usb 1-1: config 0 has no interface number 0 [ 107.359048][ T972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.376415][ T8] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 107.386841][ T8] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 107.406629][ T8] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 107.423863][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.445111][ T8] usb 1-1: Product: syz [ 107.454053][ T8] usb 1-1: Manufacturer: syz [ 107.458809][ T8] usb 1-1: SerialNumber: syz [ 107.480086][ T8] usb 1-1: config 0 descriptor?? [ 107.488557][ T6061] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 107.497521][ T6061] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 107.524811][ T6063] loop1: detected capacity change from 0 to 40427 [ 107.555511][ T6063] F2FS-fs (loop1): invalid crc value [ 107.584132][ T6063] F2FS-fs (loop1): Found nat_bits in checkpoint [ 107.622217][ T972] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 107.655267][ T972] wwan wwan0: port wwan0qmi0 attached [ 107.728935][ T6061] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 107.747943][ T6063] F2FS-fs (loop1): Start checkpoint disabled! [ 107.756736][ T6061] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 107.765009][ T6073] device-mapper: dirty region log: unrecognised sync argument to dirty region log: n [ 107.776534][ T6073] device-mapper: table: 248:0: mirror: Error creating mirror dirty log (-EINVAL) [ 107.785811][ T6073] device-mapper: ioctl: error adding target to table [ 107.845530][ T6063] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 107.866643][ T972] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, 2a:a7:07:5c:a8:91 [ 107.947953][ T6063] process 'syz.1.61' launched './file0' with NULL argv: empty string added [ 107.977101][ T6063] Invalid argument reading file caps for ./file0 [ 107.985422][ T8] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 108.096981][ T5817] usb 4-1: USB disconnect, device number 3 [ 108.123049][ T5817] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 108.303128][ T5817] wwan wwan0: port wwan0qmi0 disconnected [ 108.363948][ T12] kworker/u4:1: attempt to access beyond end of device [ 108.363948][ T12] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 108.387778][ T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 108.399475][ T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 108.691657][ T6090] syz.2.69 uses obsolete (PF_INET,SOCK_PACKET) [ 108.817861][ T8] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 108.841811][ T8] asix: probe of 1-1:0.34 failed with error -71 [ 108.869416][ T8] usb 1-1: USB disconnect, device number 2 [ 109.055655][ T6098] FAULT_INJECTION: forcing a failure. [ 109.055655][ T6098] name failslab, interval 1, probability 0, space 0, times 0 [ 109.078807][ T6098] CPU: 1 PID: 6098 Comm: syz.3.70 Not tainted syzkaller #0 [ 109.086132][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 109.096499][ T6098] Call Trace: [ 109.099824][ T6098] [ 109.102795][ T6098] dump_stack_lvl+0x18c/0x250 [ 109.107703][ T6098] ? show_regs_print_info+0x20/0x20 [ 109.112980][ T6098] ? load_image+0x420/0x420 [ 109.117554][ T6098] ? __lock_acquire+0x7eb0/0x7eb0 [ 109.122637][ T6098] should_fail_ex+0x394/0x4c0 [ 109.127562][ T6098] should_failslab+0x9/0x20 [ 109.132124][ T6098] slab_pre_alloc_hook+0x59/0x300 [ 109.137200][ T6098] ? lockdep_softirqs_off+0x440/0x440 [ 109.142634][ T6098] ? mqueue_init_fs_context+0x57/0x360 [ 109.148152][ T6098] __kmem_cache_alloc_node+0x53/0x250 [ 109.153602][ T6098] ? mqueue_init_fs_context+0x57/0x360 [ 109.159135][ T6098] kmalloc_trace+0x2a/0xe0 [ 109.163619][ T6098] mqueue_init_fs_context+0x57/0x360 [ 109.168974][ T6098] alloc_fs_context+0x618/0x7a0 [ 109.173899][ T6098] mq_init_ns+0x10a/0x510 [ 109.178300][ T6098] copy_ipcs+0x309/0x500 [ 109.182620][ T6098] create_new_namespaces+0x212/0x700 [ 109.188007][ T6098] unshare_nsproxy_namespaces+0x11a/0x160 [ 109.193802][ T6098] ksys_unshare+0x4fa/0x8f0 [ 109.198377][ T6098] ? sighand_ctor+0x50/0x50 [ 109.202962][ T6098] ? lock_chain_count+0x20/0x20 [ 109.207874][ T6098] ? syscall_enter_from_user_mode+0x25/0x80 [ 109.213844][ T6098] __x64_sys_unshare+0x38/0x40 [ 109.218678][ T6098] do_syscall_64+0x55/0xb0 [ 109.223153][ T6098] ? clear_bhb_loop+0x40/0x90 [ 109.227884][ T6098] ? clear_bhb_loop+0x40/0x90 [ 109.232809][ T6098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.238786][ T6098] RIP: 0033:0x7faec799e1d9 [ 109.243271][ T6098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.262942][ T6098] RSP: 002b:00007faec8826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 109.271425][ T6098] RAX: ffffffffffffffda RBX: 00007faec7c25fa0 RCX: 00007faec799e1d9 [ 109.279458][ T6098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 109.287571][ T6098] RBP: 00007faec7a35888 R08: 0000000000000000 R09: 0000000000000000 [ 109.295603][ T6098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.303637][ T6098] R13: 00007faec7c26038 R14: 00007faec7c25fa0 R15: 00007ffd2da25858 [ 109.311804][ T6098] [ 109.533185][ T6112] loop0: detected capacity change from 0 to 1024 [ 109.629604][ T5817] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 109.650176][ T6112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.802159][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.76'. [ 109.850685][ T5817] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.865676][ T5817] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 109.917127][ T5817] usb 2-1: config 0 interface 0 has no altsetting 0 [ 109.926879][ T6123] FAULT_INJECTION: forcing a failure. [ 109.926879][ T6123] name failslab, interval 1, probability 0, space 0, times 0 [ 109.939970][ T6123] CPU: 0 PID: 6123 Comm: syz.2.77 Not tainted syzkaller #0 [ 109.947240][ T6123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 109.950412][ T5817] usb 2-1: New USB device found, idVendor=1b96, idProduct=0006, bcdDevice= 0.00 [ 109.957324][ T6123] Call Trace: [ 109.957337][ T6123] [ 109.972731][ T6123] dump_stack_lvl+0x18c/0x250 [ 109.977504][ T6123] ? show_regs_print_info+0x20/0x20 [ 109.982780][ T6123] ? load_image+0x420/0x420 [ 109.984958][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.987331][ T6123] ? __lock_acquire+0x7eb0/0x7eb0 [ 109.987371][ T6123] should_fail_ex+0x394/0x4c0 [ 109.987408][ T6123] should_failslab+0x9/0x20 [ 109.987445][ T6123] slab_pre_alloc_hook+0x59/0x300 [ 109.987469][ T6123] ? io_ring_ctx_alloc+0x54/0xc10 [ 109.987500][ T6123] __kmem_cache_alloc_node+0x53/0x250 [ 109.987537][ T6123] ? io_ring_ctx_alloc+0x54/0xc10 [ 109.987566][ T6123] kmalloc_trace+0x2a/0xe0 [ 109.987601][ T6123] io_ring_ctx_alloc+0x54/0xc10 [ 109.987634][ T6123] io_uring_create+0x2df/0x1330 [ 109.987662][ T6123] ? __might_fault+0xc6/0x120 [ 109.987684][ T6123] ? __might_fault+0xaa/0x120 [ 109.987723][ T6123] __se_sys_io_uring_setup+0x29f/0x2b0 [ 109.987751][ T6123] ? __x64_sys_io_uring_setup+0x60/0x60 [ 109.987790][ T6123] ? lockdep_hardirqs_on+0x98/0x150 [ 109.987822][ T6123] do_syscall_64+0x55/0xb0 [ 109.987842][ T6123] ? clear_bhb_loop+0x40/0x90 [ 109.987864][ T6123] ? clear_bhb_loop+0x40/0x90 [ 109.987889][ T6123] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.987923][ T6123] RIP: 0033:0x7f0360b9e1d9 [ 109.987944][ T6123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.987962][ T6123] RSP: 002b:00007f03619f0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 109.987988][ T6123] RAX: ffffffffffffffda RBX: 00007f0360e25fa0 RCX: 00007f0360b9e1d9 [ 109.988005][ T6123] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000001b7b [ 109.988020][ T6123] RBP: 00007f0360c35888 R08: 0000000000000000 R09: 0000000000000000 [ 109.988035][ T6123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.988049][ T6123] R13: 00007f0360e26038 R14: 00007f0360e25fa0 R15: 00007ffea5f7a118 [ 109.988081][ T6123] [ 110.176943][ T5817] usb 2-1: config 0 descriptor?? [ 110.196573][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.529091][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.643601][ T6138] loop2: detected capacity change from 0 to 128 [ 110.714204][ T5817] input: HID 1b96:0006 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1B96:0006.0001/input/input6 [ 110.740657][ T6138] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 110.744969][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.776077][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.799739][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.821184][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.830756][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.843477][ T6138] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.845170][ T8] usb 4-1: config 0 descriptor?? [ 111.008137][ T5817] ntrig 0003:1B96:0006.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 1b96:0006] on usb-dummy_hcd.1-1/input0 [ 111.085689][ T5817] usb 2-1: USB disconnect, device number 5 [ 111.246056][ T6141] fido_id[6141]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 111.315221][ T8] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 111.344681][ T6132] loop0: detected capacity change from 0 to 32768 [ 111.367546][ T8] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 111.436318][ T6132] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 111.585830][ T6132] XFS (loop0): Ending clean mount [ 111.782201][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.797928][ T6154] netlink: 27 bytes leftover after parsing attributes in process `syz.1.83'. [ 111.844000][ T5774] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 112.417091][ T6166] binder: 6165:6166 ioctl c0306201 200000000380 returned -14 [ 112.623059][ C0] plantronics 0003:047F:FFFF.0002: usb_submit_urb(ctrl) failed: -1 [ 112.718608][ T6174] gadgetfs: bound to dummy_udc driver [ 113.009807][ T6179] netlink: 48 bytes leftover after parsing attributes in process `syz.1.92'. [ 113.127306][ T6184] FAULT_INJECTION: forcing a failure. [ 113.127306][ T6184] name failslab, interval 1, probability 0, space 0, times 0 [ 113.140332][ T6184] CPU: 0 PID: 6184 Comm: syz.0.94 Not tainted syzkaller #0 [ 113.147617][ T6184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 113.157834][ T6184] Call Trace: [ 113.161173][ T6184] [ 113.164155][ T6184] dump_stack_lvl+0x18c/0x250 [ 113.168902][ T6184] ? show_regs_print_info+0x20/0x20 [ 113.174257][ T6184] ? load_image+0x420/0x420 [ 113.178835][ T6184] ? __might_sleep+0xe0/0xe0 [ 113.183498][ T6184] ? __lock_acquire+0x7eb0/0x7eb0 [ 113.188645][ T6184] should_fail_ex+0x394/0x4c0 [ 113.193403][ T6184] should_failslab+0x9/0x20 [ 113.197977][ T6184] slab_pre_alloc_hook+0x59/0x300 [ 113.203166][ T6184] ? d_instantiate+0x6f/0x90 [ 113.207896][ T6184] kmem_cache_alloc+0x5a/0x2c0 [ 113.212712][ T6184] ? alloc_empty_file+0x9e/0x1d0 [ 113.217689][ T6184] alloc_empty_file+0x9e/0x1d0 [ 113.222506][ T6184] alloc_file+0x5b/0x600 [ 113.226796][ T6184] alloc_file_pseudo+0x184/0x210 [ 113.231766][ T6184] ? fput+0x1a0/0x1a0 [ 113.236932][ T6184] ? __rwlock_init+0x150/0x150 [ 113.241780][ T6184] ? do_raw_spin_unlock+0x121/0x230 [ 113.247038][ T6184] sock_alloc_file+0xb7/0x280 [ 113.251765][ T6184] do_accept+0x3e6/0x6b0 [ 113.256068][ T6184] ? alloc_fd+0x590/0x640 [ 113.260465][ T6184] ? __ia32_sys_listen+0x70/0x70 [ 113.265888][ T6184] ? alloc_fd+0x590/0x640 [ 113.270298][ T6184] __sys_accept4+0x9b/0x100 [ 113.274850][ T6184] __x64_sys_accept+0x7d/0x90 [ 113.279575][ T6184] do_syscall_64+0x55/0xb0 [ 113.284048][ T6184] ? clear_bhb_loop+0x40/0x90 [ 113.288759][ T6184] ? clear_bhb_loop+0x40/0x90 [ 113.293478][ T6184] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.299420][ T6184] RIP: 0033:0x7fc6e3d9e1d9 [ 113.303884][ T6184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.323542][ T6184] RSP: 002b:00007fc6e1ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 113.331997][ T6184] RAX: ffffffffffffffda RBX: 00007fc6e4025fa0 RCX: 00007fc6e3d9e1d9 [ 113.340022][ T6184] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 113.348023][ T6184] RBP: 00007fc6e3e35888 R08: 0000000000000000 R09: 0000000000000000 [ 113.356026][ T6184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.364033][ T6184] R13: 00007fc6e4026038 R14: 00007fc6e4025fa0 R15: 00007fff1c7db4b8 [ 113.372064][ T6184] [ 113.442279][ T28] audit: type=1326 audit(1791834359.768:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.3.95" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faec799e1d9 code=0x0 [ 113.586798][ T28] audit: type=1800 audit(1791834359.918:5): pid=6192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.96" name="features" dev="configfs" ino=7978 res=0 errno=0 [ 113.616321][ T972] usb 4-1: USB disconnect, device number 4 [ 114.164679][ T6194] loop0: detected capacity change from 0 to 32768 [ 114.182859][ T6194] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.98 (6194) [ 114.221397][ T6194] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 114.242592][ T6194] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 114.253666][ T6194] BTRFS info (device loop0): using free space tree [ 114.409464][ T6194] BTRFS info (device loop0): enabling ssd optimizations [ 114.416760][ T6194] BTRFS info (device loop0): auto enabling async discard [ 114.659438][ T5774] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 114.859718][ T6232] FAULT_INJECTION: forcing a failure. [ 114.859718][ T6232] name failslab, interval 1, probability 0, space 0, times 0 [ 114.909128][ T6232] CPU: 0 PID: 6232 Comm: syz.1.109 Not tainted syzkaller #0 [ 114.916714][ T6232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 114.926826][ T6232] Call Trace: [ 114.930149][ T6232] [ 114.933142][ T6232] dump_stack_lvl+0x18c/0x250 [ 114.937977][ T6232] ? show_regs_print_info+0x20/0x20 [ 114.943262][ T6232] ? load_image+0x420/0x420 [ 114.947928][ T6232] ? __might_sleep+0xe0/0xe0 [ 114.952578][ T6232] ? __lock_acquire+0x7eb0/0x7eb0 [ 114.957684][ T6232] should_fail_ex+0x394/0x4c0 [ 114.962460][ T6232] should_failslab+0x9/0x20 [ 114.967053][ T6232] slab_pre_alloc_hook+0x59/0x300 [ 114.972151][ T6232] ? kasan_quarantine_put+0xd8/0x220 [ 114.977540][ T6232] ? p9_client_create+0x4b6/0x1050 [ 114.982752][ T6232] ? p9_client_create+0x4b6/0x1050 [ 114.987956][ T6232] __kmem_cache_alloc_node+0x53/0x250 [ 114.994022][ T6232] ? p9_client_create+0x4b6/0x1050 [ 114.999195][ T6232] __kmalloc_node_track_caller+0xa4/0x230 [ 115.004990][ T6232] ? p9_client_create+0x634/0x1050 [ 115.010209][ T6232] kmemdup_nul+0x36/0xf0 [ 115.014609][ T6232] p9_client_create+0x4b6/0x1050 [ 115.019614][ T6232] ? do_trace_9p_fid_put+0x20/0x20 [ 115.024870][ T6232] ? lockdep_softirqs_off+0x440/0x440 [ 115.030329][ T6232] ? __raw_spin_lock_init+0x45/0x100 [ 115.035683][ T6232] v9fs_session_init+0x1aa/0x1960 [ 115.040852][ T6232] ? v9fs_show_options+0x700/0x700 [ 115.046212][ T6232] v9fs_mount+0xd0/0xb40 [ 115.050493][ T6232] ? kfree+0x31/0x1a0 [ 115.054512][ T6232] ? trace_xrep_findroot_block+0x1f0/0x1f0 [ 115.060385][ T6232] ? vfs_parse_fs_param+0x420/0x420 [ 115.065623][ T6232] legacy_get_tree+0xea/0x180 [ 115.070343][ T6232] ? trace_xrep_findroot_block+0x1f0/0x1f0 [ 115.076202][ T6232] vfs_get_tree+0x8c/0x280 [ 115.080657][ T6232] do_new_mount+0x24a/0xa40 [ 115.085221][ T6232] __se_sys_mount+0x2e7/0x3d0 [ 115.089940][ T6232] ? __x64_sys_mount+0xc0/0xc0 [ 115.094746][ T6232] ? lockdep_hardirqs_on+0x98/0x150 [ 115.099986][ T6232] ? __x64_sys_mount+0x20/0xc0 [ 115.104780][ T6232] do_syscall_64+0x55/0xb0 [ 115.109344][ T6232] ? clear_bhb_loop+0x40/0x90 [ 115.114066][ T6232] ? clear_bhb_loop+0x40/0x90 [ 115.118956][ T6232] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.124909][ T6232] RIP: 0033:0x7ff61599e1d9 [ 115.129403][ T6232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.149040][ T6232] RSP: 002b:00007ff61687d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 115.157489][ T6232] RAX: ffffffffffffffda RBX: 00007ff615c25fa0 RCX: 00007ff61599e1d9 [ 115.165489][ T6232] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 00002000000000c0 [ 115.173486][ T6232] RBP: 00007ff615a35888 R08: 0000200000000200 R09: 0000000000000000 [ 115.181506][ T6232] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 115.189506][ T6232] R13: 00007ff615c26038 R14: 00007ff615c25fa0 R15: 00007fffc974a4b8 [ 115.197523][ T6232] [ 115.739184][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 115.796892][ T6230] loop3: detected capacity change from 0 to 32768 [ 115.869672][ T6230] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 115.922124][ T6226] loop2: detected capacity change from 0 to 40427 [ 115.931249][ T8] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 115.940619][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.959899][ T8] usb 1-1: config 0 descriptor?? [ 115.975682][ T8] cp210x 1-1:0.0: cp210x converter detected [ 116.004895][ T6226] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0) [ 116.010712][ T6230] XFS (loop3): Ending clean mount [ 116.020280][ T6226] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 116.064939][ T6226] F2FS-fs (loop2): invalid crc value [ 116.087490][ T6226] F2FS-fs (loop2): Found nat_bits in checkpoint [ 116.208629][ T6226] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 116.229146][ T5776] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 116.249952][ T6226] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 116.342802][ T6226] syz.2.105: attempt to access beyond end of device [ 116.342802][ T6226] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.395338][ T28] audit: type=1326 audit(1791834362.718:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.1.114" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff61599e1d9 code=0x0 [ 116.404973][ T8] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 116.447265][ T6226] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 116.473800][ T6226] syz.2.105: attempt to access beyond end of device [ 116.473800][ T6226] loop2: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 116.499223][ T6226] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 116.519306][ T8] usb 1-1: cp210x converter now attached to ttyUSB0 [ 116.724773][ T972] usb 1-1: USB disconnect, device number 3 [ 116.740205][ T972] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 116.792279][ T972] cp210x 1-1:0.0: device disconnected [ 117.301653][ T6257] loop3: detected capacity change from 0 to 40427 [ 117.311020][ T6257] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 117.345423][ T6257] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 117.386674][ T6257] F2FS-fs (loop3): Found nat_bits in checkpoint [ 117.460188][ T6257] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 117.481498][ T6257] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 117.490343][ T6267] input: syz0 as /devices/virtual/input/input7 [ 117.533159][ T6270] loop2: detected capacity change from 0 to 128 [ 117.574563][ T6270] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 117.907633][ T6273] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 117.980473][ T6273] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 118.388570][ T6271] loop0: detected capacity change from 0 to 32768 [ 118.468565][ T6271] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 118.677004][ T6271] XFS (loop0): Ending clean mount [ 118.710293][ T6271] XFS (loop0): Quotacheck needed: Please wait. [ 118.801820][ T6271] XFS (loop0): Quotacheck: Done. [ 118.869865][ T5774] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 118.957209][ T6293] FAULT_INJECTION: forcing a failure. [ 118.957209][ T6293] name failslab, interval 1, probability 0, space 0, times 0 [ 118.975488][ T6293] CPU: 1 PID: 6293 Comm: syz.2.126 Not tainted syzkaller #0 [ 118.982973][ T6293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 118.993114][ T6293] Call Trace: [ 118.996486][ T6293] [ 118.999468][ T6293] dump_stack_lvl+0x18c/0x250 [ 119.004270][ T6293] ? show_regs_print_info+0x20/0x20 [ 119.009531][ T6293] ? load_image+0x420/0x420 [ 119.014112][ T6293] ? __might_sleep+0xe0/0xe0 [ 119.018865][ T6293] ? __lock_acquire+0x7eb0/0x7eb0 [ 119.023961][ T6293] should_fail_ex+0x394/0x4c0 [ 119.028720][ T6293] should_failslab+0x9/0x20 [ 119.033293][ T6293] slab_pre_alloc_hook+0x59/0x300 [ 119.038387][ T6293] kmem_cache_alloc+0x5a/0x2c0 [ 119.043230][ T6293] ? dup_fd+0x56/0xa20 [ 119.047376][ T6293] dup_fd+0x56/0xa20 [ 119.051345][ T6293] ? __ia32_sys_get_robust_list+0x110/0x110 [ 119.057338][ T6293] __close_range+0x19d/0x690 [ 119.062015][ T6293] ? pick_file+0x1e0/0x1e0 [ 119.066524][ T6293] __x64_sys_close_range+0x7a/0x90 [ 119.071721][ T6293] do_syscall_64+0x55/0xb0 [ 119.076220][ T6293] ? clear_bhb_loop+0x40/0x90 [ 119.080995][ T6293] ? clear_bhb_loop+0x40/0x90 [ 119.085742][ T6293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 119.091723][ T6293] RIP: 0033:0x7f0360b9e1d9 [ 119.096228][ T6293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.115910][ T6293] RSP: 002b:00007f03619f0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 119.124413][ T6293] RAX: ffffffffffffffda RBX: 00007f0360e25fa0 RCX: 00007f0360b9e1d9 [ 119.132461][ T6293] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000003 [ 119.140537][ T6293] RBP: 00007f0360c35888 R08: 0000000000000000 R09: 0000000000000000 [ 119.148602][ T6293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.156633][ T6293] R13: 00007f0360e26038 R14: 00007f0360e25fa0 R15: 00007ffea5f7a118 [ 119.164694][ T6293] [ 119.297806][ T6295] loop2: detected capacity change from 0 to 128 [ 119.331484][ T6295] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.354677][ T6295] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 119.689233][ T790] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 119.893557][ T790] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.907518][ T790] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.927933][ T790] usb 3-1: New USB device found, idVendor=05c6, idProduct=9008, bcdDevice= 1.00 [ 119.937313][ T790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.963061][ T790] usb 3-1: Product: syz [ 119.967319][ T790] usb 3-1: Manufacturer: syz [ 119.979010][ T790] usb 3-1: SerialNumber: syz [ 120.000061][ T790] hub 3-1:1.0: USB hub found [ 120.006805][ T6320] loop0: detected capacity change from 0 to 128 [ 120.024419][ T6320] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 120.160528][ T6327] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 120.209446][ T790] hub 3-1:1.0: 4 ports detected [ 120.215921][ T6327] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 120.618745][ T6334] loop3: detected capacity change from 0 to 512 [ 120.736023][ T6334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.750084][ T6334] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.897451][ T6338] Zero length message leads to an empty skb [ 120.930361][ T6338] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 121.304169][ T790] hub 3-1:1.0: hub_hub_status failed (err = -32) [ 121.406449][ T790] hub 3-1:1.0: config failed, can't get hub status (err -32) [ 121.645974][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.847830][ T6347] device-mapper: table: 248:0: mirror: Unrecognised feature requested (-EINVAL) [ 121.862761][ T6347] device-mapper: ioctl: error adding target to table [ 122.016922][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.092285][ T790] usb 3-1: USB disconnect, device number 2 [ 122.154457][ T6356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.143'. [ 122.549499][ T6373] loop2: detected capacity change from 0 to 256 [ 122.595845][ T6373] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 122.715062][ T28] audit: type=1800 audit(1700000004.870:7): pid=6373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.149" name="file1" dev="loop2" ino=1048624 res=0 errno=0 [ 123.661491][ T6383] loop0: detected capacity change from 0 to 32768 [ 123.697740][ T6383] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.151 (6383) [ 123.737516][ T6383] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 123.749475][ T6383] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 123.768338][ T6383] BTRFS info (device loop0): using free space tree [ 123.892333][ T6383] BTRFS info (device loop0): enabling ssd optimizations [ 124.221289][ T28] audit: type=1800 audit(1700000006.390:8): pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.151" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 124.872369][ T5774] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 124.937052][ T6436] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 124.997997][ T6436] overlayfs: failed to set xattr on upper [ 125.004281][ T6436] overlayfs: ...falling back to index=off. [ 125.022528][ T6436] overlayfs: ...falling back to uuid=null. [ 125.327574][ T6448] Illegal XDP return value 65535 on prog (id 14) dev syz_tun, expect packet loss! [ 125.344761][ T6447] loop3: detected capacity change from 0 to 512 [ 125.412252][ T6447] EXT4-fs (loop3): Test dummy encryption mode enabled [ 125.444392][ T6447] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 125.485682][ T6447] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 125.558868][ T6447] EXT4-fs (loop3): 1 truncate cleaned up [ 125.571351][ T28] audit: type=1326 audit(1700000007.740:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6449 comm="syz.0.166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6e3d9e1d9 code=0x0 [ 125.595371][ T6447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.734867][ T6457] loop8: detected capacity change from 0 to 8 [ 125.763562][ T6457] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 125.784054][ T6457] loop8: partition table partially beyond EOD, truncated [ 125.809055][ T6457] loop8: p1 size 2645487272 extends beyond EOD, truncated [ 125.925459][ T5790] udevd[5790]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 126.044881][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.060478][ T6465] FAULT_INJECTION: forcing a failure. [ 126.060478][ T6465] name failslab, interval 1, probability 0, space 0, times 0 [ 126.095017][ T6465] CPU: 0 PID: 6465 Comm: syz.1.178 Not tainted syzkaller #0 [ 126.102410][ T6465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 126.112525][ T6465] Call Trace: [ 126.115876][ T6465] [ 126.118869][ T6465] dump_stack_lvl+0x18c/0x250 [ 126.123625][ T6465] ? show_regs_print_info+0x20/0x20 [ 126.128883][ T6465] ? load_image+0x420/0x420 [ 126.133475][ T6465] ? __might_sleep+0xe0/0xe0 [ 126.138131][ T6465] ? __lock_acquire+0x7eb0/0x7eb0 [ 126.143230][ T6465] should_fail_ex+0x394/0x4c0 [ 126.147996][ T6465] should_failslab+0x9/0x20 [ 126.152573][ T6465] slab_pre_alloc_hook+0x59/0x300 [ 126.157668][ T6465] kmem_cache_alloc+0x5a/0x2c0 [ 126.162507][ T6465] ? security_file_alloc+0x34/0x120 [ 126.167794][ T6465] security_file_alloc+0x34/0x120 [ 126.172896][ T6465] init_file+0x94/0x1f0 [ 126.177119][ T6465] alloc_empty_file+0xb7/0x1d0 [ 126.181945][ T6465] alloc_file+0x5b/0x600 [ 126.186252][ T6465] alloc_file_pseudo+0x184/0x210 [ 126.191272][ T6465] ? fput+0x1a0/0x1a0 [ 126.195346][ T6465] ? alloc_fd+0x590/0x640 [ 126.199758][ T6465] anon_inode_getfd+0xca/0x1c0 [ 126.204750][ T6465] map_create+0xf13/0x12f0 [ 126.209240][ T6465] __sys_bpf+0x651/0x890 [ 126.213553][ T6465] ? bpf_link_show_fdinfo+0x560/0x560 [ 126.219050][ T6465] ? lock_chain_count+0x20/0x20 [ 126.224046][ T6465] __x64_sys_bpf+0x7c/0x90 [ 126.228529][ T6465] do_syscall_64+0x55/0xb0 [ 126.233006][ T6465] ? clear_bhb_loop+0x40/0x90 [ 126.237751][ T6465] ? clear_bhb_loop+0x40/0x90 [ 126.242498][ T6465] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.248480][ T6465] RIP: 0033:0x7ff61599e1d9 [ 126.252965][ T6465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.272642][ T6465] RSP: 002b:00007ff61687d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 126.281127][ T6465] RAX: ffffffffffffffda RBX: 00007ff615c25fa0 RCX: 00007ff61599e1d9 [ 126.289164][ T6465] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 0000000000000000 [ 126.297283][ T6465] RBP: 00007ff615a35888 R08: 0000000000000000 R09: 0000000000000000 [ 126.305405][ T6465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.313441][ T6465] R13: 00007ff615c26038 R14: 00007ff615c25fa0 R15: 00007fffc974a4b8 [ 126.321548][ T6465] [ 126.455506][ T6471] jffs2: notice: (6471) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 126.698359][ T6479] netlink: 'syz.2.183': attribute type 11 has an invalid length. [ 126.868665][ T6489] FAULT_INJECTION: forcing a failure. [ 126.868665][ T6489] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 126.886371][ T6489] CPU: 1 PID: 6489 Comm: syz.2.186 Not tainted syzkaller #0 [ 126.893761][ T6489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 126.903853][ T6489] Call Trace: [ 126.907172][ T6489] [ 126.910140][ T6489] dump_stack_lvl+0x18c/0x250 [ 126.914861][ T6489] ? show_regs_print_info+0x20/0x20 [ 126.920100][ T6489] ? load_image+0x420/0x420 [ 126.924666][ T6489] ? __might_fault+0xaa/0x120 [ 126.929381][ T6489] ? __lock_acquire+0x7eb0/0x7eb0 [ 126.934435][ T6489] ? __local_bh_enable_ip+0x13a/0x1c0 [ 126.939841][ T6489] ? _local_bh_enable+0xa0/0xa0 [ 126.944729][ T6489] should_fail_ex+0x394/0x4c0 [ 126.949451][ T6489] copy_fpstate_to_sigframe+0xa0c/0xce0 [ 126.955038][ T6489] ? __stack_depot_save+0x1f/0x660 [ 126.960185][ T6489] ? copy_fpstate_to_sigframe+0x188/0xce0 [ 126.965966][ T6489] ? fpregs_set+0x370/0x370 [ 126.970517][ T6489] ? get_signal+0x9fc/0x1390 [ 126.975163][ T6489] ? fpu__alloc_mathframe+0xa7/0x120 [ 126.980497][ T6489] get_sigframe+0x5de/0x7d0 [ 126.985053][ T6489] ? load_gs_index+0x1a0/0x1a0 [ 126.989924][ T6489] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 126.996181][ T6489] ? get_signal+0x1197/0x1390 [ 127.000941][ T6489] x64_setup_rt_frame+0x164/0xc30 [ 127.006056][ T6489] ? lockdep_hardirqs_on+0x98/0x150 [ 127.011312][ T6489] ? _raw_spin_unlock_irq+0x2e/0x50 [ 127.016676][ T6489] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 127.022759][ T6489] ? sigaltstack_size_valid+0x1e0/0x1e0 [ 127.028667][ T6489] ? arch_do_signal_or_restart+0x39b/0x7b0 [ 127.034528][ T6489] arch_do_signal_or_restart+0x411/0x7b0 [ 127.040233][ T6489] ? get_sigframe_size+0x20/0x20 [ 127.045280][ T6489] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 127.051353][ T6489] ? exit_to_user_mode_loop+0x3b/0x110 [ 127.056904][ T6489] exit_to_user_mode_loop+0x70/0x110 [ 127.062375][ T6489] exit_to_user_mode_prepare+0xee/0x180 [ 127.068148][ T6489] irqentry_exit_to_user_mode+0x9/0x30 [ 127.073684][ T6489] exc_page_fault+0x8c/0x100 [ 127.078360][ T6489] asm_exc_page_fault+0x26/0x30 [ 127.083530][ T6489] RIP: 0033:0x7f0360a52c73 [ 127.088621][ T6489] Code: 10 4c 89 44 24 08 4c 89 0c 24 4c 8b 54 24 28 45 31 c9 48 8b 7c 24 20 48 8b 74 24 18 48 8b 54 24 10 48 8b 4c 24 08 48 8b 2c 24 <48> 8b 59 38 48 81 4b 18 80 00 00 00 e8 1c ff ff ff 48 83 ec 08 b9 [ 127.108318][ T6489] RSP: 002b:00007f03619effd0 EFLAGS: 00010246 [ 127.114437][ T6489] RAX: 00007f0360a52c30 RBX: 00007f0360e25fa0 RCX: 0000000000000000 [ 127.122449][ T6489] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 127.130453][ T6489] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 127.138463][ T6489] R10: ffffffffffffffff R11: 0000000000000000 R12: 0000000000000000 [ 127.146469][ T6489] R13: 00007f0360e26038 R14: 00007f0360e25fa0 R15: 00007ffea5f7a118 [ 127.154532][ T6489] [ 127.764496][ T6506] FAULT_INJECTION: forcing a failure. [ 127.764496][ T6506] name failslab, interval 1, probability 0, space 0, times 0 [ 127.789463][ T6506] CPU: 1 PID: 6506 Comm: syz.0.192 Not tainted syzkaller #0 [ 127.796857][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 127.806977][ T6506] Call Trace: [ 127.810403][ T6506] [ 127.813478][ T6506] dump_stack_lvl+0x18c/0x250 [ 127.818226][ T6506] ? show_regs_print_info+0x20/0x20 [ 127.823489][ T6506] ? load_image+0x420/0x420 [ 127.828127][ T6506] ? __might_sleep+0xe0/0xe0 [ 127.832785][ T6506] ? __lock_acquire+0x7eb0/0x7eb0 [ 127.837884][ T6506] should_fail_ex+0x394/0x4c0 [ 127.842642][ T6506] should_failslab+0x9/0x20 [ 127.847246][ T6506] slab_pre_alloc_hook+0x59/0x300 [ 127.852339][ T6506] kmem_cache_alloc+0x5a/0x2c0 [ 127.857264][ T6506] ? getname_flags+0xbb/0x500 [ 127.862012][ T6506] getname_flags+0xbb/0x500 [ 127.866589][ T6506] do_mq_open+0x1a2/0x760 [ 127.871011][ T6506] ? mq_clear_sbinfo+0x90/0x90 [ 127.875863][ T6506] ? kern_path_create+0x50/0x50 [ 127.880771][ T6506] __x64_sys_mq_open+0x186/0x1e0 [ 127.885864][ T6506] ? proc_ipc_sem_dointvec+0x180/0x180 [ 127.891482][ T6506] ? lockdep_hardirqs_on+0x98/0x150 [ 127.896737][ T6506] do_syscall_64+0x55/0xb0 [ 127.901214][ T6506] ? clear_bhb_loop+0x40/0x90 [ 127.905952][ T6506] ? clear_bhb_loop+0x40/0x90 [ 127.910796][ T6506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.916770][ T6506] RIP: 0033:0x7fc6e3d9e1d9 [ 127.921245][ T6506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.940900][ T6506] RSP: 002b:00007fc6e1ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 127.949348][ T6506] RAX: ffffffffffffffda RBX: 00007fc6e4025fa0 RCX: 00007fc6e3d9e1d9 [ 127.957355][ T6506] RDX: 0000000000000095 RSI: 0000000000000040 RDI: 0000200000000200 [ 127.965363][ T6506] RBP: 00007fc6e3e35888 R08: 0000000000000000 R09: 0000000000000000 [ 127.973385][ T6506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.981421][ T6506] R13: 00007fc6e4026038 R14: 00007fc6e4025fa0 R15: 00007fff1c7db4b8 [ 127.989461][ T6506] [ 128.392554][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805d688400: rx timeout, send abort [ 128.893488][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805ce7fc00: rx timeout, send abort [ 128.902650][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805d688400: abort rx timeout. Force session deactivation [ 129.401937][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805ce7fc00: abort rx timeout. Force session deactivation [ 129.525561][ T6540] pimreg: entered allmulticast mode [ 129.684563][ T6544] loop1: detected capacity change from 0 to 512 [ 129.693077][ T6531] loop3: detected capacity change from 0 to 32768 [ 129.710845][ T6531] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.201 (6531) [ 129.782113][ T6544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.810377][ T6531] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.825452][ T6544] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.829354][ T5848] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 129.856107][ T6531] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 129.895061][ T6531] BTRFS info (device loop3): setting nodatasum [ 129.919212][ T6531] BTRFS info (device loop3): force zlib compression, level 3 [ 130.008954][ T6549] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 130.062866][ T5848] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.070487][ T6531] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 130.080241][ T5848] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 130.107387][ T6531] BTRFS info (device loop3): use lzo compression, level 0 [ 130.141194][ T6531] BTRFS info (device loop3): turning on flush-on-commit [ 130.183782][ T6531] BTRFS info (device loop3): enabling auto defrag [ 130.237781][ T5848] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 130.317611][ T6531] BTRFS info (device loop3): max_inline at 4096 [ 130.389822][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.416608][ T6531] BTRFS info (device loop3): using free space tree [ 130.604486][ T5848] usb 1-1: Product: syz [ 130.624399][ T5848] usb 1-1: Manufacturer: syz [ 130.642687][ T5848] usb 1-1: SerialNumber: syz [ 130.869941][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.881138][ T6531] BTRFS info (device loop3): enabling ssd optimizations [ 131.180790][ C1] usb 1-1: received EP1 urb->status = -2 [ 131.189346][ T5848] usb 1-1: unable to init card! (ret=-110) [ 131.196758][ T5848] snd-usb-caiaq: probe of 1-1:1.0 failed with error -110 [ 131.426260][ T5848] usb 1-1: USB disconnect, device number 4 [ 131.535212][ T5776] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.848726][ T5822] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 132.052783][ T5822] usb 2-1: Using ep0 maxpacket: 16 [ 132.064884][ T5822] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.078877][ T5822] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.089766][ T5822] usb 2-1: config 0 interface 0 has no altsetting 0 [ 132.096630][ T5822] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 132.107357][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.119637][ T5822] usb 2-1: config 0 descriptor?? [ 132.552981][ T5822] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 132.553012][ T6601] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 132.567063][ T6601] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 132.568300][ T5822] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 132.586898][ T6604] warning: `syz.2.217' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 132.594780][ T5822] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 132.606534][ T5822] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 132.614194][ T5822] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 132.626792][ T5822] mcp2221 0003:04D8:00DD.0003: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 132.646086][ T6602] usbip_core: unknown command [ 132.655126][ T6601] vhci_hcd vhci_hcd.0: Device attached [ 132.658517][ T6602] vhci_hcd: unknown pdu 1426063360 [ 132.676472][ T6602] usbip_core: unknown command [ 132.694214][ T2975] vhci_hcd: stop threads [ 132.709425][ T2975] vhci_hcd: release socket [ 132.717564][ T2975] vhci_hcd: disconnect device [ 132.807445][ T5822] usb 2-1: USB disconnect, device number 6 [ 133.217552][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.224755][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.426244][ T6633] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 133.437158][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.225'. [ 133.587109][ T5848] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 133.780497][ T5848] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 133.792601][ T5848] usb 3-1: config 1 has no interface number 0 [ 133.803067][ T5848] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 133.812837][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.826014][ T5848] usb 3-1: Product: syz [ 133.830783][ T5848] usb 3-1: Manufacturer: syz [ 133.835638][ T5848] usb 3-1: SerialNumber: syz [ 134.077833][ T5848] usb 3-1: cannot find UAC_HEADER [ 134.131923][ T5848] snd-usb-audio: probe of 3-1:1.3 failed with error -22 [ 134.150353][ T5848] usb 3-1: USB disconnect, device number 3 [ 134.176671][ T5790] udevd[5790]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.754112][ T6657] loop3: detected capacity change from 0 to 32768 [ 134.799800][ T6668] FAULT_INJECTION: forcing a failure. [ 134.799800][ T6668] name fail_futex, interval 1, probability 0, space 0, times 1 [ 134.813486][ T6668] CPU: 0 PID: 6668 Comm: syz.2.235 Not tainted syzkaller #0 [ 134.820845][ T6668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 134.830945][ T6668] Call Trace: [ 134.834308][ T6668] [ 134.837281][ T6668] dump_stack_lvl+0x18c/0x250 [ 134.842116][ T6668] ? show_regs_print_info+0x20/0x20 [ 134.847403][ T6668] ? load_image+0x420/0x420 [ 134.851984][ T6668] ? stack_trace_save+0xaa/0x100 [ 134.856976][ T6668] should_fail_ex+0x394/0x4c0 [ 134.861735][ T6668] get_futex_key+0x136/0x1030 [ 134.866487][ T6668] ? futex_setup_timer+0xc0/0xc0 [ 134.871480][ T6668] ? perf_event_namespaces+0x196/0x9e0 [ 134.877026][ T6668] ? perf_event_fork+0x1c0/0x1c0 [ 134.882063][ T6668] futex_wake+0x127/0x4f0 [ 134.887261][ T6668] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 134.893605][ T6668] ? futex_wake_mark+0x150/0x150 [ 134.898700][ T6668] ? lockdep_hardirqs_on+0x98/0x150 [ 134.903963][ T6668] do_futex+0x35d/0x3e0 [ 134.908186][ T6668] ? __ia32_sys_get_robust_list+0x110/0x110 [ 134.914243][ T6668] __se_sys_futex+0x3a9/0x440 [ 134.919001][ T6668] ? __x64_sys_futex+0xf0/0xf0 [ 134.923827][ T6668] ? __x64_sys_futex+0x21/0xf0 [ 134.928631][ T6668] do_syscall_64+0x55/0xb0 [ 134.933102][ T6668] ? clear_bhb_loop+0x40/0x90 [ 134.937836][ T6668] ? clear_bhb_loop+0x40/0x90 [ 134.942560][ T6668] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.948494][ T6668] RIP: 0033:0x7f0360b9e1d9 [ 134.953115][ T6668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.972863][ T6668] RSP: 002b:00007f03619f00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 134.981926][ T6668] RAX: ffffffffffffffda RBX: 00007f0360e25fa8 RCX: 00007f0360b9e1d9 [ 134.989930][ T6668] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0360e25fac [ 134.998126][ T6668] RBP: 00007f0360e25fa0 R08: 0000000000745f06 R09: 0000000000000000 [ 135.006402][ T6668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.014430][ T6668] R13: 00007f0360e26038 R14: 00007ffea5f7a030 R15: 00007ffea5f7a118 [ 135.022459][ T6668] [ 135.048313][ T6588] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 135.102180][ T6657] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 135.257540][ T6674] FAULT_INJECTION: forcing a failure. [ 135.257540][ T6674] name failslab, interval 1, probability 0, space 0, times 0 [ 135.270695][ T6674] CPU: 1 PID: 6674 Comm: syz.0.236 Not tainted syzkaller #0 [ 135.278048][ T6674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 135.288337][ T6674] Call Trace: [ 135.291719][ T6674] [ 135.294697][ T6674] dump_stack_lvl+0x18c/0x250 [ 135.299446][ T6674] ? show_regs_print_info+0x20/0x20 [ 135.304967][ T6674] ? load_image+0x420/0x420 [ 135.309534][ T6674] ? __might_sleep+0xe0/0xe0 [ 135.314165][ T6674] ? __lock_acquire+0x7eb0/0x7eb0 [ 135.319243][ T6674] should_fail_ex+0x394/0x4c0 [ 135.324052][ T6674] should_failslab+0x9/0x20 [ 135.328611][ T6674] slab_pre_alloc_hook+0x59/0x300 [ 135.333691][ T6674] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.339904][ T6674] ? p9_client_create+0xd1/0x1050 [ 135.344974][ T6674] __kmem_cache_alloc_node+0x53/0x250 [ 135.350410][ T6674] ? p9_client_create+0xd1/0x1050 [ 135.355477][ T6674] kmalloc_trace+0x2a/0xe0 [ 135.360028][ T6674] p9_client_create+0xd1/0x1050 [ 135.365012][ T6674] ? do_trace_9p_fid_put+0x20/0x20 [ 135.370199][ T6674] ? lockdep_softirqs_off+0x440/0x440 [ 135.375629][ T6674] ? lockdep_softirqs_off+0x440/0x440 [ 135.381068][ T6674] ? free_zapped_rcu+0x250/0x250 [ 135.386776][ T6674] ? v9fs_session_init+0xf4/0x1960 [ 135.392374][ T6674] ? __raw_spin_lock_init+0x45/0x100 [ 135.397736][ T6674] v9fs_session_init+0x1aa/0x1960 [ 135.402866][ T6674] ? v9fs_show_options+0x700/0x700 [ 135.408066][ T6674] v9fs_mount+0xd0/0xb40 [ 135.412365][ T6674] ? trace_xrep_findroot_block+0x1f0/0x1f0 [ 135.418220][ T6674] legacy_get_tree+0xea/0x180 [ 135.423112][ T6674] ? trace_xrep_findroot_block+0x1f0/0x1f0 [ 135.428992][ T6674] vfs_get_tree+0x8c/0x280 [ 135.433577][ T6674] do_new_mount+0x24a/0xa40 [ 135.438154][ T6674] __se_sys_mount+0x2e7/0x3d0 [ 135.442881][ T6674] ? __x64_sys_mount+0xc0/0xc0 [ 135.447691][ T6674] ? lockdep_hardirqs_on+0x98/0x150 [ 135.452954][ T6674] ? __x64_sys_mount+0x20/0xc0 [ 135.457756][ T6674] do_syscall_64+0x55/0xb0 [ 135.462206][ T6674] ? clear_bhb_loop+0x40/0x90 [ 135.466921][ T6674] ? clear_bhb_loop+0x40/0x90 [ 135.471635][ T6674] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.477691][ T6674] RIP: 0033:0x7fc6e3d9e1d9 [ 135.482336][ T6674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.502003][ T6674] RSP: 002b:00007fc6e1ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 135.510893][ T6674] RAX: ffffffffffffffda RBX: 00007fc6e4025fa0 RCX: 00007fc6e3d9e1d9 [ 135.518926][ T6674] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000000000000000 [ 135.527547][ T6674] RBP: 00007fc6e3e35888 R08: 0000200000000480 R09: 0000000000000000 [ 135.535664][ T6674] R10: 0000000000200080 R11: 0000000000000246 R12: 0000000000000000 [ 135.543677][ T6674] R13: 00007fc6e4026038 R14: 00007fc6e4025fa0 R15: 00007fff1c7db4b8 [ 135.552438][ T6674] [ 135.604378][ T6657] XFS (loop3): Ending clean mount [ 135.920388][ T5776] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 136.129697][ T6687] loop1: detected capacity change from 0 to 512 [ 136.215338][ T6687] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 136.291263][ T6687] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.242: invalid indirect mapped block 32768 (level 2) [ 136.355658][ T6687] EXT4-fs (loop1): 1 orphan inode deleted [ 136.373286][ T6687] EXT4-fs (loop1): 1 truncate cleaned up [ 136.393345][ T6687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.460234][ T6687] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 136.478868][ T790] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 136.524102][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.690409][ T790] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 136.707973][ T790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.741288][ T790] usb 1-1: config 0 descriptor?? [ 136.753115][ T790] pwc: Samsung MPC-C10 USB webcam detected. [ 136.967103][ T790] pwc: send_video_command error -71 [ 136.972569][ T790] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 136.982045][ T790] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 136.993667][ T790] usb 1-1: USB disconnect, device number 5 [ 137.577972][ T790] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 137.782945][ T790] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 137.797852][ T790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.828971][ T790] usb 1-1: config 0 descriptor?? [ 137.871689][ T790] pwc: Samsung MPC-C10 USB webcam detected. [ 138.110678][ T6729] netlink: 52 bytes leftover after parsing attributes in process `syz.2.259'. [ 138.279629][ T790] pwc: recv_control_msg error -32 req 02 val 2b00 [ 138.340490][ T6734] FAULT_INJECTION: forcing a failure. [ 138.340490][ T6734] name fail_futex, interval 1, probability 0, space 0, times 0 [ 138.368008][ T6734] CPU: 1 PID: 6734 Comm: syz.2.261 Not tainted syzkaller #0 [ 138.375413][ T6734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 138.385531][ T6734] Call Trace: [ 138.388871][ T6734] [ 138.391939][ T6734] dump_stack_lvl+0x18c/0x250 [ 138.396771][ T6734] ? show_regs_print_info+0x20/0x20 [ 138.402029][ T6734] ? load_image+0x420/0x420 [ 138.406617][ T6734] ? get_user_pages_fast_only+0xa0/0xa0 [ 138.412421][ T6734] ? asan.module_dtor+0x20/0x20 [ 138.417365][ T6734] should_fail_ex+0x394/0x4c0 [ 138.422128][ T6734] get_futex_key+0x857/0x1030 [ 138.426902][ T6734] ? futex_setup_timer+0xc0/0xc0 [ 138.432013][ T6734] ? futex_wait_queue+0x138/0x1b0 [ 138.437132][ T6734] futex_wake_op+0x163/0xd40 [ 138.439614][ T6736] FAULT_INJECTION: forcing a failure. [ 138.439614][ T6736] name failslab, interval 1, probability 0, space 0, times 0 [ 138.441793][ T6734] ? futex_setup_timer+0xc0/0xc0 [ 138.441832][ T6734] ? futex_wake+0x4f0/0x4f0 [ 138.464403][ T6734] ? file_end_write+0x159/0x250 [ 138.469330][ T6734] ? vfs_write+0x5de/0x9a0 [ 138.473830][ T6734] do_futex+0x385/0x3e0 [ 138.478054][ T6734] ? __ia32_sys_get_robust_list+0x110/0x110 [ 138.484025][ T6734] __se_sys_futex+0x3a9/0x440 [ 138.488785][ T6734] ? __x64_sys_futex+0xf0/0xf0 [ 138.493647][ T6734] ? __x64_sys_futex+0x21/0xf0 [ 138.498486][ T6734] do_syscall_64+0x55/0xb0 [ 138.502970][ T6734] ? clear_bhb_loop+0x40/0x90 [ 138.507704][ T6734] ? clear_bhb_loop+0x40/0x90 [ 138.512449][ T6734] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.518425][ T6734] RIP: 0033:0x7f0360b9e1d9 [ 138.522919][ T6734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.542851][ T6734] RSP: 002b:00007f03619f0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 138.551342][ T6734] RAX: ffffffffffffffda RBX: 00007f0360e25fa0 RCX: 00007f0360b9e1d9 [ 138.559372][ T6734] RDX: 0000000000000004 RSI: 0000000000000005 RDI: 0000200000000340 [ 138.567489][ T6734] RBP: 00007f0360c35888 R08: 0000200000000340 R09: 0000000000000002 [ 138.575527][ T6734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.583570][ T6734] R13: 00007f0360e26038 R14: 00007f0360e25fa0 R15: 00007ffea5f7a118 [ 138.591620][ T6734] [ 138.600466][ T6736] CPU: 1 PID: 6736 Comm: syz.3.260 Not tainted syzkaller #0 [ 138.607843][ T6736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 138.618047][ T6736] Call Trace: [ 138.621381][ T6736] [ 138.624369][ T6736] dump_stack_lvl+0x18c/0x250 [ 138.629120][ T6736] ? show_regs_print_info+0x20/0x20 [ 138.634386][ T6736] ? load_image+0x420/0x420 [ 138.638967][ T6736] ? __might_sleep+0xe0/0xe0 [ 138.643629][ T6736] ? __lock_acquire+0x7eb0/0x7eb0 [ 138.648743][ T6736] should_fail_ex+0x394/0x4c0 [ 138.653506][ T6736] should_failslab+0x9/0x20 [ 138.658086][ T6736] slab_pre_alloc_hook+0x59/0x300 [ 138.663175][ T6736] ? nfc_allocate_device+0x129/0x550 [ 138.668540][ T6736] __kmem_cache_alloc_node+0x53/0x250 [ 138.673995][ T6736] ? nfc_allocate_device+0x129/0x550 [ 138.679422][ T6736] kmalloc_trace+0x2a/0xe0 [ 138.683927][ T6736] ? nci_deactivate_target+0x4e0/0x4e0 [ 138.689470][ T6736] nfc_allocate_device+0x129/0x550 [ 138.694666][ T6736] ? __init_swait_queue_head+0xa8/0x140 [ 138.700287][ T6736] nci_allocate_device+0x1dc/0x350 [ 138.705477][ T6736] virtual_ncidev_open+0x75/0x1a0 [ 138.710580][ T6736] ? virtual_ncidev_ioctl+0xd0/0xd0 [ 138.715942][ T6736] misc_open+0x326/0x3a0 [ 138.720257][ T6736] chrdev_open+0x58c/0x600 [ 138.724750][ T6736] ? cd_forget+0x160/0x160 [ 138.729343][ T6736] ? fsnotify_perm+0x3ed/0x5e0 [ 138.734195][ T6736] do_dentry_open+0x880/0x14b0 [ 138.739027][ T6736] ? cd_forget+0x160/0x160 [ 138.743518][ T6736] path_openat+0x284f/0x3270 [ 138.748201][ T6736] ? do_sys_openat2+0xda/0x1d0 [ 138.753036][ T6736] ? __x64_sys_openat+0x139/0x160 [ 138.758146][ T6736] ? verify_lock_unused+0x140/0x140 [ 138.763417][ T6736] ? do_filp_open+0x430/0x430 [ 138.768187][ T6736] do_filp_open+0x1f2/0x430 [ 138.772763][ T6736] ? vfs_tmpfile+0x620/0x620 [ 138.777442][ T6736] ? _raw_spin_unlock+0x28/0x40 [ 138.782423][ T6736] ? alloc_fd+0x590/0x640 [ 138.786838][ T6736] do_sys_openat2+0x134/0x1d0 [ 138.791592][ T6736] ? do_sys_open+0xe0/0xe0 [ 138.796080][ T6736] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 138.802146][ T6736] ? lock_chain_count+0x20/0x20 [ 138.807071][ T6736] __x64_sys_openat+0x139/0x160 [ 138.812014][ T6736] do_syscall_64+0x55/0xb0 [ 138.816510][ T6736] ? clear_bhb_loop+0x40/0x90 [ 138.821257][ T6736] ? clear_bhb_loop+0x40/0x90 [ 138.826012][ T6736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.831980][ T6736] RIP: 0033:0x7faec799e1d9 [ 138.836463][ T6736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.856139][ T6736] RSP: 002b:00007faec8826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 138.864630][ T6736] RAX: ffffffffffffffda RBX: 00007faec7c25fa0 RCX: 00007faec799e1d9 [ 138.872668][ T6736] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 138.880700][ T6736] RBP: 00007faec7a35888 R08: 0000000000000000 R09: 0000000000000000 [ 138.888736][ T6736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.896769][ T6736] R13: 00007faec7c26038 R14: 00007faec7c25fa0 R15: 00007ffd2da25858 [ 138.904826][ T6736] [ 138.912048][ T790] pwc: recv_control_msg error -71 req 04 val 1700 [ 138.922476][ T790] pwc: recv_control_msg error -71 req 02 val 2c00 [ 138.930966][ T790] pwc: recv_control_msg error -71 req 04 val 1000 [ 138.939650][ T790] pwc: recv_control_msg error -71 req 04 val 1300 [ 138.947408][ T790] pwc: recv_control_msg error -71 req 04 val 1400 [ 138.956747][ T790] pwc: recv_control_msg error -71 req 02 val 2000 [ 138.965541][ T790] pwc: recv_control_msg error -71 req 02 val 2100 [ 138.973526][ T790] pwc: recv_control_msg error -71 req 02 val 2200 [ 138.982454][ T790] pwc: recv_control_msg error -71 req 06 val 0600 [ 138.989873][ T790] pwc: recv_control_msg error -71 req 04 val 1500 [ 138.996941][ T790] pwc: recv_control_msg error -71 req 02 val 2500 [ 139.014462][ T790] pwc: recv_control_msg error -71 req 02 val 2400 [ 139.044502][ T790] pwc: recv_control_msg error -71 req 02 val 2600 [ 139.051881][ T790] pwc: recv_control_msg error -71 req 02 val 2900 [ 139.068208][ T790] pwc: recv_control_msg error -71 req 02 val 2800 [ 139.085652][ T790] pwc: recv_control_msg error -71 req 04 val 1100 [ 139.098150][ T790] pwc: recv_control_msg error -71 req 04 val 1200 [ 139.136521][ T790] pwc: Registered as video103. [ 139.163032][ T790] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 139.239665][ T790] usb 1-1: USB disconnect, device number 6 [ 139.833847][ T6757] FAULT_INJECTION: forcing a failure. [ 139.833847][ T6757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.867709][ T6757] CPU: 0 PID: 6757 Comm: syz.2.270 Not tainted syzkaller #0 [ 139.875103][ T6757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 139.885223][ T6757] Call Trace: [ 139.888553][ T6757] [ 139.891555][ T6757] dump_stack_lvl+0x18c/0x250 [ 139.896300][ T6757] ? show_regs_print_info+0x20/0x20 [ 139.901554][ T6757] ? load_image+0x420/0x420 [ 139.906171][ T6757] ? __might_fault+0xaa/0x120 [ 139.910921][ T6757] ? __lock_acquire+0x7eb0/0x7eb0 [ 139.916042][ T6757] should_fail_ex+0x394/0x4c0 [ 139.920811][ T6757] _copy_from_user+0x2f/0xe0 [ 139.925481][ T6757] __se_sys_futex_waitv+0x271/0x6d0 [ 139.930774][ T6757] ? __x64_sys_futex_waitv+0xc0/0xc0 [ 139.936140][ T6757] ? lockdep_hardirqs_on+0x98/0x150 [ 139.941405][ T6757] ? __x64_sys_futex_waitv+0x20/0xc0 [ 139.946755][ T6757] do_syscall_64+0x55/0xb0 [ 139.951255][ T6757] ? clear_bhb_loop+0x40/0x90 [ 139.955987][ T6757] ? clear_bhb_loop+0x40/0x90 [ 139.960742][ T6757] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.966726][ T6757] RIP: 0033:0x7f0360b9e1d9 [ 139.971288][ T6757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.990995][ T6757] RSP: 002b:00007f03619f0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 139.999456][ T6757] RAX: ffffffffffffffda RBX: 00007f0360e25fa0 RCX: 00007f0360b9e1d9 [ 140.007471][ T6757] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001740 [ 140.015480][ T6757] RBP: 00007f0360c35888 R08: 0000000000000000 R09: 0000000000000000 [ 140.023495][ T6757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.031508][ T6757] R13: 00007f0360e26038 R14: 00007f0360e25fa0 R15: 00007ffea5f7a118 [ 140.039536][ T6757] [ 140.337965][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.274'. [ 140.421750][ T6773] loop1: detected capacity change from 0 to 128 [ 140.458727][ T6773] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 140.601193][ T6773] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 140.644221][ T6777] bond1: entered allmulticast mode [ 140.654774][ T6773] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 140.790747][ T6782] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 140.813756][ T6782] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 140.970373][ T6793] FAULT_INJECTION: forcing a failure. [ 140.970373][ T6793] name failslab, interval 1, probability 0, space 0, times 0 [ 141.031020][ T6793] CPU: 1 PID: 6793 Comm: syz.2.285 Not tainted syzkaller #0 [ 141.038424][ T6793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 141.048586][ T6793] Call Trace: [ 141.051946][ T6793] [ 141.054922][ T6793] dump_stack_lvl+0x18c/0x250 [ 141.059655][ T6793] ? show_regs_print_info+0x20/0x20 [ 141.064890][ T6793] ? load_image+0x420/0x420 [ 141.069447][ T6793] ? __might_sleep+0xe0/0xe0 [ 141.074119][ T6793] ? __lock_acquire+0x7eb0/0x7eb0 [ 141.079192][ T6793] should_fail_ex+0x394/0x4c0 [ 141.083933][ T6793] should_failslab+0x9/0x20 [ 141.088482][ T6793] slab_pre_alloc_hook+0x59/0x300 [ 141.093546][ T6793] ? kvmalloc_node+0x70/0x180 [ 141.098266][ T6793] ? kvmalloc_node+0x70/0x180 [ 141.103376][ T6793] __kmem_cache_alloc_node+0x53/0x250 [ 141.108998][ T6793] ? kvmalloc_node+0x70/0x180 [ 141.113763][ T6793] __kmalloc_node+0xa6/0x240 [ 141.118435][ T6793] kvmalloc_node+0x70/0x180 [ 141.123020][ T6793] seq_read_iter+0x1e2/0xc50 [ 141.127718][ T6793] seq_read+0x175/0x220 [ 141.131937][ T6793] ? seq_open+0x140/0x140 [ 141.136316][ T6793] ? __mutex_trylock_common+0x160/0x270 [ 141.141911][ T6793] ? trace_raw_output_contention_end+0xd0/0xd0 [ 141.148107][ T6793] ? end_current_label_crit_section+0x149/0x170 [ 141.154420][ T6793] ? seq_open+0x140/0x140 [ 141.158795][ T6793] proc_reg_read+0x1e4/0x2d0 [ 141.163441][ T6793] ? proc_reg_get_unmapped_area+0x380/0x380 [ 141.169390][ T6793] vfs_read+0x298/0x990 [ 141.173694][ T6793] ? kernel_read+0x1e0/0x1e0 [ 141.178343][ T6793] ? __fget_files+0x28/0x460 [ 141.182983][ T6793] ? __fget_files+0x3fc/0x460 [ 141.187727][ T6793] ? __fdget_pos+0x2a3/0x330 [ 141.192406][ T6793] ? ksys_read+0x74/0x260 [ 141.196795][ T6793] ksys_read+0x151/0x260 [ 141.201149][ T6793] ? vfs_write+0x9a0/0x9a0 [ 141.205621][ T6793] ? lockdep_hardirqs_on+0x98/0x150 [ 141.210861][ T6793] do_syscall_64+0x55/0xb0 [ 141.215311][ T6793] ? clear_bhb_loop+0x40/0x90 [ 141.220041][ T6793] ? clear_bhb_loop+0x40/0x90 [ 141.224774][ T6793] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.230733][ T6793] RIP: 0033:0x7f0360b9e1d9 [ 141.235188][ T6793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.254844][ T6793] RSP: 002b:00007f03619f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.263392][ T6793] RAX: ffffffffffffffda RBX: 00007f0360e25fa0 RCX: 00007f0360b9e1d9 [ 141.271432][ T6793] RDX: 0000000000002020 RSI: 00002000000005c0 RDI: 0000000000000003 [ 141.279441][ T6793] RBP: 00007f0360c35888 R08: 0000000000000000 R09: 0000000000000000 [ 141.287454][ T6793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.295466][ T6793] R13: 00007f0360e26038 R14: 00007f0360e25fa0 R15: 00007ffea5f7a118 [ 141.304385][ T6793] [ 141.839858][ T6816] FAULT_INJECTION: forcing a failure. [ 141.839858][ T6816] name fail_futex, interval 1, probability 0, space 0, times 0 [ 141.867731][ T6816] CPU: 1 PID: 6816 Comm: syz.0.292 Not tainted syzkaller #0 [ 141.875131][ T6816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 141.885235][ T6816] Call Trace: [ 141.888549][ T6816] [ 141.891512][ T6816] dump_stack_lvl+0x18c/0x250 [ 141.896227][ T6816] ? show_regs_print_info+0x20/0x20 [ 141.901463][ T6816] ? load_image+0x420/0x420 [ 141.906032][ T6816] ? mark_lock+0x94/0x320 [ 141.910398][ T6816] ? __lock_acquire+0x135d/0x7eb0 [ 141.915459][ T6816] should_fail_ex+0x394/0x4c0 [ 141.920216][ T6816] get_futex_key+0x136/0x1030 [ 141.924942][ T6816] ? futex_setup_timer+0xc0/0xc0 [ 141.929913][ T6816] ? verify_lock_unused+0x140/0x140 [ 141.935159][ T6816] futex_wake+0x127/0x4f0 [ 141.939551][ T6816] ? futex_wake_mark+0x150/0x150 [ 141.944528][ T6816] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 141.950543][ T6816] ? __lock_acquire+0x7eb0/0x7eb0 [ 141.955607][ T6816] ? lock_chain_count+0x20/0x20 [ 141.960495][ T6816] do_futex+0x35d/0x3e0 [ 141.964712][ T6816] ? lockdep_hardirqs_on+0x98/0x150 [ 141.969960][ T6816] ? __ia32_sys_get_robust_list+0x110/0x110 [ 141.975890][ T6816] ? rcu_read_lock_sched_held+0x8a/0x110 [ 141.981563][ T6816] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 141.987753][ T6816] __se_sys_futex+0x3a9/0x440 [ 141.992465][ T6816] ? __x64_sys_futex+0xf0/0xf0 [ 141.997263][ T6816] ? __x64_sys_futex+0x21/0xf0 [ 142.003020][ T6816] do_syscall_64+0x55/0xb0 [ 142.007467][ T6816] ? clear_bhb_loop+0x40/0x90 [ 142.012185][ T6816] ? clear_bhb_loop+0x40/0x90 [ 142.016887][ T6816] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.022902][ T6816] RIP: 0033:0x7fc6e3d9e1d9 [ 142.027351][ T6816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.046999][ T6816] RSP: 002b:00007fc6e1ff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 142.055462][ T6816] RAX: ffffffffffffffda RBX: 00007fc6e4025fa8 RCX: 00007fc6e3d9e1d9 [ 142.063557][ T6816] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc6e4025fac [ 142.071572][ T6816] RBP: 00007fc6e4025fa0 R08: 0000000000745f06 R09: 0000000000000000 [ 142.079582][ T6816] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 142.087586][ T6816] R13: 00007fc6e4026038 R14: 00007fff1c7db3d0 R15: 00007fff1c7db4b8 [ 142.095685][ T6816] [ 142.187563][ T790] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 142.391899][ T6828] FAULT_INJECTION: forcing a failure. [ 142.391899][ T6828] name failslab, interval 1, probability 0, space 0, times 0 [ 142.426837][ T6828] CPU: 0 PID: 6828 Comm: syz.0.297 Not tainted syzkaller #0 [ 142.434259][ T6828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 142.444834][ T6828] Call Trace: [ 142.448166][ T6828] [ 142.451151][ T6828] dump_stack_lvl+0x18c/0x250 [ 142.455890][ T6828] ? show_regs_print_info+0x20/0x20 [ 142.461142][ T6828] ? load_image+0x420/0x420 [ 142.465759][ T6828] ? __lock_acquire+0x7eb0/0x7eb0 [ 142.470874][ T6828] should_fail_ex+0x394/0x4c0 [ 142.475640][ T6828] should_failslab+0x9/0x20 [ 142.480210][ T6828] slab_pre_alloc_hook+0x59/0x300 [ 142.483144][ T790] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 142.485272][ T6828] ? handler_new_ref+0x244/0x920 [ 142.499205][ T6828] ? handler_new_ref+0x244/0x920 [ 142.504212][ T6828] __kmem_cache_alloc_node+0x53/0x250 [ 142.509683][ T6828] ? handler_new_ref+0x244/0x920 [ 142.514717][ T6828] __kmalloc+0xa7/0x240 [ 142.517642][ T790] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 142.518933][ T6828] handler_new_ref+0x244/0x920 [ 142.518973][ T6828] ? v4l2_ctrl_type_op_equal+0x220/0x220 [ 142.536757][ T790] usb 2-1: config 4 has no interface number 0 [ 142.539524][ T6828] v4l2_ctrl_new+0x11f3/0x16e0 [ 142.539574][ T6828] v4l2_ctrl_new_std+0x24b/0x300 [ 142.539613][ T6828] ? handler_new_ref+0x920/0x920 [ 142.549856][ C1] ------------[ cut here ]------------ [ 142.550585][ T6828] ? __kmem_cache_alloc_node+0x194/0x250 [ 142.555942][ C1] WARNING: CPU: 1 PID: 5128 at net/mac80211/tx.c:5057 __ieee80211_beacon_get+0x1141/0x1520 [ 142.560889][ T6828] ? rcu_is_watching+0x15/0xb0 [ 142.560926][ T6828] ? kvmalloc_node+0x70/0x180 [ 142.566425][ C1] Modules linked in: [ 142.572066][ T6828] ? __kmalloc_node+0xe4/0x240 [ 142.572117][ T6828] ? media_request_object_init+0x8c/0xe0 [ 142.582284][ C1] [ 142.586914][ T6828] ? v4l2_ctrl_handler_init_class+0x208/0x2d0 [ 142.591854][ C1] CPU: 1 PID: 5128 Comm: klogd Not tainted syzkaller #0 [ 142.595625][ T6828] vicodec_open+0x261/0xc30 [ 142.601263][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 142.606801][ T6828] v4l2_open+0x208/0x340 [ 142.609255][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 142.615229][ T6828] chrdev_open+0x58c/0x600 [ 142.622318][ C1] Code: f7 4c 89 ef e8 d0 2c b5 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 1b e8 76 f7 0f 0b e9 61 f8 ff ff e8 0f e8 76 f7 <0f> 0b e9 85 fb ff ff e8 03 e8 76 f7 48 c7 c7 40 92 45 8f 4c 89 e6 [ 142.626722][ T6828] ? cd_forget+0x160/0x160 [ 142.636924][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 142.641042][ T6828] ? fsnotify_perm+0x3ed/0x5e0 [ 142.647460][ C1] [ 142.651826][ T6828] do_dentry_open+0x880/0x14b0 [ 142.671571][ C1] RAX: ffffffff8a10a8a1 RBX: dffffc0000000000 RCX: ffff88807d038000 [ 142.675896][ T6828] ? cd_forget+0x160/0x160 [ 142.682194][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.686866][ T6828] path_openat+0x284f/0x3270 [ 142.689310][ C1] RBP: 0000000000000000 R08: ffff88807d038000 R09: 0000000000000003 [ 142.695024][ T6828] ? do_sys_openat2+0xda/0x1d0 [ 142.706129][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805ce72440 [ 142.710442][ T6828] ? __x64_sys_openat+0x139/0x160 [ 142.710487][ T6828] ? verify_lock_unused+0x140/0x140 [ 142.718672][ C1] R13: ffff88803022fc24 R14: ffff88805ce72930 R15: ffff88803022fc00 [ 142.723199][ T6828] ? do_filp_open+0x430/0x430 [ 142.731263][ C1] FS: 00007f450b435c80(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 142.736004][ T6828] do_filp_open+0x1f2/0x430 [ 142.744069][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.748989][ T6828] ? vfs_tmpfile+0x620/0x620 [ 142.754220][ C1] CR2: 00007f035744d000 CR3: 0000000030c0a000 CR4: 00000000003506e0 [ 142.762246][ T6828] ? _raw_spin_unlock+0x28/0x40 [ 142.766964][ C1] Call Trace: [ 142.775898][ T6828] ? alloc_fd+0x590/0x640 [ 142.775947][ T6828] do_sys_openat2+0x134/0x1d0 [ 142.780521][ C1] [ 142.787054][ T6828] ? do_sys_open+0xe0/0xe0 [ 142.791789][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 142.800256][ T6828] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 142.800292][ T6828] ? lock_chain_count+0x20/0x20 [ 142.805157][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 142.808466][ T6828] ? lock_chain_count+0x20/0x20 [ 142.808498][ T6828] __x64_sys_openat+0x139/0x160 [ 142.812849][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 142.817632][ T6828] do_syscall_64+0x55/0xb0 [ 142.817665][ T6828] ? clear_bhb_loop+0x40/0x90 [ 142.817689][ T6828] ? clear_bhb_loop+0x40/0x90 [ 142.820577][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 142.824995][ T6828] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.830692][ C1] __iterate_interfaces+0x225/0x4c0 [ 142.836558][ T6828] RIP: 0033:0x7fc6e3d5ea0e [ 142.841554][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 142.847254][ T6828] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 142.852284][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 142.857027][ T6828] RSP: 002b:00007fc6e1ff5b28 EFLAGS: 00000246 [ 142.863983][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 142.868244][ T6828] ORIG_RAX: 0000000000000101 [ 142.868256][ T6828] RAX: ffffffffffffffda RBX: 00007fc6e1ff66c0 RCX: 00007fc6e3d5ea0e [ 142.868274][ T6828] RDX: 0000000000000002 RSI: 00007fc6e1ff5c00 RDI: ffffffffffffff9c [ 142.868290][ T6828] RBP: 00007fc6e1ff5c00 R08: 0000000000000000 R09: 0000000000000000 [ 142.872961][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 142.877643][ T6828] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 142.877660][ T6828] R13: 00007fc6e4026038 R14: 00007fc6e4025fa0 R15: 00007fff1c7db4b8 [ 142.877712][ T6828] [ 142.883308][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 142.900571][ T2975] ------------[ cut here ]------------ [ 142.905712][ C1] ? hw_scan_work+0xf10/0xf10 [ 142.905751][ C1] __hrtimer_run_queues+0x525/0xc10 [ 142.925868][ T2975] WARNING: CPU: 0 PID: 2975 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 142.933124][ C1] ? hrtimer_interrupt+0x980/0x980 [ 142.939253][ T2975] Modules linked in: [ 142.945747][ C1] ? read_tsc+0x9/0x20 [ 142.950606][ T2975] [ 142.958587][ C1] hrtimer_run_softirq+0x177/0x290 [ 142.958626][ C1] handle_softirqs+0x27d/0x820 [ 142.958647][ C1] ? read_tsc+0x9/0x20 [ 142.958670][ C1] ? ktime_get+0x24b/0x280 [ 142.958699][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 142.958736][ C1] ? do_softirq+0x1a0/0x1a0 [ 142.958769][ C1] __irq_exit_rcu+0xd3/0x190 [ 142.958793][ C1] ? irq_exit_rcu+0x20/0x20 [ 142.958827][ C1] irq_exit_rcu+0x9/0x20 [ 142.958848][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 142.958875][ C1] [ 142.958883][ C1] [ 142.958891][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 142.958915][ C1] RIP: 0010:skip_atoi+0x54/0xe0 [ 142.958944][ C1] Code: 3c 20 00 74 08 48 89 df e8 b9 49 5c f7 4c 8b 33 49 8d 6e 01 45 31 ff 48 8b 04 24 42 80 3c 20 00 74 08 48 89 df e8 3c 4a 5c f7 <48> 89 2b 4c 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 75 38 44 0f b6 [ 142.958959][ C1] RSP: 0018:ffffc900032cf778 EFLAGS: 00000246 [ 142.958978][ C1] RAX: 1ffff92000659efe RBX: ffffc900032cf7f0 RCX: ffff88807d038000 [ 142.958992][ C1] RDX: 0000000000000000 RSI: 00000000000000fb RDI: ffffc900032cf7f0 [ 142.959004][ C1] RBP: ffffffff8acb9143 R08: ffff88807d038000 R09: 0000000000000005 [ 142.959020][ C1] R10: 0000000000000030 R11: 0000000000000000 R12: dffffc0000000000 [ 142.959035][ C1] R13: 1ffffffff1597228 R14: ffffffff8acb9142 R15: 0000000000000000 [ 142.959065][ C1] ? skip_atoi+0x1d/0xe0 [ 142.959097][ C1] format_decode+0x8c4/0x1400 [ 142.959128][ C1] ? vsnprintf+0x85c/0x1ba0 [ 142.959161][ C1] vsnprintf+0xeb/0x1ba0 [ 142.959201][ C1] sprintf+0xe8/0x140 [ 142.959236][ C1] ? vsprintf+0x30/0x30 [ 142.959271][ C1] ? desc_read+0x1cf/0x3d0 [ 142.959306][ C1] info_print_prefix+0x16c/0x360 [ 142.959341][ C1] ? msg_add_dict_text+0x3d0/0x3d0 [ 142.959383][ C1] record_print_text+0x182/0x4a0 [ 142.959419][ C1] ? syslog_print+0x2e9/0x630 [ 142.959448][ C1] ? kmsg_dump_get_line+0x3e0/0x3e0 [ 142.959497][ C1] syslog_print+0x3cb/0x630 [ 142.959528][ C1] ? do_syslog+0x820/0x820 [ 142.959578][ C1] ? apparmor_capable+0x137/0x1a0 [ 142.959606][ C1] ? bpf_lsm_capable+0x9/0x10 [ 142.959627][ C1] ? security_capable+0x89/0xb0 [ 142.959664][ C1] do_syslog+0x575/0x820 [ 142.967956][ T2975] CPU: 0 PID: 2975 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 142.976146][ C1] ? __rseq_handle_notify_resume+0x33f/0x1140 [ 142.983293][ T2975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 142.991399][ C1] ? log_buf_vmcoreinfo_setup+0x450/0x450 [ 143.000328][ T2975] Workqueue: phy10 ieee80211_csa_finalize_work [ 143.003269][ C1] ? __bpf_trace_rseq_ip_fixup+0x240/0x240 [ 143.008554][ T2975] [ 143.013959][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 143.018687][ T2975] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 143.023903][ C1] ? lock_chain_count+0x20/0x20 [ 143.034877][ T2975] Code: 48 89 df e8 54 1b cb f7 e9 d6 fc ff ff e8 3a 3a 72 f7 eb 24 e8 33 3a 72 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 22 3a 72 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 14 3a 72 f7 48 8b 7c 24 08 4c 8b 74 [ 143.040031][ C1] __x64_sys_syslog+0x7c/0x90 [ 143.040069][ C1] do_syscall_64+0x55/0xb0 [ 143.043968][ T2975] RSP: 0018:ffffc9000be1f9c0 EFLAGS: 00010293 [ 143.048084][ C1] ? clear_bhb_loop+0x40/0x90 [ 143.050432][ T2975] [ 143.050441][ T2975] RAX: ffffffff8a155282 RBX: 0000000000000001 RCX: ffff88802ca8bc00 [ 143.055593][ C1] ? clear_bhb_loop+0x40/0x90 [ 143.062132][ T2975] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 143.064588][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.069416][ T2975] RBP: dffffc0000000000 R08: ffff88805ce7162f R09: 1ffff1100b9ce2c5 [ 143.073833][ C1] RIP: 0033:0x7f450b5ffa37 [ 143.078390][ T2975] R10: dffffc0000000000 R11: ffffed100b9ce2c6 R12: 0000000000000001 [ 143.083080][ C1] Code: 73 01 c3 48 8b 0d c1 f3 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 91 f3 0c 00 f7 d8 64 89 01 48 [ 143.087657][ T2975] R13: ffff88805ce72659 R14: ffff888076da2d48 R15: ffff888024607b00 [ 143.091915][ C1] RSP: 002b:00007ffeb812a1c8 EFLAGS: 00000206 [ 143.097669][ T2975] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 143.101118][ C1] ORIG_RAX: 0000000000000067 [ 143.104091][ T2975] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.110143][ C1] RAX: ffffffffffffffda RBX: 00007f450b79f490 RCX: 00007f450b5ffa37 [ 143.110165][ C1] RDX: 00000000000003ff RSI: 00007f450b79f490 RDI: 0000000000000002 [ 143.110182][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 143.110198][ C1] R10: 0000000000004000 R11: 0000000000000206 R12: 00007f450b79f490 [ 143.115059][ T2975] CR2: 00007f40d24c4a1e CR3: 000000002df58000 CR4: 00000000003506f0 [ 143.134807][ C1] R13: 00007f450b77cdfe R14: 00007f450b79f886 R15: 00007f450b79f886 [ 143.134853][ C1] [ 143.141002][ T2975] Call Trace: [ 143.149012][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 143.149028][ C1] CPU: 1 PID: 5128 Comm: klogd Not tainted syzkaller #0 [ 143.149091][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 143.149139][ C1] Call Trace: [ 143.149165][ C1] [ 143.149196][ C1] dump_stack_lvl+0x18c/0x250 [ 143.149284][ C1] ? show_regs_print_info+0x20/0x20 [ 143.149351][ C1] ? load_image+0x420/0x420 [ 143.149468][ C1] panic+0x2ca/0x720 [ 143.149560][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 143.149725][ C1] __warn+0x2e0/0x470 [ 143.149792][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 143.149881][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 143.149958][ C1] report_bug+0x2be/0x4f0 [ 143.150016][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 143.150095][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 143.150176][ C1] ? __ieee80211_beacon_get+0x1143/0x1520 [ 143.150240][ C1] handle_bug+0xcf/0x120 [ 143.150305][ C1] exc_invalid_op+0x1a/0x50 [ 143.150363][ C1] asm_exc_invalid_op+0x1a/0x20 [ 143.150428][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 143.150523][ C1] Code: f7 4c 89 ef e8 d0 2c b5 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 1b e8 76 f7 0f 0b e9 61 f8 ff ff e8 0f e8 76 f7 <0f> 0b e9 85 fb ff ff e8 03 e8 76 f7 48 c7 c7 40 92 45 8f 4c 89 e6 [ 143.150584][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 143.150655][ C1] RAX: ffffffff8a10a8a1 RBX: dffffc0000000000 RCX: ffff88807d038000 [ 143.150711][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.150754][ C1] RBP: 0000000000000000 R08: ffff88807d038000 R09: 0000000000000003 [ 143.150789][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805ce72440 [ 143.150832][ C1] R13: ffff88803022fc24 R14: ffff88805ce72930 R15: ffff88803022fc00 [ 143.150901][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 143.150995][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 143.151070][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 143.151175][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 143.151259][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 143.151371][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 143.151475][ C1] __iterate_interfaces+0x225/0x4c0 [ 143.151566][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 143.151654][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 143.151765][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 143.151856][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 143.151987][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 143.152073][ C1] ? hw_scan_work+0xf10/0xf10 [ 143.152152][ C1] __hrtimer_run_queues+0x525/0xc10 [ 143.152272][ C1] ? hrtimer_interrupt+0x980/0x980 [ 143.152340][ C1] ? read_tsc+0x9/0x20 [ 143.152439][ C1] hrtimer_run_softirq+0x177/0x290 [ 143.152522][ C1] handle_softirqs+0x27d/0x820 [ 143.152589][ C1] ? read_tsc+0x9/0x20 [ 143.152656][ C1] ? ktime_get+0x24b/0x280 [ 143.152738][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 143.152816][ C1] ? do_softirq+0x1a0/0x1a0 [ 143.152918][ C1] __irq_exit_rcu+0xd3/0x190 [ 143.152977][ C1] ? irq_exit_rcu+0x20/0x20 [ 143.153067][ C1] irq_exit_rcu+0x9/0x20 [ 143.153124][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 143.153207][ C1] [ 143.153228][ C1] [ 143.153250][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 143.153323][ C1] RIP: 0010:skip_atoi+0x54/0xe0 [ 143.153423][ C1] Code: 3c 20 00 74 08 48 89 df e8 b9 49 5c f7 4c 8b 33 49 8d 6e 01 45 31 ff 48 8b 04 24 42 80 3c 20 00 74 08 48 89 df e8 3c 4a 5c f7 <48> 89 2b 4c 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 75 38 44 0f b6 [ 143.153477][ C1] RSP: 0018:ffffc900032cf778 EFLAGS: 00000246 [ 143.153526][ C1] RAX: 1ffff92000659efe RBX: ffffc900032cf7f0 RCX: ffff88807d038000 [ 143.153571][ C1] RDX: 0000000000000000 RSI: 00000000000000fb RDI: ffffc900032cf7f0 [ 143.153613][ C1] RBP: ffffffff8acb9143 R08: ffff88807d038000 R09: 0000000000000005 [ 143.153650][ C1] R10: 0000000000000030 R11: 0000000000000000 R12: dffffc0000000000 [ 143.153687][ C1] R13: 1ffffffff1597228 R14: ffffffff8acb9142 R15: 0000000000000000 [ 143.153796][ C1] ? skip_atoi+0x1d/0xe0 [ 143.153879][ C1] format_decode+0x8c4/0x1400 [ 143.153968][ C1] ? vsnprintf+0x85c/0x1ba0 [ 143.154059][ C1] vsnprintf+0xeb/0x1ba0 [ 143.154165][ C1] sprintf+0xe8/0x140 [ 143.154259][ C1] ? vsprintf+0x30/0x30 [ 143.154351][ C1] ? desc_read+0x1cf/0x3d0 [ 143.154451][ C1] info_print_prefix+0x16c/0x360 [ 143.154543][ C1] ? msg_add_dict_text+0x3d0/0x3d0 [ 143.154655][ C1] record_print_text+0x182/0x4a0 [ 143.154795][ C1] ? syslog_print+0x2e9/0x630 [ 143.154881][ C1] ? kmsg_dump_get_line+0x3e0/0x3e0 [ 143.155008][ C1] syslog_print+0x3cb/0x630 [ 143.155088][ C1] ? do_syslog+0x820/0x820 [ 143.155227][ C1] ? apparmor_capable+0x137/0x1a0 [ 143.155297][ C1] ? bpf_lsm_capable+0x9/0x10 [ 143.155353][ C1] ? security_capable+0x89/0xb0 [ 143.155455][ C1] do_syslog+0x575/0x820 [ 143.155527][ C1] ? __rseq_handle_notify_resume+0x33f/0x1140 [ 143.155612][ C1] ? log_buf_vmcoreinfo_setup+0x450/0x450 [ 143.155705][ C1] ? __bpf_trace_rseq_ip_fixup+0x240/0x240 [ 143.155781][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 143.155885][ C1] ? lock_chain_count+0x20/0x20 [ 143.155978][ C1] __x64_sys_syslog+0x7c/0x90 [ 143.156064][ C1] do_syscall_64+0x55/0xb0 [ 143.156143][ C1] ? clear_bhb_loop+0x40/0x90 [ 143.156205][ C1] ? clear_bhb_loop+0x40/0x90 [ 143.156273][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.156358][ C1] RIP: 0033:0x7f450b5ffa37 [ 143.156413][ C1] Code: 73 01 c3 48 8b 0d c1 f3 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 91 f3 0c 00 f7 d8 64 89 01 48 [ 143.156460][ C1] RSP: 002b:00007ffeb812a1c8 EFLAGS: 00000206 ORIG_RAX: 0000000000000067 [ 143.156519][ C1] RAX: ffffffffffffffda RBX: 00007f450b79f490 RCX: 00007f450b5ffa37 [ 143.156566][ C1] RDX: 00000000000003ff RSI: 00007f450b79f490 RDI: 0000000000000002 [ 143.156601][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 143.156644][ C1] R10: 0000000000004000 R11: 0000000000000206 R12: 00007f450b79f490 [ 143.156680][ C1] R13: 00007f450b77cdfe R14: 00007f450b79f886 R15: 00007f450b79f886 [ 143.156827][ C1] [ 143.157580][ C1] Kernel Offset: disabled