last executing test programs: 12.884867178s ago: executing program 2 (id=354): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setns(r1, 0x24020000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 10.934483273s ago: executing program 2 (id=362): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001340)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001380)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000013c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=@newqdisc={0x30, 0x24, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=@newtfilter={0x68, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x9}, {0xffff, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1002}, {0x1004}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_VAR="5b8c8d1841289653"]}]}}]}]}]}}]}, 0x68}}, 0x0) write$tun(r1, &(0x7f00000015c0)=ANY=[], 0x20) 10.679902287s ago: executing program 0 (id=365): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8a, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@jqfmt_vfsv0}, {@noload}, {@noblock_validity}, {@grpjquota, 0x22}, {@errors_continue}, {@resuid}, {@i_version}]}, 0xff, 0x464, &(0x7f00000004c0)="$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") epoll_create1(0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x40, 0x103) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000440)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0000023f3201"], 0x138) 10.300420496s ago: executing program 3 (id=367): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 10.083511502s ago: executing program 0 (id=369): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x49, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) listen(0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x19) write(r1, &(0x7f0000000000)='7', 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) 9.335400136s ago: executing program 2 (id=370): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpgrp(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000140)=@filename='mtd0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000200)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xfffffee2) ftruncate(r0, 0xb) 9.246449811s ago: executing program 1 (id=372): ioprio_set$pid(0x2, 0x0, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x1, 0x3, 0x4, {0x1, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x2, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 9.242882052s ago: executing program 0 (id=384): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac2(0x0, 0x95, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x3, 0x1, 0xf8, 0x20, 0x0, {0x8, 0xb, 0x2, 0x0, 0x1, 0x6, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x4, 0xf, 0xde}, [@selector_unit={0x6, 0x24, 0xb, 0x8, 0x1, 'h'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xfb, 0x8, 0x4, 0x8, 0x6}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x3, 0x1, 0x6, 0x1, "abbbf0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0x8, 0x1, {0x8, 0x25, 0x1, 0x2, 0x30, 0xff, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x8e, 0x4e, 0x1, {0x8, 0x25, 0x1, 0x85, 0xc, 0xb, 0xfffc}}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x80a, 0x100, 0x4, 0x7, 0x5, 0x3, 0x4, 0x8000047, 0x14, 0x9, 0x7e4, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="200f14"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="400cf202"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.112473406s ago: executing program 2 (id=373): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap$dontunmap(&(0x7f00002da000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f00001f4000/0x1000)=nil) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000012, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 8.112155769s ago: executing program 3 (id=374): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 8.112033725s ago: executing program 5 (id=375): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) write$qrtrtun(r0, &(0x7f0000000640)="66bb0b760dc0f4ff", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000006c0)='./file0\x00', &(0x7f0000000780)=[0x7], 0x0, 0x0, 0x1}}, 0x40) creat(&(0x7f0000000440)='./file0\x00', 0xc) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 8.110761191s ago: executing program 1 (id=386): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r1, @ANYBLOB="7ba9"], 0x0) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r2, &(0x7f0000002200)=ANY=[], 0xfffffcd9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.820183255s ago: executing program 3 (id=376): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 7.341052356s ago: executing program 5 (id=378): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001580)={0x0, 0x3c}}, 0x0) r0 = epoll_create1(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000380)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f00000003c0)="05000000010000", 0x7) r2 = landlock_create_ruleset(&(0x7f0000000280)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r2, 0xe) close_range(r0, 0xffffffffffffffff, 0x100000000000000) 5.795831254s ago: executing program 5 (id=379): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0xa, 0x0, 0x9, 0x50, 0xc, 0x2fa11, 0x401}, 0x0) getrandom(&(0x7f00000002c0)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000400)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) keyctl$read(0x3, 0x0, 0x0, 0x0) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000440)={[], 0xf000}, 0x1000) 5.792545048s ago: executing program 4 (id=393): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/198, 0xc6}], 0x1, 0x7, 0x9) unshare(0x2a000600) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000280)=ANY=[], 0x8, 0x0) msgsnd(r1, &(0x7f0000000440)=ANY=[], 0x401, 0x0) msgrcv(r1, 0x0, 0x0, 0x969edffe39095fd4, 0x3800) msgrcv(r1, &(0x7f0000000d40)={0x0, ""/4096}, 0x1008, 0x0, 0x1000) 5.480134386s ago: executing program 4 (id=380): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x161) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='100', 0x3) pipe2(0x0, 0x800) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x80002, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x6, 0x4, 0x8, 0x100, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb7040000fdffffff850000000200000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.828163331s ago: executing program 0 (id=381): r0 = openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x4e21, 0x3, 'sed\x00', 0x0, 0xa7e, 0x3f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0xc, 0x4e}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0x3, 0x1}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4.780959884s ago: executing program 1 (id=382): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}}) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f00000002c0)="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", 0x559, 0xffffffffffffffff) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 4.646449901s ago: executing program 4 (id=383): r0 = syz_create_resource$futex(&(0x7f00000000c0)=0x1) futex(r0, 0xd, 0x0, 0x0, 0x0, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)=0x0) timer_settime(r2, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = syz_create_resource$futex(&(0x7f00000001c0)=0x1) r4 = syz_create_resource$futex(&(0x7f0000000200)=0x1) futex(r4, 0xb, 0x1, 0x0, r3, 0x403) futex(r4, 0xc, 0x1, 0x0, r3, 0x1) 4.312466005s ago: executing program 1 (id=385): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001340)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001380)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000013c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=@newqdisc={0x30, 0x24, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=@newtfilter={0x68, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x9}, {0xffff, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1002}, {0x1004}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_VAR="5b8c8d1841289653"]}]}}]}]}]}}]}, 0x68}}, 0x0) write$tun(r1, &(0x7f00000015c0)=ANY=[], 0x20) 4.193957881s ago: executing program 0 (id=387): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x22102, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x15) ioctl(r0, 0x404c4701, &(0x7f0000000200)="01000000000000000000000001000000010000000a0000000000000040000000400000000100000001") ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000500)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000005c0)=0x5) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000680)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000061c0)=0xd) 3.533087351s ago: executing program 1 (id=388): setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x57) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0), 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000003c40)={0x0, 0x1, 0x0, 0x0, 0x0, 0x54000}) 3.400674319s ago: executing program 4 (id=389): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000840)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@error={0x0, 0x80, 0x0, 0x30}]}) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f00000009c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000b00)={0x4, 0x0, 0x0, 0x158, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @stats_create={'@stats_create ', '-', 0x20, '/1'}}}) mknodat$dm(0xffffffffffffff9c, &(0x7f0000000c80)='./dm0\x00', 0x6180, r1) r2 = openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000cc0)='./dm0\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000d00), 0x0, 0x1000) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) 3.364225246s ago: executing program 2 (id=390): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) rename(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00') getpriority(0x2, 0x0) 3.137206119s ago: executing program 3 (id=391): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4048c01}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x9, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x24040075) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, &(0x7f0000000140)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.976182023s ago: executing program 1 (id=392): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f0000000540)=ANY=[], 0x41, 0x5e97, &(0x7f00000006c0)="$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") creat(&(0x7f0000006580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) mknod(&(0x7f0000006680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006780)='memory.events.local\x00', 0x275a, 0x0) symlink(&(0x7f00000067c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000068c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f00000069c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000006ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$fuse(0x0, &(0x7f0000006bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x140048, 0x0, 0x0, 0x0, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000006dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8a408, 0x0, 0x0, 0x0, &(0x7f0000006f00)) creat(&(0x7f0000006f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x71) 1.908753305s ago: executing program 5 (id=394): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='100', 0x3) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000440), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000500)={'syz1\x00', {0x8000}, 0x0, [0x7, 0x0, 0x0, 0x4b, 0x0, 0xae17, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0xfffffffd, 0x1000000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x3, 0x0, 0x487, 0xd6, 0x0, 0x0, 0x7b, 0x0, 0xffffffff, 0x0, 0x0, 0x7, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x52, 0xffffffff, 0x0, 0x0, 0xc, 0x80001002, 0x14], [0x0, 0xffffffff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x2, 0x8001, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000, 0x7, 0x0, 0x80, 0x0, 0x0, 0x1, 0x1, 0x27], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x403, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xe8c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x3, 0xffffffff, 0x5, 0x0, 0x401, 0x806, 0x3, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x5, 0xff, 0x40, 0x0, 0x0, 0x28000000, 0x0, 0xffffaed9, 0x0, 0x0, 0x2000000], [0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x80000, 0x7, 0xfffffffd, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffffffcd, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000000, 0x0, 0x20000, 0x0, 0xffffffff, 0xff, 0x1, 0x0, 0x7, 0xfffffffe, 0x3, 0x2, 0x0, 0x0, 0x0, 0x400001, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) 1.560456962s ago: executing program 4 (id=395): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x1, 0x51, 0xfe, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000240)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 1.428837526s ago: executing program 2 (id=396): r0 = gettid() timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) readv(r1, &(0x7f0000000040)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) 936.49847ms ago: executing program 3 (id=397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x10}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffffd9, 0xfffffffa, 0x6, 0x22, 0x4}, @empty, @loopback, 0xffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="000060034503003000640000ac01"], 0x34) 713.796118ms ago: executing program 5 (id=398): syz_mount_image$squashfs(&(0x7f0000000f40), &(0x7f0000000f80)='./file2\x00', 0x1000b, &(0x7f0000000fc0)=ANY=[@ANYRES32=0x0], 0x21, 0x1da, &(0x7f0000001000)="$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") mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000dc0)='.\x00', 0x800, 0x63) lseek(r0, 0x8, 0x3) ioctl(0xffffffffffffffff, 0x8914, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) mremap(&(0x7f0000dd2000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ff0000/0x4000)=nil) getdents64(r0, 0xfffffffffffffffe, 0x29) 194.433732ms ago: executing program 5 (id=399): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a40)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000b40)={'veth1\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000c40)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000c80)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) 190.982363ms ago: executing program 0 (id=411): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r0, &(0x7f0000001840)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) 189.687494ms ago: executing program 4 (id=400): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x103a40, 0x1db) syz_mount_image$fuse(0x0, &(0x7f00000004c0)='./file0\x00', 0x234a0c7, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000500)='./bus\x00', 0x3004009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000540)='./bus\x00', &(0x7f0000000580), 0x8, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000600)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0xc3) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x42, 0x0) 0s ago: executing program 3 (id=401): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000dc0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000e00)={0x0, 0xcc}, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000e40)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000e80)={0x0, 0x4}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000f00)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f0000000f40)=[{&(0x7f0000000f80)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000fc0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\a'], 0xc) kernel console output (not intermixed with test programs): 1 printk messages dropped ** ** 117 printk messages dropped ** ** 78 printk messages dropped ** ** 113 printk messages dropped ** ** 81 printk messages dropped ** ** 119 printk messages dropped ** ** 79 printk messages dropped ** ** 105 printk messages dropped ** ** 75 printk messages dropped ** ** 76 printk messages dropped ** ** 119 printk messages dropped ** ** 74 printk messages dropped ** ** 81 printk messages dropped ** ** 95 printk messages dropped ** ** 71 printk messages dropped ** ** 101 printk messages dropped ** ** 103 printk messages dropped ** ** 73 printk messages dropped ** ** 109 printk messages dropped ** ** 181 printk messages dropped ** ** 73 printk messages dropped ** ** 104 printk messages dropped ** ** 72 printk messages dropped ** ** 119 printk messages dropped ** ** 75 printk messages dropped ** ** 105 printk messages dropped ** ** 82 printk messages dropped ** ** 87 printk messages dropped ** ** 117 printk messages dropped ** ** 80 printk messages dropped ** ** 76 printk messages dropped ** ** 106 printk messages dropped ** ** 94 printk messages dropped ** ** 75 printk messages dropped ** ** 102 printk messages dropped ** ** 102 printk messages dropped ** ** 71 printk messages dropped ** ** 72 printk messages dropped ** ** 114 printk messages dropped ** ** 95 printk messages dropped ** ** 90 printk messages dropped ** ** 76 printk messages dropped ** ** 104 printk messages dropped ** ** 134 printk messages dropped ** ** 106 printk messages dropped ** ** 101 printk messages dropped ** ** 72 printk messages dropped ** ** 108 printk messages dropped ** ** 72 printk messages dropped ** ** 107 printk messages dropped ** ** 108 printk messages dropped ** ** 73 printk messages dropped ** ** 72 printk messages dropped ** ** 83 printk messages dropped ** ** 107 printk messages dropped ** ** 106 printk messages dropped ** ** 74 printk messages dropped ** ** 70 printk messages dropped ** ** 94 printk messages dropped ** ** 70 printk messages dropped ** ** 105 printk messages dropped ** ** 74 printk messages dropped ** ** 102 printk messages dropped ** ** 73 printk messages dropped ** ** 105 printk messages dropped ** ** 72 printk messages dropped ** ** 102 printk messages dropped ** ** 113 printk messages dropped ** ** 135 printk messages dropped ** ** 75 printk messages dropped ** ** 105 printk messages dropped ** ** 97 printk messages dropped ** ** 78 printk messages dropped ** ** 111 printk messages dropped ** ** 65 printk messages dropped ** ** 83 printk messages dropped ** ** 106 printk messages dropped ** ** 72 printk messages dropped ** ** 111 printk messages dropped ** ** 73 printk messages dropped ** ** 105 printk messages dropped ** ** 71 printk messages dropped ** ** 104 printk messages dropped ** ** 78 printk messages dropped ** ** 108 printk messages dropped ** ** 74 printk messages dropped ** ** 105 printk messages dropped ** ** 75 printk messages dropped ** ** 99 printk messages dropped ** ** 74 printk messages dropped ** ** 107 printk messages dropped ** ** 79 printk messages dropped ** ** 206 printk messages dropped ** ** 116 printk messages dropped ** ** 75 printk messages dropped ** ** 75 printk messages dropped ** ** 114 printk messages dropped ** ** 83 printk messages dropped ** ** 115 printk messages dropped ** ** 118 printk messages dropped ** ** 76 printk messages dropped ** ** 118 printk messages dropped ** ** 76 printk messages dropped ** ** 108 printk messages dropped ** ** 75 printk messages dropped ** ** 81 printk messages dropped ** ** 107 printk messages dropped ** ** 84 printk messages dropped ** ** 89 printk messages dropped ** ** 83 printk messages dropped ** ** 104 printk messages dropped ** ** 2094 printk messages dropped ** ** 109 printk messages dropped ** ** 104 printk messages dropped ** ** 69 printk messages dropped ** ** 101 printk messages dropped ** ** 70 printk messages dropped ** ** 101 printk messages dropped ** ** 71 printk messages dropped ** ** 101 printk messages dropped ** ** 69 printk messages dropped ** ** 99 printk messages dropped ** ** 194 printk messages dropped ** ** 74 printk messages dropped ** ** 106 printk messages dropped ** ** 74 printk messages dropped ** ** 108 printk messages dropped ** ** 73 printk messages dropped ** ** 108 printk messages dropped ** ** 87 printk messages dropped ** ** 106 printk messages dropped ** ** 111 printk messages dropped ** ** 81 printk messages dropped ** ** 118 printk messages dropped ** ** 79 printk messages dropped ** ** 109 printk messages dropped ** ** 81 printk messages dropped ** ** 110 printk messages dropped ** ** 104 printk messages dropped ** ** 89 printk messages dropped ** ** 70 printk messages dropped ** ** 103 printk messages dropped ** ** 113 printk messages dropped ** ** 73 printk messages dropped ** ** 74 printk messages dropped ** ** 185 printk messages dropped ** ** 113 printk messages dropped ** ** 72 printk messages dropped ** ** 106 printk messages dropped ** ** 109 printk messages dropped ** ** 94 printk messages dropped ** ** 79 printk messages dropped ** ** 145 printk messages dropped ** ** 303 printk messages dropped ** ** 125 printk messages dropped ** ** 38 printk messages dropped ** ** 33 printk messages dropped ** ** 122 printk messages dropped ** ** 74 printk messages dropped ** ** 428 printk messages dropped ** ** 69 printk messages dropped ** ** 77 printk messages dropped ** ** 131 printk messages dropped ** ** 136 printk messages dropped ** ** 71 printk messages dropped ** ** 71 printk messages dropped ** ** 107 printk messages dropped ** ** 72 printk messages dropped ** ** 84 printk messages dropped ** ** 103 printk messages dropped ** ** 73 printk messages dropped ** ** 102 printk messages dropped ** ** 72 printk messages dropped ** ** 121 printk messages dropped ** ** 107 printk messages dropped ** ** 72 printk messages dropped ** ** 70 printk messages dropped ** ** 106 printk messages dropped ** ** 42 printk messages dropped ** ** 107 printk messages dropped ** ** 79 printk messages dropped ** ** 197 printk messages dropped ** ** 77 printk messages dropped ** ** 109 printk messages dropped ** ** 71 printk messages dropped ** ** 158 printk messages dropped ** ** 139 printk messages dropped ** ** 73 printk messages dropped ** ** 106 printk messages dropped ** ** 73 printk messages dropped ** ** 77 printk messages dropped ** ** 95 printk messages dropped ** ** 70 printk messages dropped ** ** 106 printk messages dropped ** ** 70 printk messages dropped ** ** 88 printk messages dropped ** ** 90 printk messages dropped ** ** 68 printk messages dropped ** ** 90 printk messages dropped ** ** 101 printk messages dropped ** ** 104 printk messages dropped ** ** 70 printk messages dropped ** ** 69 printk messages dropped ** ** 102 printk messages dropped ** ** 70 printk messages dropped ** ** 81 printk messages dropped ** ** 99 printk messages dropped ** ** 68 printk messages dropped ** ** 70 printk messages dropped ** ** 102 printk messages dropped ** ** 175 printk messages dropped ** ** 83 printk messages dropped ** ** 72 printk messages dropped ** ** 101 printk messages dropped ** ** 74 printk messages dropped ** ** 109 printk messages dropped ** ** 109 printk messages dropped ** ** 101 printk messages dropped ** ** 71 printk messages dropped ** ** 74 printk messages dropped ** ** 72 printk messages dropped ** ** 104 printk messages dropped ** ** 85 printk messages dropped ** ** 106 printk messages dropped ** ** 74 printk messages dropped ** ** 106 printk messages dropped ** ** 83 printk messages dropped ** ** 106 printk messages dropped ** ** 75 printk messages dropped ** ** 130 printk messages dropped ** ** 73 printk messages dropped ** ** 101 printk messages dropped ** ** 44 printk messages dropped ** ** 108 printk messages dropped ** ** 4406 printk messages dropped ** ** 108 printk messages dropped ** ** 73 printk messages dropped ** ** 107 printk messages dropped ** ** 72 printk messages dropped ** ** 107 printk messages dropped ** ** 72 printk messages dropped ** ** 107 printk messages dropped ** ** 73 printk messages dropped ** ** 104 printk messages dropped ** ** 73 printk messages dropped ** ** 105 printk messages dropped ** ** 179 printk messages dropped ** ** 73 printk messages dropped ** ** 105 printk messages dropped ** ** 71 printk messages dropped ** ** 105 printk messages dropped ** ** 103 printk messages dropped ** ** 69 printk messages dropped ** ** 70 printk messages dropped ** ** 92 printk messages dropped ** ** 69 printk messages dropped ** ** 157 printk messages dropped ** ** 111 printk messages dropped ** ** 72 printk messages dropped ** ** 91 printk messages dropped ** ** 105 printk messages dropped ** ** 108 printk messages dropped ** ** 70 printk messages dropped ** ** 72 printk messages dropped ** ** 70 printk messages dropped ** ** 74 printk messages dropped ** ** 70 printk messages dropped ** ** 71 printk messages dropped ** ** 70 printk messages dropped ** ** 72 printk messages dropped ** ** 71 printk messages dropped ** ** 182 printk messages dropped ** ** 108 printk messages dropped ** ** 2632 printk messages dropped ** ** 600 printk messages dropped ** ** 23245 printk messages dropped ** ** 119 printk messages dropped ** ** 84 printk messages dropped ** ** 109 printk messages dropped ** ** 108 printk messages dropped ** ** 102 printk messages dropped ** ** 54 printk messages dropped ** ** 110 printk messages dropped ** ** 112 printk messages dropped ** ** 104 printk messages dropped ** ** 72 printk messages dropped ** ** 234 printk messages dropped ** ** 215 printk messages dropped ** ** 251 printk messages dropped ** ** 220 printk messages dropped ** ** 96 printk messages dropped ** ** 83 printk messages dropped ** ** 154 printk messages dropped ** ** 74 printk messages dropped ** ** 106 printk messages dropped ** ** 73 printk messages dropped ** ** 104 printk messages dropped ** ** 73 printk messages dropped ** ** 105 printk messages dropped ** ** 79 printk messages dropped ** ** 106 printk messages dropped ** ** 111 printk messages dropped ** ** 72 printk messages dropped ** ** 72 printk messages dropped ** ** 92 printk messages dropped ** ** 74 printk messages dropped ** ** 192 printk messages dropped ** ** 108 printk messages dropped ** ** 142 printk messages dropped ** ** 109 printk messages dropped ** ** 112 printk messages dropped ** ** 71 printk messages dropped ** ** 104 printk messages dropped ** ** 110 printk messages dropped ** ** 72 printk messages dropped ** ** 3334 printk messages dropped ** ** 117 printk messages dropped ** ** 26 printk messages dropped ** [ 130.951130][ T6106] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 130.987498][ T6106] pl2303 ttyUSB0: error sending break = -32 [ 130.994247][ T5786] usb 3-1: USB disconnect, device number 3 [ 131.019584][ T5786] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 131.048830][ T5786] pl2303 3-1:1.0: device disconnected [ 131.142299][ T6136] ªªªªªª: renamed from vlan0 (while UP) [ 131.383742][ T6141] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 131.383816][ T6141] overlayfs: failed to set xattr on upper [ 131.383831][ T6141] overlayfs: ...falling back to redirect_dir=nofollow. [ 131.383846][ T6141] overlayfs: ...falling back to index=off. [ 131.383860][ T6141] overlayfs: ...falling back to uuid=null. [ 131.417757][ T5642] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 132.273573][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.273665][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.848693][ T6162] FAULT_INJECTION: forcing a failure. [ 132.848693][ T6162] name failslab, interval 1, probability 0, space 0, times 0 [ 132.848734][ T6162] CPU: 1 UID: 0 PID: 6162 Comm: syz.4.71 Not tainted syzkaller #0 PREEMPT(full) [ 132.848777][ T6162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 132.848801][ T6162] Call Trace: [ 132.848813][ T6162] [ 132.848828][ T6162] dump_stack_lvl+0x100/0x190 [ 132.848893][ T6162] should_fail_ex.cold+0x5/0xa [ 132.848949][ T6162] should_failslab+0xc2/0x120 [ 132.849011][ T6162] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 132.849066][ T6162] ? is_bpf_text_address+0x8a/0x1a0 [ 132.849106][ T6162] ? kstrdup_const+0x63/0x80 [ 132.849173][ T6162] kstrdup+0x51/0xe0 [ 132.849232][ T6162] kstrdup_const+0x63/0x80 [ 132.849290][ T6162] __kernfs_new_node+0x9b/0xa10 [ 132.849348][ T6162] ? arch_stack_walk+0xa6/0xf0 [ 132.849423][ T6162] ? __pfx___kernfs_new_node+0x10/0x10 [ 132.849507][ T6162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.849562][ T6162] ? lock_acquire+0x1d1/0x380 [ 132.849616][ T6162] ? kernfs_root+0x23/0x2a0 [ 132.849671][ T6162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.849721][ T6162] ? find_held_lock+0x2b/0x80 [ 132.849762][ T6162] ? kernfs_root+0xee/0x2a0 [ 132.849816][ T6162] ? kernfs_root+0xee/0x2a0 [ 132.849868][ T6162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.849932][ T6162] kernfs_new_node+0x194/0x200 [ 132.849999][ T6162] ? __pfx_kernfs_new_node+0x10/0x10 [ 132.850061][ T6162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.850114][ T6162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.850163][ T6162] ? trace_contention_end+0x126/0x160 [ 132.850232][ T6162] __kernfs_create_file+0x53/0x350 [ 132.850284][ T6162] cgroup_addrm_files+0x48e/0xd30 [ 132.850347][ T6162] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 132.850404][ T6162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.850454][ T6162] ? css_next_child+0xcf/0x2e0 [ 132.850507][ T6162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.850563][ T6162] ? css_next_descendant_pre+0x58/0x1a0 [ 132.850622][ T6162] css_populate_dir+0x343/0x590 [ 132.850669][ T6162] cgroup_mkdir+0x975/0x13a0 [ 132.850741][ T6162] ? __pfx_cgroup_mkdir+0x10/0x10 [ 132.850823][ T6162] kernfs_iop_mkdir+0x111/0x190 [ 132.850886][ T6162] ? security_inode_mkdir+0xc9/0x2b0 [ 132.850931][ T6162] vfs_mkdir+0x36d/0x8a0 [ 132.850996][ T6162] filename_mkdirat+0x4c4/0x630 [ 132.851047][ T6162] ? __pfx_filename_mkdirat+0x10/0x10 [ 132.851094][ T6162] ? strncpy_from_user+0x19d/0x2d0 [ 132.851146][ T6162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.851197][ T6162] ? do_getname+0x191/0x390 [ 132.851253][ T6162] __x64_sys_mkdirat+0x89/0xc0 [ 132.851300][ T6162] do_syscall_64+0x123/0x7b0 [ 132.851368][ T6162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.851412][ T6162] RIP: 0033:0x7f38ba3a94d9 [ 132.851443][ T6162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.851484][ T6162] RSP: 002b:00007f38bb18d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 132.851523][ T6162] RAX: ffffffffffffffda RBX: 00007f38ba625fa0 RCX: 00007f38ba3a94d9 [ 132.851557][ T6162] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 132.851585][ T6162] RBP: 00007f38ba43804e R08: 0000000000000000 R09: 0000000000000000 [ 132.851612][ T6162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.851638][ T6162] R13: 00007f38ba626038 R14: 00007f38ba625fa0 R15: 00007fff12007a48 [ 132.851696][ T6162] [ 133.024247][ T6162] cgroup: cgroup_addrm_files: failed to add cgroup.procs, err=-12 [ 133.387502][ T6166] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.407651][ T6166] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 133.472280][ T6169] loop5: detected capacity change from 0 to 32896 [ 133.549947][ T6169] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.600638][ T6169] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 133.629261][ T6174] net_ratelimit: 83 callbacks suppressed [ 133.629285][ T6174] ip_tables: iptables: counters copy to user failed while replacing table [ 133.636978][ T6174] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 133.696555][ T31] audit: type=1800 audit(1794492510.085:4): pid=6170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.77" name="file1" dev="overlay" ino=106 res=0 errno=-22 [ 133.817643][ T6160] loop0: detected capacity change from 0 to 32768 [ 133.955258][ T6160] JBD2: Ignoring recovery information on journal [ 134.155603][ T5638] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.175912][ T6160] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 134.205594][ T6178] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 134.281428][ T6180] loop4: detected capacity change from 0 to 4096 [ 134.437318][ T6182] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.554854][ T6164] loop3: detected capacity change from 0 to 32768 [ 134.604541][ T31] audit: type=1800 audit(1794492510.995:5): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.82" name="file1" dev="loop4" ino=15 res=0 errno=-22 [ 134.819879][ T31] audit: type=1804 audit(1794492511.205:6): pid=6194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.74" name="/newroot/14/bus/file1" dev="loop0" ino=17059 res=1 errno=0 [ 134.830401][ T31] audit: type=1800 audit(1794492511.215:7): pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.82" name="file1" dev="loop4" ino=15 res=0 errno=-22 [ 135.298519][ T5637] OCFS2: ERROR (device loop0): ocfs2_validate_gd_self: Group descriptor #0 has bad signature  [ 135.298589][ T5637] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 135.298607][ T5637] OCFS2: File system is now read-only. [ 135.298622][ T5637] (syz-executor,5637,0):_ocfs2_free_suballoc_bits:3068 ERROR: status = -30 [ 135.298663][ T5637] (syz-executor,5637,0):_ocfs2_free_clusters:3193 ERROR: status = -30 [ 135.298702][ T5637] (syz-executor,5637,0):ocfs2_sync_local_to_main:994 ERROR: status = -30 [ 135.298742][ T5637] (syz-executor,5637,0):ocfs2_sync_local_to_main:1007 ERROR: status = -30 [ 135.298782][ T5637] (syz-executor,5637,0):ocfs2_shutdown_local_alloc:450 ERROR: status = -30 [ 135.653807][ T5637] ocfs2: Unmounting device (7,0) on (node local) [ 135.754677][ T6203] loop3: detected capacity change from 0 to 8192 [ 135.778056][ T6203] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 135.937020][ T6213] loop2: detected capacity change from 0 to 33792 [ 135.965235][ T6213] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 135.988900][ T6213] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 135.989034][ T6213] System zones: 0-1, 3-36 [ 136.055393][ T6213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.055569][ T6214] loop1: detected capacity change from 0 to 33280 [ 136.120322][ T6214] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.93: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 136.120512][ T6214] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 136.140498][ T6214] EXT4-fs error (device loop1): ext4_orphan_get:1407: comm syz.1.93: couldn't read orphan inode 11 (err -117) [ 136.140617][ T6214] loop1: lost filesystem error report for type 5 error -117 [ 136.140818][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 136.140849][ C1] EXT4-fs (loop1): initial error at time 1794492512: ext4_ext_check_inode:521: inode 11 [ 136.140902][ C1] EXT4-fs (loop1): last error at time 1794492512: ext4_orphan_get:1407 [ 136.167168][ T6214] EXT4-fs (loop1): 1 truncate cleaned up [ 136.176926][ T6214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.392362][ T6213] EXT4-fs (loop2): shut down requested (1) [ 136.398845][ T6213] fscrypt (loop2, inode 18): Error -5 getting encryption context [ 136.464168][ T31] audit: type=1326 audit(1794492512.855:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.5.97" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9a9a94d9 code=0x7ffc0000 [ 136.467455][ T31] audit: type=1326 audit(1794492512.855:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.5.97" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9a9a94d9 code=0x7ffc0000 [ 136.467535][ T31] audit: type=1326 audit(1794492512.855:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.5.97" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9a9a94d9 code=0x7ffc0000 [ 136.467612][ T31] audit: type=1326 audit(1794492512.855:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.5.97" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fed9a9a94d9 code=0x7ffc0000 [ 136.467686][ T31] audit: type=1326 audit(1794492512.855:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.5.97" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9a9a94d9 code=0x7ffc0000 [ 136.467761][ T31] audit: type=1326 audit(1794492512.855:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.5.97" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9a9a94d9 code=0x7ffc0000 [ 136.495430][ T6218] syz_tun: entered allmulticast mode [ 136.643136][ T6224] loop4: detected capacity change from 0 to 32896 [ 136.677469][ T5639] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.708907][ T6224] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.725901][ T6224] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 136.779668][ T6218] syz_tun: left allmulticast mode [ 136.810103][ T5641] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.880848][ T5763] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 136.920887][ T6228] FAULT_INJECTION: forcing a failure. [ 136.920887][ T6228] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 136.920939][ T6228] CPU: 0 UID: 0 PID: 6228 Comm: syz.1.98 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.920997][ T6228] Tainted: [L]=SOFTLOCKUP [ 136.921012][ T6228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 136.921038][ T6228] Call Trace: [ 136.921058][ T6228] [ 136.921074][ T6228] dump_stack_lvl+0x100/0x190 [ 136.921144][ T6228] should_fail_ex.cold+0x5/0xa [ 136.921204][ T6228] should_fail_alloc_page+0xeb/0x140 [ 136.921274][ T6228] prepare_alloc_pages+0x1f0/0x5b0 [ 136.921347][ T6228] __alloc_frozen_pages_noprof+0x1b9/0x31e0 [ 136.921404][ T6228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.921456][ T6228] ? stack_trace_save+0x8e/0xc0 [ 136.921511][ T6228] ? __pfx_stack_trace_save+0x10/0x10 [ 136.921562][ T6228] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 136.921620][ T6228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.921669][ T6228] ? stack_depot_save_flags+0x27/0xa10 [ 136.921734][ T6228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.921783][ T6228] ? kasan_save_stack+0x3f/0x50 [ 136.921841][ T6228] ? kasan_save_stack+0x30/0x50 [ 136.921900][ T6228] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 136.921950][ T6228] ? dm_kcopyd_client_create+0x4d0/0xad0 [ 136.922012][ T6228] ? dm_table_add_target+0x58b/0xee0 [ 136.922076][ T6228] ? ctl_ioctl+0x4d2/0xcc0 [ 136.922117][ T6228] ? dm_ctl_ioctl+0x22/0x30 [ 136.922159][ T6228] ? __x64_sys_ioctl+0x18e/0x210 [ 136.922215][ T6228] ? do_syscall_64+0x123/0x7b0 [ 136.922273][ T6228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.922355][ T6228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.922404][ T6228] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 136.922472][ T6228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.922521][ T6228] ? policy_nodemask+0xed/0x5e0 [ 136.922567][ T6228] alloc_pages_mpol+0x201/0x560 [ 136.922611][ T6228] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 136.922653][ T6228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.922702][ T6228] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 136.922759][ T6228] alloc_pages_noprof+0x1a/0x160 [ 136.922808][ T6228] dm_kcopyd_client_create+0x4ed/0xad0 [ 136.922882][ T6228] writecache_ctr+0x27cd/0x4e20 [ 136.922965][ T6228] ? __pfx_writecache_ctr+0x10/0x10 [ 136.923035][ T6228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.923092][ T6228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.923141][ T6228] ? skip_spaces+0xee/0x130 [ 136.923181][ T6228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.923230][ T6228] ? dm_split_args+0x3a1/0x4e0 [ 136.923302][ T6228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.923351][ T6228] ? get_target_type+0x102/0x140 [ 136.923421][ T6228] dm_table_add_target+0x58b/0xee0 [ 136.923488][ T6228] ? __pfx_dm_table_add_target+0x10/0x10 [ 136.923549][ T6228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.923601][ T6228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.923649][ T6228] ? dm_table_create+0x2d3/0x3d0 [ 136.923713][ T6228] table_load+0x3b9/0x7b0 [ 136.923773][ T6228] ? __pfx_table_load+0x10/0x10 [ 136.923820][ T6228] ? __might_fault+0xc5/0x140 [ 136.923858][ T6228] ? __might_fault+0xc5/0x140 [ 136.923915][ T6228] ctl_ioctl+0x4d2/0xcc0 [ 136.923959][ T6228] ? __pfx_table_load+0x10/0x10 [ 136.924011][ T6228] ? __pfx_ctl_ioctl+0x10/0x10 [ 136.924108][ T6228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.924158][ T6228] ? __fget_files+0x21f/0x3d0 [ 136.924209][ T6228] dm_ctl_ioctl+0x22/0x30 [ 136.924251][ T6228] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 136.924296][ T6228] __x64_sys_ioctl+0x18e/0x210 [ 136.924360][ T6228] do_syscall_64+0x123/0x7b0 [ 136.924426][ T6228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.924468][ T6228] RIP: 0033:0x7f7f699a94d9 [ 136.924499][ T6228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.924538][ T6228] RSP: 002b:00007f7f6a94f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.924577][ T6228] RAX: ffffffffffffffda RBX: 00007f7f69c25fa0 RCX: 00007f7f699a94d9 [ 136.924605][ T6228] RDX: 0000200000000480 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 136.924632][ T6228] RBP: 00007f7f69a3804e R08: 0000000000000000 R09: 0000000000000000 [ 136.924658][ T6228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.924683][ T6228] R13: 00007f7f69c26038 R14: 00007f7f69c25fa0 R15: 00007fff27d97648 [ 136.924737][ T6228] [ 136.977491][ T6228] device-mapper: table: 248:0: writecache: Unable to allocate dm-kcopyd client (-ENOMEM) [ 136.977523][ T6228] device-mapper: ioctl: error adding target to table [ 137.048495][ T5763] usb 6-1: New USB device found: idVendor=05ac, idProduct=0264, bcdDevice=e3.24 [ 137.063068][ T5763] usb 6-1: config 11 has an invalid interface number: 108 but max is 0 [ 137.063109][ T5763] usb 6-1: config 11 has no interface number 0 [ 137.063153][ T5763] usb 6-1: config 11 interface 108 has no altsetting 0 [ 137.122744][ T5763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.122778][ T5763] usb 6-1: Product: syz [ 137.122803][ T5763] usb 6-1: Manufacturer: syz [ 137.122828][ T5763] usb 6-1: SerialNumber: syz [ 137.673198][ T6243] FAULT_INJECTION: forcing a failure. [ 137.673198][ T6243] name failslab, interval 1, probability 0, space 0, times 0 [ 137.673245][ T6243] CPU: 1 UID: 0 PID: 6243 Comm: syz.1.101 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.673306][ T6243] Tainted: [L]=SOFTLOCKUP [ 137.673322][ T6243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 137.673347][ T6243] Call Trace: [ 137.673360][ T6243] [ 137.673376][ T6243] dump_stack_lvl+0x100/0x190 [ 137.673446][ T6243] should_fail_ex.cold+0x5/0xa [ 137.673507][ T6243] should_failslab+0xc2/0x120 [ 137.673581][ T6243] __kmalloc_cache_noprof+0x91/0x6d0 [ 137.673629][ T6243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.673682][ T6243] ? assoc_array_insert+0x10b/0x32c0 [ 137.673737][ T6243] assoc_array_insert+0x10b/0x32c0 [ 137.673779][ T6243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.673829][ T6243] ? __mutex_lock+0x267/0x1c10 [ 137.673893][ T6243] ? __key_link_lock+0x92/0xb0 [ 137.673945][ T6243] ? __pfx___mutex_lock+0x10/0x10 [ 137.674006][ T6243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.674062][ T6243] ? __pfx_assoc_array_insert+0x10/0x10 [ 137.674115][ T6243] ? down_write+0x141/0x1f0 [ 137.674152][ T6243] ? __pfx_down_write+0x10/0x10 [ 137.674189][ T6243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.674250][ T6243] __key_link_begin+0xf5/0x250 [ 137.674294][ T6243] key_instantiate_and_link+0x201/0x4b0 [ 137.674364][ T6243] ? __pfx_key_instantiate_and_link+0x10/0x10 [ 137.674430][ T6243] ? keyctl_get_persistent+0x4b4/0x860 [ 137.674511][ T6243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.674579][ T6243] keyring_alloc+0x7a/0xc0 [ 137.674650][ T6243] keyctl_get_persistent+0x694/0x860 [ 137.674725][ T6243] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 137.674801][ T6243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.674852][ T6243] ? __x64_sys_futex+0x358/0x4d0 [ 137.674905][ T6243] ? xfd_validate_state+0x129/0x190 [ 137.674968][ T6243] __do_sys_keyctl+0x3b2/0x5a0 [ 137.675023][ T6243] do_syscall_64+0x123/0x7b0 [ 137.675090][ T6243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.675133][ T6243] RIP: 0033:0x7f7f699a94d9 [ 137.675165][ T6243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.675205][ T6243] RSP: 002b:00007f7f6a94f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 137.675243][ T6243] RAX: ffffffffffffffda RBX: 00007f7f69c25fa0 RCX: 00007f7f699a94d9 [ 137.675273][ T6243] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 137.675301][ T6243] RBP: 00007f7f69a3804e R08: 0000000000000000 R09: 0000000000000000 [ 137.675328][ T6243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.675353][ T6243] R13: 00007f7f69c26038 R14: 00007f7f69c25fa0 R15: 00007fff27d97648 [ 137.675409][ T6243] [ 137.680556][ T5642] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.798315][ T5763] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:11.108/input/input6 [ 137.856167][ T4983] bcm5974 6-1:11.108: could not read from device [ 137.940607][ T4983] bcm5974 6-1:11.108: could not read from device [ 138.007169][ T4983] bcm5974 6-1:11.108: could not read from device [ 138.094814][ T5763] usb 6-1: USB disconnect, device number 2 [ 138.105965][ T4983] bcm5974 6-1:11.108: could not read from device [ 138.375255][ T6249] loop4: detected capacity change from 0 to 16 [ 138.433210][ T6249] erofs (device loop4): mounted with root inode @ nid 36. [ 138.514089][ T6253] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 138.676285][ C1] net_ratelimit: 212 callbacks suppressed [ 139.603163][ T5867] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 139.758571][ T5867] usb 5-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 139.767991][ T5867] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 139.768039][ T5867] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 139.768084][ T5867] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 139.768131][ T5867] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 139.768230][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.784453][ T6263] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 139.784734][ T6263] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 139.819895][ T5867] pl2303 5-1:1.0: pl2303 converter detected [ 139.876700][ T6275] loop0: detected capacity change from 0 to 256 [ 139.904848][ T6275] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1f3a413c, utbl_chksum : 0xe619d30d) [ 139.958813][ T5867] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [8484]: -110 [ 139.960564][ T5867] pl2303 5-1:1.0: pl2303_vendor_write - failed to write [0404]: -32 [ 139.967397][ T5867] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [8484]: -32 [ 139.967991][ T5867] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [8383]: -32 [ 139.968568][ T5867] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [8484]: -32 [ 139.970219][ T5867] pl2303 5-1:1.0: pl2303_vendor_write - failed to write [0404]: -32 [ 139.973876][ T5867] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [8484]: -32 [ 139.974549][ T5867] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [8383]: -32 [ 139.976149][ T5867] pl2303 5-1:1.0: pl2303_vendor_write - failed to write [0000]: -32 [ 139.980586][ T5867] pl2303 5-1:1.0: pl2303_vendor_write - failed to write [0001]: -32 [ 139.981693][ T5867] pl2303 5-1:1.0: pl2303_vendor_write - failed to write [0002]: -32 [ 140.043822][ T5867] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 140.285676][ T5867] usb 5-1: USB disconnect, device number 2 [ 140.418956][ T5867] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 140.437261][ T5867] pl2303 5-1:1.0: device disconnected [ 140.693605][ T6299] Bluetooth: MGMT ver 1.23 [ 140.717753][ T6293] Bluetooth: hci0: Opcode 0x0c1a failed: -112 [ 140.718729][ T6293] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 140.766960][ T6293] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 140.829437][ T6293] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.830164][ T6293] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 140.869614][ T6293] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 140.894075][ T6293] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 140.894273][ T6293] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 140.918512][ T6293] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 140.941991][ T6293] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 140.942189][ T6293] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 140.968402][ T6293] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 140.990114][ T6293] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 140.990303][ T6293] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 141.017817][ T6293] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 141.059831][ T6293] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 141.068052][ T6293] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 141.102908][ T6293] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 141.244790][ T6311] netlink: 24 bytes leftover after parsing attributes in process `syz.4.125'. [ 141.258374][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'. [ 141.258404][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'. [ 141.746979][ T6325] loop2: detected capacity change from 0 to 128 [ 141.941074][ T5763] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 141.944177][ T6328] loop5: detected capacity change from 0 to 32896 [ 141.990944][ T6328] EXT4-fs (loop5): Test dummy encryption mode enabled [ 142.017723][ T6328] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.019732][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'. [ 142.053680][ T6328] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 142.092137][ T5763] usb 1-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 142.094349][ T5763] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 142.094403][ T5763] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 142.094457][ T5763] usb 1-1: config 0 interface 0 has no altsetting 0 [ 142.097710][ T5763] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 142.097751][ T5763] usb 1-1: Product: syz [ 142.097780][ T5763] usb 1-1: Manufacturer: syz [ 142.097809][ T5763] usb 1-1: SerialNumber: syz [ 142.171505][ T5763] usb 1-1: config 0 descriptor?? [ 142.172300][ T6323] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 142.218331][ T5763] usb 1-1: selecting invalid altsetting 0 [ 142.318788][ T5638] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.436523][ T6323] usb 1-1: BOGUS urb xfer, pipe 0 != type 1 [ 142.751171][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.751981][ T5653] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 142.832704][ T5653] Bluetooth: hci1: command 0x0c1a tx timeout [ 142.911124][ T5653] Bluetooth: hci2: command 0x0c1a tx timeout [ 142.921318][ T5867] usb 1-1: USB disconnect, device number 4 [ 142.929578][ T6323] usb 1-1: cannot submit urb 0, error -19: no device [ 142.993640][ T53] Bluetooth: hci4: command 0x0c1a tx timeout [ 142.993827][ T5653] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.071078][ T5653] Bluetooth: hci5: command 0x0c1a tx timeout [ 143.206052][ T31] kauditd_printk_skb: 67 callbacks suppressed [ 143.206081][ T31] audit: type=1800 audit(1794492519.595:81): pid=6342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.136" name="file1" dev="overlay" ino=143 res=0 errno=-22 [ 143.356938][ T6344] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 143.357008][ T6344] overlayfs: failed to set xattr on upper [ 143.357022][ T6344] overlayfs: ...falling back to redirect_dir=nofollow. [ 143.357038][ T6344] overlayfs: ...falling back to index=off. [ 143.357052][ T6344] overlayfs: ...falling back to uuid=null. [ 143.710852][ C1] net_ratelimit: 201 callbacks suppressed [ 143.992794][ T5649] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 144.516074][ T5649] usb 3-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 144.557745][ T5649] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.557804][ T5649] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 144.557844][ T5649] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 144.557886][ T5649] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.557982][ T5649] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.841189][ T5653] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.911413][ T5653] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.991425][ T5653] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.072761][ T53] Bluetooth: hci4: command 0x0c1a tx timeout [ 145.073019][ T5653] Bluetooth: hci3: command 0x0c1a tx timeout [ 145.150914][ T5653] Bluetooth: hci5: command 0x0c1a tx timeout [ 145.158786][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.145'. [ 145.158844][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.145'. [ 145.194144][ T985] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 145.249318][ T6367] syz.1.147 uses obsolete (PF_INET,SOCK_PACKET) [ 145.352462][ T985] usb 6-1: unable to get BOS descriptor or descriptor too short [ 145.352522][ T985] usb 6-1: New USB device found: idVendor=2833, idProduct=0201, bcdDevice=58.a6 [ 145.358002][ T985] usb 6-1: config 4 has an invalid interface number: 86 but max is 0 [ 145.358042][ T985] usb 6-1: config 4 has no interface number 0 [ 145.358155][ T985] usb 6-1: config 4 interface 86 has no altsetting 0 [ 145.373795][ T985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.373828][ T985] usb 6-1: Product: syz [ 145.373854][ T985] usb 6-1: Manufacturer: syz [ 145.373906][ T985] usb 6-1: SerialNumber: syz [ 145.702358][ T985] uvcvideo 6-1:4.86: Found multiple Units with ID 1 [ 145.706991][ T985] uvcvideo 6-1:4.86: Found UVC 0.00 device syz (2833:0201) [ 145.707077][ T985] uvcvideo 6-1:4.86: No valid video chain found. [ 145.707276][ T6347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.710373][ T6347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.722004][ T985] usb 6-1: USB disconnect, device number 3 [ 145.789139][ T6373] loop3: detected capacity change from 0 to 128 [ 146.034576][ T5649] gud 3-1:1.0: USB-1: Failed to add TV modes (ret=-5) [ 146.034635][ T5649] gud 3-1:1.0: USB-1: Failed to add properties (ret=-5) [ 146.034706][ T5649] gud 3-1:1.0: Failed to get connectors (error=-5) [ 146.034741][ T5649] gud 3-1:1.0: probe with driver gud failed with error -5 [ 146.230466][ T6374] loop4: detected capacity change from 0 to 49152 [ 146.325742][ T6374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w with ordered data mode. Quota mode: none. [ 146.344743][ T5649] usb 3-1: USB disconnect, device number 4 [ 146.627126][ T5642] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.921092][ T5653] Bluetooth: hci0: command 0x0c1a tx timeout [ 147.001871][ T5653] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.082194][ T5653] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.162573][ T53] Bluetooth: hci4: command 0x0c1a tx timeout [ 147.165935][ T5653] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.220031][ T6386] loop0: detected capacity change from 0 to 33280 [ 147.231358][ T5653] Bluetooth: hci5: command 0x0c1a tx timeout [ 147.470854][ T6386] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 147.519695][ T6386] EXT4-fs (loop0): couldn't read superblock of external journal [ 148.746767][ T6425] loop5: detected capacity change from 0 to 33792 [ 148.849360][ T6425] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 148.849494][ T6425] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.990870][ C1] net_ratelimit: 384 callbacks suppressed [ 148.991279][ T5653] Bluetooth: hci0: command 0x0c1a tx timeout [ 149.223127][ T31] audit: type=1800 audit(1794492525.615:82): pid=6425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.160" name="file1" dev="loop5" ino=15 res=0 errno=-22 [ 149.242126][ T31] audit: type=1800 audit(1794492525.635:83): pid=6425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.160" name="file1" dev="loop5" ino=15 res=0 errno=-22 [ 149.420364][ T6437] EXT4-fs error (device loop5): ext4_map_blocks:946: inode #15: comm syz.5.160: lblock 0 mapped to illegal pblock 0 (length 1) [ 149.443523][ T6437] EXT4-fs (loop5): Remounting filesystem read-only [ 150.438097][ T5638] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 150.507851][ T6443] bridge_slave_0: left allmulticast mode [ 150.507882][ T6443] bridge_slave_0: left promiscuous mode [ 150.510023][ T6443] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.740277][ T6443] bridge_slave_1: left allmulticast mode [ 150.740307][ T6443] bridge_slave_1: left promiscuous mode [ 150.753490][ T6443] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.864165][ T6443] bond0: (slave bond_slave_0): Releasing backup interface [ 150.927538][ T6443] bond0: (slave bond_slave_1): Releasing backup interface [ 151.023713][ T6443] team0: Port device team_slave_0 removed [ 151.085454][ T6443] team0: Port device team_slave_1 removed [ 151.095750][ T6443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.095780][ T6443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.128826][ T6443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.128852][ T6443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.156355][ T6444] bridge0: port 1(syz_tun) entered blocking state [ 151.156640][ T6444] bridge0: port 1(syz_tun) entered disabled state [ 151.156871][ T6444] syz_tun: entered allmulticast mode [ 151.202812][ T6444] syz_tun: entered promiscuous mode [ 151.220345][ T6444] bridge0: port 1(syz_tun) entered blocking state [ 151.220445][ T6444] bridge0: port 1(syz_tun) entered forwarding state [ 152.350371][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.174'. [ 152.771017][ T6464] vlan0: entered allmulticast mode [ 152.771043][ T6464] bridge1: entered allmulticast mode [ 152.876420][ T6471] jffs2: notice: (6471) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 152.914646][ T6474] batman_adv: batadv0: Adding interface: veth0 [ 152.914665][ T6474] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.914713][ T6474] batman_adv: batadv0: Interface activated: veth0 [ 153.082322][ T6474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.082354][ T6474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.088334][ T31] audit: type=1800 audit(1794492529.475:84): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.176" name="sda" dev="sda1" ino=2052 res=0 errno=-22 [ 153.495431][ T6474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.495456][ T6474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.502005][ T6474] batman_adv: batadv0: Interface deactivated: veth0 [ 153.502026][ T6474] batman_adv: batadv0: Removing interface: veth0 [ 153.765731][ T31] audit: type=1326 audit(1794492530.155:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.2.181" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde447a94d9 code=0x0 [ 154.190861][ C1] net_ratelimit: 76 callbacks suppressed [ 154.412723][ T6501] loop1: detected capacity change from 0 to 33280 [ 154.430521][ T6499] FAULT_INJECTION: forcing a failure. [ 154.430521][ T6499] name failslab, interval 1, probability 0, space 0, times 0 [ 154.430571][ T6499] CPU: 0 UID: 0 PID: 6499 Comm: syz.3.185 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.430636][ T6499] Tainted: [L]=SOFTLOCKUP [ 154.430652][ T6499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 154.430678][ T6499] Call Trace: [ 154.430692][ T6499] [ 154.430708][ T6499] dump_stack_lvl+0x100/0x190 [ 154.430783][ T6499] should_fail_ex.cold+0x5/0xa [ 154.430860][ T6499] should_failslab+0xc2/0x120 [ 154.430928][ T6499] __kmalloc_cache_noprof+0x91/0x6d0 [ 154.430979][ T6499] ? __io_uring_add_tctx_node+0x183/0x4c0 [ 154.431045][ T6499] __io_uring_add_tctx_node+0x183/0x4c0 [ 154.431097][ T6499] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.431157][ T6499] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 154.431213][ T6499] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.431265][ T6499] ? __fget_files+0x21f/0x3d0 [ 154.431319][ T6499] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 154.431381][ T6499] __do_sys_io_uring_enter+0x1626/0x1b10 [ 154.431454][ T6499] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 154.431527][ T6499] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 154.431600][ T6499] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.431653][ T6499] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.431704][ T6499] ? __x64_sys_futex+0x358/0x4d0 [ 154.431754][ T6499] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.431807][ T6499] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.431858][ T6499] ? xfd_validate_state+0x129/0x190 [ 154.431919][ T6499] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.431971][ T6499] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.432030][ T6499] do_syscall_64+0x123/0x7b0 [ 154.432098][ T6499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.432143][ T6499] RIP: 0033:0x7f1e1bba94d9 [ 154.432176][ T6499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.432217][ T6499] RSP: 002b:00007f1e1ca44028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 154.432258][ T6499] RAX: ffffffffffffffda RBX: 00007f1e1be26090 RCX: 00007f1e1bba94d9 [ 154.432288][ T6499] RDX: 000000000000e93c RSI: 0000000000005148 RDI: 0000000000000003 [ 154.432315][ T6499] RBP: 00007f1e1bc3804e R08: 0000000000000000 R09: 0000000000000000 [ 154.432342][ T6499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.432369][ T6499] R13: 00007f1e1be26128 R14: 00007f1e1be26090 R15: 00007ffc0008e248 [ 154.432425][ T6499] [ 154.739623][ T6501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.739789][ T6501] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 154.874166][ T5763] ipvlan_process_outbound: 1 callbacks suppressed [ 155.004608][ T6501] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 155.070666][ T6501] EXT4-fs error (device loop1): ext4_readdir:278: inode #2: block 3: comm syz.1.187: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 155.146807][ T6501] EXT4-fs error (device loop1): ext4_readdir:278: inode #2: block 12: comm syz.1.187: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=19792, size=2048 fake=0 [ 155.161832][ T6501] EXT4-fs error (device loop1): ext4_readdir:278: inode #2: block 13: comm syz.1.187: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 156.420378][ T5639] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.853078][ T11] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 157.012888][ T11] usb 5-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 157.014636][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.015656][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.062888][ T11] usb 5-1: config 0 descriptor?? [ 157.332711][ T11] usbhid 5-1:0.0: can't add hid device: -71 [ 157.332852][ T11] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 157.360415][ T11] usb 5-1: USB disconnect, device number 3 [ 157.926186][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 158.061281][ T6523] loop0: detected capacity change from 0 to 32768 [ 158.081903][ T10] usb 5-1: New USB device found: idVendor=0458, idProduct=5003, bcdDevice=0.40 [ 158.085804][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.085879][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.127584][ T10] usb 5-1: config 0 descriptor?? [ 158.215632][ T6530] loop1: detected capacity change from 0 to 32768 [ 158.263181][ T6530] JBD2: Ignoring recovery information on journal [ 158.476295][ T6530] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 158.522174][ T985] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 158.687122][ T985] usb 4-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 158.688848][ T985] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 158.688887][ T985] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 158.688925][ T985] usb 4-1: config 0 interface 0 has no altsetting 0 [ 158.715123][ T985] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 158.715160][ T985] usb 4-1: Product: syz [ 158.715188][ T985] usb 4-1: Manufacturer: syz [ 158.715216][ T985] usb 4-1: SerialNumber: syz [ 158.729070][ T985] usb 4-1: config 0 descriptor?? [ 158.730601][ T6533] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 158.791639][ T985] usb 4-1: selecting invalid altsetting 0 [ 158.977076][ T31] audit: type=1804 audit(1794492535.365:86): pid=6537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.196" name="/newroot/37/bus/file1" dev="loop1" ino=17059 res=1 errno=0 [ 159.004705][ T10] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 159.046825][ T10] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7 [ 159.390864][ C1] net_ratelimit: 247 callbacks suppressed [ 159.471809][ T10] usb 4-1: USB disconnect, device number 4 [ 159.505979][ T6533] usb 4-1: cannot submit urb 0, error -19: no device [ 159.523265][ T5805] usb 5-1: USB disconnect, device number 4 [ 159.523397][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 159.572545][ T6533] usb 4-1: cannot submit urb 0, error -19: no device [ 159.573303][ T6533] usb 4-1: cannot submit urb 0, error -19: no device [ 159.574034][ T6533] usb 4-1: cannot submit urb 0, error -19: no device [ 159.593160][ T6533] usb 4-1: cannot submit urb 0, error -19: no device [ 159.593848][ T6533] usb 4-1: cannot submit urb 0, error -19: no device [ 159.594557][ T6533] usb 4-1: cannot submit urb 0, error -19: no device [ 159.621605][ T6533] usb 4-1: cannot submit urb 0, error -19: no device [ 159.622253][ T6533] usb 4-1: cannot submit urb 0, error -19: no device [ 159.808781][ T5639] OCFS2: ERROR (device loop1): ocfs2_validate_gd_self: Group descriptor #0 has bad signature  [ 159.826260][ T5639] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 159.826282][ T5639] OCFS2: File system is now read-only. [ 159.826299][ T5639] (syz-executor,5639,0):_ocfs2_free_suballoc_bits:3068 ERROR: status = -30 [ 159.826345][ T5639] (syz-executor,5639,0):_ocfs2_free_clusters:3193 ERROR: status = -30 [ 159.826388][ T5639] (syz-executor,5639,0):ocfs2_sync_local_to_main:994 ERROR: status = -30 [ 159.826431][ T5639] (syz-executor,5639,0):ocfs2_sync_local_to_main:1007 ERROR: status = -30 [ 159.826474][ T5639] (syz-executor,5639,0):ocfs2_shutdown_local_alloc:450 ERROR: status = -30 [ 160.047127][ T5639] ocfs2: Unmounting device (7,1) on (node local) [ 160.431298][ C1] ipvlan_process_outbound: 3 callbacks suppressed [ 160.600111][ T6548] loop1: detected capacity change from 0 to 32896 [ 160.645646][ T6548] EXT4-fs (loop1): Test dummy encryption mode enabled [ 160.679054][ T6548] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.682255][ T6548] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 161.002451][ T5639] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.953607][ T6569] loop1: detected capacity change from 0 to 49152 [ 162.025298][ T6569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w with ordered data mode. Quota mode: none. [ 163.615756][ T5639] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.773234][ T6589] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 163.773956][ T6589] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 163.774663][ T6589] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 163.778656][ T6589] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 163.780552][ T6589] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 163.869934][ T6592] loop5: detected capacity change from 0 to 16 [ 163.914752][ T6592] erofs (device loop5): mounted with root inode @ nid 36. [ 164.431032][ C1] net_ratelimit: 157 callbacks suppressed [ 165.355741][ T6601] loop2: detected capacity change from 0 to 32768 [ 165.479195][ T6601] JBD2: Ignoring recovery information on journal [ 165.707848][ T6601] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 165.711430][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 165.791212][ T5653] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 165.793107][ T5653] Bluetooth: hci5: command 0x0c1a tx timeout [ 165.793173][ T5653] Bluetooth: hci3: command 0x0c1a tx timeout [ 165.793234][ T5653] Bluetooth: hci4: command 0x0c1a tx timeout [ 165.793295][ T5653] Bluetooth: hci2: command 0x0c1a tx timeout [ 165.793357][ T5653] Bluetooth: hci0: command 0x0c1a tx timeout [ 166.281216][ T31] audit: type=1804 audit(1794492542.675:87): pid=6634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.213" name="/newroot/30/bus/file1" dev="loop2" ino=17059 res=1 errno=0 [ 166.375604][ T31] audit: type=1800 audit(1794492542.765:88): pid=6638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.224" name="sda" dev="sda1" ino=2052 res=0 errno=-22 [ 166.610089][ T5641] OCFS2: ERROR (device loop2): ocfs2_validate_gd_self: Group descriptor #0 has bad signature  [ 166.610134][ T5641] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 166.610153][ T5641] OCFS2: File system is now read-only. [ 166.610171][ T5641] (syz-executor,5641,1):_ocfs2_free_suballoc_bits:3068 ERROR: status = -30 [ 166.610216][ T5641] (syz-executor,5641,1):_ocfs2_free_clusters:3193 ERROR: status = -30 [ 166.610259][ T5641] (syz-executor,5641,1):ocfs2_sync_local_to_main:994 ERROR: status = -30 [ 166.610302][ T5641] (syz-executor,5641,1):ocfs2_sync_local_to_main:1007 ERROR: status = -30 [ 166.610345][ T5641] (syz-executor,5641,1):ocfs2_shutdown_local_alloc:450 ERROR: status = -30 [ 166.776241][ T5641] ocfs2: Unmounting device (7,2) on (node local) [ 169.470825][ C1] net_ratelimit: 185 callbacks suppressed [ 169.759598][ T6654] loop2: detected capacity change from 0 to 16 [ 169.802464][ T6654] erofs (device loop2): mounted with root inode @ nid 36. [ 170.022450][ T6661] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 170.024943][ T6661] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 170.027453][ T6661] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 170.030172][ T6661] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 170.050089][ T6661] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 170.245917][ T6666] FAULT_INJECTION: forcing a failure. [ 170.245917][ T6666] name failslab, interval 1, probability 0, space 0, times 0 [ 170.245964][ T6666] CPU: 1 UID: 0 PID: 6666 Comm: syz.2.236 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.246017][ T6666] Tainted: [L]=SOFTLOCKUP [ 170.246032][ T6666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 170.246056][ T6666] Call Trace: [ 170.246069][ T6666] [ 170.246084][ T6666] dump_stack_lvl+0x100/0x190 [ 170.246156][ T6666] should_fail_ex.cold+0x5/0xa [ 170.246213][ T6666] should_failslab+0xc2/0x120 [ 170.246277][ T6666] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 170.246336][ T6666] ? dyn_event_create+0x29/0x90 [ 170.246390][ T6666] ? argv_split+0x35/0x430 [ 170.246458][ T6666] kstrndup+0x64/0x120 [ 170.246520][ T6666] ? __pfx___trace_uprobe_create+0x10/0x10 [ 170.246566][ T6666] argv_split+0x35/0x430 [ 170.246628][ T6666] ? __pfx___trace_uprobe_create+0x10/0x10 [ 170.246679][ T6666] trace_probe_create+0x7d/0x100 [ 170.246719][ T6666] ? __pfx_trace_probe_create+0x10/0x10 [ 170.246770][ T6666] dyn_event_create+0x50/0x90 [ 170.246823][ T6666] create_or_delete_trace_uprobe+0x5a/0xb0 [ 170.246867][ T6666] trace_parse_run_command+0x1ab/0x3b0 [ 170.246929][ T6666] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 170.246982][ T6666] vfs_write+0x2aa/0x1040 [ 170.247040][ T6666] ? __pfx_probes_write+0x10/0x10 [ 170.247080][ T6666] ? lock_acquire+0x1d1/0x380 [ 170.247137][ T6666] ? __fget_files+0x34/0x3d0 [ 170.247176][ T6666] ? __pfx_vfs_write+0x10/0x10 [ 170.247229][ T6666] ? find_held_lock+0x2b/0x80 [ 170.247268][ T6666] ? __fget_files+0x215/0x3d0 [ 170.247314][ T6666] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.247361][ T6666] ? __fget_files+0x21f/0x3d0 [ 170.247413][ T6666] ksys_write+0x12a/0x250 [ 170.247469][ T6666] ? __pfx_ksys_write+0x10/0x10 [ 170.247530][ T6666] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.247586][ T6666] do_syscall_64+0x123/0x7b0 [ 170.247650][ T6666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.247690][ T6666] RIP: 0033:0x7fde447a94d9 [ 170.247720][ T6666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.247758][ T6666] RSP: 002b:00007fde456af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 170.247794][ T6666] RAX: ffffffffffffffda RBX: 00007fde44a25fa0 RCX: 00007fde447a94d9 [ 170.247821][ T6666] RDX: 0000000000000001 RSI: 0000200000000f80 RDI: 0000000000000003 [ 170.247845][ T6666] RBP: 00007fde4483804e R08: 0000000000000000 R09: 0000000000000000 [ 170.247870][ T6666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.247894][ T6666] R13: 00007fde44a26038 R14: 00007fde44a25fa0 R15: 00007ffd390bf1f8 [ 170.247946][ T6666] [ 170.711386][ T6670] FAULT_INJECTION: forcing a failure. [ 170.711386][ T6670] name failslab, interval 1, probability 0, space 0, times 0 [ 170.711438][ T6670] CPU: 0 UID: 0 PID: 6670 Comm: syz.3.235 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.711498][ T6670] Tainted: [L]=SOFTLOCKUP [ 170.711515][ T6670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 170.711541][ T6670] Call Trace: [ 170.711555][ T6670] [ 170.711572][ T6670] dump_stack_lvl+0x100/0x190 [ 170.711650][ T6670] should_fail_ex.cold+0x5/0xa [ 170.711714][ T6670] should_failslab+0xc2/0x120 [ 170.711786][ T6670] __kmalloc_cache_noprof+0x91/0x6d0 [ 170.711836][ T6670] ? cuse_channel_open+0x65/0x8f0 [ 170.711912][ T6670] cuse_channel_open+0x65/0x8f0 [ 170.711977][ T6670] ? __pfx_cuse_channel_open+0x10/0x10 [ 170.712046][ T6670] misc_open+0x26d/0x450 [ 170.712094][ T6670] ? __pfx_misc_open+0x10/0x10 [ 170.712140][ T6670] chrdev_open+0x234/0x6a0 [ 170.712184][ T6670] ? __pfx_chrdev_open+0x10/0x10 [ 170.712231][ T6670] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.712282][ T6670] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 170.712352][ T6670] do_dentry_open+0x674/0x1470 [ 170.712415][ T6670] ? __pfx_chrdev_open+0x10/0x10 [ 170.712457][ T6670] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.712515][ T6670] vfs_open_consume+0xcc/0x460 [ 170.712562][ T6670] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.712626][ T6670] path_openat+0x1547/0x23f0 [ 170.712678][ T6670] ? __pfx_path_openat+0x10/0x10 [ 170.712737][ T6670] do_file_open+0x20e/0x430 [ 170.712783][ T6670] ? __pfx_do_file_open+0x10/0x10 [ 170.712863][ T6670] ? _raw_spin_unlock+0x28/0x50 [ 170.712915][ T6670] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.712966][ T6670] ? alloc_fd+0x471/0x7a0 [ 170.713026][ T6670] do_sys_openat2+0x163/0x1d0 [ 170.713075][ T6670] ? __pfx_do_sys_openat2+0x10/0x10 [ 170.713126][ T6670] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.713178][ T6670] ? find_held_lock+0x2b/0x80 [ 170.713218][ T6670] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.713284][ T6670] __x64_sys_openat+0x12d/0x210 [ 170.713338][ T6670] ? __pfx___x64_sys_openat+0x10/0x10 [ 170.713400][ T6670] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.713463][ T6670] do_syscall_64+0x123/0x7b0 [ 170.713532][ T6670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.713577][ T6670] RIP: 0033:0x7f1e1bba94d9 [ 170.713617][ T6670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.713659][ T6670] RSP: 002b:00007f1e1ca67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 170.713700][ T6670] RAX: ffffffffffffffda RBX: 00007f1e1be25fa0 RCX: 00007f1e1bba94d9 [ 170.713730][ T6670] RDX: 0000000000000002 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 170.713758][ T6670] RBP: 00007f1e1bc3804e R08: 0000000000000000 R09: 0000000000000000 [ 170.713786][ T6670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.713813][ T6670] R13: 00007f1e1be26038 R14: 00007f1e1be25fa0 R15: 00007ffc0008e248 [ 170.713869][ T6670] [ 171.206853][ T6680] loop0: detected capacity change from 0 to 4096 [ 171.248933][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 171.287947][ T6683] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.386230][ T31] audit: type=1800 audit(1794492547.775:89): pid=6680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.240" name="file1" dev="loop0" ino=15 res=0 errno=-22 [ 171.398057][ T6671] loop4: detected capacity change from 0 to 33280 [ 171.415183][ T6671] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 171.415537][ T6671] EXT4-fs (loop4): couldn't read superblock of external journal [ 172.030863][ T5653] Bluetooth: hci3: command 0x0c1a tx timeout [ 172.030927][ T5653] Bluetooth: hci4: command 0x0c1a tx timeout [ 172.030984][ T5653] Bluetooth: hci2: command 0x0c1a tx timeout [ 172.031041][ T5653] Bluetooth: hci0: command 0x0c1a tx timeout [ 172.031098][ T5653] Bluetooth: hci1: command 0x0c1a tx timeout [ 172.059601][ T53] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 172.068316][ T31] audit: type=1800 audit(1794492548.455:90): pid=6686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.240" name="file1" dev="loop0" ino=15 res=0 errno=-22 [ 172.110871][ T53] Bluetooth: hci5: command 0x0c1a tx timeout [ 172.227507][ T31] audit: type=1800 audit(1794492548.615:91): pid=6691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.241" name="sda" dev="sda1" ino=2052 res=0 errno=-22 [ 173.180848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 174.490380][ T6709] net_ratelimit: 694 callbacks suppressed [ 174.531205][ T6720] device-mapper: ioctl: device has been removed from the dev hash table. [ 174.837546][ T6725] block device autoloading is deprecated and will be removed. [ 176.934323][ T6768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.269'. [ 177.050921][ T985] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 177.060973][ T6774] futex_wake_op: syz.4.268 tries to shift op by 144; fix this program [ 177.118998][ T6768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.212296][ T985] usb 4-1: unable to get BOS descriptor or descriptor too short [ 177.213093][ T985] usb 4-1: not running at top speed; connect to a high speed hub [ 177.213138][ T985] usb 4-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 177.217049][ T985] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 177.217091][ T985] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 177.217131][ T985] usb 4-1: config 14 has no interface number 0 [ 177.217164][ T985] usb 4-1: config 14 has no interface number 1 [ 177.217245][ T985] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 177.217290][ T985] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 177.217341][ T985] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 177.217392][ T985] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 177.217446][ T985] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 177.217498][ T985] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 177.217562][ T985] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.217623][ T985] usb 4-1: config 14 interface 57 has no altsetting 0 [ 177.217660][ T985] usb 4-1: config 14 interface 228 has no altsetting 0 [ 177.263444][ T985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.263485][ T985] usb 4-1: Product: syz [ 177.263515][ T985] usb 4-1: Manufacturer: syz [ 177.263545][ T985] usb 4-1: SerialNumber: syz [ 177.281082][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.5.273'. [ 177.648121][ T6774] futex_wake_op: syz.4.268 tries to shift op by 144; fix this program [ 177.835860][ T985] legousbtower 4-1:14.57: interrupt endpoints not found [ 178.229366][ T985] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 178.261002][ T985] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 178.451087][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 178.519201][ T6808] overlayfs: upper fs does not support file handles, falling back to index=off. [ 178.551972][ T25] usb 4-1: USB disconnect, device number 5 [ 178.558297][ T6759] usb 4-1: LEGO USB Tower reset control request failed [ 178.604440][ T5786] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 178.621644][ T10] usb 3-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 178.624728][ T10] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 178.624792][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.626507][ T10] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 178.626545][ T10] usb 3-1: Manufacturer: syz [ 178.644819][ T25] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 178.684270][ T10] usb 3-1: config 0 descriptor?? [ 179.153848][ T6815] loop5: detected capacity change from 0 to 32768 [ 179.161013][ T5786] usb 5-1: Using ep0 maxpacket: 8 [ 179.162026][ T5786] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 179.163850][ T5786] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 179.163950][ T5786] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 179.163991][ T5786] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 179.164037][ T5786] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 179.164081][ T5786] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.164186][ T5786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.201079][ T10] rc_core: IR keymap rc-hauppauge not found [ 179.201100][ T10] Registered IR keymap rc-empty [ 179.206077][ T6815] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 179.206102][ T6815] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 179.219020][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 179.223034][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 179.314397][ T10] usb 3-1: USB disconnect, device number 5 [ 179.325358][ T6815] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 179.411821][ T5763] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 179.411844][ T5763] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 179.522533][ T5786] usb 5-1: usb_control_msg returned -32 [ 179.522589][ T5786] usbtmc 5-1:16.0: can't read capabilities [ 179.554331][ T5782] net_ratelimit: 173 callbacks suppressed [ 179.877800][ T11] usb 5-1: USB disconnect, device number 5 [ 179.886360][ T6801] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 179.918020][ T5763] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 506ms [ 179.927332][ T5763] gfs2: fsid=syz:syz.0: jid=0: Done [ 179.928100][ T6815] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 180.021707][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 180.171681][ T25] usb 1-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 180.173460][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.173535][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.177249][ T25] usb 1-1: config 0 descriptor?? [ 180.222856][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 180.290898][ T5805] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 180.441544][ T5805] usb 3-1: Using ep0 maxpacket: 32 [ 180.456961][ T5805] usb 3-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 180.459696][ T5805] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 180.459737][ T5805] usb 3-1: config 0 has no interface number 0 [ 180.459823][ T5805] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 180.459876][ T5805] usb 3-1: config 0 interface 85 has no altsetting 0 [ 180.511464][ T5805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.511537][ T5805] usb 3-1: Product: syz [ 180.511566][ T5805] usb 3-1: Manufacturer: syz [ 180.511594][ T5805] usb 3-1: SerialNumber: syz [ 180.518572][ T5805] usb 3-1: config 0 descriptor?? [ 180.608519][ T25] pwc: recv_control_msg error -32 req 02 val 2b00 [ 180.610360][ T25] pwc: recv_control_msg error -32 req 02 val 2700 [ 180.626079][ T25] pwc: recv_control_msg error -32 req 02 val 2c00 [ 180.628042][ T25] pwc: recv_control_msg error -32 req 04 val 1000 [ 180.629017][ T25] pwc: recv_control_msg error -32 req 04 val 1300 [ 180.630297][ T25] pwc: recv_control_msg error -32 req 04 val 1400 [ 180.722888][ T11] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 180.792240][ T6840] FAULT_INJECTION: forcing a failure. [ 180.792240][ T6840] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 180.792291][ T6840] CPU: 0 UID: 0 PID: 6840 Comm: syz.4.295 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.792348][ T6840] Tainted: [L]=SOFTLOCKUP [ 180.792363][ T6840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 180.792388][ T6840] Call Trace: [ 180.792403][ T6840] [ 180.792418][ T6840] dump_stack_lvl+0x100/0x190 [ 180.792488][ T6840] should_fail_ex.cold+0x5/0xa [ 180.792550][ T6840] should_fail_alloc_page+0xeb/0x140 [ 180.792621][ T6840] prepare_alloc_pages+0x1f0/0x5b0 [ 180.792689][ T6840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.792747][ T6840] __alloc_frozen_pages_noprof+0x1b9/0x31e0 [ 180.792810][ T6840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.792860][ T6840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.792910][ T6840] ? ktime_get+0x1a4/0x320 [ 180.792975][ T6840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.793024][ T6840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.793074][ T6840] ? clockevents_program_event+0x1ef/0x820 [ 180.793142][ T6840] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 180.793202][ T6840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.793251][ T6840] ? __lock_acquire+0x5c0/0x1f40 [ 180.793327][ T6840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.793384][ T6840] ? find_held_lock+0x2b/0x80 [ 180.793425][ T6840] ? page_table_check_set+0x39e/0x630 [ 180.793464][ T6840] ? page_table_check_set+0x39e/0x630 [ 180.793502][ T6840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.793558][ T6840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.793609][ T6840] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 180.793678][ T6840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.793728][ T6840] ? policy_nodemask+0xed/0x5e0 [ 180.793773][ T6840] alloc_pages_mpol+0x201/0x560 [ 180.793817][ T6840] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 180.793858][ T6840] ? __pfx_lru_add+0x10/0x10 [ 180.793925][ T6840] folio_alloc_mpol_noprof+0x36/0x260 [ 180.793978][ T6840] vma_alloc_folio_noprof+0xed/0x1d0 [ 180.794028][ T6840] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 180.794078][ T6840] ? __pfx___might_resched+0x10/0x10 [ 180.794131][ T6840] ? copy_page_range+0x1de0/0x5a00 [ 180.794194][ T6840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.794254][ T6840] copy_page_range+0x4264/0x5a00 [ 180.794377][ T6840] ? __pfx_copy_page_range+0x10/0x10 [ 180.794439][ T6840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.794489][ T6840] ? mas_wr_store_entry+0xa4/0x1d50 [ 180.794551][ T6840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.794601][ T6840] ? mas_store+0x745/0xe20 [ 180.794645][ T6840] ? anon_vma_fork+0x730/0xbd0 [ 180.794702][ T6840] ? __pfx___vma_start_write+0x10/0x10 [ 180.794765][ T6840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.794824][ T6840] dup_mmap+0x1515/0x2180 [ 180.794898][ T6840] ? __pfx_dup_mmap+0x10/0x10 [ 180.794955][ T6840] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 180.795011][ T6840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.795062][ T6840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.795119][ T6840] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 180.795176][ T6840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.795233][ T6840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.795283][ T6840] ? do_raw_spin_lock+0x128/0x260 [ 180.795361][ T6840] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 180.795416][ T6840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.795465][ T6840] ? lockdep_hardirqs_on+0x7d/0x110 [ 180.795527][ T6840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.795578][ T6840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.795628][ T6840] ? __percpu_counter_init_many+0x2c1/0x3b0 [ 180.795685][ T6840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.795736][ T6840] ? mm_init+0xc17/0xeb0 [ 180.795782][ T6840] copy_process+0x7c5c/0x88e0 [ 180.795860][ T6840] ? __pfx_copy_process+0x10/0x10 [ 180.795905][ T6840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.795954][ T6840] ? futex_wake+0x4ea/0x5e0 [ 180.796010][ T6840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.796061][ T6840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.796128][ T6840] kernel_clone+0x176/0x9d0 [ 180.796180][ T6840] ? __pfx_kernel_clone+0x10/0x10 [ 180.796239][ T6840] ? ksys_write+0x190/0x250 [ 180.796303][ T6840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.796360][ T6840] __do_sys_clone+0xd9/0x120 [ 180.796408][ T6840] ? __pfx___do_sys_clone+0x10/0x10 [ 180.796455][ T6840] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 180.796552][ T6840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.796613][ T6840] do_syscall_64+0x123/0x7b0 [ 180.796681][ T6840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.796723][ T6840] RIP: 0033:0x7f38ba3a94d9 [ 180.796754][ T6840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.796795][ T6840] RSP: 002b:00007f38bb18cfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 180.796834][ T6840] RAX: ffffffffffffffda RBX: 00007f38ba625fa0 RCX: 00007f38ba3a94d9 [ 180.796862][ T6840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000021000200 [ 180.796889][ T6840] RBP: 00007f38ba43804e R08: 0000000000000000 R09: 0000000000000000 [ 180.796917][ T6840] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 180.796943][ T6840] R13: 00007f38ba626038 R14: 00007f38ba625fa0 R15: 00007fff12007a48 [ 180.796998][ T6840] [ 180.904703][ T11] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 180.908641][ T11] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 180.908686][ T11] usb 4-1: config 1 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 180.908775][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.912982][ T25] pwc: recv_control_msg error -71 req 02 val 2100 [ 180.919517][ T25] pwc: recv_control_msg error -71 req 04 val 1500 [ 180.926532][ T25] pwc: recv_control_msg error -71 req 02 val 2500 [ 180.948394][ T25] pwc: recv_control_msg error -71 req 02 val 2400 [ 180.954385][ T11] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 180.967412][ T25] pwc: recv_control_msg error -71 req 02 val 2600 [ 181.017044][ T25] pwc: recv_control_msg error -71 req 02 val 2900 [ 181.034025][ T25] pwc: recv_control_msg error -71 req 02 val 2800 [ 181.070629][ T25] pwc: recv_control_msg error -71 req 04 val 1100 [ 181.075716][ T25] pwc: recv_control_msg error -71 req 04 val 1200 [ 181.258856][ T5805] appletouch 3-1:0.85: Geyser mode initialized. [ 181.259580][ T6838] loop3: detected capacity change from 0 to 256 [ 181.329585][ T5805] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input9 [ 181.344140][ T6838] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 181.375376][ T6847] loop5: detected capacity change from 0 to 34816 [ 181.395637][ T6847] EXT4-fs: Ignoring removed nobh option [ 181.472434][ T25] pwc: Registered as video103. [ 181.517068][ T25] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 181.696510][ T31] audit: type=1800 audit(1794492558.085:92): pid=6850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.294" name="file2" dev="loop3" ino=7 res=0 errno=-22 [ 181.732189][ T6847] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.732323][ T6847] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.823176][ T5805] usb 3-1: USB disconnect, device number 6 [ 181.823391][ C1] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 181.831438][ T25] usb 1-1: USB disconnect, device number 5 [ 182.035111][ T5763] usb 4-1: USB disconnect, device number 6 [ 182.180603][ T5805] appletouch 3-1:0.85: input: appletouch disconnected [ 182.262996][ T6847] EXT4-fs (loop5): shut down requested (0) [ 182.514366][ T6866] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 182.539407][ T5638] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.941687][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 183.198075][ T10] usb 1-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00 [ 183.210804][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.210877][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.210967][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.545232][ T6893] FAULT_INJECTION: forcing a failure. [ 184.545232][ T6893] name failslab, interval 1, probability 0, space 0, times 0 [ 184.545278][ T6893] CPU: 1 UID: 0 PID: 6893 Comm: syz.5.311 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.545332][ T6893] Tainted: [L]=SOFTLOCKUP [ 184.545347][ T6893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 184.545370][ T6893] Call Trace: [ 184.545383][ T6893] [ 184.545398][ T6893] dump_stack_lvl+0x100/0x190 [ 184.545464][ T6893] should_fail_ex.cold+0x5/0xa [ 184.545522][ T6893] should_failslab+0xc2/0x120 [ 184.545587][ T6893] __kvmalloc_node_noprof+0x113/0x9b0 [ 184.545646][ T6893] ? sbitmap_init_node+0x1cc/0x720 [ 184.545715][ T6893] sbitmap_init_node+0x1cc/0x720 [ 184.545775][ T6893] ? __kmalloc_cache_node_noprof+0x271/0x710 [ 184.545835][ T6893] sbitmap_queue_init_node+0x40/0x4a0 [ 184.545896][ T6893] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.545950][ T6893] blk_mq_init_tags+0x184/0x300 [ 184.545996][ T6893] blk_mq_alloc_map_and_rqs+0x244/0xe20 [ 184.546079][ T6893] blk_mq_alloc_sched_tags+0x1de/0x350 [ 184.546148][ T6893] blk_mq_alloc_sched_res+0x8e/0x250 [ 184.546209][ T6893] elevator_change+0x136/0x530 [ 184.546255][ T6893] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.546308][ T6893] elv_iosched_store+0x38e/0x440 [ 184.546358][ T6893] ? __pfx_elv_iosched_store+0x10/0x10 [ 184.546405][ T6893] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.546466][ T6893] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 184.546507][ T6893] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.546554][ T6893] ? __pfx_elv_iosched_store+0x10/0x10 [ 184.546605][ T6893] queue_attr_store+0x25f/0x2f0 [ 184.546649][ T6893] ? __pfx_queue_attr_store+0x10/0x10 [ 184.546689][ T6893] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.546735][ T6893] ? __lock_acquire+0x5c0/0x1f40 [ 184.546800][ T6893] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.546845][ T6893] ? lock_acquire+0x1d1/0x380 [ 184.546894][ T6893] ? sysfs_file_kobj+0x21/0x290 [ 184.546939][ T6893] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.546985][ T6893] ? find_held_lock+0x2b/0x80 [ 184.547023][ T6893] ? sysfs_file_kobj+0xe4/0x290 [ 184.547066][ T6893] ? sysfs_file_kobj+0xe4/0x290 [ 184.547108][ T6893] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.547167][ T6893] ? __pfx_queue_attr_store+0x10/0x10 [ 184.547209][ T6893] sysfs_kf_write+0xf2/0x150 [ 184.547258][ T6893] kernfs_fop_write_iter+0x3e0/0x5f0 [ 184.547296][ T6893] ? __pfx_sysfs_kf_write+0x10/0x10 [ 184.547347][ T6893] vfs_write+0x6af/0x1040 [ 184.547405][ T6893] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 184.547450][ T6893] ? __pfx_vfs_write+0x10/0x10 [ 184.547502][ T6893] ? find_held_lock+0x2b/0x80 [ 184.547571][ T6893] ksys_write+0x12a/0x250 [ 184.547626][ T6893] ? __pfx_ksys_write+0x10/0x10 [ 184.547686][ T6893] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.547741][ T6893] do_syscall_64+0x123/0x7b0 [ 184.547804][ T6893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.547845][ T6893] RIP: 0033:0x7fed9a9a94d9 [ 184.547875][ T6893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.547912][ T6893] RSP: 002b:00007fed9b8f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 184.547948][ T6893] RAX: ffffffffffffffda RBX: 00007fed9ac25fa0 RCX: 00007fed9a9a94d9 [ 184.547974][ T6893] RDX: 0000000000000003 RSI: 0000200000000300 RDI: 0000000000000003 [ 184.547998][ T6893] RBP: 00007fed9aa3804e R08: 0000000000000000 R09: 0000000000000000 [ 184.548024][ T6893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.548047][ T6893] R13: 00007fed9ac26038 R14: 00007fed9ac25fa0 R15: 00007ffdda9d25b8 [ 184.548099][ T6893] [ 184.754159][ C1] net_ratelimit: 69 callbacks suppressed [ 185.020562][ T10] usb 1-1: USB disconnect, device number 6 [ 185.378129][ T6912] loop4: detected capacity change from 0 to 33280 [ 185.504690][ T6912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.504817][ T6912] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 185.545751][ T6155] nvmet: connect by host nqn.2014-08.org.nvmexpress:uuid:e56bb53b-49dc-4ec2-b0e4-575c943e420b for subsystem testsubsys not allowed [ 185.554162][ T6897] nvme nvme0: Connect for subsystem testsubsys is not allowed, hostnqn: nqn.2014-08.org.nvmexpress:uuid:e56bb53b-49dc-4ec2-b0e4-575c943e420b [ 185.790402][ T6923] batman_adv: batadv0: Adding interface: veth0 [ 185.790422][ T6923] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.829660][ T6923] batman_adv: batadv0: Interface activated: veth0 [ 185.844123][ T6912] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 185.860941][ T6927] EXT4-fs error (device loop4): ext4_readdir:278: inode #2: block 3: comm syz.4.315: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 185.864071][ T6923] batman_adv: batadv0: Interface deactivated: veth0 [ 185.864096][ T6923] batman_adv: batadv0: Removing interface: veth0 [ 185.865583][ T6927] EXT4-fs error (device loop4): ext4_readdir:278: inode #2: block 12: comm syz.4.315: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=19792, size=2048 fake=0 [ 185.866739][ T6927] EXT4-fs error (device loop4): ext4_readdir:278: inode #2: block 13: comm syz.4.315: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 186.054656][ T5642] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.489677][ T31] audit: type=1326 audit(1794492562.875:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.0.326" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff42dba94d9 code=0x0 [ 186.568491][ T6946] FAULT_INJECTION: forcing a failure. [ 186.568491][ T6946] name failslab, interval 1, probability 0, space 0, times 0 [ 186.568536][ T6946] CPU: 0 UID: 0 PID: 6946 Comm: syz.2.329 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.568588][ T6946] Tainted: [L]=SOFTLOCKUP [ 186.568601][ T6946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 186.568630][ T6946] Call Trace: [ 186.568642][ T6946] [ 186.568657][ T6946] dump_stack_lvl+0x100/0x190 [ 186.568718][ T6946] should_fail_ex.cold+0x5/0xa [ 186.568774][ T6946] should_failslab+0xc2/0x120 [ 186.568835][ T6946] __kvmalloc_node_noprof+0x113/0x9b0 [ 186.568893][ T6946] ? sbitmap_init_node+0x1cc/0x720 [ 186.568961][ T6946] sbitmap_init_node+0x1cc/0x720 [ 186.569025][ T6946] ? __kmalloc_cache_node_noprof+0x271/0x710 [ 186.569086][ T6946] sbitmap_queue_init_node+0x40/0x4a0 [ 186.569147][ T6946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.569201][ T6946] blk_mq_init_tags+0x184/0x300 [ 186.569254][ T6946] blk_mq_alloc_map_and_rqs+0x244/0xe20 [ 186.569357][ T6946] blk_mq_alloc_sched_tags+0x1de/0x350 [ 186.569433][ T6946] blk_mq_alloc_sched_res+0x8e/0x250 [ 186.569499][ T6946] elevator_change+0x136/0x530 [ 186.569550][ T6946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.569609][ T6946] elv_iosched_store+0x38e/0x440 [ 186.569674][ T6946] ? __pfx_elv_iosched_store+0x10/0x10 [ 186.569725][ T6946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.569794][ T6946] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 186.569837][ T6946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.569890][ T6946] ? __pfx_elv_iosched_store+0x10/0x10 [ 186.569946][ T6946] queue_attr_store+0x25f/0x2f0 [ 186.569995][ T6946] ? __pfx_queue_attr_store+0x10/0x10 [ 186.570038][ T6946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.570088][ T6946] ? __lock_acquire+0x5c0/0x1f40 [ 186.570158][ T6946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.570208][ T6946] ? lock_acquire+0x1d1/0x380 [ 186.570261][ T6946] ? sysfs_file_kobj+0x21/0x290 [ 186.570311][ T6946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.570361][ T6946] ? find_held_lock+0x2b/0x80 [ 186.570402][ T6946] ? sysfs_file_kobj+0xe4/0x290 [ 186.570448][ T6946] ? sysfs_file_kobj+0xe4/0x290 [ 186.570493][ T6946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.570552][ T6946] ? __pfx_queue_attr_store+0x10/0x10 [ 186.570597][ T6946] sysfs_kf_write+0xf2/0x150 [ 186.570658][ T6946] kernfs_fop_write_iter+0x3e0/0x5f0 [ 186.570700][ T6946] ? __pfx_sysfs_kf_write+0x10/0x10 [ 186.570768][ T6946] vfs_write+0x6af/0x1040 [ 186.570849][ T6946] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 186.570919][ T6946] ? __pfx_vfs_write+0x10/0x10 [ 186.570979][ T6946] ? find_held_lock+0x2b/0x80 [ 186.571048][ T6946] ksys_write+0x12a/0x250 [ 186.571103][ T6946] ? __pfx_ksys_write+0x10/0x10 [ 186.571164][ T6946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.571235][ T6946] do_syscall_64+0x123/0x7b0 [ 186.571316][ T6946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.571363][ T6946] RIP: 0033:0x7fde447a94d9 [ 186.571395][ T6946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.571436][ T6946] RSP: 002b:00007fde456af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.571475][ T6946] RAX: ffffffffffffffda RBX: 00007fde44a25fa0 RCX: 00007fde447a94d9 [ 186.571503][ T6946] RDX: 0000000000000003 RSI: 0000200000000300 RDI: 0000000000000003 [ 186.571531][ T6946] RBP: 00007fde4483804e R08: 0000000000000000 R09: 0000000000000000 [ 186.571558][ T6946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.571584][ T6946] R13: 00007fde44a26038 R14: 00007fde44a25fa0 R15: 00007ffd390bf1f8 [ 186.571646][ T6946] [ 187.417215][ T6956] FAULT_INJECTION: forcing a failure. [ 187.417215][ T6956] name failslab, interval 1, probability 0, space 0, times 0 [ 187.417262][ T6956] CPU: 0 UID: 0 PID: 6956 Comm: syz.2.334 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.417314][ T6956] Tainted: [L]=SOFTLOCKUP [ 187.417329][ T6956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 187.417353][ T6956] Call Trace: [ 187.417365][ T6956] [ 187.417380][ T6956] dump_stack_lvl+0x100/0x190 [ 187.417446][ T6956] should_fail_ex.cold+0x5/0xa [ 187.417503][ T6956] should_failslab+0xc2/0x120 [ 187.417565][ T6956] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 187.417631][ T6956] ? kstrdup_const+0x63/0x80 [ 187.417699][ T6956] kstrdup+0x51/0xe0 [ 187.417758][ T6956] kstrdup_const+0x63/0x80 [ 187.417815][ T6956] __kernfs_new_node+0x9b/0xa10 [ 187.417881][ T6956] ? __pfx___kernfs_new_node+0x10/0x10 [ 187.417943][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.417990][ T6956] ? lock_acquire+0x1d1/0x380 [ 187.418039][ T6956] ? kernfs_root+0x23/0x2a0 [ 187.418094][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.418140][ T6956] ? find_held_lock+0x2b/0x80 [ 187.418177][ T6956] ? kernfs_root+0xee/0x2a0 [ 187.418226][ T6956] ? kernfs_root+0xee/0x2a0 [ 187.418275][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.418335][ T6956] kernfs_create_dir_ns+0xa4/0x2b0 [ 187.418404][ T6956] cgroup_mkdir+0x407/0x13a0 [ 187.418471][ T6956] ? __pfx_cgroup_mkdir+0x10/0x10 [ 187.418531][ T6956] kernfs_iop_mkdir+0x111/0x190 [ 187.418587][ T6956] ? security_inode_mkdir+0xc9/0x2b0 [ 187.418635][ T6956] vfs_mkdir+0x36d/0x8a0 [ 187.418697][ T6956] filename_mkdirat+0x4c4/0x630 [ 187.418745][ T6956] ? __pfx_filename_mkdirat+0x10/0x10 [ 187.418787][ T6956] ? strncpy_from_user+0x19d/0x2d0 [ 187.418835][ T6956] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.418881][ T6956] ? do_getname+0x191/0x390 [ 187.418933][ T6956] __x64_sys_mkdirat+0x89/0xc0 [ 187.418975][ T6956] do_syscall_64+0x123/0x7b0 [ 187.419039][ T6956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.419080][ T6956] RIP: 0033:0x7fde447a94d9 [ 187.419108][ T6956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.419145][ T6956] RSP: 002b:00007fde456af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 187.419179][ T6956] RAX: ffffffffffffffda RBX: 00007fde44a25fa0 RCX: 00007fde447a94d9 [ 187.419204][ T6956] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 187.419232][ T6956] RBP: 00007fde4483804e R08: 0000000000000000 R09: 0000000000000000 [ 187.419261][ T6956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.419290][ T6956] R13: 00007fde44a26038 R14: 00007fde44a25fa0 R15: 00007ffd390bf1f8 [ 187.419356][ T6956] [ 187.849772][ T6962] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 188.127294][ T6967] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 188.127731][ T6967] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 188.129490][ T6967] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 188.155844][ T6967] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 188.156273][ T6967] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 188.263712][ T6747] nvmet: connect by host nqn.2014-08.org.nvmexpress:uuid:e56bb53b-49dc-4ec2-b0e4-575c943e420b for subsystem testsubsys not allowed [ 188.284593][ T6962] nvme nvme0: Connect for subsystem testsubsys is not allowed, hostnqn: nqn.2014-08.org.nvmexpress:uuid:e56bb53b-49dc-4ec2-b0e4-575c943e420b [ 189.123669][ T6975] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.138299][ T6979] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 189.790979][ C0] net_ratelimit: 178 callbacks suppressed [ 190.262334][ T53] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 190.372789][ T5657] Bluetooth: hci1: command 0x0c1a tx timeout [ 190.372890][ T5657] Bluetooth: hci0: command 0x0c1a tx timeout [ 190.372999][ T5657] Bluetooth: hci5: command 0x0c1a tx timeout [ 190.373058][ T5657] Bluetooth: hci3: command 0x0c1a tx timeout [ 190.373154][ T5657] Bluetooth: hci4: command 0x0c1a tx timeout [ 190.373286][ T5657] Bluetooth: hci2: command 0x0c1a tx timeout [ 190.574969][ T6988] netlink: 28 bytes leftover after parsing attributes in process `syz.5.341'. [ 190.884153][ T6995] FAULT_INJECTION: forcing a failure. [ 190.884153][ T6995] name failslab, interval 1, probability 0, space 0, times 0 [ 190.884205][ T6995] CPU: 1 UID: 0 PID: 6995 Comm: syz.1.344 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.884266][ T6995] Tainted: [L]=SOFTLOCKUP [ 190.884281][ T6995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 190.884304][ T6995] Call Trace: [ 190.884314][ T6995] [ 190.884327][ T6995] dump_stack_lvl+0x100/0x190 [ 190.884381][ T6995] should_fail_ex.cold+0x5/0xa [ 190.884427][ T6995] should_failslab+0xc2/0x120 [ 190.884477][ T6995] __kmalloc_cache_node_noprof+0x94/0x710 [ 190.884526][ T6995] ? sbitmap_queue_init_node+0x291/0x4a0 [ 190.884588][ T6995] sbitmap_queue_init_node+0x291/0x4a0 [ 190.884657][ T6995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.884716][ T6995] blk_mq_init_tags+0x184/0x300 [ 190.884765][ T6995] blk_mq_alloc_map_and_rqs+0x244/0xe20 [ 190.884855][ T6995] blk_mq_alloc_sched_tags+0x1de/0x350 [ 190.884926][ T6995] blk_mq_alloc_sched_res+0x8e/0x250 [ 190.884991][ T6995] elevator_change+0x136/0x530 [ 190.885042][ T6995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.885100][ T6995] elv_iosched_store+0x38e/0x440 [ 190.885162][ T6995] ? __pfx_elv_iosched_store+0x10/0x10 [ 190.885213][ T6995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.885281][ T6995] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 190.885326][ T6995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.885378][ T6995] ? __pfx_elv_iosched_store+0x10/0x10 [ 190.885435][ T6995] queue_attr_store+0x25f/0x2f0 [ 190.885487][ T6995] ? __pfx_queue_attr_store+0x10/0x10 [ 190.885530][ T6995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.885581][ T6995] ? __lock_acquire+0x5c0/0x1f40 [ 190.885652][ T6995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.885701][ T6995] ? lock_acquire+0x1d1/0x380 [ 190.885768][ T6995] ? sysfs_file_kobj+0x21/0x290 [ 190.885817][ T6995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.885863][ T6995] ? find_held_lock+0x2b/0x80 [ 190.885894][ T6995] ? sysfs_file_kobj+0xe4/0x290 [ 190.885929][ T6995] ? sysfs_file_kobj+0xe4/0x290 [ 190.885963][ T6995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.886008][ T6995] ? __pfx_queue_attr_store+0x10/0x10 [ 190.886041][ T6995] sysfs_kf_write+0xf2/0x150 [ 190.886082][ T6995] kernfs_fop_write_iter+0x3e0/0x5f0 [ 190.886112][ T6995] ? __pfx_sysfs_kf_write+0x10/0x10 [ 190.886158][ T6995] vfs_write+0x6af/0x1040 [ 190.886205][ T6995] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 190.886242][ T6995] ? __pfx_vfs_write+0x10/0x10 [ 190.886285][ T6995] ? find_held_lock+0x2b/0x80 [ 190.886342][ T6995] ksys_write+0x12a/0x250 [ 190.886387][ T6995] ? __pfx_ksys_write+0x10/0x10 [ 190.886437][ T6995] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.886482][ T6995] do_syscall_64+0x123/0x7b0 [ 190.886533][ T6995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.886566][ T6995] RIP: 0033:0x7f7f699a94d9 [ 190.886591][ T6995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.886623][ T6995] RSP: 002b:00007f7f6a94f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 190.886653][ T6995] RAX: ffffffffffffffda RBX: 00007f7f69c25fa0 RCX: 00007f7f699a94d9 [ 190.886674][ T6995] RDX: 0000000000000003 RSI: 0000200000000300 RDI: 0000000000000003 [ 190.886694][ T6995] RBP: 00007f7f69a3804e R08: 0000000000000000 R09: 0000000000000000 [ 190.886714][ T6995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.886734][ T6995] R13: 00007f7f69c26038 R14: 00007f7f69c25fa0 R15: 00007fff27d97648 [ 190.886776][ T6995] [ 191.312984][ T6999] loop4: detected capacity change from 0 to 34816 [ 191.358717][ T6999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.358841][ T6999] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.689069][ T5642] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.075759][ T31] audit: type=1800 audit(1794492568.455:94): pid=7020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.355" name="file0" dev="overlay" ino=357 res=0 errno=-22 [ 192.350279][ T7027] lo: entered allmulticast mode [ 192.363329][ T7025] lo: left allmulticast mode [ 192.521094][ T7017] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 192.524276][ T7017] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 192.524698][ T7017] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 192.525113][ T7017] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 192.554204][ T7017] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 193.160969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 193.251252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 193.715332][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.715425][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.096984][ T7041] loop0: detected capacity change from 0 to 33280 [ 194.098816][ T7041] EXT4-fs: Ignoring removed i_version option [ 194.112055][ T53] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 194.112538][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 194.139429][ T7041] EXT4-fs error (device loop0): ext4_get_journal_inode:5971: comm syz.0.365: inode #196608: comm syz.0.365: iget: illegal inode # [ 194.139476][ T7041] loop0: lost filesystem error report for type 5 error -117 [ 194.140726][ T7041] EXT4-fs (loop0): no journal found [ 194.140785][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 194.140820][ C0] EXT4-fs (loop0): initial error at time 1794492570: ext4_get_journal_inode:5971 [ 194.140868][ C0] EXT4-fs (loop0): last error at time 1794492570: ext4_get_journal_inode:5971 [ 194.144194][ T7041] EXT4-fs (loop0): can't get journal size [ 194.158370][ T7041] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 194.214503][ T7041] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 194.230329][ T7041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.560934][ T5805] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 194.593840][ T5653] Bluetooth: hci3: command 0x0c1a tx timeout [ 194.593908][ T5653] Bluetooth: hci5: command 0x0c1a tx timeout [ 194.593970][ T5653] Bluetooth: hci4: command 0x0c1a tx timeout [ 194.594032][ T5653] Bluetooth: hci2: command 0x0c1a tx timeout [ 194.594091][ T5653] Bluetooth: hci1: command 0x0c1a tx timeout [ 194.660426][ T5637] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.712322][ T5805] usb 5-1: Using ep0 maxpacket: 16 [ 194.713150][ T5805] usb 5-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 194.716473][ T5805] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 194.716517][ T5805] usb 5-1: config 0 has no interface number 0 [ 194.716574][ T5805] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 194.716629][ T5805] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 194.762715][ T5805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.762753][ T5805] usb 5-1: Product: syz [ 194.762781][ T5805] usb 5-1: Manufacturer: syz [ 194.762810][ T5805] usb 5-1: SerialNumber: syz [ 194.805239][ T5805] usb 5-1: config 0 descriptor?? [ 194.808069][ T7051] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 194.808225][ T7051] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 194.883891][ T7062] FAULT_INJECTION: forcing a failure. [ 194.883891][ T7062] name failslab, interval 1, probability 0, space 0, times 0 [ 194.883966][ T7062] CPU: 1 UID: 0 PID: 7062 Comm: syz.0.369 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.884024][ T7062] Tainted: [L]=SOFTLOCKUP [ 194.884039][ T7062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 194.884065][ T7062] Call Trace: [ 194.884081][ T7062] [ 194.884097][ T7062] dump_stack_lvl+0x100/0x190 [ 194.884176][ T7062] should_fail_ex.cold+0x5/0xa [ 194.884238][ T7062] should_failslab+0xc2/0x120 [ 194.884305][ T7062] __kmalloc_cache_noprof+0x91/0x6d0 [ 194.884352][ T7062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.884402][ T7062] ? lock_acquire+0x1d1/0x380 [ 194.884456][ T7062] ? uprobe_register+0x177/0xa90 [ 194.884518][ T7062] uprobe_register+0x177/0xa90 [ 194.884576][ T7062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.884635][ T7062] bpf_uprobe_multi_link_attach+0x100c/0x1550 [ 194.884713][ T7062] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 194.884770][ T7062] ? __fget_files+0x21f/0x3d0 [ 194.884819][ T7062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.884884][ T7062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.884936][ T7062] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 194.885014][ T7062] __sys_bpf+0x448e/0x4b60 [ 194.885068][ T7062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.885117][ T7062] ? plist_check_list+0x1b8/0x280 [ 194.885185][ T7062] ? plist_check_list+0x140/0x280 [ 194.885240][ T7062] ? __pfx___sys_bpf+0x10/0x10 [ 194.885293][ T7062] ? find_held_lock+0x2b/0x80 [ 194.885334][ T7062] ? futex_wake+0x4ea/0x5e0 [ 194.885390][ T7062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.885443][ T7062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.885494][ T7062] ? futex_private_hash_put.part.0+0xdc/0x180 [ 194.885564][ T7062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.885613][ T7062] ? futex_private_hash_put+0x24/0x30 [ 194.885681][ T7062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.885744][ T7062] ? __pfx_futex_wake+0x10/0x10 [ 194.885796][ T7062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.885855][ T7062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.885916][ T7062] ? rcu_read_lock_any_held+0x6a/0x90 [ 194.885962][ T7062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.886013][ T7062] ? find_held_lock+0x2b/0x80 [ 194.886053][ T7062] ? ksys_write+0x190/0x250 [ 194.886114][ T7062] ? ksys_write+0x190/0x250 [ 194.886184][ T7062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.886260][ T7062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.886311][ T7062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.886361][ T7062] ? __x64_sys_futex+0x358/0x4d0 [ 194.886409][ T7062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.886462][ T7062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 194.886513][ T7062] ? xfd_validate_state+0x129/0x190 [ 194.886571][ T7062] ? __x64_sys_bpf+0xce/0x140 [ 194.886627][ T7062] __x64_sys_bpf+0xce/0x140 [ 194.886686][ T7062] ? do_syscall_64+0xae/0x7b0 [ 194.886752][ T7062] do_syscall_64+0x123/0x7b0 [ 194.886822][ T7062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.886866][ T7062] RIP: 0033:0x7ff42dba94d9 [ 194.886909][ T7062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.886952][ T7062] RSP: 002b:00007ff42ea62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 194.886993][ T7062] RAX: ffffffffffffffda RBX: 00007ff42de25fa0 RCX: 00007ff42dba94d9 [ 194.887022][ T7062] RDX: 0000000000000040 RSI: 00002000000012c0 RDI: 000000000000001c [ 194.887050][ T7062] RBP: 00007ff42dc3804e R08: 0000000000000000 R09: 0000000000000000 [ 194.887078][ T7062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.887105][ T7062] R13: 00007ff42de26038 R14: 00007ff42de25fa0 R15: 00007ffc2bd06f68 [ 194.887167][ T7062] [ 194.990864][ C0] net_ratelimit: 119 callbacks suppressed [ 195.057864][ T7051] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 195.058011][ T7051] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 195.317104][ T5805] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 195.490249][ T31] audit: type=1800 audit(1794492571.875:95): pid=7066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.372" name="file0" dev="overlay" ino=388 res=0 errno=-22 [ 195.569289][ T7067] jffs2: notice: (7067) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 195.747637][ T7073] mmap: syz.5.371 (7073) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 195.861134][ T11] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 196.244707][ T5805] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 196.244753][ T5805] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 196.271398][ T5805] asix 5-1:0.34: probe with driver asix failed with error -71 [ 196.301865][ T11] usb 1-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 196.303077][ T11] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.303147][ T11] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 196.303191][ T11] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 196.303237][ T11] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.303338][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.346788][ T5805] usb 5-1: USB disconnect, device number 6 [ 196.820582][ T7081] uprobe: syz.5.375:7081 failed to unregister, leaking uprobe [ 196.925845][ T5805] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 197.225783][ T5805] usb 2-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 197.227338][ T5805] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 197.227390][ T5805] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 197.227441][ T5805] usb 2-1: config 0 interface 0 has no altsetting 0 [ 197.285379][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 197.285418][ T5805] usb 2-1: Product: syz [ 197.285447][ T5805] usb 2-1: Manufacturer: syz [ 197.285477][ T5805] usb 2-1: SerialNumber: syz [ 197.335075][ T5805] usb 2-1: config 0 descriptor?? [ 197.369476][ T7078] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 197.392765][ T5805] usb 2-1: selecting invalid altsetting 0 [ 197.961624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 198.213426][ T7089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.215027][ T7089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.403512][ T7091] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 198.404666][ T7091] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 198.405391][ T7091] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 198.406126][ T7091] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 198.407051][ T7091] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 198.453461][ T11] gud 1-1:1.0: USB-1: Failed to add TV modes (ret=-5) [ 198.453508][ T11] gud 1-1:1.0: USB-1: Failed to add properties (ret=-5) [ 198.453552][ T11] gud 1-1:1.0: Failed to get connectors (error=-5) [ 198.453581][ T11] gud 1-1:1.0: probe with driver gud failed with error -5 [ 198.624417][ T5805] usb 2-1: USB disconnect, device number 4 [ 198.624441][ C0] usb 2-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 198.624972][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 198.695461][ T25] usb 1-1: USB disconnect, device number 7 [ 199.333725][ T7102] FAULT_INJECTION: forcing a failure. [ 199.333725][ T7102] name failslab, interval 1, probability 0, space 0, times 0 [ 199.334317][ T7102] CPU: 1 UID: 0 PID: 7102 Comm: syz.4.380 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.334380][ T7102] Tainted: [L]=SOFTLOCKUP [ 199.334397][ T7102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 199.334424][ T7102] Call Trace: [ 199.334438][ T7102] [ 199.334455][ T7102] dump_stack_lvl+0x100/0x190 [ 199.334529][ T7102] should_fail_ex.cold+0x5/0xa [ 199.334592][ T7102] should_failslab+0xc2/0x120 [ 199.334674][ T7102] __kvmalloc_node_noprof+0x113/0x9b0 [ 199.334741][ T7102] ? bpf_compute_subprog_arg_access+0x1a8/0x1290 [ 199.334809][ T7102] bpf_compute_subprog_arg_access+0x1a8/0x1290 [ 199.334896][ T7102] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 199.334978][ T7102] ? bpf_compute_live_registers+0x14d/0x1520 [ 199.335053][ T7102] bpf_compute_live_registers+0xb1a/0x1520 [ 199.335111][ T7102] ? srso_alias_return_thunk+0x85/0xfbef5 [ 199.335177][ T7102] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 199.335244][ T7102] bpf_check+0x814f/0xa0f0 [ 199.335334][ T7102] ? __pfx_bpf_check+0x10/0x10 [ 199.335387][ T7102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.335440][ T7102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.335487][ T7102] ? find_held_lock+0x2b/0x80 [ 199.335526][ T7102] ? bpf_prog_load+0x1af0/0x2b20 [ 199.335579][ T7102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.335637][ T7102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.335686][ T7102] ? __asan_memset+0x23/0x50 [ 199.335735][ T7102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.335795][ T7102] ? bpf_prog_load+0x1baf/0x2b20 [ 199.335844][ T7102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.335893][ T7102] bpf_prog_load+0x1baf/0x2b20 [ 199.335957][ T7102] ? __pfx_bpf_prog_load+0x10/0x10 [ 199.336007][ T7102] ? lock_acquire+0x1d1/0x380 [ 199.336064][ T7102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.336146][ T7102] __sys_bpf+0x146f/0x4b60 [ 199.336213][ T7102] ? __pfx___sys_bpf+0x10/0x10 [ 199.336264][ T7102] ? find_held_lock+0x2b/0x80 [ 199.336303][ T7102] ? futex_wake+0x4ea/0x5e0 [ 199.336353][ T7102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.336402][ T7102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.336474][ T7102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.336520][ T7102] ? find_held_lock+0x2b/0x80 [ 199.336556][ T7102] ? do_sys_openat2+0x1ae/0x1d0 [ 199.336599][ T7102] ? do_sys_openat2+0x1ae/0x1d0 [ 199.336646][ T7102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.336700][ T7102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.336767][ T7102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.336814][ T7102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.336860][ T7102] ? __x64_sys_futex+0x358/0x4d0 [ 199.336904][ T7102] ? __x64_sys_openat+0x12d/0x210 [ 199.336949][ T7102] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.336995][ T7102] ? xfd_validate_state+0x129/0x190 [ 199.337048][ T7102] ? __x64_sys_bpf+0xce/0x140 [ 199.337099][ T7102] __x64_sys_bpf+0xce/0x140 [ 199.337154][ T7102] ? do_syscall_64+0xae/0x7b0 [ 199.337213][ T7102] do_syscall_64+0x123/0x7b0 [ 199.337275][ T7102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.337314][ T7102] RIP: 0033:0x7f38ba3a94d9 [ 199.337344][ T7102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.337382][ T7102] RSP: 002b:00007f38bb18d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.337419][ T7102] RAX: ffffffffffffffda RBX: 00007f38ba625fa0 RCX: 00007f38ba3a94d9 [ 199.337445][ T7102] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005 [ 199.337470][ T7102] RBP: 00007f38ba43804e R08: 0000000000000000 R09: 0000000000000000 [ 199.337494][ T7102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.337518][ T7102] R13: 00007f38ba626038 R14: 00007f38ba625fa0 R15: 00007fff12007a48 [ 199.337569][ T7102] [ 200.110830][ C0] net_ratelimit: 84 callbacks suppressed [ 200.245536][ T1101] IPVS: starting estimator thread 0... [ 200.351082][ T7111] IPVS: using max 31 ests per chain, 74400 per kthread [ 200.431138][ T53] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 200.431581][ T53] Bluetooth: hci5: command 0x0c1a tx timeout [ 200.431641][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 200.431687][ T53] Bluetooth: hci4: command 0x0c1a tx timeout [ 200.431733][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 200.431778][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 200.441047][ T5653] Bluetooth: hci0: command 0x0c1a tx timeout [ 202.428262][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.391'. [ 202.449311][ T7124] block device autoloading is deprecated and will be removed. [ 202.670145][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.391'. [ 203.051328][ T6133] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.063736][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.391'. [ 203.092752][ T7133] Zero length message leads to an empty skb [ 203.106369][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.106431][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.106488][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.165886][ T7136] input: syz1 as /devices/virtual/input/input11 [ 203.168665][ T7136] FAULT_INJECTION: forcing a failure. [ 203.168665][ T7136] name failslab, interval 1, probability 0, space 0, times 0 [ 203.168709][ T7136] CPU: 1 UID: 0 PID: 7136 Comm: syz.5.394 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.168762][ T7136] Tainted: [L]=SOFTLOCKUP [ 203.168777][ T7136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 203.168801][ T7136] Call Trace: [ 203.168813][ T7136] [ 203.168828][ T7136] dump_stack_lvl+0x100/0x190 [ 203.168892][ T7136] should_fail_ex.cold+0x5/0xa [ 203.168949][ T7136] should_failslab+0xc2/0x120 [ 203.169012][ T7136] kmem_cache_alloc_noprof+0x92/0x6a0 [ 203.169066][ T7136] ? __kernfs_new_node+0xd2/0xa10 [ 203.169143][ T7136] __kernfs_new_node+0xd2/0xa10 [ 203.169208][ T7136] ? __pfx___kernfs_new_node+0x10/0x10 [ 203.169282][ T7136] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.169343][ T7136] ? lock_acquire+0x1d1/0x380 [ 203.169404][ T7136] ? kernfs_root+0x23/0x2a0 [ 203.169459][ T7136] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.169509][ T7136] ? find_held_lock+0x2b/0x80 [ 203.169550][ T7136] ? kernfs_root+0xee/0x2a0 [ 203.169604][ T7136] ? kernfs_root+0xee/0x2a0 [ 203.169657][ T7136] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.169722][ T7136] kernfs_new_node+0x194/0x200 [ 203.169791][ T7136] ? __pfx_kernfs_new_node+0x10/0x10 [ 203.169858][ T7136] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.169909][ T7136] ? kernfs_add_one+0x213/0xb40 [ 203.169988][ T7136] __kernfs_create_file+0x53/0x350 [ 203.170042][ T7136] sysfs_add_file_mode_ns+0x207/0x3c0 [ 203.170109][ T7136] sysfs_merge_group+0x194/0x340 [ 203.170180][ T7136] ? __pfx_sysfs_merge_group+0x10/0x10 [ 203.170239][ T7136] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.170291][ T7136] ? bus_add_device+0x2e2/0x6c0 [ 203.170349][ T7136] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.170402][ T7136] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.170457][ T7136] ? __pfx_bus_add_device+0x10/0x10 [ 203.170514][ T7136] ? __pfx_dev_add_physical_location+0x10/0x10 [ 203.170566][ T7136] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.170629][ T7136] dpm_sysfs_add+0x237/0x280 [ 203.170680][ T7136] device_add+0x9f4/0x1970 [ 203.170730][ T7136] ? __pfx_device_add+0x10/0x10 [ 203.170785][ T7136] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.170835][ T7136] ? kobject_get+0xbb/0x150 [ 203.170898][ T7136] cdev_device_add+0x12b/0x270 [ 203.170944][ T7136] evdev_connect+0x3a8/0x4b0 [ 203.170998][ T7136] input_attach_handler.isra.0+0x177/0x1e0 [ 203.171050][ T7136] input_register_device.cold+0x1ce/0x386 [ 203.171110][ T7136] uinput_ioctl_handler.isra.0+0x8d8/0x1d20 [ 203.171179][ T7136] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 203.171242][ T7136] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 203.171311][ T7136] ? __fget_files+0x34/0x3d0 [ 203.171354][ T7136] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.171406][ T7136] ? find_held_lock+0x2b/0x80 [ 203.171444][ T7136] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.171494][ T7136] ? hook_file_ioctl_common+0x140/0x440 [ 203.171584][ T7136] ? __pfx_uinput_ioctl+0x10/0x10 [ 203.171642][ T7136] __x64_sys_ioctl+0x18e/0x210 [ 203.171707][ T7136] do_syscall_64+0x123/0x7b0 [ 203.171774][ T7136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.171818][ T7136] RIP: 0033:0x7fed9a9a94d9 [ 203.171851][ T7136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.171895][ T7136] RSP: 002b:00007fed9b8f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.171944][ T7136] RAX: ffffffffffffffda RBX: 00007fed9ac25fa0 RCX: 00007fed9a9a94d9 [ 203.171979][ T7136] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 203.172010][ T7136] RBP: 00007fed9aa3804e R08: 0000000000000000 R09: 0000000000000000 [ 203.172043][ T7136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.172072][ T7136] R13: 00007fed9ac26038 R14: 00007fed9ac25fa0 R15: 00007ffdda9d25b8 [ 203.172133][ T7136] [ 203.615735][ T7136] input: failed to attach handler evdev to device input11, error: -12 [ 204.180146][ T7134] loop1: detected capacity change from 0 to 32768 [ 204.272973][ T7145] loop5: detected capacity change from 0 to 8 [ 204.328776][ T7145] SQUASHFS error: Unable to read directory block [629:46] [ 204.955769][ T7152] FAULT_INJECTION: forcing a failure. [ 204.955769][ T7152] name failslab, interval 1, probability 0, space 0, times 0 [ 204.955810][ T7152] CPU: 0 UID: 0 PID: 7152 Comm: syz.0.411 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.955849][ T7152] Tainted: [L]=SOFTLOCKUP [ 204.955860][ T7152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 204.955877][ T7152] Call Trace: [ 204.955887][ T7152] [ 204.955899][ T7152] dump_stack_lvl+0x100/0x190 [ 204.955947][ T7152] should_fail_ex.cold+0x5/0xa [ 204.955990][ T7152] should_failslab+0xc2/0x120 [ 204.956036][ T7152] __kmalloc_noprof+0xfc/0x840 [ 204.956073][ T7152] ? rcu_is_watching+0x13/0xc0 [ 204.956103][ T7152] ? tomoyo_realpath_from_path+0xb6/0x690 [ 204.956140][ T7152] tomoyo_realpath_from_path+0xb6/0x690 [ 204.956171][ T7152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.956211][ T7152] tomoyo_check_open_permission+0x2af/0x3c0 [ 204.956254][ T7152] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 204.956308][ T7152] ? hook_file_open+0x245/0x8e0 [ 204.956380][ T7152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.956419][ T7152] tomoyo_file_open+0x6b/0x90 [ 204.956454][ T7152] security_file_open+0xb5/0x1e0 [ 204.956499][ T7152] do_dentry_open+0x552/0x1470 [ 204.956545][ T7152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.956588][ T7152] vfs_open_consume+0xcc/0x460 [ 204.956620][ T7152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.956664][ T7152] path_openat+0x1547/0x23f0 [ 204.956699][ T7152] ? __pfx_path_openat+0x10/0x10 ** replaying previous printk message ** [ 204.956699][ T7152] ? __pfx_path_openat+0x10/0x10 [ 204.956739][ T7152] do_file_open+0x20e/0x430 [ 204.956770][ T7152] ? __pfx_do_file_open+0x10/0x10 [ 204.956825][ T7152] ? _raw_spin_unlock+0x28/0x50 [ 204.956860][ T7152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.956894][ T7152] ? alloc_fd+0x471/0x7a0 [ 204.956934][ T7152] do_sys_openat2+0x163/0x1d0 [ 204.956968][ T7152] ? __pfx_do_sys_openat2+0x10/0x10 [ 204.957015][ T7152] __x64_sys_openat+0x12d/0x210 [ 204.957049][ T7152] ? __pfx___x64_sys_openat+0x10/0x10 [ 204.957090][ T7152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.957131][ T7152] do_syscall_64+0x123/0x7b0 [ 204.957183][ T7152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.957221][ T7152] RIP: 0033:0x7ff42dba94d9 [ 204.957243][ T7152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.957271][ T7152] RSP: 002b:00007ff42ea62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 204.957298][ T7152] RAX: ffffffffffffffda RBX: 00007ff42de25fa0 RCX: 00007ff42dba94d9 [ 204.957318][ T7152] RDX: 0000000000000802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 204.957336][ T7152] RBP: 00007ff42dc3804e R08: 0000000000000000 R09: 0000000000000000 [ 204.957354][ T7152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.957372][ T7152] R13: 00007ff42de26038 R14: 00007ff42de25fa0 R15: 00007ffc2bd06f68 [ 204.957410][ T7152] [ 204.967160][ T7152] ERROR: Out of memory at tomoyo_realpath_from_path. [ 204.976356][ T7151] kcov: kcov_task_exit: t = ffff888029755dc0, kcov->t = ffff888029755dc0 [ 205.001762][ T7142] kcov: kcov_task_exit: t = ffff88802e635dc0, kcov->t = ffff88802e635dc0 [ 205.015337][ T7152] kcov: kcov_task_exit: t = ffff888030a90000, kcov->t = ffff888030a90000 [ 205.050527][ T7154] ------------[ cut here ]------------ [ 205.050544][ T7154] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dtree.c:1598:21 [ 205.050576][ T7154] index 23 is out of range for type 'lv [20]' [ 205.050605][ T7154] CPU: 0 UID: 0 PID: 7154 Comm: syz.1.392 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.050669][ T7154] Tainted: [L]=SOFTLOCKUP [ 205.050684][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 205.050709][ T7154] Call Trace: [ 205.050722][ T7154] [ 205.050737][ T7154] dump_stack_lvl+0x100/0x190 [ 205.050804][ T7154] ubsan_epilogue+0xa/0x30 [ 205.050859][ T7154] __ubsan_handle_out_of_bounds+0xcc/0xf0 [ 205.050947][ T7154] dtSplitPage+0x2fb1/0x3660 [ 205.051075][ T7154] ? __pfx_dtSplitPage+0x10/0x10 [ 205.051123][ T7154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.051178][ T7154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.051230][ T7154] ? up_write+0x2dc/0x5b0 [ 205.051289][ T7154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.051333][ T7154] ? dbAlloc+0x4c8/0xb10 [ 205.051383][ T7154] dtSplitUp+0x7b8/0x56a0 [ 205.051437][ T7154] ? stack_trace_save+0x8e/0xc0 [ 205.051485][ T7154] ? __pfx_stack_trace_save+0x10/0x10 [ 205.051535][ T7154] ? stack_depot_save_flags+0x27/0xa10 [ 205.051581][ T7154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.051625][ T7154] ? __lock_acquire+0x5c0/0x1f40 [ 205.051686][ T7154] ? __pfx_dtSplitUp+0x10/0x10 [ 205.051726][ T7154] ? kasan_save_stack+0x3f/0x50 [ 205.051778][ T7154] ? kasan_save_stack+0x30/0x50 [ 205.051829][ T7154] ? kasan_save_track+0x14/0x30 [ 205.051882][ T7154] ? __kasan_slab_free+0x5f/0x80 [ 205.051936][ T7154] ? kfree+0x22b/0x6d0 [ 205.051972][ T7154] ? dtSearch+0x16d8/0x20c0 [ 205.052012][ T7154] ? vfs_mkdir+0x36d/0x8a0 [ 205.052059][ T7154] ? filename_mkdirat+0x4c4/0x630 [ 205.052097][ T7154] ? __x64_sys_mkdirat+0x89/0xc0 [ 205.052136][ T7154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.052197][ T7154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.052256][ T7154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.052299][ T7154] ? txLockAlloc+0x1ff/0x330 [ 205.052362][ T7154] ? do_raw_spin_lock+0x128/0x260 [ 205.052417][ T7154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.052461][ T7154] ? find_held_lock+0x2b/0x80 [ 205.052497][ T7154] ? txLock+0x7e6/0x1b50 [ 205.052550][ T7154] ? txLock+0x7e6/0x1b50 [ 205.052602][ T7154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.052658][ T7154] dtInsert+0x8dd/0xb40 [ 205.052706][ T7154] ? __pfx_dtInsert+0x10/0x10 [ 205.052751][ T7154] ? __pfx_txLock+0x10/0x10 [ 205.052827][ T7154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.052879][ T7154] jfs_mkdir+0x636/0xb40 [ 205.052936][ T7154] ? __pfx_jfs_mkdir+0x10/0x10 [ 205.052996][ T7154] ? map_id_range_up+0x2ce/0x3b0 [ 205.053051][ T7154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.053125][ T7154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.053173][ T7154] ? inode_permission+0x377/0x630 [ 205.053230][ T7154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.053285][ T7154] vfs_mkdir+0x36d/0x8a0 [ 205.053347][ T7154] filename_mkdirat+0x4c4/0x630 [ 205.053394][ T7154] ? __pfx_filename_mkdirat+0x10/0x10 [ 205.053435][ T7154] ? strncpy_from_user+0x19d/0x2d0 [ 205.053481][ T7154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.053526][ T7154] ? do_getname+0x191/0x390 [ 205.053576][ T7154] __x64_sys_mkdirat+0x89/0xc0 [ 205.053618][ T7154] do_syscall_64+0x123/0x7b0 [ 205.053683][ T7154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.053722][ T7154] RIP: 0033:0x7f7f699a8347 [ 205.053750][ T7154] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.053786][ T7154] RSP: 002b:00007f7f6a8cae58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 205.053821][ T7154] RAX: ffffffffffffffda RBX: 00007f7f6a8caee0 RCX: 00007f7f699a8347 [ 205.053847][ T7154] RDX: 00000000000001ff RSI: 0000200000006bc0 RDI: 00000000ffffff9c [ 205.053870][ T7154] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 205.053893][ T7154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000006bc0 [ 205.053917][ T7154] R13: 00007f7f6a8caea0 R14: 0000000000000000 R15: 0000000000000000 [ 205.053967][ T7154] [ 205.068885][ T7143] kcov: kcov_task_exit: t = ffff88807d8f3e80, kcov->t = ffff88807d8f3e80 [ 205.104810][ T7155] kcov: kcov_start: t = ffff888036fd3e80, size = 524288, area = ffffc9000408a000 [ 205.104946][ T7155] sctp: sctp_init_sock: sk:ffff888034969bc0 [ 205.128017][ T7154] ---[ end trace ]--- [ 205.128038][ T7154] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 205.740598][ T7154] CPU: 0 UID: 0 PID: 7154 Comm: syz.1.392 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.751390][ T7154] Tainted: [L]=SOFTLOCKUP [ 205.755712][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 205.765770][ T7154] Call Trace: [ 205.769045][ T7154] [ 205.771976][ T7154] dump_stack_lvl+0x100/0x190 [ 205.776692][ T7154] vpanic+0x2dc/0x6f8 [ 205.780683][ T7154] panic+0xd1/0xe0 [ 205.784412][ T7154] ? __pfx_panic+0x10/0x10 [ 205.788839][ T7154] ? dump_stack_lvl+0x176/0x190 [ 205.793711][ T7154] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 205.799815][ T7154] check_panic_on_warn.cold+0x19/0x34 [ 205.805201][ T7154] __ubsan_handle_out_of_bounds+0xcc/0xf0 [ 205.810960][ T7154] dtSplitPage+0x2fb1/0x3660 [ 205.815637][ T7154] ? __pfx_dtSplitPage+0x10/0x10 [ 205.820590][ T7154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.826243][ T7154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.831889][ T7154] ? up_write+0x2dc/0x5b0 [ 205.836247][ T7154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.841909][ T7154] ? dbAlloc+0x4c8/0xb10 [ 205.846173][ T7154] dtSplitUp+0x7b8/0x56a0 [ 205.850537][ T7154] ? stack_trace_save+0x8e/0xc0 [ 205.855410][ T7154] ? __pfx_stack_trace_save+0x10/0x10 [ 205.860805][ T7154] ? stack_depot_save_flags+0x27/0xa10 [ 205.866285][ T7154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.871937][ T7154] ? __lock_acquire+0x5c0/0x1f40 [ 205.876902][ T7154] ? __pfx_dtSplitUp+0x10/0x10 [ 205.881700][ T7154] ? kasan_save_stack+0x3f/0x50 [ 205.886580][ T7154] ? kasan_save_stack+0x30/0x50 [ 205.891462][ T7154] ? kasan_save_track+0x14/0x30 [ 205.896368][ T7154] ? __kasan_slab_free+0x5f/0x80 [ 205.901336][ T7154] ? kfree+0x22b/0x6d0 [ 205.905417][ T7154] ? dtSearch+0x16d8/0x20c0 [ 205.909934][ T7154] ? vfs_mkdir+0x36d/0x8a0 [ 205.914371][ T7154] ? filename_mkdirat+0x4c4/0x630 [ 205.919408][ T7154] ? __x64_sys_mkdirat+0x89/0xc0 [ 205.924358][ T7154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.930459][ T7154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.936130][ T7154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.941786][ T7154] ? txLockAlloc+0x1ff/0x330 [ 205.946416][ T7154] ? do_raw_spin_lock+0x128/0x260 [ 205.951462][ T7154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.957120][ T7154] ? find_held_lock+0x2b/0x80 [ 205.961805][ T7154] ? txLock+0x7e6/0x1b50 [ 205.966070][ T7154] ? txLock+0x7e6/0x1b50 [ 205.970343][ T7154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.976007][ T7154] dtInsert+0x8dd/0xb40 [ 205.980201][ T7154] ? __pfx_dtInsert+0x10/0x10 [ 205.984894][ T7154] ? __pfx_txLock+0x10/0x10 [ 205.989446][ T7154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.995104][ T7154] jfs_mkdir+0x636/0xb40 [ 205.999382][ T7154] ? __pfx_jfs_mkdir+0x10/0x10 [ 206.004186][ T7154] ? map_id_range_up+0x2ce/0x3b0 [ 206.009159][ T7154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.014840][ T7154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.020492][ T7154] ? inode_permission+0x377/0x630 [ 206.025546][ T7154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.031207][ T7154] vfs_mkdir+0x36d/0x8a0 [ 206.035483][ T7154] filename_mkdirat+0x4c4/0x630 [ 206.040352][ T7154] ? __pfx_filename_mkdirat+0x10/0x10 [ 206.045738][ T7154] ? strncpy_from_user+0x19d/0x2d0 [ 206.050875][ T7154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.056549][ T7154] ? do_getname+0x191/0x390 [ 206.061082][ T7154] __x64_sys_mkdirat+0x89/0xc0 [ 206.065881][ T7154] do_syscall_64+0x123/0x7b0 [ 206.070511][ T7154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.076415][ T7154] RIP: 0033:0x7f7f699a8347 [ 206.080836][ T7154] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.100455][ T7154] RSP: 002b:00007f7f6a8cae58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 206.108883][ T7154] RAX: ffffffffffffffda RBX: 00007f7f6a8caee0 RCX: 00007f7f699a8347 [ 206.116858][ T7154] RDX: 00000000000001ff RSI: 0000200000006bc0 RDI: 00000000ffffff9c [ 206.124833][ T7154] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 206.132806][ T7154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000006bc0 [ 206.140780][ T7154] R13: 00007f7f6a8caea0 R14: 0000000000000000 R15: 0000000000000000 [ 206.148779][ T7154] [ 206.152242][ T7154] Kernel Offset: disabled [ 206.156555][ T7154] Rebooting in 86400 seconds..