last executing test programs: 6.514776775s ago: executing program 1 (id=553): r0 = gettid() timer_create(0x0, &(0x7f0000001c80)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000001cc0)=0x0) pipe(&(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000001d80)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000001dc0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r4, &(0x7f0000001e00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000003e40)={0x50, 0x0, r6, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) 6.160283267s ago: executing program 1 (id=557): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}}, 0x884) 5.725752915s ago: executing program 4 (id=563): r0 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r0, 0x8800000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = dup3(r2, r1, 0x0) sendfile(r3, r0, 0x0, 0x1000009) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000000)=0x5, 0x4) 5.60023689s ago: executing program 1 (id=565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000880)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000900)={r2, 0x1, 0x6}) 5.419148827s ago: executing program 4 (id=567): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1ff) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$trusted_overlay_origin(&(0x7f0000000380)='./file0/file1\x00', &(0x7f00000003c0), 0x0, 0x0, 0x1) umount2(&(0x7f0000000400)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x4008, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 5.40063088s ago: executing program 2 (id=568): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2010002, &(0x7f0000000140), 0x1, 0x558, &(0x7f0000001000)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 5.002811156s ago: executing program 4 (id=570): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000080)=""/6}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010340)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) 4.830084221s ago: executing program 2 (id=571): socket(0x2, 0x80805, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x366, 0xc000, 0x800c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.680625643s ago: executing program 1 (id=573): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time_for_children\x00') 4.322249866s ago: executing program 2 (id=575): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x5, 0x2bb}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x240448c8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x58}, 0x1, 0x7}, 0x0) 3.85604158s ago: executing program 0 (id=577): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f00000000c0), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000140)={@empty, @empty, 0x0, "1c6804d4a58b85e13e66ab6fafd10df8ab973be71cc99e43030305633956c3c4", 0xfffffc00, 0x9, 0xfffff536, 0xde5}, 0x3c) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f00000001c0)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0) 3.638537044s ago: executing program 3 (id=578): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0x5}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) 3.429322463s ago: executing program 0 (id=580): setresgid(0xee00, 0xee01, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) r1 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000180)='cgroup\x00') pread64(r2, &(0x7f0000000100)=""/15, 0xf, 0x4) 3.411495828s ago: executing program 2 (id=581): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) write$make_it_fail(r1, &(0x7f00000003c0)='N\x00', 0x2) 3.312108039s ago: executing program 5 (id=582): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, '\x00', "59fd4d7ba4efd381f62a75b2daaff4e321bccef0fe33f7926d750d72aac6ded4", "89a2f763"}, 0x38) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x100}, 0x0) 3.216098658s ago: executing program 3 (id=583): socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) close(r0) 2.990790035s ago: executing program 5 (id=584): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) listen(r0, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a300000000048000000030a01040000000000000000010000000900010073797a30000000000900030073797a31000000001400048008000140000000040800024000000064080007006e6174004c000000060a01040000000000000008010000000900010073797a30000000000900020073797a3100000000200004801c000180090001006d61"], 0xdc}, 0x1, 0x0, 0x0, 0x4}, 0x8040) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f00000003c0)='\x00', 0x1, 0x4048000, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0xffff}, 0x1c) accept(r0, &(0x7f0000000080)=@can, 0x0) 2.775534925s ago: executing program 3 (id=585): socket$inet6(0xa, 0x3, 0x1) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x7, 0x7ffc0001}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0xfffffffc, 0x80000004, 0x100003, 0x80002, 0x1, 0x2}}) unshare(0x30000200) 2.203963082s ago: executing program 2 (id=586): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1', 0x1) 2.095933715s ago: executing program 0 (id=588): mkdir(&(0x7f00000019c0)='./file0\x00', 0x114) mkdirat(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x0) mount(0x0, &(0x7f0000001a40)='./file0\x00', &(0x7f0000003b80)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000003bc0)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f0000003e40)='./bus\x00', &(0x7f0000003ec0), 0x0, &(0x7f0000003f00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f0000004100)='./file1\x00') chroot(&(0x7f0000004140)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000004180), 0x42, 0x0) 1.818631385s ago: executing program 4 (id=589): sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x4000000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0xfffffffc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x3}, 0x2, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.809673943s ago: executing program 3 (id=590): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000040)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000000c0)="c3", 0x1, 0x40811, &(0x7f0000000100)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}}}, 0x84) 1.805313443s ago: executing program 1 (id=602): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000000, 0x0, 0x0) 1.682146768s ago: executing program 5 (id=591): syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000007000000040000000000000e0400000000000000000000000100000d000000000400000004000000000000000000000404000000000000000000000a030000000000000061"], 0x0, 0x5b}, 0x28) socket(0xa, 0x3, 0x3a) socket(0xa, 0x3, 0x85) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5202) 1.362542649s ago: executing program 0 (id=592): syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file1\x00', 0x1810090, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f0000000480)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x4008, &(0x7f00000007c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000540)='./file0\x00') chdir(&(0x7f0000000580)='./file1\x00') r0 = open(&(0x7f00000005c0)='.\x00', 0x0, 0x112) getdents(r0, &(0x7f0000000600)=""/184, 0xb8) 1.108145597s ago: executing program 5 (id=593): mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./proc\x00', &(0x7f00000007c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r0, &(0x7f0000000840)='27', 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40004) r2 = landlock_create_ruleset(&(0x7f0000000900)={0x3000, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) 1.081542578s ago: executing program 2 (id=594): creat(&(0x7f0000000500)='./file0\x00', 0xecf86c37d5304960) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x80, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000680)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000026c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34204440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002740)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000004740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004800)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000006980)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r2, 0x0, 0x0) 690.21517ms ago: executing program 4 (id=595): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x800, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x181) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101142, 0xeaf9) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./bus\x00', 0x3820c50, 0x0, 0xff, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300), 0x8, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_on}]}) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x400) chdir(&(0x7f0000000400)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) 665.781025ms ago: executing program 0 (id=596): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000ec0)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x240000d4, &(0x7f0000001e40)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000001e80)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 600.237048ms ago: executing program 5 (id=597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x4, 0x26, 0x100, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800001b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 389.274278ms ago: executing program 3 (id=598): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf0}}, 0xffc00003}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd000000801900", [0x8, 0xffffffff9673e359]}}) 387.207304ms ago: executing program 1 (id=611): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000180)="8f688a6e3a8c048805371aa55ce7c180e6842dfc6eed2fd08dd707ca55d43921fcfbb0951409b9", 0x27) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) 184.948845ms ago: executing program 0 (id=599): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, 0x0, 0x0}, 0x94) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 88.698012ms ago: executing program 5 (id=600): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r1, &(0x7f00000008c0)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000000880)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 19.437836ms ago: executing program 4 (id=601): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000280), 0x80000001, 0x28100) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 0s ago: executing program 3 (id=603): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r1) sendto$inet6(r1, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @remote, 0xa}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x401}, 0x8) kernel console output (not intermixed with test programs): .204 Not tainted syzkaller #0 PREEMPT(full) [ 164.714271][ T6570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 164.714288][ T6570] Call Trace: [ 164.714298][ T6570] [ 164.714309][ T6570] dump_stack_lvl+0x100/0x190 [ 164.714354][ T6570] should_fail_ex.cold+0x5/0xa [ 164.714386][ T6570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.714427][ T6570] should_failslab+0xc2/0x120 [ 164.714463][ T6570] __kmalloc_noprof+0xfc/0x840 [ 164.714491][ T6570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.714527][ T6570] ? get_current_details+0x171/0x670 [ 164.714577][ T6570] get_current_details+0x171/0x670 [ 164.714618][ T6570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.714663][ T6570] landlock_merge_ruleset+0x7ea/0xd10 [ 164.714714][ T6570] __do_sys_landlock_restrict_self+0x264/0x10a0 [ 164.714758][ T6570] do_syscall_64+0x123/0x790 [ 164.714791][ T6570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.714821][ T6570] RIP: 0033:0x7f4ca979e559 [ 164.714843][ T6570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.714870][ T6570] RSP: 002b:00007f4caa586028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 164.714898][ T6570] RAX: ffffffffffffffda RBX: 00007f4ca9a25fa0 RCX: 00007f4ca979e559 [ 164.714917][ T6570] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 164.714934][ T6570] RBP: 00007f4ca9835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 164.714951][ T6570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.714968][ T6570] R13: 00007f4ca9a26038 R14: 00007f4ca9a25fa0 R15: 00007ffd1ac51778 [ 164.715008][ T6570] [ 165.488628][ T6581] netlink: 20 bytes leftover after parsing attributes in process `syz.1.208'. [ 165.530276][ T6581] bond0: (slave bond_slave_0): Releasing backup interface [ 165.678032][ T6581] bond_slave_0: entered promiscuous mode [ 165.678059][ T6581] bond_slave_0: entered allmulticast mode [ 166.388437][ T6596] loop4: detected capacity change from 0 to 7 [ 166.404378][ T6596] loop4: [ 166.404401][ T6596] loop4: partition table partially beyond EOD, truncated [ 166.557358][ T5945] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 166.727446][ T5945] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 166.740917][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.761954][ T5945] usb 5-1: config 0 descriptor?? [ 166.847177][ T5945] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 168.108147][ T5945] gspca_stv06xx: I2C: Read error writing address: -71 [ 168.139683][ T5945] usb 5-1: USB disconnect, device number 4 [ 168.419457][ T6626] loop5: detected capacity change from 0 to 32768 [ 168.420570][ T6626] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 168.448249][ T6626] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.221 (6626) [ 168.481079][ T6626] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 168.481117][ T6626] BTRFS info (device loop5): using sha256 checksum algorithm [ 168.695018][ T6626] BTRFS info (device loop5): rebuilding free space tree [ 168.732521][ T6626] BTRFS info (device loop5): disabling free space tree [ 168.732598][ T6626] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 168.732627][ T6626] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 168.744290][ T6626] BTRFS info (device loop5): enabling ssd optimizations [ 168.744320][ T6626] BTRFS info (device loop5): force clearing of disk cache [ 168.744342][ T6626] BTRFS info (device loop5): enabling auto defrag [ 168.744363][ T6626] BTRFS info (device loop5): max_inline set to 0 [ 169.501752][ T6646] ip_tables: iptables: counters copy to user failed while replacing table [ 169.629460][ T6646] ip_tables: iptables: counters copy to user failed while replacing table [ 170.805951][ T6663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.229'. [ 171.212330][ T5619] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 171.238165][ T6668] FAULT_INJECTION: forcing a failure. [ 171.238165][ T6668] name failslab, interval 1, probability 0, space 0, times 0 [ 171.238202][ T6668] CPU: 0 UID: 0 PID: 6668 Comm: syz.0.231 Not tainted syzkaller #0 PREEMPT(full) [ 171.238234][ T6668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 171.238251][ T6668] Call Trace: [ 171.238261][ T6668] [ 171.238271][ T6668] dump_stack_lvl+0x100/0x190 [ 171.238317][ T6668] should_fail_ex.cold+0x5/0xa [ 171.238356][ T6668] should_failslab+0xc2/0x120 [ 171.238392][ T6668] kmem_cache_alloc_noprof+0x92/0x6a0 [ 171.238423][ T6668] ? dst_alloc+0x99/0x1a0 [ 171.238462][ T6668] dst_alloc+0x99/0x1a0 [ 171.238491][ T6668] ? ip6_route_output_flags+0x238/0x650 [ 171.238531][ T6668] ip6_blackhole_route+0x5f/0x4e0 [ 171.238579][ T6668] xfrm_lookup_route+0x10e/0x200 [ 171.238612][ T6668] vti6_tnl_xmit+0x5ac/0x1fe0 [ 171.238658][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.238693][ T6668] ? __lock_acquire+0x5c0/0x1f40 [ 171.238725][ T6668] ? __pfx_vti6_tnl_xmit+0x10/0x10 [ 171.238772][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.238818][ T6668] dev_hard_start_xmit+0x121/0x760 [ 171.238855][ T6668] __dev_queue_xmit+0x1c25/0x4a40 [ 171.238895][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.238930][ T6668] ? rcu_is_watching+0x13/0xc0 [ 171.238971][ T6668] ? __pfx___dev_queue_xmit+0x10/0x10 [ 171.238997][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.239031][ T6668] ? __kasan_kmalloc+0xaa/0xb0 [ 171.239068][ T6668] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 171.239102][ T6668] ? pskb_expand_head+0x249/0x10e0 [ 171.239145][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.239179][ T6668] ? skb_release_data+0x65e/0x860 [ 171.239215][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.239249][ T6668] ? kmalloc_reserve+0xf9/0x350 [ 171.239293][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.239328][ T6668] ? skb_headers_offset_update+0x129/0x260 [ 171.239380][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.239415][ T6668] ? do_csum+0x1e5/0x380 [ 171.239466][ T6668] __bpf_redirect+0x989/0xf90 [ 171.239518][ T6668] bpf_clone_redirect+0x37b/0x500 [ 171.239568][ T6668] bpf_prog_cbaa716d5e7dde70+0x5f/0x68 [ 171.239597][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.239631][ T6668] ? __schedule+0x126b/0x6920 [ 171.239685][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.239725][ T6668] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 171.239776][ T6668] ? __pfx___schedule+0x10/0x10 [ 171.239821][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.239855][ T6668] ? find_held_lock+0x2b/0x80 [ 171.239897][ T6668] ? bpf_test_timer_enter+0xf7/0x2c0 [ 171.239944][ T6668] ? preempt_schedule_thunk+0x16/0x40 [ 171.239981][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.240015][ T6668] ? preempt_schedule_common+0x3c/0xb0 [ 171.240063][ T6668] ? preempt_schedule_thunk+0x16/0x40 [ 171.240098][ T6668] ? __pfx___cant_migrate+0x10/0x10 [ 171.240142][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.240178][ T6668] ? bpf_test_timer_continue+0x17b/0x5e0 [ 171.240228][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.240263][ T6668] bpf_test_run+0x39c/0xa40 [ 171.240311][ T6668] ? bpf_test_run+0x1c6/0xa40 [ 171.240364][ T6668] ? __pfx_bpf_test_run+0x10/0x10 [ 171.240426][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.240460][ T6668] ? do_csum+0x1e5/0x380 [ 171.240515][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.240560][ T6668] bpf_prog_test_run_skb+0x15b3/0x3530 [ 171.240590][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.240630][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.240665][ T6668] ? lock_acquire+0x1d1/0x380 [ 171.240702][ T6668] ? __fget_files+0x131/0x3d0 [ 171.240746][ T6668] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 171.240779][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.240815][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.240850][ T6668] ? fput+0x7c/0x100 [ 171.240884][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.240922][ T6668] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 171.240955][ T6668] __sys_bpf+0x2265/0x4a30 [ 171.241009][ T6668] ? __pfx___sys_bpf+0x10/0x10 [ 171.241051][ T6668] ? find_held_lock+0x2b/0x80 [ 171.241092][ T6668] ? futex_wake+0x4ea/0x5e0 [ 171.241144][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.241180][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.241239][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.241273][ T6668] ? find_held_lock+0x2b/0x80 [ 171.241323][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.241376][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.241411][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.241445][ T6668] ? __x64_sys_futex+0x358/0x4d0 [ 171.241490][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.241524][ T6668] ? xfd_validate_state+0x129/0x190 [ 171.241559][ T6668] ? __x64_sys_bpf+0xce/0x140 [ 171.241602][ T6668] __x64_sys_bpf+0xce/0x140 [ 171.241649][ T6668] ? do_syscall_64+0xae/0x790 [ 171.241679][ T6668] do_syscall_64+0x123/0x790 [ 171.241712][ T6668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.241741][ T6668] RIP: 0033:0x7f349479e559 [ 171.241764][ T6668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.241791][ T6668] RSP: 002b:00007f349573d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 171.241818][ T6668] RAX: ffffffffffffffda RBX: 00007f3494a25fa0 RCX: 00007f349479e559 [ 171.241837][ T6668] RDX: 0000000000000050 RSI: 0000200000001500 RDI: 000000000000000a [ 171.241855][ T6668] RBP: 00007f3494835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 171.241872][ T6668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.241889][ T6668] R13: 00007f3494a26038 R14: 00007f3494a25fa0 R15: 00007ffff2c94a68 [ 171.241929][ T6668] [ 172.577997][ T6677] pimreg: entered allmulticast mode [ 172.606883][ T6678] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 173.488176][ T6698] FAULT_INJECTION: forcing a failure. [ 173.488176][ T6698] name failslab, interval 1, probability 0, space 0, times 0 [ 173.488214][ T6698] CPU: 0 UID: 0 PID: 6698 Comm: syz.0.238 Not tainted syzkaller #0 PREEMPT(full) [ 173.488247][ T6698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 173.488263][ T6698] Call Trace: [ 173.488273][ T6698] [ 173.488284][ T6698] dump_stack_lvl+0x100/0x190 [ 173.488331][ T6698] should_fail_ex.cold+0x5/0xa [ 173.488363][ T6698] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.488404][ T6698] should_failslab+0xc2/0x120 [ 173.488440][ T6698] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 173.488475][ T6698] ? nfs_get_tree+0x76c/0x1450 [ 173.488528][ T6698] kmemdup_nul+0x49/0xd0 [ 173.488573][ T6698] nfs_get_tree+0x76c/0x1450 [ 173.488627][ T6698] vfs_get_tree+0x92/0x320 [ 173.488665][ T6698] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.488702][ T6698] vfs_cmd_create+0xd7/0x2a0 [ 173.488732][ T6698] __do_sys_fsconfig+0x55a/0xcb0 [ 173.488762][ T6698] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 173.488791][ T6698] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.488835][ T6698] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.488877][ T6698] do_syscall_64+0x123/0x790 [ 173.488911][ T6698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.488941][ T6698] RIP: 0033:0x7f349479e559 [ 173.488964][ T6698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.488990][ T6698] RSP: 002b:00007f349573d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 173.489022][ T6698] RAX: ffffffffffffffda RBX: 00007f3494a25fa0 RCX: 00007f349479e559 [ 173.489041][ T6698] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 173.489058][ T6698] RBP: 00007f3494835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 173.489076][ T6698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.489093][ T6698] R13: 00007f3494a26038 R14: 00007f3494a25fa0 R15: 00007ffff2c94a68 [ 173.489137][ T6698] [ 173.792862][ T5945] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 173.941098][ T5945] usb 6-1: Using ep0 maxpacket: 32 [ 173.943889][ T5945] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 173.947231][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.947267][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.947309][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.007502][ T5945] usb 6-1: config 0 descriptor?? [ 174.045609][ T5945] hub 6-1:0.0: USB hub found [ 174.429788][ T5945] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 174.537874][ T52] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 174.926192][ T5945] hid-generic 0003:046D:C31C.0004: unknown main item tag 0x0 [ 175.072714][ T5945] hid-generic 0003:046D:C31C.0004: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 175.403132][ T5945] usb 6-1: USB disconnect, device number 5 [ 175.607454][ T6725] fido_id[6725]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 176.005889][ T6730] FAULT_INJECTION: forcing a failure. [ 176.005889][ T6730] name failslab, interval 1, probability 0, space 0, times 0 [ 176.005928][ T6730] CPU: 0 UID: 0 PID: 6730 Comm: syz.0.247 Not tainted syzkaller #0 PREEMPT(full) [ 176.005961][ T6730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 176.005978][ T6730] Call Trace: [ 176.005987][ T6730] [ 176.005998][ T6730] dump_stack_lvl+0x100/0x190 [ 176.006044][ T6730] should_fail_ex.cold+0x5/0xa [ 176.006077][ T6730] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.006124][ T6730] should_failslab+0xc2/0x120 [ 176.006160][ T6730] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 176.006193][ T6730] ? __alloc_skb+0x140/0x710 [ 176.006234][ T6730] __alloc_skb+0x140/0x710 [ 176.006264][ T6730] ? __alloc_skb+0x5b7/0x710 [ 176.006296][ T6730] ? __pfx___alloc_skb+0x10/0x10 [ 176.006331][ T6730] ? __pfx_ida_alloc_range+0x10/0x10 [ 176.006363][ T6730] ? __mutex_unlock_slowpath+0x35d/0x930 [ 176.006400][ T6730] create_monitor_ctrl_open+0x13d/0x790 [ 176.006443][ T6730] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.006480][ T6730] ? __pfx_create_monitor_ctrl_open+0x10/0x10 [ 176.006526][ T6730] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.006561][ T6730] ? __asan_memset+0x23/0x50 [ 176.006612][ T6730] hci_sock_bind+0xa2c/0x18b0 [ 176.006661][ T6730] ? __pfx_hci_sock_bind+0x10/0x10 [ 176.006707][ T6730] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.006741][ T6730] ? apparmor_socket_bind+0x13d/0x220 [ 176.006797][ T6730] __sys_bind+0x1a9/0x260 [ 176.006826][ T6730] ? __pfx___sys_bind+0x10/0x10 [ 176.006880][ T6730] __x64_sys_bind+0x72/0xb0 [ 176.006905][ T6730] ? lockdep_hardirqs_on+0x7d/0x110 [ 176.006934][ T6730] do_syscall_64+0x123/0x790 [ 176.006967][ T6730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.006997][ T6730] RIP: 0033:0x7f349479e559 [ 176.007019][ T6730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.007048][ T6730] RSP: 002b:00007f349573d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 176.007076][ T6730] RAX: ffffffffffffffda RBX: 00007f3494a25fa0 RCX: 00007f349479e559 [ 176.007096][ T6730] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000000005 [ 176.007118][ T6730] RBP: 00007f3494835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 176.007136][ T6730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.007153][ T6730] R13: 00007f3494a26038 R14: 00007f3494a25fa0 R15: 00007ffff2c94a68 [ 176.007194][ T6730] [ 176.889028][ T6744] device-mapper: ioctl: Unable to rename non-existent device, to uuid DUfwˆ™ª»ÌÝîÿ0 [ 177.284858][ T6752] FAULT_INJECTION: forcing a failure. [ 177.284858][ T6752] name failslab, interval 1, probability 0, space 0, times 0 [ 177.284895][ T6752] CPU: 0 UID: 0 PID: 6752 Comm: syz.4.255 Not tainted syzkaller #0 PREEMPT(full) [ 177.284928][ T6752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 177.284952][ T6752] Call Trace: [ 177.284961][ T6752] [ 177.284972][ T6752] dump_stack_lvl+0x100/0x190 [ 177.285019][ T6752] should_fail_ex.cold+0x5/0xa [ 177.285051][ T6752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.285092][ T6752] should_failslab+0xc2/0x120 [ 177.285133][ T6752] __kmalloc_cache_noprof+0x91/0x6d0 [ 177.285179][ T6752] ? xprt_switch_alloc+0x91/0x3c0 [ 177.285230][ T6752] xprt_switch_alloc+0x91/0x3c0 [ 177.285275][ T6752] rpc_create_xprt+0x2dc/0x440 [ 177.285322][ T6752] rpc_create+0x46e/0x7f0 [ 177.285365][ T6752] ? lock_acquire+0x1d1/0x380 [ 177.285396][ T6752] ? __pfx_rpc_create+0x10/0x10 [ 177.285482][ T6752] ? net_generic+0xea/0x2a0 [ 177.285519][ T6752] ? net_generic+0xea/0x2a0 [ 177.285554][ T6752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.285601][ T6752] nfs_create_rpc_client+0x6a1/0x8f0 [ 177.285642][ T6752] ? __pfx_nfs_create_rpc_client+0x10/0x10 [ 177.285701][ T6752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.285736][ T6752] ? lockdep_init_map_type+0x5c/0x250 [ 177.285770][ T6752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.285804][ T6752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.285839][ T6752] ? lockdep_init_map_type+0x5c/0x250 [ 177.285872][ T6752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.285914][ T6752] nfs4_alloc_client+0x8f0/0xd70 [ 177.285958][ T6752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.285994][ T6752] ? __pfx_nfs4_alloc_client+0x10/0x10 [ 177.286050][ T6752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.286085][ T6752] ? lock_acquire+0x1d1/0x380 [ 177.286118][ T6752] ? net_generic+0x25/0x2a0 [ 177.286159][ T6752] ? nfs_get_client+0x849/0x1230 [ 177.286197][ T6752] ? nfs_get_client+0x849/0x1230 [ 177.286233][ T6752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.286278][ T6752] nfs_get_client+0x87b/0x1230 [ 177.286316][ T6752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.286351][ T6752] ? do_raw_spin_lock+0x128/0x260 [ 177.286399][ T6752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.286440][ T6752] nfs4_set_client+0x3f6/0x640 [ 177.286483][ T6752] nfs4_init_server.isra.0+0x5ad/0xf60 [ 177.286525][ T6752] ? __pfx___debug_object_init+0x10/0x10 [ 177.286561][ T6752] ? __pfx_nfs4_init_server.isra.0+0x10/0x10 [ 177.286626][ T6752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.286665][ T6752] ? __rpc_init_priority_wait_queue+0x38a/0x500 [ 177.286710][ T6752] nfs4_create_server+0x185/0x2b0 [ 177.286753][ T6752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.286791][ T6752] nfs4_try_get_tree+0x93/0x140 [ 177.286834][ T6752] nfs_get_tree+0xa61/0x1450 [ 177.286886][ T6752] vfs_get_tree+0x92/0x320 [ 177.286926][ T6752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.286963][ T6752] path_mount+0x7d0/0x2850 [ 177.287012][ T6752] ? __pfx_path_mount+0x10/0x10 [ 177.287052][ T6752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.287086][ T6752] ? lockdep_hardirqs_on+0x7d/0x110 [ 177.287123][ T6752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.287158][ T6752] ? kmem_cache_free+0x127/0x6c0 [ 177.287215][ T6752] ? __x64_sys_mount+0x293/0x310 [ 177.287256][ T6752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.287290][ T6752] __x64_sys_mount+0x293/0x310 [ 177.287333][ T6752] ? __pfx___x64_sys_mount+0x10/0x10 [ 177.287380][ T6752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.287422][ T6752] do_syscall_64+0x123/0x790 [ 177.287455][ T6752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.287485][ T6752] RIP: 0033:0x7f4ca979e559 [ 177.287508][ T6752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.287536][ T6752] RSP: 002b:00007f4caa586028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 177.287564][ T6752] RAX: ffffffffffffffda RBX: 00007f4ca9a25fa0 RCX: 00007f4ca979e559 [ 177.287583][ T6752] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 177.287602][ T6752] RBP: 00007f4ca9835ab8 R08: 0000200000000140 R09: 0000000000000000 [ 177.287621][ T6752] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000000 [ 177.287639][ T6752] R13: 00007f4ca9a26038 R14: 00007f4ca9a25fa0 R15: 00007ffd1ac51778 [ 177.287679][ T6752] [ 178.166250][ T6765] Bluetooth: hci0: service_discovery: too big uuid_count value 65529 [ 179.218437][ T6788] loop3: detected capacity change from 0 to 512 [ 179.219354][ T6788] EXT4-fs: Ignoring removed bh option [ 179.258950][ T6791] loop5: detected capacity change from 0 to 128 [ 179.346049][ T6791] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 179.364484][ T6791] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.381660][ T6788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.381782][ T6788] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.742897][ T31] audit: type=1326 audit(1792216240.728:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.4.271" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca979e559 code=0x7ffc0000 [ 179.742963][ T31] audit: type=1326 audit(1792216240.728:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.4.271" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca979e559 code=0x7ffc0000 [ 179.814012][ T31] audit: type=1326 audit(1792216240.798:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.4.271" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca979e559 code=0x7ffc0000 [ 179.818283][ T31] audit: type=1326 audit(1792216240.798:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.4.271" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca979e559 code=0x7ffc0000 [ 179.884981][ T6800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.885106][ T31] audit: type=1326 audit(1792216240.868:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.4.271" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f4ca979e559 code=0x7ffc0000 [ 179.889729][ T31] audit: type=1326 audit(1792216240.868:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.4.271" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca979e559 code=0x7ffc0000 [ 179.889791][ T31] audit: type=1326 audit(1792216240.868:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.4.271" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca979e559 code=0x7ffc0000 [ 179.992776][ T31] audit: type=1326 audit(1792216240.868:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.4.271" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca979e559 code=0x7ffc0000 [ 179.992839][ T31] audit: type=1326 audit(1792216240.968:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.4.271" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f4ca979e559 code=0x7ffc0000 [ 179.992895][ T31] audit: type=1326 audit(1792216240.968:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.4.271" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca979e559 code=0x7ffc0000 [ 180.193196][ T5619] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.285833][ T6009] IPVS: starting estimator thread 0... [ 180.375319][ T6806] IPVS: using max 30 ests per chain, 72000 per kthread [ 180.716106][ T6817] FAULT_INJECTION: forcing a failure. [ 180.716106][ T6817] name failslab, interval 1, probability 0, space 0, times 0 [ 180.716150][ T6817] CPU: 0 UID: 0 PID: 6817 Comm: syz.0.277 Not tainted syzkaller #0 PREEMPT(full) [ 180.716183][ T6817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 180.716200][ T6817] Call Trace: [ 180.716209][ T6817] [ 180.716220][ T6817] dump_stack_lvl+0x100/0x190 [ 180.716266][ T6817] should_fail_ex.cold+0x5/0xa [ 180.716299][ T6817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.716339][ T6817] should_failslab+0xc2/0x120 [ 180.716375][ T6817] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 180.716408][ T6817] ? __alloc_skb+0x140/0x710 [ 180.716449][ T6817] __alloc_skb+0x140/0x710 [ 180.716480][ T6817] ? __alloc_skb+0x5b7/0x710 [ 180.716512][ T6817] ? __pfx___alloc_skb+0x10/0x10 [ 180.716556][ T6817] __pskb_copy_fclone+0xf2/0xe30 [ 180.716596][ T6817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.716630][ T6817] ? find_held_lock+0x2b/0x80 [ 180.716675][ T6817] ? __might_fault+0xc5/0x140 [ 180.716726][ T6817] tipc_msg_reassemble+0x34d/0x4f0 [ 180.716775][ T6817] ? __pfx_tipc_msg_reassemble+0x10/0x10 [ 180.716821][ T6817] ? __might_fault+0x111/0x140 [ 180.716864][ T6817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.716901][ T6817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.716936][ T6817] ? lockdep_init_map_type+0x5c/0x250 [ 180.716976][ T6817] tipc_mcast_xmit+0x56b/0xfc0 [ 180.717017][ T6817] ? __lock_acquire+0x5c0/0x1f40 [ 180.717055][ T6817] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 180.717095][ T6817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.717135][ T6817] ? skb_put+0x138/0x180 [ 180.717208][ T6817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.717250][ T6817] ? tipc_sendmcast+0x87b/0xba0 [ 180.717289][ T6817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.717324][ T6817] tipc_sendmcast+0x87b/0xba0 [ 180.717364][ T6817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.717399][ T6817] ? __lock_acquire+0x5c0/0x1f40 [ 180.717443][ T6817] ? __pfx_tipc_sendmcast+0x10/0x10 [ 180.717485][ T6817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.717521][ T6817] ? clockevents_program_event+0x23e/0x820 [ 180.717569][ T6817] ? clockevents_program_event+0x23e/0x820 [ 180.717614][ T6817] ? clockevents_program_event+0x23e/0x820 [ 180.717656][ T6817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.717696][ T6817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.717736][ T6817] ? __pfx_woken_wake_function+0x10/0x10 [ 180.717776][ T6817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.717811][ T6817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.717863][ T6817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.717907][ T6817] __tipc_sendmsg+0x6b9/0x1ab0 [ 180.717947][ T6817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.717982][ T6817] ? register_lock_class+0x3f/0x7b0 [ 180.718024][ T6817] ? __pfx___tipc_sendmsg+0x10/0x10 [ 180.718064][ T6817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.718099][ T6817] ? __lock_acquire+0x5c0/0x1f40 [ 180.718138][ T6817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.718173][ T6817] ? aa_sk_perm+0x389/0xab0 [ 180.718216][ T6817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.718251][ T6817] ? lock_acquire+0x1d1/0x380 [ 180.718295][ T6817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.718332][ T6817] ? __local_bh_enable_ip+0xa5/0x120 [ 180.718367][ T6817] tipc_sendmsg+0x4f/0x70 [ 180.718410][ T6817] ____sys_sendmsg+0xa4d/0xbe0 [ 180.718452][ T6817] ? __pfx_tipc_sendmsg+0x10/0x10 [ 180.718498][ T6817] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.718561][ T6817] ___sys_sendmsg+0x190/0x1e0 [ 180.718611][ T6817] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.718658][ T6817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.718693][ T6817] ? futex_wait+0x11e/0x370 [ 180.718735][ T6817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.718770][ T6817] ? find_held_lock+0x2b/0x80 [ 180.718838][ T6817] __sys_sendmsg+0x160/0x210 [ 180.718875][ T6817] ? __pfx___sys_sendmsg+0x10/0x10 [ 180.718925][ T6817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.718967][ T6817] do_syscall_64+0x123/0x790 [ 180.719001][ T6817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.719032][ T6817] RIP: 0033:0x7f349479e559 [ 180.719054][ T6817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.719083][ T6817] RSP: 002b:00007f349573d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.719114][ T6817] RAX: ffffffffffffffda RBX: 00007f3494a25fa0 RCX: 00007f349479e559 [ 180.719134][ T6817] RDX: 0000000004046840 RSI: 0000200000000080 RDI: 0000000000000004 [ 180.719152][ T6817] RBP: 00007f3494835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 180.719171][ T6817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.719189][ T6817] R13: 00007f3494a26038 R14: 00007f3494a25fa0 R15: 00007ffff2c94a68 [ 180.719229][ T6817] [ 183.235243][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.293'. [ 183.380207][ T6868] FAULT_INJECTION: forcing a failure. [ 183.380207][ T6868] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 183.380248][ T6868] CPU: 0 UID: 0 PID: 6868 Comm: syz.1.296 Not tainted syzkaller #0 PREEMPT(full) [ 183.380282][ T6868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 183.380300][ T6868] Call Trace: [ 183.380309][ T6868] [ 183.380321][ T6868] dump_stack_lvl+0x100/0x190 [ 183.380367][ T6868] should_fail_ex.cold+0x5/0xa [ 183.380407][ T6868] _copy_from_user+0x2e/0xd0 [ 183.380442][ T6868] memdup_user_nul+0x6c/0x120 [ 183.380489][ T6868] proc_simple_write+0xc1/0x1a0 [ 183.380521][ T6868] ? __pfx_proc_simple_write+0x10/0x10 [ 183.380554][ T6868] proc_reg_write+0x240/0x330 [ 183.380604][ T6868] vfs_write+0x2aa/0x1050 [ 183.380633][ T6868] ? __pfx_proc_reg_write+0x10/0x10 [ 183.380676][ T6868] ? lock_acquire+0x1d1/0x380 [ 183.380708][ T6868] ? __fget_files+0x34/0x3d0 [ 183.380742][ T6868] ? __pfx_vfs_write+0x10/0x10 [ 183.380767][ T6868] ? find_held_lock+0x2b/0x80 [ 183.380810][ T6868] ? __fget_files+0x215/0x3d0 [ 183.380850][ T6868] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.380885][ T6868] ? __fget_files+0x21f/0x3d0 [ 183.380931][ T6868] ksys_write+0x12a/0x250 [ 183.380958][ T6868] ? __pfx_ksys_write+0x10/0x10 [ 183.380990][ T6868] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.381032][ T6868] do_syscall_64+0x123/0x790 [ 183.381066][ T6868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.381096][ T6868] RIP: 0033:0x7ff2f1f9e559 [ 183.381124][ T6868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.381153][ T6868] RSP: 002b:00007ff2f2e36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 183.381180][ T6868] RAX: ffffffffffffffda RBX: 00007ff2f2225fa0 RCX: 00007ff2f1f9e559 [ 183.381200][ T6868] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000003 [ 183.381218][ T6868] RBP: 00007ff2f2035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 183.381236][ T6868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.381254][ T6868] R13: 00007ff2f2226038 R14: 00007ff2f2225fa0 R15: 00007ffc9d0621c8 [ 183.381294][ T6868] [ 183.748640][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.293'. [ 183.763496][ T6019] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.763576][ T6019] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.763627][ T6019] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.763670][ T6019] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.030345][ T50] IPVS: starting estimator thread 0... [ 184.122497][ T6879] IPVS: using max 30 ests per chain, 72000 per kthread [ 184.798920][ T6897] loop0: detected capacity change from 0 to 1024 [ 184.860246][ T6897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 184.860359][ T6897] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.941873][ T1221] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 185.045377][ T6897] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm syz.0.307: lblock 0 mapped to illegal pblock 0 (length 1) [ 185.092194][ T1221] usb 3-1: Using ep0 maxpacket: 16 [ 185.092637][ T6897] EXT4-fs (loop0): Remounting filesystem read-only [ 185.115975][ T1221] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 185.156378][ T1221] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.156419][ T1221] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.156450][ T1221] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.156485][ T1221] usb 3-1: config 0 interface 0 has no altsetting 0 [ 185.156521][ T1221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.235097][ T1221] usb 3-1: config 0 descriptor?? [ 185.467413][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 185.656349][ T6909] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 185.854115][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.312'. [ 185.929870][ T6916] FAULT_INJECTION: forcing a failure. [ 185.929870][ T6916] name failslab, interval 1, probability 0, space 0, times 0 [ 185.929922][ T6916] CPU: 1 UID: 0 PID: 6916 Comm: syz.5.313 Not tainted syzkaller #0 PREEMPT(full) [ 185.929968][ T6916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 185.929992][ T6916] Call Trace: [ 185.930004][ T6916] [ 185.930019][ T6916] dump_stack_lvl+0x100/0x190 [ 185.930081][ T6916] should_fail_ex.cold+0x5/0xa [ 185.930124][ T6916] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.930185][ T6916] should_failslab+0xc2/0x120 [ 185.930234][ T6916] __kmalloc_cache_node_noprof+0x94/0x720 [ 185.930280][ T6916] ? __alloc_workqueue+0xdba/0x1950 [ 185.930329][ T6916] ? init_rescuer+0x19f/0x550 [ 185.930394][ T6916] init_rescuer+0x19f/0x550 [ 185.930447][ T6916] ? __pfx_init_rescuer+0x10/0x10 [ 185.930501][ T6916] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 185.930566][ T6916] __alloc_workqueue+0xe82/0x1950 [ 185.930632][ T6916] alloc_workqueue_noprof+0xc7/0x130 [ 185.930682][ T6916] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 185.930743][ T6916] ? __pfx___debug_object_init+0x10/0x10 [ 185.930804][ T6916] nci_register_device+0x21e/0xb80 [ 185.930865][ T6916] ? __pfx_nci_register_device+0x10/0x10 [ 185.930928][ T6916] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.930972][ T6916] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.931019][ T6916] ? lockdep_init_map_type+0x5c/0x250 [ 185.931063][ T6916] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.931118][ T6916] virtual_ncidev_open+0x141/0x220 [ 185.931179][ T6916] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 185.931232][ T6916] misc_open+0x26d/0x450 [ 185.931268][ T6916] ? __pfx_misc_open+0x10/0x10 [ 185.931327][ T6916] chrdev_open+0x234/0x6a0 [ 185.931373][ T6916] ? __pfx_chrdev_open+0x10/0x10 [ 185.931420][ T6916] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.931466][ T6916] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 185.931537][ T6916] do_dentry_open+0x6ab/0x14d0 [ 185.931575][ T6916] ? __pfx_chrdev_open+0x10/0x10 [ 185.931623][ T6916] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.931676][ T6916] vfs_open+0x82/0x3f0 [ 185.931724][ T6916] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.931778][ T6916] path_openat+0x1a23/0x2450 [ 185.931834][ T6916] ? __pfx_path_openat+0x10/0x10 [ 185.931896][ T6916] do_file_open+0x20e/0x430 [ 185.931947][ T6916] ? __pfx_do_file_open+0x10/0x10 [ 185.932031][ T6916] ? _raw_spin_unlock+0x28/0x50 [ 185.932106][ T6916] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.932197][ T6916] ? alloc_fd+0x471/0x7a0 [ 185.932260][ T6916] do_sys_openat2+0x10f/0x1e0 [ 185.932313][ T6916] ? __pfx_do_sys_openat2+0x10/0x10 [ 185.932367][ T6916] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.932413][ T6916] ? find_held_lock+0x2b/0x80 [ 185.932467][ T6916] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.932526][ T6916] __x64_sys_openat+0x12d/0x210 [ 185.932579][ T6916] ? __pfx___x64_sys_openat+0x10/0x10 [ 185.932642][ T6916] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.932699][ T6916] do_syscall_64+0x123/0x790 [ 185.932744][ T6916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.932785][ T6916] RIP: 0033:0x7ffa2fb9e559 [ 185.932816][ T6916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.932854][ T6916] RSP: 002b:00007ffa30ab4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 185.932892][ T6916] RAX: ffffffffffffffda RBX: 00007ffa2fe25fa0 RCX: 00007ffa2fb9e559 [ 185.932919][ T6916] RDX: 0000000000000002 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 185.932945][ T6916] RBP: 00007ffa2fc35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 185.932970][ T6916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.932994][ T6916] R13: 00007ffa2fe26038 R14: 00007ffa2fe25fa0 R15: 00007ffe07e0df98 [ 185.933047][ T6916] [ 185.965804][ T6916] workqueue: Failed to allocate a rescuer for wq "nfc2_nci_cmd_wq" [ 186.508420][ T6922] bridge_slave_0: left allmulticast mode [ 186.508458][ T6922] bridge_slave_0: left promiscuous mode [ 186.508732][ T6922] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.726429][ T6924] binder: 6923:6924 ioctl c0306201 200000000040 returned -11 [ 186.727080][ T6924] binder: 6923:6924 ioctl c0306201 200000000640 returned -22 [ 186.991295][ T6932] ip_tables: iptables: counters copy to user failed while replacing table [ 187.081157][ T5750] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 187.246680][ T5750] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 187.251810][ T5750] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 187.251850][ T5750] usb 1-1: config 0 has no interface number 0 [ 187.251904][ T5750] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 187.251949][ T5750] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 187.254014][ T5750] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 187.254051][ T5750] usb 1-1: Product: syz [ 187.254077][ T5750] usb 1-1: SerialNumber: syz [ 187.271209][ T5750] usb 1-1: config 0 descriptor?? [ 187.303530][ T5750] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 187.638351][ T1221] usbhid 3-1:0.0: can't add hid device: -71 [ 187.638482][ T1221] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 187.670833][ T1221] usb 3-1: USB disconnect, device number 10 [ 187.903395][ T6926] loop0: detected capacity change from 0 to 40427 [ 187.922553][ T6926] F2FS-fs (loop0): Image doesn't support compression [ 187.922582][ T6926] F2FS-fs (loop0): build fault injection rate: 690 [ 187.930015][ T6926] F2FS-fs (loop0): invalid crc value [ 188.055535][ T6926] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 188.059371][ T6926] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 188.724350][ T5751] usb 1-1: USB disconnect, device number 3 [ 188.927886][ T6978] 9pnet_fd: p9_fd_create_tcp (6978): problem connecting socket to 127.0.0.1 [ 189.419249][ T5621] syz-executor: attempt to access beyond end of device [ 189.419249][ T5621] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 189.451688][ T5621] CPU: 0 UID: 0 PID: 5621 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 189.451741][ T5621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 189.451765][ T5621] Call Trace: [ 189.451778][ T5621] [ 189.451792][ T5621] dump_stack_lvl+0x100/0x190 [ 189.451854][ T5621] f2fs_stop_checkpoint+0x5e6/0xb30 [ 189.451913][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.451961][ T5621] ? errseq_set+0xe3/0x150 [ 189.452000][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.452069][ T5621] f2fs_write_end_bio+0xef9/0x12d0 [ 189.452138][ T5621] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 189.452200][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.452253][ T5621] ? find_held_lock+0x2b/0x80 [ 189.452308][ T5621] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 189.452357][ T5621] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 189.452403][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.452458][ T5621] f2fs_write_end_io+0xc8/0x240 [ 189.452518][ T5621] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 189.452580][ T5621] bio_endio+0x7ba/0x9c0 [ 189.452638][ T5621] submit_bio_noacct+0x22a/0x2130 [ 189.452717][ T5621] f2fs_submit_write_bio+0x133/0x330 [ 189.452779][ T5621] __submit_merged_bio+0x330/0x7b0 [ 189.452841][ T5621] ? rcu_is_watching+0x13/0xc0 [ 189.452902][ T5621] __submit_merged_write_cond+0x3fe/0x510 [ 189.452977][ T5621] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 189.453054][ T5621] ? __pfx___might_resched+0x10/0x10 [ 189.453116][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.453162][ T5621] ? folio_clear_dirty_for_io+0x178/0x960 [ 189.453231][ T5621] f2fs_write_cache_pages+0x20e9/0x2630 [ 189.453298][ T5621] ? __lock_acquire+0x5c0/0x1f40 [ 189.453340][ T5621] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 189.453386][ T5621] ? __kasan_check_byte+0x13/0x50 [ 189.453434][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.453482][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.453528][ T5621] ? rcu_is_watching+0x13/0xc0 [ 189.453584][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.453634][ T5621] ? __kasan_check_byte+0x13/0x50 [ 189.453680][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.453729][ T5621] ? is_bpf_text_address+0x8a/0x1a0 [ 189.453775][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.453822][ T5621] ? rcu_is_watching+0x13/0xc0 [ 189.453890][ T5621] ? kernel_text_address+0x8d/0x100 [ 189.453949][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.454000][ T5621] ? __kernel_text_address+0xd/0x30 [ 189.454120][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.454166][ T5621] ? check_prev_add+0x354/0xe60 [ 189.454209][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.454257][ T5621] ? rcu_is_watching+0x13/0xc0 [ 189.454318][ T5621] f2fs_write_data_pages+0x799/0x16d0 [ 189.454378][ T5621] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 189.454422][ T5621] ? lock_acquire+0x1d1/0x380 [ 189.454471][ T5621] ? do_writepages+0x4b5/0x600 [ 189.454529][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.454581][ T5621] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 189.454636][ T5621] do_writepages+0x278/0x600 [ 189.454703][ T5621] ? __pfx_do_writepages+0x10/0x10 [ 189.454761][ T5621] ? do_raw_spin_unlock+0x145/0x1e0 [ 189.454814][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.454859][ T5621] ? _raw_spin_unlock+0x28/0x50 [ 189.454923][ T5621] filemap_writeback+0x22d/0x2e0 [ 189.454989][ T5621] ? __pfx_filemap_writeback+0x10/0x10 [ 189.455108][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.455155][ T5621] ? find_held_lock+0x2b/0x80 [ 189.455211][ T5621] ? f2fs_sync_dirty_inodes+0x38f/0x960 [ 189.455256][ T5621] ? f2fs_sync_dirty_inodes+0x38f/0x960 [ 189.455301][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.455362][ T5621] f2fs_sync_dirty_inodes+0x452/0x960 [ 189.455427][ T5621] block_operations+0x2a6/0xfc0 [ 189.455484][ T5621] ? __pfx_block_operations+0x10/0x10 [ 189.455587][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.455642][ T5621] ? ktime_get+0x22c/0x320 [ 189.455686][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.455733][ T5621] ? rcu_is_watching+0x13/0xc0 [ 189.455794][ T5621] f2fs_write_checkpoint+0x58b/0x53e0 [ 189.455871][ T5621] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 189.455929][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.455976][ T5621] ? rcu_is_watching+0x13/0xc0 [ 189.456028][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.456074][ T5621] ? kthread_stop+0x280/0x630 [ 189.456131][ T5621] kill_f2fs_super+0x3f1/0x4a0 [ 189.456176][ T5621] ? __pfx_kill_f2fs_super+0x10/0x10 [ 189.456243][ T5621] ? lockdep_hardirqs_on+0x7d/0x110 [ 189.456281][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.456330][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.456393][ T5621] deactivate_locked_super+0xbd/0x130 [ 189.456459][ T5621] deactivate_super+0xea/0x110 [ 189.456526][ T5621] cleanup_mnt+0xb7/0x160 [ 189.456587][ T5621] task_work_run+0x150/0x240 [ 189.456652][ T5621] ? __pfx_task_work_run+0x10/0x10 [ 189.456715][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.456771][ T5621] exit_to_user_mode_loop+0x1d8/0x700 [ 189.456818][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 189.456864][ T5621] ? rcu_is_watching+0x13/0xc0 [ 189.456922][ T5621] do_syscall_64+0x661/0x790 [ 189.456966][ T5621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.457006][ T5621] RIP: 0033:0x7f349479f797 [ 189.457037][ T5621] Code: a2 c7 05 5c 7f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 189.457074][ T5621] RSP: 002b:00007ffff2c93cd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 189.457111][ T5621] RAX: 0000000000000000 RBX: 00007f3494834efb RCX: 00007f349479f797 [ 189.457137][ T5621] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffff2c93d90 [ 189.457161][ T5621] RBP: 00007ffff2c93d90 R08: 00007ffff2c94d90 R09: 00000000ffffffff [ 189.457187][ T5621] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffff2c94e20 [ 189.457212][ T5621] R13: 00007f3494834efb R14: 000000000002ced6 R15: 00007ffff2c94e60 [ 189.457264][ T5621] [ 189.659939][ T5621] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 192.055586][ T7029] netlink: 24 bytes leftover after parsing attributes in process `syz.3.349'. [ 192.071761][ T7027] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 192.248758][ T6009] Bluetooth: hci6: Frame reassembly failed (-84) [ 192.248799][ T6009] Bluetooth: hci6: Frame reassembly failed (-84) [ 192.248944][ T1088] Bluetooth: hci6: Frame reassembly failed (-84) [ 193.006445][ T6019] IPVS: starting estimator thread 0... [ 193.033322][ T7062] loop2: detected capacity change from 0 to 512 [ 193.091762][ T7064] IPVS: using max 27 ests per chain, 64800 per kthread [ 193.109262][ T7062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.304875][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.418915][ T7076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.361'. [ 193.708816][ T7084] loop2: detected capacity change from 0 to 16 [ 193.720251][ T7084] erofs: Unknown parameter 'no' [ 193.734840][ T7083] grow_buffers: requested out-of-range block 18446744073709551615 for device sda1 [ 193.734880][ T7083] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 194.294600][ T5633] Bluetooth: hci6: command 0x1003 tx timeout [ 194.294684][ T52] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 195.363745][ T7098] loop0: detected capacity change from 0 to 512 [ 195.422258][ T7098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.422403][ T7098] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.547614][ T7098] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 195.552757][ T7111] tipc: Started in network mode [ 195.552798][ T7111] tipc: Node identity ac1414aa, cluster identity 4711 [ 195.556791][ T7111] tipc: New replicast peer: 172.20.20.187 [ 195.568976][ T7111] tipc: Enabled bearer , priority 10 [ 195.613048][ T7098] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 195.613095][ T7098] EXT4-fs (loop0): This should not happen!! Data will be lost [ 195.613095][ T7098] [ 195.613121][ T7098] EXT4-fs (loop0): Total free blocks count 0 [ 195.613146][ T7098] EXT4-fs (loop0): Free/Dirty block details [ 195.613234][ T7098] EXT4-fs (loop0): free_blocks=65280 [ 195.613289][ T7098] EXT4-fs (loop0): dirty_blocks=33 [ 195.613313][ T7098] EXT4-fs (loop0): Block reservation details [ 195.613336][ T7098] EXT4-fs (loop0): i_reserved_data_blocks=33 [ 195.661587][ T31] kauditd_printk_skb: 24 callbacks suppressed [ 195.661612][ T31] audit: type=1804 audit(1792216512.645:1497): pid=7098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.371" name="/newroot/68/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 195.693920][ T7098] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 196.213348][ T52] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 196.284444][ T7127] Bluetooth: (null): Too short H5 packet [ 196.322434][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.333702][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.337258][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.342475][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.348444][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.400075][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.409048][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.423753][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.428007][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.436950][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.442256][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.449107][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.462824][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.473458][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.506176][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.527685][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.550047][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.555361][ T30] tipc: Node number set to 2886997162 [ 196.599626][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.609619][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.617156][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.625734][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.632278][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.643125][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.648707][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.656141][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.674124][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.679231][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.688184][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.694299][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.703642][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.725169][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.732005][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.745930][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.754244][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.764967][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.776801][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.785826][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.794875][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.811286][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.813022][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.814746][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.816277][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.817833][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.819352][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.831626][ T7138] loop0: detected capacity change from 0 to 1024 [ 196.874448][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.894088][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.899985][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.912765][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.920967][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.939936][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.957914][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.959614][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.961178][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.962697][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.964481][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.965975][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.967642][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 196.969136][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 197.000579][ T7138] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 197.000728][ T7138] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 197.000761][ T7138] EXT4-fs error (device loop0): ext4_acquire_dquot:7077: comm syz.0.385: Failed to acquire dquot type 0 [ 197.000799][ T7138] loop0: lost filesystem error report for type 5 error -117 [ 197.010401][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 197.010432][ C1] EXT4-fs (loop0): initial error at time 1792216513: ext4_acquire_dquot:7077 [ 197.010470][ C1] EXT4-fs (loop0): last error at time 1792216513: ext4_acquire_dquot:7077 [ 197.040042][ T7138] EXT4-fs error (device loop0): mb_free_blocks:2046: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 197.068005][ T7138] EXT4-fs (loop0): 1 truncate cleaned up [ 197.099857][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 197.106987][ T7138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.153448][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 197.171934][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 197.186452][ T7138] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 197.196249][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 197.205666][ T7138] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 197.205705][ T7138] EXT4-fs error (device loop0): ext4_acquire_dquot:7077: comm syz.0.385: Failed to acquire dquot type 0 [ 197.215256][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 197.237404][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 197.257641][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 197.274167][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 197.289481][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 197.306638][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 197.316607][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 197.327458][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 197.336792][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 197.352679][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 197.367338][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 197.377771][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 197.386963][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 197.400229][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 197.424917][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 197.438505][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 197.449319][ T7131] 9pnet_fd: p9_fd_create_tcp (7131): problem connecting socket to 127.0.0.1 [ 197.495809][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.905823][ T7155] Invalid ELF header magic: != ELF [ 197.984491][ T7157] FAULT_INJECTION: forcing a failure. [ 197.984491][ T7157] name failslab, interval 1, probability 0, space 0, times 0 [ 197.984543][ T7157] CPU: 1 UID: 0 PID: 7157 Comm: syz.5.393 Not tainted syzkaller #0 PREEMPT(full) [ 197.984588][ T7157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 197.984612][ T7157] Call Trace: [ 197.984624][ T7157] [ 197.984639][ T7157] dump_stack_lvl+0x100/0x190 [ 197.984700][ T7157] should_fail_ex.cold+0x5/0xa [ 197.984744][ T7157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.984799][ T7157] should_failslab+0xc2/0x120 [ 197.984847][ T7157] __kmalloc_noprof+0xfc/0x840 [ 197.984887][ T7157] ? __lock_acquire+0x5c0/0x1f40 [ 197.984930][ T7157] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 197.984983][ T7157] vb2_core_allocated_buffers_storage+0xc4/0x220 [ 197.985029][ T7157] vb2_core_reqbufs+0x382/0xf30 [ 197.985071][ T7157] ? __video_do_ioctl+0x500/0xdf0 [ 197.985138][ T7157] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 197.985174][ T7157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.985220][ T7157] ? rcu_is_watching+0x13/0xc0 [ 197.985271][ T7157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.985324][ T7157] ? __video_do_ioctl+0x50f/0xdf0 [ 197.985377][ T7157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.985429][ T7157] vb2_reqbufs+0x1a3/0x1f0 [ 197.985485][ T7157] ? __pfx_vb2_reqbufs+0x10/0x10 [ 197.985550][ T7157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.985593][ T7157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.985646][ T7157] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 197.985690][ T7157] v4l_reqbufs+0x175/0x1d0 [ 197.985740][ T7157] __video_do_ioctl+0xb2a/0xdf0 [ 197.985799][ T7157] ? __might_fault+0xc5/0x140 [ 197.985855][ T7157] ? __pfx___video_do_ioctl+0x10/0x10 [ 197.985930][ T7157] video_usercopy+0x47a/0x1730 [ 197.985988][ T7157] ? __pfx___video_do_ioctl+0x10/0x10 [ 197.986047][ T7157] ? __pfx_video_usercopy+0x10/0x10 [ 197.986124][ T7157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 197.986179][ T7157] ? __fget_files+0x21f/0x3d0 [ 197.986230][ T7157] v4l2_ioctl+0x1bd/0x250 [ 197.986287][ T7157] ? __pfx_v4l2_ioctl+0x10/0x10 [ 197.986347][ T7157] __x64_sys_ioctl+0x18e/0x210 [ 197.986415][ T7157] do_syscall_64+0x123/0x790 [ 197.986460][ T7157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.986501][ T7157] RIP: 0033:0x7ffa2fb9e559 [ 197.986531][ T7157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.986569][ T7157] RSP: 002b:00007ffa30ab4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.986606][ T7157] RAX: ffffffffffffffda RBX: 00007ffa2fe25fa0 RCX: 00007ffa2fb9e559 [ 197.986632][ T7157] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000004 [ 197.986657][ T7157] RBP: 00007ffa2fc35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 197.986682][ T7157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.986706][ T7157] R13: 00007ffa2fe26038 R14: 00007ffa2fe25fa0 R15: 00007ffe07e0df98 [ 197.986759][ T7157] [ 198.357950][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.395'. [ 198.357987][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.395'. [ 198.613353][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.613431][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.923973][ T7183] VFS: Lookup of 'devices.allow' in fuse fuse would have caused loop [ 198.938037][ T7193] Bluetooth: ISO socket layer initialized [ 198.945346][ T52] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 199.716493][ T7217] netlink: 24 bytes leftover after parsing attributes in process `syz.3.414'. [ 200.256578][ T7230] loop1: detected capacity change from 0 to 2048 [ 200.344862][ T7230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 200.657758][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 201.083861][ T7257] loop5: detected capacity change from 0 to 4096 [ 201.144820][ T7257] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 201.389692][ T7265] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 201.408781][ T7257] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 201.643765][ T7270] FAULT_INJECTION: forcing a failure. [ 201.643765][ T7270] name failslab, interval 1, probability 0, space 0, times 0 [ 201.643815][ T7270] CPU: 0 UID: 0 PID: 7270 Comm: syz.2.433 Not tainted syzkaller #0 PREEMPT(full) [ 201.643857][ T7270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 201.643879][ T7270] Call Trace: [ 201.643890][ T7270] [ 201.643905][ T7270] dump_stack_lvl+0x100/0x190 [ 201.643964][ T7270] should_fail_ex.cold+0x5/0xa [ 201.644005][ T7270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.644057][ T7270] should_failslab+0xc2/0x120 [ 201.644103][ T7270] __kmalloc_noprof+0xfc/0x840 [ 201.644144][ T7270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.644188][ T7270] ? trace_kmem_cache_alloc+0xdd/0x100 [ 201.644235][ T7270] ? tnode_new+0x2f7/0x350 [ 201.644287][ T7270] tnode_new+0x2f7/0x350 [ 201.644333][ T7270] fib_insert_alias+0x6e7/0xe30 [ 201.644380][ T7270] ? lockdep_rtnl_is_held+0x26/0x40 [ 201.644427][ T7270] fib_trie_unmerge+0x289/0xbd0 [ 201.644487][ T7270] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 201.644545][ T7270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.644592][ T7270] ? lock_acquire+0x1d1/0x380 [ 201.644644][ T7270] fib_unmerge+0xee/0x510 [ 201.644702][ T7270] ? fib_nl2rule_locked+0x3ef/0x740 [ 201.644764][ T7270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.644818][ T7270] fib4_rule_configure+0xaba/0x1160 [ 201.644863][ T7270] ? fib_nl2rule_locked+0x3fe/0x740 [ 201.644928][ T7270] fib_newrule+0x3c3/0x1e50 [ 201.645007][ T7270] ? __pfx_fib_newrule+0x10/0x10 [ 201.645071][ T7270] ? __entry_text_end+0x102035/0x102039 [ 201.645123][ T7270] ? kmem_cache_free+0x127/0x6c0 [ 201.645182][ T7270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.645229][ T7270] ? skb_release_data+0x65e/0x860 [ 201.645312][ T7270] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 201.645367][ T7270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.645415][ T7270] ? find_held_lock+0x2b/0x80 [ 201.645471][ T7270] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 201.645524][ T7270] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 201.645575][ T7270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.645627][ T7270] ? __pfx_fib_nl_newrule+0x10/0x10 [ 201.645694][ T7270] rtnetlink_rcv_msg+0x95e/0xe90 [ 201.645753][ T7270] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 201.645821][ T7270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.645868][ T7270] ? ref_tracker_free+0x37e/0x6c0 [ 201.645927][ T7270] netlink_rcv_skb+0x159/0x420 [ 201.645974][ T7270] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 201.646032][ T7270] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 201.646095][ T7270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.646149][ T7270] ? netlink_deliver_tap+0x1ae/0xcc0 [ 201.646201][ T7270] netlink_unicast+0x65f/0x950 [ 201.646254][ T7270] ? __pfx_netlink_unicast+0x10/0x10 [ 201.646315][ T7270] netlink_sendmsg+0x8b0/0xda0 [ 201.646368][ T7270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.646418][ T7270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.646466][ T7270] ? apparmor_socket_sendmsg+0x165/0x280 [ 201.646546][ T7270] ____sys_sendmsg+0xa4d/0xbe0 [ 201.646605][ T7270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.646655][ T7270] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.646741][ T7270] ___sys_sendmsg+0x190/0x1e0 [ 201.646809][ T7270] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.646874][ T7270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.646921][ T7270] ? futex_wait+0x11e/0x370 [ 201.646978][ T7270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.647026][ T7270] ? find_held_lock+0x2b/0x80 [ 201.647116][ T7270] __sys_sendmsg+0x160/0x210 [ 201.647175][ T7270] ? __pfx___sys_sendmsg+0x10/0x10 [ 201.647243][ T7270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.647300][ T7270] do_syscall_64+0x123/0x790 [ 201.647347][ T7270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.647388][ T7270] RIP: 0033:0x7f304c19e559 [ 201.647419][ T7270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.647458][ T7270] RSP: 002b:00007f304a3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.647496][ T7270] RAX: ffffffffffffffda RBX: 00007f304c425fa0 RCX: 00007f304c19e559 [ 201.647523][ T7270] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 201.647548][ T7270] RBP: 00007f304c235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 201.647573][ T7270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.647598][ T7270] R13: 00007f304c426038 R14: 00007f304c425fa0 R15: 00007ffd441ab798 [ 201.647651][ T7270] [ 202.068548][ T7269] ntfs3(loop5): failed to convert name for inode a. [ 202.320639][ T7283] loop4: detected capacity change from 0 to 128 [ 202.365820][ T7284] FAULT_INJECTION: forcing a failure. [ 202.365820][ T7284] name failslab, interval 1, probability 0, space 0, times 0 [ 202.365872][ T7284] CPU: 1 UID: 0 PID: 7284 Comm: syz.2.438 Not tainted syzkaller #0 PREEMPT(full) [ 202.365918][ T7284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 202.365942][ T7284] Call Trace: [ 202.365954][ T7284] [ 202.365969][ T7284] dump_stack_lvl+0x100/0x190 [ 202.366030][ T7284] should_fail_ex.cold+0x5/0xa [ 202.366074][ T7284] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.366129][ T7284] should_failslab+0xc2/0x120 [ 202.366178][ T7284] __kmalloc_cache_noprof+0x91/0x6d0 [ 202.366237][ T7284] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.366286][ T7284] ? igmp6_group_dropped+0x5dc/0x1030 [ 202.366362][ T7284] igmp6_group_dropped+0x5dc/0x1030 [ 202.366433][ T7284] ? __pfx_igmp6_group_dropped+0x10/0x10 [ 202.366508][ T7284] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.366567][ T7284] __ipv6_dev_mc_dec+0x29d/0x410 [ 202.366614][ T7284] addrconf_leave_solict+0x127/0x190 [ 202.366680][ T7284] ? __pfx_addrconf_leave_solict+0x10/0x10 [ 202.366740][ T7284] ? __local_bh_enable_ip+0xa5/0x120 [ 202.366780][ T7284] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.366834][ T7284] __ipv6_dev_ac_dec+0x38c/0x620 [ 202.366895][ T7284] ipv6_dev_ac_dec.isra.0+0x36/0xb0 [ 202.366950][ T7284] __ipv6_sock_ac_close+0x26c/0x3b0 [ 202.367011][ T7284] ipv6_sock_ac_close+0xdb/0x110 [ 202.367062][ T7284] inet6_release+0x47/0x70 [ 202.367103][ T7284] __sock_release+0xb3/0x260 [ 202.367154][ T7284] ? __pfx_sock_close+0x10/0x10 [ 202.367204][ T7284] sock_close+0x1c/0x30 [ 202.367250][ T7284] __fput+0x400/0xb60 [ 202.367313][ T7284] fput_close_sync+0x118/0x250 [ 202.367368][ T7284] ? __pfx_fput_close_sync+0x10/0x10 [ 202.367437][ T7284] __x64_sys_close+0x8b/0x120 [ 202.367494][ T7284] do_syscall_64+0x123/0x790 [ 202.367539][ T7284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.367580][ T7284] RIP: 0033:0x7f304c19e559 [ 202.367609][ T7284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.367654][ T7284] RSP: 002b:00007f304a3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 202.367691][ T7284] RAX: ffffffffffffffda RBX: 00007f304c425fa0 RCX: 00007f304c19e559 [ 202.367719][ T7284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 202.367743][ T7284] RBP: 00007f304c235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 202.367767][ T7284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.367792][ T7284] R13: 00007f304c426038 R14: 00007f304c425fa0 R15: 00007ffd441ab798 [ 202.367845][ T7284] [ 202.369009][ T7283] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 202.369447][ T7283] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 202.522282][ T4994] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 202.540435][ T5750] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 202.574329][ T7289] loop5: detected capacity change from 0 to 1024 [ 202.577552][ T7289] EXT4-fs: Ignoring removed orlov option [ 202.587445][ T7289] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 202.603590][ T7289] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 202.603910][ T7289] EXT4-fs (loop5): orphan cleanup on readonly fs [ 202.620087][ T7283] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 202.641813][ T7289] EXT4-fs error (device loop5): __ext4_get_inode_loc:4915: comm syz.5.439: Invalid inode table block 0 in block_group 0 [ 202.641863][ T7289] loop5: lost filesystem error report for type 5 error -117 [ 202.651001][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 202.651034][ C1] EXT4-fs (loop5): initial error at time 1792216519: __ext4_get_inode_loc:4915 [ 202.651072][ C1] EXT4-fs (loop5): last error at time 1792216519: __ext4_get_inode_loc:4915 [ 202.658770][ T7289] EXT4-fs (loop5): Remounting filesystem read-only [ 202.658801][ T7289] Quota error (device loop5): write_blk: dquota write failed [ 202.658962][ T7289] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 202.659114][ T7289] EXT4-fs (loop5): 1 truncate cleaned up [ 202.675597][ T7289] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 202.709773][ T5750] usb 2-1: Using ep0 maxpacket: 16 [ 202.712363][ T5750] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 202.716850][ T5750] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 202.716888][ T5750] usb 2-1: config 0 has no interface number 0 [ 202.729011][ T5750] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.729052][ T5750] usb 2-1: Product: syz [ 202.729077][ T5750] usb 2-1: Manufacturer: syz [ 202.729104][ T5750] usb 2-1: SerialNumber: syz [ 202.766364][ T5750] usb 2-1: config 0 descriptor?? [ 202.784900][ T4994] usb 1-1: Using ep0 maxpacket: 32 [ 202.797594][ T5750] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 202.827796][ T4994] usb 1-1: unable to get BOS descriptor or descriptor too short [ 202.827859][ T4994] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 202.846089][ T4994] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 202.846137][ T4994] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 202.846173][ T4994] usb 1-1: config 14 has no interface number 0 [ 202.846203][ T4994] usb 1-1: config 14 has no interface number 1 [ 202.846282][ T4994] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 202.846325][ T4994] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 202.846372][ T4994] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 202.846421][ T4994] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 202.846471][ T4994] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 202.846520][ T4994] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.846569][ T4994] usb 1-1: config 14 interface 57 has no altsetting 0 [ 202.846602][ T4994] usb 1-1: config 14 interface 228 has no altsetting 0 [ 202.933537][ T4994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.933581][ T4994] usb 1-1: Product: syz [ 202.933608][ T4994] usb 1-1: Manufacturer: syz [ 202.933634][ T4994] usb 1-1: SerialNumber: syz [ 203.049458][ T7283] fscrypt: AES-256-XTS using blk-crypto-fallback [ 203.076988][ T5619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.197720][ T5618] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.787136][ T4994] legousbtower 1-1:14.57: interrupt endpoints not found [ 204.053106][ T4994] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 204.058773][ T4994] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 204.468034][ T5750] gspca_spca1528: reg_r err -71 [ 204.468141][ T5750] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 204.495315][ T5750] usb 2-1: USB disconnect, device number 3 [ 204.645181][ T7302] usb 1-1: LEGO USB Tower reset control request failed [ 204.722237][ T7321] input: syz0 as /devices/virtual/input/input8 [ 204.847506][ T30] usb 1-1: USB disconnect, device number 4 [ 204.871441][ T30] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 205.019435][ T5751] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 205.049723][ T1221] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 205.179466][ T5751] usb 6-1: Using ep0 maxpacket: 32 [ 205.181777][ T5751] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 205.183182][ T5751] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 205.183222][ T5751] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 205.183259][ T5751] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 205.183322][ T5751] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 205.183362][ T5751] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 205.183405][ T5751] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 205.183470][ T5751] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.229881][ T1221] usb 5-1: not running at top speed; connect to a high speed hub [ 205.229929][ T1221] usb 5-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 205.231282][ T1221] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.233302][ T1221] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 205.233341][ T1221] usb 5-1: Product: syz [ 205.233366][ T1221] usb 5-1: Manufacturer: syz [ 205.320545][ T5751] usb 6-1: config 0 descriptor?? [ 205.362444][ T1221] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 205.577806][ T5751] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 205.580534][ T1221] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 205.581446][ T1221] uvcvideo 5-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 205.581542][ T1221] uvcvideo 5-1:1.1: Failed to initialize the device (-71). [ 205.628910][ T1221] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -71 [ 205.703533][ T1221] usb 5-1: USB disconnect, device number 5 [ 205.919149][ T30] usb 6-1: USB disconnect, device number 6 [ 205.996671][ T30] usblp0: removed [ 206.651178][ T7358] loop1: detected capacity change from 0 to 164 [ 206.702025][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.469'. [ 206.717936][ T7363] netlink: 44 bytes leftover after parsing attributes in process `syz.0.469'. [ 206.921116][ T7358] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 206.921166][ T7358] isofs_fill_super: root inode is not a directory. Corrupted media? [ 206.996246][ T7369] FAULT_INJECTION: forcing a failure. [ 206.996246][ T7369] name failslab, interval 1, probability 0, space 0, times 0 [ 206.996297][ T7369] CPU: 0 UID: 0 PID: 7369 Comm: syz.2.472 Not tainted syzkaller #0 PREEMPT(full) [ 206.996343][ T7369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 206.996370][ T7369] Call Trace: [ 206.996383][ T7369] [ 206.996398][ T7369] dump_stack_lvl+0x100/0x190 [ 206.996459][ T7369] should_fail_ex.cold+0x5/0xa [ 206.996502][ T7369] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.996557][ T7369] should_failslab+0xc2/0x120 [ 206.996607][ T7369] __kmalloc_noprof+0xfc/0x840 [ 206.996649][ T7369] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.996698][ T7369] ? lsm_blob_alloc+0x68/0x90 [ 206.996766][ T7369] lsm_blob_alloc+0x68/0x90 [ 206.996825][ T7369] security_prepare_creds+0x2d/0x290 [ 206.996884][ T7369] prepare_creds+0x5d6/0x950 [ 206.996952][ T7369] __do_sys_landlock_restrict_self+0xd2/0x10a0 [ 206.997001][ T7369] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.997057][ T7369] do_syscall_64+0x123/0x790 [ 206.997104][ T7369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.997150][ T7369] RIP: 0033:0x7f304c19e559 [ 206.997180][ T7369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.997218][ T7369] RSP: 002b:00007f304a3f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 206.997255][ T7369] RAX: ffffffffffffffda RBX: 00007f304c425fa0 RCX: 00007f304c19e559 [ 206.997282][ T7369] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 206.997306][ T7369] RBP: 00007f304c235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 206.997331][ T7369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.997355][ T7369] R13: 00007f304c426038 R14: 00007f304c425fa0 R15: 00007ffd441ab798 [ 206.997409][ T7369] [ 207.152043][ T31] audit: type=1326 audit(1792216524.137:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.1.467" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff2f1f9e559 code=0x0 [ 207.524538][ T7389] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 208.109873][ T7405] FAULT_INJECTION: forcing a failure. [ 208.109873][ T7405] name failslab, interval 1, probability 0, space 0, times 0 [ 208.109924][ T7405] CPU: 1 UID: 0 PID: 7405 Comm: syz.2.486 Not tainted syzkaller #0 PREEMPT(full) [ 208.109971][ T7405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 208.109995][ T7405] Call Trace: [ 208.110008][ T7405] [ 208.110023][ T7405] dump_stack_lvl+0x100/0x190 [ 208.110084][ T7405] should_fail_ex.cold+0x5/0xa [ 208.110136][ T7405] should_failslab+0xc2/0x120 [ 208.110185][ T7405] kmem_cache_alloc_noprof+0x92/0x6a0 [ 208.110224][ T7405] ? xfrm_policy_get_afinfo+0x3b/0x2b0 [ 208.110288][ T7405] ? dst_alloc+0x99/0x1a0 [ 208.110342][ T7405] dst_alloc+0x99/0x1a0 [ 208.110383][ T7405] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.110439][ T7405] xfrm_lookup_with_ifid+0xb4e/0x1fe0 [ 208.110482][ T7405] ? audit_trim_trees+0x5a/0x7b0 [ 208.110530][ T7405] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 208.110573][ T7405] ? __xfrm_decode_session+0x11b/0xcb0 [ 208.110647][ T7405] ? __pfx___xfrm_decode_session+0x10/0x10 [ 208.110731][ T7405] xfrm_lookup_route+0x3b/0x200 [ 208.110775][ T7405] vti_tunnel_xmit+0x436/0x1da0 [ 208.110826][ T7405] ? netif_skb_features+0x420/0xed0 [ 208.110894][ T7405] ? __pfx_vti_tunnel_xmit+0x10/0x10 [ 208.110947][ T7405] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.111011][ T7405] dev_hard_start_xmit+0x121/0x760 [ 208.111063][ T7405] __dev_queue_xmit+0x1c25/0x4a40 [ 208.111124][ T7405] ? __pfx___dev_queue_xmit+0x10/0x10 [ 208.111162][ T7405] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.111210][ T7405] ? trace_kmem_cache_alloc+0xdd/0x100 [ 208.111259][ T7405] ? __kasan_slab_alloc+0x89/0x90 [ 208.111308][ T7405] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.111362][ T7405] ? kmalloc_reserve+0x148/0x350 [ 208.111428][ T7405] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.111477][ T7405] ? skb_release_data+0x65e/0x860 [ 208.111527][ T7405] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.111575][ T7405] ? kmalloc_reserve+0xf9/0x350 [ 208.111642][ T7405] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.111690][ T7405] ? skb_headers_offset_update+0x129/0x260 [ 208.111768][ T7405] ? __pfx_pskb_expand_head+0x10/0x10 [ 208.111816][ T7405] ? __asan_memcpy+0x3c/0x60 [ 208.111887][ T7405] __bpf_redirect+0x989/0xf90 [ 208.111959][ T7405] bpf_clone_redirect+0x37b/0x500 [ 208.112030][ T7405] bpf_prog_69c2527fbc57d46b+0x5f/0x68 [ 208.112083][ T7405] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.112131][ T7405] ? __schedule+0x126b/0x6920 [ 208.112207][ T7405] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.112257][ T7405] ? irqentry_exit+0x24d/0xa10 [ 208.112294][ T7405] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.112341][ T7405] ? lockdep_hardirqs_on+0x7d/0x110 [ 208.112384][ T7405] ? __pfx___schedule+0x10/0x10 [ 208.112454][ T7405] ? preempt_schedule_thunk+0x16/0x40 [ 208.112503][ T7405] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.112551][ T7405] ? preempt_schedule_common+0x3c/0xb0 [ 208.112616][ T7405] ? preempt_schedule_thunk+0x16/0x40 [ 208.112667][ T7405] ? __pfx___cant_migrate+0x10/0x10 [ 208.112720][ T7405] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.112768][ T7405] ? bpf_test_timer_continue+0x17b/0x5e0 [ 208.112839][ T7405] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.112888][ T7405] bpf_test_run+0x39c/0xa40 [ 208.112954][ T7405] ? bpf_test_run+0x1c6/0xa40 [ 208.113027][ T7405] ? __pfx_bpf_test_run+0x10/0x10 [ 208.113155][ T7405] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.113203][ T7405] ? eth_type_trans+0x2e3/0x720 [ 208.113252][ T7405] bpf_prog_test_run_skb+0x15b3/0x3530 [ 208.113294][ T7405] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.113348][ T7405] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.113395][ T7405] ? lock_acquire+0x1d1/0x380 [ 208.113465][ T7405] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 208.113512][ T7405] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.113562][ T7405] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.113611][ T7405] ? fput+0x7c/0x100 [ 208.113665][ T7405] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.113717][ T7405] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 208.113762][ T7405] __sys_bpf+0x2265/0x4a30 [ 208.113839][ T7405] ? __pfx___sys_bpf+0x10/0x10 [ 208.113896][ T7405] ? find_held_lock+0x2b/0x80 [ 208.113954][ T7405] ? futex_wake+0x4ea/0x5e0 [ 208.114022][ T7405] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.114073][ T7405] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.114152][ T7405] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.114201][ T7405] ? find_held_lock+0x2b/0x80 [ 208.114270][ T7405] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.114344][ T7405] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.114392][ T7405] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.114441][ T7405] ? __x64_sys_futex+0x358/0x4d0 [ 208.114504][ T7405] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.114552][ T7405] ? xfd_validate_state+0x129/0x190 [ 208.114601][ T7405] ? __x64_sys_bpf+0xce/0x140 [ 208.114666][ T7405] __x64_sys_bpf+0xce/0x140 [ 208.114730][ T7405] ? do_syscall_64+0xae/0x790 [ 208.114773][ T7405] do_syscall_64+0x123/0x790 [ 208.114817][ T7405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.114859][ T7405] RIP: 0033:0x7f304c19e559 [ 208.114889][ T7405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.114928][ T7405] RSP: 002b:00007f304a3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 208.114968][ T7405] RAX: ffffffffffffffda RBX: 00007f304c425fa0 RCX: 00007f304c19e559 [ 208.114995][ T7405] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 208.115021][ T7405] RBP: 00007f304c235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 208.115046][ T7405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.115071][ T7405] R13: 00007f304c426038 R14: 00007f304c425fa0 R15: 00007ffd441ab798 [ 208.115125][ T7405] [ 208.820847][ T30] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 208.980994][ T30] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 208.998986][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.999039][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.999085][ T30] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 208.999152][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.049909][ T30] usb 2-1: config 0 descriptor?? [ 209.219384][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.493'. [ 209.219481][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.493'. [ 209.360902][ T6263] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 209.437222][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.493'. [ 209.437293][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.493'. [ 209.509606][ T6263] usb 1-1: Using ep0 maxpacket: 32 [ 209.511821][ T6263] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 209.523222][ T6263] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.523260][ T6263] usb 1-1: Product: syz [ 209.523285][ T6263] usb 1-1: Manufacturer: syz [ 209.523311][ T6263] usb 1-1: SerialNumber: syz [ 209.553732][ T6263] usb 1-1: config 0 descriptor?? [ 209.573723][ T6263] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 209.589286][ T30] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 209.649648][ T7431] FAULT_INJECTION: forcing a failure. [ 209.649648][ T7431] name failslab, interval 1, probability 0, space 0, times 0 [ 209.649700][ T7431] CPU: 1 UID: 0 PID: 7431 Comm: syz.2.507 Not tainted syzkaller #0 PREEMPT(full) [ 209.649742][ T7431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 209.649764][ T7431] Call Trace: [ 209.649776][ T7431] [ 209.649790][ T7431] dump_stack_lvl+0x100/0x190 [ 209.649853][ T7431] should_fail_ex.cold+0x5/0xa [ 209.649899][ T7431] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.649956][ T7431] should_failslab+0xc2/0x120 [ 209.650005][ T7431] kmem_cache_alloc_noprof+0x92/0x6a0 [ 209.650047][ T7431] ? prepare_creds+0x2c/0x950 [ 209.650119][ T7431] prepare_creds+0x2c/0x950 [ 209.650185][ T7431] lookup_user_key+0x5d0/0x1300 [ 209.650237][ T7431] ? __pfx_lookup_user_key+0x10/0x10 [ 209.650284][ T7431] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.650333][ T7431] ? __might_fault+0xc5/0x140 [ 209.650394][ T7431] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 209.650446][ T7431] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.650492][ T7431] ? _copy_from_user+0x59/0xd0 [ 209.650530][ T7431] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.650577][ T7431] ? memdup_user+0x82/0xe0 [ 209.650648][ T7431] __do_sys_request_key+0x1c4/0x3c0 [ 209.650714][ T7431] ? __pfx___do_sys_request_key+0x10/0x10 [ 209.650791][ T7431] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.650847][ T7431] do_syscall_64+0x123/0x790 [ 209.650894][ T7431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.650935][ T7431] RIP: 0033:0x7f304c19e559 [ 209.650964][ T7431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.651004][ T7431] RSP: 002b:00007f304a3f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 209.651041][ T7431] RAX: ffffffffffffffda RBX: 00007f304c425fa0 RCX: 00007f304c19e559 [ 209.651068][ T7431] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 209.651094][ T7431] RBP: 00007f304c235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 209.651119][ T7431] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 209.651144][ T7431] R13: 00007f304c426038 R14: 00007f304c425fa0 R15: 00007ffd441ab798 [ 209.651197][ T7431] [ 210.163379][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.493'. [ 210.163447][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.493'. [ 210.170678][ T1221] usb 2-1: USB disconnect, device number 4 [ 210.340286][ T7434] fido_id[7434]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 210.946513][ T7439] FAULT_INJECTION: forcing a failure. [ 210.946513][ T7439] name failslab, interval 1, probability 0, space 0, times 0 [ 210.946585][ T7439] CPU: 1 UID: 0 PID: 7439 Comm: syz.2.496 Not tainted syzkaller #0 PREEMPT(full) [ 210.946637][ T7439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 210.946660][ T7439] Call Trace: [ 210.946673][ T7439] [ 210.946688][ T7439] dump_stack_lvl+0x100/0x190 [ 210.946751][ T7439] should_fail_ex.cold+0x5/0xa [ 210.946795][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.946851][ T7439] should_failslab+0xc2/0x120 [ 210.946901][ T7439] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 210.946943][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.946992][ T7439] ? xas_split_alloc+0x182/0x530 [ 210.947045][ T7439] xas_split_alloc+0x182/0x530 [ 210.947102][ T7439] __folio_split+0x95e/0x1bf0 [ 210.947184][ T7439] ? __pfx___folio_split+0x10/0x10 [ 210.947246][ T7439] ? folio_alloc_swap+0xbd8/0x1e70 [ 210.947294][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.947359][ T7439] ? folio_alloc_swap+0x4c6/0x1e70 [ 210.947413][ T7439] shmem_writeout+0x786/0x1a00 [ 210.947479][ T7439] ? __pfx_shmem_writeout+0x10/0x10 [ 210.947532][ T7439] ? __pfx_try_to_unmap+0x10/0x10 [ 210.947588][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.947639][ T7439] ? find_held_lock+0x2b/0x80 [ 210.947700][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.947747][ T7439] ? inode_to_bdi+0x9e/0x160 [ 210.947810][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.947858][ T7439] ? folio_clear_dirty_for_io+0x178/0x960 [ 210.947930][ T7439] shrink_folio_list+0x399a/0x5e40 [ 210.947997][ T7439] ? is_bpf_text_address+0x25/0x1a0 [ 210.948049][ T7439] ? __pfx_shrink_folio_list+0x10/0x10 [ 210.948103][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.948171][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.948219][ T7439] ? __lock_acquire+0x5c0/0x1f40 [ 210.948308][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.948357][ T7439] ? __lock_acquire+0x5c0/0x1f40 [ 210.948399][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.948447][ T7439] ? __css_rstat_updated+0x1ce/0x590 [ 210.948502][ T7439] ? __pfx___css_rstat_updated+0x10/0x10 [ 210.948560][ T7439] reclaim_folio_list+0xe9/0x5e0 [ 210.948610][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.948670][ T7439] ? __pfx_reclaim_folio_list+0x10/0x10 [ 210.948717][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.948764][ T7439] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 210.948828][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.948875][ T7439] ? lru_gen_update_size+0x431/0xe20 [ 210.948929][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.948975][ T7439] ? lru_gen_del_folio+0x382/0x5f0 [ 210.949028][ T7439] reclaim_pages+0x428/0x5e0 [ 210.949079][ T7439] ? __pfx_reclaim_pages+0x10/0x10 [ 210.949125][ T7439] ? madvise_cold_or_pageout_pte_range+0x22ba/0x27b0 [ 210.949183][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.949228][ T7439] ? folio_isolate_lru+0xd6/0xe90 [ 210.949274][ T7439] madvise_cold_or_pageout_pte_range+0x147e/0x27b0 [ 210.949341][ T7439] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 210.949403][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.949439][ T7439] ? is_bpf_text_address+0x94/0x1a0 [ 210.949486][ T7439] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 210.949542][ T7439] ? __kernel_text_address+0xd/0x30 [ 210.949586][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.949637][ T7439] ? unwind_get_return_address+0x59/0xa0 [ 210.949695][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.949730][ T7439] ? __lock_acquire+0x5c0/0x1f40 [ 210.949771][ T7439] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 210.949829][ T7439] walk_pgd_range+0xbef/0x1e00 [ 210.949889][ T7439] ? register_lock_class+0x3f/0x7b0 [ 210.949951][ T7439] ? __pfx_walk_pgd_range+0x10/0x10 [ 210.950011][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.950046][ T7439] ? __lock_acquire+0x5c0/0x1f40 [ 210.950095][ T7439] __walk_page_range+0x171/0x850 [ 210.950159][ T7439] ? __lock_acquire+0x5c0/0x1f40 [ 210.950194][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.950240][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.950291][ T7439] walk_page_range_vma_unsafe+0x209/0x8f0 [ 210.950350][ T7439] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 210.950416][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.950469][ T7439] ? find_held_lock+0x2b/0x80 [ 210.950521][ T7439] ? mlock_drain_local+0x254/0x4e0 [ 210.950580][ T7439] ? mlock_drain_local+0x254/0x4e0 [ 210.950632][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.950680][ T7439] walk_page_range_vma+0x63/0x90 [ 210.950748][ T7439] madvise_pageout+0x29e/0x5b0 [ 210.950789][ T7439] ? __pfx_madvise_pageout+0x10/0x10 [ 210.950871][ T7439] madvise_vma_behavior+0x48b/0x2350 [ 210.950921][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.950956][ T7439] ? mas_prev+0xa4/0x100 [ 210.951006][ T7439] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 210.951059][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.951094][ T7439] ? mas_walk+0x260/0x310 [ 210.951127][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.951174][ T7439] ? find_vma_prev+0xd8/0x150 [ 210.951216][ T7439] ? __pfx_find_vma_prev+0x10/0x10 [ 210.951248][ T7439] ? lock_acquire+0x1d1/0x380 [ 210.951312][ T7439] madvise_walk_vmas+0x30e/0xc50 [ 210.951368][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.951405][ T7439] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 210.951458][ T7439] ? __pfx_futex_wake_mark+0x10/0x10 [ 210.951527][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.951562][ T7439] ? lock_acquire+0x1d1/0x380 [ 210.951609][ T7439] madvise_do_behavior+0x1ea/0x510 [ 210.951669][ T7439] ? __pfx_madvise_do_behavior+0x10/0x10 [ 210.951712][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.951756][ T7439] ? down_read+0x13b/0x4c0 [ 210.951815][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.951856][ T7439] do_madvise+0x238/0x290 [ 210.951904][ T7439] ? __pfx_do_madvise+0x10/0x10 [ 210.951952][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.951991][ T7439] ? do_futex+0x190/0x440 [ 210.952045][ T7439] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 210.952137][ T7439] __x64_sys_madvise+0xa9/0x110 [ 210.952176][ T7439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.952230][ T7439] ? lockdep_hardirqs_on+0x7d/0x110 [ 210.952270][ T7439] do_syscall_64+0x123/0x790 [ 210.952306][ T7439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.952339][ T7439] RIP: 0033:0x7f304c19e559 [ 210.952372][ T7439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.952407][ T7439] RSP: 002b:00007f304a3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 210.952440][ T7439] RAX: ffffffffffffffda RBX: 00007f304c425fa0 RCX: 00007f304c19e559 [ 210.952460][ T7439] RDX: 0000000000000015 RSI: 0000000000600000 RDI: 0000200000000000 [ 210.952479][ T7439] RBP: 00007f304c235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 210.952503][ T7439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.952528][ T7439] R13: 00007f304c426038 R14: 00007f304c425fa0 R15: 00007ffd441ab798 [ 210.952579][ T7439] [ 211.333036][ T6263] gspca_ov534_9: reg_r err -71 [ 211.589250][ T6263] gspca_ov534_9: Unknown sensor 0000 [ 211.589349][ T6263] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 211.623260][ T6263] usb 1-1: USB disconnect, device number 5 [ 211.833118][ T7453] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 212.410859][ T7463] FAULT_INJECTION: forcing a failure. [ 212.410859][ T7463] name failslab, interval 1, probability 0, space 0, times 0 [ 212.410898][ T7463] CPU: 1 UID: 0 PID: 7463 Comm: syz.0.504 Not tainted syzkaller #0 PREEMPT(full) [ 212.410932][ T7463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 212.410949][ T7463] Call Trace: [ 212.410959][ T7463] [ 212.410970][ T7463] dump_stack_lvl+0x100/0x190 [ 212.411017][ T7463] should_fail_ex.cold+0x5/0xa [ 212.411050][ T7463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.411091][ T7463] should_failslab+0xc2/0x120 [ 212.411128][ T7463] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 212.411162][ T7463] ? __alloc_skb+0x140/0x710 [ 212.411204][ T7463] __alloc_skb+0x140/0x710 [ 212.411235][ T7463] ? __alloc_skb+0x5b7/0x710 [ 212.411267][ T7463] ? __pfx___alloc_skb+0x10/0x10 [ 212.411299][ T7463] ? __lock_acquire+0x5c0/0x1f40 [ 212.411341][ T7463] qrtr_alloc_ctrl_packet+0x21/0xf0 [ 212.411376][ T7463] qrtr_port_remove+0xdb/0x3e0 [ 212.411408][ T7463] ? lock_acquire+0x1d1/0x380 [ 212.411439][ T7463] ? __pfx_qrtr_port_remove+0x10/0x10 [ 212.411470][ T7463] ? do_raw_write_lock+0x11e/0x260 [ 212.411513][ T7463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.411550][ T7463] ? __local_bh_enable_ip+0xa5/0x120 [ 212.411586][ T7463] qrtr_release+0x2c1/0x380 [ 212.411621][ T7463] __sock_release+0xb3/0x260 [ 212.411664][ T7463] ? __pfx_sock_close+0x10/0x10 [ 212.411701][ T7463] sock_close+0x1c/0x30 [ 212.411739][ T7463] __fput+0x400/0xb60 [ 212.411785][ T7463] fput_close_sync+0x118/0x250 [ 212.411827][ T7463] ? __pfx_fput_close_sync+0x10/0x10 [ 212.411878][ T7463] __x64_sys_close+0x8b/0x120 [ 212.411919][ T7463] do_syscall_64+0x123/0x790 [ 212.411953][ T7463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.411983][ T7463] RIP: 0033:0x7f349479e559 [ 212.412006][ T7463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.412037][ T7463] RSP: 002b:00007f349573d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 212.412087][ T7463] RAX: ffffffffffffffda RBX: 00007f3494a25fa0 RCX: 00007f349479e559 [ 212.412116][ T7463] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 212.412141][ T7463] RBP: 00007f3494835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 212.412166][ T7463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.412191][ T7463] R13: 00007f3494a26038 R14: 00007f3494a25fa0 R15: 00007ffff2c94a68 [ 212.412245][ T7463] [ 212.593910][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.503'. [ 212.593944][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.503'. [ 213.036724][ T5633] Bluetooth: hci4: unexpected event for opcode 0x0401 [ 213.730392][ T31] audit: type=1326 audit(1792216530.718:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7483 comm="syz.3.514" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690659e559 code=0x7ffc0000 [ 213.736585][ T31] audit: type=1326 audit(1792216530.718:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7483 comm="syz.3.514" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690659e559 code=0x7ffc0000 [ 213.803125][ T31] audit: type=1326 audit(1792216530.788:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7483 comm="syz.3.514" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f690659e559 code=0x7ffc0000 [ 213.803194][ T31] audit: type=1326 audit(1792216530.788:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7483 comm="syz.3.514" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690659e559 code=0x7ffc0000 [ 213.803249][ T31] audit: type=1326 audit(1792216530.788:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7483 comm="syz.3.514" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690659e559 code=0x7ffc0000 [ 213.869330][ T7487] CIFS: Attempting to mount //127.0.0.1/share [ 213.878180][ T31] audit: type=1326 audit(1792216530.858:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7483 comm="syz.3.514" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f690659e559 code=0x7ffc0000 [ 213.878342][ T31] audit: type=1326 audit(1792216530.858:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7483 comm="syz.3.514" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690659e559 code=0x7ffc0000 [ 213.878416][ T31] audit: type=1326 audit(1792216530.858:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7483 comm="syz.3.514" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690659e559 code=0x7ffc0000 [ 213.913646][ T31] audit: type=1326 audit(1792216530.898:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7483 comm="syz.3.514" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f690659e559 code=0x7ffc0000 [ 213.913729][ T31] audit: type=1326 audit(1792216530.898:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7483 comm="syz.3.514" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690659e559 code=0x7ffc0000 [ 213.917067][ T7487] CIFS: VFS: Error connecting to socket. Aborting operation. [ 213.917122][ T7487] CIFS: VFS: cifs_mount failed w/return code = -111 [ 214.548291][ T30] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 215.088868][ T5633] Bluetooth: hci0: command 0x0c1a tx timeout [ 215.088985][ T52] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 215.546936][ T7516] PM: suspend entry (deep) [ 215.839326][ T30] usb 1-1: unable to get BOS descriptor or descriptor too short [ 215.839376][ T30] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 215.840303][ T30] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 215.840340][ T30] usb 1-1: can't read configurations, error -71 [ 215.888921][ T7522] ip_tables: iptables: counters copy to user failed while replacing table [ 216.350487][ T7516] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 216.394755][ T7516] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 216.394978][ T7516] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 216.395210][ T7516] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 216.395393][ T7516] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 216.395572][ T7516] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 216.570510][ T7516] Freezing user space processes [ 217.297082][ T7516] Freezing user space processes completed (elapsed 0.726 seconds) [ 217.297118][ T7516] OOM killer disabled. [ 217.297128][ T7516] Freezing remaining freezable tasks [ 217.307374][ T7516] Freezing remaining freezable tasks completed (elapsed 0.010 seconds) [ 217.307406][ T7516] PM: suspend debug: Waiting for 5 second(s). [ 217.648305][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 218.368028][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 218.447937][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 218.447993][ T5627] Bluetooth: hci5: command 0x0c1a tx timeout [ 218.448036][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 218.448080][ T5627] Bluetooth: hci4: command 0x0c1a tx timeout [ 222.529493][ T7516] OOM killer enabled. [ 222.529510][ T7516] Restarting tasks: Starting [ 222.592628][ T7516] Restarting tasks: Done [ 222.592759][ T7516] random: crng reseeded on system resumption [ 222.592841][ T7516] hwrng_fill thread creation failed [ 222.625974][ T7516] PM: suspend exit [ 222.706226][ T7548] overlayfs: failed to clone upperpath [ 222.716867][ T31] kauditd_printk_skb: 65 callbacks suppressed [ 222.716892][ T31] audit: type=1326 audit(1792216539.699:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7550 comm="syz.5.530" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa2fb9e559 code=0x0 [ 223.081618][ T7568] netlink: 24 bytes leftover after parsing attributes in process `syz.4.537'. [ 223.109615][ T1221] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 223.224324][ T6033] IPVS: starting estimator thread 0... [ 223.224532][ T7574] netlink: 24 bytes leftover after parsing attributes in process `syz.0.539'. [ 223.268168][ T1221] usb 6-1: Using ep0 maxpacket: 16 [ 223.269657][ T1221] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 223.271032][ T1221] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.271078][ T1221] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.271116][ T1221] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.271169][ T1221] usb 6-1: config 0 interface 0 has no altsetting 0 [ 223.271215][ T1221] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.285646][ T1221] usb 6-1: config 0 descriptor?? [ 223.317328][ T7577] IPVS: using max 22 ests per chain, 52800 per kthread [ 223.481645][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 223.512272][ T30] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 224.486164][ T7596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.546'. [ 224.486303][ T7596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.572613][ T7596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.783229][ T1221] usbhid 6-1:0.0: can't add hid device: -71 [ 225.783359][ T1221] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 225.796097][ T1221] usb 6-1: USB disconnect, device number 7 [ 225.920957][ T7616] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 225.921002][ T7616] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 226.093793][ T7621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.557'. [ 226.175999][ T7621] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.214505][ T7627] macvlan2: entered promiscuous mode [ 226.214538][ T7627] macvlan2: entered allmulticast mode [ 226.215925][ T7627] bond1: entered promiscuous mode [ 226.237079][ T7627] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 226.270586][ T7627] bond1: left promiscuous mode [ 226.478759][ T31] audit: type=1326 audit(1792216543.469:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7638 comm="syz.1.565" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff2f1f9e559 code=0x0 [ 226.582354][ T6265] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 226.583155][ T7644] netlink: 'syz.2.566': attribute type 4 has an invalid length. [ 226.634634][ T31] audit: type=1326 audit(1792216543.619:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7638 comm="syz.1.565" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2f1f9e559 code=0x7fc00000 [ 226.748510][ T6265] usb 6-1: Using ep0 maxpacket: 16 [ 226.749542][ T6265] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 226.750940][ T6265] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 226.755577][ T6265] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.755619][ T6265] usb 6-1: Product: syz [ 226.755654][ T6265] usb 6-1: Manufacturer: syz [ 226.755681][ T6265] usb 6-1: SerialNumber: syz [ 226.766260][ T6265] usb 6-1: config 0 descriptor?? [ 226.794650][ T6265] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 226.794706][ T6265] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 226.810337][ T7651] loop2: detected capacity change from 0 to 512 [ 226.898558][ T7651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.898733][ T7651] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.015780][ T7656] FAULT_INJECTION: forcing a failure. [ 227.015780][ T7656] name failslab, interval 1, probability 0, space 0, times 0 [ 227.015833][ T7656] CPU: 1 UID: 0 PID: 7656 Comm: syz.0.569 Not tainted syzkaller #0 PREEMPT(full) [ 227.015882][ T7656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 227.015905][ T7656] Call Trace: [ 227.015918][ T7656] [ 227.015933][ T7656] dump_stack_lvl+0x100/0x190 [ 227.015994][ T7656] should_fail_ex.cold+0x5/0xa [ 227.016039][ T7656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.016095][ T7656] should_failslab+0xc2/0x120 [ 227.016150][ T7656] __kmalloc_cache_noprof+0x91/0x6d0 [ 227.016206][ T7656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.016253][ T7656] ? vidtv_psi_eit_event_init+0xe1/0x400 [ 227.016320][ T7656] vidtv_psi_eit_event_init+0xe1/0x400 [ 227.016376][ T7656] ? __pfx_vidtv_psi_eit_event_init+0x10/0x10 [ 227.016447][ T7656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.016496][ T7656] ? vidtv_psi_desc_clone+0x358/0x5d0 [ 227.016541][ T7656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.016594][ T7656] vidtv_channel_si_init+0x845/0x18f0 [ 227.016671][ T7656] vidtv_mux_init+0x522/0xbf0 [ 227.016738][ T7656] vidtv_start_feed+0x34e/0x500 [ 227.016782][ T7656] ? __pfx_vidtv_start_feed+0x10/0x10 [ 227.016821][ T7656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.016878][ T7656] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 227.016932][ T7656] ? find_held_lock+0x2b/0x80 [ 227.017003][ T7656] dmx_section_feed_start_filtering+0x3a8/0x660 [ 227.017066][ T7656] dvb_dmxdev_filter_start+0x767/0xdd0 [ 227.017108][ T7656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.017171][ T7656] dvb_demux_do_ioctl+0xe64/0x1200 [ 227.017227][ T7656] dvb_usercopy+0x167/0x340 [ 227.017284][ T7656] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 227.017327][ T7656] ? __pfx_dvb_usercopy+0x10/0x10 [ 227.017384][ T7656] ? __fget_files+0x34/0x3d0 [ 227.017447][ T7656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.017495][ T7656] ? __fget_files+0x21f/0x3d0 [ 227.017553][ T7656] dvb_demux_ioctl+0x29/0x40 [ 227.017611][ T7656] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 227.017674][ T7656] __x64_sys_ioctl+0x18e/0x210 [ 227.017744][ T7656] do_syscall_64+0x123/0x790 [ 227.017789][ T7656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.017829][ T7656] RIP: 0033:0x7f349479e559 [ 227.017860][ T7656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.017898][ T7656] RSP: 002b:00007f349573d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.017935][ T7656] RAX: ffffffffffffffda RBX: 00007f3494a25fa0 RCX: 00007f349479e559 [ 227.017962][ T7656] RDX: 00002000000005c0 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 227.017987][ T7656] RBP: 00007f3494835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 227.018011][ T7656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.018035][ T7656] R13: 00007f3494a26038 R14: 00007f3494a25fa0 R15: 00007ffff2c94a68 [ 227.018089][ T7656] [ 227.235929][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.329810][ T31] audit: type=1326 audit(1792216544.309:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7638 comm="syz.1.565" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff2f1f9e559 code=0x7fc00000 [ 227.438569][ T6265] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 228.103046][ T6265] em28xx 6-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 228.103092][ T6265] em28xx 6-1:0.0: board has no eeprom [ 228.190905][ T6265] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 228.190951][ T6265] em28xx 6-1:0.0: dvb set to bulk mode. [ 228.193486][ T1221] em28xx 6-1:0.0: Binding DVB extension [ 228.238785][ T6265] usb 6-1: USB disconnect, device number 8 [ 228.253661][ T6265] em28xx 6-1:0.0: Disconnecting em28xx [ 228.512617][ T7681] syz_tun: entered allmulticast mode [ 228.559796][ T1221] em28xx 6-1:0.0: Registering input extension [ 228.560067][ T6265] em28xx 6-1:0.0: Closing input extension [ 228.748464][ T6265] em28xx: Freeing device [ 229.115859][ T5618] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 229.115911][ T5618] CPU: 0 UID: 0 PID: 5618 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 229.115954][ T5618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 229.115976][ T5618] Call Trace: [ 229.115988][ T5618] [ 229.116001][ T5618] dump_stack_lvl+0x100/0x190 [ 229.116060][ T5618] dump_header+0xfb/0x606 [ 229.116105][ T5618] oom_kill_process.cold+0xd/0x380 [ 229.116152][ T5618] out_of_memory+0x340/0x14f0 [ 229.116211][ T5618] ? __pfx_out_of_memory+0x10/0x10 [ 229.116260][ T5618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.116325][ T5618] mem_cgroup_out_of_memory+0xc6/0x130 [ 229.116367][ T5618] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 229.116407][ T5618] ? find_held_lock+0x2b/0x80 [ 229.116474][ T5618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.116521][ T5618] ? do_raw_spin_unlock+0x145/0x1e0 [ 229.116573][ T5618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.116620][ T5618] ? _raw_spin_unlock+0x28/0x50 [ 229.116694][ T5618] try_charge_memcg+0x783/0xf60 [ 229.116762][ T5618] ? __pfx_try_charge_memcg+0x10/0x10 [ 229.116816][ T5618] ? find_held_lock+0x2b/0x80 [ 229.116872][ T5618] ? rcu_read_unlock+0x17/0x60 [ 229.116928][ T5618] ? rcu_read_unlock+0x17/0x60 [ 229.116984][ T5618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.117030][ T5618] ? find_held_lock+0x2b/0x80 [ 229.117088][ T5618] ? rcu_read_unlock+0x17/0x60 [ 229.117142][ T5618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.117201][ T5618] charge_memcg+0x1ae/0x210 [ 229.117260][ T5618] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 229.117332][ T5618] swap_cache_alloc_folio+0x548/0xc50 [ 229.117410][ T5618] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 229.117473][ T5618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.117520][ T5618] ? swap_cache_get_folio+0x28d/0x360 [ 229.117584][ T5618] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 229.117667][ T5618] swap_cache_read_folio+0x47/0x140 [ 229.117746][ T5618] swap_cluster_readahead+0x369/0x5d0 [ 229.117797][ T5618] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 229.117835][ T5618] ? xas_move_index+0xae/0x110 [ 229.117880][ T5618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.117926][ T5618] ? lock_acquire+0x1d1/0x380 [ 229.117966][ T5618] ? swap_table_get+0x28/0x2c0 [ 229.118040][ T5618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.118088][ T5618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.118142][ T5618] swapin_readahead+0xf0/0x260 [ 229.118180][ T5618] ? __pfx_swapin_readahead+0x10/0x10 [ 229.118221][ T5618] ? __pfx_get_swap_device+0x10/0x10 [ 229.118271][ T5618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.118330][ T5618] do_swap_page+0xf72/0x5580 [ 229.118398][ T5618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.118445][ T5618] ? find_held_lock+0x2b/0x80 [ 229.118506][ T5618] ? __pfx_do_swap_page+0x10/0x10 [ 229.118553][ T5618] ? lock_acquire+0x1d1/0x380 [ 229.118591][ T5618] ? __pte_offset_map+0x2f/0x310 [ 229.118629][ T5618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.118691][ T5618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.118735][ T5618] ? rcu_is_watching+0x13/0xc0 [ 229.118786][ T5618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.118830][ T5618] ? __pte_offset_map+0x179/0x310 [ 229.118875][ T5618] __handle_mm_fault+0x15bd/0x2f60 [ 229.118933][ T5618] ? lock_vma_under_rcu+0x11d/0x590 [ 229.118983][ T5618] ? __pfx___handle_mm_fault+0x10/0x10 [ 229.119039][ T5618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.119088][ T5618] ? lock_vma_under_rcu+0x17c/0x590 [ 229.119167][ T5618] handle_mm_fault+0x363/0xa20 [ 229.119229][ T5618] do_user_addr_fault+0x59c/0x12f0 [ 229.119291][ T5618] exc_page_fault+0x6f/0xd0 [ 229.119354][ T5618] asm_exc_page_fault+0x26/0x30 [ 229.119391][ T5618] RIP: 0033:0x7f4ca966c414 [ 229.119419][ T5618] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 a3 93 ee 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 9c 92 ee 00 48 01 d1 39 7c 24 [ 229.119455][ T5618] RSP: 002b:00007ffd1ac51ae0 EFLAGS: 00010246 [ 229.119485][ T5618] RAX: 0000001b33a24000 RBX: 000000000000012a RCX: 0000000000036718 [ 229.119510][ T5618] RDX: 000000000cbfb620 RSI: 00007ffd1ac51b70 RDI: 0000000000000007 [ 229.119536][ T5618] RBP: 00007ffd1ac51b1c R08: 003008c14bb95aa5 R09: 0000000000000001 [ 229.119561][ T5618] R10: 000000000000a580 R11: 0000000000000246 R12: 0000000000001388 [ 229.119587][ T5618] R13: 00000000000927c0 R14: 0000000000036519 R15: 00007ffd1ac51b70 [ 229.119640][ T5618] [ 229.156168][ T5618] memory: usage 307200kB, limit 307200kB, failcnt 463 [ 229.156196][ T5618] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 229.171514][ T5618] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 229.171540][ T5618] Memory cgroup stats for /syz4: [ 229.171993][ T5618] cache 4096 [ 229.172009][ T5618] rss 0 [ 229.172022][ T5618] rss_huge 0 [ 229.172034][ T5618] shmem 0 [ 229.195670][ T5618] mapped_file 4096 [ 229.195693][ T5618] dirty 4096 [ 229.195705][ T5618] writeback 0 [ 229.195719][ T5618] workingset_refault_anon 55 [ 229.195733][ T5618] workingset_refault_file 167 [ 229.195748][ T5618] swap 208896 [ 229.195761][ T5618] swapcached 458752 [ 229.195775][ T5618] pgpgin 11702 [ 229.195788][ T5618] pgpgout 11698 [ 229.195802][ T5618] pgfault 20982 [ 229.195814][ T5618] pgmajfault 32 [ 229.195828][ T5618] inactive_anon 12288 [ 229.195842][ T5618] active_anon 0 [ 229.195855][ T5618] inactive_file 0 [ 229.195868][ T5618] active_file 0 [ 229.195882][ T5618] unevictable 0 [ 229.195895][ T5618] hierarchical_memory_limit 314572800 [ 229.195911][ T5618] hierarchical_memsw_limit 9223372036854771712 [ 229.195928][ T5618] total_cache 4096 [ 229.195941][ T5618] total_rss 0 [ 229.195954][ T5618] total_rss_huge 0 [ 229.195968][ T5618] total_shmem 0 [ 229.195981][ T5618] total_mapped_file 4096 [ 229.195995][ T5618] total_dirty 4096 [ 229.196009][ T5618] total_writeback 0 [ 229.196022][ T5618] total_workingset_refault_anon 55 [ 229.196038][ T5618] total_workingset_refault_file 167 [ 229.196054][ T5618] total_swap 208896 [ 229.196067][ T5618] total_swapcached 458752 [ 229.196082][ T5618] total_pgpgin 11702 [ 229.196096][ T5618] total_pgpgout 11698 [ 229.196110][ T5618] total_pgfault 20982 [ 229.196123][ T5618] total_pgmajfault 32 [ 229.196137][ T5618] total_inactive_anon 12288 [ 229.196152][ T5618] total_active_anon 0 [ 229.196166][ T5618] total_inactive_file 0 [ 229.196179][ T5618] total_active_file 0 [ 229.196194][ T5618] total_unevictable 0 [ 229.196207][ T5618] anon_cost 0 [ 229.196221][ T5618] file_cost 0 [ 229.196234][ T5618] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.570,pid=7657,uid=0 [ 229.197832][ T5618] Memory cgroup out of memory: Killed process 7657 (syz.4.570) total-vm:104448kB, anon-rss:1268kB, file-rss:22860kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 229.414359][ T7694] netlink: 12 bytes leftover after parsing attributes in process `syz.5.584'. [ 229.414426][ T7694] netlink: 12 bytes leftover after parsing attributes in process `syz.5.584'. [ 229.800997][ T31] audit: type=1326 audit(1792216546.790:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.3.585" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690659e559 code=0x7ffc0000 [ 229.801087][ T31] audit: type=1326 audit(1792216546.790:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.3.585" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690659e559 code=0x7ffc0000 [ 229.810104][ T31] audit: type=1326 audit(1792216546.800:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.3.585" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f690659e559 code=0x7ffc0000 [ 229.909512][ T31] audit: type=1326 audit(1792216546.890:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.3.585" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690659e559 code=0x7ffc0000 [ 229.909596][ T31] audit: type=1326 audit(1792216546.900:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.3.585" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690659e559 code=0x7ffc0000 [ 229.910278][ T31] audit: type=1326 audit(1792216546.900:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.3.585" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690659e559 code=0x7ffc0000 [ 229.910356][ T31] audit: type=1326 audit(1792216546.900:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.3.585" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690659e559 code=0x7ffc0000 [ 229.945306][ T31] audit: type=1326 audit(1792216546.930:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.3.585" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f690659e559 code=0x7ffc0000 [ 229.945386][ T31] audit: type=1326 audit(1792216546.930:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.3.585" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690659e559 code=0x7ffc0000 [ 229.945457][ T31] audit: type=1326 audit(1792216546.930:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.3.585" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690659e559 code=0x7ffc0000 [ 229.949142][ T7694] netlink: 12 bytes leftover after parsing attributes in process `syz.5.584'. [ 229.949205][ T7694] netlink: 12 bytes leftover after parsing attributes in process `syz.5.584'. [ 230.411637][ T7705] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 230.511153][ T7706] smpboot: CPU 1 is now offline [ 231.160403][ T7719] netlink: 'syz.4.589': attribute type 4 has an invalid length. [ 232.207709][ C0] ------------[ cut here ]------------ [ 232.207726][ C0] cpu_t != t [ 232.207735][ C0] WARNING: arch/x86/kernel/cpu/mce/core.c:1770 at mce_timer_fn+0x289/0x2e0, CPU#0: kworker/0:8/6265 [ 232.227788][ C0] Modules linked in: [ 232.231681][ C0] CPU: 0 UID: 0 PID: 6265 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT(full) [ 232.241088][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 232.251206][ C0] Workqueue: events cleanup_vm_area_work [ 232.256891][ C0] RIP: 0010:mce_timer_fn+0x289/0x2e0 [ 232.262199][ C0] Code: 59 00 4d 01 e4 4d 39 ec 4d 0f 47 e5 31 ff 4c 89 e6 e8 4b 3f 59 00 4d 85 e4 0f 84 20 ff ff ff e9 f7 fe ff ff e8 98 44 59 00 90 <0f> 0b 90 e9 cf fd ff ff 4c 89 f6 48 c7 c7 a0 ef bf 8f e8 b0 e0 84 [ 232.281859][ C0] RSP: 0018:ffffc90000007c20 EFLAGS: 00010246 [ 232.287965][ C0] RAX: 0000000000000000 RBX: ffff8880b8223440 RCX: 0000000000000100 [ 232.295947][ C0] RDX: ffff88802d2e5dc0 RSI: ffffffff81b2f1b8 RDI: ffffffff8e6ad920 [ 232.303950][ C0] RBP: ffff8880b8323440 R08: 0000000000000001 R09: 0000000000000000 [ 232.311945][ C0] R10: 0000000000000001 R11: 000000000000761b R12: 0000000000000000 [ 232.319955][ C0] R13: 8000000000000100 R14: 1ffff92000000f8d R15: ffffffff81b2ef30 [ 232.327958][ C0] FS: 0000000000000000(0000) GS:ffff888122944000(0000) knlGS:0000000000000000 [ 232.336921][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 232.343500][ C0] CR2: 00007ffe3ee03d50 CR3: 000000005d459000 CR4: 0000000000350ef0 [ 232.351525][ C0] Call Trace: [ 232.354802][ C0] [ 232.357677][ C0] call_timer_fn+0x198/0x5f0 [ 232.362281][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 232.367441][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 232.372469][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 232.378146][ C0] ? mark_held_locks+0x40/0x70 [ 232.382919][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 232.387992][ C0] __run_timers+0x757/0xb00 [ 232.392515][ C0] ? __pfx___run_timers+0x10/0x10 [ 232.397570][ C0] ? clockevents_program_event+0x23e/0x820 [ 232.403419][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 232.409114][ C0] ? lock_acquire+0x1d1/0x380 [ 232.413809][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 232.419477][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 232.424523][ C0] run_timer_base+0x114/0x190 [ 232.429233][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 232.434434][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 232.440106][ C0] run_timer_softirq+0x10/0x50 [ 232.444877][ C0] handle_softirqs+0x1e6/0x9d0 [ 232.449676][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 232.454980][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 232.460644][ C0] ? _raw_spin_unlock+0x28/0x50 [ 232.465508][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 232.471171][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 232.476854][ C0] __irq_exit_rcu+0x16a/0x210 [ 232.481530][ C0] irq_exit_rcu+0x9/0x30 [ 232.485786][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 232.491489][ C0] [ 232.494411][ C0] [ 232.497363][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 232.503351][ C0] RIP: 0010:unwind_next_frame+0x6fc/0x2090 [ 232.509204][ C0] Code: ff ff 80 3d 95 5a d8 13 00 0f 85 6b fc ff ff 4c 89 ef c6 05 85 5a d8 13 01 e8 30 f6 ff ff e9 57 fc ff ff e8 a6 3b 36 00 84 c0 <0f> 85 dd f9 ff ff e8 29 09 1a 0a 85 c0 0f 84 d0 f9 ff ff 80 3d 02 [ 232.528865][ C0] RSP: 0018:ffffc9000482f718 EFLAGS: 00000202 [ 232.534952][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000200 [ 232.542959][ C0] RDX: 0000000000000000 RSI: ffffffff8c625c00 RDI: ffffffff8e6ad920 [ 232.550959][ C0] RBP: ffffc9000482f7d0 R08: 00000000ead0b9ab R09: 0000000000000007 [ 232.558961][ C0] R10: 0000000000000200 R11: 0000000000000001 R12: ffffffff81f60180 [ 232.566964][ C0] R13: ffffc9000482f788 R14: 0000000000000000 R15: ffff88802d2e5dc0 [ 232.574933][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 232.581167][ C0] ? unwind_next_frame+0x6fa/0x2090 [ 232.586411][ C0] ? process_one_work+0xac7/0x1b10 [ 232.591542][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 232.597754][ C0] arch_stack_walk+0x94/0xf0 [ 232.602363][ C0] ? process_one_work+0xac7/0x1b10 [ 232.607531][ C0] stack_trace_save+0x8e/0xc0 [ 232.612209][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 232.617616][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 232.622558][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 232.628261][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 232.633227][ C0] save_stack+0x162/0x1e0 [ 232.637595][ C0] ? __pfx_save_stack+0x10/0x10 [ 232.642451][ C0] ? free_pages_prepare+0x586/0xe00 [ 232.647692][ C0] ? __free_contig_range_common+0x14f/0x250 [ 232.653597][ C0] ? free_pages_bulk+0xbd/0x200 [ 232.658502][ C0] ? vm_area_free_pages+0xb2/0x2a0 [ 232.663631][ C0] ? vfree+0xf7/0x6d0 [ 232.667672][ C0] ? cleanup_vm_area_work+0x4c/0x100 [ 232.672964][ C0] ? process_one_work+0xac7/0x1b10 [ 232.678137][ C0] ? page_ext_put+0x3e/0xd0 [ 232.682645][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 232.688328][ C0] __reset_page_owner+0x84/0x190 [ 232.693283][ C0] free_pages_prepare+0x586/0xe00 [ 232.698362][ C0] __free_contig_range_common+0x14f/0x250 [ 232.704104][ C0] free_pages_bulk+0xbd/0x200 [ 232.708856][ C0] vm_area_free_pages+0xb2/0x2a0 [ 232.713845][ C0] vfree+0xf7/0x6d0 [ 232.717696][ C0] ? lock_acquire+0x1d1/0x380 [ 232.722402][ C0] ? process_one_work+0xa2c/0x1b10 [ 232.727564][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 232.733208][ C0] ? process_one_work+0x906/0x1b10 [ 232.738367][ C0] cleanup_vm_area_work+0x4c/0x100 [ 232.743490][ C0] process_one_work+0xac7/0x1b10 [ 232.748507][ C0] ? __pfx_process_one_work+0x10/0x10 [ 232.753897][ C0] ? lock_acquire+0x1d1/0x380 [ 232.758619][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 232.764265][ C0] worker_thread+0x5ef/0xe50 [ 232.768931][ C0] ? __pfx_worker_thread+0x10/0x10 [ 232.774082][ C0] ? kthread+0x13a/0x450 [ 232.778377][ C0] ? __pfx_worker_thread+0x10/0x10 [ 232.783501][ C0] kthread+0x373/0x450 [ 232.787627][ C0] ? __pfx_kthread+0x10/0x10 [ 232.792234][ C0] ret_from_fork+0x730/0xd60 [ 232.796875][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 232.801989][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 232.807653][ C0] ? __switch_to+0x800/0x10f0 [ 232.812341][ C0] ? __switch_to_asm+0x39/0x70 [ 232.817139][ C0] ? __pfx_kthread+0x10/0x10 [ 232.821742][ C0] ret_from_fork_asm+0x1a/0x30 [ 232.826555][ C0] [ 232.829565][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 232.836832][ C0] CPU: 0 UID: 0 PID: 6265 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT(full) [ 232.846199][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 232.856248][ C0] Workqueue: events cleanup_vm_area_work [ 232.861896][ C0] Call Trace: [ 232.865166][ C0] [ 232.868002][ C0] dump_stack_lvl+0x100/0x190 [ 232.872695][ C0] vpanic+0x553/0x970 [ 232.876675][ C0] ? __pfx_vpanic+0x10/0x10 [ 232.881188][ C0] panic+0xd1/0xe0 [ 232.884905][ C0] ? __pfx_panic+0x10/0x10 [ 232.889334][ C0] check_panic_on_warn.cold+0x19/0x34 [ 232.894703][ C0] ? mce_timer_fn+0x289/0x2e0 [ 232.899388][ C0] __warn.cold+0x191/0x318 [ 232.903805][ C0] __report_bug+0x30f/0x440 [ 232.908306][ C0] ? mce_timer_fn+0x289/0x2e0 [ 232.913002][ C0] ? __pfx___report_bug+0x10/0x10 [ 232.918021][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 232.923216][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 232.928854][ C0] ? irqentry_exit+0x24d/0xa10 [ 232.933612][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 232.939265][ C0] ? mce_timer_fn+0x289/0x2e0 [ 232.943946][ C0] ? mce_timer_fn+0x289/0x2e0 [ 232.948625][ C0] report_bug+0xb3/0x220 [ 232.952866][ C0] ? mce_timer_fn+0x289/0x2e0 [ 232.957545][ C0] handle_bug+0x16a/0x2a0 [ 232.961880][ C0] exc_invalid_op+0x17/0x50 [ 232.966386][ C0] asm_exc_invalid_op+0x1a/0x20 [ 232.971232][ C0] RIP: 0010:mce_timer_fn+0x289/0x2e0 [ 232.976516][ C0] Code: 59 00 4d 01 e4 4d 39 ec 4d 0f 47 e5 31 ff 4c 89 e6 e8 4b 3f 59 00 4d 85 e4 0f 84 20 ff ff ff e9 f7 fe ff ff e8 98 44 59 00 90 <0f> 0b 90 e9 cf fd ff ff 4c 89 f6 48 c7 c7 a0 ef bf 8f e8 b0 e0 84 [ 232.996126][ C0] RSP: 0018:ffffc90000007c20 EFLAGS: 00010246 [ 233.002206][ C0] RAX: 0000000000000000 RBX: ffff8880b8223440 RCX: 0000000000000100 [ 233.010193][ C0] RDX: ffff88802d2e5dc0 RSI: ffffffff81b2f1b8 RDI: ffffffff8e6ad920 [ 233.018158][ C0] RBP: ffff8880b8323440 R08: 0000000000000001 R09: 0000000000000000 [ 233.026119][ C0] R10: 0000000000000001 R11: 000000000000761b R12: 0000000000000000 [ 233.034090][ C0] R13: 8000000000000100 R14: 1ffff92000000f8d R15: ffffffff81b2ef30 [ 233.042073][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 233.047119][ C0] ? mce_timer_fn+0x288/0x2e0 [ 233.051811][ C0] call_timer_fn+0x198/0x5f0 [ 233.056405][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 233.061522][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 233.066545][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.072184][ C0] ? mark_held_locks+0x40/0x70 [ 233.076954][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 233.081989][ C0] __run_timers+0x757/0xb00 [ 233.086529][ C0] ? __pfx___run_timers+0x10/0x10 [ 233.091554][ C0] ? clockevents_program_event+0x23e/0x820 [ 233.097379][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.103016][ C0] ? lock_acquire+0x1d1/0x380 [ 233.107696][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.113333][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 233.118378][ C0] run_timer_base+0x114/0x190 [ 233.123055][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 233.128251][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.133900][ C0] run_timer_softirq+0x10/0x50 [ 233.138661][ C0] handle_softirqs+0x1e6/0x9d0 [ 233.143479][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 233.148780][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.154425][ C0] ? _raw_spin_unlock+0x28/0x50 [ 233.159291][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.164932][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 233.170616][ C0] __irq_exit_rcu+0x16a/0x210 [ 233.175297][ C0] irq_exit_rcu+0x9/0x30 [ 233.179555][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 233.185210][ C0] [ 233.188133][ C0] [ 233.191050][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 233.197030][ C0] RIP: 0010:unwind_next_frame+0x6fc/0x2090 [ 233.202881][ C0] Code: ff ff 80 3d 95 5a d8 13 00 0f 85 6b fc ff ff 4c 89 ef c6 05 85 5a d8 13 01 e8 30 f6 ff ff e9 57 fc ff ff e8 a6 3b 36 00 84 c0 <0f> 85 dd f9 ff ff e8 29 09 1a 0a 85 c0 0f 84 d0 f9 ff ff 80 3d 02 [ 233.222490][ C0] RSP: 0018:ffffc9000482f718 EFLAGS: 00000202 [ 233.228556][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000200 [ 233.236519][ C0] RDX: 0000000000000000 RSI: ffffffff8c625c00 RDI: ffffffff8e6ad920 [ 233.244486][ C0] RBP: ffffc9000482f7d0 R08: 00000000ead0b9ab R09: 0000000000000007 [ 233.252448][ C0] R10: 0000000000000200 R11: 0000000000000001 R12: ffffffff81f60180 [ 233.260412][ C0] R13: ffffc9000482f788 R14: 0000000000000000 R15: ffff88802d2e5dc0 [ 233.268381][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 233.274574][ C0] ? unwind_next_frame+0x6fa/0x2090 [ 233.279785][ C0] ? process_one_work+0xac7/0x1b10 [ 233.284918][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 233.291095][ C0] arch_stack_walk+0x94/0xf0 [ 233.295706][ C0] ? process_one_work+0xac7/0x1b10 [ 233.300837][ C0] stack_trace_save+0x8e/0xc0 [ 233.305511][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 233.310906][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 233.315845][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.321482][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 233.326422][ C0] save_stack+0x162/0x1e0 [ 233.330756][ C0] ? __pfx_save_stack+0x10/0x10 [ 233.335608][ C0] ? free_pages_prepare+0x586/0xe00 [ 233.340813][ C0] ? __free_contig_range_common+0x14f/0x250 [ 233.346717][ C0] ? free_pages_bulk+0xbd/0x200 [ 233.351581][ C0] ? vm_area_free_pages+0xb2/0x2a0 [ 233.356730][ C0] ? vfree+0xf7/0x6d0 [ 233.360712][ C0] ? cleanup_vm_area_work+0x4c/0x100 [ 233.365998][ C0] ? process_one_work+0xac7/0x1b10 [ 233.371132][ C0] ? page_ext_put+0x3e/0xd0 [ 233.375656][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.381328][ C0] __reset_page_owner+0x84/0x190 [ 233.386279][ C0] free_pages_prepare+0x586/0xe00 [ 233.391343][ C0] __free_contig_range_common+0x14f/0x250 [ 233.397085][ C0] free_pages_bulk+0xbd/0x200 [ 233.401788][ C0] vm_area_free_pages+0xb2/0x2a0 [ 233.406752][ C0] vfree+0xf7/0x6d0 [ 233.410561][ C0] ? lock_acquire+0x1d1/0x380 [ 233.415239][ C0] ? process_one_work+0xa2c/0x1b10 [ 233.420364][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.426000][ C0] ? process_one_work+0x906/0x1b10 [ 233.431127][ C0] cleanup_vm_area_work+0x4c/0x100 [ 233.436259][ C0] process_one_work+0xac7/0x1b10 [ 233.441227][ C0] ? __pfx_process_one_work+0x10/0x10 [ 233.446615][ C0] ? lock_acquire+0x1d1/0x380 [ 233.451308][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.456950][ C0] worker_thread+0x5ef/0xe50 [ 233.461566][ C0] ? __pfx_worker_thread+0x10/0x10 [ 233.466693][ C0] ? kthread+0x13a/0x450 [ 233.470943][ C0] ? __pfx_worker_thread+0x10/0x10 [ 233.476088][ C0] kthread+0x373/0x450 [ 233.480182][ C0] ? __pfx_kthread+0x10/0x10 [ 233.484784][ C0] ret_from_fork+0x730/0xd60 [ 233.489374][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 233.494485][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.500120][ C0] ? __switch_to+0x800/0x10f0 [ 233.504817][ C0] ? __switch_to_asm+0x39/0x70 [ 233.509577][ C0] ? __pfx_kthread+0x10/0x10 [ 233.514191][ C0] ret_from_fork_asm+0x1a/0x30 [ 233.518969][ C0] [ 233.522017][ C0] Kernel Offset: disabled [ 233.526329][ C0] Rebooting in 86400 seconds..