last executing test programs: 18.928876031s ago: executing program 4 (id=138): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x3f, 0x3f}) 11.775194317s ago: executing program 2 (id=150): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mount$9p_fd(0x0, 0x0, 0x0, 0x1200810, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 11.669105181s ago: executing program 4 (id=151): write(0xffffffffffffffff, &(0x7f0000000340)='0fc5:1227:', 0xa) r0 = socket$netlink(0x10, 0x3, 0x4) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x400, @none, 0x8}, 0xe) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x4) fcntl$getown(r0, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_clone3(&(0x7f0000000180)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0xc9cf, 0x2, 0x0, 0x42}, &(0x7f0000000280), &(0x7f0000011000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) 10.779420563s ago: executing program 4 (id=152): r0 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x60000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000040)={0x5, {"4e068be8035430cf8aa115d0d8d0f21c", "af86e7d62fdce0b68c2a7502b5b00c9f", "fad16f5a00"}, 0xe, 0x5}) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x3, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd2bb, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x157}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 10.128903467s ago: executing program 1 (id=153): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f00000002c0)="28d36689fb21") 10.037431177s ago: executing program 2 (id=155): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x20, 0x6, 0x2, {0x2, 0x12}}, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xffffffffffffffa9, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {0x0, 0x410c}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c015}, 0x8000) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 9.227498529s ago: executing program 3 (id=157): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x8, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x86a83, 0x1) 8.418151076s ago: executing program 4 (id=158): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x5524, &(0x7f00000108c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5) pwrite64(r0, &(0x7f0000000100)='\n', 0x1, 0x8000c5b) fallocate(r0, 0x10, 0x10000004000, 0x4002) 7.968465537s ago: executing program 3 (id=159): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000480)={{}, 'syz0\x00'}) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x2) ioctl$UI_DEV_CREATE(r2, 0x5501) write$UHID_INPUT(r1, &(0x7f00000005c0)={0xf, {"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", 0x1010}}, 0x1006) 7.742399327s ago: executing program 0 (id=160): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x9, 0x3, 0xe5, 0x40, 0x3, 0x0, 0x30, 0x19}, {0xeeeb1000, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x3, 0x1}, {0xdddd1000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x5, 0xab, 0x5, 0x81}, {0x6000, 0x8000000, 0xc, 0xa, 0x4, 0x43, 0x3, 0xfb, 0x80, 0x5, 0xe}, {0x0, 0x9000, 0xc, 0x1, 0x3, 0x6, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x82}, {0x0, 0x80a0000, 0x8, 0xa0, 0xb1, 0x8, 0xc, 0xd, 0x88, 0x12, 0x4, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xb000, 0x2d}, {0x10000, 0x7fff}, 0x80000031, 0x0, 0x6000, 0x42024, 0xb, 0x1, 0x2000, [0x6840000000000002, 0x3, 0x10de, 0xff]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001b00)=[@textreal={0x8, 0x0}], 0x1, 0xe, 0x0, 0x0) 7.08631453s ago: executing program 2 (id=161): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x267, &(0x7f0000000b40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002100)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) 6.40726668s ago: executing program 0 (id=162): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x800000000000000) 6.384360399s ago: executing program 1 (id=163): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.361587061s ago: executing program 3 (id=164): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x30c3f000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000080)=0x1) 6.333130244s ago: executing program 2 (id=165): landlock_create_ruleset(&(0x7f00000005c0)={0xc0d8, 0xa, 0x3, 0x0, 0x8, 0x1}, 0x30, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x10000055}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x5}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x5, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 5.849844245s ago: executing program 1 (id=166): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x102e}) 5.098437938s ago: executing program 0 (id=167): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x200004, 0xff, 0x2, 0x4, 0x0, 0x7, 0xc4, 0x3, 0xff, 0x6, 0xc, 0x8, 0x1}, {0x8, 0xaef2, 0x6, 0xc, 0xc, 0xfe, 0x8, 0x3, 0x0, 0x13, 0x1, 0x6, 0x7}, {0xffffd, 0x6, 0xc, 0xf, 0x1, 0x5, 0x0, 0xfb, 0x7a, 0x15, 0x1, 0x1, 0x2}], 0x5}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x1, 0x6, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0x167a, 0x0, 0xfff, 0x10, 0x4, 0x0, 0x0, 0x8, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.378554616s ago: executing program 1 (id=168): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000040)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) 4.313950284s ago: executing program 2 (id=169): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x20, 0x21, 0x7, {0x7, 0x0, "3d63833917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x64, 0x100) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000440)) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x4002) 3.912924261s ago: executing program 3 (id=170): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 3.632839742s ago: executing program 0 (id=171): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x8400040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x7, 0xc, 0x6, 0xfffffffffffffffd, 0x8, 0x5, 0x4, 0x2, 0x8, 0x4, 0x3, 0x3, 0x1932be21, 0x100000000, 0x4, 0x4], 0xeeee0000, 0x40600}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x17, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4, 0x80, 0x9, 0x80, 0x0, 0xfffffffe, 0xfffffff8, 0x0, 0xff, 0xff, 0x6, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.193632986s ago: executing program 4 (id=172): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='27', 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) 3.129347508s ago: executing program 1 (id=173): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r7 = dup(r1) syz_ublk_setup_queues(r7, r6, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r2}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) 2.929128903s ago: executing program 0 (id=174): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000010000000000000000000000711813000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x189001, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r0], 0xa) 2.261939196s ago: executing program 3 (id=175): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f00000001c0)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x65) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x84fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x4000) r2 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) 1.353701375s ago: executing program 4 (id=176): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x7, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x802, 0xfffffb9a, 0x0, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x83, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x10001, 0x801ff, 0x8003, 0x0, 0x3, 0x1d, 0x3, 0xba55, 0x8da8, 0x4, 0x80200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x7c23, 0x6, 0x6, 0xc, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x5bf, 0x25, 0x7, 0xfffffffc, 0x3, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x0, 0x3, 0x1, 0xd, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0x10, 0xfffffffd, 0x1, 0x1, 0xffffffff, 0x6, 0x3ff, 0x800, 0x7, 0x3, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x80001, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0xffff, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0xb], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x1, 0x4, 0x4c, 0x2, 0x764, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x10007f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x8000, 0x5, 0x1, 0x65f413f9, 0x4, 0x20006, 0x1, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x57, 0x1e, 0xffffffff, 0x7fff, 0x80000000, 0xfffffff5, 0x401, 0x3, 0x200, 0x7, 0x6a6, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x1, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) 1.074326368s ago: executing program 1 (id=177): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbey@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\x00\xc3j$v\xefw\x96\\\\/\xfc\xe3\xb8\xc7\x0f\xaa\\\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4000000) openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x44002, 0x0) 1.000894807s ago: executing program 0 (id=178): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0', 0x1) write(r0, &(0x7f00000001a0)='1', 0x1) 574.575884ms ago: executing program 2 (id=179): syz_mount_image$ext4(&(0x7f0000002580)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000100)={[{@discard}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nolazytime}, {@quota}, {@lazytime}, {@errors_remount}, {@mblk_io_submit}, {@noblock_validity}, {@errors_remount}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='\f', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 0s ago: executing program 3 (id=180): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0x80}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000240)="e6", 0x1) tee(r3, r0, 0x800000003, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.176' (ED25519) to the list of known hosts. [ 98.387084][ T5597] cgroup: Unknown subsys name 'net' [ 98.495853][ T5597] cgroup: Unknown subsys name 'cpuset' [ 98.504704][ T5597] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 100.280211][ T5597] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.789950][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.791383][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.796935][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.801902][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.807168][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.810192][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.810928][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.811318][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.818692][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.837068][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.852128][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.862545][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.863872][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.872593][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.872727][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 102.873743][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.884986][ T4927] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.885713][ T4927] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.887380][ T4927] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.895701][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 102.897014][ T4927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 102.897527][ T4927] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.901741][ T4927] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.923066][ T4927] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 102.934090][ T4927] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 104.439439][ T9] cfg80211: failed to load regulatory.db [ 104.993563][ T4927] Bluetooth: hci0: command tx timeout [ 105.071612][ T4927] Bluetooth: hci4: command tx timeout [ 105.071638][ T5627] Bluetooth: hci1: command tx timeout [ 105.072225][ T5616] Bluetooth: hci2: command tx timeout [ 105.083601][ T4927] Bluetooth: hci3: command tx timeout [ 105.203896][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.204198][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.204735][ T5612] bridge_slave_0: entered allmulticast mode [ 105.207143][ T5612] bridge_slave_0: entered promiscuous mode [ 105.265827][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.265930][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.266052][ T5614] bridge_slave_0: entered allmulticast mode [ 105.267571][ T5614] bridge_slave_0: entered promiscuous mode [ 105.306906][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.307007][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.307174][ T5612] bridge_slave_1: entered allmulticast mode [ 105.308686][ T5612] bridge_slave_1: entered promiscuous mode [ 105.368647][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.368808][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.368992][ T5614] bridge_slave_1: entered allmulticast mode [ 105.371036][ T5614] bridge_slave_1: entered promiscuous mode [ 105.448746][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.448869][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.449015][ T5610] bridge_slave_0: entered allmulticast mode [ 105.450600][ T5610] bridge_slave_0: entered promiscuous mode [ 105.520737][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.544003][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.544108][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.544286][ T5610] bridge_slave_1: entered allmulticast mode [ 105.546606][ T5610] bridge_slave_1: entered promiscuous mode [ 105.599848][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.621719][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.653715][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.700140][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.760390][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.782111][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.782302][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.782472][ T5611] bridge_slave_0: entered allmulticast mode [ 105.785329][ T5611] bridge_slave_0: entered promiscuous mode [ 105.802719][ T5612] team0: Port device team_slave_0 added [ 105.855601][ T5614] team0: Port device team_slave_0 added [ 105.855869][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.856043][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.856188][ T5611] bridge_slave_1: entered allmulticast mode [ 105.857916][ T5611] bridge_slave_1: entered promiscuous mode [ 105.861690][ T5612] team0: Port device team_slave_1 added [ 105.926861][ T5614] team0: Port device team_slave_1 added [ 105.966855][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.966951][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.967131][ T5613] bridge_slave_0: entered allmulticast mode [ 105.969092][ T5613] bridge_slave_0: entered promiscuous mode [ 105.989345][ T5610] team0: Port device team_slave_0 added [ 106.055787][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.055806][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.055830][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.057734][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.057859][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.059404][ T5613] bridge_slave_1: entered allmulticast mode [ 106.061213][ T5613] bridge_slave_1: entered promiscuous mode [ 106.083491][ T5610] team0: Port device team_slave_1 added [ 106.163075][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.164585][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.164609][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.164629][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.246644][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.246662][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.246694][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.298839][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.340485][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.340505][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.340533][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.348576][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.348629][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.348705][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.423344][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.464739][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.464791][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.464866][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.570911][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.623874][ T5611] team0: Port device team_slave_0 added [ 106.683834][ T5611] team0: Port device team_slave_1 added [ 106.718541][ T5613] team0: Port device team_slave_0 added [ 106.753945][ T5612] hsr_slave_0: entered promiscuous mode [ 106.755167][ T5612] hsr_slave_1: entered promiscuous mode [ 106.800311][ T5613] team0: Port device team_slave_1 added [ 106.846075][ T5614] hsr_slave_0: entered promiscuous mode [ 106.847107][ T5614] hsr_slave_1: entered promiscuous mode [ 106.848450][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 106.849116][ T5614] Cannot create hsr debugfs directory [ 106.897276][ T5610] hsr_slave_0: entered promiscuous mode [ 106.898346][ T5610] hsr_slave_1: entered promiscuous mode [ 106.898979][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 106.899000][ T5610] Cannot create hsr debugfs directory [ 106.936950][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.936969][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.936991][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.939305][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.939321][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.939355][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.073370][ T4927] Bluetooth: hci0: command tx timeout [ 107.110702][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.110720][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.110743][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.151994][ T5627] Bluetooth: hci4: command tx timeout [ 107.152109][ T5627] Bluetooth: hci2: command tx timeout [ 107.152628][ T4927] Bluetooth: hci3: command tx timeout [ 107.157006][ T4927] Bluetooth: hci1: command tx timeout [ 107.238462][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.238488][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.238529][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.461038][ T5611] hsr_slave_0: entered promiscuous mode [ 107.465682][ T5611] hsr_slave_1: entered promiscuous mode [ 107.468507][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 107.468571][ T5611] Cannot create hsr debugfs directory [ 107.602101][ T5613] hsr_slave_0: entered promiscuous mode [ 107.603609][ T5613] hsr_slave_1: entered promiscuous mode [ 107.604488][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 107.604511][ T5613] Cannot create hsr debugfs directory [ 108.135391][ T5612] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.151735][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.154123][ T5612] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.160499][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.199874][ T5612] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.216807][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.217751][ T5612] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.238053][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.325964][ T5614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.345023][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.364148][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.368559][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.369632][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 108.385586][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.406624][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.419790][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.545118][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.564354][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.565634][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.570160][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.605140][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.611085][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.643619][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.648040][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.790269][ T5611] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.804607][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.805985][ T5611] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.823435][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.853961][ T5611] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.858084][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.897969][ T5611] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.912459][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.025290][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.044523][ T5613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 109.048746][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.050015][ T5613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 109.084437][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.106813][ T5613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 109.111131][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.133980][ T5613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 109.139609][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.152562][ T4927] Bluetooth: hci0: command tx timeout [ 109.232643][ T5616] Bluetooth: hci3: command tx timeout [ 109.232680][ T5627] Bluetooth: hci2: command tx timeout [ 109.232686][ T5616] Bluetooth: hci4: command tx timeout [ 109.232824][ T4927] Bluetooth: hci1: command tx timeout [ 109.232943][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.318448][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.337371][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.337607][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.388868][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.389404][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.460412][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.507814][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.526282][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.526389][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.586743][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.586856][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.658107][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.685245][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.715046][ T3372] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.715172][ T3372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.777087][ T3372] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.777210][ T3372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.817490][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.850400][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.850476][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.921002][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.921084][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.099229][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.253312][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.348587][ T3372] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.348710][ T3372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.400740][ T1508] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.400881][ T1508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.215395][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.231810][ T4927] Bluetooth: hci0: command tx timeout [ 111.311976][ T5623] Bluetooth: hci1: command tx timeout [ 111.312025][ T5623] Bluetooth: hci4: command tx timeout [ 111.312049][ T5623] Bluetooth: hci2: command tx timeout [ 111.312116][ T4927] Bluetooth: hci3: command tx timeout [ 111.620847][ T5612] veth0_vlan: entered promiscuous mode [ 111.673739][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.734262][ T5612] veth1_vlan: entered promiscuous mode [ 111.922480][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.945248][ T5612] veth0_macvtap: entered promiscuous mode [ 112.005276][ T5612] veth1_macvtap: entered promiscuous mode [ 112.072323][ T5614] veth0_vlan: entered promiscuous mode [ 112.112708][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.140432][ T5614] veth1_vlan: entered promiscuous mode [ 112.167117][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.238462][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.326716][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.368325][ T5610] veth0_vlan: entered promiscuous mode [ 112.470299][ T5614] veth0_macvtap: entered promiscuous mode [ 112.522476][ T5610] veth1_vlan: entered promiscuous mode [ 112.528322][ T5614] veth1_macvtap: entered promiscuous mode [ 112.664308][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.706780][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.706817][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.708384][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.763605][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.781471][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.782130][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.825778][ T5613] veth0_vlan: entered promiscuous mode [ 112.886459][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.886478][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.923733][ T5610] veth0_macvtap: entered promiscuous mode [ 112.930330][ T5610] veth1_macvtap: entered promiscuous mode [ 112.961104][ T5613] veth1_vlan: entered promiscuous mode [ 113.107617][ T5612] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 113.118314][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.118493][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.118636][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.118737][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.118882][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.239575][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.281277][ T5611] veth0_vlan: entered promiscuous mode [ 113.360211][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.378964][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.378993][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.452669][ T5613] veth0_macvtap: entered promiscuous mode [ 113.491063][ T5611] veth1_vlan: entered promiscuous mode [ 113.520264][ T5613] veth1_macvtap: entered promiscuous mode [ 113.550561][ T159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.550587][ T159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.591952][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.612615][ T992] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.612677][ T992] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.612717][ T992] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.816719][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.853528][ T5611] veth0_macvtap: entered promiscuous mode [ 113.916531][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.965768][ T5816] loop3: detected capacity change from 0 to 512 [ 113.968133][ T5611] veth1_macvtap: entered promiscuous mode [ 114.012887][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.012914][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.125395][ T5816] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 114.126220][ T5818] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.142520][ T3372] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.281692][ T5816] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 114.282450][ T5816] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #11: comm syz.3.7: corrupted inode contents [ 114.282604][ T5816] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 114.291974][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 114.292079][ C0] EXT4-fs (loop3): initial error at time 1791002565: mb_free_blocks:2049: inode 11: block 64 [ 114.292241][ C0] EXT4-fs (loop3): last error at time 1791002565: ext4_do_update_inode:5801: inode 11 [ 114.333826][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.352531][ T159] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.406181][ T1508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.406208][ T1508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.412730][ T61] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.412905][ T61] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.469913][ T5816] EXT4-fs error (device loop3): ext4_dirty_inode:6736: inode #11: comm syz.3.7: mark_inode_dirty error [ 114.469953][ T5816] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 114.489081][ T5816] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.7: invalid indirect mapped block 1 (level 1) [ 114.489117][ T5816] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 114.507077][ T5816] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #11: comm syz.3.7: corrupted inode contents [ 114.507247][ T5816] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 114.569189][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.798957][ T5818] loop2: detected capacity change from 0 to 32768 [ 114.819670][ T5816] EXT4-fs error (device loop3) in ext4_orphan_del:304: Corrupt filesystem [ 114.901872][ T5816] loop3: lost filesystem error report for type 5 error -117 [ 114.909236][ T5816] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #11: comm syz.3.7: corrupted inode contents [ 114.909275][ T5816] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 114.939505][ T5816] EXT4-fs error (device loop3): ext4_truncate:4721: inode #11: comm syz.3.7: mark_inode_dirty error [ 114.939693][ T5816] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 114.949651][ T3372] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.963093][ T5816] EXT4-fs error (device loop3) in ext4_process_orphan:346: Corrupt filesystem [ 114.963142][ T5816] loop3: lost filesystem error report for type 5 error -117 [ 115.006151][ T5816] EXT4-fs (loop3): 1 truncate cleaned up [ 115.103032][ T64] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.104105][ T64] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.104319][ T64] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.154934][ T5816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.457660][ T5820] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure [ 115.709837][ T5816] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #2: block 13: comm syz.3.7: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 117.234499][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.329417][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.329444][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.639785][ T3336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.639812][ T3336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.707194][ T5829] loop0: detected capacity change from 0 to 512 [ 117.710722][ T5829] ======================================================= [ 117.710722][ T5829] WARNING: The mand mount option has been deprecated and [ 117.710722][ T5829] and is ignored by this kernel. Remove the mand [ 117.710722][ T5829] option from the mount to silence this warning. [ 117.710722][ T5829] ======================================================= [ 117.818090][ T5829] EXT4-fs: Mount option(s) incompatible with ext2 [ 117.981401][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.981429][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.063215][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.063240][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.188157][ T5829] loop0: detected capacity change from 0 to 256 [ 118.379867][ T5830] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 118.379939][ T5830] FAT-fs (loop0): Filesystem has been set read-only [ 118.385606][ T5830] UBIFS error (pid: 5830): cannot open "ubi0", error -19 [ 118.927645][ T5834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10'. [ 119.605133][ T5840] loop1: detected capacity change from 0 to 512 [ 119.655622][ T5840] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 119.777345][ T5840] EXT4-fs (loop1): 1 truncate cleaned up [ 119.833787][ T5840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.756817][ T5840] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 156 vs 220 free clusters [ 120.815972][ T5840] EXT4-fs (loop1): Remounting filesystem read-only [ 120.816183][ T5840] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 120.885216][ T5852] loop4: detected capacity change from 0 to 16 [ 120.987403][ T5852] erofs (device loop4): mounted with root inode @ nid 36. [ 121.328470][ T33] audit: type=1800 audit(1791002572.156:2): pid=5852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5" name="file1" dev="loop4" ino=86 res=0 errno=-22 [ 121.426503][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.455812][ T5846] loop3: detected capacity change from 0 to 4096 [ 121.612586][ T4927] Bluetooth: to_multiplier 8192 > 3200 [ 123.289686][ T5856] ALSA: mixer_oss: invalid OSS volume '' [ 123.644834][ T5616] Bluetooth: hci0: command tx timeout [ 124.451958][ T5846] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 124.543273][ T5846] ntfs3(loop3): Failed to read $UpCase (-4). [ 126.047688][ T5882] loop2: detected capacity change from 0 to 512 [ 128.126931][ T5882] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 128.126953][ T5882] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 128.127036][ T5882] System zones: 0-1, 15-15, 18-18, 34-34 [ 128.127306][ T5882] EXT4-fs (loop2): orphan cleanup on readonly fs [ 128.127484][ T5882] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 128.127550][ T5882] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 128.127573][ T5882] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 128.128212][ T5882] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.20: bad orphan inode 16 [ 128.128255][ T5882] loop2: lost filesystem error report for type 5 error -117 [ 128.261305][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 128.261327][ C1] EXT4-fs (loop2): initial error at time 1791002578: ext4_orphan_get:1429 [ 128.261351][ C1] EXT4-fs (loop2): last error at time 1791002578: ext4_orphan_get:1429 [ 128.267978][ T5882] ext4_test_bit(bit=15, block=18) = 1 [ 128.268052][ T5882] is_bad_inode(inode)=0 [ 128.268084][ T5882] NEXT_ORPHAN(inode)=0 [ 128.268109][ T5882] max_ino=32 [ 128.268132][ T5882] i_nlink=2 [ 128.399989][ T5882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.935940][ T5897] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 129.518876][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.816551][ T5903] FAULT_INJECTION: forcing a failure. [ 129.816551][ T5903] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 129.816594][ T5903] CPU: 0 UID: 0 PID: 5903 Comm: syz.3.27 Not tainted syzkaller #0 PREEMPT(full) [ 129.816617][ T5903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.816633][ T5903] Call Trace: [ 129.816639][ T5903] [ 129.816646][ T5903] dump_stack_lvl+0xe8/0x150 [ 129.816673][ T5903] should_fail_ex+0x3eb/0x540 [ 129.816693][ T5903] _copy_from_user+0x2d/0xb0 [ 129.816710][ T5903] __x64_sys_mq_getsetattr+0x145/0x270 [ 129.816729][ T5903] ? __pfx___x64_sys_mq_getsetattr+0x10/0x10 [ 129.816766][ T5903] do_syscall_64+0x166/0x520 [ 129.816781][ T5903] ? trace_irq_disable+0x3b/0x140 [ 129.816796][ T5903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.816812][ T5903] ? clear_bhb_loop+0x70/0xc0 [ 129.816830][ T5903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.816845][ T5903] RIP: 0033:0x7f08a579e159 [ 129.816866][ T5903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.816880][ T5903] RSP: 002b:00007f08a65cb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f5 [ 129.816898][ T5903] RAX: ffffffffffffffda RBX: 00007f08a5a25fa0 RCX: 00007f08a579e159 [ 129.816910][ T5903] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 129.816920][ T5903] RBP: 00007f08a583506b R08: 0000000000000000 R09: 0000000000000000 [ 129.816929][ T5903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.816942][ T5903] R13: 00007f08a5a26038 R14: 00007f08a5a25fa0 R15: 00007ffc61121788 [ 129.816966][ T5903] [ 130.479803][ T5914] loop3: detected capacity change from 0 to 1024 [ 130.493574][ T5914] EXT4-fs: Ignoring removed bh option [ 130.599772][ T5911] Zero length message leads to an empty skb [ 130.605916][ T5914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.652283][ T5835] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.652749][ T51] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.823060][ T51] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.823094][ T51] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.216819][ T5612] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 131.269197][ T5930] loop8: detected capacity change from 0 to 8 [ 131.302949][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.395437][ T5930] Dev loop8: unable to read RDB block 8 [ 131.395598][ T5930] loop8: unable to read partition table [ 131.395830][ T5930] loop8: partition table beyond EOD, truncated [ 131.395899][ T5930] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 131.798934][ T5935] FAULT_INJECTION: forcing a failure. [ 131.798934][ T5935] name failslab, interval 1, probability 0, space 0, times 1 [ 131.798961][ T5935] CPU: 1 UID: 0 PID: 5935 Comm: syz.0.35 Not tainted syzkaller #0 PREEMPT(full) [ 131.798979][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.798989][ T5935] Call Trace: [ 131.798995][ T5935] [ 131.799002][ T5935] dump_stack_lvl+0xe8/0x150 [ 131.799024][ T5935] should_fail_ex+0x3eb/0x540 [ 131.799044][ T5935] ? alloc_slab_obj_exts+0x5c/0x180 [ 131.799060][ T5935] should_failslab+0xa8/0x100 [ 131.799076][ T5935] ? alloc_slab_obj_exts+0x5c/0x180 [ 131.799090][ T5935] __kmalloc_flags_noprof+0x123/0x790 [ 131.799109][ T5935] ? alloc_slab_obj_exts+0x5c/0x180 [ 131.799130][ T5935] alloc_slab_obj_exts+0x5c/0x180 [ 131.799147][ T5935] __memcg_slab_post_alloc_hook+0x5f0/0xdb0 [ 131.799177][ T5935] ? vm_area_alloc+0x24/0x140 [ 131.799193][ T5935] kmem_cache_alloc_noprof+0x362/0x600 [ 131.799209][ T5935] ? vm_area_alloc+0x24/0x140 [ 131.799222][ T5935] ? kmem_cache_alloc_noprof+0x151/0x600 [ 131.799237][ T5935] ? vm_area_alloc+0x24/0x140 [ 131.799256][ T5935] vm_area_alloc+0x24/0x140 [ 131.799271][ T5935] mmap_region+0x18df/0x2c60 [ 131.799295][ T5935] ? lock_acquire+0x115/0x350 [ 131.799313][ T5935] ? __lock_acquire+0x747/0x2de0 [ 131.799329][ T5935] ? __pfx_mmap_region+0x10/0x10 [ 131.799349][ T5935] ? lock_acquire+0x115/0x350 [ 131.799371][ T5935] ? ktime_get+0x45/0x220 [ 131.799387][ T5935] ? ktime_get+0x45/0x220 [ 131.799401][ T5935] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 131.799418][ T5935] ? ktime_get+0x1f5/0x220 [ 131.799436][ T5935] ? lapic_next_event+0x11/0x20 [ 131.799450][ T5935] ? clockevents_program_event+0x491/0x630 [ 131.799509][ T5935] ? arch_get_unmapped_area_topdown+0x269/0xc30 [ 131.799549][ T5935] ? __pfx_shmem_get_unmapped_area+0x10/0x10 [ 131.799566][ T5935] ? cap_mmap_addr+0xb1/0xf0 [ 131.799581][ T5935] ? bpf_lsm_mmap_addr+0x9/0x50 [ 131.799596][ T5935] ? security_mmap_addr+0x71/0x240 [ 131.799618][ T5935] do_mmap+0xe0a/0x1300 [ 131.799640][ T5935] ? __pfx_do_mmap+0x10/0x10 [ 131.799662][ T5935] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 131.799677][ T5935] ? down_write_killable+0x179/0x230 [ 131.799695][ T5935] ? __pfx_down_write_killable+0x10/0x10 [ 131.799711][ T5935] ? apparmor_mmap_file+0x1cc/0x390 [ 131.799729][ T5935] ? security_mmap_file+0x4df/0xa20 [ 131.799749][ T5935] vm_mmap_pgoff+0x272/0x4e0 [ 131.799770][ T5935] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 131.799787][ T5935] ? rcu_is_watching+0x16/0xb0 [ 131.799805][ T5935] ? ksys_mmap_pgoff+0xf3/0x760 [ 131.799821][ T5935] ? __x64_sys_mmap+0x7f/0x140 [ 131.799839][ T5935] do_syscall_64+0x166/0x520 [ 131.799853][ T5935] ? trace_irq_disable+0x3b/0x140 [ 131.799867][ T5935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.799884][ T5935] ? clear_bhb_loop+0x70/0xc0 [ 131.799901][ T5935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.799917][ T5935] RIP: 0033:0x7f451a79e159 [ 131.799940][ T5935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.799954][ T5935] RSP: 002b:00007f451b697028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 131.799972][ T5935] RAX: ffffffffffffffda RBX: 00007f451aa25fa0 RCX: 00007f451a79e159 [ 131.799984][ T5935] RDX: 0000000002000007 RSI: 0000000000c00000 RDI: 0000000000000000 [ 131.799994][ T5935] RBP: 00007f451a83506b R08: ffffffffffffffff R09: 0000000000000000 [ 131.800005][ T5935] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 131.800015][ T5935] R13: 00007f451aa26038 R14: 00007f451aa25fa0 R15: 00007fff2dbb6498 [ 131.800085][ T5935] [ 132.764348][ T5942] loop3: detected capacity change from 0 to 4096 [ 133.235298][ T5948] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.605537][ T5615] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 133.811153][ T5615] usb 2-1: New USB device found: idVendor=0eef, idProduct=72c4, bcdDevice=0.00 [ 133.859925][ T5615] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.859963][ T5615] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.859989][ T5615] usb 2-1: config 0 interface 0 has no altsetting 0 [ 133.860027][ T5615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.945063][ T5615] usb 2-1: config 0 descriptor?? [ 134.469935][ T5615] hid (null): bogus close delimiter [ 134.563880][ T5615] hid-multitouch 0003:0EEF:72C4.0001: unknown main item tag 0x0 [ 134.563962][ T5615] hid-multitouch 0003:0EEF:72C4.0001: unknown main item tag 0x0 [ 134.563982][ T5615] hid-multitouch 0003:0EEF:72C4.0001: unknown main item tag 0x0 [ 134.564002][ T5615] hid-multitouch 0003:0EEF:72C4.0001: unknown main item tag 0x0 [ 134.564021][ T5615] hid-multitouch 0003:0EEF:72C4.0001: unknown main item tag 0x7 [ 134.564042][ T5615] hid-multitouch 0003:0EEF:72C4.0001: unknown main item tag 0x6 [ 134.564062][ T5615] hid-multitouch 0003:0EEF:72C4.0001: unknown main item tag 0x0 [ 134.564081][ T5615] hid-multitouch 0003:0EEF:72C4.0001: unknown main item tag 0x0 [ 134.564100][ T5615] hid-multitouch 0003:0EEF:72C4.0001: unknown main item tag 0x0 [ 134.564120][ T5615] hid-multitouch 0003:0EEF:72C4.0001: unknown main item tag 0x0 [ 134.564138][ T5615] hid-multitouch 0003:0EEF:72C4.0001: bogus close delimiter [ 134.564149][ T5615] hid-multitouch 0003:0EEF:72C4.0001: item 0 1 2 10 parsing failed [ 134.566642][ T5615] hid-multitouch 0003:0EEF:72C4.0001: probe with driver hid-multitouch failed with error -22 [ 134.810564][ T5631] usb 2-1: USB disconnect, device number 2 [ 135.183217][ T5966] FAULT_INJECTION: forcing a failure. [ 135.183217][ T5966] name failslab, interval 1, probability 0, space 0, times 0 [ 135.183253][ T5966] CPU: 0 UID: 0 PID: 5966 Comm: syz.0.46 Not tainted syzkaller #0 PREEMPT(full) [ 135.183276][ T5966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.183288][ T5966] Call Trace: [ 135.183296][ T5966] [ 135.183305][ T5966] dump_stack_lvl+0xe8/0x150 [ 135.183346][ T5966] should_fail_ex+0x3eb/0x540 [ 135.183372][ T5966] should_failslab+0xa8/0x100 [ 135.183398][ T5966] __kmalloc_cache_noprof+0x9e/0x600 [ 135.183420][ T5966] ? call_usermodehelper_setup+0x8e/0x270 [ 135.183440][ T5966] ? call_usermodehelper_setup+0x8e/0x270 [ 135.183461][ T5966] ? __request_module+0x2ec/0x630 [ 135.183483][ T5966] call_usermodehelper_setup+0x8e/0x270 [ 135.183504][ T5966] ? __pfx_free_modprobe_argv+0x10/0x10 [ 135.183527][ T5966] __request_module+0x3ba/0x630 [ 135.183553][ T5966] ? __pfx___request_module+0x10/0x10 [ 135.183575][ T5966] ? lock_acquire+0x115/0x350 [ 135.183603][ T5966] ? rcu_read_unlock+0x87/0xa0 [ 135.183629][ T5966] inet_create+0x411/0xff0 [ 135.183647][ T5966] ? inet_create+0x9d/0xff0 [ 135.183668][ T5966] __sock_create+0x4b5/0xac0 [ 135.183828][ T5966] __sys_socket+0xd6/0x1b0 [ 135.183853][ T5966] __x64_sys_socket+0x7a/0x90 [ 135.183874][ T5966] do_syscall_64+0x166/0x520 [ 135.183894][ T5966] ? trace_irq_disable+0x3b/0x140 [ 135.183916][ T5966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.183940][ T5966] ? clear_bhb_loop+0x70/0xc0 [ 135.183962][ T5966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.183986][ T5966] RIP: 0033:0x7f451a79e159 [ 135.184011][ T5966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.184028][ T5966] RSP: 002b:00007f451b697028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 135.184056][ T5966] RAX: ffffffffffffffda RBX: 00007f451aa25fa0 RCX: 00007f451a79e159 [ 135.184072][ T5966] RDX: 0000000000000005 RSI: 0000000000000002 RDI: 0000000000000002 [ 135.184086][ T5966] RBP: 00007f451a83506b R08: 0000000000000000 R09: 0000000000000000 [ 135.184101][ T5966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.184116][ T5966] R13: 00007f451aa26038 R14: 00007f451aa25fa0 R15: 00007fff2dbb6498 [ 135.184149][ T5966] [ 136.790688][ T5989] syz.4.55 uses obsolete (PF_INET,SOCK_PACKET) [ 137.879293][ T5981] loop3: detected capacity change from 0 to 32768 [ 138.143290][ T5981] non-latin1 character 0x200 found in JFS file name [ 138.143309][ T5981] mount with iocharset=utf8 to access [ 138.865651][ T6015] loop8: detected capacity change from 0 to 8 [ 138.892408][ T6015] Dev loop8: unable to read RDB block 8 [ 138.892470][ T6015] loop8: unable to read partition table [ 138.892691][ T6015] loop8: partition table beyond EOD, truncated [ 138.892730][ T6015] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 139.357517][ T6002] loop1: detected capacity change from 0 to 32768 [ 139.409051][ T6020] netlink: 'syz.4.67': attribute type 22 has an invalid length. [ 139.409073][ T6020] netlink: 16 bytes leftover after parsing attributes in process `syz.4.67'. [ 139.555538][ T6020] netlink: 'syz.4.67': attribute type 22 has an invalid length. [ 139.555584][ T6020] netlink: 16 bytes leftover after parsing attributes in process `syz.4.67'. [ 139.618033][ T6002] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.60 (6002) [ 140.231104][ T6030] netlink: 24 bytes leftover after parsing attributes in process `syz.0.69'. [ 140.279856][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.279931][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.303294][ T6030] netlink: 16 bytes leftover after parsing attributes in process `syz.0.69'. [ 140.367494][ T6029] Illegal XDP return value 4294967274 on prog (id 6) dev syz_tun, expect packet loss! [ 140.559528][ T6002] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 140.559581][ T6002] BTRFS info (device loop1): using crc32c checksum algorithm [ 140.670391][ T6002] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 140.698190][ T6002] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 140.749695][ T6002] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 140.750756][ T6002] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 140.895182][ T6002] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 140.896253][ T6002] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 140.947984][ T6002] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 140.969964][ T6002] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 141.076359][ T6002] BTRFS error (device loop1): open_ctree failed: -ENOMEM [ 141.594758][ T28] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 141.741524][ T28] usb 1-1: Using ep0 maxpacket: 16 [ 141.750310][ T28] usb 1-1: New USB device found: idVendor=6161, idProduct=4d15, bcdDevice=0.00 [ 141.786755][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.786796][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.786841][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.850305][ T28] usb 1-1: config 0 descriptor?? [ 142.761283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 142.765876][ T5624] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 142.801725][ T28] letsketch 0003:6161:4D15.0002: Device info: ï“¿ [ 142.917215][ T5624] usb 2-1: Using ep0 maxpacket: 8 [ 142.920261][ T5624] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 142.949887][ T5624] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.949913][ T5624] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.949968][ T5624] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 142.949998][ T5624] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.950056][ T5624] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.119597][ T28] usb 1-1: Max retries (5) exceeded reading string descriptor 201 [ 143.119720][ T28] letsketch 0003:6161:4D15.0002: probe with driver letsketch failed with error -71 [ 143.165014][ T28] usb 1-1: USB disconnect, device number 2 [ 143.255553][ T6043] loop4: detected capacity change from 0 to 32768 [ 143.289223][ T5624] usb 2-1: GET_CAPABILITIES returned 0 [ 143.289269][ T5624] usbtmc 2-1:16.0: can't read capabilities [ 143.561284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 143.598666][ T28] usb 2-1: USB disconnect, device number 3 [ 143.904911][ T6043] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/loop4": -EINTR [ 144.137452][ T1084] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 144.247597][ T1084] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 144.791746][ T6078] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 144.791767][ T6078] CIFS mount error: No usable UNC path provided in device string! [ 144.791767][ T6078] [ 144.791952][ T6078] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 144.921376][ T1084] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 145.072440][ T1084] usb 5-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 145.074158][ T1084] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.133595][ T1084] usb 5-1: config 0 descriptor?? [ 145.304987][ T6081] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 145.356925][ T1084] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 145.444065][ T6071] fido_id[6071]: Failed to read report descriptor at '/sys/devices/virtual/misc/uhid/0000:0000:0000.0003/report_descriptor': No such device [ 145.465902][ T6084] FAULT_INJECTION: forcing a failure. [ 145.465902][ T6084] name failslab, interval 1, probability 0, space 0, times 0 [ 145.466095][ T6084] CPU: 0 UID: 0 PID: 6084 Comm: syz.0.87 Not tainted syzkaller #0 PREEMPT(full) [ 145.466162][ T6084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.466207][ T6084] Call Trace: [ 145.466237][ T6084] [ 145.466261][ T6084] dump_stack_lvl+0xe8/0x150 [ 145.466367][ T6084] should_fail_ex+0x3eb/0x540 [ 145.466453][ T6084] should_failslab+0xa8/0x100 [ 145.466521][ T6084] __kvmalloc_node_noprof+0x171/0x820 [ 145.466592][ T6084] ? __kmalloc_cache_noprof+0x31c/0x600 [ 145.466666][ T6084] ? alloc_fdtable+0x101/0x2c0 [ 145.466721][ T6084] ? alloc_fdtable+0x101/0x2c0 [ 145.466797][ T6084] alloc_fdtable+0x101/0x2c0 [ 145.466853][ T6084] ? dup_fd+0x99c/0xbf0 [ 145.466915][ T6084] dup_fd+0x9a5/0xbf0 [ 145.466991][ T6084] ? unshare_fd+0x7a/0x120 [ 145.467075][ T6084] unshare_fd+0xa8/0x120 [ 145.467154][ T6084] ksys_unshare+0x4d2/0x890 [ 145.467231][ T6084] ? __pfx_ksys_unshare+0x10/0x10 [ 145.467302][ T6084] ? rcu_is_watching+0x16/0xb0 [ 145.467409][ T6084] __x64_sys_unshare+0x38/0x50 [ 145.467487][ T6084] do_syscall_64+0x166/0x520 [ 145.467557][ T6084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.467613][ T6084] ? clear_bhb_loop+0x70/0xc0 [ 145.467677][ T6084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.467747][ T6084] RIP: 0033:0x7f451a79e159 [ 145.467814][ T6084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.467853][ T6084] RSP: 002b:00007f451b697028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 145.467926][ T6084] RAX: ffffffffffffffda RBX: 00007f451aa25fa0 RCX: 00007f451a79e159 [ 145.467962][ T6084] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000600 [ 145.468003][ T6084] RBP: 00007f451a83506b R08: 0000000000000000 R09: 0000000000000000 [ 145.468044][ T6084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.468078][ T6084] R13: 00007f451aa26038 R14: 00007f451aa25fa0 R15: 00007fff2dbb6498 [ 145.468171][ T6084] [ 145.652311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 146.408186][ T1084] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 146.408211][ T1084] [drm] Initialized udl on minor 1 [ 146.550975][ T1084] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 146.628235][ T6093] loop1: detected capacity change from 0 to 512 [ 146.666560][ T6093] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.93: iget: bad i_size value: 38620345925642 [ 146.666601][ T6093] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 146.682393][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 146.682420][ C1] EXT4-fs (loop1): initial error at time 1791002597: ext4_orphan_get:1403: inode 15 [ 146.682445][ C1] EXT4-fs (loop1): last error at time 1791002597: ext4_orphan_get:1403: inode 15 [ 146.763433][ T6093] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.93: couldn't read orphan inode 15 (err -117) [ 146.763461][ T6093] loop1: lost filesystem error report for type 5 error -117 [ 146.799183][ T1084] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 146.866681][ T6093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.097843][ T1084] usb 5-1: USB disconnect, device number 2 [ 147.533927][ T6101] device-mapper: ioctl: Unable to rename non-existent device, to uuid .2\´£«.j—DH [ 147.610828][ T6093] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.93: bg 0: block 5: invalid block bitmap [ 147.714170][ T6093] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 30 with max blocks 484 with error 28 [ 147.714200][ T6093] EXT4-fs (loop1): This should not happen!! Data will be lost [ 147.714200][ T6093] [ 147.714211][ T6093] EXT4-fs (loop1): Total free blocks count 0 [ 147.714224][ T6093] EXT4-fs (loop1): Free/Dirty block details [ 147.714250][ T6093] EXT4-fs (loop1): free_blocks=0 [ 147.714271][ T6093] EXT4-fs (loop1): dirty_blocks=485 [ 147.714280][ T6093] EXT4-fs (loop1): Block reservation details [ 147.714289][ T6093] EXT4-fs (loop1): i_reserved_data_blocks=485 [ 148.277450][ T14] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 131075 with max blocks 1 with error 28 [ 148.892751][ T6110] FAULT_INJECTION: forcing a failure. [ 148.892751][ T6110] name failslab, interval 1, probability 0, space 0, times 0 [ 148.892860][ T6110] CPU: 0 UID: 0 PID: 6110 Comm: syz.3.98 Not tainted syzkaller #0 PREEMPT(full) [ 148.892959][ T6110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.892996][ T6110] Call Trace: [ 148.893004][ T6110] [ 148.893018][ T6110] dump_stack_lvl+0xe8/0x150 [ 148.893046][ T6110] should_fail_ex+0x3eb/0x540 [ 148.893083][ T6110] should_failslab+0xa8/0x100 [ 148.893101][ T6110] __kmalloc_cache_noprof+0x9e/0x600 [ 148.893159][ T6110] ? find_ucounts+0x23/0x2c0 [ 148.893175][ T6110] ? alloc_ucounts+0xaa/0x4b0 [ 148.893188][ T6110] ? alloc_ucounts+0xaa/0x4b0 [ 148.893237][ T6110] alloc_ucounts+0xaa/0x4b0 [ 148.893257][ T6110] ? __asan_memset+0x22/0x50 [ 148.893275][ T6110] set_cred_ucounts+0x10d/0x1c0 [ 148.893305][ T6110] __sys_setuid+0x2b2/0x560 [ 148.893324][ T6110] do_syscall_64+0x166/0x520 [ 148.893351][ T6110] ? trace_irq_disable+0x3b/0x140 [ 148.893371][ T6110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.893419][ T6110] ? clear_bhb_loop+0x70/0xc0 [ 148.893474][ T6110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.893497][ T6110] RIP: 0033:0x7f08a579e159 [ 148.893513][ T6110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.893544][ T6110] RSP: 002b:00007f08a65cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 148.893562][ T6110] RAX: ffffffffffffffda RBX: 00007f08a5a25fa0 RCX: 00007f08a579e159 [ 148.893590][ T6110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 148.893610][ T6110] RBP: 00007f08a583506b R08: 0000000000000000 R09: 0000000000000000 [ 148.893639][ T6110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.893648][ T6110] R13: 00007f08a5a26038 R14: 00007f08a5a25fa0 R15: 00007ffc61121788 [ 148.893696][ T6110] [ 151.591962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 153.055658][ T6174] loop1: detected capacity change from 0 to 512 [ 153.466588][ T6174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.466720][ T6174] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.513440][ T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 154.726651][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 154.726686][ T9] usb 5-1: New USB device found: idVendor=1df7, idProduct=2500, bcdDevice=0.00 [ 154.728259][ T6196] FAULT_INJECTION: forcing a failure. [ 154.728259][ T6196] name failslab, interval 1, probability 0, space 0, times 0 [ 154.728297][ T6196] CPU: 1 UID: 0 PID: 6196 Comm: syz.3.119 Not tainted syzkaller #0 PREEMPT(full) [ 154.728327][ T6196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.728343][ T6196] Call Trace: [ 154.728353][ T6196] [ 154.728364][ T6196] dump_stack_lvl+0xe8/0x150 [ 154.728399][ T6196] should_fail_ex+0x3eb/0x540 [ 154.728428][ T6196] ? __alloc_skb+0x1db/0x7a0 [ 154.728453][ T6196] should_failslab+0xa8/0x100 [ 154.728479][ T6196] ? __alloc_skb+0x1db/0x7a0 [ 154.728500][ T6196] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 154.728528][ T6196] ? __alloc_skb+0x18d/0x7a0 [ 154.728552][ T6196] ? __alloc_skb+0x1db/0x7a0 [ 154.728583][ T6196] __alloc_skb+0x1db/0x7a0 [ 154.728611][ T6196] pfkey_sendmsg+0x20c/0x11d0 [ 154.728637][ T6196] ? lock_acquire+0x115/0x350 [ 154.728688][ T6196] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 154.728716][ T6196] ? aa_sk_perm+0x6ff/0x8f0 [ 154.728740][ T6196] ? aa_file_perm+0x18b/0x15f0 [ 154.728771][ T6196] ? __pfx_aa_sk_perm+0x10/0x10 [ 154.728800][ T6196] ? aa_sock_msg_perm+0x144/0x210 [ 154.728832][ T6196] ? apparmor_socket_sendmsg+0x98/0x360 [ 154.728859][ T6196] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 154.728881][ T6196] sock_sendmsg_nosec+0x14e/0x190 [ 154.728913][ T6196] sock_write_iter+0x2de/0x3e0 [ 154.728941][ T6196] ? __pfx_sock_write_iter+0x10/0x10 [ 154.728976][ T6196] ? bpf_lsm_file_permission+0x9/0x20 [ 154.729002][ T6196] ? security_file_permission+0x75/0x260 [ 154.729037][ T6196] vfs_write+0x612/0xba0 [ 154.729073][ T6196] ? __pfx_vfs_write+0x10/0x10 [ 154.729103][ T6196] ? __fget_files+0x3a2/0x420 [ 154.729128][ T6196] ? __fget_files+0x2a/0x420 [ 154.729157][ T6196] ? fdget+0x1ac/0x250 [ 154.729187][ T6196] ksys_write+0x150/0x270 [ 154.729214][ T6196] ? __pfx_ksys_write+0x10/0x10 [ 154.729249][ T6196] do_syscall_64+0x166/0x520 [ 154.729271][ T6196] ? trace_irq_disable+0x3b/0x140 [ 154.729292][ T6196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.729321][ T6196] ? clear_bhb_loop+0x70/0xc0 [ 154.729347][ T6196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.729371][ T6196] RIP: 0033:0x7f08a579e159 [ 154.729404][ T6196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.729420][ T6196] RSP: 002b:00007f08a65cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 154.729461][ T6196] RAX: ffffffffffffffda RBX: 00007f08a5a25fa0 RCX: 00007f08a579e159 [ 154.729481][ T6196] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 154.729510][ T6196] RBP: 00007f08a583506b R08: 0000000000000000 R09: 0000000000000000 [ 154.729525][ T6196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.729539][ T6196] R13: 00007f08a5a26038 R14: 00007f08a5a25fa0 R15: 00007ffc61121788 [ 154.729575][ T6196] [ 154.891417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 155.004094][ T9] usb 5-1: config index 0 descriptor too short (expected 43, got 25) [ 155.004259][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.072417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 155.111490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 155.344942][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 155.344967][ T9] usb 5-1: Product: syz [ 155.344980][ T9] usb 5-1: Manufacturer: syz [ 155.754801][ T6191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.755326][ T6191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.008000][ T33] audit: type=1800 audit(1791002606.836:3): pid=6201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.114" name="file1" dev="loop1" ino=15 res=0 errno=-4 [ 157.587347][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.848023][ T9] msi2500 5-1:1.0: Registered as swradio24 [ 157.850946][ T9] msi2500 5-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 158.998947][ T6240] FAULT_INJECTION: forcing a failure. [ 158.998947][ T6240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.998976][ T6240] CPU: 1 UID: 0 PID: 6240 Comm: syz.1.127 Not tainted syzkaller #0 PREEMPT(full) [ 158.998996][ T6240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.999007][ T6240] Call Trace: [ 158.999014][ T6240] [ 158.999022][ T6240] dump_stack_lvl+0xe8/0x150 [ 158.999047][ T6240] should_fail_ex+0x3eb/0x540 [ 158.999069][ T6240] _copy_to_user+0x31/0xb0 [ 158.999089][ T6240] bpf_verifier_vlog+0x52a/0x900 [ 158.999118][ T6240] btf_verifier_log+0x11d/0x1a0 [ 158.999137][ T6240] ? __sort_r+0x2c3f/0x3530 [ 158.999156][ T6240] ? __pfx_btf_verifier_log+0x10/0x10 [ 158.999186][ T6240] __btf_verifier_log_type+0x45d/0x6a0 [ 158.999214][ T6240] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 158.999246][ T6240] btf_datasec_check_meta+0x40e/0xad0 [ 158.999288][ T6240] ? __pfx_sort+0x10/0x10 [ 158.999303][ T6240] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 158.999328][ T6240] btf_parse_type_sec+0x3cf/0x24a0 [ 158.999353][ T6240] ? __pfx_btf_check_sec_info+0x10/0x10 [ 158.999376][ T6240] ? btf_parse_str_sec+0x244/0x2f0 [ 158.999397][ T6240] btf_new_fd+0x4ad/0xc20 [ 158.999422][ T6240] __sys_bpf+0xda7/0xe00 [ 158.999446][ T6240] ? __pfx___sys_bpf+0x10/0x10 [ 158.999466][ T6240] ? do_futex+0x458/0x4e0 [ 158.999508][ T6240] ? rcu_is_watching+0x16/0xb0 [ 158.999531][ T6240] __x64_sys_bpf+0xba/0xd0 [ 158.999551][ T6240] do_syscall_64+0x166/0x520 [ 158.999567][ T6240] ? trace_irq_disable+0x3b/0x140 [ 158.999583][ T6240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.999602][ T6240] ? clear_bhb_loop+0x70/0xc0 [ 158.999622][ T6240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.999641][ T6240] RIP: 0033:0x7f49a5b9e159 [ 158.999658][ T6240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.999673][ T6240] RSP: 002b:00007f49a6a28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 158.999692][ T6240] RAX: ffffffffffffffda RBX: 00007f49a5e25fa0 RCX: 00007f49a5b9e159 [ 158.999706][ T6240] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 158.999717][ T6240] RBP: 00007f49a5c3506b R08: 0000000000000000 R09: 0000000000000000 [ 158.999728][ T6240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.999739][ T6240] R13: 00007f49a5e26038 R14: 00007f49a5e25fa0 R15: 00007ffeebd5f5e8 [ 158.999771][ T6240] [ 160.501347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #12!!! [ 161.706036][ T6261] FAULT_INJECTION: forcing a failure. [ 161.706036][ T6261] name failslab, interval 1, probability 0, space 0, times 0 [ 161.706063][ T6261] CPU: 1 UID: 0 PID: 6261 Comm: syz.1.134 Not tainted syzkaller #0 PREEMPT(full) [ 161.706083][ T6261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.706093][ T6261] Call Trace: [ 161.706099][ T6261] [ 161.706106][ T6261] dump_stack_lvl+0xe8/0x150 [ 161.706129][ T6261] should_fail_ex+0x3eb/0x540 [ 161.706150][ T6261] should_failslab+0xa8/0x100 [ 161.706168][ T6261] __kmalloc_cache_noprof+0x9e/0x600 [ 161.706185][ T6261] ? __alloc_workqueue+0xf5f/0x21d0 [ 161.706201][ T6261] ? __alloc_workqueue+0xf5f/0x21d0 [ 161.706221][ T6261] __alloc_workqueue+0xf5f/0x21d0 [ 161.706253][ T6261] alloc_workqueue_noprof+0xe3/0x210 [ 161.706275][ T6261] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 161.706297][ T6261] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 161.706317][ T6261] nci_register_device+0x22c/0xa00 [ 161.706338][ T6261] ? __pfx_nci_register_device+0x10/0x10 [ 161.706352][ T6261] ? __raw_spin_lock_init+0x45/0x100 [ 161.706370][ T6261] ? __raw_spin_lock_init+0x45/0x100 [ 161.706387][ T6261] ? __init_waitqueue_head+0xa8/0x150 [ 161.706406][ T6261] virtual_ncidev_open+0x129/0x1a0 [ 161.706424][ T6261] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 161.706439][ T6261] misc_open+0x2d5/0x350 [ 161.706457][ T6261] chrdev_open+0x4d9/0x600 [ 161.706475][ T6261] ? __pfx_chrdev_open+0x10/0x10 [ 161.706493][ T6261] ? devcgroup_check_permission+0x31/0x8f0 [ 161.706513][ T6261] ? __pfx_chrdev_open+0x10/0x10 [ 161.706528][ T6261] do_dentry_open+0x80e/0x1360 [ 161.706561][ T6261] vfs_open_consume+0x4a/0x350 [ 161.706575][ T6261] ? path_openat+0x148a/0x1da0 [ 161.706593][ T6261] path_openat+0x14a6/0x1da0 [ 161.706624][ T6261] do_file_open+0x23e/0x4a0 [ 161.706643][ T6261] ? __pfx_do_file_open+0x10/0x10 [ 161.706678][ T6261] ? _raw_spin_unlock+0x28/0x50 [ 161.706693][ T6261] ? alloc_fd+0x6af/0x760 [ 161.706717][ T6261] do_sys_openat2+0x115/0x200 [ 161.706733][ T6261] ? __se_sys_futex+0x3a8/0x450 [ 161.706750][ T6261] ? __pfx_do_sys_openat2+0x10/0x10 [ 161.706770][ T6261] ? rcu_is_watching+0x16/0xb0 [ 161.706790][ T6261] __x64_sys_openat+0x138/0x170 [ 161.706809][ T6261] do_syscall_64+0x166/0x520 [ 161.706823][ T6261] ? trace_irq_disable+0x3b/0x140 [ 161.706838][ T6261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.706855][ T6261] ? clear_bhb_loop+0x70/0xc0 [ 161.706872][ T6261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.706889][ T6261] RIP: 0033:0x7f49a5b9e159 [ 161.706905][ T6261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.706918][ T6261] RSP: 002b:00007f49a6a28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 161.706936][ T6261] RAX: ffffffffffffffda RBX: 00007f49a5e25fa0 RCX: 00007f49a5b9e159 [ 161.706947][ T6261] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 161.706958][ T6261] RBP: 00007f49a5c3506b R08: 0000000000000000 R09: 0000000000000000 [ 161.706968][ T6261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.706977][ T6261] R13: 00007f49a5e26038 R14: 00007f49a5e25fa0 R15: 00007ffeebd5f5e8 [ 161.707003][ T6261] [ 162.531835][ T32] rcu_tasks_wait_gp: rcu_tasks grace period number 9 (since boot) is 1054 jiffies old. [ 162.585058][ T45] usb 5-1: USB disconnect, device number 3 [ 163.304631][ T6277] loop0: detected capacity change from 0 to 512 [ 163.305511][ T6277] EXT4-fs: Ignoring removed oldalloc option [ 163.384114][ T6277] EXT4-fs (loop0): DAX unsupported by block device. [ 163.403084][ T45] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 163.564935][ T45] usb 5-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 163.567477][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.628019][ T45] usb 5-1: config 0 descriptor?? [ 163.901763][ T45] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 164.256303][ T45] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 164.256326][ T45] [drm] Initialized udl on minor 1 [ 165.087154][ T6286] loop1: detected capacity change from 0 to 128 [ 165.387041][ T6280] loop3: detected capacity change from 0 to 40427 [ 165.489121][ T6280] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0) [ 165.489153][ T6280] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 165.582530][ T6286] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 165.582600][ T6286] hpfs: filesystem error: improperly stopped [ 165.582611][ T6286] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 165.583762][ T6286] hpfs: You really don't want any checks? You are crazy... [ 165.583813][ T6286] hpfs: Code page index out of array [ 165.708555][ T6286] hpfs: code page support is disabled [ 165.709801][ T6286] hpfs: hpfs_map_4sectors(): unaligned read [ 165.753594][ T6280] F2FS-fs (loop3): invalid crc value [ 165.864622][ T6286] hpfs: hpfs_map_4sectors(): unaligned read [ 165.864645][ T6286] hpfs: filesystem error: unable to find root dir [ 166.121869][ T6277] loop0: detected capacity change from 0 to 32768 [ 166.383537][ T6280] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 166.601652][ T6277] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 167.051692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 167.557333][ T5610] ocfs2: Unmounting device (7,0) on (node local) [ 169.152632][ T5736] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 169.248744][ T6301] loop0: detected capacity change from 0 to 32768 [ 169.325033][ T5736] usb 2-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 169.326059][ T45] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 169.354288][ T45] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 169.356903][ T5736] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 169.356945][ T5736] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 169.356964][ T5736] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 169.356990][ T5736] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.357033][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.480588][ T5624] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 169.502232][ T5736] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 169.524593][ T45] usb 5-1: USB disconnect, device number 4 [ 169.540754][ T5736] usb 2-1: invalid MIDI out EP 0 [ 169.553800][ T5624] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 169.879122][ T6301] JBD2: Ignoring recovery information on journal [ 170.793411][ T6301] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 170.913737][ T6319] FAULT_INJECTION: forcing a failure. [ 170.913737][ T6319] name failslab, interval 1, probability 0, space 0, times 0 [ 170.913776][ T6319] CPU: 1 UID: 0 PID: 6319 Comm: syz.2.150 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.913806][ T6319] Tainted: [L]=SOFTLOCKUP [ 170.913815][ T6319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.913827][ T6319] Call Trace: [ 170.913836][ T6319] [ 170.913845][ T6319] dump_stack_lvl+0xe8/0x150 [ 170.913875][ T6319] should_fail_ex+0x3eb/0x540 [ 170.913904][ T6319] should_failslab+0xa8/0x100 [ 170.913929][ T6319] ? security_inode_alloc+0x39/0x310 [ 170.913953][ T6319] kmem_cache_alloc_noprof+0x9c/0x600 [ 170.913973][ T6319] ? make_kgid+0x1d1/0x6a0 [ 170.913993][ T6319] ? rcu_is_watching+0x16/0xb0 [ 170.914014][ T6319] ? security_inode_alloc+0x39/0x310 [ 170.914043][ T6319] security_inode_alloc+0x39/0x310 [ 170.914068][ T6319] inode_init_always_gfp+0x97e/0xd30 [ 170.914097][ T6319] ? __pfx_sock_alloc_inode+0x10/0x10 [ 170.914120][ T6319] alloc_inode+0x82/0x1b0 [ 170.914143][ T6319] __sock_create+0x127/0xac0 [ 170.914166][ T6319] ? __pfx___se_sys_setns+0x10/0x10 [ 170.914194][ T6319] __sys_socket+0xd6/0x1b0 [ 170.914218][ T6319] __x64_sys_socket+0x7a/0x90 [ 170.914240][ T6319] do_syscall_64+0x166/0x520 [ 170.914261][ T6319] ? trace_irq_disable+0x3b/0x140 [ 170.914279][ T6319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.914303][ T6319] ? clear_bhb_loop+0x70/0xc0 [ 170.914328][ T6319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.914359][ T6319] RIP: 0033:0x7fe3c699e159 [ 170.914394][ T6319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.914414][ T6319] RSP: 002b:00007fe3c77bcfc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 170.914439][ T6319] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fe3c699e159 [ 170.914455][ T6319] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000027 [ 170.914469][ T6319] RBP: 00007fe3c6a3506b R08: 0000000000000000 R09: 0000000000000000 [ 170.914483][ T6319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.914497][ T6319] R13: 00007fe3c6c26038 R14: 00007fe3c6c25fa0 R15: 00007ffe013a3678 [ 170.914534][ T6319] [ 170.914760][ T6319] socket: no more sockets [ 171.953438][ T5610] ocfs2: Unmounting device (7,0) on (node local) [ 172.107141][ T5736] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 172.151522][ T5736] usb 2-1: USB disconnect, device number 4 [ 172.181390][ T5624] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 172.353906][ T5624] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 172.389339][ T5624] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.389379][ T5624] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.389411][ T5624] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.561359][ T5736] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 172.723494][ T5736] usb 2-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 172.727569][ T5736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.727613][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.798224][ T5736] usb 2-1: config 0 descriptor?? [ 172.841686][ T5624] usb 3-1: usb_control_msg returned -32 [ 172.841750][ T5624] usbtmc 3-1:16.0: can't read capabilities [ 173.057035][ T5736] usbhid 2-1:0.0: can't add hid device: -71 [ 173.057124][ T5736] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 173.099036][ T5736] usb 2-1: USB disconnect, device number 5 [ 173.129081][ T6335] loop0: detected capacity change from 0 to 4096 [ 173.249413][ T6335] ntfs3(loop0): Failed to load $Extend (-22). [ 173.249445][ T6335] ntfs3(loop0): Failed to initialize $Extend. [ 173.577167][ T5736] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 173.605314][ T5631] usb 3-1: USB disconnect, device number 2 [ 173.732718][ T5736] usb 2-1: Using ep0 maxpacket: 32 [ 173.745030][ T5736] usb 2-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=0.40 [ 173.766706][ T5736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.766767][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.801892][ T5736] usb 2-1: config 0 descriptor?? [ 173.822061][ T5736] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 173.875152][ T5736] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 174.370827][ T28] usb 2-1: USB disconnect, device number 6 [ 174.433271][ T28] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 174.438802][ T6343] input: syz0 as /devices/virtual/input/input5 [ 174.556693][ T6346] loop2: detected capacity change from 0 to 256 [ 175.762558][ T6341] loop4: detected capacity change from 0 to 40427 [ 175.779786][ T6357] FAULT_INJECTION: forcing a failure. [ 175.779786][ T6357] name failslab, interval 1, probability 0, space 0, times 0 [ 175.779812][ T6357] CPU: 1 UID: 0 PID: 6357 Comm: syz.0.162 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.779834][ T6357] Tainted: [L]=SOFTLOCKUP [ 175.779840][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.779850][ T6357] Call Trace: [ 175.779856][ T6357] [ 175.779862][ T6357] dump_stack_lvl+0xe8/0x150 [ 175.779885][ T6357] should_fail_ex+0x3eb/0x540 [ 175.779905][ T6357] should_failslab+0xa8/0x100 [ 175.779923][ T6357] ? mempool_init_node+0x1f4/0x510 [ 175.779939][ T6357] kmem_cache_alloc_noprof+0x9c/0x600 [ 175.779956][ T6357] ? mempool_init_node+0x1f4/0x510 [ 175.779972][ T6357] ? kmem_cache_alloc_noprof+0x151/0x600 [ 175.779988][ T6357] ? mempool_init_node+0x1f4/0x510 [ 175.780007][ T6357] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 175.780023][ T6357] mempool_init_node+0x1f4/0x510 [ 175.780045][ T6357] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 175.780062][ T6357] mempool_create_node_noprof+0xb8/0x150 [ 175.780077][ T6357] ? __pfx_mempool_free_slab+0x10/0x10 [ 175.780095][ T6357] ceph_osdc_init+0x4fa/0x900 [ 175.780118][ T6357] ceph_create_client+0x246/0x310 [ 175.780137][ T6357] ceph_get_tree+0x1ca/0x1a40 [ 175.780154][ T6357] ? apparmor_capable+0x126/0x170 [ 175.780176][ T6357] vfs_get_tree+0x92/0x2a0 [ 175.780193][ T6357] vfs_cmd_create+0xa2/0x200 [ 175.780211][ T6357] __se_sys_fsconfig+0x6b9/0x810 [ 175.780231][ T6357] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 175.780248][ T6357] ? rcu_is_watching+0x16/0xb0 [ 175.780269][ T6357] ? __x64_sys_fsconfig+0x20/0xc0 [ 175.780287][ T6357] do_syscall_64+0x166/0x520 [ 175.780301][ T6357] ? trace_irq_disable+0x3b/0x140 [ 175.780315][ T6357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.780331][ T6357] ? clear_bhb_loop+0x70/0xc0 [ 175.780348][ T6357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.780365][ T6357] RIP: 0033:0x7f451a79e159 [ 175.780380][ T6357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.780394][ T6357] RSP: 002b:00007f451b697028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 175.780411][ T6357] RAX: ffffffffffffffda RBX: 00007f451aa25fa0 RCX: 00007f451a79e159 [ 175.780422][ T6357] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 175.780431][ T6357] RBP: 00007f451a83506b R08: 0800000000000000 R09: 0000000000000000 [ 175.780442][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.780451][ T6357] R13: 00007f451aa26038 R14: 00007f451aa25fa0 R15: 00007fff2dbb6498 [ 175.780625][ T6357] [ 175.961638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 176.253683][ T6341] F2FS-fs (loop4): invalid crc value [ 176.479214][ T6362] .: renamed from bond0 (while UP) [ 176.495788][ T6362] FAULT_INJECTION: forcing a failure. [ 176.495788][ T6362] name failslab, interval 1, probability 0, space 0, times 0 [ 176.495828][ T6362] CPU: 1 UID: 0 PID: 6362 Comm: syz.1.166 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.495859][ T6362] Tainted: [L]=SOFTLOCKUP [ 176.495869][ T6362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.495882][ T6362] Call Trace: [ 176.495891][ T6362] [ 176.495900][ T6362] dump_stack_lvl+0xe8/0x150 [ 176.495931][ T6362] should_fail_ex+0x3eb/0x540 [ 176.495959][ T6362] should_failslab+0xa8/0x100 [ 176.495986][ T6362] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 176.496012][ T6362] ? kernfs_root+0x1c/0x230 [ 176.496036][ T6362] ? kernfs_rename_ns+0x6c/0x9e0 [ 176.496057][ T6362] ? kernfs_rename_ns+0x6c/0x9e0 [ 176.496086][ T6362] kstrdup+0x42/0x100 [ 176.496110][ T6362] kernfs_rename_ns+0x6c/0x9e0 [ 176.496130][ T6362] ? _raw_read_unlock_irqrestore+0x30/0x80 [ 176.496159][ T6362] ? _raw_read_unlock_irqrestore+0x4c/0x80 [ 176.496186][ T6362] sysfs_rename_dir_ns+0x6d/0x90 [ 176.496211][ T6362] kobject_rename+0x3a2/0x500 [ 176.496240][ T6362] ? __pfx_kobject_rename+0x10/0x10 [ 176.496266][ T6362] ? sysfs_rename_link_ns+0x178/0x1b0 [ 176.496292][ T6362] device_rename+0x15d/0x210 [ 176.496318][ T6362] netif_change_name+0x27a/0x970 [ 176.496359][ T6362] ? dev_change_name+0x101/0x220 [ 176.496381][ T6362] ? dev_ioctl+0x5dc/0x1150 [ 176.496406][ T6362] ? __pfx_netif_change_name+0x10/0x10 [ 176.496427][ T6362] ? full_name_hash+0x92/0xe0 [ 176.496452][ T6362] ? __dev_get_by_name+0xe5/0x130 [ 176.496480][ T6362] dev_change_name+0x101/0x220 [ 176.496506][ T6362] dev_ioctl+0x5ec/0x1150 [ 176.496531][ T6362] sock_do_ioctl+0x23e/0x320 [ 176.496558][ T6362] ? __pfx_sock_do_ioctl+0x10/0x10 [ 176.496580][ T6362] ? do_futex+0x3e7/0x4e0 [ 176.496621][ T6362] sock_ioctl+0x57a/0x7e0 [ 176.496644][ T6362] ? __fget_files+0x2a/0x420 [ 176.496664][ T6362] ? __pfx_sock_ioctl+0x10/0x10 [ 176.496685][ T6362] ? __fget_files+0x2a/0x420 [ 176.496707][ T6362] ? __fget_files+0x2a/0x420 [ 176.496734][ T6362] ? bpf_lsm_file_ioctl+0x9/0x20 [ 176.496757][ T6362] ? __pfx_sock_ioctl+0x10/0x10 [ 176.496779][ T6362] __se_sys_ioctl+0xfc/0x170 [ 176.496806][ T6362] do_syscall_64+0x166/0x520 [ 176.496827][ T6362] ? trace_irq_disable+0x3b/0x140 [ 176.496847][ T6362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.496873][ T6362] ? clear_bhb_loop+0x70/0xc0 [ 176.496897][ T6362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.496920][ T6362] RIP: 0033:0x7f49a5b9e159 [ 176.496944][ T6362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.496963][ T6362] RSP: 002b:00007f49a6a28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.496988][ T6362] RAX: ffffffffffffffda RBX: 00007f49a5e25fa0 RCX: 00007f49a5b9e159 [ 176.497004][ T6362] RDX: 0000200000000040 RSI: 0000000000008923 RDI: 0000000000000005 [ 176.497018][ T6362] RBP: 00007f49a5c3506b R08: 0000000000000000 R09: 0000000000000000 [ 176.497031][ T6362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.497044][ T6362] R13: 00007f49a5e26038 R14: 00007f49a5e25fa0 R15: 00007ffeebd5f5e8 [ 176.497080][ T6362] [ 177.216535][ T6341] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 177.331973][ T6341] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 177.332033][ T6341] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 177.332061][ T6341] F2FS-fs (loop4): Start checkpoint disabled! [ 177.485448][ T6341] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 177.528882][ T33] audit: type=1326 audit(1791002628.356:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.1.168" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49a5b9e159 code=0x0 [ 177.756387][ T6373] ip_tables: iptables: counters copy to user failed while replacing table [ 178.065950][ T5624] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 178.250192][ T5624] usb 3-1: New USB device found: idVendor=0c70, idProduct=f0b6, bcdDevice=0.00 [ 178.269274][ T5624] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 178.269329][ T5624] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.269383][ T5624] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.311075][ T5624] usb 3-1: config 0 descriptor?? [ 178.988952][ T5624] aquacomputer_d5next 0003:0C70:F0B6.0004: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.2-1/input0 [ 179.318481][ T6389] process 'syz.4.172' launched './file0' with NULL argv: empty string added [ 179.471589][ T6389] FAULT_INJECTION: forcing a failure. [ 179.471589][ T6389] name failslab, interval 1, probability 0, space 0, times 0 [ 179.471628][ T6389] CPU: 1 UID: 0 PID: 6389 Comm: syz.4.172 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.471658][ T6389] Tainted: [L]=SOFTLOCKUP [ 179.471667][ T6389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.471680][ T6389] Call Trace: [ 179.471689][ T6389] [ 179.471699][ T6389] dump_stack_lvl+0xe8/0x150 [ 179.471737][ T6389] should_fail_ex+0x3eb/0x540 [ 179.471768][ T6389] should_failslab+0xa8/0x100 [ 179.471794][ T6389] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 179.471820][ T6389] ? __split_page_owner+0x2c/0x330 [ 179.471842][ T6389] ? snd_pcm_hw_rule_add+0x196/0x800 [ 179.471863][ T6389] ? snd_pcm_hw_rule_add+0x196/0x800 [ 179.471888][ T6389] ? snd_pcm_hw_rule_add+0x196/0x800 [ 179.471912][ T6389] krealloc_node_align_noprof+0x19a/0x390 [ 179.471943][ T6389] snd_pcm_hw_rule_add+0x196/0x800 [ 179.471966][ T6389] ? __pfx_snd_pcm_hw_rule_format+0x10/0x10 [ 179.471997][ T6389] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 179.472023][ T6389] ? snd_pcm_attach_substream+0x845/0xb10 [ 179.472056][ T6389] snd_pcm_open_substream+0xae4/0x24f0 [ 179.472078][ T6389] ? snd_pcm_open+0x17d/0x690 [ 179.472111][ T6389] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 179.472138][ T6389] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 179.472178][ T6389] snd_pcm_open+0x1dc/0x690 [ 179.472210][ T6389] ? __pfx_snd_pcm_open+0x10/0x10 [ 179.472233][ T6389] ? __pfx_default_wake_function+0x10/0x10 [ 179.472271][ T6389] snd_pcm_playback_open+0x5f/0xc0 [ 179.472293][ T6389] chrdev_open+0x4d9/0x600 [ 179.472318][ T6389] ? __pfx_chrdev_open+0x10/0x10 [ 179.472343][ T6389] ? devcgroup_check_permission+0x31/0x8f0 [ 179.472371][ T6389] ? __pfx_chrdev_open+0x10/0x10 [ 179.472409][ T6389] do_dentry_open+0x80e/0x1360 [ 179.472445][ T6389] vfs_open_consume+0x4a/0x350 [ 179.472465][ T6389] ? path_openat+0x148a/0x1da0 [ 179.472492][ T6389] path_openat+0x14a6/0x1da0 [ 179.472536][ T6389] do_file_open+0x23e/0x4a0 [ 179.472565][ T6389] ? __pfx_do_file_open+0x10/0x10 [ 179.472611][ T6389] ? _raw_spin_unlock+0x28/0x50 [ 179.472633][ T6389] ? alloc_fd+0x6af/0x760 [ 179.472672][ T6389] do_sys_openat2+0x115/0x200 [ 179.472700][ T6389] ? __pfx_do_sys_openat2+0x10/0x10 [ 179.472727][ T6389] ? do_user_addr_fault+0xd3f/0x1480 [ 179.472755][ T6389] __x64_sys_openat+0x138/0x170 [ 179.472783][ T6389] do_syscall_64+0x166/0x520 [ 179.472804][ T6389] ? trace_irq_disable+0x3b/0x140 [ 179.472824][ T6389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.472849][ T6389] ? clear_bhb_loop+0x70/0xc0 [ 179.472873][ T6389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.472895][ T6389] RIP: 0033:0x7f145995e98e [ 179.472922][ T6389] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 179.472936][ T6389] RSP: 002b:00007f145a7e4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 179.472953][ T6389] RAX: ffffffffffffffda RBX: 00007f145a7e56c0 RCX: 00007f145995e98e [ 179.472989][ T6389] RDX: 0000000000000000 RSI: 00007f145a7e4c00 RDI: ffffffffffffff9c [ 179.473005][ T6389] RBP: 00007f145a7e4c00 R08: 0000000000000000 R09: 0000000000000000 [ 179.473020][ T6389] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 179.473033][ T6389] R13: 00007f1459c26038 R14: 00007f1459c25fa0 R15: 00007fff8064d018 [ 179.473068][ T6389] [ 180.216892][ T6391] loop3: detected capacity change from 0 to 512 [ 180.278167][ T6391] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 180.536339][ T6391] EXT4-fs (loop3): 1 truncate cleaned up [ 180.574078][ T6391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.700895][ T6395] input: syz1 as /devices/virtual/input/input6 [ 180.901433][ T1084] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 181.053936][ T45] usb 3-1: USB disconnect, device number 3 [ 181.077389][ T1084] usb 2-1: not running at top speed; connect to a high speed hub [ 181.077419][ T1084] usb 2-1: New USB device found: idVendor=0ea0, idProduct=6858, bcdDevice=0.40 [ 181.133748][ T1084] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25702, setting to 64 [ 181.200054][ T6402] smpboot: CPU 1 is now offline [ 181.250560][ T1084] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.250583][ T1084] usb 2-1: Product: syz [ 181.250594][ T1084] usb 2-1: Manufacturer: syz [ 181.250604][ T1084] usb 2-1: SerialNumber: syz [ 181.457441][ T6398] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 181.479209][ T1084] oti6858 2-1:1.0: oti6858 converter detected [ 181.593507][ T6406] loop2: detected capacity change from 0 to 1024 [ 181.618519][ T6404] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 181.622211][ T21] ------------[ cut here ]------------ [ 181.622224][ T21] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 181.622237][ T21] WARNING: kernel/sched/sched.h:1673 at update_rq_clock+0x34d/0x560, CPU#0: migration/0/21 [ 181.662384][ T21] Modules linked in: [ 181.667679][ T21] CPU: 0 UID: 0 PID: 21 Comm: migration/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.682677][ T21] Tainted: [L]=SOFTLOCKUP [ 181.688691][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.706052][ T21] Stopper: 0x0 <- 0x0 [ 181.712262][ T21] RIP: 0010:update_rq_clock+0x34d/0x560 [ 181.720412][ T21] Code: 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 db 10 a5 00 4c 01 3b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 45 51 59 0a cc 90 <0f> 0b 90 e9 42 fd ff ff 48 89 df 48 83 c4 10 5b 41 5c 41 5d 41 5e [ 181.746968][ T21] RSP: 0018:ffffc900001a7af8 EFLAGS: 00010046 [ 181.754372][ T21] RAX: 0000000000000000 RBX: ffff8880b873c140 RCX: 8000000000000002 [ 181.765127][ T21] RDX: ffffffffffffffff RSI: ffffffff8e6c2900 RDI: ffffffff8c6df680 [ 181.777604][ T21] RBP: dffffc0000000000 R08: ffffc900001a7cc8 R09: 1ffff110056eec00 [ 181.789581][ T21] R10: dffffc0000000000 R11: ffffffff81989d20 R12: ffff88801e68e5a0 [ 181.803580][ T21] R13: dffffc0000000001 R14: ffff8880b873d008 R15: ffff8880b873c140 [ 181.813846][ T21] FS: 0000000000000000(0000) GS:ffff888124cbd000(0000) knlGS:0000000000000000 [ 181.827775][ T21] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.838790][ T21] CR2: 00007f122a7ebe78 CR3: 000000002635c000 CR4: 00000000003526f0 [ 181.851667][ T21] Call Trace: [ 181.857481][ T21] [ 181.861354][ T21] __schedule+0x3c54/0x5b40 [ 181.867251][ T21] ? __pfx___schedule+0x10/0x10 [ 181.876384][ T21] ? schedule+0x90/0x2b0 [ 181.884276][ T21] schedule+0x164/0x2b0 [ 181.891561][ T21] smpboot_thread_fn+0x5e2/0xa70 [ 181.898921][ T21] ? smpboot_thread_fn+0x4e/0xa70 [ 181.907471][ T21] kthread+0x38b/0x480 [ 181.914038][ T21] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 181.921514][ T21] ? __pfx_kthread+0x10/0x10 [ 181.930597][ T21] ret_from_fork+0x514/0xb70 [ 181.940880][ T21] ? __pfx_ret_from_fork+0x10/0x10 [ 181.948175][ T21] ? __switch_to+0xc78/0x1410 [ 181.955994][ T21] ? __pfx_kthread+0x10/0x10 [ 181.962823][ T21] ret_from_fork_asm+0x1a/0x30 [ 181.970659][ T21] [ 181.974685][ T21] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 181.985660][ T21] CPU: 0 UID: 0 PID: 21 Comm: migration/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.001356][ T21] Tainted: [L]=SOFTLOCKUP [ 182.007302][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.023445][ T21] Stopper: 0x0 <- 0x0 [ 182.029180][ T21] Call Trace: [ 182.034430][ T21] [ 182.039644][ T21] vpanic+0x26f/0x710 [ 182.046146][ T21] panic+0xc5/0xd0 [ 182.052514][ T21] ? __pfx_panic+0x10/0x10 [ 182.058103][ T21] ? ret_from_fork_asm+0x1a/0x30 [ 182.063273][ T21] __warn+0x315/0x4c0 [ 182.071323][ T21] ? update_rq_clock+0x34d/0x560 [ 182.081859][ T21] ? update_rq_clock+0x34d/0x560 [ 182.088497][ T21] __report_bug+0x276/0x570 [ 182.095104][ T21] ? update_rq_clock+0x34d/0x560 [ 182.102189][ T21] ? __pfx___report_bug+0x10/0x10 [ 182.111690][ T21] ? __lock_acquire+0x747/0x2de0 [ 182.117719][ T21] ? update_rq_clock+0x34d/0x560 [ 182.123617][ T21] report_bug+0x16b/0x220 [ 182.129945][ T21] ? update_rq_clock+0x34d/0x560 [ 182.137108][ T21] ? update_rq_clock+0x34f/0x560 [ 182.146432][ T21] handle_bug+0x9c/0x200 [ 182.151471][ T21] exc_invalid_op+0x1a/0x50 [ 182.156189][ T21] asm_exc_invalid_op+0x1a/0x20 [ 182.162099][ T21] RIP: 0010:update_rq_clock+0x34d/0x560 [ 182.168715][ T21] Code: 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 db 10 a5 00 4c 01 3b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 45 51 59 0a cc 90 <0f> 0b 90 e9 42 fd ff ff 48 89 df 48 83 c4 10 5b 41 5c 41 5d 41 5e [ 182.193894][ T21] RSP: 0018:ffffc900001a7af8 EFLAGS: 00010046 [ 182.201741][ T21] RAX: 0000000000000000 RBX: ffff8880b873c140 RCX: 8000000000000002 [ 182.214739][ T21] RDX: ffffffffffffffff RSI: ffffffff8e6c2900 RDI: ffffffff8c6df680 [ 182.225488][ T21] RBP: dffffc0000000000 R08: ffffc900001a7cc8 R09: 1ffff110056eec00 [ 182.236012][ T21] R10: dffffc0000000000 R11: ffffffff81989d20 R12: ffff88801e68e5a0 [ 182.249270][ T21] R13: dffffc0000000001 R14: ffff8880b873d008 R15: ffff8880b873c140 [ 182.259206][ T21] ? __pfx_pick_task_fair+0x10/0x10 [ 182.265773][ T21] ? update_rq_clock+0x8f/0x560 [ 182.272512][ T21] __schedule+0x3c54/0x5b40 [ 182.278475][ T21] ? __pfx___schedule+0x10/0x10 [ 182.284905][ T21] ? schedule+0x90/0x2b0 [ 182.289366][ T21] schedule+0x164/0x2b0 [ 182.294664][ T21] smpboot_thread_fn+0x5e2/0xa70 [ 182.300279][ T21] ? smpboot_thread_fn+0x4e/0xa70 [ 182.306946][ T21] kthread+0x38b/0x480 [ 182.313549][ T21] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 182.323214][ T21] ? __pfx_kthread+0x10/0x10 [ 182.329891][ T21] ret_from_fork+0x514/0xb70 [ 182.337092][ T21] ? __pfx_ret_from_fork+0x10/0x10 [ 182.343175][ T21] ? __switch_to+0xc78/0x1410 [ 182.349424][ T21] ? __pfx_kthread+0x10/0x10 [ 182.354773][ T21] ret_from_fork_asm+0x1a/0x30 [ 182.363625][ T21] [ 182.370380][ T21] Kernel Offset: disabled [ 182.376648][ T21] Rebooting in 86400 seconds..