last executing test programs: 4.030601353s ago: executing program 0 (id=764): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x100, 0x4) sendmmsg(r0, &(0x7f00000074c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)='!', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000003480)="bad174ec200a53a38c15adb30e19dea293", 0x11}, {&(0x7f00000034c0)="786c23570626016701e4227c7b28f8f85410304644d945cc05329e0e3e6a0020b72b3860fcede66f3f44537aef50403a7517e6afe41bfcbb42a7731dc69bcb3deff03f6ebf0770ab191c535d8fcd7af6d5ad276b366874bb172bc164a7cbc3a5913ae149c07039e28b494e3e5b399f66e24e76a5bf", 0x75}, {&(0x7f0000003540)="8896ddd57918d1f71800549e4592a1b240a975423d7b803832c885f509c408b268a0983a6bdcecee188f0526ee6b0c1f6536ff27e138a2c3160f5f3a3388707da357a69d5f40b300fac2cedcdcd7c4dff06403d803ddc40577de2ca19119a7f315e6f034ce7f4d39c82eb7203596c8fc8a38f33661a539fa8a3deb8da1e72cdcab61cfe60045d82ff85904276a1afb0e", 0x90}, {&(0x7f0000003600)="6647b2ad9e553f333a29dc386088318e916f9291f7faafd977119e07c8e4319bd644c418dfd7876df7e216f4dccc0901946fb100a81c55477fc57706ddb7b012d4aca42cdb4565ad0fdd811389ad83a8e407691e5616183557f4638a16e1f12a1a5fd33402ea3ecb18", 0x69}, {&(0x7f0000003680)="722ad9f781ed0816fa887441e01920364c89a20acd55e138e3ba4fcd844fa4a6d01edb64cfe646880c7c408ff614bcf7f72e4019e8938f0430f4f4b0200e62c595d5fa7ce8d5dbc5a903d14e075310915374cc2d6f7fc7590c7944f5fad51d1a1b23b9a4ef79dcbdd5421a93a72172a1f1e30876b102120e15503958b923615b7c6483ba282a8b382b614ab518f8cce510430f6c97fa7361ddf99ee7e5af644cc1c86252c75eb77fe6535b24d3b0288bebebe07bf0b9f1e8a1c68b5f21dcb40c380f56e3c79c395c592e8b64e0b59692de76241abb65e39e20b36ff8d4", 0xdd}, {&(0x7f0000003780)}], 0x6}}], 0x2, 0x800) 3.964626635s ago: executing program 0 (id=768): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) 3.742614581s ago: executing program 0 (id=773): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000480)={0x20, 0x17, 0xf, "ec8dd0cdb7d4bfb89a7d2e44f4d80c"}, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x82, 0x1, 'o'}, &(0x7f0000000700)={0x20, 0x83, 0x1, '}'}, &(0x7f0000000740)={0x20, 0x84, 0x1, "c9"}, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0x40, 0x0, 0x8, "0f00000100000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.355890871s ago: executing program 2 (id=774): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./proc_mnt/net/sctp/assocs\x00', 0x181340, 0x0) read(r0, &(0x7f0000000200), 0x1000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a6b000/0x1000)=nil, &(0x7f0000cf1000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000065a000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ca2000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000cae000/0x2000)=nil, 0x0}, 0x68) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, &(0x7f0000000280)=0x0, 0x0) syz_ublk_add_dev(r0, 0x0, r1, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_setup(0x47, 0x0) io_uring_setup(0x74ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b02", @ANYRES8], 0x0) 2.855931454s ago: executing program 4 (id=781): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) 2.6080162s ago: executing program 4 (id=784): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 2.284425359s ago: executing program 4 (id=786): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000280)}], 0x1}, 0x0) 2.109839144s ago: executing program 3 (id=787): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) close_range(r1, r2, 0x0) 2.036021355s ago: executing program 3 (id=788): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523", 0x9b}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4a", 0x8d}], 0x5) 2.035707635s ago: executing program 3 (id=789): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x100, 0x4) sendmmsg(r0, &(0x7f00000074c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)='!', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000003480)="bad174ec200a53a38c15adb30e19dea293", 0x11}, {&(0x7f00000034c0)="786c23570626016701e4227c7b28f8f85410304644d945cc05329e0e3e6a0020b72b3860fcede66f3f44537aef50403a7517e6afe41bfcbb42a7731dc69bcb3deff03f6ebf0770ab191c535d8fcd7af6d5ad276b366874bb172bc164a7cbc3a5913ae149c07039e28b494e3e5b399f66e24e76a5bf", 0x75}, {&(0x7f0000003540)="8896ddd57918d1f71800549e4592a1b240a975423d7b803832c885f509c408b268a0983a6bdcecee188f0526ee6b0c1f6536ff27e138a2c3160f5f3a3388707da357a69d5f40b300fac2cedcdcd7c4dff06403d803ddc40577de2ca19119a7f315e6f034ce7f4d39c82eb7203596c8fc8a38f33661a539fa8a3deb8da1e72cdcab61cfe60045d82ff85904276a1afb0e", 0x90}, {&(0x7f0000003600)="6647b2ad9e553f333a29dc386088318e916f9291f7faafd977119e07c8e4319bd644c418dfd7876df7e216f4dccc0901946fb100a81c55477fc57706ddb7b012d4aca42cdb4565ad0fdd811389ad83a8e407691e5616183557f4638a16e1f12a1a5fd33402ea3ecb18", 0x69}, {&(0x7f0000003680)="722ad9f781ed0816fa887441e01920364c89a20acd55e138e3ba4fcd844fa4a6d01edb64cfe646880c7c408ff614bcf7f72e4019e8938f0430f4f4b0200e62c595d5fa7ce8d5dbc5a903d14e075310915374cc2d6f7fc7590c7944f5fad51d1a1b23b9a4ef79dcbdd5421a93a72172a1f1e30876b102120e15503958b923615b7c6483ba282a8b382b614ab518f8cce510430f6c97fa7361ddf99ee7e5af644cc1c86252c75eb77fe6535b24d3b0288bebebe07bf0b9f1e8a1c68b5f21dcb40c380f56e3c79c395c592e8b64e0b59692de76241abb65e39e20b36ff8d4", 0xdd}, {&(0x7f0000003780)}], 0x6}}], 0x2, 0x800) 2.012736336s ago: executing program 3 (id=790): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, 0x53) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x1, 0xffd) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) pwritev2(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)='W', 0x1}], 0x1, 0xe5b, 0xac, 0x1b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @broadcast}, 0x2, 0x2, 0x0, 0x1}}, 0x26) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0040d07, &(0x7f0000000040)=0x122) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r8, 0x4b67, 0x0) 1.50452069s ago: executing program 1 (id=795): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x2000000, &(0x7f0000000000)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0/file0\x00', 0x80000, 0x0) read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020) 1.462231501s ago: executing program 1 (id=796): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) 1.376008573s ago: executing program 4 (id=797): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0xfff2, 0x4}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040089}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x7, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x880) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031400d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.375764213s ago: executing program 1 (id=798): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x101401, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xa6, 0x3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {0x0, 0xc}, {0x8}}}, 0x24}}, 0x40004) 1.289496766s ago: executing program 1 (id=799): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x8, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote}, 0xa, 0x0, 0x3}}, 0x26) sendmmsg$inet(r3, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) 1.075600831s ago: executing program 4 (id=800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 1.058209872s ago: executing program 3 (id=801): socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$FIONCLEX(r3, 0x5450) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="4800000010000104feffffff0002000000000000", @ANYRES32=0x0, @ANYBLOB="270201000000000008000a00", @ANYRES32, @ANYBLOB="200012800e0001006970366772657461700000000c000280080001003238"], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) 541.222765ms ago: executing program 0 (id=802): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 468.050657ms ago: executing program 4 (id=803): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x76c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000021c0)=ANY=[], 0xfffffdef}}, 0x1) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}], 0x1, &(0x7f0000000080)=ANY=[], 0x40}, 0x4008865) 375.63025ms ago: executing program 1 (id=804): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b8ca03076804268c989e14f0a3a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x19}, 0x29) 358.60945ms ago: executing program 2 (id=805): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x48, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x1}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x8}]}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x50, 0x68, 0x501, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x2}, {0x2}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x8}]}]}, 0x100}}, 0x0) 318.941801ms ago: executing program 2 (id=806): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000440)={0x14, r1, 0xf01, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008004) 269.569882ms ago: executing program 1 (id=807): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) r1 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$addseals(r1, 0x409, 0x8e3652a1e0b94d91) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) sync() 269.107122ms ago: executing program 2 (id=808): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES32=0x1], 0x38}}, 0x0) 247.844093ms ago: executing program 2 (id=809): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) 152.200706ms ago: executing program 3 (id=810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0xfff2, 0x4}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040089}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x7, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x880) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031400d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 133.331316ms ago: executing program 2 (id=811): write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f00000000000000500000000000000000000000000001df1000000000000000000000000000000000000001f00046e6f6465767b6376666f7892ffffff8102000000000031ffcebc"], 0x232) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000cc0)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xf}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0x7ff, 0x10000000, 0x1}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x9751304b5dc4b606, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xfdef) 114.368547ms ago: executing program 0 (id=812): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x77359400}}, 0x0) 0s ago: executing program 0 (id=813): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) setns(0xc9, 0x0) r0 = socket(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x200002, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f00007ec000/0x2000)=nil, 0x2000, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x18, 0x40}, 0x20048844) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x601c2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) mount$9p_fd(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f00000000c0), 0x4000, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) syz_open_dev$evdev(&(0x7f0000000340), 0x6, 0x391083) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001a00)={'filter\x00', 0x0, 0x3, 0x1000, [0x5, 0x6, 0x0, 0x455f, 0xd7d, 0xad12], 0x3, &(0x7f00000002c0)=[{}, {}, {}], &(0x7f0000000a00)=""/4096}, &(0x7f0000001a80)=0x78) kernel console output (not intermixed with test programs): EV_CHANGE): veth0: link becomes ready [ 62.601770][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.608419][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.610178][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.613066][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.614356][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.616132][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.626091][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.627806][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.629373][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.630648][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.633760][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.640739][ T4295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.645922][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.647695][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.649542][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.650767][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.655015][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.656721][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.658247][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.659555][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.670170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.672159][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.673980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.675797][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.677464][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.679737][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.682332][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.686833][ T4288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.693879][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.695573][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.697490][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.699247][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.701612][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.703296][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.707523][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.713364][ T4295] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.717138][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.718817][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.720298][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.722917][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.724952][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.729140][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.736845][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.738448][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.739953][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.742281][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.744270][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.745880][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.747361][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.749025][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.750560][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.753271][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.755980][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.764000][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.766475][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.768167][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.769693][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.770983][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.775227][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.777559][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.779188][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.780698][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.782630][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.784531][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.786330][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.790723][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.793315][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.794991][ T1620] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.796281][ T1620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.810784][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.814813][ T4288] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.819842][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.821631][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.823446][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.824774][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.826275][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.827980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.829585][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.830785][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.833528][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.835273][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.837026][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.838323][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.850590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.854689][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.856749][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.858925][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.860709][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.864419][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.866355][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.867975][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.869609][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.874734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.879461][ T4284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.884042][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.887780][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.889528][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.893218][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.898722][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.901117][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.904264][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.905580][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.906849][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.909307][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.926578][ T4295] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.928506][ T4295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.933266][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.935237][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.937244][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.938935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.940473][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.947294][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.949096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.953029][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.954947][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.956829][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.958819][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.960544][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.963497][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.965048][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.966970][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.972349][ T4293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.974747][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.976449][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.984249][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.986067][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.996984][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.998334][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.013787][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.023489][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.025424][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.027457][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.028919][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.032969][ T4293] device veth0_vlan entered promiscuous mode [ 63.047174][ T4293] device veth1_vlan entered promiscuous mode [ 63.065415][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.067198][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.068889][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.070508][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.074000][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.075327][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.086636][ T4283] device veth0_vlan entered promiscuous mode [ 63.089651][ T4283] device veth1_vlan entered promiscuous mode [ 63.095858][ T4293] device veth0_macvtap entered promiscuous mode [ 63.099753][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.101647][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.103392][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.105053][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.106727][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.114293][ T4293] device veth1_macvtap entered promiscuous mode [ 63.117352][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.119319][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.120843][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.124210][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.134294][ T4288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.138554][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.140281][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.142829][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.148235][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.150741][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.152413][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.158165][ T4295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.168984][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.172259][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.175145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.176888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.178474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.180049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.185245][ T4293] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.186772][ T4293] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.188286][ T4293] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.189878][ T4293] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.201048][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.202874][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.204650][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.206346][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.212580][ T4283] device veth0_macvtap entered promiscuous mode [ 63.216330][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.218314][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.220783][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.226665][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.228395][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.230146][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.232453][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.235218][ T4283] device veth1_macvtap entered promiscuous mode [ 63.238435][ T4295] device veth0_vlan entered promiscuous mode [ 63.249286][ T4295] device veth1_vlan entered promiscuous mode [ 63.257427][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.259165][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.260754][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.263282][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.265215][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.266759][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.270836][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.273655][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.276069][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.280109][ T4288] device veth0_vlan entered promiscuous mode [ 63.287556][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.289313][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.294514][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.297585][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.299546][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.303035][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.306226][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.308034][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.324464][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.326205][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.329951][ T4288] device veth1_vlan entered promiscuous mode [ 63.333356][ T4283] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.334986][ T4283] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.336582][ T4283] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.338085][ T4283] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.358432][ T4295] device veth0_macvtap entered promiscuous mode [ 63.366857][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.368661][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.370262][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.373334][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.375048][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.377828][ T4295] device veth1_macvtap entered promiscuous mode [ 63.385185][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.386639][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.390160][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.393199][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.394849][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.396529][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.398147][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.399773][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.402229][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.403876][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.408139][ T4288] device veth0_macvtap entered promiscuous mode [ 63.410750][ T4288] device veth1_macvtap entered promiscuous mode [ 63.424217][ T4284] device veth0_vlan entered promiscuous mode [ 63.434811][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.436203][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.443749][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.445483][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.447142][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.453553][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.455553][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.457302][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.459206][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.464106][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.470152][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.472160][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.474873][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.476812][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.478547][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.480422][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.483028][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.484750][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.487075][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.489639][ T4284] device veth1_vlan entered promiscuous mode [ 63.492678][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.494359][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.496097][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.504616][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.506556][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.508392][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.510255][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.513031][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.517350][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.518460][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.518683][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.520388][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.528806][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.530678][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.532997][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.534914][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.537446][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.544696][ T4288] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.546194][ T4288] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.547725][ T4288] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.549507][ T4288] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.556432][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.558282][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.559896][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.562900][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.567048][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.568822][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.576602][ T4295] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.578142][ T4295] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.579800][ T4295] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.583746][ T4295] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.584486][ T4364] Bluetooth: MGMT ver 1.22 [ 63.587677][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.589651][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.605575][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.609462][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.610593][ T4284] device veth0_macvtap entered promiscuous mode [ 63.632134][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.633887][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.650117][ T4284] device veth1_macvtap entered promiscuous mode [ 63.676056][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.677932][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.679614][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.686055][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.687867][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.689762][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.692154][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.694170][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.696881][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.718669][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.720646][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.726677][ T4369] loop2: detected capacity change from 0 to 4096 [ 63.734649][ T402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.735973][ T402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.739207][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.740572][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.745627][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.747264][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.757086][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.758940][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.762459][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.764788][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.766451][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.772189][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.773940][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.775712][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.778212][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.788381][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.790257][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.792871][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.794215][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.796340][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.820045][ T4284] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.823159][ T4284] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.825848][ T4284] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.828662][ T4284] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.886675][ T402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.888365][ T402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.890771][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.895514][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.896942][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.898556][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.917568][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.919051][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.920712][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.982492][ T4374] Zero length message leads to an empty skb [ 64.401261][ T4285] Bluetooth: hci0: command 0x041b tx timeout [ 64.411543][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 64.411602][ T4287] Bluetooth: hci1: command 0x041b tx timeout [ 64.413805][ T4287] Bluetooth: hci2: command 0x041b tx timeout [ 64.414155][ T4285] Bluetooth: hci4: command 0x041b tx timeout [ 64.481949][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.483232][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.658436][ T4389] loop4: detected capacity change from 0 to 1024 [ 64.676899][ T4388] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.678653][ T4388] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.682599][ T4389] ======================================================= [ 64.682599][ T4389] WARNING: The mand mount option has been deprecated and [ 64.682599][ T4389] and is ignored by this kernel. Remove the mand [ 64.682599][ T4389] option from the mount to silence this warning. [ 64.682599][ T4389] ======================================================= [ 64.718500][ T4389] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.745736][ T4389] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 64.768355][ T4388] device bridge_slave_1 left promiscuous mode [ 64.782082][ T4388] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.835536][ T4388] device bridge_slave_0 left promiscuous mode [ 64.837090][ T4388] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.843938][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 64.845820][ T4376] loop3: detected capacity change from 0 to 40427 [ 64.866410][ T4376] F2FS-fs (loop3): Corrupted extension count (327717 + 1 > 64) [ 64.880617][ T4376] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 64.888624][ T4376] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 64.903434][ T4376] F2FS-fs (loop3): invalid crc value [ 64.927459][ T4376] F2FS-fs (loop3): Found nat_bits in checkpoint [ 65.027709][ T4376] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 65.029390][ T4376] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 65.642150][ T4376] F2FS-fs (loop3): access invalid blkaddr:2816 [ 65.647006][ T4376] CPU: 1 PID: 4376 Comm: syz.3.4 Not tainted syzkaller #0 [ 65.648287][ T4376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 65.649987][ T4376] Call trace: [ 65.650592][ T4376] dump_backtrace+0x1c4/0x1f0 [ 65.651525][ T4376] show_stack+0x2c/0x3c [ 65.652340][ T4376] __dump_stack+0x30/0x40 [ 65.653195][ T4376] dump_stack_lvl+0xf4/0x15c [ 65.654098][ T4376] dump_stack+0x1c/0x5c [ 65.654918][ T4376] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 65.655835][ T4376] f2fs_map_blocks+0x97c/0x2e64 [ 65.656887][ T4376] f2fs_mpage_readpages+0x974/0x1b3c [ 65.657921][ T4376] f2fs_readahead+0x194/0x3f8 [ 65.658888][ T4376] read_pages+0x158/0x68c [ 65.659716][ T4376] page_cache_ra_unbounded+0x458/0x53c [ 65.660739][ T4376] page_cache_ra_order+0x83c/0x9f4 [ 65.661843][ T4376] ondemand_readahead+0x5bc/0xae0 [ 65.662980][ T4376] page_cache_sync_ra+0x350/0x3cc [ 65.664107][ T4376] f2fs_readdir+0x3f8/0xd24 [ 65.665043][ T4376] iterate_dir+0x1f0/0x4d0 [ 65.665927][ T4376] __arm64_sys_getdents64+0x11c/0x314 [ 65.667031][ T4376] invoke_syscall+0x98/0x290 [ 65.667985][ T4376] el0_svc_common+0x13c/0x258 [ 65.668854][ T4376] do_el0_svc+0x5c/0x134 [ 65.669593][ T4376] el0_svc+0x58/0x128 [ 65.670292][ T4376] el0t_64_sync_handler+0x84/0xf0 [ 65.671144][ T4376] el0t_64_sync+0x18c/0x190 [ 65.680350][ T4376] F2FS-fs (loop3): access invalid blkaddr:2816 [ 65.683374][ T4376] CPU: 0 PID: 4376 Comm: syz.3.4 Not tainted syzkaller #0 [ 65.684649][ T4376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 65.686499][ T4376] Call trace: [ 65.687128][ T4376] dump_backtrace+0x1c4/0x1f0 [ 65.688006][ T4376] show_stack+0x2c/0x3c [ 65.688834][ T4376] __dump_stack+0x30/0x40 [ 65.689678][ T4376] dump_stack_lvl+0xf4/0x15c [ 65.690569][ T4376] dump_stack+0x1c/0x5c [ 65.691385][ T4376] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 65.692420][ T4376] f2fs_map_blocks+0x97c/0x2e64 [ 65.693335][ T4376] f2fs_mpage_readpages+0x974/0x1b3c [ 65.694344][ T4376] f2fs_readahead+0x194/0x3f8 [ 65.695237][ T4376] read_pages+0x158/0x68c [ 65.696042][ T4376] page_cache_ra_unbounded+0x458/0x53c [ 65.697046][ T4376] page_cache_ra_order+0x83c/0x9f4 [ 65.698022][ T4376] ondemand_readahead+0x5bc/0xae0 [ 65.698961][ T4376] page_cache_sync_ra+0x350/0x3cc [ 65.699924][ T4376] f2fs_readdir+0x3f8/0xd24 [ 65.700714][ T4376] iterate_dir+0x1f0/0x4d0 [ 65.701505][ T4376] __arm64_sys_getdents64+0x11c/0x314 [ 65.702477][ T4376] invoke_syscall+0x98/0x290 [ 65.703326][ T4376] el0_svc_common+0x13c/0x258 [ 65.704230][ T4376] do_el0_svc+0x5c/0x134 [ 65.705049][ T4376] el0_svc+0x58/0x128 [ 65.705802][ T4376] el0t_64_sync_handler+0x84/0xf0 [ 65.706738][ T4376] el0t_64_sync+0x18c/0x190 [ 65.721624][ T4376] syz.3.4: attempt to access beyond end of device [ 65.721624][ T4376] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 65.735087][ T4376] syz.3.4: attempt to access beyond end of device [ 65.735087][ T4376] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 65.793363][ T4295] syz-executor: attempt to access beyond end of device [ 65.793363][ T4295] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 66.209360][ T4412] loop3: detected capacity change from 0 to 2048 [ 66.216229][ T4412] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 66.650982][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 66.652739][ T4290] Bluetooth: hci3: command 0x040f tx timeout [ 66.654025][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 66.659352][ T4287] Bluetooth: hci4: command 0x040f tx timeout [ 66.660660][ T4287] Bluetooth: hci0: command 0x040f tx timeout [ 67.023159][ T4425] loop4: detected capacity change from 0 to 1024 [ 67.053003][ T4425] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 67.377471][ T4416] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 67.415650][ T4437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.417692][ T4437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.824623][ T4429] ceph: No mds server is up or the cluster is laggy [ 67.861284][ T4331] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 67.883719][ T4455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.886799][ T4455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.995817][ T4464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.997436][ T4464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.391500][ T4469] loop2: detected capacity change from 0 to 4096 [ 68.407931][ T4471] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.659336][ T4477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.668501][ T4477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.721432][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 68.723588][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 68.725049][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 68.726242][ T4298] Bluetooth: hci2: command 0x0419 tx timeout [ 68.726293][ T4294] Bluetooth: hci3: command 0x0419 tx timeout [ 68.767119][ T4480] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.769521][ T4481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39'. [ 68.772275][ T4481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39'. [ 68.999932][ T4491] process 'syz.1.43' launched '/dev/fd/4' with NULL argv: empty string added [ 69.035768][ T4494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.037572][ T4494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.377993][ T4502] loop3: detected capacity change from 0 to 128 [ 69.397277][ T4502] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 69.482076][ T4502] loop3: detected capacity change from 128 to 1 [ 69.494569][ T4502] syz.3.48: attempt to access beyond end of device [ 69.494569][ T4502] loop3: rw=0, sector=41, nr_sectors = 1 limit=1 [ 69.497473][ T4502] syz.3.48: attempt to access beyond end of device [ 69.497473][ T4502] loop3: rw=2049, sector=36, nr_sectors = 1 limit=1 [ 69.499885][ T4502] Buffer I/O error on dev loop3, logical block 36, lost sync page write [ 69.502316][ T4502] syz.3.48: attempt to access beyond end of device [ 69.502316][ T4502] loop3: rw=0, sector=36, nr_sectors = 1 limit=1 [ 69.504660][ T4502] FAT-fs (loop3): unable to read inode block for updating (i_pos 580) [ 69.660868][ T22] cfg80211: failed to load regulatory.db [ 69.908649][ T402] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 69.916310][ T4295] syz-executor: attempt to access beyond end of device [ 69.916310][ T4295] loop3: rw=0, sector=36, nr_sectors = 1 limit=1 [ 69.921545][ T4295] FAT-fs (loop3): unable to read inode block for updating (i_pos 580) [ 69.924205][ T4295] syz-executor: attempt to access beyond end of device [ 69.924205][ T4295] loop3: rw=0, sector=36, nr_sectors = 1 limit=1 [ 69.927806][ T4295] FAT-fs (loop3): unable to read inode block for updating (i_pos 580) [ 69.935247][ T4295] FAT-fs (loop3): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 70.022268][ T4276] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 70.143463][ T4525] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 70.426766][ T4532] loop4: detected capacity change from 0 to 4096 [ 70.471257][ T4534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.473311][ T4534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.555179][ T4533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.56'. [ 70.556990][ T4533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.56'. [ 70.913502][ T4547] loop1: detected capacity change from 0 to 256 [ 70.960579][ T4547] exfat: Deprecated parameter 'namecase' [ 70.981345][ T4547] exfat: Deprecated parameter 'namecase' [ 71.006155][ T4549] loop0: detected capacity change from 0 to 256 [ 71.018925][ T4547] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 71.022873][ T4549] exfat: Deprecated parameter 'namecase' [ 71.028184][ T4549] exfat: Deprecated parameter 'namecase' [ 71.059636][ T4549] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 71.089635][ T4547] exFAT-fs (loop1): invalid start cluster (4278190088) [ 71.638312][ T4566] tipc: Started in network mode [ 71.639202][ T4566] tipc: Node identity 0010000000000000002, cluster identity 4711 [ 71.641232][ T4566] Invalid ELF header magic: != ELF [ 72.255205][ T4591] loop2: detected capacity change from 0 to 512 [ 72.552824][ T4595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.554791][ T4595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.580572][ T4591] EXT4-fs (loop2): Test dummy encryption mode enabled [ 72.582322][ T4591] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 72.585158][ T4591] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.587164][ T4591] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 72.594046][ T4587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.75'. [ 72.595947][ T4587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.75'. [ 73.273680][ T4626] device syzkaller0 entered promiscuous mode [ 73.314787][ T4631] loop1: detected capacity change from 0 to 2048 [ 73.325020][ T4631] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 73.887106][ T4660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'. [ 73.893254][ T4660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.100'. [ 74.237184][ T4667] device syzkaller0 entered promiscuous mode [ 74.480990][ T22] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 74.664279][ T22] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 74.665865][ T22] usb 1-1: config 0 has no interface number 0 [ 74.667004][ T22] usb 1-1: config 0 interface 41 has no altsetting 0 [ 74.678264][ T22] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 74.679984][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.683250][ T22] usb 1-1: Product: syz [ 74.684030][ T22] usb 1-1: Manufacturer: syz [ 74.685280][ T22] usb 1-1: SerialNumber: syz [ 74.689353][ T22] usb 1-1: config 0 descriptor?? [ 75.228411][ T4670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.242284][ T4670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.263656][ T22] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 75.269419][ T22] CoreChips: probe of 1-1:0.41 failed with error -71 [ 75.280396][ T22] usb 1-1: USB disconnect, device number 2 [ 75.531069][ T4670] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.533013][ T4670] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.534949][ T4670] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.536592][ T4670] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.736782][ T4722] netlink: 'syz.2.119': attribute type 2 has an invalid length. [ 76.866822][ T4715] loop3: detected capacity change from 0 to 32768 [ 76.886282][ T4715] (syz.3.116,4715,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 76.887855][ T4720] loop1: detected capacity change from 0 to 65536 [ 76.895622][ T4715] (syz.3.116,4715,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 76.906004][ T4715] (syz.3.116,4715,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 76.959211][ T4720] XFS (loop1): Mounting V5 Filesystem [ 76.965667][ T4715] JBD2: Ignoring recovery information on journal [ 76.991486][ T4740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.993348][ T4740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.999298][ T4720] XFS (loop1): Ending clean mount [ 77.036036][ T4715] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 77.038280][ T4720] XFS (loop1): Quotacheck needed: Please wait. [ 77.083893][ T4720] XFS (loop1): Quotacheck: Done. [ 77.169417][ T4283] XFS (loop1): Unmounting Filesystem [ 77.191869][ T4295] ocfs2: Unmounting device (7,3) on (node local) [ 77.713676][ T4754] device syzkaller0 entered promiscuous mode [ 78.223811][ T4785] FAULT_INJECTION: forcing a failure. [ 78.223811][ T4785] name failslab, interval 1, probability 0, space 0, times 1 [ 78.226513][ T4785] CPU: 0 PID: 4785 Comm: syz.3.136 Not tainted syzkaller #0 [ 78.227903][ T4785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 78.230064][ T4785] Call trace: [ 78.230763][ T4785] dump_backtrace+0x1c4/0x1f0 [ 78.231716][ T4785] show_stack+0x2c/0x3c [ 78.232571][ T4785] __dump_stack+0x30/0x40 [ 78.233543][ T4785] dump_stack_lvl+0xf4/0x15c [ 78.234459][ T4785] dump_stack+0x1c/0x5c [ 78.235248][ T4785] should_fail_ex+0x3cc/0x524 [ 78.236129][ T4785] __should_failslab+0xc0/0x11c [ 78.237046][ T4785] should_failslab+0x10/0x28 [ 78.237898][ T4785] __kmem_cache_alloc_node+0x7c/0x318 [ 78.238887][ T4785] __kmalloc+0xc4/0x180 [ 78.239671][ T4785] memcg_list_lru_alloc+0x280/0x8bc [ 78.240661][ T4785] slab_pre_alloc_hook+0x2cc/0x31c [ 78.241633][ T4785] kmem_cache_alloc_lru+0x60/0x284 [ 78.242583][ T4785] hugetlbfs_alloc_inode+0xdc/0x138 [ 78.243548][ T4785] new_inode_pseudo+0x68/0x1cc [ 78.244445][ T4785] new_inode+0x38/0x174 [ 78.245237][ T4785] hugetlbfs_get_inode+0x9c/0x4bc [ 78.246179][ T4785] hugetlb_file_setup+0x1f0/0x564 [ 78.247278][ T4785] ksys_mmap_pgoff+0x168/0x5a0 [ 78.248328][ T4785] __arm64_sys_mmap+0x108/0x120 [ 78.249353][ T4785] invoke_syscall+0x98/0x290 [ 78.250346][ T4785] el0_svc_common+0x13c/0x258 [ 78.251315][ T4785] do_el0_svc+0x5c/0x134 [ 78.252125][ T4785] el0_svc+0x58/0x128 [ 78.252884][ T4785] el0t_64_sync_handler+0x84/0xf0 [ 78.253839][ T4785] el0t_64_sync+0x18c/0x190 [ 78.310780][ T4789] device syzkaller0 entered promiscuous mode [ 78.603878][ T4794] loop3: detected capacity change from 0 to 64 [ 78.728678][ T4799] device syzkaller0 entered promiscuous mode [ 78.907434][ T4810] block nbd4: not configured, cannot reconfigure [ 79.184424][ T4294] Bluetooth: hci4: unexpected event 0x04 length: 11 > 10 [ 79.189116][ T4300] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:200' [ 79.192440][ T4300] CPU: 0 PID: 4300 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 79.193723][ T4300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 79.195387][ T4300] Workqueue: hci4 hci_rx_work [ 79.196214][ T4300] Call trace: [ 79.196797][ T4300] dump_backtrace+0x1c4/0x1f0 [ 79.197634][ T4300] show_stack+0x2c/0x3c [ 79.198378][ T4300] __dump_stack+0x30/0x40 [ 79.199189][ T4300] dump_stack_lvl+0xf4/0x15c [ 79.200011][ T4300] dump_stack+0x1c/0x5c [ 79.200744][ T4300] sysfs_create_dir_ns+0x244/0x264 [ 79.201684][ T4300] kobject_add_internal+0x5a8/0xb18 [ 79.202686][ T4300] kobject_add+0x144/0x20c [ 79.203555][ T4300] device_add+0x3dc/0xe4c [ 79.204376][ T4300] hci_conn_add_sysfs+0xb8/0x1bc [ 79.205307][ T4300] hci_conn_complete_evt+0x7b8/0x10b4 [ 79.206296][ T4300] hci_event_packet+0x698/0xe60 [ 79.207187][ T4300] hci_rx_work+0x310/0xa70 [ 79.208007][ T4300] process_one_work+0x7e4/0x13bc [ 79.208925][ T4300] worker_thread+0x8cc/0xfe8 [ 79.209779][ T4300] kthread+0x254/0x2e0 [ 79.210532][ T4300] ret_from_fork+0x10/0x20 [ 79.213584][ T4300] kobject_add_internal failed for hci4:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 79.216112][ T4300] Bluetooth: hci4: failed to register connection device [ 79.280648][ T4818] loop1: detected capacity change from 0 to 164 [ 79.332605][ T4820] loop4: detected capacity change from 0 to 2048 [ 79.359596][ T4820] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.517117][ T4834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.156'. [ 79.518947][ T4834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.156'. [ 79.738767][ T4844] device syzkaller0 entered promiscuous mode [ 79.790991][ T22] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 80.017477][ T22] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 80.019248][ T22] usb 1-1: config 0 has no interface number 0 [ 80.020359][ T22] usb 1-1: config 0 interface 41 has no altsetting 0 [ 80.026352][ T22] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 80.028129][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.029567][ T22] usb 1-1: Product: syz [ 80.030271][ T22] usb 1-1: Manufacturer: syz [ 80.031498][ T22] usb 1-1: SerialNumber: syz [ 80.034265][ T22] usb 1-1: config 0 descriptor?? [ 80.664688][ T22] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 80.666555][ T22] CoreChips: probe of 1-1:0.41 failed with error -71 [ 80.669198][ T22] usb 1-1: USB disconnect, device number 3 [ 80.681303][ T4860] FAULT_INJECTION: forcing a failure. [ 80.681303][ T4860] name failslab, interval 1, probability 0, space 0, times 0 [ 80.686745][ T4860] CPU: 1 PID: 4860 Comm: syz.4.167 Not tainted syzkaller #0 [ 80.688116][ T4860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 80.689879][ T4860] Call trace: [ 80.690449][ T4860] dump_backtrace+0x1c4/0x1f0 [ 80.691271][ T4860] show_stack+0x2c/0x3c [ 80.692051][ T4860] __dump_stack+0x30/0x40 [ 80.692864][ T4860] dump_stack_lvl+0xf4/0x15c [ 80.693720][ T4860] dump_stack+0x1c/0x5c [ 80.694436][ T4860] should_fail_ex+0x3cc/0x524 [ 80.695282][ T4860] __should_failslab+0xc0/0x11c [ 80.696175][ T4860] should_failslab+0x10/0x28 [ 80.697018][ T4860] kmem_cache_alloc+0x88/0x310 [ 80.697865][ T4860] __kernfs_new_node+0xec/0x5fc [ 80.698737][ T4860] kernfs_new_node+0x120/0x230 [ 80.699647][ T4860] __kernfs_create_file+0x60/0x2e0 [ 80.700642][ T4860] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 80.701677][ T4860] internal_create_group+0x3e8/0xb24 [ 80.702712][ T4860] sysfs_create_groups+0x60/0x134 [ 80.703677][ T4860] kobject_add_internal+0x5e4/0xb18 [ 80.704678][ T4860] kobject_init_and_add+0x128/0x194 [ 80.705633][ T4860] net_rx_queue_update_kobjects+0x184/0x420 [ 80.706769][ T4860] netif_set_real_num_rx_queues+0xfc/0x1e4 [ 80.707877][ T4860] tun_attach+0xea0/0x1258 [ 80.708749][ T4860] tun_set_iff+0x38c/0xb84 [ 80.709584][ T4860] __tun_chr_ioctl+0x780/0x1dac [ 80.710476][ T4860] tun_chr_ioctl+0x38/0x4c [ 80.711285][ T4860] __arm64_sys_ioctl+0x14c/0x1c8 [ 80.712223][ T4860] invoke_syscall+0x98/0x290 [ 80.713100][ T4860] el0_svc_common+0x13c/0x258 [ 80.713955][ T4860] do_el0_svc+0x5c/0x134 [ 80.714711][ T4860] el0_svc+0x58/0x128 [ 80.715418][ T4860] el0t_64_sync_handler+0x84/0xf0 [ 80.716307][ T4860] el0t_64_sync+0x18c/0x190 [ 80.717179][ C1] vkms_vblank_simulate: vblank timer overrun [ 80.718483][ T4860] kobject_add_internal failed for rx-1 (error: -12 parent: queues) [ 81.202163][ T4300] Bluetooth: hci4: command 0x0409 tx timeout [ 82.236207][ T4900] CIFS mount error: No usable UNC path provided in device string! [ 82.236207][ T4900] [ 82.238481][ T4900] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 82.469653][ T4902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.473055][ T4902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.583874][ T4906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'. [ 82.585823][ T4906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.182'. [ 82.850967][ T14] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 83.047398][ T14] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 83.048959][ T14] usb 1-1: config 0 has no interface number 0 [ 83.050070][ T14] usb 1-1: config 0 interface 41 has no altsetting 0 [ 83.053903][ T14] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 83.243776][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.245257][ T14] usb 1-1: Product: syz [ 83.245983][ T14] usb 1-1: Manufacturer: syz [ 83.246817][ T14] usb 1-1: SerialNumber: syz [ 83.252723][ T14] usb 1-1: config 0 descriptor?? [ 83.283178][ T4294] Bluetooth: hci4: command 0x041b tx timeout [ 83.478050][ T4922] loop3: detected capacity change from 0 to 32768 [ 83.494491][ T4922] ERROR: (device loop3): dbDiscardAG: -EIO [ 83.494491][ T4922] [ 83.496480][ T4922] ERROR: (device loop3): remounting filesystem as read-only [ 83.657985][ T14] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 83.660987][ T14] CoreChips: probe of 1-1:0.41 failed with error -71 [ 83.673180][ T14] usb 1-1: USB disconnect, device number 4 [ 84.414158][ T4943] tipc: Started in network mode [ 84.422755][ T4943] tipc: Node identity ac1414aa, cluster identity 4711 [ 84.425594][ T4943] tipc: Enabled bearer , priority 10 [ 84.977418][ T4964] netlink: 20 bytes leftover after parsing attributes in process `syz.2.205'. [ 85.041619][ T4967] netlink: 84 bytes leftover after parsing attributes in process `syz.4.201'. [ 85.295983][ T4970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.207'. [ 85.300624][ T4970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'. [ 85.304417][ T4970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.307171][ T4970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.361465][ T4300] Bluetooth: hci4: command 0x040f tx timeout [ 85.367665][ T4979] loop3: detected capacity change from 0 to 2048 [ 85.372242][ T4979] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.409947][ T4982] syz.3.211 uses obsolete (PF_INET,SOCK_PACKET) [ 85.542331][ T14] tipc: Node number set to 2886997162 [ 85.594178][ T4988] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 85.595741][ T4988] IPv6: NLM_F_CREATE should be set when creating new route [ 85.677688][ T4991] loop3: detected capacity change from 0 to 1024 [ 85.730821][ T4991] hfsplus: invalid length 1280 has been corrected to 255 [ 85.773812][ T4991] hfsplus: invalid length 1280 has been corrected to 255 [ 85.902997][ T4999] Invalid option length (63725) for dns_resolver key [ 86.426212][ T5005] loop2: detected capacity change from 0 to 32768 [ 86.438491][ T5005] (syz.2.217,5005,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 86.442313][ T5005] (syz.2.217,5005,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 86.448520][ T5005] (syz.2.217,5005,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 86.465339][ T5005] JBD2: Ignoring recovery information on journal [ 86.474544][ T5005] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 86.539585][ T5013] loop4: detected capacity change from 0 to 1024 [ 86.541512][ T5013] EXT4-fs: Ignoring removed bh option [ 86.645306][ T5013] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 86.747142][ T5022] netlink: 84 bytes leftover after parsing attributes in process `syz.0.224'. [ 87.399519][ T4293] ocfs2: Unmounting device (7,2) on (node local) [ 87.463079][ T5027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'. [ 87.469666][ T5027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 87.474170][ T5027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.513586][ T5027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.513866][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 87.526095][ T5035] loop2: detected capacity change from 0 to 128 [ 87.967815][ T27] audit: type=1326 audit(87.690:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5034 comm="syz.2.232" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97b792a8 code=0x7ffc0000 [ 88.044221][ T27] audit: type=1326 audit(87.690:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5034 comm="syz.2.232" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97b792a8 code=0x7ffc0000 [ 88.136942][ T27] audit: type=1326 audit(87.690:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5034 comm="syz.2.232" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97b792a8 code=0x7ffc0000 [ 88.226796][ T27] audit: type=1326 audit(87.690:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5034 comm="syz.2.232" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff97b792a8 code=0x7ffc0000 [ 88.237708][ T27] audit: type=1326 audit(87.700:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5034 comm="syz.2.232" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97b792a8 code=0x7ffc0000 [ 88.259170][ T27] audit: type=1326 audit(87.700:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5034 comm="syz.2.232" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97b792a8 code=0x7ffc0000 [ 88.265750][ T27] audit: type=1326 audit(87.700:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5034 comm="syz.2.232" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97b792a8 code=0x7ffc0000 [ 88.270250][ T27] audit: type=1326 audit(87.700:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5034 comm="syz.2.232" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff97b792a8 code=0x7ffc0000 [ 88.280311][ T27] audit: type=1326 audit(87.700:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5034 comm="syz.2.232" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97b792a8 code=0x7ffc0000 [ 88.336759][ T27] audit: type=1326 audit(87.700:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5034 comm="syz.2.232" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97b792a8 code=0x7ffc0000 [ 88.346298][ T5037] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4293] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[5037] [ 88.522988][ T5050] fuse: Bad value for 'fd' [ 88.538887][ T5057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.540735][ T5057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.741534][ T5070] netlink: 104 bytes leftover after parsing attributes in process `syz.3.238'. [ 88.954434][ T5069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.243'. [ 88.956245][ T5069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.243'. [ 88.975785][ T5069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.979741][ T5069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.089914][ T5078] 9pnet_fd: p9_fd_create_tcp (5078): problem connecting socket to 127.0.0.1 [ 89.117202][ T5082] fuse: Bad value for 'fd' [ 89.567491][ T5088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.569490][ T5088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.845516][ T5094] loop1: detected capacity change from 0 to 32768 [ 89.923572][ T5094] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop1 scanned by syz.1.253 (5094) [ 90.423212][ T5094] BTRFS info (device loop1): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 90.425366][ T5094] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 90.430354][ T5094] BTRFS info (device loop1): using free space tree [ 90.637628][ T5130] __nla_validate_parse: 1 callbacks suppressed [ 90.637648][ T5130] netlink: 104 bytes leftover after parsing attributes in process `syz.3.261'. [ 91.028650][ T5129] loop2: detected capacity change from 0 to 512 [ 91.045377][ T5129] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 91.149271][ T5138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.262'. [ 91.151228][ T5138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.262'. [ 91.153523][ T5138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.155391][ T5138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.163946][ T5135] fuse: Bad value for 'fd' [ 91.185931][ T5129] EXT4-fs error (device loop2): ext4_orphan_get:1435: comm syz.2.260: bad orphan inode 131083 [ 91.188755][ T5129] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 91.223509][ T5094] BTRFS info (device loop1): enabling ssd optimizations [ 91.255913][ T4283] BTRFS info (device loop1): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 91.391535][ T4293] EXT4-fs (loop2): unmounting filesystem. [ 91.439888][ T4277] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 9 /dev/loop1 scanned by udevd (4277) [ 92.865075][ T5198] netlink: 104 bytes leftover after parsing attributes in process `syz.4.278'. [ 93.813275][ T5223] CIFS mount error: No usable UNC path provided in device string! [ 93.813275][ T5223] [ 93.815347][ T5223] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 94.699172][ T5247] netlink: 96 bytes leftover after parsing attributes in process `syz.0.297'. [ 94.761713][ T5251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.299'. [ 94.763633][ T5251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.299'. [ 94.766023][ T5251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.767781][ T5251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.343305][ T5279] CIFS mount error: No usable UNC path provided in device string! [ 95.343305][ T5279] [ 95.345114][ T5279] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 95.590166][ T5283] loop0: detected capacity change from 0 to 4096 [ 96.245473][ T5311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.323'. [ 96.247445][ T5311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.323'. [ 96.270832][ T5311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.272865][ T5311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.673365][ T5349] device syzkaller0 entered promiscuous mode [ 96.896217][ T5355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.898636][ T5355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.106267][ T5384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.346'. [ 98.108085][ T5384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.346'. [ 98.281993][ T5391] loop3: detected capacity change from 0 to 2048 [ 98.327897][ T5391] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.421806][ T14] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 98.682823][ T14] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 98.686555][ T14] usb 1-1: config 0 has no interface number 0 [ 98.688890][ T14] usb 1-1: config 0 interface 41 has no altsetting 0 [ 98.693026][ T14] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 98.695976][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.700555][ T14] usb 1-1: Product: syz [ 98.701593][ T14] usb 1-1: Manufacturer: syz [ 98.702429][ T14] usb 1-1: SerialNumber: syz [ 98.704787][ T14] usb 1-1: config 0 descriptor?? [ 99.387640][ T14] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 99.398166][ T14] CoreChips: probe of 1-1:0.41 failed with error -71 [ 99.660420][ T14] usb 1-1: USB disconnect, device number 5 [ 100.584435][ T5457] loop3: detected capacity change from 0 to 16 [ 100.590053][ T5457] erofs: (device loop3): mounted with root inode @ nid 36. [ 101.194404][ T5462] loop1: detected capacity change from 0 to 128 [ 101.197254][ T5462] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 101.270907][ T5468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 101.278337][ T11] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 101.291022][ T5468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'. [ 101.401667][ T5468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.411248][ T5468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.691661][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 102.282169][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 102.284241][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 102.287765][ T24] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 102.289480][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.292154][ T24] usb 1-1: Product: syz [ 102.292954][ T24] usb 1-1: Manufacturer: syz [ 102.295018][ T24] usb 1-1: SerialNumber: syz [ 102.297988][ T24] usb 1-1: config 0 descriptor?? [ 102.299730][ T5458] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 102.301725][ T5458] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 102.464505][ T5506] device syzkaller0 entered promiscuous mode [ 102.810659][ T5509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.821784][ T5509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.989561][ T5518] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 102.991006][ T5518] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 102.994844][ T5518] vhci_hcd vhci_hcd.0: Device attached [ 102.996829][ T5521] vhci_hcd: connection closed [ 102.997814][ T39] vhci_hcd: stop threads [ 103.000504][ T39] vhci_hcd: release socket [ 103.009036][ T39] vhci_hcd: disconnect device [ 103.085888][ T5526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.399'. [ 103.087721][ T5526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.399'. [ 103.090143][ T5526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.092620][ T5526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.327194][ T5530] FAULT_INJECTION: forcing a failure. [ 103.327194][ T5530] name failslab, interval 1, probability 0, space 0, times 0 [ 103.329713][ T5530] CPU: 0 PID: 5530 Comm: syz.2.401 Not tainted syzkaller #0 [ 103.331036][ T5530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 103.332957][ T5530] Call trace: [ 103.333589][ T5530] dump_backtrace+0x1c4/0x1f0 [ 103.334455][ T5530] show_stack+0x2c/0x3c [ 103.335224][ T5530] __dump_stack+0x30/0x40 [ 103.336045][ T5530] dump_stack_lvl+0xf4/0x15c [ 103.336880][ T5530] dump_stack+0x1c/0x5c [ 103.337648][ T5530] should_fail_ex+0x3cc/0x524 [ 103.338512][ T5530] __should_failslab+0xc0/0x11c [ 103.339434][ T5530] should_failslab+0x10/0x28 [ 103.340323][ T5530] kmem_cache_alloc+0x88/0x310 [ 103.341248][ T5530] key_alloc+0x284/0xdec [ 103.342036][ T5530] keyring_alloc+0x68/0xe0 [ 103.342859][ T5530] join_session_keyring+0x120/0x3e0 [ 103.343893][ T5530] lookup_user_key+0x3f8/0xf94 [ 103.344750][ T5530] __arm64_sys_add_key+0x3d4/0x520 [ 103.345657][ T5530] invoke_syscall+0x98/0x290 [ 103.346501][ T5530] el0_svc_common+0x13c/0x258 [ 103.347331][ T5530] do_el0_svc+0x5c/0x134 [ 103.348106][ T5530] el0_svc+0x58/0x128 [ 103.348838][ T5530] el0t_64_sync_handler+0x84/0xf0 [ 103.349741][ T5530] el0t_64_sync+0x18c/0x190 [ 103.350631][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.510687][ T5540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.516574][ T5540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.527451][ T24] dm9601: probe of 1-1:0.0 failed with error -71 [ 103.535493][ T24] usb 1-1: USB disconnect, device number 6 [ 103.646614][ T5548] FAULT_INJECTION: forcing a failure. [ 103.646614][ T5548] name failslab, interval 1, probability 0, space 0, times 0 [ 103.649000][ T5548] CPU: 0 PID: 5548 Comm: syz.4.410 Not tainted syzkaller #0 [ 103.650393][ T5548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 103.652053][ T5551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.652304][ T5548] Call trace: [ 103.653939][ T5551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.654377][ T5548] dump_backtrace+0x1c4/0x1f0 [ 103.656619][ T5548] show_stack+0x2c/0x3c [ 103.657427][ T5548] __dump_stack+0x30/0x40 [ 103.658232][ T5548] dump_stack_lvl+0xf4/0x15c [ 103.659127][ T5548] dump_stack+0x1c/0x5c [ 103.659920][ T5548] should_fail_ex+0x3cc/0x524 [ 103.660777][ T5548] __should_failslab+0xc0/0x11c [ 103.661686][ T5548] should_failslab+0x10/0x28 [ 103.662552][ T5548] __kmem_cache_alloc_node+0x7c/0x318 [ 103.663570][ T5548] kmalloc_trace+0x48/0x94 [ 103.664408][ T5548] percpu_ref_init+0xc8/0x2f0 [ 103.665293][ T5548] blk_alloc_queue+0x370/0x4e8 [ 103.666197][ T5548] __blk_mq_alloc_disk+0x84/0x1e0 [ 103.667173][ T5548] loop_add+0x2c4/0x810 [ 103.668005][ T5548] loop_control_ioctl+0x130/0x514 [ 103.669002][ T5548] __arm64_sys_ioctl+0x14c/0x1c8 [ 103.669985][ T5548] invoke_syscall+0x98/0x290 [ 103.670830][ T5548] el0_svc_common+0x13c/0x258 [ 103.671715][ T5548] do_el0_svc+0x5c/0x134 [ 103.672510][ T5548] el0_svc+0x58/0x128 [ 103.673260][ T5548] el0t_64_sync_handler+0x84/0xf0 [ 103.674248][ T5548] el0t_64_sync+0x18c/0x190 [ 103.675087][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.766825][ T5542] loop2: detected capacity change from 0 to 40427 [ 103.776218][ T5542] F2FS-fs (loop2): Corrupted extension count (327717 + 1 > 64) [ 103.777710][ T5542] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 103.779317][ T5542] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 104.063984][ T5542] F2FS-fs (loop2): invalid crc value [ 104.090240][ T5542] F2FS-fs (loop2): Found nat_bits in checkpoint [ 104.114746][ T5542] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 104.116416][ T5542] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 104.130813][ T5542] F2FS-fs (loop2): access invalid blkaddr:2816 [ 104.132149][ T5542] CPU: 1 PID: 5542 Comm: syz.2.407 Not tainted syzkaller #0 [ 104.133459][ T5542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 104.135161][ T5542] Call trace: [ 104.135757][ T5542] dump_backtrace+0x1c4/0x1f0 [ 104.136584][ T5542] show_stack+0x2c/0x3c [ 104.137294][ T5542] __dump_stack+0x30/0x40 [ 104.138051][ T5542] dump_stack_lvl+0xf4/0x15c [ 104.138813][ T5542] dump_stack+0x1c/0x5c [ 104.139555][ T5542] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 104.140492][ T5542] f2fs_map_blocks+0x97c/0x2e64 [ 104.141317][ T5542] f2fs_mpage_readpages+0x974/0x1b3c [ 104.142303][ T5542] f2fs_readahead+0x194/0x3f8 [ 104.143199][ T5542] read_pages+0x158/0x68c [ 104.144018][ T5542] page_cache_ra_unbounded+0x458/0x53c [ 104.145021][ T5542] page_cache_ra_order+0x83c/0x9f4 [ 104.145944][ T5542] ondemand_readahead+0x5bc/0xae0 [ 104.146842][ T5542] page_cache_sync_ra+0x350/0x3cc [ 104.147738][ T5542] f2fs_readdir+0x3f8/0xd24 [ 104.148592][ T5542] iterate_dir+0x1f0/0x4d0 [ 104.149430][ T5542] __arm64_sys_getdents64+0x11c/0x314 [ 104.150391][ T5542] invoke_syscall+0x98/0x290 [ 104.151211][ T5542] el0_svc_common+0x13c/0x258 [ 104.152081][ T5542] do_el0_svc+0x5c/0x134 [ 104.152863][ T5542] el0_svc+0x58/0x128 [ 104.153555][ T5542] el0t_64_sync_handler+0x84/0xf0 [ 104.154465][ T5542] el0t_64_sync+0x18c/0x190 [ 104.156492][ T5542] F2FS-fs (loop2): access invalid blkaddr:2816 [ 104.157717][ T5542] CPU: 1 PID: 5542 Comm: syz.2.407 Not tainted syzkaller #0 [ 104.158984][ T5542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 104.160863][ T5542] Call trace: [ 104.161497][ T5542] dump_backtrace+0x1c4/0x1f0 [ 104.162435][ T5542] show_stack+0x2c/0x3c [ 104.163238][ T5542] __dump_stack+0x30/0x40 [ 104.164040][ T5542] dump_stack_lvl+0xf4/0x15c [ 104.164872][ T5542] dump_stack+0x1c/0x5c [ 104.165686][ T5542] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 104.166674][ T5542] f2fs_map_blocks+0x97c/0x2e64 [ 104.167560][ T5542] f2fs_mpage_readpages+0x974/0x1b3c [ 104.168498][ T5542] f2fs_readahead+0x194/0x3f8 [ 104.169362][ T5542] read_pages+0x158/0x68c [ 104.170153][ T5542] page_cache_ra_unbounded+0x458/0x53c [ 104.171114][ T5542] page_cache_ra_order+0x83c/0x9f4 [ 104.171962][ T5542] ondemand_readahead+0x5bc/0xae0 [ 104.172875][ T5542] page_cache_sync_ra+0x350/0x3cc [ 104.173798][ T5542] f2fs_readdir+0x3f8/0xd24 [ 104.174656][ T5542] iterate_dir+0x1f0/0x4d0 [ 104.175462][ T5542] __arm64_sys_getdents64+0x11c/0x314 [ 104.176456][ T5542] invoke_syscall+0x98/0x290 [ 104.177320][ T5542] el0_svc_common+0x13c/0x258 [ 104.178167][ T5542] do_el0_svc+0x5c/0x134 [ 104.178955][ T5542] el0_svc+0x58/0x128 [ 104.179670][ T5542] el0t_64_sync_handler+0x84/0xf0 [ 104.180569][ T5542] el0t_64_sync+0x18c/0x190 [ 104.183007][ T5542] syz.2.407: attempt to access beyond end of device [ 104.183007][ T5542] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 104.197458][ T4293] syz-executor: attempt to access beyond end of device [ 104.197458][ T4293] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 104.306231][ T5561] netlink: 60 bytes leftover after parsing attributes in process `syz.3.413'. [ 104.309604][ T5561] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.311076][ T5561] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.219139][ T5580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.220743][ T5580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.224789][ T5583] 0x000000000006-0x000000020000 : "" [ 105.407405][ T5581] loop0: detected capacity change from 0 to 4096 [ 105.417673][ T5583] ftl_cs: FTL header corrupt! [ 105.425902][ T5581] ntfs3: loop0: Failed to load $Extend. [ 105.512983][ T5591] input: syz0 as /devices/virtual/input/input3 [ 105.530827][ T5591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.533941][ T5591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.087079][ T5593] loop3: detected capacity change from 0 to 40427 [ 106.095516][ T5593] F2FS-fs (loop3): invalid crc value [ 106.103930][ T5593] F2FS-fs (loop3): Found nat_bits in checkpoint [ 106.399170][ T5593] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 106.423178][ T5593] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 106.448351][ T5593] syz.3.422: attempt to access beyond end of device [ 106.448351][ T5593] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 106.498908][ T4295] syz-executor: attempt to access beyond end of device [ 106.498908][ T4295] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 106.506819][ T4294] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 106.506848][ T4294] CPU: 1 PID: 4294 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 106.506857][ T4294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 106.506862][ T4294] Workqueue: hci1 hci_rx_work [ 106.506893][ T4294] Call trace: [ 106.506896][ T4294] dump_backtrace+0x1c4/0x1f0 [ 106.506906][ T4294] show_stack+0x2c/0x3c [ 106.506912][ T4294] __dump_stack+0x30/0x40 [ 106.506919][ T4294] dump_stack_lvl+0xf4/0x15c [ 106.506924][ T4294] dump_stack+0x1c/0x5c [ 106.506928][ T4294] sysfs_create_dir_ns+0x244/0x264 [ 106.506937][ T4294] kobject_add_internal+0x5a8/0xb18 [ 106.506943][ T4294] kobject_add+0x144/0x20c [ 106.506952][ T4294] device_add+0x3dc/0xe4c [ 106.506960][ T4294] hci_conn_add_sysfs+0xb8/0x1bc [ 106.506966][ T4294] le_conn_complete_evt+0xd3c/0x1300 [ 106.506971][ T4294] hci_le_conn_complete_evt+0x114/0x3b8 [ 106.506980][ T4294] hci_le_meta_evt+0x2c0/0x4a8 [ 106.506987][ T4294] hci_event_packet+0x64c/0xe60 [ 106.506993][ T4294] hci_rx_work+0x310/0xa70 [ 106.507001][ T4294] process_one_work+0x7e4/0x13bc [ 106.507008][ T4294] worker_thread+0x8cc/0xfe8 [ 106.507014][ T4294] kthread+0x254/0x2e0 [ 106.507022][ T4294] ret_from_fork+0x10/0x20 [ 106.507436][ T4294] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 106.507455][ T4294] Bluetooth: hci1: failed to register connection device [ 107.042005][ T5624] loop0: detected capacity change from 0 to 2048 [ 107.055128][ T5624] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.543304][ T5628] loop2: detected capacity change from 0 to 32768 [ 107.566106][ T5628] XFS (loop2): Mounting V5 Filesystem [ 107.600284][ T5628] XFS (loop2): Ending clean mount [ 107.605182][ T5628] XFS (loop2): Quotacheck needed: Please wait. [ 107.633463][ T5628] XFS (loop2): Quotacheck: Done. [ 107.669017][ T4293] XFS (loop2): Unmounting Filesystem [ 108.480067][ T5658] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 108.561016][ T4300] Bluetooth: hci1: command 0x2016 tx timeout [ 109.519299][ T5692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.528244][ T5692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.921632][ T5695] loop1: detected capacity change from 0 to 256 [ 109.923299][ T5695] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.928359][ T5695] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.028323][ T22] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 110.136885][ T5704] No such timeout policy "syz1" [ 110.212528][ T22] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 110.214672][ T22] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 110.218358][ T22] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 110.220038][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.255135][ T22] usb 1-1: Product: syz [ 110.256013][ T22] usb 1-1: Manufacturer: syz [ 110.256874][ T22] usb 1-1: SerialNumber: syz [ 110.264041][ T22] usb 1-1: config 0 descriptor?? [ 110.265399][ T5696] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 110.266826][ T5696] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 110.510776][ T5716] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 110.795773][ T5729] device syzkaller0 entered promiscuous mode [ 111.066073][ T5735] loop2: detected capacity change from 0 to 128 [ 111.084506][ T5735] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 111.127130][ T5739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.128982][ T5739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.166449][ T1620] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 111.236968][ T5746] loop2: detected capacity change from 0 to 512 [ 111.316130][ T5751] device syzkaller0 entered promiscuous mode [ 111.482967][ T5756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.474'. [ 111.484865][ T5756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.474'. [ 111.492456][ T5756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.501343][ T5756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.942185][ T5770] CIFS mount error: No usable UNC path provided in device string! [ 111.942185][ T5770] [ 111.944462][ T5770] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 112.114948][ T5772] loop4: detected capacity change from 0 to 128 [ 112.128994][ T5772] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 112.294313][ T5783] device syzkaller0 entered promiscuous mode [ 112.600822][ T22] dm9601: probe of 1-1:0.0 failed with error -71 [ 112.606616][ T22] usb 1-1: USB disconnect, device number 7 [ 112.809446][ T5803] loop3: detected capacity change from 0 to 128 [ 112.817105][ T5803] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 112.885508][ T5808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.494'. [ 112.889269][ T5808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.494'. [ 112.895126][ T5808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.901816][ T5808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.552509][ T5821] CIFS mount error: No usable UNC path provided in device string! [ 113.552509][ T5821] [ 113.554550][ T5821] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 113.774742][ T5815] loop3: detected capacity change from 0 to 40427 [ 113.793534][ T5815] F2FS-fs (loop3): Corrupted extension count (327717 + 1 > 64) [ 113.807193][ T5824] binder: 5823:5824 ioctl 4018620d 0 returned -22 [ 113.808725][ T5815] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 113.810450][ T5815] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 113.815402][ T5815] F2FS-fs (loop3): invalid crc value [ 113.823197][ T5824] FAULT_INJECTION: forcing a failure. [ 113.823197][ T5824] name failslab, interval 1, probability 0, space 0, times 0 [ 113.837422][ T5815] F2FS-fs (loop3): Found nat_bits in checkpoint [ 113.841047][ T5824] CPU: 1 PID: 5824 Comm: syz.2.500 Not tainted syzkaller #0 [ 113.842401][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 113.844137][ T5824] Call trace: [ 113.844683][ T5824] dump_backtrace+0x1c4/0x1f0 [ 113.845436][ T5824] show_stack+0x2c/0x3c [ 113.846264][ T5824] __dump_stack+0x30/0x40 [ 113.847153][ T5824] dump_stack_lvl+0xf4/0x15c [ 113.848012][ T5824] dump_stack+0x1c/0x5c [ 113.848756][ T5824] should_fail_ex+0x3cc/0x524 [ 113.849589][ T5824] __should_failslab+0xc0/0x11c [ 113.850464][ T5824] should_failslab+0x10/0x28 [ 113.851359][ T5824] kmem_cache_alloc+0x88/0x310 [ 113.852234][ T5824] vm_area_dup+0x30/0x1c4 [ 113.853015][ T5824] __split_vma+0xc8/0x44c [ 113.853807][ T5824] do_mas_align_munmap+0x2e4/0xf28 [ 113.854777][ T5824] do_munmap+0x1d4/0x244 [ 113.855556][ T5824] move_vma+0x690/0xa24 [ 113.856347][ T5824] mremap_to+0x3e8/0x464 [ 113.857106][ T5824] __arm64_sys_mremap+0x5e0/0xee4 [ 113.858066][ T5824] invoke_syscall+0x98/0x290 [ 113.858909][ T5824] el0_svc_common+0x13c/0x258 [ 113.859809][ T5824] do_el0_svc+0x5c/0x134 [ 113.860641][ T5824] el0_svc+0x58/0x128 [ 113.861468][ T5824] el0t_64_sync_handler+0x84/0xf0 [ 113.862436][ T5824] el0t_64_sync+0x18c/0x190 [ 113.869172][ T5815] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 113.870768][ T5815] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 113.880749][ T5815] syz.3.497: attempt to access beyond end of device [ 113.880749][ T5815] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 113.889171][ T5815] syz.3.497: attempt to access beyond end of device [ 113.889171][ T5815] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 114.059760][ T5837] loop0: detected capacity change from 0 to 128 [ 114.062763][ T5837] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 114.069423][ T5834] device syzkaller0 entered promiscuous mode [ 114.204971][ T5851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.208613][ T5851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.282242][ T5845] loop3: detected capacity change from 0 to 32768 [ 114.284606][ T5845] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.508 (5845) [ 114.293666][ T5845] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 114.295530][ T5845] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 114.297287][ T5845] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 114.299309][ T5845] BTRFS info (device loop3): use zstd compression, level 3 [ 114.300566][ T5845] BTRFS info (device loop3): using free space tree [ 114.343806][ T5854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.512'. [ 114.515799][ T5845] BTRFS info (device loop3): enabling ssd optimizations [ 114.640336][ T4295] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 114.795231][ T5897] FAULT_INJECTION: forcing a failure. [ 114.795231][ T5897] name failslab, interval 1, probability 0, space 0, times 0 [ 114.800643][ T5897] CPU: 0 PID: 5897 Comm: syz.3.519 Not tainted syzkaller #0 [ 114.802118][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 114.804144][ T5897] Call trace: [ 114.804852][ T5897] dump_backtrace+0x1c4/0x1f0 [ 114.805896][ T5897] show_stack+0x2c/0x3c [ 114.806822][ T5897] __dump_stack+0x30/0x40 [ 114.807789][ T5897] dump_stack_lvl+0xf4/0x15c [ 114.808786][ T5897] dump_stack+0x1c/0x5c [ 114.809687][ T5897] should_fail_ex+0x3cc/0x524 [ 114.810729][ T5897] __should_failslab+0xc0/0x11c [ 114.811682][ T5897] should_failslab+0x10/0x28 [ 114.812556][ T5897] __kmem_cache_alloc_node+0x7c/0x318 [ 114.813580][ T5897] __kmalloc+0xc4/0x180 [ 114.814350][ T5897] security_prepare_creds+0x54/0x140 [ 114.815347][ T5897] prepare_creds+0x420/0x698 [ 114.816221][ T5897] __sys_setreuid+0x104/0x7f4 [ 114.817123][ T5897] __arm64_sys_setreuid+0x5c/0x70 [ 114.818093][ T5897] invoke_syscall+0x98/0x290 [ 114.818986][ T5897] el0_svc_common+0x13c/0x258 [ 114.819872][ T5897] do_el0_svc+0x5c/0x134 [ 114.820677][ T5897] el0_svc+0x58/0x128 [ 114.821394][ T5897] el0t_64_sync_handler+0x84/0xf0 [ 114.822284][ T5897] el0t_64_sync+0x18c/0x190 [ 114.948654][ T5906] device syzkaller0 entered promiscuous mode [ 116.009194][ T5948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.022794][ T5948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.136934][ T5959] device syzkaller0 entered promiscuous mode [ 116.232754][ T5948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.234704][ T5948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.927894][ T5984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.940545][ T5984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.951799][ T5987] device syzkaller0 entered promiscuous mode [ 116.980755][ T5982] loop0: detected capacity change from 0 to 40427 [ 116.987700][ T5982] F2FS-fs (loop0): Corrupted extension count (327717 + 1 > 64) [ 116.989111][ T5982] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 116.990728][ T5982] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 116.995918][ T5982] F2FS-fs (loop0): invalid crc value [ 116.999029][ T5982] F2FS-fs (loop0): Found nat_bits in checkpoint [ 117.021909][ T5982] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 117.023440][ T5982] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 117.031520][ T5982] syz.0.552: attempt to access beyond end of device [ 117.031520][ T5982] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 117.394971][ T6020] loop4: detected capacity change from 0 to 1024 [ 117.405159][ T6020] EXT4-fs: Ignoring removed orlov option [ 117.429342][ T6020] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 117.480754][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 117.528039][ T6025] tipc: Started in network mode [ 117.529179][ T6025] tipc: Node identity 824eecd150dc, cluster identity 4711 [ 117.530744][ T6025] tipc: Enabled bearer , priority 0 [ 117.535880][ T6025] device syzkaller0 entered promiscuous mode [ 117.645105][ T6025] tipc: Resetting bearer [ 117.655648][ T6024] tipc: Resetting bearer [ 117.744197][ T6024] tipc: Disabling bearer [ 117.828908][ T6028] loop4: detected capacity change from 0 to 2048 [ 117.862787][ T6028] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 118.097712][ T6035] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 118.101436][ T6035] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 118.103724][ T6035] EXT4-fs (loop4): This should not happen!! Data will be lost [ 118.103724][ T6035] [ 118.105647][ T6035] EXT4-fs (loop4): Total free blocks count 0 [ 118.106781][ T6035] EXT4-fs (loop4): Free/Dirty block details [ 118.107991][ T6035] EXT4-fs (loop4): free_blocks=2415919104 [ 118.109064][ T6035] EXT4-fs (loop4): dirty_blocks=48 [ 118.110088][ T6035] EXT4-fs (loop4): Block reservation details [ 118.111329][ T6035] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 118.410779][ T6045] loop0: detected capacity change from 0 to 128 [ 118.414699][ T6045] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 118.465462][ T6045] loop0: detected capacity change from 128 to 1 [ 118.476778][ T6045] syz.0.572: attempt to access beyond end of device [ 118.476778][ T6045] loop0: rw=0, sector=41, nr_sectors = 1 limit=1 [ 118.479611][ T6045] syz.0.572: attempt to access beyond end of device [ 118.479611][ T6045] loop0: rw=2049, sector=36, nr_sectors = 1 limit=1 [ 118.482582][ T6045] Buffer I/O error on dev loop0, logical block 36, lost sync page write [ 118.484343][ T6045] syz.0.572: attempt to access beyond end of device [ 118.484343][ T6045] loop0: rw=0, sector=36, nr_sectors = 1 limit=1 [ 118.486848][ T6045] FAT-fs (loop0): unable to read inode block for updating (i_pos 580) [ 118.511704][ T4434] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 118.516386][ T4288] syz-executor: attempt to access beyond end of device [ 118.516386][ T4288] loop0: rw=0, sector=36, nr_sectors = 1 limit=1 [ 118.519111][ T4288] FAT-fs (loop0): unable to read inode block for updating (i_pos 580) [ 118.520856][ T4288] syz-executor: attempt to access beyond end of device [ 118.520856][ T4288] loop0: rw=0, sector=36, nr_sectors = 1 limit=1 [ 118.524558][ T4288] FAT-fs (loop0): unable to read inode block for updating (i_pos 580) [ 118.526204][ T4288] FAT-fs (loop0): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 118.566078][ T4276] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 118.912527][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 119.017541][ T6057] netlink: 'syz.2.578': attribute type 1 has an invalid length. [ 119.044486][ T6057] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 119.057349][ T6057] device macvlan2 entered promiscuous mode [ 119.059043][ T6057] device bond2 entered promiscuous mode [ 119.257415][ T6064] loop4: detected capacity change from 0 to 16 [ 119.260534][ T6057] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 119.260616][ T6064] erofs: (device loop4): mounted with root inode @ nid 36. [ 119.267573][ T6064] syz.4.576: attempt to access beyond end of device [ 119.267573][ T6064] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 119.272044][ T6064] syz.4.576 sent an empty control message without MSG_MORE. [ 119.303668][ T6057] device bond2 left promiscuous mode [ 119.672027][ T6065] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 119.803639][ T6082] capability: warning: `syz.1.585' uses 32-bit capabilities (legacy support in use) [ 120.218249][ T6087] loop1: detected capacity change from 0 to 1764 [ 120.319850][ T4294] Bluetooth: hci1: ISO packet for unknown connection handle 9 [ 121.115693][ T6118] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 121.115845][ T6113] loop0: detected capacity change from 0 to 40427 [ 121.135471][ T6113] F2FS-fs (loop0): Corrupted extension count (327717 + 1 > 64) [ 121.138009][ T6113] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 121.140460][ T6113] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 121.143565][ T6113] F2FS-fs (loop0): invalid crc value [ 121.145948][ T6113] F2FS-fs (loop0): Found nat_bits in checkpoint [ 121.235054][ T6113] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 121.236510][ T6113] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 121.257338][ T6113] F2FS-fs (loop0): access invalid blkaddr:2816 [ 121.258612][ T6113] CPU: 1 PID: 6113 Comm: syz.0.598 Not tainted syzkaller #0 [ 121.259912][ T6113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 121.261934][ T6113] Call trace: [ 121.262606][ T6113] dump_backtrace+0x1c4/0x1f0 [ 121.263568][ T6113] show_stack+0x2c/0x3c [ 121.264417][ T6113] __dump_stack+0x30/0x40 [ 121.265258][ T6113] dump_stack_lvl+0xf4/0x15c [ 121.266147][ T6113] dump_stack+0x1c/0x5c [ 121.266957][ T6113] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 121.267942][ T6113] f2fs_map_blocks+0x97c/0x2e64 [ 121.268810][ T6113] f2fs_mpage_readpages+0x974/0x1b3c [ 121.269794][ T6113] f2fs_readahead+0x194/0x3f8 [ 121.270643][ T6113] read_pages+0x158/0x68c [ 121.271453][ T6113] page_cache_ra_unbounded+0x458/0x53c [ 121.272463][ T6113] page_cache_ra_order+0x83c/0x9f4 [ 121.273370][ T6113] ondemand_readahead+0x5bc/0xae0 [ 121.274315][ T6113] page_cache_sync_ra+0x350/0x3cc [ 121.275243][ T6113] f2fs_readdir+0x3f8/0xd24 [ 121.276061][ T6113] iterate_dir+0x1f0/0x4d0 [ 121.276889][ T6113] __arm64_sys_getdents64+0x11c/0x314 [ 121.277919][ T6113] invoke_syscall+0x98/0x290 [ 121.278767][ T6113] el0_svc_common+0x13c/0x258 [ 121.279662][ T6113] do_el0_svc+0x5c/0x134 [ 121.280478][ T6113] el0_svc+0x58/0x128 [ 121.281256][ T6113] el0t_64_sync_handler+0x84/0xf0 [ 121.282240][ T6113] el0t_64_sync+0x18c/0x190 [ 121.342430][ T6125] netlink: 84 bytes leftover after parsing attributes in process `syz.3.600'. [ 121.556864][ T6113] F2FS-fs (loop0): access invalid blkaddr:2816 [ 121.558311][ T6113] CPU: 1 PID: 6113 Comm: syz.0.598 Not tainted syzkaller #0 [ 121.559628][ T6113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 121.561479][ T6113] Call trace: [ 121.562098][ T6113] dump_backtrace+0x1c4/0x1f0 [ 121.562933][ T6113] show_stack+0x2c/0x3c [ 121.563703][ T6113] __dump_stack+0x30/0x40 [ 121.564628][ T6113] dump_stack_lvl+0xf4/0x15c [ 121.565577][ T6113] dump_stack+0x1c/0x5c [ 121.566410][ T6113] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 121.567457][ T6113] f2fs_map_blocks+0x97c/0x2e64 [ 121.568318][ T6113] f2fs_mpage_readpages+0x974/0x1b3c [ 121.569305][ T6113] f2fs_readahead+0x194/0x3f8 [ 121.570184][ T6113] read_pages+0x158/0x68c [ 121.571007][ T6113] page_cache_ra_unbounded+0x458/0x53c [ 121.571976][ T6113] page_cache_ra_order+0x83c/0x9f4 [ 121.572903][ T6113] ondemand_readahead+0x5bc/0xae0 [ 121.573842][ T6113] page_cache_sync_ra+0x350/0x3cc [ 121.574819][ T6113] f2fs_readdir+0x3f8/0xd24 [ 121.575633][ T6113] iterate_dir+0x1f0/0x4d0 [ 121.576394][ T6113] __arm64_sys_getdents64+0x11c/0x314 [ 121.577361][ T6113] invoke_syscall+0x98/0x290 [ 121.578166][ T6113] el0_svc_common+0x13c/0x258 [ 121.579052][ T6113] do_el0_svc+0x5c/0x134 [ 121.579838][ T6113] el0_svc+0x58/0x128 [ 121.580596][ T6113] el0t_64_sync_handler+0x84/0xf0 [ 121.581523][ T6113] el0t_64_sync+0x18c/0x190 [ 121.590090][ T6113] syz.0.598: attempt to access beyond end of device [ 121.590090][ T6113] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 121.641727][ T4288] syz-executor: attempt to access beyond end of device [ 121.641727][ T4288] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 122.040143][ T6141] capability: warning: `syz.1.606' uses deprecated v2 capabilities in a way that may be insecure [ 122.083123][ T6143] loop3: detected capacity change from 0 to 136 [ 122.088064][ T27] kauditd_printk_skb: 158 callbacks suppressed [ 122.088070][ T27] audit: type=1326 audit(122.070:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.1.606" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9af792a8 code=0x7ffc0000 [ 122.099675][ T27] audit: type=1326 audit(122.070:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.1.606" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9af792a8 code=0x7ffc0000 [ 122.108039][ T27] audit: type=1326 audit(122.070:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.1.606" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9af792a8 code=0x7ffc0000 [ 122.119017][ T27] audit: type=1326 audit(122.070:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.1.606" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=43 compat=0 ip=0xffff9af792a8 code=0x7ffc0000 [ 122.128612][ T27] audit: type=1326 audit(122.070:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.1.606" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9af792a8 code=0x7ffc0000 [ 122.146241][ T27] audit: type=1326 audit(122.070:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.1.606" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff9af792a8 code=0x7ffc0000 [ 122.146823][ T6148] loop0: detected capacity change from 0 to 16 [ 122.159552][ T27] audit: type=1326 audit(122.070:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.1.606" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff9af792a8 code=0x7ffc0000 [ 122.168378][ T6148] erofs: (device loop0): mounted with root inode @ nid 36. [ 122.608205][ T27] audit: type=1326 audit(122.590:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.2.613" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97b792a8 code=0x7ffc0000 [ 122.619913][ T27] audit: type=1326 audit(122.590:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.2.613" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97b792a8 code=0x7ffc0000 [ 122.630616][ T27] audit: type=1326 audit(122.610:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.2.613" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=16 compat=0 ip=0xffff97b792a8 code=0x7ffc0000 [ 123.126433][ T6161] loop4: detected capacity change from 0 to 32768 [ 123.137896][ T6173] loop1: detected capacity change from 0 to 16 [ 123.150061][ T6173] erofs: (device loop1): mounted with root inode @ nid 36. [ 123.205186][ T6161] XFS (loop4): Mounting V5 Filesystem [ 123.229964][ T6161] XFS (loop4): Ending clean mount [ 123.244284][ T6161] XFS (loop4): Quotacheck needed: Please wait. [ 123.259697][ T6170] loop3: detected capacity change from 0 to 40427 [ 123.304070][ T6170] F2FS-fs (loop3): Corrupted extension count (327717 + 1 > 64) [ 123.305775][ T6170] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 123.309121][ T6170] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 123.316988][ T6161] XFS (loop4): Quotacheck: Done. [ 123.318996][ T6170] F2FS-fs (loop3): invalid crc value [ 123.329176][ T6170] F2FS-fs (loop3): Found nat_bits in checkpoint [ 123.350176][ T4284] XFS (loop4): Unmounting Filesystem [ 123.419220][ T6189] netlink: 84 bytes leftover after parsing attributes in process `syz.1.618'. [ 123.666684][ T6170] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 123.668074][ T6170] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 123.678736][ T6170] F2FS-fs (loop3): access invalid blkaddr:2816 [ 123.679864][ T6170] CPU: 1 PID: 6170 Comm: syz.3.614 Not tainted syzkaller #0 [ 123.681147][ T6170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 123.682925][ T6170] Call trace: [ 123.683515][ T6170] dump_backtrace+0x1c4/0x1f0 [ 123.684396][ T6170] show_stack+0x2c/0x3c [ 123.685147][ T6170] __dump_stack+0x30/0x40 [ 123.685940][ T6170] dump_stack_lvl+0xf4/0x15c [ 123.686851][ T6170] dump_stack+0x1c/0x5c [ 123.687632][ T6170] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 123.688619][ T6170] f2fs_map_blocks+0x97c/0x2e64 [ 123.689486][ T6170] f2fs_mpage_readpages+0x974/0x1b3c [ 123.690466][ T6170] f2fs_readahead+0x194/0x3f8 [ 123.691306][ T6170] read_pages+0x158/0x68c [ 123.692113][ T6170] page_cache_ra_unbounded+0x458/0x53c [ 123.693098][ T6170] page_cache_ra_order+0x83c/0x9f4 [ 123.694088][ T6170] ondemand_readahead+0x5bc/0xae0 [ 123.695091][ T6170] page_cache_sync_ra+0x350/0x3cc [ 123.695999][ T6170] f2fs_readdir+0x3f8/0xd24 [ 123.696839][ T6170] iterate_dir+0x1f0/0x4d0 [ 123.697694][ T6170] __arm64_sys_getdents64+0x11c/0x314 [ 123.698753][ T6170] invoke_syscall+0x98/0x290 [ 123.699600][ T6170] el0_svc_common+0x13c/0x258 [ 123.700441][ T6170] do_el0_svc+0x5c/0x134 [ 123.701222][ T6170] el0_svc+0x58/0x128 [ 123.701973][ T6170] el0t_64_sync_handler+0x84/0xf0 [ 123.702910][ T6170] el0t_64_sync+0x18c/0x190 [ 123.718471][ T6170] F2FS-fs (loop3): access invalid blkaddr:2816 [ 123.719561][ T6170] CPU: 1 PID: 6170 Comm: syz.3.614 Not tainted syzkaller #0 [ 123.720705][ T6170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 123.722576][ T6170] Call trace: [ 123.723162][ T6170] dump_backtrace+0x1c4/0x1f0 [ 123.724001][ T6170] show_stack+0x2c/0x3c [ 123.724766][ T6170] __dump_stack+0x30/0x40 [ 123.725587][ T6170] dump_stack_lvl+0xf4/0x15c [ 123.726471][ T6170] dump_stack+0x1c/0x5c [ 123.727207][ T6170] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 123.728151][ T6170] f2fs_map_blocks+0x97c/0x2e64 [ 123.729082][ T6170] f2fs_mpage_readpages+0x974/0x1b3c [ 123.730029][ T6170] f2fs_readahead+0x194/0x3f8 [ 123.730899][ T6170] read_pages+0x158/0x68c [ 123.731706][ T6170] page_cache_ra_unbounded+0x458/0x53c [ 123.732714][ T6170] page_cache_ra_order+0x83c/0x9f4 [ 123.733669][ T6170] ondemand_readahead+0x5bc/0xae0 [ 123.734604][ T6170] page_cache_sync_ra+0x350/0x3cc [ 123.735539][ T6170] f2fs_readdir+0x3f8/0xd24 [ 123.736396][ T6170] iterate_dir+0x1f0/0x4d0 [ 123.737230][ T6170] __arm64_sys_getdents64+0x11c/0x314 [ 123.738225][ T6170] invoke_syscall+0x98/0x290 [ 123.739095][ T6170] el0_svc_common+0x13c/0x258 [ 123.739957][ T6170] do_el0_svc+0x5c/0x134 [ 123.740730][ T6170] el0_svc+0x58/0x128 [ 123.741452][ T6170] el0t_64_sync_handler+0x84/0xf0 [ 123.742364][ T6170] el0t_64_sync+0x18c/0x190 [ 123.745261][ T6170] syz.3.614: attempt to access beyond end of device [ 123.745261][ T6170] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 123.759862][ T4295] syz-executor: attempt to access beyond end of device [ 123.759862][ T4295] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 124.011711][ T6202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.013407][ T6202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.101916][ T6204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.105956][ T6204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.547134][ T6206] loop2: detected capacity change from 0 to 128 [ 124.553383][ T6206] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 124.575660][ T6208] device syzkaller0 entered promiscuous mode [ 124.616103][ T6206] loop2: detected capacity change from 128 to 1 [ 124.616223][ T6209] syz.2.624: attempt to access beyond end of device [ 124.616223][ T6209] loop2: rw=0, sector=41, nr_sectors = 1 limit=1 [ 124.621494][ T6209] syz.2.624: attempt to access beyond end of device [ 124.621494][ T6209] loop2: rw=2049, sector=36, nr_sectors = 1 limit=1 [ 124.641801][ T6209] Buffer I/O error on dev loop2, logical block 36, lost sync page write [ 124.649147][ T6209] syz.2.624: attempt to access beyond end of device [ 124.649147][ T6209] loop2: rw=0, sector=36, nr_sectors = 1 limit=1 [ 124.660699][ T6216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.662528][ T6209] FAT-fs (loop2): unable to read inode block for updating (i_pos 580) [ 124.665337][ T6216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.685218][ T9] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 124.688488][ T4293] syz-executor: attempt to access beyond end of device [ 124.688488][ T4293] loop2: rw=0, sector=36, nr_sectors = 1 limit=1 [ 124.695458][ T4293] FAT-fs (loop2): unable to read inode block for updating (i_pos 580) [ 124.696893][ T4293] syz-executor: attempt to access beyond end of device [ 124.696893][ T4293] loop2: rw=0, sector=36, nr_sectors = 1 limit=1 [ 124.699007][ T4293] FAT-fs (loop2): unable to read inode block for updating (i_pos 580) [ 124.700361][ T4293] FAT-fs (loop2): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 124.827299][ T6223] Bluetooth: ISO socket layer initialized [ 125.559850][ T6233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.571928][ T6233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.695083][ T6230] loop0: detected capacity change from 0 to 40427 [ 125.711172][ T6230] F2FS-fs (loop0): Corrupted extension count (327717 + 1 > 64) [ 125.712717][ T6230] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 125.714336][ T6230] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 125.730177][ T6230] F2FS-fs (loop0): invalid crc value [ 125.924200][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.927494][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.000245][ T6230] F2FS-fs (loop0): Found nat_bits in checkpoint [ 126.015196][ T6230] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 126.016646][ T6230] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 126.031024][ T6230] F2FS-fs (loop0): access invalid blkaddr:2816 [ 126.033418][ T6230] CPU: 1 PID: 6230 Comm: syz.0.632 Not tainted syzkaller #0 [ 126.034702][ T6230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 126.036832][ T6230] Call trace: [ 126.037497][ T6230] dump_backtrace+0x1c4/0x1f0 [ 126.038411][ T6230] show_stack+0x2c/0x3c [ 126.039250][ T6230] __dump_stack+0x30/0x40 [ 126.040114][ T6230] dump_stack_lvl+0xf4/0x15c [ 126.040974][ T6230] dump_stack+0x1c/0x5c [ 126.041768][ T6230] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 126.042776][ T6230] f2fs_map_blocks+0x97c/0x2e64 [ 126.043643][ T6230] f2fs_mpage_readpages+0x974/0x1b3c [ 126.044625][ T6230] f2fs_readahead+0x194/0x3f8 [ 126.045499][ T6230] read_pages+0x158/0x68c [ 126.046311][ T6230] page_cache_ra_unbounded+0x458/0x53c [ 126.047323][ T6230] page_cache_ra_order+0x83c/0x9f4 [ 126.048262][ T6230] ondemand_readahead+0x5bc/0xae0 [ 126.049181][ T6230] page_cache_sync_ra+0x350/0x3cc [ 126.050124][ T6230] f2fs_readdir+0x3f8/0xd24 [ 126.050925][ T6230] iterate_dir+0x1f0/0x4d0 [ 126.051713][ T6230] __arm64_sys_getdents64+0x11c/0x314 [ 126.052701][ T6230] invoke_syscall+0x98/0x290 [ 126.053573][ T6230] el0_svc_common+0x13c/0x258 [ 126.054450][ T6230] do_el0_svc+0x5c/0x134 [ 126.055225][ T6230] el0_svc+0x58/0x128 [ 126.055925][ T6230] el0t_64_sync_handler+0x84/0xf0 [ 126.056860][ T6230] el0t_64_sync+0x18c/0x190 [ 126.059346][ T6230] F2FS-fs (loop0): access invalid blkaddr:2816 [ 126.060543][ T6230] CPU: 1 PID: 6230 Comm: syz.0.632 Not tainted syzkaller #0 [ 126.061892][ T6230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 126.063827][ T6230] Call trace: [ 126.064459][ T6230] dump_backtrace+0x1c4/0x1f0 [ 126.065357][ T6230] show_stack+0x2c/0x3c [ 126.066178][ T6230] __dump_stack+0x30/0x40 [ 126.066602][ T6241] loop3: detected capacity change from 0 to 16384 [ 126.067023][ T6230] dump_stack_lvl+0xf4/0x15c [ 126.069083][ T6230] dump_stack+0x1c/0x5c [ 126.069899][ T6230] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 126.070945][ T6230] f2fs_map_blocks+0x97c/0x2e64 [ 126.071864][ T6230] f2fs_mpage_readpages+0x974/0x1b3c [ 126.072847][ T6230] f2fs_readahead+0x194/0x3f8 [ 126.073716][ T6230] read_pages+0x158/0x68c [ 126.074550][ T6230] page_cache_ra_unbounded+0x458/0x53c [ 126.075568][ T6230] page_cache_ra_order+0x83c/0x9f4 [ 126.076491][ T6230] ondemand_readahead+0x5bc/0xae0 [ 126.077370][ T6230] page_cache_sync_ra+0x350/0x3cc [ 126.078320][ T6230] f2fs_readdir+0x3f8/0xd24 [ 126.079184][ T6230] iterate_dir+0x1f0/0x4d0 [ 126.079982][ T6230] __arm64_sys_getdents64+0x11c/0x314 [ 126.080974][ T6230] invoke_syscall+0x98/0x290 [ 126.081863][ T6230] el0_svc_common+0x13c/0x258 [ 126.082711][ T6230] do_el0_svc+0x5c/0x134 [ 126.083517][ T6230] el0_svc+0x58/0x128 [ 126.084282][ T6230] el0t_64_sync_handler+0x84/0xf0 [ 126.085204][ T6230] el0t_64_sync+0x18c/0x190 [ 126.087612][ T6230] syz.0.632: attempt to access beyond end of device [ 126.087612][ T6230] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 126.106327][ T4288] syz-executor: attempt to access beyond end of device [ 126.106327][ T4288] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 126.106572][ T6241] REISERFS warning (device loop3): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop3, block 16, size 4096) [ 126.112196][ T6241] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 [ 126.242728][ T6254] loop0: detected capacity change from 0 to 1024 [ 126.310557][ T6256] usb usb8: usbfs: process 6256 (syz.3.639) did not claim interface 0 before use [ 126.338142][ T6258] loop0: detected capacity change from 0 to 128 [ 126.340364][ T6258] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 126.391038][ T6258] loop0: detected capacity change from 128 to 1 [ 126.396312][ T6258] syz.0.640: attempt to access beyond end of device [ 126.396312][ T6258] loop0: rw=0, sector=41, nr_sectors = 1 limit=1 [ 126.399223][ T6258] syz.0.640: attempt to access beyond end of device [ 126.399223][ T6258] loop0: rw=2049, sector=36, nr_sectors = 1 limit=1 [ 126.403645][ T6258] Buffer I/O error on dev loop0, logical block 36, lost sync page write [ 126.405396][ T6258] syz.0.640: attempt to access beyond end of device [ 126.405396][ T6258] loop0: rw=0, sector=36, nr_sectors = 1 limit=1 [ 126.408027][ T6258] FAT-fs (loop0): unable to read inode block for updating (i_pos 580) [ 126.421443][ T39] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 126.423912][ T4288] FAT-fs (loop0): unable to read inode block for updating (i_pos 580) [ 126.425498][ T4288] FAT-fs (loop0): unable to read inode block for updating (i_pos 580) [ 126.427247][ T4288] FAT-fs (loop0): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 136.208941][ T6243] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 136.243551][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'. [ 136.377330][ T6290] loop2: detected capacity change from 0 to 64 [ 136.809056][ T6287] loop0: detected capacity change from 0 to 40427 [ 136.854659][ T6287] F2FS-fs (loop0): Corrupted extension count (327717 + 1 > 64) [ 136.856461][ T6287] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 136.858194][ T6287] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 136.860255][ T6287] F2FS-fs (loop0): invalid crc value [ 136.879813][ T6287] F2FS-fs (loop0): Found nat_bits in checkpoint [ 136.905581][ T6287] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 136.907038][ T6287] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 136.914804][ T6287] F2FS-fs (loop0): access invalid blkaddr:2816 [ 136.916446][ T6287] CPU: 1 PID: 6287 Comm: syz.0.647 Not tainted syzkaller #0 [ 136.917755][ T6287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 136.919445][ T6287] Call trace: [ 136.920032][ T6287] dump_backtrace+0x1c4/0x1f0 [ 136.920887][ T6287] show_stack+0x2c/0x3c [ 136.921644][ T6287] __dump_stack+0x30/0x40 [ 136.922432][ T6287] dump_stack_lvl+0xf4/0x15c [ 136.923261][ T6287] dump_stack+0x1c/0x5c [ 136.923976][ T6287] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 136.924889][ T6287] f2fs_map_blocks+0x97c/0x2e64 [ 136.925813][ T6287] f2fs_mpage_readpages+0x974/0x1b3c [ 136.926762][ T6287] f2fs_readahead+0x194/0x3f8 [ 136.927587][ T6287] read_pages+0x158/0x68c [ 136.928362][ T6287] page_cache_ra_unbounded+0x458/0x53c [ 136.929364][ T6287] page_cache_ra_order+0x83c/0x9f4 [ 136.930293][ T6287] ondemand_readahead+0x5bc/0xae0 [ 136.931296][ T6287] page_cache_sync_ra+0x350/0x3cc [ 136.932217][ T6287] f2fs_readdir+0x3f8/0xd24 [ 136.933039][ T6287] iterate_dir+0x1f0/0x4d0 [ 136.933824][ T6287] __arm64_sys_getdents64+0x11c/0x314 [ 136.934827][ T6287] invoke_syscall+0x98/0x290 [ 136.935691][ T6287] el0_svc_common+0x13c/0x258 [ 136.936612][ T6287] do_el0_svc+0x5c/0x134 [ 136.937437][ T6287] el0_svc+0x58/0x128 [ 136.938161][ T6287] el0t_64_sync_handler+0x84/0xf0 [ 136.939074][ T6287] el0t_64_sync+0x18c/0x190 [ 137.015384][ T6310] ubi0: attaching mtd0 [ 137.020538][ T6310] ubi0: scanning is finished [ 137.021689][ T6310] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 137.182521][ T6310] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 137.190596][ T6312] netlink: 48 bytes leftover after parsing attributes in process `syz.1.654'. [ 137.193650][ T6287] F2FS-fs (loop0): access invalid blkaddr:2816 [ 137.194686][ T6287] CPU: 0 PID: 6287 Comm: syz.0.647 Not tainted syzkaller #0 [ 137.195867][ T6287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 137.197582][ T6287] Call trace: [ 137.198134][ T6287] dump_backtrace+0x1c4/0x1f0 [ 137.198985][ T6287] show_stack+0x2c/0x3c [ 137.199763][ T6287] __dump_stack+0x30/0x40 [ 137.200600][ T6287] dump_stack_lvl+0xf4/0x15c [ 137.201478][ T6287] dump_stack+0x1c/0x5c [ 137.202277][ T6287] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 137.203237][ T6287] f2fs_map_blocks+0x97c/0x2e64 [ 137.204141][ T6287] f2fs_mpage_readpages+0x974/0x1b3c [ 137.205113][ T6287] f2fs_readahead+0x194/0x3f8 [ 137.205987][ T6287] read_pages+0x158/0x68c [ 137.206823][ T6287] page_cache_ra_unbounded+0x458/0x53c [ 137.207796][ T6287] page_cache_ra_order+0x83c/0x9f4 [ 137.208711][ T6287] ondemand_readahead+0x5bc/0xae0 [ 137.209616][ T6287] page_cache_sync_ra+0x350/0x3cc [ 137.210520][ T6287] f2fs_readdir+0x3f8/0xd24 [ 137.211324][ T6287] iterate_dir+0x1f0/0x4d0 [ 137.212328][ T6287] __arm64_sys_getdents64+0x11c/0x314 [ 137.213548][ T6287] invoke_syscall+0x98/0x290 [ 137.214604][ T6287] el0_svc_common+0x13c/0x258 [ 137.215635][ T6287] do_el0_svc+0x5c/0x134 [ 137.216546][ T6287] el0_svc+0x58/0x128 [ 137.217407][ T6287] el0t_64_sync_handler+0x84/0xf0 [ 137.218451][ T6287] el0t_64_sync+0x18c/0x190 [ 137.247642][ T6287] bio_check_eod: 2 callbacks suppressed [ 137.247656][ T6287] syz.0.647: attempt to access beyond end of device [ 137.247656][ T6287] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 137.272431][ T4288] syz-executor: attempt to access beyond end of device [ 137.272431][ T4288] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 138.872910][ T6372] loop3: detected capacity change from 0 to 2048 [ 139.169832][ T6372] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.649116][ T6388] device syzkaller0 entered promiscuous mode [ 139.849831][ T6410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.855217][ T6410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.078598][ T6441] device syzkaller0 entered promiscuous mode [ 141.209270][ T6446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.211420][ T6446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.360844][ T6458] loop3: detected capacity change from 0 to 256 [ 142.732972][ T6489] device syzkaller0 entered promiscuous mode [ 142.769922][ T6493] loop3: detected capacity change from 0 to 256 [ 142.775020][ T6493] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 142.778437][ T6493] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.984211][ T6497] No such timeout policy "syz1" [ 144.098261][ T6509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.100180][ T6509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.395968][ T6513] sctp: [Deprecated]: syz.0.721 (pid 6513) Use of int in max_burst socket option. [ 144.395968][ T6513] Use struct sctp_assoc_value instead [ 144.997585][ T6544] Cannot find set identified by id 4 to match [ 145.646514][ T6568] FAULT_INJECTION: forcing a failure. [ 145.646514][ T6568] name failslab, interval 1, probability 0, space 0, times 0 [ 145.662994][ T6568] CPU: 1 PID: 6568 Comm: syz.0.741 Not tainted syzkaller #0 [ 145.664443][ T6568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 145.666395][ T6568] Call trace: [ 145.667008][ T6568] dump_backtrace+0x1c4/0x1f0 [ 145.667881][ T6568] show_stack+0x2c/0x3c [ 145.668636][ T6568] __dump_stack+0x30/0x40 [ 145.669435][ T6568] dump_stack_lvl+0xf4/0x15c [ 145.670256][ T6568] dump_stack+0x1c/0x5c [ 145.671048][ T6568] should_fail_ex+0x3cc/0x524 [ 145.671896][ T6568] __should_failslab+0xc0/0x11c [ 145.672744][ T6568] should_failslab+0x10/0x28 [ 145.673570][ T6568] __kmem_cache_alloc_node+0x7c/0x318 [ 145.674537][ T6568] kmalloc_trace+0x48/0x94 [ 145.675354][ T6568] legacy_init_fs_context+0x5c/0xc8 [ 145.676302][ T6568] alloc_fs_context+0x530/0x778 [ 145.677178][ T6568] fs_context_for_mount+0x34/0x44 [ 145.678102][ T6568] do_new_mount+0xfc/0x804 [ 145.678983][ T6568] path_mount+0x5ac/0xe6c [ 145.679839][ T6568] __arm64_sys_mount+0x4a0/0x5a0 [ 145.680731][ T6568] invoke_syscall+0x98/0x290 [ 145.681585][ T6568] el0_svc_common+0x13c/0x258 [ 145.682492][ T6568] do_el0_svc+0x5c/0x134 [ 145.683314][ T6568] el0_svc+0x58/0x128 [ 145.684091][ T6568] el0t_64_sync_handler+0x84/0xf0 [ 145.685075][ T6568] el0t_64_sync+0x18c/0x190 [ 145.736694][ T6574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.744907][ T6574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.210945][ T22] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 146.392461][ T22] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 146.394272][ T22] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 146.397551][ T22] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 146.399247][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.400645][ T22] usb 1-1: Product: syz [ 146.401664][ T22] usb 1-1: Manufacturer: syz [ 146.402401][ T22] usb 1-1: SerialNumber: syz [ 146.404706][ T22] usb 1-1: config 0 descriptor?? [ 146.405931][ T6586] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 146.407301][ T6586] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 146.794762][ T6600] serio: Serial port ptm0 [ 147.074516][ T6605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.076699][ T6605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.418379][ T6615] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 148.122418][ T6626] UBIFS error (pid: 6626): cannot open "(null)", error -22 [ 148.388213][ T6630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.398028][ T6630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.775322][ T22] dm9601: probe of 1-1:0.0 failed with error -71 [ 148.781256][ T22] usb 1-1: USB disconnect, device number 8 [ 149.022876][ T6661] loop4: detected capacity change from 0 to 256 [ 149.381094][ T22] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 149.544861][ T6671] FAULT_INJECTION: forcing a failure. [ 149.544861][ T6671] name failslab, interval 1, probability 0, space 0, times 0 [ 149.547532][ T6671] CPU: 1 PID: 6671 Comm: syz.1.775 Not tainted syzkaller #0 [ 149.548847][ T6671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 149.551080][ T6671] Call trace: [ 149.551696][ T6671] dump_backtrace+0x1c4/0x1f0 [ 149.552584][ T6671] show_stack+0x2c/0x3c [ 149.553391][ T6671] __dump_stack+0x30/0x40 [ 149.554201][ T6671] dump_stack_lvl+0xf4/0x15c [ 149.555058][ T6671] dump_stack+0x1c/0x5c [ 149.555863][ T6671] should_fail_ex+0x3cc/0x524 [ 149.556801][ T6671] __should_failslab+0xc0/0x11c [ 149.557754][ T6671] should_failslab+0x10/0x28 [ 149.558676][ T6671] kmem_cache_alloc+0x88/0x310 [ 149.559659][ T6671] __kernfs_new_node+0xec/0x5fc [ 149.560554][ T6671] kernfs_new_node+0x120/0x230 [ 149.561467][ T6671] __kernfs_create_file+0x60/0x2e0 [ 149.562444][ T6671] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 149.563466][ T6671] internal_create_group+0x3e8/0xb24 [ 149.564449][ T6671] sysfs_create_groups+0x60/0x134 [ 149.565413][ T6671] device_add_attrs+0xdc/0x6f8 [ 149.566386][ T6671] device_add+0x5ac/0xe4c [ 149.567243][ T6671] netdev_register_kobject+0x170/0x2f4 [ 149.568315][ T6671] register_netdevice+0xf28/0x1650 [ 149.569240][ T6671] tun_set_iff+0x624/0xb84 [ 149.570060][ T6671] __tun_chr_ioctl+0x780/0x1dac [ 149.570982][ T6671] tun_chr_ioctl+0x38/0x4c [ 149.571854][ T6671] __arm64_sys_ioctl+0x14c/0x1c8 [ 149.572823][ T6671] invoke_syscall+0x98/0x290 [ 149.573715][ T6671] el0_svc_common+0x13c/0x258 [ 149.574596][ T6671] do_el0_svc+0x5c/0x134 [ 149.575408][ T6671] el0_svc+0x58/0x128 [ 149.576192][ T6671] el0t_64_sync_handler+0x84/0xf0 [ 149.577174][ T6671] el0t_64_sync+0x18c/0x190 [ 149.637691][ T6672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.640003][ T6672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.848314][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 149.851926][ T22] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 149.855970][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.885841][ T22] usb 1-1: config 0 descriptor?? [ 149.888810][ T22] usb 1-1: probing VID:PID(0424:012C) [ 149.890847][ T22] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 149.892172][ T22] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 149.893272][ T22] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 149.894452][ T22] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 149.895653][ T22] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 150.406395][ T22] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 150.486176][ T6686] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 150.489654][ T6686] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 150.493233][ T6686] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 150.495843][ T6686] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 150.498408][ T6686] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 150.500720][ T6686] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 150.503672][ T6686] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 150.607197][ T22] usb 1-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 151.347184][ T6722] loop1: detected capacity change from 0 to 16 [ 151.356293][ T6722] erofs: (device loop1): mounted with root inode @ nid 36. [ 151.978462][ T6741] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 152.326133][ T22] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 152.455321][ T22] usb 1-1: USB disconnect, device number 9 [ 152.461883][ T22] USB vub300 remote SDIO host controller[0] now disconnected [ 152.548602][ T6755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.554014][ T6755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.653485][ T6761] FAULT_INJECTION: forcing a failure. [ 152.653485][ T6761] name failslab, interval 1, probability 0, space 0, times 0 [ 152.656166][ T6761] CPU: 1 PID: 6761 Comm: syz.2.809 Not tainted syzkaller #0 [ 152.657492][ T6761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 152.659312][ T6761] Call trace: [ 152.659948][ T6761] dump_backtrace+0x1c4/0x1f0 [ 152.660788][ T6761] show_stack+0x2c/0x3c [ 152.661525][ T6761] __dump_stack+0x30/0x40 [ 152.662463][ T6761] dump_stack_lvl+0xf4/0x15c [ 152.663464][ T6761] dump_stack+0x1c/0x5c [ 152.664369][ T6761] should_fail_ex+0x3cc/0x524 [ 152.665276][ T6761] __should_failslab+0xc0/0x11c [ 152.666174][ T6761] should_failslab+0x10/0x28 [ 152.667015][ T6761] kmem_cache_alloc+0x88/0x310 [ 152.667878][ T6761] __kernfs_new_node+0xec/0x5fc [ 152.668761][ T6761] kernfs_new_node+0x120/0x230 [ 152.669615][ T6761] __kernfs_create_file+0x60/0x2e0 [ 152.670544][ T6761] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 152.671508][ T6761] internal_create_group+0x3e8/0xb24 [ 152.672484][ T6761] sysfs_create_groups+0x60/0x134 [ 152.673418][ T6761] device_add_attrs+0xdc/0x6f8 [ 152.674287][ T6761] device_add+0x5ac/0xe4c [ 152.675067][ T6761] netdev_register_kobject+0x170/0x2f4 [ 152.676082][ T6761] register_netdevice+0xf28/0x1650 [ 152.677035][ T6761] tun_set_iff+0x624/0xb84 [ 152.677848][ T6761] __tun_chr_ioctl+0x780/0x1dac [ 152.678692][ T6761] tun_chr_ioctl+0x38/0x4c [ 152.679479][ T6761] __arm64_sys_ioctl+0x14c/0x1c8 [ 152.680374][ T6761] invoke_syscall+0x98/0x290 [ 152.681200][ T6761] el0_svc_common+0x13c/0x258 [ 152.682052][ T6761] do_el0_svc+0x5c/0x134 [ 152.682803][ T6761] el0_svc+0x58/0x128 [ 152.683526][ T6761] el0t_64_sync_handler+0x84/0xf0 [ 152.684426][ T6761] el0t_64_sync+0x18c/0x190 [ 152.880979][ C0] [ 152.881492][ C0] ================================ [ 152.882383][ C0] WARNING: inconsistent lock state [ 152.883304][ C0] syzkaller #0 Not tainted [ 152.884098][ C0] -------------------------------- [ 152.885110][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 152.886529][ C0] swapper/0/0 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 152.887778][ C0] ffff0000d4da4660 ((work_completion)(&(&host->detect)->work)){+.?.}-{0:0}, at: __flush_work+0xe4/0x1ec [ 152.889896][ C0] {SOFTIRQ-ON-W} state was registered at: [ 152.891001][ C0] lock_acquire+0x20c/0x638 [ 152.891918][ C0] __flush_work+0x10c/0x1ec [ 152.892727][ C0] __cancel_work_timer+0x2f8/0x450 [ 152.893668][ C0] cancel_delayed_work_sync+0x24/0x38 [ 152.894676][ C0] mmc_stop_host+0xd4/0x3b8 [ 152.895554][ C0] mmc_remove_host+0x20/0x68 [ 152.896483][ C0] vub300_disconnect+0x120/0x278 [ 152.897455][ C0] usb_unbind_interface+0x1a4/0x738 [ 152.898426][ C0] device_release_driver_internal+0x424/0x6e4 [ 152.899567][ C0] device_release_driver+0x28/0x38 [ 152.900513][ C0] bus_remove_device+0x294/0x384 [ 152.901426][ C0] device_del+0x580/0x990 [ 152.902256][ C0] usb_disable_device+0x33c/0x780 [ 152.903218][ C0] usb_disconnect+0x290/0x790 [ 152.904069][ C0] hub_event+0x1640/0x3e74 [ 152.904921][ C0] process_one_work+0x7e4/0x13bc [ 152.905828][ C0] worker_thread+0xafc/0xfe8 [ 152.906650][ C0] kthread+0x254/0x2e0 [ 152.907440][ C0] ret_from_fork+0x10/0x20 [ 152.908298][ C0] irq event stamp: 1073486 [ 152.909079][ C0] hardirqs last enabled at (1073486): [] __cancel_work_timer+0x2bc/0x450 [ 152.911011][ C0] hardirqs last disabled at (1073485): [] try_to_grab_pending+0xcc/0x658 [ 152.912834][ C0] softirqs last enabled at (1073264): [] handle_softirqs+0xb1c/0xc90 [ 152.914660][ C0] softirqs last disabled at (1073421): [] __do_softirq+0x14/0x20 [ 152.916386][ C0] [ 152.916386][ C0] other info that might help us debug this: [ 152.917745][ C0] Possible unsafe locking scenario: [ 152.917745][ C0] [ 152.919010][ C0] CPU0 [ 152.919603][ C0] ---- [ 152.920224][ C0] lock((work_completion)(&(&host->detect)->work)); [ 152.921465][ C0] [ 152.922101][ C0] lock((work_completion)(&(&host->detect)->work)); [ 152.923400][ C0] [ 152.923400][ C0] *** DEADLOCK *** [ 152.923400][ C0] [ 152.924924][ C0] 1 lock held by swapper/0/0: [ 152.925804][ C0] #0: ffff800008007c80 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd0/0x96c [ 152.927726][ C0] [ 152.927726][ C0] stack backtrace: [ 152.928808][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 152.930051][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 152.931946][ C0] Call trace: [ 152.932540][ C0] dump_backtrace+0x1c4/0x1f0 [ 152.933443][ C0] show_stack+0x2c/0x3c [ 152.934254][ C0] __dump_stack+0x30/0x40 [ 152.935117][ C0] dump_stack_lvl+0xf4/0x15c [ 152.936028][ C0] dump_stack+0x1c/0x5c [ 152.936829][ C0] print_usage_bug+0x4c0/0x6dc [ 152.937764][ C0] mark_lock_irq+0x858/0xab8 [ 152.938667][ C0] mark_lock+0x224/0x320 [ 152.939499][ C0] __lock_acquire+0xa88/0x6634 [ 152.940422][ C0] lock_acquire+0x20c/0x638 [ 152.941297][ C0] __flush_work+0x10c/0x1ec [ 152.942193][ C0] __cancel_work_timer+0x2f8/0x450 [ 152.943212][ C0] cancel_delayed_work_sync+0x24/0x38 [ 152.944265][ C0] mmc_free_host+0x20/0x40 [ 152.945117][ C0] vub300_inactivity_timer_expired+0x17c/0x3f8 [ 152.946309][ C0] call_timer_fn+0x1b8/0x96c [ 152.947196][ C0] __run_timers+0x478/0x6d8 [ 152.948014][ C0] run_timer_softirq+0x7c/0x114 [ 152.948876][ C0] handle_softirqs+0x318/0xc90 [ 152.949787][ C0] __do_softirq+0x14/0x20 [ 152.950620][ C0] ____do_softirq+0x14/0x20 [ 152.951436][ C0] call_on_irq_stack+0x30/0x48 [ 152.952332][ C0] do_softirq_own_stack+0x20/0x2c [ 152.953282][ C0] __irq_exit_rcu+0x23c/0x430 [ 152.954182][ C0] irq_exit_rcu+0x14/0x84 [ 152.954969][ C0] el1_interrupt+0x38/0x54 [ 152.955798][ C0] el1h_64_irq_handler+0x18/0x24 [ 152.956714][ C0] el1h_64_irq+0x64/0x68 [ 152.957479][ C0] arch_local_irq_enable+0xc/0x18 [ 152.958393][ C0] default_idle_call+0x68/0xd8 [ 152.959288][ C0] do_idle+0x368/0x600 [ 152.960035][ C0] cpu_startup_entry+0x5c/0x74 [ 152.960890][ C0] rest_init+0x2d4/0x2f0 [ 152.961638][ C0] start_kernel+0x0/0x534 [ 152.962461][ C0] start_kernel+0x488/0x534 [ 152.963325][ C0] __primary_switched+0xb8/0xc0 [ 152.964319][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:3013 [ 152.965777][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/0 [ 152.967257][ C0] preempt_count: 101, expected: 0 [ 152.968109][ C0] RCU nest depth: 0, expected: 0 [ 152.968918][ C0] INFO: lockdep is turned off. [ 152.969603][ C0] Preemption disabled at: [ 152.969616][ C0] [] schedule_preempt_disabled+0x20/0x2c [ 152.971495][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 152.972648][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 152.974266][ C0] Call trace: [ 152.974810][ C0] dump_backtrace+0x1c4/0x1f0 [ 152.975563][ C0] show_stack+0x2c/0x3c [ 152.976258][ C0] __dump_stack+0x30/0x40 [ 152.976928][ C0] dump_stack_lvl+0xf4/0x15c [ 152.977656][ C0] dump_stack+0x1c/0x5c [ 152.978318][ C0] __might_resched+0x354/0x4e0 [ 152.979153][ C0] __might_sleep+0x94/0x110 [ 152.979877][ C0] start_flush_work+0x44/0x7d0 [ 152.980707][ C0] __flush_work+0x130/0x1ec [ 152.981518][ C0] __cancel_work_timer+0x2f8/0x450 [ 152.982457][ C0] cancel_delayed_work_sync+0x24/0x38 [ 152.983438][ C0] mmc_free_host+0x20/0x40 [ 152.984225][ C0] vub300_inactivity_timer_expired+0x17c/0x3f8 [ 152.985389][ C0] call_timer_fn+0x1b8/0x96c [ 152.986366][ C0] __run_timers+0x478/0x6d8 [ 152.987213][ C0] run_timer_softirq+0x7c/0x114 [ 152.988121][ C0] handle_softirqs+0x318/0xc90 [ 152.989008][ C0] __do_softirq+0x14/0x20 [ 152.989809][ C0] ____do_softirq+0x14/0x20 [ 152.990602][ C0] call_on_irq_stack+0x30/0x48 [ 152.991508][ C0] do_softirq_own_stack+0x20/0x2c [ 152.992427][ C0] __irq_exit_rcu+0x23c/0x430 [ 152.993239][ C0] irq_exit_rcu+0x14/0x84 [ 152.994013][ C0] el1_interrupt+0x38/0x54 [ 152.994841][ C0] el1h_64_irq_handler+0x18/0x24 [ 152.995776][ C0] el1h_64_irq+0x64/0x68 [ 152.996574][ C0] arch_local_irq_enable+0xc/0x18 [ 152.997507][ C0] default_idle_call+0x68/0xd8 [ 152.998383][ C0] do_idle+0x368/0x600 [ 152.999129][ C0] cpu_startup_entry+0x5c/0x74 [ 153.000016][ C0] rest_init+0x2d4/0x2f0 [ 153.000792][ C0] start_kernel+0x0/0x534 [ 153.001576][ C0] start_kernel+0x488/0x534 [ 153.002396][ C0] __primary_switched+0xb8/0xc0 [ 153.003353][ C0] ODEBUG: object 00000000537e27b3 is NOT on stack 0000000070fbb82c, but annotated. [ 153.005028][ C0] ------------[ cut here ]------------ [ 153.005922][ C0] WARNING: CPU: 0 PID: 0 at lib/debugobjects.c:558 __debug_object_init+0x36c/0x434 [ 153.007518][ C0] Modules linked in: [ 153.008189][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 [ 153.009675][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 153.011465][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 153.013000][ C0] pc : __debug_object_init+0x36c/0x434 [ 153.014060][ C0] lr : __debug_object_init+0x36c/0x434 [ 153.015114][ C0] sp : ffff8000080078c0 [ 153.015910][ C0] x29: ffff8000080078c0 x28: dfff800000000000 x27: 0000000000000000 [ 153.017498][ C0] x26: ffff80001c928000 x25: ffff8000153c4860 x24: 0000000000000001 [ 153.019055][ C0] x23: ffff0000d817aea8 x22: 0000000000000000 x21: ffff80001c7f5c60 [ 153.020598][ C0] x20: ffff800011d0ea20 x19: ffff800008007960 x18: 1fffe00033e6df7e [ 153.022187][ C0] x17: 6332386262663037 x16: ffff8000082f2d54 x15: 206b63617473206e [ 153.023739][ C0] x14: 0000000000000001 x13: 1ffff00001000e70 x12: 0000000000000000 [ 153.025257][ C0] x11: ff00800008315498 x10: 0000000000000000 x9 : fe0c373b546e5500 [ 153.026691][ C0] x8 : fe0c373b546e5500 x7 : 0000000000000001 x6 : 0000000000000001 [ 153.028267][ C0] x5 : ffff800008007398 x4 : ffff800015484e80 x3 : ffff80000831d368 [ 153.029749][ C0] x2 : 0000000000000001 x1 : 0000000000000102 x0 : 0000000000000050 [ 153.031315][ C0] Call trace: [ 153.031928][ C0] __debug_object_init+0x36c/0x434 [ 153.032862][ C0] debug_object_init_on_stack+0x20/0x2c [ 153.033891][ C0] init_rcu_head_on_stack+0x18/0x24 [ 153.034948][ C0] __synchronize_srcu+0x1e4/0x304 [ 153.035923][ C0] synchronize_srcu+0x194/0x1ac [ 153.036882][ C0] wakeup_source_unregister+0x108/0x180 [ 153.037985][ C0] mmc_host_classdev_release+0x48/0x100 [ 153.039048][ C0] device_release+0x94/0x1b4 [ 153.039922][ C0] kobject_put+0x2a8/0x41c [ 153.040765][ C0] put_device+0x28/0x40 [ 153.041588][ C0] mmc_free_host+0x30/0x40 [ 153.042454][ C0] vub300_inactivity_timer_expired+0x17c/0x3f8 [ 153.043625][ C0] call_timer_fn+0x1b8/0x96c [ 153.044501][ C0] __run_timers+0x478/0x6d8 [ 153.045347][ C0] run_timer_softirq+0x7c/0x114 [ 153.046237][ C0] handle_softirqs+0x318/0xc90 [ 153.047121][ C0] __do_softirq+0x14/0x20 [ 153.047892][ C0] ____do_softirq+0x14/0x20 [ 153.048709][ C0] call_on_irq_stack+0x30/0x48 [ 153.049599][ C0] do_softirq_own_stack+0x20/0x2c [ 153.050537][ C0] __irq_exit_rcu+0x23c/0x430 [ 153.051399][ C0] irq_exit_rcu+0x14/0x84 [ 153.052232][ C0] el1_interrupt+0x38/0x54 [ 153.053039][ C0] el1h_64_irq_handler+0x18/0x24 [ 153.053922][ C0] el1h_64_irq+0x64/0x68 [ 153.054740][ C0] arch_local_irq_enable+0xc/0x18 [ 153.055664][ C0] default_idle_call+0x68/0xd8 [ 153.056543][ C0] do_idle+0x368/0x600 [ 153.057314][ C0] cpu_startup_entry+0x5c/0x74 [ 153.058230][ C0] rest_init+0x2d4/0x2f0 [ 153.059021][ C0] start_kernel+0x0/0x534 [ 153.059839][ C0] start_kernel+0x488/0x534 [ 153.060663][ C0] __primary_switched+0xb8/0xc0 [ 153.061527][ C0] irq event stamp: 1073486 [ 153.062306][ C0] hardirqs last enabled at (1073486): [] __cancel_work_timer+0x2bc/0x450 [ 153.064137][ C0] hardirqs last disabled at (1073485): [] try_to_grab_pending+0xcc/0x658 [ 153.065935][ C0] softirqs last enabled at (1073264): [] handle_softirqs+0xb1c/0xc90 [ 153.067696][ C0] softirqs last disabled at (1073421): [] __do_softirq+0x14/0x20 [ 153.069517][ C0] ---[ end trace 0000000000000000 ]--- [ 153.070553][ C0] BUG: scheduling while atomic: swapper/0/0/0x00000102 [ 153.071723][ C0] INFO: lockdep is turned off. [ 153.072481][ C0] Modules linked in: [ 153.073150][ C0] Preemption disabled at: [ 153.073163][ C0] [] schedule_preempt_disabled+0x20/0x2c [ 153.075109][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 [ 153.076551][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 153.078301][ C0] Call trace: [ 153.078894][ C0] dump_backtrace+0x1c4/0x1f0 [ 153.079726][ C0] show_stack+0x2c/0x3c [ 153.080467][ C0] __dump_stack+0x30/0x40 [ 153.081241][ C0] dump_stack_lvl+0xf4/0x15c [ 153.082081][ C0] dump_stack+0x1c/0x5c [ 153.082837][ C0] __schedule_bug+0x124/0x1bc [ 153.083727][ C0] __schedule+0xe48/0x1a6c [ 153.084590][ C0] schedule+0xc4/0x170 [ 153.085394][ C0] schedule_timeout+0xc8/0x2f4 [ 153.086329][ C0] do_wait_for_common+0x28c/0x3ec [ 153.087338][ C0] wait_for_completion+0x44/0x5c [ 153.088250][ C0] __synchronize_srcu+0x26c/0x304 [ 153.089151][ C0] synchronize_srcu+0x194/0x1ac [ 153.090048][ C0] wakeup_source_unregister+0x108/0x180 [ 153.091111][ C0] mmc_host_classdev_release+0x48/0x100 [ 153.092179][ C0] device_release+0x94/0x1b4 [ 153.093009][ C0] kobject_put+0x2a8/0x41c [ 153.093879][ C0] put_device+0x28/0x40 [ 153.094696][ C0] mmc_free_host+0x30/0x40 [ 153.095546][ C0] vub300_inactivity_timer_expired+0x17c/0x3f8 [ 153.096722][ C0] call_timer_fn+0x1b8/0x96c [ 153.097574][ C0] __run_timers+0x478/0x6d8 [ 153.098458][ C0] run_timer_softirq+0x7c/0x114 [ 153.099339][ C0] handle_softirqs+0x318/0xc90 [ 153.100263][ C0] __do_softirq+0x14/0x20 [ 153.101097][ C0] ____do_softirq+0x14/0x20 [ 153.101921][ C0] call_on_irq_stack+0x30/0x48 [ 153.102804][ C0] do_softirq_own_stack+0x20/0x2c [ 153.103686][ C0] __irq_exit_rcu+0x23c/0x430 [ 153.104600][ C0] irq_exit_rcu+0x14/0x84 [ 153.105443][ C0] el1_interrupt+0x38/0x54 [ 153.106293][ C0] el1h_64_irq_handler+0x18/0x24 [ 153.107231][ C0] el1h_64_irq+0x64/0x68 [ 153.108038][ C0] arch_local_irq_enable+0xc/0x18 [ 153.108994][ C0] default_idle_call+0x68/0xd8 [ 153.109911][ C0] do_idle+0x368/0x600 [ 153.110712][ C0] cpu_startup_entry+0x5c/0x74 [ 153.111653][ C0] rest_init+0x2d4/0x2f0 [ 153.112445][ C0] start_kernel+0x0/0x534 [ 153.113256][ C0] start_kernel+0x488/0x534 [ 153.114126][ C0] __primary_switched+0xb8/0xc0 [ 153.115081][ T0] bad: scheduling from the idle thread! [ 153.116028][ T0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 [ 153.117436][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 153.119049][ T0] Call trace: [ 153.119609][ T0] dump_backtrace+0x1c4/0x1f0 [ 153.120391][ T0] show_stack+0x2c/0x3c [ 153.121108][ T0] __dump_stack+0x30/0x40 [ 153.121943][ T0] dump_stack_lvl+0xf4/0x15c [ 153.122823][ T0] dump_stack+0x1c/0x5c [ 153.123575][ T0] dequeue_task_idle+0x34/0x90 [ 153.124460][ T0] __schedule+0x518/0x1a6c [ 153.125255][ T0] schedule+0xc4/0x170 [ 153.126024][ T0] schedule_timeout+0xc8/0x2f4 [ 153.126934][ T0] do_wait_for_common+0x28c/0x3ec [ 153.127896][ T0] wait_for_completion+0x44/0x5c [ 153.128860][ T0] __synchronize_srcu+0x26c/0x304 [ 153.129844][ T0] synchronize_srcu+0x194/0x1ac [ 153.130757][ T0] wakeup_source_unregister+0x108/0x180 [ 153.131816][ T0] mmc_host_classdev_release+0x48/0x100 [ 153.132802][ T0] device_release+0x94/0x1b4 [ 153.133620][ T0] kobject_put+0x2a8/0x41c [ 153.134405][ T0] put_device+0x28/0x40 [ 153.135158][ T0] mmc_free_host+0x30/0x40 [ 153.136027][ T0] vub300_inactivity_timer_expired+0x17c/0x3f8 [ 153.137138][ T0] call_timer_fn+0x1b8/0x96c [ 153.137988][ T0] __run_timers+0x478/0x6d8 [ 153.138795][ T0] run_timer_softirq+0x7c/0x114 [ 153.139763][ T0] handle_softirqs+0x318/0xc90 [ 153.140720][ T0] __do_softirq+0x14/0x20 [ 153.141581][ T0] ____do_softirq+0x14/0x20 [ 153.142463][ T0] call_on_irq_stack+0x30/0x48 [ 153.143408][ T0] do_softirq_own_stack+0x20/0x2c [ 153.144406][ T0] __irq_exit_rcu+0x23c/0x430 [ 153.145287][ T0] irq_exit_rcu+0x14/0x84 [ 153.146115][ T0] el1_interrupt+0x38/0x54 [ 153.146954][ T0] el1h_64_irq_handler+0x18/0x24 [ 153.147906][ T0] el1h_64_irq+0x64/0x68 [ 153.148729][ T0] arch_local_irq_enable+0xc/0x18 [ 153.149668][ T0] default_idle_call+0x68/0xd8 [ 153.150602][ T0] do_idle+0x368/0x600 [ 153.151400][ T0] cpu_startup_entry+0x5c/0x74 [ 153.152322][ T0] rest_init+0x2d4/0x2f0 [ 153.153123][ T0] start_kernel+0x0/0x534 [ 153.153950][ T0] start_kernel+0x488/0x534 [ 153.154825][ T0] __primary_switched+0xb8/0xc0 [ 153.155811][ C0] ================================================================== [ 153.157201][ C0] BUG: KASAN: stack-out-of-bounds in kasan_save_stack+0x30/0x70 [ 153.158508][ C0] Write of size 512 at addr ffff800008007890 by task swapper/0/0 [ 153.159841][ C0] [ 153.160227][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 [ 153.161781][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 153.163681][ C0] Call trace: [ 153.164292][ C0] dump_backtrace+0x1c4/0x1f0 [ 153.165192][ C0] show_stack+0x2c/0x3c [ 153.165995][ C0] __dump_stack+0x30/0x40 [ 153.166767][ C0] dump_stack_lvl+0xf4/0x15c [ 153.167563][ C0] print_address_description+0x88/0x218 [ 153.168575][ C0] print_report+0x50/0x68 [ 153.169365][ C0] kasan_report+0xa8/0xfc [ 153.170156][ C0] kasan_check_range+0x258/0x290 [ 153.171132][ C0] memset+0x40/0x70 [ 153.171853][ C0] kasan_save_stack+0x30/0x70 [ 153.172714][ C0] __kasan_record_aux_stack+0xc0/0xdc [ 153.173685][ C0] kasan_record_aux_stack_noalloc+0x14/0x20 [ 153.174762][ C0] insert_work+0x64/0x37c [ 153.175572][ C0] __queue_work+0xd00/0x1280 [ 153.176490][ C0] delayed_work_timer_fn+0x74/0x94 [ 153.177464][ C0] call_timer_fn+0x1b8/0x96c [ 153.178359][ C0] __run_timers+0x4d0/0x6d8 [ 153.179229][ C0] run_timer_softirq+0x7c/0x114 [ 153.180158][ C0] handle_softirqs+0x318/0xc90 [ 153.181066][ C0] __do_softirq+0x14/0x20 [ 153.181800][ C0] ____do_softirq+0x14/0x20 [ 153.182592][ C0] call_on_irq_stack+0x30/0x48 [ 153.183468][ C0] [ 153.183875][ C0] The buggy address belongs to a 8-page vmalloc region starting at 0xffff800008000000 allocated at init_IRQ+0x14/0x24 [ 153.186145][ C0] The buggy address belongs to the physical page: [ 153.187264][ C0] page:00000000ca9aa935 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1001ce [ 153.189169][ C0] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 153.190469][ C0] raw: 05ffc00000000000 0000000000000000 dead000000000122 0000000000000000 [ 153.191975][ C0] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 153.193524][ C0] page dumped because: kasan: bad access detected [ 153.194735][ C0] [ 153.195154][ C0] Memory state around the buggy address: [ 153.196161][ C0] ffff800008007780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 153.197574][ C0] ffff800008007800: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 f3 [ 153.199045][ C0] >ffff800008007880: f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 [ 153.200504][ C0] ^ [ 153.201352][ C0] ffff800008007900: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 00 [ 153.202891][ C0] ffff800008007980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 153.204456][ C0] ================================================================== [ 153.206207][ T0] Unable to handle kernel execute from non-executable memory at virtual address ffff0000caa69818 [ 153.207952][ T0] KASAN: maybe wild-memory-access in range [0xfffc00065534c0c0-0xfffc00065534c0c7] [ 153.209618][ T0] Mem abort info: [ 153.210324][ T0] ESR = 0x000000008600000f [ 153.211185][ T0] EC = 0x21: IABT (current EL), IL = 32 bits [ 153.212327][ T0] SET = 0, FnV = 0 [ 153.213011][ T0] EA = 0, S1PTW = 0 [ 153.213761][ T0] FSC = 0x0f: level 3 permission fault [ 153.214752][ T0] swapper pgtable: 4k pages, 48-bit VAs, pgdp=000000020dd40000 [ 153.216112][ T0] [ffff0000caa69818] pgd=180000023fff7003, p4d=180000023fff7003, pud=180000023f413003, pmd=180000023f3bd003, pte=00e800010aa69707 [ 153.218592][ T0] Internal error: Oops: 000000008600000f [#1] PREEMPT SMP [ 153.219917][ T0] Modules linked in: [ 153.220653][ T0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B W syzkaller #0 [ 153.222152][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 153.223924][ T0] pstate: 424000c5 (nZcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 153.225276][ T0] pc : 0xffff0000caa69818 [ 153.226025][ T0] lr : 0xffff0000caa69818 [ 153.226847][ T0] sp : ffff800008007320 [ 153.227588][ T0] x29: 0000000000000008 x28: ffff8000153c4840 x27: 0000000000000000 [ 153.229111][ T0] x26: 0000000000000002 x25: 0000000000000382 x24: ffff8000152f69f8 [ 153.230640][ T0] x23: 1ffff00002a78909 x22: dfff800000000000 x21: ffff0000c09b3818 [ 153.232061][ T0] x20: ffff8000153c4840 x19: ffff8000153c4848 x18: 1fffe00033e6df7e [ 153.233563][ T0] x17: 3004320000020601 x16: ffff800011ba0e90 x15: 0000000000000000 [ 153.234984][ T0] x14: 0000000000000001 x13: 1fffe00018136833 x12: 0000000000000000 [ 153.236479][ T0] x11: ff0080000a977920 x10: 0000000000000003 x9 : 00000000000000c0 [ 153.237952][ T0] x8 : 0000000004200002 x7 : 0000000000000000 x6 : ffff8000082c1d58 [ 153.239485][ T0] x5 : 0000000000000000 x4 : 0000000000000008 x3 : ffff8000082f2e68 [ 153.240955][ T0] x2 : 0000000000000001 x1 : ffff800011cee680 x0 : ffff8000081ae3b4 [ 153.242564][ T0] Call trace: [ 153.243203][ T0] 0xffff0000caa69818 [ 153.243941][ T0] Code: 00000000 00000000 cb8b2410 ffff0000 (00000000) [ 153.245181][ T0] ---[ end trace 0000000000000000 ]--- [ 153.506965][ T0] Kernel panic - not syncing: Oops: Fatal exception [ 153.508213][ T0] SMP: stopping secondary CPUs [ 153.509073][ T0] Kernel Offset: disabled [ 153.509821][ T0] CPU features: 0x0a0000,000f0097,a65bfea7 [ 153.510820][ T0] Memory Limit: none [ 153.794933][ T0] Rebooting in 86400 seconds..