last executing test programs: 51.593646395s ago: executing program 4 (id=235): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001500)={0x60, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8, 0x6, r4}}}]}}]}, 0x60}}, 0x0) 51.446369812s ago: executing program 4 (id=238): r0 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000000)='7', 0x1) sendto(r0, &(0x7f0000000140)="120000001000e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 50.330598004s ago: executing program 4 (id=247): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x7fff) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) ioctl$sock_SIOCOUTQNSD(r1, 0x4010618a, &(0x7f0000000000)) 48.02880322s ago: executing program 4 (id=265): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 47.871258987s ago: executing program 4 (id=268): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r0, &(0x7f00000000c0)={0x18, 0x0, r1, {0x7}}, 0x18) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x6000) 47.069403405s ago: executing program 4 (id=274): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1d7) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0000000400000004000000"], 0x50) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x90) write(r0, &(0x7f0000000000)='3', 0x4e) fanotify_init(0x20, 0x40000) 46.95338248s ago: executing program 32 (id=274): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1d7) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0000000400000004000000"], 0x50) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x90) write(r0, &(0x7f0000000000)='3', 0x4e) fanotify_init(0x20, 0x40000) 4.228924995s ago: executing program 5 (id=554): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) umount2(&(0x7f0000000000)='./file0\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000100)={0x50, 0xffffffffffffff8c, 0xffffffffffffffff, {0x7, 0x2b, 0x0, 0x300900, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.975415207s ago: executing program 5 (id=557): mmap$IORING_OFF_SQ_RING(0x0, 0xd00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) 3.655850042s ago: executing program 5 (id=565): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r1 = fanotify_init(0x2, 0x2) fanotify_mark(r1, 0x121, 0x4000103b, r0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r2, &(0x7f0000002140)=""/17, 0x11, 0x0) recvfrom$inet_nvme(r2, 0x0, 0x0, 0x1, 0x0, 0x0) 3.47281339s ago: executing program 5 (id=569): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 3.212139971s ago: executing program 0 (id=571): r0 = socket(0x1, 0x5, 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20000) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x201d}) 3.003346281s ago: executing program 0 (id=574): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='westwood', 0x8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100114, 0x0, 0xfffffffffffffd25) 2.785560182s ago: executing program 2 (id=577): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$cgroup_type(r2, 0x0, 0x0) write$9p(r1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 2.671371796s ago: executing program 2 (id=578): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES32], 0x1, 0x1ba, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1.985551968s ago: executing program 2 (id=582): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x81, 0x0, 0x4000}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3d, 0x0, 0x1, 0xffffffff}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 1.909414362s ago: executing program 5 (id=583): setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x1}, 0x8) 1.892170663s ago: executing program 1 (id=584): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/current\x00') pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)="a5ce", 0xfed0) r2 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0xcea5, 0x6) 1.760801299s ago: executing program 1 (id=585): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x7) 1.577618307s ago: executing program 3 (id=587): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0xb, 0x1, '#@:-{:\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x80408c0) 1.477655192s ago: executing program 1 (id=588): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x11000000}, 0x3, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2, r1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x0) 1.398771946s ago: executing program 2 (id=589): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r0, r1, 0x0, 0x8) 1.397267816s ago: executing program 0 (id=599): mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x1004, 0x0, 0xfd, 0x0, 0x0) mount$bind(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2115090, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x102) 1.373800197s ago: executing program 3 (id=590): prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) pipe2(0x0, 0x800) 1.29457946s ago: executing program 1 (id=591): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 1.250615682s ago: executing program 0 (id=592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r2}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xc8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40) 774.528645ms ago: executing program 2 (id=593): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x2, 0x37, 0x34, 0x65, 0x0, 0x11, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@noop]}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x3, 0x1, 0xf800, 0x67, 0x7, 0x8, 0x33, 0x8, @multicast2, @private=0xa010100}}}}, 0x42) 763.874985ms ago: executing program 3 (id=594): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x9, 0x0, 0x5, 0x0, 0x5, 0x0, 0xfd, 0x2}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000480)={r1}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={r1, @in6={{0xa, 0x4e23, 0x3, @empty, 0x1}}, 0x9, 0x1, 0x981d, 0x22a, 0x11, 0xe77, 0x7}, &(0x7f0000000140)=0x9c) 720.112577ms ago: executing program 5 (id=595): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x3, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@private1, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010101}}}], 0x20}, 0x20000890) 698.907378ms ago: executing program 1 (id=604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000a0900010073797a300000000040000000030a010400000000000000000200000a0900010073797a30000000000900030073797a300000000014000480080001400000000308000240000000004c000000060a010400000000000000000200000a0900010073797a30000000000900020073797a3000000000200004801c0001800a00010071756575650000000c000280060001400000000014000000110001"], 0xd4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r2, &(0x7f0000003440)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000000480)="562185d6215f1831c8c49d949e282c1aa322d4bca02043fecb5b8f866ffb8d8ade1fffa3d9c9a857e09a8b5f4a6b0231f004e95f732625ccdb862f305dea21456a464912928f225fc39b2db3237b0d972f0378337052df4464cfa28a0da8883b1805eb838aff56a5406c8d6e283dea267885125a75c752c9e5da3dc45dedc05914c9dfef268faec245d745f5538bbe74bc337d69cce2e25e2c414375c9bb5a", 0x9f}, {&(0x7f0000000a40)="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", 0x52a}], 0x2, &(0x7f0000000940)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010101}}}], 0x20}}], 0x1, 0x0) 609.370602ms ago: executing program 3 (id=596): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0x48, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x0, 0x0, 0x0, 0x2000, 0xfa, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x2aa6, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x3, 0x4, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0x2, 0xfff, 0x2, 0x1}, 0x4, [0x7fff, 0x8000, 0x7b, 0x3, 0x1, 0x5, 0x9, 0x5, 0x9, 0x80000001, 0x86, 0x0, 0x3, 0x7ff, 0x8001, 0xf, 0x9, 0x503e47c1, 0xcde, 0x5, 0x3, 0x0, 0x5, 0x0, 0x6, 0x6, 0x498c, 0x2, 0x10, 0x4, 0x0, 0xe, 0x80000001, 0x6, 0x3, 0x2, 0x9e08, 0xc3, 0x8, 0xa, 0x10, 0x4430, 0xfffffffa, 0x5, 0x8, 0x109, 0x25, 0x7, 0x8, 0x1, 0x200, 0x9, 0x0, 0x1, 0x0, 0x8, 0x9, 0xd, 0x0, 0x9, 0x1, 0xc4b2, 0x5a, 0x9], [0x8, 0x5, 0xb54, 0x7, 0x6, 0x3, 0x8, 0xb9, 0x7, 0x1, 0x7fffffff, 0x2, 0x3, 0x7f, 0x2f0, 0x3, 0x0, 0x80000000, 0x6, 0x7fff, 0x0, 0x0, 0xff7, 0x8, 0x4, 0x4, 0xfffffef9, 0x9, 0x8, 0x7, 0x6994412a, 0x3, 0x78, 0x8001, 0x5, 0x3, 0xe45e, 0x4000000, 0x8, 0x7f, 0x2, 0x80000001, 0x9, 0x80, 0x0, 0x200, 0x5, 0x81, 0x0, 0x97, 0x8, 0x80000000, 0x8a0a, 0x80000000, 0x9, 0xfffff170, 0x6, 0x101, 0x7761, 0x100, 0xfffffff8, 0x3, 0x6, 0x8000], [0x3eda, 0x6, 0x3, 0x20dc, 0x2, 0x200, 0x4, 0x8f4ab43, 0x1, 0x9e6, 0x9, 0x6, 0x31f7, 0x1, 0x5, 0x9, 0xd0, 0xb8b0, 0xb, 0x8000, 0x3, 0x8, 0xffff, 0xf85, 0x4f, 0x3, 0x0, 0x6, 0xfffffffc, 0x7, 0xff, 0x5, 0xd, 0x8, 0xb84, 0x7, 0x8, 0x8000, 0x4e501595, 0x3, 0x50000, 0x1, 0x10000, 0x9, 0x9, 0xfff, 0x3, 0x5, 0x4, 0x5, 0xfff, 0x2, 0x2, 0x400, 0x2, 0x2, 0xfffffff9, 0x631ab3bb, 0x5, 0x5c5b, 0x503, 0x6, 0x1, 0x2], [0x9, 0x0, 0x400, 0x5, 0xffffffff, 0x0, 0x1, 0xb1e, 0x0, 0x47, 0x2, 0x1, 0xfffffffb, 0x8, 0x81, 0x7, 0x0, 0x6, 0xff000000, 0x5, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, 0x0, 0x7, 0x9, 0x8, 0x0, 0x9, 0xf0d, 0x5, 0x2, 0x101, 0x5, 0x9, 0x7fff, 0x0, 0x8, 0xb, 0x3, 0x0, 0x9, 0x2, 0x4, 0x10001, 0x1ff, 0x3ff, 0x6, 0x80, 0x1, 0xb, 0x1ff, 0x0, 0x0, 0x4, 0x72, 0xdb35, 0x8, 0x5, 0x8001, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 387.425432ms ago: executing program 0 (id=597): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000300), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x600, 0x2, &(0x7f0000000200)=[r2, 0x0], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r4, r3, r4], &(0x7f00000003c0), 0x0, 0x2}) 385.019412ms ago: executing program 3 (id=598): r0 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001400b595feffffe40f0000000a003efe", @ANYRES32=r2, @ANYBLOB="1400020000000000000000000000ffff0000000014000100"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 285.694397ms ago: executing program 1 (id=600): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='westwood', 0x8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100114, 0x0, 0xfffffffffffffd25) 53.993368ms ago: executing program 33 (id=600): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='westwood', 0x8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100114, 0x0, 0xfffffffffffffd25) 43.932768ms ago: executing program 0 (id=602): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xfefffffd, 0x5, 0x0, 0xfd, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000080000200000000001900", 0x3c}, 0x60) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0xe0cba8b119564bb4, 0x0, 0x46, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x2d}, 0x60) 11.12259ms ago: executing program 2 (id=603): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='./file0/file0\x00') 0s ago: executing program 3 (id=605): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) kernel console output (not intermixed with test programs): ing implementation "cts-cbc-aes-aesni" [ 74.132015][ T4413] loop1: detected capacity change from 0 to 32768 [ 74.174893][ T4416] loop4: detected capacity change from 0 to 131072 [ 74.221645][ T4413] ======================================================= [ 74.221645][ T4413] WARNING: The mand mount option has been deprecated and [ 74.221645][ T4413] and is ignored by this kernel. Remove the mand [ 74.221645][ T4413] option from the mount to silence this warning. [ 74.221645][ T4413] ======================================================= [ 74.256709][ T4411] F2FS-fs (loop0): invalid crc value [ 74.275935][ T4416] F2FS-fs (loop4): invalid crc value [ 74.292913][ T4413] jfs: Unrecognized mount option "00000000000000000000000ÿÿÿÿ" or missing value [ 74.327408][ T4411] F2FS-fs (loop0): Found nat_bits in checkpoint [ 74.370475][ T4411] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 74.383908][ T4411] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 74.432219][ T4416] F2FS-fs (loop4): Found nat_bits in checkpoint [ 74.479482][ T4416] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 74.497349][ T4416] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 74.814716][ T4435] loop1: detected capacity change from 0 to 1764 [ 75.274271][ T4441] loop4: detected capacity change from 0 to 1024 [ 75.430499][ T4424] XFS: attr2 mount option is deprecated. [ 75.624442][ T4424] XFS (loop3): Mounting V5 Filesystem [ 75.836393][ T4424] XFS (loop3): Ending clean mount [ 76.005930][ T4471] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 76.091351][ T4192] XFS (loop3): Unmounting Filesystem [ 76.132013][ T26] audit: type=1800 audit(1790064892.797:2): pid=4473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.47" name="c_sync" dev="configfs" ino=33197 res=0 errno=0 [ 76.341845][ T4481] netlink: 40 bytes leftover after parsing attributes in process `syz.1.50'. [ 76.486857][ T1345] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.538205][ T4486] device veth3 entered promiscuous mode [ 76.861019][ T1345] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.872720][ T1345] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.966908][ T1345] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 76.988502][ T1345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 76.996574][ T1345] usb 1-1: SerialNumber: syz [ 77.209636][ T4512] set_capacity_and_notify: 1 callbacks suppressed [ 77.209655][ T4512] loop2: detected capacity change from 0 to 512 [ 77.241858][ T4512] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 77.267720][ T4512] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.291785][ T1345] usb 1-1: 0:2 : does not exist [ 77.323771][ T4512] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8001e119, mo2=0000] [ 77.363104][ T4512] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3894: comm syz.2.62: Allocating blocks 42-43 which overlap fs metadata [ 77.393813][ T1345] usb 1-1: USB disconnect, device number 2 [ 77.395327][ T4512] Quota error (device loop2): write_blk: dquota write failed [ 77.415171][ T4512] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 77.435648][ T4512] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.62: Failed to acquire dquot type 0 [ 77.448889][ T4512] EXT4-fs (loop2): 1 truncate cleaned up [ 77.454669][ T4512] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,norecovery,acl,resgid=0x000000000000ee01,norecovery,noauto_da_alloc,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 77.540212][ T4520] loop4: detected capacity change from 0 to 256 [ 77.565380][ T4512] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3894: comm syz.2.62: Allocating blocks 42-64 which overlap fs metadata [ 77.586045][ T4520] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.616046][ T4520] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 77.647134][ T4520] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0x8b37669b, utbl_chksum : 0xe619d30d) [ 77.760410][ T4311] udevd[4311]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.960138][ T4528] loop3: detected capacity change from 0 to 1764 [ 78.111897][ T4536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.71'. [ 78.216929][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.680788][ T4556] loop4: detected capacity change from 0 to 4096 [ 78.720918][ T4556] EXT4-fs (loop4): Mount option "dioread_lock" incompatible with ext2 [ 78.797150][ T23] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 78.816710][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.824766][ T23] usb 2-1: Product: syz [ 78.856068][ T23] usb 2-1: Manufacturer: syz [ 78.869461][ T23] usb 2-1: SerialNumber: syz [ 78.886062][ T23] usb 2-1: config 0 descriptor?? [ 78.890359][ T4552] loop3: detected capacity change from 0 to 32768 [ 78.958482][ T23] ch341 2-1:0.0: ch341-uart converter detected [ 78.966072][ T4552] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.79 (4552) [ 79.051870][ T4552] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 79.061353][ T4552] BTRFS info (device loop3): enabling disk space caching [ 79.061451][ T4548] loop2: detected capacity change from 0 to 40427 [ 79.068772][ T4552] BTRFS info (device loop3): force clearing of disk cache [ 79.082910][ T4552] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 79.093081][ T4552] BTRFS info (device loop3): use zstd compression, level 3 [ 79.126676][ T4548] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 79.138885][ T4548] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 79.142013][ T4552] BTRFS info (device loop3): disk space caching is enabled [ 79.151132][ T4548] F2FS-fs (loop2): invalid crc value [ 79.163789][ T4548] F2FS-fs (loop2): Found nat_bits in checkpoint [ 79.191842][ T4552] BTRFS info (device loop3): has skinny extents [ 79.261759][ T4548] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 79.269457][ T4548] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 79.490372][ T4552] BTRFS info (device loop3): enabling ssd optimizations [ 79.542188][ T4552] BTRFS info (device loop3): clearing free space tree [ 79.558893][ T4552] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 79.582844][ T4552] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 79.746716][ T1345] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 80.031599][ T1345] usb 1-1: Using ep0 maxpacket: 8 [ 80.051428][ T23] usb 2-1: ch341-uart converter now attached to ttyUSB0 [ 80.326826][ T4233] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 80.330152][ T1345] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 80.344062][ T4599] usb 2-1: USB disconnect, device number 2 [ 80.356467][ T4599] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 80.375617][ T1345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.392512][ T4599] ch341 2-1:0.0: device disconnected [ 80.402404][ T1345] usb 1-1: Product: syz [ 80.425894][ T1345] usb 1-1: Manufacturer: syz [ 80.444118][ T1345] usb 1-1: SerialNumber: syz [ 80.455727][ T1345] usb 1-1: config 0 descriptor?? [ 80.475654][ T4609] process 'syz.2.91' launched './file1' with NULL argv: empty string added [ 80.511606][ T1345] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 80.559101][ T4613] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.756891][ T4233] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 80.765686][ T4233] usb 5-1: config 0 has no interface number 0 [ 80.772916][ T4233] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 80.916946][ T4233] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 80.930016][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 80.938575][ T4233] usb 5-1: Manufacturer: syz [ 80.943322][ T4233] usb 5-1: SerialNumber: syz [ 80.952368][ T4233] usb 5-1: config 0 descriptor?? [ 80.989393][ T4624] loop1: detected capacity change from 0 to 1024 [ 81.084590][ T4624] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,noquota,data_err=ignore,jqfmt=vfsv1,noquota,nojournal_checksum,errors=continue,bsdgroups,grpquota,user_xattr,abort,,errors=continue. Quota mode: writeback. [ 81.176375][ T4391] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 81.192800][ T4391] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 320 with error 28 [ 81.210357][ T4391] EXT4-fs (loop1): This should not happen!! Data will be lost [ 81.210357][ T4391] [ 81.220563][ T4391] EXT4-fs (loop1): Total free blocks count 0 [ 81.226630][ T4391] EXT4-fs (loop1): Free/Dirty block details [ 81.232857][ T4391] EXT4-fs (loop1): free_blocks=20480 [ 81.238557][ T4391] EXT4-fs (loop1): dirty_blocks=320 [ 81.243995][ T4391] EXT4-fs (loop1): Block reservation details [ 81.250104][ T4391] EXT4-fs (loop1): i_reserved_data_blocks=20 [ 81.457245][ T4233] usbtouchscreen: probe of 5-1:0.214 failed with error -71 [ 81.506915][ T4233] usb 5-1: USB disconnect, device number 3 [ 81.596990][ T1345] gspca_sonixj: reg_w1 err -71 [ 81.732993][ T1345] sonixj: probe of 1-1:0.0 failed with error -71 [ 81.766937][ T1345] usb 1-1: USB disconnect, device number 3 [ 82.286694][ T1109] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 82.326664][ T4234] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 82.418303][ T4679] loop5: detected capacity change from 0 to 7 [ 82.457202][ T4679] Dev loop5: unable to read RDB block 7 [ 82.463038][ T4679] loop5: unable to read partition table [ 82.511151][ T4679] loop5: partition table beyond EOD, truncated [ 82.536740][ T4233] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.556914][ T4679] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 82.656945][ T1109] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 82.676863][ T1109] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.688480][ T4234] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.704869][ T4234] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 82.715720][ T1109] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.726179][ T4234] usb 5-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 82.746656][ T1109] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 82.858364][ T1109] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 82.877351][ T1109] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 82.902050][ T1109] usb 2-1: Manufacturer: syz [ 82.920103][ T1109] usb 2-1: config 0 descriptor?? [ 82.938205][ T4234] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 82.956148][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.967866][ T4233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.981696][ T4234] usb 5-1: Product: syz [ 82.985907][ T4234] usb 5-1: Manufacturer: syz [ 83.006029][ T4234] usb 5-1: SerialNumber: syz [ 83.027593][ T4233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.051630][ T4233] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.082426][ T4233] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.109741][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.133688][ T4233] usb 4-1: config 0 descriptor?? [ 83.185833][ T4706] loop2: detected capacity change from 0 to 1024 [ 83.438258][ T1109] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 83.446193][ T1109] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 83.465391][ T1109] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 83.516821][ C0] usb 5-1: received EP1 urb->status = -2 [ 83.523062][ T4234] usb 5-1: unable to init card! (ret=-110) [ 83.530337][ T4234] snd-usb-caiaq: probe of 5-1:1.0 failed with error -110 [ 83.629048][ T4233] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 83.642824][ T4233] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 83.651362][ T4233] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 83.685257][ T4593] usb 5-1: USB disconnect, device number 4 [ 83.710703][ T4234] usb 2-1: USB disconnect, device number 3 [ 83.717416][ T4233] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw1: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 83.834951][ T1109] usb 4-1: USB disconnect, device number 2 [ 83.889749][ T4714] fido_id[4714]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 84.936597][ C1] sched: RT throttling activated [ 85.014405][ T4734] netlink: 51 bytes leftover after parsing attributes in process `syz.1.126'. [ 85.262808][ T4234] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 85.582612][ T4723] loop0: detected capacity change from 0 to 262144 [ 85.646852][ T4234] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.711436][ T4723] F2FS-fs (loop0): Found nat_bits in checkpoint [ 85.721691][ T4234] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.785075][ T4723] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 85.820441][ T4234] usb 5-1: config 0 interface 0 has no altsetting 0 [ 85.862852][ T4234] usb 5-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 85.900023][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.967624][ T4234] usb 5-1: config 0 descriptor?? [ 86.102763][ T4741] loop1: detected capacity change from 0 to 32768 [ 86.112433][ T4757] IPVS: rr: UDP [::1]:8080 - no destination available [ 86.479606][ T4234] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:06A3:0CD0.0005/input/input6 [ 86.590147][ T4234] saitek 0003:06A3:0CD0.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.4-1/input0 [ 86.798720][ T7] cfg80211: failed to load regulatory.db [ 87.086787][ T4599] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 87.136707][ T4761] loop3: detected capacity change from 0 to 32768 [ 87.252594][ T7] usb 5-1: USB disconnect, device number 5 [ 87.497091][ T4599] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 87.516667][ T4599] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 87.747059][ T4599] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 87.766708][ T4599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.821290][ T4599] usb 2-1: Product: syz [ 87.836216][ T4599] usb 2-1: Manufacturer: syz [ 87.846344][ T4599] usb 2-1: SerialNumber: syz [ 88.023531][ T4794] gadgetfs: bound to dummy_udc driver [ 88.041309][ T4780] loop2: detected capacity change from 0 to 32768 [ 88.086754][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 88.153116][ T4599] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 88.181324][ T4799] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 88.220504][ T4799] i2c-slave-eeprom: probe of 0-1022 failed with error -95 [ 88.244047][ T4799] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 88.336718][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 88.414889][ T4806] sd 0:0:1:0: PR command failed: 2 [ 88.425046][ T4806] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 88.456905][ T7] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 88.459602][ T4806] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 88.465149][ T7] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.465177][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.542937][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 88.567420][ T7] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.588734][ T4599] usb 2-1: USB disconnect, device number 4 [ 88.607803][ T7] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 88.620062][ T4599] usblp0: removed [ 88.643403][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.916823][ T7] usb 4-1: usb_control_msg returned -32 [ 88.922799][ T7] usbtmc 4-1:16.0: can't read capabilities [ 88.977799][ T4816] loop2: detected capacity change from 0 to 256 [ 89.062584][ T4808] loop0: detected capacity change from 0 to 32768 [ 89.064424][ T4816] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 89.132935][ T26] audit: type=1800 audit(1790064905.797:3): pid=4816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.160" name="file1" dev="loop2" ino=1048593 res=0 errno=0 [ 89.160281][ T4808] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.157 (4808) [ 89.197867][ T4808] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 89.198269][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 89.216060][ T4808] BTRFS info (device loop0): setting nodatasum [ 89.224156][ T4808] BTRFS info (device loop0): force zlib compression, level 3 [ 89.236787][ T4808] BTRFS info (device loop0): metadata ratio 1 [ 89.250491][ T4816] exFAT-fs (loop2): Filesystem has been set read-only [ 89.260261][ T4808] BTRFS info (device loop0): turning on flush-on-commit [ 89.270624][ T4816] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805f4b21e0 iblock : 8, err : -5) [ 89.286509][ T4808] BTRFS info (device loop0): allowing degraded mounts [ 89.297016][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 89.303146][ T4808] BTRFS info (device loop0): using free space tree [ 89.313000][ T4816] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805f4b21e0 iblock : 8, err : -5) [ 89.325486][ T4808] BTRFS info (device loop0): has skinny extents [ 89.345422][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 89.358397][ T4816] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805f4b21e0 iblock : 9, err : -5) [ 89.370168][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 89.401855][ T4816] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805f4b21e0 iblock : 10, err : -5) [ 89.450451][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 89.464740][ T4816] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805f4b21e0 iblock : 11, err : -5) [ 89.481454][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 89.489813][ T4816] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805f4b21e0 iblock : 12, err : -5) [ 89.505437][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 89.529448][ T4816] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805f4b21e0 iblock : 13, err : -5) [ 89.544379][ T4808] BTRFS info (device loop0): enabling ssd optimizations [ 89.556211][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 89.567597][ T4816] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805f4b21e0 iblock : 14, err : -5) [ 89.646742][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 89.696980][ T4816] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805f4b21e0 iblock : 15, err : -5) [ 89.716856][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 89.726230][ T4816] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805f4b21e0 iblock : 16, err : -5) [ 89.754384][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 89.796046][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 89.837033][ T4846] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 89.842336][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 89.881425][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 89.906909][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 89.923218][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 89.952141][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.004988][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.031943][ T4311] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (4311) [ 90.042183][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.070933][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.085840][ T4599] usb 4-1: USB disconnect, device number 3 [ 90.086126][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.128045][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.150647][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.157987][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.164235][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.171359][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.186912][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.291321][ T4860] jffs2: notice: (4860) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 90.306299][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.336140][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.371998][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.386745][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.397064][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.422032][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.447145][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.489995][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.496055][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.496747][ T4231] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 90.577601][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.587192][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.615442][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.642257][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.661069][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.701701][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.710344][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.716857][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.722976][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.766766][ T4231] usb 5-1: Using ep0 maxpacket: 8 [ 90.772146][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.833078][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.877099][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.886845][ T4231] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.908982][ T4231] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.923953][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.950263][ T4231] usb 5-1: config 0 interface 0 has no altsetting 0 [ 90.961125][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 90.971962][ T4231] usb 5-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 91.000959][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.008383][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.016894][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.034495][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.043184][ T4231] usb 5-1: config 0 descriptor?? [ 91.055910][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.065782][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.075815][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.084199][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.092537][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.103965][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.110673][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.117437][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.123559][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.134166][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.163251][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.170525][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.177013][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.184448][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.191457][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.203399][ T4883] loop1: detected capacity change from 0 to 512 [ 91.211212][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.224000][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.230541][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.236831][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.244497][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.257760][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.263866][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.290403][ T4883] EXT4-fs (loop1): Ignoring removed oldalloc option [ 91.310861][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.322116][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.328821][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.335101][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.342331][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.348920][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.351979][ T4883] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,barrier=0x0000000000000001,usrquota,init_itable=0x0000000000000001,oldalloc,journal_ioprio=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 91.355236][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.393112][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.418022][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.424081][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.430398][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.436420][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.443546][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.449755][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.455766][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.462137][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.468209][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.474224][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.480334][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.486691][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.492711][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.500324][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.506349][ T4816] exFAT-fs (loop2): error, broken FAT chain. [ 91.514359][ T26] audit: type=1800 audit(1790064908.177:4): pid=4816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.160" name="file1" dev="loop2" ino=1048593 res=0 errno=0 [ 91.549253][ T4231] apple 0003:05AC:0241.0006: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 91.574268][ T4231] input: HID 05ac:0241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:0241.0006/input/input7 [ 91.808854][ T4231] apple 0003:05AC:0241.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 05ac:0241] on usb-dummy_hcd.4-1/input0 [ 91.834129][ T4231] usb 5-1: USB disconnect, device number 6 [ 92.092074][ T4898] fido_id[4898]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 92.139327][ T4903] loop0: detected capacity change from 0 to 8 [ 92.370684][ T4903] SQUASHFS error: lzo decompression failed, data probably corrupt [ 92.438618][ T4903] SQUASHFS error: Failed to read block 0x71: -5 [ 92.465350][ T4903] SQUASHFS error: lzo decompression failed, data probably corrupt [ 92.492609][ T4903] SQUASHFS error: Failed to read block 0x71: -5 [ 92.514787][ T26] audit: type=1800 audit(1790064909.177:5): pid=4903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.184" name="file0" dev="loop0" ino=3 res=0 errno=0 [ 92.544811][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806117e000: rx timeout, send abort [ 92.555163][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806117d000: rx timeout, send abort [ 92.564544][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806117e000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 92.580501][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806117d000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 92.861756][ T4897] loop3: detected capacity change from 0 to 32768 [ 93.026949][ T1109] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 93.406967][ T1109] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 93.426804][ T1109] usb 5-1: config 0 has no interface number 0 [ 93.432958][ T1109] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 93.474117][ T1109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.495494][ T1109] usb 5-1: config 0 descriptor?? [ 93.568223][ T1109] ums-realtek 5-1:0.2: USB Mass Storage device detected [ 93.578510][ T4934] loop2: detected capacity change from 0 to 1024 [ 93.624065][ T4934] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 93.662416][ T4262] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 93.806373][ T4934] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee01,abort,discard,max_batch_time=0x0000000000000ac9,data=ordered,mblk_io_submit,quota,init_itable,errors=remount-ro,bsddf,auto_da_alloc,. Quota mode: writeback. [ 93.878334][ T4233] usb 5-1: USB disconnect, device number 7 [ 94.043770][ T4262] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.057415][ T4940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 94.066684][ T4262] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.184168][ T4262] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 94.221988][ T4262] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 94.245661][ T4262] usb 2-1: SerialNumber: syz [ 94.332500][ T26] audit: type=1804 audit(1790064910.997:6): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.198" name="/newroot/46/nfsd/portlist" dev="nfsd" ino=13 res=1 errno=0 [ 94.570227][ T4262] usb 2-1: 0:2 : does not exist [ 94.630547][ T4262] usb 2-1: USB disconnect, device number 5 [ 94.657489][ T4954] loop3: detected capacity change from 0 to 4096 [ 94.927769][ T4962] FAULT_INJECTION: forcing a failure. [ 94.927769][ T4962] name failslab, interval 1, probability 0, space 0, times 0 [ 94.950059][ T4954] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 94.961109][ T4962] CPU: 1 PID: 4962 Comm: syz.0.206 Not tainted syzkaller #0 [ 94.968634][ T4962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.979412][ T4962] Call Trace: [ 94.982812][ T4962] [ 94.982812][ T4964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.207'. [ 94.985785][ T4962] dump_stack_lvl+0x188/0x250 [ 94.985823][ T4962] ? show_regs_print_info+0x20/0x20 [ 94.985839][ T4962] ? load_image+0x410/0x410 [ 94.999685][ T4962] ? __might_sleep+0xf0/0xf0 [ 94.999713][ T4962] ? __lock_acquire+0x7b50/0x7b50 [ 95.009703][ T4962] should_fail+0x383/0x4b0 [ 95.009739][ T4962] should_failslab+0x5/0x20 [ 95.009756][ T4962] slab_pre_alloc_hook+0x51/0xc0 [ 95.009779][ T4962] __kmalloc+0x6b/0x340 [ 95.009796][ T4962] ? sk_prot_alloc+0xe7/0x210 [ 95.019826][ T4962] sk_prot_alloc+0xe7/0x210 [ 95.019861][ T4962] ? sk_alloc+0x1d/0x310 [ 95.019880][ T4962] sk_alloc+0x2f/0x310 [ 95.019894][ T4962] ? pppol2tp_create+0x12/0x1f0 [ 95.019920][ T4962] pppol2tp_create+0x2e/0x1f0 [ 95.019938][ T4962] pppox_create+0x127/0x1a0 [ 95.040263][ T4954] ntfs3: loop3: Failed to load $Extend. [ 95.044772][ T4962] __sock_create+0x473/0x910 [ 95.044813][ T4962] __sys_socket+0xe2/0x170 [ 95.053983][ T4962] __x64_sys_socket+0x76/0x80 [ 95.054012][ T4962] do_syscall_64+0x4c/0xa0 [ 95.054029][ T4962] ? clear_bhb_loop+0x30/0x80 [ 95.054046][ T4962] ? clear_bhb_loop+0x30/0x80 [ 95.054063][ T4962] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.067830][ T4962] RIP: 0033:0x7f6d6e4a5159 [ 95.067854][ T4962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.067870][ T4962] RSP: 002b:00007f6d6c6fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 95.067895][ T4962] RAX: ffffffffffffffda RBX: 00007f6d6e72cfa0 RCX: 00007f6d6e4a5159 [ 95.078065][ T4962] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000018 [ 95.078079][ T4962] RBP: 00007f6d6e53c06b R08: 0000000000000000 R09: 0000000000000000 [ 95.078090][ T4962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.078102][ T4962] R13: 00007f6d6e72d038 R14: 00007f6d6e72cfa0 R15: 00007ffee98c7978 [ 95.087156][ T4962] [ 95.213196][ T4905] udevd[4905]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.390365][ T26] audit: type=1800 audit(1790064912.057:7): pid=4954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.203" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 96.086038][ T4262] libceph: connect (1)[c::]:6789 error -101 [ 96.118818][ T4997] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 96.158908][ T4262] libceph: mon0 (1)[c::]:6789 connect error [ 96.256333][ T5003] loop2: detected capacity change from 0 to 256 [ 96.404029][ T5003] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 96.469237][ T1109] libceph: connect (1)[c::]:6789 error -101 [ 96.475330][ T1109] libceph: mon0 (1)[c::]:6789 connect error [ 96.500441][ T5011] loop0: detected capacity change from 0 to 1024 [ 96.518090][ T26] audit: type=1800 audit(1790064913.187:8): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.221" name="file1" dev="loop2" ino=1048613 res=0 errno=0 [ 96.524953][ T5003] exFAT-fs (loop2): error, invalid size(size(21) > aligned(9223372036854777344) [ 96.524953][ T5003] [ 96.573147][ T5003] exFAT-fs (loop2): Filesystem has been set read-only [ 96.749835][ T5011] hfsplus: failed to extend attributes file [ 96.839656][ T4988] ceph: No mds server is up or the cluster is laggy [ 96.883882][ T4994] ceph: No mds server is up or the cluster is laggy [ 96.926920][ T4262] libceph: connect (1)[c::]:6789 error -101 [ 96.933029][ T4262] libceph: mon0 (1)[c::]:6789 connect error [ 97.017205][ T1109] libceph: connect (1)[c::]:6789 error -101 [ 97.025174][ T1109] libceph: mon0 (1)[c::]:6789 connect error [ 97.108900][ T5031] loop0: detected capacity change from 0 to 512 [ 97.260500][ T5031] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 97.302108][ T2283] kernel write not supported for file /snd/seq (pid: 2283 comm: kworker/1:3) [ 97.317028][ T5031] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.230: inode #15: comm syz.0.230: iget: illegal inode # [ 97.399270][ T5031] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.230: couldn't read orphan inode 15 (err -117) [ 97.435536][ T5031] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000400000,errors=continue,,errors=continue. Quota mode: writeback. [ 97.542947][ T5047] FAULT_INJECTION: forcing a failure. [ 97.542947][ T5047] name failslab, interval 1, probability 0, space 0, times 0 [ 97.613111][ T5047] CPU: 0 PID: 5047 Comm: syz.1.237 Not tainted syzkaller #0 [ 97.620562][ T5047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.630741][ T5047] Call Trace: [ 97.634031][ T5047] [ 97.636975][ T5047] dump_stack_lvl+0x188/0x250 [ 97.637008][ T5047] ? show_regs_print_info+0x20/0x20 [ 97.637029][ T5047] ? load_image+0x410/0x410 [ 97.647087][ T5047] ? __might_sleep+0xf0/0xf0 [ 97.647114][ T5047] ? __lock_acquire+0x7b50/0x7b50 [ 97.647142][ T5047] should_fail+0x383/0x4b0 [ 97.656310][ T5047] should_failslab+0x5/0x20 [ 97.665752][ T5047] slab_pre_alloc_hook+0x51/0xc0 [ 97.675237][ T5047] __kmalloc_node+0x6d/0x3a0 [ 97.679857][ T5047] ? kvmalloc_node+0x84/0x130 [ 97.679885][ T5047] kvmalloc_node+0x84/0x130 [ 97.679905][ T5047] __se_sys_add_key+0x27b/0x410 [ 97.689301][ T5047] ? __x64_sys_add_key+0xc0/0xc0 [ 97.689332][ T5047] ? lockdep_hardirqs_on+0x94/0x140 [ 97.699216][ T5047] ? __x64_sys_add_key+0x1c/0xc0 [ 97.699263][ T5047] do_syscall_64+0x4c/0xa0 [ 97.709790][ T5047] ? clear_bhb_loop+0x30/0x80 [ 97.709823][ T5047] ? clear_bhb_loop+0x30/0x80 [ 97.709845][ T5047] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.709865][ T5047] RIP: 0033:0x7fde24924159 [ 97.709886][ T5047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.709904][ T5047] RSP: 002b:00007fde22b7c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 97.709929][ T5047] RAX: ffffffffffffffda RBX: 00007fde24babfa0 RCX: 00007fde24924159 [ 97.709945][ T5047] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 97.709960][ T5047] RBP: 00007fde249bb06b R08: fffffffffffffffe R09: 0000000000000000 [ 97.709975][ T5047] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 97.709989][ T5047] R13: 00007fde24bac038 R14: 00007fde24babfa0 R15: 00007ffd734fc4e8 [ 97.710021][ T5047] [ 97.881648][ T5050] FAULT_INJECTION: forcing a failure. [ 97.881648][ T5050] name failslab, interval 1, probability 0, space 0, times 0 [ 97.931942][ T5050] CPU: 0 PID: 5050 Comm: syz.4.238 Not tainted syzkaller #0 [ 97.939390][ T5050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.949486][ T5050] Call Trace: [ 97.952794][ T5050] [ 97.956011][ T5050] dump_stack_lvl+0x188/0x250 [ 97.960829][ T5050] ? show_regs_print_info+0x20/0x20 [ 97.967364][ T5050] ? load_image+0x410/0x410 [ 97.967399][ T5050] ? __might_sleep+0xf0/0xf0 [ 97.967420][ T5050] ? __lock_acquire+0x7b50/0x7b50 [ 97.967446][ T5050] should_fail+0x383/0x4b0 [ 97.967473][ T5050] should_failslab+0x5/0x20 [ 97.967493][ T5050] slab_pre_alloc_hook+0x51/0xc0 [ 97.967516][ T5050] kmem_cache_alloc_trace+0x47/0x290 [ 97.967534][ T5050] ? rtnl_newlink+0x17f/0x1920 [ 97.967561][ T5050] rtnl_newlink+0x17f/0x1920 [ 97.967583][ T5050] ? psi_task_switch+0x517/0x810 [ 97.967609][ T5050] ? __lock_acquire+0x7b50/0x7b50 [ 97.967640][ T5050] ? rtnl_setlink+0x500/0x500 [ 97.967659][ T5050] ? mark_lock+0x94/0x320 [ 97.967681][ T5050] ? __lock_acquire+0x13dc/0x7b50 [ 97.967711][ T5050] ? lock_chain_count+0x20/0x20 [ 97.967739][ T5050] ? finish_lock_switch+0x12d/0x290 [ 97.967766][ T5050] ? finish_lock_switch+0x12d/0x290 [ 97.967788][ T5050] ? verify_lock_unused+0x140/0x140 [ 97.967811][ T5050] ? finish_task_switch+0x1e4/0x650 [ 97.967841][ T5050] ? __schedule+0x11cb/0x4350 [ 97.967869][ T5050] ? __lock_acquire+0x1305/0x7b50 [ 97.967909][ T5050] ? rcu_lock_acquire+0x30/0x30 [ 97.967931][ T5050] ? __mutex_lock_common+0x1471/0x2400 [ 97.967956][ T5050] ? __lock_acquire+0x7b50/0x7b50 [ 97.967978][ T5050] ? do_raw_spin_lock+0x128/0x2f0 [ 97.968000][ T5050] ? __rwlock_init+0x140/0x140 [ 97.977151][ T5050] ? do_raw_spin_unlock+0x11d/0x230 [ 97.977193][ T5050] ? __mutex_lock_common+0x147b/0x2400 [ 97.986652][ T5050] ? rtnetlink_rcv_msg+0x79f/0xf10 [ 97.986685][ T5050] ? mutex_lock_io_nested+0x60/0x60 [ 97.986724][ T5050] ? rtnl_setlink+0x500/0x500 [ 97.986744][ T5050] rtnetlink_rcv_msg+0x7f1/0xf10 [ 97.986775][ T5050] ? rtnetlink_bind+0x80/0x80 [ 97.986795][ T5050] ? lock_chain_count+0x20/0x20 [ 97.986825][ T5050] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 97.986848][ T5050] ? lockdep_hardirqs_on+0x94/0x140 [ 97.986873][ T5050] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 97.986893][ T5050] ? _raw_spin_unlock+0x40/0x40 [ 97.986923][ T5050] ? rcu_preempt_deferred_qs_irqrestore+0x82d/0xbd0 [ 97.986959][ T5050] ? sync_rcu_exp_done_unlocked+0x140/0x140 [ 97.986980][ T5050] ? __copy_skb_header+0x3ba/0x4f0 [ 97.987000][ T5050] ? rcu_read_unlock_special+0xf0/0x4a0 [ 98.006566][ T5050] netlink_rcv_skb+0x1e9/0x430 [ 98.016439][ T5050] ? rtnetlink_bind+0x80/0x80 [ 98.016471][ T5050] ? netlink_ack+0xb10/0xb10 [ 98.026171][ T5050] ? __rcu_read_unlock+0x78/0xd0 [ 98.035693][ T5050] netlink_unicast+0x78f/0x940 [ 98.046356][ T5050] netlink_sendmsg+0x8ba/0xbe0 [ 98.059262][ T5050] ? netlink_getsockopt+0x570/0x570 [ 98.059282][ T5050] ? aa_sock_msg_perm+0x94/0x150 [ 98.069225][ T5050] ? apparmor_socket_sendmsg+0x88/0x230 [ 98.069250][ T5050] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 98.079624][ T5050] ? security_socket_sendmsg+0x7c/0xa0 [ 98.079652][ T5050] __sys_sendto+0x46d/0x620 [ 98.090565][ T5050] ? __ia32_sys_getpeername+0x80/0x80 [ 98.090616][ T5050] ? lock_chain_count+0x20/0x20 [ 98.100552][ T5050] __x64_sys_sendto+0xda/0xf0 [ 98.100580][ T5050] do_syscall_64+0x4c/0xa0 [ 98.111211][ T5050] ? clear_bhb_loop+0x30/0x80 [ 98.111233][ T5050] ? clear_bhb_loop+0x30/0x80 [ 98.126397][ T5050] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.136296][ T5050] RIP: 0033:0x7fb08635e159 [ 98.136324][ T5050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.136343][ T5050] RSP: 002b:00007fb0845b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 98.136365][ T5050] RAX: ffffffffffffffda RBX: 00007fb0865e5fa0 RCX: 00007fb08635e159 [ 98.147410][ T5050] RDX: 0000000000000012 RSI: 0000200000000140 RDI: 0000000000000003 [ 98.147428][ T5050] RBP: 00007fb0863f506b R08: 0000000000000000 R09: 0000000000000000 [ 98.147441][ T5050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.147455][ T5050] R13: 00007fb0865e6038 R14: 00007fb0865e5fa0 R15: 00007ffdf6838db8 [ 98.147486][ T5050] [ 98.419567][ T26] audit: type=1400 audit(1790064915.087:9): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="test" pid=5058 comm="syz.1.242" name="test" offset=36 [ 98.542697][ T5061] sctp: [Deprecated]: syz.2.243 (pid 5061) Use of struct sctp_assoc_value in delayed_ack socket option. [ 98.542697][ T5061] Use struct sctp_sack_info instead [ 98.672444][ T5065] syz.1.245 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 98.791071][ T5071] loop0: detected capacity change from 0 to 1024 [ 98.870502][ T5071] EXT4-fs (loop0): Ignoring removed bh option [ 98.949831][ T5071] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,grpid,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 99.003208][ T5071] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.021632][ T4597] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 99.024271][ T5071] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: block 3: comm syz.0.246: lblock 3 mapped to illegal pblock 3 (length 3) [ 99.086769][ T4262] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.151122][ T5071] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 99.212852][ T5071] EXT4-fs (loop0): This should not happen!! Data will be lost [ 99.212852][ T5071] [ 99.271171][ T5089] EXT4-fs error (device loop0): ext4_ext_remove_space:2944: inode #15: comm syz.0.246: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 99.346770][ T4262] usb 4-1: Using ep0 maxpacket: 32 [ 99.388381][ T5085] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.246: lblock 3 mapped to illegal pblock 3 (length 1) [ 99.410918][ T5089] EXT4-fs error (device loop0) in ext4_setattr:5645: Corrupt filesystem [ 99.432737][ T5085] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.246: lblock 3 mapped to illegal pblock 3 (length 1) [ 99.446870][ C0] net_ratelimit: 55 callbacks suppressed [ 99.460054][ T5085] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.246: lblock 3 mapped to illegal pblock 3 (length 1) [ 99.480714][ T4262] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.492233][ T4597] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.493501][ T5085] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.246: lblock 3 mapped to illegal pblock 3 (length 1) [ 99.503865][ T4597] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 99.523528][ T4262] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 99.548681][ T4262] usb 4-1: config 0 interface 0 has no altsetting 0 [ 99.555551][ T4262] usb 4-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 99.556713][ T4597] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 99.570112][ T4262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.602441][ T5085] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: block 3: comm syz.0.246: lblock 3 mapped to illegal pblock 3 (length 1) [ 99.621156][ T4262] usb 4-1: config 0 descriptor?? [ 99.654400][ T4597] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 99.679777][ T4597] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.950931][ T5088] loop1: detected capacity change from 0 to 40427 [ 99.992597][ T5099] loop2: detected capacity change from 0 to 128 [ 100.024243][ T5088] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 100.032961][ T5088] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 100.077183][ T5099] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.104171][ T5088] F2FS-fs (loop1): Found nat_bits in checkpoint [ 100.139686][ T5107] netlink: 'syz.0.260': attribute type 1 has an invalid length. [ 100.145114][ T5099] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.187016][ T4597] cxacru 5-1:1.0: send of cm 0x91 failed (-71) [ 100.194441][ T5088] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 100.212217][ T5088] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 100.221168][ T4597] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 100.233096][ T5099] syz.2.258 (pid 5099) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 100.293184][ T4597] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 100.300210][ T5111] FAULT_INJECTION: forcing a failure. [ 100.300210][ T5111] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 100.314860][ T5111] CPU: 0 PID: 5111 Comm: syz.0.261 Not tainted syzkaller #0 [ 100.322261][ T5111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.322622][ T5111] Call Trace: [ 100.322632][ T5111] [ 100.322641][ T5111] dump_stack_lvl+0x188/0x250 [ 100.322673][ T5111] ? show_regs_print_info+0x20/0x20 [ 100.322694][ T5111] ? load_image+0x410/0x410 [ 100.322720][ T5111] ? mark_lock+0x94/0x320 [ 100.322741][ T5111] should_fail+0x383/0x4b0 [ 100.322769][ T5111] prepare_alloc_pages+0x1e3/0x5b0 [ 100.322800][ T5111] __alloc_pages+0x11b/0x480 [ 100.322825][ T5111] ? zone_statistics+0x170/0x170 [ 100.344026][ T5111] ? rcu_lock_acquire+0x30/0x30 [ 100.344058][ T5111] ? alloc_pages+0x452/0x560 [ 100.354230][ T5111] __get_free_pages+0x8/0x30 [ 100.362962][ T5111] __tlb_remove_page_size+0x1f2/0x3f0 [ 100.372680][ T5111] unmap_page_range+0xfcf/0x2410 [ 100.372733][ T5111] unmap_vmas+0x131/0x250 [ 100.382492][ T5111] ? unmap_page_range+0x2410/0x2410 [ 100.391667][ T5111] ? __mutex_lock_common+0x435/0x2400 [ 100.402065][ T5111] ? exit_mm_release+0x16/0x30 [ 100.411715][ T5111] exit_mmap+0x3b9/0x640 [ 100.421919][ T5111] ? vm_brk+0x20/0x20 [ 100.430326][ T5111] ? uprobe_clear_state+0x2f6/0x460 [ 100.435545][ T5111] __mmput+0x115/0x390 [ 100.439638][ T5111] exit_mm+0x632/0x7b0 [ 100.443719][ T5111] ? perf_pmu_migrate_context+0xb70/0xb70 [ 100.449453][ T5111] ? do_exit+0x2110/0x2110 [ 100.449473][ T5111] ? __ia32_sys_timer_delete+0x40/0x40 [ 100.459322][ T5111] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 100.459352][ T5111] ? tty_audit_exit+0x149/0x1f0 [ 100.459377][ T5111] do_exit+0x5b8/0x2110 [ 100.459398][ T5111] ? put_task_struct+0x80/0x80 [ 100.470386][ T5111] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 100.470420][ T5111] ? _raw_spin_lock_irq+0xb7/0xf0 [ 100.479713][ T5111] do_group_exit+0x12c/0x2f0 [ 100.490784][ T5111] ? lockdep_hardirqs_on+0x94/0x140 [ 100.500579][ T5111] get_signal+0x7eb/0x12e0 [ 100.505037][ T5111] arch_do_signal_or_restart+0xe6/0x12a0 [ 100.510698][ T5111] ? futex_exit_release+0x1c0/0x1c0 [ 100.515907][ T5111] ? get_sigframe_size+0x10/0x10 [ 100.515931][ T5111] ? __context_tracking_exit+0x4c/0x80 [ 100.526433][ T5111] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 100.532442][ T5111] ? exit_to_user_mode_loop+0x3b/0x130 [ 100.532497][ T5111] exit_to_user_mode_loop+0x9e/0x130 [ 100.532516][ T5111] exit_to_user_mode_prepare+0xee/0x180 [ 100.532534][ T5111] syscall_exit_to_user_mode+0x16/0x40 [ 100.543781][ T5111] do_syscall_64+0x58/0xa0 [ 100.555381][ T5111] ? clear_bhb_loop+0x30/0x80 [ 100.555408][ T5111] ? clear_bhb_loop+0x30/0x80 [ 100.564488][ T5111] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.564511][ T5111] RIP: 0033:0x7f6d6e4a5159 [ 100.564529][ T5111] Code: Unable to access opcode bytes at RIP 0x7f6d6e4a512f. [ 100.564540][ T5111] RSP: 002b:00007f6d6c6fd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 100.595515][ T5111] RAX: 0000000000000001 RBX: 00007f6d6e72cfa8 RCX: 00007f6d6e4a5159 [ 100.603701][ T5111] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6d6e72cfac [ 100.603723][ T5111] RBP: 00007f6d6e72cfa0 R08: 000edcbfc92ee535 R09: 0000000000000000 [ 100.603736][ T5111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.603748][ T5111] R13: 00007f6d6e72d038 R14: 00007ffee98c7890 R15: 00007ffee98c7978 [ 100.603778][ T5111] [ 100.752194][ T4597] cxacru: probe of 5-1:1.0 failed with error -71 [ 100.821106][ T4597] usb 5-1: USB disconnect, device number 8 [ 101.165028][ T5124] FAULT_INJECTION: forcing a failure. [ 101.165028][ T5124] name failslab, interval 1, probability 0, space 0, times 0 [ 101.189680][ T5124] CPU: 1 PID: 5124 Comm: syz.2.266 Not tainted syzkaller #0 [ 101.197027][ T5124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.207199][ T5124] Call Trace: [ 101.210508][ T5124] [ 101.213460][ T5124] dump_stack_lvl+0x188/0x250 [ 101.218173][ T5124] ? show_regs_print_info+0x20/0x20 [ 101.223410][ T5124] ? load_image+0x410/0x410 [ 101.228055][ T5124] ? __might_sleep+0xf0/0xf0 [ 101.232675][ T5124] ? __lock_acquire+0x7b50/0x7b50 [ 101.237735][ T5124] ? alloc_pipe_info+0x1f5/0x4a0 [ 101.242710][ T5124] ? __do_pipe_flags+0x46/0x1f0 [ 101.247687][ T5124] ? do_pipe2+0xa7/0x190 [ 101.251977][ T5124] should_fail+0x383/0x4b0 [ 101.256526][ T5124] should_failslab+0x5/0x20 [ 101.261144][ T5124] slab_pre_alloc_hook+0x51/0xc0 [ 101.266290][ T5124] ? __d_alloc+0x27/0x6d0 [ 101.270754][ T5124] kmem_cache_alloc+0x3d/0x280 [ 101.275551][ T5124] __d_alloc+0x27/0x6d0 [ 101.279823][ T5124] ? d_alloc_pseudo+0xe/0x70 [ 101.284641][ T5124] d_alloc_pseudo+0x19/0x70 [ 101.289176][ T5124] alloc_file_pseudo+0xe0/0x200 [ 101.294077][ T5124] ? alloc_empty_file_noaccount+0x80/0x80 [ 101.299913][ T5124] ? atime_needs_update+0x770/0x770 [ 101.305149][ T5124] ? debug_mutex_init+0x34/0x70 [ 101.310036][ T5124] ? create_pipe_files+0x2b9/0x6b0 [ 101.315196][ T5124] create_pipe_files+0x390/0x6b0 [ 101.320174][ T5124] __do_pipe_flags+0x46/0x1f0 [ 101.324888][ T5124] do_pipe2+0xa7/0x190 [ 101.328992][ T5124] ? pipe_fcntl+0x530/0x530 [ 101.333614][ T5124] ? lock_chain_count+0x20/0x20 [ 101.338502][ T5124] ? syscall_enter_from_user_mode+0x21/0x70 [ 101.344547][ T5124] __x64_sys_pipe2+0x56/0x60 [ 101.349196][ T5124] do_syscall_64+0x4c/0xa0 [ 101.353724][ T5124] ? clear_bhb_loop+0x30/0x80 [ 101.358437][ T5124] ? clear_bhb_loop+0x30/0x80 [ 101.363153][ T5124] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.369087][ T5124] RIP: 0033:0x7f00e4aa8159 [ 101.373624][ T5124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.393264][ T5124] RSP: 002b:00007f00e2d00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 101.393297][ T5124] RAX: ffffffffffffffda RBX: 00007f00e4d2ffa0 RCX: 00007f00e4aa8159 [ 101.393313][ T5124] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000000 [ 101.393327][ T5124] RBP: 00007f00e4b3f06b R08: 0000000000000000 R09: 0000000000000000 [ 101.393339][ T5124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.393351][ T5124] R13: 00007f00e4d30038 R14: 00007f00e4d2ffa0 R15: 00007ffc9cf5d178 [ 101.393383][ T5124] [ 101.842344][ T4262] usbhid 4-1:0.0: can't add hid device: -71 [ 101.848759][ T4262] usbhid: probe of 4-1:0.0 failed with error -71 [ 101.881343][ T4262] usb 4-1: USB disconnect, device number 4 [ 101.919512][ T5133] device-mapper: table: 248:0: mirror: Invalid number of mirrors [ 101.967498][ T5133] device-mapper: ioctl: error adding target to table [ 102.150460][ T4379] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.373821][ T4379] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.409357][ T5145] loop0: detected capacity change from 0 to 2048 [ 102.490837][ T4379] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.542819][ T5143] loop2: detected capacity change from 0 to 8192 [ 102.593659][ T5145] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.612373][ T5147] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 102.625298][ T5147] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 102.720302][ T4379] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.767477][ T5143] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.802157][ T5157] FAULT_INJECTION: forcing a failure. [ 102.802157][ T5157] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 102.863385][ T5157] CPU: 1 PID: 5157 Comm: syz.1.273 Not tainted syzkaller #0 [ 102.870723][ T5157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.880797][ T5157] Call Trace: [ 102.880809][ T5157] [ 102.880818][ T5157] dump_stack_lvl+0x188/0x250 [ 102.880846][ T5157] ? show_regs_print_info+0x20/0x20 [ 102.880867][ T5157] ? load_image+0x410/0x410 [ 102.880888][ T5157] ? __lock_acquire+0x7b50/0x7b50 [ 102.880918][ T5157] should_fail+0x383/0x4b0 [ 102.880947][ T5157] prepare_alloc_pages+0x1e3/0x5b0 [ 102.880978][ T5157] __alloc_pages+0x11b/0x480 [ 102.881001][ T5157] ? zone_statistics+0x170/0x170 [ 102.901724][ T5157] bpf_ringbuf_alloc+0x232/0x4d0 [ 102.911182][ T5157] ringbuf_map_alloc+0x1d1/0x300 [ 102.911215][ T5157] map_create+0x481/0x2330 [ 102.925903][ T5157] ? bpf_lsm_bpf+0x5/0x10 [ 102.940988][ T5157] __sys_bpf+0x30a/0x6f0 [ 102.941028][ T5157] ? bpf_link_show_fdinfo+0x380/0x380 [ 102.941078][ T5157] __x64_sys_bpf+0x78/0x90 [ 102.949661][ T5157] do_syscall_64+0x4c/0xa0 [ 102.959703][ T5157] ? clear_bhb_loop+0x30/0x80 [ 102.968805][ T5157] ? clear_bhb_loop+0x30/0x80 [ 102.973506][ T5157] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.973531][ T5157] RIP: 0033:0x7fde24924159 [ 102.983876][ T5157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.983896][ T5157] RSP: 002b:00007fde22b7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 103.012567][ T5157] RAX: ffffffffffffffda RBX: 00007fde24babfa0 RCX: 00007fde24924159 [ 103.012591][ T5157] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 103.012604][ T5157] RBP: 00007fde249bb06b R08: 0000000000000000 R09: 0000000000000000 [ 103.012616][ T5157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.012628][ T5157] R13: 00007fde24bac038 R14: 00007fde24babfa0 R15: 00007ffd734fc4e8 [ 103.028591][ T5157] [ 103.393626][ T4599] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 103.440751][ T4599] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 103.852835][ T5174] loop0: detected capacity change from 0 to 1024 [ 103.860300][ T5176] loop2: detected capacity change from 0 to 512 [ 103.947084][ T5174] EXT4-fs (loop0): Ignoring removed oldalloc option [ 103.988799][ T5176] EXT4-fs (loop2): Test dummy encryption mode enabled [ 104.013496][ T5174] EXT4-fs (loop0): Ignoring removed oldalloc option [ 104.051340][ T5176] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 104.065546][ T5174] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.209391][ T5176] EXT4-fs error (device loop2): ext4_orphan_get:1436: comm syz.2.286: bad orphan inode 131083 [ 104.301934][ T5176] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 104.340732][ T5174] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,block_validity,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 104.754288][ C0] net_ratelimit: 55 callbacks suppressed [ 104.815860][ T5204] loop0: detected capacity change from 0 to 256 [ 104.849232][ T2283] Bluetooth: hci1: command 0x0409 tx timeout [ 104.926704][ T5204] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 104.962666][ T5152] chnl_net:caif_netlink_parms(): no params data found [ 105.180864][ T5213] loop2: detected capacity change from 0 to 512 [ 105.246472][ T5215] FAULT_INJECTION: forcing a failure. [ 105.246472][ T5215] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 105.261070][ T5215] CPU: 0 PID: 5215 Comm: syz.1.295 Not tainted syzkaller #0 [ 105.268404][ T5215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.278488][ T5215] Call Trace: [ 105.281889][ T5215] [ 105.284844][ T5215] dump_stack_lvl+0x188/0x250 [ 105.289559][ T5215] ? show_regs_print_info+0x20/0x20 [ 105.294782][ T5215] ? load_image+0x410/0x410 [ 105.299498][ T5215] ? mark_lock+0x94/0x320 [ 105.303876][ T5215] should_fail+0x383/0x4b0 [ 105.308421][ T5215] prepare_alloc_pages+0x1e3/0x5b0 [ 105.313578][ T5215] __alloc_pages+0x11b/0x480 [ 105.318217][ T5215] ? zone_statistics+0x170/0x170 [ 105.323199][ T5215] ? rcu_lock_acquire+0x30/0x30 [ 105.328169][ T5215] ? alloc_pages+0x452/0x560 [ 105.332794][ T5215] __get_free_pages+0x8/0x30 [ 105.337502][ T5215] __tlb_remove_page_size+0x1f2/0x3f0 [ 105.342995][ T5215] unmap_page_range+0xfcf/0x2410 [ 105.348004][ T5215] unmap_vmas+0x131/0x250 [ 105.352456][ T5215] ? unmap_page_range+0x2410/0x2410 [ 105.357820][ T5215] ? tlb_gather_mmu+0x22a/0x2f0 [ 105.362703][ T5215] unmap_region+0x231/0x3b0 [ 105.362737][ T5215] ? mmap_write_downgrade+0x40/0x40 [ 105.362771][ T5215] ? vmacache_update+0xa0/0x100 [ 105.372542][ T5215] ? __vma_rb_erase+0x9c6/0xa30 [ 105.372569][ T5215] ? vma_gap_callbacks_rotate+0x196/0x1f0 [ 105.372594][ T5215] __do_munmap+0xa29/0xe10 [ 105.382291][ T5215] mmap_region+0x977/0x1730 [ 105.382329][ T5215] ? get_unmapped_area+0x2f0/0x360 [ 105.392448][ T5215] do_mmap+0x801/0xe30 [ 105.392477][ T5215] ? vm_mmap_pgoff+0x16c/0x2d0 [ 105.402067][ T5215] vm_mmap_pgoff+0x1c1/0x2d0 [ 105.402104][ T5215] ? account_locked_vm+0xe0/0xe0 [ 105.410904][ T5215] ? __context_tracking_exit+0x4c/0x80 [ 105.410933][ T5215] ? __lock_acquire+0x7b50/0x7b50 [ 105.420544][ T5215] ksys_mmap_pgoff+0x140/0x790 [ 105.420575][ T5215] ? mmap_region+0x1730/0x1730 [ 105.431037][ T5215] ? lockdep_hardirqs_on+0x94/0x140 [ 105.431067][ T5215] do_syscall_64+0x4c/0xa0 [ 105.440907][ T5215] ? clear_bhb_loop+0x30/0x80 [ 105.440929][ T5215] ? clear_bhb_loop+0x30/0x80 [ 105.450531][ T5215] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.450556][ T5215] RIP: 0033:0x7fde24924159 [ 105.459975][ T5215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.459994][ T5215] RSP: 002b:00007fde22b7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 105.470286][ T5215] RAX: ffffffffffffffda RBX: 00007fde24babfa0 RCX: 00007fde24924159 [ 105.470302][ T5215] RDX: 0000000002000007 RSI: 0000000008000002 RDI: 000000110c230000 [ 105.470316][ T5215] RBP: 00007fde249bb06b R08: ffffffffffffffff R09: 0000000000000000 [ 105.498491][ T5215] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 105.498507][ T5215] R13: 00007fde24bac038 R14: 00007fde24babfa0 R15: 00007ffd734fc4e8 [ 105.498537][ T5215] [ 105.514580][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.670429][ T5213] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 105.726502][ T5213] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 105.754117][ T5213] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.294: corrupted in-inode xattr [ 105.768571][ T5213] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.294: couldn't read orphan inode 15 (err -117) [ 105.806618][ T5213] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,inode_readahead_blks=0x0000000008000000,quota,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 105.834630][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.840955][ T5226] loop1: detected capacity change from 0 to 256 [ 106.451817][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.465023][ T5152] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.502699][ T5152] device bridge_slave_0 entered promiscuous mode [ 106.639147][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.651659][ T5152] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.701989][ T5152] device bridge_slave_1 entered promiscuous mode [ 106.729905][ T4262] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 106.876700][ T4599] Bluetooth: hci1: command 0x041b tx timeout [ 106.918700][ T5152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.000501][ T5152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.082629][ T4262] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.092694][ T5266] loop2: detected capacity change from 0 to 256 [ 107.111823][ T4262] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 107.131727][ T4262] usb 2-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 107.147549][ T4262] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.191992][ T4262] opticon 2-1:1.0: opticon converter detected [ 107.218932][ T5266] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.270627][ T4262] usb 2-1: opticon converter now attached to ttyUSB0 [ 107.278226][ T5266] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 107.360266][ T5266] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7399340e, utbl_chksum : 0xe619d30d) [ 107.473880][ T7] usb 2-1: USB disconnect, device number 6 [ 107.483958][ T5152] team0: Port device team_slave_0 added [ 107.511142][ T7] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 107.564901][ T7] opticon 2-1:1.0: device disconnected [ 107.613059][ T5152] team0: Port device team_slave_1 added [ 107.822770][ T5152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.841822][ T5152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.871801][ T5152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.931429][ T5282] loop2: detected capacity change from 0 to 256 [ 107.944120][ T5152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.965825][ T5152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.992025][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.012536][ T5152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.054433][ T5282] exfat: Deprecated parameter 'utf8' [ 108.059791][ T5282] exfat: Deprecated parameter 'utf8' [ 108.135554][ T5282] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 108.160979][ T4379] device hsr_slave_0 left promiscuous mode [ 108.184396][ T4379] device hsr_slave_1 left promiscuous mode [ 108.202443][ T5285] loop1: detected capacity change from 0 to 256 [ 108.228517][ T4379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.238076][ T4379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.285333][ T4379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.339889][ T4379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.355121][ T5285] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb9756464, utbl_chksum : 0xe619d30d) [ 108.396195][ T4379] device bridge_slave_1 left promiscuous mode [ 108.441001][ T4379] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.489399][ T26] audit: type=1800 audit(1790589213.352:10): pid=5285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.312" name="file1" dev="loop1" ino=1048623 res=0 errno=0 [ 108.510734][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.562116][ T4379] device bridge_slave_0 left promiscuous mode [ 108.595603][ T4379] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.761582][ T4379] device veth1_macvtap left promiscuous mode [ 108.806268][ T4379] device veth0_macvtap left promiscuous mode [ 108.849424][ T4379] device veth1_vlan left promiscuous mode [ 108.855529][ T4379] device veth0_vlan left promiscuous mode [ 108.916750][ T4597] Bluetooth: hci1: command 0x040f tx timeout [ 109.809739][ T5313] loop1: detected capacity change from 0 to 256 [ 109.820832][ T4231] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 109.842742][ T5313] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.859967][ C1] net_ratelimit: 74 callbacks suppressed [ 109.900478][ T5313] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.066387][ T4231] usb 4-1: Using ep0 maxpacket: 32 [ 110.111213][ T5319] FAULT_INJECTION: forcing a failure. [ 110.111213][ T5319] name failslab, interval 1, probability 0, space 0, times 0 [ 110.155750][ T5309] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 110.167436][ T4379] team0 (unregistering): Port device team_slave_1 removed [ 110.168268][ T5319] CPU: 0 PID: 5319 Comm: syz.0.321 Not tainted syzkaller #0 [ 110.182650][ T5319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.192733][ T5319] Call Trace: [ 110.196143][ T5319] [ 110.199103][ T5319] dump_stack_lvl+0x188/0x250 [ 110.204003][ T5319] ? show_regs_print_info+0x20/0x20 [ 110.204023][ T5319] ? load_image+0x410/0x410 [ 110.204044][ T5319] ? __might_sleep+0xf0/0xf0 [ 110.218542][ T5319] ? __lock_acquire+0x7b50/0x7b50 [ 110.223601][ T5319] should_fail+0x383/0x4b0 [ 110.228051][ T5319] should_failslab+0x5/0x20 [ 110.232700][ T5319] slab_pre_alloc_hook+0x51/0xc0 [ 110.237672][ T5319] __kmalloc+0x6b/0x340 [ 110.241852][ T5319] ? load_msg+0xc0/0x380 [ 110.246217][ T5319] load_msg+0xc0/0x380 [ 110.250307][ T5319] do_msgsnd+0x1a1/0x10e0 [ 110.250332][ T5319] ? __might_sleep+0xf0/0xf0 [ 110.259259][ T5319] ? __might_fault+0xb7/0x110 [ 110.263971][ T5319] ? __lock_acquire+0x7b50/0x7b50 [ 110.269028][ T5319] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 110.275026][ T5319] ? ksys_msgsnd+0xa0/0xa0 [ 110.275054][ T5319] ? __might_fault+0xb3/0x110 [ 110.275077][ T5319] ? __x64_sys_msgsnd+0xe5/0x110 [ 110.275099][ T5319] do_syscall_64+0x4c/0xa0 [ 110.275125][ T5319] ? clear_bhb_loop+0x30/0x80 [ 110.275144][ T5319] ? clear_bhb_loop+0x30/0x80 [ 110.275166][ T5319] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.275186][ T5319] RIP: 0033:0x7f6d6e4a5159 [ 110.275205][ T5319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.275222][ T5319] RSP: 002b:00007f6d6c6fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 110.298373][ T5319] RAX: ffffffffffffffda RBX: 00007f6d6e72cfa0 RCX: 00007f6d6e4a5159 [ 110.308936][ T5319] RDX: 0000000000002000 RSI: 0000200000000940 RDI: 0000000000000000 [ 110.332950][ T5319] RBP: 00007f6d6e53c06b R08: 0000000000000000 R09: 0000000000000000 [ 110.332968][ T5319] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 110.332980][ T5319] R13: 00007f6d6e72d038 R14: 00007f6d6e72cfa0 R15: 00007ffee98c7978 [ 110.333010][ T5319] [ 110.420755][ T4231] usb 4-1: unable to get BOS descriptor or descriptor too short [ 110.474274][ T4379] team0 (unregistering): Port device team_slave_0 removed [ 110.509327][ T4231] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 110.517053][ T4231] usb 4-1: can't read configurations, error -71 [ 110.588953][ T4379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.656757][ T5325] loop0: detected capacity change from 0 to 2048 [ 110.716598][ T4379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.807382][ T5325] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.832614][ T5325] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.872398][ T5325] fs-verity: sha256 using implementation "sha256-avx2" [ 110.952818][ T5325] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.322: bg 0: block 345: padding at end of block bitmap is not set [ 110.961828][ T4597] Bluetooth: hci1: command 0x0419 tx timeout [ 110.981964][ T5325] fs-verity (loop0, inode 13): Error -28 writing Merkle tree block 0 [ 111.020692][ T5325] fs-verity (loop0, inode 13): Error -28 building Merkle tree [ 111.233792][ T5338] netlink: 'syz.0.326': attribute type 3 has an invalid length. [ 111.246710][ T5338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.326'. [ 111.291897][ T5336] For dev_enable ops, only valid value is "1" [ 111.333906][ T4379] bond0 (unregistering): Released all slaves [ 111.487694][ T5343] loop3: detected capacity change from 0 to 16 [ 111.561002][ T5343] erofs: (device loop3): mounted with root inode @ nid 36. [ 111.844125][ T5152] device hsr_slave_0 entered promiscuous mode [ 111.903420][ T5354] loop3: detected capacity change from 0 to 512 [ 111.911572][ T5152] device hsr_slave_1 entered promiscuous mode [ 112.055161][ T5354] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 112.084238][ T5354] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 112.141090][ T5354] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 112.222327][ T5354] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 112.251876][ T5354] System zones: 0-2, 18-18, 34-35 [ 112.261373][ T5354] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.685692][ T4597] Bluetooth: hci5: command 0x1003 tx timeout [ 112.711196][ T4202] Bluetooth: hci5: sending frame failed (-49) [ 112.753222][ T5152] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 112.786653][ T5152] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 112.801645][ T5152] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 112.849081][ T5152] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 112.928011][ T5378] loop2: detected capacity change from 0 to 256 [ 113.024652][ T5378] exfat: Deprecated parameter 'namecase' [ 113.072828][ T5378] exfat: Deprecated parameter 'namecase' [ 113.078531][ T5378] exfat: Deprecated parameter 'utf8' [ 113.198643][ T5378] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 113.401660][ T5152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.499373][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.507009][ T4597] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 113.519458][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.529414][ T5388] VIDIOC_EXPBUF: error -22: fd=0, type=vid-overlay, index=7, plane=3, flags=0x00000800 [ 113.546072][ T5152] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.566442][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.577907][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.597238][ T4372] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.604363][ T4372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.712729][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.734462][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.755231][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.768418][ T4372] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.775574][ T4372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.808574][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.823439][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.882060][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.909317][ T4597] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.919950][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.928550][ T4597] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 113.948766][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.967299][ T4597] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 113.977917][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.994833][ T5152] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.015553][ T4597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.035685][ T5152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.070643][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.091260][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.108835][ T4597] cxacru 4-1:1.0: usbatm_usb_probe: bind failed: -19! [ 114.129016][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.168290][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.204284][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.241423][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.324871][ T4234] usb 4-1: USB disconnect, device number 7 [ 114.678665][ T5395] loop0: detected capacity change from 0 to 32768 [ 114.761726][ T2283] Bluetooth: hci5: command 0x1001 tx timeout [ 114.780215][ T4202] Bluetooth: hci5: sending frame failed (-49) [ 114.816997][ C0] net_ratelimit: 44 callbacks suppressed [ 114.820274][ T26] audit: type=1800 audit(1790589219.789:11): pid=5395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.345" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 114.905406][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.943388][ T26] audit: type=1800 audit(1790589219.820:12): pid=5395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.345" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 115.010357][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.073777][ T5152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.370847][ T26] audit: type=1326 audit(1790589220.336:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5421 comm="syz.2.350" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00e4aa8159 code=0x0 [ 115.763413][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.801810][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.882092][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.903707][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.922673][ T5152] device veth0_vlan entered promiscuous mode [ 115.942373][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.963803][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.977838][ T5152] device veth1_vlan entered promiscuous mode [ 116.063656][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.085769][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.114426][ T5152] device veth0_macvtap entered promiscuous mode [ 116.143741][ T5152] device veth1_macvtap entered promiscuous mode [ 116.208770][ T5152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.260676][ T5415] loop3: detected capacity change from 0 to 32768 [ 116.263138][ T5152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.322761][ T5152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.352486][ T5152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.384316][ T5152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.400409][ T5152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.422736][ T5152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.447481][ T5152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.485962][ T5152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.528311][ T5449] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.655436][ T5415] XFS (loop3): Mounting V5 Filesystem [ 116.668147][ T5449] device bridge_slave_1 left promiscuous mode [ 116.693098][ T5449] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.794370][ T4597] Bluetooth: hci5: command 0x1009 tx timeout [ 116.831695][ T5415] XFS (loop3): Ending clean mount [ 117.004768][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.017646][ T4192] XFS (loop3): Unmounting Filesystem [ 117.027159][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.055942][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.065957][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.091784][ T5152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.124609][ T5152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.137232][ T5152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.150197][ T5152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.160394][ T5152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.173163][ T5152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.188122][ T5152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.206354][ T5152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.218133][ T5152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.228494][ T5472] device batadv_slave_1 entered promiscuous mode [ 117.270793][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.297300][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.326341][ T5152] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.348140][ T5152] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.356977][ T5152] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.369127][ T5152] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.395843][ T5471] device batadv_slave_1 left promiscuous mode [ 117.774378][ T4381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.782418][ T4381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.878862][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.951420][ T4383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.989343][ T4383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.039139][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 118.120224][ T4597] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 118.367652][ T4597] usb 4-1: Using ep0 maxpacket: 16 [ 118.516769][ T4597] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.533461][ T4597] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 118.555654][ T5509] netlink: 20 bytes leftover after parsing attributes in process `syz.5.365'. [ 118.571989][ T4597] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 3328, setting to 1024 [ 118.593301][ T4597] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 118.662470][ T4597] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.762692][ T5493] loop0: detected capacity change from 0 to 32768 [ 118.778298][ T4597] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 118.804155][ T4597] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 118.832696][ T4597] usb 4-1: Manufacturer: syz [ 118.864060][ T4597] usb 4-1: config 0 descriptor?? [ 118.896684][ T5520] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 118.954555][ T5493] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 119.102587][ T26] audit: type=1800 audit(1790589224.116:14): pid=5493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.361" name=FEF66FE1AA22395D67B7E1DB623D4A60A7DC93893D6C4A91DF79535A855868C5DC dev="loop0" ino=17058 res=0 errno=0 [ 119.339016][ T4597] rc_core: IR keymap rc-hauppauge not found [ 119.345031][ T4597] Registered IR keymap rc-empty [ 119.360325][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 119.396798][ T4597] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 119.447674][ T4597] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 119.495527][ T4597] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 119.544008][ T4597] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8 [ 119.680784][ T4597] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 119.736803][ T4597] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 119.815131][ T4597] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 119.875524][ T4597] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 119.908371][ T5556] loop0: detected capacity change from 0 to 1024 [ 119.924710][ T4597] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 119.968671][ T5556] EXT4-fs (loop0): inline encryption not supported [ 119.983086][ T4597] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 119.988037][ T5556] EXT4-fs (loop0): inline encryption not supported [ 119.999109][ T5556] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 120.008829][ T5556] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 120.053594][ T4597] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 120.102881][ T4597] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 120.124880][ T5556] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,inlinecrypt,inlinecrypt,delalloc,nomblk_io_submit,errors=remount-ro,dioread_nolock,. Quota mode: none. [ 120.146756][ T5556] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.162101][ T4597] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 120.200564][ C1] net_ratelimit: 86 callbacks suppressed [ 120.207540][ T4597] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 120.239330][ T4385] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: comm kworker/u4:11: lblock 0 mapped to illegal pblock 0 (length 1) [ 120.262221][ T4597] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 120.273976][ T4597] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 120.336892][ T4385] EXT4-fs (loop0): Remounting filesystem read-only [ 120.852640][ T4231] usb 4-1: USB disconnect, device number 8 [ 121.089020][ T5594] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 121.227382][ T5596] loop5: detected capacity change from 0 to 512 [ 121.329918][ T5596] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 121.374605][ T5596] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.497943][ T5607] input: syz0 as /devices/virtual/input/input9 [ 122.346694][ T5640] Invalid argument reading file caps for ./file0 [ 122.389070][ T4231] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 122.641008][ T4231] usb 1-1: Using ep0 maxpacket: 16 [ 122.710776][ T5651] netlink: 'syz.2.405': attribute type 2 has an invalid length. [ 122.760161][ T4231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.773079][ T5651] netlink: 'syz.2.405': attribute type 2 has an invalid length. [ 122.782456][ T4231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.792641][ T5651] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.405'. [ 122.837906][ T4231] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 122.887680][ T4231] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 122.933886][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.984256][ T4231] usb 1-1: config 0 descriptor?? [ 123.002800][ T5656] input: syz0 as /devices/virtual/input/input10 [ 123.012565][ T5634] loop5: detected capacity change from 0 to 32768 [ 123.125945][ T5634] XFS (loop5): Mounting V5 Filesystem [ 123.251766][ T5668] sch_fq: defrate 0 ignored. [ 123.287360][ T4234] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 123.441445][ T5634] XFS (loop5): Ending clean mount [ 123.487665][ T4231] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 123.508548][ T5634] XFS (loop5): Quotacheck needed: Please wait. [ 123.521435][ T4231] HID 045e:07da: Invalid code 65791 type 1 [ 123.543660][ T4231] HID 045e:07da: Invalid code 768 type 1 [ 123.552333][ T4231] HID 045e:07da: Invalid code 769 type 1 [ 123.558216][ T4234] usb 2-1: Using ep0 maxpacket: 16 [ 123.563606][ T4231] HID 045e:07da: Invalid code 770 type 1 [ 123.569390][ T4231] HID 045e:07da: Invalid code 771 type 1 [ 123.575784][ T4231] HID 045e:07da: Invalid code 772 type 1 [ 123.581438][ T4231] HID 045e:07da: Invalid code 773 type 1 [ 123.587482][ T4231] HID 045e:07da: Invalid code 774 type 1 [ 123.595092][ T4231] HID 045e:07da: Invalid code 775 type 1 [ 123.603159][ T4231] HID 045e:07da: Invalid code 776 type 1 [ 123.673824][ T4234] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 123.698617][ T4234] usb 2-1: config 0 has no interface number 0 [ 123.723174][ T4234] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 123.747959][ T4231] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0008/input/input11 [ 123.759730][ T4234] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 123.845398][ T4231] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 123.878890][ T5634] XFS (loop5): Quotacheck: Done. [ 123.927406][ T4231] usb 1-1: USB disconnect, device number 4 [ 123.933961][ T4234] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 123.957456][ T5684] loop2: detected capacity change from 0 to 8 [ 123.960490][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.019337][ T4234] usb 2-1: Product: syz [ 124.037952][ T5684] SQUASHFS error: lzo decompression failed, data probably corrupt [ 124.067828][ T4234] usb 2-1: Manufacturer: syz [ 124.081535][ T5684] SQUASHFS error: Failed to read block 0x91: -5 [ 124.101088][ T4234] usb 2-1: SerialNumber: syz [ 124.128122][ T5684] SQUASHFS error: Unable to read metadata cache entry [8f] [ 124.157575][ T4234] usb 2-1: config 0 descriptor?? [ 124.170765][ T5634] loop5: detected capacity change from 32768 to 64 [ 124.191524][ T5684] SQUASHFS error: Unable to read inode 0x7 [ 124.221753][ T5653] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 124.226811][ T5685] fido_id[5685]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 124.260395][ T5653] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 124.360045][ T5684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.415'. [ 124.508545][ T5152] attempt to access beyond end of device [ 124.508545][ T5152] loop5: rw=432129, want=1024, limit=64 [ 124.530515][ T5653] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 124.557525][ T5653] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 124.591353][ T5695] capability: warning: `syz.2.420' uses deprecated v2 capabilities in a way that may be insecure [ 124.600140][ T263] XFS (loop5): log I/O error -5 [ 124.610150][ T263] XFS (loop5): Log I/O Error (0x2) detected at xlog_ioend_work+0xbf/0x110 (fs/xfs/xfs_log.c:1347). Shutting down filesystem. [ 124.617168][ T5152] XFS (loop5): Unmounting Filesystem [ 124.623362][ T263] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 124.835797][ T4234] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 125.078300][ T5703] loop2: detected capacity change from 0 to 512 [ 125.172895][ T5703] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 125.269746][ T5703] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.424: invalid indirect mapped block 4294967295 (level 0) [ 125.348282][ T5703] EXT4-fs (loop2): Remounting filesystem read-only [ 125.388674][ T5703] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.424: invalid indirect mapped block 4294967295 (level 1) [ 125.431463][ T5689] loop3: detected capacity change from 0 to 32768 [ 125.441541][ T5703] EXT4-fs (loop2): Remounting filesystem read-only [ 125.449088][ C1] net_ratelimit: 69 callbacks suppressed [ 125.469254][ T5703] EXT4-fs (loop2): 1 orphan inode deleted [ 125.486672][ T5689] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.417 (5689) [ 125.509066][ T5703] EXT4-fs (loop2): 1 truncate cleaned up [ 125.518630][ T5703] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,block_validity,block_validity,block_validity,quota,init_itable=0x0000000000000002,. Quota mode: writeback. [ 125.568841][ T5689] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 125.602725][ T5689] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 125.651139][ T5689] BTRFS info (device loop3): use zstd compression, level 3 [ 125.658399][ T5689] BTRFS info (device loop3): using free space tree [ 125.658420][ T5689] BTRFS info (device loop3): has skinny extents [ 125.710409][ T4234] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 125.750983][ T4234] asix: probe of 2-1:0.34 failed with error -71 [ 125.768523][ T4234] usb 2-1: USB disconnect, device number 7 [ 125.958671][ T4599] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 126.048194][ T5689] BTRFS info (device loop3): enabling ssd optimizations [ 126.318145][ T4599] usb 3-1: not running at top speed; connect to a high speed hub [ 126.396445][ T4599] usb 3-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 126.407819][ T4599] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.470446][ T4599] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 126.491891][ T4599] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 126.537812][ T4599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.584300][ T26] audit: type=1326 audit(1790589231.641:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.0.434" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d6e4a5159 code=0x0 [ 126.695860][ T4599] usb 3-1: config 0 descriptor?? [ 126.757364][ T4599] usb 3-1: Found UVC 9.00 device (046d:0825) [ 127.191645][ T4599] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 127.390199][ T5794] gadgetfs: bound to dummy_udc driver [ 127.505660][ T4599] usb 3-1: USB disconnect, device number 2 [ 127.529600][ T5785] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 127.708028][ T5801] loop0: detected capacity change from 0 to 128 [ 127.780445][ T5785] usb 2-1: Using ep0 maxpacket: 16 [ 127.907881][ T5785] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.945170][ T5801] FAT-fs (loop0): Directory bread(block 524322) failed [ 127.952099][ T5785] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.962647][ T5801] FAT-fs (loop0): Directory bread(block 524323) failed [ 127.986563][ T5785] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.025978][ T5785] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 128.045189][ T5801] FAT-fs (loop0): Directory bread(block 524324) failed [ 128.055276][ T5801] FAT-fs (loop0): Directory bread(block 524325) failed [ 128.081182][ T5785] usb 2-1: config 0 interface 0 has no altsetting 0 [ 128.106690][ T5785] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 128.121102][ T5801] FAT-fs (loop0): Directory bread(block 524326) failed [ 128.129456][ T5785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.148738][ T5801] FAT-fs (loop0): Directory bread(block 524327) failed [ 128.164740][ T5785] usb 2-1: config 0 descriptor?? [ 128.232461][ T5801] FAT-fs (loop0): Directory bread(block 524328) failed [ 128.270505][ T5801] FAT-fs (loop0): Directory bread(block 524329) failed [ 128.314555][ T5817] loop2: detected capacity change from 0 to 1024 [ 128.354153][ T5801] attempt to access beyond end of device [ 128.354153][ T5801] loop0: rw=3, want=524432, limit=128 [ 128.388630][ T5819] gadgetfs: bound to dummy_udc driver [ 128.436996][ T5801] attempt to access beyond end of device [ 128.436996][ T5801] loop0: rw=2051, want=524490, limit=128 [ 128.557788][ T5817] hfsplus: b-tree write err: -5, ino 3 [ 128.613894][ T2283] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 128.720774][ T5785] logitech-djreceiver 0003:046D:C53A.0009: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.1-1/input0 [ 128.882476][ T2283] usb 6-1: Using ep0 maxpacket: 16 [ 129.002225][ T2283] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 129.010617][ T2283] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 129.040463][ T2283] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 129.062797][ T2283] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 129.071018][ T2283] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 129.111388][ T2283] usb 6-1: config 0 has no interface number 0 [ 129.117537][ T2283] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 129.201053][ T5776] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 129.201301][ T2283] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 129.236299][ T2283] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 129.250336][ T2283] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.272383][ T2283] usb 6-1: config 0 interface 125 has no altsetting 0 [ 129.279379][ T2283] usb 6-1: config 0 interface 125 has no altsetting 2 [ 129.369993][ T5785] usb 2-1: USB disconnect, device number 8 [ 129.480018][ T2283] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 129.504620][ T2283] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.513172][ T2283] usb 6-1: Product: syz [ 129.526992][ T2283] usb 6-1: Manufacturer: syz [ 129.545983][ T2283] usb 6-1: SerialNumber: syz [ 129.562915][ T5776] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 129.583032][ T5776] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.611637][ T5776] usb 3-1: config 0 has no interface number 0 [ 129.617932][ T2283] usb 6-1: config 0 descriptor?? [ 129.638051][ T5776] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 129.665609][ T5776] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 129.681172][ T2283] usb 6-1: selecting invalid altsetting 2 [ 129.724783][ T5776] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.791350][ T5785] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 129.839119][ T5785] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 129.933834][ T5776] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 129.957158][ T5776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.992937][ T5776] usb 3-1: Product: syz [ 130.007907][ T5776] usb 3-1: Manufacturer: syz [ 130.013383][ T5776] usb 3-1: SerialNumber: syz [ 130.055242][ T5776] usb 3-1: config 0 descriptor?? [ 130.091365][ T5815] udc-core: couldn't find an available UDC or it's busy [ 130.100854][ T5815] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 130.342168][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 130.392473][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 130.423841][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 130.566948][ T2283] parport0: fix this legacy no-device port driver! [ 130.614324][ C0] net_ratelimit: 59 callbacks suppressed [ 130.731639][ T5861] loop1: detected capacity change from 0 to 256 [ 130.784775][ T5785] usb 3-1: USB disconnect, device number 3 [ 130.801234][ T2283] usb 6-1: USB disconnect, device number 2 [ 131.619298][ T5885] loop5: detected capacity change from 0 to 128 [ 132.178128][ T4597] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 132.460353][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.466881][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.619657][ T4597] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.640502][ T4597] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 132.701905][ T4597] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.813143][ T5926] loop5: detected capacity change from 0 to 2048 [ 132.891743][ T5926] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 132.946406][ T5920] loop1: detected capacity change from 0 to 8192 [ 132.980171][ T4597] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 133.009939][ T5920] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.023732][ T4597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.104440][ T5932] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 133.127840][ T4597] usb 4-1: Product: syz [ 133.142977][ T4597] usb 4-1: Manufacturer: syz [ 133.193906][ T4597] usb 4-1: SerialNumber: syz [ 133.363944][ T5932] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 133.400707][ T5932] EXT4-fs (loop5): This should not happen!! Data will be lost [ 133.400707][ T5932] [ 133.416167][ T5932] EXT4-fs (loop5): Total free blocks count 0 [ 133.422378][ T5932] EXT4-fs (loop5): Free/Dirty block details [ 133.473269][ T5932] EXT4-fs (loop5): free_blocks=2415919504 [ 133.479138][ T5932] EXT4-fs (loop5): dirty_blocks=32 [ 133.560819][ T5951] loop1: detected capacity change from 0 to 1024 [ 133.570353][ T5932] EXT4-fs (loop5): Block reservation details [ 133.587123][ T5932] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 133.609704][ T5936] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 133.638722][ T5936] EXT4-fs (loop5): This should not happen!! Data will be lost [ 133.638722][ T5936] [ 133.672857][ T5893] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 134.150498][ T4597] ATM dev 0: failed to start ADSL synchronisation: -71 [ 134.190494][ C1] ATM dev 0: usbatm_complete: urb 0xffff888021261500 failed (-71)! [ 134.198727][ T5977] loop5: detected capacity change from 0 to 512 [ 134.205130][ C1] ATM dev 0: usbatm_complete: urb 0xffff8880253be200 failed (-71)! [ 134.213262][ C1] ATM dev 0: usbatm_complete: urb 0xffff8880253a2300 failed (-71)! [ 134.221296][ C1] ATM dev 0: usbatm_complete: urb 0xffff8880253a2800 failed (-71)! [ 134.239372][ T4597] usb 4-1: USB disconnect, device number 9 [ 134.307438][ T5977] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 134.357770][ T5977] EXT4-fs (loop5): orphan cleanup on readonly fs [ 134.386542][ T5977] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3894: comm syz.5.492: Allocating blocks 41-42 which overlap fs metadata [ 134.422826][ T5977] Quota error (device loop5): write_blk: dquota write failed [ 134.448853][ T5977] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 134.459994][ T5977] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.492: Failed to acquire dquot type 0 [ 134.472193][ T5977] EXT4-fs error (device loop5): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 134.494252][ T5977] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #12: comm syz.5.492: corrupted inode contents [ 134.514378][ T5977] EXT4-fs error (device loop5): ext4_dirty_inode:6087: inode #12: comm syz.5.492: mark_inode_dirty error [ 134.543910][ T5977] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #12: comm syz.5.492: corrupted inode contents [ 134.562823][ T5977] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #12: comm syz.5.492: mark_inode_dirty error [ 134.579447][ T2283] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 134.606522][ T5977] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #12: comm syz.5.492: corrupted inode contents [ 134.644890][ T5977] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 134.667237][ T5977] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #12: comm syz.5.492: corrupted inode contents [ 134.693435][ T5977] EXT4-fs error (device loop5): ext4_truncate:4286: inode #12: comm syz.5.492: mark_inode_dirty error [ 134.762143][ T5977] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 134.782357][ T5977] EXT4-fs (loop5): 1 truncate cleaned up [ 134.813767][ T5977] EXT4-fs (loop5): pa ffff88807417e540: logic 1, phys. 41, len 23 [ 134.823085][ T5977] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4904: group 0, free 22, pa_free 23 [ 134.907711][ T2283] usb 2-1: Using ep0 maxpacket: 8 [ 134.981740][ T6001] "syz.3.498" (6001) uses obsolete ecb(arc4) skcipher [ 134.993141][ T6001] syz.3.498 sent an empty control message without MSG_MORE. [ 134.995791][ T5977] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,noblock_validity,abort,barrier=0x0000000000000000,nogrpid,resgid=0x0000000000000000,noinit_itable,nombcache,journal_dev=0x00000000000000072,errors=continue. Quota mode: writeback. [ 135.080886][ T5995] Zero length message leads to an empty skb [ 135.100481][ T2283] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.125317][ T2283] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.225124][ T5977] EXT4-fs error (device loop5): ext4_remount:6062: comm syz.5.492: Abort forced by user [ 135.267400][ T5977] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 135.289176][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 135.404711][ T2283] usb 2-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 135.433042][ T2283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.473445][ T2283] usb 2-1: Product: syz [ 135.526952][ T2283] usb 2-1: Manufacturer: syz [ 135.531660][ T2283] usb 2-1: SerialNumber: syz [ 135.629417][ C0] net_ratelimit: 58 callbacks suppressed [ 135.998532][ T2283] usb 2-1: unit 6 not found! [ 136.090165][ T2283] usb 2-1: USB disconnect, device number 9 [ 136.350890][ T6036] loop3: detected capacity change from 0 to 1764 [ 136.549273][ T4311] udevd[4311]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.940472][ T6030] loop2: detected capacity change from 0 to 131072 [ 137.106430][ T6030] F2FS-fs (loop2): invalid crc value [ 137.173949][ T6030] F2FS-fs (loop2): Found nat_bits in checkpoint [ 137.211700][ T6030] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 137.229169][ T6030] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 137.384847][ T6057] loop5: detected capacity change from 0 to 1764 [ 138.387420][ T6041] loop1: detected capacity change from 0 to 32768 [ 138.438867][ T6041] XFS: attr2 mount option is deprecated. [ 138.456700][ T6046] loop0: detected capacity change from 0 to 32768 [ 138.586735][ T6046] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.510 (6046) [ 138.646680][ T6046] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 138.683902][ T6041] XFS (loop1): Mounting V5 Filesystem [ 138.690680][ T6046] BTRFS info (device loop0): enabling disk space caching [ 138.758324][ T6046] BTRFS info (device loop0): force clearing of disk cache [ 138.851091][ T6046] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 138.894596][ T6041] XFS (loop1): Ending clean mount [ 138.906963][ T6046] BTRFS info (device loop0): use zstd compression, level 3 [ 138.917061][ T6046] BTRFS info (device loop0): disk space caching is enabled [ 138.994187][ T6095] loop2: detected capacity change from 0 to 4096 [ 139.000965][ T6046] BTRFS info (device loop0): has skinny extents [ 139.114519][ T6095] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 139.247438][ T4194] XFS (loop1): Unmounting Filesystem [ 139.561971][ T6078] loop3: detected capacity change from 0 to 40427 [ 139.664599][ T6078] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 139.723118][ T6078] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 139.724741][ T6046] BTRFS info (device loop0): enabling ssd optimizations [ 139.767768][ T6078] F2FS-fs (loop3): invalid crc value [ 139.843767][ T6078] F2FS-fs (loop3): Found nat_bits in checkpoint [ 139.863736][ T6046] BTRFS info (device loop0): clearing free space tree [ 139.901273][ T6046] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 139.927239][ T6046] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 140.212554][ T6078] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 140.219864][ T6078] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 140.371372][ T4264] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 10 /dev/loop0 scanned by udevd (4264) [ 140.689866][ T6157] loop2: detected capacity change from 0 to 512 [ 140.751397][ C1] net_ratelimit: 61 callbacks suppressed [ 140.991797][ T6157] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.095209][ T6157] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.167667][ T4381] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 141.246473][ T4381] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 141.589407][ T2283] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 141.842413][ T2283] usb 1-1: Using ep0 maxpacket: 16 [ 141.990303][ T2283] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 142.008485][ T2283] usb 1-1: config 0 interface 0 has no altsetting 0 [ 142.038420][ T4230] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 142.198544][ T2283] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 142.226708][ T2283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.239198][ T2283] usb 1-1: Product: syz [ 142.244841][ T2283] usb 1-1: Manufacturer: syz [ 142.250758][ T2283] usb 1-1: SerialNumber: syz [ 142.280156][ T2283] usb 1-1: config 0 descriptor?? [ 142.407950][ T4230] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 142.474233][ T4230] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 142.528732][ T4230] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 142.539219][ T6197] FAULT_INJECTION: forcing a failure. [ 142.539219][ T6197] name failslab, interval 1, probability 0, space 0, times 0 [ 142.564022][ T4230] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 142.581332][ T6197] CPU: 1 PID: 6197 Comm: syz.3.544 Not tainted syzkaller #0 [ 142.588762][ T6197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.598950][ T6197] Call Trace: [ 142.602255][ T6197] [ 142.605214][ T6197] dump_stack_lvl+0x188/0x250 [ 142.605728][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.609964][ T6197] ? show_regs_print_info+0x20/0x20 [ 142.609992][ T6197] ? load_image+0x410/0x410 [ 142.610015][ T6197] ? __might_sleep+0xf0/0xf0 [ 142.610034][ T6197] ? __lock_acquire+0x7b50/0x7b50 [ 142.610063][ T6197] should_fail+0x383/0x4b0 [ 142.641782][ T6197] should_failslab+0x5/0x20 [ 142.646310][ T6197] slab_pre_alloc_hook+0x51/0xc0 [ 142.651283][ T6197] ? __d_alloc+0x27/0x6d0 [ 142.655634][ T6197] kmem_cache_alloc+0x3d/0x280 [ 142.660432][ T6197] __d_alloc+0x27/0x6d0 [ 142.660461][ T6197] ? d_alloc_pseudo+0xe/0x70 [ 142.660484][ T6197] d_alloc_pseudo+0x19/0x70 [ 142.660503][ T6197] alloc_file_pseudo+0xe0/0x200 [ 142.660529][ T6197] ? alloc_empty_file_noaccount+0x80/0x80 [ 142.660555][ T6197] ? alloc_fd+0x59e/0x650 [ 142.660577][ T6197] sock_alloc_file+0xb3/0x240 [ 142.660601][ T6197] __sys_socket+0x11d/0x170 [ 142.660624][ T6197] __x64_sys_socket+0x76/0x80 [ 142.660645][ T6197] do_syscall_64+0x4c/0xa0 [ 142.660665][ T6197] ? clear_bhb_loop+0x30/0x80 [ 142.660683][ T6197] ? clear_bhb_loop+0x30/0x80 [ 142.660706][ T6197] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 142.660727][ T6197] RIP: 0033:0x7f50b73bf159 [ 142.660745][ T6197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.660761][ T6197] RSP: 002b:00007f50b5617028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 142.660782][ T6197] RAX: ffffffffffffffda RBX: 00007f50b7646fa0 RCX: 00007f50b73bf159 [ 142.660795][ T6197] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 0000000000000018 [ 142.660806][ T6197] RBP: 00007f50b745606b R08: 0000000000000000 R09: 0000000000000000 [ 142.660820][ T6197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.660833][ T6197] R13: 00007f50b7647038 R14: 00007f50b7646fa0 R15: 00007ffe16283d78 [ 142.660876][ T6197] [ 142.805133][ T2283] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input13 [ 142.877097][ T6179] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 142.898513][ T4230] cyberjack 2-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 142.938734][ T4230] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 142.966643][ T6200] loop5: detected capacity change from 0 to 256 [ 143.171867][ T6200] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 143.208754][ T6179] cyberjack ttyUSB0: cyberjack_write - failed submitting write urb, error -90 [ 143.285668][ T26] audit: type=1800 audit(1790589248.400:16): pid=6200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.543" name="file1" dev="loop5" ino=1048632 res=0 errno=0 [ 143.336032][ T6200] exFAT-fs (loop5): error, invalid size(size(21) > aligned(9223372036854777344) [ 143.336032][ T6200] [ 143.375830][ T2283] rc_core: IR keymap rc-imon-pad not found [ 143.382233][ T2283] Registered IR keymap rc-empty [ 143.405320][ T2283] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 143.418482][ T6200] exFAT-fs (loop5): Filesystem has been set read-only [ 143.434737][ T2283] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 143.476941][ T4233] usb 2-1: USB disconnect, device number 10 [ 143.513450][ T4233] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 143.536518][ T2283] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 143.556244][ T4233] cyberjack 2-1:1.0: device disconnected [ 143.571631][ T2283] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input14 [ 143.649659][ T2283] imon 1-1:0.0: iMON device (15c2:0041, intf0) on usb<1:5> initialized [ 143.771787][ T2283] usb 1-1: USB disconnect, device number 5 [ 143.777945][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 144.672843][ T6222] loop2: detected capacity change from 0 to 4096 [ 144.820645][ T6222] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,noblock_validity,,errors=continue. Quota mode: writeback. [ 144.869733][ T6222] EXT4-fs (loop2): resizing filesystem from 512 to 16 blocks [ 144.884476][ T6222] EXT4-fs warning (device loop2): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 145.193845][ T6237] sd 0:0:1:0: PR command failed: 2 [ 145.199082][ T6237] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 145.212944][ T6237] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 145.573160][ T6256] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 145.668425][ T7] libceph: connect (1)[c::]:6789 error -101 [ 145.680480][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 145.720339][ T7] libceph: connect (1)[c::]:6789 error -101 [ 145.739101][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 145.796619][ T6271] loop1: detected capacity change from 0 to 512 [ 145.907056][ T6271] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 145.972662][ T6271] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.570: inode #15: comm syz.1.570: iget: illegal inode # [ 146.015442][ T7] libceph: connect (1)[c::]:6789 error -101 [ 146.067274][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 146.090784][ C1] net_ratelimit: 62 callbacks suppressed [ 146.144014][ T6271] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.570: couldn't read orphan inode 15 (err -117) [ 146.191461][ T6271] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000400000,errors=continue,,errors=continue. Quota mode: writeback. [ 146.284467][ T7] kernel write not supported for file /snd/seq (pid: 7 comm: kworker/0:0) [ 146.379633][ T6289] loop3: detected capacity change from 0 to 1024 [ 146.449015][ T6262] ceph: No mds server is up or the cluster is laggy [ 146.519501][ T6291] loop2: detected capacity change from 0 to 16 [ 146.535689][ T6267] ceph: No mds server is up or the cluster is laggy [ 146.544483][ T4596] libceph: connect (1)[c::]:6789 error -101 [ 146.586739][ T4596] libceph: mon0 (1)[c::]:6789 connect error [ 146.621308][ T6291] erofs: (device loop2): mounted with root inode @ nid 36. [ 146.674991][ T7] libceph: connect (1)[c::]:6789 error -101 [ 146.687884][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 146.704310][ T6291] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 146.717076][ T6291] erofs: (device loop2): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 146.730835][ T6291] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 146.799549][ T6291] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 146.898188][ T26] audit: type=1800 audit(1790589252.027:17): pid=6291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.578" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 146.952426][ T4233] libceph: connect (1)[c::]:6789 error -101 [ 146.959151][ T4233] libceph: mon0 (1)[c::]:6789 connect error [ 147.555381][ T6312] netlink: 'syz.3.587': attribute type 1 has an invalid length. [ 147.743300][ T6320] FAULT_INJECTION: forcing a failure. [ 147.743300][ T6320] name failslab, interval 1, probability 0, space 0, times 0 [ 147.812793][ T6320] CPU: 0 PID: 6320 Comm: syz.3.590 Not tainted syzkaller #0 [ 147.820347][ T6320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.820362][ T6320] Call Trace: [ 147.820370][ T6320] [ 147.820379][ T6320] dump_stack_lvl+0x188/0x250 [ 147.820411][ T6320] ? show_regs_print_info+0x20/0x20 [ 147.820430][ T6320] ? load_image+0x410/0x410 [ 147.820452][ T6320] ? __might_sleep+0xf0/0xf0 [ 147.820471][ T6320] ? __lock_acquire+0x7b50/0x7b50 [ 147.820494][ T6320] ? alloc_pipe_info+0x1f5/0x4a0 [ 147.820513][ T6320] ? __do_pipe_flags+0x46/0x1f0 [ 147.820532][ T6320] ? do_pipe2+0xa7/0x190 [ 147.820551][ T6320] should_fail+0x383/0x4b0 [ 147.820579][ T6320] should_failslab+0x5/0x20 [ 147.820597][ T6320] slab_pre_alloc_hook+0x51/0xc0 [ 147.820616][ T6320] ? __d_alloc+0x27/0x6d0 [ 147.837389][ T6320] kmem_cache_alloc+0x3d/0x280 [ 147.837424][ T6320] __d_alloc+0x27/0x6d0 [ 147.847317][ T6320] ? d_alloc_pseudo+0xe/0x70 [ 147.847358][ T6320] d_alloc_pseudo+0x19/0x70 [ 147.847378][ T6320] alloc_file_pseudo+0xe0/0x200 [ 147.847404][ T6320] ? alloc_empty_file_noaccount+0x80/0x80 [ 147.856735][ T6320] ? atime_needs_update+0x770/0x770 [ 147.856770][ T6320] ? debug_mutex_init+0x34/0x70 [ 147.866708][ T6320] ? create_pipe_files+0x2b9/0x6b0 [ 147.866739][ T6320] create_pipe_files+0x390/0x6b0 [ 147.866764][ T6320] __do_pipe_flags+0x46/0x1f0 [ 147.875981][ T6320] do_pipe2+0xa7/0x190 [ 147.876021][ T6320] ? pipe_fcntl+0x530/0x530 [ 147.884928][ T6320] ? lock_chain_count+0x20/0x20 [ 147.884960][ T6320] ? syscall_enter_from_user_mode+0x21/0x70 [ 147.894210][ T6320] __x64_sys_pipe2+0x56/0x60 [ 147.894235][ T6320] do_syscall_64+0x4c/0xa0 [ 147.903143][ T6320] ? clear_bhb_loop+0x30/0x80 [ 147.903167][ T6320] ? clear_bhb_loop+0x30/0x80 [ 147.903189][ T6320] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 147.912251][ T6320] RIP: 0033:0x7f50b73bf159 [ 147.912274][ T6320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.912300][ T6320] RSP: 002b:00007f50b5617028 EFLAGS: 00000246 [ 147.922841][ T6320] ORIG_RAX: 0000000000000125 [ 147.932893][ T6320] RAX: ffffffffffffffda RBX: 00007f50b7646fa0 RCX: 00007f50b73bf159 [ 147.932912][ T6320] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000000 [ 147.932925][ T6320] RBP: 00007f50b745606b R08: 0000000000000000 R09: 0000000000000000 [ 147.942952][ T6320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.942967][ T6320] R13: 00007f50b7647038 R14: 00007f50b7646fa0 R15: 00007ffe16283d78 [ 147.942998][ T6320] [ 148.446016][ T6336] input: syz0 as /devices/virtual/input/input15 [ 148.537472][ T6327] device syzkaller1 entered promiscuous mode [ 148.712833][ T4377] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.857549][ T4377] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.041575][ T6356] ================================================================== [ 149.050455][ T6356] BUG: KASAN: slab-out-of-bounds in string+0x204/0x290 [ 149.050512][ T6356] Read of size 1 at addr ffff8880254f0709 by task syz.0.602/6356 [ 149.050531][ T6356] [ 149.068112][ T6356] CPU: 1 PID: 6356 Comm: syz.0.602 Not tainted syzkaller #0 [ 149.075531][ T6356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.085637][ T6356] Call Trace: [ 149.085653][ T6356] [ 149.085663][ T6356] dump_stack_lvl+0x188/0x250 [ 149.085694][ T6356] ? show_regs_print_info+0x20/0x20 [ 149.085712][ T6356] ? _printk+0xda/0x130 [ 149.091951][ T6356] ? load_image+0x410/0x410 [ 149.101813][ T6356] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 149.115943][ T6356] ? read_lock_is_recursive+0x10/0x10 [ 149.115980][ T6356] print_address_description+0x60/0x2d0 [ 149.116004][ T6356] ? string+0x204/0x290 [ 149.116021][ T6356] kasan_report+0xdf/0x130 [ 149.131885][ T6356] ? string+0x204/0x290 [ 149.131921][ T6356] string+0x204/0x290 [ 149.140492][ T6356] vsnprintf+0x10db/0x1c20 [ 149.148904][ T6356] pointer+0x7b2/0xc60 [ 149.153009][ T6356] ? stack_trace_snprint+0xe0/0xe0 [ 149.158226][ T6356] ? check_noncircular+0x189/0x330 [ 149.158374][ T6359] loop2: detected capacity change from 0 to 2048 [ 149.163352][ T6356] ? string+0x290/0x290 [ 149.173830][ T6356] ? format_decode+0x8b1/0x1330 [ 149.178745][ T6356] vsnprintf+0xd7c/0x1c20 [ 149.183297][ T6356] vprintk_store+0x378/0x11b0 [ 149.188177][ T6356] ? rcu_lock_release+0x5/0x20 [ 149.188209][ T6356] ? printk_parse_prefix+0x310/0x310 [ 149.198255][ T6356] ? verify_lock_unused+0x140/0x140 [ 149.198308][ T6356] vprintk_emit+0x85/0x150 [ 149.198333][ T6356] _printk+0xda/0x130 [ 149.207942][ T6356] ? load_image+0x410/0x410 [ 149.207968][ T6356] ? __kasan_kmalloc+0xc6/0xe0 [ 149.207990][ T6356] ? kmemdup+0x22/0x50 [ 149.208016][ T6356] __dynamic_pr_debug+0x196/0x240 [ 149.208046][ T6356] ? collect_syscall+0x6a0/0x6a0 [ 149.208074][ T6356] ? mutex_lock_io_nested+0x60/0x60 [ 149.208111][ T6356] nfc_llcp_get_sdp_ssap+0x3c1/0x3f0 [ 149.208140][ T6356] llcp_sock_bind+0x3a2/0x770 [ 149.208168][ T6356] ? llcp_sock_recvmsg+0xca0/0xca0 [ 149.208204][ T6356] ? bpf_lsm_socket_bind+0x5/0x10 [ 149.208225][ T6356] ? security_socket_bind+0x7c/0xa0 [ 149.208252][ T6356] __sys_bind+0x2e9/0x3e0 [ 149.208276][ T6356] ? __ia32_sys_socketpair+0xb0/0xb0 [ 149.208323][ T6356] __x64_sys_bind+0x76/0x80 [ 149.208346][ T6356] do_syscall_64+0x4c/0xa0 [ 149.208366][ T6356] ? clear_bhb_loop+0x30/0x80 [ 149.208387][ T6356] ? clear_bhb_loop+0x30/0x80 [ 149.208410][ T6356] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 149.208432][ T6356] RIP: 0033:0x7f6d6e4a5159 [ 149.208453][ T6356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.208473][ T6356] RSP: 002b:00007f6d6c6fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 149.208499][ T6356] RAX: ffffffffffffffda RBX: 00007f6d6e72cfa0 RCX: 00007f6d6e4a5159 [ 149.208516][ T6356] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000004 [ 149.208530][ T6356] RBP: 00007f6d6e53c06b R08: 0000000000000000 R09: 0000000000000000 [ 149.208544][ T6356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.208559][ T6356] R13: 00007f6d6e72d038 R14: 00007f6d6e72cfa0 R15: 00007ffee98c7978 [ 149.208602][ T6356] [ 149.208611][ T6356] [ 149.208617][ T6356] Allocated by task 6356: [ 149.208628][ T6356] __kasan_kmalloc+0xaf/0xe0 [ 149.208650][ T6356] kmemdup+0x22/0x50 [ 149.208666][ T6356] llcp_sock_bind+0x360/0x770 [ 149.208685][ T6356] __sys_bind+0x2e9/0x3e0 [ 149.217163][ T6356] __x64_sys_bind+0x76/0x80 [ 149.217185][ T6356] do_syscall_64+0x4c/0xa0 [ 149.217204][ T6356] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 149.217222][ T6356] [ 149.217228][ T6356] The buggy address belongs to the object at ffff8880254f0708 [ 149.217228][ T6356] which belongs to the cache kmalloc-8 of size 8 [ 149.217244][ T6356] The buggy address is located 1 bytes inside of [ 149.217244][ T6356] 8-byte region [ffff8880254f0708, ffff8880254f0710) [ 149.217263][ T6356] The buggy address belongs to the page: [ 149.217273][ T6356] page:ffffea0000953c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880254f0370 pfn:0x254f0 [ 149.229099][ T6358] tcp_new: sender end=1565580762 maxend=1565580762 maxwin=65495 scale=7 receiver end=0 maxend=0 maxwin=0 scale=0 [ 149.231756][ T6356] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 149.231792][ T6356] raw: 00fff00000000200 ffffea00051cab80 0000001300000013 ffff888016c41280 [ 149.231810][ T6356] raw: ffff8880254f0370 0000000080660055 00000001ffffffff 0000000000000000 [ 149.246677][ T6359] kobject: 'loop2' (ffff88814083ea00): kobject_uevent_env [ 149.247368][ T6356] page dumped because: kasan: bad access detected [ 149.256790][ T6359] kobject: 'loop2' (ffff88814083ea00): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 149.257341][ T6356] page_owner tracks the page as allocated [ 149.277726][ T4311] inotify_handle_inode_event: group=ffff88801b784800 mark=ffff8880535060c8 mask=8000 [ 149.281773][ T6356] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 13785446400, free_ts 0 [ 149.281806][ T6356] get_page_from_freelist+0x24f6/0x2670 [ 149.286412][ T6359] send_to_group: group=ffff88801b784800 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff888077b03910 data_type=1 dir=0000000000000000 cookie=0 [ 149.290891][ T6356] __alloc_pages+0x1ee/0x480 [ 149.290914][ T6356] alloc_page_interleave+0x24/0x1e0 [ 149.290933][ T6356] new_slab+0xc0/0x4b0 [ 149.305889][ T6358] tcp_in_window: START [ 149.306111][ T6356] ___slab_alloc+0x807/0xdd0 [ 149.306135][ T6356] __kmalloc+0x11d/0x340 [ 149.306149][ T6356] usb_set_configuration+0x342/0x2030 [ 149.325842][ T6358] tcp_in_window: [ 149.334280][ T6356] usb_generic_driver_probe+0x89/0x150 [ 149.334313][ T6356] usb_probe_device+0x126/0x250 [ 149.334329][ T6356] really_probe+0x276/0xc70 [ 149.342343][ T6358] seq=1565580761 ack=0+(0) sack=0+(0) win=65495 end=1565580762 [ 149.350282][ T6356] __driver_probe_device+0x1f5/0x390 [ 149.350307][ T6356] driver_probe_device+0x4f/0x420 [ 149.350325][ T6356] __device_attach_driver+0x2b0/0x500 [ 149.358320][ T6358] tcp_in_window: sender end=1565580762 maxend=1565580762 maxwin=65495 scale=7 receiver end=0 maxend=0 maxwin=0 scale=0 [ 149.366257][ T6356] bus_for_each_drv+0x184/0x210 [ 149.366280][ T6356] __device_attach+0x2a7/0x480 [ 149.366298][ T6356] bus_probe_device+0xba/0x1d0 [ 149.374262][ T6358] tcp_in_window: [ 149.377288][ T6356] page_owner free stack trace missing [ 149.377298][ T6356] [ 149.377304][ T6356] Memory state around the buggy address: [ 149.377316][ T6356] ffff8880254f0600: fc fc fc 05 fc fc fc fc fb fc fc fc fc 06 fc fc [ 149.379635][ T6358] seq=1565580761 ack=0+(0) sack=0+(0) win=65495 end=1565580762 [ 149.383955][ T6356] ffff8880254f0680: fc fc 06 fc fc fc fc 06 fc fc fc fc 05 fc fc fc [ 149.388558][ T6358] tcp_in_window: sender end=1565580762 maxend=1565580762 maxwin=65495 scale=7 receiver end=0 maxend=0 maxwin=0 scale=0 [ 149.392417][ T6356] >ffff8880254f0700: fc 01 fc fc fc fc 00 fc fc fc fc 00 fc fc fc fc [ 149.397113][ T6358] tcp_in_window: I=1 II=1 III=1 IV=1 [ 149.401399][ T6356] ^ [ 149.401412][ T6356] ffff8880254f0780: fb fc fc fc fc fb fc fc fc fc fb fc fc fc fc fa [ 149.406008][ T6358] tcp_in_window: res=1 sender end=1565580762 maxend=1565580762 maxwin=65495 receiver end=0 maxend=65495 maxwin=0 [ 149.410390][ T6356] ffff8880254f0800: fc fc fc fc fb fc fc fc fc fb fc fc fc fc fa fc [ 149.416295][ T6358] tcp_conntracks: [ 149.418591][ T6356] ================================================================== [ 149.432310][ T6358] syn=1 ack=0 fin=0 rst=0 old=0 new=1 [ 149.445224][ T6356] Disabling lock debugging due to kernel taint [ 149.445236][ T6356] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 149.445246][ T6356] CPU: 1 PID: 6356 Comm: syz.0.602 Tainted: G B syzkaller #0 [ 149.453692][ T4311] fsnotify_insert_event: group=ffff88801b784800 event=ffff88802243b300 [ 149.462299][ T6356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.462314][ T6356] Call Trace: [ 149.462321][ T6356] [ 149.462329][ T6356] dump_stack_lvl+0x188/0x250 [ 149.462354][ T6356] ? show_regs_print_info+0x20/0x20 [ 149.474444][ T6359] inotify_handle_inode_event: group=ffff88801b784800 mark=ffff8880535060c8 mask=8 [ 149.481844][ T6356] ? load_image+0x410/0x410 [ 149.481872][ T6356] panic+0x2f8/0x850 [ 149.481893][ T6356] ? __lock_acquire+0x7b50/0x7b50 [ 149.490595][ T6364] async_waiting @ 6364 [ 149.499057][ T6356] ? bpf_jit_dump+0xd0/0xd0 [ 149.499085][ T6356] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 149.499106][ T6356] ? _raw_spin_unlock+0x40/0x40 [ 149.518328][ T6359] fsnotify_insert_event: group=ffff88801b784800 event=ffff88802243b3c0 [ 149.523090][ T6356] ? string+0x204/0x290 [ 149.523118][ T6356] check_panic_on_warn+0x80/0xa0 [ 149.531229][ T6364] async_continuing @ 6364 after 1 usec [ 149.538446][ T6356] ? string+0x204/0x290 [ 149.538471][ T6356] end_report+0x6d/0xf0 [ 149.538490][ T6356] kasan_report+0x102/0x130 [ 149.553840][ T6365] sock ffff888061688600 [ 149.558779][ T6356] ? string+0x204/0x290 [ 149.558805][ T6356] string+0x204/0x290 [ 149.558824][ T6356] vsnprintf+0x10db/0x1c20 [ 149.558847][ T6356] pointer+0x7b2/0xc60 [ 149.574344][ T3559] get_one_event: group=ffff88801b784800 event=ffff88802243b300 [ 149.578257][ T6356] ? stack_trace_snprint+0xe0/0xe0 [ 149.578280][ T6356] ? check_noncircular+0x189/0x330 [ 149.578298][ T6356] ? string+0x290/0x290 [ 149.583569][ T3559] fsnotify_remove_first_event: group=ffff88801b784800 event=ffff88802243b300 [ 149.587720][ T6356] ? format_decode+0x8b1/0x1330 [ 149.587746][ T6356] vsnprintf+0xd7c/0x1c20 [ 149.587770][ T6356] vprintk_store+0x378/0x11b0 [ 149.681819][ C0] virtqueue callback for ffff888146e3be00 (ffffffff8444ab50) [ 149.683652][ T6356] ? rcu_lock_release+0x5/0x20 [ 149.686001][ C0] virtqueue interrupt with no work for ffff888146e3bd00 [ 149.691615][ T6356] ? printk_parse_prefix+0x310/0x310 [ 149.699721][ C0] virtqueue interrupt with no work for ffff888146e3bc00 [ 150.021368][ T6356] ? verify_lock_unused+0x140/0x140 [ 150.026592][ T6356] vprintk_emit+0x85/0x150 [ 150.031008][ T6356] _printk+0xda/0x130 [ 150.035002][ T6356] ? load_image+0x410/0x410 [ 150.039506][ T6356] ? __kasan_kmalloc+0xc6/0xe0 [ 150.044272][ T6356] ? kmemdup+0x22/0x50 [ 150.048338][ T6356] __dynamic_pr_debug+0x196/0x240 [ 150.053362][ T6356] ? collect_syscall+0x6a0/0x6a0 [ 150.058299][ T6356] ? mutex_lock_io_nested+0x60/0x60 [ 150.063496][ T6356] nfc_llcp_get_sdp_ssap+0x3c1/0x3f0 [ 150.068879][ T6356] llcp_sock_bind+0x3a2/0x770 [ 150.073570][ T6356] ? llcp_sock_recvmsg+0xca0/0xca0 [ 150.078684][ T6356] ? bpf_lsm_socket_bind+0x5/0x10 [ 150.083707][ T6356] ? security_socket_bind+0x7c/0xa0 [ 150.088907][ T6356] __sys_bind+0x2e9/0x3e0 [ 150.093327][ T6356] ? __ia32_sys_socketpair+0xb0/0xb0 [ 150.098616][ T6356] __x64_sys_bind+0x76/0x80 [ 150.103293][ T6356] do_syscall_64+0x4c/0xa0 [ 150.107705][ T6356] ? clear_bhb_loop+0x30/0x80 [ 150.112380][ T6356] ? clear_bhb_loop+0x30/0x80 [ 150.117052][ T6356] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.122946][ T6356] RIP: 0033:0x7f6d6e4a5159 [ 150.127362][ T6356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.146986][ T6356] RSP: 002b:00007f6d6c6fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 150.155405][ T6356] RAX: ffffffffffffffda RBX: 00007f6d6e72cfa0 RCX: 00007f6d6e4a5159 [ 150.163375][ T6356] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000004 [ 150.171441][ T6356] RBP: 00007f6d6e53c06b R08: 0000000000000000 R09: 0000000000000000 [ 150.179499][ T6356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.188090][ T6356] R13: 00007f6d6e72d038 R14: 00007f6d6e72cfa0 R15: 00007ffee98c7978 [ 150.196097][ T6356] [ 150.199320][ T6356] Kernel Offset: disabled [ 150.203640][ T6356] Rebooting in 86400 seconds..