last executing test programs: 1m17.835111503s ago: executing program 4 (id=84): capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000280)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stack\x00') read$FUSE(r0, &(0x7f00000004c0)={0x2020}, 0x2020) 1m17.299525246s ago: executing program 4 (id=85): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f00000000c0)=0xfd, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0xe, 0x0, @val=0x80}}}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x3f7, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000003460200bfa30000000000001702000000feffff7a0a00fe14ffffff79a4f0ff00000000b7060000ff0800007e640200000000005502faff037202000404000001007d60a6040000001000006a0a58fe39000f00850000006c000000bc600000000000009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd00000000000000000000007777e2704653f620b2272c3c7fea60491073847c4b7bbaed91f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a1f00e891728807982d90e116bba29bb70900000000000000c63ad2e7402f9cb424ac416e66af9ebbfea905d37cf226312cb81ec8439cea06e7fa5e5b3596301460142f83b464d9e57dfdb06dcf9101000100130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ebdecbd061772daa52a38539295d3fea7a7e669441e1ff04114dfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cbe8925efd0c81af69a3e97588878d7ce18b68bc37e061d33357d6a39d33c702576cc2a8891663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b506bfb93122fc776aadec51a367658100000000000000b148a90000000000a2a283801ff218538cb12c72b56ffb6b7a062581ec749f5700000000009f1f5ab2e02739ccd50523d3360300005cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb0e6d5244c1ffb0e97628a88a5e37032f1e8f6c893e514f2b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2816e301fc8a24dba6fca8b270d44fe65e7bd90a5fc16387bcb5e3df18d7d2a33c72cfda827b8926a6dc6bc19ce398cb8fe48b11b7f93e6fdfb040283c9627bd40909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9598eb067b21111dbaa58b19a52f3f12880128d08eb477ad349ca214bc7f80000000000ffb52da89cff41552996e20a585c7d265bd749eeba040fa7111c84142757709d7c475fac2839beb833327db41c6b647c7ee9ad419a6c68dd5c2ce4fa23c280518fc6e54d1b055cae5492e8c4cdd314a49631a15de2bffc920dd74e670794acec7a9da17d809bf956f1af51cf3c0711792d3071dfdaec3c66053cdb00028f6fba8da8f53de39a5999e56fc26ae866674627c8a53d3fd245050060ed40782d1d98bf1e1f5dfd4d1fb399624c12732e300818b222ce029ce01055f941721226e3e5f05d2837240f8f6831b6ef2a02ec64aae1eea9cfac06d8b7042e8ebdc6cb0d4a140e1e631d06afc99d397c5b67b290344e347c953806b298f288884335f624378b3748a4a86bbd0a62127b2c28ce3737661b98bd45965b537ece7bd4e365ffd5567df4d02034c8d488a49c6fb1a0a02eaab2f271d3a14e44211e4ff602d146f72355972860bdd14719d65301964d022819b75696ce47534c9d989d69a445095ff8fbebd2c84635acc333f2aca4623cfe9f9e6c3f9fbb4374c08e1be5eec12c329a87d335fd7a52a4e4e7c2e57fa2f0df9500347b300f84230783cb665f3fa44f5d6fa987aa93c2619ef4977f9e4d38adec323778f3bc987533ffd85fe5417398a3001b394fccbd2faee83b5e2b8a2dd18cf067b619a82c4706531b3ef336a84e825c63b9bc7b98b4ad6a471692224adef86f4c9930169dfa133e22929d5a27e10bfbcfe7c02ca451afd74d26f489e0e09cf1b596ae0c959cf26cb0c8114a9311b7f2fe2ad977074ff5f62f6777a20700414ed03ba3d7404eadd43a62ad1173491a5c099290393e1f85aeb3886fbb7f6646212054a850d58a71c6d6027cd3a5ff22e98672349f9bddb23622e2f19b39e51ced84524567ec1fcb233a2fb85371e9b08b6fd4adcd4db148ed26757123a0e604bcf6ffdcc303956e1805f1746361bd3eeb55d3fefe6ac274c2e6c78963430118942d62a465698e600dadd81a53ffd29358746e8db2499e3fca62b0ff660b0aaeedadeb194a9217e9fed2ce04cc24451871d5bcd76173ab7123cc27eef33dbb4d3c3bf1fc2df68a98345c15667388c5000000000000000000000015000000c0459f900702908d4979288d06c7159ef2663dc7ea9302b10bf2da21e3990ddf20a38adc1fd15124310daf2461224cfbfd5e6265d012d60fc9e39209ce3209720f8d7bf39bf71d0d46ed6d51eede797da70cf0b7463cffc80a7a56eeb25ed0adfb146a3221c20d51f172cf2eefe1e6b28cffc1e40a789d5513626f5c4fbf65a2b5a093634b806b7ee570f70f624ce8c02d4c1ec7a9370f42a807f1d46fe77be0637a8007343b7771788f64b36cab94a99243bc780702f98f34a80f81aeb853f97c3e9586805d1a240d7e870b15defbc6b21fdc98a79759c9b8375313deea0000000009e38e9539d6b9507b6f3f8d29992d080a13aed8879a1f2cf352fb5a376427f89d432f7fe7c0cad2ce38427fc773cef47e00000000000000000000000000000000000d09b8ee6321377ffcb6cc386f8704ae9ce6c11b4bb91d0097ef2b77e0cd28af1222e68c2745eca64fa40db07f6e5925224069d14395f7170ab9c2d396f7510f65ce5b0405d8951a70a37117d13c5b2f684c52bff2dc895f5e06e497adee9de0012dd140c592137c90319f8a578007b57aaba3fb93d29a6584313e5b58f8a71cebf77a0891f3633dba69588ec728e785e6e4431fce5a143451c7a51c22b1b605347db811eb9a461f4ef2612181aa8cafc33a2047b7ba57a5"], &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000001100), 0x0, 0x10, &(0x7f0000001140), 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffea8}, 0x24) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10042, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x11, &(0x7f0000000780)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8}}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@noload}, {@data_writeback}]}, 0x1, 0x631, &(0x7f0000001940)="$eJzs3c1vVFUbAPDn3k6/3/edQt6ouJBGYyBRWlrAEGMC3bgiBD92riotBBkooTVaJLFNcGNi3LgwceVC/C+UxK0Lty7cuDIkxBgWYlDG3Jk7ZTrt9Hs6pf39kmnvmTNzzrlNnzlnzpxzJ4A9azD7kUYciIhrSUSxLq8QeeZg9XH3/7h5PrslUS6/9XsSNz9O5urLSvLf/fmT/ylG8lMasb9jab3Tszcuj5dKk9fz9PDMlWvD07M3jly6Mn5x8uLk1dFXRk+eOH7i5MjRTZ1fXvXf2Y8zt977oPjp2Xe++ephMvLtL2eTOB2P8gdk59X43O5N1Zz9zQajXPVgUUYacXKTZe8UfxZr/ycV3dk/RFJoZ4tYjzQiTkVEZ0Q8HcXoiMfBWoxP3mhr44CWKidR6aMGy8Dek0TTrEs9+YvEUj0tbROwHWrjgNp7++XeBy+VtnJIAmyTe2PVubpq7HdGRC3+C9W5weipzA303U/q53kqc32bm5mryur48Yezt7JbNJmHA1pjbr42y93Y/yeV2ByI6nuAvvvpovgfy0cBaf45wZuNBa9x8nywIS3+YfvMzUfEM3n/3xVrjv80j91a/L+7wfrFPwAAAAAAAGydO2MR8fJy6//ShfU/Xcus/+mPiNNbUP/qn/+ld/ODZAuqA+rcG4t4bdn1vwtrfAc68tR/K+sBOpMLl0qTRyPifxFxODq7s/RIQ7n1K4SPfLb/y2b116//y25Z/bW1gHlJdwsNa4kmxmfGN3veQMS9+YhnK+t/D+b3LF7/k/X/yTL9fxbf19ZYx/4Xb59rlrd6/AOtUv464tCy/f/j4Xay8vU5hivjgeHaqGCp5z76/Ltm9Yt/aJ+s/+9bOf67k/rr9Uyvr/yuiDg2Wyg3y9/o+L8rebujVn7mw/GZmesjEV3JmaX3j66vzbBb1eKhFi9Z/B9+YeX5v4Xxf10c9kbE3BrrfOpR/6/N8vT/0D5Z/E+s3P8XF/f/6z8YvT3wfbP6z62p/z9e6dMP5/eY/4N6S6/HsdYAbUtzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAJl0bEfyJJhxaO03RoKKI/Iv4ffWlpanrmpQtT71+dyPIq3/+f1r7pt1hNJ7Xv/x+oS482pI9FxL6I+KKjt5IeOj9Vmmj3yQMAAAAAAAAAAAAAAAAAAMAO0V/Z81/ubtz/n/mto92tA1qukP8W77D3FDb8zHL3ljYE2HYbj3/gSTa/rvjvbGlbgO3XPP4fPCxXNNz9+vMtbxOwPYz/Ye/aYPz7uAB2Af0/7FVrnNPraXU7gHbQ/wMAAAAAwK6y7+Cdn5OImHu1t3LLdOV5vW1tGdBqabsbALSNNbywdxWm2t0CoF1s6AeShaO/Gjf7VzRf/Z+0pkEAAAAAAAAAAAAAwBKHDjTf/29vAOxuK+//t7YfdrMV9v8vF/wuFwC7SPOv/tD3w27nPT6wWm9v/z8AAAAAAAAAAAAA7AA9Ny6Pl0qT16dnn7yDUzujGes7mBvfXDnl7p1wFosPHrWm5M6I2BknuAUHWbCVSpPlcsTqD65dgqONbW7vyxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDYvwEAAP//9HcgKQ==") 1m15.954540839s ago: executing program 4 (id=88): bpf$PROG_LOAD(0x5, 0x0, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r0, 0xc) 1m15.710662105s ago: executing program 4 (id=91): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x162, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000600)={0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002007f01010008000100ac14143308000300", @ANYRES8=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000800)='tasks\x00', 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000140)=0x1a6, 0x4) sendmmsg$inet(r5, &(0x7f0000000280)=[{{&(0x7f0000000300)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r5, 0x0, 0x0, 0x2100, 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x406, r4) ioctl$SIOCGSTAMP(r6, 0x8906, &(0x7f0000000780)) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x12, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000010000000000000000000000711814000000000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./sys\x00', 0x9e) mount(0x0, &(0x7f0000000ac0)='./sys\x00', &(0x7f0000000b00)='sysfs\x00', 0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000b40)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) openat(r7, &(0x7f0000000b80)='unbind\x00', 0x1, 0x0) 1m14.634737191s ago: executing program 4 (id=93): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) r2 = memfd_create(&(0x7f0000000000)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r2, 0x8800000) unshare(0x600) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, r6, 0x5, 0x0, 0x80, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4048840}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x60, r9, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x100000, @random=0x3b, 0x5b04, @void, @val, @val={0x3, 0x1, 0xe}, @void, @val={0x6, 0x2, 0x4}, @val={0x5, 0x3, {0x10, 0x98, 0x4}}, @void, @void, @val={0x3c, 0x4, {0x1, 0xe9, 0x1, 0x30}}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x400c0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r11 = dup3(r4, r3, 0x0) sendfile(r11, r2, 0x0, 0x1000009) syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) write$UHID_INPUT(r1, &(0x7f0000001680)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f7ac9b36096eff7fc6e5539b9b18098b9b4a1b2538181b080d29308f0e1ac6e7149b3a68959b189a242a9b3f6d988f7ef319520100ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e81aea882f5802b77f7227b7ba67e0e78657c2f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00300300000000000000b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850ab8afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a7315c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c0c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe8a3c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f198a037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e251f2409f610b2db8d1f48c13b65df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df34959eaef6572e1e007fa55a2999f596d0673f586749b25f5a448427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e10d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441984cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b70894902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50a0000fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b22f236c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426dd6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd66555347015daa85f25057f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971f41488b8658a20878b7c1dd7ba021943939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3ef4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a06f8c04ef23d537639a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f7953c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c069595e4e98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb92c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939b6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a10010549820a73c8839475f732ae00398e4bd1f4908b7807fb33b72685ec37a2d3f766b0500000000000000a1d998a2017aef0948a68cb0b3e35cb80dd349e891ae04000000080e8ac32a308e15fc37d06aeac289c0523f487e1ff7408c60edddab652f2ef91d4f2b01987b0f46e4034e5c3f745a7ee81087dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a63c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5347d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4fcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe520629b40d7ceee5802cb5e930ed624806c4380b6dc9336d07c2b8081c188d26558f48261f7897084c2a1a9a6613bc18f5a38ff42768af38041efe03d152ef95ff569e76db2391f4509d7f30ad92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f7150b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b35e52600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000204b0a0780d821a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff9576abc9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf6c9c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 1m10.867745733s ago: executing program 4 (id=119): syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000e80)='./file2\x00', 0x380000c, &(0x7f0000000380)={[{@nombcache}]}, 0xbe, 0x440, &(0x7f0000000ec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000001e40)={@rand_addr, 0x0}, &(0x7f0000001e80)=0x14) r3 = syz_btf_id_by_name$bpf_lsm(0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000002380)=ANY=[], 0xc0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e40)='.\x00', 0x301242, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FICLONE(r5, 0x40049409, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./tracefs\x00', &(0x7f0000000400)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d80)='./tracefs/instances/foo\x00', 0x1ff) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000003c0)) unlinkat(0xffffffffffffff9c, &(0x7f0000002040)='./tracefs/instances/foo\x00', 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000002180)={0x17, 0x12, &(0x7f0000002240)=ANY=[@ANYBLOB="180000000800000000000000290a000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000055090100000000009500000000000000184700000400000000000000000000008500000082000000bf9100000000000000b70000000000000095000000000000000000000000000000000000000000000000009c89bb831fb672679a2ca9a73ff8689eee3a3de2154074ca41ad8b7de54e7423914a7afa55ece3ae5e0f12e8da55b97772d28f2f752b861f168d9cc3178a3346f1dcc7f57b8baeeb9cdb7857ef92090069caee615de7680736d9ac12111da5a526c01b2d62a40fc2ef702401b0df72ab961b8da80a"], &(0x7f00000002c0)='syzkaller\x00', 0xae, 0x1004, &(0x7f00000033c0)=""/4100, 0x40f00, 0x58, '\x00', r2, @fallback=0x1a, r0, 0x8, &(0x7f0000001ec0)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, r3, r0, 0x5, &(0x7f0000001f80)=[r0, r0], &(0x7f0000001fc0)=[{0x1, 0x4, 0x6, 0x7}, {0x2, 0x4, 0xd}, {0x3, 0x4, 0x2, 0x6}, {0x3, 0x4, 0x0, 0x8}, {0x2, 0x3, 0xd, 0x1}], 0x10, 0x3}, 0x94) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000880)=0x474c, 0x4) bind$inet(r1, &(0x7f00000008c0)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000d40)={0x2, 0x0, @multicast1}, 0x10) connect$unix(r0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000dc0)=0x80, 0x4) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r0, 0xc008aec1, &(0x7f00000020c0)) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000e00)=0x40, 0x4) recvmmsg(r1, &(0x7f0000000e40), 0x291962b, 0x45833af92e4b39ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000300bf53a9b065f248f1f49f164c3647000000000001fe0200108500e7ff0700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 54.321557149s ago: executing program 32 (id=119): syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000e80)='./file2\x00', 0x380000c, &(0x7f0000000380)={[{@nombcache}]}, 0xbe, 0x440, &(0x7f0000000ec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000001e40)={@rand_addr, 0x0}, &(0x7f0000001e80)=0x14) r3 = syz_btf_id_by_name$bpf_lsm(0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000002380)=ANY=[], 0xc0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e40)='.\x00', 0x301242, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FICLONE(r5, 0x40049409, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./tracefs\x00', &(0x7f0000000400)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d80)='./tracefs/instances/foo\x00', 0x1ff) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000003c0)) unlinkat(0xffffffffffffff9c, &(0x7f0000002040)='./tracefs/instances/foo\x00', 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000002180)={0x17, 0x12, &(0x7f0000002240)=ANY=[@ANYBLOB="180000000800000000000000290a000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000055090100000000009500000000000000184700000400000000000000000000008500000082000000bf9100000000000000b70000000000000095000000000000000000000000000000000000000000000000009c89bb831fb672679a2ca9a73ff8689eee3a3de2154074ca41ad8b7de54e7423914a7afa55ece3ae5e0f12e8da55b97772d28f2f752b861f168d9cc3178a3346f1dcc7f57b8baeeb9cdb7857ef92090069caee615de7680736d9ac12111da5a526c01b2d62a40fc2ef702401b0df72ab961b8da80a"], &(0x7f00000002c0)='syzkaller\x00', 0xae, 0x1004, &(0x7f00000033c0)=""/4100, 0x40f00, 0x58, '\x00', r2, @fallback=0x1a, r0, 0x8, &(0x7f0000001ec0)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, r3, r0, 0x5, &(0x7f0000001f80)=[r0, r0], &(0x7f0000001fc0)=[{0x1, 0x4, 0x6, 0x7}, {0x2, 0x4, 0xd}, {0x3, 0x4, 0x2, 0x6}, {0x3, 0x4, 0x0, 0x8}, {0x2, 0x3, 0xd, 0x1}], 0x10, 0x3}, 0x94) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000880)=0x474c, 0x4) bind$inet(r1, &(0x7f00000008c0)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000d40)={0x2, 0x0, @multicast1}, 0x10) connect$unix(r0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000dc0)=0x80, 0x4) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r0, 0xc008aec1, &(0x7f00000020c0)) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000e00)=0x40, 0x4) recvmmsg(r1, &(0x7f0000000e40), 0x291962b, 0x45833af92e4b39ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000300bf53a9b065f248f1f49f164c3647000000000001fe0200108500e7ff0700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 6.493737831s ago: executing program 0 (id=319): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x180000a, 0x204931, 0xffffffffffffffff, 0x61229000) 6.360914334s ago: executing program 0 (id=320): ioperm(0x4, 0x8, 0x5) r0 = fsopen(&(0x7f0000000340)='debugfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='source', &(0x7f0000000600)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0) r8 = fsmount(r5, 0x0, 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000d40)={r6, 0x0, 0x30, 0x0, @val=@iter={&(0x7f0000000380)=@task={r7, 0xffffffffffffffff, r8}}}, 0x40) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r9, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.720490969s ago: executing program 3 (id=339): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000300)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r0}, 0x20) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000ec0)={0x20000014}) 3.6596909s ago: executing program 1 (id=341): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x22601, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000340)={0x0, 0xfd}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) 3.577184053s ago: executing program 3 (id=342): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000400)=ANY=[], 0x1, 0x494, &(0x7f0000000900)="$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") rename(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.553811723s ago: executing program 1 (id=343): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)}], 0x1}, 0x40000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x2, 0x3, 0x7fffffffffffffff, 0x58f24868, 0x4, 0x7f, 0x80000002, 0x9, 0x0, 0x6, 0x1, 0x2, 0x6, 0x8, 0x81], 0x54000, 0x100204}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) add_key(&(0x7f00000001c0)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x110, 0xfffffffffffffffd) 3.508083675s ago: executing program 2 (id=344): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)}], 0x1}, 0x40000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x2, 0x3, 0x7fffffffffffffff, 0x58f24868, 0x4, 0x7f, 0x80000002, 0x9, 0x0, 0x6, 0x1, 0x2, 0x6, 0x8, 0x81], 0x54000, 0x100204}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = add_key(&(0x7f00000001c0)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x110, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000400)={r3}, &(0x7f0000000580)={'enc=', 'raw', ' hash=', {'sha384-generic\x00'}}, 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x1ff) 3.298068989s ago: executing program 1 (id=345): ioperm(0x4, 0x8, 0x5) r0 = fsopen(&(0x7f0000000340)='debugfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='source', &(0x7f0000000600)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r1, 0x8800000) unshare(0x600) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) accept$alg(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, r4, 0x5, 0x0, 0x80, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4048840}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x60, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x100000, @random=0x3b, 0x5b04, @void, @val, @val={0x3, 0x1, 0xe}, @void, @val={0x6, 0x2, 0x4}, @val={0x5, 0x3, {0x10, 0x98, 0x4}}, @void, @void, @val={0x3c, 0x4, {0x1, 0xe9, 0x1, 0x30}}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x400c0) 3.076194585s ago: executing program 1 (id=349): r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x40084146, 0x40944f9c780000) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='3', 0x4e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz0\x00', 0x1ff) 3.050294106s ago: executing program 5 (id=350): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./config\x00', &(0x7f0000002cc0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002d00)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002d40)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002d80)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002dc0)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000002e00), 0x0) close(0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000002e40)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x2, 0x0) write(r3, &(0x7f0000002e80)='1\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000002ec0)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x2, 0x0) write(r4, &(0x7f0000002f00)='8', 0x1) close(r4) symlinkat(&(0x7f0000002f40)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000002f80)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 2.820204072s ago: executing program 1 (id=351): syz_mount_image$udf(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x2004054, &(0x7f00000009c0)={[{@mode={'mode', 0x3d, 0x7}}, {@longad}, {@mode={'mode', 0x3d, 0xcc}}, {@anchor={'anchor', 0x3d, 0x1}}, {@rootdir={'rootdir', 0x3d, 0x6}}, {}, {@uid_forget}, {@session={'session', 0x3d, 0xffffffffffffff00}}, {@gid_ignore}, {@anchor={'anchor', 0x3d, 0xffffffffffffffff}}, {@uid_ignore}, {@unhide}, {@unhide}, {@utf8}, {@fileset={'fileset', 0x3d, 0x2000000000e42}}, {@undelete}, {@partition={'partition', 0x3d, 0x2}}, {@utf8}, {@rootdir={'rootdir', 0x3d, 0x1}}], [{@dont_measure}, {@subj_type={'subj_type', 0x3d, '\x00\x00\x00\x00.'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'longad'}}, {@smackfstransmute}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@seclabel}]}, 0x1, 0xc43, &(0x7f0000001000)="$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") 2.752070363s ago: executing program 3 (id=352): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000780)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000007c0)={r0, r0, 0xc, 0x0, &(0x7f0000000880), 0xb, 0x1, 0x46d, 0xa0e, 0x9, 0x2, 0x1, 'syz1\x00'}) 2.692311645s ago: executing program 5 (id=353): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000300)="0000000000000000000000000000000001000000000400000200000002") ioctl(r1, 0x40140921, &(0x7f0000000340)="0000000001") ioctl(r1, 0x40140921, &(0x7f0000000380)="0100000001000000010000000100000006") ioctl(r1, 0x400c0930, 0x0) 2.556263967s ago: executing program 3 (id=354): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x24040010) openat$tun(0xffffffffffffff9c, 0x0, 0xa000, 0x0) getgid() syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x3}, 0xa) r1 = socket(0x27, 0x1, 0x9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x0, 0x8, 0x7, 0x2, 0x2, @ipv4={'\x00', '\xff\xff', @local}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x700, 0x0, 0x1}}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x11}, 0xa) shutdown(r0, 0x1) 2.363965853s ago: executing program 1 (id=355): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe={'stripe', 0x3d, 0xb6}}, {@minixdf}, {@orlov}]}, 0x4, 0xbc4, &(0x7f0000002800)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000000)='./bus\x00', 0x88d80a, 0x0, 0x20, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='.\x00', 0x0, 0x83) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v2={0x2, @aes256, 0x0, '\x00', @a}) 2.219102916s ago: executing program 5 (id=356): socket(0xf, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000001c0), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000200), 0x10106, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x4000) 1.677261849s ago: executing program 2 (id=357): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000004000000ff0f"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000036c0)={{r0}, &(0x7f0000003640), &(0x7f0000003680)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x11, 0x14, &(0x7f0000001940)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000001a00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a40)={r1}, 0xc) 1.492045154s ago: executing program 2 (id=358): socket$inet6(0xa, 0x3, 0x8000000003c) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8080000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000500)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000001b00)=""/102392, 0x18ff8) lstat(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f000001ab00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f000001ab40)='./sys\x00', &(0x7f000001ab80)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f000001ac00)="306663353a313232373a6f6c0f62c91538da1c1efcc04a9ad9313bf5f39a99f9c2fbd7790e49d5c0322985d6b4fa07eb07e264bb7a7a6d6134976d13d5edfa45503abcf94890f386293ce32cc2ece99be8391e692a94401deff341620b64358ae5d647dd1ef68b9dce16030e56d1501986ea1aadb9119d2f148822c0fb8a0bfe", 0x80) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_io_uring_setup(0xefe, &(0x7f00000000c0)={0x0, 0xffffffbe, 0x2, 0x83, 0x3af}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r1, 0x8a1, 0xb08a, 0x6, 0x0, 0x0) 1.471352634s ago: executing program 3 (id=359): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x3808744, &(0x7f0000000400), 0x4, 0x4b1, &(0x7f0000006b00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000006fc0)='.\x00', 0x20000, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000007000)=0x13) 452.319789ms ago: executing program 2 (id=360): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioprio_set$pid(0x2, 0x0, 0x2000) 0s ago: executing program 3 (id=361): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x15, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000040000000000000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001b40)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f000001ab40)=0x410000002) r4 = syz_open_procfs(0x0, &(0x7f0000000240)) fremovexattr(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="6d0048f3e2be808c376d4f545c71fae12a074581658008db517aa824fc54b08d3f5b7067969dbe167ed5a07b5d4625566ca5252c24fcce"]) io_uring_setup(0x52ff, &(0x7f0000000480)={0x0, 0xf77, 0x40, 0x2, 0x32c, 0x0, r4}) openat$binderfs(0xffffffffffffff9c, &(0x7f000001ab80)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000500), 0x205, 0x8401) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) add_key$fscrypt_provisioning(&(0x7f00000002c0), 0x0, &(0x7f0000000640)={0x2, 0x4, @c}, 0x29, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f00000005c0)={0x1, 0xff}) r7 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000540)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): DRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.163799][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.202149][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.221318][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.231625][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.240752][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.266997][ T1497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.279544][ T1497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.298510][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.316591][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.331912][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.345991][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.355990][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.366561][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.378773][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.413993][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.430732][ T4283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.441431][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.449061][ T4283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.460737][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.472846][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.482411][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.491367][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.501368][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.523742][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.536436][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.546901][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.557787][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.572257][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.584916][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.603448][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.621700][ T4311] loop1: detected capacity change from 0 to 1024 [ 101.629157][ T4194] device veth0_vlan entered promiscuous mode [ 101.661195][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.672491][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.682545][ T4311] ======================================================= [ 101.682545][ T4311] WARNING: The mand mount option has been deprecated and [ 101.682545][ T4311] and is ignored by this kernel. Remove the mand [ 101.682545][ T4311] option from the mount to silence this warning. [ 101.682545][ T4311] ======================================================= [ 101.718425][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.729457][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.743907][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.753861][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.798813][ T4311] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.835614][ T4194] device veth1_vlan entered promiscuous mode [ 101.848345][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.874421][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.876339][ T4311] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c118, mo2=0002] [ 101.893301][ T4311] System zones: 0-1, 3-12 [ 101.933630][ T4311] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,debug,nodioread_nolock,min_batch_time=0x0000000000000006,auto_da_alloc,dioread_nolock,nodelalloc,jqfmt=vfsv1,norecovery,,errors=continue. Quota mode: none. [ 101.970224][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.055252][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 102.058452][ T4313] Bluetooth: hci1: command 0x0419 tx timeout [ 102.072009][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 102.082320][ T4292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.098655][ T4292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.135692][ T4271] Bluetooth: hci2: command 0x0419 tx timeout [ 102.142550][ T4270] Bluetooth: hci4: command 0x0419 tx timeout [ 102.155125][ T4194] device veth0_macvtap entered promiscuous mode [ 102.162403][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.165921][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.180417][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.194006][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.203203][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.212522][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.234332][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.624541][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 102.644541][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 102.654519][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 102.664517][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 102.674518][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 102.684516][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 102.694526][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 102.704517][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 102.714578][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 103.284542][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 104.019767][ T4194] device veth1_macvtap entered promiscuous mode [ 104.077689][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.092143][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.175647][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.186558][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.221756][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.239264][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.251759][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.265192][ T4323] FAULT_INJECTION: forcing a failure. [ 104.265192][ T4323] name failslab, interval 1, probability 0, space 0, times 1 [ 104.284690][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.300197][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.311232][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.314622][ T4323] CPU: 0 PID: 4323 Comm: syz.1.6 Not tainted syzkaller #0 [ 104.328287][ T4323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.333236][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.338402][ T4323] Call Trace: [ 104.338414][ T4323] [ 104.338423][ T4323] dump_stack_lvl+0x188/0x250 [ 104.338463][ T4323] ? show_regs_print_info+0x20/0x20 [ 104.364891][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.365066][ T4323] ? load_image+0x410/0x410 [ 104.379445][ T4323] ? __lock_acquire+0x7d40/0x7d40 [ 104.384613][ T4323] ? rcu_is_watching+0x11/0xa0 [ 104.389426][ T4323] should_fail+0x383/0x4b0 [ 104.393941][ T4323] should_failslab+0x5/0x20 [ 104.398658][ T4323] slab_pre_alloc_hook+0x51/0xc0 [ 104.403663][ T4323] ? vm_area_alloc+0x20/0xe0 [ 104.408289][ T4323] kmem_cache_alloc+0x3d/0x280 [ 104.413103][ T4323] vm_area_alloc+0x20/0xe0 [ 104.417650][ T4323] mmap_region+0xbd2/0x1730 [ 104.422235][ T4323] ? get_unmapped_area+0x2f0/0x360 [ 104.423818][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.427401][ T4323] do_mmap+0x801/0xe30 [ 104.427433][ T4323] ? vm_mmap_pgoff+0x16c/0x2d0 [ 104.427457][ T4323] vm_mmap_pgoff+0x1c1/0x2d0 [ 104.427485][ T4323] ? account_locked_vm+0xe0/0xe0 [ 104.427514][ T4323] ? __context_tracking_exit+0x4c/0x80 [ 104.427539][ T4323] ? __lock_acquire+0x7d40/0x7d40 [ 104.427568][ T4323] ksys_mmap_pgoff+0x140/0x790 [ 104.427596][ T4323] ? mmap_region+0x1730/0x1730 [ 104.473504][ T4323] ? lockdep_hardirqs_on+0x94/0x140 [ 104.478812][ T4323] do_syscall_64+0x4c/0xa0 [ 104.483271][ T4323] ? clear_bhb_loop+0x30/0x80 [ 104.487988][ T4323] ? clear_bhb_loop+0x30/0x80 [ 104.492807][ T4323] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.498757][ T4323] RIP: 0033:0x7f8c6192d2c2 [ 104.503229][ T4323] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 104.522964][ T4323] RSP: 002b:00007f8c5fb84df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 104.531519][ T4323] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8c6192d2c2 [ 104.539547][ T4323] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 104.547568][ T4323] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 104.555621][ T4323] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 104.563637][ T4323] R13: 00007f8c5fb84ee0 R14: 00007f8c5fb84ea0 R15: 0000200000001b80 [ 104.571676][ T4323] [ 104.585089][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.594123][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.629138][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.654506][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.664374][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.695972][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.724553][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.754548][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.774555][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.794512][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.806242][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.824898][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.832916][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.840948][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.865885][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.893597][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.935947][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.964792][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.973565][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.055017][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.280395][ T26] audit: type=1800 audit(1792060837.035:2): pid=4331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8" name=08 dev="sda1" ino=2046 res=0 errno=0 [ 105.337012][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.364837][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.379503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.445360][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.462943][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.483003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 105.678372][ T4335] loop3: detected capacity change from 0 to 256 [ 105.786235][ T4335] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 105.811092][ T4335] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 105.839280][ T4339] loop1: detected capacity change from 0 to 8 [ 105.912341][ T4339] SQUASHFS error: zstd decompression error: 2 [ 105.937291][ T4339] SQUASHFS error: zstd decompression failed, data probably corrupt [ 105.964579][ T4339] SQUASHFS error: Failed to read block 0x4ea: -5 [ 105.970988][ T4339] SQUASHFS error: Unable to read metadata cache entry [4e8] [ 105.994607][ T4339] SQUASHFS error: Unable to read inode 0x11f [ 107.561643][ T1108] cfg80211: failed to load regulatory.db [ 107.597155][ T4329] loop0: detected capacity change from 0 to 32768 [ 107.698132][ T4329] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1 (4329) [ 107.774672][ T1111] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 109.451862][ T4329] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 109.504680][ T4329] BTRFS info (device loop0): using free space tree [ 109.566417][ T4329] BTRFS info (device loop0): has skinny extents [ 109.694728][ T1111] usb 3-1: device descriptor read/all, error -71 [ 109.928052][ T4329] BTRFS error (device loop0): open_ctree failed: -12 [ 110.768134][ T4391] "syz.0.16" (4391) uses obsolete ecb(arc4) skcipher [ 111.841850][ T13] rxe_eth0 speed is unknown, defaulting to 1000 [ 113.444347][ T4415] loop1: detected capacity change from 0 to 512 [ 115.521258][ T4421] loop3: detected capacity change from 0 to 1024 [ 115.630277][ T4425] binder: 4423:4425 ioctl c0306201 2000000001c0 returned -14 [ 115.652108][ T4421] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 2: comm syz.3.21: lblock 2 mapped to illegal pblock 2 (length 1) [ 115.667335][ T4421] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 115.675572][ T4421] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 48: comm syz.3.21: lblock 0 mapped to illegal pblock 48 (length 1) [ 115.690029][ T4421] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 115.699813][ T4421] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.21: Failed to acquire dquot type 0 [ 115.711529][ T4421] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 115.722977][ T4421] EXT4-fs error (device loop3): ext4_evict_inode:284: inode #11: comm syz.3.21: mark_inode_dirty error [ 115.744704][ T4421] EXT4-fs warning (device loop3): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 115.755823][ T4421] EXT4-fs (loop3): 1 orphan inode deleted [ 115.761585][ T4421] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,grpid,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 115.895348][ T4415] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 115.905509][ T4415] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 115.915561][ T4415] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.22: Failed to acquire dquot type 1 [ 115.928474][ T4415] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 115.938590][ T4415] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 115.948819][ T4415] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.22: Failed to acquire dquot type 1 [ 115.964080][ T4415] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.22: bg 0: block 248: padding at end of block bitmap is not set [ 115.982263][ T4415] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 115.992982][ T4415] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 116.003493][ T4415] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 116.013500][ T4415] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.22: Failed to acquire dquot type 1 [ 116.027507][ T4415] EXT4-fs (loop1): 1 orphan inode deleted [ 116.033422][ T4415] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 116.044640][ T4415] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.142439][ T154] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 116.176579][ T4425] binder: 4423:4425 ioctl c0306201 2000000002c0 returned -14 [ 116.194634][ T154] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 116.223865][ T154] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:2: Failed to release dquot type 0 [ 116.277828][ T4194] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 116.326975][ T4194] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 116.355287][ T4194] EXT4-fs error (device loop3): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 116.610422][ T4435] loop4: detected capacity change from 0 to 2048 [ 116.709173][ T4435] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.710142][ T4446] FAULT_INJECTION: forcing a failure. [ 117.710142][ T4446] name failslab, interval 1, probability 0, space 0, times 0 [ 117.760171][ T4446] CPU: 1 PID: 4446 Comm: syz.4.28 Not tainted syzkaller #0 [ 117.767454][ T4446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.777551][ T4446] Call Trace: [ 117.780865][ T4446] [ 117.783920][ T4446] dump_stack_lvl+0x188/0x250 [ 117.788648][ T4446] ? show_regs_print_info+0x20/0x20 [ 117.793906][ T4446] ? load_image+0x410/0x410 [ 117.798460][ T4446] ? __might_sleep+0xf0/0xf0 [ 117.803104][ T4446] ? __lock_acquire+0x7d40/0x7d40 [ 117.808185][ T4446] should_fail+0x383/0x4b0 [ 117.812650][ T4446] should_failslab+0x5/0x20 [ 117.817197][ T4446] slab_pre_alloc_hook+0x51/0xc0 [ 117.822180][ T4446] ? copy_mm+0x8b6/0x13d0 [ 117.826548][ T4446] kmem_cache_alloc+0x3d/0x280 [ 117.831436][ T4446] ? vma_gap_callbacks_rotate+0x196/0x1f0 [ 117.837208][ T4446] copy_mm+0x8b6/0x13d0 [ 117.841437][ T4446] ? copy_signal+0x610/0x610 [ 117.846063][ T4446] ? __init_rwsem+0x11e/0x160 [ 117.850788][ T4446] ? copy_signal+0x501/0x610 [ 117.855417][ T4446] copy_process+0x17a7/0x3e70 [ 117.860162][ T4446] ? __lock_acquire+0x7d40/0x7d40 [ 117.865277][ T4446] ? __pidfd_prepare+0x140/0x140 [ 117.870272][ T4446] kernel_clone+0x23f/0x990 [ 117.874819][ T4446] ? create_io_thread+0x180/0x180 [ 117.879903][ T4446] __se_sys_clone3+0x312/0x3d0 [ 117.884796][ T4446] ? __x64_sys_clone3+0x60/0x60 [ 117.889706][ T4446] ? __lock_acquire+0x7d40/0x7d40 [ 117.894819][ T4446] ? lockdep_hardirqs_on+0x94/0x140 [ 117.900072][ T4446] do_syscall_64+0x4c/0xa0 [ 117.904531][ T4446] ? clear_bhb_loop+0x30/0x80 [ 117.909240][ T4446] ? clear_bhb_loop+0x30/0x80 [ 117.914078][ T4446] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.920014][ T4446] RIP: 0033:0x7fa15fe49559 [ 117.924473][ T4446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.945270][ T4446] RSP: 002b:00007fa15e0a0ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 117.953817][ T4446] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fa15fe49559 [ 117.961921][ T4446] RDX: 00007fa15e0a0f10 RSI: 0000000000000058 RDI: 00007fa15e0a0f10 [ 117.969943][ T4446] RBP: 00007fa15fee08b0 R08: 0000000000000000 R09: 0000000000000058 [ 117.977985][ T4446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.985993][ T4446] R13: 00007fa1600d1038 R14: 00007fa1600d0fa0 R15: 00007ffee487de78 [ 117.994021][ T4446] [ 118.221628][ T4441] loop0: detected capacity change from 0 to 32768 [ 118.369177][ T26] audit: type=1326 audit(1792060850.125:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4457 comm="syz.4.29" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15fe49559 code=0x7ffc0000 [ 118.406514][ T4441] XFS (loop0): Mounting V5 Filesystem [ 118.572002][ T4441] XFS (loop0): Ending clean mount [ 118.836254][ T4190] XFS (loop0): Unmounting Filesystem [ 118.909060][ T4467] loop3: detected capacity change from 0 to 8 [ 118.968950][ T4471] loop1: detected capacity change from 0 to 512 [ 119.023977][ T4471] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 119.026267][ T4467] SQUASHFS error: zlib decompression failed, data probably corrupt [ 119.070549][ T4467] SQUASHFS error: Failed to read block 0x4de: -5 [ 119.078449][ T4471] EXT4-fs (loop1): 1 truncate cleaned up [ 119.084177][ T4471] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 119.110941][ T4467] SQUASHFS error: Failed to read block 0x4e2: -5 [ 119.122313][ T4467] SQUASHFS error: Failed to read block 0x9ca: -5 [ 119.141572][ T4467] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 119.181153][ T4467] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 119.211517][ T4467] SQUASHFS error: Failed to read block 0x535f2: -5 [ 119.862861][ T4467] syz.3.32 (4467) used greatest stack depth: 21120 bytes left [ 119.879531][ T4479] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 120.283808][ T4491] loop2: detected capacity change from 0 to 16 [ 121.829191][ T4491] erofs: (device loop2): mounted with root inode @ nid 36. [ 122.568712][ T4507] process 'syz.4.44' launched '‹H5ßőëďSw+órš čŃľ€źojeřXĚQłş}šNt [ 122.568712][ T4507] #ń¸Ă±iăŃC:1L‰Č`Ańd"s1ő' with NULL argv: empty string added [ 122.591415][ T4505] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 122.999664][ T4525] loop2: detected capacity change from 0 to 128 [ 123.151395][ T4525] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 123.222570][ T4525] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.359186][ T4539] 9pnet: p9_fd_create_tcp (4539): problem connecting socket to 127.0.0.1 [ 124.127740][ T4525] fscrypt: Error allocating hmac(sha512): -2 [ 125.066450][ T4580] loop4: detected capacity change from 0 to 512 [ 125.200455][ T4580] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 125.209086][ T4268] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.635573][ T4580] EXT4-fs (loop4): 1 truncate cleaned up [ 125.675009][ T4268] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.694806][ T4268] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 125.708507][ T4268] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 125.718300][ T4268] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.765872][ T4580] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 125.799364][ T4268] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 126.032456][ T4594] loop1: detected capacity change from 0 to 128 [ 126.055297][ T4594] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 126.192484][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 126.192523][ T26] audit: type=1800 audit(1792060857.885:15): pid=4595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.63" name="file3" dev="loop4" ino=16 res=0 errno=0 [ 127.974818][ T4268] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 4) [ 128.159725][ T4268] usb 3-1: USB disconnect, device number 4 [ 128.258476][ T155] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 128.325368][ T4610] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 131.930721][ T4633] loop4: detected capacity change from 0 to 1024 [ 132.094096][ T4633] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: none. [ 132.194588][ T4633] EXT4-fs error (device loop4): ext4_generic_delete_entry:2731: inode #2: block 16: comm syz.4.80: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 132.221921][ T4633] EXT4-fs error (device loop4) in ext4_delete_entry:2802: Corrupt filesystem [ 132.244580][ T4633] EXT4-fs warning (device loop4): ext4_rename_delete:3794: inode #2: comm syz.4.80: Deleting old file: nlink 1, error=-117 [ 132.936376][ T4655] capability: warning: `syz.4.84' uses deprecated v2 capabilities in a way that may be insecure [ 133.023652][ T4658] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 133.242593][ T4663] loop4: detected capacity change from 0 to 1024 [ 134.037650][ T4663] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 134.048729][ T4663] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 134.060727][ T4663] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #3: comm syz.4.85: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 134.085690][ T4663] EXT4-fs (loop4): no journal found [ 134.090961][ T4663] EXT4-fs (loop4): can't get journal size [ 134.094504][ C0] sched: RT throttling activated [ 134.103777][ T4663] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000008,noinit_itable,max_dir_size_kb=0x0000000000000005,noblock_validity,noload,data=writeback,,errors=continue. Quota mode: writeback. [ 134.332388][ T1111] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 134.404654][ T13] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 134.473792][ T26] audit: type=1800 audit(1792060866.225:16): pid=4671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.87" name="protocol" dev="configfs" ino=33420 res=0 errno=0 [ 134.500355][ T26] audit: type=1800 audit(1792060866.225:17): pid=4671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.87" name="report_length" dev="configfs" ino=33421 res=0 errno=0 [ 134.584537][ T4273] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 134.774757][ T4682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.91'. [ 134.885159][ T4273] usb 4-1: Using ep0 maxpacket: 16 [ 135.025326][ T4273] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.082068][ T4273] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.211243][ T4273] usb 4-1: config 0 interface 0 has no altsetting 0 [ 135.275603][ T4273] usb 4-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 135.366510][ T4273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.559324][ T1111] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.572186][ T1111] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 135.583667][ T1111] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 135.645300][ T4273] usb 4-1: config 0 descriptor?? [ 135.679304][ T4685] loop1: detected capacity change from 0 to 1024 [ 135.714811][ T13] usb 2-1: unable to get BOS descriptor or descriptor too short [ 135.806967][ T1111] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.807026][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.807049][ T1111] usb 1-1: Product: syz [ 135.807066][ T1111] usb 1-1: Manufacturer: syz [ 135.807082][ T1111] usb 1-1: SerialNumber: syz [ 135.855038][ T13] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 135.867385][ T1111] cdc_ncm 1-1:1.0: invalid descriptor buffer length [ 135.874325][ T1111] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 135.894808][ T13] usb 2-1: can't read configurations, error -71 [ 135.902745][ T1111] cdc_ncm 1-1:1.0: bind() failure [ 135.961657][ T1111] usb 1-1: USB disconnect, device number 2 [ 136.028369][ T4692] loop0: detected capacity change from 0 to 512 [ 136.133242][ T4273] input: HID 046d:c215 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:046D:C215.0001/input/input5 [ 136.272374][ T4692] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.96: inode #1: comm syz.0.96: iget: illegal inode # [ 136.335280][ T4669] udc-core: couldn't find an available UDC or it's busy [ 136.342297][ T4669] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 136.366921][ T4692] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.96: error while reading EA inode 1 err=-117 [ 136.398088][ T4273] logitech 0003:046D:C215.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.3-1/input0 [ 136.508059][ T4703] loop1: detected capacity change from 0 to 512 [ 136.540963][ T4692] EXT4-fs (loop0): 1 orphan inode deleted [ 136.806567][ T4703] EXT4-fs (loop1): 1 truncate cleaned up [ 136.812382][ T4703] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 136.943857][ T4692] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.970427][ T26] audit: type=1800 audit(1792060868.635:18): pid=4703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.95" name="file1" dev="loop1" ino=13 res=0 errno=0 [ 137.005077][ T4707] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.95: bg 0: block 465: padding at end of block bitmap is not set [ 137.024415][ T4707] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 137.038082][ T4707] EXT4-fs (loop1): This should not happen!! Data will be lost [ 137.038082][ T4707] [ 137.048536][ T4707] EXT4-fs (loop1): Total free blocks count 0 [ 137.054659][ T4707] EXT4-fs (loop1): Free/Dirty block details [ 137.060668][ T4707] EXT4-fs (loop1): free_blocks=0 [ 137.065794][ T4707] EXT4-fs (loop1): dirty_blocks=20 [ 137.070954][ T4707] EXT4-fs (loop1): Block reservation details [ 137.077092][ T4707] EXT4-fs (loop1): i_reserved_data_blocks=20 [ 137.204282][ T4272] usb 4-1: USB disconnect, device number 2 [ 137.367654][ T4585] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 3148 with max blocks 18 with error 28 [ 137.438655][ T4709] loop2: detected capacity change from 0 to 512 [ 137.445430][ T4585] EXT4-fs (loop1): This should not happen!! Data will be lost [ 137.445430][ T4585] [ 137.551855][ T4709] EXT4-fs (loop2): 1 truncate cleaned up [ 137.604258][ T4710] fido_id[4710]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 137.632330][ T4709] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 137.750786][ T4709] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.99: bg 0: block 465: padding at end of block bitmap is not set [ 137.793620][ T4709] EXT4-fs (loop2): Remounting filesystem read-only [ 137.961471][ T4721] loop1: detected capacity change from 0 to 512 [ 137.997112][ T4721] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 138.042700][ T4726] loop0: detected capacity change from 0 to 1024 [ 138.071428][ T4721] EXT4-fs (loop1): orphan cleanup on readonly fs [ 138.087791][ T4721] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3894: comm syz.1.104: Allocating blocks 41-42 which overlap fs metadata [ 138.111349][ T4721] Quota error (device loop1): write_blk: dquota write failed [ 138.129066][ T4721] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 138.142084][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.149060][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.159418][ T4721] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.104: Failed to acquire dquot type 0 [ 138.190848][ T4721] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 138.210969][ T4721] EXT4-fs (loop1): 1 truncate cleaned up [ 138.218208][ T4721] EXT4-fs (loop1): pa ffff888025d499a0: logic 1, phys. 41, len 23 [ 138.226209][ T4721] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4904: group 0, free 22, pa_free 23 [ 138.239962][ T4721] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,noblock_validity,usrquota,grpjquota=,discard,nouid32,grpjquota=,nogrpid,max_dir_size_kb=0x00000000000004002,errors=continue. Quota mode: writeback. [ 138.283971][ T4721] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 138.342457][ T4721] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 138.437120][ T4738] loop3: detected capacity change from 0 to 1024 [ 138.577871][ T4742] loop0: detected capacity change from 0 to 2048 [ 138.785939][ T4742] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 138.847466][ T2257] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 138.865605][ T4742] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 138.926388][ T4742] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 138.975337][ T2257] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 139.014845][ T4742] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.494653][ T26] audit: type=1326 audit(1792060871.225:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.3.117" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9d36e559 code=0x7ffc0000 [ 139.584181][ T26] audit: type=1326 audit(1792060871.225:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.3.117" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9d36e559 code=0x7ffc0000 [ 139.611858][ T4760] loop1: detected capacity change from 0 to 1024 [ 139.632818][ T4763] loop4: detected capacity change from 0 to 512 [ 139.639422][ T26] audit: type=1326 audit(1792060871.245:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.3.117" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9d36e559 code=0x7ffc0000 [ 139.691398][ T26] audit: type=1326 audit(1792060871.285:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.3.117" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9d36e559 code=0x7ffc0000 [ 140.587807][ T26] audit: type=1326 audit(1792060871.285:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.3.117" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9d36e559 code=0x7ffc0000 [ 140.679780][ T26] audit: type=1326 audit(1792060871.305:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.3.117" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7feb9d32a9ac code=0x7ffc0000 [ 140.724765][ T4763] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 140.781156][ T26] audit: type=1326 audit(1792060871.305:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.3.117" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7feb9d32aa0e code=0x7ffc0000 [ 140.872340][ T4763] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 140.882365][ T4763] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 140.895837][ T26] audit: type=1326 audit(1792060871.305:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.3.117" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb9d36e1eb code=0x7ffc0000 [ 140.920579][ T26] audit: type=1326 audit(1792060871.305:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.3.117" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7feb9d36e559 code=0x7ffc0000 [ 141.058469][ T4770] loop3: detected capacity change from 0 to 512 [ 141.822547][ T4760] hfsplus: xattr searching failed [ 141.938149][ T26] audit: type=1326 audit(1792060871.305:28): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.3.117" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9d36e559 code=0x7ffc0000 [ 141.994280][ T4770] EXT4-fs (loop3): 1 truncate cleaned up [ 142.000109][ T4770] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 142.079058][ T4770] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.120: bg 0: block 465: padding at end of block bitmap is not set [ 142.091440][ T13] kernel write not supported for file /snd/seq (pid: 13 comm: kworker/0:1) [ 142.097777][ T4770] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 142.114620][ T4770] EXT4-fs (loop3): This should not happen!! Data will be lost [ 142.114620][ T4770] [ 142.124299][ T4770] EXT4-fs (loop3): Total free blocks count 0 [ 142.131458][ T4770] EXT4-fs (loop3): Free/Dirty block details [ 142.137688][ T4770] EXT4-fs (loop3): free_blocks=0 [ 142.143677][ T4770] EXT4-fs (loop3): dirty_blocks=2 [ 142.148817][ T4770] EXT4-fs (loop3): Block reservation details [ 142.154906][ T4770] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 142.556846][ T4791] loop1: detected capacity change from 0 to 128 [ 143.020413][ T4799] loop2: detected capacity change from 0 to 512 [ 143.108431][ T4799] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.122660][ T4799] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.371400][ T4807] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 146.382177][ T4815] loop0: detected capacity change from 0 to 8 [ 147.467204][ T4819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.136'. [ 148.181661][ T4268] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 148.674616][ T4268] usb 3-1: device not accepting address 5, error -71 [ 148.713506][ T4831] 9pnet: Insufficient options for proto=fd [ 149.224572][ T4273] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 149.263917][ T4839] loop3: detected capacity change from 0 to 512 [ 149.407171][ T4841] loop1: detected capacity change from 0 to 164 [ 149.420291][ T4839] ip_tables: iptables: counters copy to user failed while replacing table [ 149.484681][ T4273] usb 1-1: Using ep0 maxpacket: 32 [ 149.563895][ T4841] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 149.614735][ T4273] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 149.625325][ T4273] usb 1-1: config 0 has no interface number 0 [ 149.631487][ T4273] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 149.668047][ T4273] usb 1-1: config 0 interface 85 has no altsetting 0 [ 150.607080][ T4273] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 150.617192][ T4273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.625658][ T4273] usb 1-1: Product: syz [ 150.629873][ T4273] usb 1-1: Manufacturer: syz [ 150.635048][ T4273] usb 1-1: SerialNumber: syz [ 150.650028][ T4273] usb 1-1: config 0 descriptor?? [ 152.326792][ T4273] appletouch 1-1:0.85: Failed to read mode from device. [ 152.343993][ T4273] appletouch: probe of 1-1:0.85 failed with error -5 [ 152.412715][ T4273] usb 1-1: USB disconnect, device number 3 [ 152.563868][ T4789] ODEBUG: Out of memory. ODEBUG disabled [ 152.710165][ T4862] loop3: detected capacity change from 0 to 2048 [ 152.817625][ T4866] loop0: detected capacity change from 0 to 8 [ 153.718285][ T4862] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 153.782791][ T4862] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.815636][ T4270] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 153.834645][ T4270] Bluetooth: hci4: Injecting HCI hardware error event [ 153.846756][ T4208] Bluetooth: hci4: hardware error 0x00 [ 154.041070][ T4870] loop1: detected capacity change from 0 to 4096 [ 154.122975][ T4870] EXT4-fs (loop1): Test dummy encryption mode enabled [ 154.145109][ T4870] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 154.162516][ T4870] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 154.225020][ T4870] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,test_dummy_encryption=v1,nodioread_nolock,delalloc,max_dir_size_kb=0x0000000000000008,noblock_validity,minixdf,sysvgroups,errors=remount-ro,jqfmt=vfsv0,acl,noinit_itable,jqfmt=vfsv1,. Quota mode: writeback. [ 154.591188][ T4884] loop1: detected capacity change from 0 to 128 [ 156.213504][ T4884] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 156.279398][ T4884] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 156.502411][ T4899] rxe_eth0 speed is unknown, defaulting to 1000 [ 156.596880][ T4884] fscrypt: Error allocating hmac(sha512): -2 [ 158.265779][ T4911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.167'. [ 158.448339][ T4899] chnl_net:caif_netlink_parms(): no params data found [ 158.544940][ T1111] Bluetooth: hci5: command 0x0409 tx timeout [ 158.669851][ T4899] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.677198][ T4899] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.687042][ T4899] device bridge_slave_0 entered promiscuous mode [ 158.696188][ T4899] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.703355][ T4899] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.712175][ T4899] device bridge_slave_1 entered promiscuous mode [ 158.812591][ T4899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.875724][ T4899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.969653][ T4899] team0: Port device team_slave_0 added [ 158.987556][ T4924] loop0: detected capacity change from 0 to 512 [ 158.997757][ T4899] team0: Port device team_slave_1 added [ 159.058576][ T4924] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback. [ 159.089920][ T4899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.114491][ T4899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.146283][ T4924] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.221913][ T4899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.252564][ T4899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.287730][ T4899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.320568][ T4899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.421113][ T4934] loop0: detected capacity change from 0 to 1024 [ 159.482299][ T4899] device hsr_slave_0 entered promiscuous mode [ 159.501573][ T4899] device hsr_slave_1 entered promiscuous mode [ 159.516002][ T4936] loop3: detected capacity change from 0 to 512 [ 159.540652][ T4934] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.566192][ T4899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.576440][ T4936] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 159.596279][ T4899] Cannot create hsr debugfs directory [ 159.619599][ T4936] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 160.126537][ T4949] loop0: detected capacity change from 0 to 512 [ 160.195132][ T4949] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 160.304833][ T4949] EXT4-fs (loop0): 1 truncate cleaned up [ 160.352126][ T4949] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 160.712180][ T4313] Bluetooth: hci5: command 0x041b tx timeout [ 161.151853][ T4205] Bluetooth: Wrong link type (-22) [ 161.207911][ T26] kauditd_printk_skb: 43 callbacks suppressed [ 161.207929][ T26] audit: type=1800 audit(1792060892.965:72): pid=4956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.178" name="file3" dev="loop0" ino=16 res=0 errno=0 [ 161.307552][ T4899] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 161.385033][ T4899] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 161.448888][ T4899] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 161.484216][ T4899] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 161.635930][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.748983][ T4970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 162.226945][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.425576][ T4381] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 162.683237][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.716037][ T4899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.029731][ T1111] Bluetooth: hci5: command 0x040f tx timeout [ 164.117636][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.124793][ T4381] usb 3-1: Using ep0 maxpacket: 32 [ 164.162220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.182582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.226402][ T4899] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.239848][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.254818][ T4381] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 164.263049][ T4381] usb 3-1: config 0 has no interface number 0 [ 164.270936][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.284528][ T4381] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 164.304980][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.312120][ T4705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.320015][ T4381] usb 3-1: config 0 interface 196 has no altsetting 0 [ 164.335170][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.353473][ T4986] loop3: detected capacity change from 0 to 512 [ 164.371854][ T1111] wacom 0003:056A:0042.0003: Unknown device_type for 'syz0'. Assuming pen. [ 164.382239][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.383855][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.401639][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.408990][ T4705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.434639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.443613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.465850][ T4986] FAT-fs (loop3): Unrecognized mount option "˙0xffffffffffffffff˙˙˙˙˙˙˙˙" or missing value [ 164.478133][ T1111] wacom 0003:056A:0042.0003: hidraw0: USB HID vffffff.ff Gamepad [syz0] on syz0 [ 164.495715][ T4381] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 164.519104][ T4381] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.528925][ T1111] input: Wacom Intuos2 6x8 Pen as /devices/virtual/misc/uhid/0003:056A:0042.0003/input/input8 [ 164.549402][ T1497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.571345][ T1497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.582580][ T4381] usb 3-1: Product: syz [ 164.597675][ T4381] usb 3-1: Manufacturer: syz [ 164.602353][ T4381] usb 3-1: SerialNumber: syz [ 164.610825][ T1497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.660513][ T1497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.683907][ T4381] usb 3-1: config 0 descriptor?? [ 164.739844][ T4988] fido_id[4988]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 164.753860][ T1497] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.784663][ T4381] usb 3-1: can't set config #0, error -71 [ 164.815439][ T4381] usb 3-1: USB disconnect, device number 7 [ 164.822082][ T1497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.899886][ T1497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.289216][ T4313] Bluetooth: hci5: command 0x0419 tx timeout [ 166.305781][ T1497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.314521][ T1497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.820091][ T5016] loop3: detected capacity change from 0 to 8 [ 167.943489][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.963419][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.002449][ T4899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.024675][ T5023] FAULT_INJECTION: forcing a failure. [ 168.024675][ T5023] name failslab, interval 1, probability 0, space 0, times 0 [ 168.094572][ T5023] CPU: 0 PID: 5023 Comm: syz.3.200 Not tainted syzkaller #0 [ 168.101947][ T5023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 168.112050][ T5023] Call Trace: [ 168.115366][ T5023] [ 168.118339][ T5023] dump_stack_lvl+0x188/0x250 [ 168.123058][ T5023] ? show_regs_print_info+0x20/0x20 [ 168.128296][ T5023] ? load_image+0x410/0x410 [ 168.132844][ T5023] ? __might_sleep+0xf0/0xf0 [ 168.137491][ T5023] ? __lock_acquire+0x7d40/0x7d40 [ 168.142553][ T5023] ? kasan_quarantine_put+0xd4/0x210 [ 168.147882][ T5023] should_fail+0x383/0x4b0 [ 168.152347][ T5023] should_failslab+0x5/0x20 [ 168.156914][ T5023] slab_pre_alloc_hook+0x51/0xc0 [ 168.161927][ T5023] __kmalloc+0x6b/0x340 [ 168.166116][ T5023] ? kvm_io_bus_register_dev+0xe3/0x4c0 [ 168.171708][ T5023] kvm_io_bus_register_dev+0xe3/0x4c0 [ 168.177229][ T5023] kvm_pic_init+0x1d8/0x2f0 [ 168.181788][ T5023] kvm_arch_vm_ioctl+0x1101/0x1530 [ 168.186949][ T5023] ? kvm_arch_pm_notifier+0x2c0/0x2c0 [ 168.192387][ T5023] ? __lock_acquire+0x7d40/0x7d40 [ 168.197452][ T5023] ? unwind_next_frame+0x11ec/0x1cf0 [ 168.202785][ T5023] ? is_bpf_text_address+0x254/0x270 [ 168.208146][ T5023] ? __kernel_text_address+0x9a/0x100 [ 168.213598][ T5023] ? unwind_get_return_address+0x49/0x80 [ 168.219274][ T5023] ? stack_trace_save+0xf0/0xf0 [ 168.224163][ T5023] ? arch_stack_walk+0xf2/0x140 [ 168.229073][ T5023] ? kfree+0xef/0x2a0 [ 168.233096][ T5023] ? stack_trace_save+0xa6/0xf0 [ 168.237993][ T5023] ? stack_trace_snprint+0xe0/0xe0 [ 168.243138][ T5023] ? slab_free_freelist_hook+0xec/0x170 [ 168.248726][ T5023] ? security_file_ioctl+0x6c/0xa0 [ 168.253883][ T5023] ? __se_sys_ioctl+0x48/0x170 [ 168.258682][ T5023] ? do_syscall_64+0x4c/0xa0 [ 168.263315][ T5023] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.269466][ T5023] ? kfree+0xef/0x2a0 [ 168.273484][ T5023] ? kasan_set_track+0x62/0x70 [ 168.278287][ T5023] ? kasan_set_track+0x4b/0x70 [ 168.283205][ T5023] ? kasan_set_free_info+0x1f/0x40 [ 168.288390][ T5023] ? ____kasan_slab_free+0xd5/0x110 [ 168.293646][ T5023] ? slab_free_freelist_hook+0xec/0x170 [ 168.299247][ T5023] ? kfree+0xef/0x2a0 [ 168.303271][ T5023] ? tomoyo_path_number_perm+0x55c/0x6b0 [ 168.308980][ T5023] ? security_file_ioctl+0x6c/0xa0 [ 168.314137][ T5023] ? __se_sys_ioctl+0x48/0x170 [ 168.318931][ T5023] ? do_syscall_64+0x4c/0xa0 [ 168.323588][ T5023] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.329745][ T5023] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 168.335781][ T5023] ? lock_chain_count+0x20/0x20 [ 168.340690][ T5023] ? do_vfs_ioctl+0x1d5e/0x1f40 [ 168.345609][ T5023] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 168.351417][ T5023] ? rcu_lock_release+0x5/0x20 [ 168.356225][ T5023] kvm_vm_ioctl+0x78d/0xb00 [ 168.360784][ T5023] ? kvm_device_release+0x1e0/0x1e0 [ 168.366028][ T5023] ? kfree+0xef/0x2a0 [ 168.370060][ T5023] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 168.375766][ T5023] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 168.381329][ T5023] ? bpf_lsm_file_ioctl+0x5/0x10 [ 168.386342][ T5023] ? security_file_ioctl+0x7c/0xa0 [ 168.391527][ T5023] ? kvm_device_release+0x1e0/0x1e0 [ 168.396768][ T5023] __se_sys_ioctl+0xfa/0x170 [ 168.401400][ T5023] do_syscall_64+0x4c/0xa0 [ 168.405851][ T5023] ? clear_bhb_loop+0x30/0x80 [ 168.410575][ T5023] ? clear_bhb_loop+0x30/0x80 [ 168.415337][ T5023] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.421278][ T5023] RIP: 0033:0x7feb9d36e559 [ 168.425733][ T5023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.445420][ T5023] RSP: 002b:00007feb9b5c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.453924][ T5023] RAX: ffffffffffffffda RBX: 00007feb9d5f5fa0 RCX: 00007feb9d36e559 [ 168.461948][ T5023] RDX: 0000000000000000 RSI: 000000000000ae60 RDI: 0000000000000004 [ 168.469962][ T5023] RBP: 00007feb9d4058b0 R08: 0000000000000000 R09: 0000000000000000 [ 168.478028][ T5023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.486127][ T5023] R13: 00007feb9d5f6038 R14: 00007feb9d5f5fa0 R15: 00007ffe998f78d8 [ 168.494248][ T5023] [ 169.114825][ T5034] "syz.1.201" (5034) uses obsolete ecb(arc4) skcipher [ 170.172461][ T5040] loop2: detected capacity change from 0 to 512 [ 170.303188][ T5040] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 170.404686][ T5040] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.538787][ T1497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.571075][ T1497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.723685][ T5019] loop0: detected capacity change from 0 to 32768 [ 170.823940][ T4899] device veth0_vlan entered promiscuous mode [ 170.892479][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.908544][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.544145][ T5057] loop2: detected capacity change from 0 to 128 [ 172.559869][ T4899] device veth1_vlan entered promiscuous mode [ 172.587566][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.607498][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.622583][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 174.135940][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 174.160021][ T5065] attempt to access beyond end of device [ 174.160021][ T5065] loop2: rw=2049, want=921, limit=128 [ 174.184965][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.226490][ T4899] device veth0_macvtap entered promiscuous mode [ 174.257697][ T4899] device veth1_macvtap entered promiscuous mode [ 174.338563][ T5057] attempt to access beyond end of device [ 174.338563][ T5057] loop2: rw=524288, want=369, limit=128 [ 174.365121][ T4899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.401404][ T4899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.401423][ T4899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.401440][ T4899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.401449][ T4899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.401461][ T4899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.401469][ T4899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.401480][ T4899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.401504][ T4899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.401515][ T4899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.413203][ T4899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.435502][ T4899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.435526][ T4899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.435538][ T4899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.435553][ T4899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.435565][ T4899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.435579][ T4899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.435590][ T4899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.435604][ T4899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.435618][ T4899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.435631][ T4899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.436790][ T4899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.439644][ T4899] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.439745][ T4899] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.439776][ T4899] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.439804][ T4899] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.455122][ T5057] attempt to access beyond end of device [ 174.455122][ T5057] loop2: rw=0, want=153, limit=128 [ 174.455342][ T5057] attempt to access beyond end of device [ 174.455342][ T5057] loop2: rw=0, want=153, limit=128 [ 174.456149][ T5057] attempt to access beyond end of device [ 174.456149][ T5057] loop2: rw=0, want=153, limit=128 [ 174.456261][ T5057] attempt to access beyond end of device [ 174.456261][ T5057] loop2: rw=0, want=153, limit=128 [ 174.456345][ T5057] attempt to access beyond end of device [ 174.456345][ T5057] loop2: rw=0, want=153, limit=128 [ 174.456428][ T5057] attempt to access beyond end of device [ 174.456428][ T5057] loop2: rw=0, want=153, limit=128 [ 174.456511][ T5057] attempt to access beyond end of device [ 174.456511][ T5057] loop2: rw=0, want=153, limit=128 [ 174.456596][ T5057] attempt to access beyond end of device [ 174.456596][ T5057] loop2: rw=0, want=153, limit=128 [ 174.514982][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 174.515674][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.516203][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.516668][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.517129][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.588732][ T154] device hsr_slave_0 left promiscuous mode [ 174.589337][ T154] device hsr_slave_1 left promiscuous mode [ 174.589942][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.590020][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.608078][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.608111][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.627424][ T154] device bridge_slave_1 left promiscuous mode [ 174.629049][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.689008][ T154] device bridge_slave_0 left promiscuous mode [ 174.689168][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.766548][ T154] device veth1_macvtap left promiscuous mode [ 174.766764][ T154] device veth0_macvtap left promiscuous mode [ 174.766845][ T154] device veth1_vlan left promiscuous mode [ 174.767019][ T154] device veth0_vlan left promiscuous mode [ 174.798180][ T5078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'. [ 175.607418][ T154] team0 (unregistering): Port device team_slave_1 removed [ 175.643239][ T154] team0 (unregistering): Port device team_slave_0 removed [ 175.671954][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.716821][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.674833][ T5098] loop3: detected capacity change from 0 to 512 [ 176.700797][ T5098] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 176.726034][ T154] bond0 (unregistering): Released all slaves [ 176.742351][ T5098] EXT4-fs (loop3): 1 truncate cleaned up [ 176.752765][ T5098] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 177.237846][ T26] audit: type=1800 audit(1792060908.835:73): pid=5104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.211" name="file3" dev="loop3" ino=16 res=0 errno=0 [ 179.055665][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.063576][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.103190][ T5108] loop0: detected capacity change from 0 to 128 [ 179.177019][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 179.198740][ T5111] FAULT_INJECTION: forcing a failure. [ 179.198740][ T5111] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 179.216446][ T5108] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 179.264872][ T5108] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 179.282755][ T5111] CPU: 1 PID: 5111 Comm: syz.3.215 Not tainted syzkaller #0 [ 179.290139][ T5111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.300231][ T5111] Call Trace: [ 179.303540][ T5111] [ 179.306495][ T5111] dump_stack_lvl+0x188/0x250 [ 179.311239][ T5111] ? show_regs_print_info+0x20/0x20 [ 179.316480][ T5111] ? load_image+0x410/0x410 [ 179.321027][ T5111] ? __lock_acquire+0x7d40/0x7d40 [ 179.326101][ T5111] should_fail+0x383/0x4b0 [ 179.330561][ T5111] prepare_alloc_pages+0x1e3/0x5b0 [ 179.335810][ T5111] __alloc_pages+0x11b/0x480 [ 179.340449][ T5111] ? zone_statistics+0x170/0x170 [ 179.345438][ T5111] ? alloc_pages+0x452/0x560 [ 179.350077][ T5111] pte_alloc_one+0x7b/0x310 [ 179.354622][ T5111] ? rcu_lock_release+0x20/0x20 [ 179.359513][ T5111] ? __might_sleep+0xf0/0xf0 [ 179.364149][ T5111] ? do_raw_spin_lock+0x128/0x2f0 [ 179.369215][ T5111] __pte_alloc+0x21/0x150 [ 179.373595][ T5111] copy_page_range+0x2ab2/0x32c0 [ 179.378616][ T5111] ? copy_process+0x17a7/0x3e70 [ 179.383582][ T5111] ? pfn_valid+0x380/0x380 [ 179.388043][ T5111] ? validate_mm_rb+0x201/0x230 [ 179.389802][ T4581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.392932][ T5111] ? validate_mm_rb+0x230/0x230 [ 179.405651][ T5111] ? vma_gap_callbacks_rotate+0x196/0x1f0 [ 179.411414][ T5111] copy_mm+0xc61/0x13d0 [ 179.415617][ T5111] ? copy_signal+0x610/0x610 [ 179.420245][ T5111] ? __init_rwsem+0x11e/0x160 [ 179.423174][ T4581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.424973][ T5111] ? copy_signal+0x501/0x610 [ 179.425002][ T5111] copy_process+0x17a7/0x3e70 [ 179.425046][ T5111] ? __lock_acquire+0x7d40/0x7d40 [ 179.425080][ T5111] ? __pidfd_prepare+0x140/0x140 [ 179.425117][ T5111] kernel_clone+0x23f/0x990 [ 179.425145][ T5111] ? create_io_thread+0x180/0x180 [ 179.425184][ T5111] __se_sys_clone3+0x312/0x3d0 [ 179.425209][ T5111] ? __x64_sys_clone3+0x60/0x60 [ 179.470950][ T5111] ? __lock_acquire+0x7d40/0x7d40 [ 179.476050][ T5111] ? lockdep_hardirqs_on+0x94/0x140 [ 179.481478][ T5111] do_syscall_64+0x4c/0xa0 [ 179.485946][ T5111] ? clear_bhb_loop+0x30/0x80 [ 179.487269][ T1497] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 179.490660][ T5111] ? clear_bhb_loop+0x30/0x80 [ 179.502620][ T5111] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 179.508565][ T5111] RIP: 0033:0x7feb9d36e559 [ 179.513017][ T5111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.532675][ T5111] RSP: 002b:00007feb9b5c5ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 179.541145][ T5111] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007feb9d36e559 [ 179.549340][ T5111] RDX: 00007feb9b5c5f10 RSI: 0000000000000058 RDI: 00007feb9b5c5f10 [ 179.557375][ T5111] RBP: 00007feb9d4058b0 R08: 0000000000000000 R09: 0000000000000058 [ 179.565392][ T5111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.573409][ T5111] R13: 00007feb9d5f6038 R14: 00007feb9d5f5fa0 R15: 00007ffe998f78d8 [ 179.581442][ T5111] [ 179.731431][ T5108] fscrypt: Error allocating hmac(sha512): -4 [ 180.052018][ T5130] FAULT_INJECTION: forcing a failure. [ 180.052018][ T5130] name failslab, interval 1, probability 0, space 0, times 0 [ 180.126952][ T5130] CPU: 1 PID: 5130 Comm: syz.0.218 Not tainted syzkaller #0 [ 180.134310][ T5130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.144392][ T5130] Call Trace: [ 180.147697][ T5130] [ 180.150648][ T5130] dump_stack_lvl+0x188/0x250 [ 180.155369][ T5130] ? show_regs_print_info+0x20/0x20 [ 180.160600][ T5130] ? load_image+0x410/0x410 [ 180.165115][ T5130] ? __might_sleep+0xf0/0xf0 [ 180.169726][ T5130] ? __lock_acquire+0x7d40/0x7d40 [ 180.174770][ T5130] ? kasan_quarantine_put+0xd4/0x210 [ 180.180086][ T5130] should_fail+0x383/0x4b0 [ 180.184528][ T5130] should_failslab+0x5/0x20 [ 180.189057][ T5130] slab_pre_alloc_hook+0x51/0xc0 [ 180.194005][ T5130] __kmalloc+0x6b/0x340 [ 180.198163][ T5130] ? kvm_io_bus_register_dev+0xe3/0x4c0 [ 180.203723][ T5130] kvm_io_bus_register_dev+0xe3/0x4c0 [ 180.209117][ T5130] kvm_pic_init+0x203/0x2f0 [ 180.213679][ T5130] kvm_arch_vm_ioctl+0x1101/0x1530 [ 180.218821][ T5130] ? kvm_arch_pm_notifier+0x2c0/0x2c0 [ 180.224270][ T5130] ? __lock_acquire+0x7d40/0x7d40 [ 180.229305][ T5130] ? unwind_next_frame+0x11ec/0x1cf0 [ 180.234615][ T5130] ? is_bpf_text_address+0x254/0x270 [ 180.239939][ T5130] ? __kernel_text_address+0x9a/0x100 [ 180.245352][ T5130] ? unwind_get_return_address+0x49/0x80 [ 180.251024][ T5130] ? stack_trace_save+0xf0/0xf0 [ 180.255936][ T5130] ? arch_stack_walk+0xf2/0x140 [ 180.260820][ T5130] ? kfree+0xef/0x2a0 [ 180.264837][ T5130] ? stack_trace_save+0xa6/0xf0 [ 180.269727][ T5130] ? stack_trace_snprint+0xe0/0xe0 [ 180.274876][ T5130] ? slab_free_freelist_hook+0xec/0x170 [ 180.280437][ T5130] ? security_file_ioctl+0x6c/0xa0 [ 180.285556][ T5130] ? __se_sys_ioctl+0x48/0x170 [ 180.290324][ T5130] ? do_syscall_64+0x4c/0xa0 [ 180.294927][ T5130] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.301031][ T5130] ? kfree+0xef/0x2a0 [ 180.305056][ T5130] ? kasan_set_track+0x62/0x70 [ 180.309835][ T5130] ? kasan_set_track+0x4b/0x70 [ 180.314606][ T5130] ? kasan_set_free_info+0x1f/0x40 [ 180.319721][ T5130] ? ____kasan_slab_free+0xd5/0x110 [ 180.324929][ T5130] ? slab_free_freelist_hook+0xec/0x170 [ 180.330479][ T5130] ? kfree+0xef/0x2a0 [ 180.334469][ T5130] ? tomoyo_path_number_perm+0x55c/0x6b0 [ 180.340130][ T5130] ? security_file_ioctl+0x6c/0xa0 [ 180.345272][ T5130] ? __se_sys_ioctl+0x48/0x170 [ 180.350065][ T5130] ? do_syscall_64+0x4c/0xa0 [ 180.354687][ T5130] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.360859][ T5130] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 180.366893][ T5130] ? lock_chain_count+0x20/0x20 [ 180.371798][ T5130] ? do_vfs_ioctl+0x1d5e/0x1f40 [ 180.376683][ T5130] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 180.382353][ T5130] ? rcu_lock_release+0x5/0x20 [ 180.387136][ T5130] kvm_vm_ioctl+0x78d/0xb00 [ 180.391691][ T5130] ? kvm_device_release+0x1e0/0x1e0 [ 180.396925][ T5130] ? kfree+0xef/0x2a0 [ 180.400930][ T5130] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 180.406573][ T5130] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 180.412074][ T5130] ? bpf_lsm_file_ioctl+0x5/0x10 [ 180.417026][ T5130] ? security_file_ioctl+0x7c/0xa0 [ 180.422166][ T5130] ? kvm_device_release+0x1e0/0x1e0 [ 180.427370][ T5130] __se_sys_ioctl+0xfa/0x170 [ 180.431968][ T5130] do_syscall_64+0x4c/0xa0 [ 180.436394][ T5130] ? clear_bhb_loop+0x30/0x80 [ 180.441083][ T5130] ? clear_bhb_loop+0x30/0x80 [ 180.445791][ T5130] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.451693][ T5130] RIP: 0033:0x7f9bb848d559 [ 180.456108][ T5130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.476861][ T5130] RSP: 002b:00007f9bb66e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.485562][ T5130] RAX: ffffffffffffffda RBX: 00007f9bb8714fa0 RCX: 00007f9bb848d559 [ 180.493584][ T5130] RDX: 0000000000000000 RSI: 000000000000ae60 RDI: 0000000000000004 [ 180.501860][ T5130] RBP: 00007f9bb85248b0 R08: 0000000000000000 R09: 0000000000000000 [ 180.510090][ T5130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.518095][ T5130] R13: 00007f9bb8715038 R14: 00007f9bb8714fa0 R15: 00007ffd8ba573f8 [ 180.526100][ T5130] [ 180.657760][ T5136] loop1: detected capacity change from 0 to 512 [ 180.757361][ T5136] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,barrier=0x000000000000000d,minixdf,stripe=0x0000000000000b74,resuid=0x0000000000000000,dioread_lock,grpjquota=,i_version,,errors=continue. Quota mode: writeback. [ 180.784839][ T5136] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.059074][ T26] audit: type=1800 audit(1792060912.815:74): pid=5136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.212" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 184.391906][ T5165] loop5: detected capacity change from 0 to 1024 [ 184.452440][ T5170] loop1: detected capacity change from 0 to 1024 [ 184.555346][ T5165] EXT4-fs (loop5): Ignoring removed orlov option [ 184.562598][ T5165] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 184.645841][ T5170] hfsplus: invalid length 32517 has been corrected to 255 [ 184.692562][ T5172] loop2: detected capacity change from 0 to 2048 [ 184.708099][ T5165] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,grpquota,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,mblk_io_submit,,errors=continue. Quota mode: writeback. [ 184.853091][ T26] audit: type=1800 audit(1792060916.605:75): pid=5170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.223" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 184.891407][ T5172] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.696908][ T5188] loop3: detected capacity change from 0 to 512 [ 185.732368][ T1497] hfsplus: b-tree write err: -5, ino 20 [ 185.815793][ T5188] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 185.878040][ T5188] EXT4-fs (loop3): orphan cleanup on readonly fs [ 185.892851][ T5188] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3894: comm syz.3.225: Allocating blocks 41-42 which overlap fs metadata [ 186.067226][ T5188] Quota error (device loop3): write_blk: dquota write failed [ 186.090333][ T5199] FAULT_INJECTION: forcing a failure. [ 186.090333][ T5199] name failslab, interval 1, probability 0, space 0, times 0 [ 186.091569][ T5188] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 186.126282][ T5199] CPU: 1 PID: 5199 Comm: syz.1.231 Not tainted syzkaller #0 [ 186.133664][ T5199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 186.143853][ T5199] Call Trace: [ 186.147180][ T5199] [ 186.150149][ T5199] dump_stack_lvl+0x188/0x250 [ 186.154891][ T5199] ? show_regs_print_info+0x20/0x20 [ 186.160139][ T5199] ? load_image+0x410/0x410 [ 186.164677][ T5199] ? __might_sleep+0xf0/0xf0 [ 186.169313][ T5199] ? __lock_acquire+0x7d40/0x7d40 [ 186.174390][ T5199] ? kasan_quarantine_put+0xd4/0x210 [ 186.179750][ T5199] should_fail+0x383/0x4b0 [ 186.184230][ T5199] should_failslab+0x5/0x20 [ 186.184860][ T5188] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.225: Failed to acquire dquot type 0 [ 186.188771][ T5199] slab_pre_alloc_hook+0x51/0xc0 [ 186.205016][ T5199] __kmalloc+0x6b/0x340 [ 186.209276][ T5199] ? kvm_io_bus_register_dev+0xe3/0x4c0 [ 186.214910][ T5199] kvm_io_bus_register_dev+0xe3/0x4c0 [ 186.220342][ T5199] kvm_pic_init+0x1d8/0x2f0 [ 186.224909][ T5199] kvm_arch_vm_ioctl+0x1101/0x1530 [ 186.230075][ T5199] ? kvm_arch_pm_notifier+0x2c0/0x2c0 [ 186.235530][ T5199] ? __lock_acquire+0x7d40/0x7d40 [ 186.240603][ T5199] ? unwind_next_frame+0x11ec/0x1cf0 [ 186.245938][ T5199] ? is_bpf_text_address+0x254/0x270 [ 186.251385][ T5199] ? __kernel_text_address+0x9a/0x100 [ 186.256833][ T5199] ? unwind_get_return_address+0x49/0x80 [ 186.262566][ T5199] ? stack_trace_save+0xf0/0xf0 [ 186.264691][ T5188] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, [ 186.267462][ T5199] ? arch_stack_walk+0xf2/0x140 [ 186.267503][ T5199] ? kfree+0xef/0x2a0 [ 186.275461][ T5188] inode 12: [ 186.279965][ T5199] ? stack_trace_save+0xa6/0xf0 [ 186.283963][ T5188] block 14: [ 186.287176][ T5199] ? stack_trace_snprint+0xe0/0xe0 [ 186.287199][ T5199] ? slab_free_freelist_hook+0xec/0x170 [ 186.287222][ T5199] ? security_file_ioctl+0x6c/0xa0 [ 186.287244][ T5199] ? __se_sys_ioctl+0x48/0x170 [ 186.292105][ T5188] freeing already freed block (bit 14); block bitmap corrupt. [ 186.295234][ T5199] ? do_syscall_64+0x4c/0xa0 [ 186.295257][ T5199] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 186.295288][ T5199] ? kfree+0xef/0x2a0 [ 186.338151][ T5199] ? kasan_set_track+0x62/0x70 [ 186.342965][ T5199] ? kasan_set_track+0x4b/0x70 [ 186.347783][ T5199] ? kasan_set_free_info+0x1f/0x40 [ 186.352944][ T5199] ? ____kasan_slab_free+0xd5/0x110 [ 186.358221][ T5199] ? slab_free_freelist_hook+0xec/0x170 [ 186.363826][ T5199] ? kfree+0xef/0x2a0 [ 186.367851][ T5199] ? tomoyo_path_number_perm+0x55c/0x6b0 [ 186.371842][ T5188] EXT4-fs (loop3): 1 truncate cleaned up [ 186.373531][ T5199] ? security_file_ioctl+0x6c/0xa0 [ 186.384348][ T5199] ? __se_sys_ioctl+0x48/0x170 [ 186.389162][ T5199] ? do_syscall_64+0x4c/0xa0 [ 186.393814][ T5199] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 186.399948][ T5199] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 186.405976][ T5199] ? lock_chain_count+0x20/0x20 [ 186.406370][ T5188] EXT4-fs (loop3): pa ffff888025d49e00: logic 1, phys. 41, len 23 [ 186.411016][ T5199] ? do_vfs_ioctl+0x1d5e/0x1f40 [ 186.411048][ T5199] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 186.411076][ T5199] ? rcu_lock_release+0x5/0x20 [ 186.419192][ T5188] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4904: group 0, [ 186.423753][ T5199] kvm_vm_ioctl+0x78d/0xb00 [ 186.429925][ T5188] free 22, pa_free 23 [ 186.434172][ T5199] ? kvm_device_release+0x1e0/0x1e0 [ 186.456313][ T5199] ? kfree+0xef/0x2a0 [ 186.460355][ T5199] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 186.466026][ T5199] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 186.471586][ T5199] ? bpf_lsm_file_ioctl+0x5/0x10 [ 186.476558][ T5199] ? security_file_ioctl+0x7c/0xa0 [ 186.481711][ T5199] ? kvm_device_release+0x1e0/0x1e0 [ 186.486977][ T5199] __se_sys_ioctl+0xfa/0x170 [ 186.489838][ T5188] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,noblock_validity,usrquota,grpjquota=,discard,nouid32,grpjquota=,nogrpid,max_dir_size_kb=0x00000000000004002,errors=continue. Quota mode: writeback. [ 186.491600][ T5199] do_syscall_64+0x4c/0xa0 [ 186.491628][ T5199] ? clear_bhb_loop+0x30/0x80 [ 186.522329][ T5199] ? clear_bhb_loop+0x30/0x80 [ 186.527059][ T5199] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 186.533002][ T5199] RIP: 0033:0x7f8c6192d559 [ 186.537461][ T5199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.557112][ T5199] RSP: 002b:00007f8c5fb85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.565575][ T5199] RAX: ffffffffffffffda RBX: 00007f8c61bb4fa0 RCX: 00007f8c6192d559 [ 186.573594][ T5199] RDX: 0000000000000000 RSI: 000000000000ae60 RDI: 0000000000000004 [ 186.581601][ T5199] RBP: 00007f8c619c48b0 R08: 0000000000000000 R09: 0000000000000000 [ 186.589612][ T5199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.597616][ T5199] R13: 00007f8c61bb5038 R14: 00007f8c61bb4fa0 R15: 00007ffea6144598 [ 186.605649][ T5199] [ 186.630583][ T5188] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 186.685521][ T5188] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 186.840441][ T5226] loop0: detected capacity change from 0 to 256 [ 186.910129][ T5230] xt_limit: Overflow, try lower: 4294967292/4294967292 [ 186.955989][ T26] audit: type=1800 audit(1792060918.715:76): pid=5226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.236" name="file1" dev="loop0" ino=1048642 res=0 errno=0 [ 187.047119][ T26] audit: type=1804 audit(1792060918.735:77): pid=5226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.236" name="/newroot/48/file1/file1" dev="loop0" ino=1048642 res=1 errno=0 [ 187.181241][ T5242] FAULT_INJECTION: forcing a failure. [ 187.181241][ T5242] name failslab, interval 1, probability 0, space 0, times 0 [ 187.194148][ T5242] CPU: 1 PID: 5242 Comm: syz.3.242 Not tainted syzkaller #0 [ 187.201480][ T5242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.211572][ T5242] Call Trace: [ 187.214881][ T5242] [ 187.217885][ T5242] dump_stack_lvl+0x188/0x250 [ 187.222649][ T5242] ? show_regs_print_info+0x20/0x20 [ 187.227891][ T5242] ? load_image+0x410/0x410 [ 187.232482][ T5242] ? __lock_acquire+0x7d40/0x7d40 [ 187.237551][ T5242] ? aa_get_newest_label+0xf5/0x5a0 [ 187.242802][ T5242] should_fail+0x383/0x4b0 [ 187.247275][ T5242] should_failslab+0x5/0x20 [ 187.251821][ T5242] slab_pre_alloc_hook+0x51/0xc0 [ 187.256797][ T5242] ? __se_sys_fsopen+0xae/0x320 [ 187.261698][ T5242] __kmalloc_track_caller+0x69/0x330 [ 187.267029][ T5242] ? __se_sys_fsopen+0xae/0x320 [ 187.271953][ T5242] ? security_capable+0x85/0xb0 [ 187.276871][ T5242] ? strnlen_user+0x150/0x250 [ 187.281595][ T5242] strndup_user+0x71/0x150 [ 187.286164][ T5242] __se_sys_fsopen+0xae/0x320 [ 187.290893][ T5242] do_syscall_64+0x4c/0xa0 [ 187.295352][ T5242] ? clear_bhb_loop+0x30/0x80 [ 187.300072][ T5242] ? clear_bhb_loop+0x30/0x80 [ 187.304799][ T5242] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 187.310749][ T5242] RIP: 0033:0x7feb9d36e559 [ 187.315207][ T5242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.334848][ T5242] RSP: 002b:00007feb9b5c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 187.343308][ T5242] RAX: ffffffffffffffda RBX: 00007feb9d5f5fa0 RCX: 00007feb9d36e559 [ 187.351361][ T5242] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000000c0 [ 187.359383][ T5242] RBP: 00007feb9d4058b0 R08: 0000000000000000 R09: 0000000000000000 [ 187.367397][ T5242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.375428][ T5242] R13: 00007feb9d5f6038 R14: 00007feb9d5f5fa0 R15: 00007ffe998f78d8 [ 187.383462][ T5242] [ 187.418801][ T5242] loop3: detected capacity change from 0 to 256 [ 187.471471][ T5242] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 187.482740][ T5242] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 187.497358][ T5242] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 187.663118][ T5250] loop5: detected capacity change from 0 to 256 [ 187.734218][ T5250] exfat: Deprecated parameter 'utf8' [ 187.791319][ T5250] exfat: Deprecated parameter 'namecase' [ 187.838582][ T5250] exfat: Deprecated parameter 'namecase' [ 187.875778][ T5250] exfat: Deprecated parameter 'namecase' [ 187.953549][ T5250] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 188.053969][ T5263] loop3: detected capacity change from 0 to 512 [ 188.374867][ T5250] netlink: 'syz.5.245': attribute type 1 has an invalid length. [ 188.645020][ T5263] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 188.856484][ T5263] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.013458][ T5263] EXT4-fs warning (device loop3): verify_group_input:147: Cannot add at group 4294967295 (only 1 groups) [ 189.046724][ T5272] FAULT_INJECTION: forcing a failure. [ 189.046724][ T5272] name failslab, interval 1, probability 0, space 0, times 0 [ 189.074909][ T5272] CPU: 1 PID: 5272 Comm: syz.1.254 Not tainted syzkaller #0 [ 189.082278][ T5272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.092425][ T5272] Call Trace: [ 189.095741][ T5272] [ 189.098711][ T5272] dump_stack_lvl+0x188/0x250 [ 189.103429][ T5272] ? show_regs_print_info+0x20/0x20 [ 189.108695][ T5272] ? load_image+0x410/0x410 [ 189.113254][ T5272] ? __might_sleep+0xf0/0xf0 [ 189.117887][ T5272] ? __lock_acquire+0x7d40/0x7d40 [ 189.122954][ T5272] ? __mutex_lock_common+0x435/0x2400 [ 189.128500][ T5272] should_fail+0x383/0x4b0 [ 189.132972][ T5272] should_failslab+0x5/0x20 [ 189.137509][ T5272] slab_pre_alloc_hook+0x51/0xc0 [ 189.142499][ T5272] __kmalloc+0x6b/0x340 [ 189.146702][ T5272] ? kvm_io_bus_register_dev+0xe3/0x4c0 [ 189.152329][ T5272] kvm_io_bus_register_dev+0xe3/0x4c0 [ 189.157808][ T5272] kvm_pic_init+0x1a9/0x2f0 [ 189.162389][ T5272] kvm_arch_vm_ioctl+0x1101/0x1530 [ 189.167550][ T5272] ? kvm_arch_pm_notifier+0x2c0/0x2c0 [ 189.172984][ T5272] ? __lock_acquire+0x7d40/0x7d40 [ 189.178052][ T5272] ? unwind_next_frame+0x11ec/0x1cf0 [ 189.183386][ T5272] ? is_bpf_text_address+0x254/0x270 [ 189.188717][ T5272] ? __kernel_text_address+0x9a/0x100 [ 189.194141][ T5272] ? unwind_get_return_address+0x49/0x80 [ 189.199855][ T5272] ? stack_trace_save+0xf0/0xf0 [ 189.204773][ T5272] ? arch_stack_walk+0xf2/0x140 [ 189.209685][ T5272] ? kfree+0xef/0x2a0 [ 189.213715][ T5272] ? stack_trace_save+0xa6/0xf0 [ 189.218611][ T5272] ? stack_trace_snprint+0xe0/0xe0 [ 189.223770][ T5272] ? slab_free_freelist_hook+0xec/0x170 [ 189.229364][ T5272] ? security_file_ioctl+0x6c/0xa0 [ 189.234527][ T5272] ? __se_sys_ioctl+0x48/0x170 [ 189.239324][ T5272] ? do_syscall_64+0x4c/0xa0 [ 189.243957][ T5272] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 189.250079][ T5272] ? kfree+0xef/0x2a0 [ 189.254203][ T5272] ? kasan_set_track+0x62/0x70 [ 189.259012][ T5272] ? kasan_set_track+0x4b/0x70 [ 189.263825][ T5272] ? kasan_set_free_info+0x1f/0x40 [ 189.268983][ T5272] ? ____kasan_slab_free+0xd5/0x110 [ 189.274255][ T5272] ? slab_free_freelist_hook+0xec/0x170 [ 189.279848][ T5272] ? kfree+0xef/0x2a0 [ 189.283872][ T5272] ? tomoyo_path_number_perm+0x55c/0x6b0 [ 189.289551][ T5272] ? security_file_ioctl+0x6c/0xa0 [ 189.294710][ T5272] ? __se_sys_ioctl+0x48/0x170 [ 189.299520][ T5272] ? do_syscall_64+0x4c/0xa0 [ 189.304173][ T5272] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 189.310318][ T5272] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 189.316345][ T5272] ? lock_chain_count+0x20/0x20 [ 189.321243][ T5272] ? do_vfs_ioctl+0x1d5e/0x1f40 [ 189.326178][ T5272] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 189.331859][ T5272] ? rcu_lock_release+0x5/0x20 [ 189.336672][ T5272] kvm_vm_ioctl+0x78d/0xb00 [ 189.341227][ T5272] ? kvm_device_release+0x1e0/0x1e0 [ 189.346478][ T5272] ? kfree+0xef/0x2a0 [ 189.350510][ T5272] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 189.356186][ T5272] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 189.362256][ T5272] ? bpf_lsm_file_ioctl+0x5/0x10 [ 189.367259][ T5272] ? security_file_ioctl+0x7c/0xa0 [ 189.372419][ T5272] ? kvm_device_release+0x1e0/0x1e0 [ 189.377668][ T5272] __se_sys_ioctl+0xfa/0x170 [ 189.382305][ T5272] do_syscall_64+0x4c/0xa0 [ 189.386758][ T5272] ? clear_bhb_loop+0x30/0x80 [ 189.391478][ T5272] ? clear_bhb_loop+0x30/0x80 [ 189.396250][ T5272] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 189.402196][ T5272] RIP: 0033:0x7f8c6192d559 [ 189.406648][ T5272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.426294][ T5272] RSP: 002b:00007f8c5fb85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.434760][ T5272] RAX: ffffffffffffffda RBX: 00007f8c61bb4fa0 RCX: 00007f8c6192d559 [ 189.442769][ T5272] RDX: 0000000000000000 RSI: 000000000000ae60 RDI: 0000000000000004 [ 189.450781][ T5272] RBP: 00007f8c619c48b0 R08: 0000000000000000 R09: 0000000000000000 [ 189.458792][ T5272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.466841][ T5272] R13: 00007f8c61bb5038 R14: 00007f8c61bb4fa0 R15: 00007ffea6144598 [ 189.474894][ T5272] [ 190.668899][ T5305] loop1: detected capacity change from 0 to 512 [ 190.718315][ T5305] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 190.978771][ T5305] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 191.314122][ T5320] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 192.579665][ T5335] FAULT_INJECTION: forcing a failure. [ 192.579665][ T5335] name failslab, interval 1, probability 0, space 0, times 0 [ 192.592675][ T5335] CPU: 0 PID: 5335 Comm: syz.0.271 Not tainted syzkaller #0 [ 192.600010][ T5335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.610112][ T5335] Call Trace: [ 192.613440][ T5335] [ 192.616409][ T5335] dump_stack_lvl+0x188/0x250 [ 192.621150][ T5335] ? show_regs_print_info+0x20/0x20 [ 192.626393][ T5335] ? load_image+0x410/0x410 [ 192.631116][ T5335] ? __might_sleep+0xf0/0xf0 [ 192.635751][ T5335] ? __lock_acquire+0x7d40/0x7d40 [ 192.640825][ T5335] should_fail+0x383/0x4b0 [ 192.645317][ T5335] should_failslab+0x5/0x20 [ 192.649867][ T5335] slab_pre_alloc_hook+0x51/0xc0 [ 192.654864][ T5335] ? copy_net_ns+0x13c/0x5b0 [ 192.659673][ T5335] kmem_cache_alloc+0x3d/0x280 [ 192.664486][ T5335] copy_net_ns+0x13c/0x5b0 [ 192.668942][ T5335] create_new_namespaces+0x3ce/0x700 [ 192.674277][ T5335] unshare_nsproxy_namespaces+0x116/0x160 [ 192.680041][ T5335] ksys_unshare+0x4f6/0x8e0 [ 192.684585][ T5335] ? __lock_acquire+0x7d40/0x7d40 [ 192.689656][ T5335] ? sighand_ctor+0x40/0x40 [ 192.694201][ T5335] ? lock_chain_count+0x20/0x20 [ 192.699107][ T5335] ? syscall_enter_from_user_mode+0x21/0x70 [ 192.705053][ T5335] __x64_sys_unshare+0x34/0x40 [ 192.709854][ T5335] do_syscall_64+0x4c/0xa0 [ 192.714315][ T5335] ? clear_bhb_loop+0x30/0x80 [ 192.719035][ T5335] ? clear_bhb_loop+0x30/0x80 [ 192.723761][ T5335] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.729732][ T5335] RIP: 0033:0x7f9bb848d559 [ 192.734194][ T5335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.753841][ T5335] RSP: 002b:00007f9bb66e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 192.762338][ T5335] RAX: ffffffffffffffda RBX: 00007f9bb8714fa0 RCX: 00007f9bb848d559 [ 192.770384][ T5335] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000600 [ 192.778428][ T5335] RBP: 00007f9bb85248b0 R08: 0000000000000000 R09: 0000000000000000 [ 192.786445][ T5335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.794457][ T5335] R13: 00007f9bb8715038 R14: 00007f9bb8714fa0 R15: 00007ffd8ba573f8 [ 192.802513][ T5335] [ 194.636824][ T26] audit: type=1800 audit(1792060926.395:78): pid=5367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.282" name="protocol" dev="configfs" ino=85764 res=0 errno=0 [ 194.752188][ T26] audit: type=1800 audit(1792060926.425:79): pid=5367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.282" name="report_length" dev="configfs" ino=85765 res=0 errno=0 [ 195.044862][ T5383] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 195.960551][ T5392] loop3: detected capacity change from 0 to 512 [ 196.546259][ T5393] device bridge1 entered promiscuous mode [ 197.445393][ T5392] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 197.541313][ T5392] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.290: invalid indirect mapped block 32768 (level 2) [ 197.572275][ T5392] EXT4-fs (loop3): 1 orphan inode deleted [ 197.609329][ T5392] EXT4-fs (loop3): 1 truncate cleaned up [ 197.655093][ T5392] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 197.737732][ T5409] loop2: detected capacity change from 0 to 256 [ 197.827865][ T5409] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 197.970510][ T5415] FAULT_INJECTION: forcing a failure. [ 197.970510][ T5415] name failslab, interval 1, probability 0, space 0, times 0 [ 198.055698][ T5415] CPU: 0 PID: 5415 Comm: syz.0.294 Not tainted syzkaller #0 [ 198.063069][ T5415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.073172][ T5415] Call Trace: [ 198.076530][ T5415] [ 198.079498][ T5415] dump_stack_lvl+0x188/0x250 [ 198.085273][ T5415] ? show_regs_print_info+0x20/0x20 [ 198.090604][ T5415] ? load_image+0x410/0x410 [ 198.095159][ T5415] ? __might_sleep+0xf0/0xf0 [ 198.099800][ T5415] ? __lock_acquire+0x7d40/0x7d40 [ 198.104883][ T5415] should_fail+0x383/0x4b0 [ 198.109352][ T5415] should_failslab+0x5/0x20 [ 198.113907][ T5415] slab_pre_alloc_hook+0x51/0xc0 [ 198.118896][ T5415] __kmalloc+0x6b/0x340 [ 198.123125][ T5415] ? security_prepare_creds+0x47/0x130 [ 198.128639][ T5415] ? prepare_creds+0x3c/0x610 [ 198.133363][ T5415] security_prepare_creds+0x47/0x130 [ 198.138707][ T5415] prepare_creds+0x450/0x610 [ 198.143345][ T5415] lookup_user_key+0x3a5/0x1160 [ 198.148251][ T5415] ? lookup_user_key_possessed+0x40/0x40 [ 198.153935][ T5415] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 198.159970][ T5415] ? verify_lock_unused+0x140/0x140 [ 198.165223][ T5415] ? security_prepare_creds+0x47/0x130 [ 198.170731][ T5415] keyctl_session_to_parent+0x24/0x9c0 [ 198.176238][ T5415] __se_sys_keyctl+0x578/0xa20 [ 198.181054][ T5415] ? __x64_sys_keyctl+0xc0/0xc0 [ 198.185962][ T5415] ? __context_tracking_exit+0x4c/0x80 [ 198.191467][ T5415] ? __lock_acquire+0x7d40/0x7d40 [ 198.196545][ T5415] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 198.202748][ T5415] ? lock_chain_count+0x20/0x20 [ 198.207686][ T5415] ? lockdep_hardirqs_on+0x94/0x140 [ 198.212924][ T5415] ? __x64_sys_keyctl+0x1c/0xc0 [ 198.217812][ T5415] do_syscall_64+0x4c/0xa0 [ 198.222307][ T5415] ? clear_bhb_loop+0x30/0x80 [ 198.227019][ T5415] ? clear_bhb_loop+0x30/0x80 [ 198.231751][ T5415] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 198.237687][ T5415] RIP: 0033:0x7f9bb848d559 [ 198.242136][ T5415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.261784][ T5415] RSP: 002b:00007f9bb66e5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 198.270244][ T5415] RAX: ffffffffffffffda RBX: 00007f9bb8714fa0 RCX: 00007f9bb848d559 [ 198.278259][ T5415] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 198.286265][ T5415] RBP: 00007f9bb85248b0 R08: 0000000000000000 R09: 0000000000000000 [ 198.294263][ T5415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.302254][ T5415] R13: 00007f9bb8715038 R14: 00007f9bb8714fa0 R15: 00007ffd8ba573f8 [ 198.310263][ T5415] [ 198.373005][ T26] audit: type=1326 audit(1792060930.125:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5419 comm="syz.1.280" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6192d559 code=0x7ffc0000 [ 198.480578][ T26] audit: type=1326 audit(1792060930.125:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5419 comm="syz.1.280" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6192d559 code=0x7ffc0000 [ 198.627335][ T5431] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.297' resets device [ 198.644613][ T26] audit: type=1326 audit(1792060930.155:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5419 comm="syz.1.280" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8c6192d559 code=0x7ffc0000 [ 198.763101][ T26] audit: type=1326 audit(1792060930.155:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5419 comm="syz.1.280" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8c6192d559 code=0x7ffc0000 [ 198.809898][ T5436] FAULT_INJECTION: forcing a failure. [ 198.809898][ T5436] name failslab, interval 1, probability 0, space 0, times 0 [ 198.829324][ T26] audit: type=1800 audit(1792060930.275:84): pid=5424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.296" name="protocol" dev="configfs" ino=85894 res=0 errno=0 [ 198.891012][ T5436] CPU: 0 PID: 5436 Comm: syz.3.300 Not tainted syzkaller #0 [ 198.891045][ T5436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.891059][ T5436] Call Trace: [ 198.891068][ T5436] [ 198.891079][ T5436] dump_stack_lvl+0x188/0x250 [ 198.891113][ T5436] ? show_regs_print_info+0x20/0x20 [ 198.891136][ T5436] ? load_image+0x410/0x410 [ 198.891162][ T5436] ? __might_sleep+0xf0/0xf0 [ 198.891185][ T5436] ? __lock_acquire+0x7d40/0x7d40 [ 198.891211][ T5436] ? kasan_quarantine_put+0xd4/0x210 [ 198.891237][ T5436] should_fail+0x383/0x4b0 [ 198.891267][ T5436] should_failslab+0x5/0x20 [ 198.891287][ T5436] slab_pre_alloc_hook+0x51/0xc0 [ 198.891313][ T5436] __kmalloc+0x6b/0x340 [ 198.891332][ T5436] ? kvm_io_bus_register_dev+0xe3/0x4c0 [ 198.891364][ T5436] kvm_io_bus_register_dev+0xe3/0x4c0 [ 198.891400][ T5436] kvm_pic_init+0x203/0x2f0 [ 198.891427][ T5436] kvm_arch_vm_ioctl+0x1101/0x1530 [ 198.891456][ T5436] ? kvm_arch_pm_notifier+0x2c0/0x2c0 [ 198.891492][ T5436] ? __lock_acquire+0x7d40/0x7d40 [ 198.891531][ T5436] ? unwind_next_frame+0x11ec/0x1cf0 [ 198.891564][ T5436] ? is_bpf_text_address+0x254/0x270 [ 198.891590][ T5436] ? __kernel_text_address+0x9a/0x100 [ 198.891618][ T5436] ? unwind_get_return_address+0x49/0x80 [ 198.891644][ T5436] ? stack_trace_save+0xf0/0xf0 [ 198.891666][ T5436] ? arch_stack_walk+0xf2/0x140 [ 198.891699][ T5436] ? kfree+0xef/0x2a0 [ 198.891721][ T5436] ? stack_trace_save+0xa6/0xf0 [ 198.891742][ T5436] ? stack_trace_snprint+0xe0/0xe0 [ 198.891762][ T5436] ? slab_free_freelist_hook+0xec/0x170 [ 198.891786][ T5436] ? security_file_ioctl+0x6c/0xa0 [ 198.891809][ T5436] ? __se_sys_ioctl+0x48/0x170 [ 198.891828][ T5436] ? do_syscall_64+0x4c/0xa0 [ 198.891850][ T5436] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 198.891879][ T5436] ? kfree+0xef/0x2a0 [ 198.891901][ T5436] ? kasan_set_track+0x62/0x70 [ 198.891923][ T5436] ? kasan_set_track+0x4b/0x70 [ 198.891944][ T5436] ? kasan_set_free_info+0x1f/0x40 [ 198.891967][ T5436] ? ____kasan_slab_free+0xd5/0x110 [ 198.891990][ T5436] ? slab_free_freelist_hook+0xec/0x170 [ 198.892012][ T5436] ? kfree+0xef/0x2a0 [ 198.892029][ T5436] ? tomoyo_path_number_perm+0x55c/0x6b0 [ 198.892052][ T5436] ? security_file_ioctl+0x6c/0xa0 [ 198.892074][ T5436] ? __se_sys_ioctl+0x48/0x170 [ 198.892093][ T5436] ? do_syscall_64+0x4c/0xa0 [ 198.892114][ T5436] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 198.892171][ T5436] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 198.892201][ T5436] ? lock_chain_count+0x20/0x20 [ 198.892227][ T5436] ? do_vfs_ioctl+0x1d5e/0x1f40 [ 198.892251][ T5436] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 198.892277][ T5436] ? rcu_lock_release+0x5/0x20 [ 198.892305][ T5436] kvm_vm_ioctl+0x78d/0xb00 [ 198.892333][ T5436] ? kvm_device_release+0x1e0/0x1e0 [ 198.892356][ T5436] ? kfree+0xef/0x2a0 [ 198.892384][ T5436] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 198.892411][ T5436] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 198.892516][ T5436] ? bpf_lsm_file_ioctl+0x5/0x10 [ 198.892538][ T5436] ? security_file_ioctl+0x7c/0xa0 [ 198.892561][ T5436] ? kvm_device_release+0x1e0/0x1e0 [ 198.892586][ T5436] __se_sys_ioctl+0xfa/0x170 [ 198.892610][ T5436] do_syscall_64+0x4c/0xa0 [ 198.892632][ T5436] ? clear_bhb_loop+0x30/0x80 [ 198.892654][ T5436] ? clear_bhb_loop+0x30/0x80 [ 198.892680][ T5436] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 198.892704][ T5436] RIP: 0033:0x7feb9d36e559 [ 198.892725][ T5436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.892744][ T5436] RSP: 002b:00007feb9b5c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 198.892769][ T5436] RAX: ffffffffffffffda RBX: 00007feb9d5f5fa0 RCX: 00007feb9d36e559 [ 198.892786][ T5436] RDX: 0000000000000000 RSI: 000000000000ae60 RDI: 0000000000000004 [ 198.892800][ T5436] RBP: 00007feb9d4058b0 R08: 0000000000000000 R09: 0000000000000000 [ 198.892814][ T5436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.892828][ T5436] R13: 00007feb9d5f6038 R14: 00007feb9d5f5fa0 R15: 00007ffe998f78d8 [ 198.892860][ T5436] [ 198.939597][ T26] audit: type=1800 audit(1792060930.275:85): pid=5424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.296" name="report_length" dev="configfs" ino=85895 res=0 errno=0 [ 199.637049][ T5453] loop1: detected capacity change from 0 to 1764 [ 199.674369][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.680759][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.313100][ T5464] loop3: detected capacity change from 0 to 512 [ 200.415041][ T5464] FAT-fs (loop3): Unrecognized mount option "˙0xffffffffffffffff˙˙˙˙˙˙˙˙" or missing value [ 201.040031][ T5468] loop1: detected capacity change from 0 to 2048 [ 201.100618][ T26] audit: type=1800 audit(1792060932.855:86): pid=5472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.310" name="protocol" dev="configfs" ino=86535 res=0 errno=0 [ 201.140928][ T5468] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 201.212283][ T26] audit: type=1800 audit(1792060932.885:87): pid=5472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.310" name="report_length" dev="configfs" ino=86537 res=0 errno=0 [ 201.263809][ T5468] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.402900][ T26] audit: type=1326 audit(1792060933.155:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5476 comm="syz.0.311" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bb848d559 code=0x0 [ 201.493103][ T5477] rxe_eth0 speed is unknown, defaulting to 1000 [ 201.546125][ T5483] FAULT_INJECTION: forcing a failure. [ 201.546125][ T5483] name failslab, interval 1, probability 0, space 0, times 0 [ 201.718015][ T5483] CPU: 0 PID: 5483 Comm: syz.5.313 Not tainted syzkaller #0 [ 201.725386][ T5483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.735479][ T5483] Call Trace: [ 201.738844][ T5483] [ 201.741830][ T5483] dump_stack_lvl+0x188/0x250 [ 201.746551][ T5483] ? show_regs_print_info+0x20/0x20 [ 201.751813][ T5483] ? load_image+0x410/0x410 [ 201.756362][ T5483] ? __might_sleep+0xf0/0xf0 [ 201.760989][ T5483] ? __lock_acquire+0x7d40/0x7d40 [ 201.766091][ T5483] ? kasan_quarantine_put+0xd4/0x210 [ 201.771428][ T5483] should_fail+0x383/0x4b0 [ 201.775888][ T5483] should_failslab+0x5/0x20 [ 201.780422][ T5483] slab_pre_alloc_hook+0x51/0xc0 [ 201.785398][ T5483] __kmalloc+0x6b/0x340 [ 201.789588][ T5483] ? kvm_io_bus_register_dev+0xe3/0x4c0 [ 201.795182][ T5483] kvm_io_bus_register_dev+0xe3/0x4c0 [ 201.800605][ T5483] kvm_pic_init+0x1d8/0x2f0 [ 201.805151][ T5483] kvm_arch_vm_ioctl+0x1101/0x1530 [ 201.810315][ T5483] ? kvm_arch_pm_notifier+0x2c0/0x2c0 [ 201.815738][ T5483] ? __lock_acquire+0x7d40/0x7d40 [ 201.820805][ T5483] ? unwind_next_frame+0x11ec/0x1cf0 [ 201.826129][ T5483] ? is_bpf_text_address+0x254/0x270 [ 201.831450][ T5483] ? __kernel_text_address+0x9a/0x100 [ 201.836865][ T5483] ? unwind_get_return_address+0x49/0x80 [ 201.842541][ T5483] ? stack_trace_save+0xf0/0xf0 [ 201.847426][ T5483] ? arch_stack_walk+0xf2/0x140 [ 201.852333][ T5483] ? kfree+0xef/0x2a0 [ 201.856346][ T5483] ? stack_trace_save+0xa6/0xf0 [ 201.861226][ T5483] ? stack_trace_snprint+0xe0/0xe0 [ 201.866375][ T5483] ? slab_free_freelist_hook+0xec/0x170 [ 201.872002][ T5483] ? security_file_ioctl+0x6c/0xa0 [ 201.877151][ T5483] ? __se_sys_ioctl+0x48/0x170 [ 201.881949][ T5483] ? do_syscall_64+0x4c/0xa0 [ 201.886573][ T5483] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 201.892681][ T5483] ? kfree+0xef/0x2a0 [ 201.896704][ T5483] ? kasan_set_track+0x62/0x70 [ 201.901501][ T5483] ? kasan_set_track+0x4b/0x70 [ 201.906300][ T5483] ? kasan_set_free_info+0x1f/0x40 [ 201.911467][ T5483] ? ____kasan_slab_free+0xd5/0x110 [ 201.916700][ T5483] ? slab_free_freelist_hook+0xec/0x170 [ 201.922279][ T5483] ? kfree+0xef/0x2a0 [ 201.926308][ T5483] ? tomoyo_path_number_perm+0x55c/0x6b0 [ 201.931976][ T5483] ? security_file_ioctl+0x6c/0xa0 [ 201.937115][ T5483] ? __se_sys_ioctl+0x48/0x170 [ 201.941914][ T5483] ? do_syscall_64+0x4c/0xa0 [ 201.946534][ T5483] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 201.952660][ T5483] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 201.958682][ T5483] ? lock_chain_count+0x20/0x20 [ 201.963571][ T5483] ? do_vfs_ioctl+0x1d5e/0x1f40 [ 201.968456][ T5483] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 201.974129][ T5483] ? rcu_lock_release+0x5/0x20 [ 201.978939][ T5483] kvm_vm_ioctl+0x78d/0xb00 [ 201.983481][ T5483] ? kvm_device_release+0x1e0/0x1e0 [ 201.988715][ T5483] ? kfree+0xef/0x2a0 [ 201.992737][ T5483] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 201.998511][ T5483] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 202.004069][ T5483] ? bpf_lsm_file_ioctl+0x5/0x10 [ 202.009053][ T5483] ? security_file_ioctl+0x7c/0xa0 [ 202.014213][ T5483] ? kvm_device_release+0x1e0/0x1e0 [ 202.019484][ T5483] __se_sys_ioctl+0xfa/0x170 [ 202.024141][ T5483] do_syscall_64+0x4c/0xa0 [ 202.028594][ T5483] ? clear_bhb_loop+0x30/0x80 [ 202.033310][ T5483] ? clear_bhb_loop+0x30/0x80 [ 202.038038][ T5483] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.043979][ T5483] RIP: 0033:0x7f7dfad64559 [ 202.048434][ T5483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.068113][ T5483] RSP: 002b:00007f7df8fbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.076584][ T5483] RAX: ffffffffffffffda RBX: 00007f7dfafebfa0 RCX: 00007f7dfad64559 [ 202.084624][ T5483] RDX: 0000000000000000 RSI: 000000000000ae60 RDI: 0000000000000004 [ 202.092643][ T5483] RBP: 00007f7dfadfb8b0 R08: 0000000000000000 R09: 0000000000000000 [ 202.100651][ T5483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.108663][ T5483] R13: 00007f7dfafec038 R14: 00007f7dfafebfa0 R15: 00007ffd2659f4b8 [ 202.116691][ T5483] [ 202.299164][ T5496] loop3: detected capacity change from 0 to 512 [ 202.622299][ T5468] UDF-fs: warning (device loop1): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 86016 lbcount: 90112 extent 129+54272 [ 203.095387][ T5496] EXT4-fs (loop3): 1 truncate cleaned up [ 203.101148][ T5496] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 203.128343][ T26] audit: type=1800 audit(1792060934.885:89): pid=5495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.314" name="file1" dev="loop3" ino=13 res=0 errno=0 [ 203.181967][ T5496] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.314: bg 0: block 465: padding at end of block bitmap is not set [ 203.213104][ T5496] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 203.225763][ T5496] EXT4-fs (loop3): This should not happen!! Data will be lost [ 203.225763][ T5496] [ 203.235649][ T5496] EXT4-fs (loop3): Total free blocks count 0 [ 203.241741][ T5496] EXT4-fs (loop3): Free/Dirty block details [ 203.247768][ T5496] EXT4-fs (loop3): free_blocks=0 [ 203.252821][ T5496] EXT4-fs (loop3): dirty_blocks=2 [ 203.257996][ T5496] EXT4-fs (loop3): Block reservation details [ 203.264104][ T5496] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 203.736803][ T4268] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 203.754587][ T4273] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 203.772584][ T4268] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 203.994708][ T4273] usb 2-1: Using ep0 maxpacket: 8 [ 204.146704][ T26] audit: type=1800 audit(1792060935.905:90): pid=5522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.321" name="protocol" dev="configfs" ino=87105 res=0 errno=0 [ 204.167325][ T4273] usb 2-1: unable to get BOS descriptor or descriptor too short [ 204.244816][ T26] audit: type=1800 audit(1792060935.945:91): pid=5522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.321" name="report_length" dev="configfs" ino=87106 res=0 errno=0 [ 204.265766][ T4273] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.291644][ T4273] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 204.334505][ T4273] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 204.504730][ T4273] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 204.532539][ T4273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.581949][ T5538] loop5: detected capacity change from 0 to 256 [ 204.588383][ T4273] usb 2-1: Product: syz [ 204.592598][ T4273] usb 2-1: Manufacturer: syz [ 204.612290][ T4273] usb 2-1: SerialNumber: syz [ 204.676763][ T5538] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 204.714638][ T4271] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 204.725078][ T5538] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 204.792742][ T5538] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 205.055524][ T5542] FAULT_INJECTION: forcing a failure. [ 205.055524][ T5542] name failslab, interval 1, probability 0, space 0, times 0 [ 205.123407][ T4273] usb 2-1: USB disconnect, device number 4 [ 205.175426][ T4271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 205.202796][ T5542] CPU: 0 PID: 5542 Comm: syz.3.327 Not tainted syzkaller #0 [ 205.210155][ T5542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.220254][ T5542] Call Trace: [ 205.223651][ T5542] [ 205.226615][ T5542] dump_stack_lvl+0x188/0x250 [ 205.231351][ T5542] ? show_regs_print_info+0x20/0x20 [ 205.236592][ T5542] ? load_image+0x410/0x410 [ 205.241148][ T5542] ? __might_sleep+0xf0/0xf0 [ 205.245775][ T5542] ? __lock_acquire+0x7d40/0x7d40 [ 205.250848][ T5542] ? kasan_quarantine_put+0xd4/0x210 [ 205.256248][ T5542] should_fail+0x383/0x4b0 [ 205.260711][ T5542] should_failslab+0x5/0x20 [ 205.265245][ T5542] slab_pre_alloc_hook+0x51/0xc0 [ 205.270248][ T5542] __kmalloc+0x6b/0x340 [ 205.274455][ T5542] ? kvm_io_bus_register_dev+0xe3/0x4c0 [ 205.280043][ T5542] kvm_io_bus_register_dev+0xe3/0x4c0 [ 205.285460][ T5542] kvm_pic_init+0x1d8/0x2f0 [ 205.290033][ T5542] kvm_arch_vm_ioctl+0x1101/0x1530 [ 205.295183][ T5542] ? kvm_arch_pm_notifier+0x2c0/0x2c0 [ 205.300629][ T5542] ? __lock_acquire+0x7d40/0x7d40 [ 205.305697][ T5542] ? unwind_next_frame+0x11ec/0x1cf0 [ 205.311035][ T5542] ? is_bpf_text_address+0x254/0x270 [ 205.316361][ T5542] ? __kernel_text_address+0x9a/0x100 [ 205.321776][ T5542] ? unwind_get_return_address+0x49/0x80 [ 205.327436][ T5542] ? stack_trace_save+0xf0/0xf0 [ 205.332315][ T5542] ? arch_stack_walk+0xf2/0x140 [ 205.337215][ T5542] ? kfree+0xef/0x2a0 [ 205.341234][ T5542] ? stack_trace_save+0xa6/0xf0 [ 205.346152][ T5542] ? stack_trace_snprint+0xe0/0xe0 [ 205.351298][ T5542] ? slab_free_freelist_hook+0xec/0x170 [ 205.356890][ T5542] ? security_file_ioctl+0x6c/0xa0 [ 205.362042][ T5542] ? __se_sys_ioctl+0x48/0x170 [ 205.366846][ T5542] ? do_syscall_64+0x4c/0xa0 [ 205.371498][ T5542] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 205.377616][ T5542] ? kfree+0xef/0x2a0 [ 205.381642][ T5542] ? kasan_set_track+0x62/0x70 [ 205.386444][ T5542] ? kasan_set_track+0x4b/0x70 [ 205.391245][ T5542] ? kasan_set_free_info+0x1f/0x40 [ 205.396424][ T5542] ? ____kasan_slab_free+0xd5/0x110 [ 205.401677][ T5542] ? slab_free_freelist_hook+0xec/0x170 [ 205.407258][ T5542] ? kfree+0xef/0x2a0 [ 205.411303][ T5542] ? tomoyo_path_number_perm+0x55c/0x6b0 [ 205.416975][ T5542] ? security_file_ioctl+0x6c/0xa0 [ 205.422123][ T5542] ? __se_sys_ioctl+0x48/0x170 [ 205.426930][ T5542] ? do_syscall_64+0x4c/0xa0 [ 205.431566][ T5542] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 205.437699][ T5542] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 205.443729][ T5542] ? lock_chain_count+0x20/0x20 [ 205.448621][ T5542] ? do_vfs_ioctl+0x1d5e/0x1f40 [ 205.453521][ T5542] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 205.459210][ T5542] ? rcu_lock_release+0x5/0x20 [ 205.464051][ T5542] kvm_vm_ioctl+0x78d/0xb00 [ 205.468610][ T5542] ? kvm_device_release+0x1e0/0x1e0 [ 205.473852][ T5542] ? kfree+0xef/0x2a0 [ 205.477868][ T5542] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 205.483557][ T5542] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 205.489130][ T5542] ? bpf_lsm_file_ioctl+0x5/0x10 [ 205.494110][ T5542] ? security_file_ioctl+0x7c/0xa0 [ 205.499257][ T5542] ? kvm_device_release+0x1e0/0x1e0 [ 205.504507][ T5542] __se_sys_ioctl+0xfa/0x170 [ 205.509139][ T5542] do_syscall_64+0x4c/0xa0 [ 205.513600][ T5542] ? clear_bhb_loop+0x30/0x80 [ 205.518308][ T5542] ? clear_bhb_loop+0x30/0x80 [ 205.523117][ T5542] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 205.529087][ T5542] RIP: 0033:0x7feb9d36e559 [ 205.533558][ T5542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.553209][ T5542] RSP: 002b:00007feb9b5c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.561724][ T5542] RAX: ffffffffffffffda RBX: 00007feb9d5f5fa0 RCX: 00007feb9d36e559 [ 205.569743][ T5542] RDX: 0000000000000000 RSI: 000000000000ae60 RDI: 0000000000000004 [ 205.577798][ T5542] RBP: 00007feb9d4058b0 R08: 0000000000000000 R09: 0000000000000000 [ 205.585811][ T5542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.593825][ T5542] R13: 00007feb9d5f6038 R14: 00007feb9d5f5fa0 R15: 00007ffe998f78d8 [ 205.601866][ T5542] [ 205.624621][ T4271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.643814][ T4271] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 205.654239][ T4271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.676173][ T4271] usb 1-1: config 0 descriptor?? [ 205.908488][ T5559] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 206.173811][ T4271] hid-generic 0003:0C70:F0B6.0005: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.0-1/input0 [ 206.386801][ T26] audit: type=1800 audit(1792060938.145:92): pid=5572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.334" name="protocol" dev="configfs" ino=87224 res=0 errno=0 [ 206.423409][ T5575] input: syz1 as /devices/virtual/input/input11 [ 206.465082][ T26] audit: type=1800 audit(1792060938.195:93): pid=5572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.334" name="report_length" dev="configfs" ino=87225 res=0 errno=0 [ 206.469405][ T13] usb 1-1: USB disconnect, device number 4 [ 206.668678][ T5580] loop5: detected capacity change from 0 to 1024 [ 206.884064][ T5580] hfsplus: xattr searching failed [ 206.943635][ T5582] hfsplus: xattr searching failed [ 207.224884][ T5617] loop3: detected capacity change from 0 to 128 [ 207.228786][ T5614] FAULT_INJECTION: forcing a failure. [ 207.228786][ T5614] name failslab, interval 1, probability 0, space 0, times 0 [ 207.265156][ T5614] CPU: 1 PID: 5614 Comm: syz.0.347 Not tainted syzkaller #0 [ 207.272540][ T5614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 207.282651][ T5614] Call Trace: [ 207.286732][ T5614] [ 207.286748][ T5614] dump_stack_lvl+0x188/0x250 [ 207.286783][ T5614] ? show_regs_print_info+0x20/0x20 [ 207.286808][ T5614] ? load_image+0x410/0x410 [ 207.286835][ T5614] ? __might_sleep+0xf0/0xf0 [ 207.286861][ T5614] ? __lock_acquire+0x7d40/0x7d40 [ 207.286889][ T5614] ? kasan_quarantine_put+0xd4/0x210 [ 207.286916][ T5614] should_fail+0x383/0x4b0 [ 207.286951][ T5614] should_failslab+0x5/0x20 [ 207.286974][ T5614] slab_pre_alloc_hook+0x51/0xc0 [ 207.287001][ T5614] __kmalloc+0x6b/0x340 [ 207.287022][ T5614] ? kvm_io_bus_register_dev+0xe3/0x4c0 [ 207.287058][ T5614] kvm_io_bus_register_dev+0xe3/0x4c0 [ 207.287098][ T5614] kvm_pic_init+0x203/0x2f0 [ 207.287127][ T5614] kvm_arch_vm_ioctl+0x1101/0x1530 [ 207.287159][ T5614] ? kvm_arch_pm_notifier+0x2c0/0x2c0 [ 207.287197][ T5614] ? __lock_acquire+0x7d40/0x7d40 [ 207.287231][ T5614] ? unwind_next_frame+0x11ec/0x1cf0 [ 207.287267][ T5614] ? is_bpf_text_address+0x254/0x270 [ 207.287295][ T5614] ? __kernel_text_address+0x9a/0x100 [ 207.287326][ T5614] ? unwind_get_return_address+0x49/0x80 [ 207.287352][ T5614] ? stack_trace_save+0xf0/0xf0 [ 207.287375][ T5614] ? arch_stack_walk+0xf2/0x140 [ 207.287412][ T5614] ? kfree+0xef/0x2a0 [ 207.287445][ T5614] ? stack_trace_save+0xa6/0xf0 [ 207.287469][ T5614] ? stack_trace_snprint+0xe0/0xe0 [ 207.287492][ T5614] ? slab_free_freelist_hook+0xec/0x170 [ 207.287519][ T5614] ? security_file_ioctl+0x6c/0xa0 [ 207.287543][ T5614] ? __se_sys_ioctl+0x48/0x170 [ 207.287564][ T5614] ? do_syscall_64+0x4c/0xa0 [ 207.287587][ T5614] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 207.287619][ T5614] ? kfree+0xef/0x2a0 [ 207.287642][ T5614] ? kasan_set_track+0x62/0x70 [ 207.287664][ T5614] ? kasan_set_track+0x4b/0x70 [ 207.287686][ T5614] ? kasan_set_free_info+0x1f/0x40 [ 207.287712][ T5614] ? ____kasan_slab_free+0xd5/0x110 [ 207.287733][ T5614] ? slab_free_freelist_hook+0xec/0x170 [ 207.287755][ T5614] ? kfree+0xef/0x2a0 [ 207.287775][ T5614] ? tomoyo_path_number_perm+0x55c/0x6b0 [ 207.287799][ T5614] ? security_file_ioctl+0x6c/0xa0 [ 207.287823][ T5614] ? __se_sys_ioctl+0x48/0x170 [ 207.287845][ T5614] ? do_syscall_64+0x4c/0xa0 [ 207.287868][ T5614] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 207.287922][ T5614] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 207.287956][ T5614] ? lock_chain_count+0x20/0x20 [ 207.287985][ T5614] ? do_vfs_ioctl+0x1d5e/0x1f40 [ 207.288014][ T5614] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 207.288043][ T5614] ? rcu_lock_release+0x5/0x20 [ 207.288075][ T5614] kvm_vm_ioctl+0x78d/0xb00 [ 207.288107][ T5614] ? kvm_device_release+0x1e0/0x1e0 [ 207.288134][ T5614] ? kfree+0xef/0x2a0 [ 207.288164][ T5614] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 207.288194][ T5614] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 207.288284][ T5614] ? bpf_lsm_file_ioctl+0x5/0x10 [ 207.288307][ T5614] ? security_file_ioctl+0x7c/0xa0 [ 207.288333][ T5614] ? kvm_device_release+0x1e0/0x1e0 [ 207.288362][ T5614] __se_sys_ioctl+0xfa/0x170 [ 207.288388][ T5614] do_syscall_64+0x4c/0xa0 [ 207.288413][ T5614] ? clear_bhb_loop+0x30/0x80 [ 207.288450][ T5614] ? clear_bhb_loop+0x30/0x80 [ 207.288480][ T5614] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 207.288508][ T5614] RIP: 0033:0x7f9bb848d559 [ 207.288532][ T5614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.288553][ T5614] RSP: 002b:00007f9bb66e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.288583][ T5614] RAX: ffffffffffffffda RBX: 00007f9bb8714fa0 RCX: 00007f9bb848d559 [ 207.288602][ T5614] RDX: 0000000000000000 RSI: 000000000000ae60 RDI: 0000000000000004 [ 207.288619][ T5614] RBP: 00007f9bb85248b0 R08: 0000000000000000 R09: 0000000000000000 [ 207.288635][ T5614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.288651][ T5614] R13: 00007f9bb8715038 R14: 00007f9bb8714fa0 R15: 00007ffd8ba573f8 [ 207.288686][ T5614] [ 207.394991][ T5617] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 207.397209][ T5617] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.398521][ T5623] FAULT_INJECTION: forcing a failure. [ 207.398521][ T5623] name failslab, interval 1, probability 0, space 0, times 0 [ 207.398563][ T5623] CPU: 1 PID: 5623 Comm: syz.1.349 Not tainted syzkaller #0 [ 207.398586][ T5623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 207.398599][ T5623] Call Trace: [ 207.398606][ T5623] [ 207.398616][ T5623] dump_stack_lvl+0x188/0x250 [ 207.398646][ T5623] ? show_regs_print_info+0x20/0x20 [ 207.398670][ T5623] ? load_image+0x410/0x410 [ 207.398695][ T5623] ? __might_sleep+0xf0/0xf0 [ 207.398719][ T5623] ? __lock_acquire+0x7d40/0x7d40 [ 207.398751][ T5623] should_fail+0x383/0x4b0 [ 207.398781][ T5623] should_failslab+0x5/0x20 [ 207.398815][ T5623] slab_pre_alloc_hook+0x51/0xc0 [ 207.398838][ T5623] ? getname_flags+0xb7/0x4f0 [ 207.398862][ T5623] kmem_cache_alloc+0x3d/0x280 [ 207.398888][ T5623] getname_flags+0xb7/0x4f0 [ 207.398915][ T5623] __x64_sys_mkdirat+0x78/0x90 [ 207.398941][ T5623] do_syscall_64+0x4c/0xa0 [ 207.398962][ T5623] ? clear_bhb_loop+0x30/0x80 [ 207.398986][ T5623] ? clear_bhb_loop+0x30/0x80 [ 207.399012][ T5623] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 207.399037][ T5623] RIP: 0033:0x7f8c6192d559 [ 207.399057][ T5623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.399077][ T5623] RSP: 002b:00007f8c5fb85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 207.399102][ T5623] RAX: ffffffffffffffda RBX: 00007f8c61bb4fa0 RCX: 00007f8c6192d559 [ 207.399117][ T5623] RDX: 00000000000001ff RSI: 0000200000000940 RDI: ffffffffffffff9c [ 207.399133][ T5623] RBP: 00007f8c619c48b0 R08: 0000000000000000 R09: 0000000000000000 [ 207.399148][ T5623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.399162][ T5623] R13: 00007f8c61bb5038 R14: 00007f8c61bb4fa0 R15: 00007ffea6144598 [ 207.399192][ T5623] [ 207.548050][ T26] audit: type=1800 audit(1792060939.305:94): pid=5625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.350" name="protocol" dev="configfs" ino=87470 res=0 errno=0 [ 207.564659][ T26] audit: type=1800 audit(1792060939.315:95): pid=5625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.350" name="report_length" dev="configfs" ino=87471 res=0 errno=0 [ 207.639375][ T5627] loop1: detected capacity change from 0 to 2048 [ 207.687995][ T5629] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input12 [ 207.696610][ T5627] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 207.696646][ T5627] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 207.710761][ T5627] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 207.724381][ T5627] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.039545][ T5631] md/raid1:md0: active with 1 out of 2 mirrors [ 208.044271][ T5631] md0: detected capacity change from 0 to 2048 [ 208.072407][ T5640] md: recovery of RAID array md0 [ 208.132324][ T5640] md: md0: recovery done. [ 208.200446][ T5641] loop1: detected capacity change from 0 to 4096 [ 208.629245][ T5620] loop0: detected capacity change from 0 to 32768 [ 208.742338][ T5641] EXT4-fs (loop1): Test dummy encryption mode enabled [ 208.786063][ T5641] EXT4-fs (loop1): Ignoring removed orlov option [ 208.801068][ T5620] (syz.0.347,5620,0):ocfs2_verify_heartbeat:836 ERROR: Heartbeat has to be started to mount a read-write clustered device. [ 208.885483][ T5641] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x00000000000000b6,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 208.977512][ T5620] (syz.0.347,5620,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 209.018637][ T5657] loop3: detected capacity change from 0 to 512 [ 210.008228][ T5657] EXT4-fs error (device loop3): __ext4_iget:4919: inode #11: block 1: comm syz.3.359: invalid block [ 210.044965][ T5657] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.359: couldn't read orphan inode 11 (err -117) [ 210.054723][ T4384] Bluetooth: hci5: command 0x0405 tx timeout [ 210.137974][ T5657] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 210.326578][ T5641] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 210.366062][ T5641] [ 210.368461][ T5641] ====================================================== [ 210.375505][ T5641] WARNING: possible circular locking dependency detected [ 210.382556][ T5641] syzkaller #0 Not tainted [ 210.386984][ T5641] ------------------------------------------------------ [ 210.394016][ T5641] syz.1.355/5641 is trying to acquire lock: [ 210.399918][ T5641] ffff88806168c428 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 210.408813][ T5641] [ 210.408813][ T5641] but task is already holding lock: [ 210.416189][ T5641] ffff888059ab3450 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8c4/0x1a50 [ 210.425735][ T5641] [ 210.425735][ T5641] which lock already depends on the new lock. [ 210.425735][ T5641] [ 210.436182][ T5641] [ 210.436182][ T5641] the existing dependency chain (in reverse order) is: [ 210.445208][ T5641] [ 210.445208][ T5641] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 210.453072][ T5641] down_write+0x38/0x60 [ 210.457769][ T5641] ext4_map_blocks+0x8c4/0x1a50 [ 210.463154][ T5641] ext4_getblk+0x176/0x670 [ 210.468104][ T5641] ext4_bread+0x26/0x180 [ 210.472887][ T5641] ext4_quota_write+0x237/0x580 [ 210.478281][ T5641] do_insert_tree+0x1193/0x19c0 [ 210.483691][ T5641] do_insert_tree+0x5c4/0x19c0 [ 210.488987][ T5641] do_insert_tree+0x5c4/0x19c0 [ 210.494284][ T5641] do_insert_tree+0x5c4/0x19c0 [ 210.499609][ T5641] qtree_write_dquot+0x354/0x4a0 [ 210.505084][ T5641] v2_write_dquot+0x108/0x190 [ 210.510297][ T5641] dquot_acquire+0x2d5/0x520 [ 210.515433][ T5641] ext4_acquire_dquot+0x2e3/0x4a0 [ 210.521100][ T5641] dqget+0x713/0xbb0 [ 210.525545][ T5641] __dquot_initialize+0x3a9/0xd00 [ 210.531116][ T5641] ext4_process_orphan+0x4c/0x2e0 [ 210.536744][ T5641] ext4_orphan_cleanup+0xc96/0x14f0 [ 210.542480][ T5641] ext4_fill_super+0x8c65/0x93f0 [ 210.547954][ T5641] mount_bdev+0x28a/0x3c0 [ 210.553224][ T5641] legacy_get_tree+0xe6/0x180 [ 210.558442][ T5641] vfs_get_tree+0x88/0x270 [ 210.563483][ T5641] do_new_mount+0x247/0xa40 [ 210.568524][ T5641] __se_sys_mount+0x2e3/0x3d0 [ 210.573736][ T5641] do_syscall_64+0x4c/0xa0 [ 210.578686][ T5641] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 210.585123][ T5641] [ 210.585123][ T5641] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 210.593218][ T5641] down_read+0x44/0x2e0 [ 210.597908][ T5641] v2_read_dquot+0x4a/0x110 [ 210.602946][ T5641] dquot_acquire+0x152/0x520 [ 210.608074][ T5641] ext4_acquire_dquot+0x2e3/0x4a0 [ 210.613635][ T5641] dqget+0x713/0xbb0 [ 210.618096][ T5641] __dquot_initialize+0x3a9/0xd00 [ 210.623663][ T5641] ext4_process_orphan+0x4c/0x2e0 [ 210.629224][ T5641] ext4_orphan_cleanup+0xc96/0x14f0 [ 210.634959][ T5641] ext4_fill_super+0x8c65/0x93f0 [ 210.640526][ T5641] mount_bdev+0x28a/0x3c0 [ 210.645397][ T5641] legacy_get_tree+0xe6/0x180 [ 210.650631][ T5641] vfs_get_tree+0x88/0x270 [ 210.656011][ T5641] do_new_mount+0x247/0xa40 [ 210.661058][ T5641] __se_sys_mount+0x2e3/0x3d0 [ 210.666275][ T5641] do_syscall_64+0x4c/0xa0 [ 210.671230][ T5641] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 210.677671][ T5641] [ 210.677671][ T5641] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 210.685336][ T5641] __lock_acquire+0x38f7/0x7d40 [ 210.690726][ T5641] lock_acquire+0x19f/0x400 [ 210.695769][ T5641] __mutex_lock_common+0x1e5/0x2400 [ 210.701497][ T5641] mutex_lock_nested+0x17/0x20 [ 210.706796][ T5641] dquot_commit+0x5a/0x410 [ 210.711765][ T5641] ext4_write_dquot+0x1f0/0x360 [ 210.717258][ T5641] mark_all_dquot_dirty+0xf9/0x400 [ 210.722921][ T5641] __dquot_alloc_space+0x5cb/0xe10 [ 210.728570][ T5641] ext4_mb_new_blocks+0xf80/0x47c0 [ 210.734220][ T5641] ext4_ext_map_blocks+0x17d1/0x63d0 [ 210.740079][ T5641] ext4_map_blocks+0x97f/0x1a50 [ 210.745465][ T5641] ext4_getblk+0x176/0x670 [ 210.750420][ T5641] ext4_bread+0x26/0x180 [ 210.755200][ T5641] ext4_append+0x2bb/0x560 [ 210.760147][ T5641] ext4_init_new_dir+0x2a7/0x910 [ 210.765618][ T5641] ext4_mkdir+0x4c3/0xc90 [ 210.770486][ T5641] vfs_mkdir+0x386/0x570 [ 210.775268][ T5641] do_mkdirat+0x1dd/0x5c0 [ 210.780246][ T5641] __x64_sys_mkdirat+0x85/0x90 [ 210.785550][ T5641] do_syscall_64+0x4c/0xa0 [ 210.790509][ T5641] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 210.796947][ T5641] [ 210.796947][ T5641] other info that might help us debug this: [ 210.796947][ T5641] [ 210.807180][ T5641] Chain exists of: [ 210.807180][ T5641] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 210.807180][ T5641] [ 210.820847][ T5641] Possible unsafe locking scenario: [ 210.820847][ T5641] [ 210.828307][ T5641] CPU0 CPU1 [ 210.833680][ T5641] ---- ---- [ 210.839053][ T5641] lock(&ei->i_data_sem/2); [ 210.843660][ T5641] lock(&s->s_dquot.dqio_sem); [ 210.851039][ T5641] lock(&ei->i_data_sem/2); [ 210.858252][ T5641] lock(&dquot->dq_lock); [ 210.862682][ T5641] [ 210.862682][ T5641] *** DEADLOCK *** [ 210.862682][ T5641] [ 210.870828][ T5641] 4 locks held by syz.1.355/5641: [ 210.875857][ T5641] #0: ffff888075f26460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 210.885016][ T5641] #1: ffff888059afd3b0 (&type->i_mutex_dir_key#4/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 210.895655][ T5641] #2: ffff888059ab3450 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8c4/0x1a50 [ 210.905623][ T5641] #3: ffffffff8d2416f8 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 210.914694][ T5641] [ 210.914694][ T5641] stack backtrace: [ 210.920587][ T5641] CPU: 1 PID: 5641 Comm: syz.1.355 Not tainted syzkaller #0 [ 210.927905][ T5641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.937971][ T5641] Call Trace: [ 210.941278][ T5641] [ 210.944219][ T5641] dump_stack_lvl+0x188/0x250 [ 210.948912][ T5641] ? load_image+0x410/0x410 [ 210.953433][ T5641] ? show_regs_print_info+0x20/0x20 [ 210.958646][ T5641] ? print_circular_bug+0x12b/0x1a0 [ 210.963854][ T5641] check_noncircular+0x2f8/0x400 [ 210.968804][ T5641] ? print_deadlock_bug+0x5d0/0x5d0 [ 210.974016][ T5641] ? lockdep_lock+0xf1/0x1f0 [ 210.978624][ T5641] ? check_noncircular+0x186/0x400 [ 210.983754][ T5641] ? mark_lock+0x94/0x320 [ 210.988098][ T5641] ? _find_first_zero_bit+0xd1/0xf0 [ 210.993338][ T5641] __lock_acquire+0x38f7/0x7d40 [ 210.998209][ T5641] ? hlock_conflict+0x59/0x1f0 [ 211.002999][ T5641] ? print_deadlock_bug+0x5d0/0x5d0 [ 211.008212][ T5641] ? lockdep_lock+0xf1/0x1f0 [ 211.012826][ T5641] ? verify_lock_unused+0x140/0x140 [ 211.018038][ T5641] ? lockdep_unlock+0x143/0x2e0 [ 211.022912][ T5641] ? mark_lock+0x94/0x320 [ 211.027271][ T5641] ? __lock_acquire+0x13b3/0x7d40 [ 211.032321][ T5641] lock_acquire+0x19f/0x400 [ 211.036848][ T5641] ? dquot_commit+0x5a/0x410 [ 211.041463][ T5641] ? __might_sleep+0xf0/0xf0 [ 211.046071][ T5641] ? read_lock_is_recursive+0x10/0x10 [ 211.051457][ T5641] ? verify_lock_unused+0x140/0x140 [ 211.056674][ T5641] __mutex_lock_common+0x1e5/0x2400 [ 211.061885][ T5641] ? dquot_commit+0x5a/0x410 [ 211.066500][ T5641] ? dquot_commit+0x5a/0x410 [ 211.071106][ T5641] ? __might_sleep+0xf0/0xf0 [ 211.075739][ T5641] ? mutex_lock_io_nested+0x60/0x60 [ 211.080957][ T5641] mutex_lock_nested+0x17/0x20 [ 211.085744][ T5641] dquot_commit+0x5a/0x410 [ 211.090187][ T5641] ext4_write_dquot+0x1f0/0x360 [ 211.095064][ T5641] mark_all_dquot_dirty+0xf9/0x400 [ 211.100193][ T5641] __dquot_alloc_space+0x5cb/0xe10 [ 211.105329][ T5641] ext4_mb_new_blocks+0xf80/0x47c0 [ 211.110467][ T5641] ? memset+0x1e/0x40 [ 211.114465][ T5641] ? ext4_mb_pa_callback+0xd0/0xd0 [ 211.119596][ T5641] ? ext4_inode_to_goal_block+0x313/0x450 [ 211.125332][ T5641] ext4_ext_map_blocks+0x17d1/0x63d0 [ 211.130648][ T5641] ? ext4_ext_release+0x10/0x10 [ 211.135528][ T5641] ? rwsem_write_trylock+0x135/0x1c0 [ 211.140833][ T5641] ? ext4_es_lookup_extent+0x5fd/0x9f0 [ 211.146312][ T5641] ext4_map_blocks+0x97f/0x1a50 [ 211.151186][ T5641] ? ext4_issue_zeroout+0x250/0x250 [ 211.156406][ T5641] ext4_getblk+0x176/0x670 [ 211.160842][ T5641] ? ext4_get_block_unwritten+0x30/0x30 [ 211.166404][ T5641] ? __brelse+0x55/0x90 [ 211.170578][ T5641] ext4_bread+0x26/0x180 [ 211.174839][ T5641] ext4_append+0x2bb/0x560 [ 211.179274][ T5641] ? ext4_init_new_dir+0x910/0x910 [ 211.184524][ T5641] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 211.190268][ T5641] ext4_init_new_dir+0x2a7/0x910 [ 211.195252][ T5641] ext4_mkdir+0x4c3/0xc90 [ 211.199716][ T5641] ? ext4_symlink+0xcd0/0xcd0 [ 211.204417][ T5641] ? inode_permission+0xef/0x480 [ 211.209374][ T5641] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 211.214414][ T5641] ? security_inode_mkdir+0xb3/0x100 [ 211.219720][ T5641] vfs_mkdir+0x386/0x570 [ 211.223985][ T5641] do_mkdirat+0x1dd/0x5c0 [ 211.228360][ T5641] ? vfs_mkdir+0x570/0x570 [ 211.232797][ T5641] __x64_sys_mkdirat+0x85/0x90 [ 211.237601][ T5641] do_syscall_64+0x4c/0xa0 [ 211.242072][ T5641] ? clear_bhb_loop+0x30/0x80 [ 211.246791][ T5641] ? clear_bhb_loop+0x30/0x80 [ 211.251487][ T5641] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 211.257399][ T5641] RIP: 0033:0x7f8c6192c3c7 [ 211.261854][ T5641] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.281480][ T5641] RSP: 002b:00007f8c5fb84e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 211.289909][ T5641] RAX: ffffffffffffffda RBX: 00007f8c5fb84ee0 RCX: 00007f8c6192c3c7 [ 211.297898][ T5641] RDX: 00000000000001ff RSI: 0000200000000000 RDI: 00000000ffffff9c [ 211.305882][ T5641] RBP: 0000000000000000 R08: 0000200000000000 R09: 0000000000000000 [ 211.313865][ T5641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 211.321849][ T5641] R13: 00007f8c5fb84ea0 R14: 0000000000000000 R15: 0000000000000000 [ 211.329841][ T5641] [ 217.014546][ T4273] Bluetooth: hci3: command 0x0406 tx timeout [ 217.024482][ T4272] Bluetooth: hci1: command 0x0406 tx timeout [ 217.030562][ T4272] Bluetooth: hci0: command 0x0406 tx timeout