last executing test programs: 3m18.67715408s ago: executing program 3 (id=4): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2818082, &(0x7f00000005c0)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c73686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d77696e6e742c636f6465706167653d313235312c666d61736b3d303030300000000030303030303030303030303004000000646531215a670233c0116275672c756e080000006174653d302c6e6f7e756d7461696c3d302d757466383d312c73686f72746e616d653d6c6f7765722c7511695f786c6174653d302c756e695f786c6174653d312c757466383d312c00"], 0x7f, 0x2bd, &(0x7f0000000240)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ce35af41090000000000000000298b070000000000004faa2ae2c084a0ea0000000000007700000c0000200000002000000000000400", "036c47c678082000cb59d654cbb41bbcef549ba197fce47ddfdd753abd950100f20000000200000000000000000000000000000000000000000200", "b7326736181c208220fffff2ff00", [0x6]}) creat(&(0x7f0000004440)='./file0\x00', 0x12) 3m17.86113999s ago: executing program 3 (id=12): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000380)='\b', 0x1}], 0x1, 0x0, 0x0, 0x90}}], 0x1, 0x20048800) io_setup(0x7, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xfffd, r1, 0x0}]) 3m16.694662388s ago: executing program 3 (id=27): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x24, r1, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x22040000}, 0x0) 3m16.379428316s ago: executing program 32 (id=27): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x24, r1, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x22040000}, 0x0) 3m6.360348231s ago: executing program 0 (id=82): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x80000000, 0xdb0078e61ebfe5fb, 0xdd2, 0x3, 0xb, 0x0, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000007b40)="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", 0x2000, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x0, {0x87, 0x3, 0x0, {0x3, 0x7ffffffffffffffc, 0x3, 0x2, 0xc, 0x7, 0x2, 0x5, 0x404, 0x4000, 0x4, 0x0, 0xffffffffffffffff, 0x9, 0x408}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 3m5.99455893s ago: executing program 0 (id=83): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000240)=@mangle={'mangle\x00', 0x64, 0x6, 0x5d0, 0xd0, 0x418, 0x348, 0x348, 0x0, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8000, 0x3}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x2e, 0x1}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@local}}}, {{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x120, 0x18da, 'kmp\x00', "825610de5ad9fa1530d931009214a111797e8f1597fabe8a933ad4d823aac0e2beaec8435ecf7e5b5b884a22f56d00bc30ea50c6f9aa105e562b24147e26aebef1cb45766c7d27f3e6148d66f882d947dbdc34c4d24c84da3dfa80fe02f3d655860df9c93c088bca440b81139288125a49689b39a7fa6bd60a8737af8102c00b", 0x9, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xb}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xfffffffc, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r0, 0x20a, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "63694870ad"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x24000041) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="a1ab23bdf000fdffffff320000000800170159"], 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x2000c800) 3m5.649157549s ago: executing program 0 (id=84): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x802) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xfffffffb], [0xffffffff, 0xffffffff, 0x3ff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffdf7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xfdffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x81, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x3388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x8, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000080)=0x4) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000140)={0x1, 0x4, 0x6, 0xe, 0xcde300000000000, 0xfffffffffffffff9, 0x8, 0xb, 0x1, 0x0, 0x80000000, 0x2}) 3m5.285375187s ago: executing program 0 (id=85): syz_mount_image$exfat(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680)={[{@utf8}, {@utf8}, {@keep_last_dots}, {@fmask={'fmask', 0x3d, 0x2}}, {@utf8}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@namecase}, {@time_offset={'time_offset', 0x3d, 0x5}}, {@utf8}, {@utf8}, {@dmask={'dmask', 0x3d, 0x9}}]}, 0xff, 0x1535, &(0x7f0000000740)="$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") socket$key(0xf, 0x3, 0x2) pipe(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) 3m4.742951311s ago: executing program 0 (id=88): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50", 0x10}], 0x1) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x10, 0x4) 3m4.145947845s ago: executing program 0 (id=94): r0 = open(&(0x7f0000000600)='./file0\x00', 0x1e1142, 0xfb) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000540)="225dbca21c2c2b", 0x7}], 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendfile(r2, r0, &(0x7f0000000180)=0x1, 0x6) 3m3.663653257s ago: executing program 33 (id=94): r0 = open(&(0x7f0000000600)='./file0\x00', 0x1e1142, 0xfb) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000540)="225dbca21c2c2b", 0x7}], 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendfile(r2, r0, &(0x7f0000000180)=0x1, 0x6) 2m21.886783559s ago: executing program 2 (id=375): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000009e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4800) 2m21.765138282s ago: executing program 2 (id=376): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x6, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x3, @local}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 2m21.526736248s ago: executing program 2 (id=378): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000002c0)={0xe, "1a03e5090200030091000041392e00", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x80800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000380)={0x4, "fa02790d2a69a2610f020a0000000000001100010000070042000000677c00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000003c0)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000004c0)={"0e337b42cc00d331ff0007000000000000001a00", r3}) 2m21.287210244s ago: executing program 2 (id=380): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000340)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000000)={{@host}, 0x401ffffffffffd, 0x0, 0x0, 0x2}) 2m21.074475139s ago: executing program 2 (id=381): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000000), 0xfd, 0x244, &(0x7f0000000680)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x22042, 0x3db) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) 2m20.098504273s ago: executing program 2 (id=389): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x20, 0x0, &(0x7f00000001c0)=[@request_death, @clear_death], 0x0, 0x1000000, 0x0}) 2m4.495762545s ago: executing program 34 (id=389): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x20, 0x0, &(0x7f00000001c0)=[@request_death, @clear_death], 0x0, 0x1000000, 0x0}) 28.970779842s ago: executing program 5 (id=1266): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14011, 0x0) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x1484a8, &(0x7f0000000340)=ANY=[], 0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}]}) 28.756193677s ago: executing program 5 (id=1268): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/19, 0x13}, 0x68000}], 0x1, 0x10002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 28.490728243s ago: executing program 5 (id=1271): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000800000000000000faffffff8500000008"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x6fa6c04eee5c85fd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r1}, 0xc) 28.400310465s ago: executing program 5 (id=1272): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000340)='./sys\x00', 0x210000, &(0x7f0000000540)={[{@dax_never}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@lazytime}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 27.865605078s ago: executing program 5 (id=1279): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xf0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="ef8a561e07173f1a4d", 0x9}], 0x1}}], 0x4000000000001cc, 0x20040891) 27.088025808s ago: executing program 5 (id=1284): setns(0xc9, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80, r2}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80, r2}) 26.525489151s ago: executing program 35 (id=1284): setns(0xc9, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80, r2}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80, r2}) 9.080959638s ago: executing program 6 (id=1412): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file0\x00', 0x800810, &(0x7f0000000440)={[{@nobarrier}, {@nodatasum}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x304}}, {@nodatacow}, {@skip_balance}, {@datacow}, {@space_cache_v1}, {@nodiscard}, {@clear_cache}, {@enospc_debug}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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") syz_usb_connect(0x0, 0x2d, 0x0, 0x0) open(0x0, 0x14927e, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xc08) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1ad941, 0x176) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 6.761119485s ago: executing program 6 (id=1435): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x1000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f00000026c0)=[{}]) 6.018973413s ago: executing program 4 (id=1445): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0xb, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}}, 0x8004) sendmmsg$inet_sctp(r1, &(0x7f0000001f00)=[{0x0, 0x0, 0x0}], 0x1, 0x24000000) 5.576765014s ago: executing program 4 (id=1446): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file0\x00', 0x800810, &(0x7f0000000440)={[{@nobarrier}, {@nodatasum}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x304}}, {@nodatacow}, {@skip_balance}, {@datacow}, {@space_cache_v1}, {@nodiscard}, {@clear_cache}, {@enospc_debug}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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") syz_usb_connect(0x0, 0x2d, 0x0, 0x0) open(0x0, 0x14927e, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xc08) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1ad941, 0x176) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 5.253732102s ago: executing program 6 (id=1448): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='6', 0x1) r1 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) 4.697393325s ago: executing program 6 (id=1449): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="ac", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="50e9b6", 0x3}], 0x1}}], 0x3, 0x0) shutdown(r0, 0x1) 3.871395815s ago: executing program 7 (id=1451): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) 3.871182835s ago: executing program 6 (id=1453): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003"], 0x0, 0x0, 0x0}, 0x0) 3.639555611s ago: executing program 7 (id=1454): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x9) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000440)=0x40) 3.574068073s ago: executing program 7 (id=1455): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$BLKFLSBUF(r1, 0x1261, 0x0) 3.481596515s ago: executing program 4 (id=1457): r0 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0xfffffe}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1000a8d0}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x6, 0x9, 0xfb, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.997008587s ago: executing program 1 (id=1459): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@remote, 0x2, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0xfffffffffffffffe, 0x6, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x40800000000001, 0x800000000000002}, 0xdfff, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@multicast1, 0x0, 0x3c}, 0x2, @in6=@mcast1, 0x3501, 0x4, 0xef9a5e7037ee9545}]}]}, 0xfc}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x10, @loopback}, 0x1c) 2.728618123s ago: executing program 1 (id=1460): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xcb0a) 2.669978825s ago: executing program 4 (id=1461): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200048b1}, 0x8c0) 2.4546439s ago: executing program 7 (id=1462): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) timer_create(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f0401016420"], 0x7) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_procfs(0x0, 0x0) connect$inet6(r0, 0x0, 0x0) 2.426058991s ago: executing program 1 (id=1463): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) io_setup(0x9, &(0x7f0000000340)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="186a00000900000000200e00000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r0, 0x2000000000000211, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, r1, 0x0}]) 2.342188653s ago: executing program 4 (id=1464): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0xff2e) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0xf705, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9}}}}}]}}]}}, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000680)={0x0, 0x4, 0x0, 0x7fff, 0x5, "00620400064a8db42b21c8e5ff1a00"}) r1 = syz_open_pts(r0, 0xc0000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000006c0)=0x11) 1.787365606s ago: executing program 7 (id=1465): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x40010) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffb, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}, @IFLA_GRE_TOS={0x5, 0x9, 0x7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.787267426s ago: executing program 1 (id=1466): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='6', 0x1) r1 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) 1.199486491s ago: executing program 1 (id=1467): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x16b, 0x8) write$UHID_INPUT(r1, &(0x7f0000000780)={0x8, {"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", 0x1000}}, 0xffffff7e) 1.174784851s ago: executing program 7 (id=1468): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file0\x00', 0x800810, &(0x7f0000000440)={[{@nobarrier}, {@nodatasum}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x304}}, {@nodatacow}, {@skip_balance}, {@datacow}, {@space_cache_v1}, {@nodiscard}, {@clear_cache}, {@enospc_debug}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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") syz_usb_connect(0x0, 0x2d, 0x0, 0x0) open(0x0, 0x14927e, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xc08) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1ad941, 0x176) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 84.251258ms ago: executing program 4 (id=1469): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x42880, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffff8) 82.330368ms ago: executing program 6 (id=1477): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x1, 0x1, 0x0, 0xf, 0xd2, [{0x4, 0x5, 0xcd}], 'M6U'}, @datasec={0xa, 0x0, 0x0, 0xf, 0x1, [], "b5"}]}, {0x0, [0x5f, 0x2e, 0x61]}}, &(0x7f0000000040)=""/3, 0x45, 0x3, 0x1, 0x5}, 0x28) 0s ago: executing program 1 (id=1470): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="ac", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="50e9b6", 0x3}], 0x1}}], 0x3, 0x0) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): 50][ T8043] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.550: Corrupt directory, running e2fsck is recommended [ 180.917224][ T8047] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 180.929085][ T8035] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 180.962152][ T8047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.094248][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.108622][ T5975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.608541][ T23] libceph: connect (1)[c::]:6789 error -101 [ 181.629740][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 181.636398][ T27] libceph: connect (1)[c::]:6789 error -101 [ 181.652743][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 181.821715][ T8060] loop1: detected capacity change from 0 to 32768 [ 181.875515][ T8060] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 181.937058][ T27] libceph: connect (1)[c::]:6789 error -101 [ 181.943155][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 181.958842][ T23] libceph: connect (1)[c::]:6789 error -101 [ 181.964877][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 182.217606][ T5775] ocfs2: Unmounting device (7,1) on (node local) [ 182.385369][ T8063] ceph: No mds server is up or the cluster is laggy [ 182.406435][ T8066] ceph: No mds server is up or the cluster is laggy [ 182.496678][ T23] libceph: connect (1)[c::]:6789 error -101 [ 182.513320][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 182.520359][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 182.527802][ T8081] rxe_eth0 speed is unknown, defaulting to 1000 [ 182.535358][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 182.705407][ T8090] loop6: detected capacity change from 0 to 512 [ 182.883589][ T8090] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.906162][ T8090] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.173248][ T8104] loop5: detected capacity change from 0 to 512 [ 183.257690][ T8104] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.280625][ T7667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.291293][ T8104] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.485050][ T6264] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.126508][ T8112] loop4: detected capacity change from 0 to 32768 [ 184.183373][ T8112] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 184.194306][ T8123] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 184.652314][ T5975] ocfs2: Unmounting device (7,4) on (node local) [ 184.673672][ T8132] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.940949][ T8135] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.179814][ T8144] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 185.259303][ T8135] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.466446][ T8135] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.630668][ T8166] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 5 (only 8 groups) [ 185.694114][ T8135] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.754881][ T8135] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.793726][ T8135] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.877905][ T8135] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.319160][ T8163] loop6: detected capacity change from 0 to 40427 [ 186.356960][ T8163] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 186.369179][ T8163] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 186.390154][ T8163] F2FS-fs (loop6): invalid crc value [ 186.705254][ T8163] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 186.727150][ T8163] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 186.878456][ T8163] syz.6.598: attempt to access beyond end of device [ 186.878456][ T8163] loop6: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 186.905329][ T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 187.098564][ T7667] syz-executor: attempt to access beyond end of device [ 187.098564][ T7667] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 187.118849][ T7667] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 187.131581][ T23] usb 2-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 187.141466][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.195390][ T23] usb 2-1: Product: syz [ 187.199730][ T23] usb 2-1: Manufacturer: syz [ 187.204365][ T23] usb 2-1: SerialNumber: syz [ 187.381972][ T8208] loop4: detected capacity change from 0 to 4096 [ 187.408362][ T8208] EXT4-fs: Ignoring removed bh option [ 187.463969][ T8208] EXT4-fs (loop4): Test dummy encryption mode enabled [ 187.496983][ T8208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.516570][ T23] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 187.556143][ T28] audit: type=1800 audit(1792037023.832:48): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.597" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 187.675812][ T23] usb 2-1: USB disconnect, device number 7 [ 187.781479][ T5975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.933868][ T8213] FAULT_INJECTION: forcing a failure. [ 187.933868][ T8213] name failslab, interval 1, probability 0, space 0, times 0 [ 187.955813][ T8213] CPU: 1 PID: 8213 Comm: syz.4.599 Not tainted syzkaller #0 [ 187.963176][ T8213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.973285][ T8213] Call Trace: [ 187.976635][ T8213] [ 187.979617][ T8213] dump_stack_lvl+0x18c/0x250 [ 187.984357][ T8213] ? show_regs_print_info+0x20/0x20 [ 187.989612][ T8213] ? load_image+0x420/0x420 [ 187.994180][ T8213] ? __might_sleep+0xe0/0xe0 [ 187.998882][ T8213] should_fail_ex+0x394/0x4c0 [ 188.003683][ T8213] should_failslab+0x9/0x20 [ 188.008249][ T8213] slab_pre_alloc_hook+0x59/0x300 [ 188.013333][ T8213] kmem_cache_alloc+0x5a/0x2c0 [ 188.018171][ T8213] ? zswap_store+0x77b/0x1e70 [ 188.022915][ T8213] zswap_store+0x77b/0x1e70 [ 188.027483][ T8213] ? folio_free_swap+0x4c6/0xc30 [ 188.032473][ T8213] ? do_raw_spin_lock+0x11f/0x2b0 [ 188.037561][ T8213] ? drain_slots_cache_cpu+0x3f0/0x3f0 [ 188.043114][ T8213] ? _raw_spin_unlock+0x28/0x40 [ 188.048038][ T8213] ? folio_free_swap+0x4e4/0xc30 [ 188.053069][ T8213] swap_writepage+0x7e/0x190 [ 188.057745][ T8213] shrink_folio_list+0x2e55/0x7e80 [ 188.062960][ T8213] ? reclaim_clean_pages_from_list+0xc00/0xc00 [ 188.069180][ T8213] ? verify_lock_unused+0x140/0x140 [ 188.074452][ T8213] ? mark_lock+0x94/0x320 [ 188.078820][ T8213] ? __lock_acquire+0x1431/0x7eb0 [ 188.083896][ T8213] ? verify_lock_unused+0x140/0x140 [ 188.089134][ T8213] ? verify_lock_unused+0x140/0x140 [ 188.094460][ T8213] ? cgroup_rstat_updated+0xd5/0x360 [ 188.099787][ T8213] ? __lock_acquire+0x1431/0x7eb0 [ 188.104878][ T8213] reclaim_folio_list+0xf6/0x3a0 [ 188.109851][ T8213] ? __mod_memcg_lruvec_state+0x1ac/0x280 [ 188.115633][ T8213] ? reclaim_pages+0x690/0x690 [ 188.120457][ T8213] reclaim_pages+0x574/0x690 [ 188.125090][ T8213] ? madvise_cold_or_pageout_pte_range+0x16b6/0x2030 [ 188.131802][ T8213] ? folio_isolate_lru+0xef0/0xef0 [ 188.136958][ T8213] madvise_cold_or_pageout_pte_range+0x1932/0x2030 [ 188.143508][ T8213] ? folio_put+0xd0/0xd0 [ 188.147786][ T8213] walk_pgd_range+0xc40/0x1810 [ 188.152620][ T8213] ? walk_kernel_page_table_range+0x260/0x260 [ 188.158733][ T8213] __walk_page_range+0x137/0x5b0 [ 188.163803][ T8213] ? process_vma_walk_lock+0x140/0x450 [ 188.169311][ T8213] walk_page_range+0x35a/0x520 [ 188.174118][ T8213] ? page_mapped_in_vma+0x9a0/0x9a0 [ 188.179345][ T8213] ? generic_get_unmapped_area_topdown+0x690/0x690 [ 188.185881][ T8213] ? mlock_drain_local+0x79/0x490 [ 188.190945][ T8213] do_madvise+0x24e4/0x3790 [ 188.195495][ T8213] ? madvise_set_anon_name+0x440/0x440 [ 188.201006][ T8213] ? schedule+0xc7/0x170 [ 188.205311][ T8213] ? futex_wait_queue+0x27/0x1b0 [ 188.210281][ T8213] ? futex_wait_queue+0x138/0x1b0 [ 188.215349][ T8213] ? futex_unqueue+0xcb/0xf0 [ 188.219965][ T8213] ? futex_wait+0x4a7/0x5c0 [ 188.224501][ T8213] ? futex_wait_setup+0x270/0x270 [ 188.229570][ T8213] ? file_end_write+0x159/0x250 [ 188.234459][ T8213] ? vfs_write+0x5de/0x9a0 [ 188.238916][ T8213] ? do_futex+0x2ff/0x3e0 [ 188.243279][ T8213] ? __ia32_sys_get_robust_list+0x110/0x110 [ 188.249218][ T8213] ? lock_chain_count+0x20/0x20 [ 188.254105][ T8213] __x64_sys_madvise+0xa6/0xc0 [ 188.258920][ T8213] do_syscall_64+0x55/0xb0 [ 188.263359][ T8213] ? clear_bhb_loop+0x40/0x90 [ 188.268073][ T8213] ? clear_bhb_loop+0x40/0x90 [ 188.272782][ T8213] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.278728][ T8213] RIP: 0033:0x7f0b4df9e559 [ 188.283175][ T8213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.302880][ T8213] RSP: 002b:00007f0b4ef34028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 188.311349][ T8213] RAX: ffffffffffffffda RBX: 00007f0b4e225fa0 RCX: 00007f0b4df9e559 [ 188.319352][ T8213] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000 [ 188.327351][ T8213] RBP: 00007f0b4e0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 188.335361][ T8213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.343387][ T8213] R13: 00007f0b4e226038 R14: 00007f0b4e225fa0 R15: 00007ffd6fa46af8 [ 188.351408][ T8213] [ 188.436799][ T8215] loop6: detected capacity change from 0 to 256 [ 188.665252][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 188.769738][ T8221] mmap: syz.4.602 (8221) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 188.860511][ T23] usb 2-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 188.886752][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.894839][ T23] usb 2-1: Product: syz [ 188.915598][ T23] usb 2-1: Manufacturer: syz [ 188.920266][ T23] usb 2-1: SerialNumber: syz [ 189.560663][ T23] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 189.820332][ T23] usb 2-1: USB disconnect, device number 8 [ 190.078857][ T8241] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 190.092839][ T8241] overlayfs: failed to set xattr on upper [ 190.100035][ T8241] overlayfs: ...falling back to redirect_dir=nofollow. [ 190.113042][ T8241] overlayfs: ...falling back to index=off. [ 190.122160][ T8241] overlayfs: ...falling back to xino=off. [ 190.455408][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 190.566395][ T8255] netlink: 'syz.1.619': attribute type 30 has an invalid length. [ 190.581759][ T8255] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.591463][ T8255] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.600316][ T8255] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.609295][ T8255] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.655995][ T9] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 190.667490][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.679915][ T9] usb 5-1: config 0 descriptor?? [ 190.687010][ T8255] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.696047][ T8255] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.704985][ T8255] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.713992][ T8255] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.882700][ T8262] gadgetfs: bound to dummy_udc driver [ 191.422015][ T8264] loop6: detected capacity change from 0 to 32768 [ 191.438520][ T8264] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.622 (8264) [ 191.498963][ T8264] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 191.515308][ T8264] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 191.524181][ T8264] BTRFS info (device loop6): enabling auto defrag [ 191.544880][ T8264] BTRFS info (device loop6): use no compression [ 191.562392][ T8264] BTRFS info (device loop6): force clearing of disk cache [ 191.570566][ T8264] BTRFS info (device loop6): max_inline at 4096 [ 191.577603][ T8264] BTRFS info (device loop6): disabling free space tree [ 191.729199][ T8264] BTRFS info (device loop6): enabling ssd optimizations [ 191.745419][ T8264] BTRFS info (device loop6): auto enabling async discard [ 191.777784][ T8244] loop4: detected capacity change from 0 to 1024 [ 191.789518][ T8264] BTRFS info (device loop6): rebuilding free space tree [ 191.869463][ T8244] hfsplus: invalid attributes max_key_len 0 [ 191.905556][ T8244] hfsplus: failed to load attributes file [ 191.915805][ T8264] BTRFS info (device loop6): disabling free space tree [ 191.926801][ T8264] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 191.959043][ T9] usb 5-1: Cannot set autoneg [ 191.964011][ T9] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 191.973770][ T8264] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 192.016776][ T9] usb 5-1: USB disconnect, device number 8 [ 192.433156][ T7667] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 192.827905][ T8318] loop5: detected capacity change from 0 to 512 [ 192.862200][ T8318] EXT4-fs: Ignoring removed bh option [ 192.930422][ T8318] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 192.972868][ T8318] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 192.995268][ T8318] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.638: Corrupt directory, running e2fsck is recommended [ 193.010030][ T8318] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 193.023492][ T8318] EXT4-fs error (device loop5): ext4_iget_extra_inode:4752: inode #15: comm syz.5.638: corrupted in-inode xattr: e_name out of bounds [ 193.045826][ T8318] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.638: couldn't read orphan inode 15 (err -117) [ 193.080038][ T8318] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.115813][ T8318] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 193.134068][ T8318] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 193.145065][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.6.640'. [ 193.154066][ T8318] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.638: Corrupt directory, running e2fsck is recommended [ 193.183094][ T8326] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 193.206701][ T8326] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 193.221647][ T8326] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.638: Corrupt directory, running e2fsck is recommended [ 193.243492][ T8318] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 193.263752][ T8318] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 193.275558][ T8318] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.638: Corrupt directory, running e2fsck is recommended [ 193.294865][ T8318] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 193.397147][ T6264] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.633073][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz.6.646'. [ 193.666588][ T8338] xfrm1: entered promiscuous mode [ 193.671717][ T8338] xfrm1: entered allmulticast mode [ 193.686778][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz.6.646'. [ 193.814610][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805befc800: rx timeout, send abort [ 193.825856][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805befc800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 194.029751][ T8355] loop6: detected capacity change from 0 to 512 [ 194.061628][ T8355] EXT4-fs: Ignoring removed bh option [ 194.123635][ T8355] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 194.150418][ T8359] gadgetfs: bound to dummy_udc driver [ 194.158780][ T8355] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 194.235443][ T8355] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.654: Corrupt directory, running e2fsck is recommended [ 194.256263][ T8355] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 194.264624][ T8355] EXT4-fs error (device loop6): ext4_iget_extra_inode:4752: inode #15: comm syz.6.654: corrupted in-inode xattr: e_name out of bounds [ 194.279080][ T8355] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.654: couldn't read orphan inode 15 (err -117) [ 194.302636][ T8355] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.417166][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.423552][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.444535][ T8355] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 194.462206][ T8355] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 194.474285][ T8355] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.654: Corrupt directory, running e2fsck is recommended [ 194.542119][ T8355] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 194.578859][ T8355] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 194.589473][ T8355] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.654: Corrupt directory, running e2fsck is recommended [ 194.652227][ T8375] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 194.672044][ T8375] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 194.694216][ T8375] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.654: Corrupt directory, running e2fsck is recommended [ 194.716496][ T8378] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 194.771245][ T7667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.898867][ T8386] netlink: 48 bytes leftover after parsing attributes in process `syz.5.669'. [ 194.923122][ T8386] ip6gre1: entered allmulticast mode [ 195.004497][ T8390] gadgetfs: bound to dummy_udc driver [ 195.405613][ T5861] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 195.617040][ T5861] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.638560][ T5861] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 195.670561][ T5861] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 195.702658][ T5861] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 195.725235][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.017538][ T49] wlan1: Trigger new scan to find an IBSS to join [ 196.093571][ T8411] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.185262][ T5861] cxacru 6-1:1.0: send of cm 0x91 failed (-71) [ 196.199158][ T5861] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 196.218734][ T5861] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 196.243387][ T5861] cxacru: probe of 6-1:1.0 failed with error -71 [ 196.276905][ T5861] usb 6-1: USB disconnect, device number 4 [ 197.312425][ T8458] (null): rxe_set_mtu: Set mtu to 1024 [ 197.741492][ T8458] infiniband syz0: set active [ 197.767936][ T8458] infiniband syz0: added team_slave_0 [ 197.889054][ T8458] RDS/IB: syz0: added [ 197.922937][ T8458] smc: adding ib device syz0 with port count 1 [ 197.931018][ T8458] smc: ib device syz0 port 1 has pnetid [ 198.075848][ T8470] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.701'. [ 198.176286][ T8459] loop4: detected capacity change from 0 to 40427 [ 198.274821][ T8459] F2FS-fs (loop4): invalid crc value [ 198.318181][ T8459] F2FS-fs (loop4): Found nat_bits in checkpoint [ 198.486953][ T8459] F2FS-fs (loop4): Start checkpoint disabled! [ 198.556541][ T8459] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 199.113198][ T49] kworker/u4:3: attempt to access beyond end of device [ 199.113198][ T49] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 199.163761][ T49] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 199.230812][ T8472] loop1: detected capacity change from 0 to 40427 [ 199.260360][ T8472] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 199.275247][ T8472] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 199.325304][ T8472] F2FS-fs (loop1): invalid crc value [ 199.585385][ T8472] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 199.612954][ T8472] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 199.718159][ T8472] syz.1.702: attempt to access beyond end of device [ 199.718159][ T8472] loop1: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 199.887214][ T5775] syz-executor: attempt to access beyond end of device [ 199.887214][ T5775] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 199.923008][ T5775] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 200.005703][ T34] wlan1: Trigger new scan to find an IBSS to join [ 201.431458][ T8522] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 201.605305][ T5785] Bluetooth: hci0: command 0x0406 tx timeout [ 201.784814][ T8534] FAULT_INJECTION: forcing a failure. [ 201.784814][ T8534] name failslab, interval 1, probability 0, space 0, times 0 [ 201.800320][ T8536] loop6: detected capacity change from 0 to 512 [ 201.818779][ T8534] CPU: 0 PID: 8534 Comm: syz.1.728 Not tainted syzkaller #0 [ 201.826141][ T8534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.836233][ T8534] Call Trace: [ 201.839543][ T8534] [ 201.842503][ T8534] dump_stack_lvl+0x18c/0x250 [ 201.847223][ T8534] ? show_regs_print_info+0x20/0x20 [ 201.852502][ T8534] ? load_image+0x420/0x420 [ 201.857044][ T8534] ? __might_sleep+0xe0/0xe0 [ 201.861672][ T8534] ? __lock_acquire+0x7eb0/0x7eb0 [ 201.866751][ T8534] should_fail_ex+0x394/0x4c0 [ 201.871467][ T8534] should_failslab+0x9/0x20 [ 201.876011][ T8534] slab_pre_alloc_hook+0x59/0x300 [ 201.881085][ T8534] kmem_cache_alloc+0x5a/0x2c0 [ 201.885885][ T8534] ? ptlock_alloc+0x20/0x70 [ 201.890424][ T8534] ptlock_alloc+0x20/0x70 [ 201.894785][ T8534] pte_alloc_one+0xcc/0x540 [ 201.899321][ T8534] ? pfn_modify_allowed+0x560/0x560 [ 201.904552][ T8534] ? hugepage_vma_check+0x471/0x560 [ 201.909785][ T8534] handle_mm_fault+0x2f72/0x4a50 [ 201.914754][ T8534] ? handle_mm_fault+0xe6/0x4a50 [ 201.919739][ T8534] ? numa_migrate_prep+0x350/0x350 [ 201.924963][ T8534] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 201.930281][ T8534] do_user_addr_fault+0x736/0x12d0 [ 201.935445][ T8534] exc_page_fault+0x64/0x100 [ 201.940069][ T8534] ? clear_bhb_loop+0x40/0x90 [ 201.944787][ T8534] asm_exc_page_fault+0x26/0x30 [ 201.949665][ T8534] RIP: 0033:0x7ff5fee52d23 [ 201.954108][ T8534] Code: 10 4c 89 44 24 08 4c 89 0c 24 4c 8b 54 24 28 45 31 c9 48 8b 7c 24 20 48 8b 74 24 18 48 8b 54 24 10 48 8b 4c 24 08 48 8b 2c 24 <48> 8b 59 38 48 81 4b 18 80 00 00 00 e8 1c ff ff ff 48 83 ec 08 b9 [ 201.973755][ T8534] RSP: 002b:00007ff5ffdf0fd0 EFLAGS: 00010246 [ 201.979855][ T8534] RAX: 00007ff5fee52ce0 RBX: 00007ff5ff225fa0 RCX: 0000000000000000 [ 201.987855][ T8534] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 201.995858][ T8534] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 202.003853][ T8534] R10: ffffffffffffffff R11: 0000000000000000 R12: 0000000000000000 [ 202.011844][ T8534] R13: 00007ff5ff226038 R14: 00007ff5ff225fa0 R15: 00007ffc8954ed18 [ 202.019854][ T8534] [ 202.022991][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.053167][ T2997] wlan1: Creating new IBSS network, BSSID c6:70:0b:82:d4:10 [ 202.072927][ T8534] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 202.124606][ T8536] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.185346][ T8536] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.266621][ T8541] loop4: detected capacity change from 0 to 2048 [ 202.312959][ T8532] loop5: detected capacity change from 0 to 32768 [ 202.336503][ T8532] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.727 (8532) [ 202.388142][ T8541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.412291][ T8532] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 202.423261][ T28] audit: type=1326 audit(1792037038.712:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8542 comm="syz.1.731" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff5fef9e559 code=0x0 [ 202.441304][ T8541] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.446511][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.463464][ T8532] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 202.495809][ T8532] BTRFS info (device loop5): using free space tree [ 202.503342][ T8536] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.729: corrupted xattr block 6: invalid header [ 202.535599][ T8536] overlayfs: failed to get uuid (/file0, err=-117); falling back to uuid=null. [ 202.569053][ T8541] EXT4-fs (loop4): shut down requested (1) [ 202.576540][ T8536] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.729: corrupted xattr block 6: invalid header [ 202.605886][ T8536] overlayfs: failed to get origin (-117) [ 202.622421][ T8536] EXT4-fs error (device loop6): ext4_xattr_block_find:1881: inode #12: comm syz.6.729: corrupted xattr block 6: invalid header [ 202.681216][ T8536] overlayfs: failed to verify origin (/, ino=2, err=-117) [ 202.689257][ T8536] overlayfs: failed to verify upper root origin [ 202.700685][ T5975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.732309][ T8532] BTRFS info (device loop5): enabling ssd optimizations [ 202.847831][ T7667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.929199][ T8565] netlink: 20 bytes leftover after parsing attributes in process `syz.4.732'. [ 202.938413][ T28] audit: type=1800 audit(1792037039.212:50): pid=8532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.727" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 203.239208][ T8569] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.251217][ T6264] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 203.287052][ T8569] bridge0: port 3(bond1) entered blocking state [ 203.293605][ T8569] bridge0: port 3(bond1) entered disabled state [ 203.319601][ T8569] bond1: entered allmulticast mode [ 203.368147][ T8569] bond1: entered promiscuous mode [ 203.379482][ T8569] bridge0: port 3(bond1) entered blocking state [ 203.386946][ T8569] bridge0: port 3(bond1) entered forwarding state [ 203.417643][ T8576] loop1: detected capacity change from 0 to 256 [ 203.439547][ T8576] FAT-fs (loop1): Unrecognized mount option "shortð" or missing value [ 203.452375][ T34] bridge0: port 3(bond1) entered disabled state [ 204.500778][ T8610] xt_hashlimit: size too large, truncated to 1048576 [ 204.731999][ T8616] loop6: detected capacity change from 0 to 2048 [ 204.739052][ T8611] rxe_eth0 speed is unknown, defaulting to 1000 [ 205.718415][ T8641] loop6: detected capacity change from 0 to 1024 [ 206.016946][ T7734] wlan1: Trigger new scan to find an IBSS to join [ 206.135962][ T8653] all: renamed from bridge_slave_0 (while UP) [ 206.785391][ T8673] netlink: 31 bytes leftover after parsing attributes in process `syz.5.770'. [ 206.815382][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.770'. [ 206.960101][ T8677] loop4: detected capacity change from 0 to 1024 [ 207.039489][ T8679] bridge1: entered promiscuous mode [ 207.055233][ T8679] bridge1: entered allmulticast mode [ 207.738392][ T8694] "syz.5.779" (8694) uses obsolete ecb(arc4) skcipher [ 208.523315][ T8710] loop5: detected capacity change from 0 to 4096 [ 208.650050][ T8710] ntfs3: loop5: Failed to load $Extend (-22). [ 208.676780][ T8710] ntfs3: loop5: Failed to initialize $Extend. [ 208.779571][ T28] audit: type=1800 audit(1792037045.062:51): pid=8710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.786" name="file2" dev="loop5" ino=31 res=0 errno=0 [ 209.048191][ T8731] loop1: detected capacity change from 0 to 16 [ 209.087975][ T8731] erofs: (device loop1): mounted with root inode @ nid 36. [ 209.111513][ T8731] erofs: (device loop1): z_erofs_readahead: readahead error at folio 22 @ nid 36 [ 209.135276][ T8731] erofs: (device loop1): z_erofs_readahead: readahead error at folio 21 @ nid 36 [ 209.162074][ T8731] erofs: (device loop1): z_erofs_readahead: readahead error at folio 20 @ nid 36 [ 209.190140][ T8734] erofs: (device loop1): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 209.199070][ T8731] erofs: (device loop1): z_erofs_readahead: readahead error at folio 18 @ nid 36 [ 209.209203][ T8734] erofs: (device loop1): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 209.228106][ T8731] erofs: (device loop1): z_erofs_readahead: readahead error at folio 16 @ nid 36 [ 209.244231][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.798'. [ 209.254711][ T8731] erofs: (device loop1): z_erofs_readahead: readahead error at folio 12 @ nid 36 [ 209.270285][ T8731] erofs: (device loop1): z_erofs_readahead: readahead error at folio 9 @ nid 36 [ 209.285211][ T8731] erofs: (device loop1): z_erofs_readahead: readahead error at folio 8 @ nid 36 [ 209.294621][ T8731] syz.1.796: attempt to access beyond end of device [ 209.294621][ T8731] loop1: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 209.321938][ T8731] syz.1.796: attempt to access beyond end of device [ 209.321938][ T8731] loop1: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 209.336732][ T8731] syz.1.796: attempt to access beyond end of device [ 209.336732][ T8731] loop1: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 209.354030][ T8731] syz.1.796: attempt to access beyond end of device [ 209.354030][ T8731] loop1: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 209.482761][ T8742] bridge1: entered promiscuous mode [ 209.630721][ T8748] netlink: 'syz.5.803': attribute type 11 has an invalid length. [ 210.005451][ T2997] wlan1: Trigger new scan to find an IBSS to join [ 210.527015][ T8775] loop6: detected capacity change from 0 to 2048 [ 210.577615][ T8775] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 210.619697][ T8775] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.706916][ T8779] loop4: detected capacity change from 0 to 2048 [ 210.736636][ T8779] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.770550][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.5.817'. [ 210.801368][ T8779] EXT4-fs error (device loop4): __ext4_iget:5091: inode #2: block 127754: comm syz.4.816: invalid block [ 210.888823][ T8779] EXT4-fs (loop4): get root inode failed [ 210.894657][ T8779] EXT4-fs (loop4): mount failed [ 211.008843][ T8779] Need at least one configuration in g1. [ 211.017214][ T8779] udc usbip-vudc.0: failed to start g1: -22 [ 211.023174][ T8779] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 211.044915][ T8779] UDC core: g1: couldn't find an available UDC or it's busy [ 211.226645][ T8792] loop5: detected capacity change from 0 to 256 [ 211.254791][ T8792] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 211.848810][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 212.005971][ T7734] wlan1: Creating new IBSS network, BSSID be:0d:60:eb:1b:81 [ 212.172226][ T8829] loop6: detected capacity change from 0 to 256 [ 212.680778][ T8846] netlink: 'syz.5.843': attribute type 5 has an invalid length. [ 212.690718][ T8846] netlink: 'syz.5.843': attribute type 8 has an invalid length. [ 212.720522][ T8848] loop6: detected capacity change from 0 to 512 [ 212.794421][ T8848] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.841147][ T8848] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.934158][ T8855] loop4: detected capacity change from 0 to 2048 [ 212.976268][ T8848] capability: warning: `syz.6.844' uses 32-bit capabilities (legacy support in use) [ 212.996080][ T8855] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.121901][ T7667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.242293][ T8866] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 213.436889][ T8874] netlink: 16 bytes leftover after parsing attributes in process `syz.6.854'. [ 213.557603][ T8880] loop6: detected capacity change from 0 to 512 [ 213.572849][ T8880] EXT4-fs: inline encryption not supported [ 213.599209][ T8880] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 213.651164][ T8880] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 213.698557][ T8880] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.857: invalid indirect mapped block 2683928664 (level 1) [ 213.757462][ T8880] EXT4-fs (loop6): 1 truncate cleaned up [ 213.764187][ T8880] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.016284][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 214.129946][ T7667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.205273][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 214.220315][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 214.229419][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 214.240708][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 214.251199][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 214.261600][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.275054][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 214.290102][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.535588][ T9] usb 5-1: usb_control_msg returned -32 [ 214.542489][ T9] usbtmc 5-1:16.0: can't read capabilities [ 214.634572][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'. [ 214.669623][ T8903] bond1: option ad_actor_sys_prio: invalid value (0) [ 214.677504][ T8903] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 214.688430][ T8903] bond1 (unregistering): Released all slaves [ 215.337574][ T8932] netlink: 'syz.6.878': attribute type 25 has an invalid length. [ 215.345588][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.6.878'. [ 215.365921][ T8932] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.374694][ T8932] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.384607][ T8932] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.393410][ T8932] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.408190][ T8932] netlink: 'syz.6.878': attribute type 25 has an invalid length. [ 215.416181][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.6.878'. [ 215.518182][ T5861] usb 5-1: USB disconnect, device number 9 [ 215.615232][ T8936] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 215.631822][ T8936] bond1: (slave lo): Enslaving as an active interface with an up link [ 215.643231][ T8936] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 215.730988][ T8941] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 215.807135][ T8] IPVS: starting estimator thread 0... [ 215.915382][ T8946] IPVS: using max 17 ests per chain, 40800 per kthread [ 215.928605][ T8950] netlink: 48 bytes leftover after parsing attributes in process `syz.1.886'. [ 215.940231][ T8950] bridge_slave_0: left allmulticast mode [ 215.946905][ T8950] bridge_slave_0: left promiscuous mode [ 215.953142][ T8950] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.042311][ T8954] loop1: detected capacity change from 0 to 512 [ 216.071373][ T8954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.084265][ T8954] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.112465][ T8954] xt_hashlimit: size too large, truncated to 1048576 [ 216.541007][ T8966] dccp_invalid_packet: P.Data Offset(80) too large [ 216.704933][ T8969] loop4: detected capacity change from 0 to 256 [ 217.271959][ T8980] FAULT_INJECTION: forcing a failure. [ 217.271959][ T8980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.305255][ T8980] CPU: 1 PID: 8980 Comm: syz.6.897 Not tainted syzkaller #0 [ 217.312602][ T8980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 217.322690][ T8980] Call Trace: [ 217.326002][ T8980] [ 217.328964][ T8980] dump_stack_lvl+0x18c/0x250 [ 217.333696][ T8980] ? show_regs_print_info+0x20/0x20 [ 217.338965][ T8980] ? load_image+0x420/0x420 [ 217.343521][ T8980] ? __might_fault+0xaa/0x120 [ 217.348248][ T8980] ? __lock_acquire+0x7eb0/0x7eb0 [ 217.353324][ T8980] should_fail_ex+0x394/0x4c0 [ 217.358070][ T8980] _copy_from_user+0x2f/0xe0 [ 217.362729][ T8980] __se_sys_copy_file_range+0x12f/0x470 [ 217.368326][ T8980] ? __x64_sys_copy_file_range+0xf0/0xf0 [ 217.373988][ T8980] ? __x64_sys_copy_file_range+0x21/0xf0 [ 217.379644][ T8980] do_syscall_64+0x55/0xb0 [ 217.384086][ T8980] ? clear_bhb_loop+0x40/0x90 [ 217.388914][ T8980] ? clear_bhb_loop+0x40/0x90 [ 217.393620][ T8980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.399552][ T8980] RIP: 0033:0x7f99a4b9e559 [ 217.403982][ T8980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.423610][ T8980] RSP: 002b:00007f99a5b1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 217.432055][ T8980] RAX: ffffffffffffffda RBX: 00007f99a4e25fa0 RCX: 00007f99a4b9e559 [ 217.440055][ T8980] RDX: 0000000000000003 RSI: 0000200000000180 RDI: 0000000000000003 [ 217.448052][ T8980] RBP: 00007f99a4c358b0 R08: 0000000000000100 R09: 0000000000000000 [ 217.456052][ T8980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.464073][ T8980] R13: 00007f99a4e26038 R14: 00007f99a4e25fa0 R15: 00007ffeb894f918 [ 217.472094][ T8980] [ 218.118511][ T9004] FAULT_INJECTION: forcing a failure. [ 218.118511][ T9004] name failslab, interval 1, probability 0, space 0, times 0 [ 218.132316][ T9004] CPU: 0 PID: 9004 Comm: syz.5.904 Not tainted syzkaller #0 [ 218.139658][ T9004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.149752][ T9004] Call Trace: [ 218.153065][ T9004] [ 218.156042][ T9004] dump_stack_lvl+0x18c/0x250 [ 218.160775][ T9004] ? show_regs_print_info+0x20/0x20 [ 218.166015][ T9004] ? load_image+0x420/0x420 [ 218.170575][ T9004] ? __might_sleep+0xe0/0xe0 [ 218.175222][ T9004] ? __lock_acquire+0x7eb0/0x7eb0 [ 218.180304][ T9004] should_fail_ex+0x394/0x4c0 [ 218.185037][ T9004] should_failslab+0x9/0x20 [ 218.189598][ T9004] slab_pre_alloc_hook+0x59/0x300 [ 218.194659][ T9004] ? do_raw_spin_unlock+0x121/0x230 [ 218.199912][ T9004] kmem_cache_alloc+0x5a/0x2c0 [ 218.204730][ T9004] ? alloc_empty_file+0x9e/0x1d0 [ 218.209709][ T9004] alloc_empty_file+0x9e/0x1d0 [ 218.214498][ T9004] dentry_open+0x4b/0x100 [ 218.218877][ T9004] do_mq_open+0x657/0x760 [ 218.223242][ T9004] ? mq_clear_sbinfo+0x90/0x90 [ 218.228040][ T9004] ? lock_chain_count+0x20/0x20 [ 218.232933][ T9004] __x64_sys_mq_open+0x186/0x1e0 [ 218.237905][ T9004] ? proc_ipc_sem_dointvec+0x180/0x180 [ 218.243399][ T9004] ? syscall_enter_from_user_mode+0x2e/0x80 [ 218.249323][ T9004] do_syscall_64+0x55/0xb0 [ 218.253758][ T9004] ? clear_bhb_loop+0x40/0x90 [ 218.258459][ T9004] ? clear_bhb_loop+0x40/0x90 [ 218.263158][ T9004] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.269100][ T9004] RIP: 0033:0x7f2b7119e559 [ 218.273552][ T9004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.293199][ T9004] RSP: 002b:00007f2b71f91028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 218.301672][ T9004] RAX: ffffffffffffffda RBX: 00007f2b71425fa0 RCX: 00007f2b7119e559 [ 218.309708][ T9004] RDX: 00000000000000e8 RSI: 0000000000000040 RDI: 00002000000000c0 [ 218.317719][ T9004] RBP: 00007f2b712358b0 R08: 0000000000000000 R09: 0000000000000000 [ 218.325719][ T9004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.333721][ T9004] R13: 00007f2b71426038 R14: 00007f2b71425fa0 R15: 00007ffe282a0388 [ 218.341728][ T9004] [ 218.740112][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.066503][ T9032] ip_tables: iptables: counters copy to user failed while replacing table [ 219.445375][ T27] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 219.485371][ T970] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 219.627181][ T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.638886][ T27] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 219.655592][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.692290][ T27] as10x_usb: device has been detected [ 219.709772][ T970] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.710931][ T27] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 219.740799][ T970] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 219.756542][ T970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 219.769936][ T27] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 219.783622][ T970] usb 6-1: Product: syz [ 219.791319][ T970] usb 6-1: Manufacturer: syz [ 219.824892][ T970] usb 6-1: selecting invalid altsetting 1 [ 219.834570][ T970] dvb_ttusb_budget: ttusb_init_controller: error [ 219.849719][ T970] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 219.859526][ T9057] netlink: 'syz.1.929': attribute type 8 has an invalid length. [ 219.867508][ T9057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.929'. [ 219.889764][ T27] as10x_usb: error during firmware upload part1 [ 219.896900][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'. [ 219.910048][ T27] Registered device Abilis Systems DVB-Titan [ 219.946952][ T970] DVB: Unable to find symbol cx22700_attach() [ 220.037278][ T970] DVB: Unable to find symbol tda10046_attach() [ 220.043522][ T970] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 220.160111][ T27] usb 6-1: USB disconnect, device number 5 [ 220.545923][ T970] usb 5-1: USB disconnect, device number 10 [ 220.584553][ T970] Unregistered device Abilis Systems DVB-Titan [ 220.591495][ T970] as10x_usb: device has been disconnected [ 220.726923][ T9082] loop6: detected capacity change from 0 to 1024 [ 220.776728][ T9082] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.842653][ T9087] FAULT_INJECTION: forcing a failure. [ 220.842653][ T9087] name failslab, interval 1, probability 0, space 0, times 0 [ 220.857101][ T9087] CPU: 0 PID: 9087 Comm: syz.5.940 Not tainted syzkaller #0 [ 220.864431][ T9087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 220.874506][ T9087] Call Trace: [ 220.877819][ T9087] [ 220.880800][ T9087] dump_stack_lvl+0x18c/0x250 [ 220.885518][ T9087] ? show_regs_print_info+0x20/0x20 [ 220.890735][ T9087] ? load_image+0x420/0x420 [ 220.895295][ T9087] ? __might_sleep+0xe0/0xe0 [ 220.899906][ T9087] ? __lock_acquire+0x7eb0/0x7eb0 [ 220.905099][ T9087] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.911227][ T9087] should_fail_ex+0x394/0x4c0 [ 220.915941][ T9087] should_failslab+0x9/0x20 [ 220.920520][ T9087] slab_pre_alloc_hook+0x59/0x300 [ 220.925587][ T9087] ? alloc_super+0x5a/0x910 [ 220.930117][ T9087] __kmem_cache_alloc_node+0x53/0x250 [ 220.935526][ T9087] ? __lock_acquire+0x7eb0/0x7eb0 [ 220.940592][ T9087] ? alloc_super+0x5a/0x910 [ 220.945130][ T9087] kmalloc_trace+0x2a/0xe0 [ 220.949593][ T9087] alloc_super+0x5a/0x910 [ 220.953950][ T9087] ? kill_litter_super+0xb0/0xb0 [ 220.958919][ T9087] ? kill_litter_super+0xb0/0xb0 [ 220.963887][ T9087] sget_fc+0x325/0x8d0 [ 220.967992][ T9087] ? kill_litter_super+0xb0/0xb0 [ 220.972972][ T9087] ? mqueue_get_tree+0xf0/0xf0 [ 220.977772][ T9087] get_tree_nodev+0x2a/0x140 [ 220.982384][ T9087] vfs_get_tree+0x8c/0x280 [ 220.986827][ T9087] fc_mount+0x1c/0xb0 [ 220.990834][ T9087] mq_init_ns+0x3a1/0x510 [ 220.995209][ T9087] copy_ipcs+0x309/0x500 [ 220.999486][ T9087] create_new_namespaces+0x212/0x700 [ 221.004809][ T9087] unshare_nsproxy_namespaces+0x11a/0x160 [ 221.010563][ T9087] ksys_unshare+0x4fa/0x8f0 [ 221.015095][ T9087] ? sighand_ctor+0x50/0x50 [ 221.019619][ T9087] ? lock_chain_count+0x20/0x20 [ 221.024508][ T9087] ? syscall_enter_from_user_mode+0x25/0x80 [ 221.030424][ T9087] __x64_sys_unshare+0x38/0x40 [ 221.035210][ T9087] do_syscall_64+0x55/0xb0 [ 221.039689][ T9087] ? clear_bhb_loop+0x40/0x90 [ 221.044399][ T9087] ? clear_bhb_loop+0x40/0x90 [ 221.049098][ T9087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.055038][ T9087] RIP: 0033:0x7f2b7119e559 [ 221.059493][ T9087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.079124][ T9087] RSP: 002b:00007f2b71f91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 221.087568][ T9087] RAX: ffffffffffffffda RBX: 00007f2b71425fa0 RCX: 00007f2b7119e559 [ 221.095564][ T9087] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 221.103558][ T9087] RBP: 00007f2b712358b0 R08: 0000000000000000 R09: 0000000000000000 [ 221.111547][ T9087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.119566][ T9087] R13: 00007f2b71426038 R14: 00007f2b71425fa0 R15: 00007ffe282a0388 [ 221.127596][ T9087] [ 221.484732][ T23] IPVS: starting estimator thread 0... [ 221.591219][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 221.598879][ T9103] IPVS: using max 16 ests per chain, 38400 per kthread [ 221.620776][ T7667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.645543][ T23] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 221.745388][ T2197] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 221.952199][ T2197] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 221.971463][ T2197] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 221.981752][ T2197] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 221.995371][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 222.006368][ T9114] loop6: detected capacity change from 0 to 512 [ 222.014001][ T2197] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 222.031445][ T9114] EXT4-fs (loop6): Test dummy encryption mode enabled [ 222.038693][ T2197] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.079375][ T9114] EXT4-fs error (device loop6): ext4_orphan_get:1408: inode #15: comm syz.6.952: inode has both inline data and extents flags [ 222.090829][ T9098] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 222.105613][ T9114] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.952: couldn't read orphan inode 15 (err -117) [ 222.118908][ T9098] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 222.121078][ T9114] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.157549][ T2197] pl2303 6-1:1.0: pl2303 converter detected [ 222.185877][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 222.194206][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 222.211777][ T2197] usb 6-1: pl2303 converter now attached to ttyUSB0 [ 222.227624][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.272452][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 222.297550][ T8] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 222.308402][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.319200][ T8] usb 2-1: Product: syz [ 222.327230][ T8] usb 2-1: Manufacturer: syz [ 222.332038][ T8] usb 2-1: SerialNumber: syz [ 222.435481][ T9114] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 222.478833][ T9098] pl2303 6-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 222.515629][ T9098] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 222.533351][ T9098] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 222.545461][ T9098] pl2303 6-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 222.568679][ T7667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.587616][ T9098] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 222.780328][ T8] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 222.878234][ T9098] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 222.916351][ T8] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 222.918943][ T9098] pl2303 ttyUSB0: error sending break = -32 [ 222.949226][ T7891] udevd[7891]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.998089][ T8] usb 2-1: USB disconnect, device number 9 [ 223.012371][ T27] usb 6-1: USB disconnect, device number 6 [ 223.043165][ T27] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 223.073227][ T27] pl2303 6-1:1.0: device disconnected [ 223.603152][ T9146] loop5: detected capacity change from 0 to 7 [ 223.628035][ T9146] Dev loop5: unable to read RDB block 7 [ 223.633680][ T9146] loop5: AHDI p1 p2 p3 [ 223.638322][ T9146] loop5: partition table partially beyond EOD, truncated [ 223.647546][ T9146] loop5: p1 start 5472580 is beyond EOD, truncated [ 223.654159][ T9146] loop5: p2 start 167772160 is beyond EOD, truncated [ 223.728653][ T27] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 223.933662][ T9163] loop1: detected capacity change from 0 to 512 [ 223.964765][ T27] usb 5-1: unable to get BOS descriptor or descriptor too short [ 223.984296][ T27] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 224.001766][ T27] usb 5-1: can't read configurations, error -71 [ 224.025026][ T9163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.043884][ T9163] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.148111][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.228985][ T9168] FAULT_INJECTION: forcing a failure. [ 224.228985][ T9168] name failslab, interval 1, probability 0, space 0, times 0 [ 224.243269][ T9168] CPU: 1 PID: 9168 Comm: syz.1.971 Not tainted syzkaller #0 [ 224.250668][ T9168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.260764][ T9168] Call Trace: [ 224.264083][ T9168] [ 224.267035][ T9168] dump_stack_lvl+0x18c/0x250 [ 224.271803][ T9168] ? show_regs_print_info+0x20/0x20 [ 224.277070][ T9168] ? load_image+0x420/0x420 [ 224.281647][ T9168] ? __might_sleep+0xe0/0xe0 [ 224.286292][ T9168] ? __lock_acquire+0x7eb0/0x7eb0 [ 224.291363][ T9168] should_fail_ex+0x394/0x4c0 [ 224.296134][ T9168] should_failslab+0x9/0x20 [ 224.300712][ T9168] slab_pre_alloc_hook+0x59/0x300 [ 224.305783][ T9168] ? kvmalloc_node+0x70/0x180 [ 224.310516][ T9168] ? kvmalloc_node+0x70/0x180 [ 224.315256][ T9168] __kmem_cache_alloc_node+0x53/0x250 [ 224.320691][ T9168] ? kvmalloc_node+0x70/0x180 [ 224.325409][ T9168] __kmalloc_node+0xa6/0x240 [ 224.330048][ T9168] kvmalloc_node+0x70/0x180 [ 224.334573][ T9168] bpf_test_run_xdp_live+0x1e9/0x1b30 [ 224.339964][ T9168] ? verify_lock_unused+0x140/0x140 [ 224.345196][ T9168] ? kasan_set_track+0x4e/0x70 [ 224.349998][ T9168] ? __kasan_kmalloc+0x8f/0xa0 [ 224.354810][ T9168] ? __kmalloc+0xb7/0x240 [ 224.359162][ T9168] ? bpf_test_init+0x9f/0x140 [ 224.363872][ T9168] ? bpf_prog_test_run+0x31f/0x390 [ 224.369023][ T9168] ? __sys_bpf+0x49d/0x890 [ 224.373477][ T9168] ? __x64_sys_bpf+0x7c/0x90 [ 224.378085][ T9168] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.384194][ T9168] ? xdp_convert_md_to_buff+0x330/0x330 [ 224.389785][ T9168] ? __lock_acquire+0x7eb0/0x7eb0 [ 224.394853][ T9168] ? __virt_addr_valid+0x10c/0x380 [ 224.400001][ T9168] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 224.406269][ T9168] ? _copy_from_user+0xa5/0xe0 [ 224.411066][ T9168] ? bpf_test_init+0x119/0x140 [ 224.415876][ T9168] ? xdp_convert_md_to_buff+0x5b/0x330 [ 224.421358][ T9168] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 224.426765][ T9168] ? __lock_acquire+0x7eb0/0x7eb0 [ 224.431826][ T9168] ? dev_put+0x80/0x80 [ 224.435937][ T9168] ? dev_put+0x80/0x80 [ 224.440036][ T9168] bpf_prog_test_run+0x31f/0x390 [ 224.445002][ T9168] __sys_bpf+0x49d/0x890 [ 224.449272][ T9168] ? bpf_link_show_fdinfo+0x560/0x560 [ 224.454692][ T9168] ? lock_chain_count+0x20/0x20 [ 224.459575][ T9168] __x64_sys_bpf+0x7c/0x90 [ 224.464034][ T9168] do_syscall_64+0x55/0xb0 [ 224.468471][ T9168] ? clear_bhb_loop+0x40/0x90 [ 224.473177][ T9168] ? clear_bhb_loop+0x40/0x90 [ 224.477882][ T9168] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.483830][ T9168] RIP: 0033:0x7ff5fef9e559 [ 224.488279][ T9168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.507917][ T9168] RSP: 002b:00007ff5ffdf1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 224.516374][ T9168] RAX: ffffffffffffffda RBX: 00007ff5ff225fa0 RCX: 00007ff5fef9e559 [ 224.524475][ T9168] RDX: 0000000000000050 RSI: 0000200000000c00 RDI: 000000000000000a [ 224.532466][ T9168] RBP: 00007ff5ff0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 224.540477][ T9168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.548459][ T9168] R13: 00007ff5ff226038 R14: 00007ff5ff225fa0 R15: 00007ffc8954ed18 [ 224.556459][ T9168] [ 224.709868][ T9172] loop6: detected capacity change from 0 to 128 [ 224.870596][ T9176] netlink: 36 bytes leftover after parsing attributes in process `syz.1.974'. [ 224.886085][ T5785] Bluetooth: hci2: command 0x0406 tx timeout [ 225.098268][ T9186] loop4: detected capacity change from 0 to 512 [ 225.156756][ T9186] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 225.316559][ T9194] netlink: 'syz.6.983': attribute type 1 has an invalid length. [ 225.413859][ T9194] 8021q: adding VLAN 0 to HW filter on device bond2 [ 225.426821][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.984'. [ 225.580855][ T9207] netlink: 'syz.6.988': attribute type 1 has an invalid length. [ 225.588757][ T9207] netlink: 'syz.6.988': attribute type 2 has an invalid length. [ 225.599560][ T9207] netlink: 244 bytes leftover after parsing attributes in process `syz.6.988'. [ 225.850541][ T9213] Bluetooth: MGMT ver 1.22 [ 226.175946][ T9222] loop1: detected capacity change from 0 to 128 [ 226.244451][ T9222] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 226.322871][ T9222] ext4 filesystem being mounted at /261/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 226.478177][ T5775] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 227.215551][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 228.531205][ T9260] loop5: detected capacity change from 0 to 32768 [ 228.607271][ T9260] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 228.816441][ T9260] XFS (loop5): Ending clean mount [ 228.857219][ T9260] XFS (loop5): Quotacheck needed: Please wait. [ 229.004690][ T9260] XFS (loop5): Quotacheck: Done. [ 229.141041][ T6264] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 229.714685][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1024'. [ 230.016399][ T9295] loop6: detected capacity change from 0 to 32768 [ 230.063469][ T9295] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1023 (9295) [ 230.114057][ T9295] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 230.145574][ T9295] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 230.185268][ T9295] BTRFS info (device loop6): force clearing of disk cache [ 230.192477][ T9295] BTRFS info (device loop6): enabling auto defrag [ 230.235854][ T9295] BTRFS info (device loop6): max_inline at 0 [ 230.241931][ T9295] BTRFS info (device loop6): enabling disk space caching [ 230.295911][ T9295] BTRFS info (device loop6): disk space caching is enabled [ 230.483450][ T5785] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 230.490290][ T9295] BTRFS info (device loop6): enabling ssd optimizations [ 230.500287][ T5785] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 230.550840][ T9295] BTRFS info (device loop6): rebuilding free space tree [ 230.617488][ T9295] BTRFS info (device loop6): disabling free space tree [ 230.624468][ T9295] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 230.660593][ T9295] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 230.781865][ T9301] loop1: detected capacity change from 0 to 40427 [ 230.837156][ T9301] F2FS-fs (loop1): invalid crc value [ 230.862986][ T9301] F2FS-fs (loop1): Found nat_bits in checkpoint [ 230.904066][ T34] BTRFS info (device loop6): qgroup scan completed (inconsistency flag cleared) [ 231.063283][ T7667] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 231.075463][ T9301] F2FS-fs (loop1): Start checkpoint disabled! [ 231.122077][ T9301] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 231.761884][ T34] kworker/u4:2: attempt to access beyond end of device [ 231.761884][ T34] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 231.792057][ T34] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 231.955512][ T5861] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 232.161269][ T9337] input: syz0 as /devices/virtual/input/input13 [ 232.178048][ T5861] usb 7-1: config 0 interface 0 has no altsetting 0 [ 232.184760][ T5861] usb 7-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 232.209865][ T5861] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.236566][ T5861] usb 7-1: config 0 descriptor?? [ 232.414113][ T9345] netlink: 'syz.4.1035': attribute type 20 has an invalid length. [ 232.422091][ T9345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1035'. [ 232.447861][ T9345] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.456807][ T9345] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.465603][ T9345] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.474380][ T9345] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.498703][ T9345] netlink: 'syz.4.1035': attribute type 20 has an invalid length. [ 232.506843][ T9345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1035'. [ 232.704951][ T9351] netlink: 'syz.5.1038': attribute type 1 has an invalid length. [ 232.746806][ T9351] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.833039][ T9351] bond1: (slave gretap1): making interface the new active one [ 232.844399][ T9351] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 232.881420][ T5861] usbhid 7-1:0.0: can't add hid device: -71 [ 232.895351][ T5861] usbhid: probe of 7-1:0.0 failed with error -71 [ 232.933043][ T5861] usb 7-1: USB disconnect, device number 2 [ 233.170868][ T28] audit: type=1326 audit(1792037069.452:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.1.1037" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff5fef9e559 code=0x0 [ 233.478250][ T9354] loop4: detected capacity change from 0 to 40427 [ 233.507953][ T9354] F2FS-fs (loop4): invalid crc value [ 233.539989][ T9354] F2FS-fs (loop4): Found nat_bits in checkpoint [ 233.709986][ T9354] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 234.014759][ T5975] syz-executor: attempt to access beyond end of device [ 234.014759][ T5975] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 234.068360][ T5975] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 234.253192][ T9379] loop5: detected capacity change from 0 to 512 [ 234.359550][ T9379] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.402788][ T9379] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.925501][ T6264] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.540899][ T9388] loop1: detected capacity change from 0 to 131072 [ 235.553650][ T9388] F2FS-fs (loop1): invalid crc value [ 235.559029][ C0] sched: RT throttling activated [ 235.601318][ T9388] F2FS-fs (loop1): Found nat_bits in checkpoint [ 235.666733][ T9388] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 236.060727][ T9410] FAULT_INJECTION: forcing a failure. [ 236.060727][ T9410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.075735][ T9410] CPU: 0 PID: 9410 Comm: syz.4.1057 Not tainted syzkaller #0 [ 236.083195][ T9410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.093304][ T9410] Call Trace: [ 236.096627][ T9410] [ 236.099598][ T9410] dump_stack_lvl+0x18c/0x250 [ 236.104338][ T9410] ? show_regs_print_info+0x20/0x20 [ 236.109618][ T9410] ? load_image+0x420/0x420 [ 236.114185][ T9410] ? __might_fault+0xaa/0x120 [ 236.118945][ T9410] ? __lock_acquire+0x7eb0/0x7eb0 [ 236.124010][ T9410] ? __virt_addr_valid+0x10c/0x380 [ 236.129180][ T9410] should_fail_ex+0x394/0x4c0 [ 236.133963][ T9410] _copy_to_user+0x2f/0xa0 [ 236.138473][ T9410] bpf_verifier_vlog+0x4e6/0x840 [ 236.143477][ T9410] __btf_verifier_log+0xe3/0x140 [ 236.148504][ T9410] ? sort_r+0x17f5/0x1810 [ 236.152882][ T9410] ? btf_check_sec_info+0x350/0x350 [ 236.158158][ T9410] btf_datasec_check_meta+0x70b/0xb50 [ 236.163616][ T9410] btf_check_all_metas+0x371/0xaf0 [ 236.168784][ T9410] btf_parse_type_sec+0xfc/0x1960 [ 236.173879][ T9410] ? btf_check_sec_info+0x350/0x350 [ 236.179138][ T9410] ? __virt_addr_valid+0x10c/0x380 [ 236.184304][ T9410] ? btf_verifier_log+0x1a0/0x1a0 [ 236.189399][ T9410] ? btf_parse_hdr+0x545/0x700 [ 236.194205][ T9410] ? btf_parse_str_sec+0x20d/0x2a0 [ 236.199371][ T9410] btf_new_fd+0x440/0x9e0 [ 236.203767][ T9410] ? bpf_btf_show_fdinfo+0x80/0x80 [ 236.208932][ T9410] ? capable+0x88/0xe0 [ 236.213051][ T9410] __sys_bpf+0x670/0x890 [ 236.217336][ T9410] ? bpf_link_show_fdinfo+0x560/0x560 [ 236.222788][ T9410] ? lock_chain_count+0x20/0x20 [ 236.227692][ T9410] __x64_sys_bpf+0x7c/0x90 [ 236.232153][ T9410] do_syscall_64+0x55/0xb0 [ 236.236618][ T9410] ? clear_bhb_loop+0x40/0x90 [ 236.241359][ T9410] ? clear_bhb_loop+0x40/0x90 [ 236.246085][ T9410] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.252038][ T9410] RIP: 0033:0x7f0b4df9e559 [ 236.256493][ T9410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.276139][ T9410] RSP: 002b:00007f0b4ef34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 236.284598][ T9410] RAX: ffffffffffffffda RBX: 00007f0b4e225fa0 RCX: 00007f0b4df9e559 [ 236.292608][ T9410] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 236.300620][ T9410] RBP: 00007f0b4e0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 236.308634][ T9410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.316643][ T9410] R13: 00007f0b4e226038 R14: 00007f0b4e225fa0 R15: 00007ffd6fa46af8 [ 236.324676][ T9410] [ 236.554080][ T9418] FAULT_INJECTION: forcing a failure. [ 236.554080][ T9418] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 236.588919][ T9418] CPU: 1 PID: 9418 Comm: syz.4.1058 Not tainted syzkaller #0 [ 236.596473][ T9418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.606571][ T9418] Call Trace: [ 236.609905][ T9418] [ 236.612883][ T9418] dump_stack_lvl+0x18c/0x250 [ 236.617628][ T9418] ? show_regs_print_info+0x20/0x20 [ 236.622907][ T9418] ? load_image+0x420/0x420 [ 236.627473][ T9418] ? __lock_acquire+0x7eb0/0x7eb0 [ 236.632555][ T9418] should_fail_ex+0x394/0x4c0 [ 236.637289][ T9418] prepare_alloc_pages+0x1e1/0x5b0 [ 236.642467][ T9418] __alloc_pages+0x134/0x460 [ 236.647102][ T9418] ? zone_statistics+0x170/0x170 [ 236.652110][ T9418] ? lockdep_softirqs_off+0x440/0x440 [ 236.657528][ T9418] __kmalloc_large_node+0x8c/0x1f0 [ 236.662686][ T9418] ? io_alloc_hash_table+0x2d/0xb0 [ 236.667836][ T9418] __kmalloc+0x114/0x240 [ 236.672131][ T9418] io_alloc_hash_table+0x2d/0xb0 [ 236.677108][ T9418] io_ring_ctx_alloc+0x132/0xc10 [ 236.682079][ T9418] io_uring_create+0x2df/0x1330 [ 236.686958][ T9418] ? __might_fault+0xc6/0x120 [ 236.691662][ T9418] ? __might_fault+0xaa/0x120 [ 236.696368][ T9418] __se_sys_io_uring_setup+0x29f/0x2b0 [ 236.701862][ T9418] ? __x64_sys_io_uring_setup+0x60/0x60 [ 236.707464][ T9418] ? lockdep_hardirqs_on+0x98/0x150 [ 236.712694][ T9418] do_syscall_64+0x55/0xb0 [ 236.717150][ T9418] ? clear_bhb_loop+0x40/0x90 [ 236.721845][ T9418] ? clear_bhb_loop+0x40/0x90 [ 236.726552][ T9418] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.732496][ T9418] RIP: 0033:0x7f0b4df9e559 [ 236.736931][ T9418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.756564][ T9418] RSP: 002b:00007f0b4ef33fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 236.765007][ T9418] RAX: ffffffffffffffda RBX: 0000200000000200 RCX: 00007f0b4df9e559 [ 236.773000][ T9418] RDX: 00002000000002c0 RSI: 0000200000000200 RDI: 000000000000424a [ 236.780993][ T9418] RBP: 00007f0b4e0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 236.788984][ T9418] R10: 0000200000000300 R11: 0000000000000206 R12: 00002000000002c0 [ 236.796979][ T9418] R13: 0000200000000300 R14: 0000200000000280 R15: 00007ffd6fa46af8 [ 236.804989][ T9418] [ 237.476802][ T9443] FAULT_INJECTION: forcing a failure. [ 237.476802][ T9443] name failslab, interval 1, probability 0, space 0, times 0 [ 237.489991][ T9443] CPU: 0 PID: 9443 Comm: syz.5.1070 Not tainted syzkaller #0 [ 237.497424][ T9443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.507508][ T9443] Call Trace: [ 237.510816][ T9443] [ 237.513766][ T9443] dump_stack_lvl+0x18c/0x250 [ 237.518470][ T9443] ? show_regs_print_info+0x20/0x20 [ 237.523699][ T9443] ? load_image+0x420/0x420 [ 237.528249][ T9443] ? __might_sleep+0xe0/0xe0 [ 237.532885][ T9443] ? __lock_acquire+0x7eb0/0x7eb0 [ 237.537942][ T9443] should_fail_ex+0x394/0x4c0 [ 237.542675][ T9443] should_failslab+0x9/0x20 [ 237.547208][ T9443] slab_pre_alloc_hook+0x59/0x300 [ 237.552262][ T9443] kmem_cache_alloc+0x5a/0x2c0 [ 237.557060][ T9443] ? do_timer_create+0x19d/0x1300 [ 237.562113][ T9443] do_timer_create+0x19d/0x1300 [ 237.566988][ T9443] ? __might_fault+0xaa/0x120 [ 237.571692][ T9443] ? __lock_acquire+0x7eb0/0x7eb0 [ 237.576764][ T9443] ? __ia32_sys_clock_nanosleep_time32+0xb0/0xb0 [ 237.583126][ T9443] ? __might_fault+0xaa/0x120 [ 237.587841][ T9443] ? __might_fault+0xc6/0x120 [ 237.592539][ T9443] ? __might_fault+0xaa/0x120 [ 237.597270][ T9443] __x64_sys_timer_create+0x16a/0x1c0 [ 237.602685][ T9443] ? posix_timer_event+0x100/0x100 [ 237.607835][ T9443] ? lockdep_hardirqs_on+0x98/0x150 [ 237.613063][ T9443] do_syscall_64+0x55/0xb0 [ 237.617512][ T9443] ? clear_bhb_loop+0x40/0x90 [ 237.622231][ T9443] ? clear_bhb_loop+0x40/0x90 [ 237.626960][ T9443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.632893][ T9443] RIP: 0033:0x7f2b7119e559 [ 237.637352][ T9443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.656989][ T9443] RSP: 002b:00007f2b71f91028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 237.665427][ T9443] RAX: ffffffffffffffda RBX: 00007f2b71425fa0 RCX: 00007f2b7119e559 [ 237.673416][ T9443] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000000 [ 237.681405][ T9443] RBP: 00007f2b712358b0 R08: 0000000000000000 R09: 0000000000000000 [ 237.689394][ T9443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.697389][ T9443] R13: 00007f2b71426038 R14: 00007f2b71425fa0 R15: 00007ffe282a0388 [ 237.705399][ T9443] [ 238.030861][ T5785] Bluetooth: hci1: unexpected event for opcode 0x2064 [ 238.038631][ T5861] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 238.070561][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1075'. [ 238.237038][ T5861] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.251638][ T5861] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 238.271183][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.298939][ T5861] as10x_usb: device has been detected [ 238.315763][ T5861] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 238.366065][ T5861] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 238.407283][ T5861] as10x_usb: error during firmware upload part1 [ 238.424534][ T5861] Registered device Abilis Systems DVB-Titan [ 238.664988][ T9465] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1079'. [ 238.824703][ T9467] 9pnet: p9_errstr2errno: server reported unknown error 0xffffffffffffffff [ 238.848115][ T9469] loop6: detected capacity change from 0 to 512 [ 239.057973][ T9469] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.080055][ T9469] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.221253][ T5861] usb 2-1: USB disconnect, device number 10 [ 239.251489][ T5861] Unregistered device Abilis Systems DVB-Titan [ 239.271226][ T5861] as10x_usb: device has been disconnected [ 239.315299][ T2197] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 239.359184][ T7667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.381247][ T9480] loop5: detected capacity change from 0 to 256 [ 239.391616][ T9480] exFAT-fs (loop5): invalid fs_name [ 239.413825][ T9480] exFAT-fs (loop5): failed to read boot sector [ 239.429974][ T9480] exFAT-fs (loop5): failed to recognize exfat type [ 239.443935][ T9480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1083'. [ 239.535950][ T2197] usb 5-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 239.550219][ T2197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.565436][ T2197] usb 5-1: Product: syz [ 239.573798][ T2197] usb 5-1: Manufacturer: syz [ 239.579045][ T2197] usb 5-1: SerialNumber: syz [ 239.860715][ T2197] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 239.903674][ T2197] usb 5-1: USB disconnect, device number 13 [ 240.286149][ T5861] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 240.455252][ T2197] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 240.478148][ T5861] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.505261][ T5861] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 240.527117][ T5861] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 240.545199][ T5861] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 240.554329][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.656520][ T2197] usb 5-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 240.669875][ T9492] loop6: detected capacity change from 0 to 32768 [ 240.676635][ T2197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.684673][ T2197] usb 5-1: Product: syz [ 240.695656][ T2197] usb 5-1: Manufacturer: syz [ 240.703048][ T2197] usb 5-1: SerialNumber: syz [ 240.734414][ T9492] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 240.956013][ T9492] XFS (loop6): Ending clean mount [ 240.998687][ T5861] cxacru 2-1:1.0: send of cm 0x91 failed (-71) [ 241.018704][ T5861] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 241.035188][ T5861] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 241.047238][ T5861] cxacru: probe of 2-1:1.0 failed with error -71 [ 241.074505][ T5861] usb 2-1: USB disconnect, device number 11 [ 241.134938][ T2197] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 241.283297][ T7667] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 241.639165][ T788] usb 5-1: USB disconnect, device number 14 [ 241.855994][ T9519] netlink: 'syz.5.1098': attribute type 1 has an invalid length. [ 242.033232][ T9524] loop6: detected capacity change from 0 to 128 [ 242.099307][ T7891] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 243.404547][ T9570] loop4: detected capacity change from 0 to 512 [ 243.482136][ T9570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.499757][ T9577] loop0: detected capacity change from 0 to 1 [ 243.521890][ T9570] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.556255][ T9577] ldm_validate_privheads(): Disk read failed. [ 243.562475][ T9577] loop0: [ 243.603784][ T9577] loop0: partition table partially beyond EOD, truncated [ 243.801522][ T5975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.972969][ T9592] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 3 [ 244.125728][ T9598] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1129'. [ 244.194421][ T9598] team0: Port device team_slave_1 removed [ 244.579273][ T9609] loop4: detected capacity change from 0 to 512 [ 244.635476][ T9609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.665272][ T9609] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.988414][ T5975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.011343][ T9603] loop1: detected capacity change from 0 to 32768 [ 245.114022][ T9603] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 245.145940][ T9605] loop6: detected capacity change from 0 to 40427 [ 245.206103][ T9605] F2FS-fs (loop6): invalid crc value [ 245.253170][ T9605] F2FS-fs (loop6): Found nat_bits in checkpoint [ 245.301698][ T9603] XFS (loop1): Ending clean mount [ 245.414957][ T9605] F2FS-fs (loop6): Start checkpoint disabled! [ 245.474941][ T9605] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 245.542247][ T5775] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 245.711812][ T1095] kworker/u4:6: attempt to access beyond end of device [ 245.711812][ T1095] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 245.727734][ T1095] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 246.039469][ T9638] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 246.421505][ T9657] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 246.968867][ T9675] loop1: detected capacity change from 0 to 512 [ 247.030520][ T9675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.057276][ T9675] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.093144][ T9677] loop5: detected capacity change from 0 to 4096 [ 247.192829][ T9677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.394356][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.492028][ T6264] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.585310][ T970] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 247.633879][ T9694] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 247.779968][ T970] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 247.816307][ T970] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 247.845522][ T970] usb 5-1: Product: syz [ 247.849747][ T970] usb 5-1: Manufacturer: syz [ 247.862839][ T970] usb 5-1: SerialNumber: syz [ 247.882508][ T970] usb 5-1: config 0 descriptor?? [ 247.893594][ T970] ch341 5-1:0.0: ch341-uart converter detected [ 248.024326][ T9707] syzkaller1: entered promiscuous mode [ 248.035357][ T9707] syzkaller1: entered allmulticast mode [ 248.181336][ T9713] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 248.252512][ T9715] netlink: 'syz.6.1174': attribute type 1 has an invalid length. [ 248.334240][ T9715] 8021q: adding VLAN 0 to HW filter on device bond3 [ 248.357331][ T9720] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1176'. [ 248.367053][ T9720] netlink: 'syz.5.1176': attribute type 7 has an invalid length. [ 248.374864][ T9720] netlink: 'syz.5.1176': attribute type 8 has an invalid length. [ 248.384431][ T9720] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1176'. [ 248.928345][ T970] ch341-uart ttyUSB0: failed to read break control: -71 [ 248.947394][ T970] ch341-uart: probe of ttyUSB0 failed with error -71 [ 248.970349][ T970] usb 5-1: USB disconnect, device number 15 [ 248.977970][ T970] ch341 5-1:0.0: device disconnected [ 249.656259][ T9749] netlink: 'syz.4.1187': attribute type 10 has an invalid length. [ 249.669537][ T9749] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.701622][ T9749] bridge_slave_1: left allmulticast mode [ 249.707480][ T9749] bridge_slave_1: left promiscuous mode [ 249.714061][ T9749] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.176399][ T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 250.369083][ T8] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 250.382446][ T8] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 250.394875][ T8] usb 2-1: config 0 has no interface number 0 [ 250.411402][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 250.431931][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.440156][ T8] usb 2-1: Product: syz [ 250.444621][ T8] usb 2-1: Manufacturer: syz [ 250.449587][ T8] usb 2-1: SerialNumber: syz [ 250.466567][ T8] usb 2-1: config 0 descriptor?? [ 250.768093][ T9787] capability: warning: `syz.5.1201' uses deprecated v2 capabilities in a way that may be insecure [ 250.864016][ T9789] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1202'. [ 250.901461][ T8] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 250.915701][ T8] usb 2-1: No valid video chain found. [ 251.054457][ T9798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1206'. [ 251.072394][ T9798] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1206'. [ 251.133978][ T970] usb 2-1: USB disconnect, device number 12 [ 251.298194][ T9807] FAULT_INJECTION: forcing a failure. [ 251.298194][ T9807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.314183][ T9807] CPU: 0 PID: 9807 Comm: syz.4.1210 Not tainted syzkaller #0 [ 251.321630][ T9807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.331764][ T9807] Call Trace: [ 251.335071][ T9807] [ 251.338050][ T9807] dump_stack_lvl+0x18c/0x250 [ 251.342752][ T9807] ? show_regs_print_info+0x20/0x20 [ 251.347970][ T9807] ? load_image+0x420/0x420 [ 251.352527][ T9807] ? __lock_acquire+0x7eb0/0x7eb0 [ 251.357603][ T9807] ? __virt_addr_valid+0x10c/0x380 [ 251.362744][ T9807] should_fail_ex+0x394/0x4c0 [ 251.367466][ T9807] _copy_to_user+0x2f/0xa0 [ 251.371944][ T9807] bpf_vlog_reverse_ubuf+0x2ad/0x3a0 [ 251.377296][ T9807] bpf_vlog_finalize+0x174/0x3e0 [ 251.382308][ T9807] btf_new_fd+0x4ca/0x9e0 [ 251.386707][ T9807] ? bpf_btf_show_fdinfo+0x80/0x80 [ 251.391879][ T9807] ? capable+0x88/0xe0 [ 251.396008][ T9807] __sys_bpf+0x670/0x890 [ 251.400316][ T9807] ? bpf_link_show_fdinfo+0x560/0x560 [ 251.405718][ T9807] ? lock_chain_count+0x20/0x20 [ 251.410591][ T9807] __x64_sys_bpf+0x7c/0x90 [ 251.415027][ T9807] do_syscall_64+0x55/0xb0 [ 251.419470][ T9807] ? clear_bhb_loop+0x40/0x90 [ 251.424192][ T9807] ? clear_bhb_loop+0x40/0x90 [ 251.428915][ T9807] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.434860][ T9807] RIP: 0033:0x7f0b4df9e559 [ 251.439310][ T9807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.458995][ T9807] RSP: 002b:00007f0b4ef34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 251.467447][ T9807] RAX: ffffffffffffffda RBX: 00007f0b4e225fa0 RCX: 00007f0b4df9e559 [ 251.475448][ T9807] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 251.483480][ T9807] RBP: 00007f0b4e0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 251.491506][ T9807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.499501][ T9807] R13: 00007f0b4e226038 R14: 00007f0b4e225fa0 R15: 00007ffd6fa46af8 [ 251.507505][ T9807] [ 251.710829][ T9814] loop4: detected capacity change from 0 to 512 [ 251.720044][ T9814] EXT4-fs: Ignoring removed nobh option [ 251.779845][ T9814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.869524][ T5975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.873025][ T9827] loop5: detected capacity change from 0 to 40427 [ 252.910838][ T9827] F2FS-fs (loop5): invalid crc value [ 252.919051][ T9827] F2FS-fs (loop5): Found nat_bits in checkpoint [ 253.050660][ T9827] F2FS-fs (loop5): Start checkpoint disabled! [ 253.106802][ T9827] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 253.459586][ T49] kworker/u4:3: attempt to access beyond end of device [ 253.459586][ T49] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 253.474299][ T49] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 253.514660][ T9864] loop4: detected capacity change from 0 to 256 [ 253.548625][ T9864] exfat: Bad value for 'uid' [ 253.588999][ T7891] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 253.630294][ T28] audit: type=1804 audit(1792037095.899:53): pid=9866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1233" name="/newroot/210/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1274 res=1 errno=0 [ 254.264675][ T9877] x86/PAT: syz.1.1237:9877 freeing invalid memtype [mem 0xfe004000-0xfe008fff] [ 254.278667][ T9877] x86/PAT: syz.1.1237:9877 freeing invalid memtype [mem 0xfe009000-0xfe00efff] [ 254.289522][ T9877] x86/PAT: syz.1.1237:9877 freeing invalid memtype [mem 0xfe000000-0xfe003fff] [ 254.410834][ T9882] loop1: detected capacity change from 0 to 8 [ 254.438845][ T9884] ip_tables: iptables: counters copy to user failed while replacing table [ 254.746626][ T9895] FAULT_INJECTION: forcing a failure. [ 254.746626][ T9895] name failslab, interval 1, probability 0, space 0, times 0 [ 254.764024][ T9895] CPU: 1 PID: 9895 Comm: syz.6.1245 Not tainted syzkaller #0 [ 254.771484][ T9895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.781589][ T9895] Call Trace: [ 254.784906][ T9895] [ 254.787902][ T9895] dump_stack_lvl+0x18c/0x250 [ 254.792622][ T9895] ? show_regs_print_info+0x20/0x20 [ 254.797865][ T9895] ? load_image+0x420/0x420 [ 254.802430][ T9895] ? __might_sleep+0xe0/0xe0 [ 254.807075][ T9895] ? __lock_acquire+0x7eb0/0x7eb0 [ 254.812160][ T9895] should_fail_ex+0x394/0x4c0 [ 254.816902][ T9895] should_failslab+0x9/0x20 [ 254.821467][ T9895] slab_pre_alloc_hook+0x59/0x300 [ 254.826545][ T9895] ? fanotify_alloc_overflow_event+0x4a/0x140 [ 254.832674][ T9895] __kmem_cache_alloc_node+0x53/0x250 [ 254.838106][ T9895] ? fanotify_alloc_overflow_event+0x4a/0x140 [ 254.844229][ T9895] kmalloc_trace+0x2a/0xe0 [ 254.848714][ T9895] fanotify_alloc_overflow_event+0x4a/0x140 [ 254.854678][ T9895] __se_sys_fanotify_init+0x3df/0x750 [ 254.860115][ T9895] do_syscall_64+0x55/0xb0 [ 254.864581][ T9895] ? clear_bhb_loop+0x40/0x90 [ 254.869330][ T9895] ? clear_bhb_loop+0x40/0x90 [ 254.874054][ T9895] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.880026][ T9895] RIP: 0033:0x7f99a4b9e559 [ 254.884488][ T9895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.904141][ T9895] RSP: 002b:00007f99a5b1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 254.912621][ T9895] RAX: ffffffffffffffda RBX: 00007f99a4e25fa0 RCX: 00007f99a4b9e559 [ 254.920670][ T9895] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000010 [ 254.928707][ T9895] RBP: 00007f99a4c358b0 R08: 0000000000000000 R09: 0000000000000000 [ 254.936732][ T9895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.944746][ T9895] R13: 00007f99a4e26038 R14: 00007f99a4e25fa0 R15: 00007ffeb894f918 [ 254.952790][ T9895] [ 255.297110][ T9910] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1252'. [ 255.865850][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.872230][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.280044][ T9947] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 256.298896][ T9947] overlayfs: failed to set xattr on upper [ 256.304688][ T9947] overlayfs: ...falling back to redirect_dir=nofollow. [ 256.335460][ T9947] overlayfs: ...falling back to index=off. [ 256.355279][ T9947] overlayfs: ...falling back to uuid=null. [ 256.361218][ T9947] overlayfs: ...falling back to xino=off. [ 256.936027][ T9963] loop5: detected capacity change from 0 to 1024 [ 256.974428][ T9963] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 257.069193][ T9963] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.173242][ T9963] EXT4-fs error (device loop5): ext4_find_dest_de:2117: inode #12: block 7: comm syz.5.1272: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 257.212812][ T9963] EXT4-fs (loop5): Remounting filesystem read-only [ 257.242195][ T9975] overlayfs: failed to get metacopy (-5) [ 257.282294][ T9977] 9p: Unknown uid 00000000004294967295 [ 257.342842][ T9979] bridge_slave_1: left allmulticast mode [ 257.385318][ T9979] bridge_slave_1: left promiscuous mode [ 257.392567][ T9979] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.486061][ T9979] bond0: (slave bond_slave_0): Releasing backup interface [ 257.610366][ T9979] team0: Port device team_slave_0 removed [ 257.651870][ T9979] team0: Port device team_slave_1 removed [ 257.666261][ T9979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.693128][ T9979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.728433][ T9979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.736761][ T9979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.978365][ T9973] loop6: detected capacity change from 0 to 40427 [ 257.993752][ T9973] F2FS-fs (loop6): Fix alignment : done, start(4096) end(16896) block(12288) [ 258.028742][ T7636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.042408][ T9973] F2FS-fs (loop6): invalid crc value [ 258.053259][ T9973] F2FS-fs (loop6): invalid crc value [ 258.065229][ T9973] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 258.346117][ T7734] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.537342][ T7734] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.749725][ T7734] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.901943][ T7734] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.514236][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 259.537553][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 259.555283][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 259.577553][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 259.596444][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 259.605927][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 260.378004][T10012] rxe_eth0 speed is unknown, defaulting to 1000 [ 261.391849][T10063] loop1: detected capacity change from 0 to 1024 [ 261.459204][T10063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.552298][T10068] loop4: detected capacity change from 0 to 1024 [ 261.685481][ T51] Bluetooth: hci1: command tx timeout [ 261.843629][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.914800][ T5975] hfsplus: node 4:3 still has 1 user(s)! [ 261.955703][ T788] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 262.131483][ T7734] bond1: (slave gretap1): Releasing active interface [ 262.189324][ T788] usb 7-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 262.225566][ T788] usb 7-1: config 1 interface 0 has no altsetting 0 [ 262.258313][ T788] usb 7-1: string descriptor 0 read error: -22 [ 262.264663][ T788] usb 7-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.40 [ 262.289545][ T788] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.335680][T10072] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 263.026836][ T788] cypress 0003:04B4:ED81.0006: global environment stack underflow [ 263.061546][ T788] cypress 0003:04B4:ED81.0006: item 0 2 1 11 parsing failed [ 263.094342][ T788] cypress 0003:04B4:ED81.0006: parse failed [ 263.144513][ T788] cypress: probe of 0003:04B4:ED81.0006 failed with error -22 [ 263.182111][T10012] chnl_net:caif_netlink_parms(): no params data found [ 263.295957][ T970] usb 7-1: USB disconnect, device number 3 [ 263.744765][ T7734] hsr_slave_0: left promiscuous mode [ 263.756901][ T7734] hsr_slave_1: left promiscuous mode [ 263.767451][ T51] Bluetooth: hci1: command tx timeout [ 263.775593][ T7734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.783054][ T7734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.796031][ T7734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.803500][ T7734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.811812][ T7734] bridge_slave_1: left allmulticast mode [ 263.817786][ T7734] bridge_slave_1: left promiscuous mode [ 263.823628][ T7734] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.834692][ T7734] bridge_slave_0: left allmulticast mode [ 263.845277][ T7734] bridge_slave_0: left promiscuous mode [ 263.851208][ T7734] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.919858][ T7734] veth1_macvtap: left promiscuous mode [ 263.935710][ T7734] veth0_macvtap: left promiscuous mode [ 263.944271][ T7734] veth1_vlan: left promiscuous mode [ 263.959795][ T7734] veth0_vlan: left promiscuous mode [ 264.253340][ T28] audit: type=1326 audit(1792037106.529:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.4.1322" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b4df9e559 code=0x0 [ 264.485699][ T7734] bond1 (unregistering): Released all slaves [ 265.328776][T10157] loop4: detected capacity change from 0 to 512 [ 265.351979][T10157] EXT4-fs: Ignoring removed bh option [ 265.362712][T10157] EXT4-fs (loop4): Test dummy encryption mode enabled [ 265.373460][T10157] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 265.385307][ T2197] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 265.474845][ T7734] team0 (unregistering): Port device team_slave_1 removed [ 265.552793][ T7734] team0 (unregistering): Port device team_slave_0 removed [ 265.575384][ T2197] usb 7-1: Using ep0 maxpacket: 16 [ 265.586426][ T2197] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 265.600874][ T2197] usb 7-1: config 0 has no interface number 0 [ 265.608709][ T2197] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 265.625735][ T2197] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 265.649529][ T2197] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 265.662351][ T2197] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.670852][ T2197] usb 7-1: Product: syz [ 265.676404][ T7734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.677207][ T2197] usb 7-1: Manufacturer: syz [ 265.695839][ T2197] usb 7-1: SerialNumber: syz [ 265.727451][ T2197] usb 7-1: config 0 descriptor?? [ 265.734428][T10153] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 265.742492][T10153] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 265.803111][ T7734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.845393][ T51] Bluetooth: hci1: command tx timeout [ 265.965360][T10153] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 265.972828][T10153] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 266.225722][ T2197] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 266.285337][ T7734] bond0 (unregistering): Released all slaves [ 266.426938][T10012] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.434121][T10012] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.441943][T10012] bridge_slave_0: entered allmulticast mode [ 266.449942][T10012] bridge_slave_0: entered promiscuous mode [ 266.486106][T10012] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.493371][T10012] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.525520][T10012] bridge_slave_1: entered allmulticast mode [ 266.533260][T10012] bridge_slave_1: entered promiscuous mode [ 266.635064][T10012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.698499][T10012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.824924][T10012] team0: Port device team_slave_0 added [ 266.849472][T10012] team0: Port device team_slave_1 added [ 266.969582][T10012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.982939][ T23] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 266.996973][T10012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.043880][ T2197] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 267.065483][ T2197] asix: probe of 7-1:0.34 failed with error -71 [ 267.094043][ T970] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 267.131179][T10012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.152814][ T2197] usb 7-1: USB disconnect, device number 4 [ 267.212396][T10012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.256065][T10012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.268120][ T788] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 267.306894][T10012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.401436][T10012] hsr_slave_0: entered promiscuous mode [ 267.407341][ T970] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 267.416763][T10012] hsr_slave_1: entered promiscuous mode [ 267.423216][T10012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.437193][T10012] Cannot create hsr debugfs directory [ 267.796078][T10177] ceph: No mds server is up or the cluster is laggy [ 267.796865][T10174] ceph: No mds server is up or the cluster is laggy [ 267.837192][ T23] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 267.847966][T10012] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 267.880095][T10012] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 267.925505][ T51] Bluetooth: hci1: command tx timeout [ 267.949729][T10012] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 268.012178][T10205] loop4: detected capacity change from 0 to 512 [ 268.030497][T10012] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 268.050224][T10205] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 268.166632][T10205] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.1342: invalid indirect mapped block 32768 (level 2) [ 268.206148][T10211] loop1: detected capacity change from 0 to 256 [ 268.275706][T10205] EXT4-fs (loop4): 1 orphan inode deleted [ 268.289244][T10205] EXT4-fs (loop4): 1 truncate cleaned up [ 268.320017][T10205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.321049][T10211] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 268.515877][ T5975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.613595][T10012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.691094][T10012] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.711956][ T7732] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.719242][ T7732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.782929][ T7732] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.790125][ T7732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.134941][T10238] loop6: detected capacity change from 0 to 256 [ 269.390774][T10012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.164445][T10012] veth0_vlan: entered promiscuous mode [ 270.201931][T10012] veth1_vlan: entered promiscuous mode [ 270.298018][T10012] veth0_macvtap: entered promiscuous mode [ 270.320812][T10012] veth1_macvtap: entered promiscuous mode [ 270.389404][T10012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.403060][T10012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.424871][T10012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.486729][T10012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.505037][T10012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.518072][T10012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.558912][T10012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.602281][T10012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.632252][T10012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.662868][T10012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.679810][T10012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.715397][T10012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.748609][T10012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.784407][T10012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.836367][T10012] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.857163][T10012] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.869877][T10012] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.935201][T10012] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.217134][ T2997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.239348][ T2997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.311507][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.324439][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.488373][T10311] loop7: detected capacity change from 0 to 32768 [ 272.575378][T10311] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 272.780761][T10311] XFS (loop7): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 272.847445][T10311] XFS (loop7): Starting recovery (logdev: internal) [ 272.928048][T10311] XFS (loop7): Ending recovery (logdev: internal) [ 272.949729][T10311] XFS (loop7): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 272.971131][T10311] XFS (loop7): Failed to initialize disk quotas. [ 273.143372][T10012] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 273.682209][T10386] syzkaller1: entered promiscuous mode [ 273.695548][T10386] syzkaller1: entered allmulticast mode [ 273.714675][T10384] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 273.731034][T10384] syzkaller1: Refused to change device type [ 274.238190][T10401] kvm: apic: phys broadcast and lowest prio [ 274.745392][T10430] loop6: detected capacity change from 0 to 512 [ 274.794195][T10431] af_packet: tpacket_rcv: packet too big, clamped from 2916 to 4294967286. macoff=82 [ 274.843615][T10430] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.876752][T10430] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.113954][ T7667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.290728][T10426] loop7: detected capacity change from 0 to 40427 [ 275.318434][T10426] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 275.345224][T10426] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 275.379416][T10426] F2FS-fs (loop7): invalid crc value [ 275.403330][T10426] F2FS-fs (loop7): Found nat_bits in checkpoint [ 275.491164][T10426] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 275.504819][T10426] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 275.619406][ T28] audit: type=1804 audit(1792037117.889:55): pid=10426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1401" name="/newroot/6/file0/bus" dev="loop7" ino=10 res=1 errno=0 [ 275.842166][T10460] loop4: detected capacity change from 0 to 512 [ 275.894709][T10460] EXT4-fs (loop4): orphan cleanup on readonly fs [ 275.939743][T10460] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 275.952337][T10460] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 275.961973][T10460] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1408: Failed to acquire dquot type 1 [ 276.006243][T10460] EXT4-fs (loop4): 1 truncate cleaned up [ 276.013431][T10460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 276.461710][ T5975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.862163][T10466] loop6: detected capacity change from 0 to 32768 [ 276.884749][T10466] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1412 (10466) [ 276.963589][T10466] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 276.996401][T10466] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 277.020186][T10466] BTRFS info (device loop6): turning off barriers [ 277.050129][T10466] BTRFS info (device loop6): setting nodatasum [ 277.065513][T10466] BTRFS info (device loop6): metadata ratio 772 [ 277.071835][T10466] BTRFS info (device loop6): setting nodatacow, compression disabled [ 277.105243][T10466] BTRFS info (device loop6): setting datacow [ 277.121863][T10466] BTRFS info (device loop6): enabling disk space caching [ 277.141899][T10466] BTRFS info (device loop6): force clearing of disk cache [ 277.155803][T10466] BTRFS info (device loop6): disk space caching is enabled [ 277.261890][T10501] syzkaller1: entered promiscuous mode [ 277.275439][T10501] syzkaller1: entered allmulticast mode [ 277.281533][T10466] BTRFS info (device loop6): enabling ssd optimizations [ 277.331370][ T28] audit: type=1326 audit(1792037119.609:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10482 comm="syz.4.1418" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b4df9e559 code=0x0 [ 277.340644][T10466] BTRFS info (device loop6): rebuilding free space tree [ 277.423126][T10466] BTRFS info (device loop6): disabling free space tree [ 277.454608][T10466] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 277.475252][T10466] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 278.458658][ T7667] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 278.720335][T10545] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 278.727067][T10545] syzkaller1: Refused to change device type [ 279.285557][T10567] FAULT_INJECTION: forcing a failure. [ 279.285557][T10567] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 279.331193][T10567] CPU: 1 PID: 10567 Comm: syz.1.1443 Not tainted syzkaller #0 [ 279.338736][T10567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 279.348829][T10567] Call Trace: [ 279.352136][T10567] [ 279.355104][T10567] dump_stack_lvl+0x18c/0x250 [ 279.359823][T10567] ? show_regs_print_info+0x20/0x20 [ 279.365049][T10567] ? load_image+0x420/0x420 [ 279.369591][T10567] ? __lock_acquire+0x7eb0/0x7eb0 [ 279.374652][T10567] should_fail_ex+0x394/0x4c0 [ 279.379363][T10567] prepare_alloc_pages+0x1e1/0x5b0 [ 279.384501][T10567] __alloc_pages+0x134/0x460 [ 279.389118][T10567] ? zone_statistics+0x170/0x170 [ 279.394084][T10567] ? lockdep_softirqs_off+0x440/0x440 [ 279.399484][T10567] __kmalloc_large_node+0x8c/0x1f0 [ 279.404630][T10567] ? io_alloc_hash_table+0x2d/0xb0 [ 279.409766][T10567] __kmalloc+0x114/0x240 [ 279.414047][T10567] io_alloc_hash_table+0x2d/0xb0 [ 279.419126][T10567] io_ring_ctx_alloc+0x132/0xc10 [ 279.424093][T10567] io_uring_create+0x2df/0x1330 [ 279.428966][T10567] ? __might_fault+0xc6/0x120 [ 279.433687][T10567] ? __might_fault+0xaa/0x120 [ 279.438474][T10567] __se_sys_io_uring_setup+0x29f/0x2b0 [ 279.443952][T10567] ? __x64_sys_io_uring_setup+0x60/0x60 [ 279.449532][T10567] ? lockdep_hardirqs_on+0x98/0x150 [ 279.454760][T10567] do_syscall_64+0x55/0xb0 [ 279.459194][T10567] ? clear_bhb_loop+0x40/0x90 [ 279.463890][T10567] ? clear_bhb_loop+0x40/0x90 [ 279.468594][T10567] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 279.474536][T10567] RIP: 0033:0x7ff5fef9e559 [ 279.478978][T10567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.498622][T10567] RSP: 002b:00007ff5ffdf0fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 279.507083][T10567] RAX: ffffffffffffffda RBX: 0000200000000200 RCX: 00007ff5fef9e559 [ 279.515091][T10567] RDX: 00002000000002c0 RSI: 0000200000000200 RDI: 000000000000424a [ 279.523085][T10567] RBP: 00007ff5ff0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 279.531083][T10567] R10: 0000200000000300 R11: 0000000000000206 R12: 00002000000002c0 [ 279.539079][T10567] R13: 0000200000000300 R14: 0000200000000280 R15: 00007ffc8954ed18 [ 279.547093][T10567] [ 279.555410][ T970] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 279.577457][ T28] audit: type=1326 audit(1792037121.859:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10551 comm="syz.6.1435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f99a4b9e559 code=0x0 [ 279.749467][ T970] usb 8-1: config 0 interface 0 has no altsetting 0 [ 279.756887][ T970] usb 8-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 279.782249][ T970] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.804349][ T970] usb 8-1: config 0 descriptor?? [ 279.845811][T10574] netlink: 'syz.1.1447': attribute type 1 has an invalid length. [ 279.911978][T10574] 8021q: adding VLAN 0 to HW filter on device bond1 [ 279.990313][T10576] bond1: (slave gretap1): making interface the new active one [ 280.016709][T10576] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 280.062564][T10579] FAULT_INJECTION: forcing a failure. [ 280.062564][T10579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.145152][T10579] CPU: 1 PID: 10579 Comm: syz.6.1448 Not tainted syzkaller #0 [ 280.152695][T10579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 280.162798][T10579] Call Trace: [ 280.166124][T10579] [ 280.169098][T10579] dump_stack_lvl+0x18c/0x250 [ 280.173832][T10579] ? show_regs_print_info+0x20/0x20 [ 280.179087][T10579] ? load_image+0x420/0x420 [ 280.183655][T10579] ? __might_fault+0xaa/0x120 [ 280.188385][T10579] ? __lock_acquire+0x7eb0/0x7eb0 [ 280.193467][T10579] should_fail_ex+0x394/0x4c0 [ 280.198224][T10579] _copy_to_user+0x2f/0xa0 [ 280.202693][T10579] do_timer_create+0xcfd/0x1300 [ 280.207602][T10579] ? do_timer_create+0x61d/0x1300 [ 280.212672][T10579] ? __ia32_sys_clock_nanosleep_time32+0xb0/0xb0 [ 280.219085][T10579] ? __might_fault+0xaa/0x120 [ 280.224259][T10579] ? __might_fault+0xc6/0x120 [ 280.228985][T10579] ? __might_fault+0xaa/0x120 [ 280.233743][T10579] __x64_sys_timer_create+0x16a/0x1c0 [ 280.239170][T10579] ? posix_timer_event+0x100/0x100 [ 280.244339][T10579] ? lockdep_hardirqs_on+0x98/0x150 [ 280.249599][T10579] do_syscall_64+0x55/0xb0 [ 280.254072][T10579] ? clear_bhb_loop+0x40/0x90 [ 280.258804][T10579] ? clear_bhb_loop+0x40/0x90 [ 280.263538][T10579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.269505][T10579] RIP: 0033:0x7f99a4b9e559 [ 280.273972][T10579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.293715][T10579] RSP: 002b:00007f99a5b1c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 280.302228][T10579] RAX: ffffffffffffffda RBX: 00007f99a4e25fa0 RCX: 00007f99a4b9e559 [ 280.310250][T10579] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000000 [ 280.318267][T10579] RBP: 00007f99a4c358b0 R08: 0000000000000000 R09: 0000000000000000 [ 280.326294][T10579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.334308][T10579] R13: 00007f99a4e26038 R14: 00007f99a4e25fa0 R15: 00007ffeb894f918 [ 280.342341][T10579] [ 280.504875][T10572] loop4: detected capacity change from 0 to 32768 [ 280.531593][T10572] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1446 (10572) [ 280.620983][T10572] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 280.656636][ T970] usbhid 8-1:0.0: can't add hid device: -71 [ 280.664250][T10572] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 280.683316][ T970] usbhid: probe of 8-1:0.0 failed with error -71 [ 280.697706][T10572] BTRFS info (device loop4): turning off barriers [ 280.718038][T10572] BTRFS info (device loop4): setting nodatasum [ 280.724278][T10572] BTRFS info (device loop4): metadata ratio 772 [ 280.733970][ T970] usb 8-1: USB disconnect, device number 2 [ 280.784026][T10572] BTRFS info (device loop4): setting nodatacow, compression disabled [ 280.810131][T10572] BTRFS info (device loop4): setting datacow [ 280.831047][T10572] BTRFS info (device loop4): enabling disk space caching [ 280.846243][T10572] BTRFS info (device loop4): force clearing of disk cache [ 280.853573][T10572] BTRFS info (device loop4): disk space caching is enabled [ 280.955574][T10572] BTRFS info (device loop4): enabling ssd optimizations [ 280.964717][T10572] BTRFS info (device loop4): rebuilding free space tree [ 280.984966][T10572] BTRFS info (device loop4): disabling free space tree [ 280.993947][T10572] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 281.014111][T10572] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 281.423559][T10612] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 281.434372][T10612] syzkaller1: Refused to change device type [ 281.436491][T10609] kvm: apic: phys broadcast and lowest prio [ 281.635352][ T2197] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 281.736156][ T5975] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 281.841956][ T2197] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 281.885433][ T2197] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.903556][ T2197] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.953110][ T2197] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 281.987516][ T2197] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 281.998257][ T2197] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 282.014109][ T2197] usb 7-1: Manufacturer: syz [ 282.045813][ T2197] usb 7-1: config 0 descriptor?? [ 282.486483][ T2197] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 282.494535][ T2197] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 282.539688][ T2197] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 283.255256][ T788] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 283.471315][ T788] usb 5-1: config 0 interface 0 has no altsetting 0 [ 283.485425][ T788] usb 5-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 283.494677][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.514318][T10646] netlink: 'syz.7.1465': attribute type 1 has an invalid length. [ 283.526910][ T788] usb 5-1: config 0 descriptor?? [ 283.537166][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 283.568589][T10644] FAULT_INJECTION: forcing a failure. [ 283.568589][T10644] name failslab, interval 1, probability 0, space 0, times 0 [ 283.607328][T10644] CPU: 1 PID: 10644 Comm: syz.1.1466 Not tainted syzkaller #0 [ 283.614871][T10644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 283.624984][T10644] Call Trace: [ 283.628302][T10644] [ 283.631270][T10644] dump_stack_lvl+0x18c/0x250 [ 283.636005][T10644] ? show_regs_print_info+0x20/0x20 [ 283.641277][T10644] ? load_image+0x420/0x420 [ 283.645837][T10644] ? __might_sleep+0xe0/0xe0 [ 283.650477][T10644] ? __lock_acquire+0x7eb0/0x7eb0 [ 283.655586][T10644] should_fail_ex+0x394/0x4c0 [ 283.660336][T10644] should_failslab+0x9/0x20 [ 283.664897][T10644] slab_pre_alloc_hook+0x59/0x300 [ 283.669976][T10644] kmem_cache_alloc+0x5a/0x2c0 [ 283.674784][T10644] ? do_timer_create+0x19d/0x1300 [ 283.679845][T10644] do_timer_create+0x19d/0x1300 [ 283.684765][T10644] ? __might_fault+0xaa/0x120 [ 283.689491][T10644] ? __lock_acquire+0x7eb0/0x7eb0 [ 283.694587][T10644] ? __ia32_sys_clock_nanosleep_time32+0xb0/0xb0 [ 283.700986][T10644] ? __might_fault+0xaa/0x120 [ 283.705711][T10644] ? __might_fault+0xc6/0x120 [ 283.710436][T10644] ? __might_fault+0xaa/0x120 [ 283.715166][T10644] __x64_sys_timer_create+0x16a/0x1c0 [ 283.720593][T10644] ? posix_timer_event+0x100/0x100 [ 283.725757][T10644] ? lockdep_hardirqs_on+0x98/0x150 [ 283.731010][T10644] do_syscall_64+0x55/0xb0 [ 283.735468][T10644] ? clear_bhb_loop+0x40/0x90 [ 283.740185][T10644] ? clear_bhb_loop+0x40/0x90 [ 283.744913][T10644] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.750862][T10644] RIP: 0033:0x7ff5fef9e559 [ 283.755335][T10644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.774988][T10644] RSP: 002b:00007ff5ffdf1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 283.783454][T10644] RAX: ffffffffffffffda RBX: 00007ff5ff225fa0 RCX: 00007ff5fef9e559 [ 283.791490][T10644] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000000 [ 283.799517][T10644] RBP: 00007ff5ff0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 283.807548][T10644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.815583][T10644] R13: 00007ff5ff226038 R14: 00007ff5ff225fa0 R15: 00007ffc8954ed18 [ 283.823616][T10644] [ 284.325388][ T788] usbhid 5-1:0.0: can't add hid device: -71 [ 284.331764][ T788] usbhid: probe of 5-1:0.0 failed with error -71 [ 284.381861][ T788] usb 5-1: USB disconnect, device number 16 [ 284.704423][ T9] usb 7-1: USB disconnect, device number 5 [ 284.875548][T10650] loop7: detected capacity change from 0 to 32768 [ 284.902954][T10650] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.1468 (10650) [ 284.945498][T10650] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 284.965427][T10650] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 284.991025][T10650] BTRFS info (device loop7): turning off barriers [ 285.006821][T10650] BTRFS info (device loop7): setting nodatasum [ 285.036914][T10650] BTRFS info (device loop7): metadata ratio 772 [ 285.076453][T10650] BTRFS info (device loop7): setting nodatacow, compression disabled [ 285.099948][T10650] BTRFS info (device loop7): setting datacow [ 285.127052][T10650] BTRFS info (device loop7): enabling disk space caching [ 285.134150][T10650] BTRFS info (device loop7): force clearing of disk cache [ 285.185310][T10650] BTRFS info (device loop7): disk space caching is enabled [ 285.235573][T10666] FAULT_INJECTION: forcing a failure. [ 285.235573][T10666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.307648][T10666] CPU: 0 PID: 10666 Comm: syz.6.1477 Not tainted syzkaller #0 [ 285.315212][T10666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 285.325322][T10666] Call Trace: [ 285.328645][T10666] [ 285.331613][T10666] dump_stack_lvl+0x18c/0x250 [ 285.336371][T10666] ? show_regs_print_info+0x20/0x20 [ 285.341626][T10666] ? load_image+0x420/0x420 [ 285.346201][T10666] ? __might_fault+0xaa/0x120 [ 285.350948][T10666] ? __lock_acquire+0x7eb0/0x7eb0 [ 285.356033][T10666] ? __virt_addr_valid+0x10c/0x380 [ 285.361211][T10666] should_fail_ex+0x394/0x4c0 [ 285.365966][T10666] _copy_to_user+0x2f/0xa0 [ 285.370434][T10666] bpf_verifier_vlog+0x5ac/0x840 [ 285.375445][T10666] __btf_verifier_log+0xe3/0x140 [ 285.380444][T10666] ? sort_r+0x17f5/0x1810 [ 285.384831][T10666] ? btf_check_sec_info+0x350/0x350 [ 285.390109][T10666] btf_datasec_check_meta+0x70b/0xb50 [ 285.395577][T10666] btf_check_all_metas+0x371/0xaf0 [ 285.400751][T10666] btf_parse_type_sec+0xfc/0x1960 [ 285.405844][T10666] ? btf_check_sec_info+0x350/0x350 [ 285.411118][T10666] ? __virt_addr_valid+0x10c/0x380 [ 285.416293][T10666] ? btf_verifier_log+0x1a0/0x1a0 [ 285.421392][T10666] ? btf_parse_hdr+0x545/0x700 [ 285.426206][T10666] ? btf_parse_str_sec+0x20d/0x2a0 [ 285.431391][T10666] btf_new_fd+0x440/0x9e0 [ 285.435790][T10666] ? bpf_btf_show_fdinfo+0x80/0x80 [ 285.440967][T10666] ? capable+0x88/0xe0 [ 285.445127][T10666] __sys_bpf+0x670/0x890 [ 285.449438][T10666] ? bpf_link_show_fdinfo+0x560/0x560 [ 285.454894][T10666] ? lock_chain_count+0x20/0x20 [ 285.459806][T10666] __x64_sys_bpf+0x7c/0x90 [ 285.464280][T10666] do_syscall_64+0x55/0xb0 [ 285.468743][T10666] ? clear_bhb_loop+0x40/0x90 [ 285.473456][T10666] ? clear_bhb_loop+0x40/0x90 [ 285.478169][T10666] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.484102][T10666] RIP: 0033:0x7f99a4b9e559 [ 285.488560][T10666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.508203][T10666] RSP: 002b:00007f99a5b1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 285.516735][T10666] RAX: ffffffffffffffda RBX: 00007f99a4e25fa0 RCX: 00007f99a4b9e559 [ 285.524727][T10666] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 285.532723][T10666] RBP: 00007f99a4c358b0 R08: 0000000000000000 R09: 0000000000000000 [ 285.540711][T10666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.548699][T10666] R13: 00007f99a4e26038 R14: 00007f99a4e25fa0 R15: 00007ffeb894f918 [ 285.556707][T10666] [ 285.679060][T10650] BTRFS info (device loop7): enabling ssd optimizations [ 285.723213][T10650] BTRFS info (device loop7): rebuilding free space tree [ 285.769590][T10650] BTRFS info (device loop7): disabling free space tree [ 285.795669][T10650] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 285.816876][T10650] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 285.895421][ T5787] unregister_netdevice: waiting for syz_tun to become free. Usage count = 3 [ 285.904836][ T5787] ref_tracker: syz_tun@ffff88805e8c85b8 has 1/2 users at [ 285.904836][ T5787] netdev_get_by_index+0x79/0xa0 [ 285.904836][ T5787] fib6_nh_init+0x1ff/0x1fe0 [ 285.904836][ T5787] ip6_route_info_create+0x96c/0x1260 [ 285.904836][ T5787] addrconf_f6i_alloc+0x1fa/0x440 [ 285.904836][ T5787] ipv6_add_addr+0x5a4/0x10d0 [ 285.904836][ T5787] inet6_addr_add+0x563/0xb30 [ 285.904836][ T5787] inet6_rtm_newaddr+0x6fd/0x9d0 [ 285.904836][ T5787] rtnetlink_rcv_msg+0x843/0xf90 [ 285.904836][ T5787] netlink_rcv_skb+0x235/0x4c0 [ 285.904836][ T5787] netlink_unicast+0x7b1/0x930 [ 285.904836][ T5787] netlink_sendmsg+0x8d0/0xbf0 [ 285.904836][ T5787] __sys_sendto+0x4a9/0x6b0 [ 285.904836][ T5787] __x64_sys_sendto+0xde/0xf0 [ 285.904836][ T5787] do_syscall_64+0x55/0xb0 [ 285.904836][ T5787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.904836][ T5787] [ 285.990763][ T5787] ref_tracker: syz_tun@ffff88805e8c85b8 has 1/2 users at [ 285.990763][ T5787] ipv6_add_dev+0x407/0x11f0 [ 285.990763][ T5787] addrconf_notify+0x67b/0x1010 [ 285.990763][ T5787] notifier_call_chain+0x18f/0x380 [ 285.990763][ T5787] register_netdevice+0x1670/0x1ba0 [ 285.990763][ T5787] tun_set_iff+0x82b/0xea0 [ 285.990763][ T5787] __tun_chr_ioctl+0x7e0/0x2070 [ 285.990763][ T5787] __se_sys_ioctl+0xfd/0x170 [ 285.990763][ T5787] do_syscall_64+0x55/0xb0 [ 285.990763][ T5787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.990763][ T5787] [ 286.835547][T10012] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf