last executing test programs: 32.406572391s ago: executing program 1 (id=287): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x5}, [@RTA_NH_ID={0x8, 0x1e, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x100}}}}]}, 0x38}}, 0x0) 32.171315307s ago: executing program 1 (id=288): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x0, 0x17d, &(0x7f0000001ac0)="$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") 30.473443839s ago: executing program 1 (id=291): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x4) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000003380)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f000001c380)=0x410000002) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) socket(0x28, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f000001c580), 0x800, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcd, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xcbed, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 28.577832646s ago: executing program 1 (id=298): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./control\x00', 0x210000, &(0x7f0000000940)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000001240), &(0x7f0000001280)=@md5={0x1, "e26fcbe6b5b7c74839e2149181707b58"}, 0x11, 0x2) 27.99837673s ago: executing program 1 (id=301): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x20040040) 13.840060429s ago: executing program 1 (id=333): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000180)=[{r0, 0x3004}], 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) 13.482145868s ago: executing program 32 (id=333): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000180)=[{r0, 0x3004}], 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) 7.193808423s ago: executing program 0 (id=351): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000014c0), 0x101000, 0x0) read$FUSE(r0, &(0x7f0000001500)={0x2020}, 0x2020) 6.417880502s ago: executing program 3 (id=355): syz_open_dev$vbi(0x0, 0x2, 0x2) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc0102030109021b00010000000009044400012e", @ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) recvmmsg(r1, 0x0, 0x0, 0x700000000000000, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x140, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in6=@local, @in6=@empty, 0x7, 0x4000, 0x4e24, 0x8001, 0x0, 0x80, 0x0, 0x87}, {@in6=@local, 0x0, 0x32}, @in6=@loopback, {0x323, 0x80000001, 0x0, 0xc0, 0x204000, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x70bd29, 0x3503, 0xa, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001080)={0x0}}, 0x20040000) 6.417064792s ago: executing program 0 (id=356): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000100)="681e", 0xf000}, {0x0, 0x2e}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r3, &(0x7f0000000070)='syz0:12', 0x7) 6.237737506s ago: executing program 2 (id=357): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pidfd_send_signal(r0, 0x0, 0x0, 0x0) 4.368280872s ago: executing program 2 (id=359): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x40, &(0x7f0000000540)={[{@redirect_dir_off}, {@userxattr}]}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/lo/dev_id\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/veth0/queues/tx-1/xps_cpus\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='3', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r2, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) writev(r3, &(0x7f0000001940), 0x0) openat$kvm(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) 3.447607625s ago: executing program 0 (id=361): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) statfs(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)=""/216) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) poll(&(0x7f00000006c0)=[{r3, 0x251}], 0x1, 0xdb3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000740)) shutdown(r4, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000780)={0x2000200b}) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000880), 0x64) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) 3.405845766s ago: executing program 4 (id=362): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000080)=0x6, 0x4) 3.405685846s ago: executing program 2 (id=363): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x12) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 3.355362048s ago: executing program 3 (id=364): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x2, 0x11) bind$inet(r0, &(0x7f0000000480)={0x2, 0x2710, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="0d0a436168882d49653a20748c9c8cf417657393ddf9799dd08603e91b021ea3d5fd43fc9e8be045e0252eb1bfa4952cdbeea24077523ffa50cfa9d00f59f11730a30a1c30", 0x45, 0x0, &(0x7f0000000540)={0x2, 0x4e24, @remote}, 0x10) 3.337140788s ago: executing program 4 (id=365): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./dev\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/kmsg\x00', 0x1, 0x0) poll(&(0x7f0000000500)=[{r0}], 0x1, 0xa) 3.105842984s ago: executing program 4 (id=366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000000206010800000000000001000500000005000100070000000900020073797a30000000000c00078008001240fffffffe050004000000000012000300686173683a6e65742c706f7274000000050005"], 0x58}, 0x1, 0x0, 0x0, 0x40280d5}, 0x0) 3.105724944s ago: executing program 3 (id=367): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r0, 0x100000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.992871386s ago: executing program 4 (id=368): sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x22020600) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000440), 0x20200, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000280)={0x2, "fa02790d2a69a2610f0200000000000000110001000000c642000000677c00", 0xffffffffffffffff}) ppoll(&(0x7f0000000400)=[{r2, 0x8021}], 0x1, &(0x7f0000000480)={0x0, 0x3938700}, 0x0, 0x0) 2.542485377s ago: executing program 3 (id=369): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="18000000010003", 0x7) 2.354621962s ago: executing program 3 (id=370): mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0) r0 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_init1(0x80000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) 2.121465848s ago: executing program 2 (id=371): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x208000, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0xfd, 0x6a5, &(0x7f0000001280)="$eJzs3UtsHHcdB/DvrDdrO6DUaZO2IKRGjYigEYmdpSQIEAEhlEOFInHphYOVOI2VTVo5LnIrRFyeV4499FCEwqEn1ANSEYeKckZCQhy45B6Ju08smtnZ9Tp+xJvEXRs+H2l2/jP/129+npl9ydoA/7cuvZpDqyly6fQrK+X2vbvtzr277Zv9cpLJJI2k2VuluJUUnyQX01vyuXJnPVyx3Twv3//ovVPvftDubTXrpWrf2KnfJlu2XK2XnEgyUa8fw4bxrjz2eMUg7jJhJ/uJg3HrbrI6SvfdX7fAvlX0njc3mUkOJ5mqXwekvjs0Pt3onryR7nIAAABwQD21lrWs5Mi44wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICDpP79/6JeGv3yiRT93/9vVftaVfPWuON9XB+POwAAAAAAAAAAeAJeWMtaVnKkv90tqu/8X6w2jlWPn8mbuZ2FLOVMVjKf5SxnKXNJZqr6d6rH1sr88vLS3HY9u93une5E1fPcoGeGep7bFFqxc+Tdycc+eAAAAAAAAAA4YHb4svxnubT+/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOwHRTLRW1XLsX55Jo1mkqkkrbLdavLnfvkg+3jcAQAAAMCn4Km1rGUlR4r/9La7RfWe/9nqff9U3sytLGcxy+lkIVerzwJ67/obf19td+7dbd8sl83jfuffI4VRjZjeZw9bzzxbtThet19N8v38MKdzIpezlMX8OPNZzkJO5HtVaT5FZqqx/vWtpI5zU7yT5cPFDaFcflisz1eRTOdaFqvYzuTK4GOQRr/N0Gx/bCUbMtTIO2V2im/XHpqdXtavDm39ZrB3P5ipDurQICOzde7LbBy9t13uK73zZHL0mZr1nsbgM6hjO800cs57DtfrMte/Gs75C7uNeK8M57yM6lwag7Pv2Z1znnz5H3+5fL1z68b1a7dP75/TaFvdbvfO9rUPnn3tQSam8tzuM7G6TSY+3Lg5sVWbqREPaI+06mz0Yly/WyaXhu+W3W6y6W75YtX3SBbzg7yeq1nI+cxmLhcym6/nXNobzrDjO+e1utYao11rJ79UF6aT/Lpe7w+tQ8nRobwO3+nKfB/dsGc9S0/vIksj3pGan68L5Rw/H3rGGb8HMzE3lIlnds7Eb8szMrc7t24sXZ9/Y5fznarX5WX7y43Ph797Esfz6Mrr8Onyj1VtbTw7yrpntqybq+qODeoam+qOD+oedqW26tdwm0fq1T23ZV27qns+/6yf9h54lZPX0xm8CgFgv+hu3nX4pcOt6fvTf5t+f/oX09enX5n67uSFyS+0cuivzT9N/KHx+8Y3i5fyfn6aI+MIGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/tfcfuvtG/OdzsLSPiykMVqv8nj2OLCpvZ9ijwqTSUbp1b3T7RbNJxvGh0keuXv/twL7e77YWchnd+jVHDrD13vti7/F4xe+8aM6GQ9p3BztMp+uB9w/Py4G7J2zyzffOHv7rbe/snhz/rWF1xZunbtw/sL59tfmvnr22mJnYbb3OO4ogb2w/uw/7kgAAAAAAAAAAACA3drLf1Qo6v/WGPcxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfbpVdzaDVF5mbPzJbb9+62O+XSL6+3bCZpJCl+khSfJBfTWzIzNFyx3Twv3//ovVPvftBeH6vZb9/Yqd/urCYTq2XhRJKJev1Agy1M7jBeBuNdGR6v8SjhFYMjLBN2sp84GLf/BgAA///RGv9P") syz_mount_image$vfat(&(0x7f0000001940), &(0x7f0000001980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000001a80)) mkdir(&(0x7f0000001ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000001bc0), &(0x7f0000001c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82c851, 0x0, 0x1, 0x0, &(0x7f0000001d00)) mknod$loop(&(0x7f0000001d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001e40)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001e80)='./debug\x00', 0x1ff) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs2\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000001f00)='./file1\x00', 0x143042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001f40)='./file1\x00', 0x101243, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000001f80)='./file1\x00', 0x1c0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000001fc0)='./binderfs\x00', 0x1ff) mknod(&(0x7f0000006080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2c, 0xa7ed) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) 2.119887528s ago: executing program 0 (id=372): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x5250, 0x10, 0x0, &(0x7f0000000140)="345057c10e837846d905cbe99a8f5052", 0x0, 0x20041ff, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001500190d09004beafd0d36020a8447000b4e230f00034e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0xffffffff00000003}, 0x0) 1.889917624s ago: executing program 0 (id=373): stat(0x0, 0x0) io_setup(0x8, &(0x7f0000000040)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_destroy(r0) 1.289410788s ago: executing program 3 (id=374): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000080)=0x6, 0x4) 853.65987ms ago: executing program 2 (id=375): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x0, 0x4, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c"], 0x20}}, 0x10) 723.571682ms ago: executing program 4 (id=376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x122, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000a"], 0x4a) 295.847343ms ago: executing program 2 (id=377): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x71, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 233.078555ms ago: executing program 0 (id=378): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file3\x00', 0x8, &(0x7f00000002c0), 0xfb, 0x510a, &(0x7f000000d000)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x6000) 0s ago: executing program 4 (id=379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r3, &(0x7f0000000340)="18000000010003", 0x7) kernel console output (not intermixed with test programs): HANGE): batadv_slave_0: link becomes ready [ 71.759042][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.772866][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.790743][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.804893][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.817321][ T4230] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 71.817390][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.835371][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.846221][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.857918][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.873261][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.881805][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.922535][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.931923][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.942272][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.952150][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.962849][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.973813][ T4196] device veth0_macvtap entered promiscuous mode [ 71.986379][ T4196] device veth1_macvtap entered promiscuous mode [ 72.002861][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.013035][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.023745][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.034182][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.059846][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.070539][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.083162][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.094919][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.105191][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.115952][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.126171][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.139262][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.161328][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.170740][ T4208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.194657][ T4208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.205781][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.232680][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.254864][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.270463][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.286738][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.297861][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.315047][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.328365][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.357433][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.367345][ T1109] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 72.405491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.426189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.434968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.444381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.454781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.475807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.490485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.253521][ T4260] ceph: No mds server is up or the cluster is laggy [ 73.270445][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.282331][ T1109] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 73.296271][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.307462][ T4268] Bluetooth: hci1: command 0x0419 tx timeout [ 73.315508][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.324796][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.398196][ T4270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.409851][ T4270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.451358][ T4268] Bluetooth: hci4: command 0x0419 tx timeout [ 73.465312][ T4268] Bluetooth: hci2: command 0x0419 tx timeout [ 73.475621][ T4268] Bluetooth: hci3: command 0x0419 tx timeout [ 73.482394][ T4268] Bluetooth: hci0: command 0x0419 tx timeout [ 73.502880][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.534416][ T631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.593617][ T631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.624737][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.651733][ T4276] capability: warning: `syz.0.1' uses 32-bit capabilities (legacy support in use) [ 73.682584][ T4274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'. [ 73.708076][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.748103][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.765006][ T4274] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.791324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.860911][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 73.880898][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 73.890896][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 73.900897][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 73.910895][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 73.920891][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 73.930904][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 73.940895][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 73.950908][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 73.960898][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 76.193472][ T4294] loop0: detected capacity change from 0 to 512 [ 76.307782][ T4294] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.419426][ T4294] EXT4-fs error (device loop0): ext4_orphan_get:1436: comm syz.0.11: bad orphan inode 13 [ 76.467181][ T4294] ext4_test_bit(bit=12, block=18) = 1 [ 76.480954][ T4294] is_bad_inode(inode)=0 [ 76.501853][ T4294] NEXT_ORPHAN(inode)=0 [ 76.520935][ T4294] max_ino=32 [ 76.524251][ T4294] i_nlink=1 [ 76.536874][ T4294] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.554044][ T4274] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.666819][ T4274] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.933281][ T4274] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.159446][ T4305] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.917105][ T4274] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.957653][ T4274] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.993564][ T4274] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.027885][ T4274] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.111694][ T4300] loop4: detected capacity change from 0 to 32768 [ 78.137209][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.155395][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.163487][ T4300] ======================================================= [ 78.163487][ T4300] WARNING: The mand mount option has been deprecated and [ 78.163487][ T4300] and is ignored by this kernel. Remove the mand [ 78.163487][ T4300] option from the mount to silence this warning. [ 78.163487][ T4300] ======================================================= [ 78.413613][ T4300] JBD2: Ignoring recovery information on journal [ 78.431548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.358068][ T4300] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 79.369288][ T4320] loop3: detected capacity change from 0 to 512 [ 79.467817][ T4186] ocfs2: Unmounting device (7,4) on (node local) [ 79.499232][ T4320] FAT-fs (loop3): Directory bread(block 199916) failed [ 79.538887][ T4320] FAT-fs (loop3): Directory bread(block 199917) failed [ 79.547447][ T4320] FAT-fs (loop3): Directory bread(block 199918) failed [ 79.555757][ T4320] FAT-fs (loop3): Directory bread(block 199919) failed [ 79.570604][ T4320] FAT-fs (loop3): Directory bread(block 199920) failed [ 79.588902][ T4320] FAT-fs (loop3): Directory bread(block 199921) failed [ 79.603620][ T4320] FAT-fs (loop3): Directory bread(block 199922) failed [ 79.617942][ T4320] FAT-fs (loop3): Directory bread(block 199923) failed [ 80.022977][ T4328] loop1: detected capacity change from 0 to 256 [ 81.030854][ C0] sched: RT throttling activated [ 81.167526][ T4328] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 82.055022][ T26] audit: type=1326 audit(1791709157.865:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4327 comm="syz.0.17" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605e3f21d9 code=0x7ffc0000 [ 82.458616][ T4320] FAT-fs (loop3): FAT read failed (blocknr 128) [ 82.509481][ T26] audit: type=1326 audit(1791709158.235:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4327 comm="syz.0.17" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605e3f21d9 code=0x7ffc0000 [ 82.580001][ T4333] FAULT_INJECTION: forcing a failure. [ 82.580001][ T4333] name failslab, interval 1, probability 0, space 0, times 1 [ 82.626720][ T26] audit: type=1326 audit(1791709158.235:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4327 comm="syz.0.17" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605e3f21d9 code=0x7ffc0000 [ 82.690719][ T26] audit: type=1326 audit(1791709158.235:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4327 comm="syz.0.17" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f605e3f21d9 code=0x7ffc0000 [ 82.721488][ T4333] CPU: 0 PID: 4333 Comm: syz.2.19 Not tainted syzkaller #0 [ 82.728744][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 82.738837][ T4333] Call Trace: [ 82.742144][ T4333] [ 82.745091][ T4333] dump_stack_lvl+0x188/0x250 [ 82.749813][ T4333] ? show_regs_print_info+0x20/0x20 [ 82.755033][ T4333] ? load_image+0x410/0x410 [ 82.759566][ T4333] ? __might_sleep+0xf0/0xf0 [ 82.764177][ T4333] ? __lock_acquire+0x7d40/0x7d40 [ 82.769244][ T4333] ? blocking_notifier_call_chain_robust+0x70/0x90 [ 82.775769][ T4333] should_fail+0x383/0x4b0 [ 82.780217][ T4333] should_failslab+0x5/0x20 [ 82.784738][ T4333] slab_pre_alloc_hook+0x51/0xc0 [ 82.789697][ T4333] kmem_cache_alloc_trace+0x47/0x290 [ 82.795028][ T4333] ? create_basic_memory_bitmaps+0x7e/0x370 [ 82.800952][ T4333] create_basic_memory_bitmaps+0x7e/0x370 [ 82.806698][ T4333] snapshot_open+0x19b/0x260 [ 82.811306][ T4333] ? snapshot_compat_ioctl+0x90/0x90 [ 82.816632][ T4333] misc_open+0x31f/0x390 [ 82.820901][ T4333] chrdev_open+0x585/0x5f0 [ 82.825349][ T4333] ? cd_forget+0x160/0x160 [ 82.829797][ T4333] ? fsnotify_perm+0x3a7/0x560 [ 82.834592][ T4333] ? cd_forget+0x160/0x160 [ 82.839036][ T4333] do_dentry_open+0x7f7/0xf90 [ 82.843737][ T4333] ? vfs_open+0x2b/0x80 [ 82.847922][ T4333] path_openat+0x2718/0x2fb0 [ 82.852557][ T4333] ? __kasan_slab_alloc+0xa9/0xc0 [ 82.857619][ T4333] ? do_filp_open+0x400/0x400 [ 82.862330][ T4333] do_filp_open+0x1df/0x400 [ 82.866857][ T4333] ? vfs_tmpfile+0x300/0x300 [ 82.871489][ T4333] ? _raw_spin_unlock+0x24/0x40 [ 82.876357][ T4333] ? alloc_fd+0x59e/0x650 [ 82.880720][ T4333] do_sys_openat2+0x14b/0x500 [ 82.885427][ T4333] ? __lock_acquire+0x7d40/0x7d40 [ 82.890478][ T4333] ? do_sys_open+0xe0/0xe0 [ 82.894918][ T4333] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 82.900925][ T4333] ? lock_chain_count+0x20/0x20 [ 82.905806][ T4333] __x64_sys_openat+0x135/0x160 [ 82.910676][ T4333] do_syscall_64+0x4c/0xa0 [ 82.915142][ T4333] ? clear_bhb_loop+0x30/0x80 [ 82.919841][ T4333] ? clear_bhb_loop+0x30/0x80 [ 82.924558][ T4333] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.930476][ T4333] RIP: 0033:0x7fc68c6a51d9 [ 82.934924][ T4333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.954550][ T4333] RSP: 002b:00007fc68a8fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 82.962988][ T4333] RAX: ffffffffffffffda RBX: 00007fc68c92cfa0 RCX: 00007fc68c6a51d9 [ 82.971000][ T4333] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 82.978992][ T4333] RBP: 00007fc68c73c888 R08: 0000000000000000 R09: 0000000000000000 [ 82.986982][ T4333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.994994][ T4333] R13: 00007fc68c92d038 R14: 00007fc68c92cfa0 R15: 00007ffd58a07b08 [ 83.003002][ T4333] [ 83.032863][ T26] audit: type=1326 audit(1791709158.235:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4327 comm="syz.0.17" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605e3f21d9 code=0x7ffc0000 [ 83.103170][ T26] audit: type=1326 audit(1791709158.235:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4327 comm="syz.0.17" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605e3f21d9 code=0x7ffc0000 [ 83.165606][ T26] audit: type=1326 audit(1791709158.235:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4327 comm="syz.0.17" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605e3f21d9 code=0x7ffc0000 [ 83.226763][ T26] audit: type=1326 audit(1791709158.235:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4327 comm="syz.0.17" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605e3f21d9 code=0x7ffc0000 [ 83.281111][ T26] audit: type=1326 audit(1791709158.235:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4327 comm="syz.0.17" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f605e3f21d9 code=0x7ffc0000 [ 83.344643][ T26] audit: type=1326 audit(1791709158.235:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4327 comm="syz.0.17" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605e3f21d9 code=0x7ffc0000 [ 83.559571][ T4344] loop3: detected capacity change from 0 to 8 [ 83.633598][ T4344] SQUASHFS error: zlib decompression failed, data probably corrupt [ 83.641916][ T4344] SQUASHFS error: Failed to read block 0x9b: -5 [ 83.648258][ T4344] SQUASHFS error: Unable to read metadata cache entry [99] [ 83.655673][ T4344] SQUASHFS error: Unable to read inode 0x127 [ 84.398701][ T4351] loop0: detected capacity change from 0 to 16 [ 84.437099][ T4340] loop4: detected capacity change from 0 to 32768 [ 84.512666][ T4351] erofs: (device loop0): mounted with root inode @ nid 36. [ 84.542446][ T4353] loop2: detected capacity change from 0 to 512 [ 84.574249][ T4340] JBD2: Ignoring recovery information on journal [ 84.678180][ T4356] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 84.729457][ T4340] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 84.786226][ T4353] EXT4-fs (loop2): invalid journal inode [ 84.812249][ T4353] EXT4-fs (loop2): can't get journal size [ 84.854647][ T4353] EXT4-fs (loop2): 1 truncate cleaned up [ 84.897987][ T4340] (syz.4.15,4340,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 84.915175][ T4353] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 84.928988][ T4340] (syz.4.15,4340,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 84.938354][ T4340] (syz.4.15,4340,0):ocfs2_symlink:1866 ERROR: status = -2 [ 84.945699][ T4340] (syz.4.15,4340,0):ocfs2_symlink:2067 ERROR: status = -2 [ 85.226891][ T4186] ocfs2: Unmounting device (7,4) on (node local) [ 85.892744][ T4368] loop1: detected capacity change from 0 to 512 [ 85.978131][ T4368] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 86.062837][ T4368] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.137410][ T4371] binder: 4369:4371 ioctl c0306201 2000000000c0 returned -14 [ 86.163764][ T4368] EXT4-fs (loop1): 1 truncate cleaned up [ 86.171561][ T4368] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.224305][ T4371] binder: 4369:4371 ioctl c0306201 200000000340 returned -14 [ 86.668280][ T4377] loop4: detected capacity change from 0 to 4096 [ 86.769227][ T4377] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 86.978383][ T7] cfg80211: failed to load regulatory.db [ 87.183146][ T4383] loop1: detected capacity change from 0 to 512 [ 87.471048][ T1109] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.881385][ T1109] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.903139][ T1109] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.943494][ T1109] usb 1-1: config 0 interface 0 has no altsetting 0 [ 87.960618][ T1109] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 87.980218][ T1109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.031952][ T1109] usb 1-1: config 0 descriptor?? [ 88.307391][ T4383] loop1: detected capacity change from 0 to 512 [ 88.385795][ T4383] EXT4-fs (loop1): Ignoring removed bh option [ 88.523792][ T4383] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 88.653613][ T1109] hid-udraw 0003:20D6:CB17.0001: unknown main item tag 0x0 [ 88.685686][ T1109] hid-udraw 0003:20D6:CB17.0001: unknown main item tag 0x0 [ 88.808255][ T1109] hid-udraw 0003:20D6:CB17.0001: unknown main item tag 0x0 [ 88.885462][ T4383] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000081,minixdf,bh,delalloc,dioread_nolock,noquota,,errors=continue. Quota mode: writeback. [ 89.087505][ T1109] hid-udraw 0003:20D6:CB17.0001: unknown main item tag 0x0 [ 89.747589][ T1109] hid-udraw 0003:20D6:CB17.0001: unknown main item tag 0x0 [ 89.766043][ T4383] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.807539][ T1109] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0001/input/input5 [ 89.956463][ T1109] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0001/input/input6 [ 90.041421][ T1109] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0001/input/input7 [ 90.090484][ T1109] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0001/input/input8 [ 90.112818][ T4392] FAULT_INJECTION: forcing a failure. [ 90.112818][ T4392] name failslab, interval 1, probability 0, space 0, times 0 [ 90.222371][ T4392] CPU: 1 PID: 4392 Comm: syz.0.35 Not tainted syzkaller #0 [ 90.229650][ T4392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 90.239736][ T4392] Call Trace: [ 90.243045][ T4392] [ 90.246029][ T4392] dump_stack_lvl+0x188/0x250 [ 90.250750][ T4392] ? show_regs_print_info+0x20/0x20 [ 90.255998][ T4392] ? load_image+0x410/0x410 [ 90.260543][ T4392] ? __might_sleep+0xf0/0xf0 [ 90.265167][ T4392] ? __lock_acquire+0x7d40/0x7d40 [ 90.270234][ T4392] should_fail+0x383/0x4b0 [ 90.274685][ T4392] should_failslab+0x5/0x20 [ 90.279223][ T4392] slab_pre_alloc_hook+0x51/0xc0 [ 90.284193][ T4392] __kmalloc_node+0x6d/0x3a0 [ 90.288817][ T4392] ? memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 90.294837][ T4392] memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 90.300706][ T4392] slab_post_alloc_hook+0xba/0x380 [ 90.305853][ T4392] ? dax_alloc_inode+0x19/0x80 [ 90.310648][ T4392] kmem_cache_alloc+0x15d/0x280 [ 90.315532][ T4392] ? dax_init_fs_context+0x60/0x60 [ 90.320673][ T4392] ? write_cache_store+0x1a0/0x1a0 [ 90.325817][ T4392] dax_alloc_inode+0x19/0x80 [ 90.330436][ T4392] ? dax_init_fs_context+0x60/0x60 [ 90.335578][ T4392] iget5_locked+0x9e/0x250 [ 90.340049][ T4392] ? dax_test+0x90/0x90 [ 90.344238][ T4392] alloc_dax+0x14e/0x5a0 [ 90.348518][ T4392] ? run_dax+0x30/0x30 [ 90.352623][ T4392] ? __raw_spin_lock_init+0x41/0x100 [ 90.357950][ T4392] dm_create+0xabe/0xf90 [ 90.362234][ T4392] dev_create+0x12e/0x2c0 [ 90.366604][ T4392] ? list_devices+0x820/0x820 [ 90.371325][ T4392] ? __might_fault+0xb3/0x110 [ 90.376043][ T4392] ? _copy_from_user+0x111/0x170 [ 90.381014][ T4392] dm_ctl_ioctl+0x947/0xd00 [ 90.385557][ T4392] ? list_devices+0x820/0x820 [ 90.390265][ T4392] ? dm_poll+0x120/0x120 [ 90.394575][ T4392] ? bpf_lsm_file_ioctl+0x5/0x10 [ 90.399567][ T4392] ? security_file_ioctl+0x7c/0xa0 [ 90.404711][ T4392] ? dm_poll+0x120/0x120 [ 90.408986][ T4392] __se_sys_ioctl+0xfa/0x170 [ 90.413608][ T4392] do_syscall_64+0x4c/0xa0 [ 90.418056][ T4392] ? clear_bhb_loop+0x30/0x80 [ 90.422800][ T4392] ? clear_bhb_loop+0x30/0x80 [ 90.427525][ T4392] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.433454][ T4392] RIP: 0033:0x7f605e3f21d9 [ 90.437901][ T4392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.457533][ T4392] RSP: 002b:00007f605c64a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.465986][ T4392] RAX: ffffffffffffffda RBX: 00007f605e679fa0 RCX: 00007f605e3f21d9 [ 90.473997][ T4392] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 90.482001][ T4392] RBP: 00007f605e489888 R08: 0000000000000000 R09: 0000000000000000 [ 90.489997][ T4392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.497997][ T4392] R13: 00007f605e67a038 R14: 00007f605e679fa0 R15: 00007ffe22bbf5a8 [ 90.506109][ T4392] [ 90.548520][ T1109] hid-udraw 0003:20D6:CB17.0001: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.0-1/input0 [ 91.220366][ T1109] usb 1-1: USB disconnect, device number 2 [ 92.125543][ T4400] loop4: detected capacity change from 0 to 8192 [ 92.193799][ T4404] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.057746][ T4424] loop2: detected capacity change from 0 to 128 [ 96.624472][ T4413] fido_id[4413]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 98.077236][ T4439] jffs2: notice: (4439) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 99.806999][ T4466] synth uevent: /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:00: unknown uevent action string [ 99.860967][ T4466] acpi device:00: uevent: failed to send synthetic uevent [ 100.277164][ T4460] loop3: detected capacity change from 0 to 32768 [ 100.468851][ T4460] XFS (loop3): Mounting V5 Filesystem [ 100.773089][ T4495] loop4: detected capacity change from 0 to 128 [ 102.117850][ T4460] XFS (loop3): Ending clean mount [ 102.542308][ T4196] XFS (loop3): Unmounting Filesystem [ 102.651737][ T4495] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,nodelalloc,max_dir_size_kb=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 102.668647][ T4495] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.020143][ T4505] loop2: detected capacity change from 0 to 128 [ 103.410913][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.165998][ T4511] loop4: detected capacity change from 0 to 1024 [ 104.421099][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 104.476730][ T4524] capability: warning: `syz.2.71' uses deprecated v2 capabilities in a way that may be insecure [ 104.541177][ T23] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 104.568619][ T23] usb 1-1: config 0 has no interface number 0 [ 104.615734][ T23] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 104.665886][ T23] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 104.818474][ T4531] process 'syz.2.74' launched '/dev/fd/3' with NULL argv: empty string added [ 104.881212][ T23] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 104.899139][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.936856][ T23] usb 1-1: Product: syz [ 104.958224][ T23] usb 1-1: Manufacturer: syz [ 104.977218][ T23] usb 1-1: SerialNumber: syz [ 105.005781][ T23] usb 1-1: config 0 descriptor?? [ 105.092305][ T4509] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 105.172611][ T4509] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 105.348295][ T4521] loop1: detected capacity change from 0 to 32768 [ 105.463910][ T4521] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.70 (4521) [ 105.500251][ T4509] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 105.549519][ T4509] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 105.581582][ T4521] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 105.623840][ T4521] BTRFS info (device loop1): setting nodatacow, compression disabled [ 105.651184][ T4521] BTRFS info (device loop1): disabling tree log [ 105.667810][ T4521] BTRFS info (device loop1): turning on async discard [ 105.689277][ T4521] BTRFS info (device loop1): max_inline at 0 [ 105.716580][ T4521] BTRFS info (device loop1): using free space tree [ 105.732265][ T4521] BTRFS info (device loop1): has skinny extents [ 105.775905][ T4528] loop3: detected capacity change from 0 to 32768 [ 105.866824][ T23] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 105.967721][ T4528] JBD2: Ignoring recovery information on journal [ 106.122278][ T4528] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 106.157324][ T154] (kworker/u4:2,154,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: directory entry overrun - offset=16, inode=66, rec_len=296, name_len=2 [ 106.382682][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 106.382698][ T26] audit: type=1800 audit(1791709182.195:72): pid=4528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.73" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 106.528826][ T4196] ocfs2: Unmounting device (7,3) on (node local) [ 106.726343][ T4570] tipc: Started in network mode [ 106.750208][ T4570] tipc: Node identity 4ea10ebc5901, cluster identity 4711 [ 106.787393][ T4570] tipc: Enabled bearer , priority 0 [ 106.866914][ T4569] tipc: Disabling bearer [ 106.931718][ T4574] loop3: detected capacity change from 0 to 16 [ 107.162294][ T4577] FAULT_INJECTION: forcing a failure. [ 107.162294][ T4577] name failslab, interval 1, probability 0, space 0, times 0 [ 107.212259][ T4577] CPU: 0 PID: 4577 Comm: syz.4.81 Not tainted syzkaller #0 [ 107.219536][ T4577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 107.229627][ T4577] Call Trace: [ 107.232932][ T4577] [ 107.235897][ T4577] dump_stack_lvl+0x188/0x250 [ 107.240618][ T4577] ? show_regs_print_info+0x20/0x20 [ 107.245856][ T4577] ? load_image+0x410/0x410 [ 107.250399][ T4577] ? __might_sleep+0xf0/0xf0 [ 107.255024][ T4577] ? __lock_acquire+0x7d40/0x7d40 [ 107.260098][ T4577] should_fail+0x383/0x4b0 [ 107.264565][ T4577] should_failslab+0x5/0x20 [ 107.269106][ T4577] slab_pre_alloc_hook+0x51/0xc0 [ 107.274218][ T4577] ? key_alloc+0x302/0x1030 [ 107.278760][ T4577] kmem_cache_alloc+0x3d/0x280 [ 107.283576][ T4577] key_alloc+0x302/0x1030 [ 107.287962][ T4577] keyring_alloc+0x41/0xa0 [ 107.292433][ T4577] look_up_user_keyrings+0x459/0x670 [ 107.297736][ T4577] ? key_validate+0xf0/0xf0 [ 107.302268][ T4577] ? lookup_user_key+0xd1/0x1160 [ 107.307262][ T4577] lookup_user_key+0x37c/0x1160 [ 107.312125][ T4577] ? lookup_user_key_possessed+0x40/0x40 [ 107.317762][ T4577] ? mark_lock+0x94/0x320 [ 107.322102][ T4577] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 107.328105][ T4577] keyctl_get_persistent+0x24b/0x780 [ 107.333407][ T4577] ? proc_key_users_show+0x310/0x310 [ 107.338698][ T4577] ? verify_lock_unused+0x140/0x140 [ 107.343903][ T4577] ? verify_lock_unused+0x140/0x140 [ 107.349132][ T4577] ? do_futex+0xdc2/0x12b0 [ 107.353561][ T4577] ? vfs_write+0xaa6/0xd70 [ 107.358044][ T4577] __se_sys_keyctl+0x61e/0xa20 [ 107.362825][ T4577] ? __x64_sys_keyctl+0xc0/0xc0 [ 107.367726][ T4577] ? __context_tracking_exit+0x4c/0x80 [ 107.373196][ T4577] ? __lock_acquire+0x7d40/0x7d40 [ 107.378261][ T4577] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 107.384356][ T4577] ? lock_chain_count+0x20/0x20 [ 107.389223][ T4577] ? lockdep_hardirqs_on+0x94/0x140 [ 107.394451][ T4577] ? __x64_sys_keyctl+0x1c/0xc0 [ 107.399398][ T4577] do_syscall_64+0x4c/0xa0 [ 107.403825][ T4577] ? clear_bhb_loop+0x30/0x80 [ 107.408518][ T4577] ? clear_bhb_loop+0x30/0x80 [ 107.413225][ T4577] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.419142][ T4577] RIP: 0033:0x7feef6d4a1d9 [ 107.423583][ T4577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.443219][ T4577] RSP: 002b:00007feef4fa2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 107.451638][ T4577] RAX: ffffffffffffffda RBX: 00007feef6fd1fa0 RCX: 00007feef6d4a1d9 [ 107.459615][ T4577] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 107.467591][ T4577] RBP: 00007feef6de1888 R08: 0000000000000000 R09: 0000000000000000 [ 107.475566][ T4577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.483541][ T4577] R13: 00007feef6fd2038 R14: 00007feef6fd1fa0 R15: 00007fff5ec9a748 [ 107.491531][ T4577] [ 108.130569][ T4232] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.422974][ T4232] usb 4-1: Using ep0 maxpacket: 8 [ 108.591078][ T23] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 108.603376][ T23] asix: probe of 1-1:0.34 failed with error -71 [ 108.626775][ T23] usb 1-1: USB disconnect, device number 3 [ 108.721178][ T4232] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 108.741967][ T4232] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.761846][ T4601] loop2: detected capacity change from 0 to 16 [ 108.857042][ T4232] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 108.887457][ T4601] erofs: (device loop2): mounted with root inode @ nid 36. [ 108.910675][ T4603] FAULT_INJECTION: forcing a failure. [ 108.910675][ T4603] name failslab, interval 1, probability 0, space 0, times 0 [ 108.933416][ T26] audit: type=1800 audit(1791709184.745:73): pid=4601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.88" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 108.962130][ T4232] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 108.989139][ T4232] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.007684][ T4603] CPU: 0 PID: 4603 Comm: syz.0.89 Not tainted syzkaller #0 [ 109.014909][ T4603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 109.024995][ T4603] Call Trace: [ 109.028303][ T4603] [ 109.031259][ T4603] dump_stack_lvl+0x188/0x250 [ 109.035983][ T4603] ? show_regs_print_info+0x20/0x20 [ 109.041221][ T4603] ? load_image+0x410/0x410 [ 109.045767][ T4603] should_fail+0x383/0x4b0 [ 109.050199][ T4603] should_failslab+0x5/0x20 [ 109.054711][ T4603] slab_pre_alloc_hook+0x51/0xc0 [ 109.059683][ T4603] kmem_cache_alloc_trace+0x47/0x290 [ 109.064988][ T4603] ? sctp_add_bind_addr+0x89/0x350 [ 109.070110][ T4603] sctp_add_bind_addr+0x89/0x350 [ 109.075085][ T4603] sctp_copy_local_addr_list+0x2f1/0x4c0 [ 109.080731][ T4603] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 109.086804][ T4603] ? sctp_v6_is_any+0x60/0x70 [ 109.091491][ T4603] ? sctp_copy_one_addr+0x93/0x660 [ 109.096623][ T4603] sctp_bind_addr_copy+0xaf/0x3c0 [ 109.101773][ T4603] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 109.108122][ T4603] sctp_connect_new_asoc+0x2f5/0x6a0 [ 109.113445][ T4603] ? __sctp_connect+0xd80/0xd80 [ 109.118306][ T4603] ? __local_bh_enable_ip+0x136/0x1c0 [ 109.123682][ T4603] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 109.129242][ T4603] ? security_sctp_bind_connect+0x85/0xb0 [ 109.134971][ T4603] sctp_sendmsg+0x15e1/0x2940 [ 109.139670][ T4603] ? sctp_getsockopt+0x8a0/0x8a0 [ 109.144619][ T4603] ? aa_af_perm+0x340/0x340 [ 109.149132][ T4603] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 109.155582][ T4603] ? aa_sock_msg_perm+0x94/0x150 [ 109.160533][ T4603] ? sock_rps_record_flow+0x17/0x3b0 [ 109.165828][ T4603] ? inet_sendmsg+0xca/0x2a0 [ 109.170425][ T4603] __sys_sendto+0x46d/0x620 [ 109.174940][ T4603] ? __ia32_sys_getpeername+0x80/0x80 [ 109.180358][ T4603] ? lock_chain_count+0x20/0x20 [ 109.185221][ T4603] __x64_sys_sendto+0xda/0xf0 [ 109.189927][ T4603] do_syscall_64+0x4c/0xa0 [ 109.194380][ T4603] ? clear_bhb_loop+0x30/0x80 [ 109.199067][ T4603] ? clear_bhb_loop+0x30/0x80 [ 109.203775][ T4603] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.209672][ T4603] RIP: 0033:0x7f605e3f21d9 [ 109.214107][ T4603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.233716][ T4603] RSP: 002b:00007f605c64a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 109.242157][ T4603] RAX: ffffffffffffffda RBX: 00007f605e679fa0 RCX: 00007f605e3f21d9 [ 109.250130][ T4603] RDX: 0000000000034000 RSI: 0000200000000300 RDI: 0000000000000005 [ 109.258100][ T4603] RBP: 00007f605e489888 R08: 0000200000000000 R09: 000000000000001c [ 109.266078][ T4603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.274079][ T4603] R13: 00007f605e67a038 R14: 00007f605e679fa0 R15: 00007ffe22bbf5a8 [ 109.282066][ T4603] [ 109.314210][ T4232] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 109.337740][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.631071][ T4232] usb 4-1: usb_control_msg returned -71 [ 109.636913][ T4232] usbtmc 4-1:16.0: can't read capabilities [ 109.688782][ T4232] usb 4-1: USB disconnect, device number 2 [ 109.777750][ T4619] loop4: detected capacity change from 0 to 1024 [ 110.086480][ T4624] loop0: detected capacity change from 0 to 1024 [ 110.462232][ T4633] netlink: 91 bytes leftover after parsing attributes in process `syz.2.98'. [ 114.561141][ T4671] loop3: detected capacity change from 0 to 512 [ 115.398472][ T4671] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,errors=remount-ro,usrjquota=,sysvgroups,usrquota,. Quota mode: writeback. [ 115.435912][ T4691] loop1: detected capacity change from 0 to 128 [ 115.458279][ T4671] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.501702][ T4691] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 115.520218][ T4691] FAT-fs (loop1): Filesystem has been set read-only [ 115.531251][ T4691] attempt to access beyond end of device [ 115.531251][ T4691] loop1: rw=524288, want=2073, limit=128 [ 115.568299][ T4691] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 115.586426][ T4691] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 115.676242][ T4691] attempt to access beyond end of device [ 115.676242][ T4691] loop1: rw=0, want=2073, limit=128 [ 115.691143][ T26] audit: type=1800 audit(1791709191.465:74): pid=4693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.108" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 115.736611][ T4226] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 115.758216][ T4671] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.108: bg 0: block 217: padding at end of block bitmap is not set [ 115.773518][ T4691] syz.1.114 (4691) used greatest stack depth: 20784 bytes left [ 115.854454][ T4695] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 116.199152][ T4671] EXT4-fs (loop3): Remounting filesystem read-only [ 116.228202][ T4671] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 116.588757][ T4671] EXT4-fs (loop3): Remounting filesystem read-only [ 116.601733][ T26] audit: type=1800 audit(1791709191.545:75): pid=4691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.114" name="file2" dev="loop1" ino=1048631 res=0 errno=0 [ 116.669341][ T4701] syz.1.115 uses obsolete (PF_INET,SOCK_PACKET) [ 116.760982][ T4226] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 116.769214][ T4226] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.809554][ T4226] usb 1-1: config 0 has no interface number 0 [ 116.830893][ T4226] usb 1-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 116.857634][ T4704] loop3: detected capacity change from 0 to 2048 [ 116.871606][ T4226] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 116.880714][ T4226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.935228][ T4226] usb 1-1: config 0 descriptor?? [ 117.027897][ T26] audit: type=1800 audit(1791709192.835:76): pid=4712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.120" name="enable" dev="configfs" ino=34480 res=0 errno=0 [ 117.049799][ T4704] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.087939][ T4226] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 117.098688][ T4704] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.212600][ T4704] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.118: bg 0: block 345: padding at end of block bitmap is not set [ 117.229141][ T4226] usb 1-1: USB disconnect, device number 4 [ 117.241053][ T4677] usb 1-1: Failed to submit usb control message: -71 [ 117.248084][ T4677] usb 1-1: unable to send the bmi data to the device: -71 [ 117.268890][ T4677] usb 1-1: unable to get target info from device [ 117.275591][ T4677] usb 1-1: could not get target info (-71) [ 117.283523][ T4677] usb 1-1: could not probe fw (-71) [ 117.329767][ T4704] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 117.339721][ T4716] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 117.573644][ T4723] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.609660][ T4720] syz.3.122 (4720) used greatest stack depth: 20112 bytes left [ 117.618540][ T4723] device bridge_slave_0 left promiscuous mode [ 117.633506][ T4723] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.730467][ T4731] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 117.901737][ T4735] hub 1-0:1.0: USB hub found [ 117.908450][ T4735] hub 1-0:1.0: 1 port detected [ 118.726427][ T4743] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 118.925255][ T4755] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 119.897749][ T4777] loop3: detected capacity change from 0 to 1024 [ 120.000286][ T4786] netlink: 52 bytes leftover after parsing attributes in process `syz.2.141'. [ 120.534980][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.568644][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.579886][ T4814] Zero length message leads to an empty skb [ 121.131345][ T4816] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 121.598832][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.830559][ T4826] loop2: detected capacity change from 0 to 128 [ 121.930468][ T4826] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.021707][ T4826] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 122.116882][ T4826] syz.2.154 (pid 4826) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 122.615183][ T4826] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 122.702262][ T4851] FAULT_INJECTION: forcing a failure. [ 122.702262][ T4851] name failslab, interval 1, probability 0, space 0, times 0 [ 122.741118][ T4851] CPU: 0 PID: 4851 Comm: syz.4.160 Not tainted syzkaller #0 [ 122.748481][ T4851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 122.758576][ T4851] Call Trace: [ 122.761894][ T4851] [ 122.764853][ T4851] dump_stack_lvl+0x188/0x250 [ 122.769570][ T4851] ? show_regs_print_info+0x20/0x20 [ 122.774843][ T4851] ? load_image+0x410/0x410 [ 122.779541][ T4851] should_fail+0x383/0x4b0 [ 122.784005][ T4851] should_failslab+0x5/0x20 [ 122.788554][ T4851] slab_pre_alloc_hook+0x51/0xc0 [ 122.793534][ T4851] kmem_cache_alloc_node+0x47/0x2c0 [ 122.798791][ T4851] ? __alloc_skb+0xf4/0x750 [ 122.801260][ T4187] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 122.803334][ T4851] __alloc_skb+0xf4/0x750 [ 122.815178][ T4851] _sctp_make_chunk+0x5b/0x430 [ 122.820072][ T4851] sctp_make_init+0x54f/0x2880 [ 122.824882][ T4851] ? mark_lock+0x94/0x320 [ 122.829267][ T4851] ? sctp_addto_chunk+0x220/0x220 [ 122.834361][ T4851] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 122.840300][ T4851] sctp_sf_do_prm_asoc+0xcb/0x3e0 [ 122.845369][ T4851] sctp_do_sm+0x245/0x5690 [ 122.849830][ T4851] ? stack_trace_snprint+0xe0/0xe0 [ 122.854989][ T4851] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 122.860910][ T4851] ? sctp_stream_init_ext+0x53/0x160 [ 122.866235][ T4851] ? sctp_sendmsg_to_asoc+0x177c/0x1e10 [ 122.871815][ T4851] ? sctp_sendmsg+0x1b87/0x2940 [ 122.876707][ T4851] ? __sys_sendto+0x46d/0x620 [ 122.881420][ T4851] ? __x64_sys_sendto+0xda/0xf0 [ 122.886349][ T4851] ? __sk_mem_raise_allocated+0x6e2/0x11b0 [ 122.892204][ T4851] sctp_primitive_ASSOCIATE+0x91/0xc0 [ 122.897625][ T4851] sctp_sendmsg_to_asoc+0x14f4/0x1e10 [ 122.903054][ T4851] ? memcpy+0x3c/0x60 [ 122.907116][ T4851] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 122.912961][ T4851] ? __sctp_connect+0xd80/0xd80 [ 122.917851][ T4851] ? __local_bh_enable_ip+0x136/0x1c0 [ 122.923272][ T4851] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 122.928859][ T4851] ? security_sctp_bind_connect+0x85/0xb0 [ 122.934621][ T4851] sctp_sendmsg+0x1b87/0x2940 [ 122.939358][ T4851] ? sctp_getsockopt+0x8a0/0x8a0 [ 122.944336][ T4851] ? aa_af_perm+0x340/0x340 [ 122.948877][ T4851] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 122.955338][ T4851] ? aa_sock_msg_perm+0x94/0x150 [ 122.960312][ T4851] ? sock_rps_record_flow+0x17/0x3b0 [ 122.965642][ T4851] ? inet_sendmsg+0xca/0x2a0 [ 122.970280][ T4851] __sys_sendto+0x46d/0x620 [ 122.974830][ T4851] ? __ia32_sys_getpeername+0x80/0x80 [ 122.980264][ T4851] ? lock_chain_count+0x20/0x20 [ 122.985157][ T4851] __x64_sys_sendto+0xda/0xf0 [ 122.989882][ T4851] do_syscall_64+0x4c/0xa0 [ 122.994337][ T4851] ? clear_bhb_loop+0x30/0x80 [ 122.999052][ T4851] ? clear_bhb_loop+0x30/0x80 [ 123.003763][ T4851] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.009698][ T4851] RIP: 0033:0x7feef6d4a1d9 [ 123.014149][ T4851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.033789][ T4851] RSP: 002b:00007feef4fa2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 123.042275][ T4851] RAX: ffffffffffffffda RBX: 00007feef6fd1fa0 RCX: 00007feef6d4a1d9 [ 123.050295][ T4851] RDX: 0000000000034000 RSI: 0000200000000300 RDI: 0000000000000004 [ 123.058305][ T4851] RBP: 00007feef6de1888 R08: 0000200000000000 R09: 000000000000001c [ 123.066338][ T4851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.074366][ T4851] R13: 00007feef6fd2038 R14: 00007feef6fd1fa0 R15: 00007fff5ec9a748 [ 123.082504][ T4851] [ 123.145160][ T4187] usb 4-1: Using ep0 maxpacket: 8 [ 123.276804][ T4187] usb 4-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 19, changing to 8 [ 123.305549][ T4187] usb 4-1: config 0 interface 0 has no altsetting 0 [ 123.321043][ T4187] usb 4-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 123.330480][ T4187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.357192][ T4187] usb 4-1: config 0 descriptor?? [ 123.810604][ T4874] ip_tables: iptables: counters copy to user failed while replacing table [ 123.890678][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 123.919194][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 123.933435][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 123.941048][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 123.948473][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 123.972033][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.020197][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.040453][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.059035][ T4881] loop4: detected capacity change from 0 to 1024 [ 124.064011][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.107248][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.133441][ T4881] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 124.160191][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.188686][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.229168][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.243580][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.251698][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.254601][ T4881] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,minixdf,bsdgroups,max_batch_time=0x0000000000000013,abort,noinit_itable,,errors=continue. Quota mode: none. [ 124.263593][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.295231][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.302883][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.310327][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.317884][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.325363][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.333427][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.340973][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.348425][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.355900][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.364134][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.371628][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.379057][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.386591][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.394049][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.401642][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.409066][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.430963][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.446718][ T4881] EXT4-fs error (device loop4): ext4_remount:6062: comm syz.4.166: Abort forced by user [ 124.477102][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.491160][ T4881] EXT4-fs (loop4): Remounting filesystem read-only [ 124.508406][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.518668][ T4881] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: none. [ 124.538818][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.570373][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.619415][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.635551][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.670449][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.685785][ T4187] hid-generic 0003:0C70:F010.0002: unknown main item tag 0x0 [ 124.762643][ T4187] hid-generic 0003:0C70:F010.0002: hidraw0: USB HID v0.77 Device [HID 0c70:f010] on usb-dummy_hcd.3-1/input0 [ 124.816644][ T4187] usb 4-1: USB disconnect, device number 3 [ 125.077149][ T4895] fido_id[4895]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 125.450994][ T4226] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 125.613597][ T4915] netlink: 20 bytes leftover after parsing attributes in process `syz.0.178'. [ 125.771432][ T4917] device syz_tun entered promiscuous mode [ 125.821237][ T4226] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 125.931363][ T4226] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 125.950797][ T4226] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 125.959107][ T4226] usb 4-1: Product: syz [ 125.981779][ T4226] usb 4-1: config 0 descriptor?? [ 126.059342][ T4919] loop0: detected capacity change from 0 to 2048 [ 126.140118][ T4923] FAULT_INJECTION: forcing a failure. [ 126.140118][ T4923] name failslab, interval 1, probability 0, space 0, times 0 [ 126.257677][ T26] audit: type=1800 audit(1791709202.035:77): pid=4927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.181" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 126.375775][ T4919] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.588353][ T4607] usb 4-1: USB disconnect, device number 4 [ 126.600421][ T4923] CPU: 1 PID: 4923 Comm: syz.4.182 Not tainted syzkaller #0 [ 126.607775][ T4923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 126.617866][ T4923] Call Trace: [ 126.621179][ T4923] [ 126.624162][ T4923] dump_stack_lvl+0x188/0x250 [ 126.628886][ T4923] ? show_regs_print_info+0x20/0x20 [ 126.634122][ T4923] ? load_image+0x410/0x410 [ 126.638666][ T4923] ? __might_sleep+0xf0/0xf0 [ 126.643288][ T4923] ? __lock_acquire+0x7d40/0x7d40 [ 126.648357][ T4923] should_fail+0x383/0x4b0 [ 126.652812][ T4923] should_failslab+0x5/0x20 [ 126.657344][ T4923] slab_pre_alloc_hook+0x51/0xc0 [ 126.662309][ T4923] ? new_inode_pseudo+0x77/0x210 [ 126.667279][ T4923] kmem_cache_alloc+0x3d/0x280 [ 126.672083][ T4923] new_inode_pseudo+0x77/0x210 [ 126.676883][ T4923] new_inode+0x25/0x1d0 [ 126.681082][ T4923] devpts_pty_new+0xd6/0x650 [ 126.685751][ T4923] ? devpts_kill_index+0x40/0x40 [ 126.690726][ T4923] ? do_raw_spin_unlock+0x11d/0x230 [ 126.695966][ T4923] ptmx_open+0x1b9/0x2c0 [ 126.700269][ T4923] chrdev_open+0x585/0x5f0 [ 126.704772][ T4923] ? cd_forget+0x160/0x160 [ 126.709227][ T4923] ? fsnotify_perm+0x3a7/0x560 [ 126.714040][ T4923] ? cd_forget+0x160/0x160 [ 126.718495][ T4923] do_dentry_open+0x7f7/0xf90 [ 126.723211][ T4923] ? vfs_open+0x2b/0x80 [ 126.727412][ T4923] path_openat+0x2718/0x2fb0 [ 126.732062][ T4923] ? __kasan_slab_alloc+0xa9/0xc0 [ 126.737130][ T4923] ? do_filp_open+0x400/0x400 [ 126.741874][ T4923] do_filp_open+0x1df/0x400 [ 126.746432][ T4923] ? vfs_tmpfile+0x300/0x300 [ 126.751089][ T4923] ? _raw_spin_unlock+0x24/0x40 [ 126.755972][ T4923] ? alloc_fd+0x59e/0x650 [ 126.760356][ T4923] do_sys_openat2+0x14b/0x500 [ 126.765078][ T4923] ? __lock_acquire+0x7d40/0x7d40 [ 126.770160][ T4923] ? do_sys_open+0xe0/0xe0 [ 126.774609][ T4923] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 126.780653][ T4923] ? lock_chain_count+0x20/0x20 [ 126.785755][ T4923] __x64_sys_openat+0x135/0x160 [ 126.790657][ T4923] do_syscall_64+0x4c/0xa0 [ 126.795100][ T4923] ? clear_bhb_loop+0x30/0x80 [ 126.799811][ T4923] ? clear_bhb_loop+0x30/0x80 [ 126.804533][ T4923] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.810461][ T4923] RIP: 0033:0x7feef6d4a1d9 [ 126.814903][ T4923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.834563][ T4923] RSP: 002b:00007feef4fa2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 126.843025][ T4923] RAX: ffffffffffffffda RBX: 00007feef6fd1fa0 RCX: 00007feef6d4a1d9 [ 126.851030][ T4923] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 126.859035][ T4923] RBP: 00007feef6de1888 R08: 0000000000000000 R09: 0000000000000000 [ 126.867031][ T4923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.875058][ T4923] R13: 00007feef6fd2038 R14: 00007feef6fd1fa0 R15: 00007fff5ec9a748 [ 126.883079][ T4923] [ 127.092379][ T4905] loop3: detected capacity change from 0 to 512 [ 127.125657][ T4905] EXT4-fs (loop3): Ignoring removed bh option [ 127.199557][ T4905] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 127.247881][ T4905] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 127.269662][ T4905] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.175: Corrupt directory, running e2fsck is recommended [ 127.352389][ T4905] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 127.387821][ T4905] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.175: corrupted in-inode xattr [ 127.405842][ T4935] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 127.416136][ T4935] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 127.424888][ T4905] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.175: couldn't read orphan inode 15 (err -117) [ 127.437837][ T4937] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 127.445750][ T4905] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,grpquota,jqfmt=vfsold,nolazytime,grpjquota=.dax=always,resuid=0x0000000000000000,bh,minixdf,,,errors=continue. Quota mode: writeback. [ 127.468123][ T4937] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 127.498308][ T4905] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 127.558831][ T4905] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 127.645925][ T4905] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.175: Corrupt directory, running e2fsck is recommended [ 129.364006][ T4940] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 129.460662][ T4940] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 129.491034][ T4940] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.175: Corrupt directory, running e2fsck is recommended [ 132.656281][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.662656][ T4942] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 132.662720][ T4942] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 132.662746][ T4942] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.175: Corrupt directory, running e2fsck is recommended [ 132.674829][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.196394][ T4967] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 133.205639][ T4967] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 134.566366][ T4997] loop0: detected capacity change from 0 to 256 [ 135.754324][ T5000] 9pnet_virtio: no channels available for device syz [ 136.737998][ T5000] overlayfs: missing 'lowerdir' [ 136.869358][ T4232] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 137.227213][ T5009] kernel profiling enabled (shift: 23) [ 137.301699][ T4232] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 137.357984][ T4232] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 137.442117][ T4232] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 137.682718][ T4232] usb 2-1: string descriptor 0 read error: -71 [ 137.689674][ T4232] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 137.841018][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=25 [ 137.903751][ T4232] usb 2-1: config 0 descriptor?? [ 137.931506][ T4232] usb 2-1: can't set config #0, error -71 [ 137.946740][ T4232] usb 2-1: USB disconnect, device number 2 [ 138.025875][ T5019] ip_tables: iptables: counters copy to user failed while replacing table [ 138.281293][ T5021] loop4: detected capacity change from 0 to 256 [ 138.390041][ T5021] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 138.401187][ T5021] FAT-fs (loop4): Filesystem has been set read-only [ 138.407894][ T5021] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 138.419899][ T5021] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 138.434870][ T5021] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 138.443507][ T26] audit: type=1800 audit(1791709214.245:78): pid=5021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.208" name="file1" dev="loop4" ino=1048634 res=0 errno=0 [ 138.508144][ T5036] loop3: detected capacity change from 0 to 8 [ 138.589821][ T5036] attempt to access beyond end of device [ 138.589821][ T5036] loop3: rw=2048, want=36028797018963976, limit=8 [ 138.679170][ T4191] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 138.688116][ T5036] SQUASHFS error: Failed to read block 0xfffffffffffffffc: -5 [ 138.701426][ T5036] unable to read xattr id index table [ 138.828777][ T5017] loop0: detected capacity change from 0 to 32768 [ 138.883317][ T5036] loop3: detected capacity change from 0 to 1024 [ 138.912404][ T4607] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.! [ 138.929275][ T5047] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress." [ 139.034252][ T5017] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.206 (5017) [ 139.068027][ T5036] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 139.142879][ T5036] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 139.198575][ T5017] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 139.216424][ T5036] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 139.240975][ T5017] BTRFS info (device loop0): using free space tree [ 139.279884][ T5017] BTRFS info (device loop0): has skinny extents [ 139.342920][ T5036] EXT4-fs warning (device loop3): empty_inline_dir:1879: bad inline directory (dir #12) - no `..' [ 139.502005][ T5087] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 139.561341][ T5080] loop1: detected capacity change from 0 to 2048 [ 139.592002][ T5017] BTRFS info (device loop0): enabling ssd optimizations [ 139.640793][ T5080] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 139.673376][ T5080] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.992792][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 140.006509][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.014958][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.110968][ T4230] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 140.890935][ T4230] usb 3-1: Using ep0 maxpacket: 16 [ 140.897824][ T4677] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 140.915138][ T5113] FAULT_INJECTION: forcing a failure. [ 140.915138][ T5113] name failslab, interval 1, probability 0, space 0, times 0 [ 140.929843][ T5113] CPU: 1 PID: 5113 Comm: syz.3.224 Not tainted syzkaller #0 [ 140.937186][ T5113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 140.947273][ T5113] Call Trace: [ 140.950599][ T5113] [ 140.953564][ T5113] dump_stack_lvl+0x188/0x250 [ 140.958288][ T5113] ? show_regs_print_info+0x20/0x20 [ 140.963526][ T5113] ? load_image+0x410/0x410 [ 140.968076][ T5113] ? rcu_lock_release+0x5/0x20 [ 140.972888][ T5113] should_fail+0x383/0x4b0 [ 140.977350][ T5113] should_failslab+0x5/0x20 [ 140.981898][ T5113] slab_pre_alloc_hook+0x51/0xc0 [ 140.986875][ T5113] ? __nf_conntrack_alloc+0x93/0x370 [ 140.992192][ T5113] kmem_cache_alloc+0x3d/0x280 [ 140.996998][ T5113] __nf_conntrack_alloc+0x93/0x370 [ 141.002153][ T5113] init_conntrack+0x2fd/0x1530 [ 141.006965][ T5113] ? get_l4proto+0x670/0x670 [ 141.011600][ T5113] ? early_drop+0x800/0x800 [ 141.016132][ T5113] ? nf_conntrack_find_get+0x640/0x640 [ 141.021628][ T5113] ? __siphash_unaligned+0x286/0x3d0 [ 141.026959][ T5113] nf_conntrack_in+0xd76/0x17b0 [ 141.031913][ T5113] ? nf_ct_pernet+0x240/0x240 [ 141.036647][ T5113] ? ip6t_alloc_initial_table+0x640/0x640 [ 141.042421][ T5113] ? ipv6_defrag+0x2d2/0x3a0 [ 141.047055][ T5113] ? ipv6_conntrack_in+0x20/0x20 [ 141.052032][ T5113] nf_hook_slow+0xb9/0x200 [ 141.056491][ T5113] ? rcu_read_unlock+0xa0/0xa0 [ 141.061310][ T5113] nf_hook+0x205/0x360 [ 141.065431][ T5113] ? ip6_make_skb+0x530/0x530 [ 141.070154][ T5113] ? rcu_read_unlock+0xa0/0xa0 [ 141.074960][ T5113] ip6_xmit+0xfa5/0x16e0 [ 141.079245][ T5113] ? rcu_read_unlock+0xa0/0xa0 [ 141.084071][ T5113] ? ip6_autoflowlabel+0xd0/0xd0 [ 141.089052][ T5113] ? __sk_dst_check+0x14e/0x290 [ 141.093947][ T5113] ? read_lock_is_recursive+0x10/0x10 [ 141.099359][ T5113] ? inet6_csk_route_socket+0x613/0xed0 [ 141.104981][ T5113] inet6_csk_xmit+0x405/0x680 [ 141.109701][ T5113] ? inet6_csk_addr2sockaddr+0x1d0/0x1d0 [ 141.115384][ T5113] ? csum_ipv6_magic+0x1e/0x80 [ 141.120212][ T5113] __tcp_transmit_skb+0x1ca3/0x31e0 [ 141.125482][ T5113] ? __tcp_send_ack+0x5d0/0x5d0 [ 141.130378][ T5113] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 141.136676][ T5113] ? memset+0x1e/0x40 [ 141.140696][ T5113] ? tcp_rbtree_insert+0x114/0x170 [ 141.145843][ T5113] ? tcp_connect+0x1fca/0x4970 [ 141.150669][ T5113] tcp_connect+0x21bd/0x4970 [ 141.155343][ T5113] tcp_v6_connect+0x11cf/0x1a10 [ 141.160282][ T5113] ? tcp_v6_pre_connect+0xf0/0xf0 [ 141.165373][ T5113] ? mark_lock+0x94/0x320 [ 141.169756][ T5113] __inet_stream_connect+0x244/0xd80 [ 141.175103][ T5113] ? lock_chain_count+0x20/0x20 [ 141.179998][ T5113] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 141.186031][ T5113] ? __local_bh_enable_ip+0x136/0x1c0 [ 141.191452][ T5113] ? inet_dgram_connect+0x340/0x340 [ 141.196695][ T5113] ? __local_bh_enable_ip+0x136/0x1c0 [ 141.202132][ T5113] ? _local_bh_enable+0xa0/0xa0 [ 141.207031][ T5113] inet_stream_connect+0x62/0xa0 [ 141.212011][ T5113] ? __inet_stream_connect+0xd80/0xd80 [ 141.217516][ T5113] __sys_connect+0x3cb/0x450 [ 141.222151][ T5113] ? __sys_connect_file+0x170/0x170 [ 141.227608][ T5113] __x64_sys_connect+0x76/0x80 [ 141.232419][ T5113] do_syscall_64+0x4c/0xa0 [ 141.236873][ T5113] ? clear_bhb_loop+0x30/0x80 [ 141.241584][ T5113] ? clear_bhb_loop+0x30/0x80 [ 141.246301][ T5113] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.252257][ T5113] RIP: 0033:0x7f8c7b4891d9 [ 141.256707][ T5113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.276344][ T5113] RSP: 002b:00007f8c796e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 141.284804][ T5113] RAX: ffffffffffffffda RBX: 00007f8c7b710fa0 RCX: 00007f8c7b4891d9 [ 141.292810][ T5113] RDX: 000000000000001c RSI: 00002000000000c0 RDI: 0000000000000003 [ 141.300811][ T5113] RBP: 00007f8c7b520888 R08: 0000000000000000 R09: 0000000000000000 [ 141.308816][ T5113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.316824][ T5113] R13: 00007f8c7b711038 R14: 00007f8c7b710fa0 R15: 00007ffc74ffdf88 [ 141.324860][ T5113] [ 141.359446][ T5118] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 141.429393][ T1109] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 141.437367][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.449711][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.460068][ T4230] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 141.473826][ T4230] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 141.483716][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.498047][ T4230] usb 3-1: config 0 descriptor?? [ 141.589727][ T5123] jffs2: notice: (5123) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 141.721013][ T1109] usb 2-1: Using ep0 maxpacket: 8 [ 142.291022][ T4230] usbhid 3-1:0.0: can't add hid device: -71 [ 142.297101][ T4230] usbhid: probe of 3-1:0.0 failed with error -71 [ 142.561637][ T4230] usb 3-1: USB disconnect, device number 2 [ 142.583365][ T5136] netlink: 16 bytes leftover after parsing attributes in process `syz.3.229'. [ 142.641078][ T1109] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.652828][ T1109] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 142.669038][ T1109] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.680499][ T1109] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 142.689883][ T1109] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.737458][ T5138] loop0: detected capacity change from 0 to 4096 [ 142.752297][ T1109] hub 2-1:1.0: bad descriptor, ignoring hub [ 142.758302][ T1109] hub: probe of 2-1:1.0 failed with error -5 [ 142.766067][ T1109] cdc_wdm 2-1:1.0: skipping garbage [ 142.772503][ T1109] cdc_wdm 2-1:1.0: skipping garbage [ 142.797061][ T1109] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 142.804090][ T1109] cdc_wdm 2-1:1.0: Unknown control protocol [ 142.864412][ T5142] loop4: detected capacity change from 0 to 512 [ 143.061069][ T4230] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 143.202392][ T5142] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.230: corrupted inode contents [ 143.224982][ T5142] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 143.236498][ T5142] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.230: corrupted inode contents [ 143.252184][ T5142] EXT4-fs error (device loop4): ext4_evict_inode:332: inode #15: comm syz.4.230: mark_inode_dirty error [ 143.266673][ T5142] EXT4-fs (loop4): 1 orphan inode deleted [ 143.272564][ T5142] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.729887][ T5138] ntfs3: loop0: Failed to load $Extend. [ 143.761793][ T4230] usb 4-1: Using ep0 maxpacket: 32 [ 143.883965][ T5131] usb 2-1: USB disconnect, device number 3 [ 144.033349][ T4194] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 144.040420][ T4194] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 144.351635][ T4230] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 144.881020][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.889690][ T4230] usb 4-1: Product: syz [ 144.894317][ T4230] usb 4-1: Manufacturer: syz [ 144.898978][ T4230] usb 4-1: SerialNumber: syz [ 144.917267][ T4230] usb 4-1: config 0 descriptor?? [ 145.020586][ T4230] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 145.036512][ T4230] dvb-usb: bulk message failed: -22 (4/0) [ 145.043989][ T4230] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 145.099825][ T4230] dvb-usb: bulk message failed: -22 (5/0) [ 145.130697][ T4230] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 145.232337][ T4230] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 145.286771][ T4230] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 145.307788][ T4230] usb 4-1: media controller created [ 145.376762][ T4230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.945734][ T4230] usb 4-1: selecting invalid altsetting 3 [ 146.966985][ T4230] ttusb2: set interface to alts=3 failed [ 147.026848][ T4230] DVB: Unable to find symbol tda10086_attach() [ 147.039297][ T4230] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 147.131337][ T4230] dvb-usb: bulk message failed: -22 (4/0) [ 147.137144][ T4230] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 147.206379][ T4230] dvb-usb: bulk message failed: -22 (5/0) [ 147.270959][ T4230] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 147.295471][ T5182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.242'. [ 147.310662][ T4230] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 147.385282][ T4230] usb 4-1: USB disconnect, device number 5 [ 147.531810][ T4230] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 147.610203][ T5186] FAULT_INJECTION: forcing a failure. [ 147.610203][ T5186] name failslab, interval 1, probability 0, space 0, times 0 [ 147.693247][ T5186] CPU: 1 PID: 5186 Comm: syz.1.243 Not tainted syzkaller #0 [ 147.700608][ T5186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 147.710704][ T5186] Call Trace: [ 147.714020][ T5186] [ 147.716988][ T5186] dump_stack_lvl+0x188/0x250 [ 147.721732][ T5186] ? show_regs_print_info+0x20/0x20 [ 147.726971][ T5186] ? load_image+0x410/0x410 [ 147.731516][ T5186] ? __might_sleep+0xf0/0xf0 [ 147.736152][ T5186] ? __lock_acquire+0x7d40/0x7d40 [ 147.741231][ T5186] should_fail+0x383/0x4b0 [ 147.745696][ T5186] should_failslab+0x5/0x20 [ 147.750243][ T5186] slab_pre_alloc_hook+0x51/0xc0 [ 147.755225][ T5186] __kmalloc_node+0x6d/0x3a0 [ 147.759854][ T5186] ? kvmalloc_node+0x84/0x130 [ 147.764573][ T5186] kvmalloc_node+0x84/0x130 [ 147.769089][ T5186] __se_sys_add_key+0x27b/0x410 [ 147.773964][ T5186] ? __x64_sys_add_key+0xc0/0xc0 [ 147.778955][ T5186] ? lockdep_hardirqs_on+0x94/0x140 [ 147.784209][ T5186] ? __x64_sys_add_key+0x1c/0xc0 [ 147.789157][ T5186] do_syscall_64+0x4c/0xa0 [ 147.793585][ T5186] ? clear_bhb_loop+0x30/0x80 [ 147.798284][ T5186] ? clear_bhb_loop+0x30/0x80 [ 147.802998][ T5186] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 147.808915][ T5186] RIP: 0033:0x7f64578561d9 [ 147.813348][ T5186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.832965][ T5186] RSP: 002b:00007f6455aae028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 147.841392][ T5186] RAX: ffffffffffffffda RBX: 00007f6457addfa0 RCX: 00007f64578561d9 [ 147.849468][ T5186] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 147.857473][ T5186] RBP: 00007f64578ed888 R08: 000000003efdd724 R09: 0000000000000000 [ 147.865479][ T5186] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 147.873455][ T5186] R13: 00007f6457ade038 R14: 00007f6457addfa0 R15: 00007fff0ab92528 [ 147.881455][ T5186] [ 147.992115][ T5188] loop2: detected capacity change from 0 to 256 [ 148.608302][ T5188] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 149.866489][ T5206] loop1: detected capacity change from 0 to 512 [ 149.898438][ T5208] loop0: detected capacity change from 0 to 512 [ 149.948443][ T5206] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.248: corrupted inode contents [ 149.967229][ T5206] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 149.983584][ T5206] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.248: corrupted inode contents [ 149.996792][ T5206] EXT4-fs error (device loop1): ext4_evict_inode:332: inode #15: comm syz.1.248: mark_inode_dirty error [ 150.008944][ T5206] EXT4-fs (loop1): 1 orphan inode deleted [ 150.015014][ T5206] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.084994][ T5208] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 150.138483][ T5214] loop4: detected capacity change from 0 to 256 [ 150.205370][ T5208] EXT4-fs (loop0): 1 truncate cleaned up [ 150.219969][ T5208] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 150.285529][ T5214] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 150.674197][ T5219] Invalid ELF header magic: != ELF [ 151.766358][ T5231] Error parsing options; rc = [-22] [ 152.871089][ T4608] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 153.351186][ T5132] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 153.439972][ T5246] device syzkaller1 entered promiscuous mode [ 153.667610][ T4608] usb 4-1: Using ep0 maxpacket: 16 [ 153.721390][ T5132] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.747245][ T5132] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.832565][ T5132] usb 1-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 153.900800][ T5132] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.172345][ T5255] loop4: detected capacity change from 0 to 512 [ 154.199617][ T5255] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 154.258202][ T5255] EXT4-fs (loop4): 1 truncate cleaned up [ 154.280936][ T5255] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 154.372558][ T4608] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 154.390224][ T4608] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.405164][ T5257] kvm [5256]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x100000080 [ 154.420541][ T4608] usb 4-1: Product: syz [ 154.425527][ T4608] usb 4-1: Manufacturer: syz [ 154.430406][ T5257] kvm [5256]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 154.445850][ T4608] usb 4-1: SerialNumber: syz [ 154.547995][ T5257] kvm [5256]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x80 [ 154.557373][ T5257] kvm [5256]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 154.595270][ T5257] kvm [5256]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x80 [ 154.620500][ T5257] kvm [5256]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 154.649478][ T4608] usb 4-1: config 0 descriptor?? [ 154.657552][ T5257] kvm [5256]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x80 [ 154.667851][ T5257] kvm [5256]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 154.682048][ T5257] kvm [5256]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x80 [ 154.712189][ T5257] kvm [5256]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 154.721142][ T4608] dvb_usb_dtv5100: probe of 4-1:0.0 failed with error -71 [ 154.747663][ T4608] usb 4-1: USB disconnect, device number 6 [ 156.235827][ T5274] loop2: detected capacity change from 0 to 128 [ 156.269245][ T5274] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 156.281036][ T5132] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 156.496438][ T4608] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 156.551103][ T5132] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 156.582619][ T5132] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 156.593439][ T5132] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 156.641084][ T5132] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 156.684741][ T5132] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 156.721085][ T5132] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 156.751096][ T5132] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 156.781081][ T5132] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 156.821024][ T5132] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 156.861016][ T5132] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 156.881286][ T4608] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.901009][ T5132] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 156.911064][ T4608] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 156.942122][ T4608] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.951691][ T5132] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 157.001052][ T5132] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 157.051307][ T5132] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 157.091061][ T5132] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 157.121240][ T4608] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 157.151051][ T5132] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 157.161584][ T4608] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 157.169894][ T4608] usb 4-1: Product: syz [ 157.174611][ T4608] usb 4-1: Manufacturer: syz [ 157.221259][ T5132] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 157.221279][ T5266] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 157.272510][ T4608] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 157.281082][ T5132] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 157.297437][ T4608] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 157.372451][ T5132] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 157.411115][ T5132] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 157.461794][ T5132] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 157.526363][ T5132] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 157.538710][ T4608] usb 4-1: USB disconnect, device number 7 [ 157.581802][ T5132] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 157.604335][ T4608] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 157.631173][ T5132] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 157.691277][ T5132] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 157.761186][ T5132] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 157.825781][ T4608] garmin_gps 4-1:1.0: device disconnected [ 157.828224][ T5132] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 157.872236][ T5288] loop0: detected capacity change from 0 to 32768 [ 158.672357][ T5325] loop1: detected capacity change from 0 to 16 [ 159.292313][ T5132] ax88179_178a 1-1:1.0 eth1: register 'ax88179_178a' at usb-dummy_hcd.0-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, 0a:9c:a6:b2:8d:09 [ 159.311986][ T5325] erofs: (device loop1): mounted with root inode @ nid 36. [ 159.339239][ T5132] usb 1-1: USB disconnect, device number 5 [ 159.370697][ T5288] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 159.406542][ T5132] ax88179_178a 1-1:1.0 eth1: unregister 'ax88179_178a' usb-dummy_hcd.0-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 159.425189][ T5288] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 160.092102][ T5288] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 160.130514][ T5335] ip_tables: iptables: counters copy to user failed while replacing table [ 160.181873][ T4608] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 160.189893][ T4608] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 160.395996][ T4187] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 160.419897][ T4608] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 230ms [ 160.456054][ T4608] gfs2: fsid=syz:syz.0: jid=0: Done [ 160.475521][ T5288] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 160.539863][ T5288] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 160.589316][ T4187] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 161.426776][ T5351] loop1: detected capacity change from 0 to 1024 [ 161.485794][ T5351] EXT4-fs (loop1): Ignoring removed bh option [ 161.521112][ T5351] EXT4-fs (loop1): Ignoring removed bh option [ 161.600794][ T5351] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,bh,min_batch_time=0x0000000000000008,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 161.718137][ T26] audit: type=1326 audit(1791709237.525:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5358 comm="syz.2.299" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68c6a51d9 code=0x7ffc0000 [ 161.785791][ T26] audit: type=1326 audit(1791709237.525:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5358 comm="syz.2.299" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68c6a51d9 code=0x7ffc0000 [ 162.124491][ T26] audit: type=1326 audit(1791709237.555:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5358 comm="syz.2.299" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc68c6a51d9 code=0x7ffc0000 [ 162.580094][ T26] audit: type=1326 audit(1791709237.555:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5358 comm="syz.2.299" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc68c6a51d9 code=0x7ffc0000 [ 162.665275][ T4185] EXT4-fs error (device loop1): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /58/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 162.882891][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 162.977760][ T4185] EXT4-fs error (device loop1): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /58/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 163.108813][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 163.131582][ T4185] EXT4-fs error (device loop1): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 163.216658][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 163.239575][ T4185] EXT4-fs warning (device loop1): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 163.271362][ T4185] EXT4-fs error (device loop1): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /58/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 163.320237][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 163.336181][ T4185] EXT4-fs error (device loop1): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /58/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 163.372983][ T5394] FAULT_INJECTION: forcing a failure. [ 163.372983][ T5394] name failslab, interval 1, probability 0, space 0, times 0 [ 163.410981][ T5394] CPU: 1 PID: 5394 Comm: syz.2.307 Not tainted syzkaller #0 [ 163.418369][ T5394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 163.428473][ T5394] Call Trace: [ 163.431825][ T5394] [ 163.434802][ T5394] dump_stack_lvl+0x188/0x250 [ 163.439544][ T5394] ? show_regs_print_info+0x20/0x20 [ 163.444808][ T5394] ? load_image+0x410/0x410 [ 163.449358][ T5394] ? __lock_acquire+0x7d40/0x7d40 [ 163.454462][ T5394] should_fail+0x383/0x4b0 [ 163.458925][ T5394] should_failslab+0x5/0x20 [ 163.463474][ T5394] slab_pre_alloc_hook+0x51/0xc0 [ 163.468479][ T5394] kmem_cache_alloc_trace+0x47/0x290 [ 163.473804][ T5394] ? sctp_endpoint_new+0x82/0xa00 [ 163.478870][ T5394] ? lockdep_softirqs_off+0x430/0x430 [ 163.484294][ T5394] sctp_endpoint_new+0x82/0xa00 [ 163.489197][ T5394] ? __raw_spin_lock_init+0x41/0x100 [ 163.494523][ T5394] sctp_init_sock+0x95b/0x11c0 [ 163.499375][ T5394] sctp_v6_init_sock+0x12/0x60 [ 163.504195][ T5394] inet6_create+0xd88/0x1130 [ 163.508845][ T5394] __sock_create+0x473/0x910 [ 163.513488][ T5394] __sys_socket+0xe2/0x170 [ 163.517954][ T5394] __x64_sys_socket+0x76/0x80 [ 163.522809][ T5394] do_syscall_64+0x4c/0xa0 [ 163.527279][ T5394] ? clear_bhb_loop+0x30/0x80 [ 163.532003][ T5394] ? clear_bhb_loop+0x30/0x80 [ 163.536725][ T5394] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.542664][ T5394] RIP: 0033:0x7fc68c6a51d9 [ 163.547125][ T5394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.566875][ T5394] RSP: 002b:00007fc68a8fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 163.575342][ T5394] RAX: ffffffffffffffda RBX: 00007fc68c92cfa0 RCX: 00007fc68c6a51d9 [ 163.583362][ T5394] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 000000000000000a [ 163.591380][ T5394] RBP: 00007fc68c73c888 R08: 0000000000000000 R09: 0000000000000000 [ 163.599477][ T5394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.607494][ T5394] R13: 00007fc68c92d038 R14: 00007fc68c92cfa0 R15: 00007ffd58a07b08 [ 163.615538][ T5394] [ 163.648069][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 163.661743][ T4185] EXT4-fs error (device loop1): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 163.701059][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 163.711016][ T4185] EXT4-fs warning (device loop1): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 163.732726][ T4185] EXT4-fs error (device loop1): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /58/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 163.748960][ T5397] loop4: detected capacity change from 0 to 8192 [ 163.757020][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 163.768397][ T4185] EXT4-fs error (device loop1): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /58/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 163.829659][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 163.868537][ T4185] EXT4-fs error (device loop1): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 163.887191][ T26] audit: type=1800 audit(1791709239.695:83): pid=5397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.308" name="file1" dev="loop4" ino=1048640 res=0 errno=0 [ 163.941186][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 163.947762][ T4185] EXT4-fs warning (device loop1): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 164.001457][ T4185] EXT4-fs error (device loop1): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /58/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 164.064725][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 164.085536][ T4185] EXT4-fs warning (device loop1): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 164.128417][ T4185] EXT4-fs warning (device loop1): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 164.154074][ T4185] EXT4-fs warning (device loop1): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 164.180468][ T4185] EXT4-fs warning (device loop1): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 164.214096][ T4185] EXT4-fs warning (device loop1): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 164.292840][ T4185] EXT4-fs warning (device loop1): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 164.352809][ T4185] EXT4-fs warning (device loop1): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 164.631487][ T5422] netlink: 16 bytes leftover after parsing attributes in process `syz.4.311'. [ 165.703288][ T5431] loop4: detected capacity change from 0 to 256 [ 167.740963][ T4185] EXT4-fs error: 254 callbacks suppressed [ 167.740999][ T4185] EXT4-fs error (device loop1): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /58/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 168.752763][ T4185] EXT4-fs: 254 callbacks suppressed [ 168.752779][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 168.760781][ T5431] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 168.823731][ T4185] EXT4-fs error (device loop1): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /58/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 169.467512][ T5442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.316'. [ 169.490051][ T5442] mmap: syz.3.316 (5442) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 169.514096][ T26] audit: type=1326 audit(1791709245.285:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.3.316" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7b4891d9 code=0x7ffc0000 [ 169.565499][ T26] audit: type=1326 audit(1791709245.295:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.3.316" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c7b4891d9 code=0x7ffc0000 [ 169.605944][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 169.641061][ T4185] EXT4-fs error (device loop1): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 169.672078][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 169.679065][ T26] audit: type=1326 audit(1791709245.295:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.3.316" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7b4891d9 code=0x7ffc0000 [ 169.716505][ T4185] EXT4-fs warning: 78 callbacks suppressed [ 169.716523][ T4185] EXT4-fs warning (device loop1): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 169.862057][ T4185] EXT4-fs error (device loop1): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /58/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 169.864636][ T26] audit: type=1326 audit(1791709245.295:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.3.316" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c7b4891d9 code=0x7ffc0000 [ 169.984224][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 169.999066][ T26] audit: type=1326 audit(1791709245.295:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.3.316" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7b4891d9 code=0x7ffc0000 [ 170.047399][ T4185] EXT4-fs error (device loop1): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /58/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 170.099525][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 170.104494][ T26] audit: type=1326 audit(1791709245.295:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.3.316" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c7b4891d9 code=0x7ffc0000 [ 170.130117][ T4185] EXT4-fs error (device loop1): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 170.133038][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 171.081145][ T4185] EXT4-fs warning (device loop1): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 171.104421][ T4185] EXT4-fs error (device loop1): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /58/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 171.170862][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 171.177667][ T4185] EXT4-fs error (device loop1): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /58/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 171.278821][ T5460] loop0: detected capacity change from 0 to 256 [ 171.285438][ T26] audit: type=1326 audit(1791709245.295:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.3.316" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7b4891d9 code=0x7ffc0000 [ 171.335069][ T5460] overlayfs: failed to resolve './file0': -2 [ 171.371531][ T26] audit: type=1326 audit(1791709245.295:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.3.316" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8c7b4891d9 code=0x7ffc0000 [ 171.407388][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 171.441279][ T4185] EXT4-fs error (device loop1): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 171.445931][ T26] audit: type=1326 audit(1791709245.295:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.3.316" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7b4891d9 code=0x7ffc0000 [ 171.519482][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 171.530867][ T4185] EXT4-fs warning (device loop1): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 171.573486][ T26] audit: type=1326 audit(1791709245.295:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.3.316" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c7b4891d9 code=0x7ffc0000 [ 171.606528][ T4185] EXT4-fs error (device loop1): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /58/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 171.828874][ T5444] loop4: detected capacity change from 0 to 32768 [ 172.064250][ T5444] (syz.4.317,5444,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 172.322394][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 172.418934][ T5444] (syz.4.317,5444,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 172.469778][ T4185] EXT4-fs warning (device loop1): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 172.560954][ T5444] JBD2: Ignoring recovery information on journal [ 172.612797][ T4185] EXT4-fs warning (device loop1): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 172.639831][ T4185] EXT4-fs warning (device loop1): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 172.658303][ T4185] EXT4-fs warning (device loop1): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 172.682737][ T4185] EXT4-fs warning (device loop1): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 172.710362][ T5444] JBD2: recovery failed [ 172.716465][ T5444] (syz.4.317,5444,1):ocfs2_journal_load:1106 ERROR: Failed to load journal! [ 172.741537][ T5444] (syz.4.317,5444,1):ocfs2_check_volume:2435 ERROR: ocfs2 journal load failed! -5 [ 172.751401][ T4185] EXT4-fs error: 15 callbacks suppressed [ 172.751426][ T4185] EXT4-fs error (device loop1): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /58/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 172.861022][ T5444] (syz.4.317,5444,0):ocfs2_check_volume:2491 ERROR: status = -5 [ 172.880964][ T5444] (syz.4.317,5444,0):ocfs2_mount_volume:1824 ERROR: status = -5 [ 172.937207][ T4185] EXT4-fs error (device loop1): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 173.019121][ T4185] EXT4-fs warning (device loop1): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 173.047504][ T4185] EXT4-fs error (device loop1): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /58/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 173.056979][ T5444] (syz.4.317,5444,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 173.633652][ T4185] EXT4-fs error (device loop1): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /58/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 173.656747][ T4185] EXT4-fs error (device loop1): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 173.677168][ T4185] EXT4-fs warning (device loop1): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 173.692035][ T4185] EXT4-fs error (device loop1): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /58/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 173.735304][ T4185] EXT4-fs error (device loop1): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /58/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 173.764936][ T4185] EXT4-fs: 21 callbacks suppressed [ 173.764952][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 173.780010][ T4185] EXT4-fs error (device loop1): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 173.806340][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 173.813761][ T4185] EXT4-fs error (device loop1): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /58/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 173.845852][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 173.856111][ T4185] EXT4-fs error (device loop1): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /58/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 173.894018][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 173.901566][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 173.909574][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 173.917920][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 173.926166][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 173.970435][ T5485] loop0: detected capacity change from 0 to 512 [ 174.083063][ T5485] EXT4-fs (loop0): invalid journal inode [ 174.088921][ T5485] EXT4-fs (loop0): can't get journal size [ 175.542976][ T5485] EXT4-fs (loop0): 1 truncate cleaned up [ 175.548837][ T5485] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 175.600903][ T5132] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 176.571143][ T5132] usb 3-1: unable to get BOS descriptor or descriptor too short [ 176.611238][ T5132] usb 3-1: not running at top speed; connect to a high speed hub [ 176.619164][ T5132] usb 3-1: too many configurations: 43, using maximum allowed: 8 [ 176.741085][ T5132] usb 3-1: config index 0 descriptor too short (expected 60985, got 45) [ 176.749481][ T5132] usb 3-1: config 4 has too many interfaces: 160, using maximum allowed: 32 [ 176.771041][ T5132] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 176.779802][ T5132] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 176.800910][ T5132] usb 3-1: config 4 has 1 interface, different from the descriptor's value: 160 [ 176.810015][ T5132] usb 3-1: config 4 has no interface number 0 [ 176.830009][ T5132] usb 3-1: config 4 interface 35 has no altsetting 0 [ 176.931186][ T5132] usb 3-1: config index 1 descriptor too short (expected 60985, got 45) [ 176.949846][ T5132] usb 3-1: config 4 has too many interfaces: 160, using maximum allowed: 32 [ 176.989074][ T5132] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 177.015176][ T5132] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 177.058670][ T5132] usb 3-1: config 4 has 1 interface, different from the descriptor's value: 160 [ 178.420960][ T5132] usb 3-1: config 4 has no interface number 0 [ 178.440755][ T5132] usb 3-1: config 4 interface 35 has no altsetting 0 [ 178.508337][ T5132] usb 3-1: unable to read config index 2 descriptor/start: -71 [ 179.440122][ T5132] usb 3-1: can't read configurations, error -71 [ 179.515406][ T4231] Bluetooth: hci0: command 0x0409 tx timeout [ 179.554895][ T5502] chnl_net:caif_netlink_parms(): no params data found [ 179.739696][ T5502] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.840912][ T5502] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.881283][ T5502] device bridge_slave_0 entered promiscuous mode [ 179.926246][ T5502] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.024715][ T5502] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.194071][ T5502] device bridge_slave_1 entered promiscuous mode [ 180.288395][ T5502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.366193][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 180.432818][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 180.475881][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 180.513683][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 180.559753][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 180.598515][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 180.643212][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 180.673227][ T5502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.910860][ T5502] team0: Port device team_slave_0 added [ 180.940398][ T5502] team0: Port device team_slave_1 added [ 181.008503][ T5502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.043361][ T5502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.118219][ T5502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.170946][ T5502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.177972][ T5502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.287661][ T5502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.387347][ T5534] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 181.411568][ T5534] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 181.435605][ T5502] device hsr_slave_0 entered promiscuous mode [ 181.463504][ T5502] device hsr_slave_1 entered promiscuous mode [ 181.518028][ T5502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.547410][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 181.555504][ T5502] Cannot create hsr debugfs directory [ 181.703410][ T5540] loop3: detected capacity change from 0 to 256 [ 181.737013][ T5527] loop0: detected capacity change from 0 to 32768 [ 181.761562][ T5540] exfat: Deprecated parameter 'namecase' [ 181.767433][ T5540] exfat: Unknown parameter 'sys_tz' [ 181.824278][ T5527] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.341 (5527) [ 181.885452][ T5527] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 181.925948][ T5527] BTRFS info (device loop0): setting nodatasum [ 181.963110][ T5527] BTRFS info (device loop0): force zlib compression, level 3 [ 181.971038][ T5527] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 182.041022][ T5527] BTRFS info (device loop0): use lzo compression, level 0 [ 182.048236][ T5527] BTRFS info (device loop0): turning on flush-on-commit [ 182.121392][ T5502] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 182.140886][ T5527] BTRFS info (device loop0): enabling auto defrag [ 182.147406][ T5527] BTRFS info (device loop0): max_inline at 4096 [ 182.164989][ T5502] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 182.193094][ T5502] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 182.200509][ T5527] BTRFS info (device loop0): using free space tree [ 182.229820][ T5527] BTRFS info (device loop0): has skinny extents [ 182.237838][ T5502] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 182.501236][ T5527] BTRFS info (device loop0): enabling ssd optimizations [ 182.546957][ T5502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.600705][ T5502] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.623468][ T5575] netlink: 'syz.3.349': attribute type 8 has an invalid length. [ 182.647259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.680191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.749272][ T5578] netlink: 'syz.3.349': attribute type 8 has an invalid length. [ 182.810973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.819740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.873324][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.880484][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.952081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.973816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.014942][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.022508][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.046020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.063596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.082176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.120591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.140530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.158997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 183.208552][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.232681][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.254678][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.263484][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.276767][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.305863][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.329818][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 183.621363][ T5579] Bluetooth: hci0: command 0x040f tx timeout [ 183.666233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.681193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.291443][ T5602] kAFS: bad VL server IP address [ 185.371997][ T4232] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 185.463985][ T5502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.661162][ T4232] usb 4-1: Using ep0 maxpacket: 16 [ 185.691813][ T5581] Bluetooth: hci0: command 0x0419 tx timeout [ 185.758875][ T5609] gadgetfs: bound to dummy_udc driver [ 185.821127][ T4232] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 185.846894][ T4232] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.936639][ T4232] usb 4-1: config 0 has no interface number 0 [ 185.990656][ T4232] usb 4-1: config 0 interface 68 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 186.281200][ T5581] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 186.289946][ T4232] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 186.446991][ T5607] gadgetfs: suspended from state 2 [ 186.506238][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.528480][ T4232] usb 4-1: Product: syz [ 186.552063][ T4232] usb 4-1: Manufacturer: syz [ 186.556757][ T4232] usb 4-1: SerialNumber: syz [ 186.634115][ T4232] usb 4-1: config 0 descriptor?? [ 186.662046][ T4232] usb 4-1: can't set config #0, error -71 [ 186.708477][ T4232] usb 4-1: USB disconnect, device number 8 [ 186.923052][ T5628] FAULT_INJECTION: forcing a failure. [ 186.923052][ T5628] name failslab, interval 1, probability 0, space 0, times 0 [ 186.991226][ T5628] CPU: 1 PID: 5628 Comm: syz.2.363 Not tainted syzkaller #0 [ 186.998598][ T5628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 187.008717][ T5628] Call Trace: [ 187.012037][ T5628] [ 187.015023][ T5628] dump_stack_lvl+0x188/0x250 [ 187.019748][ T5628] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 187.025456][ T5628] ? show_regs_print_info+0x20/0x20 [ 187.030698][ T5628] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 187.036402][ T5628] should_fail+0x383/0x4b0 [ 187.040865][ T5628] should_failslab+0x5/0x20 [ 187.045403][ T5628] slab_pre_alloc_hook+0x51/0xc0 [ 187.050382][ T5628] ? ceph_msg_new2+0x3c/0x4a0 [ 187.055105][ T5628] kmem_cache_alloc+0x3d/0x280 [ 187.059926][ T5628] ceph_msg_new2+0x3c/0x4a0 [ 187.064487][ T5628] msgpool_alloc+0x7c/0x1b0 [ 187.069026][ T5628] ? ceph_msgpool_init+0x180/0x180 [ 187.074178][ T5628] mempool_init_node+0x1e5/0x480 [ 187.079263][ T5628] ? msgpool_alloc+0x1b0/0x1b0 [ 187.084166][ T5628] ? ceph_msgpool_init+0x180/0x180 [ 187.089329][ T5628] mempool_create+0x7d/0xc0 [ 187.093883][ T5628] ceph_msgpool_init+0xa3/0x180 [ 187.098785][ T5628] ceph_osdc_init+0x52c/0x8a0 [ 187.103516][ T5628] ceph_create_client+0x242/0x300 [ 187.108580][ T5628] ceph_get_tree+0xf6/0x1290 [ 187.113204][ T5628] ? bpf_lsm_capable+0x5/0x10 [ 187.117918][ T5628] ? security_capable+0x85/0xb0 [ 187.122806][ T5628] vfs_get_tree+0x88/0x270 [ 187.127262][ T5628] vfs_fsconfig_locked+0x22f/0x400 [ 187.132415][ T5628] __se_sys_fsconfig+0x69e/0x7e0 [ 187.137401][ T5628] ? __x64_sys_fsconfig+0xc0/0xc0 [ 187.142483][ T5628] ? lockdep_hardirqs_on+0x94/0x140 [ 187.147721][ T5628] ? __x64_sys_fsconfig+0x1c/0xc0 [ 187.152789][ T5628] do_syscall_64+0x4c/0xa0 [ 187.157243][ T5628] ? clear_bhb_loop+0x30/0x80 [ 187.161961][ T5628] ? clear_bhb_loop+0x30/0x80 [ 187.166675][ T5628] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 187.172618][ T5628] RIP: 0033:0x7fc68c6a51d9 [ 187.177066][ T5628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.196701][ T5628] RSP: 002b:00007fc68a8fd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 187.205154][ T5628] RAX: ffffffffffffffda RBX: 00007fc68c92cfa0 RCX: 00007fc68c6a51d9 [ 187.213163][ T5628] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 187.221167][ T5628] RBP: 00007fc68c73c888 R08: 0000000000000000 R09: 0000000000000000 [ 187.229170][ T5628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.237169][ T5628] R13: 00007fc68c92d038 R14: 00007fc68c92cfa0 R15: 00007ffd58a07b08 [ 187.245194][ T5628] [ 187.486073][ T5502] device veth0_vlan entered promiscuous mode [ 187.554306][ T5502] device veth1_vlan entered promiscuous mode [ 187.661526][ T5502] device veth0_macvtap entered promiscuous mode [ 187.844990][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 187.867659][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.911816][ T5644] loop2: detected capacity change from 0 to 1024 [ 187.927408][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 187.993666][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.071235][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 188.116609][ T5644] hfsplus: request for non-existent node 33423360 in B*Tree [ 188.130565][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 188.159435][ T5644] hfsplus: request for non-existent node 33423360 in B*Tree [ 188.176724][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.219154][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.236608][ T5648] hfsplus: request for non-existent node 33423360 in B*Tree [ 188.269776][ T5648] hfsplus: request for non-existent node 33423360 in B*Tree [ 188.280978][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.317585][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.333869][ T5644] hfsplus: request for non-existent node 33423360 in B*Tree [ 188.365641][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 188.380400][ T5644] hfsplus: request for non-existent node 33423360 in B*Tree [ 188.446533][ T5648] hfsplus: request for non-existent node 33423360 in B*Tree [ 188.496743][ T5648] hfsplus: request for non-existent node 33423360 in B*Tree [ 188.527229][ T5649] hfsplus: request for non-existent node 33423360 in B*Tree [ 188.629730][ T5649] hfsplus: request for non-existent node 33423360 in B*Tree [ 188.639508][ T5502] device veth1_macvtap entered promiscuous mode [ 188.673146][ T5648] hfsplus: request for non-existent node 33423360 in B*Tree [ 188.680545][ T5648] hfsplus: request for non-existent node 33423360 in B*Tree [ 188.701497][ T5644] hfsplus: request for non-existent node 33423360 in B*Tree [ 188.714988][ T5644] hfsplus: request for non-existent node 33423360 in B*Tree [ 188.749566][ T5649] hfsplus: request for non-existent node 33423360 in B*Tree [ 188.757938][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.778304][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.781354][ T5649] hfsplus: request for non-existent node 33423360 in B*Tree [ 188.797005][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.828156][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.849039][ T5648] hfsplus: request for non-existent node 33423360 in B*Tree [ 188.857086][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.880985][ T5648] hfsplus: request for non-existent node 33423360 in B*Tree [ 188.900635][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.913647][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.925223][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.931147][ T5644] hfsplus: request for non-existent node 33423360 in B*Tree [ 188.936562][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.953362][ T5644] hfsplus: request for non-existent node 33423360 in B*Tree [ 188.962647][ T5649] hfsplus: request for non-existent node 33423360 in B*Tree [ 188.970157][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.991256][ T5649] hfsplus: request for non-existent node 33423360 in B*Tree [ 189.002574][ T5502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.012548][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.035129][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.053032][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.111984][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.130895][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.150932][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.185221][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.206241][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.226797][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.243040][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.270849][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.290841][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.312714][ T5502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.321049][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.340179][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.367449][ T5502] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.427856][ T5502] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.455927][ T5502] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.515475][ T5502] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.618611][ T5653] sctp: failed to load transform for md5: -2 [ 189.852974][ T5674] kvm: emulating exchange as write [ 189.858526][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.872838][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.925085][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.930362][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 190.207282][ C0] ------------[ cut here ]------------ [ 190.213101][ C0] WARNING: CPU: 0 PID: 5678 at net/mac80211/tx.c:4877 __ieee80211_beacon_get+0x178a/0x1ff0 [ 190.223274][ C0] Modules linked in: [ 190.227282][ C0] CPU: 0 PID: 5678 Comm: syz.4.379 Not tainted syzkaller #0 [ 190.234708][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 190.244904][ C0] RIP: 0010:__ieee80211_beacon_get+0x178a/0x1ff0 [ 190.251419][ C0] Code: 24 f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 82 de 24 f8 0f 0b e9 16 ef ff ff e8 76 de 24 f8 <0f> 0b e9 7c f2 ff ff e8 ca d1 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 190.271203][ C0] RSP: 0000:ffffc900000078c0 EFLAGS: 00010246 [ 190.277402][ C0] RAX: ffffffff895444ea RBX: ffff888061755e00 RCX: ffff88802c3e0000 [ 190.285532][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 190.293635][ C0] RBP: ffffc90000007af8 R08: ffff88802c3e0000 R09: 0000000000000003 [ 190.301744][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: f8f8f8f8f8f8f8f8 [ 190.309794][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000000f28 [ 190.318079][ C0] FS: 00007feef4f816c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 190.327180][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 190.333886][ C0] CR2: fffffffffffffe70 CR3: 000000004be02000 CR4: 00000000003526f0 [ 190.342001][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 190.350117][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 190.358248][ C0] Call Trace: [ 190.361676][ C0] [ 190.364620][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 190.370757][ C0] ? verify_lock_unused+0x140/0x140 [ 190.376250][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 190.381613][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 190.386562][ C0] ? mark_lock+0x94/0x320 [ 190.391087][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 190.396663][ C0] mac80211_hwsim_beacon_tx+0x104/0x900 [ 190.402391][ C0] __iterate_interfaces+0x225/0x4c0 [ 190.407683][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 190.414076][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 190.420443][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 190.427609][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 190.432954][ C0] ? hw_scan_work+0xef0/0xef0 [ 190.437757][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 190.443148][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 190.448388][ C0] hrtimer_run_softirq+0x176/0x240 [ 190.453668][ C0] handle_softirqs+0x336/0x830 [ 190.458657][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 190.463677][ C0] ? do_softirq+0x210/0x210 [ 190.468290][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 190.473548][ C0] __irq_exit_rcu+0x13b/0x230 [ 190.478334][ C0] ? irq_exit_rcu+0x20/0x20 [ 190.483009][ C0] irq_exit_rcu+0x5/0x20 [ 190.487348][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 190.493124][ C0] [ 190.496154][ C0] [ 190.499170][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 190.505373][ C0] RIP: 0010:memset+0x0/0x40 [ 190.509973][ C0] Code: f9 07 31 ed eb d7 00 00 cc cc 89 f6 48 8b 0c 24 31 d2 e9 43 ef ff ff 0f 1f 00 89 f6 48 8b 0c 24 ba 01 00 00 00 e9 30 ef ff ff <55> 41 56 53 48 89 d3 89 f5 49 89 fe 48 8b 4c 24 18 48 89 d6 ba 01 [ 190.529688][ C0] RSP: 0000:ffffc9000338f258 EFLAGS: 00000246 [ 190.535956][ C0] RAX: ffffffff81c886b1 RBX: 0000000000040000 RCX: ffff88802c3e0000 [ 190.544117][ C0] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc9000338f350 [ 190.552224][ C0] RBP: ffffc9000338f3f0 R08: ffffffff8e6b282f R09: 1ffffffff1cd6505 [ 190.560295][ C0] R10: dffffc0000000000 R11: fffffbfff1cd6506 R12: 1ffff92000671e58 [ 190.568527][ C0] R13: dffffc0000000000 R14: ffff888061722a84 R15: 1ffff1100c2e4550 [ 190.576730][ C0] ? __kernel_write+0x131/0x980 [ 190.582213][ C0] __kernel_write+0x168/0x980 [ 190.587100][ C0] ? vfs_read+0xd50/0xd50 [ 190.591568][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 190.596711][ C0] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 190.602869][ C0] ? cgroup_freezing+0x264/0x310 [ 190.607932][ C0] ? freezing_slow_path+0x104/0x150 [ 190.613289][ C0] __dump_emit+0x258/0x380 [ 190.617808][ C0] ? wait_for_dump_helpers+0x3e0/0x3e0 [ 190.623437][ C0] ? dump_user_range+0x1ce/0x340 [ 190.628520][ C0] ? dump_emit+0x145/0x3d0 [ 190.633087][ C0] dump_user_range+0x84/0x340 [ 190.637872][ C0] elf_core_dump+0x2fe0/0x3530 [ 190.642828][ C0] ? load_elf_library+0x980/0x980 [ 190.647985][ C0] ? verify_lock_unused+0x140/0x140 [ 190.653351][ C0] ? dump_vma_snapshot+0xaf1/0xe40 [ 190.658661][ C0] ? rcu_read_lock_any_held+0xb0/0x130 [ 190.664287][ C0] do_coredump+0x14e8/0x2a40 [ 190.669024][ C0] ? nfs_stat_to_errno+0x170/0x170 [ 190.674368][ C0] ? lock_chain_count+0x20/0x20 [ 190.679359][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 190.684712][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 190.690035][ C0] get_signal+0x531/0x12e0 [ 190.694885][ C0] arch_do_signal_or_restart+0xe6/0x12a0 [ 190.700661][ C0] ? _raw_spin_unlock+0x40/0x40 [ 190.705689][ C0] ? force_sig_info_to_task+0x318/0x3c0 [ 190.711374][ C0] ? get_sigframe_size+0x10/0x10 [ 190.716400][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 190.722562][ C0] ? exit_to_user_mode_loop+0x3b/0x130 [ 190.728120][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 190.733548][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 190.739201][ C0] irqentry_exit_to_user_mode+0x5/0x30 [ 190.744794][ C0] exc_page_fault+0x88/0x100 [ 190.749478][ C0] asm_exc_page_fault+0x22/0x30 [ 190.754467][ C0] RIP: 0033:0x7feef6d4a1e1 [ 190.758971][ C0] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 190.778775][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 190.785048][ C0] RAX: 0000000000000000 RBX: 00007feef6fd2090 RCX: 00007feef6d4a1d9 [ 190.793185][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 190.801312][ C0] RBP: 00007feef6de1888 R08: 0000000000000000 R09: 0000000000000000 [ 190.809392][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 190.817516][ C0] R13: 00007feef6fd2128 R14: 00007feef6fd2090 R15: 00007fff5ec9a748 [ 190.825668][ C0] [ 190.828786][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 190.836083][ C0] CPU: 0 PID: 5678 Comm: syz.4.379 Not tainted syzkaller #0 [ 190.843366][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 190.853594][ C0] Call Trace: [ 190.856878][ C0] [ 190.859725][ C0] dump_stack_lvl+0x188/0x250 [ 190.864407][ C0] ? show_regs_print_info+0x20/0x20 [ 190.869609][ C0] ? load_image+0x410/0x410 [ 190.874122][ C0] panic+0x2f8/0x850 [ 190.878031][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 190.882548][ C0] ? __ieee80211_beacon_get+0x178a/0x1ff0 [ 190.888278][ C0] __warn+0x248/0x2b0 [ 190.892263][ C0] ? __ieee80211_beacon_get+0x178a/0x1ff0 [ 190.898004][ C0] report_bug+0x1b9/0x2e0 [ 190.902364][ C0] handle_bug+0x3a/0x70 [ 190.906525][ C0] exc_invalid_op+0x16/0x40 [ 190.911033][ C0] asm_exc_invalid_op+0x16/0x20 [ 190.915892][ C0] RIP: 0010:__ieee80211_beacon_get+0x178a/0x1ff0 [ 190.922224][ C0] Code: 24 f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 82 de 24 f8 0f 0b e9 16 ef ff ff e8 76 de 24 f8 <0f> 0b e9 7c f2 ff ff e8 ca d1 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 190.941866][ C0] RSP: 0000:ffffc900000078c0 EFLAGS: 00010246 [ 190.947937][ C0] RAX: ffffffff895444ea RBX: ffff888061755e00 RCX: ffff88802c3e0000 [ 190.955929][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 190.963921][ C0] RBP: ffffc90000007af8 R08: ffff88802c3e0000 R09: 0000000000000003 [ 190.971898][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: f8f8f8f8f8f8f8f8 [ 190.979870][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000000f28 [ 190.987856][ C0] ? __ieee80211_beacon_get+0x178a/0x1ff0 [ 190.993627][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 190.999622][ C0] ? verify_lock_unused+0x140/0x140 [ 191.004848][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 191.010049][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 191.014908][ C0] ? mark_lock+0x94/0x320 [ 191.019259][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 191.024746][ C0] mac80211_hwsim_beacon_tx+0x104/0x900 [ 191.030429][ C0] __iterate_interfaces+0x225/0x4c0 [ 191.035650][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 191.041897][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 191.048139][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 191.055171][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 191.060394][ C0] ? hw_scan_work+0xef0/0xef0 [ 191.065096][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 191.070315][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 191.075438][ C0] hrtimer_run_softirq+0x176/0x240 [ 191.080553][ C0] handle_softirqs+0x336/0x830 [ 191.085326][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 191.090180][ C0] ? do_softirq+0x210/0x210 [ 191.094684][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 191.099804][ C0] __irq_exit_rcu+0x13b/0x230 [ 191.104486][ C0] ? irq_exit_rcu+0x20/0x20 [ 191.109031][ C0] irq_exit_rcu+0x5/0x20 [ 191.113282][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 191.118931][ C0] [ 191.121888][ C0] [ 191.124840][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 191.130846][ C0] RIP: 0010:memset+0x0/0x40 [ 191.135382][ C0] Code: f9 07 31 ed eb d7 00 00 cc cc 89 f6 48 8b 0c 24 31 d2 e9 43 ef ff ff 0f 1f 00 89 f6 48 8b 0c 24 ba 01 00 00 00 e9 30 ef ff ff <55> 41 56 53 48 89 d3 89 f5 49 89 fe 48 8b 4c 24 18 48 89 d6 ba 01 [ 191.155006][ C0] RSP: 0000:ffffc9000338f258 EFLAGS: 00000246 [ 191.161078][ C0] RAX: ffffffff81c886b1 RBX: 0000000000040000 RCX: ffff88802c3e0000 [ 191.169052][ C0] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc9000338f350 [ 191.177044][ C0] RBP: ffffc9000338f3f0 R08: ffffffff8e6b282f R09: 1ffffffff1cd6505 [ 191.185021][ C0] R10: dffffc0000000000 R11: fffffbfff1cd6506 R12: 1ffff92000671e58 [ 191.192996][ C0] R13: dffffc0000000000 R14: ffff888061722a84 R15: 1ffff1100c2e4550 [ 191.200983][ C0] ? __kernel_write+0x131/0x980 [ 191.205860][ C0] __kernel_write+0x168/0x980 [ 191.210546][ C0] ? vfs_read+0xd50/0xd50 [ 191.214896][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 191.219927][ C0] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 191.225917][ C0] ? cgroup_freezing+0x264/0x310 [ 191.230868][ C0] ? freezing_slow_path+0x104/0x150 [ 191.236089][ C0] __dump_emit+0x258/0x380 [ 191.240535][ C0] ? wait_for_dump_helpers+0x3e0/0x3e0 [ 191.246018][ C0] ? dump_user_range+0x1ce/0x340 [ 191.250959][ C0] ? dump_emit+0x145/0x3d0 [ 191.255380][ C0] dump_user_range+0x84/0x340 [ 191.260068][ C0] elf_core_dump+0x2fe0/0x3530 [ 191.264873][ C0] ? load_elf_library+0x980/0x980 [ 191.269917][ C0] ? verify_lock_unused+0x140/0x140 [ 191.275139][ C0] ? dump_vma_snapshot+0xaf1/0xe40 [ 191.280306][ C0] ? rcu_read_lock_any_held+0xb0/0x130 [ 191.285884][ C0] do_coredump+0x14e8/0x2a40 [ 191.290494][ C0] ? nfs_stat_to_errno+0x170/0x170 [ 191.295629][ C0] ? lock_chain_count+0x20/0x20 [ 191.300498][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 191.305711][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 191.310930][ C0] get_signal+0x531/0x12e0 [ 191.315367][ C0] arch_do_signal_or_restart+0xe6/0x12a0 [ 191.321046][ C0] ? _raw_spin_unlock+0x40/0x40 [ 191.325917][ C0] ? force_sig_info_to_task+0x318/0x3c0 [ 191.331470][ C0] ? get_sigframe_size+0x10/0x10 [ 191.336419][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 191.342461][ C0] ? exit_to_user_mode_loop+0x3b/0x130 [ 191.347949][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 191.353257][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 191.358810][ C0] irqentry_exit_to_user_mode+0x5/0x30 [ 191.364270][ C0] exc_page_fault+0x88/0x100 [ 191.368869][ C0] asm_exc_page_fault+0x22/0x30 [ 191.373729][ C0] RIP: 0033:0x7feef6d4a1e1 [ 191.378166][ C0] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 191.397881][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 191.403954][ C0] RAX: 0000000000000000 RBX: 00007feef6fd2090 RCX: 00007feef6d4a1d9 [ 191.411933][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 191.419909][ C0] RBP: 00007feef6de1888 R08: 0000000000000000 R09: 0000000000000000 [ 191.427919][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 191.435906][ C0] R13: 00007feef6fd2128 R14: 00007feef6fd2090 R15: 00007fff5ec9a748 [ 191.443900][ C0] [ 191.447199][ C0] Kernel Offset: disabled [ 191.451547][ C0] Rebooting in 86400 seconds..