last executing test programs: 12.504374123s ago: executing program 2 (id=2224): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000000)=0x1) 12.385987865s ago: executing program 0 (id=2225): syz_open_dev$loop(&(0x7f00000000c0), 0x6, 0x14f882) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x3, 0xa8503) open(&(0x7f0000000180)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000740)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002780)='./file1\x00', 0x5482, 0x7e3111f862955f54) write$FUSE_INIT(r0, &(0x7f00000027c0)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r0, &(0x7f0000002840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000004880)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000048c0), 0x20080, 0x0) dup3(r3, r0, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000004900)='./file1\x00', 0x103042, 0x0) pselect6(0x40, &(0x7f0000004940)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000004980)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) 12.158394002s ago: executing program 0 (id=2228): socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11.900791908s ago: executing program 0 (id=2230): socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000b80)={[{@grpid}, {@nobh}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nojournal_checksum}, {@minixdf}, {@bh}]}, 0x7, 0xbaf, &(0x7f00000017c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f0000000000)="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", 0xfc) 11.201467126s ago: executing program 2 (id=2231): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000380), &(0x7f0000002580)='./file0\x00', 0x400, &(0x7f00000025c0)=ANY=[], 0x0, 0x1cc, &(0x7f00000046c0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000004900)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000004940)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000004980)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000049c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000004a00)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000004a80), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000004b00)=0x6) semget(0x1, 0x5, 0x6b4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000004b40)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000004b80)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r1, &(0x7f0000004bc0), 0x0, 0x44044) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000004c00)=@req3={0x3, 0x2, 0xb290, 0x5, 0x7, 0x8, 0xfffffffa}, 0x1) 11.201293986s ago: executing program 1 (id=2232): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180100002100000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0xe4, @rand_addr=' \x01\x00', 0x2}}, 0x0, 0x0, 0x125, 0x0, "c43b9320585854378463e5d9ac44984ed4936350a7f170f645640905822998ca06b3a771e3ab05c927d207f7d21d93b1d5e068c6a0652a79973d9cbb62bd8c26deb2eae0b68847b15bbe30539483f6e7"}, 0xd8) ioctl$VT_DISALLOCATE(r1, 0x5608) 10.214233571s ago: executing program 1 (id=2235): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x44085}, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x80140, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f00005b7000/0x1000)=nil, 0x1000, 0x2000009, 0x4000010, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141102) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000500)='dctcp', 0x5) connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e21, @local}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r2, &(0x7f0000000980)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd0714", 0x173, 0x12, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000b40), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 8.579044622s ago: executing program 2 (id=2236): syz_open_dev$mtd(&(0x7f0000000500), 0x20000000000a9, 0x452441) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000580)="e4", 0x1, 0x4040040, &(0x7f00000005c0)={0xa, 0x4e24, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./proc_mnt\x00', &(0x7f0000000680)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) lseek(r4, 0x800, 0x0) 8.578786972s ago: executing program 3 (id=2237): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000380), &(0x7f0000002580)='./file0\x00', 0x400, &(0x7f00000025c0)=ANY=[], 0x0, 0x1cc, &(0x7f00000046c0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000004900)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000004940)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000004980)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000049c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000004a00)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000004a80), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000004b00)=0x6) semget(0x1, 0x5, 0x6b4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000004b40)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000004b80)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r1, &(0x7f0000004bc0), 0x0, 0x44044) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000004c00)=@req3={0x3, 0x2, 0xb290, 0x5, 0x7, 0x8, 0xfffffffa}, 0x1) 8.550336083s ago: executing program 0 (id=2238): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) r0 = socket(0x2b, 0x80801, 0x1) bind$unix(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r4, &(0x7f0000003d40)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r5, 0x100000000) 8.488652044s ago: executing program 1 (id=2239): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a00000000000006"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x11}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r4}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r7}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x9}}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 8.100771134s ago: executing program 4 (id=2240): r0 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_SET(r0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x42040, &(0x7f00000008c0)={[{@rodir}, {@numtail}, {@numtail}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@numtail}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@utf8}, {@numtail}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}], [{@fsname={'fsname', 0x3d, '\']:.@]\\@^'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}, 0x3, 0x27b, &(0x7f0000000640)="$eJzs3cFqK1UYAOB/mqRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE/gEPo8b8QV8AC93d7u43LmkM0nTyyQlvWlT7v2+TQ//+f85/5kZ2tWc/vBB//jw5Ozo4tf/otFIYm0nduIyiXasxdjvUerfJ+VxAOCRu8yyeJrl6nno/GZGbUZlde3emwMA7sX03/9V9wIAPIyvv/n2i939/b2v0rQR0f9j0Eki/5nP7x7FT9GLbmxFK55HZBP5+LPP9/eimo6046P+cNAZVfa//7u4/u7/EVf129GKdnn9dpqbqh8OOrV4p1h/pxfdL/+KVrxXXv9JSX101uPjD6f634xW/PNjnEQvDovexvW/bafpp9mfz375bhQd1SfDQac+ySuyKw/6YAAAAAAAAAAAAAAAAAAAAAAAeKNtphPtm+fvjA/+nzM/53yg4dT5PFtpmmZJnn9dX433q1Fd5d4BAAAAAAAAAAAAAAAAAADgsTg7//n4oNfrni51MP6sv2QqXtyM1CPi7mttLFoVlaK1XhKx2Fq1qF9V3p5cWXAXzVE/3dOkGst7BMkk0pye2oh8rVGkmQ+mIq+9eiOuBuO36/ggue3hNspekiUMspLXrzKzav3VSLPYQUlyc87q6+/eqeesNWMqiYja5GbOv05tuffw4X4HAQAAAAAAAAAAAAAAAAAAueuPfksmL1bQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACswPX//19gMCyKZ+VkldGgGkVkxVsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLfAyAAD//0MUZ+o=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) 7.88231725s ago: executing program 1 (id=2241): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000438000/0x4000)=nil, 0x4000, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 6.575619903s ago: executing program 0 (id=2242): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0xf) sendmmsg$unix(r2, &(0x7f0000000240), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0x3008003, &(0x7f0000000340)=ANY=[], 0x2, 0x211, &(0x7f0000000380)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='.\x00', 0x0, 0x0) fadvise64(r3, 0xe0ffff, 0x19, 0x3) r4 = userfaultfd(0x80001) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000a9e000/0x1000)=nil, 0x1000}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r5}, 0x0, &(0x7f0000000ac0)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 6.575435153s ago: executing program 2 (id=2243): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendfile(r4, r3, 0x0, 0x20fffe82) 6.491774605s ago: executing program 3 (id=2244): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r5, 0x10e, 0xa, 0x0, &(0x7f0000000280)) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f00000002c0)='M', 0x1) recvmsg$unix(r7, 0x0, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) r9 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x20040050) 5.452632562s ago: executing program 4 (id=2245): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='wwnn=0x1000000044001122,wwpn=0x2000000044001122', 0x2f) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r1, &(0x7f0000000580)='fc', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='fc', 0x2) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00') 5.450338742s ago: executing program 3 (id=2246): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f0000003240)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x80, 0x0}}], 0x1, 0x8000) recvmmsg$unix(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0) io_setup(0x3, 0x0) io_getevents(0x0, 0x4, 0x0, &(0x7f00000019c0), 0x0) r2 = syz_clone(0x80040000, 0x0, 0xffffff8e, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) io_submit(0x0, 0x0, 0x0) io_destroy(0x0) 5.400956873s ago: executing program 2 (id=2247): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000380), &(0x7f0000002580)='./file0\x00', 0x400, &(0x7f00000025c0)=ANY=[], 0x0, 0x1cc, &(0x7f00000046c0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000004900)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000004940)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000004980)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000049c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000004a00)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000004a80), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000004b00)=0x6) semget(0x1, 0x5, 0x6b4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000004b40)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000004b80)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r1, &(0x7f0000004bc0), 0x0, 0x44044) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000004c00)=@req3={0x3, 0x2, 0xb290, 0x5, 0x7, 0x8, 0xfffffffa}, 0x1) 5.284820936s ago: executing program 4 (id=2248): socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x52cd, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f00000013c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000001400)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000001440), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r0, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x24004804}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 5.261541366s ago: executing program 1 (id=2249): socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000b80)={[{@grpid}, {@nobh}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nojournal_checksum}, {@minixdf}, {@bh}]}, 0x7, 0xbaf, &(0x7f00000017c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f0000000000)="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", 0xfc) 5.054284902s ago: executing program 4 (id=2250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000d80)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000dc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) close(r0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000740)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x1, 0xb, 0xdc}, 0x1, r9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x95}, 0x8080) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f00000008c0), 0x56) sendmsg$kcm(r7, &(0x7f0000000900)={&(0x7f0000000940)=@xdp={0x2c, 0x0, r6, 0x42, 0x4000}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000a00)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 5.054080282s ago: executing program 3 (id=2251): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xc00) add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc1}, &(0x7f0000000280)={0x0, "6035ae1e0fe721441705322025000000003e2a5b4377f7ad4bcf2b71d17e1ec0ef54e6773fd7264c39ea00c508ba607269613800"}, 0x48, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000003c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x10106, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000640)=[{0x0}], 0x1) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000680)={@rand_addr=0x64010101, @multicast2, 0x0, "7beb38c70d477344b583060000000000000000000000004685226700", 0x1, 0x10, 0x1, 0x4ea85437}, 0x3c) shmget(0x3, 0x4000, 0x2, &(0x7f00006df000/0x4000)=nil) r4 = syz_open_procfs(0x0, &(0x7f0000000740)='net/ip_mr_cache\x00') pread64(r4, &(0x7f0000000780)=""/253, 0xfd, 0x1) 1.336437746s ago: executing program 3 (id=2252): setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x100000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) r0 = syz_mount_image$erofs(&(0x7f00000004c0), &(0x7f0000000500)='./file1\x00', 0x801, &(0x7f0000000540)=ANY=[], 0x2, 0x252, &(0x7f0000000580)="$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") r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000800)={0x1, &(0x7f0000000840)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(r0, &(0x7f0000000880)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) umount2(&(0x7f00000008c0)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 1.059786923s ago: executing program 4 (id=2253): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setuid(0xee00) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) r3 = io_uring_setup(0x42df, &(0x7f0000000000)={0x0, 0x3a2b, 0x2, 0x2, 0x13}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.017179204s ago: executing program 3 (id=2254): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000380), &(0x7f0000002580)='./file0\x00', 0x400, &(0x7f00000025c0)=ANY=[], 0x0, 0x1cc, &(0x7f00000046c0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000004900)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000004940)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000004980)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000049c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000004a00)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000004a80), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000004b00)=0x6) semget(0x1, 0x5, 0x6b4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000004b40)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000004b80)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r1, &(0x7f0000004bc0), 0x0, 0x44044) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000004c00)=@req3={0x3, 0x2, 0xb290, 0x5, 0x7, 0x8, 0xfffffffa}, 0x1) 405.98638ms ago: executing program 1 (id=2255): r0 = io_uring_setup(0x4a86, &(0x7f0000000a00)={0x0, 0x4178, 0x40, 0x8001002, 0x112}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = gettid() timer_create(0x1, &(0x7f0000000440)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000480)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000004c0)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x18, 0x5, @thr={0x0, 0x0}}) r5 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000200)={{0x50000, 0x1, 0x9, 0x1, 0xcd, 0x9, 0x6, 0x1, 0x0, 0x3, 0x5, 0xeb}, {0x2000, 0x80a0000, 0xd, 0xe, 0x5, 0x7, 0x4, 0x14, 0x4, 0x5, 0x0, 0x1}, {0x8000000, 0x102f8000, 0x1e, 0x5, 0x6, 0x7, 0x81, 0x3, 0x80, 0x1, 0xe, 0x78}, {0x1, 0x6000, 0x0, 0x3, 0x6, 0x9, 0xc1, 0x0, 0x0, 0x0, 0x80, 0x2e}, {0x2, 0x2000, 0xa, 0xff, 0x8, 0x8, 0x6, 0x7, 0x8, 0x6, 0x4, 0xfc}, {0x10d000, 0x0, 0x9, 0xb9, 0x6, 0x5, 0x42, 0x6, 0x5, 0x1, 0xd, 0x9}, {0xdddd1000, 0x0, 0x0, 0x1, 0xa, 0x8, 0x4, 0x63, 0x1c, 0x5, 0x1, 0xd}, {0xdddd1000, 0x4000, 0xa, 0x23, 0xc, 0x3, 0x9, 0x4a, 0x7, 0x8, 0x43, 0x3}, {0xeeee0000, 0x5}, {0xffff1000}, 0x0, 0x0, 0x9000, 0x150690, 0x3, 0x4000, 0x3000, [0x1, 0x1004, 0x4, 0x1000]}) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000740)={"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"}) close_range(r0, 0xffffffffffffffff, 0x0) 350.302331ms ago: executing program 4 (id=2256): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r2, &(0x7f0000000840)={&(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x45}, 0x0) close(0x3) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$apparmor_exec(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="65786563203a0008c499100b49c23262e80dfac1d65b576b8ce91ef045f3f82d08d42dceea7045b533260ba0d30b2345c44997fd10006d0e2c427b3ca73ac20a6a4e0cf57dde73abc9d59b8049838b1c009c699a03ddd674e577650ab0284c95f7501f950601b8a322c74d9edf6bc06aea1f"], 0xe3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 210.982875ms ago: executing program 2 (id=2257): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) pread64(0xffffffffffffffff, 0x0, 0x0, 0x7) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f00000091c0)=""/16384, 0x4000) 0s ago: executing program 0 (id=2258): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(0x0, 0x0) io_setup(0xfffffffd, &(0x7f0000000600)=0x0) io_submit(r1, 0x0, &(0x7f0000001300)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='1', 0x1) kernel console output (not intermixed with test programs): control protocol [ 266.261595][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 266.272845][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 266.326792][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 266.340389][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 266.352280][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 266.392241][ T2855] usb 3-1: USB disconnect, device number 2 [ 266.425742][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 266.500376][ T6783] loop0: detected capacity change from 0 to 128 [ 266.603767][ T23] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 266.634003][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.665345][ T23] usb 5-1: Product: syz [ 266.684679][ T23] usb 5-1: Manufacturer: syz [ 266.710117][ T23] usb 5-1: SerialNumber: syz [ 266.764387][ T6758] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 266.772880][ T6758] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 267.526752][ T6758] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 267.801205][ T23] usb 5-1: can't set config #1, error -71 [ 267.823250][ T23] usb 5-1: USB disconnect, device number 4 [ 267.866824][ T6808] loop2: detected capacity change from 0 to 8 [ 267.935585][ T6808] SQUASHFS error: zlib decompression failed, data probably corrupt [ 267.950693][ T6808] SQUASHFS error: Failed to read block 0x9b: -5 [ 267.956991][ T6808] SQUASHFS error: Unable to read metadata cache entry [99] [ 267.964409][ T6808] SQUASHFS error: Unable to read inode 0x127 [ 267.990435][ T6816] loop0: detected capacity change from 0 to 128 [ 270.075233][ T6834] loop4: detected capacity change from 0 to 128 [ 270.230564][ T6842] syz.1.669[6842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.230711][ T6842] syz.1.669[6842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 271.821827][ T6856] netlink: 'syz.1.673': attribute type 29 has an invalid length. [ 271.848046][ T6856] netlink: 'syz.1.673': attribute type 29 has an invalid length. [ 271.860414][ T6856] netlink: 'syz.1.673': attribute type 29 has an invalid length. [ 272.879025][ T4262] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 273.371057][ T4262] usb 3-1: unable to get BOS descriptor or descriptor too short [ 273.450661][ T6879] loop2: detected capacity change from 0 to 8 [ 273.451418][ T6880] ip_tables: iptables: counters copy to user failed while replacing table [ 273.537556][ T6879] SQUASHFS error: zlib decompression failed, data probably corrupt [ 273.546178][ T4262] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 273.565830][ T4262] usb 3-1: can't read configurations, error -71 [ 273.572411][ T6879] SQUASHFS error: Failed to read block 0x9b: -5 [ 273.586197][ T6879] SQUASHFS error: Unable to read metadata cache entry [99] [ 273.593440][ T6879] SQUASHFS error: Unable to read inode 0x127 [ 276.985815][ T6939] ip_tables: iptables: counters copy to user failed while replacing table [ 279.432624][ T4262] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 279.489672][ T6984] ip_tables: iptables: counters copy to user failed while replacing table [ 279.860633][ T4262] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 279.880471][ T7014] ip_tables: iptables: counters copy to user failed while replacing table [ 280.691332][ T4262] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.708875][ T4262] usb 1-1: config 0 descriptor?? [ 280.756627][ T7020] dccp_invalid_packet: P.Data Offset(4) too small [ 280.871602][ T7033] loop4: detected capacity change from 0 to 128 [ 280.922326][ T7033] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 280.941167][ T7033] hpfs: filesystem error: improperly stopped [ 280.950985][ T7033] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 280.972141][ T7033] hpfs: You really don't want any checks? You are crazy... [ 280.980238][ T7033] hpfs: hpfs_map_sector(): read error [ 280.999224][ T7033] hpfs: code page support is disabled [ 281.030254][ T7033] hpfs: hpfs_map_4sectors(): unaligned read [ 281.041095][ T7033] hpfs: hpfs_map_4sectors(): unaligned read [ 281.047543][ T7033] hpfs: filesystem error: unable to find root dir [ 281.060430][ T7033] hpfs: hpfs_map_4sectors(): unaligned read [ 281.071298][ T7033] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 281.239439][ T4262] usb 1-1: Cannot set MAC address [ 281.636625][ T4262] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 281.655672][ T4262] usb 1-1: USB disconnect, device number 3 [ 281.676818][ T7059] ip_tables: iptables: counters copy to user failed while replacing table [ 282.760599][ T7088] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 283.040033][ T7105] ip_tables: iptables: counters copy to user failed while replacing table [ 283.050047][ T7105] ip_tables: iptables: counters copy to user failed while replacing table [ 283.254589][ T7109] loop2: detected capacity change from 0 to 128 [ 284.659301][ T7154] loop2: detected capacity change from 0 to 512 [ 285.108486][ T7154] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 285.258212][ T7154] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.719987][ T7145] loop0: detected capacity change from 0 to 32768 [ 285.851273][ T7145] ERROR: (device loop0): diWrite: ixpxd invalid [ 285.851273][ T7145] [ 285.889975][ T7145] ERROR: (device loop0): remounting filesystem as read-only [ 285.900203][ T7145] ERROR: (device loop0): txCommit: [ 285.900203][ T7145] [ 286.169072][ T7185] ip_tables: iptables: counters copy to user failed while replacing table [ 286.326029][ T7195] device syzkaller0 entered promiscuous mode [ 286.579635][ T7204] loop0: detected capacity change from 0 to 8 [ 286.691056][ T7187] loop2: detected capacity change from 0 to 40427 [ 286.803064][ T7204] SQUASHFS error: zlib decompression failed, data probably corrupt [ 286.811467][ T7204] SQUASHFS error: Failed to read block 0x9b: -5 [ 286.817725][ T7204] SQUASHFS error: Unable to read metadata cache entry [99] [ 286.825136][ T7204] SQUASHFS error: Unable to read inode 0x127 [ 286.867495][ T7187] F2FS-fs (loop2): invalid crc value [ 286.889641][ T7187] F2FS-fs (loop2): Found nat_bits in checkpoint [ 286.914224][ T7218] loop4: detected capacity change from 0 to 512 [ 286.929224][ T7218] EXT4-fs (loop4): Ignoring removed orlov option [ 287.102010][ T7187] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 287.307497][ T7218] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,orlov,quota,,errors=continue. Quota mode: writeback. [ 287.444393][ T7218] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.696126][ T7218] capability: warning: `syz.4.798' uses 32-bit capabilities (legacy support in use) [ 287.812137][ T7231] ip_tables: iptables: counters copy to user failed while replacing table [ 288.051684][ T7214] attempt to access beyond end of device [ 288.051684][ T7214] loop2: rw=2049, want=45104, limit=40427 [ 288.397945][ T7239] device syzkaller0 entered promiscuous mode [ 289.134840][ T7264] netlink: 'syz.0.812': attribute type 1 has an invalid length. [ 289.732000][ T7273] ip_tables: iptables: counters copy to user failed while replacing table [ 290.050901][ T7280] device syzkaller0 entered promiscuous mode [ 290.293804][ T7282] ip_tables: iptables: counters copy to user failed while replacing table [ 290.941011][ T7310] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 290.966737][ T2855] logitech-hidpp-device 0005:046D:B012.0001: Device not connected [ 291.251795][ T7314] ip_tables: iptables: counters copy to user failed while replacing table [ 292.264533][ T7325] ip_tables: iptables: counters copy to user failed while replacing table [ 293.866967][ T7360] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 294.498502][ T7382] loop0: detected capacity change from 0 to 128 [ 295.510791][ T7397] netlink: 28 bytes leftover after parsing attributes in process `syz.2.858'. [ 295.532677][ T7397] netlink: 28 bytes leftover after parsing attributes in process `syz.2.858'. [ 295.717202][ T7405] loop2: detected capacity change from 0 to 8 [ 295.783784][ T7405] SQUASHFS error: zlib decompression failed, data probably corrupt [ 295.821840][ T7405] SQUASHFS error: Failed to read block 0x9b: -5 [ 295.828136][ T7405] SQUASHFS error: Unable to read metadata cache entry [99] [ 295.842856][ T7405] SQUASHFS error: Unable to read inode 0x127 [ 297.453168][ T7438] loop4: detected capacity change from 0 to 128 [ 298.418111][ T7447] loop2: detected capacity change from 0 to 512 [ 298.484518][ T7447] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 298.502053][ T7447] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.588441][ T7471] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.647668][ T7471] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.656732][ T7471] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.079303][ T7472] loop2: detected capacity change from 0 to 32768 [ 300.841282][ T7488] loop0: detected capacity change from 0 to 32768 [ 300.914512][ T7488] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 300.914512][ T7488] [ 300.978705][ T7488] ERROR: (device loop0): remounting filesystem as read-only [ 301.004873][ T7488] xtLookup: xtSearch returned -5 [ 301.031746][ T7488] free_index: error reading directory table [ 301.455146][ T7519] loop4: detected capacity change from 0 to 8 [ 301.528590][ T7525] loop0: detected capacity change from 0 to 512 [ 301.667356][ T7529] ip_tables: iptables: counters copy to user failed while replacing table [ 301.712095][ T7525] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 301.730060][ T7525] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.761101][ T6317] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 303.284711][ T6317] usb 3-1: Using ep0 maxpacket: 32 [ 303.661010][ T6317] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 303.670589][ T6317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.699489][ T6317] usb 3-1: config 0 descriptor?? [ 303.983558][ T6317] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 304.030631][ T6317] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 304.639908][ T7569] ip_tables: iptables: counters copy to user failed while replacing table [ 304.688654][ T6317] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 304.709671][ T6317] usb 3-1: media controller created [ 304.735003][ T6317] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 304.876693][ T6317] az6027: usb out operation failed. (-71) [ 304.904660][ T6317] az6027: usb out operation failed. (-71) [ 304.910780][ T6317] stb0899_attach: Driver disabled by Kconfig [ 304.930087][ T6317] az6027: no front-end attached [ 304.930087][ T6317] [ 304.991742][ T6317] az6027: usb out operation failed. (-71) [ 305.012172][ T6317] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 305.038605][ T6317] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 305.096364][ T6317] dvb-usb: schedule remote query interval to 400 msecs. [ 305.103478][ T6317] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 305.152934][ T6317] usb 3-1: USB disconnect, device number 5 [ 305.264068][ T7584] loop0: detected capacity change from 0 to 8 [ 305.302612][ T6317] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 305.392808][ T7587] loop2: detected capacity change from 0 to 1024 [ 305.467944][ T7587] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 305.496765][ T7587] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 305.582962][ T7579] loop4: detected capacity change from 0 to 40427 [ 305.597261][ T7587] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 305.678101][ T7587] System zones: 0-1, 3-36 [ 305.757812][ T7587] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 307.227142][ T7584] SQUASHFS error: zlib decompression failed, data probably corrupt [ 307.235276][ T7584] SQUASHFS error: Failed to read block 0x9b: -5 [ 307.241800][ T7584] SQUASHFS error: Unable to read metadata cache entry [99] [ 307.302948][ T7584] SQUASHFS error: Unable to read inode 0x127 [ 308.377996][ T7625] ip_tables: iptables: counters copy to user failed while replacing table [ 308.849999][ T7632] loop6: detected capacity change from 0 to 1 [ 308.893967][ T7503] Dev loop6: unable to read RDB block 1 [ 308.899974][ T7503] loop6: unable to read partition table [ 308.928136][ T7503] loop6: partition table beyond EOD, truncated [ 308.962668][ T7632] Dev loop6: unable to read RDB block 1 [ 308.970923][ T7632] loop6: unable to read partition table [ 309.003497][ T7632] loop6: partition table beyond EOD, truncated [ 309.042282][ T7632] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 309.267827][ T7639] loop4: detected capacity change from 0 to 1024 [ 309.576409][ T7645] loop4: detected capacity change from 0 to 64 [ 311.431242][ T7672] ip_tables: iptables: counters copy to user failed while replacing table [ 311.625915][ T7677] loop2: detected capacity change from 0 to 8 [ 311.738077][ T7677] SQUASHFS error: zlib decompression failed, data probably corrupt [ 311.766680][ T7677] SQUASHFS error: Failed to read block 0x9b: -5 [ 311.820649][ T7677] SQUASHFS error: Unable to read metadata cache entry [99] [ 311.845285][ T7677] SQUASHFS error: Unable to read inode 0x127 [ 311.923964][ T7683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.952'. [ 311.976010][ T6317] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 312.118226][ T7683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.952'. [ 313.294187][ T7704] ip_tables: iptables: counters copy to user failed while replacing table [ 313.989398][ T6317] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 314.001055][ T6317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.019727][ T6317] usb 1-1: Product: syz [ 314.033066][ T6317] usb 1-1: Manufacturer: syz [ 314.058606][ T6317] usb 1-1: SerialNumber: syz [ 314.087938][ T7718] loop2: detected capacity change from 0 to 128 [ 314.096121][ T6317] usb 1-1: config 0 descriptor?? [ 314.172156][ T6317] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 314.836710][ T7729] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 314.856177][ T4262] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 315.140385][ T4262] usb 5-1: Using ep0 maxpacket: 32 [ 315.140477][ T6317] gspca_sunplus: reg_w_riv err -71 [ 315.153046][ T6317] sunplus: probe of 1-1:0.0 failed with error -71 [ 315.189650][ T6317] usb 1-1: USB disconnect, device number 4 [ 315.280437][ T4262] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 315.294281][ T4262] usb 5-1: config 0 has no interface number 0 [ 315.589890][ T4262] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 315.600457][ T4262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.608560][ T4262] usb 5-1: Product: syz [ 315.618376][ T4262] usb 5-1: Manufacturer: syz [ 315.625873][ T4262] usb 5-1: SerialNumber: syz [ 315.649162][ T4262] usb 5-1: config 0 descriptor?? [ 315.719672][ T4262] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 315.965944][ T7747] ip_tables: iptables: counters copy to user failed while replacing table [ 315.976159][ T7749] ip_tables: iptables: counters copy to user failed while replacing table [ 316.005211][ T4262] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 316.024288][ T4262] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 316.077474][ T7755] netlink: 'syz.2.973': attribute type 3 has an invalid length. [ 316.212451][ T7755] netlink: 'syz.2.973': attribute type 7 has an invalid length. [ 316.236938][ T7755] netlink: 'syz.2.973': attribute type 8 has an invalid length. [ 316.245471][ T7755] netlink: 'syz.2.973': attribute type 7 has an invalid length. [ 316.253422][ T7755] netlink: 198948 bytes leftover after parsing attributes in process `syz.2.973'. [ 316.417284][ T4262] usb 5-1: USB disconnect, device number 5 [ 316.443991][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 316.463020][ T4262] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 316.487308][ T4262] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 316.508902][ T4262] quatech2 5-1:0.51: device disconnected [ 316.557460][ T7766] loop2: detected capacity change from 0 to 8 [ 316.583935][ T7766] SQUASHFS error: zlib decompression failed, data probably corrupt [ 316.592310][ T7766] SQUASHFS error: Failed to read block 0x9b: -5 [ 316.599173][ T7766] SQUASHFS error: Unable to read metadata cache entry [99] [ 316.607015][ T7766] SQUASHFS error: Unable to read inode 0x127 [ 318.359498][ T6317] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 318.592950][ T7813] ip_tables: iptables: counters copy to user failed while replacing table [ 318.864821][ T7808] loop4: detected capacity change from 0 to 8192 [ 318.969974][ T7808] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 318.988290][ T7808] REISERFS (device loop4): using ordered data mode [ 318.999420][ T7820] rxe_eth0 speed is unknown, defaulting to 1000 [ 319.000162][ T7808] reiserfs: using flush barriers [ 319.022476][ T7808] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 319.024982][ T6317] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 319.064160][ T6317] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 319.087455][ T6317] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 319.109078][ T7808] REISERFS (device loop4): checking transaction log (loop4) [ 319.337904][ T7808] REISERFS (device loop4): Using tea hash to sort names [ 319.365810][ T7808] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 319.382933][ T6317] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 319.394842][ T6317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 319.424423][ T6317] usb 1-1: Product: syz [ 319.441437][ T6317] usb 1-1: Manufacturer: syz [ 319.458270][ T6317] usb 1-1: SerialNumber: syz [ 320.007424][ T6317] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 320.390869][ T4262] usb 1-1: USB disconnect, device number 5 [ 320.402092][ T4262] usblp0: removed [ 320.609316][ T7857] loop2: detected capacity change from 0 to 512 [ 320.671796][ T7859] ip_tables: iptables: counters copy to user failed while replacing table [ 320.809238][ T7857] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 320.875498][ T7857] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.631541][ T7867] loop0: detected capacity change from 0 to 8192 [ 321.714833][ T7867] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 321.724055][ T7867] REISERFS (device loop0): using ordered data mode [ 321.842315][ T7867] reiserfs: using flush barriers [ 321.859933][ T7867] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 321.919572][ T7880] loop4: detected capacity change from 0 to 8 [ 321.951289][ T7867] REISERFS (device loop0): checking transaction log (loop0) [ 322.004418][ T7867] REISERFS (device loop0): Using r5 hash to sort names [ 322.011415][ T7867] REISERFS (device loop0): using 3.5.x disk format [ 322.076951][ T7880] SQUASHFS error: zlib decompression failed, data probably corrupt [ 322.109620][ T7867] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 322.119022][ T7880] SQUASHFS error: Failed to read block 0x9b: -5 [ 322.126138][ T7880] SQUASHFS error: Unable to read metadata cache entry [99] [ 322.150653][ T7880] SQUASHFS error: Unable to read inode 0x127 [ 322.865819][ T7902] loop0: detected capacity change from 0 to 8 [ 322.957063][ T7902] SQUASHFS error: zlib decompression failed, data probably corrupt [ 322.986926][ T7902] SQUASHFS error: Failed to read block 0x9b: -5 [ 322.995492][ T7902] SQUASHFS error: Unable to read metadata cache entry [99] [ 323.017892][ T7902] SQUASHFS error: Unable to read inode 0x127 [ 323.714104][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.721972][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.572057][ T7910] ip_tables: iptables: counters copy to user failed while replacing table [ 325.091192][ T4537] tipc: Subscription rejected, illegal request [ 325.647037][ T7947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1025'. [ 326.183094][ T7951] ip_tables: iptables: counters copy to user failed while replacing table [ 326.473687][ T7937] loop0: detected capacity change from 0 to 40427 [ 326.607334][ T7959] loop2: detected capacity change from 0 to 1024 [ 328.439058][ T7937] F2FS-fs (loop0): invalid crc value [ 328.494807][ T7937] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-12) [ 329.812258][ T8004] ip_tables: iptables: counters copy to user failed while replacing table [ 330.503184][ T8015] netlink: 'syz.1.1051': attribute type 4 has an invalid length. [ 330.534436][ T8015] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1051'. [ 331.028872][ T8034] loop4: detected capacity change from 0 to 8 [ 331.080361][ T8037] ip_tables: iptables: counters copy to user failed while replacing table [ 331.144824][ T8034] SQUASHFS error: zlib decompression failed, data probably corrupt [ 331.153243][ T8034] SQUASHFS error: Failed to read block 0x9b: -5 [ 331.172921][ T8034] SQUASHFS error: Unable to read metadata cache entry [99] [ 331.189978][ T8034] SQUASHFS error: Unable to read inode 0x127 [ 335.957943][ T8139] FAULT_INJECTION: forcing a failure. [ 335.957943][ T8139] name fail_futex, interval 1, probability 0, space 0, times 1 [ 336.056597][ T8139] CPU: 0 PID: 8139 Comm: syz.0.1097 Not tainted syzkaller #0 [ 336.064118][ T8139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 336.074202][ T8139] Call Trace: [ 336.077489][ T8139] [ 336.080429][ T8139] dump_stack_lvl+0x188/0x250 [ 336.085170][ T8139] ? __kasan_kmalloc+0xaf/0xe0 [ 336.089940][ T8139] ? show_regs_print_info+0x20/0x20 [ 336.095377][ T8139] ? load_image+0x410/0x410 [ 336.100258][ T8139] should_fail+0x383/0x4b0 [ 336.104726][ T8139] get_futex_key+0x1cf/0x12d0 [ 336.109429][ T8139] ? futex_wait_restart+0x250/0x250 [ 336.114651][ T8139] futex_lock_pi+0x239/0xbf0 [ 336.119343][ T8139] ? futex_requeue+0x1920/0x1920 [ 336.124296][ T8139] ? __lock_acquire+0x13b3/0x7d40 [ 336.129375][ T8139] ? verify_lock_unused+0x140/0x140 [ 336.134597][ T8139] ? verify_lock_unused+0x140/0x140 [ 336.139807][ T8139] do_futex+0xdda/0x12b0 [ 336.144066][ T8139] ? vfs_write+0xaa6/0xd70 [ 336.148508][ T8139] ? futex_exit_release+0x1c0/0x1c0 [ 336.153722][ T8139] ? __context_tracking_exit+0x4c/0x80 [ 336.159277][ T8139] __se_sys_futex+0x389/0x420 [ 336.163965][ T8139] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 336.169955][ T8139] ? __x64_sys_futex+0xf0/0xf0 [ 336.174819][ T8139] ? __x64_sys_futex+0x1d/0xf0 [ 336.179591][ T8139] do_syscall_64+0x4c/0xa0 [ 336.184102][ T8139] ? clear_bhb_loop+0x30/0x80 [ 336.188788][ T8139] ? clear_bhb_loop+0x30/0x80 [ 336.193566][ T8139] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 336.199906][ T8139] RIP: 0033:0x7f6946911559 [ 336.204329][ T8139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.224043][ T8139] RSP: 002b:00007f6944b69028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 336.232471][ T8139] RAX: ffffffffffffffda RBX: 00007f6946b98fa0 RCX: 00007f6946911559 [ 336.240454][ T8139] RDX: 0000000000000002 RSI: 000000000000000d RDI: 0000000000000000 [ 336.248427][ T8139] RBP: 00007f69469a88b0 R08: 0000000000000000 R09: 0000000000000002 [ 336.256498][ T8139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.264484][ T8139] R13: 00007f6946b99038 R14: 00007f6946b98fa0 R15: 00007ffff5151108 [ 336.272651][ T8139] [ 337.706476][ T8158] loop4: detected capacity change from 0 to 256 [ 337.749352][ T8162] loop0: detected capacity change from 0 to 256 [ 340.586007][ T8217] FAULT_INJECTION: forcing a failure. [ 340.586007][ T8217] name failslab, interval 1, probability 5, space 0, times 999 [ 340.631923][ T8217] CPU: 0 PID: 8217 Comm: syz.2.1121 Not tainted syzkaller #0 [ 340.639344][ T8217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 340.649424][ T8217] Call Trace: [ 340.652718][ T8217] [ 340.655755][ T8217] dump_stack_lvl+0x188/0x250 [ 340.660463][ T8217] ? show_regs_print_info+0x20/0x20 [ 340.665029][ T8162] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 340.665759][ T8217] ? load_image+0x410/0x410 [ 340.677230][ T8162] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 340.680839][ T8217] ? __might_sleep+0xf0/0xf0 [ 340.680867][ T8217] ? __lock_acquire+0x7d40/0x7d40 [ 340.680891][ T8217] should_fail+0x383/0x4b0 [ 340.703326][ T8217] should_failslab+0x5/0x20 [ 340.707933][ T8217] slab_pre_alloc_hook+0x51/0xc0 [ 340.712905][ T8217] ? snd_pcm_hw_rule_add+0x188/0x7f0 [ 340.718213][ T8217] __kmalloc_track_caller+0x69/0x330 [ 340.723616][ T8217] ? snd_pcm_hw_rule_add+0x188/0x7f0 [ 340.728924][ T8217] krealloc+0x5a/0xf0 [ 340.732926][ T8217] snd_pcm_hw_rule_add+0x188/0x7f0 [ 340.738061][ T8217] ? snd_pcm_post_pause+0x290/0x290 [ 340.743293][ T8217] ? __raw_spin_lock_init+0x41/0x100 [ 340.748599][ T8217] ? snd_interval_ranges+0x300/0x300 [ 340.753920][ T8217] ? snd_pcm_attach_substream+0x83a/0xac0 [ 340.759667][ T8217] snd_pcm_open_substream+0xb93/0x2570 [ 340.765152][ T8217] ? lockdep_softirqs_off+0x430/0x430 [ 340.770552][ T8217] ? snd_pcm_drop+0x250/0x250 [ 340.775247][ T8217] ? __raw_spin_lock_init+0x41/0x100 [ 340.780555][ T8217] snd_pcm_oss_open+0x1084/0x1e60 [ 340.785614][ T8217] ? snd_pcm_oss_mmap+0x440/0x440 [ 340.790763][ T8217] ? soundcore_open+0x270/0x4b0 [ 340.795669][ T8217] ? __lock_acquire+0x7d40/0x7d40 [ 340.800810][ T8217] ? sched_dynamic_update+0x210/0x210 [ 340.806207][ T8217] ? do_raw_spin_unlock+0x11d/0x230 [ 340.811532][ T8217] chrdev_open+0x585/0x5f0 [ 340.816016][ T8217] ? cd_forget+0x160/0x160 [ 340.820447][ T8217] ? fsnotify_perm+0x3a7/0x560 [ 340.825227][ T8217] ? cd_forget+0x160/0x160 [ 340.829648][ T8217] do_dentry_open+0x7f7/0xf90 [ 340.834340][ T8217] ? vfs_open+0x2b/0x80 [ 340.838513][ T8217] path_openat+0x2718/0x2fb0 [ 340.843141][ T8217] ? __kasan_slab_alloc+0xa9/0xc0 [ 340.848187][ T8217] ? do_filp_open+0x400/0x400 [ 340.852930][ T8217] do_filp_open+0x1df/0x400 [ 340.857478][ T8217] ? vfs_tmpfile+0x300/0x300 [ 340.862426][ T8217] ? _raw_spin_unlock+0x24/0x40 [ 340.867429][ T8217] ? alloc_fd+0x59e/0x650 [ 340.871962][ T8217] do_sys_openat2+0x14b/0x500 [ 340.876657][ T8217] ? __lock_acquire+0x7d40/0x7d40 [ 340.881701][ T8217] ? do_sys_open+0xe0/0xe0 [ 340.886292][ T8217] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 340.892298][ T8217] ? lock_chain_count+0x20/0x20 [ 340.897354][ T8217] __x64_sys_openat+0x135/0x160 [ 340.902239][ T8217] do_syscall_64+0x4c/0xa0 [ 340.906677][ T8217] ? clear_bhb_loop+0x30/0x80 [ 340.911378][ T8217] ? clear_bhb_loop+0x30/0x80 [ 340.914053][ T8162] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0x8b37669b, utbl_chksum : 0xe619d30d) [ 340.916185][ T8217] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 340.916214][ T8217] RIP: 0033:0x7f899ee7f559 [ 340.916229][ T8217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.916243][ T8217] RSP: 002b:00007f899d0d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 340.967010][ T8217] RAX: ffffffffffffffda RBX: 00007f899f106fa0 RCX: 00007f899ee7f559 [ 340.974998][ T8217] RDX: 0000000000121302 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 340.983185][ T8217] RBP: 00007f899ef168b0 R08: 0000000000000000 R09: 0000000000000000 [ 340.991171][ T8217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.999165][ T8217] R13: 00007f899f107038 R14: 00007f899f106fa0 R15: 00007fff86e0aad8 [ 341.007173][ T8217] [ 341.033820][ T8158] exFAT-fs (loop4): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 341.515113][ T8227] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1127'. [ 341.583343][ T8227] device bridge_slave_0 left promiscuous mode [ 341.651658][ T8227] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.710516][ T8227] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 343.752363][ T8270] loop2: detected capacity change from 0 to 8 [ 345.739202][ T8280] ip_tables: iptables: counters copy to user failed while replacing table [ 346.689567][ T8270] SQUASHFS error: zlib decompression failed, data probably corrupt [ 346.710743][ T8270] SQUASHFS error: Failed to read block 0x9b: -5 [ 346.734559][ T8270] SQUASHFS error: Unable to read metadata cache entry [99] [ 346.777240][ T8270] SQUASHFS error: Unable to read inode 0x127 [ 346.891253][ T8317] loop4: detected capacity change from 0 to 8 [ 347.009076][ T8320] 9pnet: p9_fd_create_unix (8320): problem connecting socket: ./proc/thread-self/fail-nth: -2 [ 347.115978][ T8317] SQUASHFS error: zlib decompression failed, data probably corrupt [ 347.136962][ T8317] SQUASHFS error: Failed to read block 0x9b: -5 [ 347.146760][ T8323] tipc: Started in network mode [ 347.161047][ T8323] tipc: Node identity ac1414aa, cluster identity 4711 [ 347.168060][ T8317] SQUASHFS error: Unable to read metadata cache entry [99] [ 347.212151][ T8317] SQUASHFS error: Unable to read inode 0x127 [ 347.220391][ T8323] tipc: New replicast peer: 172.20.20.40 [ 347.235149][ T8323] tipc: Enabled bearer , priority 10 [ 347.654677][ T8334] loop0: detected capacity change from 0 to 128 [ 348.355676][ T8041] tipc: Node number set to 2886997162 [ 350.042740][ T8345] loop2: detected capacity change from 0 to 512 [ 350.276537][ T8349] loop4: detected capacity change from 0 to 8 [ 350.978860][ T8357] overlayfs: failed to clone upperpath [ 351.377237][ T8345] EXT4-fs (loop2): Ignoring removed orlov option [ 351.450558][ T8345] EXT4-fs (loop2): orphan cleanup on readonly fs [ 351.473469][ T8345] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.1167: ea_inode with extended attributes [ 351.535110][ T8345] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1167: error while reading EA inode 11 err=-117 [ 351.826184][ T8345] EXT4-fs (loop2): 1 orphan inode deleted [ 351.888639][ T8345] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noinit_itable,orlov,nojournal_checksum,noload,acl,barrier,,errors=continue. Quota mode: none. [ 355.710659][ T8349] SQUASHFS error: zlib decompression failed, data probably corrupt [ 355.746608][ T8349] SQUASHFS error: Failed to read block 0x9b: -5 [ 355.765072][ T8349] SQUASHFS error: Unable to read metadata cache entry [99] [ 355.791824][ T8349] SQUASHFS error: Unable to read inode 0x127 [ 358.756499][ T8438] loop0: detected capacity change from 0 to 32768 [ 359.105687][ T8438] XFS (loop0): Mounting V5 Filesystem [ 359.908775][ T8453] loop4: detected capacity change from 0 to 8 [ 361.588066][ T8438] XFS (loop0): Ending clean mount [ 361.678196][ T8438] XFS (loop0): Quotacheck needed: Please wait. [ 361.931801][ T8438] XFS (loop0): Quotacheck: Done. [ 362.041497][ T4185] XFS (loop0): Unmounting Filesystem [ 363.158314][ T8453] SQUASHFS error: zlib decompression failed, data probably corrupt [ 363.192157][ T8453] SQUASHFS error: Failed to read block 0x9b: -5 [ 363.222643][ T8453] SQUASHFS error: Unable to read metadata cache entry [99] [ 363.263319][ T8453] SQUASHFS error: Unable to read inode 0x127 [ 363.523827][ T8489] loop2: detected capacity change from 0 to 128 [ 366.760522][ T8489] EXT4-fs: failed to create workqueue [ 366.771422][ T8489] EXT4-fs (loop2): mount failed [ 369.447424][ T8558] rxe_eth0 speed is unknown, defaulting to 1000 [ 369.902441][ T8561] loop2: detected capacity change from 0 to 512 [ 370.347911][ T8561] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 370.369593][ T8561] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.838267][ T13] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 371.135292][ T8578] ip_tables: iptables: counters copy to user failed while replacing table [ 371.351544][ T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 371.362041][ T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.387151][ T13] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 371.405935][ T13] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 371.435620][ T13] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 371.460188][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.572684][ T13] cxacru 5-1:1.0: submit of read urb for cm 0x90 failed (-90) [ 371.583140][ T13] cxacru 5-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 371.598907][ T13] cxacru: probe of 5-1:1.0 failed with error -22 [ 372.370610][ T8597] loop2: detected capacity change from 0 to 128 [ 373.626306][ T8041] usb 5-1: USB disconnect, device number 6 [ 373.940182][ T8619] ip_tables: iptables: counters copy to user failed while replacing table [ 375.014993][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1265'. [ 376.487559][ T8638] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 376.494927][ T8638] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 376.525130][ T8640] vhci_hcd: xmit failed -107 [ 376.544625][ T8638] vhci_hcd vhci_hcd.0: Device attached [ 376.580267][ T4451] vhci_hcd: stop threads [ 376.650062][ T4451] vhci_hcd: release socket [ 376.681370][ T4451] vhci_hcd: disconnect device [ 377.470184][ T8664] ip_tables: iptables: counters copy to user failed while replacing table [ 377.807664][ T8668] FAULT_INJECTION: forcing a failure. [ 377.807664][ T8668] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 377.890725][ T8668] CPU: 0 PID: 8668 Comm: syz.4.1277 Not tainted syzkaller #0 [ 377.898284][ T8668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 377.908527][ T8668] Call Trace: [ 377.911902][ T8668] [ 377.914929][ T8668] dump_stack_lvl+0x188/0x250 [ 377.919900][ T8668] ? show_regs_print_info+0x20/0x20 [ 377.925120][ T8668] ? load_image+0x410/0x410 [ 377.929733][ T8668] ? __lock_acquire+0x7d40/0x7d40 [ 377.934923][ T8668] should_fail+0x383/0x4b0 [ 377.939479][ T8668] prepare_alloc_pages+0x1e3/0x5b0 [ 377.944892][ T8668] __alloc_pages+0x11b/0x480 [ 377.949510][ T8668] ? zone_statistics+0x170/0x170 [ 377.954483][ T8668] ? __might_sleep+0xf0/0xf0 [ 377.959187][ T8668] alloc_migration_target+0x40a/0x7a0 [ 377.964744][ T8668] migrate_pages+0xa0d/0x34a0 [ 377.969550][ T8668] ? migrate_pages+0x34a0/0x34a0 [ 377.974507][ T8668] ? next_demotion_node+0x190/0x190 [ 377.979810][ T8668] ? walk_page_range+0x4a0/0x550 [ 377.984771][ T8668] ? remove_migration_ptes+0x130/0x130 [ 377.990265][ T8668] ? page_mapped_in_vma+0x520/0x520 [ 377.995503][ T8668] do_migrate_pages+0x623/0x860 [ 378.000582][ T8668] ? change_prot_numa+0x70/0x70 [ 378.005718][ T8668] ? get_task_mm+0xad/0xd0 [ 378.010231][ T8668] ? cap_capable+0x194/0x220 [ 378.014925][ T8668] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 378.021243][ T8668] ? security_capable+0x90/0xb0 [ 378.026521][ T8668] __se_sys_migrate_pages+0x4e4/0x5e0 [ 378.031935][ T8668] ? __x64_sys_migrate_pages+0xa0/0xa0 [ 378.037591][ T8668] ? lockdep_hardirqs_on+0x94/0x140 [ 378.043012][ T8668] do_syscall_64+0x4c/0xa0 [ 378.047452][ T8668] ? clear_bhb_loop+0x30/0x80 [ 378.052373][ T8668] ? clear_bhb_loop+0x30/0x80 [ 378.057076][ T8668] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 378.063089][ T8668] RIP: 0033:0x7fe71a10d559 [ 378.067672][ T8668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.087611][ T8668] RSP: 002b:00007fe718365028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 378.096211][ T8668] RAX: ffffffffffffffda RBX: 00007fe71a394fa0 RCX: 00007fe71a10d559 [ 378.104205][ T8668] RDX: 0000200000000040 RSI: 0000000000000003 RDI: 0000000000000000 [ 378.112289][ T8668] RBP: 00007fe71a1a48b0 R08: 0000000000000000 R09: 0000000000000000 [ 378.120542][ T8668] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 378.128626][ T8668] R13: 00007fe71a395038 R14: 00007fe71a394fa0 R15: 00007fffc4a650c8 [ 378.137168][ T8668] [ 379.694856][ T8675] loop0: detected capacity change from 0 to 128 [ 379.703289][ T8673] overlayfs: failed to clone upperpath [ 383.089829][ T8712] loop2: detected capacity change from 0 to 32768 [ 383.246626][ T8712] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1291 (8712) [ 383.307622][ T8712] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 383.316680][ T8712] BTRFS info (device loop2): use zlib compression, level 3 [ 383.324059][ T8712] BTRFS info (device loop2): turning on sync discard [ 383.330879][ T8712] BTRFS info (device loop2): using free space tree [ 383.337444][ T8712] BTRFS info (device loop2): has skinny extents [ 383.978474][ T8712] BTRFS info (device loop2): enabling ssd optimizations [ 384.134610][ T26] audit: type=1800 audit(1792638323.800:204): pid=8712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1291" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 384.926068][ T8772] loop0: detected capacity change from 0 to 128 [ 385.956290][ T8314] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (8314) [ 387.079774][ T8797] loop4: detected capacity change from 0 to 8 [ 388.952058][ T8807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1311'. [ 389.784956][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.791465][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 391.415162][ T8831] loop4: detected capacity change from 0 to 8 [ 391.501313][ T8833] overlayfs: failed to clone upperpath [ 392.361581][ T8840] ip_tables: iptables: counters copy to user failed while replacing table [ 392.738909][ T8831] SQUASHFS error: zlib decompression failed, data probably corrupt [ 392.776267][ T8831] SQUASHFS error: Failed to read block 0x9b: -5 [ 392.824614][ T8831] SQUASHFS error: Unable to read metadata cache entry [99] [ 392.872453][ T8831] SQUASHFS error: Unable to read inode 0x127 [ 393.508973][ T4322] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 394.047648][ T4322] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.072466][ T4322] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 394.082518][ T4322] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 394.107389][ T4322] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 394.141395][ T4322] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 394.168764][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.231941][ T8909] ip_tables: iptables: counters copy to user failed while replacing table [ 395.603253][ T8919] loop4: detected capacity change from 0 to 8 [ 395.755805][ T8919] SQUASHFS error: zlib decompression failed, data probably corrupt [ 395.769795][ T8919] SQUASHFS error: Failed to read block 0x9b: -5 [ 395.807006][ T8919] SQUASHFS error: Unable to read metadata cache entry [99] [ 395.841015][ T8919] SQUASHFS error: Unable to read inode 0x127 [ 396.086664][ T8870] udc-core: couldn't find an available UDC or it's busy [ 396.101078][ T8870] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 396.184164][ T4322] [drm] Initialized gud 1.0.0 20200422 for 3-1:1.0 on minor 2 [ 397.103497][ T8945] loop2: detected capacity change from 0 to 1024 [ 397.230120][ T8945] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 397.246471][ T8945] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 397.332078][ T8945] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6055c01c, mo2=0002] [ 397.460377][ T8945] System zones: 0-1, 3-36 [ 398.351419][ T4322] gud 3-1:1.0: [drm] fb1: guddrmfb frame buffer device [ 398.401352][ T8945] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,noinit_itable,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 398.407501][ T4322] usb 3-1: USB disconnect, device number 6 [ 399.584717][ T8972] ip_tables: iptables: counters copy to user failed while replacing table [ 399.656337][ T26] audit: type=1800 audit(1792638338.336:205): pid=8945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1341" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 400.833809][ T4260] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 401.214645][ T4260] usb 1-1: Using ep0 maxpacket: 8 [ 401.415753][ T4260] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 401.429905][ T4260] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 401.464588][ T4260] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.502046][ T8988] af_packet: packet size is too long (65554 > 2016) [ 401.528721][ T4260] usb 1-1: config 0 descriptor?? [ 401.539537][ T8991] bond0: no command found in slaves file - use +ifname or -ifname [ 401.660280][ T8996] ip_tables: iptables: counters copy to user failed while replacing table [ 401.908528][ T4260] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 401.942219][ T9006] ceph: No source [ 402.877530][ T21] usb 1-1: USB disconnect, device number 6 [ 403.503280][ T9011] loop4: detected capacity change from 0 to 32768 [ 403.538249][ T9026] FAULT_INJECTION: forcing a failure. [ 403.538249][ T9026] name failslab, interval 1, probability 5, space 0, times 998 [ 403.605812][ T9026] CPU: 0 PID: 9026 Comm: syz.0.1367 Not tainted syzkaller #0 [ 403.613223][ T9026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 403.623383][ T9026] Call Trace: [ 403.626657][ T9026] [ 403.629578][ T9026] dump_stack_lvl+0x188/0x250 [ 403.634341][ T9026] ? show_regs_print_info+0x20/0x20 [ 403.639532][ T9026] ? load_image+0x410/0x410 [ 403.644027][ T9026] ? __might_sleep+0xf0/0xf0 [ 403.648636][ T9026] ? __lock_acquire+0x7d40/0x7d40 [ 403.653765][ T9026] should_fail+0x383/0x4b0 [ 403.658180][ T9026] should_failslab+0x5/0x20 [ 403.662751][ T9026] slab_pre_alloc_hook+0x51/0xc0 [ 403.667688][ T9026] kmem_cache_alloc_trace+0x47/0x290 [ 403.672965][ T9026] ? tcp_sendmsg_fastopen+0x1d5/0x600 [ 403.678446][ T9026] tcp_sendmsg_fastopen+0x1d5/0x600 [ 403.683640][ T9026] tcp_sendmsg_locked+0x2efb/0x3330 [ 403.688825][ T9026] ? aa_sk_perm+0x910/0x910 [ 403.693393][ T9026] ? mark_lock+0x94/0x320 [ 403.697842][ T9026] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 403.703822][ T9026] ? lock_chain_count+0x20/0x20 [ 403.708665][ T9026] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 403.714640][ T9026] ? tcp_free_fastopen_req+0x70/0x70 [ 403.719928][ T9026] tcp_sendmsg+0x2b/0x40 [ 403.724161][ T9026] __sys_sendto+0x46d/0x620 [ 403.728761][ T9026] ? __ia32_sys_getpeername+0x80/0x80 [ 403.734145][ T9026] ? lock_chain_count+0x20/0x20 [ 403.738993][ T9026] __x64_sys_sendto+0xda/0xf0 [ 403.743666][ T9026] do_syscall_64+0x4c/0xa0 [ 403.748162][ T9026] ? clear_bhb_loop+0x30/0x80 [ 403.752831][ T9026] ? clear_bhb_loop+0x30/0x80 [ 403.757530][ T9026] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 403.763419][ T9026] RIP: 0033:0x7f6946911559 [ 403.767828][ T9026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.787533][ T9026] RSP: 002b:00007f6944b69028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 403.795954][ T9026] RAX: ffffffffffffffda RBX: 00007f6946b98fa0 RCX: 00007f6946911559 [ 403.803946][ T9026] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 403.811915][ T9026] RBP: 00007f69469a88b0 R08: 0000200000e68000 R09: 0000000000000010 [ 403.819973][ T9026] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000000 [ 403.828025][ T9026] R13: 00007f6946b99038 R14: 00007f6946b98fa0 R15: 00007ffff5151108 [ 403.835998][ T9026] [ 404.753215][ T9031] loop0: detected capacity change from 0 to 32768 [ 404.988122][ T9037] ip_tables: iptables: counters copy to user failed while replacing table [ 406.456181][ T9049] device syzkaller0 entered promiscuous mode [ 408.898630][ T8314] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (8314) [ 410.033262][ T9077] fuse: Bad value for 'fd' [ 410.398564][ C0] net_ratelimit: 17 callbacks suppressed [ 411.974236][ T9115] loop2: detected capacity change from 0 to 128 [ 413.843739][ T9139] loop0: detected capacity change from 0 to 8 [ 414.441197][ T8054] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 414.966097][ T8054] usb 5-1: Using ep0 maxpacket: 32 [ 415.415953][ T9156] loop2: detected capacity change from 0 to 8 [ 415.700706][ T8054] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 415.721231][ T8054] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 415.748173][ T8054] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 415.780977][ T9165] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1413'. [ 415.786783][ T8054] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 415.801473][ C1] net_ratelimit: 51 callbacks suppressed [ 415.824337][ T8054] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 415.869078][ T8054] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 415.898440][ T8054] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 415.922434][ T8054] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.034227][ T8054] usb 5-1: config 0 descriptor?? [ 416.433558][ T8054] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 416.514159][ T9173] ip_tables: iptables: counters copy to user failed while replacing table [ 416.554522][ T9139] SQUASHFS error: zlib decompression failed, data probably corrupt [ 416.568984][ T9139] SQUASHFS error: Failed to read block 0x9b: -5 [ 416.603900][ T9139] SQUASHFS error: Unable to read metadata cache entry [99] [ 416.611596][ T9139] SQUASHFS error: Unable to read inode 0x127 [ 416.668011][ T8781] usb 5-1: USB disconnect, device number 7 [ 416.682713][ T8781] usblp0: removed [ 418.166059][ T9156] SQUASHFS error: zlib decompression failed, data probably corrupt [ 418.236849][ T9156] SQUASHFS error: Failed to read block 0x9b: -5 [ 418.244368][ T9156] SQUASHFS error: Unable to read metadata cache entry [99] [ 418.272243][ T9184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1418'. [ 418.281416][ T9156] SQUASHFS error: Unable to read inode 0x127 [ 418.322756][ T9184] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.332466][ T9184] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.341297][ T9184] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.350279][ T9184] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.409174][ T9185] APIC base relocation is unsupported by KVM [ 418.434475][ T9184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1418'. [ 418.698586][ T9194] loop4: detected capacity change from 0 to 512 [ 419.034155][ T9194] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.1422: corrupted inode contents [ 419.203918][ T9194] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 419.255137][ T9194] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.1422: corrupted inode contents [ 419.303668][ T9194] EXT4-fs error (device loop4): ext4_evict_inode:332: inode #15: comm syz.4.1422: mark_inode_dirty error [ 419.362760][ T9194] EXT4-fs (loop4): 1 orphan inode deleted [ 419.385464][ T9194] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 421.457054][ T9210] Invalid auth_tok structure returned from key query [ 421.497050][ T9210] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 421.514426][ T9210] One or more global auth toks could not properly register; rc = [-22] [ 421.677534][ T9210] Error parsing options; rc = [-22] [ 421.965187][ T9199] loop0: detected capacity change from 0 to 32768 [ 422.084184][ T9231] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1432'. [ 422.106546][ C1] net_ratelimit: 40 callbacks suppressed [ 422.120569][ T9199] XFS (loop0): Mounting V5 Filesystem [ 422.209221][ T9235] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1432'. [ 422.927490][ T9214] loop2: detected capacity change from 0 to 512 [ 423.641831][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1439'. [ 423.667493][ T9259] loop4: detected capacity change from 0 to 512 [ 423.782290][ T9199] XFS (loop0): Ending clean mount [ 423.885170][ T4185] XFS (loop0): Unmounting Filesystem [ 424.068943][ T9266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1443'. [ 424.092695][ T9259] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 424.154568][ T9266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1443'. [ 424.174977][ T9259] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.414650][ T9269] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1443'. [ 425.788955][ T9268] loop2: detected capacity change from 0 to 8 [ 425.917361][ T9283] overlayfs: failed to clone upperpath [ 426.229093][ T9268] SQUASHFS error: zlib decompression failed, data probably corrupt [ 426.237058][ T9268] SQUASHFS error: Failed to read block 0x9b: -5 [ 426.314192][ T9268] SQUASHFS error: Unable to read metadata cache entry [99] [ 426.346957][ T9268] SQUASHFS error: Unable to read inode 0x127 [ 427.730368][ C0] net_ratelimit: 37 callbacks suppressed [ 427.884435][ T9309] ip_tables: iptables: counters copy to user failed while replacing table [ 429.243358][ T9324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1462'. [ 429.486975][ T9321] loop4: detected capacity change from 0 to 40427 [ 429.492946][ T9325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1462'. [ 429.564570][ T9327] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1463'. [ 430.587494][ T9340] FAULT_INJECTION: forcing a failure. [ 430.587494][ T9340] name failslab, interval 1, probability 5, space 0, times 997 [ 430.601272][ T9340] CPU: 0 PID: 9340 Comm: syz.0.1442 Not tainted syzkaller #0 [ 430.608906][ T9340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 430.619035][ T9340] Call Trace: [ 430.622307][ T9340] [ 430.625225][ T9340] dump_stack_lvl+0x188/0x250 [ 430.629894][ T9340] ? do_raw_read_unlock+0x70/0x70 [ 430.634907][ T9340] ? show_regs_print_info+0x20/0x20 [ 430.640093][ T9340] ? load_image+0x410/0x410 [ 430.644577][ T9340] ? lockdep_hardirqs_off+0x70/0x100 [ 430.649852][ T9340] ? _raw_write_lock_irq+0xb7/0xf0 [ 430.654955][ T9340] ? _raw_write_lock_irqsave+0x100/0x100 [ 430.660661][ T9340] should_fail+0x383/0x4b0 [ 430.665078][ T9340] should_failslab+0x5/0x20 [ 430.669568][ T9340] slab_pre_alloc_hook+0x51/0xc0 [ 430.674513][ T9340] ? netlink_realloc_groups+0x114/0x270 [ 430.680150][ T9340] __kmalloc_track_caller+0x69/0x330 [ 430.685449][ T9340] ? netlink_realloc_groups+0x114/0x270 [ 430.690984][ T9340] krealloc+0x5a/0xf0 [ 430.694954][ T9340] netlink_realloc_groups+0x114/0x270 [ 430.700320][ T9340] netlink_bind+0x2a7/0xd30 [ 430.704828][ T9340] ? netlink_release+0x1790/0x1790 [ 430.709951][ T9340] ? bpf_lsm_socket_bind+0x5/0x10 [ 430.715146][ T9340] ? security_socket_bind+0x7c/0xa0 [ 430.720465][ T9340] __sys_bind+0x2e9/0x3e0 [ 430.724784][ T9340] ? __ia32_sys_socketpair+0xb0/0xb0 [ 430.730072][ T9340] __x64_sys_bind+0x76/0x80 [ 430.734562][ T9340] do_syscall_64+0x4c/0xa0 [ 430.738969][ T9340] ? clear_bhb_loop+0x30/0x80 [ 430.743648][ T9340] ? clear_bhb_loop+0x30/0x80 [ 430.748309][ T9340] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 430.754206][ T9340] RIP: 0033:0x7f6946911559 [ 430.758703][ T9340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.778401][ T9340] RSP: 002b:00007f6944b69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 430.786894][ T9340] RAX: ffffffffffffffda RBX: 00007f6946b98fa0 RCX: 00007f6946911559 [ 430.794874][ T9340] RDX: 000000000000000c RSI: 0000200000514ff4 RDI: 0000000000000003 [ 430.802837][ T9340] RBP: 00007f69469a88b0 R08: 0000000000000000 R09: 0000000000000000 [ 430.810878][ T9340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.818834][ T9340] R13: 00007f6946b99038 R14: 00007f6946b98fa0 R15: 00007ffff5151108 [ 430.826806][ T9340] [ 431.056645][ T9350] device syzkaller0 entered promiscuous mode [ 431.388819][ T9357] overlayfs: failed to clone upperpath [ 433.179801][ T151] net_ratelimit: 36 callbacks suppressed [ 439.570762][ C1] net_ratelimit: 39 callbacks suppressed [ 442.730772][ T9453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1500'. [ 444.565458][ T9485] device syzkaller1 entered promiscuous mode [ 445.033020][ C1] net_ratelimit: 47 callbacks suppressed [ 448.009287][ T4260] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 448.719988][ T4260] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.778856][ T4260] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 448.978350][ T4260] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 448.987444][ T4260] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 449.101460][ T4260] usb 5-1: SerialNumber: syz [ 449.516493][ T4260] usb 5-1: 0:2 : does not exist [ 449.672979][ T4260] usb 5-1: USB disconnect, device number 8 [ 450.453184][ T9549] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 450.506645][ C0] net_ratelimit: 31 callbacks suppressed [ 450.637676][ T9550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.699942][ T9550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.851198][ T9550] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 450.910904][ T9550] bond0 (unregistering): Released all slaves [ 451.025859][ T9553] netlink: 'syz.1.1527': attribute type 16 has an invalid length. [ 451.089354][ T9553] netlink: 'syz.1.1527': attribute type 17 has an invalid length. [ 452.234747][ T9553] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 453.718838][ T9563] loop2: detected capacity change from 0 to 32768 [ 453.835310][ T9563] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1530 (9563) [ 453.927946][ T9563] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 453.937658][ T9563] BTRFS info (device loop2): turning off barriers [ 453.981028][ T9563] BTRFS info (device loop2): turning on async discard [ 453.987858][ T9563] BTRFS info (device loop2): doing ref verification [ 454.070092][ T9563] BTRFS info (device loop2): using free space tree [ 454.109680][ T9563] BTRFS info (device loop2): has skinny extents [ 454.608824][ T9563] BTRFS info (device loop2): enabling ssd optimizations [ 455.067925][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 455.074443][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 455.093653][ T9611] loop0: detected capacity change from 0 to 8 [ 456.027399][ T4327] net_ratelimit: 38 callbacks suppressed [ 456.188596][ T9611] SQUASHFS error: zlib decompression failed, data probably corrupt [ 456.248084][ T9611] SQUASHFS error: Failed to read block 0x9b: -5 [ 456.254534][ T9611] SQUASHFS error: Unable to read metadata cache entry [99] [ 456.300820][ T9611] SQUASHFS error: Unable to read inode 0x127 [ 456.350931][ T9620] loop4: detected capacity change from 0 to 512 [ 456.982314][ T9620] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 457.003412][ T9620] System zones: 1-12 [ 457.129873][ T9620] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.1541: missing EA_INODE flag [ 457.218077][ T9620] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1541: error while reading EA inode 12 err=-117 [ 457.309985][ T9620] EXT4-fs (loop4): 1 orphan inode deleted [ 457.316079][ T9620] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 461.434784][ T9681] FAULT_INJECTION: forcing a failure. [ 461.434784][ T9681] name failslab, interval 1, probability 5, space 0, times 996 [ 461.529602][ C1] net_ratelimit: 34 callbacks suppressed [ 461.623398][ T9681] CPU: 0 PID: 9681 Comm: syz.4.1559 Not tainted syzkaller #0 [ 461.630804][ T9681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 461.630860][ T9681] Call Trace: [ 461.630868][ T9681] [ 461.630878][ T9681] dump_stack_lvl+0x188/0x250 [ 461.630906][ T9681] ? show_regs_print_info+0x20/0x20 [ 461.630925][ T9681] ? load_image+0x410/0x410 [ 461.630946][ T9681] ? __might_sleep+0xf0/0xf0 [ 461.630964][ T9681] ? __lock_acquire+0x7d40/0x7d40 [ 461.630991][ T9681] should_fail+0x383/0x4b0 [ 461.631016][ T9681] should_failslab+0x5/0x20 [ 461.631032][ T9681] slab_pre_alloc_hook+0x51/0xc0 [ 461.645367][ T9681] ? nfs_get_tree+0xc08/0x1510 [ 461.653209][ T9681] __kmalloc_track_caller+0x69/0x330 [ 461.663129][ T9681] ? nfs_get_tree+0xc08/0x1510 [ 461.672703][ T9681] kmemdup_nul+0x28/0xa0 [ 461.681711][ T9681] nfs_get_tree+0xc08/0x1510 [ 461.681739][ T9681] vfs_get_tree+0x88/0x270 [ 461.681836][ T9681] vfs_fsconfig_locked+0x22f/0x400 [ 461.692402][ T9681] __se_sys_fsconfig+0x69e/0x7e0 [ 461.692431][ T9681] ? __x64_sys_fsconfig+0xc0/0xc0 [ 461.692456][ T9681] ? lockdep_hardirqs_on+0x94/0x140 [ 461.702723][ T9681] ? __x64_sys_fsconfig+0x1c/0xc0 [ 461.702758][ T9681] do_syscall_64+0x4c/0xa0 [ 461.702778][ T9681] ? clear_bhb_loop+0x30/0x80 [ 461.711843][ T9681] ? clear_bhb_loop+0x30/0x80 [ 461.711868][ T9681] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 461.711889][ T9681] RIP: 0033:0x7fe71a10d559 [ 461.721464][ T9681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.721481][ T9681] RSP: 002b:00007fe718365028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 461.721500][ T9681] RAX: ffffffffffffffda RBX: 00007fe71a394fa0 RCX: 00007fe71a10d559 [ 461.721512][ T9681] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 461.721523][ T9681] RBP: 00007fe71a1a48b0 R08: 0000000000000000 R09: 0000000000000000 [ 461.721534][ T9681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.731486][ T9681] R13: 00007fe71a395038 R14: 00007fe71a394fa0 R15: 00007fffc4a650c8 [ 461.731518][ T9681] [ 461.851151][ T9684] loop0: detected capacity change from 0 to 4096 [ 462.042081][ T9693] netlink: 'syz.2.1561': attribute type 16 has an invalid length. [ 462.104649][ T9693] netlink: 'syz.2.1561': attribute type 17 has an invalid length. [ 462.126681][ T9695] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 462.195037][ T9697] loop4: detected capacity change from 0 to 8 [ 463.533355][ T9693] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 463.611262][ T9711] overlayfs: failed to clone upperpath [ 464.263974][ T26] audit: type=1326 audit(1792638398.762:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9723 comm="syz.2.1575" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899ee7f559 code=0x7ffc0000 [ 464.530552][ T26] audit: type=1326 audit(1792638398.790:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9723 comm="syz.2.1575" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899ee7f559 code=0x7ffc0000 [ 464.593203][ T26] audit: type=1326 audit(1792638398.790:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9723 comm="syz.2.1575" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899ee7f559 code=0x7ffc0000 [ 465.292532][ T26] audit: type=1326 audit(1792638398.790:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9723 comm="syz.2.1575" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f899ee7f559 code=0x7ffc0000 [ 465.318280][ T9739] loop2: detected capacity change from 0 to 16 [ 465.446285][ T9697] SQUASHFS error: zlib decompression failed, data probably corrupt [ 465.458498][ T26] audit: type=1326 audit(1792638398.790:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9723 comm="syz.2.1575" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899ee7f559 code=0x7ffc0000 [ 465.461894][ T9739] erofs: (device loop2): mounted with root inode @ nid 36. [ 465.500972][ T9697] SQUASHFS error: Failed to read block 0x9b: -5 [ 465.548057][ T9697] SQUASHFS error: Unable to read metadata cache entry [99] [ 465.572610][ T9739] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 465.580909][ T9697] SQUASHFS error: Unable to read inode 0x127 [ 465.591236][ T26] audit: type=1326 audit(1792638398.790:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9723 comm="syz.2.1575" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899ee7f559 code=0x7ffc0000 [ 465.698147][ T26] audit: type=1326 audit(1792638398.799:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9723 comm="syz.2.1575" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899ee7f559 code=0x7ffc0000 [ 465.834449][ T26] audit: type=1326 audit(1792638398.799:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9723 comm="syz.2.1575" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899ee7f559 code=0x7ffc0000 [ 465.901274][ T26] audit: type=1326 audit(1792638398.799:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9723 comm="syz.2.1575" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f899ee7f559 code=0x7ffc0000 [ 465.973004][ T26] audit: type=1326 audit(1792638398.846:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9727 comm="syz.2.1575" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f899ee3fd8e code=0x7ffc0000 [ 466.405582][ T9756] overlayfs: failed to clone upperpath [ 466.588145][ T9758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1587'. [ 466.887675][ T9760] device syzkaller0 entered promiscuous mode [ 466.917487][ C0] net_ratelimit: 31 callbacks suppressed [ 469.159776][ T9774] loop2: detected capacity change from 0 to 32768 [ 469.518365][ T9780] overlayfs: failed to clone upperpath [ 469.548485][ T9780] overlayfs: failed to clone upperpath [ 470.351116][ T9792] loop0: detected capacity change from 0 to 512 [ 471.212982][ T9797] loop4: detected capacity change from 0 to 512 [ 472.038002][ T9774] (syz.2.1592,9774,1):ocfs2_initialize_super:2311 ERROR: status = -12 [ 472.047144][ T9774] (syz.2.1592,9774,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 472.170765][ T9807] CIFS: Attempting to mount \\127.0.0.1\share [ 472.252025][ T9813] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 472.338467][ T9815] net_ratelimit: 40 callbacks suppressed [ 472.338476][ T9815] ip_tables: iptables: counters copy to user failed while replacing table [ 472.554972][ T9807] CIFS: VFS: \\127.0.0.1 Invalid 0x0 dialect returned: not requested [ 472.566192][ T9807] CIFS: VFS: cifs_mount failed w/return code = -5 [ 472.784285][ T9824] Illegal XDP return value 1134428204, expect packet loss! [ 474.098198][ T9792] EXT4-fs warning (device loop0): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop0. [ 474.382750][ T9797] EXT4-fs: error -4 creating inode table initialization thread [ 474.408249][ T9797] EXT4-fs (loop4): mount failed [ 476.035701][ T9860] loop2: detected capacity change from 0 to 8 [ 477.400846][ T9863] loop0: detected capacity change from 0 to 32768 [ 478.160330][ T9860] SQUASHFS error: zlib decompression failed, data probably corrupt [ 478.209742][ T9860] SQUASHFS error: Failed to read block 0x9b: -5 [ 478.216168][ T9860] SQUASHFS error: Unable to read metadata cache entry [99] [ 478.245496][ T9860] SQUASHFS error: Unable to read inode 0x127 [ 478.477509][ T9885] device-mapper: ioctl: Unable to interpret geometry settings. [ 478.564629][ C1] net_ratelimit: 35 callbacks suppressed [ 478.639504][ T9888] ip_tables: iptables: counters copy to user failed while replacing table [ 479.035646][ T9863] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1615 (9863) [ 479.163537][ T9900] ip_tables: iptables: counters copy to user failed while replacing table [ 479.173689][ T9863] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 479.190425][ T9863] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 479.247112][ T9863] BTRFS info (device loop0): use zstd compression, level 3 [ 479.254725][ T9863] BTRFS info (device loop0): using free space tree [ 479.261357][ T9863] BTRFS info (device loop0): has skinny extents [ 480.154028][ T9863] BTRFS error (device loop0): open_ctree failed: -22 [ 482.343064][ T9950] loop4: detected capacity change from 0 to 512 [ 484.295527][ C0] net_ratelimit: 36 callbacks suppressed [ 484.504813][ T9975] loop0: detected capacity change from 0 to 1024 [ 484.679656][ T9979] ip_tables: iptables: counters copy to user failed while replacing table [ 485.377751][ T9950] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 485.426389][ T9968] loop2: detected capacity change from 0 to 32768 [ 485.464761][ T9950] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.187622][ T9975] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 487.213908][ T9975] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 487.283031][ T9975] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6055c01c, mo2=0002] [ 487.306048][ T9975] System zones: 0-1, 3-36 [ 487.476238][ T9975] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,noinit_itable,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 487.886056][ T26] kauditd_printk_skb: 53 callbacks suppressed [ 487.886151][ T26] audit: type=1800 audit(1792638420.865:269): pid=9975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1642" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 489.864955][ C0] net_ratelimit: 34 callbacks suppressed [ 490.639344][T10022] loop4: detected capacity change from 0 to 128 [ 493.639759][T10035] loop2: detected capacity change from 0 to 32768 [ 494.201053][T10046] loop0: detected capacity change from 0 to 32768 [ 495.453507][ C0] net_ratelimit: 36 callbacks suppressed [ 496.022153][T10076] ip_tables: iptables: counters copy to user failed while replacing table [ 496.219931][T10081] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 496.456706][T10046] XFS (loop0): Mounting V5 Filesystem [ 496.615772][T10094] netlink: 'syz.4.1682': attribute type 4 has an invalid length. [ 496.709512][T10096] netlink: 'syz.4.1682': attribute type 4 has an invalid length. [ 496.831190][T10046] XFS (loop0): Ending clean mount [ 496.875558][ T4185] XFS (loop0): Unmounting Filesystem [ 496.974296][T10103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1692'. [ 497.004700][T10101] tipc: Enabled bearer , priority 0 [ 497.065039][T10105] loop4: detected capacity change from 0 to 512 [ 497.162219][T10101] device syzkaller0 entered promiscuous mode [ 497.231635][T10105] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 497.244377][T10100] tipc: Resetting bearer [ 497.283481][T10105] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 497.491862][T10100] tipc: Disabling bearer [ 498.811008][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1700'. [ 498.885997][T10139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1700'. [ 500.724684][T10180] netlink: 'syz.3.1714': attribute type 4 has an invalid length. [ 500.906565][ T4537] net_ratelimit: 27 callbacks suppressed [ 501.021725][T10191] ip_tables: iptables: counters copy to user failed while replacing table [ 501.044830][T10186] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 504.205342][T10197] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.748952][T10197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.792977][T10197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.082040][T10197] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.091445][T10197] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.100424][T10197] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.109718][T10197] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.209036][T10232] netlink: 'syz.4.1727': attribute type 39 has an invalid length. [ 506.425548][T10253] kvm: pic: level sensitive irq not supported [ 506.426869][T10253] kvm: pic: level sensitive irq not supported [ 506.438654][T10253] kvm: pic: single mode not supported [ 506.439906][T10253] kvm: pic: single mode not supported [ 506.457934][T10253] kvm: pic: single mode not supported [ 506.457976][T10253] kvm: pic: single mode not supported [ 506.464236][T10253] kvm: pic: single mode not supported [ 506.475902][T10253] kvm: pic: single mode not supported [ 506.476319][T10253] kvm: pic: single mode not supported [ 506.481871][T10253] kvm: pic: single mode not supported [ 506.493683][T10253] kvm: pic: single mode not supported [ 506.503233][T10253] kvm: pic: single mode not supported [ 506.503348][T10253] kvm: pic: level sensitive irq not supported [ 506.509650][T10253] kvm: pic: level sensitive irq not supported [ 506.516367][T10253] kvm: pic: level sensitive irq not supported [ 506.529043][ C1] net_ratelimit: 58 callbacks suppressed [ 506.530747][T10253] kvm: pic: level sensitive irq not supported [ 506.535170][T10253] kvm: pic: level sensitive irq not supported [ 506.542095][T10253] kvm: pic: level sensitive irq not supported [ 506.557147][T10253] kvm: pic: level sensitive irq not supported [ 506.557188][T10253] kvm: pic: level sensitive irq not supported [ 507.764712][T10274] ip_tables: iptables: counters copy to user failed while replacing table [ 507.948382][T10285] ip_tables: iptables: counters copy to user failed while replacing table [ 508.273691][T10291] loop2: detected capacity change from 0 to 512 [ 508.538959][T10300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1748'. [ 508.677734][T10291] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 508.693021][T10291] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 512.525471][ T4743] net_ratelimit: 19 callbacks suppressed [ 514.809944][T10369] overlayfs: failed to clone upperpath [ 516.771975][T10371] loop0: detected capacity change from 0 to 32768 [ 517.624724][T10371] JBD2: Ignoring recovery information on journal [ 517.741099][T10371] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 517.799724][T10418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1779'. [ 517.882155][T10420] overlayfs: failed to clone upperpath [ 517.890660][ C1] net_ratelimit: 21 callbacks suppressed [ 518.015513][T10426] FAULT_INJECTION: forcing a failure. [ 518.015513][T10426] name failslab, interval 1, probability 5, space 0, times 995 [ 518.049157][T10431] overlayfs: failed to clone upperpath [ 518.066638][T10426] CPU: 1 PID: 10426 Comm: syz.2.1781 Not tainted syzkaller #0 [ 518.074348][T10426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 518.084505][T10426] Call Trace: [ 518.087796][T10426] [ 518.090917][T10426] dump_stack_lvl+0x188/0x250 [ 518.095618][T10426] ? show_regs_print_info+0x20/0x20 [ 518.100829][T10426] ? load_image+0x410/0x410 [ 518.105483][T10426] ? __might_sleep+0xf0/0xf0 [ 518.110086][T10426] ? __lock_acquire+0x7d40/0x7d40 [ 518.115147][T10426] should_fail+0x383/0x4b0 [ 518.119592][T10426] should_failslab+0x5/0x20 [ 518.124110][T10426] slab_pre_alloc_hook+0x51/0xc0 [ 518.129060][T10426] ? proc_invalidate_siblings_dcache+0x650/0x650 [ 518.135494][T10426] ? proc_alloc_inode+0x19/0xa0 [ 518.140362][T10426] kmem_cache_alloc+0x3d/0x280 [ 518.145230][T10426] ? proc_invalidate_siblings_dcache+0x650/0x650 [ 518.151579][T10426] proc_alloc_inode+0x19/0xa0 [ 518.156262][T10426] ? proc_invalidate_siblings_dcache+0x650/0x650 [ 518.162620][T10426] new_inode_pseudo+0x5f/0x210 [ 518.167439][T10426] new_inode+0x25/0x1d0 [ 518.171717][T10426] proc_pid_make_inode+0x20/0x1a0 [ 518.176857][T10426] proc_ns_dir_lookup+0x6a0/0x7c0 [ 518.181903][T10426] ? proc_ns_dir_readdir+0x440/0x440 [ 518.187208][T10426] path_openat+0x1046/0x2fb0 [ 518.191847][T10426] ? do_filp_open+0x400/0x400 [ 518.196555][T10426] do_filp_open+0x1df/0x400 [ 518.201078][T10426] ? vfs_tmpfile+0x300/0x300 [ 518.201151][T10426] ? noop_direct_IO+0x10/0x10 [ 518.211267][T10426] ? _raw_spin_unlock+0x24/0x40 [ 518.211293][T10426] ? alloc_fd+0x59e/0x650 [ 518.220456][T10426] do_sys_openat2+0x14b/0x500 [ 518.225137][T10426] ? __lock_acquire+0x7d40/0x7d40 [ 518.225159][T10426] ? do_sys_open+0xe0/0xe0 [ 518.225174][T10426] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 518.225197][T10426] ? lock_chain_count+0x20/0x20 [ 518.234632][T10426] __x64_sys_openat+0x135/0x160 [ 518.234657][T10426] do_syscall_64+0x4c/0xa0 [ 518.234677][T10426] ? clear_bhb_loop+0x30/0x80 [ 518.245459][T10426] ? clear_bhb_loop+0x30/0x80 [ 518.245480][T10426] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 518.245501][T10426] RIP: 0033:0x7f899ee3fd8e [ 518.254909][T10426] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 518.254926][T10426] RSP: 002b:00007f899d0d6ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 518.254944][T10426] RAX: ffffffffffffffda RBX: 00007f899d0d76c0 RCX: 00007f899ee3fd8e [ 518.254958][T10426] RDX: 0000000000000002 RSI: 00007f899d0d6f90 RDI: ffffffffffffff9c [ 518.264467][T10426] RBP: 00007f899ef168b0 R08: 0000000000000000 R09: 0000000000000000 [ 518.264481][T10426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.274833][T10426] R13: 00007f899f107038 R14: 00007f899f106fa0 R15: 00007fff86e0aad8 [ 518.342839][T10426] [ 519.948303][ T4185] ocfs2: Unmounting device (7,0) on (node local) [ 520.815424][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 520.826542][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 522.828038][T10499] tipc: Failed to remove unknown binding: 66,0,0/4:2610603543/2610603545 [ 522.861818][T10499] tipc: Failed to remove unknown binding: 66,0,0/4:2610603543/2610603544 [ 523.023317][T10504] fuse: Bad value for 'fd' [ 523.361390][ C0] net_ratelimit: 16 callbacks suppressed [ 523.866049][T10537] ip_tables: iptables: counters copy to user failed while replacing table [ 524.193993][T10540] loop2: detected capacity change from 0 to 8 [ 524.302722][T10540] SQUASHFS error: zlib decompression failed, data probably corrupt [ 524.313783][T10540] SQUASHFS error: Failed to read block 0x9b: -5 [ 524.320236][T10540] SQUASHFS error: Unable to read metadata cache entry [99] [ 524.332616][T10540] SQUASHFS error: Unable to read inode 0x127 [ 525.619464][T10564] tipc: Enabled bearer , priority 0 [ 525.668059][T10564] tipc: New replicast peer: 255.255.255.255 [ 525.693989][T10564] tipc: Enabled bearer , priority 10 [ 526.289834][T10578] device syzkaller0 entered promiscuous mode [ 526.791201][T10592] loop2: detected capacity change from 0 to 512 [ 526.858404][T10592] EXT4-fs (loop2): Ignoring removed nobh option [ 526.942827][T10592] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,nombcache,,errors=continue. Quota mode: writeback. [ 526.971075][T10592] ext4 filesystem being mounted at /320/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.041776][T10592] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.1835: corrupted inode contents [ 527.055120][T10587] loop0: detected capacity change from 0 to 32768 [ 527.072356][T10592] EXT4-fs error (device loop2): ext4_dirty_inode:6087: inode #2: comm syz.2.1835: mark_inode_dirty error [ 527.099999][T10592] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.1835: corrupted inode contents [ 527.101058][T10587] JBD2: Ignoring recovery information on journal [ 527.203154][T10587] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 527.536278][T10615] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 527.731196][T10587] loop_set_status: loop0 () has still dirty pages (nrpages=6) [ 527.762817][T10623] device syzkaller0 entered promiscuous mode [ 527.820007][T10626] FAULT_INJECTION: forcing a failure. [ 527.820007][T10626] name failslab, interval 1, probability 5, space 0, times 994 [ 527.897488][T10626] CPU: 1 PID: 10626 Comm: syz.4.1843 Not tainted syzkaller #0 [ 527.905282][T10626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 527.915356][T10626] Call Trace: [ 527.918649][T10626] [ 527.921593][T10626] dump_stack_lvl+0x188/0x250 [ 527.926320][T10626] ? show_regs_print_info+0x20/0x20 [ 527.931521][T10626] ? load_image+0x410/0x410 [ 527.931583][T10626] ? __might_sleep+0xf0/0xf0 [ 527.940754][T10626] ? __lock_acquire+0x7d40/0x7d40 [ 527.940785][T10626] should_fail+0x383/0x4b0 [ 527.950225][T10626] should_failslab+0x5/0x20 [ 527.954737][T10626] slab_pre_alloc_hook+0x51/0xc0 [ 527.954762][T10626] ? kvm_mmu_topup_memory_cache+0xd4/0x200 [ 527.966318][T10626] kmem_cache_alloc+0x3d/0x280 [ 527.966350][T10626] kvm_mmu_topup_memory_cache+0xd4/0x200 [ 527.966374][T10626] kvm_mmu_load+0x88/0x1aa0 [ 527.976916][T10626] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 527.976938][T10626] ? lockdep_hardirqs_on+0x94/0x140 [ 527.976959][T10626] ? kvm_apic_accept_events+0x576/0x580 [ 527.987652][T10626] ? lock_chain_count+0x20/0x20 [ 527.987680][T10626] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 527.987700][T10626] ? kvm_apic_has_interrupt+0x72d/0x740 [ 527.998627][T10626] ? kvm_lapic_enable_pv_eoi+0x140/0x140 [ 527.998664][T10626] vcpu_enter_guest+0x60da/0x6f70 [ 527.998797][T10626] ? local_bh_enable+0x20/0x20 [ 527.998814][T10626] ? is_bpf_text_address+0x254/0x270 [ 528.009599][T10626] ? mark_lock+0x94/0x320 [ 528.009626][T10626] ? __lock_acquire+0x13b3/0x7d40 [ 528.009647][T10626] ? kfree+0xef/0x2a0 [ 528.021796][T10626] ? mark_lock+0x94/0x320 [ 528.021822][T10626] ? __lock_acquire+0x12df/0x7d40 [ 528.021843][T10626] ? __lock_acquire+0x12df/0x7d40 [ 528.065479][T10626] ? verify_lock_unused+0x140/0x140 [ 528.070702][T10626] ? verify_lock_unused+0x140/0x140 [ 528.075999][T10626] ? vmx_vcpu_load_vmcs+0x4ac/0x790 [ 528.081428][T10626] ? mark_lock+0x94/0x320 [ 528.085786][T10626] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 528.091794][T10626] ? __local_bh_enable_ip+0x136/0x1c0 [ 528.097181][T10626] ? lockdep_hardirqs_on+0x94/0x140 [ 528.102400][T10626] ? read_lock_is_recursive+0x10/0x10 [ 528.107783][T10626] ? __local_bh_enable_ip+0x136/0x1c0 [ 528.113169][T10626] ? _local_bh_enable+0xa0/0xa0 [ 528.118053][T10626] kvm_arch_vcpu_ioctl_run+0x804/0x1e40 [ 528.123623][T10626] kvm_vcpu_ioctl+0x8f2/0xc10 [ 528.128376][T10626] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 528.128419][T10626] ? bpf_lsm_file_ioctl+0x5/0x10 [ 528.139263][T10626] ? security_file_ioctl+0x7c/0xa0 [ 528.144417][T10626] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 528.150054][T10626] __se_sys_ioctl+0xfa/0x170 [ 528.154650][T10626] do_syscall_64+0x4c/0xa0 [ 528.159245][T10626] ? clear_bhb_loop+0x30/0x80 [ 528.163940][T10626] ? clear_bhb_loop+0x30/0x80 [ 528.168829][T10626] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 528.174738][T10626] RIP: 0033:0x7fe71a10d559 [ 528.179168][T10626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.199149][T10626] RSP: 002b:00007fe718365028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 528.207843][T10626] RAX: ffffffffffffffda RBX: 00007fe71a394fa0 RCX: 00007fe71a10d559 [ 528.215847][T10626] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 528.223829][T10626] RBP: 00007fe71a1a48b0 R08: 0000000000000000 R09: 0000000000000000 [ 528.223842][T10626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.223853][T10626] R13: 00007fe71a395038 R14: 00007fe71a394fa0 R15: 00007fffc4a650c8 [ 528.223877][T10626] [ 528.277014][ T4185] ocfs2: Unmounting device (7,0) on (node local) [ 528.620210][T10640] loop0: detected capacity change from 0 to 128 [ 528.848649][ C1] net_ratelimit: 18 callbacks suppressed [ 528.944671][T10645] ip_tables: iptables: counters copy to user failed while replacing table [ 529.488758][T10656] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 529.728844][T10667] device syzkaller0 entered promiscuous mode [ 529.925314][T10674] loop2: detected capacity change from 0 to 8 [ 530.020648][T10674] SQUASHFS error: zlib decompression failed, data probably corrupt [ 530.037044][T10674] SQUASHFS error: Failed to read block 0x9b: -5 [ 530.043605][T10674] SQUASHFS error: Unable to read metadata cache entry [99] [ 530.051764][T10674] SQUASHFS error: Unable to read inode 0x127 [ 530.961997][T10677] ceph: No mds server is up or the cluster is laggy [ 531.086557][T10706] loop2: detected capacity change from 0 to 8 [ 531.182390][T10706] SQUASHFS error: zlib decompression failed, data probably corrupt [ 531.208892][T10706] SQUASHFS error: Failed to read block 0x9b: -5 [ 531.254243][T10706] SQUASHFS error: Unable to read metadata cache entry [99] [ 531.270516][T10706] SQUASHFS error: Unable to read inode 0x127 [ 531.325452][T10713] loop4: detected capacity change from 0 to 8 [ 531.356322][T10713] SQUASHFS error: zlib decompression failed, data probably corrupt [ 531.365029][T10713] SQUASHFS error: Failed to read block 0x9b: -5 [ 531.371535][T10713] SQUASHFS error: Unable to read metadata cache entry [99] [ 531.384547][T10713] SQUASHFS error: Unable to read inode 0x127 [ 532.226557][T10721] loop4: detected capacity change from 0 to 256 [ 532.368520][T10721] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 533.086774][T10724] loop0: detected capacity change from 0 to 32768 [ 533.140041][T10724] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1878 (10724) [ 533.213515][T10724] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 533.239619][T10724] BTRFS info (device loop0): setting nodatacow, compression disabled [ 533.267179][T10724] BTRFS info (device loop0): force clearing of disk cache [ 533.288053][T10724] BTRFS info (device loop0): turning off barriers [ 533.295305][T10724] BTRFS info (device loop0): use no compression [ 533.306890][T10724] BTRFS info (device loop0): disabling free space tree [ 533.325813][T10724] BTRFS info (device loop0): enabling ssd optimizations [ 533.356048][T10724] BTRFS info (device loop0): using spread ssd allocation scheme [ 533.391086][T10724] BTRFS info (device loop0): not using ssd optimizations [ 533.420825][T10724] BTRFS info (device loop0): not using spread ssd allocation scheme [ 533.440298][T10724] BTRFS info (device loop0): has skinny extents [ 533.912294][T10748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1882'. [ 534.043512][T10755] loop2: detected capacity change from 0 to 8 [ 534.054626][T10724] BTRFS info (device loop0): clearing free space tree [ 534.065249][T10724] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 534.077255][T10724] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 534.157768][T10755] SQUASHFS error: zlib decompression failed, data probably corrupt [ 534.198569][T10755] SQUASHFS error: Failed to read block 0x9b: -5 [ 534.227058][T10755] SQUASHFS error: Unable to read metadata cache entry [99] [ 534.267436][T10755] SQUASHFS error: Unable to read inode 0x127 [ 534.310723][T10724] BTRFS info (device loop0): checking UUID tree [ 534.397406][ C1] net_ratelimit: 14 callbacks suppressed [ 535.371939][T10803] loop0: detected capacity change from 0 to 512 [ 535.494404][T10803] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 535.506851][T10803] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.631382][T10814] netlink: 'syz.3.1898': attribute type 4 has an invalid length. [ 536.949246][T10838] FAULT_INJECTION: forcing a failure. [ 536.949246][T10838] name failslab, interval 1, probability 5, space 0, times 993 [ 537.035388][T10838] CPU: 0 PID: 10838 Comm: syz.4.1906 Not tainted syzkaller #0 [ 537.043065][T10838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 537.053134][T10838] Call Trace: [ 537.056417][T10838] [ 537.059353][T10838] dump_stack_lvl+0x188/0x250 [ 537.064133][T10838] ? show_regs_print_info+0x20/0x20 [ 537.069338][T10838] ? load_image+0x410/0x410 [ 537.073854][T10838] ? __might_sleep+0xf0/0xf0 [ 537.078455][T10838] ? __lock_acquire+0x7d40/0x7d40 [ 537.083595][T10838] should_fail+0x383/0x4b0 [ 537.088078][T10838] should_failslab+0x5/0x20 [ 537.092594][T10838] slab_pre_alloc_hook+0x51/0xc0 [ 537.097640][T10838] __kmalloc+0x6b/0x340 [ 537.097672][T10838] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 537.107741][T10838] tomoyo_realpath_from_path+0xed/0x5e0 [ 537.107784][T10838] tomoyo_mount_permission+0x3b8/0x9b0 [ 537.107802][T10838] ? ____kasan_slab_free+0xd5/0x110 [ 537.118880][T10838] ? slab_free_freelist_hook+0xec/0x170 [ 537.129604][T10838] ? tomoyo_get_name+0x520/0x520 [ 537.134587][T10838] security_sb_mount+0x83/0xb0 [ 537.139439][T10838] path_mount+0xb8/0xfe0 [ 537.143828][T10838] ? user_path_at_empty+0x13e/0x190 [ 537.149037][T10838] __se_sys_mount+0x2e3/0x3d0 [ 537.153747][T10838] ? __x64_sys_mount+0xc0/0xc0 [ 537.158610][T10838] ? lockdep_hardirqs_on+0x94/0x140 [ 537.163820][T10838] ? __x64_sys_mount+0x1c/0xc0 [ 537.168597][T10838] do_syscall_64+0x4c/0xa0 [ 537.173030][T10838] ? clear_bhb_loop+0x30/0x80 [ 537.178030][T10838] ? clear_bhb_loop+0x30/0x80 [ 537.182845][T10838] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 537.188921][T10838] RIP: 0033:0x7fe71a10d559 [ 537.193381][T10838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.213167][T10838] RSP: 002b:00007fe718365028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 537.221699][T10838] RAX: ffffffffffffffda RBX: 00007fe71a394fa0 RCX: 00007fe71a10d559 [ 537.221720][T10838] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000200000000180 [ 537.221733][T10838] RBP: 00007fe71a1a48b0 R08: 0000200000000600 R09: 0000000000000000 [ 537.237680][T10838] R10: 000000000082002c R11: 0000000000000246 R12: 0000000000000000 [ 537.237693][T10838] R13: 00007fe71a395038 R14: 00007fe71a394fa0 R15: 00007fffc4a650c8 [ 537.237726][T10838] [ 537.292696][T10838] ERROR: Out of memory at tomoyo_realpath_from_path. [ 537.688291][T10862] fuse: Bad value for 'fd' [ 537.863180][T10864] loop2: detected capacity change from 0 to 8 [ 537.889383][T10866] loop0: detected capacity change from 0 to 8 [ 537.964738][T10864] SQUASHFS error: zlib decompression failed, data probably corrupt [ 537.980815][T10866] SQUASHFS error: zlib decompression failed, data probably corrupt [ 538.006527][T10864] SQUASHFS error: Failed to read block 0x9b: -5 [ 538.021425][T10866] SQUASHFS error: Failed to read block 0x9b: -5 [ 538.046888][T10864] SQUASHFS error: Unable to read metadata cache entry [99] [ 538.061364][T10866] SQUASHFS error: Unable to read metadata cache entry [99] [ 538.070719][T10864] SQUASHFS error: Unable to read inode 0x127 [ 538.082956][T10866] SQUASHFS error: Unable to read inode 0x127 [ 538.823044][T10887] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1922'. [ 539.882270][ T4327] net_ratelimit: 23 callbacks suppressed [ 540.045500][T10902] EXT4-fs (sda1): shut down requested (0) [ 540.106728][ T26] audit: type=1804 audit(1792638469.701:270): pid=10907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1926" name="/newroot/272/mnt/syzkaller0" dev="sda1" ino=2049 res=1 errno=0 [ 540.378576][T10909] device syzkaller0 entered promiscuous mode [ 540.675436][T10921] tipc: Enabling of bearer rejected, already enabled [ 540.709717][T10916] ip_tables: iptables: counters copy to user failed while replacing table [ 540.779188][T10921] tipc: Disabling bearer [ 540.913766][T10929] loop0: detected capacity change from 0 to 8 [ 541.006685][T10929] SQUASHFS error: zlib decompression failed, data probably corrupt [ 541.020441][T10929] SQUASHFS error: Failed to read block 0x9b: -5 [ 541.038197][T10929] SQUASHFS error: Unable to read metadata cache entry [99] [ 541.059299][T10929] SQUASHFS error: Unable to read inode 0x127 [ 542.580254][T10946] loop4: detected capacity change from 0 to 1024 [ 542.687156][T10949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1940'. [ 542.713663][T10952] loop2: detected capacity change from 0 to 128 [ 543.171054][T10957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1944'. [ 543.235974][ C1] vcan0: j1939_session_tx_dat: 0xffff88805eb5d400: queue data error: -100 [ 543.421307][T10968] loop4: detected capacity change from 0 to 8 [ 543.583376][T10968] SQUASHFS error: zlib decompression failed, data probably corrupt [ 543.611702][T10968] SQUASHFS error: Failed to read block 0x9b: -5 [ 544.350589][T10968] SQUASHFS error: Unable to read metadata cache entry [99] [ 544.372226][T10968] SQUASHFS error: Unable to read inode 0x127 [ 545.137760][T11001] loop2: detected capacity change from 0 to 8 [ 545.266832][T11007] net_ratelimit: 21 callbacks suppressed [ 545.266841][T11007] ip_tables: iptables: counters copy to user failed while replacing table [ 545.295921][T11001] SQUASHFS error: zlib decompression failed, data probably corrupt [ 545.306845][T11001] SQUASHFS error: Failed to read block 0x9b: -5 [ 545.334379][T11001] SQUASHFS error: Unable to read metadata cache entry [99] [ 545.354677][T11001] SQUASHFS error: Unable to read inode 0x127 [ 546.241019][T11014] FAULT_INJECTION: forcing a failure. [ 546.241019][T11014] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 546.329294][T11014] CPU: 0 PID: 11014 Comm: syz.4.1966 Not tainted syzkaller #0 [ 546.336889][T11014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 546.346950][T11014] Call Trace: [ 546.350247][T11014] [ 546.353206][T11014] dump_stack_lvl+0x188/0x250 [ 546.357902][T11014] ? show_regs_print_info+0x20/0x20 [ 546.363096][T11014] ? load_image+0x410/0x410 [ 546.363117][T11014] ? __lock_acquire+0x7d40/0x7d40 [ 546.363144][T11014] should_fail+0x383/0x4b0 [ 546.372742][T11014] prepare_alloc_pages+0x1e3/0x5b0 [ 546.372779][T11014] __alloc_pages+0x11b/0x480 [ 546.382408][T11014] ? zone_statistics+0x170/0x170 [ 546.382442][T11014] ? alloc_pages+0x452/0x560 [ 546.392482][T11014] pte_alloc_one+0x7b/0x310 [ 546.401586][T11014] ? rcu_lock_release+0x20/0x20 [ 546.406526][T11014] ? __rwlock_init+0x140/0x140 [ 546.406544][T11014] ? count_memcg_event_mm+0x324/0x370 [ 546.406563][T11014] ? do_raw_spin_unlock+0x11d/0x230 [ 546.416841][T11014] __pte_alloc+0x21/0x150 [ 546.416860][T11014] ? __pud_alloc+0x122/0x140 [ 546.426361][T11014] handle_mm_fault+0x39d9/0x4440 [ 546.426400][T11014] ? get_page+0xe0/0xe0 [ 546.435883][T11014] ? follow_page_mask+0x272/0x12b0 [ 546.435909][T11014] ? vma_is_secretmem+0x9/0x40 [ 546.445131][T11014] ? check_vma_flags+0x359/0x470 [ 546.454982][T11014] __get_user_pages+0x952/0x11e0 [ 546.459933][T11014] ? populate_vma_page_range+0x290/0x290 [ 546.459961][T11014] ? __might_sleep+0xf0/0xf0 [ 546.459980][T11014] ? read_lock_is_recursive+0x10/0x10 [ 546.460002][T11014] __get_user_pages_remote+0x1c2/0x730 [ 546.460024][T11014] ? get_user_pages_remote+0x55/0xa0 [ 546.460042][T11014] get_arg_page+0x11b/0x350 [ 546.460059][T11014] ? copy_string_kernel+0x280/0x280 [ 546.471062][T11014] ? up_write+0x1b6/0x410 [ 546.471098][T11014] copy_string_kernel+0x14d/0x280 [ 546.481999][T11014] do_execveat_common+0x360/0x6b0 [ 546.482024][T11014] __x64_sys_execveat+0xc0/0xe0 [ 546.491978][T11014] do_syscall_64+0x4c/0xa0 [ 546.491999][T11014] ? clear_bhb_loop+0x30/0x80 [ 546.501565][T11014] ? clear_bhb_loop+0x30/0x80 [ 546.501588][T11014] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 546.501608][T11014] RIP: 0033:0x7fe71a10d559 [ 546.511704][T11014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.511719][T11014] RSP: 002b:00007fe718365028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 546.520961][T11014] RAX: ffffffffffffffda RBX: 00007fe71a394fa0 RCX: 00007fe71a10d559 [ 546.520976][T11014] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 546.520988][T11014] RBP: 00007fe71a1a48b0 R08: 0000000000001000 R09: 0000000000000000 [ 546.530332][T11014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.540650][T11014] R13: 00007fe71a395038 R14: 00007fe71a394fa0 R15: 00007fffc4a650c8 [ 546.568924][T11014] [ 547.342370][T11027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1970'. [ 547.419867][T11027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1970'. [ 547.780965][T11036] netlink: 2232 bytes leftover after parsing attributes in process `syz.0.1973'. [ 547.866037][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888078419400: rx timeout, send abort [ 548.660608][T11042] overlayfs: upper fs does not support file handles, falling back to index=off. [ 548.723367][T11042] overlayfs: conflicting lowerdir path [ 549.312987][T11062] tipc: Started in network mode [ 549.328306][T11062] tipc: Node identity 4, cluster identity 4711 [ 549.343098][T11062] tipc: Node number set to 4 [ 549.358521][T11062] tipc: Enabled bearer , priority 0 [ 549.393709][T11062] tipc: Resetting bearer [ 549.470008][T11062] tipc: Disabling bearer [ 550.388184][T11075] loop2: detected capacity change from 0 to 8 [ 550.526700][T11075] SQUASHFS error: zlib decompression failed, data probably corrupt [ 550.538874][T11081] overlayfs: failed to clone lowerpath [ 550.547109][T11075] SQUASHFS error: Failed to read block 0x9b: -5 [ 550.555427][T11075] SQUASHFS error: Unable to read metadata cache entry [99] [ 550.583430][T11075] SQUASHFS error: Unable to read inode 0x127 [ 550.751484][T11089] FAULT_INJECTION: forcing a failure. [ 550.751484][T11089] name failslab, interval 1, probability 5, space 0, times 992 [ 550.785918][T11089] CPU: 0 PID: 11089 Comm: syz.4.1989 Not tainted syzkaller #0 [ 550.793464][T11089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 550.803702][T11089] Call Trace: [ 550.806996][T11089] [ 550.809929][T11089] dump_stack_lvl+0x188/0x250 [ 550.814632][T11089] ? show_regs_print_info+0x20/0x20 [ 550.819841][T11089] ? load_image+0x410/0x410 [ 550.824354][T11089] ? __might_sleep+0xf0/0xf0 [ 550.828956][T11089] ? __lock_acquire+0x7d40/0x7d40 [ 550.834011][T11089] should_fail+0x383/0x4b0 [ 550.838557][T11089] should_failslab+0x5/0x20 [ 550.843069][T11089] slab_pre_alloc_hook+0x51/0xc0 [ 550.848005][T11089] ? key_alloc+0x346/0x1030 [ 550.852679][T11089] __kmalloc_track_caller+0x69/0x330 [ 550.852740][T11089] ? key_alloc+0x346/0x1030 [ 550.852762][T11089] kmemdup+0x22/0x50 [ 550.852780][T11089] key_alloc+0x346/0x1030 [ 550.852811][T11089] request_key_and_link+0x784/0x13b0 [ 550.863473][T11089] ? complete_request_key+0xa0/0xa0 [ 550.863502][T11089] ? __might_sleep+0xf0/0xf0 [ 550.871716][T11089] ? asymmetric_key_cmp+0x240/0x240 [ 550.882290][T11089] ? keyring_search_rcu+0x280/0x280 [ 550.882320][T11089] ? down_read+0x1aa/0x2e0 [ 550.882343][T11089] __se_sys_request_key+0x293/0x350 [ 550.892184][T11089] ? __x64_sys_request_key+0xa0/0xa0 [ 550.892215][T11089] ? lockdep_hardirqs_on+0x94/0x140 [ 550.892237][T11089] do_syscall_64+0x4c/0xa0 [ 550.892252][T11089] ? clear_bhb_loop+0x30/0x80 [ 550.892270][T11089] ? clear_bhb_loop+0x30/0x80 [ 550.892287][T11089] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 550.902443][T11089] RIP: 0033:0x7fe71a10d559 [ 550.912890][T11089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.912908][T11089] RSP: 002b:00007fe718365028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 550.922504][T11089] RAX: ffffffffffffffda RBX: 00007fe71a394fa0 RCX: 00007fe71a10d559 [ 550.932015][T11089] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 550.971043][T11089] RBP: 00007fe71a1a48b0 R08: 0000000000000000 R09: 0000000000000000 [ 550.971067][T11089] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 550.971078][T11089] R13: 00007fe71a395038 R14: 00007fe71a394fa0 R15: 00007fffc4a650c8 [ 550.971102][T11089] [ 551.089948][T11094] loop0: detected capacity change from 0 to 256 [ 551.421135][T11101] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 551.429406][T11101] FAT-fs (loop0): Filesystem has been set read-only [ 551.502664][ T4597] net_ratelimit: 19 callbacks suppressed [ 552.197242][T11108] ip_tables: iptables: counters copy to user failed while replacing table [ 555.246598][T11149] loop2: detected capacity change from 0 to 32768 [ 555.364445][T11149] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2007 (11149) [ 555.422369][T11149] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 555.459124][T11149] BTRFS info (device loop2): setting nodatacow, compression disabled [ 555.474348][T11156] loop4: detected capacity change from 0 to 32768 [ 555.485766][T11149] BTRFS info (device loop2): force clearing of disk cache [ 555.496622][T11149] BTRFS info (device loop2): turning off barriers [ 555.507620][T11149] BTRFS info (device loop2): use no compression [ 555.516239][T11149] BTRFS info (device loop2): disabling free space tree [ 555.530795][T10514] loop4: p1 p3 < > [ 555.541888][T11149] BTRFS info (device loop2): enabling ssd optimizations [ 555.555197][T11164] udevd[11164]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 555.585732][T11149] BTRFS info (device loop2): using spread ssd allocation scheme [ 555.646238][T11156] loop4: p1 p3 < > [ 555.651017][T11149] BTRFS info (device loop2): not using ssd optimizations [ 555.677557][T11149] BTRFS info (device loop2): not using spread ssd allocation scheme [ 555.695008][ T26] audit: type=1800 audit(1792638484.293:271): pid=11155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2010" name="bus" dev="ramfs" ino=52277 res=0 errno=0 [ 555.719847][T11149] BTRFS info (device loop2): has skinny extents [ 555.823811][T11170] udevd[11170]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 555.899346][T10514] udevd[10514]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 555.899491][T10607] udevd[10607]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 556.010778][T10514] udevd[10514]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 556.011832][T10762] udevd[10762]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 556.129083][T11149] BTRFS info (device loop2): clearing free space tree [ 556.163471][T11149] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 556.173642][T11149] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 556.238115][T11149] BTRFS info (device loop2): checking UUID tree [ 556.438720][T11202] loop0: detected capacity change from 0 to 256 [ 556.458968][T11208] jffs2: notice: (11208) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 556.505275][T11209] overlayfs: failed to clone upperpath [ 556.529062][T11202] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 556.598460][T11211] loop4: detected capacity change from 0 to 8 [ 556.671043][T11216] fuse: Bad value for 'fd' [ 556.703058][T11211] SQUASHFS error: zlib decompression failed, data probably corrupt [ 556.747125][T11211] SQUASHFS error: Failed to read block 0x9b: -5 [ 556.757932][T11211] SQUASHFS error: Unable to read metadata cache entry [99] [ 556.783289][T11211] SQUASHFS error: Unable to read inode 0x127 [ 557.603472][T11235] loop2: detected capacity change from 0 to 512 [ 557.660438][ C0] net_ratelimit: 24 callbacks suppressed [ 557.724311][T11235] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 557.770369][T11235] ext4 filesystem being mounted at /348/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 557.803385][T11244] ip_tables: iptables: counters copy to user failed while replacing table [ 558.134611][T11252] overlayfs: failed to clone lowerpath [ 559.595162][T11300] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 559.675694][T11305] loop2: detected capacity change from 0 to 256 [ 559.839328][T11305] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value [ 561.034674][T11335] device syzkaller0 entered promiscuous mode [ 561.096571][T11339] loop4: detected capacity change from 0 to 64 [ 561.395071][T11353] fuse: Bad value for 'fd' [ 561.471440][T11358] loop4: detected capacity change from 0 to 512 [ 561.494769][T11356] overlayfs: failed to clone lowerpath [ 561.701592][ T4270] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 562.168626][ T4270] usb 3-1: Using ep0 maxpacket: 16 [ 562.375556][T11358] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 562.439383][T11358] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 562.514160][ T4270] usb 3-1: config 0 has no interfaces? [ 562.973931][ T4270] usb 3-1: New USB device found, idVendor=046d, idProduct=087c, bcdDevice=b0.7a [ 562.998223][ T4270] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.078620][ T4270] usb 3-1: Product: syz [ 563.097496][ T4270] usb 3-1: Manufacturer: syz [ 563.120905][ T4270] usb 3-1: SerialNumber: syz [ 563.165713][ T4270] usb 3-1: config 0 descriptor?? [ 563.787141][ T151] net_ratelimit: 24 callbacks suppressed [ 564.280201][ T26] audit: type=1800 audit(1792638492.319:272): pid=11407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2081" name="c_srate" dev="configfs" ino=53307 res=0 errno=0 [ 564.456312][ T6314] usb 3-1: USB disconnect, device number 7 [ 565.677338][ T26] audit: type=1800 audit(1792638493.619:273): pid=11413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2082" name="/" dev="fuse" ino=1 res=0 errno=0 [ 567.033088][T11459] jffs2: notice: (11459) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 569.292036][ T4597] net_ratelimit: 21 callbacks suppressed [ 569.999533][T11473] X25: unknown 1F in state 3 [ 571.184605][T11496] device syzkaller0 entered promiscuous mode [ 571.239153][T11502] loop4: detected capacity change from 0 to 8 [ 571.345390][T11508] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 571.375837][T11502] SQUASHFS error: zlib decompression failed, data probably corrupt [ 571.387716][T11502] SQUASHFS error: Failed to read block 0x9b: -5 [ 571.399305][T11502] SQUASHFS error: Unable to read metadata cache entry [99] [ 571.406736][T11502] SQUASHFS error: Unable to read inode 0x127 [ 571.461535][T11510] jffs2: notice: (11510) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 571.518604][T11508] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 571.768330][T11517] device syzkaller0 entered promiscuous mode [ 573.930932][T11550] loop4: detected capacity change from 0 to 8 [ 573.999085][T11550] SQUASHFS error: zlib decompression failed, data probably corrupt [ 574.012793][T11550] SQUASHFS error: Failed to read block 0x9b: -5 [ 574.019498][T11550] SQUASHFS error: Unable to read metadata cache entry [99] [ 574.026924][T11550] SQUASHFS error: Unable to read inode 0x127 [ 574.339869][T11554] loop2: detected capacity change from 0 to 8 [ 574.523054][T11554] SQUASHFS error: zlib decompression failed, data probably corrupt [ 574.552034][T11554] SQUASHFS error: Failed to read block 0x9b: -5 [ 574.569321][T11554] SQUASHFS error: Unable to read metadata cache entry [99] [ 574.615974][T11554] SQUASHFS error: Unable to read inode 0x127 [ 574.936805][ C1] net_ratelimit: 15 callbacks suppressed [ 578.441356][T11591] loop2: detected capacity change from 0 to 512 [ 578.697854][T11591] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 578.759719][T11605] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2133'. [ 578.772195][T11591] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.853625][T11591] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.2129: corrupted inode contents [ 578.892341][T11591] EXT4-fs error (device loop2): ext4_dirty_inode:6087: inode #2: comm syz.2.2129: mark_inode_dirty error [ 578.916252][T11591] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.2129: corrupted inode contents [ 578.980065][T11591] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.2129: mark_inode_dirty error [ 579.071491][ T26] audit: type=1800 audit(1792638506.153:274): pid=11608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2129" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 579.742827][T11594] udevd[11594]: incorrect ext4 checksum on /dev/loop2 [ 580.000731][T11626] netlink: 'syz.0.2141': attribute type 1 has an invalid length. [ 580.046986][T11626] 8021q: adding VLAN 0 to HW filter on device bond2 [ 581.371101][ T4318] net_ratelimit: 16 callbacks suppressed [ 581.390075][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2141'. [ 581.452133][T11626] bond2: (slave bridge1): making interface the new active one [ 581.462369][T11626] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 581.471275][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 584.078548][T11643] device syzkaller0 entered promiscuous mode [ 585.101805][T11655] loop4: detected capacity change from 0 to 512 [ 585.130163][ T26] audit: type=1326 audit(1792638511.803:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.1.2151" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1640740559 code=0x7ffc0000 [ 585.199162][ T26] audit: type=1326 audit(1792638511.803:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.1.2151" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1640740559 code=0x7ffc0000 [ 585.518830][ T26] audit: type=1326 audit(1792638511.803:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.1.2151" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1640740559 code=0x7ffc0000 [ 585.549336][ T26] audit: type=1326 audit(1792638511.803:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.1.2151" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1640740559 code=0x7ffc0000 [ 585.868124][ T26] audit: type=1326 audit(1792638511.803:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.1.2151" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1640740559 code=0x7ffc0000 [ 585.915786][ T26] audit: type=1326 audit(1792638511.803:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.1.2151" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f1640740559 code=0x7ffc0000 [ 586.440466][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 586.446882][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 586.470424][ T26] audit: type=1326 audit(1792638511.803:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.1.2151" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1640740559 code=0x7ffc0000 [ 586.504618][ T26] audit: type=1326 audit(1792638511.803:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.1.2151" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1640740559 code=0x7ffc0000 [ 587.155824][ T4318] net_ratelimit: 20 callbacks suppressed [ 587.172272][T11655] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 587.209832][T11655] ext4 filesystem being mounted at /313/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 587.407563][ T26] audit: type=1326 audit(1792638511.803:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.1.2151" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1640740559 code=0x7ffc0000 [ 587.443174][ T26] audit: type=1326 audit(1792638511.822:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.1.2151" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1640740559 code=0x7ffc0000 [ 588.768858][T11707] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2160'. [ 590.655230][T11726] netlink: 'syz.3.2177': attribute type 10 has an invalid length. [ 591.859778][T11726] team0 (unregistering): Port device team_slave_0 removed [ 591.957445][T11726] team0 (unregistering): Port device team_slave_1 removed [ 592.062751][T11722] FAULT_INJECTION: forcing a failure. [ 592.062751][T11722] name fail_futex, interval 1, probability 0, space 0, times 0 [ 592.083840][T11722] CPU: 0 PID: 11722 Comm: syz.2.2166 Not tainted syzkaller #0 [ 592.091342][T11722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 592.101670][T11722] Call Trace: [ 592.104974][T11722] [ 592.108071][T11722] dump_stack_lvl+0x188/0x250 [ 592.112777][T11722] ? show_regs_print_info+0x20/0x20 [ 592.118093][T11722] ? load_image+0x410/0x410 [ 592.122623][T11722] ? __lock_acquire+0x12df/0x7d40 [ 592.127696][T11722] ? mark_lock+0x94/0x320 [ 592.132145][T11722] should_fail+0x383/0x4b0 [ 592.136704][T11722] get_futex_key+0x1a1/0x12d0 [ 592.141622][T11722] ? futex_wait_restart+0x250/0x250 [ 592.146877][T11722] futex_wake+0x101/0x540 [ 592.151273][T11722] ? verify_lock_unused+0x140/0x140 [ 592.151298][T11722] ? verify_lock_unused+0x140/0x140 [ 592.151319][T11722] ? futex_wait+0x680/0x680 [ 592.151341][T11722] do_futex+0xd83/0x12b0 [ 592.151362][T11722] ? __might_sleep+0xf0/0xf0 [ 592.162488][T11722] ? __might_fault+0xb7/0x110 [ 592.162516][T11722] ? futex_exit_release+0x1c0/0x1c0 [ 592.171411][T11722] ? __lock_acquire+0x7d40/0x7d40 [ 592.171440][T11722] mm_release+0x278/0x3c0 [ 592.180703][T11722] ? exit_mm_release+0x30/0x30 [ 592.180733][T11722] ? lockdep_hardirqs_on+0x94/0x140 [ 592.180758][T11722] exit_mm+0xaf/0x7b0 [ 592.180771][T11722] ? perf_pmu_migrate_context+0xb70/0xb70 [ 592.191933][T11722] ? do_exit+0x2110/0x2110 [ 592.191957][T11722] ? rcu_is_watching+0x11/0xa0 [ 592.191976][T11722] ? mm_trace_rss_stat+0x81/0x1c0 [ 592.191993][T11722] ? sync_mm_rss+0x1f5/0x350 [ 592.192007][T11722] do_exit+0x5b8/0x2110 [ 592.240768][T11722] ? put_task_struct+0x80/0x80 [ 592.245556][T11722] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 592.251699][T11722] ? cgroup_freezing+0x264/0x310 [ 592.256805][T11722] do_group_exit+0x12c/0x2f0 [ 592.261410][T11722] ? lockdep_hardirqs_on+0x94/0x140 [ 592.266668][T11722] get_signal+0x7eb/0x12e0 [ 592.271196][T11722] arch_do_signal_or_restart+0xe6/0x12a0 [ 592.277021][T11722] ? futex_exit_release+0x1c0/0x1c0 [ 592.282236][T11722] ? get_sigframe_size+0x10/0x10 [ 592.287205][T11722] ? __context_tracking_exit+0x4c/0x80 [ 592.292701][T11722] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 592.298711][T11722] ? exit_to_user_mode_loop+0x3b/0x130 [ 592.304278][T11722] exit_to_user_mode_loop+0x9e/0x130 [ 592.309588][T11722] exit_to_user_mode_prepare+0xee/0x180 [ 592.315145][T11722] syscall_exit_to_user_mode+0x16/0x40 [ 592.320606][T11722] do_syscall_64+0x58/0xa0 [ 592.320626][T11722] ? clear_bhb_loop+0x30/0x80 [ 592.320643][T11722] ? clear_bhb_loop+0x30/0x80 [ 592.320659][T11722] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 592.320677][T11722] RIP: 0033:0x7f899ee7f559 [ 592.329738][T11722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.340264][T11722] RSP: 002b:00007f899d0d70e8 EFLAGS: 00000246 [ 592.364716][T11722] ORIG_RAX: 00000000000000ca [ 592.364726][T11722] RAX: fffffffffffffe00 RBX: 00007f899f106fa8 RCX: 00007f899ee7f559 [ 592.364738][T11722] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f899f106fa8 [ 592.364749][T11722] RBP: 00007f899f106fa0 R08: 0000000000000000 R09: 0000000000000000 [ 592.375548][T11722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.375561][T11722] R13: 00007f899f107038 R14: 00007fff86e0a9f0 R15: 00007fff86e0aad8 [ 592.375587][T11722] [ 592.562586][T11746] net_ratelimit: 21 callbacks suppressed [ 592.562601][T11746] ip_tables: iptables: counters copy to user failed while replacing table [ 592.764089][T11754] FAULT_INJECTION: forcing a failure. [ 592.764089][T11754] name failslab, interval 1, probability 5, space 0, times 991 [ 592.777246][T11754] CPU: 0 PID: 11754 Comm: syz.2.2175 Not tainted syzkaller #0 [ 592.784717][T11754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 592.784731][T11754] Call Trace: [ 592.784740][T11754] [ 592.784747][T11754] dump_stack_lvl+0x188/0x250 [ 592.784774][T11754] ? show_regs_print_info+0x20/0x20 [ 592.784793][T11754] ? load_image+0x410/0x410 [ 592.784814][T11754] ? prandom_u32+0x217/0x250 [ 592.784869][T11754] should_fail+0x383/0x4b0 [ 592.784894][T11754] should_failslab+0x5/0x20 [ 592.784912][T11754] slab_pre_alloc_hook+0x51/0xc0 [ 592.784933][T11754] __kmalloc+0x6b/0x340 [ 592.784949][T11754] ? tomoyo_encode+0x28a/0x550 [ 592.815823][T11754] tomoyo_encode+0x28a/0x550 [ 592.824818][T11754] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 592.834399][T11754] tomoyo_check_open_permission+0x1eb/0x410 [ 592.834425][T11754] ? tomoyo_check_path_number_acl+0x280/0x280 [ 592.834477][T11754] ? __lock_acquire+0x7d40/0x7d40 [ 592.843331][T11754] ? __rwlock_init+0x140/0x140 [ 592.843354][T11754] ? hook_file_open+0xf1/0x230 [ 592.853738][T11754] ? tomoyo_file_open+0xe9/0x170 [ 592.865690][T11754] security_file_open+0x5e/0xa0 [ 592.865715][T11754] do_dentry_open+0x321/0xf90 [ 592.865736][T11754] ? vfs_open+0x2b/0x80 [ 592.875497][T11754] path_openat+0x2718/0x2fb0 [ 592.885308][T11754] ? __kasan_slab_alloc+0xa9/0xc0 [ 592.894779][T11754] ? do_filp_open+0x400/0x400 [ 592.903876][T11754] do_filp_open+0x1df/0x400 [ 592.903903][T11754] ? vfs_tmpfile+0x300/0x300 [ 592.903938][T11754] ? _raw_spin_unlock+0x24/0x40 [ 592.903954][T11754] ? alloc_fd+0x59e/0x650 [ 592.913901][T11754] do_sys_openat2+0x14b/0x500 [ 592.923050][T11754] ? __lock_acquire+0x7d40/0x7d40 [ 592.932469][T11754] ? do_sys_open+0xe0/0xe0 [ 592.932488][T11754] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 592.942524][T11754] ? lock_chain_count+0x20/0x20 [ 592.942550][T11754] __x64_sys_openat+0x135/0x160 [ 592.942573][T11754] do_syscall_64+0x4c/0xa0 [ 592.952930][T11754] ? clear_bhb_loop+0x30/0x80 [ 592.952950][T11754] ? clear_bhb_loop+0x30/0x80 [ 592.962646][T11754] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 592.962669][T11754] RIP: 0033:0x7f899ee3fd8e [ 592.971942][T11754] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 592.982984][T11754] RSP: 002b:00007f899d0d6b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 592.983007][T11754] RAX: ffffffffffffffda RBX: 00007f899d0d76c0 RCX: 00007f899ee3fd8e [ 592.983021][T11754] RDX: 0000000000000002 RSI: 00007f899d0d6c00 RDI: ffffffffffffff9c [ 592.983032][T11754] RBP: 00007f899d0d6c00 R08: 0000000000000000 R09: 0000000000000000 [ 592.983043][T11754] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 593.007748][T11754] R13: 00007f899f107038 R14: 00007f899f106fa0 R15: 00007fff86e0aad8 [ 593.007783][T11754] [ 593.064476][T11754] ERROR: Out of memory at tomoyo_realpath_from_path. [ 593.152954][T11765] ip_tables: iptables: counters copy to user failed while replacing table [ 593.181330][T11767] loop4: detected capacity change from 0 to 8 [ 593.205761][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 593.205772][ T26] audit: type=1326 audit(1792638519.361:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11768 comm="syz.2.2179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f899ee7f559 code=0x0 [ 593.290781][T11767] SQUASHFS error: zlib decompression failed, data probably corrupt [ 593.306052][T11767] SQUASHFS error: Failed to read block 0x9b: -5 [ 593.312828][T11767] SQUASHFS error: Unable to read metadata cache entry [99] [ 593.320593][T11767] SQUASHFS error: Unable to read inode 0x127 [ 594.555468][T11790] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2192'. [ 596.200306][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2197'. [ 596.913596][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2190'. [ 597.117851][ T26] audit: type=1326 audit(1792638523.037:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11817 comm="syz.3.2194" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b591e8559 code=0x0 [ 598.028804][ C1] net_ratelimit: 19 callbacks suppressed [ 598.738007][T11835] loop4: detected capacity change from 0 to 8 [ 598.876567][T11823] loop2: detected capacity change from 0 to 2048 [ 599.510786][T11835] SQUASHFS error: zlib decompression failed, data probably corrupt [ 599.519965][T11823] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 599.581085][T11835] SQUASHFS error: Failed to read block 0x9b: -5 [ 599.645995][T11835] SQUASHFS error: Unable to read metadata cache entry [99] [ 599.654393][T11835] SQUASHFS error: Unable to read inode 0x127 [ 603.490089][T11922] net_ratelimit: 19 callbacks suppressed [ 603.490100][T11922] ip_tables: iptables: counters copy to user failed while replacing table [ 604.310566][T11944] hub 5-0:1.0: USB hub found [ 604.315971][T11944] hub 5-0:1.0: 1 port detected [ 604.340198][T11948] fuse: Bad value for 'fd' [ 604.467032][T11957] loop4: detected capacity change from 0 to 512 [ 604.549525][T11957] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 604.565770][T11957] ext4 filesystem being mounted at /326/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 605.424034][T11969] loop2: detected capacity change from 0 to 8 [ 605.516817][T11969] SQUASHFS error: zlib decompression failed, data probably corrupt [ 605.534419][T11969] SQUASHFS error: Failed to read block 0x9b: -5 [ 605.540821][T11969] SQUASHFS error: Unable to read metadata cache entry [99] [ 605.556210][T11969] SQUASHFS error: Unable to read inode 0x127 [ 606.725165][T11987] netlink: 'syz.0.2230': attribute type 12 has an invalid length. [ 607.340703][T11988] 8021q: VLANs not supported on gre0 [ 608.553873][T12000] loop4: detected capacity change from 0 to 256 [ 608.574487][T12002] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2239'. [ 608.593959][T12002] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2239'. [ 609.138995][ T151] net_ratelimit: 16 callbacks suppressed [ 611.257114][T12029] loop2: detected capacity change from 0 to 8 [ 611.297435][T12028] nvmet_fc: nvme_fc_parse_traddr: bad traddr string [ 611.450413][T12029] SQUASHFS error: zlib decompression failed, data probably corrupt [ 611.501405][T12029] SQUASHFS error: Failed to read block 0x9b: -5 [ 611.507722][T12029] SQUASHFS error: Unable to read metadata cache entry [99] [ 611.570358][T12029] SQUASHFS error: Unable to read inode 0x127 [ 611.847307][T12037] device syzkaller0 entered promiscuous mode [ 614.503297][ T151] net_ratelimit: 4 callbacks suppressed [ 615.057834][T12044] netlink: 'syz.1.2249': attribute type 12 has an invalid length. [ 616.553257][T12068] ------------[ cut here ]------------ [ 616.588999][T12068] fmt: 'level=%s [ 616.588999][T12068] ' current_buffer: ' <...>-4442 [001] ..... 80.628770: dwc3_ctrl_req: Get Device Status(Length = 0) [ 616.588999][T12068] <...>-1970561396 [001] .p.35 80.684063: Unknown type 25955 [ 616.588999][T12068] -0 [001] ..... 80.709295: initcall_level: level=' [ 616.589104][T12068] WARNING: CPU: 1 PID: 12068 at kernel/trace/trace.c:3867 trace_check_vprintf+0xd4a/0x1080 [ 616.646257][T12068] Modules linked in: [ 616.678222][T12068] CPU: 1 PID: 12068 Comm: syz.2.2257 Not tainted syzkaller #0 [ 616.736809][T12068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 616.754743][T12068] RIP: 0010:trace_check_vprintf+0xd4a/0x1080 [ 616.785364][T12068] Code: e8 3b 41 fc ff c6 05 37 8b da 0c 01 48 8b 7c 24 40 e8 5a 04 00 00 48 c7 c7 a0 3e 2f 8a 48 8b 74 24 60 48 89 c2 e8 86 47 3a 08 <0f> 0b e9 1c fe ff ff 48 8b 4c 24 38 80 e1 07 38 c1 0f 8c ca f7 ff [ 616.835738][T12068] RSP: 0018:ffffc900030cfa20 EFLAGS: 00010246 [ 616.852796][T12068] RAX: a766dbac35699e00 RBX: 0000000000000000 RCX: 0000000000080000 [ 616.885670][T12068] RDX: ffffc90004f99000 RSI: 000000000000a290 RDI: 000000000000a291 [ 616.907456][T12068] RBP: ffff8880264540d8 R08: ffffc900030cf547 R09: 1ffff92000619ea8 [ 616.931029][T12068] R10: dffffc0000000000 R11: fffff52000619ea9 R12: ffffffff8a200540 [ 616.956030][T12068] R13: ffffc900030cfb60 R14: dffffc0000000000 R15: 0000000000000002 [ 616.980695][T12068] FS: 00007f899d0d76c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 617.008298][T12068] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 617.031069][T12068] CR2: 00007f6946b63158 CR3: 000000001f1c7000 CR4: 00000000003506f0 [ 617.055872][T12068] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 617.082776][T12068] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 617.106248][T12068] Call Trace: [ 617.115436][T12068] [ 617.136663][T12068] trace_event_printf+0xea/0x140 [ 617.153480][T12068] ? trace_print_seq+0x160/0x160 [ 617.238469][T12068] ? trace_raw_output_prep+0x200/0x200 [ 617.265999][T12068] trace_raw_output_initcall_level+0x93/0xd0 [ 617.283524][T12068] tracing_read_pipe+0x52f/0xae0 [ 617.288541][T12068] ? s_show+0x300/0x300 [ 617.292734][T12068] vfs_read+0x2ff/0xd50 [ 617.316163][T12068] ? __lock_acquire+0x7d40/0x7d40 [ 617.336373][T12068] ? kernel_read+0x1e0/0x1e0 [ 617.341044][T12068] ? mutex_lock_nested+0x17/0x20 [ 617.346096][T12068] ? __fdget_pos+0x2bf/0x370 [ 617.368777][T12068] ? ksys_read+0x70/0x260 [ 617.373808][T12068] ksys_read+0x153/0x260 [ 617.378098][T12068] ? vfs_write+0xd70/0xd70 [ 617.390224][T12068] ? lockdep_hardirqs_on+0x94/0x140 [ 617.395883][T12068] do_syscall_64+0x4c/0xa0 [ 617.400942][T12068] ? clear_bhb_loop+0x30/0x80 [ 617.405990][T12068] ? clear_bhb_loop+0x30/0x80 [ 617.411724][T12068] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 617.439846][T12068] RIP: 0033:0x7f899ee7f559 [ 617.444620][T12068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.466130][T12068] RSP: 002b:00007f899d0d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 617.474704][T12068] RAX: ffffffffffffffda RBX: 00007f899f106fa0 RCX: 00007f899ee7f559 [ 617.483149][T12068] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 617.491535][T12068] RBP: 00007f899ef168b0 R08: 0000000000000000 R09: 0000000000000000 [ 617.500033][T12068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 617.508494][T12068] R13: 00007f899f107038 R14: 00007f899f106fa0 R15: 00007fff86e0aad8 [ 617.516686][T12068] [ 617.520129][T12068] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 617.527509][T12068] CPU: 0 PID: 12068 Comm: syz.2.2257 Not tainted syzkaller #0 [ 617.534977][T12068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 617.545202][T12068] Call Trace: [ 617.548497][T12068] [ 617.551452][T12068] dump_stack_lvl+0x188/0x250 [ 617.556154][T12068] ? show_regs_print_info+0x20/0x20 [ 617.561370][T12068] ? load_image+0x410/0x410 [ 617.565902][T12068] panic+0x2f8/0x850 [ 617.569826][T12068] ? bpf_jit_dump+0xd0/0xd0 [ 617.574359][T12068] ? trace_check_vprintf+0xd4a/0x1080 [ 617.579777][T12068] __warn+0x248/0x2b0 [ 617.583799][T12068] ? trace_check_vprintf+0xd4a/0x1080 [ 617.589208][T12068] report_bug+0x1b9/0x2e0 [ 617.593771][T12068] handle_bug+0x3a/0x70 [ 617.598039][T12068] exc_invalid_op+0x16/0x40 [ 617.602571][T12068] asm_exc_invalid_op+0x16/0x20 [ 617.607445][T12068] RIP: 0010:trace_check_vprintf+0xd4a/0x1080 [ 617.613448][T12068] Code: e8 3b 41 fc ff c6 05 37 8b da 0c 01 48 8b 7c 24 40 e8 5a 04 00 00 48 c7 c7 a0 3e 2f 8a 48 8b 74 24 60 48 89 c2 e8 86 47 3a 08 <0f> 0b e9 1c fe ff ff 48 8b 4c 24 38 80 e1 07 38 c1 0f 8c ca f7 ff [ 617.633416][T12068] RSP: 0018:ffffc900030cfa20 EFLAGS: 00010246 [ 617.639515][T12068] RAX: a766dbac35699e00 RBX: 0000000000000000 RCX: 0000000000080000 [ 617.647679][T12068] RDX: ffffc90004f99000 RSI: 000000000000a290 RDI: 000000000000a291 [ 617.655769][T12068] RBP: ffff8880264540d8 R08: ffffc900030cf547 R09: 1ffff92000619ea8 [ 617.663781][T12068] R10: dffffc0000000000 R11: fffff52000619ea9 R12: ffffffff8a200540 [ 617.671868][T12068] R13: ffffc900030cfb60 R14: dffffc0000000000 R15: 0000000000000002 [ 617.679894][T12068] trace_event_printf+0xea/0x140 [ 617.684871][T12068] ? trace_print_seq+0x160/0x160 [ 617.689920][T12068] ? trace_raw_output_prep+0x200/0x200 [ 617.695513][T12068] trace_raw_output_initcall_level+0x93/0xd0 [ 617.701607][T12068] tracing_read_pipe+0x52f/0xae0 [ 617.706665][T12068] ? s_show+0x300/0x300 [ 617.711038][T12068] vfs_read+0x2ff/0xd50 [ 617.715214][T12068] ? __lock_acquire+0x7d40/0x7d40 [ 617.720260][T12068] ? kernel_read+0x1e0/0x1e0 [ 617.724883][T12068] ? mutex_lock_nested+0x17/0x20 [ 617.729939][T12068] ? __fdget_pos+0x2bf/0x370 [ 617.734741][T12068] ? ksys_read+0x70/0x260 [ 617.739176][T12068] ksys_read+0x153/0x260 [ 617.743441][T12068] ? vfs_write+0xd70/0xd70 [ 617.747989][T12068] ? lockdep_hardirqs_on+0x94/0x140 [ 617.753300][T12068] do_syscall_64+0x4c/0xa0 [ 617.757907][T12068] ? clear_bhb_loop+0x30/0x80 [ 617.762776][T12068] ? clear_bhb_loop+0x30/0x80 [ 617.767471][T12068] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 617.773552][T12068] RIP: 0033:0x7f899ee7f559 [ 617.777978][T12068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.797905][T12068] RSP: 002b:00007f899d0d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 617.806456][T12068] RAX: ffffffffffffffda RBX: 00007f899f106fa0 RCX: 00007f899ee7f559 [ 617.814625][T12068] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 617.822703][T12068] RBP: 00007f899ef168b0 R08: 0000000000000000 R09: 0000000000000000 [ 617.830695][T12068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 617.838686][T12068] R13: 00007f899f107038 R14: 00007f899f106fa0 R15: 00007fff86e0aad8 [ 617.846898][T12068] [ 617.850159][T12068] Kernel Offset: disabled [ 617.857113][T12068] Rebooting in 86400 seconds..