last executing test programs: 6.452979136s ago: executing program 3 (id=1954): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 5.094191305s ago: executing program 3 (id=1962): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x489, &(0x7f0000000400)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f00000100150000000000000001000000000000000000", 0x43) 4.988968996s ago: executing program 1 (id=1964): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2, 0x0, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001100)={'gre0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000480)="cd", 0x1, 0x20008801, &(0x7f0000000200)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 4.897530185s ago: executing program 3 (id=1966): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000020000000000ff025958f3317aaa1226536a120000000000000000000000000001e00000020000000000000000000000e84e20000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc001b0000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000"], 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x0, 0x10000000, 0x1, 0x10000000000000}, {0x0, 0x200000, 0x3}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0c0100001a0007002abd700000000000fe80000000000000000000000000001b00000000000000000000000000000000000300004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e6744a85c94562180000000000000001000000002b000000fc0000000000000000000000000000005a000000000000008f6b000000000000020000000000000004000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0180000000000000e80a000000000000000000000a000200700000000000000014000e"], 0x10c}}, 0x8000) 4.746953646s ago: executing program 1 (id=1968): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x26, 0x101, 0x70bd25, 0x25dfdbfb, {0x11}, [@typed={0x7, 0x167, 0x0, 0x0, @binary="17462d"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24008080) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0x73}, {@loopback, 0x11, 0x0, 0x1}}, 0x44) setsockopt(r1, 0x0, 0x488, &(0x7f0000000500)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r2, &(0x7f0000000c80)={0x2020}, 0x2020) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000006c0)={{r2, &(0x7f00000001c0)='%+#^&\x00', 0x20202, &(0x7f0000000280)={@_ha_fsid={[0x9]}, {0x10, 0x7, 0xe, 0x5}}, 0x2, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)}, 0x1, &(0x7f0000000680)=[{0x0, 0x4, &(0x7f0000000380)='rr\x00', &(0x7f0000000580)="b7487bbe3b2525d7d1fb3db9547cd0dc3ea6e15d383b6c52de36875512b59cc07757eca2cf3f5ae1c9356d08cfdaace3d404dd7e10299fdf4d02a456c5dd2f4042aa02b3030f1bc50a1581fb6309cd9e396542087d045fa36f2435d4199fd6ed0c4306715741ecb3cb7b53d501cf2fa977c6e002205de60b5398c4396c20759bf9d5586604227ed3f4a989d15d93210eb1ad6c82e3924e50e8fd4c43b8d0de3a481b14d140730fa8edc00f832141d68f74854f76c3d7a88c8abf0f923f733b9cee3d52164981455968b56ccfaa333d57abd46f2a19a7099be71390d35292d28d247ef50c15a9", 0xe6, 0x10}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x93, 0x0, &(0x7f00000004c0)="5351e31d94c9f8291396b461802305624443ed3373010000000182d7c68e785968cb15539ab8469f765b4762f07aaa4b460c5f1b3a0000986919d5d5fe00c6fd6ef8526b41ed0000000000000100ee936390009c5bbdae29298f294846a2dc6144cfdcac5f5fa03524a008d7b748247a69dbbacb78def6177a0d840900000057ac3e69e56703a5c68368a0dfe5c9584d2ff5ce", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403}, 0x50) r5 = syz_usb_connect_ath9k(0x3, 0x87, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xc, &(0x7f0000000f40)={[{0x8, 0x4e00, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}) r6 = socket$inet6(0x10, 0x2, 0x0) write(r6, &(0x7f0000000000), 0x0) r7 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000000)=0xff) 4.308245636s ago: executing program 3 (id=1971): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2.97411882s ago: executing program 3 (id=1980): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(0x0, 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000001c00)=[{0x0, 0x10, 0x0, 0x0}, {0x7f, 0xc801, 0x0, 0x0}], 0x2}) 2.672570002s ago: executing program 4 (id=1982): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1b, 0x5, 0x46d, 0xc082, 0x0, 0x0, "0600ff0901a1018510750895060901810209019102851175089513"}}, 0x133) read(r0, &(0x7f0000000800), 0x1000) 2.592948198s ago: executing program 0 (id=1983): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010100, 0x1, 0x7fff, 0x4e23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x4, 0x3ff, 0x9, 0x400100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=@newsa={0x148, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x71c, 0x4e20, 0x5, 0x2, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x300, 0x4, 0x6, 0xfffffffffffffbff, 0x8251c, 0xffffffffffff37a6, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1ff, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}, @XFRMA_SET_MARK_MASK={0x8}]}, 0x148}}, 0x844) 2.43857875s ago: executing program 0 (id=1984): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000003a80)=[{{&(0x7f0000001e00)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000002200)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x7, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2f}]}}}], 0x28}}], 0x1, 0x84) 2.319207444s ago: executing program 1 (id=1986): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x9858d3, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000140)={0x1, 0x3, 0x8001, 0xc0, 0x9, 0xffff}) fchown(r0, 0xee00, 0xee01) fchown(r0, 0x0, 0x0) 2.200418209s ago: executing program 0 (id=1987): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000080)="aefdda9d24030300da90f57f077031ef70f64eb9ee", 0x15}, {&(0x7f0000000300)="e0a4a009297143945eea447b261e3b133150db3761089e3213238084ea35e1ca54f732553fa846b913f2c88adec8c7c342ff99c2a1dc14be96978a0b030e2497aae7f6a39f43aeec2b65692ccbe0f6609cb9271fd887ff9e", 0x58}], 0x2) 1.930659774s ago: executing program 0 (id=1989): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = timerfd_create(0x0, 0x80800) socket$igmp6(0xa, 0x3, 0x2) timerfd_settime(r1, 0x1, &(0x7f0000000840)={{}, {0x0, 0x989680}}, &(0x7f0000000880)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) 1.766656468s ago: executing program 1 (id=1990): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.372965068s ago: executing program 4 (id=1991): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) waitid(0x2, r1, 0x0, 0x6, 0x0) 1.127940588s ago: executing program 0 (id=1993): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000020000000000ff025958f3317aaa1226536a120000000000000000000000000001e00000020000000000000000000000e84e20000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc001b0000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000"], 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x0, 0x10000000, 0x1, 0x10000000000000}, {0x0, 0x200000, 0x3}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0c0100001a0007002abd700000000000fe80000000000000000000000000001b00000000000000000000000000000000000300004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e6744a85c94562180000000000000001000000002b000000fc0000000000000000000000000000005a000000000000008f6b000000000000020000000000000004000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0180000000000000e80a000000000000000000000a000200700000000000000014000e"], 0x10c}}, 0x8000) 1.099839284s ago: executing program 2 (id=1994): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000010c0)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x123, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x8, 0x2e, 0x0, 0x1, [@generic="652c8982"]}]}, 0x28}], 0x1}, 0x4000800) 925.00996ms ago: executing program 3 (id=1995): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000300)={0x8, 0x0, 0x8000100000001000, 0x8, 0x6, 0x400000001, 0x5, 0xf64, 0x3}) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x9858d3, 0x0, 0x1, 0x0, &(0x7f00000000c0)) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000140)={0x1, 0x3, 0x8001, 0xc0, 0x9, 0xffff}) fchown(0xffffffffffffffff, 0xee00, 0xee01) fchown(0xffffffffffffffff, 0x0, 0x0) 914.021682ms ago: executing program 4 (id=1996): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 885.173888ms ago: executing program 2 (id=1997): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x8000) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0x40045304, &(0x7f0000000000)) tkill(r0, 0x7) 777.59579ms ago: executing program 2 (id=1998): r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 777.04098ms ago: executing program 1 (id=1999): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000080)="aefdda9d24030300da90f57f077031ef70f64eb9ee", 0x15}, {&(0x7f0000000300)="e0a4a009297143945eea447b261e3b133150db3761089e3213238084ea35e1ca54f732553fa846b913f2c88adec8c7c342ff99c2a1dc14be96978a0b030e2497aae7f6a39f43aeec2b65692ccbe0f6609cb9271fd887ff9e", 0x58}], 0x2) 656.983335ms ago: executing program 4 (id=2000): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x9858d3, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000140)={0x1, 0x3, 0x8001, 0xc0, 0x9, 0xffff}) fchown(r0, 0xee00, 0xee01) fchown(r0, 0x0, 0x0) 563.833344ms ago: executing program 1 (id=2001): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1b, 0x5, 0x46d, 0xc082, 0x0, 0x0, "0600ff0901a1018510750895060901810209019102851175089513"}}, 0x133) read(r0, &(0x7f0000000800), 0x1000) 563.410044ms ago: executing program 2 (id=2002): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0x154, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, 0x0, 0x5, 0x0, 0xfffa, 0x0, 0x20, 0xa0, 0x3a}, {@in=@multicast2, 0xffffbffe, 0x32}, @in=@remote, {0x2000000000001, 0xffffffffffffffff, 0x9, 0x0, 0x10001, 0x0, 0x0, 0xfffffffffffffffc}, {0x9, 0x0, 0x5f, 0xa}, {0x6, 0xc0000000}, 0x100, 0x0, 0xa, 0x1, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e23, 0x4e22, @in=@loopback}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20040}, 0x80) 546.266048ms ago: executing program 0 (id=2003): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xd]}, 0x8, 0x800) signalfd4(r1, &(0x7f0000000000)={[0xa5]}, 0x8, 0x0) 265.090536ms ago: executing program 2 (id=2004): socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9380, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) close(0x4) 260.412536ms ago: executing program 4 (id=2005): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r3, 0x402, 0x40000029) fcntl$notify(r2, 0x402, 0x1c) getdents64(r3, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="4f4741494e20274361707475726520566f6c756d65272030303030303030303030303030303030303030300a494741494e0a50486ce2369e9e7101d386d8c8cc4f4e454f55540a535045414b4552202743442043617074757265272030303030303030303133373433383935333437320a50484f4e454f55540a494d495820274344"], 0xaf) close(r4) sendto$inet(r1, 0x0, 0x5b, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') setns(r5, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f00000017c0)="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", 0x2fc}], 0x1}}], 0x1, 0x4000840) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x0, 0xffff}}}, 0x24}}, 0x24004000) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000010900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000630000000180a0101000b000000000000010000000900010073797a3000000000040003800900020073797a300000000014000000100001000000"], 0xb8}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007a40), 0x0, 0x1) sendto$inet(r1, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) 37.186492ms ago: executing program 2 (id=2006): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x29, 0x4, 0xfe, 0x1, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x700, 0x2, 0x2aa1f053}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x123e02, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=2007): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) write$cgroup_netprio_ifpriomap(r0, 0x0, 0xfffffffb) kernel console output (not intermixed with test programs): t=0, SerialNumber=0 [ 350.619632][ T14] usb 2-1: invalid MIDI out EP 0 [ 350.732668][ T14] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 350.776636][ T4280] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 350.792647][ T4280] dvb_usb_af9015: probe of 1-1:135.0 failed with error -22 [ 350.832066][ T4626] udevd[4626]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.899607][ T4280] usb 1-1: USB disconnect, device number 62 [ 350.915822][ T2167] usb 2-1: USB disconnect, device number 45 [ 351.009522][ T4318] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 351.047662][ T4318] ath9k_htc: Failed to initialize the device [ 351.064964][ T4356] usb 5-1: ath9k_htc: USB layer deinitialized [ 351.209372][ T22] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 351.399533][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 351.416525][ T22] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 351.438367][ T22] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 351.448449][ T22] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 351.458361][ T22] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 351.472066][ T22] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 351.490988][ T22] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 351.500442][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.734740][ T22] usb 3-1: usb_control_msg returned -32 [ 351.743014][ T22] usbtmc 3-1:16.0: can't read capabilities [ 352.012690][ T8382] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 352.020453][ T8382] ALSA: mixer_oss: invalid index 1374389 [ 352.112654][ T8383] usbtmc 3-1:16.0: control status returned 0 [ 352.313686][ T4356] usb 3-1: USB disconnect, device number 64 [ 353.348677][ T8403] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 353.379453][ T22] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 353.569386][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 353.576740][ T22] usb 4-1: config 135 interface 0 has no altsetting 0 [ 353.639030][ T22] usb 4-1: New USB device found, idVendor=0413, idProduct=6a04, bcdDevice=27.2b [ 353.678968][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.699516][ T22] usb 4-1: Product: syz [ 353.703742][ T22] usb 4-1: Manufacturer: syz [ 353.726774][ T22] usb 4-1: SerialNumber: syz [ 353.775340][ T8411] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1311'. [ 353.857158][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1311'. [ 353.954104][ T22] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 353.985737][ T22] dvb_usb_af9015: probe of 4-1:135.0 failed with error -22 [ 354.050753][ T22] usb 4-1: USB disconnect, device number 51 [ 354.203086][ T8415] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 354.658297][ T8426] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 354.681631][ T8426] ALSA: mixer_oss: invalid index 1374389 [ 356.045873][ T8440] netlink: 964 bytes leftover after parsing attributes in process `syz.1.1319'. [ 357.195383][ T8457] netlink: 83 bytes leftover after parsing attributes in process `syz.2.1325'. [ 357.349435][ T14] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 357.439742][ T8463] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 357.459866][ T8463] ALSA: mixer_oss: invalid index 1374389 [ 357.539312][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 357.546079][ T14] usb 1-1: config 135 interface 0 has no altsetting 0 [ 357.577738][ T14] usb 1-1: New USB device found, idVendor=0413, idProduct=6a04, bcdDevice=27.2b [ 357.589436][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.597836][ T14] usb 1-1: Product: syz [ 357.610487][ T14] usb 1-1: Manufacturer: syz [ 357.615164][ T14] usb 1-1: SerialNumber: syz [ 357.681570][ T33] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 357.848033][ T14] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 357.858889][ T14] dvb_usb_af9015: probe of 1-1:135.0 failed with error -22 [ 357.874395][ T14] usb 1-1: USB disconnect, device number 63 [ 357.889390][ T33] usb 4-1: Using ep0 maxpacket: 32 [ 357.902744][ T33] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 357.943262][ T33] usb 4-1: config 0 has no interface number 0 [ 357.961084][ T33] usb 4-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 357.986906][ T33] usb 4-1: config 0 interface 1 has no altsetting 0 [ 358.007387][ T33] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 358.025099][ T33] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.043672][ T33] usb 4-1: Product: syz [ 358.047965][ T33] usb 4-1: Manufacturer: syz [ 358.065447][ T33] usb 4-1: SerialNumber: syz [ 358.087494][ T33] usb 4-1: config 0 descriptor?? [ 358.139936][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1333'. [ 358.305682][ T33] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 358.324172][ T8480] device syzkaller0 entered promiscuous mode [ 358.340092][ T33] cx231xx 4-1:0.1: Failed to read PCB config [ 358.352840][ T8480] tipc: Started in network mode [ 358.368440][ T33] cx231xx: probe of 4-1:0.1 failed with error -71 [ 358.375925][ T8480] tipc: Node identity b6539fe08b21, cluster identity 4711 [ 358.392417][ T33] usb 4-1: USB disconnect, device number 52 [ 358.412173][ T8480] tipc: Enabled bearer , priority 0 [ 358.682964][ T8476] tipc: Resetting bearer [ 358.757126][ T8476] tipc: Disabling bearer [ 358.844419][ T8493] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 358.855998][ T8493] ALSA: mixer_oss: invalid index 1374389 [ 358.959463][ T33] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 359.038951][ T8494] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 359.044505][ T8498] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4271] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ      rr @  @       rr s     & %½p ûÛß% \x07 gF- [ 359.047690][ T8498] netlink: 'syz.1.1341': attribute type 12 has an invalid length. [ 359.156557][ T8502] program syz.1.1341 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 359.239348][ T33] usb 4-1: Using ep0 maxpacket: 32 [ 359.248143][ T33] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 359.292522][ T33] usb 4-1: config 0 has no interface number 0 [ 359.307160][ T33] usb 4-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 359.358019][ T33] usb 4-1: config 0 interface 1 has no altsetting 0 [ 359.396926][ T33] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 359.475748][ T33] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.507561][ T33] usb 4-1: Product: syz [ 359.514957][ T33] usb 4-1: Manufacturer: syz [ 359.534982][ T33] usb 4-1: SerialNumber: syz [ 359.545882][ T33] usb 4-1: config 0 descriptor?? [ 359.573738][ T8509] capability: warning: `syz.0.1345' uses deprecated v2 capabilities in a way that may be insecure [ 359.639291][ T4356] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 359.766149][ T33] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 359.793605][ T33] cx231xx 4-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 359.819365][ T4356] usb 5-1: device descriptor read/64, error -71 [ 359.885113][ T26] audit: type=1326 audit(1790551360.297:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.0.1345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a819e159 code=0x7ffc0000 [ 359.923178][ T33] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 359.959425][ T26] audit: type=1326 audit(1790551360.297:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.0.1345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a819e159 code=0x7ffc0000 [ 359.960472][ T33] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 360.044755][ T33] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 360.069189][ T33] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 360.083207][ T26] audit: type=1326 audit(1790551360.297:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.0.1345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd0a819e159 code=0x7ffc0000 [ 360.095137][ T33] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 360.109071][ T4356] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 360.149312][ T33] cx231xx 4-1:0.1: Failed to set devmode to analog: error: -71 [ 360.217274][ T33] i2c i2c-2: Added multiplexed i2c bus 4 [ 360.225679][ T26] audit: type=1326 audit(1790551360.297:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.0.1345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a819e159 code=0x7ffc0000 [ 360.250754][ T33] i2c i2c-2: Added multiplexed i2c bus 5 [ 360.259912][ T33] cx231xx 4-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 360.285795][ T33] cx231xx 4-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 360.289924][ T4356] usb 5-1: device descriptor read/64, error -71 [ 360.344155][ T33] cx231xx: probe of 4-1:0.1 failed with error -71 [ 360.350953][ T26] audit: type=1326 audit(1790551360.297:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.0.1345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a819e159 code=0x7ffc0000 [ 360.379862][ T33] usb 4-1: USB disconnect, device number 53 [ 360.431520][ T4356] usb usb5-port1: attempt power cycle [ 360.528352][ T26] audit: type=1326 audit(1790551360.297:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.0.1345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd0a819e159 code=0x7ffc0000 [ 360.553906][ T26] audit: type=1326 audit(1790551360.297:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.0.1345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a819e159 code=0x7ffc0000 [ 360.619307][ T26] audit: type=1326 audit(1790551360.297:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.0.1345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a819e159 code=0x7ffc0000 [ 360.714660][ T26] audit: type=1326 audit(1790551360.297:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.0.1345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fd0a819e159 code=0x7ffc0000 [ 360.804907][ T26] audit: type=1326 audit(1790551360.297:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.0.1345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a819e159 code=0x7ffc0000 [ 360.850904][ T4356] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 360.897465][ T8525] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 360.905846][ T4356] usb 5-1: device descriptor read/8, error -71 [ 360.917002][ T8525] ALSA: mixer_oss: invalid index 1374389 [ 361.189531][ T4356] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 361.230614][ T4356] usb 5-1: device descriptor read/8, error -71 [ 361.359494][ T4356] usb usb5-port1: unable to enumerate USB device [ 361.705125][ T8549] tipc: Enabling of bearer rejected, failed to enable media [ 361.839773][ T4356] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 361.861014][ T8553] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 361.899600][ T8553] ALSA: mixer_oss: invalid index 1374389 [ 362.029312][ T4356] usb 3-1: Using ep0 maxpacket: 8 [ 362.036687][ T4356] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 362.046343][ T4356] usb 3-1: config 0 has no interface number 0 [ 362.052950][ T4356] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 362.066057][ T4356] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 362.090760][ T4356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.101045][ T4356] usb 3-1: config 0 descriptor?? [ 362.123869][ T4356] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 362.996760][ T8581] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1373'. [ 363.219394][ T8586] tipc: Enabling of bearer rejected, failed to enable media [ 363.280974][ T8588] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 363.288583][ T8588] ALSA: mixer_oss: invalid index 1374389 [ 363.303406][ T8585] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 363.345956][ T14] usb 3-1: USB disconnect, device number 65 [ 363.779420][ T4317] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 363.939379][ T4317] usb 5-1: device descriptor read/64, error -71 [ 364.064496][ T8607] loop0: detected capacity change from 0 to 512 [ 364.136735][ T8607] EXT4-fs: Ignoring removed nomblk_io_submit option [ 364.204671][ T8607] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 364.219357][ T4317] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 364.266804][ T8607] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 364.379350][ T4317] usb 5-1: device descriptor read/64, error -71 [ 364.408175][ T8607] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3861: comm syz.0.1384: Allocating blocks 41-42 which overlap fs metadata [ 364.468794][ T8615] device syzkaller0 entered promiscuous mode [ 364.491322][ T8607] EXT4-fs (loop0): Remounting filesystem read-only [ 364.500932][ T4317] usb usb5-port1: attempt power cycle [ 364.522062][ T8607] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3861: comm syz.0.1384: Allocating blocks 41-42 which overlap fs metadata [ 364.606725][ T8607] EXT4-fs (loop0): Remounting filesystem read-only [ 364.625801][ T8607] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.1384: Failed to acquire dquot type 1 [ 364.669753][ T8607] EXT4-fs (loop0): Remounting filesystem read-only [ 364.691500][ T8607] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 364.759572][ T8607] EXT4-fs (loop0): Remounting filesystem read-only [ 364.782668][ T8607] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.1384: corrupted inode contents [ 364.809871][ T8621] tipc: Enabling of bearer rejected, failed to enable media [ 364.823744][ T8622] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 364.831261][ T8607] EXT4-fs (loop0): Remounting filesystem read-only [ 364.848248][ T8622] ALSA: mixer_oss: invalid index 1374389 [ 364.854839][ T8607] EXT4-fs error (device loop0): ext4_dirty_inode:6166: inode #12: comm syz.0.1384: mark_inode_dirty error [ 364.872843][ T8607] EXT4-fs (loop0): Remounting filesystem read-only [ 364.884102][ T8607] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.1384: corrupted inode contents [ 364.900492][ T8607] EXT4-fs (loop0): Remounting filesystem read-only [ 364.908902][ T8607] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #12: comm syz.0.1384: mark_inode_dirty error [ 364.923914][ T4317] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 364.937463][ T8607] EXT4-fs (loop0): Remounting filesystem read-only [ 364.953779][ T8607] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.1384: corrupted inode contents [ 364.981766][ T4317] usb 5-1: device descriptor read/8, error -71 [ 364.989120][ T8607] EXT4-fs (loop0): Remounting filesystem read-only [ 365.001688][ T8607] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 365.018803][ T8607] EXT4-fs (loop0): Remounting filesystem read-only [ 365.028544][ T8607] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.1384: corrupted inode contents [ 365.052089][ T8607] EXT4-fs (loop0): Remounting filesystem read-only [ 365.058680][ T8607] EXT4-fs error (device loop0): ext4_truncate:4325: inode #12: comm syz.0.1384: mark_inode_dirty error [ 365.087865][ T8607] EXT4-fs (loop0): Remounting filesystem read-only [ 365.107300][ T8607] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 365.134603][ T8607] EXT4-fs (loop0): Remounting filesystem read-only [ 365.151903][ T8607] EXT4-fs (loop0): 1 truncate cleaned up [ 365.167853][ T8607] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 365.251548][ T4317] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 365.313244][ T4317] usb 5-1: device descriptor read/8, error -71 [ 365.389577][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 365.450639][ T4317] usb usb5-port1: unable to enumerate USB device [ 365.654946][ T8644] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 365.895194][ T8651] device syzkaller0 entered promiscuous mode [ 365.919562][ T14] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 366.114942][ T8654] netlink: 'syz.0.1400': attribute type 1 has an invalid length. [ 366.126598][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 366.136532][ T14] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 366.150742][ T8654] 8021q: adding VLAN 0 to HW filter on device bond2 [ 366.156402][ T14] usb 4-1: config 0 has no interface number 0 [ 366.169800][ T8652] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 366.183001][ T14] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 366.194227][ T14] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 366.204253][ T8654] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 366.216482][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.228161][ T8654] bond2: (slave batadv1): making interface the new active one [ 366.240129][ T8654] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 366.249348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 366.259833][ T14] usb 4-1: config 0 descriptor?? [ 366.306840][ T14] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 366.352696][ T8657] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 366.366598][ T8657] ALSA: mixer_oss: invalid index 1374389 [ 366.609261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 366.629250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 366.986053][ T8672] FAULT_INJECTION: forcing a failure. [ 366.986053][ T8672] name failslab, interval 1, probability 0, space 0, times 1 [ 367.058946][ T8672] CPU: 0 PID: 8672 Comm: syz.4.1405 Not tainted syzkaller #0 [ 367.066424][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 367.076552][ T8672] Call Trace: [ 367.079847][ T8672] [ 367.082810][ T8672] dump_stack_lvl+0x188/0x24e [ 367.087542][ T8672] ? show_regs_print_info+0x12/0x12 [ 367.092824][ T8672] ? load_image+0x410/0x410 [ 367.097355][ T8672] ? __might_sleep+0xd0/0xd0 [ 367.101964][ T8672] ? __lock_acquire+0x7c40/0x7c40 [ 367.107020][ T8672] should_fail_ex+0x390/0x4c0 [ 367.111734][ T8672] should_failslab+0x5/0x20 [ 367.116288][ T8672] slab_pre_alloc_hook+0x59/0x300 [ 367.121368][ T8672] kmem_cache_alloc_lru+0x49/0x2e0 [ 367.126529][ T8672] ? proc_alloc_inode+0x26/0xb0 [ 367.131448][ T8672] proc_alloc_inode+0x26/0xb0 [ 367.136184][ T8672] ? proc_invalidate_siblings_dcache+0x6c0/0x6c0 [ 367.142554][ T8672] new_inode_pseudo+0x5f/0x1c0 [ 367.147336][ T8672] new_inode+0x25/0x1d0 [ 367.151517][ T8672] ? __rwlock_init+0x140/0x140 [ 367.156298][ T8672] proc_get_inode+0x1e/0x710 [ 367.160914][ T8672] proc_lookup_de+0x244/0x2f0 [ 367.165607][ T8672] proc_tgid_net_lookup+0x5f/0xf0 [ 367.170651][ T8672] ? proc_create_net_single_write+0x190/0x190 [ 367.176751][ T8672] path_openat+0xff8/0x2f10 [ 367.181288][ T8672] ? do_filp_open+0x420/0x420 [ 367.185991][ T8672] do_filp_open+0x1ee/0x420 [ 367.190534][ T8672] ? vfs_tmpfile+0x470/0x470 [ 367.195141][ T8672] ? noop_direct_IO+0x10/0x10 [ 367.199862][ T8672] ? _raw_spin_unlock+0x24/0x40 [ 367.204728][ T8672] ? alloc_fd+0x590/0x640 [ 367.209090][ T8672] do_sys_openat2+0x14b/0x4f0 [ 367.213785][ T8672] ? do_sys_open+0xe0/0xe0 [ 367.218234][ T8672] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 367.224255][ T8672] ? lock_chain_count+0x20/0x20 [ 367.229126][ T8672] __x64_sys_openat+0x135/0x160 [ 367.233997][ T8672] do_syscall_64+0x4c/0xa0 [ 367.238443][ T8672] ? clear_bhb_loop+0x60/0xb0 [ 367.243224][ T8672] ? clear_bhb_loop+0x60/0xb0 [ 367.247912][ T8672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 367.253854][ T8672] RIP: 0033:0x7f8e0015e98e [ 367.258303][ T8672] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 367.277949][ T8672] RSP: 002b:00007f8e010a6ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 367.286380][ T8672] RAX: ffffffffffffffda RBX: 00007f8e010a76c0 RCX: 00007f8e0015e98e [ 367.294366][ T8672] RDX: 0000000000000002 RSI: 00007f8e010a6f90 RDI: ffffffffffffff9c [ 367.302346][ T8672] RBP: 00007f8e0023506b R08: 0000000000000000 R09: 0000000000000000 [ 367.310332][ T8672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.318314][ T8672] R13: 00007f8e00426038 R14: 00007f8e00425fa0 R15: 00007fff0d14b5a8 [ 367.326312][ T8672] [ 367.595523][ T4317] usb 4-1: USB disconnect, device number 54 [ 368.255617][ T8692] loop1: detected capacity change from 0 to 2048 [ 368.266353][ T8693] loop2: detected capacity change from 0 to 512 [ 368.393137][ T8693] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 368.396764][ T8692] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 368.449575][ T8692] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.484606][ T8693] ext4 filesystem being mounted at /259/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 368.695903][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 368.729461][ T8692] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1411: bg 0: block 345: padding at end of block bitmap is not set [ 368.829648][ T8692] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 12 with error 117 [ 368.875130][ T8703] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 368.888403][ T8692] EXT4-fs (loop1): This should not happen!! Data will be lost [ 368.888403][ T8692] [ 368.907147][ T8703] ALSA: mixer_oss: invalid index 1374389 [ 369.241993][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 369.256116][ T14] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 369.419477][ T14] usb 4-1: device descriptor read/64, error -71 [ 369.517516][ T8718] fuse: Bad value for 'fd' [ 369.709399][ T14] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 369.879312][ T14] usb 4-1: device descriptor read/64, error -71 [ 369.999492][ T14] usb usb4-port1: attempt power cycle [ 370.203704][ T6335] Bluetooth: hci5: Frame reassembly failed (-84) [ 370.393369][ T8736] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 370.429703][ T14] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 370.457617][ T8738] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4272] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ      rr @  @       rr s     & %½p ûÛß% \x07 gF- [ 370.469945][ T14] usb 4-1: device descriptor read/8, error -71 [ 370.729369][ T22] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 370.815463][ T8741] loop4: detected capacity change from 0 to 512 [ 370.839395][ T14] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 370.887217][ T8741] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 370.902684][ T8741] ext4 filesystem being mounted at /256/sys supports timestamps until 2038-01-19 (0x7fffffff) [ 370.910702][ T14] usb 4-1: device descriptor read/8, error -71 [ 370.928395][ T8741] __quota_error: 11 callbacks suppressed [ 370.928412][ T8741] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 370.953784][ T22] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 370.972019][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.981600][ T8741] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 370.985640][ T22] usb 1-1: Product: syz [ 370.991513][ T8741] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.1425: Failed to acquire dquot type 0 [ 371.006959][ T22] usb 1-1: Manufacturer: syz [ 371.006981][ T22] usb 1-1: SerialNumber: syz [ 371.039563][ T14] usb usb4-port1: unable to enumerate USB device [ 371.063768][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 371.106309][ T22] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 371.208562][ T8745] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 371.231900][ T8745] ALSA: mixer_oss: invalid index 1374389 [ 371.440986][ T8749] loop4: detected capacity change from 0 to 512 [ 371.467147][ T8749] EXT4-fs: Ignoring removed nomblk_io_submit option [ 371.510792][ T8738] netlink: 'syz.0.1424': attribute type 12 has an invalid length. [ 371.525675][ T8738] program syz.0.1424 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.540646][ T8749] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 371.560147][ T4317] usb 1-1: USB disconnect, device number 64 [ 371.578167][ T8749] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 371.616356][ T8749] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.1428: Allocating blocks 41-42 which overlap fs metadata [ 371.631173][ T8749] EXT4-fs (loop4): Remounting filesystem read-only [ 371.637840][ T8749] Quota error (device loop4): write_blk: dquota write failed [ 371.646891][ T8749] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 371.656215][ T8749] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.1428: Allocating blocks 41-42 which overlap fs metadata [ 371.671976][ T8749] EXT4-fs (loop4): Remounting filesystem read-only [ 371.678706][ T8749] Quota error (device loop4): write_blk: dquota write failed [ 371.686584][ T8749] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 371.696777][ T8749] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.1428: Failed to acquire dquot type 1 [ 371.708766][ T8749] EXT4-fs (loop4): Remounting filesystem read-only [ 371.715668][ T8749] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 371.732225][ T8749] EXT4-fs (loop4): Remounting filesystem read-only [ 371.738820][ T8749] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.1428: corrupted inode contents [ 371.751481][ T8749] EXT4-fs (loop4): Remounting filesystem read-only [ 371.758065][ T8749] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #12: comm syz.4.1428: mark_inode_dirty error [ 371.771258][ T8749] EXT4-fs (loop4): Remounting filesystem read-only [ 371.777867][ T8749] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.1428: corrupted inode contents [ 371.790568][ T8749] EXT4-fs (loop4): Remounting filesystem read-only [ 371.797138][ T8749] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #12: comm syz.4.1428: mark_inode_dirty error [ 371.818905][ T8749] EXT4-fs (loop4): Remounting filesystem read-only [ 371.825615][ T8749] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.1428: corrupted inode contents [ 371.845598][ T8749] EXT4-fs (loop4): Remounting filesystem read-only [ 371.852355][ T8749] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 371.867943][ T8749] EXT4-fs (loop4): Remounting filesystem read-only [ 371.874866][ T8749] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.1428: corrupted inode contents [ 371.897753][ T8749] EXT4-fs (loop4): Remounting filesystem read-only [ 371.907573][ T8749] EXT4-fs error (device loop4): ext4_truncate:4325: inode #12: comm syz.4.1428: mark_inode_dirty error [ 371.929484][ T8749] EXT4-fs (loop4): Remounting filesystem read-only [ 371.939518][ T8749] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 371.964945][ T8755] loop1: detected capacity change from 0 to 256 [ 371.981808][ T8749] EXT4-fs (loop4): Remounting filesystem read-only [ 372.014165][ T8749] EXT4-fs (loop4): 1 truncate cleaned up [ 372.020072][ T8749] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 372.209610][ T22] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 372.216684][ T22] ath9k_htc: Failed to initialize the device [ 372.229834][ T4317] usb 1-1: ath9k_htc: USB layer deinitialized [ 372.239688][ T4288] Bluetooth: hci5: command 0x1003 tx timeout [ 372.247641][ T4289] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 372.650378][ T8762] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1430'. [ 373.133776][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 373.325329][ T8770] loop0: detected capacity change from 0 to 2048 [ 373.592210][ T8783] loop3: detected capacity change from 0 to 1764 [ 373.604823][ T8770] loop0: unable to read partition table [ 373.626761][ T8770] loop0: partition table beyond EOD, truncated [ 373.686526][ T8770] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 373.886138][ T3639] loop0: unable to read partition table [ 373.900967][ T3639] loop0: partition table beyond EOD, truncated [ 373.957070][ T8792] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 373.985058][ T8792] ALSA: mixer_oss: invalid index 1374389 [ 375.728257][ T8809] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4283] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ      rr @  @       rr s     & %½p ûÛß% \x07 gF- [ 375.882904][ T6335] Bluetooth: hci5: Frame reassembly failed (-84) [ 375.990854][ T8815] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 376.009459][ T14] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 376.049353][ T33] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 376.210446][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 376.222912][ T14] usb 1-1: unable to get BOS descriptor or descriptor too short [ 376.255397][ T33] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 376.279359][ T33] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.292245][ T33] usb 4-1: Product: syz [ 376.294364][ T14] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 22, changing to 8 [ 376.317932][ T33] usb 4-1: Manufacturer: syz [ 376.328091][ T33] usb 4-1: SerialNumber: syz [ 376.334391][ T14] usb 1-1: config 1 interface 0 has no altsetting 0 [ 376.362097][ T14] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.40 [ 376.382789][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.402315][ T14] usb 1-1: Product: syz [ 376.417003][ T14] usb 1-1: Manufacturer: syz [ 376.429421][ T14] usb 1-1: SerialNumber: syz [ 376.456254][ T33] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 376.863906][ T8809] netlink: 'syz.3.1442': attribute type 12 has an invalid length. [ 376.909348][ T8809] program syz.3.1442 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 376.953792][ T22] usb 4-1: USB disconnect, device number 59 [ 377.570286][ T33] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 377.577369][ T33] ath9k_htc: Failed to initialize the device [ 377.606825][ T22] usb 4-1: ath9k_htc: USB layer deinitialized [ 377.889380][ T4277] Bluetooth: hci5: command 0x1003 tx timeout [ 377.897267][ T4289] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 377.965048][ T14] usbhid 1-1:1.0: can't add hid device: -71 [ 377.971402][ T14] usbhid: probe of 1-1:1.0 failed with error -71 [ 377.980049][ T14] usb 1-1: USB disconnect, device number 65 [ 378.098126][ T8830] loop1: detected capacity change from 0 to 1024 [ 378.117318][ T8830] EXT4-fs: Ignoring removed bh option [ 378.195748][ T8830] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 378.243506][ T8838] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 378.251889][ T8838] ALSA: mixer_oss: invalid index 1374389 [ 378.288200][ T26] audit: type=1804 audit(1790551378.697:28): pid=8830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1450" name="/newroot/304/file1/bus" dev="loop1" ino=18 res=1 errno=0 [ 378.380085][ T22] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 378.470721][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 378.532599][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.538961][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.579404][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 378.587595][ T22] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 378.639345][ T22] usb 4-1: config 0 has no interface number 0 [ 378.659519][ T22] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 378.699066][ T22] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 378.724802][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.759628][ T22] usb 4-1: config 0 descriptor?? [ 378.771493][ T8850] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4272] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ      rr @  @       rr s     & %½p ûÛß% \x07 gF- [ 378.799706][ T22] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 379.235882][ T22] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 379.434057][ T22] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 379.464333][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.497045][ T22] usb 1-1: Product: syz [ 379.509583][ T22] usb 1-1: Manufacturer: syz [ 379.527606][ T22] usb 1-1: SerialNumber: syz [ 379.603847][ T33] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 379.967468][ T4316] usb 4-1: USB disconnect, device number 60 [ 380.007431][ T8850] netlink: 'syz.0.1458': attribute type 12 has an invalid length. [ 380.038145][ T8850] program syz.0.1458 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 380.086434][ T22] usb 1-1: USB disconnect, device number 66 [ 380.699809][ T33] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 380.728942][ T33] ath9k_htc: Failed to initialize the device [ 380.751045][ T22] usb 1-1: ath9k_htc: USB layer deinitialized [ 380.886513][ T8880] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 380.904244][ T8880] ALSA: mixer_oss: invalid index 1374389 [ 381.679470][ T22] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 381.691836][ T4280] kernel write not supported for file /888/net/snmp (pid: 4280 comm: kworker/0:4) [ 381.879408][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 381.890765][ T22] usb 3-1: unable to get BOS descriptor or descriptor too short [ 381.911521][ T22] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 22, changing to 8 [ 381.936424][ T22] usb 3-1: config 1 interface 0 has no altsetting 0 [ 381.955896][ T22] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.40 [ 381.982576][ T8910] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 381.982936][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.001364][ T8910] ALSA: mixer_oss: invalid index 1374389 [ 382.015020][ T22] usb 3-1: Product: syz [ 382.022777][ T22] usb 3-1: Manufacturer: syz [ 382.031221][ T22] usb 3-1: SerialNumber: syz [ 382.135452][ T8914] loop0: detected capacity change from 0 to 1024 [ 382.153537][ T8914] EXT4-fs: Mount option(s) incompatible with ext2 [ 383.315455][ T8930] fuse: Bad value for 'fd' [ 383.934265][ T8949] FAULT_INJECTION: forcing a failure. [ 383.934265][ T8949] name failslab, interval 1, probability 0, space 0, times 0 [ 383.963060][ T22] usbhid 3-1:1.0: can't add hid device: -71 [ 384.000285][ T22] usbhid: probe of 3-1:1.0 failed with error -71 [ 384.018566][ T8949] CPU: 1 PID: 8949 Comm: syz.0.1489 Not tainted syzkaller #0 [ 384.026033][ T8949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 384.036135][ T8949] Call Trace: [ 384.039460][ T8949] [ 384.042427][ T8949] dump_stack_lvl+0x188/0x24e [ 384.047162][ T8949] ? show_regs_print_info+0x12/0x12 [ 384.052429][ T8949] ? load_image+0x410/0x410 [ 384.056991][ T8949] ? __might_sleep+0xd0/0xd0 [ 384.061644][ T8949] ? __lock_acquire+0x7c40/0x7c40 [ 384.066724][ T8949] should_fail_ex+0x390/0x4c0 [ 384.071468][ T8949] should_failslab+0x5/0x20 [ 384.076019][ T8949] slab_pre_alloc_hook+0x59/0x300 [ 384.081102][ T8949] ? bpf_int_jit_compile+0x238/0xcbe0 [ 384.086524][ T8949] __kmem_cache_alloc_node+0x4f/0x270 [ 384.091942][ T8949] ? bpf_int_jit_compile+0x238/0xcbe0 [ 384.097340][ T8949] kmalloc_trace+0x26/0xe0 [ 384.101878][ T8949] bpf_int_jit_compile+0x238/0xcbe0 [ 384.107103][ T8949] ? __lock_acquire+0x1465/0x7c40 [ 384.112172][ T8949] ? verify_lock_unused+0x140/0x140 [ 384.117417][ T8949] ? pcpu_memcg_post_alloc_hook+0xe6/0x490 [ 384.123266][ T8949] ? emit_bpf_dispatcher+0x1060/0x1060 [ 384.128779][ T8949] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 384.134792][ T8949] ? __lock_acquire+0x7c40/0x7c40 [ 384.139858][ T8949] ? lockdep_hardirqs_on+0x94/0x140 [ 384.145086][ T8949] ? ktime_get_with_offset+0xff/0x320 [ 384.150484][ T8949] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 384.156757][ T8949] ? ktime_get_real_ts64+0x440/0x440 [ 384.162077][ T8949] ? do_raw_spin_unlock+0x11d/0x230 [ 384.167303][ T8949] ? __might_fault+0xc2/0x120 [ 384.172008][ T8949] bpf_prog_select_runtime+0x48b/0x7d0 [ 384.177495][ T8949] ? bpf_obj_name_cpy+0x190/0x1d0 [ 384.182550][ T8949] bpf_prog_load+0x1039/0x1530 [ 384.187372][ T8949] ? map_freeze+0x390/0x390 [ 384.191926][ T8949] ? __might_fault+0xa6/0x120 [ 384.196631][ T8949] ? __might_fault+0xa6/0x120 [ 384.201334][ T8949] ? __might_fault+0xc2/0x120 [ 384.206034][ T8949] ? __might_fault+0xa6/0x120 [ 384.210738][ T8949] ? bpf_lsm_bpf+0x5/0x10 [ 384.215092][ T8949] ? security_bpf+0x7a/0xa0 [ 384.219626][ T8949] __sys_bpf+0x5b8/0x780 [ 384.223903][ T8949] ? bpf_link_show_fdinfo+0x380/0x380 [ 384.229348][ T8949] ? lock_chain_count+0x20/0x20 [ 384.234234][ T8949] __x64_sys_bpf+0x78/0x90 [ 384.238680][ T8949] do_syscall_64+0x4c/0xa0 [ 384.243124][ T8949] ? clear_bhb_loop+0x60/0xb0 [ 384.247825][ T8949] ? clear_bhb_loop+0x60/0xb0 [ 384.252521][ T8949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 384.258448][ T8949] RIP: 0033:0x7fd0a819e159 [ 384.262885][ T8949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.282519][ T8949] RSP: 002b:00007fd0a908b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 384.290960][ T8949] RAX: ffffffffffffffda RBX: 00007fd0a8425fa0 RCX: 00007fd0a819e159 [ 384.298955][ T8949] RDX: 0000000000000094 RSI: 0000200000002c80 RDI: 0000000000000005 [ 384.306952][ T8949] RBP: 00007fd0a823506b R08: 0000000000000000 R09: 0000000000000000 [ 384.314948][ T8949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.322974][ T8949] R13: 00007fd0a8426038 R14: 00007fd0a8425fa0 R15: 00007ffd1f8961f8 [ 384.330989][ T8949] [ 384.341878][ T22] usb 3-1: USB disconnect, device number 66 [ 384.384333][ T8951] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 384.399345][ T8951] ALSA: mixer_oss: invalid index 1374389 [ 386.256745][ T8965] binder_alloc: 8964: binder_alloc_buf, no vma [ 386.292798][ T8978] device syzkaller1 entered promiscuous mode [ 386.616789][ T8985] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 386.788666][ T8987] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 386.814409][ T8987] ALSA: mixer_oss: invalid index 1374389 [ 386.944993][ T8995] loop0: detected capacity change from 0 to 512 [ 387.024313][ T8995] ======================================================= [ 387.024313][ T8995] WARNING: The mand mount option has been deprecated and [ 387.024313][ T8995] and is ignored by this kernel. Remove the mand [ 387.024313][ T8995] option from the mount to silence this warning. [ 387.024313][ T8995] ======================================================= [ 387.138642][ T8995] EXT4-fs error (device loop0): ext4_get_journal_inode:5762: comm syz.0.1506: inode #2147418112: comm syz.0.1506: iget: illegal inode # [ 387.166546][ T8995] EXT4-fs (loop0): no journal found [ 387.176548][ T8995] EXT4-fs (loop0): can't get journal size [ 387.212763][ T8995] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 387.286656][ T8995] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 387.311786][ T8995] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 387.359056][ T8995] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 387.386420][ T8995] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1506: Invalid inode bitmap blk 4 in block_group 0 [ 387.425917][ T9009] loop2: detected capacity change from 0 to 1024 [ 387.436206][ T8995] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 387.462718][ T9009] EXT4-fs: Ignoring removed bh option [ 387.548695][ T9009] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 387.590726][ T9007] binder_alloc: 9006: binder_alloc_buf, no vma [ 387.631037][ T9009] process 'syz.2.1511' launched './file2' with NULL argv: empty string added [ 387.661234][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 387.896796][ T9021] loop0: detected capacity change from 0 to 512 [ 387.999519][ T9021] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 388.059040][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 388.084162][ T9021] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 388.126356][ T9021] EXT4-fs (loop0): 1 truncate cleaned up [ 388.159443][ T9021] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 388.218500][ T9027] FAULT_INJECTION: forcing a failure. [ 388.218500][ T9027] name failslab, interval 1, probability 0, space 0, times 0 [ 388.252254][ T9021] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2805: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 388.270228][ T9027] CPU: 1 PID: 9027 Comm: syz.4.1514 Not tainted syzkaller #0 [ 388.277777][ T9027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 388.287882][ T9027] Call Trace: [ 388.291203][ T9027] [ 388.294180][ T9027] dump_stack_lvl+0x188/0x24e [ 388.298910][ T9027] ? show_regs_print_info+0x12/0x12 [ 388.304186][ T9027] ? load_image+0x410/0x410 [ 388.308772][ T9027] ? __lock_acquire+0x7c40/0x7c40 [ 388.313867][ T9027] should_fail_ex+0x390/0x4c0 [ 388.318610][ T9027] should_failslab+0x5/0x20 [ 388.323154][ T9027] slab_pre_alloc_hook+0x59/0x300 [ 388.328230][ T9027] ? __kmem_cache_alloc_node+0x19d/0x270 [ 388.333905][ T9027] ? copy_verifier_state+0x75d/0xae0 [ 388.339263][ T9027] __kmem_cache_alloc_node+0x4f/0x270 [ 388.344682][ T9027] ? copy_verifier_state+0x75d/0xae0 [ 388.350030][ T9027] kmalloc_trace+0x26/0xe0 [ 388.354500][ T9027] copy_verifier_state+0x75d/0xae0 [ 388.359673][ T9027] do_check_common+0x4208/0xc560 [ 388.364681][ T9027] ? push_insn+0x670/0x670 [ 388.369115][ T9027] ? do_check_subprogs+0x313/0x360 [ 388.374248][ T9027] bpf_check+0x3eb5/0x11010 [ 388.378816][ T9027] ? mark_lock+0x94/0x320 [ 388.383197][ T9027] ? bpf_get_btf_vmlinux+0x10/0x10 [ 388.388328][ T9027] ? __lock_acquire+0x1465/0x7c40 [ 388.393366][ T9027] ? mark_lock+0x94/0x320 [ 388.397716][ T9027] ? __lock_acquire+0x138a/0x7c40 [ 388.402767][ T9027] ? mark_lock+0x94/0x320 [ 388.407116][ T9027] ? __lock_acquire+0x1465/0x7c40 [ 388.412173][ T9027] ? mark_lock+0x94/0x320 [ 388.416525][ T9027] ? __lock_acquire+0x1465/0x7c40 [ 388.421665][ T9027] ? verify_lock_unused+0x140/0x140 [ 388.426889][ T9027] ? verify_lock_unused+0x140/0x140 [ 388.432101][ T9027] ? verify_lock_unused+0x140/0x140 [ 388.437313][ T9027] ? pcpu_memcg_post_alloc_hook+0xe6/0x490 [ 388.443148][ T9027] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 388.449144][ T9027] ? __lock_acquire+0x7c40/0x7c40 [ 388.454226][ T9027] ? lock_chain_count+0x20/0x20 [ 388.459118][ T9027] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 388.465370][ T9027] ? lockdep_hardirqs_on+0x94/0x140 [ 388.470582][ T9027] ? ktime_get_with_offset+0xff/0x320 [ 388.476047][ T9027] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 388.482340][ T9027] ? ktime_get_real_ts64+0x440/0x440 [ 388.487646][ T9027] ? do_raw_spin_unlock+0x11d/0x230 [ 388.492858][ T9027] ? __might_fault+0xc2/0x120 [ 388.497566][ T9027] ? memset+0x1e/0x40 [ 388.501578][ T9027] ? bpf_obj_name_cpy+0x190/0x1d0 [ 388.506621][ T9027] bpf_prog_load+0x100e/0x1530 [ 388.511407][ T9027] ? map_freeze+0x390/0x390 [ 388.515945][ T9027] ? __might_fault+0xa6/0x120 [ 388.520638][ T9027] ? __might_fault+0xa6/0x120 [ 388.525323][ T9027] ? __might_fault+0xc2/0x120 [ 388.530018][ T9027] ? __might_fault+0xa6/0x120 [ 388.534785][ T9027] ? bpf_lsm_bpf+0x5/0x10 [ 388.539144][ T9027] ? security_bpf+0x7a/0xa0 [ 388.543780][ T9027] __sys_bpf+0x5b8/0x780 [ 388.548044][ T9027] ? bpf_link_show_fdinfo+0x380/0x380 [ 388.553442][ T9027] ? lock_chain_count+0x20/0x20 [ 388.558319][ T9027] __x64_sys_bpf+0x78/0x90 [ 388.562751][ T9027] do_syscall_64+0x4c/0xa0 [ 388.567188][ T9027] ? clear_bhb_loop+0x60/0xb0 [ 388.571877][ T9027] ? clear_bhb_loop+0x60/0xb0 [ 388.576564][ T9027] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.582496][ T9027] RIP: 0033:0x7f8e0019e159 [ 388.586918][ T9027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.606534][ T9027] RSP: 002b:00007f8e010a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 388.614975][ T9027] RAX: ffffffffffffffda RBX: 00007f8e00425fa0 RCX: 00007f8e0019e159 [ 388.622954][ T9027] RDX: 0000000000000094 RSI: 0000200000002c80 RDI: 0000000000000005 [ 388.630937][ T9027] RBP: 00007f8e0023506b R08: 0000000000000000 R09: 0000000000000000 [ 388.638918][ T9027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.646895][ T9027] R13: 00007f8e00426038 R14: 00007f8e00425fa0 R15: 00007fff0d14b5a8 [ 388.654886][ T9027] [ 388.816299][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 389.479102][ T9047] syz.3.1520 (9047) used greatest stack depth: 17824 bytes left [ 389.558047][ T9049] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 389.577294][ T9049] ALSA: mixer_oss: invalid index 1374389 [ 389.856723][ T9057] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4283] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ      rr @  @       rr s     & %½p ûÛß% \x07 gF- [ 390.008550][ T9066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1528'. [ 390.119601][ T9066] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1528'. [ 390.130795][ T4318] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 390.353435][ T4318] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 390.377472][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.444366][ T4318] usb 4-1: Product: syz [ 390.479295][ T4318] usb 4-1: Manufacturer: syz [ 390.483972][ T4318] usb 4-1: SerialNumber: syz [ 390.530777][ T2167] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 390.615597][ T9074] loop4: detected capacity change from 0 to 512 [ 390.731049][ T9074] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 390.843328][ T9074] EXT4-fs (loop4): 1 truncate cleaned up [ 390.859714][ T9074] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 390.944162][ T9057] netlink: 'syz.3.1526': attribute type 12 has an invalid length. [ 390.960353][ T9057] program syz.3.1526 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 391.000262][ T9081] binder_alloc: 9080: binder_alloc_buf, no vma [ 391.008370][ T4355] usb 4-1: USB disconnect, device number 61 [ 391.108669][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 391.348466][ T9088] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 391.360430][ T9088] ALSA: mixer_oss: invalid index 1374389 [ 391.569377][ T4280] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 391.649328][ T2167] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 391.664634][ T2167] ath9k_htc: Failed to initialize the device [ 391.681780][ T4355] usb 4-1: ath9k_htc: USB layer deinitialized [ 391.729595][ T4280] usb 3-1: device descriptor read/64, error -71 [ 391.755256][ T9101] syz.0.1542 uses obsolete (PF_INET,SOCK_PACKET) [ 392.009369][ T4280] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 392.163491][ T9110] binder_alloc: 9109: binder_alloc_buf, no vma [ 392.179352][ T4280] usb 3-1: device descriptor read/64, error -71 [ 392.309482][ T4280] usb usb3-port1: attempt power cycle [ 392.327505][ T9116] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 392.350070][ T9116] ALSA: mixer_oss: invalid index 1374389 [ 392.719399][ T4280] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 392.766351][ T4280] usb 3-1: device descriptor read/8, error -71 [ 393.657107][ T9142] loop4: detected capacity change from 0 to 1024 [ 393.785179][ T9142] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 393.832954][ T9142] EXT4-fs (loop4): orphan cleanup on readonly fs [ 393.905264][ T9142] EXT4-fs error (device loop4): ext4_free_blocks:6220: comm syz.4.1559: Freeing blocks not in datazone - block = 0, count = 4096 [ 394.071214][ T9142] EXT4-fs (loop4): 1 orphan inode deleted [ 394.127838][ T9142] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 394.174042][ T9148] binder: BINDER_SET_CONTEXT_MGR already set [ 394.198106][ T4280] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 394.251811][ T4280] usb 3-1: device descriptor read/8, error -71 [ 394.269509][ T9148] binder: 9145:9148 ioctl 4018620d 200000000040 returned -16 [ 394.369460][ T4280] usb usb3-port1: unable to enumerate USB device [ 394.498378][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1564'. [ 394.731960][ T9172] device syzkaller0 entered promiscuous mode [ 394.738875][ T9173] loop2: detected capacity change from 0 to 512 [ 394.747692][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 394.763102][ T9173] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 394.792945][ T9174] tipc: Started in network mode [ 394.816179][ T9174] tipc: Node identity 6ec57299a0e3, cluster identity 4711 [ 394.891641][ T9173] EXT4-fs (loop2): 1 truncate cleaned up [ 394.922357][ T9173] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 394.947893][ T9174] tipc: Enabled bearer , priority 0 [ 394.992897][ T9180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1569'. [ 395.163026][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 395.243395][ T9162] tipc: Resetting bearer [ 395.331984][ T9162] tipc: Disabling bearer [ 395.358021][ T9186] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 395.380346][ T9186] ALSA: mixer_oss: invalid index 1374389 [ 395.604090][ T9197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1578'. [ 395.908535][ T9209] loop3: detected capacity change from 0 to 512 [ 395.937987][ T9209] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 395.978819][ T9209] EXT4-fs (loop3): 1 truncate cleaned up [ 395.986044][ T9209] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 396.144911][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 396.151030][ T4280] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 396.173249][ T9215] loop0: detected capacity change from 0 to 2048 [ 396.242290][ T9215] loop0: p1 < > p4 [ 396.257308][ T9215] loop0: p4 size 8388608 extends beyond EOD, truncated [ 396.339330][ T4280] usb 3-1: Using ep0 maxpacket: 8 [ 396.348276][ T4280] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 396.387996][ T4280] usb 3-1: config 0 has no interface number 0 [ 396.413450][ T9223] device syzkaller0 entered promiscuous mode [ 396.439522][ T4280] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 396.469786][ T9223] tipc: Started in network mode [ 396.475262][ T4280] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 396.493108][ T9223] tipc: Node identity fe856ba875de, cluster identity 4711 [ 396.510885][ T4280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.521384][ T9223] tipc: Enabled bearer , priority 0 [ 396.580215][ T4280] usb 3-1: config 0 descriptor?? [ 396.619682][ T4280] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 396.767051][ T4631] udevd[4631]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 396.796443][ T4368] udevd[4368]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 396.885082][ T4631] udevd[4631]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 396.908858][ T4368] udevd[4368]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 396.960493][ T9218] tipc: Resetting bearer [ 397.050243][ T9218] tipc: Disabling bearer [ 397.373697][ T9252] loop4: detected capacity change from 0 to 512 [ 397.424756][ T9252] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 397.504679][ T9252] EXT4-fs (loop4): 1 truncate cleaned up [ 397.528999][ T9252] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 397.618249][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 399.200468][ T9281] loop4: detected capacity change from 0 to 2048 [ 399.289132][ T9292] tipc: Enabling of bearer rejected, failed to enable media [ 399.353830][ T9281] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 399.392357][ T9281] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.406721][ T9297] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 399.532403][ T9281] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 12 with error 117 [ 399.566735][ T9281] EXT4-fs (loop4): This should not happen!! Data will be lost [ 399.566735][ T9281] [ 399.744168][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 400.509471][ T2167] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 400.571090][ T4318] hid-generic 0005:046D:C082.0021: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 400.669312][ T2167] usb 5-1: device descriptor read/64, error -71 [ 400.744463][ T9331] loop1: detected capacity change from 0 to 1024 [ 400.765466][ T9329] fido_id[9329]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 400.826414][ T9331] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 400.835217][ T9331] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.869771][ T9331] EXT4-fs (loop1): shut down requested (1) [ 400.939481][ T2167] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 401.026192][ T9338] loop0: detected capacity change from 0 to 2048 [ 401.060995][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 401.083511][ T9338] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 401.109530][ T2167] usb 5-1: device descriptor read/64, error -71 [ 401.119808][ T9338] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.161893][ T9338] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1621: bg 0: block 345: padding at end of block bitmap is not set [ 401.206877][ T9338] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 12 with error 117 [ 401.229450][ T2167] usb usb5-port1: attempt power cycle [ 401.241588][ T9338] EXT4-fs (loop0): This should not happen!! Data will be lost [ 401.241588][ T9338] [ 401.378429][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 401.451592][ T9343] binder: BINDER_SET_CONTEXT_MGR already set [ 401.457686][ T9343] binder: 9342:9343 ioctl 4018620d 200000000040 returned -16 [ 401.577424][ T9351] device syzkaller0 entered promiscuous mode [ 401.659599][ T2167] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 401.681378][ T9351] tipc: Enabled bearer , priority 0 [ 401.700005][ T2167] usb 5-1: device descriptor read/8, error -71 [ 401.836031][ T9347] tipc: Resetting bearer [ 401.922455][ T9347] tipc: Disabling bearer [ 401.974995][ T2167] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 402.020303][ T2167] usb 5-1: device descriptor read/8, error -71 [ 402.111147][ T7] usb 3-1: USB disconnect, device number 71 [ 402.139495][ T2167] usb usb5-port1: unable to enumerate USB device [ 402.402209][ T2167] hid-generic 0005:046D:C082.0022: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 402.637875][ T9373] fido_id[9373]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 402.862007][ T9384] loop3: detected capacity change from 0 to 2048 [ 402.957571][ T9384] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 403.023166][ T9384] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.079564][ T9384] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1634: bg 0: block 345: padding at end of block bitmap is not set [ 403.151107][ T9384] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 12 with error 117 [ 403.206000][ T9384] EXT4-fs (loop3): This should not happen!! Data will be lost [ 403.206000][ T9384] [ 403.400046][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 403.579031][ T9406] device syzkaller0 entered promiscuous mode [ 403.618219][ T9397] binder: BINDER_SET_CONTEXT_MGR already set [ 403.618713][ T9406] tipc: Enabled bearer , priority 0 [ 403.637196][ T9397] binder: 9391:9397 ioctl 4018620d 200000000040 returned -16 [ 403.702609][ T4280] hid-generic 0005:046D:C082.0023: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 403.757803][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1642'. [ 404.012078][ T9398] tipc: Resetting bearer [ 404.081049][ T9398] tipc: Disabling bearer [ 404.104316][ T9412] fido_id[9412]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 404.499692][ T9436] loop2: detected capacity change from 0 to 2048 [ 404.575150][ T9436] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 404.603062][ T9436] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.639355][ T4318] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 404.725608][ T7] hid-generic 0005:046D:C082.0024: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 404.788496][ T9436] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1651: bg 0: block 345: padding at end of block bitmap is not set [ 404.803533][ T4318] usb 5-1: device descriptor read/64, error -71 [ 404.857488][ T9436] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 12 with error 117 [ 404.889931][ T9436] EXT4-fs (loop2): This should not happen!! Data will be lost [ 404.889931][ T9436] [ 405.037419][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 405.074392][ T9445] fido_id[9445]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 405.080250][ T4318] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 405.259452][ T4318] usb 5-1: device descriptor read/64, error -71 [ 405.380247][ T4318] usb usb5-port1: attempt power cycle [ 405.641718][ T9461] device syzkaller0 entered promiscuous mode [ 405.676990][ T9461] tipc: Started in network mode [ 405.699659][ T9461] tipc: Node identity 769d982be1db, cluster identity 4711 [ 405.717567][ T9461] tipc: Enabled bearer , priority 0 [ 405.789321][ T4318] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 405.830490][ T4318] usb 5-1: device descriptor read/8, error -71 [ 405.995162][ T9455] tipc: Resetting bearer [ 406.057784][ T9466] loop1: detected capacity change from 0 to 512 [ 406.076057][ T9455] tipc: Disabling bearer [ 406.104152][ T4318] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 406.140031][ T4318] usb 5-1: device descriptor read/8, error -71 [ 406.227488][ T9466] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 406.269439][ T4318] usb usb5-port1: unable to enumerate USB device [ 406.378160][ T9466] ext4 filesystem being mounted at /344/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 406.529782][ T4355] hid-generic 0005:046D:C082.0025: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 406.564529][ T9477] loop3: detected capacity change from 0 to 2048 [ 406.644702][ T9477] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 406.712261][ T9477] ext4 filesystem being mounted at /373/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.734007][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 406.849951][ T9477] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1668: bg 0: block 345: padding at end of block bitmap is not set [ 406.916770][ T9477] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 12 with error 117 [ 406.964556][ T9477] EXT4-fs (loop3): This should not happen!! Data will be lost [ 406.964556][ T9477] [ 406.990199][ T9480] fido_id[9480]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 407.101995][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 407.301190][ T9496] loop1: detected capacity change from 0 to 512 [ 407.408490][ T9496] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 407.439414][ T9496] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.575673][ T9504] loop4: detected capacity change from 0 to 512 [ 407.710436][ T9504] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 407.726543][ T9504] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.062055][ T9504] capability: warning: `syz.4.1675' uses 32-bit capabilities (legacy support in use) [ 408.126595][ T26] audit: type=1326 audit(1790551408.537:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9514 comm="syz.0.1678" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0a819e159 code=0x0 [ 408.168477][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 408.490185][ T4318] hid-generic 0005:046D:C082.0026: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 408.574407][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 408.587309][ T9529] loop3: detected capacity change from 0 to 2048 [ 408.693637][ T9529] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 408.730345][ T9529] ext4 filesystem being mounted at /376/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.836035][ T9529] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1683: bg 0: block 345: padding at end of block bitmap is not set [ 408.905763][ T9529] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 12 with error 117 [ 408.943509][ T9530] fido_id[9530]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 408.963703][ T9529] EXT4-fs (loop3): This should not happen!! Data will be lost [ 408.963703][ T9529] [ 409.131796][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 409.319575][ T2167] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 409.492386][ T2167] usb 2-1: device descriptor read/64, error -71 [ 409.715167][ T9553] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 409.759346][ T2167] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 409.924846][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1694'. [ 409.934813][ T2167] usb 2-1: device descriptor read/64, error -71 [ 410.060554][ T2167] usb usb2-port1: attempt power cycle [ 410.165315][ T4318] hid-generic 0005:046D:C082.0027: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 410.180988][ T9563] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4283] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ      rr @  @       rr s     & %½p ûÛß% \x07 gF- [ 410.397805][ T9566] fido_id[9566]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 410.471608][ T2167] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 410.559433][ T4280] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 410.564894][ T9568] loop0: detected capacity change from 0 to 2048 [ 410.612166][ T2167] usb 2-1: device descriptor read/8, error -71 [ 410.710338][ T9568] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 410.729396][ T9568] ext4 filesystem being mounted at /350/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.781844][ T4280] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 410.799398][ T4280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.819388][ T4280] usb 4-1: Product: syz [ 410.823619][ T4280] usb 4-1: Manufacturer: syz [ 410.828375][ T4280] usb 4-1: SerialNumber: syz [ 410.867546][ T4280] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 410.889435][ T2167] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 410.917701][ T9568] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1697: bg 0: block 345: padding at end of block bitmap is not set [ 410.940978][ T2167] usb 2-1: device descriptor read/8, error -71 [ 411.026423][ T9568] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 12 with error 117 [ 411.051249][ T9568] EXT4-fs (loop0): This should not happen!! Data will be lost [ 411.051249][ T9568] [ 411.061220][ T2167] usb usb2-port1: unable to enumerate USB device [ 411.171180][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 411.273510][ T9563] netlink: 'syz.3.1696': attribute type 12 has an invalid length. [ 411.304736][ T9563] program syz.3.1696 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 411.341935][ T4355] usb 4-1: USB disconnect, device number 62 [ 411.979517][ T4280] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 411.986683][ T4280] ath9k_htc: Failed to initialize the device [ 412.028998][ T4355] usb 4-1: ath9k_htc: USB layer deinitialized [ 412.168108][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1706'. [ 412.192943][ T4356] hid-generic 0005:046D:C082.0028: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 412.530789][ T9604] fido_id[9604]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 412.567629][ T9608] loop0: detected capacity change from 0 to 2048 [ 412.593889][ T9616] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 412.647460][ T9616] ALSA: mixer_oss: invalid index 1374389 [ 412.700175][ T9608] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 412.781071][ T9608] ext4 filesystem being mounted at /355/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.835382][ T9621] autofs4:pid:9621:autofs_fill_super: called with bogus options [ 412.889330][ T9608] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1710: bg 0: block 345: padding at end of block bitmap is not set [ 412.979556][ T9608] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 12 with error 117 [ 413.042072][ T9608] EXT4-fs (loop0): This should not happen!! Data will be lost [ 413.042072][ T9608] [ 413.139761][ T9625] binder: BINDER_SET_CONTEXT_MGR already set [ 413.180751][ T9625] binder: 9623:9625 ioctl 4018620d 200000000040 returned -16 [ 413.211619][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 413.306637][ T9629] loop4: detected capacity change from 0 to 512 [ 413.406852][ T9631] loop1: detected capacity change from 0 to 512 [ 413.474035][ T9629] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 413.506976][ T9631] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 413.519792][ T9631] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.601450][ T9629] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.872079][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1721'. [ 413.885663][ T4356] hid-generic 0005:046D:C082.0029: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 413.913844][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 414.061240][ T9640] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 414.327952][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 414.548330][ T9649] fido_id[9649]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 414.969581][ T9674] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 415.039311][ T9674] ALSA: mixer_oss: invalid index 1374389 [ 415.167411][ T9677] binder: BINDER_SET_CONTEXT_MGR already set [ 415.217542][ T9677] binder: 9668:9677 ioctl 4018620d 200000000040 returned -16 [ 415.548544][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1733'. [ 415.977566][ T9692] binder_alloc: 9691: binder_alloc_buf, no vma [ 416.324328][ T9708] tipc: Enabled bearer , priority 0 [ 416.445684][ T9713] loop4: detected capacity change from 0 to 512 [ 416.484448][ T9713] EXT4-fs: Ignoring removed bh option [ 416.527329][ T9713] EXT4-fs: Ignoring removed mblk_io_submit option [ 416.616000][ T9713] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 416.734020][ T9700] tipc: Disabling bearer [ 416.808008][ T9713] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 416.856034][ T9713] EXT4-fs (loop4): orphan cleanup on readonly fs [ 416.882326][ T9722] loop1: detected capacity change from 0 to 2048 [ 416.923786][ T9713] Quota error (device loop4): v2_read_file_info: Free block number 117440512 out of range (1, 6). [ 416.931152][ T9723] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4272] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ      rr @  @       rr s     & %½p ûÛß% \x07 gF- [ 416.960272][ T9713] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 417.128418][ T9722] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 417.199425][ T9713] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 417.233094][ T4355] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 417.259986][ T9713] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.1742: Invalid block bitmap block 0 in block_group 0 [ 417.345498][ T9713] EXT4-fs (loop4): Remounting filesystem read-only [ 417.393931][ T9734] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1748'. [ 417.413208][ T9713] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 417.425544][ T9734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1748'. [ 417.440437][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 417.466216][ T9713] EXT4-fs (loop4): Remounting filesystem read-only [ 417.477199][ T4355] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 417.496704][ T4355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.519659][ T9713] EXT4-fs (loop4): 1 orphan inode deleted [ 417.546643][ T4355] usb 1-1: Product: syz [ 417.556818][ T9713] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 417.566180][ T4355] usb 1-1: Manufacturer: syz [ 417.579316][ T4355] usb 1-1: SerialNumber: syz [ 417.652974][ T4355] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 417.711021][ T9713] EXT4-fs error (device loop4): ext4_lookup:1864: inode #2: comm syz.4.1742: deleted inode referenced: 12 [ 417.841039][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 417.912495][ T9742] binder_alloc: 9741: binder_alloc_buf, no vma [ 418.070546][ T9723] netlink: 'syz.0.1745': attribute type 12 has an invalid length. [ 418.111019][ T9723] program syz.0.1745 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 418.191855][ T4280] usb 1-1: USB disconnect, device number 67 [ 418.653264][ T9758] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 418.769661][ T4355] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 418.779584][ T4355] ath9k_htc: Failed to initialize the device [ 418.813850][ T4280] usb 1-1: ath9k_htc: USB layer deinitialized [ 418.850992][ T9763] tipc: Enabled bearer , priority 0 [ 418.945511][ T9768] xt_hashlimit: size too large, truncated to 1048576 [ 419.349551][ T9775] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1761'. [ 419.385814][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1761'. [ 419.575453][ T9759] tipc: Disabling bearer [ 419.718544][ T9780] loop3: detected capacity change from 0 to 512 [ 419.795150][ T9780] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.1763: iget: bad i_size value: 38620345925642 [ 419.892898][ T9780] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.1763: couldn't read orphan inode 15 (err -117) [ 419.926369][ T9780] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 420.037211][ T9780] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1763: bg 0: block 5: invalid block bitmap [ 420.081711][ T9780] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 420 with error 28 [ 420.100079][ T9785] binder_alloc: 9781: binder_alloc_buf, no vma [ 420.118016][ T9780] EXT4-fs (loop3): This should not happen!! Data will be lost [ 420.118016][ T9780] [ 420.148579][ T9780] EXT4-fs (loop3): Total free blocks count 0 [ 420.155118][ T2167] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 420.173356][ T9780] EXT4-fs (loop3): Free/Dirty block details [ 420.189581][ T9780] EXT4-fs (loop3): free_blocks=0 [ 420.199828][ T9780] EXT4-fs (loop3): dirty_blocks=424 [ 420.215536][ T9780] EXT4-fs (loop3): Block reservation details [ 420.225719][ T9780] EXT4-fs (loop3): i_reserved_data_blocks=424 [ 420.364471][ T2167] usb 2-1: Using ep0 maxpacket: 8 [ 420.372369][ T2167] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 420.419668][ T2167] usb 2-1: config 0 has no interface number 0 [ 420.446272][ T2167] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 420.500537][ T2167] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 420.544093][ T2167] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.596461][ T2167] usb 2-1: config 0 descriptor?? [ 420.637456][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 420.678054][ T2167] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 421.687255][ T9813] loop2: detected capacity change from 0 to 512 [ 421.703031][ T2167] usb 2-1: USB disconnect, device number 50 [ 421.797344][ T9813] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 421.838065][ T9813] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.159610][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 422.296395][ T9827] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1773'. [ 422.337959][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1773'. [ 422.522860][ T9829] netlink: 'syz.3.1774': attribute type 83 has an invalid length. [ 422.702351][ T9838] FAULT_INJECTION: forcing a failure. [ 422.702351][ T9838] name failslab, interval 1, probability 0, space 0, times 0 [ 422.745605][ T9838] CPU: 1 PID: 9838 Comm: syz.3.1777 Not tainted syzkaller #0 [ 422.753115][ T9838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 422.763225][ T9838] Call Trace: [ 422.766541][ T9838] [ 422.769510][ T9838] dump_stack_lvl+0x188/0x24e [ 422.774284][ T9838] ? show_regs_print_info+0x12/0x12 [ 422.779546][ T9838] ? load_image+0x410/0x410 [ 422.784119][ T9838] ? __might_sleep+0xd0/0xd0 [ 422.788774][ T9838] ? __lock_acquire+0x7c40/0x7c40 [ 422.793901][ T9838] should_fail_ex+0x390/0x4c0 [ 422.798646][ T9838] should_failslab+0x5/0x20 [ 422.803281][ T9838] slab_pre_alloc_hook+0x59/0x300 [ 422.808401][ T9838] kmem_cache_alloc+0x56/0x2f0 [ 422.813221][ T9838] ? getname_flags+0xb7/0x500 [ 422.817959][ T9838] getname_flags+0xb7/0x500 [ 422.822523][ T9838] do_mq_open+0x19e/0x750 [ 422.826923][ T9838] ? mq_put_mnt+0x40/0x40 [ 422.831321][ T9838] __x64_sys_mq_open+0x182/0x1e0 [ 422.836338][ T9838] ? proc_ipc_sem_dointvec+0x170/0x170 [ 422.841870][ T9838] ? lockdep_hardirqs_on+0x94/0x140 [ 422.847131][ T9838] do_syscall_64+0x4c/0xa0 [ 422.851603][ T9838] ? clear_bhb_loop+0x60/0xb0 [ 422.856330][ T9838] ? clear_bhb_loop+0x60/0xb0 [ 422.861058][ T9838] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.867020][ T9838] RIP: 0033:0x7f924319e159 [ 422.871482][ T9838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.891174][ T9838] RSP: 002b:00007f9244020028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 422.899664][ T9838] RAX: ffffffffffffffda RBX: 00007f9243425fa0 RCX: 00007f924319e159 [ 422.907701][ T9838] RDX: 0000000000000100 RSI: 0000000000000040 RDI: 0000000000000000 [ 422.915719][ T9838] RBP: 00007f924323506b R08: 0000000000000000 R09: 0000000000000000 [ 422.923737][ T9838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.931759][ T9838] R13: 00007f9243426038 R14: 00007f9243425fa0 R15: 00007ffdc1bf33a8 [ 422.939802][ T9838] [ 423.147699][ T9843] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 423.218276][ T9843] ALSA: mixer_oss: invalid index 1374389 [ 423.379464][ T4356] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 423.580022][ T4356] usb 1-1: Using ep0 maxpacket: 8 [ 423.590822][ T4356] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 423.599159][ T4356] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 423.689285][ T4356] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 423.738280][ T4356] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.863210][ T9864] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1787'. [ 423.896918][ T9864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1787'. [ 424.059664][ T2167] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 424.243320][ T9876] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 424.257171][ T2167] usb 3-1: Using ep0 maxpacket: 8 [ 424.262526][ T9876] ALSA: mixer_oss: invalid index 1374389 [ 424.277449][ T2167] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 424.299075][ T2167] usb 3-1: config 0 has no interface number 0 [ 424.328726][ T2167] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 424.376320][ T2167] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 424.399971][ T2167] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.423626][ T2167] usb 3-1: config 0 descriptor?? [ 424.481265][ T2167] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 425.215365][ T4355] usb 3-1: USB disconnect, device number 72 [ 425.215516][ C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 425.358660][ T9909] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1799'. [ 425.377227][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1799'. [ 425.517622][ T9913] loop3: detected capacity change from 0 to 512 [ 425.542034][ T9913] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 425.599670][ T9913] EXT4-fs (loop3): 1 truncate cleaned up [ 425.605670][ T9913] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 425.685154][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 425.834398][ T9921] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 425.854414][ T9921] ALSA: mixer_oss: invalid index 1374389 [ 426.209588][ T22] usb 1-1: USB disconnect, device number 68 [ 426.840895][ T9953] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1811'. [ 426.878600][ T9954] loop1: detected capacity change from 0 to 1024 [ 426.888175][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1811'. [ 426.997795][ T9954] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 427.038769][ T9954] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.124273][ T26] audit: type=1800 audit(1790551427.537:30): pid=9954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1813" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 427.288550][ T9969] loop0: detected capacity change from 0 to 512 [ 427.297173][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 427.321107][ T9968] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4283] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ      rr @  @       rr s     & %½p ûÛß% \x07 gF- [ 427.408180][ T9969] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.1817: iget: bad i_size value: 38620345925642 [ 427.552747][ T9969] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.1817: couldn't read orphan inode 15 (err -117) [ 427.578381][ T9969] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 427.670519][ T4355] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 427.726209][ T9969] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1817: bg 0: block 5: invalid block bitmap [ 427.746972][ T9969] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 392 with error 28 [ 427.760046][ T9969] EXT4-fs (loop0): This should not happen!! Data will be lost [ 427.760046][ T9969] [ 427.770312][ T9969] EXT4-fs (loop0): Total free blocks count 0 [ 427.791977][ T9969] EXT4-fs (loop0): Free/Dirty block details [ 427.804842][ T9969] EXT4-fs (loop0): free_blocks=0 [ 427.813229][ T9969] EXT4-fs (loop0): dirty_blocks=396 [ 427.818617][ T9969] EXT4-fs (loop0): Block reservation details [ 427.825191][ T9969] EXT4-fs (loop0): i_reserved_data_blocks=396 [ 427.883843][ T4355] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 427.894106][ T4355] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.909264][ T4355] usb 4-1: Product: syz [ 427.913499][ T4355] usb 4-1: Manufacturer: syz [ 427.925834][ T4355] usb 4-1: SerialNumber: syz [ 427.932050][ T9981] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 427.940394][ T9981] ALSA: mixer_oss: invalid index 1374389 [ 427.984177][ T4355] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 428.040155][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 428.223657][ T9990] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1827'. [ 428.245772][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1827'. [ 428.388618][ T9968] netlink: 'syz.3.1818': attribute type 12 has an invalid length. [ 428.410607][ T9968] program syz.3.1818 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 428.460011][ T22] usb 4-1: USB disconnect, device number 63 [ 428.528987][ T9995] batman_adv: batadv0: Adding interface: syzkaller0 [ 428.543544][ T9995] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.569309][ C1] vkms_vblank_simulate: vblank timer overrun [ 428.609326][ T9995] batman_adv: batadv0: Interface activated: syzkaller0 [ 429.451935][T10005] binder_alloc: 10003: pid 10003 spamming oneway? 2 buffers allocated for a total size of 5120 [ 429.463246][T10005] binder_alloc: 10003: pid 10003 spamming oneway? 3 buffers allocated for a total size of 5128 [ 429.545809][ T4355] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 429.561352][ T4355] ath9k_htc: Failed to initialize the device [ 429.600517][ T9995] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 429.665342][ T9995] batman_adv: batadv0: Removing interface: syzkaller0 [ 429.724865][ T22] usb 4-1: ath9k_htc: USB layer deinitialized [ 430.376862][T10017] loop1: detected capacity change from 0 to 2048 [ 430.451859][T10021] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 430.462431][T10021] ALSA: mixer_oss: invalid index 1374389 [ 430.545718][T10017] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 430.571484][T10017] ext4 filesystem being mounted at /378/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.623684][T10027] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1839'. [ 430.671991][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1839'. [ 430.766845][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 431.043402][T10038] binder: BINDER_SET_CONTEXT_MGR already set [ 431.069680][T10036] binder_alloc: 10035: pid 10035 spamming oneway? 2 buffers allocated for a total size of 5120 [ 431.089740][T10038] binder: 10037:10038 ioctl 4018620d 200000000040 returned -16 [ 431.387891][T10053] device syzkaller0 entered promiscuous mode [ 431.418389][T10053] tipc: Enabled bearer , priority 0 [ 431.476487][T10056] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 431.508151][T10056] ALSA: mixer_oss: invalid index 1374389 [ 431.658895][T10065] loop2: detected capacity change from 0 to 2048 [ 431.696165][T10047] tipc: Resetting bearer [ 431.736643][T10065] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 431.755811][ T26] audit: type=1326 audit(1790551432.167:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.0.1852" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a819e159 code=0x7ffc0000 [ 431.779942][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.812134][T10065] ext4 filesystem being mounted at /331/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.822798][ T26] audit: type=1326 audit(1790551432.207:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.0.1852" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a819e159 code=0x7ffc0000 [ 431.822843][ T26] audit: type=1326 audit(1790551432.217:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.0.1852" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a819e159 code=0x7ffc0000 [ 431.822893][ T26] audit: type=1326 audit(1790551432.217:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.0.1852" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd0a819e159 code=0x7ffc0000 [ 431.846945][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.905715][ T26] audit: type=1326 audit(1790551432.297:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.0.1852" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a819e159 code=0x7ffc0000 [ 431.930333][ T26] audit: type=1326 audit(1790551432.317:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.0.1852" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a819e159 code=0x7ffc0000 [ 431.932929][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.964412][ T26] audit: type=1326 audit(1790551432.377:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.0.1852" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a819e159 code=0x7ffc0000 [ 431.991660][ T26] audit: type=1326 audit(1790551432.377:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.0.1852" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a819e159 code=0x7ffc0000 [ 432.052956][ T26] audit: type=1326 audit(1790551432.377:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.0.1852" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fd0a819e159 code=0x7ffc0000 [ 432.177325][T10047] tipc: Disabling bearer [ 432.210993][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 432.215647][ T26] audit: type=1326 audit(1790551432.377:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.0.1852" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a819e159 code=0x7ffc0000 [ 432.371563][ T26] audit: type=1326 audit(1790551432.377:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.0.1852" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a819e159 code=0x7ffc0000 [ 432.504551][ T26] audit: type=1326 audit(1790551432.377:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.0.1852" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a819e159 code=0x7ffc0000 [ 432.605890][T10093] random: crng reseeded on system resumption [ 432.619539][ T26] audit: type=1326 audit(1790551432.377:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.0.1852" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd0a819e159 code=0x7ffc0000 [ 432.658848][ T26] audit: type=1326 audit(1790551432.377:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.0.1852" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a819e159 code=0x7ffc0000 [ 432.735426][ T26] audit: type=1326 audit(1790551432.377:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.0.1852" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a819e159 code=0x7ffc0000 [ 432.838458][ T26] audit: type=1326 audit(1790551432.377:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.0.1852" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a819e159 code=0x7ffc0000 [ 432.926825][ T26] audit: type=1326 audit(1790551432.377:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.0.1852" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fd0a819e159 code=0x7ffc0000 [ 432.953123][ T26] audit: type=1326 audit(1790551432.407:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.0.1852" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a819e159 code=0x7ffc0000 [ 432.991557][ T26] audit: type=1326 audit(1790551432.407:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.0.1852" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a819e159 code=0x7ffc0000 [ 433.278592][T10102] binder_alloc: 10101: pid 10101 spamming oneway? 2 buffers allocated for a total size of 5120 [ 433.474928][T10112] fuse: Bad value for 'fd' [ 433.560082][T10114] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4278] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ      rr @  @       rr s     & %½p ûÛß% \x07 gF- [ 433.682100][T10116] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 433.699764][T10116] ALSA: mixer_oss: invalid index 1374389 [ 433.842603][ T4355] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 433.880798][T10123] device syzkaller0 entered promiscuous mode [ 433.916613][T10123] tipc: Enabled bearer , priority 0 [ 433.946277][T10126] device syzkaller0 entered promiscuous mode [ 433.950087][T10127] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1869'. [ 433.971616][T10127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1869'. [ 434.043510][ T4355] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 434.059613][ T4355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.081013][ T4355] usb 3-1: Product: syz [ 434.093210][ T4355] usb 3-1: Manufacturer: syz [ 434.107940][ T4355] usb 3-1: SerialNumber: syz [ 434.158411][ T4355] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 434.224704][T10119] tipc: Resetting bearer [ 434.359012][T10119] tipc: Disabling bearer [ 434.572974][T10114] program syz.2.1864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 434.622648][ T4356] usb 3-1: USB disconnect, device number 73 [ 434.650439][T10139] binder_alloc: 10138: pid 10138 spamming oneway? 2 buffers allocated for a total size of 5120 [ 434.802705][T10151] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 434.839274][T10151] ALSA: mixer_oss: invalid index 1374389 [ 435.169772][T10164] netlink: 'syz.0.1880': attribute type 10 has an invalid length. [ 435.212369][T10164] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 435.261877][ T4355] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 435.268972][ T4355] ath9k_htc: Failed to initialize the device [ 435.294851][ T4356] usb 3-1: ath9k_htc: USB layer deinitialized [ 435.339285][ T22] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 435.468205][T10173] device syzkaller0 entered promiscuous mode [ 435.539455][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 435.547838][ T22] usb 5-1: config 135 interface 0 has no altsetting 0 [ 435.586574][ T22] usb 5-1: New USB device found, idVendor=0413, idProduct=6a04, bcdDevice=27.2b [ 435.630121][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.641774][ T22] usb 5-1: Product: syz [ 435.646008][ T22] usb 5-1: Manufacturer: syz [ 435.664290][ T22] usb 5-1: SerialNumber: syz [ 435.780334][T10188] device syzkaller0 entered promiscuous mode [ 435.849861][T10190] tipc: Enabled bearer , priority 0 [ 436.095084][T10202] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 436.113873][T10202] ALSA: mixer_oss: invalid index 1374389 [ 436.236195][T10180] tipc: Resetting bearer [ 436.307638][T10201] binder_alloc: 10199: pid 10199 spamming oneway? 2 buffers allocated for a total size of 5120 [ 436.380277][T10180] tipc: Disabling bearer [ 436.603829][T10210] binder: BINDER_SET_CONTEXT_MGR already set [ 436.642284][T10210] binder: 10209:10210 ioctl 4018620d 200000000040 returned -16 [ 437.892959][ T26] kauditd_printk_skb: 138 callbacks suppressed [ 437.892974][ T26] audit: type=1326 audit(1790551438.307:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10234 comm="syz.3.1899" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924319e159 code=0x7ffc0000 [ 438.116612][ T26] audit: type=1326 audit(1790551438.347:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10234 comm="syz.3.1899" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924319e159 code=0x7ffc0000 [ 438.286397][ T22] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 438.305585][ T26] audit: type=1326 audit(1790551438.367:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10234 comm="syz.3.1899" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f924319e159 code=0x7ffc0000 [ 438.373020][ T22] dvb_usb_af9015: probe of 5-1:135.0 failed with error -22 [ 438.440303][ T22] usb 5-1: USB disconnect, device number 81 [ 438.511206][ T26] audit: type=1326 audit(1790551438.347:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10234 comm="syz.3.1899" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924319e159 code=0x7ffc0000 [ 438.606032][ T26] audit: type=1326 audit(1790551438.377:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10234 comm="syz.3.1899" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924319e159 code=0x7ffc0000 [ 438.693068][ T26] audit: type=1326 audit(1790551438.377:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10234 comm="syz.3.1899" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924319e159 code=0x7ffc0000 [ 438.809701][ T26] audit: type=1326 audit(1790551438.407:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10234 comm="syz.3.1899" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924319e159 code=0x7ffc0000 [ 438.867088][ T26] audit: type=1326 audit(1790551438.407:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10234 comm="syz.3.1899" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924319e159 code=0x7ffc0000 [ 438.893325][ T26] audit: type=1326 audit(1790551438.407:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10234 comm="syz.3.1899" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f924319e159 code=0x7ffc0000 [ 438.917705][ T26] audit: type=1326 audit(1790551438.407:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10234 comm="syz.3.1899" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924319e159 code=0x7ffc0000 [ 439.046475][T10237] kernel profiling enabled (shift: 9) [ 439.378387][T10262] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 439.396350][T10262] ALSA: mixer_oss: invalid index 1374389 [ 439.613554][T10265] binder_alloc: 10263: pid 10263 spamming oneway? 2 buffers allocated for a total size of 5120 [ 439.780350][T10279] device syzkaller0 entered promiscuous mode [ 439.834578][T10275] binder_alloc: 10274: pid 10274 spamming oneway? 2 buffers allocated for a total size of 5120 [ 439.913102][T10279] tipc: Enabled bearer , priority 0 [ 439.967150][T10282] binder_alloc: 10274: pid 10274 spamming oneway? 3 buffers allocated for a total size of 5128 [ 439.984391][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.990951][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.463537][T10271] tipc: Resetting bearer [ 440.825742][T10271] tipc: Disabling bearer [ 440.869046][T10288] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1911'. [ 441.048233][T10299] loop0: detected capacity change from 0 to 512 [ 441.158882][T10299] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 441.179484][T10299] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.301939][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 441.566841][T10321] device syzkaller0 entered promiscuous mode [ 442.089309][T10329] binder_alloc: 10328: pid 10328 spamming oneway? 2 buffers allocated for a total size of 5120 [ 442.165944][T10337] loop2: detected capacity change from 0 to 512 [ 442.175880][T10335] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1928'. [ 442.446165][T10332] binder_alloc: 10328: pid 10328 spamming oneway? 3 buffers allocated for a total size of 5128 [ 442.596579][T10337] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 442.750240][T10337] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.858664][T10343] loop4: detected capacity change from 0 to 512 [ 442.934713][T10343] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 442.961004][T10343] ext4 filesystem being mounted at /344/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.103342][T10345] loop3: detected capacity change from 0 to 1024 [ 443.176575][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 443.206511][T10345] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 443.258733][T10345] EXT4-fs (loop3): unmounting filesystem. [ 443.298906][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1930'. [ 443.362286][T10346] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1930'. [ 443.441751][T10345] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 443.708959][T10367] device syzkaller0 entered promiscuous mode [ 443.749029][T10370] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4272] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ      rr @  @       rr s     & %½p ûÛß% \x07 gF- [ 443.898355][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 444.023153][ T22] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 444.154656][T10381] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1942'. [ 444.173266][T10380] loop3: detected capacity change from 0 to 2048 [ 444.233597][ T22] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 444.250909][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.270888][T10380] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 444.279408][ T22] usb 1-1: Product: syz [ 444.279430][ T22] usb 1-1: Manufacturer: syz [ 444.279447][ T22] usb 1-1: SerialNumber: syz [ 444.307109][T10380] ext4 filesystem being mounted at /440/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.326342][ T22] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 444.358026][T10385] loop4: detected capacity change from 0 to 512 [ 444.418395][T10385] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 444.439592][T10385] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.563120][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 444.679671][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 444.737990][T10370] program syz.0.1939 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 444.769093][ T4356] usb 1-1: USB disconnect, device number 69 [ 445.035285][T10403] loop4: detected capacity change from 0 to 512 [ 445.167813][T10408] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1955'. [ 445.181187][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1955'. [ 445.192834][T10403] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 445.226946][T10403] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.341648][T10411] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1956'. [ 445.409417][ T22] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 445.416656][ T22] ath9k_htc: Failed to initialize the device [ 445.446067][ T4356] usb 1-1: ath9k_htc: USB layer deinitialized [ 445.563430][T10413] loop0: detected capacity change from 0 to 2048 [ 445.623897][T10415] loop2: detected capacity change from 0 to 512 [ 445.692404][T10413] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 445.728871][T10413] ext4 filesystem being mounted at /407/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.772214][T10415] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 445.817929][T10415] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.936947][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 446.018452][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 446.192033][T10424] FAULT_INJECTION: forcing a failure. [ 446.192033][T10424] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 446.235916][T10424] CPU: 1 PID: 10424 Comm: syz.2.1960 Not tainted syzkaller #0 [ 446.243479][T10424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 446.253621][T10424] Call Trace: [ 446.256936][T10424] [ 446.259906][T10424] dump_stack_lvl+0x188/0x24e [ 446.264639][T10424] ? show_regs_print_info+0x12/0x12 [ 446.269886][T10424] ? load_image+0x410/0x410 [ 446.274441][T10424] ? __lock_acquire+0x7c40/0x7c40 [ 446.279528][T10424] ? do_futex+0x310/0x320 [ 446.283899][T10424] should_fail_ex+0x390/0x4c0 [ 446.288616][T10424] _copy_from_user+0x2c/0x170 [ 446.293361][T10424] __x64_sys_futimesat+0x13c/0x270 [ 446.298500][T10424] ? __ia32_sys_utimensat+0x240/0x240 [ 446.303895][T10424] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 446.309911][T10424] ? lock_chain_count+0x20/0x20 [ 446.314808][T10424] ? lockdep_hardirqs_on+0x94/0x140 [ 446.320045][T10424] do_syscall_64+0x4c/0xa0 [ 446.324485][T10424] ? clear_bhb_loop+0x60/0xb0 [ 446.329186][T10424] ? clear_bhb_loop+0x60/0xb0 [ 446.333893][T10424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.339817][T10424] RIP: 0033:0x7fa23cd9e159 [ 446.344258][T10424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.363886][T10424] RSP: 002b:00007fa23dc96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000105 [ 446.372367][T10424] RAX: ffffffffffffffda RBX: 00007fa23d025fa0 RCX: 00007fa23cd9e159 [ 446.380363][T10424] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: ffffffffffffffff [ 446.388356][T10424] RBP: 00007fa23ce3506b R08: 0000000000000000 R09: 0000000000000000 [ 446.396340][T10424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.404327][T10424] R13: 00007fa23d026038 R14: 00007fa23d025fa0 R15: 00007ffda6f83b68 [ 446.412333][T10424] [ 446.589969][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 446.740464][T10434] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1966'. [ 446.816514][T10434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1966'. [ 446.952495][T10442] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4271] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ      rr @  @       rr s     & %½p ûÛß% \x07 gF- [ 447.638730][ T7] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 447.850574][T10449] loop4: detected capacity change from 0 to 512 [ 447.976107][T10449] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 448.019420][T10449] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.034328][ T7] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 448.059357][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.097827][ T7] usb 2-1: Product: syz [ 448.110917][ T7] usb 2-1: Manufacturer: syz [ 448.115598][ T7] usb 2-1: SerialNumber: syz [ 448.180029][ T7] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 448.197985][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 448.523733][T10470] loop2: detected capacity change from 0 to 512 [ 448.595272][T10442] program syz.1.1968 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 448.631491][ T4356] usb 2-1: USB disconnect, device number 51 [ 448.635685][T10470] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 448.689366][T10470] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.805957][T10480] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1981'. [ 448.857269][T10480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'. [ 448.928420][ T4280] hid-generic 0005:046D:C082.002A: unbalanced collection at end of report description [ 448.956345][ T4280] hid-generic: probe of 0005:046D:C082.002A failed with error -22 [ 449.009664][ T4355] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 449.193376][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 449.219362][ T4355] usb 4-1: Using ep0 maxpacket: 8 [ 449.233473][ T4355] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 449.249804][ T7] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 449.256882][ T7] ath9k_htc: Failed to initialize the device [ 449.279860][ T4356] usb 2-1: ath9k_htc: USB layer deinitialized [ 449.287326][ T4355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.305862][T10489] loop1: detected capacity change from 0 to 512 [ 449.316300][ T4355] pvrusb2: Hardware description: Terratec Grabster AV400 [ 449.324609][ T4355] pvrusb2: ********** [ 449.328683][ T4355] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 449.388401][ T4355] pvrusb2: Important functionality might not be entirely working. [ 449.415018][ T4355] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 449.426864][ T4355] pvrusb2: ********** [ 449.437038][T10489] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 449.476065][T10489] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.518912][ T2313] pvrusb2: Invalid write control endpoint [ 449.740330][ T4355] usb 4-1: USB disconnect, device number 64 [ 449.771503][T10500] FAULT_INJECTION: forcing a failure. [ 449.771503][T10500] name failslab, interval 1, probability 0, space 0, times 0 [ 449.798607][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 449.805089][T10500] CPU: 0 PID: 10500 Comm: syz.0.1989 Not tainted syzkaller #0 [ 449.812617][T10500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 449.822732][T10500] Call Trace: [ 449.826057][T10500] [ 449.829017][T10500] dump_stack_lvl+0x188/0x24e [ 449.833759][T10500] ? show_regs_print_info+0x12/0x12 [ 449.839002][T10500] ? load_image+0x410/0x410 [ 449.843567][T10500] ? __might_sleep+0xd0/0xd0 [ 449.846135][ T2313] pvrusb2: Invalid write control endpoint [ 449.848228][T10500] ? __lock_acquire+0x7c40/0x7c40 [ 449.859038][T10500] ? lock_acquire+0x225/0x4a0 [ 449.863779][T10500] should_fail_ex+0x390/0x4c0 [ 449.868518][T10500] should_failslab+0x5/0x20 [ 449.873005][ T2313] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 449.873078][ T2313] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 449.882348][T10500] slab_pre_alloc_hook+0x59/0x300 [ 449.882380][T10500] ? chrdev_open+0x381/0x5f0 [ 449.882407][T10500] ? posix_clock_open+0xb1/0x220 [ 449.882434][T10500] __kmem_cache_alloc_node+0x4f/0x270 [ 449.882456][T10500] ? do_raw_spin_lock+0x128/0x2f0 [ 449.882479][T10500] ? posix_clock_open+0xb1/0x220 [ 449.882505][T10500] kmalloc_trace+0x26/0xe0 [ 449.882528][T10500] posix_clock_open+0xb1/0x220 [ 449.929271][T10500] ? posix_clock_compat_ioctl+0x130/0x130 [ 449.935055][T10500] chrdev_open+0x585/0x5f0 [ 449.939524][T10500] ? cd_forget+0x160/0x160 [ 449.943970][T10500] ? fsnotify_perm+0x39b/0x550 [ 449.948763][T10500] ? cd_forget+0x160/0x160 [ 449.953211][T10500] do_dentry_open+0x7dd/0x10b0 [ 449.958026][T10500] path_openat+0x2674/0x2f10 [ 449.962664][T10500] ? verify_lock_unused+0x140/0x140 [ 449.967895][T10500] ? do_sys_openat2+0xdd/0x4f0 [ 449.972693][T10500] ? do_filp_open+0x420/0x420 [ 449.977414][T10500] do_filp_open+0x1ee/0x420 [ 449.981954][T10500] ? vfs_tmpfile+0x470/0x470 [ 449.986602][T10500] ? _raw_spin_unlock+0x24/0x40 [ 449.991484][T10500] ? alloc_fd+0x590/0x640 [ 449.995856][T10500] do_sys_openat2+0x14b/0x4f0 [ 450.000640][T10500] ? do_sys_open+0xe0/0xe0 [ 450.005101][T10500] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 450.011118][T10500] ? lock_chain_count+0x20/0x20 [ 450.016006][T10500] __x64_sys_openat+0x135/0x160 [ 450.020902][T10500] do_syscall_64+0x4c/0xa0 [ 450.025342][T10500] ? clear_bhb_loop+0x60/0xb0 [ 450.030142][T10500] ? clear_bhb_loop+0x60/0xb0 [ 450.034870][T10500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 450.040829][T10500] RIP: 0033:0x7fd0a819e159 [ 450.045307][T10500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.064945][T10500] RSP: 002b:00007fd0a908b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 450.073393][T10500] RAX: ffffffffffffffda RBX: 00007fd0a8425fa0 RCX: 00007fd0a819e159 [ 450.081391][T10500] RDX: 0000000000000481 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 450.089397][T10500] RBP: 00007fd0a823506b R08: 0000000000000000 R09: 0000000000000000 [ 450.097477][T10500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.105468][T10500] R13: 00007fd0a8426038 R14: 00007fd0a8425fa0 R15: 00007ffd1f8961f8 [ 450.113501][T10500] [ 450.124097][ T2313] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 450.138967][ T2313] pvrusb2: Device being rendered inoperable [ 450.179363][ T2313] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 450.186612][ T2313] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 450.239378][ T2313] pvrusb2: Attached sub-driver cx25840 [ 450.244920][ T2313] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 450.318350][ T2313] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 450.535690][T10516] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1993'. [ 450.574742][T10516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1993'. [ 450.748030][T10520] loop3: detected capacity change from 0 to 512 [ 450.868394][T10520] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 450.909357][T10520] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.921318][T10529] loop4: detected capacity change from 0 to 512 [ 450.961877][T10529] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 451.064020][T10529] ext4 filesystem being mounted at /362/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.099262][ T7] hid-generic 0005:046D:C082.002B: unbalanced collection at end of report description [ 451.137323][ T7] hid-generic: probe of 0005:046D:C082.002B failed with error -22 [ 451.281227][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 451.427057][T10546] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 451.455416][T10546] ALSA: mixer_oss: invalid index 1374389 [ 451.613432][T10551] ------------[ cut here ]------------ [ 451.620550][T10551] WARNING: CPU: 1 PID: 10551 at mm/page_alloc.c:5634 __alloc_pages+0x2fe/0x4f0 [ 451.629685][T10551] Modules linked in: [ 451.633659][T10551] CPU: 1 PID: 10551 Comm: syz.4.2007 Not tainted syzkaller #0 [ 451.641230][T10551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 451.651403][T10551] RIP: 0010:__alloc_pages+0x2fe/0x4f0 [ 451.656868][T10551] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 9f 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 cf 30 44 0c 01 <0f> 0b eb a4 a9 00 00 08 00 8b 74 24 04 75 3e 44 89 f1 81 e1 7f ff [ 451.676696][T10551] RSP: 0018:ffffc9000ced7a20 EFLAGS: 00010246 [ 451.682953][T10551] RAX: ffffc9000ced7a00 RBX: 1ffff920019daf48 RCX: 0000000000000000 [ 451.691048][T10551] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc9000ced7a88 [ 451.699152][T10551] RBP: ffffc9000ced7b10 R08: ffffc9000ced7a87 R09: ffffc9000ced7a60 [ 451.707271][T10551] R10: dffffc0000000000 R11: fffff520019daf51 R12: 0000000000000013 [ 451.715365][T10551] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000 [ 451.723437][T10551] FS: 00007f8e010a76c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 451.732471][T10551] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 451.739105][T10551] CR2: 00007f8e010a6ff8 CR3: 000000007c168000 CR4: 00000000003506e0 [ 451.747190][T10551] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 451.755285][T10551] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 451.763356][T10551] Call Trace: [ 451.766686][T10551] [ 451.769696][T10551] ? aa_file_perm+0x112/0xf00 [ 451.774560][T10551] ? zone_statistics+0x170/0x170 [ 451.779717][T10551] __kmalloc_large_node+0x8c/0x1f0 [ 451.784912][T10551] ? bitmap_parse_user+0x1f/0x60 [ 451.789973][T10551] __kmalloc_node_track_caller+0x10f/0x240 [ 451.795855][T10551] memdup_user_nul+0x28/0xf0 [ 451.800571][T10551] bitmap_parse_user+0x1f/0x60 [ 451.805393][T10551] write_irq_affinity+0x1bc/0x310 [ 451.810544][T10551] ? irq_affinity_proc_show+0x100/0x100 [ 451.816182][T10551] ? rcu_read_lock_any_held+0xb0/0x130 [ 451.821758][T10551] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 451.827097][T10551] ? end_current_label_crit_section+0x14b/0x170 [ 451.833459][T10551] ? irq_affinity_proc_open+0x50/0x50 [ 451.838889][T10551] proc_reg_write+0x1dd/0x2c0 [ 451.843683][T10551] ? proc_reg_llseek+0x280/0x280 [ 451.848688][T10551] vfs_write+0x2dc/0x9a0 [ 451.853044][T10551] ? file_end_write+0x250/0x250 [ 451.857959][T10551] ? __fget_files+0x28/0x460 [ 451.862663][T10551] ? __fget_files+0x3fc/0x460 [ 451.867412][T10551] ? __fdget_pos+0x2ae/0x360 [ 451.872107][T10551] ? ksys_write+0x70/0x260 [ 451.876594][T10551] ksys_write+0x14d/0x260 [ 451.881122][T10551] ? __ia32_sys_read+0x80/0x80 [ 451.885961][T10551] ? lockdep_hardirqs_on+0x94/0x140 [ 451.891280][T10551] do_syscall_64+0x4c/0xa0 [ 451.895743][T10551] ? clear_bhb_loop+0x60/0xb0 [ 451.900613][T10551] ? clear_bhb_loop+0x60/0xb0 [ 451.905363][T10551] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 451.911379][T10551] RIP: 0033:0x7f8e0019e159 [ 451.915842][T10551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.935583][T10551] RSP: 002b:00007f8e010a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 451.944124][T10551] RAX: ffffffffffffffda RBX: 00007f8e00425fa0 RCX: 00007f8e0019e159 [ 451.952206][T10551] RDX: 00000000fffffffb RSI: 0000000000000000 RDI: 0000000000000003 [ 451.960282][T10551] RBP: 00007f8e0023506b R08: 0000000000000000 R09: 0000000000000000 [ 451.968345][T10551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.976420][T10551] R13: 00007f8e00426038 R14: 00007f8e00425fa0 R15: 00007fff0d14b5a8 [ 451.980786][T10549] binder_alloc: 10548: pid 10548 spamming oneway? 2 buffers allocated for a total size of 5120 [ 451.984546][T10551] [ 451.997990][T10551] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 452.005306][T10551] CPU: 1 PID: 10551 Comm: syz.4.2007 Not tainted syzkaller #0 [ 452.012802][T10551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 452.022919][T10551] Call Trace: [ 452.026240][T10551] [ 452.029214][T10551] dump_stack_lvl+0x188/0x24e [ 452.033941][T10551] ? memcpy+0x3c/0x60 [ 452.038024][T10551] ? show_regs_print_info+0x12/0x12 [ 452.043277][T10551] ? load_image+0x410/0x410 [ 452.047854][T10551] panic+0x2d3/0x710 [ 452.051800][T10551] ? bpf_jit_dump+0xd0/0xd0 [ 452.056372][T10551] __warn+0x2f8/0x4f0 [ 452.060452][T10551] ? __alloc_pages+0x2fe/0x4f0 [ 452.065275][T10551] ? __alloc_pages+0x2fe/0x4f0 [ 452.070102][T10551] report_bug+0x2ba/0x4f0 [ 452.074487][T10551] ? __alloc_pages+0x2fe/0x4f0 [ 452.079317][T10551] handle_bug+0x3a/0x70 [ 452.083515][T10551] exc_invalid_op+0x16/0x40 [ 452.088062][T10551] asm_exc_invalid_op+0x16/0x20 [ 452.092954][T10551] RIP: 0010:__alloc_pages+0x2fe/0x4f0 [ 452.098380][T10551] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 9f 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 cf 30 44 0c 01 <0f> 0b eb a4 a9 00 00 08 00 8b 74 24 04 75 3e 44 89 f1 81 e1 7f ff [ 452.118223][T10551] RSP: 0018:ffffc9000ced7a20 EFLAGS: 00010246 [ 452.124365][T10551] RAX: ffffc9000ced7a00 RBX: 1ffff920019daf48 RCX: 0000000000000000 [ 452.132384][T10551] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc9000ced7a88 [ 452.140400][T10551] RBP: ffffc9000ced7b10 R08: ffffc9000ced7a87 R09: ffffc9000ced7a60 [ 452.148427][T10551] R10: dffffc0000000000 R11: fffff520019daf51 R12: 0000000000000013 [ 452.156445][T10551] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000 [ 452.164564][T10551] ? aa_file_perm+0x112/0xf00 [ 452.164724][T10552] binder_alloc: 10548: pid 10548 spamming oneway? 3 buffers allocated for a total size of 5128 [ 452.179624][T10551] ? zone_statistics+0x170/0x170 [ 452.184639][T10551] __kmalloc_large_node+0x8c/0x1f0 [ 452.189821][T10551] ? bitmap_parse_user+0x1f/0x60 [ 452.194832][T10551] __kmalloc_node_track_caller+0x10f/0x240 [ 452.200719][T10551] memdup_user_nul+0x28/0xf0 [ 452.205372][T10551] bitmap_parse_user+0x1f/0x60 [ 452.210197][T10551] write_irq_affinity+0x1bc/0x310 [ 452.215267][T10551] ? irq_affinity_proc_show+0x100/0x100 [ 452.220861][T10551] ? rcu_read_lock_any_held+0xb0/0x130 [ 452.226368][T10551] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 452.231703][T10551] ? end_current_label_crit_section+0x14b/0x170 [ 452.238009][T10551] ? irq_affinity_proc_open+0x50/0x50 [ 452.243444][T10551] proc_reg_write+0x1dd/0x2c0 [ 452.248185][T10551] ? proc_reg_llseek+0x280/0x280 [ 452.253184][T10551] vfs_write+0x2dc/0x9a0 [ 452.257492][T10551] ? file_end_write+0x250/0x250 [ 452.262404][T10551] ? __fget_files+0x28/0x460 [ 452.267048][T10551] ? __fget_files+0x3fc/0x460 [ 452.271794][T10551] ? __fdget_pos+0x2ae/0x360 [ 452.276441][T10551] ? ksys_write+0x70/0x260 [ 452.280921][T10551] ksys_write+0x14d/0x260 [ 452.285308][T10551] ? __ia32_sys_read+0x80/0x80 [ 452.290132][T10551] ? lockdep_hardirqs_on+0x94/0x140 [ 452.295394][T10551] do_syscall_64+0x4c/0xa0 [ 452.299852][T10551] ? clear_bhb_loop+0x60/0xb0 [ 452.304630][T10551] ? clear_bhb_loop+0x60/0xb0 [ 452.309356][T10551] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.315304][T10551] RIP: 0033:0x7f8e0019e159 [ 452.319764][T10551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.339503][T10551] RSP: 002b:00007f8e010a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 452.347965][T10551] RAX: ffffffffffffffda RBX: 00007f8e00425fa0 RCX: 00007f8e0019e159 [ 452.356012][T10551] RDX: 00000000fffffffb RSI: 0000000000000000 RDI: 0000000000000003 [ 452.364030][T10551] RBP: 00007f8e0023506b R08: 0000000000000000 R09: 0000000000000000 [ 452.372054][T10551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.380073][T10551] R13: 00007f8e00426038 R14: 00007f8e00425fa0 R15: 00007fff0d14b5a8 [ 452.388109][T10551] [ 452.391752][T10551] Kernel Offset: disabled [ 452.396209][T10551] Rebooting in 86400 seconds..