last executing test programs: 2m44.125025244s ago: executing program 4 (id=634): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xfffe, 0x3, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m43.200080798s ago: executing program 4 (id=637): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3e, 0x1, 0x100, 0x40, 0x200, 0x0, 0x40, 0x38, 0x1, 0x40, 0x2, 0x1}, [{0x1, 0x0, 0x0, 0x10000, 0x150, 0x10, 0x1000}]}, 0x78) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20002811}, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000140), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000008050000010b007e"], 0x97) 2m42.870881881s ago: executing program 4 (id=642): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002100), 0x8000, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000002140)={0x9, 0x1}) 2m40.213127709s ago: executing program 4 (id=651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000ac0)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000080)=@newtfilter={0x84, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x7}, {0xd, 0xffff}, {0x300, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_EMATCHES={0x50, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xf, 0x7, 0x6}, {{0x0, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7ff}, {0x7, 0xab5d, 0x47b, 0x7e000000}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x0, 0x8, 0x7}, {0x3, 0x5, 0x2}}}]}]}]}}]}, 0x84}}, 0x0) 2m38.478140343s ago: executing program 4 (id=654): socket$inet_udp(0x2, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x104c1, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002780)='./mysys\x00', 0x8ec5d82ac9a81a9c) mount(0x0, &(0x7f00000027c0)='./mysys\x00', &(0x7f0000002800)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002840)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000002880)={@host}) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x3, &(0x7f0000de5000/0x4000)=nil) 2m37.772966954s ago: executing program 4 (id=656): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000200)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0xfffffffd, 0x0, 0x7cce8c743ee810df}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read(r0, &(0x7f0000000300)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0xd, @tick=0x9, 0x40, {0xc0, 0xff}, 0x42, 0x1, 0x1}) openat$sequencer2(0xffffff9c, 0x0, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000003c0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) 2m20.624374702s ago: executing program 32 (id=656): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000200)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0xfffffffd, 0x0, 0x7cce8c743ee810df}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read(r0, &(0x7f0000000300)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0xd, @tick=0x9, 0x40, {0xc0, 0xff}, 0x42, 0x1, 0x1}) openat$sequencer2(0xffffff9c, 0x0, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000003c0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) 5.938719681s ago: executing program 2 (id=1113): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/mtrr\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000005ac0)={0x2020}, 0x2020) 5.805185535s ago: executing program 0 (id=1114): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000680)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000006c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='\x00', 0x89901) move_mount(r2, &(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000700)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/trace_marker\x00', 0x1, 0x5a) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r3, &(0x7f0000000f00)=""/16384, 0x4000) 5.729887853s ago: executing program 5 (id=1116): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f00000000c0)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x24040084}}, {{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x2, 0x0) 5.665133429s ago: executing program 2 (id=1117): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000005c0)={'dummy0\x00', 0x47e}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000004c0)=0x1f, 0x4) 5.589242677s ago: executing program 2 (id=1118): getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, &(0x7f0000000000)=0xffffffffffffff3c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000ac0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.757045771s ago: executing program 5 (id=1119): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40002, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x800, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000003c0)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x95a4, 0x8, 0x2000, 0x1000000c, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x40, 0x0, 0x21c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2000, 0x0, 0x3e7, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20, 0x2, 0x3ad}}], 0x1, &(0x7f0000000340)={0x2e, 0x7, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffb, 0x1, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 4.632329503s ago: executing program 3 (id=1121): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_open_dev$loop(&(0x7f00000002c0), 0x1, 0x40000) openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x83) inotify_init() userfaultfd(0x801) r1 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r3], 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8010) 4.581273268s ago: executing program 1 (id=1122): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./dev\x00', 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='./dev/sda1\x00', &(0x7f00000005c0)='./mnt\x00', &(0x7f0000000600)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000640)='./mnt\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/file2\x00', 0x1000) 4.433061203s ago: executing program 2 (id=1123): r0 = socket(0x1e, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000037000000", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4040000) 4.432889583s ago: executing program 0 (id=1124): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000bc0), 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000c80)={'\x00', 0x5, 0x4, 0x7, 0x10001, 0x101}) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0x20004090) mknod(0x0, 0x20, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1a5103, 0x0) getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2ac809, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000d40), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) write(r2, &(0x7f0000000d80)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) 4.36588086s ago: executing program 1 (id=1125): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) 4.284105168s ago: executing program 3 (id=1126): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x40186f40, &(0x7f0000000100)) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/prop1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/rndis.usb0/os_desc/interface.rndis/prop1\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}, 0x80001ff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000bc0)=""/4102, 0x1006}, {&(0x7f0000001c00)=""/219, 0xdb}, {&(0x7f0000001d00)=""/146, 0x92}], 0x3}, 0x19}], 0x3, 0x2000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setns(0xffffffffffffffff, 0x40000000) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x1c1) mount$fuse(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x80, &(0x7f00000008c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x402) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x40000) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008090}, 0xc000) 4.249276312s ago: executing program 2 (id=1127): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r3, &(0x7f00000151c0)=""/102392, 0x18ff8) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f000002e1c0)={0x0, 0x0, &(0x7f000002e200)={&(0x7f000002e240)=ANY=[@ANYBLOB="f0000000"], 0xf0}}, 0x0) 4.153160361s ago: executing program 1 (id=1128): openat$dm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x105141, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000600)={0x0, {{0xa, 0x4e20, 0x7, @mcast2, 0x4}}, 0x1}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2, 0x401d031, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000a40)=0x6, 0x4) sendto$inet(r1, 0x0, 0xffe5, 0xe000, &(0x7f0000000a80)={0x2, 0x4e20}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) capset(&(0x7f0000000440)={0x20080522}, &(0x7f0000000480)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000004c0)=0x1f, 0x4) 3.044454083s ago: executing program 2 (id=1129): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000980), 0x2) r1 = memfd_create(&(0x7f0000002a40)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000002b80)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x11, r2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980), 0x200002, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, 0x0, 0x400c801) syz_usb_disconnect(0xffffffffffffffff) 2.950186382s ago: executing program 0 (id=1130): syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) pipe(0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r3, &(0x7f0000000240), 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f00000002c0)='1\n', 0x2) 2.856866342s ago: executing program 1 (id=1131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000003c0)={"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"}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x5, 0x0, 0x9, 0x0, 0x2, 0xfd, 0x3, 0x7, 0x0, 0x3, 0x1, 0x8, 0x0, 0x7bd, 0x2, 0x22, 0x6, 0x6, 0x2, '\x00', 0x63, 0x3ff}) 2.815046176s ago: executing program 5 (id=1132): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_io_uring_setup(0x48be, &(0x7f0000000080)={0x0, 0xac08, 0x0, 0x3}, 0x0, &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x3100) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001340)='fdinfo/3\x00') pread64(r3, &(0x7f0000001380)=""/265, 0x109, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f00000017c0)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000001800)={{{@in6=@private2, @in=@loopback, 0x4e1f, 0x0, 0x4e20, 0x0, 0x2}, {0xfffffffffffffffd, 0x1, 0x1, 0x0, 0x3, 0x400000000000003}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x0, 0x1}, {{@in=@local, 0x4d4, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x616a45e7, 0xfffffffd}}, 0xe8) connect$inet6(r5, &(0x7f0000001900)={0xa, 0x3, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4622, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) write(r0, &(0x7f0000000040)="3f000200010000", 0x7) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f00000014c0)={0x1, 0x1, @start={0xffffff0a}}) 1.772674041s ago: executing program 3 (id=1133): r0 = socket(0x1e, 0x1, 0x0) write(r0, 0x0, 0x0) 1.702116208s ago: executing program 0 (id=1134): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r1, 0x221, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000110}, 0x20000010) 1.68617857s ago: executing program 5 (id=1135): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f00000004c0)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000540)=@filename='./dev/sda1\x00', &(0x7f00000005c0)='./mnt\x00', &(0x7f0000000600)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000640)='./mnt\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/file2\x00', 0x1000) 1.517076397s ago: executing program 3 (id=1136): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_open_dev$loop(&(0x7f00000002c0), 0x1, 0x40000) openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x83) inotify_init() userfaultfd(0x801) r1 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r3], 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8010) 1.516889137s ago: executing program 0 (id=1137): r0 = socket(0x1e, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000370000000800", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4040000) 1.504316348s ago: executing program 5 (id=1138): socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f0000000780)={0x2e, 0x40, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000740)=@any_dev={0x4, 0x9bb, 0x0, 0x0, 0x1000, 0x90000000, 0x0, 0x0, 0x144}}}, &(0x7f0000000800)=0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe2(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x2000, 0x1, 0xcd}}], 0x1, 0x0, 0x0) 1.48930254s ago: executing program 1 (id=1139): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r3, &(0x7f00000151c0)=""/102392, 0x18ff8) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f000002e1c0)={0x0, 0x0, &(0x7f000002e200)={&(0x7f000002e240)=ANY=[@ANYBLOB="f00000001200"], 0xf0}}, 0x0) 265.050013ms ago: executing program 1 (id=1140): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000bc0), 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000c80)={'\x00', 0x5, 0x4, 0x7, 0x10001, 0x101}) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0x20004090) mknod(0x0, 0x20, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1a5103, 0x0) getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2ac809, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000d40), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) write(r2, &(0x7f0000000d80)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) 172.284913ms ago: executing program 3 (id=1141): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) add_key$fscrypt_v1(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000300), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x840) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xc45, 0x9, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0xc, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 125.053047ms ago: executing program 0 (id=1142): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl(r1, 0x40047438, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x800, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000003c0)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x95a4, 0x8, 0x2000, 0x1000000c, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x40, 0x0, 0x21c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2000, 0x0, 0x3e7, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20, 0x2, 0x3ad}}], 0x1, &(0x7f0000000340)={0x2e, 0x7, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffb, 0x1, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 57.912354ms ago: executing program 5 (id=1143): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/prop1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/rndis.usb0/os_desc/interface.rndis/prop1\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}, 0x80001ff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000bc0)=""/4102, 0x1006}, {&(0x7f0000001c00)=""/219, 0xdb}, {&(0x7f0000001d00)=""/146, 0x92}], 0x3}, 0x19}], 0x3, 0x2000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setns(0xffffffffffffffff, 0x40000000) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x1c1) mount$fuse(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x80, &(0x7f00000008c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x402) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x40000) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008090}, 0xc000) 0s ago: executing program 3 (id=1144): syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) pipe(0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r3, &(0x7f0000000240), 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f00000002c0)='1\n', 0x2) kernel console output (not intermixed with test programs): _se_sys_modify_ldt+0x288/0x320 [ 111.856360][ T4743] do_syscall_64+0x4c/0xa0 [ 111.860978][ T4743] ? clear_bhb_loop+0x60/0xb0 [ 111.865689][ T4743] ? clear_bhb_loop+0x60/0xb0 [ 111.870398][ T4743] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.876314][ T4743] RIP: 0033:0x7fb083f9fb19 [ 111.880765][ T4743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.900396][ T4743] RSP: 002b:00007fb084da5028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 111.908835][ T4743] RAX: ffffffffffffffda RBX: 00007fb084226090 RCX: 00007fb083f9fb19 [ 111.916823][ T4743] RDX: ffffffffffffffd6 RSI: 0000200000001640 RDI: 0000000000000000 [ 111.924809][ T4743] RBP: 00007fb084037b70 R08: 0000000000000000 R09: 0000000000000000 [ 111.932800][ T4743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.940787][ T4743] R13: 00007fb084226128 R14: 00007fb084226090 R15: 00007ffdf1b94688 [ 111.948794][ T4743] [ 113.330384][ T4764] vivid-004: disconnect [ 113.351950][ T4763] vivid-004: reconnect [ 113.649266][ T4774] loop2: detected capacity change from 0 to 8 [ 114.005201][ T4779] SQUASHFS error: Failed to read block 0x4de: -5 [ 114.013603][ T4779] SQUASHFS error: Failed to read block 0x4de: -5 [ 114.021044][ T26] audit: type=1800 audit(1793944529.001:5): pid=4779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.97" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 114.304093][ T4787] loop4: detected capacity change from 0 to 256 [ 114.381857][ T4787] exfat: Deprecated parameter 'utf8' [ 114.411260][ T4789] fuse: Unknown parameter 'fd0x0000000000000003' [ 114.801710][ T4787] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 117.386162][ T4805] TC_ACT_REPEAT abuse ? [ 121.685823][ T4851] loop2: detected capacity change from 0 to 128 [ 121.938453][ T4854] fuse: Unknown parameter 'fd0x0000000000000004' [ 122.101761][ T4858] using random self ethernet address [ 122.149993][ T4858] using random host ethernet address [ 122.203912][ T4860] using random self ethernet address [ 122.273417][ T4860] using random host ethernet address [ 122.324818][ T4865] loop3: detected capacity change from 0 to 256 [ 122.351141][ T4860] fuse: Bad value for 'fd' [ 122.377875][ T4867] vivid-002: disconnect [ 122.382304][ T4865] exfat: Deprecated parameter 'utf8' [ 122.396000][ T4866] vivid-002: reconnect [ 122.500497][ T4865] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 124.058660][ T4883] 9pnet_fd: Insufficient options for proto=fd [ 124.076477][ T4882] TC_ACT_REPEAT abuse ? [ 124.164930][ T4340] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 124.358457][ T4340] usb 3-1: Using ep0 maxpacket: 16 [ 124.393591][ T4340] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.522999][ T4340] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.732901][ T4340] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.894544][ T4340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.022004][ T4340] usb 3-1: Product: syz [ 125.091299][ T4340] usb 3-1: Manufacturer: syz [ 125.168474][ T4340] usb 3-1: SerialNumber: syz [ 125.917725][ T4898] loop1: detected capacity change from 0 to 512 [ 125.949751][ T4898] EXT4-fs: Ignoring removed bh option [ 126.371260][ T4898] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 126.384484][ T4898] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 126.411212][ T4340] usb 3-1: 0:2 : does not exist [ 126.416870][ T4340] usb 3-1: unit 6 not found! [ 126.438742][ T4901] fuse: Unknown parameter 'fd0x0000000000000004' [ 126.494119][ T4898] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.124: invalid indirect mapped block 2048 (level 1) [ 126.519973][ T4898] EXT4-fs (loop1): Remounting filesystem read-only [ 126.527597][ T4898] EXT4-fs (loop1): 1 truncate cleaned up [ 126.534337][ T4898] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 126.671431][ T4909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 126.742201][ T4340] usb 3-1: USB disconnect, device number 2 [ 126.803178][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 126.991651][ T4268] udevd[4268]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.417147][ T4925] FAULT_INJECTION: forcing a failure. [ 128.417147][ T4925] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 128.430613][ T4925] CPU: 0 PID: 4925 Comm: syz.3.120 Not tainted syzkaller #0 [ 128.437919][ T4925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 128.447992][ T4925] Call Trace: [ 128.451288][ T4925] [ 128.454240][ T4925] dump_stack_lvl+0x188/0x24e [ 128.458974][ T4925] ? show_regs_print_info+0x12/0x12 [ 128.464200][ T4925] ? load_image+0x410/0x410 [ 128.468723][ T4925] ? __lock_acquire+0x7ea0/0x7ea0 [ 128.473766][ T4925] ? verify_lock_unused+0x140/0x140 [ 128.478994][ T4925] should_fail_ex+0x390/0x4c0 [ 128.483696][ T4925] prepare_alloc_pages+0x1e1/0x5b0 [ 128.488840][ T4925] __alloc_pages+0x130/0x4f0 [ 128.493455][ T4925] ? lock_chain_count+0x20/0x20 [ 128.498320][ T4925] ? zone_statistics+0x170/0x170 [ 128.503285][ T4925] ? count_memcg_event_mm+0x8a/0x3c0 [ 128.508590][ T4925] ? count_memcg_event_mm+0x36b/0x3c0 [ 128.513974][ T4925] ? __lock_acquire+0x7ea0/0x7ea0 [ 128.519015][ T4925] ? count_memcg_event_mm+0x8a/0x3c0 [ 128.524323][ T4925] ? put_page+0x270/0x270 [ 128.528678][ T4925] __folio_alloc+0xe/0x30 [ 128.533030][ T4925] vma_alloc_folio+0x499/0x900 [ 128.537824][ T4925] handle_mm_fault+0x1fe3/0x3d40 [ 128.542780][ T4925] ? mt_find+0x157/0x830 [ 128.547062][ T4925] ? numa_migrate_prep+0x250/0x250 [ 128.552200][ T4925] ? lock_chain_count+0x20/0x20 [ 128.557084][ T4925] ? lock_mm_and_find_vma+0xae/0x2f0 [ 128.562397][ T4925] do_user_addr_fault+0x5a9/0xbb0 [ 128.567463][ T4925] exc_page_fault+0x60/0x100 [ 128.572081][ T4925] asm_exc_page_fault+0x22/0x30 [ 128.576957][ T4925] RIP: 0010:clear_user_erms+0xa/0x10 [ 128.582270][ T4925] Code: 74 03 f3 48 ab 83 e2 07 74 04 89 d1 f3 aa 31 c0 c3 48 c1 e1 03 83 e2 07 48 01 d1 eb f1 90 90 90 48 83 f9 40 0f 82 76 ff ff ff aa 31 c0 c3 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 20 48 89 [ 128.601895][ T4925] RSP: 0018:ffffc90005a1fec8 EFLAGS: 00050202 [ 128.607984][ T4925] RAX: 0000000000000000 RBX: 0000000000000410 RCX: 000000000000d640 [ 128.615975][ T4925] RDX: 0000000000000001 RSI: ffffffff8aac2e40 RDI: 0000200000004000 [ 128.623968][ T4925] RBP: 00000000fffffff2 R08: ffffffff8f22416f R09: 1ffffffff1e4482d [ 128.631958][ T4925] R10: dffffc0000000000 R11: fffffbfff1e4482e R12: 000000000000fbf0 [ 128.639946][ T4925] R13: ffff88807ba056e8 R14: 0000200000001a50 R15: 0000000000010000 [ 128.648068][ T4925] __se_sys_modify_ldt+0x288/0x320 [ 128.653221][ T4925] do_syscall_64+0x4c/0xa0 [ 128.657936][ T4925] ? clear_bhb_loop+0x60/0xb0 [ 128.662644][ T4925] ? clear_bhb_loop+0x60/0xb0 [ 128.667349][ T4925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.673279][ T4925] RIP: 0033:0x7f418a39fb19 [ 128.677754][ T4925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.697386][ T4925] RSP: 002b:00007f418b180028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 128.705914][ T4925] RAX: ffffffffffffffda RBX: 00007f418a626090 RCX: 00007f418a39fb19 [ 128.713904][ T4925] RDX: ffffffffffffffd6 RSI: 0000200000001640 RDI: 0000000000000000 [ 128.721893][ T4925] RBP: 00007f418a437b70 R08: 0000000000000000 R09: 0000000000000000 [ 128.729966][ T4925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.737951][ T4925] R13: 00007f418a626128 R14: 00007f418a626090 R15: 00007ffc95ac98e8 [ 128.745959][ T4925] [ 130.433829][ T4933] TC_ACT_REPEAT abuse ? [ 130.670451][ T4937] loop2: detected capacity change from 0 to 4096 [ 130.738484][ T4937] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 130.840003][ T4937] capability: warning: `syz.2.135' uses deprecated v2 capabilities in a way that may be insecure [ 131.559686][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 132.457685][ T4949] 9pnet_fd: Insufficient options for proto=fd [ 133.681843][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.688468][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.780013][ T4959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 135.264157][ T4969] loop1: detected capacity change from 0 to 256 [ 135.314690][ T4969] exfat: Deprecated parameter 'utf8' [ 135.342208][ T4971] loop4: detected capacity change from 0 to 128 [ 135.381185][ T4969] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 135.741064][ T4975] TC_ACT_REPEAT abuse ? [ 136.503559][ T4982] 9pnet_fd: Insufficient options for proto=fd [ 138.080544][ T4996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.153'. [ 139.387681][ T5003] loop4: detected capacity change from 0 to 8 [ 139.660736][ T5006] loop2: detected capacity change from 0 to 256 [ 139.677558][ T5006] exfat: Deprecated parameter 'utf8' [ 139.720461][ T5005] SQUASHFS error: Unable to read directory block [631:26] [ 139.729630][ T5005] SQUASHFS error: Failed to read block 0x4de: -5 [ 139.736281][ T5005] SQUASHFS error: Failed to read block 0x4de: -5 [ 139.743099][ T26] audit: type=1800 audit(1793944554.721:6): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.157" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 139.764996][ T5005] SQUASHFS error: Failed to read block 0x4de: -5 [ 139.771865][ T5005] SQUASHFS error: Failed to read block 0x4de: -5 [ 139.778292][ T5005] SQUASHFS error: Failed to read block 0x4de: -5 [ 139.785635][ T5005] SQUASHFS error: Failed to read block 0x4de: -5 [ 139.792139][ T5005] SQUASHFS error: Failed to read block 0x4de: -5 [ 139.798616][ T5005] SQUASHFS error: Failed to read block 0x4de: -5 [ 139.805046][ T5005] SQUASHFS error: Failed to read block 0x4de: -5 [ 139.811549][ T5005] SQUASHFS error: Failed to read block 0x4de: -5 [ 139.817989][ T5005] SQUASHFS error: Failed to read block 0x4de: -5 [ 139.821721][ T4992] loop3: detected capacity change from 0 to 32768 [ 139.824940][ T5005] SQUASHFS error: Failed to read block 0x4de: -5 [ 139.838609][ T5005] SQUASHFS error: Failed to read block 0x4de: -5 [ 139.845089][ T5005] SQUASHFS error: Failed to read block 0x4de: -5 [ 139.851582][ T5005] SQUASHFS error: Failed to read block 0x4de: -5 [ 139.858185][ T5005] SQUASHFS error: Failed to read block 0x4de: -5 [ 139.864826][ T5005] SQUASHFS error: Failed to read block 0x4de: -5 [ 139.871310][ T5005] SQUASHFS error: Failed to read block 0x4de: -5 [ 139.877745][ T5005] SQUASHFS error: Failed to read block 0x4de: -5 [ 139.884223][ T5005] SQUASHFS error: Failed to read block 0x4de: -5 [ 139.890688][ T5005] SQUASHFS error: Failed to read block 0x4de: -5 [ 139.897112][ T5005] SQUASHFS error: Failed to read block 0x4de: -5 [ 139.904350][ T5005] SQUASHFS error: Failed to read block 0x4de: -5 [ 139.910830][ T5005] SQUASHFS error: Failed to read block 0x4de: -5 [ 139.917250][ T5005] SQUASHFS error: Failed to read block 0x4de: -5 [ 139.923730][ T5005] SQUASHFS error: Failed to read block 0x4de: -5 [ 139.930203][ T5005] SQUASHFS error: Failed to read block 0x4de: -5 [ 139.937620][ T5005] SQUASHFS error: Failed to read block 0x4de: -5 [ 139.944123][ T5005] SQUASHFS error: Failed to read block 0x4de: -5 [ 139.950625][ T5005] SQUASHFS error: Failed to read block 0x4de: -5 [ 140.304514][ T5006] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 140.384591][ T4992] XFS (loop3): Mounting V5 Filesystem [ 140.554158][ T4992] XFS (loop3): Ending clean mount [ 140.624910][ T4278] XFS (loop3): Unmounting Filesystem [ 140.660959][ T5027] loop2: detected capacity change from 0 to 128 [ 140.668460][ T4341] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 140.872324][ T4341] usb 2-1: Using ep0 maxpacket: 16 [ 140.881749][ T4341] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.908205][ T4341] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.945379][ T4341] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.987396][ T4341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.006751][ T5029] TC_ACT_REPEAT abuse ? [ 141.009990][ T4341] usb 2-1: Product: syz [ 141.024961][ T4341] usb 2-1: Manufacturer: syz [ 141.035397][ T4341] usb 2-1: SerialNumber: syz [ 142.276670][ T4341] usb 2-1: 0:2 : does not exist [ 142.298486][ T4341] usb 2-1: unit 6 not found! [ 142.337927][ T5023] loop4: detected capacity change from 0 to 32768 [ 142.344623][ T4341] usb 2-1: USB disconnect, device number 2 [ 142.525241][ T5023] XFS (loop4): Mounting V5 Filesystem [ 142.649720][ T4942] udevd[4942]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.136249][ T5023] XFS (loop4): Ending clean mount [ 143.479819][ T4285] XFS (loop4): Unmounting Filesystem [ 143.529126][ T5047] 9pnet_fd: Insufficient options for proto=fd [ 144.755400][ T5052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.167'. [ 152.091128][ T5119] FAULT_INJECTION: forcing a failure. [ 152.091128][ T5119] name failslab, interval 1, probability 0, space 0, times 1 [ 152.157663][ T5119] CPU: 0 PID: 5119 Comm: syz.2.174 Not tainted syzkaller #0 [ 152.165024][ T5119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 152.175103][ T5119] Call Trace: [ 152.178398][ T5119] [ 152.181371][ T5119] dump_stack_lvl+0x188/0x24e [ 152.186089][ T5119] ? show_regs_print_info+0x12/0x12 [ 152.191323][ T5119] ? load_image+0x410/0x410 [ 152.195857][ T5119] ? __might_sleep+0xd0/0xd0 [ 152.200473][ T5119] ? __lock_acquire+0x7ea0/0x7ea0 [ 152.205532][ T5119] should_fail_ex+0x390/0x4c0 [ 152.210242][ T5119] should_failslab+0x5/0x20 [ 152.214765][ T5119] slab_pre_alloc_hook+0x59/0x300 [ 152.219815][ T5119] kmem_cache_alloc+0x56/0x2f0 [ 152.224606][ T5119] ? __alloc_file+0x25/0x230 [ 152.229225][ T5119] __alloc_file+0x25/0x230 [ 152.233678][ T5119] alloc_empty_file+0x90/0x180 [ 152.238492][ T5119] alloc_file+0x5b/0x5f0 [ 152.242765][ T5119] alloc_file_pseudo+0x180/0x200 [ 152.247729][ T5119] ? alloc_empty_file_noaccount+0x80/0x80 [ 152.253484][ T5119] ? alloc_fd+0x590/0x640 [ 152.257846][ T5119] sock_alloc_file+0xb3/0x240 [ 152.262551][ T5119] __sys_socket+0x12d/0x190 [ 152.267093][ T5119] __x64_sys_socket+0x76/0x80 [ 152.271806][ T5119] do_syscall_64+0x4c/0xa0 [ 152.276264][ T5119] ? clear_bhb_loop+0x60/0xb0 [ 152.280984][ T5119] ? clear_bhb_loop+0x60/0xb0 [ 152.285747][ T5119] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.291679][ T5119] RIP: 0033:0x7fe1cc19fb19 [ 152.296129][ T5119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.315768][ T5119] RSP: 002b:00007fe1ccfc9fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 152.324217][ T5119] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fe1cc19fb19 [ 152.332220][ T5119] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001f [ 152.332920][ T5124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.181'. [ 152.340200][ T5119] RBP: 00007fe1cc237b70 R08: 0000000000000000 R09: 0000000000000000 [ 152.340221][ T5119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.340230][ T5119] R13: 00007fe1cc426038 R14: 00007fe1cc425fa0 R15: 00007ffed18c08b8 [ 152.340255][ T5119] [ 152.460502][ T5121] block device autoloading is deprecated and will be removed. [ 152.501907][ T5127] 9pnet_fd: Insufficient options for proto=fd [ 157.107734][ T5163] 9pnet_fd: Insufficient options for proto=fd [ 159.135836][ T5171] TC_ACT_REPEAT abuse ? [ 159.558308][ T5175] vivid-001: disconnect [ 159.593174][ T5174] vivid-001: reconnect [ 159.642250][ T5177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.199'. [ 159.733741][ T5179] loop1: detected capacity change from 0 to 64 [ 160.070229][ T5187] fuse: Unknown parameter 'fd0x0000000000000004' [ 161.280548][ T4388] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 162.011128][ T4388] usb 4-1: Using ep0 maxpacket: 16 [ 162.022613][ T4388] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 162.084373][ T4388] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 162.102404][ T4388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.152008][ T4388] usb 4-1: Product: syz [ 162.186158][ T5200] 9pnet_fd: Insufficient options for proto=fd [ 162.200566][ T4388] usb 4-1: Manufacturer: syz [ 162.226333][ T4388] usb 4-1: SerialNumber: syz [ 162.309547][ T5201] loop2: detected capacity change from 0 to 4096 [ 162.340321][ T4388] usb 4-1: config 0 descriptor?? [ 162.382671][ T5201] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 162.477263][ T4388] hub 4-1:0.0: bad descriptor, ignoring hub [ 162.560496][ T4388] hub: probe of 4-1:0.0 failed with error -5 [ 163.103968][ T4388] usb 4-1: USB disconnect, device number 2 [ 163.236197][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 163.429817][ T5212] udevd[5212]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.478551][ T5225] TC_ACT_REPEAT abuse ? [ 165.759003][ T5227] vivid-003: disconnect [ 165.799234][ T5226] vivid-003: reconnect [ 166.934104][ T5237] fuse: Unknown parameter 'fd0x0000000000000004' [ 167.165907][ T5240] 9pnet_fd: Insufficient options for proto=fd [ 167.538564][ T4341] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 167.612435][ T5245] loop1: detected capacity change from 0 to 4096 [ 167.709526][ T5245] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 167.738628][ T4341] usb 5-1: Using ep0 maxpacket: 8 [ 167.782173][ T4341] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.923497][ T4341] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.103445][ T4341] usb 5-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 168.235820][ T4341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.318649][ T4341] usb 5-1: Product: syz [ 168.322880][ T4341] usb 5-1: Manufacturer: syz [ 168.327499][ T4341] usb 5-1: SerialNumber: syz [ 168.395349][ T5236] loop4: detected capacity change from 0 to 32768 [ 168.431091][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 169.749263][ T4341] usb 5-1: unit 6 not found! [ 169.846418][ T4341] usb 5-1: USB disconnect, device number 2 [ 170.645129][ T5209] udevd[5209]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.827825][ T5263] TC_ACT_REPEAT abuse ? [ 171.019896][ T5267] vivid-000: disconnect [ 171.038911][ T5266] vivid-000: reconnect [ 171.277604][ T5273] fuse: Unknown parameter 'fd0x0000000000000004' [ 171.388245][ T5276] 9pnet_fd: Insufficient options for proto=fd [ 172.388011][ T5265] loop2: detected capacity change from 0 to 40427 [ 172.425177][ T5265] F2FS-fs (loop2): build fault injection attr: rate: 174, type: 0x3ffff [ 172.657994][ T5290] loop3: detected capacity change from 0 to 2048 [ 173.171080][ T5290] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 173.187883][ T5290] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 173.221198][ T5290] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.382053][ T5288] kAFS: unable to lookup cell '.' [ 174.726381][ T5312] TC_ACT_REPEAT abuse ? [ 174.734145][ T5315] vivid-001: disconnect [ 174.742796][ T5314] vivid-001: reconnect [ 175.040979][ T5325] 9pnet_fd: Insufficient options for proto=fd [ 175.121778][ T5329] usb usb6: usbfs: process 5329 (syz.0.251) did not claim interface 0 before use [ 177.310343][ T5349] TC_ACT_REPEAT abuse ? [ 177.325005][ T5350] vivid-004: disconnect [ 177.359349][ T5347] vivid-004: reconnect [ 177.364386][ T5354] loop0: detected capacity change from 0 to 128 [ 177.635462][ T5359] 9pnet_fd: Insufficient options for proto=fd [ 177.779143][ T5360] Zero length message leads to an empty skb [ 177.949117][ T5366] device syzkaller0 entered promiscuous mode [ 179.471380][ T5384] TC_ACT_REPEAT abuse ? [ 179.582122][ T5386] vivid-002: disconnect [ 179.594462][ T5385] vivid-002: reconnect [ 179.819861][ T5390] 9pnet_fd: Insufficient options for proto=fd [ 179.937901][ T5392] loop3: detected capacity change from 0 to 4096 [ 179.967833][ T5392] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 180.691880][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 180.715111][ T5399] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 182.094767][ T5413] loop2: detected capacity change from 0 to 8 [ 182.578888][ T5420] SQUASHFS error: Unable to read directory block [631:26] [ 182.587711][ T5420] SQUASHFS error: Failed to read block 0x4de: -5 [ 182.594474][ T5420] SQUASHFS error: Failed to read block 0x4de: -5 [ 182.603015][ T5420] SQUASHFS error: Failed to read block 0x4de: -5 [ 182.609475][ T5420] SQUASHFS error: Failed to read block 0x4de: -5 [ 182.615880][ T5420] SQUASHFS error: Failed to read block 0x4de: -5 [ 182.623019][ T5420] SQUASHFS error: Failed to read block 0x4de: -5 [ 182.629470][ T5420] SQUASHFS error: Failed to read block 0x4de: -5 [ 182.635869][ T5420] SQUASHFS error: Failed to read block 0x4de: -5 [ 182.642309][ T5420] SQUASHFS error: Failed to read block 0x4de: -5 [ 182.648757][ T5420] SQUASHFS error: Failed to read block 0x4de: -5 [ 182.655253][ T5420] SQUASHFS error: Failed to read block 0x4de: -5 [ 182.662344][ T5420] SQUASHFS error: Failed to read block 0x4de: -5 [ 182.668844][ T5420] SQUASHFS error: Failed to read block 0x4de: -5 [ 182.675310][ T5420] SQUASHFS error: Failed to read block 0x4de: -5 [ 182.681939][ T5420] SQUASHFS error: Failed to read block 0x4de: -5 [ 182.688425][ T5420] SQUASHFS error: Failed to read block 0x4de: -5 [ 182.694904][ T5420] SQUASHFS error: Failed to read block 0x4de: -5 [ 182.701382][ T5420] SQUASHFS error: Failed to read block 0x4de: -5 [ 182.707828][ T5420] SQUASHFS error: Failed to read block 0x4de: -5 [ 182.714388][ T5420] SQUASHFS error: Failed to read block 0x4de: -5 [ 182.720880][ T5420] SQUASHFS error: Failed to read block 0x4de: -5 [ 182.728698][ T5420] SQUASHFS error: Failed to read block 0x4de: -5 [ 182.735195][ T5420] SQUASHFS error: Failed to read block 0x4de: -5 [ 182.741691][ T5420] SQUASHFS error: Failed to read block 0x4de: -5 [ 182.748152][ T5420] SQUASHFS error: Failed to read block 0x4de: -5 [ 182.754636][ T5420] SQUASHFS error: Failed to read block 0x4de: -5 [ 182.761113][ T5420] SQUASHFS error: Failed to read block 0x4de: -5 [ 182.767597][ T5420] SQUASHFS error: Failed to read block 0x4de: -5 [ 182.774077][ T5420] SQUASHFS error: Failed to read block 0x4de: -5 [ 182.780576][ T5420] SQUASHFS error: Failed to read block 0x4de: -5 [ 182.868942][ T26] audit: type=1800 audit(1793944597.581:7): pid=5420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.283" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 183.109404][ T5422] TC_ACT_REPEAT abuse ? [ 183.120363][ T5424] loop2: detected capacity change from 0 to 8 [ 183.182571][ T5426] vivid-000: disconnect [ 183.230442][ T5428] 9pnet_fd: Insufficient options for proto=fd [ 183.268988][ T5425] vivid-000: reconnect [ 183.363892][ T5424] SQUASHFS error: Failed to read block 0x4de: -5 [ 183.370704][ T5424] SQUASHFS error: Failed to read block 0x4de: -5 [ 183.377240][ T26] audit: type=1800 audit(1793944598.351:8): pid=5424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.288" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 183.515230][ T5431] device syzkaller0 entered promiscuous mode [ 184.369726][ T5435] loop1: detected capacity change from 0 to 4096 [ 184.747388][ T5435] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 185.117519][ T5446] loop4: detected capacity change from 0 to 128 [ 186.422259][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 186.462450][ T5454] bridge0: port 3(batadv0) entered blocking state [ 186.524394][ T5454] bridge0: port 3(batadv0) entered disabled state [ 186.670814][ T5454] device batadv0 entered promiscuous mode [ 186.729414][ T5454] bridge0: port 3(batadv0) entered blocking state [ 186.736325][ T5454] bridge0: port 3(batadv0) entered forwarding state [ 186.779311][ T5460] TC_ACT_REPEAT abuse ? [ 186.884327][ T5462] 9pnet_fd: Insufficient options for proto=fd [ 186.959123][ T11] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 186.969009][ T11] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 186.998198][ T5465] loop1: detected capacity change from 0 to 8 [ 187.045443][ T5467] vivid-004: disconnect [ 187.064744][ T5469] device syzkaller0 entered promiscuous mode [ 187.081667][ T5466] vivid-004: reconnect [ 187.247969][ T5465] SQUASHFS error: Failed to read block 0x4de: -5 [ 187.254738][ T5465] SQUASHFS error: Failed to read block 0x4de: -5 [ 187.261397][ T26] audit: type=1800 audit(1793944602.241:9): pid=5465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.302" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 188.102214][ T5481] loop3: detected capacity change from 0 to 8 [ 188.177763][ T5482] loop1: detected capacity change from 0 to 512 [ 188.263535][ T5482] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 188.443117][ T5481] SQUASHFS error: Unable to read directory block [631:26] [ 188.451653][ T5481] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.459174][ T5481] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.465811][ T26] audit: type=1800 audit(1793944603.441:10): pid=5481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.299" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 188.486226][ T5481] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.492702][ T5481] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.499239][ T5481] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.505756][ T5481] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.512243][ T5481] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.518754][ T5481] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.525192][ T5481] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.531735][ T5481] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.538168][ T5481] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.545051][ T5481] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.551481][ T5481] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.557924][ T5481] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.564431][ T5481] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.570920][ T5481] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.577337][ T5481] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.583897][ T5481] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.590344][ T5481] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.596871][ T5481] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.603430][ T5481] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.609951][ T5481] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.616397][ T5481] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.622891][ T5481] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.629353][ T5481] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.635791][ T5481] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.642270][ T5481] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.648724][ T5481] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.655214][ T5481] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.661775][ T5481] SQUASHFS error: Failed to read block 0x4de: -5 [ 189.093331][ T5482] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.308: bad orphan inode 131083 [ 189.147635][ T5482] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 189.901166][ T5482] EXT4-fs error (device loop1): ext4_generic_delete_entry:2731: inode #2: block 13: comm syz.1.308: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 191.118437][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 191.125108][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 191.131359][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 191.137384][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 191.163244][ T5482] EXT4-fs error (device loop1) in ext4_delete_entry:2802: Corrupt filesystem [ 191.173614][ T5482] EXT4-fs warning (device loop1): ext4_rename_delete:3780: inode #2: comm syz.1.308: Deleting old file: nlink 5, error=-117 [ 191.270354][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 191.411745][ T5502] loop2: detected capacity change from 0 to 8 [ 191.467082][ T5503] TC_ACT_REPEAT abuse ? [ 191.686980][ T5502] SQUASHFS error: Failed to read block 0x4de: -5 [ 191.693799][ T5502] SQUASHFS error: Failed to read block 0x4de: -5 [ 191.701528][ T26] audit: type=1800 audit(1793944606.681:11): pid=5502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.315" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 191.966800][ T5508] vivid-002: disconnect [ 191.976295][ T5507] vivid-002: reconnect [ 194.163360][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.169766][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.236347][ T5526] 9pnet_fd: Insufficient options for proto=fd [ 194.507419][ T5535] fuse: Unknown parameter 'group_id00000000000000000000' [ 194.592962][ T5538] TC_ACT_REPEAT abuse ? [ 194.617054][ T5540] loop0: detected capacity change from 0 to 8 [ 194.928195][ T5542] SQUASHFS error: Failed to read block 0x4de: -5 [ 194.936190][ T5542] SQUASHFS error: Failed to read block 0x4de: -5 [ 194.943659][ T26] audit: type=1800 audit(1793944609.921:12): pid=5542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.328" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 196.846564][ T48] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 198.235544][ T5564] loop4: detected capacity change from 0 to 128 [ 198.259965][ T5567] fuse: Unknown parameter 'group_id00000000000000000000' [ 198.406025][ T5564] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 198.770629][ T5579] 9pnet_fd: Insufficient options for proto=fd [ 198.788462][ T4380] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 198.841537][ T5582] TC_ACT_REPEAT abuse ? [ 198.956985][ T5584] capability: warning: `syz.3.343' uses 32-bit capabilities (legacy support in use) [ 198.980219][ T4380] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 768 [ 199.000668][ T4380] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 199.018650][ T4380] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 199.042416][ T4380] usb 2-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 199.055941][ T4380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.064665][ T4380] usb 2-1: Product: syz [ 199.069800][ T4380] usb 2-1: Manufacturer: syz [ 199.074575][ T4380] usb 2-1: SerialNumber: syz [ 199.088770][ T5574] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 199.117796][ T4380] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 199.214003][ T5590] loop3: detected capacity change from 0 to 8 [ 199.266918][ T5590] SQUASHFS error: Unable to read directory block [629:fe] [ 199.306949][ T5590] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 199.345395][ T4380] usb 2-1: USB disconnect, device number 3 [ 199.508485][ T5600] fuse: Unknown parameter 'group_id00000000000000000000' [ 199.650543][ T5604] 9pnet_fd: Insufficient options for proto=fd [ 199.812190][ T5605] loop3: detected capacity change from 0 to 2048 [ 199.933282][ T5605] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 199.945826][ T5605] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 199.964163][ T5605] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.423077][ T5607] TC_ACT_REPEAT abuse ? [ 200.669600][ T5620] loop3: detected capacity change from 0 to 8 [ 200.693038][ T5619] device syzkaller0 entered promiscuous mode [ 200.722509][ T5620] ======================================================= [ 200.722509][ T5620] WARNING: The mand mount option has been deprecated and [ 200.722509][ T5620] and is ignored by this kernel. Remove the mand [ 200.722509][ T5620] option from the mount to silence this warning. [ 200.722509][ T5620] ======================================================= [ 200.811684][ T5620] SQUASHFS error: Failed to read block 0xdfa: -5 [ 200.828727][ T5620] SQUASHFS error: Unable to read metadata cache entry [dfa] [ 200.850898][ T5620] SQUASHFS error: Failed to read block 0x4e8: -5 [ 200.864929][ T5620] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 200.883638][ T5620] SQUASHFS error: Failed to read block 0x4de: -5 [ 200.897889][ T5620] SQUASHFS error: Failed to read block 0x4de: -5 [ 200.913391][ T5620] SQUASHFS error: Failed to read block 0x4de: -5 [ 200.927937][ T5620] SQUASHFS error: Failed to read block 0x4de: -5 [ 200.945026][ T5620] SQUASHFS error: Failed to read block 0x4de: -5 [ 200.977649][ T5620] SQUASHFS error: Failed to read block 0x4de: -5 [ 201.007314][ T5620] SQUASHFS error: Failed to read block 0x4e8: -5 [ 201.037486][ T26] audit: type=1800 audit(1793944616.011:13): pid=5620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.358" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 201.884961][ T5636] loop3: detected capacity change from 0 to 512 [ 201.932589][ T5636] EXT4-fs: Ignoring removed nobh option [ 201.977141][ T5645] fuse: Bad value for 'user_id' [ 202.014607][ T5638] 9pnet_fd: Insufficient options for proto=fd [ 202.044154][ T5636] EXT4-fs (loop3): 1 truncate cleaned up [ 202.196306][ T5636] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 202.528122][ T5652] TC_ACT_REPEAT abuse ? [ 202.922335][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 204.170885][ T5686] loop4: detected capacity change from 0 to 8 [ 204.287247][ T5690] fuse: Bad value for 'user_id' [ 204.382932][ T5695] SQUASHFS error: Unable to read directory block [631:26] [ 204.396074][ T5695] SQUASHFS error: Failed to read block 0x4de: -5 [ 204.412433][ T5695] SQUASHFS error: Failed to read block 0x4de: -5 [ 204.423056][ T5695] SQUASHFS error: Failed to read block 0x4de: -5 [ 204.429945][ T5695] SQUASHFS error: Failed to read block 0x4de: -5 [ 204.437615][ T5695] SQUASHFS error: Failed to read block 0x4de: -5 [ 204.444423][ T5695] SQUASHFS error: Failed to read block 0x4de: -5 [ 204.451194][ T5695] SQUASHFS error: Failed to read block 0x4de: -5 [ 204.457900][ T5695] SQUASHFS error: Failed to read block 0x4de: -5 [ 204.464768][ T5695] SQUASHFS error: Failed to read block 0x4de: -5 [ 204.471723][ T5695] SQUASHFS error: Failed to read block 0x4de: -5 [ 204.478653][ T5695] SQUASHFS error: Failed to read block 0x4de: -5 [ 204.488365][ T5695] SQUASHFS error: Failed to read block 0x4de: -5 [ 204.495287][ T5695] SQUASHFS error: Failed to read block 0x4de: -5 [ 204.502094][ T5695] SQUASHFS error: Failed to read block 0x4de: -5 [ 204.508999][ T5695] SQUASHFS error: Failed to read block 0x4de: -5 [ 204.515779][ T5695] SQUASHFS error: Failed to read block 0x4de: -5 [ 204.522653][ T5695] SQUASHFS error: Failed to read block 0x4de: -5 [ 204.529401][ T5695] SQUASHFS error: Failed to read block 0x4de: -5 [ 204.536290][ T5695] SQUASHFS error: Failed to read block 0x4de: -5 [ 204.543089][ T5695] SQUASHFS error: Failed to read block 0x4de: -5 [ 204.550033][ T5695] SQUASHFS error: Failed to read block 0x4de: -5 [ 204.556744][ T5695] SQUASHFS error: Failed to read block 0x4de: -5 [ 204.563648][ T5695] SQUASHFS error: Failed to read block 0x4de: -5 [ 204.570422][ T5695] SQUASHFS error: Failed to read block 0x4de: -5 [ 204.579517][ T5695] SQUASHFS error: Failed to read block 0x4de: -5 [ 204.586305][ T5695] SQUASHFS error: Failed to read block 0x4de: -5 [ 204.593092][ T5695] SQUASHFS error: Failed to read block 0x4de: -5 [ 204.599886][ T5695] SQUASHFS error: Failed to read block 0x4de: -5 [ 204.606642][ T5695] SQUASHFS error: Failed to read block 0x4de: -5 [ 204.613401][ T5695] SQUASHFS error: Failed to read block 0x4de: -5 [ 205.018296][ T26] audit: type=1800 audit(1793944619.401:14): pid=5695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.378" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 205.090291][ T5694] 9pnet_fd: Insufficient options for proto=fd [ 205.338481][ T4336] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 205.364250][ T5701] TC_ACT_REPEAT abuse ? [ 205.474817][ T5709] netlink: 100 bytes leftover after parsing attributes in process `syz.0.383'. [ 205.528580][ T4336] usb 4-1: Using ep0 maxpacket: 8 [ 205.538613][ T4336] usb 4-1: unable to get BOS descriptor or descriptor too short [ 205.546908][ T5709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.383'. [ 205.560717][ T4336] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 205.580543][ T4336] usb 4-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 205.607771][ T4336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.632931][ T4336] usb 4-1: Product: syz [ 205.642957][ T4336] usb 4-1: Manufacturer: syz [ 205.652072][ T4336] usb 4-1: SerialNumber: syz [ 207.249265][ T4336] usb 4-1: USB disconnect, device number 3 [ 208.524581][ T5210] udevd[5210]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.614163][ T5731] fuse: Bad value for 'user_id' [ 208.899519][ T5740] TC_ACT_REPEAT abuse ? [ 209.787639][ T5750] netlink: 100 bytes leftover after parsing attributes in process `syz.3.399'. [ 209.813145][ T5750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'. [ 210.687598][ T5774] loop1: detected capacity change from 0 to 8192 [ 210.735168][ T5780] fuse: Bad value for 'fd' [ 212.093974][ T5783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.404'. [ 212.971733][ T5818] netlink: 100 bytes leftover after parsing attributes in process `syz.1.415'. [ 213.008500][ T5818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'. [ 213.158867][ T5824] fuse: Bad value for 'fd' [ 213.899004][ T5841] loop0: detected capacity change from 0 to 128 [ 216.418246][ T5862] fuse: Bad value for 'fd' [ 216.747458][ T5870] netlink: 100 bytes leftover after parsing attributes in process `syz.3.430'. [ 216.762609][ T5869] fuse: Bad value for 'fd' [ 216.825701][ T5870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.430'. [ 217.941221][ T5873] netlink: 16 bytes leftover after parsing attributes in process `syz.1.426'. [ 220.936318][ T4516] bond0: (slave bond_slave_0): interface is now down [ 220.990523][ T4516] bond0: (slave bond_slave_1): interface is now down [ 221.085020][ T4516] bond0: now running without any active interface! [ 221.193258][ T5909] fuse: Bad value for 'fd' [ 223.229844][ T5931] loop2: detected capacity change from 0 to 4096 [ 224.455665][ T5931] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 224.794115][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 225.587668][ T5948] fuse: Bad value for 'fd' [ 226.785180][ T26] audit: type=1400 audit(1793944641.121:15): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="p" pid=5949 comm="syz.1.457" name="p" offset=33 [ 226.851407][ T5952] TC_ACT_REPEAT abuse ? [ 230.597728][ T26] audit: type=1400 audit(1793944644.941:16): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=5994 comm="syz.0.469" name="unknown" offset=16 [ 232.557198][ T6011] loop4: detected capacity change from 0 to 128 [ 236.358433][ T26] audit: type=1400 audit(1793944650.701:17): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=6031 comm="syz.3.482" name="unknown" offset=16 [ 237.004931][ T6047] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[6048] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[6047] [ 240.732074][ T6076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.495'. [ 240.850208][ T6076] netlink: 20 bytes leftover after parsing attributes in process `syz.3.495'. [ 240.998208][ T6076] netlink: 20 bytes leftover after parsing attributes in process `syz.3.495'. [ 243.816739][ T26] audit: type=1400 audit(1793944658.141:18): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=6084 comm="syz.3.497" name="unknown" offset=16 [ 244.356109][ T6089] xt_CT: You must specify a L4 protocol and not use inversions on it [ 244.963204][ T6088] nvmet: adding nsid 1 to subsystem testsubsys [ 245.058517][ T26] audit: type=1800 audit(1793944659.611:19): pid=6089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.488" name="attr_allow_any_host" dev="configfs" ino=37812 res=0 errno=0 [ 245.161967][ T6092] TC_ACT_REPEAT abuse ? [ 245.539536][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.494'. [ 246.573940][ T6104] Bluetooth: MGMT ver 1.22 [ 246.879243][ T6113] loop3: detected capacity change from 0 to 4096 [ 248.095312][ T6113] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 249.548073][ T26] audit: type=1400 audit(1793944663.871:20): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=6124 comm="syz.4.510" name="unknown" offset=28 [ 249.584679][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 252.249138][ T6148] 9pnet_fd: Insufficient options for proto=fd [ 252.316186][ T6150] loop0: detected capacity change from 0 to 512 [ 252.435257][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.521'. [ 253.644184][ T26] audit: type=1400 audit(1793944667.951:21): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=6153 comm="syz.1.522" name="unknown" offset=28 [ 253.723440][ T6159] loop0: detected capacity change from 0 to 128 [ 253.775862][ T6160] TC_ACT_REPEAT abuse ? [ 255.907170][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.913577][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.177046][ T6181] 9pnet_fd: Insufficient options for proto=fd [ 259.095201][ T26] audit: type=1400 audit(1793944673.451:22): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=6192 comm="syz.4.534" name="unknown" offset=28 [ 260.454662][ T6201] TC_ACT_REPEAT abuse ? [ 261.026083][ T6208] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(14) [ 261.681788][ T6211] loop1: detected capacity change from 0 to 128 [ 263.281976][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 263.463192][ T6225] 9pnet_fd: Insufficient options for proto=fd [ 264.809584][ T26] audit: type=1400 audit(1793944679.131:23): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="p" pid=6229 comm="syz.4.546" name="p" offset=33 [ 264.848812][ T6228] usb usb1: usbfs: process 6228 (syz.3.545) did not claim interface 0 before use [ 265.985788][ T6242] loop1: detected capacity change from 0 to 8 [ 266.279463][ T6245] loop0: detected capacity change from 0 to 2048 [ 266.370880][ T6246] TC_ACT_REPEAT abuse ? [ 266.401037][ T6248] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 266.434813][ T6250] SQUASHFS error: Unable to read directory block [631:26] [ 266.449975][ T6250] SQUASHFS error: Failed to read block 0x4de: -5 [ 266.456710][ T6250] SQUASHFS error: Failed to read block 0x4de: -5 [ 266.464013][ T26] audit: type=1800 audit(1793944681.441:24): pid=6250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.549" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 266.466188][ T6250] SQUASHFS error: Failed to read block 0x4de: -5 [ 266.490581][ T6250] SQUASHFS error: Failed to read block 0x4de: -5 [ 266.497040][ T6250] SQUASHFS error: Failed to read block 0x4de: -5 [ 266.503638][ T6250] SQUASHFS error: Failed to read block 0x4de: -5 [ 266.510107][ T6250] SQUASHFS error: Failed to read block 0x4de: -5 [ 266.516518][ T6250] SQUASHFS error: Failed to read block 0x4de: -5 [ 266.522981][ T6250] SQUASHFS error: Failed to read block 0x4de: -5 [ 266.529507][ T6250] SQUASHFS error: Failed to read block 0x4de: -5 [ 266.535920][ T6250] SQUASHFS error: Failed to read block 0x4de: -5 [ 266.542865][ T6250] SQUASHFS error: Failed to read block 0x4de: -5 [ 266.549350][ T6250] SQUASHFS error: Failed to read block 0x4de: -5 [ 266.555763][ T6250] SQUASHFS error: Failed to read block 0x4de: -5 [ 266.562326][ T6250] SQUASHFS error: Failed to read block 0x4de: -5 [ 266.568826][ T6250] SQUASHFS error: Failed to read block 0x4de: -5 [ 266.575243][ T6250] SQUASHFS error: Failed to read block 0x4de: -5 [ 266.581693][ T6250] SQUASHFS error: Failed to read block 0x4de: -5 [ 266.588099][ T6250] SQUASHFS error: Failed to read block 0x4de: -5 [ 266.595252][ T6250] SQUASHFS error: Failed to read block 0x4de: -5 [ 266.601723][ T6250] SQUASHFS error: Failed to read block 0x4de: -5 [ 266.608157][ T6250] SQUASHFS error: Failed to read block 0x4de: -5 [ 266.614650][ T6250] SQUASHFS error: Failed to read block 0x4de: -5 [ 266.621103][ T6250] SQUASHFS error: Failed to read block 0x4de: -5 [ 266.627523][ T6250] SQUASHFS error: Failed to read block 0x4de: -5 [ 266.633974][ T6250] SQUASHFS error: Failed to read block 0x4de: -5 [ 266.640485][ T6250] SQUASHFS error: Failed to read block 0x4de: -5 [ 266.646888][ T6250] SQUASHFS error: Failed to read block 0x4de: -5 [ 266.653373][ T6250] SQUASHFS error: Failed to read block 0x4de: -5 [ 266.659842][ T6250] SQUASHFS error: Failed to read block 0x4de: -5 [ 267.021480][ T6248] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 267.088450][ T6248] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 267.104889][ T6248] Remounting filesystem read-only [ 267.154867][ T6256] loop4: detected capacity change from 0 to 8 [ 267.241101][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.554'. [ 268.464986][ T6265] 9pnet_fd: Insufficient options for proto=fd [ 268.587402][ T6267] FAULT_INJECTION: forcing a failure. [ 268.587402][ T6267] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 268.611328][ T6267] CPU: 0 PID: 6267 Comm: syz.2.556 Not tainted syzkaller #0 [ 268.618672][ T6267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 268.628746][ T6267] Call Trace: [ 268.632035][ T6267] [ 268.634976][ T6267] dump_stack_lvl+0x188/0x24e [ 268.639688][ T6267] ? show_regs_print_info+0x12/0x12 [ 268.644907][ T6267] ? load_image+0x410/0x410 [ 268.649438][ T6267] ? __lock_acquire+0x7ea0/0x7ea0 [ 268.654493][ T6267] ? __kasan_slab_alloc+0x6b/0x80 [ 268.659545][ T6267] should_fail_ex+0x390/0x4c0 [ 268.664246][ T6267] strncpy_from_user+0x32/0x340 [ 268.669118][ T6267] getname_flags+0xf2/0x500 [ 268.673646][ T6267] do_sys_openat2+0xdd/0x4f0 [ 268.678267][ T6267] ? do_sys_open+0xe0/0xe0 [ 268.682702][ T6267] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 268.688709][ T6267] ? lock_chain_count+0x20/0x20 [ 268.693587][ T6267] __x64_sys_openat+0x135/0x160 [ 268.698470][ T6267] do_syscall_64+0x4c/0xa0 [ 268.702915][ T6267] ? clear_bhb_loop+0x60/0xb0 [ 268.707610][ T6267] ? clear_bhb_loop+0x60/0xb0 [ 268.712400][ T6267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 268.718318][ T6267] RIP: 0033:0x7fe1cc16034e [ 268.722745][ T6267] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 268.742373][ T6267] RSP: 002b:00007fe1ccfc9d58 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 268.750817][ T6267] RAX: ffffffffffffffda RBX: 00007fe1ccfca6c0 RCX: 00007fe1cc16034e [ 268.758807][ T6267] RDX: 0000000000000002 RSI: 00007fe1ccfc9ea0 RDI: ffffffffffffff9c [ 268.766801][ T6267] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 268.774789][ T6267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 268.782784][ T6267] R13: 00007fe1ccfc9ee0 R14: 00007fe1ccfc9ea0 R15: 00007fe1c1ff7000 [ 268.790798][ T6267] [ 268.918815][ T6274] SQUASHFS error: Failed to read block 0x4de: -5 [ 268.924310][ T6267] loop2: detected capacity change from 0 to 164 [ 268.925443][ T6274] SQUASHFS error: Failed to read block 0x4de: -5 [ 268.939906][ T26] audit: type=1800 audit(1793944683.911:25): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.547" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 269.725055][ T26] audit: type=1400 audit(1793944684.071:26): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="p" pid=6268 comm="syz.3.557" name="p" offset=33 [ 271.410347][ T6291] netlink: 'syz.4.564': attribute type 4 has an invalid length. [ 271.563427][ T6294] TC_ACT_REPEAT abuse ? [ 271.716054][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.566'. [ 273.017514][ T6305] 9pnet_fd: Insufficient options for proto=fd [ 277.676369][ T26] audit: type=1400 audit(1793944691.981:27): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="p" pid=6339 comm="syz.0.569" name="p" offset=33 [ 277.862368][ T6346] TC_ACT_REPEAT abuse ? [ 278.875886][ T6354] loop4: detected capacity change from 0 to 128 [ 282.167698][ T6379] null_blk: disk nullb1 created [ 284.848368][ T26] audit: type=1400 audit(1793944699.161:28): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="p" pid=6395 comm="syz.4.586" name="p" offset=33 [ 285.214257][ T6407] TC_ACT_REPEAT abuse ? [ 285.274935][ T6409] 9pnet_fd: Insufficient options for proto=fd [ 289.580287][ T6429] loop4: detected capacity change from 0 to 128 [ 289.831219][ T6438] binder: 6437:6438 ioctl 400c620e 200000000ac0 returned -22 M) ./dev ./dev/console[ 290.125953][ T6445] 9pnet_fd: Insufficient options for proto=fd [ 291.396891][ T6452] process 'syz.3.604' launched './file0' with NULL argv: empty string added [ 291.450878][ T6452] Invalid argument reading file caps for ./file0 [ 291.461280][ T6455] netlink: 'syz.2.605': attribute type 4 has an invalid length. [ 291.539356][ T6457] TC_ACT_REPEAT abuse ? [ 291.787210][ T6465] loop3: detected capacity change from 0 to 128 [ 293.215319][ T6491] loop1: detected capacity change from 0 to 4096 [ 293.396001][ T6491] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 293.418557][ T41] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 293.658544][ T41] usb 4-1: Using ep0 maxpacket: 16 [ 293.668112][ T41] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.904282][ T41] usb 4-1: config 0 interface 0 has no altsetting 0 [ 294.925954][ T41] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 294.931608][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 295.661818][ T41] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.794122][ T41] usb 4-1: config 0 descriptor?? [ 295.851770][ T6505] 9pnet_fd: Insufficient options for proto=fd [ 296.190298][ T6513] TC_ACT_REPEAT abuse ? [ 296.241528][ T41] uclogic 0003:5543:0064.0001: collection stack underflow [ 296.264683][ T41] uclogic 0003:5543:0064.0001: item 0 0 0 12 parsing failed [ 296.279141][ T41] uclogic 0003:5543:0064.0001: parse failed [ 296.305271][ T41] uclogic: probe of 0003:5543:0064.0001 failed with error -22 [ 296.433012][ T7] usb 4-1: USB disconnect, device number 4 [ 296.614236][ T6525] loop1: detected capacity change from 0 to 128 [ 296.829679][ T6531] FAULT_INJECTION: forcing a failure. [ 296.829679][ T6531] name failslab, interval 1, probability 0, space 0, times 0 [ 296.862567][ T6531] CPU: 1 PID: 6531 Comm: syz.4.628 Not tainted syzkaller #0 [ 296.869932][ T6531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 296.880011][ T6531] Call Trace: [ 296.883313][ T6531] [ 296.886257][ T6531] dump_stack_lvl+0x188/0x24e [ 296.890974][ T6531] ? show_regs_print_info+0x12/0x12 [ 296.896207][ T6531] ? load_image+0x410/0x410 [ 296.900739][ T6531] ? __might_sleep+0xd0/0xd0 [ 296.905359][ T6531] ? __lock_acquire+0x7ea0/0x7ea0 [ 296.910416][ T6531] should_fail_ex+0x390/0x4c0 [ 296.915127][ T6531] should_failslab+0x5/0x20 [ 296.919656][ T6531] slab_pre_alloc_hook+0x59/0x300 [ 296.924697][ T6531] ? asymmetric_key_generate_id+0x52/0xd0 [ 296.930423][ T6531] __kmem_cache_alloc_node+0x4f/0x270 [ 296.935892][ T6531] ? asymmetric_key_generate_id+0x52/0xd0 [ 296.941612][ T6531] __kmalloc+0xa3/0x240 [ 296.945765][ T6531] ? x509_fabricate_name+0x574/0x950 [ 296.951050][ T6531] asymmetric_key_generate_id+0x52/0xd0 [ 296.956595][ T6531] x509_process_extension+0x1d6/0x3a0 [ 296.961970][ T6531] asn1_ber_decoder+0x9c2/0x21b0 [ 296.966901][ T6531] ? __se_sys_add_key+0x34b/0x410 [ 296.971947][ T6531] ? ref_tracker_free+0x830/0x830 [ 296.976988][ T6531] x509_cert_parse+0x1ae/0x7a0 [ 296.982126][ T6531] x509_key_preparse+0x60/0x660 [ 296.986994][ T6531] ? down_read+0x1a8/0x2d0 [ 296.991435][ T6531] asymmetric_key_preparse+0xa5/0x140 [ 296.996811][ T6531] key_create_or_update+0x405/0xa50 [ 297.002023][ T6531] ? key_type_put+0x20/0x20 [ 297.006542][ T6531] ? __might_fault+0xc2/0x120 [ 297.011228][ T6531] ? __might_fault+0xa6/0x120 [ 297.015907][ T6531] __se_sys_add_key+0x34b/0x410 [ 297.020783][ T6531] ? __x64_sys_add_key+0xc0/0xc0 [ 297.025729][ T6531] ? lockdep_hardirqs_on+0x94/0x140 [ 297.030945][ T6531] ? __x64_sys_add_key+0x1c/0xc0 [ 297.035888][ T6531] do_syscall_64+0x4c/0xa0 [ 297.040328][ T6531] ? clear_bhb_loop+0x60/0xb0 [ 297.045028][ T6531] ? clear_bhb_loop+0x60/0xb0 [ 297.049712][ T6531] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 297.055613][ T6531] RIP: 0033:0x7fd53d99fb19 [ 297.060024][ T6531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.079637][ T6531] RSP: 002b:00007fd53e816028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 297.088051][ T6531] RAX: ffffffffffffffda RBX: 00007fd53dc26090 RCX: 00007fd53d99fb19 [ 297.096019][ T6531] RDX: 0000200000000340 RSI: 0000000000000000 RDI: 0000200000000200 [ 297.103992][ T6531] RBP: 00007fd53da37b70 R08: ffffffffffffffff R09: 0000000000000000 [ 297.111989][ T6531] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 297.119978][ T6531] R13: 00007fd53dc26128 R14: 00007fd53dc26090 R15: 00007fffdcf63ac8 [ 297.127964][ T6531] [ 297.468587][ T6530] syz.4.628 (6530) used greatest stack depth: 18096 bytes left [ 297.882857][ T6542] loop0: detected capacity change from 0 to 4096 [ 297.993664][ T6542] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 299.253944][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 299.427491][ T6567] TC_ACT_REPEAT abuse ? [ 299.504120][ T6569] overlayfs: unrecognized mount option "fscontext=system_u" or missing value [ 299.796729][ T6577] loop2: detected capacity change from 0 to 128 [ 300.098422][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 300.291349][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.308818][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.336405][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 300.368441][ T7] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 300.377602][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.409142][ T7] usb 1-1: config 0 descriptor?? [ 300.529725][ T6601] loop1: detected capacity change from 0 to 8 [ 300.811990][ T6584] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 300.833295][ T7] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 300.876931][ T6584] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 300.885737][ T6604] loop2: detected capacity change from 0 to 4096 [ 300.988016][ T6604] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 301.256141][ T6584] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 301.329629][ T6584] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 301.472683][ T6584] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 301.541518][ T7] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 301.549157][ T7] plantronics 0003:047F:FFFF.0002: item 0 1 0 9 parsing failed [ 301.557352][ T7] plantronics 0003:047F:FFFF.0002: parse failed [ 301.563723][ T7] plantronics: probe of 0003:047F:FFFF.0002 failed with error -22 [ 301.580698][ T7] usb 1-1: USB disconnect, device number 3 [ 301.585511][ T6584] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 301.645502][ T6584] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 301.680073][ T6584] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 301.697025][ T6584] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 301.713581][ T6584] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 301.749561][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 302.429347][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 303.278459][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 303.528403][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 303.678599][ T4290] Bluetooth: hci3: command 0x0c1a tx timeout [ 303.758458][ T4290] Bluetooth: hci4: command 0x0c1a tx timeout [ 304.210170][ T6626] SQUASHFS error: Failed to read block 0x4de: -5 [ 304.216879][ T6626] SQUASHFS error: Failed to read block 0x4de: -5 [ 304.391448][ T26] audit: type=1800 audit(1793944719.371:29): pid=6626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.645" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 304.428982][ T6631] loop2: detected capacity change from 0 to 128 [ 304.478442][ T4290] Bluetooth: hci0: command 0x0406 tx timeout [ 305.358738][ T4290] Bluetooth: hci1: command 0x0406 tx timeout [ 305.497622][ T6648] loop2: detected capacity change from 0 to 4096 [ 305.598487][ T4290] Bluetooth: hci2: command 0x0406 tx timeout [ 305.618475][ T6648] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 305.758473][ T4290] Bluetooth: hci3: command 0x0406 tx timeout [ 305.838424][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 306.114756][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 307.537329][ T6674] loop1: detected capacity change from 0 to 128 [ 307.624453][ T6675] FAULT_INJECTION: forcing a failure. [ 307.624453][ T6675] name failslab, interval 1, probability 0, space 0, times 0 [ 307.658454][ T6675] CPU: 1 PID: 6675 Comm: syz.2.666 Not tainted syzkaller #0 [ 307.665802][ T6675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 307.675874][ T6675] Call Trace: [ 307.679165][ T6675] [ 307.682105][ T6675] dump_stack_lvl+0x188/0x24e [ 307.686810][ T6675] ? show_regs_print_info+0x12/0x12 [ 307.692058][ T6675] ? load_image+0x410/0x410 [ 307.696584][ T6675] ? __might_sleep+0xd0/0xd0 [ 307.701190][ T6675] ? __lock_acquire+0x7ea0/0x7ea0 [ 307.706241][ T6675] should_fail_ex+0x390/0x4c0 [ 307.710943][ T6675] should_failslab+0x5/0x20 [ 307.715467][ T6675] slab_pre_alloc_hook+0x59/0x300 [ 307.720511][ T6675] ? is_bpf_text_address+0x22/0x2a0 [ 307.725734][ T6675] kmem_cache_alloc+0x56/0x2f0 [ 307.730517][ T6675] ? __alloc_file+0x25/0x230 [ 307.735135][ T6675] __alloc_file+0x25/0x230 [ 307.739567][ T6675] alloc_empty_file+0x90/0x180 [ 307.744342][ T6675] path_openat+0x11c/0x2f10 [ 307.748878][ T6675] ? kasan_set_track+0x60/0x70 [ 307.753663][ T6675] ? verify_lock_unused+0x140/0x140 [ 307.758879][ T6675] ? do_sys_openat2+0xdd/0x4f0 [ 307.763657][ T6675] ? __x64_sys_openat+0x135/0x160 [ 307.768698][ T6675] ? do_syscall_64+0x4c/0xa0 [ 307.773298][ T6675] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.779386][ T6675] ? do_filp_open+0x420/0x420 [ 307.784098][ T6675] do_filp_open+0x1ee/0x420 [ 307.788624][ T6675] ? vfs_tmpfile+0x490/0x490 [ 307.793254][ T6675] ? _raw_spin_unlock+0x24/0x40 [ 307.798127][ T6675] ? alloc_fd+0x590/0x640 [ 307.802483][ T6675] do_sys_openat2+0x14b/0x4f0 [ 307.807188][ T6675] ? do_sys_open+0xe0/0xe0 [ 307.811624][ T6675] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 307.817898][ T6675] ? lock_chain_count+0x20/0x20 [ 307.822771][ T6675] __x64_sys_openat+0x135/0x160 [ 307.827649][ T6675] do_syscall_64+0x4c/0xa0 [ 307.832090][ T6675] ? clear_bhb_loop+0x60/0xb0 [ 307.836789][ T6675] ? clear_bhb_loop+0x60/0xb0 [ 307.841512][ T6675] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.847433][ T6675] RIP: 0033:0x7fe1cc16034e [ 307.851864][ T6675] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 307.871494][ T6675] RSP: 002b:00007fe1ccfc9d58 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 307.879937][ T6675] RAX: ffffffffffffffda RBX: 00007fe1ccfca6c0 RCX: 00007fe1cc16034e [ 307.887932][ T6675] RDX: 0000000000000002 RSI: 00007fe1ccfc9ea0 RDI: ffffffffffffff9c [ 307.895926][ T6675] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 307.903914][ T6675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 307.911899][ T6675] R13: 00007fe1ccfc9ee0 R14: 00007fe1ccfc9ea0 R15: 00007fe1c1ff7000 [ 307.919911][ T6675] [ 308.311428][ T6675] loop2: detected capacity change from 0 to 164 [ 310.129417][ T6710] loop0: detected capacity change from 0 to 2048 [ 311.200382][ T6710] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 311.286773][ T6710] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 311.301221][ T6710] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 311.460805][ T6704] kAFS: unable to lookup cell '.' [ 311.765014][ T6717] loop0: detected capacity change from 0 to 8 [ 312.325347][ T6732] loop3: detected capacity change from 0 to 128 [ 312.515711][ T6737] loop2: detected capacity change from 0 to 128 [ 312.928476][ T6743] SQUASHFS error: Failed to read block 0x4de: -5 [ 313.228995][ T6743] SQUASHFS error: Failed to read block 0x4de: -5 [ 313.318541][ T26] audit: type=1800 audit(1793944728.281:30): pid=6743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.676" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 314.885171][ T6776] loop2: detected capacity change from 0 to 2048 [ 315.952166][ T6776] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 315.962884][ T6776] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 316.034954][ T6776] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 316.680090][ T6780] loop2: detected capacity change from 0 to 4096 [ 316.758437][ T6780] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 317.052121][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.058619][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.453628][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 318.048950][ T6807] loop0: detected capacity change from 0 to 128 [ 318.159689][ T6807] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 321.161333][ T6830] loop1: detected capacity change from 0 to 4096 [ 321.910717][ T6830] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 322.975700][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 322.986936][ T6842] loop2: detected capacity change from 0 to 128 [ 323.090225][ T6434] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 323.269215][ T6847] device-mapper: ioctl: Unable to rename non-existent device, syzd1 to uuid LVM-syzd3 [ 323.310537][ T6850] loop1: detected capacity change from 0 to 8 [ 324.024669][ T6857] SQUASHFS error: Failed to read block 0x4de: -5 [ 324.031506][ T6857] SQUASHFS error: Failed to read block 0x4de: -5 [ 324.039063][ T26] audit: type=1800 audit(1793944739.021:31): pid=6857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.705" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 325.544677][ T5249] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.574355][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 325.606341][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 325.692070][ T5249] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.723852][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 325.742236][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 325.755984][ T50] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 325.768147][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 326.523931][ T5249] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.642878][ T6868] rxe_eth0 speed is unknown, defaulting to 1000 [ 326.664881][ T6882] FAULT_INJECTION: forcing a failure. [ 326.664881][ T6882] name failslab, interval 1, probability 0, space 0, times 0 [ 326.770389][ T5249] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.883759][ T6882] CPU: 0 PID: 6882 Comm: syz.3.717 Not tainted syzkaller #0 [ 326.891107][ T6882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 326.901179][ T6882] Call Trace: [ 326.904485][ T6882] [ 326.907431][ T6882] dump_stack_lvl+0x188/0x24e [ 326.912139][ T6882] ? show_regs_print_info+0x12/0x12 [ 326.917367][ T6882] ? load_image+0x410/0x410 [ 326.921892][ T6882] ? __might_sleep+0xd0/0xd0 [ 326.926497][ T6882] ? __lock_acquire+0x7ea0/0x7ea0 [ 326.931558][ T6882] should_fail_ex+0x390/0x4c0 [ 326.936271][ T6882] should_failslab+0x5/0x20 [ 326.940796][ T6882] slab_pre_alloc_hook+0x59/0x300 [ 326.945837][ T6882] ? is_bpf_text_address+0x22/0x2a0 [ 326.951058][ T6882] kmem_cache_alloc+0x56/0x2f0 [ 326.955837][ T6882] ? __alloc_file+0x25/0x230 [ 326.960450][ T6882] __alloc_file+0x25/0x230 [ 326.964882][ T6882] alloc_empty_file+0x90/0x180 [ 326.969667][ T6882] path_openat+0x11c/0x2f10 [ 326.974200][ T6882] ? kasan_set_track+0x60/0x70 [ 326.978980][ T6882] ? verify_lock_unused+0x140/0x140 [ 326.984205][ T6882] ? do_sys_openat2+0xdd/0x4f0 [ 326.988996][ T6882] ? __x64_sys_openat+0x135/0x160 [ 326.994054][ T6882] ? do_syscall_64+0x4c/0xa0 [ 326.998669][ T6882] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 327.004758][ T6882] ? do_filp_open+0x420/0x420 [ 327.009476][ T6882] do_filp_open+0x1ee/0x420 [ 327.014008][ T6882] ? vfs_tmpfile+0x490/0x490 [ 327.018654][ T6882] ? _raw_spin_unlock+0x24/0x40 [ 327.023520][ T6882] ? alloc_fd+0x590/0x640 [ 327.027879][ T6882] do_sys_openat2+0x14b/0x4f0 [ 327.032590][ T6882] ? do_sys_open+0xe0/0xe0 [ 327.037035][ T6882] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 327.043045][ T6882] ? lock_chain_count+0x20/0x20 [ 327.047931][ T6882] __x64_sys_openat+0x135/0x160 [ 327.052813][ T6882] do_syscall_64+0x4c/0xa0 [ 327.057262][ T6882] ? clear_bhb_loop+0x60/0xb0 [ 327.061958][ T6882] ? clear_bhb_loop+0x60/0xb0 [ 327.066668][ T6882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 327.072592][ T6882] RIP: 0033:0x7f418a36034e [ 327.077049][ T6882] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 327.096679][ T6882] RSP: 002b:00007f418b1a0d58 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 327.105114][ T6882] RAX: ffffffffffffffda RBX: 00007f418b1a16c0 RCX: 00007f418a36034e [ 327.113117][ T6882] RDX: 0000000000000002 RSI: 00007f418b1a0ea0 RDI: ffffffffffffff9c [ 327.121108][ T6882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 327.129097][ T6882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 327.137102][ T6882] R13: 00007f418b1a0ee0 R14: 00007f418b1a0ea0 R15: 00007f41801f7000 [ 327.145108][ T6882] [ 327.664453][ T6882] loop3: detected capacity change from 0 to 164 [ 327.896970][ T4290] Bluetooth: hci4: command 0x0409 tx timeout [ 328.947905][ T6894] loop2: detected capacity change from 0 to 128 [ 329.097776][ T6868] chnl_net:caif_netlink_parms(): no params data found [ 329.119379][ T6436] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 330.504811][ T128] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 330.512387][ T50] Bluetooth: hci4: command 0x041b tx timeout [ 330.850364][ T128] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 330.860603][ T128] usb 1-1: config 0 has no interface number 0 [ 330.866750][ T128] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 330.936629][ T128] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.975149][ T128] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 331.024721][ T128] usb 1-1: config 0 interface 1 has no altsetting 0 [ 331.036069][ T128] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 331.059913][ T128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.094516][ T128] usb 1-1: config 0 descriptor?? [ 331.163394][ T6868] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.202414][ T6868] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.455057][ T6868] device bridge_slave_0 entered promiscuous mode [ 332.558457][ T50] Bluetooth: hci4: command 0x040f tx timeout [ 333.391430][ T128] uclogic 0003:145F:0212.0003: failed retrieving string descriptor #100: -71 [ 333.405544][ T128] uclogic 0003:145F:0212.0003: failed retrieving pen parameters: -71 [ 333.414478][ T128] uclogic 0003:145F:0212.0003: pen probing failed: -71 [ 333.421636][ T128] uclogic 0003:145F:0212.0003: failed probing parameters: -71 [ 333.429479][ T128] uclogic: probe of 0003:145F:0212.0003 failed with error -71 [ 333.441095][ T128] usb 1-1: USB disconnect, device number 4 [ 333.530094][ T6868] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.537235][ T6868] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.596445][ T6868] device bridge_slave_1 entered promiscuous mode [ 333.645657][ T6947] loop0: detected capacity change from 0 to 8 [ 333.732332][ T6868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.840414][ T6868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.927749][ T6868] team0: Port device team_slave_0 added [ 334.015407][ T6868] team0: Port device team_slave_1 added [ 334.066726][ T6957] SQUASHFS error: Failed to read block 0x4de: -5 [ 334.074283][ T6957] SQUASHFS error: Failed to read block 0x4de: -5 [ 334.083047][ T26] audit: type=1800 audit(1793944749.061:32): pid=6957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.730" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 334.162896][ T6868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.197252][ T6868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.285590][ T6868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.324714][ T6868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.333624][ T6868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.960137][ T50] Bluetooth: hci4: command 0x0419 tx timeout [ 335.027941][ T6868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.206117][ T6968] loop3: detected capacity change from 0 to 4096 [ 336.053831][ T6968] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 336.475805][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 336.532137][ T6868] device hsr_slave_0 entered promiscuous mode [ 336.555406][ T6977] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 336.594902][ T6868] device hsr_slave_1 entered promiscuous mode [ 336.641771][ T6868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.658741][ T6979] user requested TSC rate below hardware speed [ 336.667650][ T6868] Cannot create hsr debugfs directory [ 336.783943][ T6983] futex_wake_op: syz.3.737 tries to shift op by 144; fix this program [ 337.424695][ T6983] futex_wake_op: syz.3.737 tries to shift op by 144; fix this program [ 337.548782][ T4380] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 337.868544][ T4380] usb 2-1: Using ep0 maxpacket: 32 [ 337.875620][ T4380] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.948689][ T4380] usb 2-1: config 0 has no interfaces? [ 337.993518][ T4380] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 338.024668][ T4380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.049594][ T4380] usb 2-1: Product: syz [ 338.065314][ T4380] usb 2-1: Manufacturer: syz [ 338.083732][ T4380] usb 2-1: SerialNumber: syz [ 338.114291][ T4380] usb 2-1: config 0 descriptor?? [ 338.437627][ T4927] usb 2-1: USB disconnect, device number 4 [ 339.067709][ T5249] device hsr_slave_0 left promiscuous mode [ 339.088026][ T5249] device hsr_slave_1 left promiscuous mode [ 339.101574][ T5249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.109824][ T5249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.135337][ T5249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.161328][ T5249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.384965][ T5249] device bridge_slave_1 left promiscuous mode [ 339.527631][ T5249] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.737640][ T5249] device bridge_slave_0 left promiscuous mode [ 339.744004][ T5249] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.919300][ T5249] device veth1_macvtap left promiscuous mode [ 339.927138][ T5249] device veth0_macvtap left promiscuous mode [ 339.943752][ T5249] device veth1_vlan left promiscuous mode [ 339.950007][ T5249] device veth0_vlan left promiscuous mode [ 340.028466][ T7013] binder: 7012:7013 ioctl c0306201 200000000380 returned -22 [ 340.315616][ T7022] FAULT_INJECTION: forcing a failure. [ 340.315616][ T7022] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 340.948600][ T7022] CPU: 1 PID: 7022 Comm: syz.3.747 Not tainted syzkaller #0 [ 340.955955][ T7022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 340.966037][ T7022] Call Trace: [ 340.969335][ T7022] [ 340.972279][ T7022] dump_stack_lvl+0x188/0x24e [ 340.976984][ T7022] ? show_regs_print_info+0x12/0x12 [ 340.982200][ T7022] ? load_image+0x410/0x410 [ 340.986729][ T7022] ? __lock_acquire+0x7ea0/0x7ea0 [ 340.991779][ T7022] ? verify_lock_unused+0x140/0x140 [ 340.996997][ T7022] should_fail_ex+0x390/0x4c0 [ 341.001703][ T7022] prepare_alloc_pages+0x1e1/0x5b0 [ 341.006849][ T7022] __alloc_pages+0x130/0x4f0 [ 341.011467][ T7022] ? lock_chain_count+0x20/0x20 [ 341.016346][ T7022] ? zone_statistics+0x170/0x170 [ 341.021325][ T7022] ? count_memcg_event_mm+0x8a/0x3c0 [ 341.026646][ T7022] ? count_memcg_event_mm+0x36b/0x3c0 [ 341.032040][ T7022] ? __lock_acquire+0x7ea0/0x7ea0 [ 341.037097][ T7022] ? count_memcg_event_mm+0x8a/0x3c0 [ 341.042412][ T7022] ? put_page+0x270/0x270 [ 341.046775][ T7022] __folio_alloc+0xe/0x30 [ 341.051134][ T7022] vma_alloc_folio+0x499/0x900 [ 341.055977][ T7022] handle_mm_fault+0x1fe3/0x3d40 [ 341.060937][ T7022] ? mt_find+0x157/0x830 [ 341.065230][ T7022] ? numa_migrate_prep+0x250/0x250 [ 341.070378][ T7022] ? lock_chain_count+0x20/0x20 [ 341.075264][ T7022] ? lock_mm_and_find_vma+0xae/0x2f0 [ 341.080629][ T7022] do_user_addr_fault+0x5a9/0xbb0 [ 341.085702][ T7022] exc_page_fault+0x60/0x100 [ 341.090327][ T7022] asm_exc_page_fault+0x22/0x30 [ 341.095251][ T7022] RIP: 0033:0x7f418a2563a3 [ 341.099691][ T7022] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 341.119324][ T7022] RSP: 002b:00007f418b1a0470 EFLAGS: 00010202 [ 341.125427][ T7022] RAX: 0000000000010000 RBX: 00007f418b1a0530 RCX: 00007f41801f7000 [ 341.133422][ T7022] RDX: 00007f418b1a06d0 RSI: 0000000000000001 RDI: 00007f418b1a05d0 [ 341.141420][ T7022] RBP: 0000000000000056 R08: 0000000000000005 R09: 0000000000000008 [ 341.149416][ T7022] R10: 000000000000000a R11: 00007f418b1a0530 R12: 0000000000000001 [ 341.157415][ T7022] R13: 00007f418a4582e0 R14: 0000000000000045 R15: 00007f418b1a05d0 [ 341.165432][ T7022] [ 341.894610][ T7035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.751'. [ 342.046728][ T7022] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 342.074298][ T7022] loop3: detected capacity change from 0 to 164 [ 344.116339][ T7047] loop3: detected capacity change from 0 to 8 [ 344.441997][ T5249] team0 (unregistering): Port device team_slave_1 removed [ 344.451161][ T7050] SQUASHFS error: Failed to read block 0x4de: -5 [ 344.457924][ T7050] SQUASHFS error: Failed to read block 0x4de: -5 [ 344.468692][ T26] audit: type=1800 audit(1793944759.441:33): pid=7050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.755" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 344.543260][ T5249] team0 (unregistering): Port device team_slave_0 removed [ 344.621008][ T5249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.692909][ T5249] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.204846][ T5249] bond0 (unregistering): Released all slaves [ 345.288617][ T4392] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 345.337794][ T6868] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 345.410999][ T6868] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 345.461125][ T6868] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 345.637857][ T6868] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 346.636699][ T7074] loop0: detected capacity change from 0 to 164 [ 346.641039][ T6868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.703852][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 346.744922][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 346.777668][ T6868] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.826191][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 346.850790][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 346.869154][ T4501] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.876317][ T4501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.959154][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 346.973883][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 347.022547][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 347.060647][ T4501] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.067822][ T4501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.117452][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 347.127706][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 347.144852][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 347.157084][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 347.172366][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 347.201530][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 347.237395][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 347.248949][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 347.257674][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 347.290819][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 347.349925][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 347.385180][ T6868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 347.509220][ T7094] netlink: 100 bytes leftover after parsing attributes in process `syz.3.767'. [ 349.051317][ T7094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.767'. [ 349.305553][ T7103] netlink: 16 bytes leftover after parsing attributes in process `syz.2.769'. [ 349.718923][ T7111] loop3: detected capacity change from 0 to 2048 [ 350.645385][ T7111] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 350.655958][ T7111] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 350.668475][ T7111] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 350.699655][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 350.717071][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 350.777665][ T7113] loop2: detected capacity change from 0 to 128 [ 350.790399][ T7115] loop1: detected capacity change from 0 to 8 [ 350.948292][ T6868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.219848][ T7121] SQUASHFS error: Failed to read block 0x4de: -5 [ 351.226585][ T7121] SQUASHFS error: Failed to read block 0x4de: -5 [ 351.233424][ T26] audit: type=1800 audit(1793944766.211:34): pid=7121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.772" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 353.751445][ T7147] netlink: 100 bytes leftover after parsing attributes in process `syz.3.779'. [ 353.786948][ T7150] netlink: 16 bytes leftover after parsing attributes in process `syz.2.780'. [ 353.805991][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.779'. [ 353.944618][ T6939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 353.968893][ T6939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 353.996830][ T6939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 354.014600][ T6939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 354.052988][ T6868] device veth0_vlan entered promiscuous mode [ 354.061518][ T6939] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 354.080958][ T6939] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 354.105577][ T6868] device veth1_vlan entered promiscuous mode [ 354.184606][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 354.199573][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 354.220074][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 354.238068][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 354.296014][ T6868] device veth0_macvtap entered promiscuous mode [ 354.324827][ T6868] device veth1_macvtap entered promiscuous mode [ 354.502887][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.618937][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.701210][ T7165] loop1: detected capacity change from 0 to 2048 [ 354.842709][ T7165] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 354.855918][ T7165] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 354.877786][ T7165] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 355.159242][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.274632][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.307568][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.318102][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.328108][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.366232][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.393739][ T6868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.420983][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.445903][ T7168] loop0: detected capacity change from 0 to 128 [ 355.448440][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.508516][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.528392][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.558387][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.605778][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.606808][ T7172] device-mapper: table: 248:3: verity: Data device is too small (-EINVAL) [ 355.640097][ T7172] device-mapper: ioctl: error adding target to table [ 355.647109][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.679910][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.691502][ T6868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.701838][ T6939] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 355.710982][ T6939] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 355.723723][ T6939] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 355.733211][ T6939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 355.742817][ T6939] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 355.752434][ T6939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 355.767799][ T7173] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 355.798882][ T6868] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.809959][ T6868] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.834267][ T6868] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.865389][ T6868] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.033555][ T7180] netlink: 104 bytes leftover after parsing attributes in process `syz.3.786'. [ 356.081582][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.132036][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.188089][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 356.222429][ T6878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.242284][ T6878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.286387][ T6939] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 356.654795][ T7192] loop0: detected capacity change from 0 to 4096 [ 356.694016][ T7192] EXT4-fs: Invalid want_extra_isize 9 [ 356.778405][ T22] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 357.056517][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.352386][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.567272][ T22] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 357.733000][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.763083][ T22] usb 4-1: config 0 descriptor?? [ 357.767195][ T7209] netlink: 100 bytes leftover after parsing attributes in process `syz.0.794'. [ 357.809368][ T7208] loop5: detected capacity change from 0 to 2048 [ 357.865123][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.794'. [ 357.867148][ T7208] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 357.885208][ T7208] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 357.897726][ T7208] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 358.185102][ T22] hid-led 0003:1D34:000A.0004: unknown main item tag 0x0 [ 358.223794][ T22] hid-led 0003:1D34:000A.0004: unknown main item tag 0x0 [ 358.279742][ T22] hid-led 0003:1D34:000A.0004: unknown main item tag 0x0 [ 358.468843][ T22] hid-led 0003:1D34:000A.0004: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0 [ 358.510503][ T22] hid-led 0003:1D34:000A.0004: Dream Cheeky Webmail Notifier initialized [ 358.580557][ T7218] loop2: detected capacity change from 0 to 128 [ 358.627236][ T22] usb 4-1: USB disconnect, device number 5 [ 358.839457][ T7215] fido_id[7215]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 359.494532][ T7243] loop5: detected capacity change from 0 to 4096 [ 359.761336][ T7243] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 360.230204][ T7230] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 360.236327][ T7230] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 360.336941][ T7248] loop0: detected capacity change from 0 to 2048 [ 360.345494][ T7248] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 360.356172][ T7248] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 360.367708][ T7248] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 360.439314][ T7230] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 361.192600][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 361.238638][ T7230] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 361.250138][ T6868] EXT4-fs (loop5): unmounting filesystem. [ 361.349397][ T7230] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 361.395654][ T7230] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 361.557169][ T7230] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 361.622752][ T7261] netlink: 100 bytes leftover after parsing attributes in process `syz.5.807'. [ 361.725429][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.807'. [ 362.318642][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 362.479088][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 363.072974][ T7279] FAULT_INJECTION: forcing a failure. [ 363.072974][ T7279] name failslab, interval 1, probability 0, space 0, times 0 [ 363.108444][ T7280] loop1: detected capacity change from 0 to 128 [ 363.129627][ T7279] CPU: 0 PID: 7279 Comm: syz.5.815 Not tainted syzkaller #0 [ 363.136965][ T7279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 363.147040][ T7279] Call Trace: [ 363.150312][ T7279] [ 363.153284][ T7279] dump_stack_lvl+0x188/0x24e [ 363.157962][ T7279] ? show_regs_print_info+0x12/0x12 [ 363.163168][ T7279] ? load_image+0x410/0x410 [ 363.167684][ T7279] ? __lock_acquire+0x7ea0/0x7ea0 [ 363.172707][ T7279] ? __se_sys_mount+0x2e3/0x3d0 [ 363.177558][ T7279] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.183636][ T7279] should_fail_ex+0x390/0x4c0 [ 363.188317][ T7279] should_failslab+0x5/0x20 [ 363.192819][ T7279] slab_pre_alloc_hook+0x59/0x300 [ 363.197841][ T7279] ? alloc_super+0x5a/0x930 [ 363.202354][ T7279] __kmem_cache_alloc_node+0x4f/0x270 [ 363.207752][ T7279] ? alloc_super+0x5a/0x930 [ 363.212259][ T7279] kmalloc_trace+0x26/0xe0 [ 363.216672][ T7279] alloc_super+0x5a/0x930 [ 363.221002][ T7279] sget+0x1ce/0x4a0 [ 363.224807][ T7279] ? free_anon_bdev+0x20/0x20 [ 363.229479][ T7279] ? ovl_mount+0x30/0x30 [ 363.233712][ T7279] mount_nodev+0x2c/0xe0 [ 363.237949][ T7279] legacy_get_tree+0xe6/0x180 [ 363.242624][ T7279] ? virtio_fs_zero_page_range+0x130/0x130 [ 363.248441][ T7279] vfs_get_tree+0x88/0x270 [ 363.252857][ T7279] do_new_mount+0x247/0xa50 [ 363.257361][ T7279] __se_sys_mount+0x2e3/0x3d0 [ 363.262039][ T7279] ? __x64_sys_mount+0xc0/0xc0 [ 363.266810][ T7279] ? lockdep_hardirqs_on+0x94/0x140 [ 363.272003][ T7279] ? __x64_sys_mount+0x1c/0xc0 [ 363.276773][ T7279] do_syscall_64+0x4c/0xa0 [ 363.281190][ T7279] ? clear_bhb_loop+0x60/0xb0 [ 363.285867][ T7279] ? clear_bhb_loop+0x60/0xb0 [ 363.290543][ T7279] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.296435][ T7279] RIP: 0033:0x7f3bcad9fb19 [ 363.300845][ T7279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.320490][ T7279] RSP: 002b:00007f3bcbb92028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 363.328909][ T7279] RAX: ffffffffffffffda RBX: 00007f3bcb025fa0 RCX: 00007f3bcad9fb19 [ 363.337048][ T7279] RDX: 0000200000000200 RSI: 0000200000000180 RDI: 0000000000000000 [ 363.345014][ T7279] RBP: 00007f3bcae37b70 R08: 0000000000000000 R09: 0000000000000000 [ 363.353065][ T7279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.361035][ T7279] R13: 00007f3bcb026038 R14: 00007f3bcb025fa0 R15: 00007ffd554f7158 [ 363.369018][ T7279] [ 363.372753][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 363.378395][ T4290] Bluetooth: hci4: command 0x0c1a tx timeout [ 363.489363][ T7280] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 365.797977][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 366.066541][ T7309] loop2: detected capacity change from 0 to 4096 [ 366.137661][ T7309] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 366.875190][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 367.377806][ T7320] netlink: 100 bytes leftover after parsing attributes in process `syz.2.825'. [ 367.551613][ T7328] loop5: detected capacity change from 0 to 8 [ 367.838449][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 368.167340][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.825'. [ 368.405888][ T7332] SQUASHFS error: Unable to read directory block [631:26] [ 368.418611][ T7332] SQUASHFS error: Failed to read block 0x4de: -5 [ 368.426322][ T7332] SQUASHFS error: Failed to read block 0x4de: -5 [ 368.441046][ T7332] SQUASHFS error: Failed to read block 0x4de: -5 [ 368.447733][ T7332] SQUASHFS error: Failed to read block 0x4de: -5 [ 368.454457][ T7332] SQUASHFS error: Failed to read block 0x4de: -5 [ 368.461221][ T7332] SQUASHFS error: Failed to read block 0x4de: -5 [ 368.467818][ T7332] SQUASHFS error: Failed to read block 0x4de: -5 [ 368.474506][ T7332] SQUASHFS error: Failed to read block 0x4de: -5 [ 368.481819][ T7332] SQUASHFS error: Failed to read block 0x4de: -5 [ 368.488882][ T7332] SQUASHFS error: Failed to read block 0x4de: -5 [ 368.495636][ T7332] SQUASHFS error: Failed to read block 0x4de: -5 [ 368.504580][ T7332] SQUASHFS error: Failed to read block 0x4de: -5 [ 368.511354][ T7332] SQUASHFS error: Failed to read block 0x4de: -5 [ 368.518026][ T7332] SQUASHFS error: Failed to read block 0x4de: -5 [ 368.524763][ T7332] SQUASHFS error: Failed to read block 0x4de: -5 [ 368.531514][ T7332] SQUASHFS error: Failed to read block 0x4de: -5 [ 368.538207][ T7332] SQUASHFS error: Failed to read block 0x4de: -5 [ 368.544926][ T7332] SQUASHFS error: Failed to read block 0x4de: -5 [ 368.551632][ T7332] SQUASHFS error: Failed to read block 0x4de: -5 [ 368.558371][ T7332] SQUASHFS error: Failed to read block 0x4de: -5 [ 368.565069][ T7332] SQUASHFS error: Failed to read block 0x4de: -5 [ 368.571820][ T7332] SQUASHFS error: Failed to read block 0x4de: -5 [ 368.578442][ T7332] SQUASHFS error: Failed to read block 0x4de: -5 [ 368.585189][ T7332] SQUASHFS error: Failed to read block 0x4de: -5 [ 368.608799][ T7332] SQUASHFS error: Failed to read block 0x4de: -5 [ 368.615235][ T7332] SQUASHFS error: Failed to read block 0x4de: -5 [ 368.621667][ T7332] SQUASHFS error: Failed to read block 0x4de: -5 [ 368.628087][ T7332] SQUASHFS error: Failed to read block 0x4de: -5 [ 368.634530][ T7332] SQUASHFS error: Failed to read block 0x4de: -5 [ 368.641000][ T7332] SQUASHFS error: Failed to read block 0x4de: -5 [ 368.648710][ T26] audit: type=1800 audit(1793944783.411:35): pid=7332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.827" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 368.924706][ T7336] netlink: 16 bytes leftover after parsing attributes in process `syz.5.829'. [ 373.048414][ T4380] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 373.248390][ T4380] usb 3-1: Using ep0 maxpacket: 16 [ 373.280147][ T4380] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.308459][ T4380] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.368371][ T4380] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 373.437502][ T4380] usb 3-1: config 0 interface 0 has no altsetting 0 [ 373.459135][ T7391] netlink: 100 bytes leftover after parsing attributes in process `syz.3.840'. [ 373.472060][ T4380] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 373.493671][ T4380] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.537511][ T4380] usb 3-1: config 0 descriptor?? [ 373.560719][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.840'. [ 373.726492][ T7399] netlink: 16 bytes leftover after parsing attributes in process `syz.0.841'. [ 373.992311][ T4380] hid (null): nested delimiters [ 374.235873][ T4380] usb 3-1: USB disconnect, device number 3 [ 375.626720][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.846'. [ 378.492540][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.498913][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.513425][ T7434] netlink: 16 bytes leftover after parsing attributes in process `syz.5.853'. [ 379.379012][ T7454] netlink: 100 bytes leftover after parsing attributes in process `syz.5.856'. [ 379.422939][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.5.856'. [ 383.925698][ T7492] loop2: detected capacity change from 0 to 128 [ 384.763380][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.859'. [ 385.291704][ T7516] netlink: 16 bytes leftover after parsing attributes in process `syz.5.864'. [ 385.457245][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.872'. [ 385.479236][ T7523] netlink: 100 bytes leftover after parsing attributes in process `syz.1.871'. [ 385.511622][ T7523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'. [ 385.522551][ T26] audit: type=1800 audit(1793944800.501:36): pid=7526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.874" name="max_speed" dev="configfs" ino=44699 res=0 errno=0 [ 386.610923][ T7543] loop1: detected capacity change from 0 to 128 [ 386.788677][ T131] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 387.063540][ T131] usb 1-1: config 0 interface 0 has no altsetting 0 [ 387.085855][ T131] usb 1-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 387.246739][ T131] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.450695][ T131] usb 1-1: config 0 descriptor?? [ 387.893955][ T131] hid (null): unknown global tag 0xfd [ 387.927086][ T7568] netlink: 16 bytes leftover after parsing attributes in process `syz.1.883'. [ 387.949188][ T131] waltop 0003:172F:0034.0006: unexpected long global item [ 387.956931][ T131] waltop: probe of 0003:172F:0034.0006 failed with error -22 [ 388.077830][ T7575] fuse: Bad value for 'fd' [ 388.127348][ T131] usb 1-1: USB disconnect, device number 5 [ 389.416327][ T7589] netlink: 100 bytes leftover after parsing attributes in process `syz.1.888'. [ 389.447289][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.888'. [ 389.461550][ T4288] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 389.664960][ T4288] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.683063][ T4288] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 389.731211][ T4288] usb 3-1: config 0 interface 0 has no altsetting 0 [ 389.759747][ T4288] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 389.789650][ T4288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.827277][ T4288] usb 3-1: config 0 descriptor?? [ 389.978845][ T7600] loop3: detected capacity change from 0 to 8 [ 390.153969][ T7607] loop5: detected capacity change from 0 to 128 [ 390.250968][ T4288] sony 0003:054C:09CC.0007: unexpected long global item [ 390.278811][ T4288] sony 0003:054C:09CC.0007: parse failed [ 390.284575][ T4288] sony: probe of 0003:054C:09CC.0007 failed with error -22 [ 390.547814][ T4288] usb 3-1: USB disconnect, device number 4 [ 391.302052][ T7623] SQUASHFS error: Unable to read directory block [631:26] [ 391.362070][ T7623] SQUASHFS error: Failed to read block 0x4de: -5 [ 391.393304][ T7628] loop0: detected capacity change from 0 to 164 [ 391.396865][ T7623] SQUASHFS error: Failed to read block 0x4de: -5 [ 391.401429][ T7625] netlink: 16 bytes leftover after parsing attributes in process `syz.5.897'. [ 392.569050][ T7636] fuse: Bad value for 'fd' [ 392.644798][ T26] audit: type=1800 audit(1793944807.621:37): pid=7623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.892" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 393.105255][ T7651] netlink: 100 bytes leftover after parsing attributes in process `syz.0.904'. [ 393.145738][ T7651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.904'. [ 393.624866][ T7665] loop1: detected capacity change from 0 to 128 [ 396.301622][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'. [ 396.325879][ T7693] loop3: detected capacity change from 0 to 164 [ 396.770235][ T7704] fuse: Bad value for 'fd' [ 398.612660][ T7718] loop0: detected capacity change from 0 to 8 [ 398.933730][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.925'. [ 399.148617][ T7725] loop5: detected capacity change from 0 to 2048 [ 399.174301][ T7725] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 399.215056][ T7725] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 399.249230][ T7725] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 399.295007][ T7729] FAULT_INJECTION: forcing a failure. [ 399.295007][ T7729] name failslab, interval 1, probability 0, space 0, times 0 [ 399.342501][ T7729] CPU: 0 PID: 7729 Comm: syz.3.928 Not tainted syzkaller #0 [ 399.349841][ T7729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 399.359918][ T7729] Call Trace: [ 399.363213][ T7729] [ 399.366160][ T7729] dump_stack_lvl+0x188/0x24e [ 399.370877][ T7729] ? show_regs_print_info+0x12/0x12 [ 399.376101][ T7729] ? load_image+0x410/0x410 [ 399.380632][ T7729] ? __lock_acquire+0x7ea0/0x7ea0 [ 399.385691][ T7729] should_fail_ex+0x390/0x4c0 [ 399.390400][ T7729] should_failslab+0x5/0x20 [ 399.394927][ T7729] slab_pre_alloc_hook+0x59/0x300 [ 399.400001][ T7729] kmem_cache_alloc_lru+0x49/0x2e0 [ 399.405146][ T7729] ? iget_locked+0x201/0x8c0 [ 399.409786][ T7729] iget_locked+0x201/0x8c0 [ 399.414236][ T7729] kernfs_get_inode+0x4a/0x680 [ 399.419029][ T7729] ? down_read+0x1a8/0x2d0 [ 399.423478][ T7729] kernfs_get_tree+0x455/0x710 [ 399.428281][ T7729] sysfs_get_tree+0x42/0x110 [ 399.432901][ T7729] vfs_get_tree+0x88/0x270 [ 399.437346][ T7729] do_new_mount+0x247/0xa50 [ 399.441882][ T7729] __se_sys_mount+0x2e3/0x3d0 [ 399.446592][ T7729] ? __x64_sys_mount+0xc0/0xc0 [ 399.451388][ T7729] ? lockdep_hardirqs_on+0x94/0x140 [ 399.456607][ T7729] ? __x64_sys_mount+0x1c/0xc0 [ 399.461406][ T7729] do_syscall_64+0x4c/0xa0 [ 399.465854][ T7729] ? clear_bhb_loop+0x60/0xb0 [ 399.470567][ T7729] ? clear_bhb_loop+0x60/0xb0 [ 399.475283][ T7729] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.481201][ T7729] RIP: 0033:0x7f418a39fb19 [ 399.485637][ T7729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.505270][ T7729] RSP: 002b:00007f418b1a1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 399.513716][ T7729] RAX: ffffffffffffffda RBX: 00007f418a625fa0 RCX: 00007f418a39fb19 [ 399.521713][ T7729] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 0000000000000000 [ 399.529712][ T7729] RBP: 00007f418a437b70 R08: 0000000000000000 R09: 0000000000000000 [ 399.537714][ T7729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.545706][ T7729] R13: 00007f418a626038 R14: 00007f418a625fa0 R15: 00007ffc95ac98e8 [ 399.553722][ T7729] [ 399.595959][ T7734] loop2: detected capacity change from 0 to 128 [ 399.655128][ T7735] SQUASHFS error: Unable to read directory block [631:26] [ 399.740452][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 399.775197][ T7735] SQUASHFS error: Failed to read block 0x4de: -5 [ 399.964594][ T26] audit: type=1800 audit(1793944814.931:38): pid=7735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.923" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 400.748612][ T7744] fuse: Bad value for 'fd' [ 402.428927][ T7771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.937'. [ 402.903616][ T7777] loop3: detected capacity change from 0 to 2048 [ 403.145433][ T7777] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 403.319957][ T7777] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 403.538912][ T7777] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 405.594016][ T7807] fuse: Bad value for 'fd' [ 405.726087][ T7813] loop3: detected capacity change from 0 to 8 [ 405.797048][ T7813] SQUASHFS error: xz decompression failed, data probably corrupt [ 405.859463][ T7813] SQUASHFS error: Failed to read block 0x108: -5 [ 405.866073][ T7813] SQUASHFS error: Unable to read metadata cache entry [106] [ 405.914531][ T7813] SQUASHFS error: Unable to read inode 0x11f [ 406.037786][ T7813] loop3: detected capacity change from 0 to 164 [ 407.495195][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.5.954'. [ 408.063628][ T7828] loop2: detected capacity change from 0 to 4096 [ 408.126751][ T7846] loop1: detected capacity change from 0 to 128 [ 408.200604][ T7828] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 408.357090][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 408.579228][ T7855] device-mapper: table: 248:5: raid: 'raid10_format' is an invalid parameter for this RAID type (-EINVAL) [ 408.698872][ T7855] device-mapper: ioctl: error adding target to table [ 409.359998][ T7866] fuse: Bad value for 'fd' [ 409.584226][ T7869] loop1: detected capacity change from 0 to 8 [ 409.627362][ T7869] SQUASHFS error: xz decompression failed, data probably corrupt [ 409.650569][ T7869] SQUASHFS error: Failed to read block 0x108: -5 [ 409.667154][ T7869] SQUASHFS error: Unable to read metadata cache entry [106] [ 409.685390][ T7869] SQUASHFS error: Unable to read inode 0x11f [ 409.753148][ T7869] loop1: detected capacity change from 0 to 164 [ 410.058222][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.967'. [ 410.116607][ T4345] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 410.892181][ T4345] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 411.288462][ T4345] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 411.490648][ T4345] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 411.554406][ T7894] loop5: detected capacity change from 0 to 4096 [ 411.558724][ T4345] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 411.573826][ T4345] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 411.583433][ T22] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 411.591873][ T4345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.600477][ T4345] usb 1-1: Product: syz [ 411.604990][ T4345] usb 1-1: Manufacturer: syz [ 411.610607][ T4345] usb 1-1: SerialNumber: syz [ 411.631732][ T4345] usb 1-1: config 0 descriptor?? [ 411.637334][ T7881] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 411.659832][ T7881] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 411.677805][ T7894] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 411.737908][ T7895] fido_id[7895]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 411.788584][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 411.805627][ T22] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 411.857049][ T22] usb 3-1: config 0 has no interface number 0 [ 411.874380][ T7881] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 411.893050][ T22] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 411.914165][ T7881] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 411.935003][ T22] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 411.979943][ T6868] EXT4-fs (loop5): unmounting filesystem. [ 411.999298][ T22] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 412.028432][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.055477][ T22] usb 3-1: Product: syz [ 412.068419][ T22] usb 3-1: Manufacturer: syz [ 412.080553][ T7909] FAULT_INJECTION: forcing a failure. [ 412.080553][ T7909] name failslab, interval 1, probability 0, space 0, times 0 [ 412.099605][ T22] usb 3-1: SerialNumber: syz [ 412.128517][ T7909] CPU: 0 PID: 7909 Comm: syz.1.973 Not tainted syzkaller #0 [ 412.135962][ T7909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 412.146050][ T7909] Call Trace: [ 412.149347][ T7909] [ 412.152301][ T7909] dump_stack_lvl+0x188/0x24e [ 412.157017][ T7909] ? show_regs_print_info+0x12/0x12 [ 412.159782][ T4345] Error reading MAC address [ 412.162232][ T7909] ? load_image+0x410/0x410 [ 412.162267][ T7909] ? __lock_acquire+0x7ea0/0x7ea0 [ 412.176293][ T7909] ? do_futex+0x310/0x320 [ 412.180653][ T7909] should_fail_ex+0x390/0x4c0 [ 412.185363][ T7909] should_failslab+0x5/0x20 [ 412.189884][ T7909] slab_pre_alloc_hook+0x59/0x300 [ 412.193032][ T4345] usb 1-1: USB disconnect, device number 6 [ 412.194919][ T7909] ? make_kuid+0x1d7/0x680 [ 412.194951][ T7909] kmem_cache_alloc+0x56/0x2f0 [ 412.209949][ T7909] ? prepare_creds+0x3c/0x610 [ 412.214751][ T7909] prepare_creds+0x3c/0x610 [ 412.217378][ T22] usb 3-1: config 0 descriptor?? [ 412.219266][ T7909] __sys_setuid+0x92/0x580 [ 412.219295][ T7909] ? lockdep_hardirqs_on+0x94/0x140 [ 412.219319][ T7909] do_syscall_64+0x4c/0xa0 [ 412.232690][ T7897] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 412.233849][ T7909] ? clear_bhb_loop+0x60/0xb0 [ 412.239928][ T7897] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 412.245336][ T7909] ? clear_bhb_loop+0x60/0xb0 [ 412.261829][ T7909] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.267759][ T7909] RIP: 0033:0x7fbb5599fb19 [ 412.272243][ T7909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.291876][ T7909] RSP: 002b:00007fbb56838028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 412.300319][ T7909] RAX: ffffffffffffffda RBX: 00007fbb55c25fa0 RCX: 00007fbb5599fb19 [ 412.308317][ T7909] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 412.316309][ T7909] RBP: 00007fbb55a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 412.324305][ T7909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.332305][ T7909] R13: 00007fbb55c26038 R14: 00007fbb55c25fa0 R15: 00007ffe67f79608 [ 412.340322][ T7909] [ 412.521250][ T7897] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 412.569602][ T7897] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 412.854904][ T22] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 413.276790][ T22] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 413.291756][ T7921] fuse: Bad value for 'fd' [ 413.306662][ T22] asix: probe of 3-1:0.34 failed with error -71 [ 413.331606][ T22] usb 3-1: USB disconnect, device number 5 [ 413.502844][ T7928] loop0: detected capacity change from 0 to 8 [ 413.590401][ T7928] SQUASHFS error: xz decompression failed, data probably corrupt [ 413.603837][ T7928] SQUASHFS error: Failed to read block 0x108: -5 [ 413.631040][ T7928] SQUASHFS error: Unable to read metadata cache entry [106] [ 413.652403][ T7928] SQUASHFS error: Unable to read inode 0x11f [ 413.723806][ T7928] loop0: detected capacity change from 0 to 164 [ 414.884235][ T7945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.981'. [ 416.461804][ T7949] loop5: detected capacity change from 0 to 4096 [ 416.532137][ T7949] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 416.716025][ T6868] EXT4-fs (loop5): unmounting filesystem. [ 417.187109][ T7972] fuse: Bad value for 'fd' [ 417.231532][ T7971] loop5: detected capacity change from 0 to 2048 [ 417.277438][ T7971] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 417.291154][ T7971] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 417.330588][ T7971] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 417.728077][ T7981] loop5: detected capacity change from 0 to 8 [ 418.259548][ T7985] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[7986] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7985] [ 418.969600][ T7981] SQUASHFS error: xz decompression failed, data probably corrupt [ 418.977600][ T7981] SQUASHFS error: Failed to read block 0x108: -5 [ 420.250433][ T7981] SQUASHFS error: Unable to read metadata cache entry [106] [ 420.257797][ T7981] SQUASHFS error: Unable to read inode 0x11f [ 420.356598][ T7981] loop5: detected capacity change from 0 to 164 [ 420.530123][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.998'. [ 421.218179][ T8008] loop0: detected capacity change from 0 to 4096 [ 421.402305][ T8008] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 421.534846][ T8022] device syzkaller0 entered promiscuous mode [ 421.632149][ T8026] loop5: detected capacity change from 0 to 128 [ 421.657460][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 424.169257][ T8041] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[8042] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8041] [ 426.249712][ T8050] fuse: Bad value for 'fd' [ 426.545513][ T8058] loop5: detected capacity change from 0 to 8 [ 426.608568][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1012'. [ 427.568461][ T4288] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 427.593957][ T8058] SQUASHFS error: Failed to read block 0x4de: -5 [ 427.692335][ T8058] SQUASHFS error: Failed to read block 0x4de: -5 [ 427.714233][ T8073] loop2: detected capacity change from 0 to 4096 [ 427.744230][ T26] audit: type=1800 audit(1793944842.721:39): pid=8058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1013" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 428.580304][ T4288] usb 1-1: Using ep0 maxpacket: 16 [ 428.596987][ T8073] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 428.610615][ T4288] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 428.642424][ T4288] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 428.685510][ T4288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.715595][ T4288] usb 1-1: Product: syz [ 428.744881][ T4288] usb 1-1: Manufacturer: syz [ 428.758474][ T4288] usb 1-1: SerialNumber: syz [ 428.770793][ T4288] r8152-cfgselector 1-1: config 0 descriptor?? [ 428.830004][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 429.019242][ T4288] r8152-cfgselector 1-1: Needed 1 retries to read version [ 429.026438][ T4288] r8152-cfgselector 1-1: Unknown version 0x1c60 [ 429.059186][ T4288] r8152-cfgselector 1-1: bad CDC descriptors [ 429.241723][ T4288] r8152-cfgselector 1-1: Unknown version 0x0000 [ 429.267592][ T4288] r8152-cfgselector 1-1: USB disconnect, device number 7 [ 433.626091][ T8131] loop0: detected capacity change from 0 to 8 [ 434.150537][ T8134] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[8135] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8134] [ 434.828786][ T4339] kworker/dying (4339) used greatest stack depth: 15328 bytes left [ 434.972786][ T8139] binder: 8138:8139 ioctl c0306201 200000000340 returned -14 [ 435.034028][ T8139] binder: 8138:8139 ioctl c0306201 0 returned -14 [ 436.344744][ T8151] fuse: Bad value for 'fd' [ 436.359331][ T8152] SQUASHFS error: Failed to read block 0x4de: -5 [ 436.365987][ T8152] SQUASHFS error: Failed to read block 0x4de: -5 [ 436.373414][ T26] audit: type=1800 audit(1793944851.351:40): pid=8152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1028" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 439.615854][ T8155] kAFS: unable to lookup cell '.' [ 439.886130][ T8176] rxe_eth0 speed is unknown, defaulting to 1000 [ 439.920170][ T26] audit: type=1326 audit(1793944854.891:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.3.1041" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f418a39fb19 code=0x0 [ 439.932576][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.950538][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.498596][ T8183] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[8184] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8183] [ 442.590891][ T8194] fuse: Bad value for 'fd' [ 444.718497][ T50] Bluetooth: hci5: command 0x1003 tx timeout [ 444.726307][ T4290] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 446.922641][ T8222] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[8223] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8222] [ 448.211238][ T8246] fuse: Bad value for 'fd' [ 448.643083][ T8262] loop5: detected capacity change from 0 to 8 [ 448.743244][ T8253] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[8258] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8253] [ 450.050446][ T4573] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 450.296812][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'. [ 450.467127][ T8283] SQUASHFS error: Failed to read block 0x4de: -5 [ 450.474235][ T8283] SQUASHFS error: Failed to read block 0x4de: -5 [ 450.481087][ T26] audit: type=1800 audit(1793944865.461:42): pid=8283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1055" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 453.161066][ T8306] fuse: Bad value for 'fd' [ 453.516284][ T8309] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1083'. [ 453.634633][ T8313] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 453.913893][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1087'. [ 454.884675][ T8330] loop7: detected capacity change from 0 to 16384 [ 455.042446][ T4355] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 455.449344][ T8332] loop7: detected capacity change from 16384 to 0 [ 455.586768][ T8346] tipc: Started in network mode [ 455.618787][ T8346] tipc: Node identity 4, cluster identity 4711 [ 455.626640][ T8346] tipc: Node number set to 4 [ 455.654709][ T8350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1084'. [ 455.845868][ T26] audit: type=1800 audit(1793944870.821:43): pid=8355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1099" name=08 dev="sda1" ino=2050 res=0 errno=0 [ 456.185974][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1103'. [ 456.197589][ T8369] fuse: Bad value for 'fd' [ 456.704999][ T8387] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1111'. [ 456.808014][ T26] audit: type=1800 audit(1793944871.781:44): pid=8389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1112" name="file2" dev="sda1" ino=2051 res=0 errno=0 [ 458.368018][ T8424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1123'. [ 458.416426][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1124'. [ 459.869753][ T8439] fuse: Bad value for 'fd' [ 460.851328][ T8444] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4085755150 (65372082400 ns) > initial count (13488772352 ns). Using initial count to start timer. [ 460.959937][ T8444] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1555957954 (199162618112 ns) > initial count (193257565696 ns). Using initial count to start timer. [ 461.268883][ T8455] netlink: 'syz.0.1137': attribute type 72 has an invalid length. [ 461.290972][ T8455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1137'. [ 462.741494][ T8465] page:ffffea0001259fc0 refcount:4 mapcount:1 mapping:ffff88805662f508 index:0x0 pfn:0x4967f [ 462.752593][ T8465] memcg:ffff88802484c000 [ 462.756865][ T8465] aops:shmem_aops ino:545 [ 462.761308][ T8465] flags: 0xfff60000080015(locked|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 462.771152][ T8465] raw: 00fff60000080015 ffff88802484a248 ffffea0001170008 ffff88805662f508 [ 462.780192][ T8465] raw: 0000000000000000 0000000000000000 0000000400000000 ffff88802484c000 [ 462.788802][ T8465] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 462.796547][ T8465] page_owner tracks the page as allocated [ 462.803106][ T8465] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 8466, tgid 8465 (syz.2.1129), ts 462501260418, free_ts 462457841986 [ 462.820853][ T8465] post_alloc_hook+0x173/0x1a0 [ 462.825652][ T8465] get_page_from_freelist+0x206b/0x2180 [ 462.831242][ T8465] __alloc_pages+0x1ec/0x4f0 [ 462.835867][ T8465] __folio_alloc+0xe/0x30 [ 462.840218][ T8465] vma_alloc_folio+0x499/0x900 [ 462.845006][ T8465] shmem_alloc_and_acct_folio+0x463/0xbd0 [ 462.850746][ T8465] shmem_get_folio_gfp+0x1439/0x35e0 [ 462.856053][ T8465] shmem_read_mapping_page_gfp+0x99/0x2c0 [ 462.861806][ T8465] udmabuf_create+0x99b/0x1020 [ 462.866602][ T8465] udmabuf_ioctl+0x1f3/0x300 [ 462.871227][ T8465] __se_sys_ioctl+0xfa/0x170 [ 462.875849][ T8465] do_syscall_64+0x4c/0xa0 [ 462.880295][ T8465] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 462.880935][ T8479] fuse: Bad value for 'fd' [ 462.886203][ T8465] page last free stack trace: [ 462.895331][ T8465] free_unref_page_prepare+0x8e5/0x9e0 [ 462.900819][ T8465] free_unref_page_list+0xbb/0x8e0 [ 462.906043][ T8465] release_pages+0x20d1/0x2340 [ 462.910836][ T8465] __pagevec_release+0x6d/0xe0 [ 462.915619][ T8465] shmem_undo_range+0x808/0x21d0 [ 462.920581][ T8465] shmem_evict_inode+0x225/0x9f0 [ 462.925547][ T8465] evict+0x4b2/0x9d0 [ 462.929467][ T8465] do_unlinkat+0x388/0x580 [ 462.933937][ T8465] __x64_sys_unlink+0x45/0x50 [ 462.938642][ T8465] do_syscall_64+0x4c/0xa0 [ 462.943082][ T8465] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 462.949106][ T8465] ------------[ cut here ]------------ [ 462.954566][ T8465] kernel BUG at mm/filemap.c:153! [ 462.959627][ T8465] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 462.965702][ T8465] CPU: 1 PID: 8465 Comm: syz.2.1129 Not tainted syzkaller #0 [ 462.973081][ T8465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 462.983155][ T8465] RIP: 0010:filemap_unaccount_folio+0x559/0xa00 [ 462.989420][ T8465] Code: 07 38 c1 0f 8c 35 fe ff ff 4c 89 e7 e8 40 2a 28 00 e9 28 fe ff ff e8 96 c6 d6 ff 48 89 df 48 c7 c6 20 07 b5 8a e8 f7 11 12 00 <0f> 0b e8 80 c6 d6 ff 48 89 df 48 c7 c6 80 0c b5 8a e8 e1 11 12 00 [ 463.009097][ T8465] RSP: 0018:ffffc9000ed67660 EFLAGS: 00010046 [ 463.015175][ T8465] RAX: 833231cf5a2a3300 RBX: ffffea0001259fc0 RCX: 833231cf5a2a3300 [ 463.023163][ T8465] RDX: 0000000000000002 RSI: ffffffff8aac2e40 RDI: ffffffff8afe72a0 [ 463.031160][ T8465] RBP: ffffc9000ed677b8 R08: ffffffff8f22416f R09: 1ffffffff1e4482d [ 463.039148][ T8465] R10: dffffc0000000000 R11: fffffbfff1e4482e R12: ffff88805662f508 [ 463.047147][ T8465] R13: ffffc9000ed67700 R14: dffffc0000000000 R15: ffff88805662f508 [ 463.055136][ T8465] FS: 000055556db9a500(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 463.064085][ T8465] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 463.070689][ T8465] CR2: 000000110c4524ed CR3: 000000002c1bd000 CR4: 00000000003506e0 [ 463.078679][ T8465] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 463.086669][ T8465] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 463.094660][ T8465] Call Trace: [ 463.098038][ T8465] [ 463.100985][ T8465] ? trace_mm_filemap_delete_from_page_cache+0x9c/0x220 [ 463.107945][ T8465] __filemap_remove_folio+0xc1/0x900 [ 463.113346][ T8465] ? __rwlock_init+0x140/0x140 [ 463.118131][ T8465] ? __up_read+0x2b4/0x6b0 [ 463.122565][ T8465] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 463.129611][ T8465] ? _raw_spin_lock_irq+0xb7/0xf0 [ 463.134656][ T8465] ? _raw_spin_lock_irqsave+0x100/0x100 [ 463.140219][ T8465] filemap_remove_folio+0xed/0x2c0 [ 463.145349][ T8465] truncate_inode_folio+0x59/0x70 [ 463.150391][ T8465] shmem_undo_range+0x554/0x21d0 [ 463.155357][ T8465] ? verify_lock_unused+0x140/0x140 [ 463.160586][ T8465] ? shmem_truncate_range+0xb0/0xb0 [ 463.165815][ T8465] ? do_raw_spin_lock+0x128/0x2f0 [ 463.170861][ T8465] ? __rwlock_init+0x140/0x140 [ 463.175640][ T8465] shmem_evict_inode+0x225/0x9f0 [ 463.180614][ T8465] ? _raw_spin_unlock+0x24/0x40 [ 463.185490][ T8465] ? inode_wait_for_writeback+0x1df/0x220 [ 463.191238][ T8465] ? shmem_free_in_core_inode+0xb0/0xb0 [ 463.196819][ T8465] ? do_raw_spin_lock+0x128/0x2f0 [ 463.201884][ T8465] ? bit_waitqueue+0x30/0x30 [ 463.203932][ T8482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1140'. [ 463.206481][ T8465] ? do_raw_spin_unlock+0x11d/0x230 [ 463.206507][ T8465] ? shmem_free_in_core_inode+0xb0/0xb0 [ 463.226086][ T8465] evict+0x4b2/0x9d0 [ 463.230002][ T8465] ? proc_nr_inodes+0x2f0/0x2f0 [ 463.234876][ T8465] ? do_raw_spin_unlock+0x11d/0x230 [ 463.240092][ T8465] ? _raw_spin_unlock+0x24/0x40 [ 463.244968][ T8465] ? iput+0x79f/0x9c0 [ 463.248968][ T8465] __dentry_kill+0x412/0x630 [ 463.253574][ T8465] dentry_kill+0xb8/0x290 [ 463.257916][ T8465] ? dput+0x37/0x1d0 [ 463.261824][ T8465] dput+0xfa/0x1d0 [ 463.265557][ T8465] __fput+0x597/0x8b0 [ 463.269554][ T8465] task_work_run+0x1d0/0x260 [ 463.274159][ T8465] ? task_work_cancel+0x220/0x220 [ 463.279208][ T8465] ? __close_range+0x20c/0x770 [ 463.283992][ T8465] ? exit_to_user_mode_loop+0x3b/0x110 [ 463.289470][ T8465] exit_to_user_mode_loop+0xe6/0x110 [ 463.294779][ T8465] exit_to_user_mode_prepare+0xee/0x180 [ 463.300352][ T8465] syscall_exit_to_user_mode+0x16/0x40 [ 463.305833][ T8465] do_syscall_64+0x58/0xa0 [ 463.310272][ T8465] ? clear_bhb_loop+0x60/0xb0 [ 463.314975][ T8465] ? clear_bhb_loop+0x60/0xb0 [ 463.319671][ T8465] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 463.325586][ T8465] RIP: 0033:0x7fe1cc19fb19 [ 463.330017][ T8465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.349640][ T8465] RSP: 002b:00007ffed18c0a18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 463.358073][ T8465] RAX: 0000000000000000 RBX: 00007ffed18c0b00 RCX: 00007fe1cc19fb19 [ 463.366106][ T8465] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 463.374094][ T8465] RBP: 0000000000070e79 R08: 0000000000000001 R09: 0000000000000000 [ 463.382085][ T8465] R10: 0000001b2ef20000 R11: 0000000000000246 R12: 00007ffed18c0b40 [ 463.390071][ T8465] R13: 00007fe1cc425fac R14: 0000000000071012 R15: 00007fe1cc425fa0 [ 463.398064][ T8465] [ 463.401107][ T8465] Modules linked in: [ 463.405033][ T8465] ---[ end trace 0000000000000000 ]--- [ 463.410496][ T8465] RIP: 0010:filemap_unaccount_folio+0x559/0xa00 [ 463.416762][ T8465] Code: 07 38 c1 0f 8c 35 fe ff ff 4c 89 e7 e8 40 2a 28 00 e9 28 fe ff ff e8 96 c6 d6 ff 48 89 df 48 c7 c6 20 07 b5 8a e8 f7 11 12 00 <0f> 0b e8 80 c6 d6 ff 48 89 df 48 c7 c6 80 0c b5 8a e8 e1 11 12 00 [ 463.436385][ T8465] RSP: 0018:ffffc9000ed67660 EFLAGS: 00010046 [ 463.442469][ T8465] RAX: 833231cf5a2a3300 RBX: ffffea0001259fc0 RCX: 833231cf5a2a3300 [ 463.450462][ T8465] RDX: 0000000000000002 RSI: ffffffff8aac2e40 RDI: ffffffff8afe72a0 [ 463.458454][ T8465] RBP: ffffc9000ed677b8 R08: ffffffff8f22416f R09: 1ffffffff1e4482d [ 463.466439][ T8465] R10: dffffc0000000000 R11: fffffbfff1e4482e R12: ffff88805662f508 [ 463.474406][ T8465] R13: ffffc9000ed67700 R14: dffffc0000000000 R15: ffff88805662f508 [ 463.482401][ T8465] FS: 000055556db9a500(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 463.491362][ T8465] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 463.497964][ T8465] CR2: 000000110c4524ed CR3: 000000002c1bd000 CR4: 00000000003506e0 [ 463.505964][ T8465] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 463.513927][ T8465] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 463.521910][ T8465] Kernel panic - not syncing: Fatal exception [ 463.528318][ T8465] Kernel Offset: disabled [ 463.532662][ T8465] Rebooting in 86400 seconds..