last executing test programs: 1m42.053580609s ago: executing program 3 (id=810): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001140), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 1m41.322807323s ago: executing program 3 (id=815): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000003}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="000000090184c503500003"], 0x32) 1m40.96515451s ago: executing program 3 (id=818): syz_mount_image$vfat(&(0x7f0000001740), &(0x7f0000001780)='./file1\x00', 0x2800010, &(0x7f00000017c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0], 0x1, 0x228, &(0x7f0000001800)="$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") r0 = open(&(0x7f0000001a40)='./file1\x00', 0x6000, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000004c0)=ANY=[]) 1m40.56917384s ago: executing program 3 (id=820): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f00000021c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000002240)=0x6) socketpair(0x1, 0x1, 0x0, &(0x7f0000002280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB="0f000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002300)={{r3}, &(0x7f0000002340), &(0x7f0000002380)=r2}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000024c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000002540), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000002580)=0x2) recvmmsg(r4, &(0x7f00000025c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000002600)={@mcast1, 0x800, 0x0, 0x103, 0x9, 0x5, 0xfffa}, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000002680), 0x8000, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000026c0)={0x1, &(0x7f0000002700)=[{0x6, 0x72, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) 1m36.24679128s ago: executing program 3 (id=833): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x7, &(0x7f0000000900)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000a00), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1m35.987224787s ago: executing program 3 (id=835): gettid() r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000640), 0x80002c1, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x2800091, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="333ed5fca4fdc9da41dc5525a31e2eabcdf2226f58d7bbdaa080715a87526444f694c24bc9dcde8d7b23b254e1004eca8b8da13ab3013dd83f54c309d8aa225fc6f134488184e57f6d604e614457290fd158133e36ecff45f77a818df131c24d37d26a6d12c3debf91a303efb00be5c781ee1406efd1e6e194a04db64a13f8c019f54bcb0fc4d3b629670d76e9512b4a630436da7310", @ANYRESHEX, @ANYRES32, @ANYBLOB="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", @ANYRES32], 0x55, 0x1be, &(0x7f00000017c0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 1m20.917884481s ago: executing program 32 (id=835): gettid() r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000640), 0x80002c1, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x2800091, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="333ed5fca4fdc9da41dc5525a31e2eabcdf2226f58d7bbdaa080715a87526444f694c24bc9dcde8d7b23b254e1004eca8b8da13ab3013dd83f54c309d8aa225fc6f134488184e57f6d604e614457290fd158133e36ecff45f77a818df131c24d37d26a6d12c3debf91a303efb00be5c781ee1406efd1e6e194a04db64a13f8c019f54bcb0fc4d3b629670d76e9512b4a630436da7310", @ANYRESHEX, @ANYRES32, @ANYBLOB="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", @ANYRES32], 0x55, 0x1be, &(0x7f00000017c0)="$eJzsmDFv2lAUhc+zjS1XlejaLq1UJOhQY5u2KkMH1LFDK7Vq1Q1UXERrSgUegKn9A107d+6QGWXhfyRDkilDki1TpDh69jN+ITgRAiGk3G+4Pva7PB9f4CABgiBuLQf7p3tbxYLJ9V0UYIjrh2rao0j94/zZk5322+2/9snuePKmOrOdvuj9NQCTmopAnIdhGMrrBXH8ACXROdTT9U9gsISuQ8FHoT0wfBb6m6S7vN+yvrZ9z/rS9Ztc2Lw4vLi8VGb9Hf9maEr+mLTeH46+N3zf6y0vXnPb85ayZmck/moKXkn+5PcrmY2dzg8OFDhCV8DwXuiXMJLZxCORnv+Blu6vLvn8fH4rm9rGi/v5G3py2BSrGyvMNFnWeXfxRf+10KsYuDgy12t1VeK/CaxmwzQ/w38MRSmfNCk/ykHnZ7k/HD1tdxotr+X9cN3KC/uZbT93y1EQxTUrAqHBjPLpznR/Ncxl9OpMx6ARBD0nrtNzd2Ag6LnzEleP8k9B6XHsms35kYs+JvfYI34oqcB5GJNh40/mwxAEQRAEQRAEQRAEQRAEQVzLQzP+l/US1SuX3HdR90UAAAD//2C6a2w=") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 6.123286187s ago: executing program 2 (id=1192): pipe(&(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000500)=r1) connect$unix(r2, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000005c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000600), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000640)='./sys\x00', 0x0, 0x0, 0x0) write(r0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB="2000000002010101000012440cfc8316c3420001040019"], 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) r6 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/bus/pci/rescan\x00', 0x1, 0x0) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000202, 0x0, 0x0) write(r6, &(0x7f0000000700)='1', 0x1) 4.52053238s ago: executing program 5 (id=1196): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./tracing\x00', 0x204858, &(0x7f0000002440)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES8, @ANYRES32], 0x1, 0x347, &(0x7f0000002600)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000002a00)=""/55, 0x37) 4.401722212s ago: executing program 2 (id=1197): socket$rxrpc(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1007) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000440)=r1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000580)={@multicast2, @loopback}, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000600)={'lo\x00', 0x8000}) close_range(r2, 0xffffffffffffffff, 0x0) 4.287349654s ago: executing program 0 (id=1198): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x42}]}, 0x10) listen(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="055da9a7b3ca387393ee56c3c496905efa2c579216838c03aa171d845647009c19a29e", 0x23}], 0x1}}], 0x1, 0x48045) close_range(r0, 0xffffffffffffffff, 0x0) 4.276911025s ago: executing program 4 (id=1199): socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x1d4e, 0x103) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/printer.usb0\x00') syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x300) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f00000004c0)='proc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000580)='proc/kallsyms\x00', 0x0, 0x0) 3.994078344s ago: executing program 5 (id=1201): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x3c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.993199474s ago: executing program 0 (id=1202): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000850) 3.963005457s ago: executing program 1 (id=1203): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000003}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="000000090184c503500003"], 0x32) 3.823838391s ago: executing program 2 (id=1204): r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000540)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x40004, &(0x7f0000000640)=@abs={0x0, 0x7, 0xd0000e1}, 0x6e) 3.706718493s ago: executing program 5 (id=1205): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) socket$unix(0x1, 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.706139913s ago: executing program 0 (id=1206): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x1, 0x0, 0x0, 'queue1\x00'}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000003c0)={0x0, 0x2, 0xbe}) 3.610448643s ago: executing program 5 (id=1207): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x4c, r1, 0x1, 0x3, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2400c840}, 0x4048092) 3.564939567s ago: executing program 1 (id=1208): pipe(&(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000500)=r1) connect$unix(r2, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000005c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000600), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000640)='./sys\x00', 0x0, 0x0, 0x0) write(r0, &(0x7f0000000680), 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB="2000000002010101000012440cfc8316c3420001040019"], 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) r6 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/bus/pci/rescan\x00', 0x1, 0x0) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000202, 0x0, 0x0) write(r6, &(0x7f0000000700)='1', 0x1) 3.507548773s ago: executing program 4 (id=1209): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='net/dev_mcast\x00') pread64(r0, &(0x7f0000002900)=""/102400, 0x19000, 0x41e) unshare(0x22020600) r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2001, 0x0) ppoll(&(0x7f0000001ac0)=[{r1}], 0x1, 0x0, 0x0, 0x0) 3.412634393s ago: executing program 0 (id=1210): socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r0, &(0x7f00000001c0)=""/145, 0x91) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 3.24727518s ago: executing program 2 (id=1211): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./tracing\x00', 0x204858, &(0x7f0000002440)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES8, @ANYRES32], 0x1, 0x347, &(0x7f0000002600)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000002a00)=""/55, 0x37) 3.24692526s ago: executing program 5 (id=1212): r0 = socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffffff, 0x0, 0x4) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10b) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000001300)='./file0\x00', 0x2a0935e, &(0x7f0000001340)={[{@abort}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@dioread_nolock}, {@dioread_nolock}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f00000013c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000001840)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001880)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000018c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001940)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000019c0), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000001a00), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x402, &(0x7f0000001a40)={&(0x7f0000001a80)=""/108, 0x6c}) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r0, 0x1) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "02"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r5, &(0x7f0000000100)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x18, 0x110, 0x1, "01000000"}], 0x18}, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {0x0}], 0x2}, 0x0) 1.954618231s ago: executing program 1 (id=1213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) tee(r2, 0xffffffffffffffff, 0x3, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 1.860055541s ago: executing program 4 (id=1214): socket$rxrpc(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1007) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000440)=r1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000580)={@multicast2, @loopback}, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000600)={'lo\x00', 0x8000}) close_range(r2, 0xffffffffffffffff, 0x0) 1.401018288s ago: executing program 4 (id=1215): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x42}]}, 0x10) listen(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="055da9a7b3ca387393ee56c3c496905efa2c579216838c03aa171d845647009c19a29e", 0x23}], 0x1}}], 0x2, 0x48045) close_range(r0, 0xffffffffffffffff, 0x0) 1.131275285s ago: executing program 2 (id=1216): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000940)='./file0\x00', 0x0, &(0x7f0000000980), 0x1, 0x490, &(0x7f00000009c0)="$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") open(0x0, 0x0, 0x0) mkdir(&(0x7f0000001180)='./trace\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='.\x00', 0x0, 0x0) statx(r0, &(0x7f0000000600)='./file2\x00', 0x100, 0x883e4c0c6db56ec3, &(0x7f0000000640)) 993.412649ms ago: executing program 0 (id=1217): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r1, @ANYRES32=r1], 0x44}}, 0x2000850) 740.260465ms ago: executing program 1 (id=1218): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000003}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="000000090184c503500003"], 0x32) 691.05194ms ago: executing program 0 (id=1219): socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x1d4e, 0x103) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/printer.usb0\x00') syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x300) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f00000004c0)='proc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000580)='proc/kallsyms\x00', 0x0, 0x0) 372.725193ms ago: executing program 4 (id=1220): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x1, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000003c0)={0x0, 0x2, 0xbe}) 364.803013ms ago: executing program 1 (id=1221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f00000002c0)={@void, @void, @eth={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4000, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x17c1, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "6cb8ec4860855e3665d8c7e2cbc3879f1d80baa2f5c55e54", "f1e1df33cf5d887d818801de4189e0c45a16f9158f77b93aaf537d6e0aba6b79"}}}}}}}, 0x6e) 283.388601ms ago: executing program 2 (id=1222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000740)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000780)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="03031b003000320006006300000000442fff00000000000000000000ffffac141419ff020000000000000000000000000001042088be"], 0x76) 138.270236ms ago: executing program 4 (id=1223): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f00000003c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 39.253696ms ago: executing program 1 (id=1224): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='net/dev_mcast\x00') pread64(r0, &(0x7f0000002900)=""/102400, 0x19000, 0x41e) unshare(0x22020600) r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2001, 0x0) ppoll(&(0x7f0000001ac0)=[{r1}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=1225): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x1c, 0x10, 0x701, 0x0, 0x25dfdbfb, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), r0) kernel console output (not intermixed with test programs): "syz.1.57" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8a59f559 code=0x7ffc0000 [ 99.840344][ T26] audit: type=1326 audit(1792824548.385:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4595 comm="syz.1.57" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8a59f559 code=0x7ffc0000 [ 99.876060][ T26] audit: type=1326 audit(1792824548.385:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4595 comm="syz.1.57" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8a59f559 code=0x7ffc0000 [ 99.956344][ T26] audit: type=1326 audit(1792824548.385:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4595 comm="syz.1.57" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf8a59f559 code=0x7ffc0000 [ 99.957989][ T4628] loop0: detected capacity change from 0 to 512 [ 102.696594][ T4353] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.949457][ T4628] fscrypt: Error allocating hmac(sha512): -2 [ 103.040063][ T4353] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.073537][ T4353] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.315150][ T4353] usb 3-1: config 0 interface 0 has no altsetting 0 [ 103.746539][ T4353] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 103.814229][ T4353] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.890126][ T4353] usb 3-1: config 0 descriptor?? [ 107.011526][ T4353] usbhid 3-1:0.0: can't add hid device: -71 [ 107.019342][ T4353] usbhid: probe of 3-1:0.0 failed with error -71 [ 107.141670][ T4353] usb 3-1: USB disconnect, device number 2 [ 107.244441][ T4696] Bluetooth: MGMT ver 1.22 [ 107.364963][ T4693] ip_tables: iptables: counters copy to user failed while replacing table [ 107.669250][ T4702] __nla_validate_parse: 2 callbacks suppressed [ 107.669295][ T4702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 108.772786][ T4714] loop2: detected capacity change from 0 to 512 [ 109.645870][ T4714] EXT4-fs (loop2): Test dummy encryption mode enabled [ 109.659730][ T4714] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 109.946925][ T4714] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.962631][ T4740] loop1: detected capacity change from 0 to 512 [ 111.111318][ T4714] EXT4-fs error (device loop2): ext4_orphan_get:1435: comm syz.2.86: bad orphan inode 131083 [ 111.150177][ T4714] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 111.450038][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 112.066502][ T4356] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.099664][ T4780] loop4: detected capacity change from 0 to 2048 [ 112.174247][ T4780] EXT4-fs (loop4): blocks per group (262144) and clusters per group (16384) inconsistent [ 112.238946][ T4356] usb 3-1: device descriptor read/64, error -71 [ 112.482975][ T4788] loop1: detected capacity change from 0 to 512 [ 112.511749][ T4356] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.603780][ T4788] EXT4-fs (loop1): Test dummy encryption mode enabled [ 112.640310][ T4788] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 112.666579][ T4356] usb 3-1: device descriptor read/64, error -71 [ 112.749236][ T4788] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.111: bad orphan inode 131083 [ 112.778036][ T4788] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 112.786974][ T4356] usb usb3-port1: attempt power cycle [ 113.101880][ T4788] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 113.151144][ T4808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.112'. [ 113.206613][ T4356] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 113.310435][ T4356] usb 3-1: device descriptor read/8, error -71 [ 113.626616][ T4356] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 113.687406][ T4356] usb 3-1: device descriptor read/8, error -71 [ 113.820171][ T4356] usb usb3-port1: unable to enumerate USB device [ 113.986363][ T4816] hub 6-0:1.0: USB hub found [ 113.991913][ T4816] hub 6-0:1.0: 1 port detected [ 114.006676][ T27] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.103899][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 114.103916][ T26] audit: type=1326 audit(1792824563.945:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4818 comm="syz.3.117" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3636f9f559 code=0x7ffc0000 [ 114.191223][ T26] audit: type=1326 audit(1792824563.985:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4818 comm="syz.3.117" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3636f9f559 code=0x7ffc0000 [ 114.191448][ T4819] block device autoloading is deprecated and will be removed. [ 114.238634][ T27] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.267161][ T27] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.295313][ T26] audit: type=1326 audit(1792824563.985:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4818 comm="syz.3.117" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3636f9f559 code=0x7ffc0000 [ 114.339660][ T27] usb 5-1: config 0 interface 0 has no altsetting 0 [ 114.357493][ T27] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 114.376710][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.395234][ T26] audit: type=1326 audit(1792824563.985:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4818 comm="syz.3.117" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3636f9f559 code=0x7ffc0000 [ 114.427885][ T27] usb 5-1: config 0 descriptor?? [ 114.484808][ T26] audit: type=1326 audit(1792824563.985:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4818 comm="syz.3.117" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3636f9f559 code=0x7ffc0000 [ 114.608942][ T26] audit: type=1326 audit(1792824563.985:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4818 comm="syz.3.117" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3636f9f559 code=0x7ffc0000 [ 114.665684][ T26] audit: type=1326 audit(1792824563.985:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4818 comm="syz.3.117" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3636f9f559 code=0x7ffc0000 [ 114.691942][ T26] audit: type=1326 audit(1792824563.985:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4818 comm="syz.3.117" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3636f9f559 code=0x7ffc0000 [ 114.746541][ T26] audit: type=1326 audit(1792824563.985:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4818 comm="syz.3.117" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3636f9f559 code=0x7ffc0000 [ 114.779299][ T26] audit: type=1326 audit(1792824563.985:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4818 comm="syz.3.117" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f3636f9f559 code=0x7ffc0000 [ 114.869663][ T27] appleir 0003:05AC:8241.0001: unknown main item tag 0x4 [ 114.897895][ T27] appleir 0003:05AC:8241.0001: unknown main item tag 0xd [ 114.926732][ T27] appleir 0003:05AC:8241.0001: collection stack underflow [ 114.946565][ T27] appleir 0003:05AC:8241.0001: item 0 2 0 12 parsing failed [ 114.968101][ T27] appleir 0003:05AC:8241.0001: parse failed [ 114.988634][ T27] appleir: probe of 0003:05AC:8241.0001 failed with error -22 [ 115.243521][ T4843] loop4: detected capacity change from 0 to 512 [ 115.519931][ T4848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.123'. [ 116.083809][ T4799] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 116.135261][ T4799] FAT-fs (loop4): Filesystem has been set read-only [ 116.192663][ T4356] usb 5-1: USB disconnect, device number 2 [ 116.262585][ T4788] EXT4-fs (loop1): unmounting filesystem. [ 117.199620][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.379416][ T4887] netlink: 'syz.2.138': attribute type 3 has an invalid length. [ 117.412771][ T4887] netlink: 132 bytes leftover after parsing attributes in process `syz.2.138'. [ 117.511421][ T27] usb 2-1: device descriptor read/64, error -71 [ 117.526385][ T4889] loop4: detected capacity change from 0 to 512 [ 117.568272][ T4889] EXT4-fs (loop4): Test dummy encryption mode enabled [ 117.575241][ T4889] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 117.637957][ T4892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.137'. [ 117.826724][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 117.917021][ T4889] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.139: bad orphan inode 131083 [ 118.046774][ T27] usb 2-1: device descriptor read/64, error -71 [ 118.080860][ T4889] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 118.226647][ T27] usb usb2-port1: attempt power cycle [ 118.796569][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.847244][ T27] usb 2-1: device descriptor read/8, error -71 [ 119.116557][ T27] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 119.157359][ T27] usb 2-1: device descriptor read/8, error -71 [ 119.276770][ T27] usb usb2-port1: unable to enumerate USB device [ 119.420894][ T4919] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzc2 [ 120.183129][ T4899] EXT4-fs (loop4): unmounting filesystem. [ 121.276539][ T4356] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 121.303632][ T4973] loop4: detected capacity change from 0 to 512 [ 121.330528][ T4974] loop3: detected capacity change from 0 to 512 [ 121.402626][ T4974] EXT4-fs (loop3): Test dummy encryption mode enabled [ 121.466867][ T4974] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 121.474431][ T4356] usb 2-1: device descriptor read/64, error -71 [ 121.537916][ T4973] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 121.548105][ T4974] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.170: bad orphan inode 131083 [ 121.556625][ T4973] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.576873][ T4974] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 121.756602][ T4356] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 121.779258][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 121.779276][ T26] audit: type=1800 audit(1792824571.625:97): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.169" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 121.916674][ T4356] usb 2-1: device descriptor read/64, error -71 [ 121.985908][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 122.057872][ T4356] usb usb2-port1: attempt power cycle [ 122.397201][ T4992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.172'. [ 122.617195][ T4996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'. [ 122.637347][ T4996] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 122.658718][ T4996] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000 [ 122.689870][ T4996] pci 0000:00:05.0: BAR 0 [mem 0xfe000000-0xfe7fffff] [ 122.864159][ T4996] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 122.903090][ T4996] pci 0000:00:05.0: vgaarb: setting as boot VGA device [ 122.910313][ T4996] pci 0000:00:05.0: vgaarb: bridge control possible [ 122.916932][ T4996] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 122.932854][ T4996] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff]: assigned [ 123.220522][ T4356] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 123.268538][ T4356] usb 2-1: device descriptor read/8, error -71 [ 123.536652][ T4356] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 123.597341][ T4356] usb 2-1: device descriptor read/8, error -71 [ 123.716813][ T4356] usb usb2-port1: unable to enumerate USB device [ 124.433254][ T4987] EXT4-fs (loop3): unmounting filesystem. [ 125.141133][ T5050] netlink: 60 bytes leftover after parsing attributes in process `syz.3.194'. [ 125.166685][ T5050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 125.176875][ T4297] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 125.336618][ T4297] usb 2-1: device descriptor read/64, error -71 [ 125.578222][ T5062] loop0: detected capacity change from 0 to 512 [ 125.652529][ T5064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.197'. [ 125.813120][ T5062] EXT4-fs (loop0): Test dummy encryption mode enabled [ 125.965813][ T5062] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 126.308420][ T5062] EXT4-fs error (device loop0): ext4_orphan_get:1435: comm syz.0.198: bad orphan inode 131083 [ 126.364035][ T5062] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 126.400759][ T4297] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 126.566557][ T4297] usb 2-1: device descriptor read/64, error -71 [ 126.706789][ T4297] usb usb2-port1: attempt power cycle [ 127.071449][ T5080] loop3: detected capacity change from 0 to 256 [ 127.116645][ T4297] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 127.158417][ T4297] usb 2-1: device descriptor read/8, error -71 [ 127.436551][ T4297] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 127.493215][ T4297] usb 2-1: device descriptor read/8, error -71 [ 127.629860][ T4297] usb usb2-port1: unable to enumerate USB device [ 128.218556][ T5075] EXT4-fs (loop0): unmounting filesystem. [ 130.439547][ T5133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.218'. [ 130.459455][ T5133] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 131.082743][ T5141] loop4: detected capacity change from 0 to 512 [ 131.222557][ T5141] EXT4-fs (loop4): Test dummy encryption mode enabled [ 131.256454][ T5141] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 131.311820][ T5141] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.223: bad orphan inode 131083 [ 131.342875][ T5141] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 132.533374][ T5170] loop0: detected capacity change from 0 to 512 [ 133.197759][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.229787][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.807182][ T5181] block device autoloading is deprecated and will be removed. [ 133.846811][ T5181] md: md3 stopped. [ 133.882975][ T5183] loop0: detected capacity change from 0 to 512 [ 134.018415][ T5183] EXT4-fs error (device loop0): ext4_orphan_get:1435: comm syz.0.236: bad orphan inode 15 [ 134.059607][ T5183] ext4_test_bit(bit=14, block=5) = 0 [ 134.075364][ T5183] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 134.232434][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 134.454694][ T5201] loop3: detected capacity change from 0 to 128 [ 134.490625][ T5203] netlink: 3600 bytes leftover after parsing attributes in process `syz.1.245'. [ 134.538823][ T5201] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 134.602419][ T5201] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 134.614278][ T5207] loop2: detected capacity change from 0 to 512 [ 136.224137][ T5221] random: crng reseeded on system resumption [ 136.368146][ T5226] block device autoloading is deprecated and will be removed. [ 136.388153][ T5226] md: md2 stopped. [ 136.491734][ T5159] EXT4-fs (loop4): unmounting filesystem. [ 136.501254][ T5230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 136.875747][ T5241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.258'. [ 137.110670][ T5247] loop0: detected capacity change from 0 to 512 [ 138.228701][ T5256] block device autoloading is deprecated and will be removed. [ 138.339140][ T5265] FAULT_INJECTION: forcing a failure. [ 138.339140][ T5265] name failslab, interval 1, probability 0, space 0, times 1 [ 138.349901][ T5269] loop3: detected capacity change from 0 to 512 [ 138.400393][ T5269] EXT4-fs (loop3): Test dummy encryption mode enabled [ 138.402536][ T5265] CPU: 1 PID: 5265 Comm: syz.4.269 Not tainted syzkaller #0 [ 138.414802][ T5265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 138.417895][ T5269] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 138.424874][ T5265] Call Trace: [ 138.424887][ T5265] [ 138.424896][ T5265] dump_stack_lvl+0x188/0x24e [ 138.424947][ T5265] ? show_regs_print_info+0x12/0x12 [ 138.451032][ T5265] ? load_image+0x410/0x410 [ 138.455591][ T5265] ? __lock_acquire+0x7ea0/0x7ea0 [ 138.460672][ T5265] should_fail_ex+0x390/0x4c0 [ 138.465413][ T5265] should_failslab+0x5/0x20 [ 138.469957][ T5265] slab_pre_alloc_hook+0x59/0x300 [ 138.475023][ T5265] ? percpu_ref_put+0x12/0x100 [ 138.479842][ T5265] ? single_open+0x56/0x230 [ 138.484393][ T5265] __kmem_cache_alloc_node+0x4f/0x270 [ 138.489809][ T5265] ? netstat_seq_show+0xdf0/0xdf0 [ 138.495001][ T5265] ? single_open+0x56/0x230 [ 138.499560][ T5265] kmalloc_trace+0x26/0xe0 [ 138.504276][ T5265] ? netstat_seq_show+0xdf0/0xdf0 [ 138.509356][ T5265] single_open+0x56/0x230 [ 138.515413][ T5265] single_open_net+0x74/0x120 [ 138.520503][ T5265] proc_reg_open+0x23b/0x520 [ 138.525603][ T5265] ? proc_reg_mmap+0x280/0x280 [ 138.530418][ T5265] do_dentry_open+0x7dd/0x10b0 [ 138.535242][ T5265] path_openat+0x2674/0x2f10 [ 138.539909][ T5265] ? do_filp_open+0x420/0x420 [ 138.544656][ T5265] do_filp_open+0x1ee/0x420 [ 138.549215][ T5265] ? vfs_tmpfile+0x470/0x470 [ 138.553867][ T5265] ? noop_direct_IO+0x10/0x10 [ 138.558600][ T5265] ? _raw_spin_unlock+0x24/0x40 [ 138.563495][ T5265] ? alloc_fd+0x590/0x640 [ 138.567880][ T5265] do_sys_openat2+0x14b/0x4f0 [ 138.572617][ T5265] ? do_sys_open+0xe0/0xe0 [ 138.577343][ T5265] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 138.583376][ T5265] ? lock_chain_count+0x20/0x20 [ 138.588290][ T5265] __x64_sys_openat+0x135/0x160 [ 138.593203][ T5265] do_syscall_64+0x4c/0xa0 [ 138.597653][ T5265] ? clear_bhb_loop+0x60/0xb0 [ 138.602504][ T5265] ? clear_bhb_loop+0x60/0xb0 [ 138.607499][ T5265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.613493][ T5265] RIP: 0033:0x7f2b5975fd8e [ 138.617950][ T5265] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 138.637857][ T5265] RSP: 002b:00007f2b5a62aec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 138.646308][ T5265] RAX: ffffffffffffffda RBX: 00007f2b5a62b6c0 RCX: 00007f2b5975fd8e [ 138.654441][ T5265] RDX: 0000000000000002 RSI: 00007f2b5a62af90 RDI: ffffffffffffff9c [ 138.662428][ T5265] RBP: 00007f2b59836b20 R08: 0000000000000000 R09: 0000000000000000 [ 138.670849][ T5265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.678921][ T5265] R13: 00007f2b59a26038 R14: 00007f2b59a25fa0 R15: 00007ffdd6d50378 [ 138.686913][ T5265] [ 138.711066][ T5269] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.267: bad orphan inode 131083 [ 138.734493][ T5269] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 140.473290][ T5335] loop4: detected capacity change from 0 to 1024 [ 140.531321][ T5335] EXT4-fs: Ignoring removed bh option [ 140.579829][ T5337] ip_tables: iptables: counters copy to user failed while replacing table [ 140.610620][ T5335] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 140.705855][ T5335] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 140.788155][ T5291] EXT4-fs (loop3): unmounting filesystem. [ 141.027982][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 141.185081][ T5350] netlink: 'syz.0.302': attribute type 6 has an invalid length. [ 141.232999][ T5350] Zero length message leads to an empty skb [ 141.802846][ T5374] loop3: detected capacity change from 0 to 512 [ 142.190954][ T5374] EXT4-fs (loop3): 1 orphan inode deleted [ 142.232110][ T5383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'. [ 142.843782][ T5374] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 142.908163][ T5374] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.955142][ T37] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 142.989927][ T37] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:2: Failed to release dquot type 1 [ 142.994226][ T5387] tunl0: Master is either lo or non-ether device [ 143.057415][ T5374] EXT4-fs (loop3): shut down requested (2) [ 143.171696][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 143.316242][ T5395] loop2: detected capacity change from 0 to 512 [ 144.564792][ T5414] netlink: 156 bytes leftover after parsing attributes in process `syz.3.327'. [ 144.645083][ T4356] smpboot: CPU 1 is now offline [ 145.620853][ T5447] loop4: detected capacity change from 0 to 512 [ 147.206630][ T5457] netlink: 156 bytes leftover after parsing attributes in process `syz.1.342'. [ 148.902811][ T5469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.346'. [ 149.341339][ T5477] FAULT_INJECTION: forcing a failure. [ 149.341339][ T5477] name failslab, interval 1, probability 0, space 0, times 0 [ 149.500850][ T5477] CPU: 0 PID: 5477 Comm: syz.1.348 Not tainted syzkaller #0 [ 149.508357][ T5477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 149.518756][ T5477] Call Trace: [ 149.522407][ T5477] [ 149.525357][ T5477] dump_stack_lvl+0x188/0x24e [ 149.530151][ T5477] ? show_regs_print_info+0x12/0x12 [ 149.535346][ T5477] ? load_image+0x410/0x410 [ 149.539849][ T5477] ? __might_sleep+0xd0/0xd0 [ 149.544430][ T5477] ? __lock_acquire+0x7ea0/0x7ea0 [ 149.549561][ T5477] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 149.555563][ T5477] should_fail_ex+0x390/0x4c0 [ 149.560405][ T5477] should_failslab+0x5/0x20 [ 149.564967][ T5477] slab_pre_alloc_hook+0x59/0x300 [ 149.570137][ T5477] kmem_cache_alloc_node+0x5a/0x310 [ 149.575354][ T5477] ? blk_alloc_queue+0x5f/0x5b0 [ 149.580210][ T5477] blk_alloc_queue+0x5f/0x5b0 [ 149.584890][ T5477] __blk_alloc_disk+0x17/0x80 [ 149.589564][ T5477] dm_create+0x46b/0xf90 [ 149.593817][ T5477] dev_create+0x12e/0x2c0 [ 149.598160][ T5477] ? list_devices+0x820/0x820 [ 149.602874][ T5477] ? __might_fault+0xc2/0x120 [ 149.607545][ T5477] ? __might_fault+0xa6/0x120 [ 149.612421][ T5477] dm_ctl_ioctl+0xa9c/0xec0 [ 149.617389][ T5477] ? list_devices+0x820/0x820 [ 149.622123][ T5477] ? dm_poll+0x120/0x120 [ 149.626511][ T5477] ? bpf_lsm_file_ioctl+0x5/0x10 [ 149.631635][ T5477] ? security_file_ioctl+0x7c/0xa0 [ 149.637066][ T5477] ? dm_poll+0x120/0x120 [ 149.641320][ T5477] __se_sys_ioctl+0xfa/0x170 [ 149.646013][ T5477] do_syscall_64+0x4c/0xa0 [ 149.650537][ T5477] ? clear_bhb_loop+0x60/0xb0 [ 149.655246][ T5477] ? clear_bhb_loop+0x60/0xb0 [ 149.659962][ T5477] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.666064][ T5477] RIP: 0033:0x7fdf8a59f559 [ 149.670528][ T5477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.690331][ T5477] RSP: 002b:00007fdf8b3b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.699298][ T5477] RAX: ffffffffffffffda RBX: 00007fdf8a825fa0 RCX: 00007fdf8a59f559 [ 149.707483][ T5477] RDX: 0000200000000140 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 149.715507][ T5477] RBP: 00007fdf8a636b20 R08: 0000000000000000 R09: 0000000000000000 [ 149.723711][ T5477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.731697][ T5477] R13: 00007fdf8a826038 R14: 00007fdf8a825fa0 R15: 00007ffe1a4b30f8 [ 149.739769][ T5477] [ 150.115125][ T5487] loop3: detected capacity change from 0 to 512 [ 151.549122][ T5495] loop3: detected capacity change from 0 to 128 [ 152.674405][ T5497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.355'. [ 152.783020][ T5495] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 152.911674][ T5495] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 153.057743][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 154.466619][ T5511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.359'. [ 155.590253][ T5528] loop2: detected capacity change from 0 to 512 [ 155.651266][ T5532] loop1: detected capacity change from 0 to 128 [ 159.031174][ T5571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.381'. [ 159.262112][ T5575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.382'. [ 159.315354][ T5578] loop3: detected capacity change from 0 to 512 [ 160.988747][ T5579] sctp: failed to load transform for md5: -2 [ 161.458410][ T5615] loop3: detected capacity change from 0 to 512 [ 161.492139][ T5615] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 161.534914][ T5615] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 161.590542][ T5615] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.391: Invalid block bitmap block 0 in block_group 0 [ 161.674936][ T5615] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 161.736942][ T5615] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.391: attempt to clear invalid blocks 983261 len 1 [ 161.790679][ T5615] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.391: Invalid inode table block 0 in block_group 0 [ 161.874526][ T5615] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 161.921399][ T5615] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 161.953190][ T5615] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.391: Invalid inode table block 0 in block_group 0 [ 161.993118][ T5628] loop1: detected capacity change from 0 to 512 [ 162.012833][ T5615] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 162.167668][ T5615] EXT4-fs error (device loop3): ext4_truncate:4325: inode #11: comm syz.3.391: mark_inode_dirty error [ 163.396685][ T5615] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 163.438999][ T5615] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.391: Invalid inode table block 0 in block_group 0 [ 163.519821][ T5615] EXT4-fs (loop3): 1 truncate cleaned up [ 163.525641][ T5615] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 163.679881][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 165.539808][ T5665] loop2: detected capacity change from 0 to 512 [ 167.350291][ T5698] loop4: detected capacity change from 0 to 512 [ 168.683752][ T4377] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 169.886536][ T4377] usb 1-1: Using ep0 maxpacket: 16 [ 169.901336][ T4377] usb 1-1: unable to get BOS descriptor or descriptor too short [ 170.128525][ T4377] usb 1-1: config 3 has an invalid interface number: 105 but max is 1 [ 170.163124][ T4377] usb 1-1: config 3 has an invalid interface number: 164 but max is 1 [ 170.235774][ T4377] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 170.276495][ T4377] usb 1-1: config 3 has no interface number 0 [ 170.282630][ T4377] usb 1-1: config 3 has no interface number 1 [ 170.376620][ T4377] usb 1-1: config 3 interface 105 has no altsetting 0 [ 170.416488][ T4377] usb 1-1: config 3 interface 164 has no altsetting 0 [ 170.460028][ T4377] usb 1-1: string descriptor 0 read error: -71 [ 170.500714][ T4377] usb 1-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=4c.06 [ 170.556361][ T4377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.747039][ T5732] loop3: detected capacity change from 0 to 512 [ 171.763113][ T5734] loop4: detected capacity change from 0 to 512 [ 171.787668][ T4377] usb 1-1: can't set config #3, error -71 [ 171.875248][ T4377] usb 1-1: USB disconnect, device number 2 [ 171.899065][ T5734] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 172.062227][ T5734] System zones: 0-7 [ 172.083552][ T5734] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 173.077650][ T26] audit: type=1800 audit(1792824622.925:98): pid=5734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.440" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 173.203014][ T5748] Illegal XDP return value 1347954265 on prog (id 30) dev N/A, expect packet loss! [ 173.332934][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 173.342563][ T5749] netlink: 'syz.1.445': attribute type 21 has an invalid length. [ 173.977647][ T5775] loop4: detected capacity change from 0 to 512 [ 174.009572][ T4297] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 174.328275][ T4297] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 1024 [ 174.355300][ T4297] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 174.384941][ T4297] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 174.414403][ T4297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.441747][ T4297] usb 1-1: Product: syz [ 174.454935][ T4297] usb 1-1: Manufacturer: syz [ 174.471158][ T4297] usb 1-1: SerialNumber: syz [ 174.501946][ T5767] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 175.389062][ T5767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.440053][ T5820] loop3: detected capacity change from 0 to 512 [ 175.464989][ T5767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.486808][ T4297] usb 1-1: failed to send ARPC request 1: -110 [ 175.493620][ T4297] usb 1-1: failed to execute ARPC: -110 [ 175.554188][ T4297] usb 1-1: failed to set connected state for cport 0: -110 [ 175.589941][ T4297] greybus greybus1: 0/0:0: failed to set connected state: -110 [ 176.137286][ T4297] usb 1-1: failed to send ARPC request 3: -110 [ 176.154752][ T4297] usb 1-1: failed to execute ARPC: -110 [ 176.175784][ T4297] usb 1-1: failed to clear cport 0: -110 [ 176.201370][ T4297] greybus greybus1: 0/0:0: failed to clear host cport: -110 [ 176.342047][ T4297] es2_ap_driver: probe of 1-1:1.0 failed with error -110 [ 176.503819][ T5848] loop1: detected capacity change from 0 to 512 [ 176.619546][ T26] audit: type=1800 audit(1792824626.465:99): pid=5848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.491" name="file1" dev="loop1" ino=1048642 res=0 errno=0 [ 177.027737][ T5856] loop4: detected capacity change from 0 to 16 [ 177.927960][ T5856] erofs: (device loop4): mounted with root inode @ nid 36. [ 179.165412][ T4297] usb 1-1: USB disconnect, device number 3 [ 181.165686][ T5883] loop1: detected capacity change from 0 to 512 [ 181.370510][ T5887] loop3: detected capacity change from 0 to 1764 [ 181.467590][ T4297] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 181.670311][ T4297] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 181.698453][ T4297] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 181.732064][ T4297] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.762757][ T4297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.790927][ T4297] usb 5-1: Product: syz [ 181.805614][ T4297] usb 5-1: Manufacturer: ᰉ [ 181.821832][ T4297] usb 5-1: SerialNumber: syz [ 182.077476][ T4297] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 182.109733][ T4297] cdc_ncm 5-1:1.0: bind() failure [ 182.205627][ T4297] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 182.238027][ T4297] cdc_ncm 5-1:1.1: bind() failure [ 182.331656][ T4297] usb 5-1: USB disconnect, device number 3 [ 182.422025][ T5915] ip_tables: iptables: counters copy to user failed while replacing table [ 183.059251][ T4364] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.260416][ T4364] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.450384][ T4364] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.502323][ T5929] loop1: detected capacity change from 0 to 512 [ 183.907561][ T4364] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.044927][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.525'. [ 185.903096][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 185.914573][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 185.923085][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 185.930930][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 185.940441][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 185.948393][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 186.221917][ T5949] rxe_eth0 speed is unknown, defaulting to 1000 [ 186.732962][ T5970] loop4: detected capacity change from 0 to 512 [ 187.941022][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 187.966821][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 189.736312][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.782094][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.830056][ T5949] device bridge_slave_0 entered promiscuous mode [ 189.891188][ T4364] device hsr_slave_0 left promiscuous mode [ 189.921854][ T4364] device hsr_slave_1 left promiscuous mode [ 189.931268][ T6017] loop1: detected capacity change from 0 to 512 [ 189.954075][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.138585][ T4288] Bluetooth: hci1: command 0x041b tx timeout [ 190.167694][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.211593][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.254787][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.305379][ T4364] device bridge_slave_1 left promiscuous mode [ 191.618690][ T4364] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.666355][ T4364] device bridge_slave_0 left promiscuous mode [ 191.689725][ T4364] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.771750][ T4288] Bluetooth: hci1: command 0x040f tx timeout [ 192.808805][ T4364] device veth1_macvtap left promiscuous mode [ 193.522195][ T4364] device veth0_macvtap left promiscuous mode [ 193.547192][ T4364] device veth1_vlan left promiscuous mode [ 193.567351][ T4364] device veth0_vlan left promiscuous mode [ 194.771327][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.791668][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.916336][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 195.141388][ T6046] capability: warning: `syz.4.559' uses deprecated v2 capabilities in a way that may be insecure [ 195.299335][ T6050] loop3: detected capacity change from 0 to 512 [ 195.357173][ T6052] loop4: detected capacity change from 0 to 512 [ 196.315074][ T6065] scsi_strcpy_devinfo: vendor string 'F P?o;"Ӣژ' is too long [ 196.335150][ T6065] scsi_strcpy_devinfo: model string 'rTegɁxRrba* [ 196.335150][ T6065] HƬ`UbE6X,Yud,^5hUaי' ^)OlqGVA4!y ѐS [ 196.335150][ T6065] '@H>3&wk' is too long [ 196.605749][ T4364] team0 (unregistering): Port device team_slave_1 removed [ 196.683296][ T4364] team0 (unregistering): Port device team_slave_0 removed [ 197.801378][ T4364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.065066][ T4364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.284203][ T6080] loop4: detected capacity change from 0 to 512 [ 199.292982][ T4364] bond0 (unregistering): Released all slaves [ 199.366021][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.375492][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.391312][ T5949] device bridge_slave_1 entered promiscuous mode [ 199.621167][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.700431][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.197454][ T5949] team0: Port device team_slave_0 added [ 200.240492][ T6112] loop3: detected capacity change from 0 to 128 [ 200.273296][ T5949] team0: Port device team_slave_1 added [ 200.385612][ T26] audit: type=1800 audit(1792824650.225:100): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.585" name="file1" dev="loop3" ino=1048645 res=0 errno=0 [ 200.426126][ T6112] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 200.446149][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.494183][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.526809][ T6112] FAT-fs (loop3): Filesystem has been set read-only [ 200.738003][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.841360][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.896159][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.052221][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.079458][ T1183] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 201.276682][ T1183] usb 2-1: Using ep0 maxpacket: 16 [ 201.292325][ T5949] device hsr_slave_0 entered promiscuous mode [ 201.315831][ T6121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.353820][ T5949] device hsr_slave_1 entered promiscuous mode [ 201.401878][ T6121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.494668][ T6121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.602263][ T6121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.686988][ T1183] usb 2-1: unable to get BOS descriptor or descriptor too short [ 201.715730][ T1183] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 201.775015][ T1183] usb 2-1: can't read configurations, error -71 [ 201.806505][ T4279] Bluetooth: hci4: command 0x0406 tx timeout [ 201.812565][ T4279] Bluetooth: hci3: command 0x0406 tx timeout [ 201.819327][ T4288] Bluetooth: hci2: command 0x0406 tx timeout [ 201.825898][ T4288] Bluetooth: hci0: command 0x0406 tx timeout [ 202.370961][ T6156] FAULT_INJECTION: forcing a failure. [ 202.370961][ T6156] name failslab, interval 1, probability 0, space 0, times 0 [ 202.451362][ T6156] CPU: 0 PID: 6156 Comm: syz.3.600 Not tainted syzkaller #0 [ 202.458700][ T6156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 202.468754][ T6156] Call Trace: [ 202.472040][ T6156] [ 202.474974][ T6156] dump_stack_lvl+0x188/0x24e [ 202.479657][ T6156] ? show_regs_print_info+0x12/0x12 [ 202.484852][ T6156] ? load_image+0x410/0x410 [ 202.489361][ T6156] ? __might_sleep+0xd0/0xd0 [ 202.493947][ T6156] ? __lock_acquire+0x7ea0/0x7ea0 [ 202.498972][ T6156] should_fail_ex+0x390/0x4c0 [ 202.503663][ T6156] should_failslab+0x5/0x20 [ 202.508162][ T6156] slab_pre_alloc_hook+0x59/0x300 [ 202.513271][ T6156] kmem_cache_alloc+0x56/0x2f0 [ 202.518031][ T6156] ? security_file_alloc+0x30/0x110 [ 202.523323][ T6156] security_file_alloc+0x30/0x110 [ 202.528342][ T6156] __alloc_file+0xc2/0x230 [ 202.532754][ T6156] alloc_empty_file+0x90/0x180 [ 202.537512][ T6156] dentry_open+0x57/0x120 [ 202.541845][ T6156] __se_sys_fsmount+0x77a/0x9a0 [ 202.546731][ T6156] ? __x64_sys_fsmount+0x80/0x80 [ 202.551720][ T6156] ? lockdep_hardirqs_on+0x94/0x140 [ 202.556914][ T6156] do_syscall_64+0x4c/0xa0 [ 202.561322][ T6156] ? clear_bhb_loop+0x60/0xb0 [ 202.566081][ T6156] ? clear_bhb_loop+0x60/0xb0 [ 202.570758][ T6156] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.576655][ T6156] RIP: 0033:0x7f3636f9f559 [ 202.581087][ T6156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.601295][ T6156] RSP: 002b:00007f3637e3e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 202.609901][ T6156] RAX: ffffffffffffffda RBX: 00007f3637225fa0 RCX: 00007f3636f9f559 [ 202.617868][ T6156] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 202.625829][ T6156] RBP: 00007f3637036b20 R08: 0000000000000000 R09: 0000000000000000 [ 202.633790][ T6156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.641748][ T6156] R13: 00007f3637226038 R14: 00007f3637225fa0 R15: 00007ffc0e252538 [ 202.649725][ T6156] [ 203.300462][ T5949] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 203.345973][ T5949] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 203.391595][ T5949] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 203.435793][ T5949] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 203.546260][ T6167] loop1: detected capacity change from 0 to 8192 [ 203.732881][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.830113][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.871798][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.930124][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.980929][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.147064][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.318903][ T4478] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.326082][ T4478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.506728][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.597024][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.657391][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.697772][ T4478] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.705144][ T4478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.777959][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.840383][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.901632][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.948958][ T4377] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 205.960942][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.044779][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.086943][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.396540][ T4377] usb 4-1: Using ep0 maxpacket: 16 [ 206.404288][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.424219][ T6195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.462105][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.482332][ T6195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.526108][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.538561][ T6208] loop4: detected capacity change from 0 to 128 [ 206.552331][ T6195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.602395][ T5949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.625803][ T6195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.646233][ T26] audit: type=1800 audit(1792824656.485:101): pid=6208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.617" name="file1" dev="loop4" ino=1048646 res=0 errno=0 [ 206.669119][ T6208] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 206.706064][ T5949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 206.718841][ T4377] usb 4-1: unable to get BOS descriptor or descriptor too short [ 206.752363][ T6208] FAT-fs (loop4): Filesystem has been set read-only [ 206.764533][ T4377] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 206.780613][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.804361][ T4377] usb 4-1: can't read configurations, error -71 [ 206.815599][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.277323][ T6226] loop4: detected capacity change from 0 to 512 [ 207.369547][ T6226] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 207.444971][ T6226] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 208.322815][ T6226] EXT4-fs (loop4): orphan cleanup on readonly fs [ 208.387189][ T6226] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #13: comm syz.4.622: iget: bad i_size value: 12154761577498 [ 208.508025][ T6226] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.622: couldn't read orphan inode 13 (err -117) [ 208.584873][ T6226] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 208.645675][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 208.686231][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 208.762533][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.836040][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 208.888880][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 208.940916][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.020810][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'. [ 209.062402][ T6254] loop4: detected capacity change from 0 to 128 [ 209.144981][ T6249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.468367][ T6249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.716333][ T5949] device veth0_vlan entered promiscuous mode [ 209.763301][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 209.815906][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.874224][ T5949] device veth1_vlan entered promiscuous mode [ 209.915704][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.944829][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 210.074746][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 210.121125][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.178328][ T1183] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 210.198085][ T5949] device veth0_macvtap entered promiscuous mode [ 210.250613][ T5949] device veth1_macvtap entered promiscuous mode [ 210.349868][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.362874][ T6275] loop3: detected capacity change from 0 to 128 [ 210.406608][ T1183] usb 2-1: Using ep0 maxpacket: 16 [ 210.431172][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.475309][ T6271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.534593][ T6275] syz.3.637: attempt to access beyond end of device [ 210.534593][ T6275] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 210.560791][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.593013][ T6271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.634822][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.671507][ T6271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.701787][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.732033][ T6271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.777569][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.799292][ T1183] usb 2-1: unable to get BOS descriptor or descriptor too short [ 210.831417][ T1183] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 210.843322][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.871229][ T1183] usb 2-1: can't read configurations, error -71 [ 210.882233][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.900854][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.961467][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.019517][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.082419][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.132866][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.188132][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.257599][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.328532][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.388124][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.449599][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.497602][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.736097][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.774843][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.853039][ T6290] loop3: detected capacity change from 0 to 128 [ 212.860165][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 212.911222][ T5949] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.973413][ T5949] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.004860][ T6293] loop1: detected capacity change from 0 to 512 [ 213.026566][ T5949] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.070085][ T6293] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 213.089260][ T5949] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.288623][ T6296] usb usb7: usbfs: process 6296 (syz.3.647) did not claim interface 0 before use [ 213.347194][ T4478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.387846][ T4478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.484632][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 213.529296][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.568952][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.625793][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 215.181278][ T6318] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.655'. [ 216.401646][ T6318] netlink: zone id is out of range [ 216.448284][ T6318] netlink: del zone limit has 4 unknown bytes [ 216.456468][ T1183] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 216.646558][ T1183] usb 5-1: Using ep0 maxpacket: 16 [ 216.664437][ T1183] usb 5-1: unable to get BOS descriptor or descriptor too short [ 216.705984][ T1183] usb 5-1: config 3 has an invalid interface number: 105 but max is 1 [ 216.754352][ T1183] usb 5-1: config 3 has an invalid interface number: 164 but max is 1 [ 216.793879][ T1183] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 216.841893][ T1183] usb 5-1: config 3 has no interface number 0 [ 216.868283][ T1183] usb 5-1: config 3 has no interface number 1 [ 218.080840][ T1183] usb 5-1: config 3 interface 105 has no altsetting 0 [ 218.116888][ T1183] usb 5-1: config 3 interface 164 has no altsetting 0 [ 218.244184][ T1183] usb 5-1: string descriptor 0 read error: -71 [ 218.276262][ T1183] usb 5-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=4c.06 [ 218.332684][ T1183] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.384029][ T1183] usb 5-1: can't set config #3, error -71 [ 218.422884][ T1183] usb 5-1: USB disconnect, device number 4 [ 220.115320][ T6365] loop4: detected capacity change from 0 to 512 [ 220.161889][ T6365] EXT4-fs: Ignoring removed nobh option [ 220.261268][ T6365] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 220.299451][ T6365] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.411011][ T6365] EXT4-fs error (device loop4): ext4_find_dest_de:2117: inode #2: block 3: comm syz.4.672: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=65296, size=2048 fake=0 [ 220.600306][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 221.016411][ T1183] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 221.216586][ T1183] usb 5-1: Using ep0 maxpacket: 16 [ 221.230340][ T1183] usb 5-1: unable to get BOS descriptor or descriptor too short [ 221.268995][ T1183] usb 5-1: config 3 has an invalid interface number: 105 but max is 1 [ 221.308177][ T1183] usb 5-1: config 3 has an invalid interface number: 164 but max is 1 [ 221.348243][ T1183] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 221.397588][ T1183] usb 5-1: config 3 has no interface number 0 [ 221.430480][ T6393] FAULT_INJECTION: forcing a failure. [ 221.430480][ T6393] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 221.447123][ T1183] usb 5-1: config 3 has no interface number 1 [ 221.474326][ T1183] usb 5-1: config 3 interface 105 has no altsetting 0 [ 221.511948][ T1183] usb 5-1: config 3 interface 164 has no altsetting 0 [ 221.532286][ T6393] CPU: 0 PID: 6393 Comm: syz.0.682 Not tainted syzkaller #0 [ 221.539623][ T6393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 221.549765][ T6393] Call Trace: [ 221.553049][ T6393] [ 221.555979][ T6393] dump_stack_lvl+0x188/0x24e [ 221.560662][ T6393] ? show_regs_print_info+0x12/0x12 [ 221.565856][ T6393] ? load_image+0x410/0x410 [ 221.570552][ T6393] ? __lock_acquire+0x7ea0/0x7ea0 [ 221.575580][ T6393] should_fail_ex+0x390/0x4c0 [ 221.580263][ T6393] _copy_from_iter+0x1c0/0x1130 [ 221.585172][ T6393] ? copyout_mc+0x110/0x110 [ 221.589681][ T6393] ? __virt_addr_valid+0x188/0x540 [ 221.594796][ T6393] ? __virt_addr_valid+0x188/0x540 [ 221.599908][ T6393] ? __virt_addr_valid+0x467/0x540 [ 221.605016][ T6393] ? __phys_addr_symbol+0x2b/0x70 [ 221.610044][ T6393] ? __check_object_size+0x4f6/0xa70 [ 221.615337][ T6393] kernfs_fop_write_iter+0x19a/0x520 [ 221.620742][ T6393] vfs_write+0x482/0x9a0 [ 221.625091][ T6393] ? file_end_write+0x250/0x250 [ 221.629949][ T6393] ? __fget_files+0x3fc/0x460 [ 221.634631][ T6393] ? __fdget_pos+0x2ae/0x360 [ 221.639325][ T6393] ? ksys_write+0x70/0x260 [ 221.643742][ T6393] ksys_write+0x14d/0x260 [ 221.648087][ T6393] ? __ia32_sys_read+0x80/0x80 [ 221.652858][ T6393] ? lockdep_hardirqs_on+0x94/0x140 [ 221.658243][ T6393] do_syscall_64+0x4c/0xa0 [ 221.662652][ T6393] ? clear_bhb_loop+0x60/0xb0 [ 221.667335][ T6393] ? clear_bhb_loop+0x60/0xb0 [ 221.672007][ T6393] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.677998][ T6393] RIP: 0033:0x7f931199f559 [ 221.682421][ T6393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.702023][ T6393] RSP: 002b:00007f9312810028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 221.710438][ T6393] RAX: ffffffffffffffda RBX: 00007f9311c25fa0 RCX: 00007f931199f559 [ 221.718423][ T6393] RDX: 0000000000000003 RSI: 00002000000006c0 RDI: 0000000000000004 [ 221.726391][ T6393] RBP: 00007f9311a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 221.734442][ T6393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.742409][ T6393] R13: 00007f9311c26038 R14: 00007f9311c25fa0 R15: 00007ffea1488498 [ 221.750390][ T6393] [ 221.779357][ T1183] usb 5-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=4c.06 [ 221.807046][ T1183] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.825312][ T1183] usb 5-1: Product: syz [ 221.838812][ T1183] usb 5-1: Manufacturer: syz [ 221.843535][ T1183] usb 5-1: SerialNumber: syz [ 222.354071][ T6380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.393607][ T6380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.462316][ T1183] usb 5-1: USB disconnect, device number 5 [ 222.569105][ T6412] TC_ACT_REPEAT abuse ? [ 223.324744][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 225.759298][ T7] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 225.967611][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 225.984643][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 226.035456][ T7] usb 3-1: config 3 has an invalid interface number: 105 but max is 1 [ 226.087101][ T7] usb 3-1: config 3 has an invalid interface number: 164 but max is 1 [ 226.141650][ T7] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 226.192760][ T7] usb 3-1: config 3 has no interface number 0 [ 226.233191][ T7] usb 3-1: config 3 has no interface number 1 [ 226.257092][ T7] usb 3-1: config 3 interface 105 has no altsetting 0 [ 226.552754][ T7] usb 3-1: config 3 interface 164 has no altsetting 0 [ 226.587767][ T7] usb 3-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=4c.06 [ 226.635814][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.673198][ T7] usb 3-1: Product: syz [ 226.691957][ T7] usb 3-1: Manufacturer: syz [ 226.712212][ T7] usb 3-1: SerialNumber: syz [ 226.963652][ T6463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.994669][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.717'. [ 227.004696][ T6488] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 227.208225][ T6463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.320250][ T7] usb 3-1: USB disconnect, device number 7 [ 227.674382][ T6503] loop1: detected capacity change from 0 to 128 [ 227.909815][ T6507] netlink: 156 bytes leftover after parsing attributes in process `syz.1.729'. [ 228.099936][ T6512] netlink: 156 bytes leftover after parsing attributes in process `syz.2.731'. [ 229.018178][ T1183] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 229.065929][ T6542] netlink: 156 bytes leftover after parsing attributes in process `syz.2.743'. [ 229.217234][ T1183] usb 5-1: Using ep0 maxpacket: 16 [ 229.238974][ T1183] usb 5-1: unable to get BOS descriptor or descriptor too short [ 229.278612][ T1183] usb 5-1: config 3 has an invalid interface number: 105 but max is 1 [ 229.311920][ T1183] usb 5-1: config 3 has an invalid interface number: 164 but max is 1 [ 229.348748][ T1183] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 229.390980][ T1183] usb 5-1: config 3 has no interface number 0 [ 229.415165][ T1183] usb 5-1: config 3 has no interface number 1 [ 229.441652][ T1183] usb 5-1: config 3 interface 105 has no altsetting 0 [ 229.469756][ T1183] usb 5-1: config 3 interface 164 has no altsetting 0 [ 229.502686][ T1183] usb 5-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=4c.06 [ 229.539438][ T1183] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.587763][ T1183] usb 5-1: Product: syz [ 229.610728][ T1183] usb 5-1: Manufacturer: syz [ 229.627577][ T1183] usb 5-1: SerialNumber: syz [ 230.190066][ T1183] usb 5-1: USB disconnect, device number 6 [ 230.634711][ T6559] loop3: detected capacity change from 0 to 128 [ 230.888839][ T6566] netlink: 'syz.3.753': attribute type 17 has an invalid length. [ 230.919556][ T26] audit: type=1326 audit(1792824680.765:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6564 comm="syz.4.752" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5979f559 code=0x7ffc0000 [ 230.965768][ T6566] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 231.023618][ T6566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 231.052925][ T26] audit: type=1326 audit(1792824680.785:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6564 comm="syz.4.752" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5979f559 code=0x7ffc0000 [ 232.374151][ T26] audit: type=1326 audit(1792824680.785:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6564 comm="syz.4.752" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2b5979f559 code=0x7ffc0000 [ 232.520988][ T26] audit: type=1326 audit(1792824680.785:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6564 comm="syz.4.752" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5979f559 code=0x7ffc0000 [ 232.909385][ T26] audit: type=1326 audit(1792824680.785:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6564 comm="syz.4.752" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5979f559 code=0x7ffc0000 [ 232.952198][ T6590] loop3: detected capacity change from 0 to 128 [ 233.078770][ T26] audit: type=1800 audit(1792824682.885:107): pid=6590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.763" name="file1" dev="loop3" ino=1048659 res=0 errno=0 [ 233.185746][ T6596] FAULT_INJECTION: forcing a failure. [ 233.185746][ T6596] name failslab, interval 1, probability 0, space 0, times 0 [ 233.289361][ T6596] CPU: 0 PID: 6596 Comm: syz.1.764 Not tainted syzkaller #0 [ 233.296779][ T6596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 233.306931][ T6596] Call Trace: [ 233.310343][ T6596] [ 233.313318][ T6596] dump_stack_lvl+0x188/0x24e [ 233.318289][ T6596] ? show_regs_print_info+0x12/0x12 [ 233.323534][ T6596] ? load_image+0x410/0x410 [ 233.328062][ T6596] ? __might_sleep+0xd0/0xd0 [ 233.332686][ T6596] ? __lock_acquire+0x7ea0/0x7ea0 [ 233.337727][ T6596] should_fail_ex+0x390/0x4c0 [ 233.342500][ T6596] should_failslab+0x5/0x20 [ 233.347066][ T6596] slab_pre_alloc_hook+0x59/0x300 [ 233.352121][ T6596] ? __d_alloc+0xb3/0x6e0 [ 233.356504][ T6596] __kmem_cache_alloc_node+0x4f/0x270 [ 233.361997][ T6596] ? __d_alloc+0xb3/0x6e0 [ 233.366635][ T6596] __kmalloc+0xa3/0x240 [ 233.370985][ T6596] __d_alloc+0xb3/0x6e0 [ 233.375252][ T6596] d_alloc_parallel+0xdc/0x1590 [ 233.380113][ T6596] ? __d_lookup+0x8b/0x7c0 [ 233.384558][ T6596] ? __lock_acquire+0x7ea0/0x7ea0 [ 233.389875][ T6596] ? __d_lookup+0x8b/0x7c0 [ 233.394871][ T6596] ? d_hash_and_lookup+0x1b0/0x1b0 [ 233.400059][ T6596] path_openat+0x949/0x2f10 [ 233.404705][ T6596] ? kasan_set_track+0x60/0x70 [ 233.409493][ T6596] ? verify_lock_unused+0x140/0x140 [ 233.414709][ T6596] ? do_filp_open+0x420/0x420 [ 233.419398][ T6596] do_filp_open+0x1ee/0x420 [ 233.423906][ T6596] ? vfs_tmpfile+0x470/0x470 [ 233.428519][ T6596] ? _raw_spin_unlock+0x24/0x40 [ 233.433439][ T6596] ? alloc_fd+0x590/0x640 [ 233.437788][ T6596] do_sys_openat2+0x14b/0x4f0 [ 233.442514][ T6596] ? do_sys_open+0xe0/0xe0 [ 233.446965][ T6596] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 233.453292][ T6596] ? lock_chain_count+0x20/0x20 [ 233.458261][ T6596] __x64_sys_open+0x11b/0x140 [ 233.462967][ T6596] do_syscall_64+0x4c/0xa0 [ 233.467485][ T6596] ? clear_bhb_loop+0x60/0xb0 [ 233.472162][ T6596] ? clear_bhb_loop+0x60/0xb0 [ 233.476834][ T6596] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.482748][ T6596] RIP: 0033:0x7fdf8a59f559 [ 233.487210][ T6596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.507110][ T6596] RSP: 002b:00007fdf8b3b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 233.515574][ T6596] RAX: ffffffffffffffda RBX: 00007fdf8a825fa0 RCX: 00007fdf8a59f559 [ 233.523559][ T6596] RDX: 0000000000000018 RSI: 0000000000058100 RDI: 0000200000000180 [ 233.531539][ T6596] RBP: 00007fdf8a636b20 R08: 0000000000000000 R09: 0000000000000000 [ 233.539508][ T6596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.547476][ T6596] R13: 00007fdf8a826038 R14: 00007fdf8a825fa0 R15: 00007ffe1a4b30f8 [ 233.555458][ T6596] [ 235.910695][ T6619] process 'syz.4.771' launched '/dev/fd/4' with NULL argv: empty string added [ 235.953342][ T6621] FAULT_INJECTION: forcing a failure. [ 235.953342][ T6621] name failslab, interval 1, probability 0, space 0, times 0 [ 235.984203][ T6619] FAULT_INJECTION: forcing a failure. [ 235.984203][ T6619] name failslab, interval 1, probability 0, space 0, times 0 [ 236.040432][ T6621] CPU: 0 PID: 6621 Comm: syz.3.772 Not tainted syzkaller #0 [ 236.048023][ T6621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 236.058111][ T6621] Call Trace: [ 236.061415][ T6621] [ 236.064352][ T6621] dump_stack_lvl+0x188/0x24e [ 236.069051][ T6621] ? show_regs_print_info+0x12/0x12 [ 236.074542][ T6621] ? load_image+0x410/0x410 [ 236.079136][ T6621] ? __lock_acquire+0x7ea0/0x7ea0 [ 236.084283][ T6621] should_fail_ex+0x390/0x4c0 [ 236.089162][ T6621] should_failslab+0x5/0x20 [ 236.093852][ T6621] slab_pre_alloc_hook+0x59/0x300 [ 236.099018][ T6621] kmem_cache_alloc+0x56/0x2f0 [ 236.103804][ T6621] ? security_inode_alloc+0x30/0x110 [ 236.109639][ T6621] security_inode_alloc+0x30/0x110 [ 236.115014][ T6621] inode_init_always+0x910/0xc90 [ 236.120126][ T6621] new_inode_pseudo+0x91/0x1c0 [ 236.125190][ T6621] new_inode+0x25/0x1d0 [ 236.129398][ T6621] proc_pid_make_inode+0x20/0x1a0 [ 236.134561][ T6621] proc_task_instantiate+0x50/0x2b0 [ 236.139958][ T6621] proc_task_lookup+0x37f/0x4e0 [ 236.144846][ T6621] ? proc_task_lookup+0xdf/0x4e0 [ 236.149797][ T6621] __lookup_slow+0x29d/0x3f0 [ 236.154389][ T6621] ? lookup_one_len+0x2d0/0x2d0 [ 236.159244][ T6621] ? down_read+0x1a8/0x2d0 [ 236.163660][ T6621] lookup_slow+0x53/0x70 [ 236.167903][ T6621] walk_component+0x2ad/0x3e0 [ 236.172761][ T6621] link_path_walk+0x6b1/0xea0 [ 236.177537][ T6621] ? handle_lookup_down+0x130/0x130 [ 236.182929][ T6621] path_openat+0x285/0x2f10 [ 236.187441][ T6621] ? kasan_set_track+0x60/0x70 [ 236.192659][ T6621] ? verify_lock_unused+0x140/0x140 [ 236.198775][ T6621] ? do_sys_openat2+0xdd/0x4f0 [ 236.203664][ T6621] ? do_filp_open+0x420/0x420 [ 236.208531][ T6621] do_filp_open+0x1ee/0x420 [ 236.213083][ T6621] ? vfs_tmpfile+0x470/0x470 [ 236.217688][ T6621] ? noop_direct_IO+0x10/0x10 [ 236.222552][ T6621] ? _raw_spin_unlock+0x24/0x40 [ 236.227737][ T6621] ? alloc_fd+0x590/0x640 [ 236.232134][ T6621] do_sys_openat2+0x14b/0x4f0 [ 236.236848][ T6621] ? do_sys_open+0xe0/0xe0 [ 236.241290][ T6621] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 236.247297][ T6621] ? lock_chain_count+0x20/0x20 [ 236.252450][ T6621] __x64_sys_openat+0x135/0x160 [ 236.257310][ T6621] do_syscall_64+0x4c/0xa0 [ 236.261722][ T6621] ? clear_bhb_loop+0x60/0xb0 [ 236.266469][ T6621] ? clear_bhb_loop+0x60/0xb0 [ 236.271142][ T6621] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.277051][ T6621] RIP: 0033:0x7f3636f5fd8e [ 236.281731][ T6621] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 236.301624][ T6621] RSP: 002b:00007f3637e3dec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 236.310066][ T6621] RAX: ffffffffffffffda RBX: 00007f3637e3e6c0 RCX: 00007f3636f5fd8e [ 236.318283][ T6621] RDX: 0000000000000002 RSI: 00007f3637e3df90 RDI: ffffffffffffff9c [ 236.326910][ T6621] RBP: 00007f3637036b20 R08: 0000000000000000 R09: 0000000000000000 [ 236.334900][ T6621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.342867][ T6621] R13: 00007f3637226038 R14: 00007f3637225fa0 R15: 00007ffc0e252538 [ 236.350870][ T6621] [ 236.381124][ T6623] loop1: detected capacity change from 0 to 512 [ 236.392587][ T6619] CPU: 0 PID: 6619 Comm: syz.4.771 Not tainted syzkaller #0 [ 236.399898][ T6619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 236.410669][ T6619] Call Trace: [ 236.413969][ T6619] [ 236.417116][ T6619] dump_stack_lvl+0x188/0x24e [ 236.421798][ T6619] ? show_regs_print_info+0x12/0x12 [ 236.426991][ T6619] ? load_image+0x410/0x410 [ 236.431512][ T6619] ? __might_sleep+0xd0/0xd0 [ 236.436097][ T6619] ? __lock_acquire+0x7ea0/0x7ea0 [ 236.441214][ T6619] should_fail_ex+0x390/0x4c0 [ 236.446185][ T6619] should_failslab+0x5/0x20 [ 236.450733][ T6619] slab_pre_alloc_hook+0x59/0x300 [ 236.455916][ T6619] kmem_cache_alloc+0x56/0x2f0 [ 236.460721][ T6619] ? __anon_vma_prepare+0x64/0x430 [ 236.466523][ T6619] __anon_vma_prepare+0x64/0x430 [ 236.472178][ T6619] ? __pte_alloc+0x119/0x150 [ 236.477601][ T6619] handle_mm_fault+0x3717/0x3d40 [ 236.483112][ T6619] ? numa_migrate_prep+0x250/0x250 [ 236.489074][ T6619] ? vma_is_secretmem+0x9/0x40 [ 236.494929][ T6619] ? check_vma_flags+0x340/0x4c0 [ 236.500286][ T6619] __get_user_pages+0x40d/0xec0 [ 236.505365][ T6619] ? populate_vma_page_range+0x2b0/0x2b0 [ 236.511038][ T6619] ? __might_sleep+0xd0/0xd0 [ 236.515737][ T6619] ? read_lock_is_recursive+0x10/0x10 [ 236.521227][ T6619] ? vprintk_emit+0x59f/0x6a0 [ 236.526056][ T6619] __get_user_pages_remote+0x1c2/0x730 [ 236.531658][ T6619] ? alloc_bprm+0x5f7/0x710 [ 236.536464][ T6619] ? get_user_pages_remote+0x55/0xa0 [ 236.541937][ T6619] get_arg_page+0x1ca/0x410 [ 236.546458][ T6619] ? copy_string_kernel+0x220/0x220 [ 236.551852][ T6619] ? load_image+0x410/0x410 [ 236.556381][ T6619] copy_string_kernel+0x161/0x220 [ 236.561435][ T6619] do_execveat_common+0x35d/0x6b0 [ 236.566578][ T6619] __x64_sys_execveat+0xc0/0xe0 [ 236.571660][ T6619] do_syscall_64+0x4c/0xa0 [ 236.576347][ T6619] ? clear_bhb_loop+0x60/0xb0 [ 236.581021][ T6619] ? clear_bhb_loop+0x60/0xb0 [ 236.585738][ T6619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.591669][ T6619] RIP: 0033:0x7f2b5979f559 [ 236.596365][ T6619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.616171][ T6619] RSP: 002b:00007f2b5a62b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 236.624684][ T6619] RAX: ffffffffffffffda RBX: 00007f2b59a25fa0 RCX: 00007f2b5979f559 [ 236.632768][ T6619] RDX: 0000000000000000 RSI: 0000200000000880 RDI: 0000000000000004 [ 236.640849][ T6619] RBP: 00007f2b59836b20 R08: 0000000000001000 R09: 0000000000000000 [ 236.648920][ T6619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.656926][ T6619] R13: 00007f2b59a26038 R14: 00007f2b59a25fa0 R15: 00007ffdd6d50378 [ 236.665092][ T6619] [ 236.724551][ T6623] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 236.794053][ T6623] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 237.832714][ T6626] loop0: detected capacity change from 0 to 16 [ 237.846708][ T6626] erofs: (device loop0): mounted with root inode @ nid 36. [ 237.929949][ T6623] EXT4-fs (loop1): orphan cleanup on readonly fs [ 237.994385][ T6623] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #13: comm syz.1.773: iget: bad i_size value: 12154761577498 [ 238.070820][ T6623] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.773: couldn't read orphan inode 13 (err -117) [ 238.136479][ T6623] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 238.190121][ T6623] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.773: dx entry: limit 65535 != root limit 120 [ 238.230248][ T6623] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.773: Corrupt directory, running e2fsck is recommended [ 238.323408][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 238.432224][ T6632] loop1: detected capacity change from 0 to 512 [ 238.499842][ T6632] EXT4-fs (loop1): 1 orphan inode deleted [ 238.517482][ T58] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 238.549311][ T6632] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 238.562439][ T58] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:4: Failed to release dquot type 1 [ 238.581337][ T6637] loop0: detected capacity change from 0 to 128 [ 238.590288][ T6632] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.630379][ T26] audit: type=1800 audit(1792824688.475:108): pid=6637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.778" name="file1" dev="loop0" ino=1048660 res=0 errno=0 [ 238.696796][ T6632] EXT4-fs (loop1): shut down requested (2) [ 238.793006][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 239.100712][ T6646] loop1: detected capacity change from 0 to 512 [ 240.322882][ T6646] EXT4-fs: Ignoring removed nobh option [ 240.433345][ T6646] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.783: invalid indirect mapped block 256 (level 2) [ 240.577871][ T6646] EXT4-fs (loop1): 2 truncates cleaned up [ 240.636206][ T6646] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 240.676636][ T6660] loop4: detected capacity change from 0 to 4096 [ 240.771158][ T6660] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 240.807612][ T26] audit: type=1800 audit(1792824690.655:109): pid=6646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.783" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 240.859087][ T6667] tipc: Can't bind to reserved service type 2 [ 240.922831][ T6646] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.783: bg 0: block 5: invalid block bitmap [ 240.949940][ T26] audit: type=1800 audit(1792824690.675:110): pid=6646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.783" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 241.093099][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 241.113799][ T6646] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 22 with max blocks 484 with error 28 [ 241.229679][ T6669] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 241.317046][ T6669] EXT4-fs (loop1): This should not happen!! Data will be lost [ 241.317046][ T6669] [ 241.448547][ T6646] EXT4-fs (loop1): This should not happen!! Data will be lost [ 241.448547][ T6646] [ 241.531038][ T6678] loop4: detected capacity change from 0 to 512 [ 241.550060][ T6680] loop2: detected capacity change from 0 to 128 [ 241.562110][ T6646] EXT4-fs (loop1): Total free blocks count 0 [ 241.603590][ T6669] EXT4-fs (loop1): Total free blocks count 0 [ 241.627626][ T6678] EXT4-fs (loop4): 1 orphan inode deleted [ 241.647048][ T4637] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 241.665905][ T6646] EXT4-fs (loop1): Free/Dirty block details [ 241.706782][ T6678] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 241.726198][ T4637] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:15: Failed to release dquot type 1 [ 241.741894][ T26] audit: type=1800 audit(1792824691.585:111): pid=6680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.790" name="file1" dev="loop2" ino=1048661 res=0 errno=0 [ 241.764144][ T6669] EXT4-fs (loop1): Free/Dirty block details [ 241.803306][ T6646] EXT4-fs (loop1): free_blocks=0 [ 241.808773][ T6678] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.850808][ T6685] loop3: detected capacity change from 0 to 1024 [ 241.889485][ T6678] EXT4-fs (loop4): shut down requested (2) [ 242.132034][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 243.724436][ T6705] loop2: detected capacity change from 0 to 1024 [ 243.904189][ T6705] EXT4-fs: Ignoring removed bh option [ 244.100786][ T6705] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 244.140125][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.801'. [ 244.257171][ T6717] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 244.832048][ T5949] EXT4-fs (loop2): unmounting filesystem. [ 245.156540][ T6726] FAULT_INJECTION: forcing a failure. [ 245.156540][ T6726] name failslab, interval 1, probability 0, space 0, times 0 [ 245.237868][ T6726] CPU: 0 PID: 6726 Comm: syz.0.803 Not tainted syzkaller #0 [ 245.245189][ T6726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 245.255277][ T6726] Call Trace: [ 245.258562][ T6726] [ 245.261514][ T6726] dump_stack_lvl+0x188/0x24e [ 245.266297][ T6726] ? show_regs_print_info+0x12/0x12 [ 245.271500][ T6726] ? load_image+0x410/0x410 [ 245.276238][ T6726] ? __might_sleep+0xd0/0xd0 [ 245.280847][ T6726] ? __lock_acquire+0x7ea0/0x7ea0 [ 245.285894][ T6726] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.291992][ T6726] should_fail_ex+0x390/0x4c0 [ 245.296682][ T6726] should_failslab+0x5/0x20 [ 245.301271][ T6726] slab_pre_alloc_hook+0x59/0x300 [ 245.306295][ T6726] ? bpf_prepare_filter+0x645/0x11b0 [ 245.311687][ T6726] __kmem_cache_alloc_node+0x4f/0x270 [ 245.317092][ T6726] ? bpf_prepare_filter+0x645/0x11b0 [ 245.322525][ T6726] __kmalloc+0xa3/0x240 [ 245.326743][ T6726] bpf_prepare_filter+0x645/0x11b0 [ 245.332213][ T6726] ? seccomp_notify_detach+0x220/0x220 [ 245.337803][ T6726] ? bpf_prog_create+0x1f0/0x1f0 [ 245.342762][ T6726] ? rcu_is_watching+0x11/0xa0 [ 245.347683][ T6726] ? kmemdup+0x42/0x60 [ 245.352106][ T6726] ? memcpy+0x3c/0x60 [ 245.356161][ T6726] bpf_prog_create_from_user+0x2cc/0x420 [ 245.361991][ T6726] ? seccomp_notify_detach+0x220/0x220 [ 245.367480][ T6726] do_seccomp+0x806/0xe00 [ 245.371838][ T6726] ? prctl_set_seccomp+0x60/0x60 [ 245.376881][ T6726] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 245.383053][ T6726] ? lockdep_hardirqs_on+0x94/0x140 [ 245.388347][ T6726] do_syscall_64+0x4c/0xa0 [ 245.392792][ T6726] ? clear_bhb_loop+0x60/0xb0 [ 245.397471][ T6726] ? clear_bhb_loop+0x60/0xb0 [ 245.402147][ T6726] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.408051][ T6726] RIP: 0033:0x7f931199f559 [ 245.412474][ T6726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.432277][ T6726] RSP: 002b:00007f9312810028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 245.440791][ T6726] RAX: ffffffffffffffda RBX: 00007f9311c25fa0 RCX: 00007f931199f559 [ 245.449132][ T6726] RDX: 00002000000001c0 RSI: 0000000000000008 RDI: 0000000000000001 [ 245.457110][ T6726] RBP: 00007f9311a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 245.465085][ T6726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.473584][ T6726] R13: 00007f9311c26038 R14: 00007f9311c25fa0 R15: 00007ffea1488498 [ 245.481581][ T6726] [ 245.897450][ T6730] loop2: detected capacity change from 0 to 128 [ 246.009896][ T26] audit: type=1800 audit(1792824695.855:112): pid=6730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.804" name="file1" dev="loop2" ino=1048662 res=0 errno=0 [ 246.450904][ T6741] loop1: detected capacity change from 0 to 16 [ 246.480577][ T6741] erofs: (device loop1): mounted with root inode @ nid 36. [ 247.562848][ T6772] loop3: detected capacity change from 0 to 128 [ 247.709849][ T26] audit: type=1800 audit(1792824697.555:113): pid=6772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.818" name="file1" dev="loop3" ino=1048663 res=0 errno=0 [ 247.980130][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.816'. [ 248.118366][ T6773] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 248.727585][ T6796] loop4: detected capacity change from 0 to 16 [ 248.746775][ T6796] erofs: (device loop4): mounted with root inode @ nid 36. [ 248.859950][ T6798] netlink: 156 bytes leftover after parsing attributes in process `syz.0.823'. [ 250.982361][ T6818] loop4: detected capacity change from 0 to 128 [ 251.101200][ T26] audit: type=1800 audit(1792824700.945:114): pid=6818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.829" name="file1" dev="loop4" ino=1048665 res=0 errno=0 [ 251.161062][ T6818] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 251.227117][ T6818] FAT-fs (loop4): Filesystem has been set read-only [ 251.851389][ T6829] loop4: detected capacity change from 0 to 128 [ 251.924647][ T26] audit: type=1800 audit(1792824701.765:115): pid=6829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.831" name="file1" dev="loop4" ino=1048666 res=0 errno=0 [ 252.232004][ T6834] loop4: detected capacity change from 0 to 128 [ 252.701741][ T6847] loop3: detected capacity change from 0 to 16 [ 252.813073][ T6847] erofs: (device loop3): mounted with root inode @ nid 36. [ 253.793421][ T6861] loop4: detected capacity change from 0 to 512 [ 253.870931][ T6861] EXT4-fs (loop4): 1 orphan inode deleted [ 253.931624][ T6861] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 253.941719][ T4665] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 253.960155][ T6866] loop2: detected capacity change from 0 to 128 [ 253.996685][ T4665] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:16: Failed to release dquot type 1 [ 254.011920][ T6861] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.103750][ T6861] EXT4-fs error (device loop4): ext4_lookup:1860: inode #15: comm syz.4.843: iget: bad i_size value: 360287970189639690 [ 254.119783][ T26] audit: type=1800 audit(1792824703.965:116): pid=6866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.844" name="file1" dev="loop2" ino=1048668 res=0 errno=0 [ 255.362192][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 256.048502][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.058798][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.202070][ T6881] netlink: 24 bytes leftover after parsing attributes in process `syz.4.849'. [ 259.097608][ T6898] loop4: detected capacity change from 0 to 512 [ 259.139609][ T6900] netlink: 156 bytes leftover after parsing attributes in process `syz.2.856'. [ 259.205964][ T6898] EXT4-fs (loop4): 1 orphan inode deleted [ 259.219378][ T4665] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 259.271989][ T6898] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 259.286552][ T4665] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:16: Failed to release dquot type 1 [ 259.338753][ T6898] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.394438][ T6899] loop1: detected capacity change from 0 to 8192 [ 259.402408][ T6906] netlink: 24 bytes leftover after parsing attributes in process `syz.0.859'. [ 259.449762][ T6898] EXT4-fs error (device loop4): ext4_lookup:1860: inode #15: comm syz.4.858: iget: bad i_size value: 360287970189639690 [ 259.626112][ T6910] netlink: 180 bytes leftover after parsing attributes in process `syz.2.860'. [ 259.678993][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 261.120135][ T6916] netlink: 24 bytes leftover after parsing attributes in process `syz.4.861'. [ 264.024671][ T6934] loop4: detected capacity change from 0 to 128 [ 264.118314][ T26] audit: type=1800 audit(1792824713.965:117): pid=6934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.869" name="file1" dev="loop4" ino=1048669 res=0 errno=0 [ 264.294504][ T6939] loop1: detected capacity change from 0 to 512 [ 264.344764][ T6943] netlink: 156 bytes leftover after parsing attributes in process `syz.0.871'. [ 264.514886][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.873'. [ 264.524859][ T6947] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 264.555040][ T6939] EXT4-fs (loop1): 1 orphan inode deleted [ 264.573704][ T4665] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 264.623237][ T6939] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 264.649071][ T4665] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:16: Failed to release dquot type 1 [ 264.815645][ T6939] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.015191][ T6952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.874'. [ 266.097435][ T6939] EXT4-fs error (device loop1): ext4_lookup:1860: inode #15: comm syz.1.872: iget: bad i_size value: 360287970189639690 [ 267.497629][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 269.150223][ T6969] usb usb8: usbfs: process 6969 (syz.0.881) did not claim interface 0 before use [ 269.220737][ T6973] loop4: detected capacity change from 0 to 128 [ 269.309927][ T26] audit: type=1800 audit(1792824719.155:118): pid=6973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.883" name="file1" dev="loop4" ino=1048670 res=0 errno=0 [ 269.620379][ T6981] netlink: 156 bytes leftover after parsing attributes in process `syz.0.885'. [ 269.797706][ T4288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 269.809739][ T4288] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 269.819141][ T4275] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 269.827127][ T4288] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 269.836741][ T4288] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 269.844207][ T4288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 270.068214][ T6982] rxe_eth0 speed is unknown, defaulting to 1000 [ 271.166480][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.887'. [ 271.306754][ T6997] netlink: 24 bytes leftover after parsing attributes in process `syz.4.888'. [ 271.389276][ T6996] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 271.506180][ T6998] loop0: detected capacity change from 0 to 512 [ 271.692734][ T6998] EXT4-fs: Ignoring removed oldalloc option [ 271.820405][ T6998] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 271.886500][ T4279] Bluetooth: hci5: command 0x0409 tx timeout [ 272.050195][ T7008] loop4: detected capacity change from 0 to 512 [ 273.558492][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 273.910023][ T6982] chnl_net:caif_netlink_parms(): no params data found [ 273.960222][ T7024] loop0: detected capacity change from 0 to 128 [ 273.967550][ T4279] Bluetooth: hci5: command 0x041b tx timeout [ 274.102467][ T26] audit: type=1800 audit(1792824723.945:119): pid=7024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.895" name="file1" dev="loop0" ino=1048671 res=0 errno=0 [ 274.163467][ T7024] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 274.257045][ T6982] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.392342][ T7024] FAT-fs (loop0): Filesystem has been set read-only [ 274.423311][ T6982] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.715117][ T6982] device bridge_slave_0 entered promiscuous mode [ 274.771530][ T6982] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.818263][ T6982] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.881892][ T6982] device bridge_slave_1 entered promiscuous mode [ 274.972165][ T6982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.020539][ T6982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.229586][ T7037] loop1: detected capacity change from 0 to 256 [ 275.293230][ T6982] team0: Port device team_slave_0 added [ 275.324331][ T6982] team0: Port device team_slave_1 added [ 275.495869][ T4637] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.566024][ T6982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.601249][ T6982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.779942][ T7018] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 276.792383][ T4279] Bluetooth: hci5: command 0x040f tx timeout [ 276.932902][ T6982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.022455][ T4637] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.084702][ T6982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.114266][ T6982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.221136][ T6982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.295603][ T4637] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.436138][ T7062] loop0: detected capacity change from 0 to 128 [ 277.451862][ T4637] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.539836][ T6982] device hsr_slave_0 entered promiscuous mode [ 277.561300][ T6982] device hsr_slave_1 entered promiscuous mode [ 277.592982][ T6982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.621653][ T6982] Cannot create hsr debugfs directory [ 279.185134][ T4279] Bluetooth: hci5: command 0x0419 tx timeout [ 279.218662][ T7075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.910'. [ 279.277615][ T7073] loop2: detected capacity change from 0 to 128 [ 281.199934][ T6982] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 281.369084][ T6982] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 281.509286][ T6982] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 281.619069][ T6982] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 283.050822][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.921'. [ 283.060735][ T7110] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 283.090573][ T7109] loop1: detected capacity change from 0 to 512 [ 283.302927][ T7109] EXT4-fs (loop1): 1 orphan inode deleted [ 283.381993][ T4478] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 283.399491][ T7109] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 283.430895][ T4478] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:8: Failed to release dquot type 1 [ 283.489682][ T7109] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.506497][ T6982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.610495][ T7109] EXT4-fs error (device loop1): ext4_lookup:1860: inode #15: comm syz.1.922: iget: bad i_size value: 360287970189639690 [ 284.953376][ T7127] loop0: detected capacity change from 0 to 128 [ 285.023602][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 285.035352][ T6982] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.111864][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 285.170614][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.261423][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.323266][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.397061][ T4478] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.404193][ T4478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.470498][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.505375][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.521083][ T7135] FAULT_INJECTION: forcing a failure. [ 285.521083][ T7135] name failslab, interval 1, probability 0, space 0, times 0 [ 285.559272][ T4478] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.566480][ T4478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.592636][ T7135] CPU: 0 PID: 7135 Comm: syz.0.928 Not tainted syzkaller #0 [ 285.599976][ T7135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 285.610142][ T7135] Call Trace: [ 285.613425][ T7135] [ 285.616361][ T7135] dump_stack_lvl+0x188/0x24e [ 285.621044][ T7135] ? show_regs_print_info+0x12/0x12 [ 285.626237][ T7135] ? load_image+0x410/0x410 [ 285.630736][ T7135] ? __might_sleep+0xd0/0xd0 [ 285.635323][ T7135] ? __lock_acquire+0x7ea0/0x7ea0 [ 285.640368][ T7135] should_fail_ex+0x390/0x4c0 [ 285.645077][ T7135] should_failslab+0x5/0x20 [ 285.649656][ T7135] slab_pre_alloc_hook+0x59/0x300 [ 285.654705][ T7135] ? __kernfs_new_node+0xa6/0x7f0 [ 285.659832][ T7135] ? rcu_is_watching+0x11/0xa0 [ 285.664728][ T7135] kmem_cache_alloc+0x56/0x2f0 [ 285.669677][ T7135] ? __kernfs_new_node+0xe1/0x7f0 [ 285.674732][ T7135] __kernfs_new_node+0xe1/0x7f0 [ 285.679588][ T7135] ? vsnprintf+0x1b22/0x1c20 [ 285.684300][ T7135] ? kernfs_new_node+0x250/0x250 [ 285.689265][ T7135] ? snprintf+0xe5/0x140 [ 285.693561][ T7135] ? vscnprintf+0x80/0x80 [ 285.698082][ T7135] kernfs_new_node+0x148/0x250 [ 285.702880][ T7135] __kernfs_create_file+0x47/0x2e0 [ 285.708022][ T7135] cgroup_addrm_files+0x80c/0xd50 [ 285.713212][ T7135] ? trace_raw_output_cgroup_event+0x1e0/0x1e0 [ 285.719580][ T7135] ? mark_lock+0x94/0x320 [ 285.723964][ T7135] ? mark_lock+0x94/0x320 [ 285.728317][ T7135] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 285.734310][ T7135] ? __local_bh_enable_ip+0x136/0x1c0 [ 285.739742][ T7135] ? lockdep_hardirqs_on+0x94/0x140 [ 285.745042][ T7135] css_populate_dir+0x157/0x3b0 [ 285.749906][ T7135] cgroup_apply_control_enable+0x641/0xb00 [ 285.755723][ T7135] cgroup_mkdir+0xc7f/0xe70 [ 285.760262][ T7135] ? css_task_iter_end+0x280/0x280 [ 285.765418][ T7135] ? kernfs_iop_permission+0x26d/0x350 [ 285.770912][ T7135] ? css_task_iter_end+0x280/0x280 [ 285.776033][ T7135] kernfs_iop_mkdir+0x23d/0x3d0 [ 285.780913][ T7135] vfs_mkdir+0x386/0x570 [ 285.785270][ T7135] do_mkdirat+0x1d8/0x440 [ 285.789627][ T7135] ? vfs_mkdir+0x570/0x570 [ 285.794065][ T7135] __x64_sys_mkdirat+0x85/0x90 [ 285.798926][ T7135] do_syscall_64+0x4c/0xa0 [ 285.803361][ T7135] ? clear_bhb_loop+0x60/0xb0 [ 285.808086][ T7135] ? clear_bhb_loop+0x60/0xb0 [ 285.812774][ T7135] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.818701][ T7135] RIP: 0033:0x7f931199f559 [ 285.823130][ T7135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.843100][ T7135] RSP: 002b:00007f9312810028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 285.851551][ T7135] RAX: ffffffffffffffda RBX: 00007f9311c25fa0 RCX: 00007f931199f559 [ 285.859534][ T7135] RDX: 00000000000001ff RSI: 00002000000008c0 RDI: ffffffffffffff9c [ 285.867524][ T7135] RBP: 00007f9311a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 285.875534][ T7135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.883533][ T7135] R13: 00007f9311c26038 R14: 00007f9311c25fa0 R15: 00007ffea1488498 [ 285.891524][ T7135] [ 285.918117][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 286.067448][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 286.102492][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 286.141524][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 286.173344][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 286.237536][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 286.251838][ T7148] netlink: 24 bytes leftover after parsing attributes in process `syz.4.934'. [ 286.272417][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 286.311209][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 286.324905][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 286.325744][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 286.329480][ T6982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.330229][ T6982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 286.345414][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 286.347046][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 286.484006][ T4637] device hsr_slave_0 left promiscuous mode [ 286.488550][ T4637] device hsr_slave_1 left promiscuous mode [ 286.488982][ T4637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.489019][ T4637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.489435][ T4637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.489451][ T4637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.489822][ T4637] device bridge_slave_1 left promiscuous mode [ 286.489910][ T4637] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.493121][ T4637] device bridge_slave_0 left promiscuous mode [ 286.493220][ T4637] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.553297][ T4637] device veth1_macvtap left promiscuous mode [ 286.553359][ T4637] device veth0_macvtap left promiscuous mode [ 286.553430][ T4637] device veth1_vlan left promiscuous mode [ 287.322244][ T7169] loop4: detected capacity change from 0 to 512 [ 288.616033][ T7169] EXT4-fs (loop4): 1 orphan inode deleted [ 288.662889][ T7169] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 288.673835][ T4462] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 288.728370][ T4462] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:7: Failed to release dquot type 1 [ 288.743831][ T7169] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.815891][ T7169] EXT4-fs error (device loop4): ext4_lookup:1860: inode #15: comm syz.4.937: iget: bad i_size value: 360287970189639690 [ 288.960857][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 289.314202][ T7135] cgroup: cgroup_addrm_files: failed to add reset_stats, err=-12 [ 290.794549][ T4637] team0 (unregistering): Port device team_slave_1 removed [ 290.890791][ T4637] team0 (unregistering): Port device team_slave_0 removed [ 290.978095][ T4637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.033691][ T4637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.195833][ T7203] syz.0.942 uses obsolete (PF_INET,SOCK_PACKET) [ 291.598573][ T4637] bond0 (unregistering): Released all slaves [ 292.174360][ T6982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.198137][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 292.205778][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 293.691725][ T7226] loop4: detected capacity change from 0 to 512 [ 294.996177][ T7226] EXT4-fs (loop4): 1 orphan inode deleted [ 295.006735][ T4462] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 295.099301][ T7226] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 295.111325][ T4462] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:7: Failed to release dquot type 1 [ 295.181300][ T7226] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.279614][ T7226] EXT4-fs error (device loop4): ext4_lookup:1860: inode #15: comm syz.4.949: iget: bad i_size value: 360287970189639690 [ 296.566464][ T7251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.952'. [ 296.811113][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 296.826137][ T7254] loop1: detected capacity change from 0 to 512 [ 296.973303][ T7254] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 297.054038][ T7254] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 297.113544][ T7254] System zones: 0-1, 15-15, 18-18, 34-34 [ 297.167803][ T7254] EXT4-fs (loop1): orphan cleanup on readonly fs [ 297.228443][ T7254] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 297.304667][ T7254] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 297.393037][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 297.440065][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 297.449853][ T7254] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 297.499823][ T7254] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.954: bad orphan inode 16 [ 297.530567][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 297.572049][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 297.586793][ T7254] ext4_test_bit(bit=15, block=18) = 1 [ 297.592193][ T7254] is_bad_inode(inode)=0 [ 297.630681][ T6982] device veth0_vlan entered promiscuous mode [ 297.663288][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 297.672997][ T7254] NEXT_ORPHAN(inode)=0 [ 297.691198][ T7254] max_ino=32 [ 298.901380][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 298.918770][ T7254] i_nlink=2 [ 298.931659][ T7254] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 298.962219][ T6982] device veth1_vlan entered promiscuous mode [ 300.172945][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 300.305640][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 300.326073][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 300.334772][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 300.408127][ T6982] device veth0_macvtap entered promiscuous mode [ 300.465601][ T6982] device veth1_macvtap entered promiscuous mode [ 300.575749][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.653683][ T7295] loop1: detected capacity change from 0 to 128 [ 300.660851][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.706275][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.768364][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.814789][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.854187][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.891713][ T6982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.931757][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 300.961980][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 300.999881][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 301.082311][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 301.193680][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.242790][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.301062][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.345312][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.502645][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.534226][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.795616][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.966'. [ 301.807033][ T7309] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 301.848929][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.904025][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.956243][ T6982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.017270][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 302.050806][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 302.099898][ T6982] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.133043][ T6982] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.168782][ T6982] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.284046][ T6982] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.514960][ T7322] FAULT_INJECTION: forcing a failure. [ 302.514960][ T7322] name failslab, interval 1, probability 0, space 0, times 0 [ 302.557713][ T4620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.565684][ T4620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.629425][ T7322] CPU: 0 PID: 7322 Comm: syz.1.969 Not tainted syzkaller #0 [ 302.636760][ T7322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 302.646826][ T7322] Call Trace: [ 302.650116][ T7322] [ 302.653081][ T7322] dump_stack_lvl+0x188/0x24e [ 302.657766][ T7322] ? show_regs_print_info+0x12/0x12 [ 302.662961][ T7322] ? load_image+0x410/0x410 [ 302.667497][ T7322] ? verify_lock_unused+0x140/0x140 [ 302.672823][ T7322] should_fail_ex+0x390/0x4c0 [ 302.677717][ T7322] should_failslab+0x5/0x20 [ 302.682223][ T7322] slab_pre_alloc_hook+0x59/0x300 [ 302.687253][ T7322] kmem_cache_alloc+0x56/0x2f0 [ 302.692037][ T7322] ? skb_clone+0x1e7/0x370 [ 302.696843][ T7322] skb_clone+0x1e7/0x370 [ 302.701123][ T7322] __netlink_deliver_tap+0x3e4/0x7e0 [ 302.706858][ T7322] ? netlink_deliver_tap+0x2e/0x1b0 [ 302.712251][ T7322] netlink_deliver_tap+0x19c/0x1b0 [ 302.717452][ T7322] netlink_unicast+0x777/0x920 [ 302.722237][ T7322] netlink_sendmsg+0x8ad/0xbd0 [ 302.727005][ T7322] ? netlink_getsockopt+0x550/0x550 [ 302.732209][ T7322] ? apparmor_socket_sendmsg+0x16c/0x330 [ 302.738105][ T7322] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 302.743420][ T7322] ? security_socket_sendmsg+0x7c/0xa0 [ 302.748917][ T7322] ? netlink_getsockopt+0x550/0x550 [ 302.754233][ T7322] ____sys_sendmsg+0x5ed/0x9a0 [ 302.759261][ T7322] ? __sys_sendmsg_sock+0x30/0x30 [ 302.764313][ T7322] ? __import_iovec+0x306/0x510 [ 302.769231][ T7322] ? import_iovec+0x6f/0xa0 [ 302.773877][ T7322] ___sys_sendmsg+0x2a2/0x360 [ 302.778721][ T7322] ? __sys_sendmsg+0x2a0/0x2a0 [ 302.783643][ T7322] __se_sys_sendmsg+0x1c3/0x2b0 [ 302.788517][ T7322] ? __x64_sys_sendmsg+0x80/0x80 [ 302.793655][ T7322] ? lockdep_hardirqs_on+0x94/0x140 [ 302.798876][ T7322] do_syscall_64+0x4c/0xa0 [ 302.803325][ T7322] ? clear_bhb_loop+0x60/0xb0 [ 302.808046][ T7322] ? clear_bhb_loop+0x60/0xb0 [ 302.812824][ T7322] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.818725][ T7322] RIP: 0033:0x7fdf8a59f559 [ 302.823155][ T7322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.842781][ T7322] RSP: 002b:00007fdf8b3b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.851221][ T7322] RAX: ffffffffffffffda RBX: 00007fdf8a825fa0 RCX: 00007fdf8a59f559 [ 302.859387][ T7322] RDX: 0000000020040084 RSI: 0000200000000780 RDI: 0000000000000004 [ 302.867358][ T7322] RBP: 00007fdf8a636b20 R08: 0000000000000000 R09: 0000000000000000 [ 302.875342][ T7322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.883414][ T7322] R13: 00007fdf8a826038 R14: 00007fdf8a825fa0 R15: 00007ffe1a4b30f8 [ 302.891395][ T7322] [ 302.947302][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 302.971067][ T7328] loop4: detected capacity change from 0 to 512 [ 302.985791][ T4478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.005350][ T4478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.272167][ T7328] EXT4-fs (loop4): 1 orphan inode deleted [ 304.289898][ T4637] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 304.316553][ T7328] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 304.349514][ T4637] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:15: Failed to release dquot type 1 [ 304.369690][ T7328] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.394812][ T7336] loop0: detected capacity change from 0 to 512 [ 304.432059][ T7328] EXT4-fs error (device loop4): ext4_lookup:1860: inode #15: comm syz.4.971: iget: bad i_size value: 360287970189639690 [ 304.515654][ T7336] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 304.570771][ T7336] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 304.604292][ T7336] System zones: 0-1, 15-15, 18-18, 34-34 [ 304.622539][ T7336] EXT4-fs (loop0): orphan cleanup on readonly fs [ 304.635191][ T7336] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 304.655383][ T7336] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 304.693798][ T7336] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 304.700982][ T7336] EXT4-fs error (device loop0): ext4_orphan_get:1435: comm syz.0.972: bad orphan inode 16 [ 304.714649][ T7336] ext4_test_bit(bit=15, block=18) = 1 [ 304.720375][ T7336] is_bad_inode(inode)=0 [ 304.724633][ T7336] NEXT_ORPHAN(inode)=0 [ 304.731874][ T7336] max_ino=32 [ 304.735175][ T7336] i_nlink=2 [ 304.740044][ T7336] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 304.823531][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 304.833720][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 305.012171][ T7345] loop4: detected capacity change from 0 to 128 [ 305.038742][ T7] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 305.059993][ T7347] netlink: 156 bytes leftover after parsing attributes in process `syz.2.975'. [ 305.257983][ T7] usb 1-1: not running at top speed; connect to a high speed hub [ 305.323286][ T7] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 305.387063][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.551414][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 305.610497][ T7] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 305.638091][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.978'. [ 305.648057][ T7362] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 305.700343][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.776231][ T7] gspca_main: spca501-2.14.0 probing 0000:0000 [ 306.135999][ T7369] rxe_eth0 speed is unknown, defaulting to 1000 [ 306.327121][ T7] gspca_spca501: reg write: error -110 [ 306.348313][ T7] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 306.397385][ T7] spca501: probe of 1-1:1.0 failed with error -22 [ 306.413064][ T7371] netlink: 156 bytes leftover after parsing attributes in process `syz.1.989'. [ 306.681343][ T7383] loop4: detected capacity change from 0 to 512 [ 306.825666][ T7383] EXT4-fs (loop4): 1 orphan inode deleted [ 306.839254][ T4620] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 306.894575][ T7383] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 306.917156][ T4620] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:14: Failed to release dquot type 1 [ 306.965983][ T7383] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.045129][ T7383] EXT4-fs error (device loop4): ext4_lookup:1860: inode #15: comm syz.4.983: iget: bad i_size value: 360287970189639690 [ 307.208176][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 307.223174][ T7399] loop5: detected capacity change from 0 to 512 [ 307.672465][ T7] usb 1-1: USB disconnect, device number 4 [ 307.728393][ T26] audit: type=1800 audit(1792824757.575:120): pid=7399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.987" name="file1" dev="loop5" ino=1048684 res=0 errno=0 [ 307.793628][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 308.503868][ T7421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.990'. [ 308.514031][ T7421] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 309.711492][ T7425] netlink: 24 bytes leftover after parsing attributes in process `syz.1.993'. [ 309.731725][ T4279] Bluetooth: hci1: command 0x0406 tx timeout [ 310.176813][ T7436] netlink: 156 bytes leftover after parsing attributes in process `syz.1.996'. [ 310.619491][ T7451] loop1: detected capacity change from 0 to 512 [ 310.787161][ T7451] EXT4-fs (loop1): 1 orphan inode deleted [ 310.792934][ T7451] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 310.823778][ T4532] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 310.883597][ T4532] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:11: Failed to release dquot type 1 [ 310.951023][ T7451] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.059781][ T7451] EXT4-fs (loop1): shut down requested (2) [ 311.203300][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 311.793037][ T7472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'. [ 311.991808][ T7477] loop4: detected capacity change from 0 to 512 [ 312.042167][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'. [ 312.084116][ T7477] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 312.153378][ T7477] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 312.169316][ T7475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1005'. [ 312.369027][ T7477] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1006: Corrupt directory, running e2fsck is recommended [ 312.412868][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1007'. [ 312.423947][ T7485] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 312.485384][ T7477] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 312.559930][ T7477] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.1006: corrupted in-inode xattr [ 313.897032][ T7490] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1008'. [ 313.941206][ T7477] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.1006: couldn't read orphan inode 15 (err -117) [ 314.009980][ T7477] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 314.207435][ T7477] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 314.231943][ T7494] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1010'. [ 314.280634][ T7477] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 314.330769][ T7477] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1006: Corrupt directory, running e2fsck is recommended [ 314.434316][ T7507] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 314.505723][ T7507] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 314.580717][ T7507] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1006: Corrupt directory, running e2fsck is recommended [ 314.667338][ T7508] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 314.701300][ T7513] loop1: detected capacity change from 0 to 512 [ 314.766173][ T7508] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 314.804765][ T7513] EXT4-fs (loop1): 1 orphan inode deleted [ 314.822103][ T4462] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 314.870706][ T7513] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 314.892694][ T7508] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1006: Corrupt directory, running e2fsck is recommended [ 314.909442][ T4462] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:7: Failed to release dquot type 1 [ 314.981792][ T7513] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.026125][ T7477] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 315.075968][ T7518] netlink: 4256 bytes leftover after parsing attributes in process `syz.5.1016'. [ 315.109784][ T7513] EXT4-fs (loop1): shut down requested (2) [ 315.157436][ T7518] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1016'. [ 315.196979][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 315.285739][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 316.227714][ T7543] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1024'. [ 316.830095][ T7559] loop5: detected capacity change from 0 to 512 [ 316.915605][ T7559] EXT4-fs (loop5): 1 orphan inode deleted [ 316.927651][ T4532] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 316.966576][ T7559] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 316.989149][ T4532] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:11: Failed to release dquot type 1 [ 317.041020][ T7559] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.123568][ T7559] EXT4-fs (loop5): shut down requested (2) [ 317.261789][ T6982] EXT4-fs (loop5): unmounting filesystem. [ 317.489460][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.495802][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.110902][ T7595] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1039'. [ 319.779853][ T7610] tap0: tun_chr_ioctl cmd 21731 [ 319.849277][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1043'. [ 319.859318][ T7622] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 322.876482][ T7643] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1050'. [ 323.273763][ T7655] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1055'. [ 325.032251][ T7698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1071'. [ 325.624453][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1083'. [ 326.946461][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1081'. [ 326.978803][ T7732] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 327.437887][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1083'. [ 327.514529][ T7729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1083'. [ 327.792695][ T7751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1089'. [ 330.248941][ T7799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1108'. [ 331.184784][ T7833] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1119'. [ 331.511779][ T7841] loop2: detected capacity change from 0 to 512 [ 331.602007][ T7841] EXT4-fs: Ignoring removed nobh option [ 331.711083][ T7841] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1121: invalid indirect mapped block 256 (level 2) [ 331.929074][ T7841] EXT4-fs (loop2): 2 truncates cleaned up [ 332.007695][ T7841] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 332.181180][ T26] audit: type=1800 audit(1792824782.025:121): pid=7841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1121" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 332.349265][ T26] audit: type=1800 audit(1792824782.065:122): pid=7841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1121" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 332.407018][ T7841] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1121: bg 0: block 5: invalid block bitmap [ 332.540241][ T7875] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 332.635232][ T7841] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 22 with max blocks 484 with error 28 [ 332.762015][ T7875] EXT4-fs (loop2): This should not happen!! Data will be lost [ 332.762015][ T7875] [ 332.917086][ T7841] EXT4-fs (loop2): This should not happen!! Data will be lost [ 332.917086][ T7841] [ 333.063195][ T7875] EXT4-fs (loop2): Total free blocks count 0 [ 333.113174][ T7841] EXT4-fs (loop2): Total free blocks count 0 [ 333.172123][ T7875] EXT4-fs (loop2): Free/Dirty block details [ 333.233142][ T7841] EXT4-fs (loop2): Free/Dirty block details [ 333.288773][ T7875] EXT4-fs (loop2): free_blocks=0 [ 334.885292][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1145'. [ 334.895307][ T7917] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 338.282623][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1160'. [ 338.789274][ T7974] scsi_dev_info_list_add_str: bad dev info string 'F P?o;"Ӣژ' 'rTegɁxRrba* [ 338.789274][ T7974] HƬ`UbE6X,Yud' '(null)' [ 340.971827][ T8012] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1176'. [ 341.340545][ T8029] scsi_dev_info_list_add_str: bad dev info string 'F P?o;"Ӣژ' 'rTegɁxRrba* [ 341.340545][ T8029] HƬ`UbE6X,Yud' '(null)' [ 341.927781][ T8047] capability: warning: `syz.1.1186' uses 32-bit capabilities (legacy support in use) [ 342.033387][ T8047] program syz.1.1186 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.864002][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1192'. [ 344.134935][ T8086] loop5: detected capacity change from 0 to 512 [ 344.218137][ T8086] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 344.801386][ T8108] raw_sendmsg: syz.2.1204 forgot to set AF_INET. Fix it! [ 346.315874][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1208'. [ 346.551175][ T8127] loop5: detected capacity change from 0 to 512 [ 346.615197][ T8131] loop2: detected capacity change from 0 to 512 [ 346.812923][ T8131] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 347.522108][ T8152] loop2: detected capacity change from 0 to 512 [ 347.680815][ T8152] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 347.791247][ T8152] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.138053][ T5949] EXT4-fs (loop2): unmounting filesystem. [ 427.700679][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 430.556410][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 453.486258][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 453.493228][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8172/1:b..l [ 453.501466][ C0] (detected by 0, t=10502 jiffies, g=45817, q=165 ncpus=1) [ 453.508744][ C0] task:dhcpcd-run-hook state:R running task stack:24464 pid:8172 ppid:3936 flags:0x00004000 [ 453.520071][ C0] Call Trace: [ 453.523347][ C0] [ 453.526361][ C0] __schedule+0x107f/0x4030 [ 453.531003][ C0] ? release_firmware_map_entry+0x187/0x187 [ 453.536951][ C0] ? lock_chain_count+0x20/0x20 [ 453.541845][ C0] ? deref_stack_reg+0x18e/0x220 [ 453.546848][ C0] ? preempt_schedule_irq+0xb0/0x160 [ 453.552173][ C0] preempt_schedule_irq+0xbb/0x160 [ 453.557307][ C0] ? preempt_schedule_notrace+0x120/0x120 [ 453.563024][ C0] ? rcu_is_watching+0x11/0xa0 [ 453.567791][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 453.573594][ C0] irqentry_exit+0x63/0x70 [ 453.578091][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 453.584067][ C0] RIP: 0010:mt_validate+0x43ef/0x4c60 [ 453.589448][ C0] Code: 98 be 04 00 00 00 e8 80 11 ab f7 f0 ff 05 e9 bd e5 0d 48 c7 c7 a0 50 0e 98 be 04 00 00 00 e8 68 11 ab f7 f0 ff 05 f1 bd e5 0d <48> bb 00 00 00 00 00 fc ff df 4c 8b b4 24 b8 00 00 00 45 89 f7 41 [ 453.609238][ C0] RSP: 0018:ffffc9000c8cf440 EFLAGS: 00000207 [ 453.615305][ C0] RAX: ffffffff8a289201 RBX: 000000000000000a RCX: ffffffff8a2892a8 [ 453.623296][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff980e50a0 [ 453.631288][ C0] RBP: ffffc9000c8cf5f0 R08: 0000000000000003 R09: 0000000000000004 [ 453.639261][ C0] R10: dffffc0000000000 R11: fffffbfff301ca14 R12: ffff88802f5f6ed8 [ 453.647242][ C0] R13: ffff888062645c80 R14: 0000000000000001 R15: 0000000000000300 [ 453.655230][ C0] ? mt_validate+0x4341/0x4c60 [ 453.660040][ C0] ? mt_validate+0x43e8/0x4c60 [ 453.664834][ C0] ? mt_validate+0x110/0x4c60 [ 453.669515][ C0] ? mt_cache_shrink+0x20/0x20 [ 453.674292][ C0] ? __mt_destroy+0x142/0x250 [ 453.678979][ C0] validate_mm_mt+0xd9/0x420 [ 453.683568][ C0] ? __split_vma+0x4f0/0x4f0 [ 453.688256][ C0] validate_mm+0xe1/0x2e0 [ 453.692606][ C0] ? vma_expand+0x850/0x850 [ 453.697289][ C0] do_mas_align_munmap+0x102d/0x12d0 [ 453.702587][ C0] ? do_mas_align_munmap+0x74c/0x12d0 [ 453.707953][ C0] ? do_mas_munmap+0x2b0/0x2b0 [ 453.712717][ C0] ? mtree_range_walk+0x664/0x780 [ 453.717746][ C0] ? mas_walk+0x15f/0x180 [ 453.722086][ C0] ? mas_find+0x1ba/0x220 [ 453.726426][ C0] do_mas_munmap+0x240/0x2b0 [ 453.731016][ C0] mmap_region+0x7ab/0x1c50 [ 453.735534][ C0] ? file_mmap_ok+0x170/0x170 [ 453.740208][ C0] ? vma_expand+0x850/0x850 [ 453.744704][ C0] ? cap_mmap_addr+0x153/0x2c0 [ 453.749465][ C0] ? file_mmap_ok+0x11c/0x170 [ 453.754150][ C0] do_mmap+0x9ce/0x10d0 [ 453.758308][ C0] ? mlock_future_check+0x100/0x100 [ 453.763499][ C0] ? ima_file_mmap+0xf7/0x140 [ 453.768226][ C0] ? ima_file_free+0x3e0/0x3e0 [ 453.773004][ C0] ? common_file_perm+0x171/0x1c0 [ 453.778036][ C0] vm_mmap_pgoff+0x1c1/0x2d0 [ 453.782643][ C0] ? account_locked_vm+0xe0/0xe0 [ 453.787603][ C0] ksys_mmap_pgoff+0x4bf/0x720 [ 453.792372][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 453.797585][ C0] do_syscall_64+0x4c/0xa0 [ 453.802003][ C0] ? clear_bhb_loop+0x60/0xb0 [ 453.806694][ C0] ? clear_bhb_loop+0x60/0xb0 [ 453.811363][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 453.817276][ C0] RIP: 0033:0x7f7c17af1242 [ 453.821699][ C0] RSP: 002b:00007ffe46767408 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 453.830110][ C0] RAX: ffffffffffffffda RBX: 00007f7c177cb000 RCX: 00007f7c17af1242 [ 453.838336][ C0] RDX: 0000000000000001 RSI: 0000000000002000 RDI: 00007f7c177cb000 [ 453.846321][ C0] RBP: 0000000000000812 R08: 0000000000000003 R09: 0000000000005000 [ 453.854319][ C0] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffe46767490 [ 453.862287][ C0] R13: 00007f7c177d00c0 R14: 00007ffe46767840 R15: 00000fffc8cece84 [ 453.870279][ C0] [ 453.873461][ C0] rcu: rcu_preempt kthread starved for 9834 jiffies! g45817 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 453.884753][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 453.894768][ C0] rcu: RCU grace-period kthread stack dump: [ 453.900672][ C0] task:rcu_preempt state:I stack:28112 pid:16 ppid:2 flags:0x00004000 [ 453.909910][ C0] Call Trace: [ 453.913454][ C0] [ 453.916482][ C0] __schedule+0x107f/0x4030 [ 453.920997][ C0] ? debug_objects_fill_pool+0x87/0x780 [ 453.926625][ C0] ? release_firmware_map_entry+0x187/0x187 [ 453.932537][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 453.938541][ C0] ? lock_chain_count+0x20/0x20 [ 453.943387][ C0] ? preempt_schedule+0xbc/0xd0 [ 453.948335][ C0] preempt_schedule_common+0x82/0xd0 [ 453.953615][ C0] preempt_schedule+0xbc/0xd0 [ 453.958373][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 453.964001][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 453.970148][ C0] preempt_schedule_thunk+0x16/0x18 [ 453.975368][ C0] _raw_spin_unlock_irqrestore+0x10d/0x120 [ 453.981170][ C0] ? _raw_spin_unlock+0x40/0x40 [ 453.986118][ C0] ? __debug_object_init+0xed/0x440 [ 453.991308][ C0] schedule_timeout+0x12d/0x2d0 [ 453.996153][ C0] ? console_conditional_schedule+0x40/0x40 [ 454.002054][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 454.008143][ C0] ? prepare_to_swait_event+0x340/0x360 [ 454.013746][ C0] rcu_gp_fqs_loop+0x303/0x1350 [ 454.018679][ C0] ? rcu_gp_kthread+0x3b0/0x3b0 [ 454.023543][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 454.029730][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 454.035827][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 454.040886][ C0] ? rcu_gp_init+0x14f0/0x14f0 [ 454.045653][ C0] ? rcu_gp_cleanup+0xade/0xc30 [ 454.050936][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 454.056158][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 454.061369][ C0] rcu_gp_kthread+0x99/0x3b0 [ 454.065976][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 454.071169][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 454.077055][ C0] ? __kthread_parkme+0x71/0x1c0 [ 454.082049][ C0] ? __kthread_parkme+0x15b/0x1c0 [ 454.087069][ C0] kthread+0x29d/0x330 [ 454.091127][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 454.096228][ C0] ? kthread_blkcg+0xd0/0xd0 [ 454.100808][ C0] ret_from_fork+0x1f/0x30 [ 454.105226][ C0] [ 454.108254][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 454.114648][ C0] CPU: 0 PID: 8174 Comm: syz.4.1223 Not tainted syzkaller #0 [ 454.122042][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 454.132201][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x58/0x60 [ 454.139104][ C0] Code: f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 0f 1f 80 00 00 00 00 48 8b 04 24 65 48 8b 15 54 28 80 7e 65 8b [ 454.158758][ C0] RSP: 0018:ffffc9000c9b7898 EFLAGS: 00000246 [ 454.164841][ C0] RAX: ffffffff83d207b6 RBX: dffffc0000000000 RCX: 0000000000080000 [ 454.172904][ C0] RDX: ffffc9000dad7000 RSI: 000000000007ffff RDI: 0000000000080000 [ 454.180866][ C0] RBP: 0000000000000000 R08: ffffc9000c9b79ff R09: ffffc9000c9b7980 [ 454.188835][ C0] R10: dffffc0000000000 R11: fffff52001936f40 R12: 1ffff92001936fa8 [ 454.196816][ C0] R13: 0000000000000002 R14: ffffc9000c9b7d20 R15: ffff8880729c6600 [ 454.204780][ C0] FS: 00007f2b5a62b6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 454.213701][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 454.220369][ C0] CR2: 0000200000000058 CR3: 00000000610a6000 CR4: 00000000003506f0 [ 454.228334][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 454.236312][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 454.244291][ C0] Call Trace: [ 454.247575][ C0] [ 454.250500][ C0] security_socket_recvmsg+0x26/0xb0 [ 454.255966][ C0] ____sys_recvmsg+0x221/0x5b0 [ 454.260753][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 454.265778][ C0] ? import_iovec+0x6f/0xa0 [ 454.270277][ C0] ___sys_recvmsg+0x210/0x590 [ 454.274951][ C0] ? __sys_recvmsg+0x2a0/0x2a0 [ 454.279828][ C0] ? __fget_files+0x3fc/0x460 [ 454.284503][ C0] ? __fdget+0x17c/0x200 [ 454.288737][ C0] ? do_recvmmsg+0x19e/0x810 [ 454.293323][ C0] do_recvmmsg+0x370/0x810 [ 454.297738][ C0] ? __sys_recvmmsg+0x290/0x290 [ 454.302597][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 454.307621][ C0] ? do_recvmmsg+0x810/0x810 [ 454.312378][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 454.317571][ C0] do_syscall_64+0x4c/0xa0 [ 454.322068][ C0] ? clear_bhb_loop+0x60/0xb0 [ 454.326908][ C0] ? clear_bhb_loop+0x60/0xb0 [ 454.331582][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 454.337485][ C0] RIP: 0033:0x7f2b5979f559 [ 454.341893][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.361491][ C0] RSP: 002b:00007f2b5a62b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 454.369897][ C0] RAX: ffffffffffffffda RBX: 00007f2b59a25fa0 RCX: 00007f2b5979f559 [ 454.377861][ C0] RDX: 0000000000010106 RSI: 0000200000000240 RDI: 0000000000000003 [ 454.385823][ C0] RBP: 00007f2b59836b20 R08: 0000000000000000 R09: 0000000000000000 [ 454.393783][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 454.401755][ C0] R13: 00007f2b59a26038 R14: 00007f2b59a25fa0 R15: 00007ffdd6d50378 [ 454.409728][ C0]