last executing test programs: 1m23.400422036s ago: executing program 0 (id=532): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a000006090002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000108fdffff00", @ANYRES32=0x0, @ANYBLOB="000000002000000008001b00000000001c001a801800028014000180080017000100000008"], 0x44}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358749"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1m23.23598045s ago: executing program 0 (id=543): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x202}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}, 0x2, 0x9800, 0x0, 0x4}}, 0x2e) 1m23.128167162s ago: executing program 0 (id=536): socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m22.979968816s ago: executing program 0 (id=537): r0 = socket(0x2, 0x80805, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) sendmmsg$inet_sctp(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) 1m22.646715584s ago: executing program 0 (id=540): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x200, 0x7) ptrace(0x21, r0) 1m21.618136159s ago: executing program 0 (id=547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x38}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000200)="11223344", 0x4, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) 1m21.275099497s ago: executing program 32 (id=547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x38}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000200)="11223344", 0x4, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) 2.001817921s ago: executing program 1 (id=1304): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 1.831182805s ago: executing program 2 (id=1307): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) write(r0, &(0x7f0000000080)='common_pid > 0', 0xe) write$cgroup_subtree(r0, &(0x7f0000000080), 0x5b) 1.671439189s ago: executing program 2 (id=1308): setns(0xc9, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e1e, @empty}}, 0xffffff01, 0x67, 0xa4f, 0xc0, 0x15, 0xffffff86, 0xa9}, 0x9c) 1.62499295s ago: executing program 4 (id=1310): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000020000000000000060b4000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000dab7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c40)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000540)=ANY=[], 0x0) 1.459442804s ago: executing program 4 (id=1312): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) r2 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x20000000, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, {0x4644}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 1.274621918s ago: executing program 2 (id=1313): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @loopback, @rand_addr=0x64010102}, 0xc) getsockopt$inet_opts(r0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000080)) 1.062307244s ago: executing program 1 (id=1314): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040)="bad0a5b32a79", 0x6, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) shutdown(r0, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x46a, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}, 0x2100}], 0x414, 0x406, 0x0) 1.061715984s ago: executing program 2 (id=1315): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0xfffffffffffffe94, &(0x7f00000000c0)={&(0x7f0000000180)={0x48, r2, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfe}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffc}]}, 0x48}}, 0x4) 1.060904744s ago: executing program 3 (id=1316): ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f0000008640)={&(0x7f0000008480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007340)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x79011cc3, 0x2000000000}, {0x8, 0xa}, {0x9, 0x2}, {0x0, 0x3fe0000000000000}, {0x3, 0xa353}, {0x5, 0x80}, {0x30, 0x9}, {0x80000001, 0x7}, {0x6bf144ce, 0x5}, {0x6, 0x141}, {0x7fffffff}, {0x40eb, 0x6}, {0x1000}, {0x0, 0x5}, {0x4, 0x6}, {0x0, 0x6}, {0x6, 0x8}, {0x6, 0x9}, {0x10001, 0x2}, {0x7f, 0x3}, {0x9, 0x7fffffffffffffff}, {0x9, 0x4}, {0x5, 0x9}, {0x4, 0x2}, {0xffffffffffffffff, 0x817}, {0x9, 0xd}, {0x8, 0x4}, {0x8b6d, 0x401}, {0x10, 0x8000000000000001}, {0x0, 0x57d9}, {0xffffffffffffffff, 0x6}, {0x1, 0x8}, {0xffffffff7fffffff, 0x8000}, {0x8000000000000001, 0x51e6}, {0x5, 0x3}, {0x7fffffffffffffff, 0x8}, {0x7, 0xffffffffffffffff}, {0x7ff, 0x8}, {0x4}, {0x2, 0xfffffffffffffffb}, {0x7, 0x8c8}, {0x6, 0x6}, {0x4, 0x2c0e4184}, {0x3}, {0x2, 0xd}, {0x10000, 0x6}, {0x81, 0x8}, {0x81, 0x800}, {0x100, 0x10}, {0x0, 0x4}, {0x0, 0x100000001}, {0x6, 0x9}, {0x9, 0x3}, {0x0, 0x1}, {0x8, 0x9}, {0x7, 0x4}, {0x3ff, 0x9}, {0x0, 0x6}, {0x8001, 0xeb}, {0x1, 0x5}, {0x3, 0xe46e00}, {0x5, 0x2}, {0x2, 0xff}, {0x92, 0x2}, {0xfffffffffffffff7, 0xe4}, {0xe, 0x6}, {0x9969, 0x100000001}, {0xb37, 0x5}, {0x7fffffffffffffff, 0xf7d}, {0x40, 0xa9}, {0x80, 0x7ff}, {0xf, 0x10}, {0x22400000, 0x2}, {0x1, 0x9}, {0xffffffff, 0x4}, {0x28c, 0x7}, {0x0, 0x3}, {0x9, 0xbf9d}, {0xd, 0x6}, {0xfff, 0x6}, {0x6, 0x6}, {0x1, 0x3}, {0x4, 0xa27}, {0x4, 0x9}, {0x400, 0x3d0b274f}, {0x0, 0x7}, {0x8000, 0x6}, {0xe0ae, 0x8000000000000}, {0x2, 0xaca7}, {0xc, 0x1}, {0x0, 0x100}, {0x8, 0x9}, {0x6, 0x7}, {0x100000000, 0x8}, {0x400000000, 0x4}, {0x9, 0x1000000000000000}, {0x5, 0x8001}, {0x4, 0x2}, {0xf9, 0x3}, {0x100, 0x67d}, {0x1, 0x2}, {0xa16, 0x8}, {0x0, 0x4}, {0x728, 0x5cd}, {0x8, 0xe}, {0x5, 0x81}, {0x7, 0xfffffffffffffffe}, {0x2, 0x2}, {0x3, 0x80}, {0x2, 0x2}, {0xe2b2, 0x1}, {0x5, 0x8}, {0x9, 0x1}, {0x5, 0x7}, {0x1}, {0xdf24}, {0xf, 0x4}, {0xfffffffffffffff2, 0x100}, {0x9, 0x4}, {0x16624378, 0x6}, {0x9, 0x8c8}, {0x1, 0x8}, {0x8, 0x9e5}, {0x7f, 0x8}, {0x2, 0x8000000000000000}, {0x7}, {0xf56b, 0x8}, {0x6, 0x100000001}, {0xe9b4, 0x3}, {0x6, 0x380000000000}, {0x1, 0x5}, {0x1843d739, 0x9}, {0x2, 0x2}, {0x9, 0x100}, {0xb1, 0xa}, {0x3, 0x401}, {0x40, 0xffffffffffffffff}, {0x8, 0x8d}, {0x2, 0x800}, {0x9, 0x3}, {0x0, 0x2}, {0x3, 0x6}, {0x3, 0x5}, {0x4, 0x8}, {0x1, 0x1}, {0x2, 0x70a5}, {0x100000000, 0x4}, {0x6, 0xf9}, {0x2, 0x3}, {0x80000000, 0x4}, {0x7da9, 0x4}, {0x5, 0x1}, {0xfffffffffffffff7, 0x8}, {0x8, 0x5}, {0x4b384f4e, 0x401}, {0x1, 0x20}, {0x9, 0x1}, {0x9, 0x3}, {0x8, 0x5d}, {0x8, 0x9}, {0x100000000, 0x4}, {0x2, 0x4}, {0x1}, {0x9, 0xfffffffffffffffa}, {0x7fffffff, 0x6}, {0x9}, {0x0, 0x1fc000000000000}, {0x300000000000, 0x5}, {0x9, 0x5}, {0x10, 0x10}, {0x3, 0x9}, {0x0, 0x4}, {0x6, 0x8}, {0x7, 0x6}, {0x2}, {0x2, 0x200}, {0xa}, {0x5, 0x3}, {0x6}, {0x400, 0x2}, {0x0, 0x6}, {0xffffffffffffffff, 0x7}, {0x3ff, 0xd7}, {0x4, 0x9}, {0x1ff, 0x80000000}, {0x40000000000000, 0x4}, {0xd, 0x3358000}, {0x1a, 0x38}, {0x6, 0x8}, {0x1, 0x3}, {0x8}, {0x7, 0x9}, {0x9, 0x9}, {0x8000000000000000, 0x2}, {0x6, 0x400}, {0x401, 0xff3}, {0xfffffffffffffc01, 0x4}, {0x7730, 0x2}, {0x3e19, 0xaf000000000000}, {0xffffffffffffffff}, {0x10}, {0x1a, 0x7}, {0x5, 0x7}, {0x8}, {0x9470, 0x3}, {0x4}, {0x3528, 0x8000}, {0x0, 0x8}, {0x2, 0x401}, {0x6845, 0xfffffffffffffff6}, {0xfffffffffffffffc, 0xc}, {0x101, 0x80000001}, {0x5, 0x2}, {0x8, 0x3}, {0x1000}, {0x1ff, 0x1ff}, {0xca, 0x1}, {0x0, 0x7fff}, {0x7fffffff, 0x4}, {0xe8, 0x101}, {0x2000000000, 0x8}, {0x7, 0x4}, {0x81}, {0x4}, {0x2eb3, 0xca61}, {0x10000, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x42d0fb95, 0x8}, {0x8, 0x8000000000000000}, {0x0, 0x6}, {0xa53, 0x9}, {0xcddf, 0x100000001}, {0x80, 0x1ffe00}, {0x10000, 0xfffffffffffffffe}, {0xea2a, 0x70e}, {0x6, 0x390d}, {0x1000, 0xc0000000}, {0x9, 0x5}, {0x0, 0x7}, {0x6, 0x1}, {0xffffffffffffff63, 0xfffffffffffffffa}, {0x4, 0xfffffffffffffffd}, {0x8, 0x5}, {0x0, 0x5}, {0x6, 0x90}, {0x7f, 0x5}, {0x800, 0x4}, {0x5505, 0x9}, {0x80000000, 0x1}, {0x3c5e, 0x4}, {0x4, 0x1}, {0x3ff, 0x9}, {0xffffffff, 0x9}, {0x4, 0xe}]}, 0x0, 0x0, 0x0, 0x0], 0x32}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 883.397468ms ago: executing program 2 (id=1317): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000000)='27', 0x2) syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) 871.178738ms ago: executing program 3 (id=1318): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 808.06243ms ago: executing program 2 (id=1319): pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 654.394004ms ago: executing program 3 (id=1320): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x801a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x4020744f, 0x0) 575.154126ms ago: executing program 1 (id=1321): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x18, &(0x7f0000000640)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}, {0x85, 0x0, 0x0, 0x71}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 516.257697ms ago: executing program 3 (id=1322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)={0x2c, 0xd, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 477.819418ms ago: executing program 4 (id=1323): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pselect6(0x40, &(0x7f0000000040)={0x1, 0xfff, 0x200, 0x0, 0x6, 0x4, 0xac69, 0x10000000005}, &(0x7f0000000080)={0x1, 0x9, 0x4, 0x7a69, 0x4, 0x8, 0x3, 0x6}, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x10000]}, 0x8}) 361.213781ms ago: executing program 1 (id=1324): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002a80)={'gretap0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x0, r1, 0x1, 0xffffffff}, 0x10) 315.413312ms ago: executing program 3 (id=1325): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:/ export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='addr\x00', &(0x7f0000000500)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='port\x00', &(0x7f0000000700)='2056\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='xprtsec\x00', &(0x7f0000000b00)='tls\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 306.611172ms ago: executing program 4 (id=1326): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80081}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x4, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x3ff9}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 161.284466ms ago: executing program 3 (id=1327): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14000000}, 0x44080) 115.299166ms ago: executing program 1 (id=1328): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x1edd}}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 72.056807ms ago: executing program 1 (id=1329): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 71.364807ms ago: executing program 4 (id=1337): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x4, 0x8, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 0s ago: executing program 4 (id=1330): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040)="bad0a5b32a79", 0x6, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) shutdown(r0, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x46a, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}, 0x2100}], 0x414, 0x406, 0x0) kernel console output (not intermixed with test programs): 95 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.2.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdb79e199 code=0x7ff00000 [ 91.054504][ T27] audit: type=1326 audit(1791379191.382:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.2.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdb79e199 code=0x7ff00000 [ 91.078813][ T27] audit: type=1326 audit(1791379191.382:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.2.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdb79e199 code=0x7ff00000 [ 91.108240][ T27] audit: type=1326 audit(1791379191.382:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.2.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdb79e199 code=0x7ff00000 [ 91.132155][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.144124][ T27] audit: type=1326 audit(1791379191.382:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.2.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdb79e199 code=0x7ff00000 [ 91.168014][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.180380][ T27] audit: type=1326 audit(1791379191.382:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.2.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdb79e199 code=0x7ff00000 [ 91.210030][ T27] audit: type=1326 audit(1791379191.382:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.2.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdb79e199 code=0x7ff00000 [ 91.233948][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.249992][ T27] audit: type=1326 audit(1791379191.382:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.2.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdb79e199 code=0x7ff00000 [ 91.363962][ T6269] loop0: detected capacity change from 0 to 32768 [ 91.419523][ T6269] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 91.579260][ T5774] ocfs2: Unmounting device (7,0) on (node local) [ 91.826375][ T6283] Bluetooth: MGMT ver 1.22 [ 92.065017][ T6289] loop1: detected capacity change from 0 to 128 [ 92.113705][ T6289] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 92.172819][ T6289] hpfs: filesystem error: improperly stopped [ 92.230880][ T6289] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 92.259770][ T6289] hpfs: You really don't want any checks? You are crazy... [ 92.308711][ T6289] hpfs: Code page index out of array [ 92.332914][ T6289] hpfs: code page support is disabled [ 92.364296][ T6289] hpfs: hpfs_map_4sectors(): unaligned read [ 92.389618][ T6289] hpfs: hpfs_map_4sectors(): unaligned read [ 92.407270][ T6289] hpfs: filesystem error: unable to find root dir [ 92.622947][ T790] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 92.762727][ C0] sched: RT throttling activated [ 92.812801][ T790] usb 4-1: Using ep0 maxpacket: 32 [ 92.821091][ T790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.829761][ T6281] loop0: detected capacity change from 0 to 131072 [ 92.842806][ T6281] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (512, 24) [ 92.850676][ T6281] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 92.850957][ T790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.859012][ T6281] F2FS-fs (loop0): Test dummy encryption mode enabled [ 92.861140][ T6281] F2FS-fs (loop0): invalid crc value [ 92.886130][ T790] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 92.896903][ T790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.903936][ T6281] F2FS-fs (loop0): Found nat_bits in checkpoint [ 92.916097][ T790] usb 4-1: config 0 descriptor?? [ 92.924204][ T790] hub 4-1:0.0: USB hub found [ 92.944849][ T6281] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 92.965075][ T6281] F2FS-fs (loop0): Start checkpoint disabled! [ 93.011085][ T6281] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 93.018720][ T6281] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 93.140043][ T6293] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 93.172989][ T790] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 93.197428][ T790] usbhid 4-1:0.0: can't add hid device: -71 [ 93.209157][ T790] usbhid: probe of 4-1:0.0 failed with error -71 [ 93.255675][ T790] usb 4-1: USB disconnect, device number 4 [ 93.271369][ T3477] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 94.400551][ T6334] netlink: 208052 bytes leftover after parsing attributes in process `syz.0.194'. [ 94.419670][ T6335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.195'. [ 94.453050][ T6335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.526736][ T6335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.561820][ T6341] syz_tun: entered allmulticast mode [ 94.569360][ T6338] lo: entered allmulticast mode [ 94.576218][ T6338] lo: left allmulticast mode [ 94.582027][ T6337] syz_tun: left allmulticast mode [ 95.412191][ T6370] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 95.761518][ T6380] loop0: detected capacity change from 0 to 1024 [ 95.808268][ T6380] hfsplus: invalid secondary volume header [ 95.822881][ T6380] hfsplus: unable to find HFS+ superblock [ 95.832899][ T8] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 96.027488][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.059541][ T8] usb 4-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 96.095806][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.117578][ T8] usb 4-1: config 0 descriptor?? [ 96.444957][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 96.602091][ T8] input: HID 0458:5005 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5005.0001/input/input6 [ 96.673977][ T8] input: HID 0458:5005 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5005.0001/input/input7 [ 96.834843][ T8] kye 0003:0458:5005.0001: input,hiddev0,hidraw0: USB HID v7f.fd Device [HID 0458:5005] on usb-dummy_hcd.3-1/input0 [ 96.924610][ T8] usb 4-1: USB disconnect, device number 5 [ 96.969347][ T6405] netlink: 76 bytes leftover after parsing attributes in process `syz.0.224'. [ 97.138125][ T6408] fido_id[6408]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 98.026814][ T27] kauditd_printk_skb: 108 callbacks suppressed [ 98.026827][ T27] audit: type=1326 audit(1791379198.422:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.3.237" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe20a59e199 code=0x0 [ 98.058910][ T6441] process 'syz.1.239' launched './file0' with NULL argv: empty string added [ 98.736031][ T27] audit: type=1326 audit(1791379199.132:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc6359e199 code=0x0 [ 100.059010][ T6494] netlink: 'syz.0.260': attribute type 1 has an invalid length. [ 100.182647][ T6494] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.241217][ T6479] loop1: detected capacity change from 0 to 40427 [ 100.303592][ T6479] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 100.329890][ T6479] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 100.348948][ T6496] bond1: (slave gretap1): making interface the new active one [ 100.363866][ T6479] F2FS-fs (loop1): invalid crc value [ 100.381297][ T6496] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 100.489178][ T6496] syz.0.260 (6496) used greatest stack depth: 20056 bytes left [ 100.628089][ T6479] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 100.653201][ T6479] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 100.790657][ T6479] syz.1.254: attempt to access beyond end of device [ 100.790657][ T6479] loop1: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 101.031565][ T5770] syz-executor: attempt to access beyond end of device [ 101.031565][ T5770] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 101.075074][ T5770] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 101.344653][ T6538] 9pnet_fd: Insufficient options for proto=fd [ 102.874776][ T27] audit: type=1800 audit(1791379203.262:191): pid=6587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.299" name="addr_trtype" dev="configfs" ino=9153 res=0 errno=0 [ 103.016960][ T27] audit: type=1800 audit(1791379203.412:192): pid=6593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.302" name="addr_adrfam" dev="configfs" ino=9160 res=0 errno=0 [ 103.067675][ T6596] IPv4: Oversized IP packet from 127.202.26.0 [ 103.664861][ T6618] loop3: detected capacity change from 0 to 128 [ 103.736435][ T6618] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.751879][ T6618] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.802511][ T6624] netlink: 'syz.0.314': attribute type 1 has an invalid length. [ 104.001437][ T6618] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.284313][ T6652] bridge_slave_0: left allmulticast mode [ 104.290529][ T6652] bridge_slave_0: left promiscuous mode [ 104.310619][ T6652] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.343831][ T6652] bridge_slave_1: left allmulticast mode [ 104.349548][ T6652] bridge_slave_1: left promiscuous mode [ 104.361080][ T6652] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.387494][ T6652] bond0: (slave bond_slave_0): Releasing backup interface [ 104.407644][ T6652] bond0: (slave bond_slave_1): Releasing backup interface [ 104.466767][ T6652] team0: Port device team_slave_0 removed [ 104.491278][ T6652] team0: Port device team_slave_1 removed [ 104.514408][ T6652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.521956][ T6652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.548382][ T6652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.563893][ T6652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.751953][ T6672] netlink: 16 bytes leftover after parsing attributes in process `syz.3.329'. [ 105.074323][ T173] IPVS: starting estimator thread 0... [ 105.166616][ T6693] IPVS: using max 21 ests per chain, 50400 per kthread [ 106.072119][ T6722] jffs2: notice: (6722) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 106.096063][ T6724] device-mapper: ioctl: only supply one of name or uuid, cmd(9) [ 106.463523][ T6740] jffs2: notice: (6740) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 106.540244][ T6747] netlink: 16 bytes leftover after parsing attributes in process `syz.1.358'. [ 106.792855][ T23] IPVS: starting estimator thread 0... [ 106.882972][ T6756] IPVS: using max 21 ests per chain, 50400 per kthread [ 106.975111][ T6766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.368'. [ 107.117508][ T6770] jffs2: notice: (6770) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 107.268682][ T6777] loop1: detected capacity change from 0 to 64 [ 107.409556][ T6777] syz.1.371: attempt to access beyond end of device [ 107.409556][ T6777] loop1: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 107.427637][ T6777] Buffer I/O error on dev loop1, logical block 161, lost async page write [ 107.447950][ T6777] syz.1.371: attempt to access beyond end of device [ 107.447950][ T6777] loop1: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 107.473213][ T6777] Buffer I/O error on dev loop1, logical block 162, lost async page write [ 107.489795][ T6777] syz.1.371: attempt to access beyond end of device [ 107.489795][ T6777] loop1: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 107.519648][ T6777] Buffer I/O error on dev loop1, logical block 163, lost async page write [ 107.544731][ T6777] syz.1.371: attempt to access beyond end of device [ 107.544731][ T6777] loop1: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 107.547622][ T23] IPVS: starting estimator thread 0... [ 107.592031][ T6777] Buffer I/O error on dev loop1, logical block 167, lost async page write [ 107.620513][ T6777] syz.1.371: attempt to access beyond end of device [ 107.620513][ T6777] loop1: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 107.663677][ T6777] Buffer I/O error on dev loop1, logical block 169, lost async page write [ 107.672292][ T6777] syz.1.371: attempt to access beyond end of device [ 107.672292][ T6777] loop1: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 107.697599][ T6777] Buffer I/O error on dev loop1, logical block 171, lost async page write [ 107.698257][ T6784] IPVS: using max 19 ests per chain, 45600 per kthread [ 107.720721][ T6777] syz.1.371: attempt to access beyond end of device [ 107.720721][ T6777] loop1: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 107.729492][ T6788] overlayfs: failed to clone upperpath [ 107.753193][ T6777] Buffer I/O error on dev loop1, logical block 172, lost async page write [ 108.122670][ T6801] jffs2: notice: (6801) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 108.512913][ T5776] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 108.681715][ T6814] loop1: detected capacity change from 0 to 32768 [ 108.715721][ T5776] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 108.739757][ T5776] usb 4-1: config 0 has no interface number 0 [ 108.756915][ T5776] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 108.766233][ T5776] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.774436][ T5776] usb 4-1: Product: syz [ 108.778246][ T6814] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 108.778779][ T5776] usb 4-1: Manufacturer: syz [ 108.793418][ T5776] usb 4-1: SerialNumber: syz [ 108.805558][ T5776] usb 4-1: config 0 descriptor?? [ 108.869662][ T6821] netlink: 32 bytes leftover after parsing attributes in process `syz.2.391'. [ 108.879023][ T6821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.391'. [ 108.904981][ T6824] loop0: detected capacity change from 0 to 64 [ 109.014499][ T6824] syz.0.390: attempt to access beyond end of device [ 109.014499][ T6824] loop0: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 109.086050][ T6824] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 109.105204][ T6824] syz.0.390: attempt to access beyond end of device [ 109.105204][ T6824] loop0: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 109.120138][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 109.123523][ T5776] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 109.164268][ T5776] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 109.176595][ T6824] Buffer I/O error on dev loop0, logical block 162, lost async page write [ 109.193455][ T5776] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 109.201549][ T5776] usb 4-1: media controller created [ 109.207358][ T6824] syz.0.390: attempt to access beyond end of device [ 109.207358][ T6824] loop0: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 109.253015][ T6824] Buffer I/O error on dev loop0, logical block 163, lost async page write [ 109.286882][ T5776] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.824069][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 109.932971][ T790] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.018160][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.030770][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 110.050846][ T8] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 110.069637][ T8] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 110.081897][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.123435][ T790] usb 2-1: Using ep0 maxpacket: 32 [ 110.146297][ T790] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 110.162858][ T790] usb 2-1: config 0 has no interface number 0 [ 110.183613][ T790] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 110.202993][ T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.211053][ T790] usb 2-1: Product: syz [ 110.222745][ T790] usb 2-1: Manufacturer: syz [ 110.227402][ T790] usb 2-1: SerialNumber: syz [ 110.248332][ T790] usb 2-1: config 0 descriptor?? [ 110.261743][ T790] smsc95xx v2.0.0 [ 110.395016][ T5776] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 110.488901][ T5776] usb 4-1: USB disconnect, device number 6 [ 110.534663][ T8] cxacru 1-1:1.0: send of cm 0x91 failed (-71) [ 110.557544][ T8] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 110.576691][ T8] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 110.607424][ T8] cxacru: probe of 1-1:1.0 failed with error -71 [ 110.643434][ T8] usb 1-1: USB disconnect, device number 4 [ 110.702934][ T790] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 110.713798][ T790] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 111.301649][ T27] audit: type=1800 audit(1791379211.692:193): pid=6851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.400" name="console" dev="configfs" ino=11610 res=0 errno=0 [ 111.333424][ T790] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 111.359823][ T790] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 111.382822][ T790] usb 2-1: USB disconnect, device number 4 [ 111.721568][ T6857] ip_tables: iptables: counters copy to user failed while replacing table [ 111.923126][ T6860] input: syz0 as /devices/virtual/input/input8 [ 112.006264][ T6853] loop0: detected capacity change from 0 to 32768 [ 112.069234][ T6853] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 112.294524][ T5774] ocfs2: Unmounting device (7,0) on (node local) [ 112.502916][ T790] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 112.752829][ T790] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.763452][ T790] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 112.784608][ T790] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 112.813050][ T790] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 112.843629][ T790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.291735][ T790] cxacru 4-1:1.0: send of cm 0x91 failed (-71) [ 113.312746][ T790] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 113.321765][ T790] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 113.345136][ T790] cxacru: probe of 4-1:1.0 failed with error -71 [ 113.368775][ T790] usb 4-1: USB disconnect, device number 7 [ 114.873157][ T28] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 115.067982][ T28] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.079497][ T28] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.110510][ T28] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 115.124373][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 115.132432][ T28] usb 2-1: SerialNumber: syz [ 115.270840][ T6930] loop3: detected capacity change from 0 to 40427 [ 115.292563][ T6930] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 115.323023][ T6930] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 115.351249][ T6930] F2FS-fs (loop3): invalid crc value [ 115.412624][ T28] usb 2-1: 0:2 : does not exist [ 115.461421][ T28] usb 2-1: USB disconnect, device number 5 [ 115.535640][ T5773] udevd[5773]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.600726][ T6930] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 115.607958][ T6930] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 115.685110][ T6930] bio_check_eod: 4 callbacks suppressed [ 115.685129][ T6930] syz.3.429: attempt to access beyond end of device [ 115.685129][ T6930] loop3: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 115.795178][ T5771] syz-executor: attempt to access beyond end of device [ 115.795178][ T5771] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 115.816714][ T5771] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 116.392327][ T6963] jffs2: notice: (6963) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 117.430509][ T27] audit: type=1326 audit(1791379217.822:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.3.450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20a59e199 code=0x7ffc0000 [ 117.502825][ T27] audit: type=1326 audit(1791379217.822:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.3.450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20a59e199 code=0x7ffc0000 [ 117.555074][ T27] audit: type=1326 audit(1791379217.832:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.3.450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20a59e199 code=0x7ffc0000 [ 117.611928][ T27] audit: type=1326 audit(1791379217.832:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.3.450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20a59e199 code=0x7ffc0000 [ 117.635927][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.672823][ T27] audit: type=1326 audit(1791379217.842:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.3.450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe20a59e199 code=0x7ffc0000 [ 117.737326][ T27] audit: type=1326 audit(1791379217.882:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.3.450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20a59e199 code=0x7ffc0000 [ 117.806636][ T27] audit: type=1326 audit(1791379217.892:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.3.450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20a59e199 code=0x7ffc0000 [ 117.902891][ T27] audit: type=1326 audit(1791379217.892:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.3.450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe20a59df02 code=0x7ffc0000 [ 118.018454][ T27] audit: type=1326 audit(1791379217.892:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.3.450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe20a59df97 code=0x7ffc0000 [ 118.110069][ T27] audit: type=1326 audit(1791379217.892:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.3.450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe20a55ae91 code=0x7ffc0000 [ 118.133996][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.518415][ T6988] loop3: detected capacity change from 0 to 512 [ 118.551839][ T6988] EXT4-fs: Invalid want_extra_isize 1969 [ 118.820593][ T6986] loop0: detected capacity change from 0 to 131072 [ 118.833956][ T6986] F2FS-fs (loop0): Segment count (31) mismatch with total segments from devices (0) [ 118.844302][ T6986] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 118.856459][ T6986] F2FS-fs (loop0): invalid crc value [ 118.914799][ T6986] F2FS-fs (loop0): Found nat_bits in checkpoint [ 118.949322][ T6993] netlink: 'syz.3.453': attribute type 1 has an invalid length. [ 118.998476][ T6986] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 119.006078][ T6986] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 119.081244][ T6993] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.136564][ T6986] F2FS-fs (loop0): f2fs_fill_dentries: corrupted namelen=24152, run fsck to fix. [ 119.152352][ T6986] F2FS-fs (loop0): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 0, max: 36 [ 119.277817][ T6996] bond1: (slave gretap1): making interface the new active one [ 119.332584][ T6996] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 121.709900][ T7058] bridge0: port 3(dummy0) entered blocking state [ 121.719056][ T7058] bridge0: port 3(dummy0) entered disabled state [ 121.728188][ T7058] dummy0: entered allmulticast mode [ 121.736256][ T7058] dummy0: entered promiscuous mode [ 121.748735][ T7058] bridge0: port 3(dummy0) entered blocking state [ 121.755543][ T7058] bridge0: port 3(dummy0) entered forwarding state [ 121.767300][ T7061] dummy0: left allmulticast mode [ 121.772272][ T7061] dummy0: left promiscuous mode [ 121.779245][ T7061] bridge0: port 3(dummy0) entered disabled state [ 122.713974][ T7081] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.723958][ T7081] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.732926][ T7081] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.742671][ T7081] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.798234][ T7087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.487'. [ 122.813659][ T7093] bridge0: port 3(dummy0) entered blocking state [ 122.830419][ T7093] bridge0: port 3(dummy0) entered disabled state [ 122.859779][ T7093] dummy0: entered allmulticast mode [ 122.875342][ T7093] dummy0: entered promiscuous mode [ 122.881260][ T7093] bridge0: port 3(dummy0) entered blocking state [ 122.887773][ T7093] bridge0: port 3(dummy0) entered forwarding state [ 122.908454][ T7094] dummy0: left allmulticast mode [ 122.914805][ T7094] dummy0: left promiscuous mode [ 122.919983][ T7094] bridge0: port 3(dummy0) entered disabled state [ 123.120606][ T7103] loop0: detected capacity change from 0 to 164 [ 123.854354][ T7126] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.862225][ T7126] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.926772][ T7113] loop0: detected capacity change from 0 to 40427 [ 123.938751][ T7113] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 123.946650][ T7113] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 123.989163][ T7113] F2FS-fs (loop0): invalid crc value [ 124.100891][ T27] kauditd_printk_skb: 267 callbacks suppressed [ 124.100904][ T27] audit: type=1326 audit(1791379224.492:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7132 comm="syz.2.514" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdb79e199 code=0x7ffc0000 [ 124.151190][ T27] audit: type=1326 audit(1791379224.522:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7132 comm="syz.2.514" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdb79e199 code=0x7ffc0000 [ 124.181742][ T27] audit: type=1326 audit(1791379224.532:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7132 comm="syz.2.514" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdb79e199 code=0x7ffc0000 [ 124.231059][ T27] audit: type=1326 audit(1791379224.532:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7132 comm="syz.2.514" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdb79e199 code=0x7ffc0000 [ 124.255274][ T7113] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 124.262891][ T7113] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 124.292229][ T27] audit: type=1326 audit(1791379224.542:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7132 comm="syz.2.514" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7fdb79e199 code=0x7ffc0000 [ 124.338205][ T7126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.344323][ T27] audit: type=1326 audit(1791379224.542:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7132 comm="syz.2.514" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7fdb79df02 code=0x7ffc0000 [ 124.367892][ T7113] syz.0.497: attempt to access beyond end of device [ 124.367892][ T7113] loop0: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 124.370115][ T27] audit: type=1326 audit(1791379224.562:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7132 comm="syz.2.514" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7fdb75e9ce code=0x7ffc0000 [ 124.414954][ T7126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.436283][ T27] audit: type=1326 audit(1791379224.562:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7132 comm="syz.2.514" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7fdb79dfc7 code=0x7ffc0000 [ 124.465061][ T27] audit: type=1326 audit(1791379224.562:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7132 comm="syz.2.514" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7fdb75e9ce code=0x7ffc0000 [ 124.490380][ T27] audit: type=1326 audit(1791379224.562:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7132 comm="syz.2.514" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7fdb75e9ce code=0x7ffc0000 [ 124.517577][ T5774] syz-executor: attempt to access beyond end of device [ 124.517577][ T5774] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 124.536396][ T5774] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 124.698579][ T7126] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.714078][ T7126] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.725945][ T7126] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.738618][ T7126] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.875132][ T7142] bridge0: port 1(dummy0) entered blocking state [ 124.881831][ T7142] bridge0: port 1(dummy0) entered disabled state [ 124.894027][ T7142] dummy0: entered allmulticast mode [ 124.905533][ T7142] dummy0: entered promiscuous mode [ 124.934740][ T7146] dummy0: left allmulticast mode [ 124.939750][ T7146] dummy0: left promiscuous mode [ 124.964013][ T7146] bridge0: port 1(dummy0) entered disabled state [ 125.257027][ T7159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.511'. [ 125.661418][ T7174] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.668883][ T7174] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.762292][ T7174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.847182][ T7174] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.858008][ T7174] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.867048][ T7174] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.876056][ T7174] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.434334][ T7178] bridge0: port 3(dummy0) entered blocking state [ 126.451812][ T7178] bridge0: port 3(dummy0) entered disabled state [ 126.468145][ T7178] dummy0: entered allmulticast mode [ 126.486738][ T7178] dummy0: entered promiscuous mode [ 126.518204][ T7178] dummy0: left allmulticast mode [ 126.542970][ T7178] dummy0: left promiscuous mode [ 126.554105][ T7178] bridge0: port 3(dummy0) entered disabled state [ 126.717739][ T7192] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 127.501006][ T7219] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 127.610254][ T7207] loop1: detected capacity change from 0 to 32768 [ 127.629764][ T7207] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop1 scanned by syz.1.534 (7207) [ 127.685172][ T7207] BTRFS info (device loop1): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 127.709654][ T7207] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 127.731072][ T7207] BTRFS info (device loop1): using free space tree [ 127.852289][ T7207] BTRFS info (device loop1): enabling ssd optimizations [ 127.881653][ T7207] BTRFS info (device loop1): auto enabling async discard [ 128.334525][ T5770] BTRFS info (device loop1): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 128.356172][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.546'. [ 128.464971][ T7253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.948500][ T1094] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.098366][ T1094] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.195319][ T1094] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.301751][ T1094] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.503277][ T28] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 129.710260][ T28] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 129.744644][ T28] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 129.789373][ T28] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 129.806322][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.824033][ T28] usb 2-1: Product: syz [ 129.831044][ T28] usb 2-1: Manufacturer: syz [ 129.849815][ T28] usb 2-1: SerialNumber: syz [ 129.860363][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 129.893809][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 129.902932][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 129.914955][ T27] kauditd_printk_skb: 87 callbacks suppressed [ 129.914969][ T27] audit: type=1326 audit(1791379230.312:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.2.555" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7fdb79e199 code=0x0 [ 129.945903][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 129.955636][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 129.963374][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 130.107841][ T28] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 130.345182][ T5760] usb 2-1: USB disconnect, device number 6 [ 130.368417][ T5760] usblp0: removed [ 130.476195][ T1094] bond1: (slave gretap1): Releasing active interface [ 130.516963][ T7283] chnl_net:caif_netlink_parms(): no params data found [ 130.697895][ T7283] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.714295][ T7283] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.722379][ T7283] bridge_slave_0: entered allmulticast mode [ 130.735569][ T7283] bridge_slave_0: entered promiscuous mode [ 130.830639][ T7283] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.839632][ T7283] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.848166][ T7283] bridge_slave_1: entered allmulticast mode [ 130.856293][ T7283] bridge_slave_1: entered promiscuous mode [ 130.949679][ T7283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.970543][ T7310] netlink: 208052 bytes leftover after parsing attributes in process `syz.2.568'. [ 131.038897][ T7283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.184838][ T1094] hsr_slave_0: left promiscuous mode [ 131.242618][ T1094] hsr_slave_1: left promiscuous mode [ 131.260844][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.266993][ T7324] mmap: syz.1.566 (7324) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 131.282968][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.303962][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.332787][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.341740][ T1094] bridge_slave_1: left allmulticast mode [ 131.355129][ T1094] bridge_slave_1: left promiscuous mode [ 131.365314][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.400270][ T1094] bridge_slave_0: left allmulticast mode [ 131.408430][ T1094] bridge_slave_0: left promiscuous mode [ 131.422019][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.549773][ T1094] veth1_macvtap: left promiscuous mode [ 131.573102][ T1094] veth0_macvtap: left promiscuous mode [ 131.578820][ T1094] veth1_vlan: left promiscuous mode [ 131.602625][ T1094] veth0_vlan: left promiscuous mode [ 131.604582][ T27] audit: type=1326 audit(1791379231.992:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.1.567" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc6359e199 code=0x0 [ 131.856570][ T1094] bond2 (unregistering): Released all slaves [ 132.048443][ T5778] Bluetooth: hci3: command tx timeout [ 132.134071][ T1094] bond1 (unregistering): Released all slaves [ 132.749134][ T7357] netlink: 208052 bytes leftover after parsing attributes in process `syz.1.573'. [ 132.929193][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.938583][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.158830][ T1094] team0 (unregistering): Port device team_slave_1 removed [ 133.249097][ T1094] team0 (unregistering): Port device team_slave_0 removed [ 133.393736][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.513347][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.818609][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 134.011190][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 134.033087][ T8] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 134.041643][ T8] usb 4-1: config 179 has no interface number 0 [ 134.064538][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 134.082854][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 134.102811][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 134.122859][ T5778] Bluetooth: hci3: command tx timeout [ 134.132181][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 134.152882][ T8] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 134.166393][ T8] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 134.175596][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.196761][ T7365] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 134.346509][ T1094] bond0 (unregistering): Released all slaves [ 134.597765][ T7283] team0: Port device team_slave_0 added [ 134.623676][ T8] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input10 [ 134.649706][ T7283] team0: Port device team_slave_1 added [ 134.801151][ T7283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.813139][ T7283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.875328][ T7365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.900528][ T7365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.913133][ T7283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.948468][ T7283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.955990][ T7283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.984069][ T7283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.098755][ T7283] hsr_slave_0: entered promiscuous mode [ 135.137598][ T7283] hsr_slave_1: entered promiscuous mode [ 135.154999][ T7283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.162620][ T7283] Cannot create hsr debugfs directory [ 135.331905][ T8] usb 4-1: USB disconnect, device number 8 [ 135.331966][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 135.332016][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 135.379339][ T8] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 135.727401][ T7283] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 135.748371][ T7283] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 135.773258][ T7283] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 135.793864][ T7283] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 136.071361][ T7283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.161633][ T7283] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.192404][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.199631][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.209198][ T5778] Bluetooth: hci3: command tx timeout [ 136.234823][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.242009][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.411657][ T7283] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 136.444667][ T7283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.804293][ T7283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.896374][ T7387] loop3: detected capacity change from 0 to 32768 [ 136.930452][ T7417] loop1: detected capacity change from 0 to 64 [ 136.946761][ T7387] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 scanned by syz.3.578 (7387) [ 137.020807][ T7387] BTRFS info (device loop3): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 137.056180][ T7387] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 137.107507][ T7387] BTRFS info (device loop3): using free space tree [ 137.218835][ T7417] overlayfs: upper fs needs to support d_type. [ 137.284994][ T7387] BTRFS info (device loop3): enabling ssd optimizations [ 137.292050][ T7387] BTRFS info (device loop3): auto enabling async discard [ 137.338163][ T27] audit: type=1804 audit(1791379237.722:570): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.586" name="/newroot/124/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop1" ino=5 res=1 errno=0 [ 137.411325][ T7417] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 137.430999][ T7283] veth0_vlan: entered promiscuous mode [ 137.435730][ T7417] overlayfs: failed to set xattr on upper [ 137.468979][ T7417] overlayfs: ...falling back to redirect_dir=nofollow. [ 137.487218][ T7417] overlayfs: ...falling back to index=off. [ 137.498421][ T7283] veth1_vlan: entered promiscuous mode [ 137.515493][ T7417] overlayfs: ...falling back to uuid=null. [ 137.629420][ T7283] veth0_macvtap: entered promiscuous mode [ 137.670745][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.589'. [ 137.719724][ T7283] veth1_macvtap: entered promiscuous mode [ 137.740667][ T5770] Trying to free block not in datazone [ 137.749903][ T7283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.788487][ T5771] BTRFS info (device loop3): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 137.814349][ T7283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.828019][ T7283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.855437][ T7283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.872809][ T7283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.881771][ T7283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.131490][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.183069][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.265267][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.283131][ T5778] Bluetooth: hci3: command tx timeout [ 138.303751][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.903410][ T5776] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 139.114899][ T5776] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 139.137504][ T5776] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 139.163004][ T5776] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 139.192634][ T5776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.214928][ T5776] spcp8x5 2-1:1.0: SPCP8x5 converter detected [ 139.230814][ T5776] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 139.644627][ T7472] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 139.663605][ T7472] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 139.672026][ T7472] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 139.803469][ T7472] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 139.923570][ T7471] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 139.964821][ T5776] usb 2-1: USB disconnect, device number 7 [ 140.001062][ T5776] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 140.029579][ T5776] spcp8x5 2-1:1.0: device disconnected [ 140.228279][ T7538] loop4: detected capacity change from 0 to 128 [ 140.257153][ T7538] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 140.289026][ T7538] hpfs: filesystem error: improperly stopped [ 140.302853][ T7538] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 140.319772][ T7538] hpfs: You really don't want any checks? You are crazy... [ 140.337019][ T7538] hpfs: Code page index out of array [ 140.354635][ T7538] hpfs: code page support is disabled [ 140.367858][ T7538] hpfs: hpfs_map_4sectors(): unaligned read [ 140.384278][ T7538] hpfs: hpfs_map_4sectors(): unaligned read [ 140.406636][ T7538] hpfs: filesystem error: unable to find root dir [ 141.034422][ T7560] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 3 [ 141.146114][ T7566] netlink: 'syz.2.619': attribute type 30 has an invalid length. [ 141.227065][ T7566] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.236320][ T7566] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.245337][ T7566] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.254144][ T7566] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.456785][ T7566] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.465903][ T7566] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.475587][ T7566] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.484980][ T7566] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.138663][ T7571] loop4: detected capacity change from 0 to 32768 [ 142.168063][ T7571] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.622 (7571) [ 142.234988][ T7571] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 142.279283][ T7571] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 142.312911][ T7571] BTRFS info (device loop4): setting nodatasum [ 142.319153][ T7571] BTRFS info (device loop4): force zlib compression, level 3 [ 142.361335][ T7571] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 142.382933][ T7571] BTRFS info (device loop4): use lzo compression, level 0 [ 142.390302][ T7571] BTRFS info (device loop4): turning on flush-on-commit [ 142.406300][ T7571] BTRFS info (device loop4): enabling auto defrag [ 142.432611][ T7571] BTRFS info (device loop4): max_inline at 4096 [ 142.462824][ T7571] BTRFS info (device loop4): using free space tree [ 142.619157][ T7571] BTRFS info (device loop4): enabling ssd optimizations [ 142.796674][ T7623] loop1: detected capacity change from 0 to 128 [ 142.873055][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 142.912624][ T7623] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.944578][ T7623] ext4 filesystem being mounted at /134/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 143.080613][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 143.098544][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 143.122891][ T9] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 143.141752][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.189287][ T7283] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.212635][ T5770] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.462516][ T9] usb 4-1: USB disconnect, device number 9 [ 143.960559][ T7650] loop4: detected capacity change from 0 to 4096 [ 143.980332][ T7650] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 144.037722][ T7650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.344635][ T7283] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.403266][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'. [ 144.845944][ T27] audit: type=1804 audit(1791379245.232:571): pid=7683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.651" name="/newroot/17/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=181 res=1 errno=0 [ 145.473548][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.654'. [ 145.755130][ T7718] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 145.922856][ T5776] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 146.004057][ T7729] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.011906][ T7729] bridge0: port 1(bond1) entered blocking state [ 146.019755][ T7729] bridge0: port 1(bond1) entered disabled state [ 146.030267][ T7729] bond1: entered allmulticast mode [ 146.038182][ T7729] bond1: entered promiscuous mode [ 146.112997][ T5776] usb 4-1: Using ep0 maxpacket: 32 [ 146.129105][ T5776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.156853][ T5776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.187764][ T5776] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 146.199095][ T5776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.235971][ T5776] usb 4-1: config 0 descriptor?? [ 146.257416][ T5776] hub 4-1:0.0: USB hub found [ 146.462488][ T5776] hub 4-1:0.0: 1 port detected [ 146.672961][ T5776] hub 4-1:0.0: hub_hub_status failed (err = 0) [ 146.680007][ T5776] hub 4-1:0.0: config failed, can't get hub status (err -5) [ 146.938185][ T7762] syz.2.682 uses obsolete (PF_INET,SOCK_PACKET) [ 147.086555][ T5776] hid-generic 0003:046D:C31C.0002: item fetching failed at offset 0/1 [ 147.108782][ T5776] hid-generic: probe of 0003:046D:C31C.0002 failed with error -22 [ 147.208892][ T7775] jffs2: notice: (7775) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 147.383539][ T5760] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 147.443053][ T9] usb 4-1: USB disconnect, device number 10 [ 147.575045][ T5760] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 147.596566][ T5760] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 147.617833][ T5760] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.644168][ T5760] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 147.672751][ T5760] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 147.705329][ T5760] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.714541][ T5760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.722617][ T5760] usb 2-1: Product: syz [ 147.729389][ T5760] usb 2-1: Manufacturer: syz [ 147.734111][ T5760] usb 2-1: SerialNumber: syz [ 147.761657][ T7773] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 147.984567][ T7773] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 148.242948][ T23] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 148.447112][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.465106][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.477277][ T23] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 148.488020][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.499280][ T23] usb 4-1: config 0 descriptor?? [ 148.597787][ T7773] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 148.794197][ T7808] overlayfs: failed to clone upperpath [ 148.812575][ T5760] cdc_ncm 2-1:1.0: bind() failure [ 148.841037][ T5760] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 148.869257][ T5760] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 148.885531][ T5760] usbtest: probe of 2-1:1.1 failed with error -71 [ 148.898667][ T5760] usb 2-1: USB disconnect, device number 8 [ 148.936412][ T23] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 148.963063][ T23] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 148.975125][ T23] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 148.982280][ T23] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 148.991628][ T23] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 149.002197][ T23] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 149.009812][ T23] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 149.027622][ T23] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 149.131263][ T23] cp2112 0003:10C4:EA90.0003: Part Number: 0x00 Device Version: 0x00 [ 149.475515][ T7835] loop1: detected capacity change from 0 to 128 [ 149.512188][ T7835] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.537625][ T7835] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.734276][ T23] cp2112 0003:10C4:EA90.0003: error reading lock byte: -71 [ 149.759967][ T23] usb 4-1: USB disconnect, device number 11 [ 150.018295][ T5770] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.050787][ T7847] loop4: detected capacity change from 0 to 64 [ 150.366986][ T7856] jffs2: notice: (7856) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 150.635342][ T7866] netlink: 'syz.4.714': attribute type 20 has an invalid length. [ 150.648028][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.714'. [ 150.675835][ T7866] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.684844][ T7866] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.693725][ T7866] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.702462][ T7866] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.714468][ T7866] netlink: 'syz.4.714': attribute type 20 has an invalid length. [ 150.722892][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.714'. [ 150.821619][ T7873] loop4: detected capacity change from 0 to 128 [ 150.849444][ T7873] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 150.863849][ T7873] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.009323][ T7880] loop3: detected capacity change from 0 to 164 [ 151.168083][ T7283] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.301757][ T7880] loop3: detected capacity change from 0 to 256 [ 151.312969][ T7880] exFAT-fs (loop3): bogus fat length [ 151.323951][ T7880] exFAT-fs (loop3): failed to read boot sector [ 151.331957][ T7880] exFAT-fs (loop3): failed to recognize exfat type [ 151.530820][ T7887] loop1: detected capacity change from 0 to 64 [ 151.624444][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.723'. [ 151.754067][ T7893] jffs2: notice: (7893) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 151.772156][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.725'. [ 151.792842][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 151.955019][ T7898] overlayfs: refusing to follow metacopy origin for (/file1) [ 151.983330][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 151.995682][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.028594][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.028650][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 152.028675][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.031122][ T9] usb 5-1: config 0 descriptor?? [ 152.040319][ T9] hub 5-1:0.0: USB hub found [ 152.256067][ T9] hub 5-1:0.0: 1 port detected [ 152.457742][ T9] hub 5-1:0.0: hub_hub_status failed (err = 0) [ 152.465055][ T9] hub 5-1:0.0: config failed, can't get hub status (err -5) [ 152.646112][ T7918] loop1: detected capacity change from 0 to 256 [ 152.657928][ T7918] exfat: Deprecated parameter 'utf8' [ 152.664953][ T7918] exfat: Deprecated parameter 'utf8' [ 152.689694][ T7918] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 152.862146][ T9] hid-generic 0003:046D:C31C.0004: item fetching failed at offset 0/1 [ 152.875952][ T9] hid-generic: probe of 0003:046D:C31C.0004 failed with error -22 [ 153.190501][ T7933] jffs2: notice: (7933) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 153.213276][ T9] usb 5-1: USB disconnect, device number 2 [ 153.364786][ T7942] loop0: detected capacity change from 0 to 1 [ 153.422969][ T7942] ldm_validate_privheads(): Disk read failed. [ 153.429443][ T7942] loop0: [ 153.452929][ T7942] loop0: partition table partially beyond EOD, truncated [ 154.820281][ T8006] loop3: detected capacity change from 0 to 128 [ 154.871719][ T8006] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.906755][ T8006] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.458129][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.614291][ T8034] loop3: detected capacity change from 0 to 256 [ 155.636206][ T8034] exfat: Deprecated parameter 'utf8' [ 155.660223][ T8034] exfat: Deprecated parameter 'utf8' [ 155.751248][ T8034] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 156.015781][ T8043] jffs2: notice: (8043) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 156.332835][ T5141] ldm_validate_privheads(): Disk read failed. [ 156.362873][ T5141] loop0: [ 156.365913][ T5141] loop0: partition table partially beyond EOD, truncated [ 156.392864][ T5776] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 156.568228][ T8072] loop3: detected capacity change from 0 to 128 [ 156.594753][ T8072] FAT-fs (loop3): bogus number of reserved sectors [ 156.608570][ T5776] usb 2-1: config 0 has no interfaces? [ 156.620282][ T5776] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 156.641501][ T8072] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 156.653709][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.660144][ T8072] FAT-fs (loop3): Can't find a valid FAT filesystem [ 156.661732][ T5776] usb 2-1: Product: syz [ 156.672969][ T5776] usb 2-1: Manufacturer: syz [ 156.677676][ T5776] usb 2-1: SerialNumber: syz [ 156.714842][ T5776] usb 2-1: config 0 descriptor?? [ 157.068636][ T23] usb 2-1: USB disconnect, device number 9 [ 157.224116][ T8075] loop4: detected capacity change from 0 to 40427 [ 157.232592][ T8075] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 157.253412][ T8075] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 157.265374][ T8075] F2FS-fs (loop4): invalid crc value [ 157.361909][ T8075] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 157.369183][ T8075] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 157.462374][ T7283] syz-executor: attempt to access beyond end of device [ 157.462374][ T7283] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 157.487310][ T7283] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 157.798667][ T8110] jffs2: notice: (8110) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 158.091082][ T8124] loop3: detected capacity change from 0 to 512 [ 158.194231][ T8124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.214253][ T8124] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.321184][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.514280][ T8142] loop3: detected capacity change from 0 to 256 [ 158.554123][ T27] audit: type=1804 audit(1791379258.942:572): pid=8142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.775" name="/newroot/178/file0/bus" dev="loop3" ino=1048634 res=1 errno=0 [ 159.070466][ T8158] tipc: Started in network mode [ 159.084675][ T8158] tipc: Node identity ac1414aa, cluster identity 4711 [ 159.105347][ T8158] tipc: New replicast peer: 172.20.20.187 [ 159.126134][ T8158] tipc: Enabled bearer , priority 10 [ 159.160180][ T23] libceph: connect (1)[c::]:6789 error -101 [ 159.186030][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 159.229572][ T8160] ceph: No mds server is up or the cluster is laggy [ 159.825567][ T8185] loop4: detected capacity change from 0 to 2048 [ 159.868997][ T8185] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 159.890235][ T8185] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 159.952774][ T8185] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.236251][ T5834] tipc: Node number set to 2886997162 [ 160.267991][ T8203] loop4: detected capacity change from 0 to 256 [ 160.369796][ T27] audit: type=1804 audit(1791379260.762:573): pid=8203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.800" name="/newroot/55/file0/bus" dev="loop4" ino=1048635 res=1 errno=0 [ 160.472953][ T5776] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 160.654784][ T5776] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 160.667056][ T5776] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 160.678322][ T5776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.912004][ T5776] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 160.938728][ T5776] wwan wwan0: port wwan0qmi0 attached [ 161.170163][ C0] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 161.177205][ C0] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 161.186480][ C0] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 161.193312][ C0] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 161.199733][ C0] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 161.206451][ C0] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 161.219846][ C0] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 161.226592][ C0] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 161.232872][ C0] qmi_wwan 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 161.253907][ T5776] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, 7a:29:5d:30:17:01 [ 161.268693][ T5776] usb 4-1: USB disconnect, device number 12 [ 161.276712][ T5776] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 161.455860][ T5776] wwan wwan0: port wwan0qmi0 disconnected [ 161.480191][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.808'. [ 161.677104][ T8226] loop1: detected capacity change from 0 to 512 [ 161.740288][ T8230] binder: 8223:8230 ioctl c0306201 200000000480 returned -14 [ 161.787888][ T8226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.824381][ T8226] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.855847][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.035356][ T8243] netlink: 'syz.1.818': attribute type 30 has an invalid length. [ 162.047224][ T8243] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.056599][ T8243] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.065858][ T8243] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.075050][ T8243] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.088645][ T8243] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.097715][ T8243] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.106834][ T8243] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.115923][ T8243] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.461562][ T27] audit: type=1326 audit(1791379262.852:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.1.823" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6359e199 code=0x7ffc0000 [ 162.493832][ T27] audit: type=1326 audit(1791379262.852:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.1.823" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6359e199 code=0x7ffc0000 [ 162.535481][ T27] audit: type=1326 audit(1791379262.882:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.1.823" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbc6359e199 code=0x7ffc0000 [ 162.592467][ T27] audit: type=1326 audit(1791379262.882:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.1.823" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6359e199 code=0x7ffc0000 [ 162.650148][ T27] audit: type=1326 audit(1791379262.882:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.1.823" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6359e199 code=0x7ffc0000 [ 162.685262][ T27] audit: type=1326 audit(1791379262.882:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.1.823" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fbc6359e199 code=0x7ffc0000 [ 162.740449][ T27] audit: type=1326 audit(1791379262.922:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.1.823" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6359e199 code=0x7ffc0000 [ 162.789953][ T27] audit: type=1326 audit(1791379262.922:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.1.823" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6359e199 code=0x7ffc0000 [ 163.192151][ T8283] binder: 8278:8283 ioctl c0306201 200000000480 returned -14 [ 164.011868][ T8298] tipc: Started in network mode [ 164.016955][ T8298] tipc: Node identity ac1414aa, cluster identity 4711 [ 164.028551][ T8298] tipc: New replicast peer: 172.20.20.187 [ 164.035902][ T8298] tipc: Enabled bearer , priority 10 [ 164.329663][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.849'. [ 164.798332][ T8329] page:ffffea0001470000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x51c00 [ 164.810530][ T8329] head:ffffea0001470000 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 164.820880][ T8329] memcg:ffff888060094001 [ 164.825510][ T8329] ksm flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 164.834107][ T8329] page_type: 0xffffffff() [ 164.838490][ T8329] raw: 00fff00000000840 ffff888140073b40 ffffea00017c9600 0000000000000003 [ 164.849062][ T8329] raw: 0000000000000000 0000000080150015 00000001ffffffff ffff888060094001 [ 164.857965][ T8329] page dumped because: unmovable page [ 164.863476][ T8329] page_owner tracks the page as allocated [ 164.869703][ T8329] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 7283, tgid 7283 (syz-executor), ts 137597584411, free_ts 120312446586 [ 164.896662][ T8329] post_alloc_hook+0x1c1/0x200 [ 164.901472][ T8329] get_page_from_freelist+0x2181/0x22a0 [ 164.907361][ T8329] __alloc_pages+0x1f0/0x460 [ 164.911974][ T8329] alloc_slab_page+0x5d/0x180 [ 164.917088][ T8329] new_slab+0x87/0x2d0 [ 164.921589][ T8329] ___slab_alloc+0xc5c/0x12f0 [ 164.930140][ T8329] kmem_cache_alloc_lru+0xfc/0x2b0 [ 164.935357][ T8329] sock_alloc_inode+0x28/0xc0 [ 164.940092][ T8329] new_inode_pseudo+0x63/0x1d0 [ 164.946824][ T8329] __sock_create+0x12d/0x940 [ 164.951434][ T8329] __sys_socket+0xd7/0x1b0 [ 164.955956][ T8329] __x64_sys_socket+0x7a/0x90 [ 164.960661][ T8329] do_syscall_64+0x55/0xb0 [ 164.965449][ T8329] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.971357][ T8329] page last free stack trace: [ 164.976110][ T8329] free_unref_page_prepare+0x7d7/0x8f0 [ 164.981592][ T8329] free_unref_page_list+0xbe/0x860 [ 164.986772][ T8329] release_pages+0x208a/0x2300 [ 164.991558][ T8329] __folio_batch_release+0x71/0xe0 [ 164.996767][ T8329] shmem_undo_range+0x5ff/0x1a80 [ 165.001748][ T8329] shmem_evict_inode+0x285/0xa70 [ 165.006827][ T8329] evict+0x4b7/0x8a0 [ 165.010749][ T8329] __dentry_kill+0x412/0x630 [ 165.015415][ T8329] dentry_kill+0xb8/0x290 [ 165.019785][ T8329] dput+0xfe/0x1e0 [ 165.032724][ T8329] __fput+0x5b2/0x940 [ 165.036809][ T8329] task_work_run+0x1d4/0x260 [ 165.042820][ T790] tipc: Node number set to 2886997162 [ 165.050959][ T8329] do_exit+0x986/0x2530 [ 165.055471][ T8329] do_group_exit+0x22d/0x2f0 [ 165.060107][ T8329] get_signal+0x12a6/0x1390 [ 165.064704][ T8329] arch_do_signal_or_restart+0xc2/0x7b0 [ 165.439569][ T8337] loop4: detected capacity change from 0 to 512 [ 165.471360][ T8337] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.855750][ T8357] ip_tables: iptables: counters copy to user failed while replacing table [ 165.877033][ T8359] FAULT_INJECTION: forcing a failure. [ 165.877033][ T8359] name failslab, interval 1, probability 0, space 0, times 0 [ 165.891416][ T8359] CPU: 1 PID: 8359 Comm: syz.3.865 Not tainted syzkaller #0 [ 165.898749][ T8359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 165.908842][ T8359] Call Trace: [ 165.912149][ T8359] [ 165.915101][ T8359] dump_stack_lvl+0x18c/0x250 [ 165.919824][ T8359] ? show_regs_print_info+0x20/0x20 [ 165.925073][ T8359] ? load_image+0x420/0x420 [ 165.929599][ T8359] ? __might_sleep+0xe0/0xe0 [ 165.934207][ T8359] ? __lock_acquire+0x7eb0/0x7eb0 [ 165.939255][ T8359] should_fail_ex+0x394/0x4c0 [ 165.943963][ T8359] should_failslab+0x9/0x20 [ 165.948501][ T8359] slab_pre_alloc_hook+0x59/0x300 [ 165.953565][ T8359] ? __request_module+0x2ed/0x600 [ 165.958620][ T8359] ? __request_module+0x2ed/0x600 [ 165.963670][ T8359] __kmem_cache_alloc_node+0x53/0x250 [ 165.969086][ T8359] ? __request_module+0x2ed/0x600 [ 165.974141][ T8359] __kmalloc_node_track_caller+0xa4/0x230 [ 165.979888][ T8359] kstrdup+0x3b/0x80 [ 165.983815][ T8359] __request_module+0x2ed/0x600 [ 165.988676][ T8359] ? module_enforce_rwx_sections+0x150/0x150 [ 165.994674][ T8359] ? bpf_lsm_capable+0x9/0x10 [ 165.999383][ T8359] ? security_capable+0x89/0xb0 [ 166.004235][ T8359] ? dev_load+0x21/0x1f0 [ 166.008479][ T8359] dev_load+0x18b/0x1f0 [ 166.012632][ T8359] devinet_ioctl+0x127/0x1d70 [ 166.017338][ T8359] ? __might_fault+0xc6/0x120 [ 166.022033][ T8359] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 166.027167][ T8359] ? _copy_from_user+0xa5/0xe0 [ 166.031954][ T8359] ? get_user_ifreq+0x12b/0x180 [ 166.036818][ T8359] inet_ioctl+0x42b/0x560 [ 166.041160][ T8359] ? tomoyo_path_number_perm+0x217/0x5e0 [ 166.046791][ T8359] ? inet_shutdown+0x370/0x370 [ 166.051636][ T8359] ? slab_free_freelist_hook+0x130/0x1a0 [ 166.057268][ T8359] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 166.062919][ T8359] ? __kmem_cache_free+0xba/0x1f0 [ 166.067948][ T8359] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 166.073423][ T8359] ? packet_ioctl+0x26b/0x350 [ 166.078128][ T8359] sock_do_ioctl+0xfc/0x310 [ 166.082658][ T8359] ? sock_show_fdinfo+0xb0/0xb0 [ 166.087536][ T8359] sock_ioctl+0x5be/0x7e0 [ 166.091867][ T8359] ? sock_poll+0x3e0/0x3e0 [ 166.096303][ T8359] ? bpf_lsm_file_ioctl+0x9/0x10 [ 166.101292][ T8359] ? security_file_ioctl+0x80/0xa0 [ 166.106414][ T8359] ? sock_poll+0x3e0/0x3e0 [ 166.110869][ T8359] __se_sys_ioctl+0xfd/0x170 [ 166.115498][ T8359] do_syscall_64+0x55/0xb0 [ 166.119946][ T8359] ? clear_bhb_loop+0x40/0x90 [ 166.124644][ T8359] ? clear_bhb_loop+0x40/0x90 [ 166.129348][ T8359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.135305][ T8359] RIP: 0033:0x7fe20a59e199 [ 166.139755][ T8359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.159394][ T8359] RSP: 002b:00007fe20b4fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.167841][ T8359] RAX: ffffffffffffffda RBX: 00007fe20a825fa0 RCX: 00007fe20a59e199 [ 166.175844][ T8359] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000003 [ 166.183844][ T8359] RBP: 00007fe20a6358e0 R08: 0000000000000000 R09: 0000000000000000 [ 166.191851][ T8359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.199858][ T8359] R13: 00007fe20a826038 R14: 00007fe20a825fa0 R15: 00007fff810b3f28 [ 166.207881][ T8359] [ 166.487553][ T8373] loop3: detected capacity change from 0 to 2048 [ 166.534765][ T8373] loop3: p2 p4 [ 166.534765][ T8373] p4: [ 166.553781][ T8373] loop3: p2 size 851968 extends beyond EOD, truncated [ 166.566743][ T8373] loop3: p4 size 722688 extends beyond EOD, truncated [ 167.099482][ T8387] loop4: detected capacity change from 0 to 512 [ 167.157952][ T8387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.182833][ T8389] netlink: 36 bytes leftover after parsing attributes in process `syz.2.877'. [ 167.213599][ T8387] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.262996][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.877'. [ 167.435731][ T7283] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.004362][ T8384] loop1: detected capacity change from 0 to 32768 [ 168.043403][ T8384] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.872 (8384) [ 168.147219][ T8384] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 168.212939][ T8384] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 168.232824][ T8384] BTRFS info (device loop1): using free space tree [ 168.698192][ T8384] BTRFS info (device loop1): enabling ssd optimizations [ 168.732778][ T8384] BTRFS info (device loop1): auto enabling async discard [ 168.819061][ T8433] loop4: detected capacity change from 0 to 128 [ 168.875966][ T8433] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.918052][ T8433] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.436166][ T8438] netlink: 36 bytes leftover after parsing attributes in process `syz.3.887'. [ 169.459109][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.887'. [ 169.470099][ T7283] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.519281][ T5770] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 170.058019][ T8450] loop1: detected capacity change from 0 to 1024 [ 170.075052][ T8450] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 170.125949][ T8450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.306411][ T8463] FAULT_INJECTION: forcing a failure. [ 170.306411][ T8463] name failslab, interval 1, probability 0, space 0, times 0 [ 170.328473][ T8463] CPU: 0 PID: 8463 Comm: syz.4.899 Not tainted syzkaller #0 [ 170.335819][ T8463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 170.345904][ T8463] Call Trace: [ 170.349190][ T8463] [ 170.349201][ T8463] dump_stack_lvl+0x18c/0x250 [ 170.357033][ T8463] ? show_regs_print_info+0x20/0x20 [ 170.362268][ T8463] ? load_image+0x420/0x420 [ 170.366814][ T8463] ? __might_sleep+0xe0/0xe0 [ 170.371436][ T8463] ? __lock_acquire+0x7eb0/0x7eb0 [ 170.376476][ T8463] should_fail_ex+0x394/0x4c0 [ 170.376514][ T8463] should_failslab+0x9/0x20 [ 170.381466][ T8463] slab_pre_alloc_hook+0x59/0x300 [ 170.381504][ T8463] ? __register_sysctl_table+0x71/0x1210 [ 170.396679][ T8463] ? __register_sysctl_table+0x71/0x1210 [ 170.402349][ T8463] __kmem_cache_alloc_node+0x53/0x250 [ 170.407766][ T8463] ? __register_sysctl_table+0x71/0x1210 [ 170.413429][ T8463] __kmalloc+0xa7/0x240 [ 170.417604][ T8463] __register_sysctl_table+0x71/0x1210 [ 170.423072][ T8463] ? kmemdup+0x55/0x70 [ 170.423100][ T8463] ? __asan_memcpy+0x40/0x70 [ 170.423128][ T8463] setup_ipc_sysctls+0x247/0x2e0 [ 170.423153][ T8463] copy_ipcs+0x333/0x500 [ 170.423182][ T8463] create_new_namespaces+0x212/0x700 [ 170.423217][ T8463] unshare_nsproxy_namespaces+0x11a/0x160 [ 170.423244][ T8463] ksys_unshare+0x4fa/0x8f0 [ 170.423277][ T8463] ? sighand_ctor+0x50/0x50 [ 170.432167][ T8463] ? lock_chain_count+0x20/0x20 [ 170.441303][ T8463] ? syscall_enter_from_user_mode+0x25/0x80 [ 170.441335][ T8463] __x64_sys_unshare+0x38/0x40 [ 170.452628][ T8463] do_syscall_64+0x55/0xb0 [ 170.461620][ T8463] ? clear_bhb_loop+0x40/0x90 [ 170.472443][ T8463] ? clear_bhb_loop+0x40/0x90 [ 170.481594][ T8463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.490921][ T8463] RIP: 0033:0x7f481119e199 [ 170.490943][ T8463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.501202][ T8463] RSP: 002b:00007f480f3f6028 EFLAGS: 00000246 [ 170.526982][ T8463] ORIG_RAX: 0000000000000110 [ 170.531654][ T8463] RAX: ffffffffffffffda RBX: 00007f4811425fa0 RCX: 00007f481119e199 [ 170.539632][ T8463] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008040480 [ 170.547604][ T8463] RBP: 00007f48112358e0 R08: 0000000000000000 R09: 0000000000000000 [ 170.555575][ T8463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.563544][ T8463] R13: 00007f4811426038 R14: 00007f4811425fa0 R15: 00007ffda373d168 [ 170.571530][ T8463] [ 170.639464][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.078518][ T8482] pim6reg: entered allmulticast mode [ 171.178149][ T8482] team0: entered allmulticast mode [ 171.203176][ T8482] team_slave_0: entered allmulticast mode [ 171.222749][ T8482] team_slave_1: entered allmulticast mode [ 171.249959][ T8482] pim6reg: left allmulticast mode [ 171.408477][ T8481] team0: left allmulticast mode [ 171.423301][ T8481] team_slave_0: left allmulticast mode [ 171.451627][ T8481] team_slave_1: left allmulticast mode [ 171.925087][ T8505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.917'. [ 172.145208][ T8486] loop1: detected capacity change from 0 to 131072 [ 172.155774][ T8486] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (512, 24) [ 172.163704][ T8486] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 172.163769][ T8486] F2FS-fs (loop1): Test dummy encryption mode enabled [ 172.186110][ T8486] F2FS-fs (loop1): invalid crc value [ 172.216797][ T8486] F2FS-fs (loop1): Found nat_bits in checkpoint [ 172.257544][ T8486] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 172.278439][ T8486] F2FS-fs (loop1): Start checkpoint disabled! [ 172.305061][ T8486] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 172.312192][ T8486] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 172.600488][ T3477] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 172.683231][ C0] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 172.687515][ T8524] ip_tables: iptables: counters copy to user failed while replacing table [ 173.062801][ T5776] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 173.265007][ T5776] usb 5-1: config 4 has an invalid interface number: 44 but max is 0 [ 173.273450][ T5776] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 173.313041][ T5776] usb 5-1: config 4 has no interface number 0 [ 173.319210][ T5776] usb 5-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 173.355064][ T5776] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 173.369309][ T5776] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.387652][ T5776] usb 5-1: Product: syz [ 173.391870][ T5776] usb 5-1: Manufacturer: syz [ 173.405299][ T5776] usb 5-1: SerialNumber: syz [ 173.853448][ T5776] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 173.863062][ T8563] loop3: detected capacity change from 0 to 128 [ 173.874937][ T5776] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 173.886521][ T5776] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 173.907163][ T5776] usb 5-1: media controller created [ 173.915978][ T8563] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 173.938058][ T5776] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 173.948503][ T8563] hpfs: filesystem error: improperly stopped [ 173.985128][ T8563] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 174.015425][ T8563] hpfs: You really don't want any checks? You are crazy... [ 174.059989][ T8563] hpfs: Code page index out of array [ 174.066631][ T8563] hpfs: code page support is disabled [ 174.072153][ T8563] hpfs: hpfs_map_4sectors(): unaligned read [ 174.095125][ T8563] hpfs: hpfs_map_4sectors(): unaligned read [ 174.101343][ T8563] hpfs: filesystem error: unable to find root dir [ 174.108415][ T5776] DVB: Unable to find symbol dib7000p_attach() [ 174.116264][ T5776] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 174.223760][ T5776] rc_core: IR keymap rc-dib0700-rc5 not found [ 174.236395][ T5776] Registered IR keymap rc-empty [ 174.242525][ T5776] dvb-usb: could not initialize remote control. [ 174.249136][ T8574] loop3: detected capacity change from 0 to 256 [ 174.251444][ T5776] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 174.291726][ T5776] usb 5-1: USB disconnect, device number 3 [ 174.304964][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 174.304977][ T27] audit: type=1800 audit(1791379274.702:591): pid=8574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.941" name="file0" dev="loop3" ino=1048639 res=0 errno=0 [ 174.431948][ T5776] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 174.610062][ T8581] Bluetooth: hci0: invalid len left 7, exp >= 116 [ 175.451090][ T8605] loop3: detected capacity change from 0 to 256 [ 175.538530][ T8605] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xb2f9d067, utbl_chksum : 0xe619d30d) [ 175.762098][ T8616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.959'. [ 176.343638][ T8640] overlayfs: failed to clone upperpath [ 177.054249][ T8671] loop3: detected capacity change from 0 to 16 [ 177.082775][ C1] net_ratelimit: 7 callbacks suppressed [ 177.126244][ T8671] erofs: (device loop3): mounted with root inode @ nid 36. [ 177.527968][ T8687] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 177.710255][ T8691] netlink: 20 bytes leftover after parsing attributes in process `syz.4.991'. [ 177.936207][ T8704] all: renamed from bridge_slave_0 (while UP) [ 178.411686][ T8697] loop1: detected capacity change from 0 to 32768 [ 178.490229][ T8697] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 178.520441][ T8697] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 178.662276][ T8730] loop3: detected capacity change from 0 to 128 [ 178.718239][ T8730] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 178.735652][ T8730] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.838546][ T8697] XFS (loop1): Ending clean mount [ 178.840710][ T27] audit: type=1800 audit(1791379279.232:592): pid=8730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1004" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 178.895892][ T8697] XFS (loop1): Quotacheck needed: Please wait. [ 178.930506][ T5776] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 178.955240][ T5776] XFS (loop1): Unmount and run xfs_repair [ 178.967715][ T5776] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 178.980272][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 178.998010][ T5776] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 179.008087][ T5776] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 179.044696][ T5776] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 179.058748][ T5776] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 179.069208][ T5776] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 179.081787][ T5776] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 179.092271][ T5776] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 179.107304][ T5776] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 179.117113][ T3493] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 179.163720][ T8697] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 179.423521][ T5770] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 179.734414][ T8752] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1015'. [ 180.292799][ T5830] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 180.515482][ T5830] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 180.525683][ T5830] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.538875][ T5830] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 180.548179][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.769384][ T5830] usb 2-1: usb_control_msg returned -32 [ 180.775216][ T5830] usbtmc 2-1:16.0: can't read capabilities [ 181.411017][ T8795] loop3: detected capacity change from 0 to 256 [ 181.431328][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 181.539613][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 181.577912][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 181.629039][ T8800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1035'. [ 182.066892][ T8812] loop3: detected capacity change from 0 to 128 [ 182.078411][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 182.090783][ T8812] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 182.103983][ T8812] ext4 filesystem being mounted at /239/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 182.178144][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 182.208622][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 182.238626][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 182.442771][ C1] net_ratelimit: 9 callbacks suppressed [ 182.619166][ T8825] loop4: detected capacity change from 0 to 512 [ 182.645291][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 182.655489][ T8825] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 182.685018][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 182.703513][ T8825] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.1045: bg 0: block 104: invalid block bitmap [ 182.730060][ T8825] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 182.743765][ T8825] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1045: invalid indirect mapped block 1 (level 1) [ 182.760394][ T8825] EXT4-fs (loop4): 1 truncate cleaned up [ 182.769822][ T8825] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.799216][ T8825] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 182.849837][ T7283] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.896061][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 182.915923][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 183.049198][ T5760] usb 2-1: USB disconnect, device number 10 [ 183.371133][ T8841] loop4: detected capacity change from 0 to 1024 [ 183.396685][ T8841] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 183.432447][ T8841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.669249][ T7283] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.922118][ T8890] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1073'. [ 185.460255][ T8917] capability: warning: `syz.3.1087' uses deprecated v2 capabilities in a way that may be insecure [ 185.655291][ T8925] Bluetooth: hci0: invalid len left 7, exp >= 116 [ 186.032114][ T8937] loop4: detected capacity change from 0 to 256 [ 186.264040][ T8948] Bluetooth: hci0: invalid len left 7, exp >= 116 [ 186.436354][ T8954] loop1: detected capacity change from 0 to 512 [ 186.480322][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 186.491357][ T8954] EXT4-fs (loop1): orphan cleanup on readonly fs [ 186.531945][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 186.546202][ T8954] EXT4-fs error (device loop1): ext4_ext_check_inode:532: inode #4: comm syz.1.1104: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 186.637895][ T8954] EXT4-fs error (device loop1): ext4_quota_enable:7147: comm syz.1.1104: Bad quota inode: 4, type: 1 [ 186.688294][ T8954] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 186.743156][ T8954] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 186.755261][ T8954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 186.897730][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.948529][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 187.004158][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 187.112065][ T8970] loop4: detected capacity change from 0 to 1764 [ 187.140014][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 187.185693][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 187.200929][ T8970] loop4: detected capacity change from 0 to 256 [ 187.220349][ T8970] exfat: Unknown parameter 'iso9660' [ 187.228961][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 187.258929][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 187.299965][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 187.348120][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 187.582918][ T5834] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 187.642758][ C1] net_ratelimit: 4 callbacks suppressed [ 187.754585][ T8979] loop4: detected capacity change from 0 to 32768 [ 187.763224][ T5834] usb 4-1: Using ep0 maxpacket: 8 [ 187.778326][ T8979] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 187.790217][ T8979] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 187.806553][ T5834] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 187.816071][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 187.824682][ T5834] usb 4-1: Product: syz [ 187.829033][ T5834] usb 4-1: Manufacturer: syz [ 187.833995][ T5834] usb 4-1: SerialNumber: syz [ 187.842353][ T5834] usb 4-1: config 0 descriptor?? [ 187.856350][ T5834] gspca_main: sq905-2.14.0 probing 2770:9120 [ 187.870485][ T8979] XFS (loop4): Ending clean mount [ 187.882642][ T8979] XFS (loop4): Quotacheck needed: Please wait. [ 187.900214][ T5776] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 187.912013][ T5776] XFS (loop4): Unmount and run xfs_repair [ 187.918833][ T5776] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 187.926603][ T5776] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 187.935766][ T5776] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 187.944781][ T5776] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 187.953746][ T5776] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 187.963274][ T5776] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 187.972178][ T5776] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 187.981121][ T5776] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 187.990882][ T5776] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 187.999978][ T1094] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 188.033186][ T8979] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 188.208182][ T7283] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 188.793049][ T5776] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 188.887024][ T5834] gspca_sq905: bulk read fail (-22) len 0/4 [ 188.902836][ T5834] sq905: probe of 4-1:0.0 failed with error -5 [ 189.000114][ T5776] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 189.022832][ T5776] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 189.047116][ T5776] usb 2-1: config 4 has no interface number 0 [ 189.063008][ T5776] usb 2-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 189.090088][ T5776] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 189.102735][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.121084][ T5776] usb 2-1: Product: syz [ 189.131182][ T5776] usb 2-1: Manufacturer: syz [ 189.140202][ T5776] usb 2-1: SerialNumber: syz [ 189.151987][ T790] usb 4-1: USB disconnect, device number 13 [ 189.289533][ T9011] loop4: detected capacity change from 0 to 32768 [ 189.298833][ T9011] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1125 (9011) [ 189.319749][ T9011] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 189.330060][ T9011] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 189.340124][ T9011] BTRFS info (device loop4): using free space tree [ 189.378477][ T9011] BTRFS info (device loop4): enabling ssd optimizations [ 189.386159][ T9011] BTRFS info (device loop4): auto enabling async discard [ 189.580424][ T5776] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 189.591285][ T5776] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 189.600657][ T5776] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 189.607867][ T5776] usb 2-1: media controller created [ 189.620261][ T5776] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.676775][ T5776] DVB: Unable to find symbol dib7000p_attach() [ 189.684746][ T5776] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 189.775762][ T5776] rc_core: IR keymap rc-dib0700-rc5 not found [ 189.781899][ T5776] Registered IR keymap rc-empty [ 189.841177][ T5776] dvb-usb: could not initialize remote control. [ 189.849104][ T5776] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 189.873056][ T5776] usb 2-1: USB disconnect, device number 11 [ 189.924210][ T5776] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 189.987309][ T9049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1134'. [ 190.009400][ T7283] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 190.111347][ T9050] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1134'. [ 190.855828][ T9070] loop1: detected capacity change from 0 to 128 [ 190.914032][ T9070] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 190.950657][ T9070] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.593044][ T5770] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.650055][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 191.681125][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 191.730886][ T9101] loop1: detected capacity change from 0 to 256 [ 191.766149][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 191.781587][ T9101] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.822758][ T9101] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 191.864227][ T9101] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 191.890322][ T9101] exFAT-fs (loop1): failed to load alloc-bitmap [ 191.907178][ T9101] exFAT-fs (loop1): failed to recognize exfat type [ 191.984523][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 192.034719][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 192.652870][ T790] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 192.740725][ T9124] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1173'. [ 192.842798][ C1] net_ratelimit: 7 callbacks suppressed [ 192.855224][ T790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.872765][ T790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.897633][ T790] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 192.919186][ T790] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 192.939789][ T790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.956988][ T790] usb 4-1: config 0 descriptor?? [ 193.277932][ T9136] loop1: detected capacity change from 0 to 1764 [ 193.290585][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 193.328132][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 193.351013][ T9136] loop1: detected capacity change from 0 to 256 [ 193.356189][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 193.370603][ T9136] exfat: Unknown parameter 'iso9660' [ 193.375272][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 193.389519][ T790] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 193.408507][ T5874] udevd[5874]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 193.436588][ T790] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 193.733710][ T9143] loop1: detected capacity change from 0 to 164 [ 194.375022][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.381577][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.224802][ T9152] loop3: detected capacity change from 0 to 128 [ 195.241652][ T9150] Bluetooth: ISO socket layer initialized [ 195.262568][ T9152] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 195.319806][ T9152] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.350287][ T9156] team0: Device ipvlan1 failed to register rx_handler [ 195.471400][ T5830] usb 4-1: USB disconnect, device number 14 [ 195.520073][ T9163] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1180'. [ 195.681636][ T9167] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1183'. [ 195.810061][ T9167] nbd: socks must be embedded in a SOCK_ITEM attr [ 195.987427][ T9172] "syz.1.1185" (9172) uses obsolete ecb(arc4) skcipher [ 196.052174][ T9174] loop4: detected capacity change from 0 to 1024 [ 196.156416][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.207164][ T9176] loop1: detected capacity change from 0 to 128 [ 196.241641][ T9176] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 196.262348][ T9176] System zones: 1-3, 19-19, 35-36 [ 196.287353][ T9176] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.319061][ T9176] ext4 filesystem being mounted at /264/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 196.338744][ T9181] Set syz1 is full, maxelem 2 reached [ 196.350908][ T9176] EXT4-fs warning (device loop1): ext4_group_extend:1892: will only finish group (8193 blocks, 8129 new) [ 196.368302][ T9176] EXT4-fs warning (device loop1): ext4_group_extend:1897: can't read last block, resize aborted [ 196.412519][ T5770] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.443178][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 196.449319][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 196.515802][ T9185] loop4: detected capacity change from 0 to 2048 [ 196.534524][ T9185] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.633172][ T5776] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 196.727816][ T9192] FAULT_INJECTION: forcing a failure. [ 196.727816][ T9192] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 196.742925][ T9192] CPU: 1 PID: 9192 Comm: syz.1.1194 Not tainted syzkaller #0 [ 196.750354][ T9192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 196.760435][ T9192] Call Trace: [ 196.763725][ T9192] [ 196.766658][ T9192] dump_stack_lvl+0x18c/0x250 [ 196.771354][ T9192] ? show_regs_print_info+0x20/0x20 [ 196.776564][ T9192] ? load_image+0x420/0x420 [ 196.781073][ T9192] ? __lock_acquire+0x7eb0/0x7eb0 [ 196.786106][ T9192] should_fail_ex+0x394/0x4c0 [ 196.790796][ T9192] prepare_alloc_pages+0x1e1/0x5b0 [ 196.795917][ T9192] __alloc_pages+0x134/0x460 [ 196.800520][ T9192] ? zone_statistics+0x170/0x170 [ 196.805472][ T9192] ? alloc_pages+0x4e1/0x740 [ 196.810064][ T9192] ? lock_chain_count+0x20/0x20 [ 196.814919][ T9192] __get_free_pages+0xc/0x30 [ 196.819515][ T9192] __se_sys_mincore+0xe0/0x600 [ 196.824285][ T9192] ? syscall_enter_from_user_mode+0x25/0x80 [ 196.830206][ T9192] ? lockdep_hardirqs_on+0x98/0x150 [ 196.835438][ T9192] do_syscall_64+0x55/0xb0 [ 196.839862][ T9192] ? clear_bhb_loop+0x40/0x90 [ 196.844536][ T9192] ? clear_bhb_loop+0x40/0x90 [ 196.849212][ T9192] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.855111][ T9192] RIP: 0033:0x7fbc6359e199 [ 196.859539][ T9192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.879149][ T9192] RSP: 002b:00007fbc64420028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 196.887573][ T9192] RAX: ffffffffffffffda RBX: 00007fbc63825fa0 RCX: 00007fbc6359e199 [ 196.895567][ T9192] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ffa000 [ 196.903550][ T9192] RBP: 00007fbc636358e0 R08: 0000000000000000 R09: 0000000000000000 [ 196.911535][ T9192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.919498][ T9192] R13: 00007fbc63826038 R14: 00007fbc63825fa0 R15: 00007ffe87591378 [ 196.919532][ T9192] [ 196.954944][ T5776] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 196.972744][ T5776] usb 4-1: config 0 interface 0 has no altsetting 0 [ 196.982543][ T5776] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 196.991891][ T5776] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 197.003055][ T5776] usb 4-1: Product: syz [ 197.007402][ T5776] usb 4-1: Manufacturer: syz [ 197.017904][ T5776] usb 4-1: SerialNumber: syz [ 197.034627][ T5776] usb 4-1: config 0 descriptor?? [ 197.048359][ T5776] usb 4-1: selecting invalid altsetting 0 [ 197.273021][ T5776] usb 4-1: USB disconnect, device number 15 [ 197.529409][ T9203] loop4: detected capacity change from 0 to 512 [ 197.542235][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 197.543473][ T9203] EXT4-fs error (device loop4): ext4_iget_extra_inode:4752: inode #15: comm syz.4.1198: corrupted in-inode xattr: invalid ea_ino [ 197.574371][ T9203] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.1198: couldn't read orphan inode 15 (err -117) [ 197.597011][ T9203] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.649765][ T9206] FAULT_INJECTION: forcing a failure. [ 197.649765][ T9206] name failslab, interval 1, probability 0, space 0, times 0 [ 197.666893][ T9206] CPU: 1 PID: 9206 Comm: syz.1.1199 Not tainted syzkaller #0 [ 197.674314][ T9206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 197.674331][ T9206] Call Trace: [ 197.674339][ T9206] [ 197.674348][ T9206] dump_stack_lvl+0x18c/0x250 [ 197.674384][ T9206] ? show_regs_print_info+0x20/0x20 [ 197.674411][ T9206] ? load_image+0x420/0x420 [ 197.674438][ T9206] ? __might_sleep+0xe0/0xe0 [ 197.674462][ T9206] ? __lock_acquire+0x7eb0/0x7eb0 [ 197.674491][ T9206] should_fail_ex+0x394/0x4c0 [ 197.674522][ T9206] should_failslab+0x9/0x20 [ 197.674548][ T9206] slab_pre_alloc_hook+0x59/0x300 [ 197.674576][ T9206] ? aa_get_newest_label+0xfd/0x5c0 [ 197.674604][ T9206] ? sk_prot_alloc+0xe7/0x210 [ 197.674622][ T9206] ? sk_prot_alloc+0xe7/0x210 [ 197.684893][ T9206] __kmem_cache_alloc_node+0x53/0x250 [ 197.684940][ T9206] ? sk_prot_alloc+0xe7/0x210 [ 197.684959][ T9206] __kmalloc+0xa7/0x240 [ 197.684989][ T9206] sk_prot_alloc+0xe7/0x210 [ 197.691433][ T9206] ? sk_alloc+0x24/0x350 [ 197.691462][ T9206] sk_alloc+0x3a/0x350 [ 197.691484][ T9206] packet_create+0xff/0x790 [ 197.691514][ T9206] __sock_create+0x49e/0x940 [ 197.691546][ T9206] __sys_socket+0xd7/0x1b0 [ 197.691574][ T9206] __x64_sys_socket+0x7a/0x90 [ 197.701441][ T9206] do_syscall_64+0x55/0xb0 [ 197.710510][ T9206] ? clear_bhb_loop+0x40/0x90 [ 197.720174][ T9206] ? clear_bhb_loop+0x40/0x90 [ 197.720202][ T9206] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.729955][ T9206] RIP: 0033:0x7fbc6359e199 [ 197.739803][ T9206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.749824][ T9206] RSP: 002b:00007fbc64420028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 197.749849][ T9206] RAX: ffffffffffffffda RBX: 00007fbc63825fa0 RCX: 00007fbc6359e199 [ 197.749865][ T9206] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000011 [ 197.758655][ T9206] RBP: 00007fbc636358e0 R08: 0000000000000000 R09: 0000000000000000 [ 197.758672][ T9206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.758683][ T9206] R13: 00007fbc63826038 R14: 00007fbc63825fa0 R15: 00007ffe87591378 [ 197.758712][ T9206] [ 197.967664][ T7283] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.000544][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 198.027502][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 198.042809][ C1] net_ratelimit: 2 callbacks suppressed [ 198.307175][ T9221] device-mapper: table: 248:1: loop0 too small for target: start=0, len=2048, dev_size=1 [ 198.340370][ T9221] device-mapper: core: Cannot calculate initial queue limits [ 198.366203][ T9221] device-mapper: ioctl: unable to set up device queue for new table. [ 198.877307][ T9240] loop3: detected capacity change from 0 to 128 [ 198.900669][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 198.919884][ T9240] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.936230][ T9240] ext4 filesystem being mounted at /274/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 199.010849][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.075716][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 199.106645][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 200.232813][ T5776] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 200.262819][ T5834] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 200.416764][ T5776] usb 4-1: not running at top speed; connect to a high speed hub [ 200.426319][ T5776] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.440724][ T5776] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 200.451500][ T5834] usb 2-1: Using ep0 maxpacket: 8 [ 200.458875][ T5776] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 200.467634][ T5776] usb 4-1: Product: syz [ 200.471881][ T5776] usb 4-1: Manufacturer: syz [ 200.479518][ T5834] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 200.489769][ T5834] usb 2-1: config 0 has no interface number 0 [ 200.498926][ T5834] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.516266][ T5776] usb 4-1: Found UVC 1.00 device syz (225a:e1d4) [ 200.522839][ T5834] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 200.531914][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.542583][ T5834] usb 2-1: config 0 descriptor?? [ 200.561457][ T5834] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 200.721775][ T5776] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 200.731986][ T5776] uvcvideo 4-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 200.740954][ T5776] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 200.778277][ T5776] usb 4-1: USB disconnect, device number 16 [ 200.796773][ T5834] usb 2-1: USB disconnect, device number 12 [ 201.283554][ T9227] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.684840][ T27] audit: type=1326 audit(1791379302.072:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.2.1227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdb79e199 code=0x7ffc0000 [ 201.772220][ T27] audit: type=1326 audit(1791379302.072:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.2.1227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdb79e199 code=0x7ffc0000 [ 201.831166][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1230'. [ 201.840584][ T27] audit: type=1326 audit(1791379302.112:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.2.1227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdb79e199 code=0x7ffc0000 [ 201.888380][ T27] audit: type=1326 audit(1791379302.112:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.2.1227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7fdb79e199 code=0x7ffc0000 [ 201.954246][ T27] audit: type=1326 audit(1791379302.112:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.2.1227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdb79e199 code=0x7ffc0000 [ 202.011909][ T27] audit: type=1326 audit(1791379302.112:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.2.1227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdb79e199 code=0x7ffc0000 [ 202.094701][ T27] audit: type=1326 audit(1791379302.112:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.2.1227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdb79e199 code=0x7ffc0000 [ 202.132264][ T27] audit: type=1326 audit(1791379302.112:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.2.1227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdb79e199 code=0x7ffc0000 [ 202.184672][ T9309] team0: Device ipvlan1 failed to register rx_handler [ 202.197097][ T27] audit: type=1326 audit(1791379302.112:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.2.1227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdb79e199 code=0x7ffc0000 [ 202.252018][ T27] audit: type=1326 audit(1791379302.112:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.2.1227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7fdb79e199 code=0x7ffc0000 [ 203.242878][ C1] net_ratelimit: 5 callbacks suppressed [ 203.478501][ T9360] FAULT_INJECTION: forcing a failure. [ 203.478501][ T9360] name failslab, interval 1, probability 0, space 0, times 0 [ 203.521821][ T9360] CPU: 1 PID: 9360 Comm: syz.1.1253 Not tainted syzkaller #0 [ 203.529255][ T9360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 203.539344][ T9360] Call Trace: [ 203.542629][ T9360] [ 203.545563][ T9360] dump_stack_lvl+0x18c/0x250 [ 203.550256][ T9360] ? show_regs_print_info+0x20/0x20 [ 203.555465][ T9360] ? load_image+0x420/0x420 [ 203.559976][ T9360] ? __might_sleep+0xe0/0xe0 [ 203.564569][ T9360] ? __lock_acquire+0x7eb0/0x7eb0 [ 203.569605][ T9360] should_fail_ex+0x394/0x4c0 [ 203.574300][ T9360] should_failslab+0x9/0x20 [ 203.578808][ T9360] slab_pre_alloc_hook+0x59/0x300 [ 203.583839][ T9360] ? lockdep_softirqs_off+0x440/0x440 [ 203.589215][ T9360] kmem_cache_alloc+0x5a/0x2c0 [ 203.594006][ T9360] ? security_inode_alloc+0x34/0x110 [ 203.599300][ T9360] security_inode_alloc+0x34/0x110 [ 203.604418][ T9360] inode_init_always+0x914/0xc90 [ 203.609361][ T9360] new_inode_pseudo+0x95/0x1d0 [ 203.614146][ T9360] __sock_create+0x12d/0x940 [ 203.618776][ T9360] __sys_socketpair+0x236/0x550 [ 203.623651][ T9360] __x64_sys_socketpair+0x9b/0xb0 [ 203.628682][ T9360] do_syscall_64+0x55/0xb0 [ 203.633109][ T9360] ? clear_bhb_loop+0x40/0x90 [ 203.637873][ T9360] ? clear_bhb_loop+0x40/0x90 [ 203.642559][ T9360] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.648461][ T9360] RIP: 0033:0x7fbc6359e199 [ 203.652914][ T9360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.672528][ T9360] RSP: 002b:00007fbc64420028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 203.681033][ T9360] RAX: ffffffffffffffda RBX: 00007fbc63825fa0 RCX: 00007fbc6359e199 [ 203.689005][ T9360] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 203.696973][ T9360] RBP: 00007fbc636358e0 R08: 0000000000000000 R09: 0000000000000000 [ 203.704943][ T9360] R10: 0000200000010280 R11: 0000000000000246 R12: 0000000000000000 [ 203.712914][ T9360] R13: 00007fbc63826038 R14: 00007fbc63825fa0 R15: 00007ffe87591378 [ 203.720907][ T9360] [ 203.762955][ T9360] socket: no more sockets [ 204.283361][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 204.351624][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1260'. [ 205.048529][ T9384] loop4: detected capacity change from 0 to 32768 [ 205.076164][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 205.079292][ T9384] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1258 (9384) [ 205.158892][ T9384] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 205.202938][ T9384] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 205.211723][ T9384] BTRFS info (device loop4): setting nodatacow, compression disabled [ 205.261202][ T9384] BTRFS info (device loop4): enabling auto defrag [ 205.272901][ T9384] BTRFS info (device loop4): max_inline at 0 [ 205.278954][ T9384] BTRFS info (device loop4): using free space tree [ 205.388888][ T9384] BTRFS info (device loop4): auto enabling async discard [ 205.906624][ T9463] BTRFS info (device loop4): space_info DATA+METADATA (sub-group id 0) has 73728 free, is not full [ 205.918097][ T9463] BTRFS info (device loop4): space_info total=3276800, used=53248, pinned=0, reserved=16384, may_use=3133440, readonly=0 zone_unusable=0 [ 205.932746][ T9463] BTRFS info (device loop4): global_block_rsv: size 1441792 reserved 1441792 [ 205.942178][ T9463] BTRFS info (device loop4): trans_block_rsv: size 0 reserved 0 [ 205.949923][ T9463] BTRFS info (device loop4): chunk_block_rsv: size 0 reserved 0 [ 205.957672][ T9463] BTRFS info (device loop4): delayed_block_rsv: size 131072 reserved 131072 [ 205.967282][ T9463] BTRFS info (device loop4): delayed_refs_rsv: size 917504 reserved 610304 [ 206.358478][ T7283] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 206.377912][ T9479] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1275'. [ 206.450598][ T9479] nbd: socks must be embedded in a SOCK_ITEM attr [ 206.462128][ T5874] udevd[5874]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 206.504878][ T5773] udevd[5773]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 206.530396][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 206.535213][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 207.615793][ T9516] sch_tbf: burst 7 is lower than device bridge0 mtu (1514) ! [ 207.714464][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1290'. [ 207.725504][ T9522] sch_tbf: burst 0 is lower than device bridge0 mtu (1514) ! [ 208.195608][ T9546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1302'. [ 208.213201][ T9546] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1302'. [ 208.442726][ C0] net_ratelimit: 5 callbacks suppressed [ 210.402019][ T9618] ================================================================== [ 210.410153][ T9618] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc9/0x360 [ 210.417821][ T9618] Read of size 8 at addr ffff8880266fec18 by task syz.1.1329/9618 [ 210.425642][ T9618] [ 210.427979][ T9618] CPU: 0 PID: 9618 Comm: syz.1.1329 Not tainted syzkaller #0 [ 210.435370][ T9618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 210.445444][ T9618] Call Trace: [ 210.448746][ T9618] [ 210.451690][ T9618] dump_stack_lvl+0x18c/0x250 [ 210.456384][ T9618] ? read_lock_is_recursive+0x20/0x20 [ 210.461761][ T9618] ? show_regs_print_info+0x20/0x20 [ 210.461791][ T9618] ? load_image+0x420/0x420 [ 210.471483][ T9618] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 210.471516][ T9618] ? __virt_addr_valid+0x10c/0x380 [ 210.482062][ T9618] ? __virt_addr_valid+0x10c/0x380 [ 210.482097][ T9618] ? __virt_addr_valid+0x10c/0x380 [ 210.492312][ T9618] print_report+0xa8/0x210 [ 210.496743][ T9618] ? dvb_device_open+0xc9/0x360 [ 210.501599][ T9618] kasan_report+0x117/0x150 [ 210.501623][ T9618] ? chrdev_open+0x385/0x600 [ 210.501647][ T9618] ? dvb_device_open+0xc9/0x360 [ 210.511066][ T9618] dvb_device_open+0xc9/0x360 [ 210.511101][ T9618] chrdev_open+0x58c/0x600 [ 210.511126][ T9618] ? cd_forget+0x160/0x160 [ 210.520610][ T9618] ? fsnotify_perm+0x3ed/0x5e0 [ 210.529417][ T9618] do_dentry_open+0x880/0x14b0 [ 210.539000][ T9618] ? cd_forget+0x160/0x160 [ 210.543445][ T9618] path_openat+0x284f/0x3270 [ 210.548069][ T9618] ? do_sys_openat2+0xda/0x1d0 [ 210.552859][ T9618] ? __x64_sys_openat+0x139/0x160 [ 210.557945][ T9618] ? verify_lock_unused+0x140/0x140 [ 210.563191][ T9618] ? do_filp_open+0x430/0x430 [ 210.567898][ T9618] do_filp_open+0x1f2/0x430 [ 210.572437][ T9618] ? vfs_tmpfile+0x620/0x620 [ 210.577069][ T9618] ? _raw_spin_unlock+0x28/0x40 [ 210.581954][ T9618] ? alloc_fd+0x590/0x640 [ 210.586339][ T9618] do_sys_openat2+0x134/0x1d0 [ 210.591053][ T9618] ? do_sys_open+0xe0/0xe0 [ 210.595494][ T9618] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 210.601506][ T9618] ? lock_chain_count+0x20/0x20 [ 210.606372][ T9618] __x64_sys_openat+0x139/0x160 [ 210.611253][ T9618] do_syscall_64+0x55/0xb0 [ 210.615702][ T9618] ? clear_bhb_loop+0x40/0x90 [ 210.620403][ T9618] ? clear_bhb_loop+0x40/0x90 [ 210.625099][ T9618] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 210.631030][ T9618] RIP: 0033:0x7fbc6355e9ce [ 210.635484][ T9618] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 210.655113][ T9618] RSP: 002b:00007fbc6441fb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 210.663534][ T9618] RAX: ffffffffffffffda RBX: 00007fbc644206c0 RCX: 00007fbc6355e9ce [ 210.671503][ T9618] RDX: 0000000000000002 RSI: 00007fbc6441fc00 RDI: ffffffffffffff9c [ 210.679471][ T9618] RBP: 00007fbc6441fc00 R08: 0000000000000000 R09: 0000000000000000 [ 210.687437][ T9618] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 210.695436][ T9618] R13: 00007fbc63826038 R14: 00007fbc63825fa0 R15: 00007ffe87591378 [ 210.703412][ T9618] [ 210.706439][ T9618] [ 210.708753][ T9618] Allocated by task 1: [ 210.712812][ T9618] kasan_set_track+0x4e/0x70 [ 210.717423][ T9618] __kasan_kmalloc+0x8f/0xa0 [ 210.722044][ T9618] dvb_register_device+0x309/0x1df0 [ 210.727258][ T9618] dvb_register_frontend+0x62d/0x900 [ 210.732546][ T9618] vidtv_bridge_probe+0x9d6/0xf60 [ 210.737569][ T9618] platform_probe+0x13b/0x1c0 [ 210.742241][ T9618] really_probe+0x247/0xae0 [ 210.746740][ T9618] __driver_probe_device+0x1f5/0x390 [ 210.752018][ T9618] driver_probe_device+0x4f/0x420 [ 210.757040][ T9618] __driver_attach+0x444/0x6d0 [ 210.761795][ T9618] bus_for_each_dev+0x235/0x2b0 [ 210.766647][ T9618] bus_add_driver+0x340/0x630 [ 210.771321][ T9618] driver_register+0x23a/0x310 [ 210.776116][ T9618] vidtv_bridge_init+0x49/0x80 [ 210.780879][ T9618] do_one_initcall+0x242/0x790 [ 210.785638][ T9618] do_initcall_level+0x13d/0x1f0 [ 210.790571][ T9618] do_initcalls+0x69/0xd0 [ 210.794894][ T9618] kernel_init_freeable+0x3d9/0x560 [ 210.800087][ T9618] kernel_init+0x1d/0x1c0 [ 210.804412][ T9618] ret_from_fork+0x48/0x80 [ 210.808829][ T9618] ret_from_fork_asm+0x11/0x20 [ 210.813592][ T9618] [ 210.815907][ T9618] Freed by task 9590: [ 210.819875][ T9618] kasan_set_track+0x4e/0x70 [ 210.824464][ T9618] kasan_save_free_info+0x28/0x40 [ 210.829484][ T9618] ____kasan_slab_free+0x126/0x1f0 [ 210.834600][ T9618] slab_free_freelist_hook+0x130/0x1a0 [ 210.840049][ T9618] __kmem_cache_free+0xba/0x1f0 [ 210.844899][ T9618] dvb_device_open+0x2d9/0x360 [ 210.849661][ T9618] chrdev_open+0x58c/0x600 [ 210.854069][ T9618] do_dentry_open+0x880/0x14b0 [ 210.858846][ T9618] path_openat+0x284f/0x3270 [ 210.863426][ T9618] do_filp_open+0x1f2/0x430 [ 210.867928][ T9618] do_sys_openat2+0x134/0x1d0 [ 210.872603][ T9618] __x64_sys_openat+0x139/0x160 [ 210.877452][ T9618] do_syscall_64+0x55/0xb0 [ 210.881866][ T9618] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 210.887760][ T9618] [ 210.890074][ T9618] The buggy address belongs to the object at ffff8880266fec00 [ 210.890074][ T9618] which belongs to the cache kmalloc-256 of size 256 [ 210.904120][ T9618] The buggy address is located 24 bytes inside of [ 210.904120][ T9618] freed 256-byte region [ffff8880266fec00, ffff8880266fed00) [ 210.917838][ T9618] [ 210.920169][ T9618] The buggy address belongs to the physical page: [ 210.926570][ T9618] page:ffffea000099bf80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x266fe [ 210.936722][ T9618] head:ffffea000099bf80 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 210.945651][ T9618] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 210.953623][ T9618] page_type: 0xffffffff() [ 210.957946][ T9618] raw: 00fff00000000840 ffff888017c41b40 dead000000000122 0000000000000000 [ 210.966541][ T9618] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 210.975116][ T9618] page dumped because: kasan: bad access detected [ 210.981528][ T9618] page_owner tracks the page as allocated [ 210.987234][ T9618] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2, tgid 2 (kthreadd), ts 15922462113, free_ts 0 [ 211.006854][ T9618] post_alloc_hook+0x1c1/0x200 [ 211.011617][ T9618] get_page_from_freelist+0x2181/0x22a0 [ 211.017159][ T9618] __alloc_pages+0x1f0/0x460 [ 211.021745][ T9618] alloc_slab_page+0x5d/0x180 [ 211.026415][ T9618] new_slab+0x87/0x2d0 [ 211.030475][ T9618] ___slab_alloc+0xc5c/0x12f0 [ 211.035145][ T9618] __kmem_cache_alloc_node+0x11f/0x250 [ 211.040626][ T9618] kmalloc_trace+0x2a/0xe0 [ 211.045061][ T9618] set_kthread_struct+0xb7/0x1f0 [ 211.050004][ T9618] copy_process+0x10c9/0x3da0 [ 211.054684][ T9618] kernel_clone+0x24b/0x8a0 [ 211.059184][ T9618] kernel_thread+0x13f/0x1b0 [ 211.063789][ T9618] kthreadd+0x579/0x750 [ 211.067941][ T9618] ret_from_fork+0x48/0x80 [ 211.072360][ T9618] ret_from_fork_asm+0x11/0x20 [ 211.077123][ T9618] page_owner free stack trace missing [ 211.082478][ T9618] [ 211.084792][ T9618] Memory state around the buggy address: [ 211.090413][ T9618] ffff8880266feb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 211.098466][ T9618] ffff8880266feb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 211.106521][ T9618] >ffff8880266fec00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 211.114575][ T9618] ^ [ 211.119411][ T9618] ffff8880266fec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 211.127461][ T9618] ffff8880266fed00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 211.135511][ T9618] ================================================================== [ 211.285622][ T9620] sctp: sctp_recvmsg: sk:ffff88814cacf500, msghdr:ffffc9000d2ffd20, len:0, flags:0x406, addr_len:ffffc9000d2ff860) [ 211.285660][ T9618] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 211.285672][ T9618] CPU: 1 PID: 9618 Comm: syz.1.1329 Not tainted syzkaller #0 [ 211.285688][ T9618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 211.285697][ T9618] Call Trace: [ 211.285703][ T9618] [ 211.285710][ T9618] dump_stack_lvl+0x18c/0x250 [ 211.285744][ T9618] ? show_regs_print_info+0x20/0x20 [ 211.285771][ T9618] ? load_image+0x420/0x420 [ 211.285799][ T9618] panic+0x2ca/0x720 [ 211.285819][ T9618] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 211.285849][ T9618] ? bpf_jit_dump+0xd0/0xd0 [ 211.285873][ T9618] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 211.285897][ T9618] ? _raw_spin_unlock+0x40/0x40 [ 211.285920][ T9618] ? dvb_device_open+0xc9/0x360 [ 211.285947][ T9618] check_panic_on_warn+0x84/0xa0 [ 211.285971][ T9618] ? dvb_device_open+0xc9/0x360 [ 211.285995][ T9618] end_report+0x6f/0x130 [ 211.286018][ T9618] kasan_report+0x128/0x150 [ 211.286038][ T9618] ? chrdev_open+0x385/0x600 [ 211.286060][ T9618] ? dvb_device_open+0xc9/0x360 [ 211.286089][ T9618] dvb_device_open+0xc9/0x360 [ 211.286116][ T9618] chrdev_open+0x58c/0x600 [ 211.286138][ T9618] ? cd_forget+0x160/0x160 [ 211.286160][ T9618] ? fsnotify_perm+0x3ed/0x5e0 [ 211.286187][ T9618] do_dentry_open+0x880/0x14b0 [ 211.286212][ T9618] ? cd_forget+0x160/0x160 [ 211.286235][ T9618] path_openat+0x284f/0x3270 [ 211.286263][ T9618] ? do_sys_openat2+0xda/0x1d0 [ 211.286285][ T9618] ? __x64_sys_openat+0x139/0x160 [ 211.286310][ T9618] ? verify_lock_unused+0x140/0x140 [ 211.286332][ T9618] ? do_filp_open+0x430/0x430 [ 211.286359][ T9618] do_filp_open+0x1f2/0x430 [ 211.286387][ T9618] ? vfs_tmpfile+0x620/0x620 [ 211.286415][ T9618] ? _raw_spin_unlock+0x28/0x40 [ 211.286438][ T9618] ? alloc_fd+0x590/0x640 [ 211.286465][ T9618] do_sys_openat2+0x134/0x1d0 [ 211.286489][ T9618] ? do_sys_open+0xe0/0xe0 [ 211.286512][ T9618] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 211.286536][ T9618] ? lock_chain_count+0x20/0x20 [ 211.286558][ T9618] __x64_sys_openat+0x139/0x160 [ 211.286583][ T9618] do_syscall_64+0x55/0xb0 [ 211.286608][ T9618] ? clear_bhb_loop+0x40/0x90 [ 211.286625][ T9618] ? clear_bhb_loop+0x40/0x90 [ 211.286643][ T9618] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.286670][ T9618] RIP: 0033:0x7fbc6355e9ce [ 211.286687][ T9618] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 211.286703][ T9618] RSP: 002b:00007fbc6441fb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 211.286724][ T9618] RAX: ffffffffffffffda RBX: 00007fbc644206c0 RCX: 00007fbc6355e9ce [ 211.286740][ T9618] RDX: 0000000000000002 RSI: 00007fbc6441fc00 RDI: ffffffffffffff9c [ 211.286754][ T9618] RBP: 00007fbc6441fc00 R08: 0000000000000000 R09: 0000000000000000 [ 211.286767][ T9618] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 211.286780][ T9618] R13: 00007fbc63826038 R14: 00007fbc63825fa0 R15: 00007ffe87591378 [ 211.286800][ T9618] [ 211.297970][ T9618] Kernel Offset: disabled