last executing test programs: 1m31.91098891s ago: executing program 0 (id=64): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x7, 0xd, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read(r2, &(0x7f0000000200)=""/80, 0x50) read$FUSE(r2, 0x0, 0x0) 1m31.124838252s ago: executing program 0 (id=71): socket(0x2, 0x3, 0xff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0x12dc, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m30.968038639s ago: executing program 0 (id=74): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x100ca0b, &(0x7f0000001d40), 0x1, 0x616, &(0x7f00000004c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000f80)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000fc0)={@desc={0x1, 0x0, @desc4}}) fsync(r1) 1m29.80342708s ago: executing program 0 (id=80): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x4) mount(0x0, &(0x7f00000002c0)='./gadget\x00', &(0x7f0000000300)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x3bee3f9f87c5003e, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1m29.466945545s ago: executing program 0 (id=83): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m28.528286604s ago: executing program 0 (id=88): unshare(0x6020400) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 1m28.150746383s ago: executing program 32 (id=88): unshare(0x6020400) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 4.418915448s ago: executing program 1 (id=666): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000140)={0x15, 0x65, 0xffff, 0x800ffd, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000180)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x800f, 0x0, 0x7, 0x0, 0x0, 0x10, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x2004402, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client}, {@uname={'uname', 0x3d, ','}}, {@cache_loose}]}}) 4.310410279s ago: executing program 1 (id=667): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = dup2(r0, r0) fcntl$notify(r1, 0x402, 0x3f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x4, 0x8, 0x0, 0x8000, 0x3, 0x3e, 0xffffffeb, 0x78, 0x40, 0x2, 0x0, 0x6, 0x38, 0x1, 0xfffe, 0x3, 0x3}, [{0x3, 0xf, 0x8, 0x11, 0x0, 0xe5, 0x1, 0x3}]}, 0x78) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 4.192406752s ago: executing program 1 (id=668): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 4.029830409s ago: executing program 1 (id=669): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @loopback, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x80f, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x5, 0x5, 0x6, 0x5, 0xff, 0x1, 0xea, 0xfa, 0x2, 0x4, 0x81, 0x8, 0x40, 0x1c}, 0xe) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 3.698825843s ago: executing program 4 (id=671): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) syz_fuse_handle_req(r0, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x0, 0x0, 0x0, {0x800000000005, 0x0, 0x200005, 0x4, 0x0, 0x7, 0x9e9, 0x3ff, 0x3f, 0x2000, 0x5, 0xee00, 0xee01, 0x7, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00') 3.521379772s ago: executing program 4 (id=673): r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x20}, 0x6}], 0x1, 0x40002142, 0x0) 3.521231882s ago: executing program 2 (id=674): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/4097, 0x1001}], 0x1}, 0xb}], 0x4000000000000f1, 0x40000021, 0x0) 3.392352015s ago: executing program 4 (id=675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xfff3}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff2, 0x7}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 2.670102951s ago: executing program 1 (id=686): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x4) mount(0x0, &(0x7f00000002c0)='./gadget\x00', &(0x7f0000000300)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x3bee3f9f87c5003e, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2.643912843s ago: executing program 4 (id=678): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x143042, 0xb0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.643741363s ago: executing program 2 (id=679): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 2.509555748s ago: executing program 2 (id=682): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468a957ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2233f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) open(&(0x7f00000000c0)='./bus\x00', 0x6687e, 0x57) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) keyctl$search(0xa, 0x0, &(0x7f00000000c0)='logon\x00', 0x0, 0x0) 2.428816066s ago: executing program 1 (id=683): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000008c0)="b20cae", 0x3, 0x24000045, &(0x7f0000000500)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000600)='reno', 0x4) sendto$inet6(r0, &(0x7f0000000640)='.', 0x1, 0x801, 0x0, 0x0) 2.428671026s ago: executing program 3 (id=684): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21081e, &(0x7f0000000200)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f0000000680)="$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") sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.81335915s ago: executing program 2 (id=685): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42544, 0x1) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000006c00)={0x2020}, 0x2020) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 1.81186121s ago: executing program 4 (id=687): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x4000, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x5, 0x6576, 0x109}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000c40)='100', 0x3) mmap(&(0x7f00003e9000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) 1.798710592s ago: executing program 3 (id=689): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.591172004s ago: executing program 3 (id=690): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xfff3}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff2, 0x7}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1.587982534s ago: executing program 4 (id=697): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x8}], 0x40000, 0x0, 0x0) shutdown(r1, 0x0) 1.131426332s ago: executing program 3 (id=691): r0 = socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f00000008c0)='7', 0x1) keyctl$read(0xb, 0x0, 0x0, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x4e1e, @multicast2}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) 511.206326ms ago: executing program 2 (id=692): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x5) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000180)=0x79, 0x15) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000200)=0x4, 0x4) 320.355666ms ago: executing program 3 (id=693): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x4) mount(0x0, &(0x7f00000002c0)='./gadget\x00', &(0x7f0000000300)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x3bee3f9f87c5003e, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 268.997262ms ago: executing program 2 (id=694): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000008c0)="b20cae", 0x3, 0x24000045, &(0x7f0000000500)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000600)='reno', 0x4) sendto$inet6(r0, &(0x7f0000000640)='.', 0x1, 0x801, 0x0, 0x0) 0s ago: executing program 3 (id=695): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x100ca0b, &(0x7f0000001d40), 0x1, 0x616, &(0x7f00000004c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000f80)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000fc0)={@desc={0x1, 0x0, @desc4}}) fsync(r1) kernel console output (not intermixed with test programs): mber=0 [ 103.207674][ T27] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 103.251662][ T27] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 103.335314][ T27] imon 1-1:0.0: iMON device (15c2:0045, intf0) on usb<1:3> initialized [ 103.629239][ T27] usb 1-1: USB disconnect, device number 3 [ 103.646029][ T5873] rxe_eth0 speed is unknown, defaulting to 1000 [ 104.287830][ T1198] rtsx_usb: probe of 3-1:1.0 failed with error -71 [ 104.311498][ T1198] usb 3-1: USB disconnect, device number 2 [ 104.675507][ T8] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 104.885535][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.906498][ T8] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 104.932646][ T8] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 104.955199][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.398467][ T8] dvb_ttusb_budget: ttusb_init_controller: error [ 105.415394][ T8] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 105.555237][ T5861] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.617470][ T8] DVB: Unable to find symbol stv0299_attach() [ 105.632720][ T6084] FAULT_INJECTION: forcing a failure. [ 105.632720][ T6084] name failslab, interval 1, probability 0, space 0, times 0 [ 105.666213][ T6084] CPU: 0 PID: 6084 Comm: syz.2.58 Not tainted syzkaller #0 [ 105.673493][ T6084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 105.683596][ T6084] Call Trace: [ 105.686940][ T6084] [ 105.689914][ T6084] dump_stack_lvl+0x18c/0x250 [ 105.694667][ T6084] ? show_regs_print_info+0x20/0x20 [ 105.699929][ T6084] ? load_image+0x420/0x420 [ 105.704487][ T6084] ? __might_sleep+0xe0/0xe0 [ 105.709137][ T6084] ? __lock_acquire+0x7eb0/0x7eb0 [ 105.714225][ T6084] should_fail_ex+0x394/0x4c0 [ 105.718969][ T6084] should_failslab+0x9/0x20 [ 105.723521][ T6084] slab_pre_alloc_hook+0x59/0x300 [ 105.728594][ T6084] ? mpih_sqr_n+0x9d3/0xa10 [ 105.733163][ T6084] ? mpihelp_mul_karatsuba_case+0xf1/0xf90 [ 105.739027][ T6084] ? mpihelp_mul_karatsuba_case+0xf1/0xf90 [ 105.744883][ T6084] __kmem_cache_alloc_node+0x53/0x260 [ 105.750302][ T6084] ? mpihelp_mul_karatsuba_case+0xf1/0xf90 [ 105.756161][ T6084] __kmalloc+0xa7/0x240 [ 105.760363][ T6084] mpihelp_mul_karatsuba_case+0xf1/0xf90 [ 105.766053][ T6084] mpi_powm+0x19f2/0x2390 [ 105.770444][ T6084] ? mpihelp_release_karatsuba_ctx+0x160/0x160 [ 105.776644][ T6084] ? mpihelp_cmp+0xba/0xd0 [ 105.781103][ T6084] ? mpi_cmp+0x1b8/0x290 [ 105.785378][ T6084] rsa_enc+0x293/0x3d0 [ 105.789525][ T6084] ? crypto_dh_decode_key+0x170/0x170 [ 105.794929][ T6084] ? __virt_addr_valid+0x10c/0x380 [ 105.800075][ T6084] ? __virt_addr_valid+0x10c/0x380 [ 105.805229][ T6084] pkcs1pad_verify+0x406/0x5e0 [ 105.810037][ T6084] crypto_sig_verify+0x1bc/0x250 [ 105.815016][ T6084] ? crypto_sig_sign+0x240/0x240 [ 105.820013][ T6084] ? rsa_max_size+0x19/0x70 [ 105.824552][ T6084] ? pkcs1pad_set_pub_key+0x15d/0x1c0 [ 105.829969][ T6084] public_key_verify_signature+0x607/0x870 [ 105.835819][ T6084] ? public_key_free+0x80/0x80 [ 105.840620][ T6084] ? asymmetric_key_generate_id+0x60/0x150 [ 105.846452][ T6084] ? asymmetric_key_id_same+0x67/0xe0 [ 105.851859][ T6084] x509_check_for_self_signed+0x31b/0x430 [ 105.857616][ T6084] x509_cert_parse+0x5a0/0x7b0 [ 105.862413][ T6084] x509_key_preparse+0x64/0x6c0 [ 105.867288][ T6084] ? down_read+0x1ac/0x2e0 [ 105.871729][ T6084] asymmetric_key_preparse+0xa9/0x140 [ 105.877223][ T6084] __key_create_or_update+0x351/0xa60 [ 105.882619][ T6084] ? __lock_acquire+0x7eb0/0x7eb0 [ 105.887673][ T6084] ? key_create_or_update+0x60/0x60 [ 105.892897][ T6084] ? bpf_lsm_key_permission+0x9/0x10 [ 105.898224][ T6084] ? lookup_user_key+0xb66/0x1140 [ 105.903288][ T6084] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 105.909295][ T6084] ? keyring_search_rcu+0x280/0x280 [ 105.914519][ T6084] key_create_or_update+0x42/0x60 [ 105.919568][ T6084] __se_sys_add_key+0x34f/0x410 [ 105.924448][ T6084] ? __x64_sys_add_key+0xc0/0xc0 [ 105.929509][ T6084] ? lockdep_hardirqs_on+0x98/0x150 [ 105.934742][ T6084] ? __x64_sys_add_key+0x20/0xc0 [ 105.939713][ T6084] do_syscall_64+0x55/0xb0 [ 105.944156][ T6084] ? clear_bhb_loop+0x40/0x90 [ 105.948867][ T6084] ? clear_bhb_loop+0x40/0x90 [ 105.953596][ T6084] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.959519][ T6084] RIP: 0033:0x7f1eff19f559 [ 105.963959][ T6084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.983591][ T6084] RSP: 002b:00007f1f00089028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 105.992034][ T6084] RAX: ffffffffffffffda RBX: 00007f1eff425fa0 RCX: 00007f1eff19f559 [ 106.000035][ T6084] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 106.008032][ T6084] RBP: 00007f1eff236b20 R08: 000000003e2c8513 R09: 0000000000000000 [ 106.016029][ T6084] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 106.024032][ T6084] R13: 00007f1eff426038 R14: 00007f1eff425fa0 R15: 00007ffec77fdab8 [ 106.032049][ T6084] [ 106.121034][ T8] DVB: Unable to find symbol tda8083_attach() [ 106.139707][ T8] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 106.158054][ T5861] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.169834][ T5861] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.185459][ T5861] usb 2-1: config 0 interface 0 has no altsetting 0 [ 106.192130][ T5861] usb 2-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 106.201960][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.221169][ T5861] usb 2-1: config 0 descriptor?? [ 106.667539][ T5861] thrustmaster 0003:044F:B65A.0001: ignoring exceeding usage max [ 106.687055][ T5861] thrustmaster 0003:044F:B65A.0001: ignoring exceeding usage max [ 106.702711][ T5861] thrustmaster 0003:044F:B65A.0001: unbalanced collection at end of report description [ 106.736363][ T5861] thrustmaster 0003:044F:B65A.0001: parse failed [ 106.761236][ T5861] thrustmaster: probe of 0003:044F:B65A.0001 failed with error -22 [ 106.921880][ T5861] usb 2-1: USB disconnect, device number 2 [ 107.440361][ T9] usb 1-1: USB disconnect, device number 4 [ 108.483440][ T6127] loop0: detected capacity change from 0 to 1024 [ 108.551880][ T6127] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 108.600237][ T6127] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 108.616635][ T6127] EXT4-fs (loop0): orphan cleanup on readonly fs [ 108.634903][ T6127] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm syz.0.74: Invalid inode table block 0 in block_group 0 [ 108.664986][ T6127] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 108.704089][ T6127] EXT4-fs error (device loop0): ext4_quota_write:7338: inode #3: comm syz.0.74: mark_inode_dirty error [ 108.763392][ T6127] Quota error (device loop0): write_blk: dquota write failed [ 108.787778][ T6127] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 108.844479][ T6127] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.74: Failed to acquire dquot type 0 [ 108.860389][ T6127] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm syz.0.74: Invalid inode table block 0 in block_group 0 [ 108.890506][ T6127] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 108.914285][ T6127] EXT4-fs error (device loop0): ext4_ext_truncate:4535: inode #15: comm syz.0.74: mark_inode_dirty error [ 108.929059][ T6138] FAULT_INJECTION: forcing a failure. [ 108.929059][ T6138] name failslab, interval 1, probability 0, space 0, times 0 [ 108.943105][ T6138] CPU: 0 PID: 6138 Comm: syz.2.78 Not tainted syzkaller #0 [ 108.950366][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 108.960472][ T6138] Call Trace: [ 108.963797][ T6138] [ 108.966772][ T6138] dump_stack_lvl+0x18c/0x250 [ 108.971512][ T6138] ? show_regs_print_info+0x20/0x20 [ 108.976771][ T6138] ? load_image+0x420/0x420 [ 108.981329][ T6138] ? __might_sleep+0xe0/0xe0 [ 108.985970][ T6138] ? __lock_acquire+0x7eb0/0x7eb0 [ 108.991044][ T6138] should_fail_ex+0x394/0x4c0 [ 108.995780][ T6138] should_failslab+0x9/0x20 [ 109.000332][ T6138] slab_pre_alloc_hook+0x59/0x300 [ 109.005407][ T6138] ? ____ip_mc_inc_group+0x2b3/0xac0 [ 109.010753][ T6138] __kmem_cache_alloc_node+0x53/0x260 [ 109.016174][ T6138] ? ____ip_mc_inc_group+0x2b3/0xac0 [ 109.021515][ T6138] kmalloc_trace+0x2a/0xe0 [ 109.025986][ T6138] ____ip_mc_inc_group+0x2b3/0xac0 [ 109.031161][ T6138] ? __ip_mc_join_group+0x38d/0x510 [ 109.036419][ T6138] __ip_mc_join_group+0x431/0x510 [ 109.041511][ T6138] do_mcast_group_source+0x44f/0x550 [ 109.046850][ T6138] ? ip_mcast_join_leave+0x260/0x260 [ 109.052208][ T6138] ? verify_lock_unused+0x140/0x140 [ 109.057512][ T6138] ? __local_bh_enable_ip+0x13a/0x1c0 [ 109.062934][ T6138] ? lockdep_hardirqs_on+0x98/0x150 [ 109.068191][ T6138] ? __local_bh_enable_ip+0x13a/0x1c0 [ 109.073711][ T6138] ? _local_bh_enable+0xa0/0xa0 [ 109.078628][ T6138] do_ip_setsockopt+0x162d/0x2d50 [ 109.083725][ T6138] ? ip_sock_set_pktinfo+0x30/0x30 [ 109.088911][ T6138] ? aa_sk_perm+0x7bb/0x8e0 [ 109.093481][ T6138] ? aa_af_perm+0x330/0x330 [ 109.098046][ T6138] ? __fget_files+0x28/0x460 [ 109.102702][ T6138] ? aa_sock_opt_perm+0x74/0x100 [ 109.107722][ T6138] ip_setsockopt+0x61/0x110 [ 109.112288][ T6138] ? sock_common_recvmsg+0x190/0x190 [ 109.117646][ T6138] do_sock_setsockopt+0x175/0x1a0 [ 109.122717][ T6138] ? __fdget+0x180/0x210 [ 109.127014][ T6138] __x64_sys_setsockopt+0x182/0x200 [ 109.132269][ T6138] do_syscall_64+0x55/0xb0 [ 109.136742][ T6138] ? clear_bhb_loop+0x40/0x90 [ 109.141473][ T6138] ? clear_bhb_loop+0x40/0x90 [ 109.146210][ T6138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.152168][ T6138] RIP: 0033:0x7f1eff19f559 [ 109.156631][ T6138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.176308][ T6138] RSP: 002b:00007f1f00089028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 109.184793][ T6138] RAX: ffffffffffffffda RBX: 00007f1eff425fa0 RCX: 00007f1eff19f559 [ 109.192834][ T6138] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000003 [ 109.196115][ T6127] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm syz.0.74: Invalid inode table block 0 in block_group 0 [ 109.200836][ T6138] RBP: 00007f1eff236b20 R08: 0000000000000108 R09: 0000000000000000 [ 109.221590][ T6138] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 109.229611][ T6138] R13: 00007f1eff426038 R14: 00007f1eff425fa0 R15: 00007ffec77fdab8 [ 109.237656][ T6138] [ 109.248183][ T6127] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 109.271763][ T6127] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 109.300188][ T6127] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm syz.0.74: Invalid inode table block 0 in block_group 0 [ 109.335443][ T6127] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 109.357078][ T6127] EXT4-fs error (device loop0): ext4_truncate:4314: inode #15: comm syz.0.74: mark_inode_dirty error [ 109.385492][ T6127] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 109.405111][ T6127] EXT4-fs (loop0): 1 truncate cleaned up [ 109.412457][ T6127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.512225][ T6127] EXT4-fs (loop0): shut down requested (1) [ 109.573271][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.740700][ T6145] gadgetfs: bound to dummy_udc driver [ 109.882040][ T6149] loop1: detected capacity change from 0 to 512 [ 110.010473][ T6149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.070296][ T6149] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.613631][ T6160] Zero length message leads to an empty skb [ 110.694228][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.970448][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.071536][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.190888][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.336054][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.724134][ T6187] process 'syz.3.96' launched './file1' with NULL argv: empty string added [ 112.039063][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 112.055384][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 112.063549][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 112.071816][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 112.081054][ T5803] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 112.088532][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 112.168042][ T6194] rxe_eth0 speed is unknown, defaulting to 1000 [ 112.803301][ T6218] loop2: detected capacity change from 0 to 16 [ 112.832694][ T6218] erofs: Unknown parameter 'Ø' [ 113.310162][ T6229] netlink: 'syz.3.106': attribute type 13 has an invalid length. [ 113.583286][ T6194] chnl_net:caif_netlink_parms(): no params data found [ 114.115600][ T6194] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.122836][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.171250][ T6194] bridge_slave_0: entered allmulticast mode [ 114.205513][ T5803] Bluetooth: hci2: command tx timeout [ 114.222357][ T6194] bridge_slave_0: entered promiscuous mode [ 114.252044][ T6194] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.297218][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.323020][ T6252] FAULT_INJECTION: forcing a failure. [ 114.323020][ T6252] name failslab, interval 1, probability 0, space 0, times 0 [ 114.336617][ T6194] bridge_slave_1: entered allmulticast mode [ 114.345171][ T6252] CPU: 1 PID: 6252 Comm: syz.3.111 Not tainted syzkaller #0 [ 114.352533][ T6252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 114.362643][ T6252] Call Trace: [ 114.365963][ T6252] [ 114.368939][ T6252] dump_stack_lvl+0x18c/0x250 [ 114.373708][ T6252] ? show_regs_print_info+0x20/0x20 [ 114.378951][ T6252] ? load_image+0x420/0x420 [ 114.383489][ T6252] ? __might_sleep+0xe0/0xe0 [ 114.388128][ T6252] ? __lock_acquire+0x7eb0/0x7eb0 [ 114.393191][ T6252] should_fail_ex+0x394/0x4c0 [ 114.397906][ T6252] should_failslab+0x9/0x20 [ 114.402438][ T6252] slab_pre_alloc_hook+0x59/0x300 [ 114.407504][ T6252] ? __up_read+0x2b8/0x6b0 [ 114.411948][ T6252] ? crypto_create_tfm_node+0x77/0x380 [ 114.417451][ T6252] ? crypto_create_tfm_node+0x77/0x380 [ 114.422957][ T6252] __kmem_cache_alloc_node+0x53/0x260 [ 114.428381][ T6252] ? crypto_create_tfm_node+0x77/0x380 [ 114.433882][ T6252] __kmalloc_node+0xa6/0x240 [ 114.438537][ T6252] crypto_create_tfm_node+0x77/0x380 [ 114.443866][ T6252] ? crypto_alg_mod_lookup+0x1ad/0x570 [ 114.449367][ T6252] crypto_alloc_tfm_node+0x17b/0x360 [ 114.454698][ T6252] sctp_auth_init_hmacs+0x1c4/0x4a0 [ 114.459943][ T6252] sctp_auth_init+0x288/0x460 [ 114.464689][ T6252] sctp_setsockopt_auth_supported+0x302/0x530 [ 114.470797][ T6252] sctp_setsockopt+0x571/0x11e0 [ 114.475685][ T6252] ? sock_common_recvmsg+0x190/0x190 [ 114.481047][ T6252] do_sock_setsockopt+0x175/0x1a0 [ 114.486116][ T6252] ? __fdget+0x180/0x210 [ 114.490407][ T6252] __x64_sys_setsockopt+0x182/0x200 [ 114.495656][ T6252] do_syscall_64+0x55/0xb0 [ 114.500134][ T6252] ? clear_bhb_loop+0x40/0x90 [ 114.504865][ T6252] ? clear_bhb_loop+0x40/0x90 [ 114.509579][ T6252] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.515505][ T6252] RIP: 0033:0x7fb3a799f559 [ 114.519969][ T6252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.539610][ T6252] RSP: 002b:00007fb3a8882028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 114.548052][ T6252] RAX: ffffffffffffffda RBX: 00007fb3a7c25fa0 RCX: 00007fb3a799f559 [ 114.556052][ T6252] RDX: 0000000000000081 RSI: 0000000000000084 RDI: 0000000000000004 [ 114.564054][ T6252] RBP: 00007fb3a7a36b20 R08: 0000000000000008 R09: 0000000000000000 [ 114.572051][ T6252] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000000 [ 114.580049][ T6252] R13: 00007fb3a7c26038 R14: 00007fb3a7c25fa0 R15: 00007ffe0f652768 [ 114.588070][ T6252] [ 114.614195][ T6194] bridge_slave_1: entered promiscuous mode [ 114.660936][ T6194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.673843][ T6194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.807467][ T11] hsr_slave_0: left promiscuous mode [ 114.817733][ T11] hsr_slave_1: left promiscuous mode [ 114.824158][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.832660][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.842445][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.850256][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.865698][ T11] bridge_slave_1: left allmulticast mode [ 114.874511][ T11] bridge_slave_1: left promiscuous mode [ 114.889868][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.956290][ T11] bridge_slave_0: left allmulticast mode [ 114.964165][ T11] bridge_slave_0: left promiscuous mode [ 114.982561][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.120009][ T11] veth1_macvtap: left promiscuous mode [ 115.130239][ T11] veth0_macvtap: left promiscuous mode [ 115.136850][ T11] veth1_vlan: left promiscuous mode [ 115.143536][ T11] veth0_vlan: left promiscuous mode [ 115.569226][ T5923] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.765167][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 115.777943][ T5923] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 115.791538][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.800005][ T5873] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 115.804666][ T5923] usb 2-1: Product: syz [ 115.811944][ T5923] usb 2-1: Manufacturer: syz [ 115.830713][ T5923] usb 2-1: SerialNumber: syz [ 115.841041][ T5923] usb 2-1: config 0 descriptor?? [ 115.999906][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 116.014737][ T5873] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.028536][ T5873] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.033228][ T11] team0 (unregistering): Port device team_slave_1 removed [ 116.047610][ T5873] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.059045][ T5873] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 116.072542][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 116.085756][ T5873] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 116.094981][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.100934][ T5923] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 116.120398][ T5873] usb 3-1: config 0 descriptor?? [ 116.173405][ T11] team0 (unregistering): Port device team_slave_0 removed [ 116.235773][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.275419][ T5803] Bluetooth: hci2: command tx timeout [ 116.317381][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.662236][ T5873] logitech-djreceiver 0003:046D:C53A.0002: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.2-1/input0 [ 116.799696][ T11] bond0 (unregistering): Released all slaves [ 116.809483][ T5873] usb 3-1: USB disconnect, device number 3 [ 116.906802][ T6275] fido_id[6275]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 116.940337][ T6194] team0: Port device team_slave_0 added [ 117.003081][ T6273] ip6gre1: entered promiscuous mode [ 117.022553][ T6273] ip6gre1: entered allmulticast mode [ 117.034913][ T6194] team0: Port device team_slave_1 added [ 117.127125][ T6194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.138933][ T6194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.165087][ T6194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.190290][ T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.208038][ T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.222388][ T5861] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.235837][ T6194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.242808][ T6194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.269547][ T6194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.396699][ T6194] hsr_slave_0: entered promiscuous mode [ 117.413662][ T6194] hsr_slave_1: entered promiscuous mode [ 117.435209][ T6194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.451040][ T6194] Cannot create hsr debugfs directory [ 117.555651][ T5923] usb write operation failed. (-71) [ 117.595167][ T5923] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 117.645813][ T5923] dvbdev: DVB: registering new adapter (Terratec H7) [ 117.652616][ T5923] usb 2-1: media controller created [ 117.658860][ T5923] usb read operation failed. (-71) [ 117.664676][ T5923] usb write operation failed. (-71) [ 117.670651][ T27] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.693430][ T5923] dvb_usb_az6007: probe of 2-1:0.0 failed with error -5 [ 117.711360][ T5923] usb 2-1: USB disconnect, device number 3 [ 117.883505][ T6290] ip_tables: iptables: counters copy to user failed while replacing table [ 117.932284][ T6290] syzkaller1: entered promiscuous mode [ 117.954225][ T6290] syzkaller1: entered allmulticast mode [ 118.195375][ T5923] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 118.319784][ T6194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 118.339430][ T6194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 118.355681][ T5803] Bluetooth: hci2: command tx timeout [ 118.391658][ T6194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 118.450799][ T6194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 118.712751][ T6194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.773782][ T6194] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.801449][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.808717][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.837907][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.845205][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.894934][ T6319] loop2: detected capacity change from 0 to 128 [ 118.943774][ T6194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.987391][ T5792] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 119.423920][ T6338] syz.2.128 uses obsolete (PF_INET,SOCK_PACKET) [ 119.552130][ T6194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.436125][ T5803] Bluetooth: hci2: command tx timeout [ 120.442805][ T6194] veth0_vlan: entered promiscuous mode [ 120.463942][ T6194] veth1_vlan: entered promiscuous mode [ 120.523952][ T6366] warning: `syz.3.134' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 120.561065][ T6194] veth0_macvtap: entered promiscuous mode [ 120.602389][ T6194] veth1_macvtap: entered promiscuous mode [ 120.677183][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.705597][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.725077][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.757184][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.785657][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.804188][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.853281][ T6194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.958604][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.993680][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.043098][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.075837][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.107345][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.143639][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.183304][ T6194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.274566][ T6194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.288578][ T6194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.298976][ T6194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.321658][ T6194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.476839][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.586460][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.600821][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.692969][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.730558][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.017146][ T6410] netlink: 20 bytes leftover after parsing attributes in process `syz.1.144'. [ 122.053914][ T6410] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 122.061765][ T6410] IPv6: NLM_F_CREATE should be set when creating new route [ 122.086284][ T6410] netlink: 20 bytes leftover after parsing attributes in process `syz.1.144'. [ 122.388691][ T6425] loop3: detected capacity change from 0 to 256 [ 122.445916][ T6425] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.464261][ T6425] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 122.509168][ T6425] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 122.539614][ T6425] exFAT-fs (loop3): failed to load alloc-bitmap [ 122.562975][ T6425] exFAT-fs (loop3): failed to recognize exfat type [ 122.988087][ T6440] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 123.163961][ T6445] loop2: detected capacity change from 0 to 2048 [ 123.236915][ T5792] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 123.970882][ T6475] loop1: detected capacity change from 0 to 256 [ 124.137052][ T6475] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1f3a413c, utbl_chksum : 0xe619d30d) [ 124.735686][ T1198] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 124.947282][ T1198] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 124.967301][ T1198] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.994566][ T1198] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 125.017811][ T1198] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.033222][ T1198] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 125.043646][ T1198] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 125.052237][ T1198] usb 2-1: Product: syz [ 125.058090][ T1198] usb 2-1: Manufacturer: syz [ 125.074760][ T1198] cdc_wdm 2-1:1.0: skipping garbage [ 125.105428][ T1198] cdc_wdm 2-1:1.0: skipping garbage [ 125.126436][ T1198] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 125.135884][ T1198] cdc_wdm 2-1:1.0: Unknown control protocol [ 125.357302][ T27] usb 2-1: USB disconnect, device number 4 [ 125.696866][ T6520] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 125.984283][ T6526] loop3: detected capacity change from 0 to 512 [ 126.021372][ T6526] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.047219][ T6526] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.105225][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 126.123892][ T6526] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 126.199221][ T6526] EXT4-fs (loop3): 1 truncate cleaned up [ 126.211800][ T6526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.276390][ T6538] FAULT_INJECTION: forcing a failure. [ 126.276390][ T6538] name failslab, interval 1, probability 0, space 0, times 0 [ 126.289276][ T6538] CPU: 1 PID: 6538 Comm: syz.4.178 Not tainted syzkaller #0 [ 126.296620][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 126.306735][ T6538] Call Trace: [ 126.310061][ T6538] [ 126.313045][ T6538] dump_stack_lvl+0x18c/0x250 [ 126.317796][ T6538] ? show_regs_print_info+0x20/0x20 [ 126.321174][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 126.323032][ T6538] ? load_image+0x420/0x420 [ 126.336213][ T6538] ? __might_sleep+0xe0/0xe0 [ 126.340859][ T6538] ? __lock_acquire+0x7eb0/0x7eb0 [ 126.345939][ T6538] should_fail_ex+0x394/0x4c0 [ 126.350662][ T6538] should_failslab+0x9/0x20 [ 126.355204][ T6538] slab_pre_alloc_hook+0x59/0x300 [ 126.360281][ T6538] ? io_rsrc_node_alloc+0xff/0x1c0 [ 126.365435][ T6538] __kmem_cache_alloc_node+0x53/0x260 [ 126.370867][ T6538] ? io_rsrc_node_alloc+0xff/0x1c0 [ 126.376016][ T6538] kmalloc_trace+0x2a/0xe0 [ 126.380471][ T6538] io_rsrc_node_alloc+0xff/0x1c0 [ 126.385446][ T6538] io_uring_create+0x74b/0x1330 [ 126.390336][ T6538] __se_sys_io_uring_setup+0x29f/0x2b0 [ 126.395833][ T6538] ? __x64_sys_io_uring_setup+0x60/0x60 [ 126.401420][ T6538] ? lockdep_hardirqs_on+0x98/0x150 [ 126.406655][ T6538] do_syscall_64+0x55/0xb0 [ 126.411106][ T6538] ? clear_bhb_loop+0x40/0x90 [ 126.415818][ T6538] ? clear_bhb_loop+0x40/0x90 [ 126.420537][ T6538] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.426462][ T6538] RIP: 0033:0x7f87e479f559 [ 126.430904][ T6538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.450550][ T6538] RSP: 002b:00007f87e5594028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 126.458999][ T6538] RAX: ffffffffffffffda RBX: 00007f87e4a25fa0 RCX: 00007f87e479f559 [ 126.467006][ T6538] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000027 [ 126.475012][ T6538] RBP: 00007f87e4836b20 R08: 0000000000000000 R09: 0000000000000000 [ 126.483018][ T6538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.491018][ T6538] R13: 00007f87e4a26038 R14: 00007f87e4a25fa0 R15: 00007ffc18bb6118 [ 126.499036][ T6538] [ 126.507899][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.534416][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 126.572694][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.637877][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 126.675889][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 126.683981][ T9] usb 2-1: Product: syz [ 126.698621][ T9] usb 2-1: Manufacturer: syz [ 126.718005][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 126.723310][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 126.751695][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.770045][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 126.801597][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 126.883755][ T6544] FAULT_INJECTION: forcing a failure. [ 126.883755][ T6544] name failslab, interval 1, probability 0, space 0, times 0 [ 126.908520][ T6544] CPU: 0 PID: 6544 Comm: syz.4.179 Not tainted syzkaller #0 [ 126.915892][ T6544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 126.926015][ T6544] Call Trace: [ 126.929338][ T6544] [ 126.932313][ T6544] dump_stack_lvl+0x18c/0x250 [ 126.937055][ T6544] ? show_regs_print_info+0x20/0x20 [ 126.942319][ T6544] ? load_image+0x420/0x420 [ 126.946894][ T6544] ? __might_sleep+0xe0/0xe0 [ 126.951542][ T6544] ? __lock_acquire+0x7eb0/0x7eb0 [ 126.956667][ T6544] should_fail_ex+0x394/0x4c0 [ 126.961417][ T6544] should_failslab+0x9/0x20 [ 126.965999][ T6544] slab_pre_alloc_hook+0x59/0x300 [ 126.971081][ T6544] ? __register_sysctl_table+0x71/0x1210 [ 126.976776][ T6544] ? __register_sysctl_table+0x71/0x1210 [ 126.982465][ T6544] __kmem_cache_alloc_node+0x53/0x260 [ 126.987896][ T6544] ? __register_sysctl_table+0x71/0x1210 [ 126.993579][ T6544] __kmalloc+0xa7/0x240 [ 126.997799][ T6544] __register_sysctl_table+0x71/0x1210 [ 127.003322][ T6544] ? register_net_sysctl_sz+0x438/0x490 [ 127.008940][ T6544] sysctl_core_net_init+0xff/0x160 [ 127.014110][ T6544] ops_init+0x391/0x640 [ 127.018334][ T6544] setup_net+0x3b6/0xa20 [ 127.022639][ T6544] ? copy_net_ns+0x530/0x530 [ 127.027307][ T6544] ? copy_net_ns+0x347/0x530 [ 127.031959][ T6544] ? down_read_killable+0x1d0/0x340 [ 127.037213][ T6544] copy_net_ns+0x361/0x530 [ 127.041696][ T6544] create_new_namespaces+0x3ce/0x700 [ 127.047083][ T6544] unshare_nsproxy_namespaces+0x11a/0x160 [ 127.052871][ T6544] ksys_unshare+0x4fa/0x8f0 [ 127.057423][ T6544] ? sighand_ctor+0x50/0x50 [ 127.061963][ T6544] ? lock_chain_count+0x20/0x20 [ 127.066856][ T6544] ? syscall_enter_from_user_mode+0x25/0x80 [ 127.072790][ T6544] __x64_sys_unshare+0x38/0x40 [ 127.077598][ T6544] do_syscall_64+0x55/0xb0 [ 127.082049][ T6544] ? clear_bhb_loop+0x40/0x90 [ 127.086767][ T6544] ? clear_bhb_loop+0x40/0x90 [ 127.091480][ T6544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.097411][ T6544] RIP: 0033:0x7f87e479f559 [ 127.101862][ T6544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.121506][ T6544] RSP: 002b:00007f87e5594028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 127.129959][ T6544] RAX: ffffffffffffffda RBX: 00007f87e4a25fa0 RCX: 00007f87e479f559 [ 127.137962][ T6544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004c000680 [ 127.145980][ T6544] RBP: 00007f87e4836b20 R08: 0000000000000000 R09: 0000000000000000 [ 127.153985][ T6544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.161982][ T6544] R13: 00007f87e4a26038 R14: 00007f87e4a25fa0 R15: 00007ffc18bb6118 [ 127.169994][ T6544] [ 127.327349][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 127.333131][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 127.339688][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 127.345611][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 127.351488][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 127.357618][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 127.363338][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 127.369139][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 127.375814][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 127.381544][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 127.397054][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 127.402801][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 127.415541][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 127.421280][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 127.427611][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 127.433323][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 127.439753][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 127.445483][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 127.471171][ T27] usb 2-1: USB disconnect, device number 5 [ 127.919296][ T6571] team0 (unregistering): Port device team_slave_0 removed [ 127.949329][ T6571] team0 (unregistering): Port device team_slave_1 removed [ 128.995793][ T6604] FAULT_INJECTION: forcing a failure. [ 128.995793][ T6604] name failslab, interval 1, probability 0, space 0, times 0 [ 129.037558][ T6604] CPU: 0 PID: 6604 Comm: syz.1.198 Not tainted syzkaller #0 [ 129.045048][ T6604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 129.055185][ T6604] Call Trace: [ 129.058516][ T6604] [ 129.061492][ T6604] dump_stack_lvl+0x18c/0x250 [ 129.066238][ T6604] ? show_regs_print_info+0x20/0x20 [ 129.071505][ T6604] ? load_image+0x420/0x420 [ 129.076068][ T6604] ? __might_sleep+0xe0/0xe0 [ 129.080735][ T6604] ? __lock_acquire+0x7eb0/0x7eb0 [ 129.085912][ T6604] should_fail_ex+0x394/0x4c0 [ 129.090651][ T6604] should_failslab+0x9/0x20 [ 129.095206][ T6604] slab_pre_alloc_hook+0x59/0x300 [ 129.100299][ T6604] kmem_cache_alloc+0x5a/0x2d0 [ 129.105111][ T6604] ? locks_get_lock_context+0x116/0x370 [ 129.110724][ T6604] locks_get_lock_context+0x116/0x370 [ 129.116166][ T6604] posix_lock_inode+0x114/0x3270 [ 129.121174][ T6604] ? aa_path_link+0xf80/0xf80 [ 129.125909][ T6604] ? lockdep_softirqs_off+0x440/0x440 [ 129.131333][ T6604] ? slab_post_alloc_hook+0x86/0x4d0 [ 129.136695][ T6604] ? end_current_label_crit_section+0x149/0x170 [ 129.143028][ T6604] ? posix_lock_file+0x50/0x50 [ 129.147862][ T6604] ? bpf_lsm_file_lock+0x9/0x10 [ 129.152777][ T6604] fcntl_setlk+0x9c0/0x1070 [ 129.157359][ T6604] ? vfs_lock_file+0x110/0x110 [ 129.162186][ T6604] ? __might_fault+0xaa/0x120 [ 129.166944][ T6604] ? __might_fault+0xc6/0x120 [ 129.171675][ T6604] ? __might_fault+0xaa/0x120 [ 129.176422][ T6604] do_fcntl+0x8c1/0x1500 [ 129.180731][ T6604] ? kill_fasync+0x4b0/0x4b0 [ 129.185376][ T6604] ? __fget_files+0x28/0x460 [ 129.190028][ T6604] ? __fget_files+0x3fc/0x460 [ 129.194783][ T6604] ? tomoyo_file_fcntl+0x7b/0x220 [ 129.199871][ T6604] ? bpf_lsm_file_fcntl+0x9/0x10 [ 129.204867][ T6604] ? security_file_fcntl+0x80/0xa0 [ 129.210037][ T6604] __se_sys_fcntl+0xc9/0x1a0 [ 129.214697][ T6604] do_syscall_64+0x55/0xb0 [ 129.219191][ T6604] ? clear_bhb_loop+0x40/0x90 [ 129.223929][ T6604] ? clear_bhb_loop+0x40/0x90 [ 129.228669][ T6604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.234632][ T6604] RIP: 0033:0x7f4988f9f559 [ 129.239096][ T6604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.258783][ T6604] RSP: 002b:00007f4989ebd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 129.267288][ T6604] RAX: ffffffffffffffda RBX: 00007f4989225fa0 RCX: 00007f4988f9f559 [ 129.275326][ T6604] RDX: 0000200000000400 RSI: 0000000000000006 RDI: 0000000000000003 [ 129.283358][ T6604] RBP: 00007f4989036b20 R08: 0000000000000000 R09: 0000000000000000 [ 129.291397][ T6604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.299469][ T6604] R13: 00007f4989226038 R14: 00007f4989225fa0 R15: 00007ffe3ba182e8 [ 129.307543][ T6604] [ 129.430805][ T6612] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 129.825678][ T6624] tipc: Started in network mode [ 129.837734][ T6624] tipc: Node identity 7f000001, cluster identity 4711 [ 129.863159][ T6624] tipc: New replicast peer: 172.20.20.12 [ 129.881864][ T6624] tipc: Enabled bearer , priority 10 [ 130.141463][ T6635] FAULT_INJECTION: forcing a failure. [ 130.141463][ T6635] name failslab, interval 1, probability 0, space 0, times 0 [ 130.175182][ T6635] CPU: 1 PID: 6635 Comm: syz.2.210 Not tainted syzkaller #0 [ 130.182557][ T6635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 130.192666][ T6635] Call Trace: [ 130.195999][ T6635] [ 130.199009][ T6635] dump_stack_lvl+0x18c/0x250 [ 130.203791][ T6635] ? show_regs_print_info+0x20/0x20 [ 130.209063][ T6635] ? load_image+0x420/0x420 [ 130.213609][ T6635] ? __lock_acquire+0x7eb0/0x7eb0 [ 130.218672][ T6635] ? do_futex+0x2ff/0x3e0 [ 130.223037][ T6635] ? __lock_acquire+0x7eb0/0x7eb0 [ 130.228107][ T6635] should_fail_ex+0x394/0x4c0 [ 130.232828][ T6635] should_failslab+0x9/0x20 [ 130.237361][ T6635] slab_pre_alloc_hook+0x59/0x300 [ 130.242418][ T6635] ? do_eventfd+0x7a/0x2d0 [ 130.246867][ T6635] __kmem_cache_alloc_node+0x53/0x260 [ 130.252267][ T6635] ? do_eventfd+0x7a/0x2d0 [ 130.256759][ T6635] kmalloc_trace+0x2a/0xe0 [ 130.261218][ T6635] do_eventfd+0x7a/0x2d0 [ 130.265589][ T6635] __x64_sys_eventfd2+0x5a/0x70 [ 130.270496][ T6635] do_syscall_64+0x55/0xb0 [ 130.274956][ T6635] ? clear_bhb_loop+0x40/0x90 [ 130.279692][ T6635] ? clear_bhb_loop+0x40/0x90 [ 130.284409][ T6635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.290342][ T6635] RIP: 0033:0x7f1eff19f559 [ 130.294795][ T6635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.314449][ T6635] RSP: 002b:00007f1f00089028 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 130.323007][ T6635] RAX: ffffffffffffffda RBX: 00007f1eff425fa0 RCX: 00007f1eff19f559 [ 130.331013][ T6635] RDX: 0000000000000000 RSI: 0000000000000801 RDI: 0000000000000002 [ 130.339007][ T6635] RBP: 00007f1eff236b20 R08: 0000000000000000 R09: 0000000000000000 [ 130.347035][ T6635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.355042][ T6635] R13: 00007f1eff426038 R14: 00007f1eff425fa0 R15: 00007ffec77fdab8 [ 130.363069][ T6635] [ 130.435716][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.464416][ T6621] loop1: detected capacity change from 0 to 32768 [ 130.584818][ T6621] JBD2: Ignoring recovery information on journal [ 130.686520][ T6621] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 130.997769][ T174] tipc: Node number set to 2130706433 [ 131.066565][ T5787] (syz-executor,5787,0):ocfs2_inode_is_valid_to_delete:919 ERROR: Skipping delete of system file 66 [ 131.157274][ T5787] ocfs2: Unmounting device (7,1) on (node local) [ 131.855124][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 131.924473][ T5803] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 132.095084][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 132.126396][ T27] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 132.134716][ T27] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.160444][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.175458][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.189575][ T27] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.209970][ T27] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 132.221812][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.544685][ T27] usb 4-1: GET_CAPABILITIES returned 0 [ 132.555319][ T27] usbtmc 4-1:16.0: can't read capabilities [ 132.922878][ T174] usb 4-1: USB disconnect, device number 2 [ 132.923813][ T6671] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 132.957438][ T6704] usbtmc 4-1:16.0: usb_control_msg returned -19 [ 133.001918][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.013786][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.035412][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 133.205089][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 133.240266][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 133.262965][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.276834][ T9] usb 3-1: Product: syz [ 133.281072][ T9] usb 3-1: Manufacturer: syz [ 133.289184][ T9] usb 3-1: SerialNumber: syz [ 133.312150][ T1198] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 133.330680][ T1198] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 133.364302][ T1198] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 133.410411][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 133.445254][ T27] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 133.486800][ T27] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.505067][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.513135][ T27] usb 2-1: Product: syz [ 133.542130][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 133.547590][ T27] usb 2-1: Manufacturer: syz [ 133.562331][ T6716] fido_id[6716]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 133.598931][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 133.614047][ T27] usb 2-1: SerialNumber: syz [ 133.724707][ T6718] overlayfs: failed to get index nlink (file0/file2, err=-61) [ 133.860208][ T6708] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 134.149680][ T6726] loop4: detected capacity change from 0 to 1024 [ 134.225652][ T6726] EXT4-fs (loop4): filesystem is read-only [ 134.458472][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -71 [ 134.472269][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 134.489842][ T6708] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 134.510627][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 134.535828][ T9] lan78xx: probe of 3-1:1.0 failed with error -71 [ 134.574481][ T9] usb 3-1: USB disconnect, device number 4 [ 134.713168][ T27] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 134.735074][ T27] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 134.763127][ T27] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 134.923051][ T27] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 134.964680][ T27] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 134.984129][ T27] usb 2-1: USB disconnect, device number 6 [ 134.992315][ T27] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 135.039738][ T6746] loop3: detected capacity change from 0 to 256 [ 135.086397][ T6746] exfat: Deprecated parameter 'utf8' [ 135.092224][ T6746] exfat: Deprecated parameter 'utf8' [ 135.157951][ T6746] exfat: Deprecated parameter 'namecase' [ 135.197275][ T6746] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 135.488165][ T6746] syz.3.249 (6746) used greatest stack depth: 20880 bytes left [ 136.475622][ T6794] fscrypt (sda1, inode 1262): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 136.863816][ T6807] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6808] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6807] [ 139.372425][ T6883] netlink: 36 bytes leftover after parsing attributes in process `syz.3.296'. [ 139.508592][ T6888] netlink: 36 bytes leftover after parsing attributes in process `syz.3.296'. [ 139.753968][ T6895] loop2: detected capacity change from 0 to 512 [ 139.828957][ T6897] loop1: detected capacity change from 0 to 512 [ 139.849731][ T5792] udevd[5792]: symlink '../../loop2' '/dev/disk/by-diskseq/100.tmp-b7:2' failed: Read-only file system [ 139.888374][ T5792] udevd[5792]: symlink '../../loop2' '/dev/disk/by-label/SYZKALLER.tmp-b7:2' failed: Read-only file system [ 139.917550][ T5792] udevd[5792]: symlink '../../loop2' '/dev/disk/by-uuid/8B9B-8193.tmp-b7:2' failed: Read-only file system [ 139.937157][ T6897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.952605][ T5989] udevd[5989]: symlink '../../loop1' '/dev/disk/by-diskseq/101.tmp-b7:1' failed: Read-only file system [ 139.987065][ T5989] udevd[5989]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 140.005237][ T6897] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.092163][ T5792] udevd[5792]: symlink '../../loop2' '/dev/disk/by-diskseq/100.tmp-b7:2' failed: Read-only file system [ 140.130596][ T5989] udevd[5989]: symlink '../../loop1' '/dev/disk/by-diskseq/101.tmp-b7:1' failed: Read-only file system [ 140.156547][ T5792] udevd[5792]: symlink '../../loop2' '/dev/disk/by-label/SYZKALLER.tmp-b7:2' failed: Read-only file system [ 140.170353][ T5989] udevd[5989]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 140.191237][ T5792] udevd[5792]: symlink '../../loop2' '/dev/disk/by-uuid/8B9B-8193.tmp-b7:2' failed: Read-only file system [ 140.232796][ T6897] EXT4-fs (loop1): shut down requested (0) [ 140.378005][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.075218][ T6934] overlayfs: failed to decode file handle (len=5, type=248, flags=0, err=-22) [ 141.105913][ T6939] loop4: detected capacity change from 0 to 512 [ 141.140602][ T6939] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 141.155305][ T5873] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 141.365671][ T5873] usb 2-1: Using ep0 maxpacket: 32 [ 141.376947][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 141.395783][ T5873] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 141.438216][ T5873] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 141.465395][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 141.495203][ T5873] usb 2-1: Product: syz [ 141.499466][ T5873] usb 2-1: Manufacturer: syz [ 141.504098][ T5873] usb 2-1: SerialNumber: syz [ 141.546221][ T5873] usb 2-1: config 0 descriptor?? [ 141.566346][ T5873] hub 2-1:0.0: bad descriptor, ignoring hub [ 141.572421][ T5873] hub: probe of 2-1:0.0 failed with error -5 [ 141.922881][ T6936] loop3: detected capacity change from 0 to 32768 [ 141.950831][ T6960] Bluetooth: ISO socket layer initialized [ 141.966234][ T27] usb 2-1: USB disconnect, device number 7 [ 142.075257][ T28] audit: type=1800 audit(1793195783.097:5): pid=6936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.309" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 142.170742][ T28] audit: type=1800 audit(1793195783.197:6): pid=6964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.309" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 142.562490][ T28] audit: type=1326 audit(1793195783.577:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.1.318" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4988f9f559 code=0x7ffc0000 [ 142.643025][ T28] audit: type=1326 audit(1793195783.597:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.1.318" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4988f9f559 code=0x7ffc0000 [ 142.711197][ T28] audit: type=1326 audit(1793195783.627:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.1.318" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f4988f9f559 code=0x7ffc0000 [ 142.802672][ T28] audit: type=1326 audit(1793195783.627:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.1.318" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4988f9f559 code=0x7ffc0000 [ 142.872732][ T28] audit: type=1326 audit(1793195783.627:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.1.318" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4988f9f559 code=0x7ffc0000 [ 142.897221][ T28] audit: type=1326 audit(1793195783.627:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.1.318" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4988f9f559 code=0x7ffc0000 [ 142.956134][ T28] audit: type=1326 audit(1793195783.627:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.1.318" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4988f9f559 code=0x7ffc0000 [ 143.058253][ T28] audit: type=1326 audit(1793195783.627:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.1.318" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4988f9f559 code=0x7ffc0000 [ 143.237760][ T6991] FAULT_INJECTION: forcing a failure. [ 143.237760][ T6991] name failslab, interval 1, probability 0, space 0, times 0 [ 143.282145][ T6991] CPU: 0 PID: 6991 Comm: syz.2.324 Not tainted syzkaller #0 [ 143.289536][ T6991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 143.299645][ T6991] Call Trace: [ 143.302969][ T6991] [ 143.305960][ T6991] dump_stack_lvl+0x18c/0x250 [ 143.310708][ T6991] ? show_regs_print_info+0x20/0x20 [ 143.315970][ T6991] ? load_image+0x420/0x420 [ 143.320552][ T6991] ? __might_sleep+0xe0/0xe0 [ 143.325199][ T6991] ? __lock_acquire+0x7eb0/0x7eb0 [ 143.330284][ T6991] should_fail_ex+0x394/0x4c0 [ 143.335019][ T6991] should_failslab+0x9/0x20 [ 143.339578][ T6991] slab_pre_alloc_hook+0x59/0x300 [ 143.344657][ T6991] ? __d_lookup+0x8f/0x7c0 [ 143.349129][ T6991] kmem_cache_alloc_lru+0x4d/0x2c0 [ 143.354286][ T6991] ? proc_alloc_inode+0x2a/0xb0 [ 143.359200][ T6991] proc_alloc_inode+0x2a/0xb0 [ 143.359212][ T6993] capability: warning: `syz.1.325' uses deprecated v2 capabilities in a way that may be insecure [ 143.374466][ T6991] ? proc_invalidate_siblings_dcache+0x6c0/0x6c0 [ 143.380851][ T6991] new_inode_pseudo+0x63/0x1d0 [ 143.385676][ T6991] new_inode+0x22/0x1d0 [ 143.389881][ T6991] ? d_hash_and_lookup+0x1b0/0x1b0 [ 143.395041][ T6991] proc_pid_make_inode+0x24/0x190 [ 143.400134][ T6991] proc_fd_instantiate+0x56/0x2a0 [ 143.405215][ T6991] ? __init_waitqueue_head+0xa8/0x140 [ 143.410647][ T6991] proc_fill_cache+0x1ef/0x430 [ 143.415489][ T6991] ? proc_readfd_common+0x8b0/0x8b0 [ 143.420757][ T6991] ? pid_revalidate+0x260/0x260 [ 143.425661][ T6991] ? snprintf+0xe9/0x140 [ 143.429963][ T6991] ? _raw_spin_unlock+0x28/0x40 [ 143.434873][ T6991] ? task_lookup_next_fd_rcu+0x337/0x390 [ 143.440581][ T6991] ? proc_readfd_common+0x333/0x8b0 [ 143.440698][ T6995] netlink: 104 bytes leftover after parsing attributes in process `syz.3.321'. [ 143.445809][ T6991] ? proc_readfd_common+0x333/0x8b0 [ 143.445840][ T6991] proc_readfd_common+0x57a/0x8b0 [ 143.445866][ T6991] ? proc_readfd_common+0x333/0x8b0 [ 143.445891][ T6991] ? proc_readfd_common+0x8b0/0x8b0 [ 143.445914][ T6991] ? proc_readfdinfo+0x30/0x30 [ 143.445947][ T6991] ? iterate_dir+0xcb/0x590 [ 143.485152][ T6991] ? down_read_killable+0x1d0/0x340 [ 143.490397][ T6991] ? fsnotify_perm+0x271/0x5e0 [ 143.495210][ T6991] iterate_dir+0x1bd/0x590 [ 143.499688][ T6991] __se_sys_getdents64+0xf6/0x270 [ 143.504772][ T6991] ? __x64_sys_getdents64+0x80/0x80 [ 143.510031][ T6991] ? filldir+0x620/0x620 [ 143.514344][ T6991] ? lockdep_hardirqs_on+0x98/0x150 [ 143.519610][ T6991] do_syscall_64+0x55/0xb0 [ 143.524075][ T6991] ? clear_bhb_loop+0x40/0x90 [ 143.528809][ T6991] ? clear_bhb_loop+0x40/0x90 [ 143.533548][ T6991] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.539504][ T6991] RIP: 0033:0x7f1eff19f559 [ 143.543972][ T6991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.563643][ T6991] RSP: 002b:00007f1f00089028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 143.572112][ T6991] RAX: ffffffffffffffda RBX: 00007f1eff425fa0 RCX: 00007f1eff19f559 [ 143.580332][ T6991] RDX: 0000000000000079 RSI: 00002000000003c0 RDI: 0000000000000004 [ 143.588360][ T6991] RBP: 00007f1eff236b20 R08: 0000000000000000 R09: 0000000000000000 [ 143.596473][ T6991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.604493][ T6991] R13: 00007f1eff426038 R14: 00007f1eff425fa0 R15: 00007ffec77fdab8 [ 143.612527][ T6991] [ 144.957275][ T5923] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 145.155654][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 145.174615][ T5923] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 145.194218][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.223042][ T5923] usb 2-1: Product: syz [ 145.229716][ T5923] usb 2-1: Manufacturer: syz [ 145.234372][ T5923] usb 2-1: SerialNumber: syz [ 146.682575][ T5923] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 146.705913][ T5923] usb 2-1: USB disconnect, device number 8 [ 146.898722][ T7059] loop4: detected capacity change from 0 to 32768 [ 147.099357][ T5792] udevd[5792]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 147.122469][ T5792] udevd[5792]: symlink '../../loop4' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:4' failed: Read-only file system [ 147.408797][ T5803] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 147.442385][ T7064] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7066] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7064] [ 147.640999][ T5792] udevd[5792]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 147.698617][ T5792] udevd[5792]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 148.355493][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 149.550719][ T5803] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 149.601388][ T7098] loop2: detected capacity change from 0 to 32768 [ 149.728860][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 149.728876][ T28] audit: type=1800 audit(1793195790.757:29): pid=7098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.351" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 149.814819][ T28] audit: type=1800 audit(1793195790.837:30): pid=7135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.351" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 149.874684][ T5792] udevd[5792]: symlink '../../loop2' '/dev/disk/by-diskseq/110.tmp-b7:2' failed: Read-only file system [ 149.897351][ T5792] udevd[5792]: symlink '../../loop2' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:2' failed: Read-only file system [ 150.113354][ T5792] udevd[5792]: symlink '../../loop2' '/dev/disk/by-diskseq/110.tmp-b7:2' failed: Read-only file system [ 150.166533][ T5792] udevd[5792]: symlink '../../loop2' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:2' failed: Read-only file system [ 150.308898][ T5792] udevd[5792]: symlink '../../loop2' '/dev/disk/by-diskseq/110.tmp-b7:2' failed: Read-only file system [ 150.361908][ T7150] loop3: detected capacity change from 0 to 512 [ 150.378627][ T5792] udevd[5792]: symlink '../../loop2' '/dev/disk/by-diskseq/110.tmp-b7:2' failed: Read-only file system [ 150.417708][ T7150] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 152.210921][ T7187] loop1: detected capacity change from 0 to 32768 [ 152.299758][ T28] audit: type=1800 audit(1793195793.327:31): pid=7187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.374" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 152.417947][ T28] audit: type=1800 audit(1793195793.447:32): pid=7215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.374" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 152.469425][ T5792] udevd[5792]: symlink '../../loop1' '/dev/disk/by-diskseq/115.tmp-b7:1' failed: Read-only file system [ 152.523855][ T5792] udevd[5792]: symlink '../../loop1' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:1' failed: Read-only file system [ 152.784386][ T5792] udevd[5792]: symlink '../../loop1' '/dev/disk/by-diskseq/115.tmp-b7:1' failed: Read-only file system [ 152.832665][ T5792] udevd[5792]: symlink '../../loop1' '/dev/disk/by-diskseq/115.tmp-b7:1' failed: Read-only file system [ 153.305196][ T5873] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 153.394914][ T7236] overlayfs: failed to decode file handle (len=5, type=248, flags=0, err=-22) [ 153.485073][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 153.512802][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 153.525126][ T1198] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 153.534602][ T5873] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 153.549368][ T5873] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 153.558729][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 153.567578][ T5873] usb 5-1: Product: syz [ 153.571811][ T5873] usb 5-1: Manufacturer: syz [ 153.581378][ T5873] usb 5-1: SerialNumber: syz [ 153.589632][ T5873] usb 5-1: config 0 descriptor?? [ 153.600347][ T5873] hub 5-1:0.0: bad descriptor, ignoring hub [ 153.611400][ T5873] hub: probe of 5-1:0.0 failed with error -5 [ 153.720600][ T1198] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 153.731905][ T1198] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 153.745918][ T1198] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.755037][ T1198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.763062][ T1198] usb 4-1: Product: syz [ 153.767439][ T1198] usb 4-1: Manufacturer: syz [ 153.772083][ T1198] usb 4-1: SerialNumber: syz [ 153.957168][ T5861] usb 5-1: USB disconnect, device number 2 [ 153.991988][ T7231] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 154.610113][ T7231] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 154.837829][ T7244] loop1: detected capacity change from 0 to 32768 [ 154.862535][ T1198] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 154.873750][ T1198] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 154.881688][ T1198] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 154.904932][ T28] audit: type=1800 audit(1793195795.927:33): pid=7244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.389" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 154.990534][ T28] audit: type=1800 audit(1793195796.017:34): pid=7249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.389" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 155.002002][ T5989] udevd[5989]: symlink '../../loop1' '/dev/disk/by-diskseq/118.tmp-b7:1' failed: Read-only file system [ 155.032258][ T5989] udevd[5989]: symlink '../../loop1' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:1' failed: Read-only file system [ 155.059317][ T1198] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 155.081255][ T1198] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 155.110642][ T1198] usb 4-1: USB disconnect, device number 3 [ 155.124830][ T1198] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 155.187325][ T5989] udevd[5989]: symlink '../../loop1' '/dev/disk/by-diskseq/118.tmp-b7:1' failed: Read-only file system [ 155.205367][ T5989] udevd[5989]: symlink '../../loop1' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:1' failed: Read-only file system [ 155.378852][ T5792] udevd[5792]: symlink '../../loop1' '/dev/disk/by-diskseq/118.tmp-b7:1' failed: Read-only file system [ 155.441020][ T5792] udevd[5792]: symlink '../../loop1' '/dev/disk/by-diskseq/118.tmp-b7:1' failed: Read-only file system [ 156.516249][ T7287] netlink: 36 bytes leftover after parsing attributes in process `syz.1.405'. [ 156.525683][ T1198] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 156.639038][ T7284] loop2: detected capacity change from 0 to 32768 [ 156.647570][ T7287] netlink: 36 bytes leftover after parsing attributes in process `syz.1.405'. [ 156.703166][ T28] audit: type=1800 audit(1793195797.727:35): pid=7284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.401" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 156.750894][ T1198] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 156.763430][ T1198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.766083][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 156.779946][ T1198] usb 4-1: Product: syz [ 156.779966][ T1198] usb 4-1: Manufacturer: syz [ 156.779982][ T1198] usb 4-1: SerialNumber: syz [ 156.817988][ T28] audit: type=1800 audit(1793195797.847:36): pid=7292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.401" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 157.027146][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 157.027207][ T1198] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 157.049765][ T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 157.057812][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.069270][ T1198] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 157.085430][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.097276][ T9] usb 5-1: Product: syz [ 157.103023][ T9] usb 5-1: Manufacturer: syz [ 157.109051][ T9] usb 5-1: SerialNumber: syz [ 157.366502][ T7288] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 157.808765][ T7302] loop1: detected capacity change from 0 to 512 [ 157.861694][ T5802] udevd[5802]: symlink '../../loop1' '/dev/disk/by-diskseq/123.tmp-b7:1' failed: Read-only file system [ 157.903389][ T5802] udevd[5802]: symlink '../../loop1' '/dev/disk/by-label/SYZKALLER.tmp-b7:1' failed: Read-only file system [ 157.916186][ T1198] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -71 [ 157.951012][ T5802] udevd[5802]: symlink '../../loop1' '/dev/disk/by-uuid/8B9B-8193.tmp-b7:1' failed: Read-only file system [ 157.955236][ T1198] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 157.992634][ T7306] Illegal XDP return value 4294967274 on prog (id 44) dev syz_tun, expect packet loss! [ 157.998005][ T7288] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 158.015931][ T1198] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 158.053139][ T1198] lan78xx: probe of 4-1:1.0 failed with error -71 [ 158.065464][ T7305] udevd[7305]: symlink '../../loop1' '/dev/disk/by-diskseq/123.tmp-b7:1' failed: Read-only file system [ 158.096665][ T1198] usb 4-1: USB disconnect, device number 4 [ 158.103538][ T7305] udevd[7305]: symlink '../../loop1' '/dev/disk/by-label/SYZKALLER.tmp-b7:1' failed: Read-only file system [ 158.158810][ T7305] udevd[7305]: symlink '../../loop1' '/dev/disk/by-uuid/8B9B-8193.tmp-b7:1' failed: Read-only file system [ 158.221214][ T7308] loop2: detected capacity change from 0 to 512 [ 158.244818][ T9] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 158.272735][ T9] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 158.282366][ T9] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 158.296349][ T5989] udevd[5989]: symlink '../../loop1' '/dev/disk/by-diskseq/123.tmp-b7:1' failed: Read-only file system [ 158.310685][ T7308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.328619][ T5989] udevd[5989]: symlink '../../loop1' '/dev/disk/by-diskseq/123.tmp-b7:1' failed: Read-only file system [ 158.349076][ T7305] udevd[7305]: symlink '../../loop2' '/dev/disk/by-diskseq/124.tmp-b7:2' failed: Read-only file system [ 158.355799][ T7308] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.381450][ T7305] udevd[7305]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 158.447004][ T9] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 158.471688][ T9] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 158.498906][ T9] usb 5-1: USB disconnect, device number 3 [ 158.513900][ T9] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 158.624778][ T7308] EXT4-fs (loop2): shut down requested (0) [ 158.694216][ T7316] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 158.756099][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.182437][ T7318] loop3: detected capacity change from 0 to 32768 [ 159.232810][ T7327] loop2: detected capacity change from 0 to 1024 [ 159.295457][ T7327] EXT4-fs (loop2): filesystem is read-only [ 159.304536][ T28] audit: type=1800 audit(1793195800.327:37): pid=7318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.414" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 159.418499][ T28] audit: type=1800 audit(1793195800.447:38): pid=7332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.414" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 159.876729][ T1198] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 160.095106][ T1198] usb 5-1: Using ep0 maxpacket: 8 [ 160.102622][ T1198] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 160.111382][ T1198] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 160.135103][ T1198] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 160.144907][ T1198] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 160.175154][ T1198] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.195148][ T1198] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 160.204250][ T1198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.474539][ T1198] usb 5-1: GET_CAPABILITIES returned 0 [ 160.480199][ T1198] usbtmc 5-1:16.0: can't read capabilities [ 160.684484][ T7350] fscrypt (sda1, inode 1262): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 160.716846][ T5923] usb 5-1: USB disconnect, device number 4 [ 160.723581][ T5873] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 160.863013][ T7354] overlayfs: failed to get index nlink (file0/file2, err=-61) [ 160.913940][ T5873] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 160.923847][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.939628][ T5873] usb 2-1: Product: syz [ 160.943905][ T5873] usb 2-1: Manufacturer: syz [ 160.949724][ T5873] usb 2-1: SerialNumber: syz [ 161.180540][ T5873] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 161.194826][ T5873] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 161.275139][ T5923] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 161.482836][ T5923] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 161.494144][ T5923] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 161.517722][ T5923] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.528168][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.545068][ T5923] usb 3-1: Product: syz [ 161.549316][ T5923] usb 3-1: Manufacturer: syz [ 161.553949][ T5923] usb 3-1: SerialNumber: syz [ 161.801598][ T7357] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 161.985448][ T7363] loop4: detected capacity change from 0 to 32768 [ 162.020403][ T5873] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -71 [ 162.037710][ T5873] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 162.048618][ T5873] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 162.070375][ T28] audit: type=1800 audit(1793195803.097:39): pid=7363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.434" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 162.074444][ T5873] lan78xx: probe of 2-1:1.0 failed with error -71 [ 162.132977][ T5873] usb 2-1: USB disconnect, device number 9 [ 162.178968][ T28] audit: type=1800 audit(1793195803.207:40): pid=7364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.434" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 162.419292][ T7357] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 162.640453][ T5923] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 162.655056][ T5923] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 162.672968][ T5923] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 162.842358][ T5923] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 162.872420][ T5923] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 162.911227][ T5923] usb 3-1: USB disconnect, device number 5 [ 162.923969][ T5923] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 163.561868][ T7385] loop2: detected capacity change from 0 to 256 [ 163.578143][ T7385] exfat: Deprecated parameter 'utf8' [ 163.583514][ T7385] exfat: Deprecated parameter 'utf8' [ 163.615620][ T7385] exfat: Deprecated parameter 'namecase' [ 163.655588][ T7385] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 163.678078][ T7305] udevd[7305]: symlink '../../loop2' '/dev/disk/by-diskseq/133.tmp-b7:2' failed: Read-only file system [ 163.708192][ T7305] udevd[7305]: symlink '../../loop2' '/dev/disk/by-uuid/1234-1234.tmp-b7:2' failed: Read-only file system [ 163.886361][ T7305] udevd[7305]: symlink '../../loop2' '/dev/disk/by-diskseq/133.tmp-b7:2' failed: Read-only file system [ 163.916862][ T7305] udevd[7305]: symlink '../../loop2' '/dev/disk/by-uuid/1234-1234.tmp-b7:2' failed: Read-only file system [ 163.972954][ T7305] udevd[7305]: symlink '../../loop2' '/dev/disk/by-diskseq/133.tmp-b7:2' failed: Read-only file system [ 164.003712][ T7305] udevd[7305]: symlink '../../loop2' '/dev/disk/by-diskseq/133.tmp-b7:2' failed: Read-only file system [ 164.293832][ T5894] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 164.309711][ T5894] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 164.344004][ T5894] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 164.468835][ T7405] fido_id[7405]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 164.704388][ T7393] loop1: detected capacity change from 0 to 32768 [ 164.751730][ T28] audit: type=1800 audit(1793195805.777:41): pid=7393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.445" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 164.833196][ T28] audit: type=1800 audit(1793195805.837:42): pid=7418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.445" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 164.990080][ T7305] udevd[7305]: symlink '../../loop1' '/dev/disk/by-diskseq/135.tmp-b7:1' failed: Read-only file system [ 165.037476][ T7305] udevd[7305]: symlink '../../loop1' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:1' failed: Read-only file system [ 165.261913][ T7305] udevd[7305]: symlink '../../loop1' '/dev/disk/by-diskseq/135.tmp-b7:1' failed: Read-only file system [ 165.287272][ T7305] udevd[7305]: symlink '../../loop1' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:1' failed: Read-only file system [ 165.787715][ T7432] FAULT_INJECTION: forcing a failure. [ 165.787715][ T7432] name failslab, interval 1, probability 0, space 0, times 0 [ 165.815088][ T7432] CPU: 0 PID: 7432 Comm: syz.4.460 Not tainted syzkaller #0 [ 165.822495][ T7432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 165.832626][ T7432] Call Trace: [ 165.835956][ T7432] [ 165.838921][ T7432] dump_stack_lvl+0x18c/0x250 [ 165.843644][ T7432] ? show_regs_print_info+0x20/0x20 [ 165.848878][ T7432] ? load_image+0x420/0x420 [ 165.853419][ T7432] ? __lock_acquire+0x7eb0/0x7eb0 [ 165.858474][ T7432] ? do_futex+0x2ff/0x3e0 [ 165.862843][ T7432] ? __lock_acquire+0x7eb0/0x7eb0 [ 165.867919][ T7432] should_fail_ex+0x394/0x4c0 [ 165.872632][ T7432] should_failslab+0x9/0x20 [ 165.877169][ T7432] slab_pre_alloc_hook+0x59/0x300 [ 165.882223][ T7432] ? do_eventfd+0x7a/0x2d0 [ 165.886708][ T7432] __kmem_cache_alloc_node+0x53/0x260 [ 165.892113][ T7432] ? do_eventfd+0x7a/0x2d0 [ 165.896566][ T7432] kmalloc_trace+0x2a/0xe0 [ 165.901023][ T7432] do_eventfd+0x7a/0x2d0 [ 165.905301][ T7432] __x64_sys_eventfd2+0x5a/0x70 [ 165.910180][ T7432] do_syscall_64+0x55/0xb0 [ 165.914660][ T7432] ? clear_bhb_loop+0x40/0x90 [ 165.919379][ T7432] ? clear_bhb_loop+0x40/0x90 [ 165.924095][ T7432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.930024][ T7432] RIP: 0033:0x7f87e479f559 [ 165.934469][ T7432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.954116][ T7432] RSP: 002b:00007f87e5594028 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 165.962566][ T7432] RAX: ffffffffffffffda RBX: 00007f87e4a25fa0 RCX: 00007f87e479f559 [ 165.970658][ T7432] RDX: 0000000000000000 RSI: 0000000000000801 RDI: 0000000000000002 [ 165.978653][ T7432] RBP: 00007f87e4836b20 R08: 0000000000000000 R09: 0000000000000000 [ 165.986654][ T7432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.994663][ T7432] R13: 00007f87e4a26038 R14: 00007f87e4a25fa0 R15: 00007ffc18bb6118 [ 166.002672][ T7432] [ 166.305765][ T174] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 166.317717][ T174] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 166.333031][ T174] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 166.403845][ T7425] loop2: detected capacity change from 0 to 32768 [ 166.485074][ T7441] fido_id[7441]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 166.542481][ T28] audit: type=1800 audit(1793195807.567:43): pid=7425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.468" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 166.638994][ T28] audit: type=1800 audit(1793195807.667:44): pid=7445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.468" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 167.563452][ T7458] loop4: detected capacity change from 0 to 32768 [ 167.610053][ T7458] JBD2: Ignoring recovery information on journal [ 167.720650][ T7458] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 167.765120][ T7466] loop2: detected capacity change from 0 to 32768 [ 167.836109][ T28] audit: type=1800 audit(1793195808.857:45): pid=7466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.482" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 167.926573][ T28] audit: type=1800 audit(1793195808.947:46): pid=7471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.482" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 168.032203][ T6194] (syz-executor,6194,1):ocfs2_inode_is_valid_to_delete:919 ERROR: Skipping delete of system file 66 [ 168.082653][ T6194] ocfs2: Unmounting device (7,4) on (node local) [ 168.979112][ T7475] loop3: detected capacity change from 0 to 32768 [ 169.056341][ T7478] loop1: detected capacity change from 0 to 32768 [ 169.067117][ T7475] JBD2: Ignoring recovery information on journal [ 169.119080][ T28] audit: type=1800 audit(1793195810.147:47): pid=7478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.488" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 169.190484][ T28] audit: type=1800 audit(1793195810.217:48): pid=7492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.488" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 169.211239][ T7475] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 169.360930][ T7305] udevd[7305]: symlink '../../loop3' '/dev/disk/by-diskseq/143.tmp-b7:3' failed: Read-only file system [ 169.382847][ T7305] udevd[7305]: symlink '../../loop3' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:3' failed: Read-only file system [ 169.462989][ T5792] udevd[5792]: symlink '../../loop1' '/dev/disk/by-diskseq/144.tmp-b7:1' failed: Read-only file system [ 169.513851][ T5792] udevd[5792]: symlink '../../loop1' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:1' failed: Read-only file system [ 169.612476][ T7305] udevd[7305]: symlink '../../loop3' '/dev/disk/by-diskseq/143.tmp-b7:3' failed: Read-only file system [ 169.644372][ T7305] udevd[7305]: symlink '../../loop3' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:3' failed: Read-only file system [ 169.702410][ T5789] (syz-executor,5789,1):ocfs2_inode_is_valid_to_delete:919 ERROR: Skipping delete of system file 66 [ 169.760498][ T5789] ocfs2: Unmounting device (7,3) on (node local) [ 169.763164][ T5792] udevd[5792]: symlink '../../loop1' '/dev/disk/by-diskseq/144.tmp-b7:1' failed: Read-only file system [ 169.826801][ T5792] udevd[5792]: symlink '../../loop1' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:1' failed: Read-only file system [ 169.876112][ T7305] udevd[7305]: symlink '../../loop3' '/dev/disk/by-diskseq/143.tmp-b7:3' failed: Read-only file system [ 169.949652][ T7305] udevd[7305]: symlink '../../loop3' '/dev/disk/by-diskseq/143.tmp-b7:3' failed: Read-only file system [ 170.795767][ T7534] tipc: Started in network mode [ 170.805064][ T7534] tipc: Node identity 7f000001, cluster identity 4711 [ 170.822454][ T7534] tipc: New replicast peer: 172.20.20.12 [ 170.832896][ T7534] tipc: Enabled bearer , priority 10 [ 171.114715][ T7525] loop2: detected capacity change from 0 to 32768 [ 171.186083][ T7525] JBD2: Ignoring recovery information on journal [ 171.269685][ T7525] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 171.374646][ T7540] FAULT_INJECTION: forcing a failure. [ 171.374646][ T7540] name failslab, interval 1, probability 0, space 0, times 0 [ 171.415203][ T7540] CPU: 1 PID: 7540 Comm: syz.4.503 Not tainted syzkaller #0 [ 171.422580][ T7540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 171.432690][ T7540] Call Trace: [ 171.436015][ T7540] [ 171.438995][ T7540] dump_stack_lvl+0x18c/0x250 [ 171.443739][ T7540] ? show_regs_print_info+0x20/0x20 [ 171.449011][ T7540] ? load_image+0x420/0x420 [ 171.453586][ T7540] ? __might_sleep+0xe0/0xe0 [ 171.458261][ T7540] ? __lock_acquire+0x7eb0/0x7eb0 [ 171.463347][ T7540] should_fail_ex+0x394/0x4c0 [ 171.468091][ T7540] should_failslab+0x9/0x20 [ 171.472649][ T7540] slab_pre_alloc_hook+0x59/0x300 [ 171.477742][ T7540] kmem_cache_alloc+0x5a/0x2d0 [ 171.482558][ T7540] ? locks_get_lock_context+0x116/0x370 [ 171.490712][ T7540] locks_get_lock_context+0x116/0x370 [ 171.496155][ T7540] posix_lock_inode+0x114/0x3270 [ 171.501133][ T7540] ? aa_path_link+0xf80/0xf80 [ 171.505845][ T7540] ? lockdep_softirqs_off+0x440/0x440 [ 171.511250][ T7540] ? slab_post_alloc_hook+0x86/0x4d0 [ 171.516557][ T7540] ? end_current_label_crit_section+0x149/0x170 [ 171.522846][ T7540] ? posix_lock_file+0x50/0x50 [ 171.527664][ T7540] ? bpf_lsm_file_lock+0x9/0x10 [ 171.532551][ T7540] fcntl_setlk+0x9c0/0x1070 [ 171.537110][ T7540] ? vfs_lock_file+0x110/0x110 [ 171.541914][ T7540] ? __might_fault+0xaa/0x120 [ 171.546615][ T7540] ? __might_fault+0xc6/0x120 [ 171.551419][ T7540] ? __might_fault+0xaa/0x120 [ 171.556137][ T7540] do_fcntl+0x8c1/0x1500 [ 171.560419][ T7540] ? kill_fasync+0x4b0/0x4b0 [ 171.565046][ T7540] ? __fget_files+0x28/0x460 [ 171.569677][ T7540] ? __fget_files+0x3fc/0x460 [ 171.574393][ T7540] ? tomoyo_file_fcntl+0x7b/0x220 [ 171.579462][ T7540] ? bpf_lsm_file_fcntl+0x9/0x10 [ 171.584430][ T7540] ? security_file_fcntl+0x80/0xa0 [ 171.589590][ T7540] __se_sys_fcntl+0xc9/0x1a0 [ 171.594226][ T7540] do_syscall_64+0x55/0xb0 [ 171.598675][ T7540] ? clear_bhb_loop+0x40/0x90 [ 171.603393][ T7540] ? clear_bhb_loop+0x40/0x90 [ 171.608108][ T7540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.614035][ T7540] RIP: 0033:0x7f87e479f559 [ 171.618485][ T7540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.638134][ T7540] RSP: 002b:00007f87e5594028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 171.646586][ T7540] RAX: ffffffffffffffda RBX: 00007f87e4a25fa0 RCX: 00007f87e479f559 [ 171.654588][ T7540] RDX: 0000200000000400 RSI: 0000000000000006 RDI: 0000000000000003 [ 171.662590][ T7540] RBP: 00007f87e4836b20 R08: 0000000000000000 R09: 0000000000000000 [ 171.670586][ T7540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.678716][ T7540] R13: 00007f87e4a26038 R14: 00007f87e4a25fa0 R15: 00007ffc18bb6118 [ 171.686753][ T7540] [ 171.865275][ T5873] tipc: Node number set to 2130706433 [ 172.003463][ T5788] (syz-executor,5788,0):ocfs2_inode_is_valid_to_delete:919 ERROR: Skipping delete of system file 66 [ 172.047913][ T5788] ocfs2: Unmounting device (7,2) on (node local) [ 172.122132][ T7529] loop1: detected capacity change from 0 to 32768 [ 172.199963][ T28] audit: type=1800 audit(1793195813.217:49): pid=7529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.498" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 172.369924][ T28] audit: type=1800 audit(1793195813.397:50): pid=7545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.498" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 173.217047][ T7559] tipc: Started in network mode [ 173.233825][ T7559] tipc: Node identity 7f000001, cluster identity 4711 [ 173.264384][ T7559] tipc: New replicast peer: 172.20.20.12 [ 173.294647][ T7559] tipc: Enabled bearer , priority 10 [ 173.513216][ T7551] loop4: detected capacity change from 0 to 32768 [ 173.597027][ T28] audit: type=1800 audit(1793195814.627:51): pid=7551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.515" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 173.684771][ T28] audit: type=1800 audit(1793195814.707:52): pid=7570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.515" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 173.721262][ T7568] FAULT_INJECTION: forcing a failure. [ 173.721262][ T7568] name failslab, interval 1, probability 0, space 0, times 0 [ 173.765619][ T7568] CPU: 1 PID: 7568 Comm: syz.2.513 Not tainted syzkaller #0 [ 173.772985][ T7568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 173.783093][ T7568] Call Trace: [ 173.786410][ T7568] [ 173.789377][ T7568] dump_stack_lvl+0x18c/0x250 [ 173.794120][ T7568] ? show_regs_print_info+0x20/0x20 [ 173.799399][ T7568] ? load_image+0x420/0x420 [ 173.803935][ T7568] ? __might_sleep+0xe0/0xe0 [ 173.808566][ T7568] ? __lock_acquire+0x7eb0/0x7eb0 [ 173.813633][ T7568] should_fail_ex+0x394/0x4c0 [ 173.818383][ T7568] should_failslab+0x9/0x20 [ 173.822920][ T7568] slab_pre_alloc_hook+0x59/0x300 [ 173.827981][ T7568] kmem_cache_alloc+0x5a/0x2d0 [ 173.832770][ T7568] ? locks_get_lock_context+0x116/0x370 [ 173.838358][ T7568] locks_get_lock_context+0x116/0x370 [ 173.843782][ T7568] posix_lock_inode+0x114/0x3270 [ 173.848766][ T7568] ? aa_path_link+0xf80/0xf80 [ 173.853502][ T7568] ? lockdep_softirqs_off+0x440/0x440 [ 173.858945][ T7568] ? slab_post_alloc_hook+0x86/0x4d0 [ 173.864255][ T7568] ? end_current_label_crit_section+0x149/0x170 [ 173.870539][ T7568] ? posix_lock_file+0x50/0x50 [ 173.875350][ T7568] ? bpf_lsm_file_lock+0x9/0x10 [ 173.880247][ T7568] fcntl_setlk+0x9c0/0x1070 [ 173.884807][ T7568] ? vfs_lock_file+0x110/0x110 [ 173.889615][ T7568] ? __might_fault+0xaa/0x120 [ 173.894333][ T7568] ? __might_fault+0xc6/0x120 [ 173.899044][ T7568] ? __might_fault+0xaa/0x120 [ 173.903772][ T7568] do_fcntl+0x8c1/0x1500 [ 173.908059][ T7568] ? kill_fasync+0x4b0/0x4b0 [ 173.912687][ T7568] ? __fget_files+0x28/0x460 [ 173.917316][ T7568] ? __fget_files+0x3fc/0x460 [ 173.922069][ T7568] ? tomoyo_file_fcntl+0x7b/0x220 [ 173.927141][ T7568] ? bpf_lsm_file_fcntl+0x9/0x10 [ 173.932112][ T7568] ? security_file_fcntl+0x80/0xa0 [ 173.937258][ T7568] __se_sys_fcntl+0xc9/0x1a0 [ 173.941886][ T7568] do_syscall_64+0x55/0xb0 [ 173.946341][ T7568] ? clear_bhb_loop+0x40/0x90 [ 173.951054][ T7568] ? clear_bhb_loop+0x40/0x90 [ 173.955769][ T7568] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.961696][ T7568] RIP: 0033:0x7f1eff19f559 [ 173.966140][ T7568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.985788][ T7568] RSP: 002b:00007f1f00089028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 173.994264][ T7568] RAX: ffffffffffffffda RBX: 00007f1eff425fa0 RCX: 00007f1eff19f559 [ 174.002266][ T7568] RDX: 0000200000000400 RSI: 0000000000000006 RDI: 0000000000000003 [ 174.010279][ T7568] RBP: 00007f1eff236b20 R08: 0000000000000000 R09: 0000000000000000 [ 174.018296][ T7568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.026321][ T7568] R13: 00007f1eff426038 R14: 00007f1eff425fa0 R15: 00007ffec77fdab8 [ 174.034377][ T7568] [ 174.315132][ T5894] tipc: Node number set to 2130706433 [ 174.656613][ T7305] udevd[7305]: symlink '../../loop4' '/dev/disk/by-diskseq/151.tmp-b7:4' failed: Read-only file system [ 174.700632][ T7305] udevd[7305]: symlink '../../loop4' '/dev/disk/by-diskseq/151.tmp-b7:4' failed: Read-only file system [ 175.091782][ T7579] loop4: detected capacity change from 0 to 32768 [ 175.177484][ T28] audit: type=1800 audit(1793195816.207:53): pid=7579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.525" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 175.260731][ T28] audit: type=1800 audit(1793195816.287:54): pid=7592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.525" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 175.300865][ T7305] udevd[7305]: symlink '../../loop4' '/dev/disk/by-diskseq/153.tmp-b7:4' failed: Read-only file system [ 175.324754][ T7305] udevd[7305]: symlink '../../loop4' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:4' failed: Read-only file system [ 175.474893][ T7305] udevd[7305]: symlink '../../loop4' '/dev/disk/by-diskseq/153.tmp-b7:4' failed: Read-only file system [ 175.516059][ T7305] udevd[7305]: symlink '../../loop4' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:4' failed: Read-only file system [ 175.639126][ T7599] tipc: Started in network mode [ 175.644212][ T7599] tipc: Node identity 7f000001, cluster identity 4711 [ 175.651854][ T7599] tipc: New replicast peer: 172.20.20.12 [ 175.674141][ T7599] tipc: Enabled bearer , priority 10 [ 175.775200][ T5873] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 175.789149][ T7305] udevd[7305]: symlink '../../loop4' '/dev/disk/by-diskseq/153.tmp-b7:4' failed: Read-only file system [ 175.842931][ T7305] udevd[7305]: symlink '../../loop4' '/dev/disk/by-diskseq/153.tmp-b7:4' failed: Read-only file system [ 176.012973][ T5873] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 176.023986][ T5873] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.051328][ T5873] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 176.076267][ T5873] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.104261][ T5873] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 176.131088][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 176.158551][ T5873] usb 3-1: Product: syz [ 176.162787][ T5873] usb 3-1: Manufacturer: syz [ 176.181924][ T5873] cdc_wdm 3-1:1.0: skipping garbage [ 176.206250][ T5873] cdc_wdm 3-1:1.0: skipping garbage [ 176.221986][ T5873] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 176.233773][ T5873] cdc_wdm 3-1:1.0: Unknown control protocol [ 176.456658][ T9] usb 3-1: USB disconnect, device number 6 [ 176.771807][ T7604] loop4: detected capacity change from 0 to 32768 [ 176.785913][ T1198] tipc: Node number set to 2130706433 [ 176.827970][ T28] audit: type=1800 audit(1793195817.857:55): pid=7604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.535" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 176.911959][ T28] audit: type=1800 audit(1793195817.937:56): pid=7614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.535" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 176.932968][ T7305] udevd[7305]: symlink '../../loop4' '/dev/disk/by-diskseq/155.tmp-b7:4' failed: Read-only file system [ 176.954625][ T7305] udevd[7305]: symlink '../../loop4' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:4' failed: Read-only file system [ 177.185168][ T5873] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 177.273608][ T7617] FAULT_INJECTION: forcing a failure. [ 177.273608][ T7617] name failslab, interval 1, probability 0, space 0, times 0 [ 177.286686][ T7617] CPU: 1 PID: 7617 Comm: syz.3.533 Not tainted syzkaller #0 [ 177.294042][ T7617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 177.304177][ T7617] Call Trace: [ 177.307487][ T7617] [ 177.310444][ T7617] dump_stack_lvl+0x18c/0x250 [ 177.315165][ T7617] ? show_regs_print_info+0x20/0x20 [ 177.320422][ T7617] ? load_image+0x420/0x420 [ 177.324955][ T7617] ? __might_sleep+0xe0/0xe0 [ 177.329578][ T7617] ? __lock_acquire+0x7eb0/0x7eb0 [ 177.334658][ T7617] should_fail_ex+0x394/0x4c0 [ 177.339367][ T7617] should_failslab+0x9/0x20 [ 177.343891][ T7617] slab_pre_alloc_hook+0x59/0x300 [ 177.348951][ T7617] ? __register_sysctl_table+0x71/0x1210 [ 177.354642][ T7617] ? __register_sysctl_table+0x71/0x1210 [ 177.360311][ T7617] __kmem_cache_alloc_node+0x53/0x260 [ 177.365725][ T7617] ? __register_sysctl_table+0x71/0x1210 [ 177.371458][ T7617] __kmalloc+0xa7/0x240 [ 177.375670][ T7617] __register_sysctl_table+0x71/0x1210 [ 177.381212][ T7617] ? register_net_sysctl_sz+0x438/0x490 [ 177.386816][ T7617] sysctl_core_net_init+0xff/0x160 [ 177.391972][ T7617] ops_init+0x391/0x640 [ 177.396177][ T7617] setup_net+0x3b6/0xa20 [ 177.400483][ T7617] ? copy_net_ns+0x530/0x530 [ 177.405141][ T7617] ? copy_net_ns+0x347/0x530 [ 177.409775][ T7617] ? down_read_killable+0x1d0/0x340 [ 177.415014][ T7617] copy_net_ns+0x361/0x530 [ 177.419490][ T7617] create_new_namespaces+0x3ce/0x700 [ 177.424844][ T7617] unshare_nsproxy_namespaces+0x11a/0x160 [ 177.430616][ T7617] ksys_unshare+0x4fa/0x8f0 [ 177.435161][ T7617] ? sighand_ctor+0x50/0x50 [ 177.439698][ T7617] ? lock_chain_count+0x20/0x20 [ 177.444596][ T7617] ? syscall_enter_from_user_mode+0x25/0x80 [ 177.450535][ T7617] __x64_sys_unshare+0x38/0x40 [ 177.455337][ T7617] do_syscall_64+0x55/0xb0 [ 177.459815][ T7617] ? clear_bhb_loop+0x40/0x90 [ 177.464537][ T7617] ? clear_bhb_loop+0x40/0x90 [ 177.469279][ T7617] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.475222][ T7617] RIP: 0033:0x7fb3a799f559 [ 177.479675][ T7617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.499315][ T7617] RSP: 002b:00007fb3a8882028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 177.507783][ T7617] RAX: ffffffffffffffda RBX: 00007fb3a7c25fa0 RCX: 00007fb3a799f559 [ 177.515786][ T7617] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004c000680 [ 177.523785][ T7617] RBP: 00007fb3a7a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 177.531785][ T7617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.539783][ T7617] R13: 00007fb3a7c26038 R14: 00007fb3a7c25fa0 R15: 00007ffe0f652768 [ 177.547799][ T7617] [ 177.675442][ T5873] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 177.684126][ T5873] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.738959][ T5873] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 177.759873][ T5873] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.810085][ T5873] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 177.829538][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 177.845104][ T5873] usb 3-1: Product: syz [ 177.849375][ T5873] usb 3-1: Manufacturer: syz [ 177.875914][ T5873] cdc_wdm 3-1:1.0: skipping garbage [ 177.881197][ T5873] cdc_wdm 3-1:1.0: skipping garbage [ 177.905588][ T5873] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 177.915060][ T5873] cdc_wdm 3-1:1.0: Unknown control protocol [ 177.977742][ T7622] team0 (unregistering): Port device team_slave_0 removed [ 177.997547][ T7622] team0 (unregistering): Port device team_slave_1 removed [ 178.101118][ T5873] usb 3-1: USB disconnect, device number 7 [ 179.468098][ T7655] FAULT_INJECTION: forcing a failure. [ 179.468098][ T7655] name failslab, interval 1, probability 0, space 0, times 0 [ 179.505233][ T7655] CPU: 0 PID: 7655 Comm: syz.2.543 Not tainted syzkaller #0 [ 179.512607][ T7655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 179.522717][ T7655] Call Trace: [ 179.526048][ T7655] [ 179.529058][ T7655] dump_stack_lvl+0x18c/0x250 [ 179.533839][ T7655] ? show_regs_print_info+0x20/0x20 [ 179.539113][ T7655] ? load_image+0x420/0x420 [ 179.543674][ T7655] ? __might_sleep+0xe0/0xe0 [ 179.548325][ T7655] ? __lock_acquire+0x7eb0/0x7eb0 [ 179.553408][ T7655] should_fail_ex+0x394/0x4c0 [ 179.558149][ T7655] should_failslab+0x9/0x20 [ 179.562707][ T7655] slab_pre_alloc_hook+0x59/0x300 [ 179.567787][ T7655] ? io_rsrc_node_alloc+0xff/0x1c0 [ 179.572956][ T7655] __kmem_cache_alloc_node+0x53/0x260 [ 179.578384][ T7655] ? io_rsrc_node_alloc+0xff/0x1c0 [ 179.583550][ T7655] kmalloc_trace+0x2a/0xe0 [ 179.588032][ T7655] io_rsrc_node_alloc+0xff/0x1c0 [ 179.593040][ T7655] io_uring_create+0x74b/0x1330 [ 179.597993][ T7655] __se_sys_io_uring_setup+0x29f/0x2b0 [ 179.603520][ T7655] ? __x64_sys_io_uring_setup+0x60/0x60 [ 179.609152][ T7655] ? lockdep_hardirqs_on+0x98/0x150 [ 179.614429][ T7655] do_syscall_64+0x55/0xb0 [ 179.618903][ T7655] ? clear_bhb_loop+0x40/0x90 [ 179.623637][ T7655] ? clear_bhb_loop+0x40/0x90 [ 179.628381][ T7655] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.634365][ T7655] RIP: 0033:0x7f1eff19f559 [ 179.638877][ T7655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.658624][ T7655] RSP: 002b:00007f1f00089028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 179.667114][ T7655] RAX: ffffffffffffffda RBX: 00007f1eff425fa0 RCX: 00007f1eff19f559 [ 179.675134][ T7655] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000027 [ 179.683173][ T7655] RBP: 00007f1eff236b20 R08: 0000000000000000 R09: 0000000000000000 [ 179.691196][ T7655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.699215][ T7655] R13: 00007f1eff426038 R14: 00007f1eff425fa0 R15: 00007ffec77fdab8 [ 179.707277][ T7655] [ 179.883674][ T7658] team0 (unregistering): Port device team_slave_0 removed [ 179.930020][ T7658] team0 (unregistering): Port device team_slave_1 removed [ 180.001261][ T7665] loop2: detected capacity change from 0 to 512 [ 180.020989][ T7665] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.067955][ T7305] udevd[7305]: symlink '../../loop2' '/dev/disk/by-diskseq/157.tmp-b7:2' failed: Read-only file system [ 180.089474][ T7665] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.109360][ T7305] udevd[7305]: symlink '../../loop2' '/dev/disk/by-label/\x86\x5b.tmp-b7:2' failed: Read-only file system [ 180.131789][ T7665] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 180.176136][ T7665] EXT4-fs (loop2): 1 truncate cleaned up [ 180.184307][ T7665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.297202][ T7656] loop1: detected capacity change from 0 to 32768 [ 180.306759][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.363926][ T28] audit: type=1800 audit(1793195821.387:57): pid=7656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.544" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 180.430971][ T5792] udevd[5792]: symlink '../../loop2' '/dev/disk/by-diskseq/157.tmp-b7:2' failed: Read-only file system [ 180.470653][ T28] audit: type=1800 audit(1793195821.497:58): pid=7674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.544" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 180.534774][ T5792] udevd[5792]: symlink '../../loop2' '/dev/disk/by-diskseq/157.tmp-b7:2' failed: Read-only file system [ 180.595576][ T7305] udevd[7305]: symlink '../../loop1' '/dev/disk/by-diskseq/158.tmp-b7:1' failed: Read-only file system [ 180.613759][ T7305] udevd[7305]: symlink '../../loop1' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:1' failed: Read-only file system [ 180.776655][ T7305] udevd[7305]: symlink '../../loop1' '/dev/disk/by-diskseq/158.tmp-b7:1' failed: Read-only file system [ 180.801169][ T7305] udevd[7305]: symlink '../../loop1' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:1' failed: Read-only file system [ 180.833617][ T7680] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 180.928545][ T7305] udevd[7305]: symlink '../../loop1' '/dev/disk/by-diskseq/158.tmp-b7:1' failed: Read-only file system [ 180.984782][ T7305] udevd[7305]: symlink '../../loop1' '/dev/disk/by-diskseq/158.tmp-b7:1' failed: Read-only file system [ 181.579923][ T7697] FAULT_INJECTION: forcing a failure. [ 181.579923][ T7697] name failslab, interval 1, probability 0, space 0, times 0 [ 181.593822][ T7697] CPU: 1 PID: 7697 Comm: syz.3.559 Not tainted syzkaller #0 [ 181.601180][ T7697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 181.611280][ T7697] Call Trace: [ 181.614611][ T7697] [ 181.617593][ T7697] dump_stack_lvl+0x18c/0x250 [ 181.622332][ T7697] ? show_regs_print_info+0x20/0x20 [ 181.627587][ T7697] ? load_image+0x420/0x420 [ 181.632168][ T7697] ? __lock_acquire+0x7eb0/0x7eb0 [ 181.637243][ T7697] ? kasan_set_track+0x5f/0x70 [ 181.642064][ T7697] ? kasan_set_track+0x4e/0x70 [ 181.646973][ T7697] ? __kasan_kmalloc+0x8f/0xa0 [ 181.651805][ T7697] should_fail_ex+0x394/0x4c0 [ 181.656545][ T7697] should_failslab+0x9/0x20 [ 181.661095][ T7697] slab_pre_alloc_hook+0x59/0x300 [ 181.666257][ T7697] kmem_cache_alloc_lru+0x4d/0x2c0 [ 181.671417][ T7697] ? new_inode_pseudo+0x82/0x1d0 [ 181.676412][ T7697] new_inode_pseudo+0x82/0x1d0 [ 181.681236][ T7697] alloc_anon_inode+0x1e/0x2f0 [ 181.686058][ T7697] anon_inode_make_secure_inode+0x99/0x160 [ 181.691947][ T7697] ? do_compat_epoll_pwait+0x1c0/0x1c0 [ 181.697464][ T7697] ? __might_fault+0xaa/0x120 [ 181.702203][ T7697] __anon_inode_getfile+0xce/0x200 [ 181.707375][ T7697] io_uring_create+0xbec/0x1330 [ 181.712293][ T7697] __se_sys_io_uring_setup+0x29f/0x2b0 [ 181.717829][ T7697] ? __x64_sys_io_uring_setup+0x60/0x60 [ 181.723451][ T7697] ? lockdep_hardirqs_on+0x98/0x150 [ 181.728713][ T7697] do_syscall_64+0x55/0xb0 [ 181.733197][ T7697] ? clear_bhb_loop+0x40/0x90 [ 181.737941][ T7697] ? clear_bhb_loop+0x40/0x90 [ 181.742680][ T7697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.748636][ T7697] RIP: 0033:0x7fb3a799f559 [ 181.753106][ T7697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.772773][ T7697] RSP: 002b:00007fb3a8882028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 181.781243][ T7697] RAX: ffffffffffffffda RBX: 00007fb3a7c25fa0 RCX: 00007fb3a799f559 [ 181.789299][ T7697] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000027 [ 181.797328][ T7697] RBP: 00007fb3a7a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 181.805345][ T7697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.813367][ T7697] R13: 00007fb3a7c26038 R14: 00007fb3a7c25fa0 R15: 00007ffe0f652768 [ 181.821407][ T7697] [ 182.058266][ T7702] loop3: detected capacity change from 0 to 256 [ 182.104424][ T7702] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1f3a413c, utbl_chksum : 0xe619d30d) [ 182.741341][ T7704] loop4: detected capacity change from 0 to 32768 [ 182.792457][ T28] audit: type=1800 audit(1793195823.817:59): pid=7704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.565" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 182.927477][ T28] audit: type=1800 audit(1793195823.957:60): pid=7717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.565" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 183.414836][ T7727] FAULT_INJECTION: forcing a failure. [ 183.414836][ T7727] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 183.432812][ T7727] CPU: 1 PID: 7727 Comm: syz.1.572 Not tainted syzkaller #0 [ 183.440173][ T7727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 183.450279][ T7727] Call Trace: [ 183.453600][ T7727] [ 183.456571][ T7727] dump_stack_lvl+0x18c/0x250 [ 183.461347][ T7727] ? show_regs_print_info+0x20/0x20 [ 183.466608][ T7727] ? load_image+0x420/0x420 [ 183.471170][ T7727] ? __lock_acquire+0x7eb0/0x7eb0 [ 183.476255][ T7727] should_fail_ex+0x394/0x4c0 [ 183.481010][ T7727] _copy_to_user+0x2f/0xa0 [ 183.485488][ T7727] io_uring_create+0xb30/0x1330 [ 183.490403][ T7727] __se_sys_io_uring_setup+0x29f/0x2b0 [ 183.495933][ T7727] ? __x64_sys_io_uring_setup+0x60/0x60 [ 183.501567][ T7727] ? lockdep_hardirqs_on+0x98/0x150 [ 183.506852][ T7727] do_syscall_64+0x55/0xb0 [ 183.511357][ T7727] ? clear_bhb_loop+0x40/0x90 [ 183.516097][ T7727] ? clear_bhb_loop+0x40/0x90 [ 183.520852][ T7727] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.526801][ T7727] RIP: 0033:0x7f4988f9f559 [ 183.531258][ T7727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.550924][ T7727] RSP: 002b:00007f4989ebd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 183.557872][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 183.559366][ T7727] RAX: ffffffffffffffda RBX: 00007f4989225fa0 RCX: 00007f4988f9f559 [ 183.574877][ T7727] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000027 [ 183.582916][ T7727] RBP: 00007f4989036b20 R08: 0000000000000000 R09: 0000000000000000 [ 183.590966][ T7727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.599001][ T7727] R13: 00007f4989226038 R14: 00007f4989225fa0 R15: 00007ffe3ba182e8 [ 183.607078][ T7727] [ 184.017577][ T7747] loop1: detected capacity change from 0 to 256 [ 184.053671][ T7747] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 184.103334][ T7747] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 184.121282][ T7747] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 184.162793][ T7747] exFAT-fs (loop1): failed to load alloc-bitmap [ 184.176645][ T7747] exFAT-fs (loop1): failed to recognize exfat type [ 184.736427][ T7766] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 184.850735][ T7769] loop3: detected capacity change from 0 to 2048 [ 184.917582][ T7305] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 185.325957][ T7779] netlink: 20 bytes leftover after parsing attributes in process `syz.2.590'. [ 185.350585][ T7779] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.358042][ T7779] IPv6: NLM_F_CREATE should be set when creating new route [ 185.366582][ T7779] netlink: 20 bytes leftover after parsing attributes in process `syz.2.590'. [ 185.548949][ T7788] FAULT_INJECTION: forcing a failure. [ 185.548949][ T7788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.562603][ T7788] CPU: 1 PID: 7788 Comm: syz.4.598 Not tainted syzkaller #0 [ 185.569946][ T7788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 185.580049][ T7788] Call Trace: [ 185.583362][ T7788] [ 185.586322][ T7788] dump_stack_lvl+0x18c/0x250 [ 185.591044][ T7788] ? show_regs_print_info+0x20/0x20 [ 185.596292][ T7788] ? load_image+0x420/0x420 [ 185.600860][ T7788] ? __might_fault+0xaa/0x120 [ 185.605575][ T7788] ? __lock_acquire+0x7eb0/0x7eb0 [ 185.610635][ T7788] ? __virt_addr_valid+0x10c/0x380 [ 185.615782][ T7788] should_fail_ex+0x394/0x4c0 [ 185.620494][ T7788] _copy_to_user+0x2f/0xa0 [ 185.624951][ T7788] bpf_verifier_vlog+0x432/0x840 [ 185.629971][ T7788] __btf_verifier_log+0xe3/0x140 [ 185.634950][ T7788] ? sort_r+0x17f5/0x1810 [ 185.639329][ T7788] ? btf_check_sec_info+0x350/0x350 [ 185.644586][ T7788] btf_datasec_check_meta+0x70b/0xb50 [ 185.650031][ T7788] btf_check_all_metas+0x371/0xaf0 [ 185.655189][ T7788] btf_parse_type_sec+0xfc/0x1960 [ 185.660238][ T7788] ? btf_check_sec_info+0x350/0x350 [ 185.665483][ T7788] ? __virt_addr_valid+0x10c/0x380 [ 185.670641][ T7788] ? btf_verifier_log+0x1a0/0x1a0 [ 185.675706][ T7788] ? btf_parse_hdr+0x545/0x700 [ 185.680509][ T7788] ? btf_parse_str_sec+0x20d/0x2a0 [ 185.685668][ T7788] btf_new_fd+0x440/0x9e0 [ 185.690040][ T7788] ? bpf_btf_show_fdinfo+0x80/0x80 [ 185.695189][ T7788] ? capable+0x88/0xe0 [ 185.699297][ T7788] __sys_bpf+0x670/0x890 [ 185.703577][ T7788] ? bpf_link_show_fdinfo+0x560/0x560 [ 185.709002][ T7788] ? lock_chain_count+0x20/0x20 [ 185.713890][ T7788] __x64_sys_bpf+0x7c/0x90 [ 185.718343][ T7788] do_syscall_64+0x55/0xb0 [ 185.722796][ T7788] ? clear_bhb_loop+0x40/0x90 [ 185.727507][ T7788] ? clear_bhb_loop+0x40/0x90 [ 185.732225][ T7788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.738152][ T7788] RIP: 0033:0x7f87e479f559 [ 185.742622][ T7788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.762265][ T7788] RSP: 002b:00007f87e5594028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 185.770713][ T7788] RAX: ffffffffffffffda RBX: 00007f87e4a25fa0 RCX: 00007f87e479f559 [ 185.778714][ T7788] RDX: 0000000000000028 RSI: 00002000000005c0 RDI: 0000000000000012 [ 185.786716][ T7788] RBP: 00007f87e4836b20 R08: 0000000000000000 R09: 0000000000000000 [ 185.794715][ T7788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.802707][ T7788] R13: 00007f87e4a26038 R14: 00007f87e4a25fa0 R15: 00007ffc18bb6118 [ 185.810727][ T7788] [ 186.440885][ T7807] loop4: detected capacity change from 0 to 2048 [ 186.518954][ T7305] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 186.545874][ T7810] netlink: 20 bytes leftover after parsing attributes in process `syz.3.606'. [ 186.606998][ T7810] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.614318][ T7810] IPv6: NLM_F_CREATE should be set when creating new route [ 186.655511][ T7810] netlink: 20 bytes leftover after parsing attributes in process `syz.3.606'. [ 188.675277][ T1198] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 188.855078][ T1198] usb 3-1: Using ep0 maxpacket: 8 [ 188.870169][ T1198] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 188.889924][ T1198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.908368][ T1198] usb 3-1: Product: syz [ 188.921367][ T1198] usb 3-1: Manufacturer: syz [ 188.926869][ T1198] usb 3-1: SerialNumber: syz [ 188.943576][ T1198] usb 3-1: config 0 descriptor?? [ 189.173790][ T1198] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 189.185119][ T5923] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 189.244803][ T7891] loop3: detected capacity change from 0 to 128 [ 189.395110][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 189.406463][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.416803][ T5923] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.427848][ T5923] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.437682][ T5923] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 189.450998][ T5923] usb 2-1: config 0 interface 0 has no altsetting 0 [ 189.457794][ T5923] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 189.467076][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.479559][ T5923] usb 2-1: config 0 descriptor?? [ 189.915538][ T5923] logitech-djreceiver 0003:046D:C53A.0006: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.1-1/input0 [ 190.121347][ T174] usb 2-1: USB disconnect, device number 10 [ 190.601026][ T1198] usb write operation failed. (-71) [ 190.611359][ T1198] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 190.623436][ T1198] dvbdev: DVB: registering new adapter (Terratec H7) [ 190.630499][ T1198] usb 3-1: media controller created [ 190.637686][ T1198] usb read operation failed. (-71) [ 190.644400][ T1198] usb write operation failed. (-71) [ 190.661904][ T1198] dvb_usb_az6007: probe of 3-1:0.0 failed with error -5 [ 190.680931][ T1198] usb 3-1: USB disconnect, device number 8 [ 191.762081][ T7937] ip_tables: iptables: counters copy to user failed while replacing table [ 191.817731][ T7937] syzkaller1: entered promiscuous mode [ 191.823294][ T7937] syzkaller1: entered allmulticast mode [ 192.106071][ T7945] ip6gre1: entered promiscuous mode [ 192.114062][ T7945] ip6gre1: entered allmulticast mode [ 192.316622][ T34] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 192.324423][ T34] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 192.345351][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 192.860337][ T7978] netlink: 'syz.1.647': attribute type 13 has an invalid length. [ 193.235657][ T174] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.322015][ T174] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.415115][ T7992] FAULT_INJECTION: forcing a failure. [ 193.415115][ T7992] name failslab, interval 1, probability 0, space 0, times 0 [ 193.432499][ T7992] CPU: 0 PID: 7992 Comm: syz.4.648 Not tainted syzkaller #0 [ 193.439849][ T7992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 193.449955][ T7992] Call Trace: [ 193.453274][ T7992] [ 193.456259][ T7992] dump_stack_lvl+0x18c/0x250 [ 193.460997][ T7992] ? show_regs_print_info+0x20/0x20 [ 193.466245][ T7992] ? load_image+0x420/0x420 [ 193.470792][ T7992] ? __might_sleep+0xe0/0xe0 [ 193.475447][ T7992] ? __lock_acquire+0x7eb0/0x7eb0 [ 193.480526][ T7992] should_fail_ex+0x394/0x4c0 [ 193.485255][ T7992] should_failslab+0x9/0x20 [ 193.489801][ T7992] slab_pre_alloc_hook+0x59/0x300 [ 193.494874][ T7992] ? sctp_auth_init+0x1eb/0x460 [ 193.499796][ T7992] __kmem_cache_alloc_node+0x53/0x260 [ 193.505223][ T7992] ? sctp_auth_init+0x1eb/0x460 [ 193.510145][ T7992] kmalloc_trace+0x2a/0xe0 [ 193.514628][ T7992] sctp_auth_init+0x1eb/0x460 [ 193.519369][ T7992] sctp_setsockopt_auth_supported+0x302/0x530 [ 193.525691][ T7992] sctp_setsockopt+0x571/0x11e0 [ 193.530592][ T7992] ? sock_common_recvmsg+0x190/0x190 [ 193.535941][ T7992] do_sock_setsockopt+0x175/0x1a0 [ 193.541012][ T7992] ? __fdget+0x180/0x210 [ 193.545312][ T7992] __x64_sys_setsockopt+0x182/0x200 [ 193.550572][ T7992] do_syscall_64+0x55/0xb0 [ 193.555038][ T7992] ? clear_bhb_loop+0x40/0x90 [ 193.559768][ T7992] ? clear_bhb_loop+0x40/0x90 [ 193.564502][ T7992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.570446][ T7992] RIP: 0033:0x7f87e479f559 [ 193.574907][ T7992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.594552][ T7992] RSP: 002b:00007f87e5594028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 193.603012][ T7992] RAX: ffffffffffffffda RBX: 00007f87e4a25fa0 RCX: 00007f87e479f559 [ 193.611010][ T7992] RDX: 0000000000000081 RSI: 0000000000000084 RDI: 0000000000000004 [ 193.619097][ T7992] RBP: 00007f87e4836b20 R08: 0000000000000008 R09: 0000000000000000 [ 193.627097][ T7992] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000000 [ 193.635126][ T7992] R13: 00007f87e4a26038 R14: 00007f87e4a25fa0 R15: 00007ffc18bb6118 [ 193.643150][ T7992] [ 194.322927][ T8014] loop1: detected capacity change from 0 to 16 [ 194.339959][ T8014] erofs: Unknown parameter 'Ø' [ 194.391140][ T7305] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 194.444604][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.451448][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.122946][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 196.802319][ T8071] gadgetfs: bound to dummy_udc driver [ 197.036150][ T8081] loop3: detected capacity change from 0 to 512 [ 197.072670][ T5787] syz-executor (5787) used greatest stack depth: 20424 bytes left [ 197.140001][ T70] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.159337][ T8081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.195540][ T8081] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.269815][ T70] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.351816][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.367992][ T70] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.472894][ T70] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.866128][ T70] tipc: Disabling bearer [ 197.883901][ T70] tipc: Left network mode [ 198.406634][ T8107] FAULT_INJECTION: forcing a failure. [ 198.406634][ T8107] name failslab, interval 1, probability 0, space 0, times 0 [ 198.421725][ T8107] CPU: 1 PID: 8107 Comm: syz.3.691 Not tainted syzkaller #0 [ 198.429107][ T8107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 198.439210][ T8107] Call Trace: [ 198.442530][ T8107] [ 198.445680][ T8107] dump_stack_lvl+0x18c/0x250 [ 198.450438][ T8107] ? show_regs_print_info+0x20/0x20 [ 198.455704][ T8107] ? load_image+0x420/0x420 [ 198.460262][ T8107] ? __might_sleep+0xe0/0xe0 [ 198.464915][ T8107] ? __lock_acquire+0x7eb0/0x7eb0 [ 198.470025][ T8107] should_fail_ex+0x394/0x4c0 [ 198.474771][ T8107] should_failslab+0x9/0x20 [ 198.479324][ T8107] slab_pre_alloc_hook+0x59/0x300 [ 198.484433][ T8107] ? sock_kmalloc+0x96/0xf0 [ 198.488993][ T8107] ? sock_kmalloc+0x96/0xf0 [ 198.493554][ T8107] __kmem_cache_alloc_node+0x53/0x260 [ 198.498973][ T8107] ? ip_mc_leave_group+0x4c0/0x4c0 [ 198.504171][ T8107] ? sock_kmalloc+0x96/0xf0 [ 198.508745][ T8107] __kmalloc+0xa7/0x240 [ 198.512952][ T8107] sock_kmalloc+0x96/0xf0 [ 198.517315][ T8107] ip_mc_source+0x684/0xf60 [ 198.521875][ T8107] do_mcast_group_source+0x4c1/0x550 [ 198.527202][ T8107] ? ip_mcast_join_leave+0x260/0x260 [ 198.532528][ T8107] ? verify_lock_unused+0x140/0x140 [ 198.537764][ T8107] ? verify_lock_unused+0x140/0x140 [ 198.543006][ T8107] ? __mutex_trylock_common+0x160/0x270 [ 198.548601][ T8107] ? __local_bh_enable_ip+0x13a/0x1c0 [ 198.554005][ T8107] ? lockdep_hardirqs_on+0x98/0x150 [ 198.559252][ T8107] ? __local_bh_enable_ip+0x13a/0x1c0 [ 198.564686][ T8107] ? _local_bh_enable+0xa0/0xa0 [ 198.569574][ T8107] do_ip_setsockopt+0x162d/0x2d50 [ 198.574663][ T8107] ? ip_sock_set_pktinfo+0x30/0x30 [ 198.579906][ T8107] ? aa_sk_perm+0x7bb/0x8e0 [ 198.584464][ T8107] ? aa_af_perm+0x330/0x330 [ 198.588998][ T8107] ? __fget_files+0x28/0x460 [ 198.593623][ T8107] ? aa_sock_opt_perm+0x74/0x100 [ 198.598588][ T8107] ip_setsockopt+0x61/0x110 [ 198.603136][ T8107] ? sock_common_recvmsg+0x190/0x190 [ 198.608483][ T8107] do_sock_setsockopt+0x175/0x1a0 [ 198.613536][ T8107] ? __fdget+0x180/0x210 [ 198.617818][ T8107] __x64_sys_setsockopt+0x182/0x200 [ 198.623067][ T8107] do_syscall_64+0x55/0xb0 [ 198.627519][ T8107] ? clear_bhb_loop+0x40/0x90 [ 198.632234][ T8107] ? clear_bhb_loop+0x40/0x90 [ 198.636956][ T8107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.642882][ T8107] RIP: 0033:0x7fb3a799f559 [ 198.647339][ T8107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.666987][ T8107] RSP: 002b:00007fb3a8882028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 198.675438][ T8107] RAX: ffffffffffffffda RBX: 00007fb3a7c25fa0 RCX: 00007fb3a799f559 [ 198.683438][ T8107] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000003 [ 198.691439][ T8107] RBP: 00007fb3a7a36b20 R08: 0000000000000108 R09: 0000000000000000 [ 198.699434][ T8107] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 198.707452][ T8107] R13: 00007fb3a7c26038 R14: 00007fb3a7c25fa0 R15: 00007ffe0f652768 [ 198.715464][ T8107] [ 198.750231][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 198.769246][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 198.785277][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 198.814457][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 198.822604][ T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 198.835196][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 199.101884][ T8108] rxe_eth0 speed is unknown, defaulting to 1000 [ 199.248413][ T8121] gadgetfs: bound to dummy_udc driver [ 199.383075][ T5789] ================================================================== [ 199.391246][ T5789] BUG: KASAN: slab-use-after-free in __mutex_lock+0xfc/0xc80 [ 199.398677][ T5789] Read of size 8 at addr ffff88802d6f5c60 by task syz-executor/5789 [ 199.406709][ T5789] [ 199.409072][ T5789] CPU: 1 PID: 5789 Comm: syz-executor Not tainted syzkaller #0 [ 199.416654][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 199.426753][ T5789] Call Trace: [ 199.430063][ T5789] [ 199.433035][ T5789] dump_stack_lvl+0x18c/0x250 [ 199.437749][ T5789] ? __lock_acquire+0x7eb0/0x7eb0 [ 199.442816][ T5789] ? show_regs_print_info+0x20/0x20 [ 199.448058][ T5789] ? load_image+0x420/0x420 [ 199.452592][ T5789] ? __virt_addr_valid+0x10c/0x380 [ 199.457741][ T5789] ? __virt_addr_valid+0x10c/0x380 [ 199.462888][ T5789] ? __virt_addr_valid+0x10c/0x380 [ 199.468039][ T5789] print_report+0xa8/0x210 [ 199.472500][ T5789] ? __mutex_lock+0xfc/0xc80 [ 199.477163][ T5789] kasan_report+0x117/0x150 [ 199.481714][ T5789] ? tomoyo_check_open_permission+0x384/0x460 [ 199.487826][ T5789] ? __mutex_lock+0xfc/0xc80 [ 199.492464][ T5789] __mutex_lock+0xfc/0xc80 [ 199.496933][ T5789] ? end_current_label_crit_section+0x170/0x170 [ 199.503247][ T5789] ? ep_open+0x4e/0x270 [ 199.507452][ T5789] ? mutex_lock_nested+0x20/0x20 [ 199.512434][ T5789] ? apparmor_file_open+0x5ab/0x760 [ 199.517670][ T5789] ? apparmor_inode_getattr+0x2c0/0x2c0 [ 199.523259][ T5789] ? __rwlock_init+0x150/0x150 [ 199.528059][ T5789] ep_open+0x4e/0x270 [ 199.532082][ T5789] ? do_dentry_open+0x86f/0x14b0 [ 199.537068][ T5789] do_dentry_open+0x880/0x14b0 [ 199.541867][ T5789] ? ep_ioctl+0x1c0/0x1c0 [ 199.546242][ T5789] path_openat+0x284f/0x3270 [ 199.550876][ T5789] ? do_sys_openat2+0xda/0x1d0 [ 199.555672][ T5789] ? __x64_sys_openat+0x139/0x160 [ 199.560737][ T5789] ? verify_lock_unused+0x140/0x140 [ 199.565965][ T5789] ? do_filp_open+0x430/0x430 [ 199.570675][ T5789] do_filp_open+0x1f2/0x430 [ 199.575210][ T5789] ? vfs_tmpfile+0x620/0x620 [ 199.579848][ T5789] ? _raw_spin_unlock+0x28/0x40 [ 199.584733][ T5789] ? alloc_fd+0x590/0x640 [ 199.589102][ T5789] do_sys_openat2+0x134/0x1d0 [ 199.593812][ T5789] ? do_sys_open+0xe0/0xe0 [ 199.598262][ T5789] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 199.604267][ T5789] ? fsnotify_link_count+0xf0/0xf0 [ 199.609405][ T5789] ? lock_chain_count+0x20/0x20 [ 199.614290][ T5789] __x64_sys_openat+0x139/0x160 [ 199.619168][ T5789] do_syscall_64+0x55/0xb0 [ 199.623609][ T5789] ? clear_bhb_loop+0x40/0x90 [ 199.628311][ T5789] ? clear_bhb_loop+0x40/0x90 [ 199.633019][ T5789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.638940][ T5789] RIP: 0033:0x7fb3a795fd8e [ 199.643505][ T5789] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 199.663138][ T5789] RSP: 002b:00007ffe0f650838 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 199.671603][ T5789] RAX: ffffffffffffffda RBX: 000055559448e500 RCX: 00007fb3a795fd8e [ 199.679600][ T5789] RDX: 0000000000000000 RSI: 00007ffe0f6509a0 RDI: ffffffffffffff9c [ 199.687601][ T5789] RBP: 00007ffe0f6509a0 R08: 0000000000000000 R09: 0000000000000000 [ 199.695600][ T5789] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0f651a90 [ 199.703594][ T5789] R13: 00007fb3a7a35f63 R14: 000055559448e4e8 R15: 0000000000000006 [ 199.711598][ T5789] [ 199.714638][ T5789] [ 199.716995][ T5789] Allocated by task 8121: [ 199.721336][ T5789] kasan_set_track+0x4e/0x70 [ 199.725955][ T5789] __kasan_kmalloc+0x8f/0xa0 [ 199.730567][ T5789] gadgetfs_bind+0x25f/0x830 [ 199.735211][ T5789] gadget_bind_driver+0x2b3/0x770 [ 199.740270][ T5789] really_probe+0x24a/0xae0 [ 199.744824][ T5789] __driver_probe_device+0x1f5/0x390 [ 199.750141][ T5789] driver_probe_device+0x4f/0x420 [ 199.755211][ T5789] __driver_attach+0x444/0x6d0 [ 199.760531][ T5789] bus_for_each_dev+0x235/0x2b0 [ 199.765400][ T5789] bus_add_driver+0x340/0x630 [ 199.770099][ T5789] driver_register+0x23a/0x310 [ 199.774885][ T5789] usb_gadget_register_driver_owner+0xf9/0x270 [ 199.781069][ T5789] dev_config+0xe49/0x1260 [ 199.785521][ T5789] vfs_write+0x299/0x9a0 [ 199.789801][ T5789] ksys_write+0x151/0x260 [ 199.794155][ T5789] do_syscall_64+0x55/0xb0 [ 199.798596][ T5789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.804530][ T5789] [ 199.806874][ T5789] Freed by task 1198: [ 199.810891][ T5789] kasan_set_track+0x4e/0x70 [ 199.815522][ T5789] kasan_save_free_info+0x28/0x40 [ 199.820575][ T5789] ____kasan_slab_free+0x126/0x1f0 [ 199.825710][ T5789] slab_free_freelist_hook+0x154/0x240 [ 199.831186][ T5789] __kmem_cache_free+0xba/0x1f0 [ 199.836054][ T5789] destroy_ep_files+0x282/0x330 [ 199.840959][ T5789] gadgetfs_unbind+0x109/0x2b0 [ 199.845749][ T5789] gadget_unbind_driver+0x1bf/0x3e0 [ 199.850965][ T5789] device_release_driver_internal+0x408/0x6f0 [ 199.857063][ T5789] driver_detach+0x1f3/0x2d0 [ 199.861680][ T5789] bus_remove_driver+0x221/0x2f0 [ 199.866642][ T5789] usb_gadget_unregister_driver+0x4e/0x70 [ 199.872382][ T5789] dev_release+0x86/0x200 [ 199.876740][ T5789] __fput+0x221/0x940 [ 199.880741][ T5789] delayed_fput+0x58/0x80 [ 199.885089][ T5789] process_scheduled_works+0xa60/0x1600 [ 199.890664][ T5789] worker_thread+0xa5e/0xfe0 [ 199.895280][ T5789] kthread+0x2fa/0x390 [ 199.899405][ T5789] ret_from_fork+0x48/0x80 [ 199.903838][ T5789] ret_from_fork_asm+0x11/0x20 [ 199.908627][ T5789] [ 199.910963][ T5789] The buggy address belongs to the object at ffff88802d6f5c00 [ 199.910963][ T5789] which belongs to the cache kmalloc-512 of size 512 [ 199.925039][ T5789] The buggy address is located 96 bytes inside of [ 199.925039][ T5789] freed 512-byte region [ffff88802d6f5c00, ffff88802d6f5e00) [ 199.938767][ T5789] [ 199.941106][ T5789] The buggy address belongs to the physical page: [ 199.947546][ T5789] page:ffffea0000b5bd00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d6f4 [ 199.957724][ T5789] head:ffffea0000b5bd00 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 199.966678][ T5789] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 199.975107][ T5789] page_type: 0xffffffff() [ 199.979473][ T5789] raw: 00fff00000000840 ffff888018c41c80 0000000000000000 dead000000000001 [ 199.988083][ T5789] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 199.996715][ T5789] page dumped because: kasan: bad access detected [ 200.003142][ T5789] page_owner tracks the page as allocated [ 200.008886][ T5789] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5789, tgid 5789 (syz-executor), ts 97522801843, free_ts 96830749369 [ 200.031656][ T5789] post_alloc_hook+0x1c1/0x200 [ 200.036442][ T5789] get_page_from_freelist+0x2181/0x22a0 [ 200.042023][ T5789] __alloc_pages+0x1f0/0x460 [ 200.046631][ T5789] alloc_slab_page+0x5d/0x180 [ 200.051328][ T5789] new_slab+0x87/0x2d0 [ 200.055417][ T5789] ___slab_alloc+0xc5c/0x12f0 [ 200.060110][ T5789] __kmem_cache_alloc_node+0x122/0x260 [ 200.065586][ T5789] kmalloc_trace+0x2a/0xe0 [ 200.070035][ T5789] kernfs_fop_open+0x3d2/0xc60 [ 200.074812][ T5789] do_dentry_open+0x880/0x14b0 [ 200.079597][ T5789] path_openat+0x284f/0x3270 [ 200.084209][ T5789] do_filp_open+0x1f2/0x430 [ 200.088750][ T5789] do_sys_openat2+0x134/0x1d0 [ 200.093462][ T5789] __x64_sys_openat+0x139/0x160 [ 200.098379][ T5789] do_syscall_64+0x55/0xb0 [ 200.102826][ T5789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.108755][ T5789] page last free stack trace: [ 200.113449][ T5789] free_unref_page_prepare+0x7d7/0x8f0 [ 200.118941][ T5789] free_unref_page+0x32/0x2e0 [ 200.123641][ T5789] __slab_free+0x35a/0x400 [ 200.128074][ T5789] qlist_free_all+0x75/0xd0 [ 200.132612][ T5789] kasan_quarantine_reduce+0x143/0x160 [ 200.138099][ T5789] __kasan_slab_alloc+0x22/0x80 [ 200.142989][ T5789] slab_post_alloc_hook+0x6a/0x4d0 [ 200.148122][ T5789] __kmem_cache_alloc_node+0x197/0x260 [ 200.153600][ T5789] __kmalloc+0xa7/0x240 [ 200.157780][ T5789] iter_file_splice_write+0x1a4/0xcf0 [ 200.163167][ T5789] direct_splice_actor+0xe8/0x130 [ 200.168212][ T5789] splice_direct_to_actor+0x30b/0x8e0 [ 200.173606][ T5789] do_splice_direct+0x1d5/0x2f0 [ 200.178473][ T5789] do_sendfile+0x52b/0xe80 [ 200.182909][ T5789] __se_sys_sendfile64+0x145/0x1a0 [ 200.188061][ T5789] do_syscall_64+0x55/0xb0 [ 200.192508][ T5789] [ 200.194873][ T5789] Memory state around the buggy address: [ 200.200548][ T5789] ffff88802d6f5b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 200.208629][ T5789] ffff88802d6f5b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 200.216718][ T5789] >ffff88802d6f5c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.224803][ T5789] ^ [ 200.232017][ T5789] ffff88802d6f5c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.240108][ T5789] ffff88802d6f5d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.248192][ T5789] ================================================================== [ 200.288082][ T5789] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 200.295340][ T5789] CPU: 0 PID: 5789 Comm: syz-executor Not tainted syzkaller #0 [ 200.302916][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 200.313034][ T5789] Call Trace: [ 200.316347][ T5789] [ 200.319311][ T5789] dump_stack_lvl+0x18c/0x250 [ 200.324029][ T5789] ? show_regs_print_info+0x20/0x20 [ 200.329268][ T5789] ? load_image+0x420/0x420 [ 200.333818][ T5789] panic+0x2ca/0x720 [ 200.337781][ T5789] ? bpf_jit_dump+0xd0/0xd0 [ 200.342337][ T5789] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 200.348380][ T5789] ? _raw_spin_unlock+0x40/0x40 [ 200.353284][ T5789] ? print_memory_metadata+0x314/0x400 [ 200.358804][ T5789] ? __mutex_lock+0xfc/0xc80 [ 200.363434][ T5789] check_panic_on_warn+0x84/0xa0 [ 200.368411][ T5789] ? __mutex_lock+0xfc/0xc80 [ 200.373086][ T5789] end_report+0x6f/0x130 [ 200.377378][ T5789] kasan_report+0x128/0x150 [ 200.381927][ T5789] ? tomoyo_check_open_permission+0x384/0x460 [ 200.388044][ T5789] ? __mutex_lock+0xfc/0xc80 [ 200.392686][ T5789] __mutex_lock+0xfc/0xc80 [ 200.397151][ T5789] ? end_current_label_crit_section+0x170/0x170 [ 200.403443][ T5789] ? ep_open+0x4e/0x270 [ 200.407650][ T5789] ? mutex_lock_nested+0x20/0x20 [ 200.412633][ T5789] ? apparmor_file_open+0x5ab/0x760 [ 200.417880][ T5789] ? apparmor_inode_getattr+0x2c0/0x2c0 [ 200.423475][ T5789] ? __rwlock_init+0x150/0x150 [ 200.428285][ T5789] ep_open+0x4e/0x270 [ 200.432321][ T5789] ? do_dentry_open+0x86f/0x14b0 [ 200.437346][ T5789] do_dentry_open+0x880/0x14b0 [ 200.442154][ T5789] ? ep_ioctl+0x1c0/0x1c0 [ 200.446523][ T5789] path_openat+0x284f/0x3270 [ 200.451155][ T5789] ? do_sys_openat2+0xda/0x1d0 [ 200.455942][ T5789] ? __x64_sys_openat+0x139/0x160 [ 200.461035][ T5789] ? verify_lock_unused+0x140/0x140 [ 200.466253][ T5789] ? do_filp_open+0x430/0x430 [ 200.470966][ T5789] do_filp_open+0x1f2/0x430 [ 200.475489][ T5789] ? vfs_tmpfile+0x620/0x620 [ 200.480108][ T5789] ? _raw_spin_unlock+0x28/0x40 [ 200.484986][ T5789] ? alloc_fd+0x590/0x640 [ 200.489351][ T5789] do_sys_openat2+0x134/0x1d0 [ 200.494052][ T5789] ? do_sys_open+0xe0/0xe0 [ 200.498502][ T5789] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 200.504505][ T5789] ? fsnotify_link_count+0xf0/0xf0 [ 200.509640][ T5789] ? lock_chain_count+0x20/0x20 [ 200.514540][ T5789] __x64_sys_openat+0x139/0x160 [ 200.519424][ T5789] do_syscall_64+0x55/0xb0 [ 200.523880][ T5789] ? clear_bhb_loop+0x40/0x90 [ 200.528583][ T5789] ? clear_bhb_loop+0x40/0x90 [ 200.533286][ T5789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.539213][ T5789] RIP: 0033:0x7fb3a795fd8e [ 200.543651][ T5789] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 200.563280][ T5789] RSP: 002b:00007ffe0f650838 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 200.571718][ T5789] RAX: ffffffffffffffda RBX: 000055559448e500 RCX: 00007fb3a795fd8e [ 200.579713][ T5789] RDX: 0000000000000000 RSI: 00007ffe0f6509a0 RDI: ffffffffffffff9c [ 200.587707][ T5789] RBP: 00007ffe0f6509a0 R08: 0000000000000000 R09: 0000000000000000 [ 200.595701][ T5789] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0f651a90 [ 200.603687][ T5789] R13: 00007fb3a7a35f63 R14: 000055559448e4e8 R15: 0000000000000006 [ 200.611682][ T5789] [ 200.615329][ T5789] Kernel Offset: disabled [ 200.619669][ T5789] Rebooting in 86400 seconds..