last executing test programs: 22.752294437s ago: executing program 1 (id=1198): r0 = openat$dm_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000940)={0x2020}, 0x2020) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000002980)={0x1, @pix={0x0, 0x4, 0xa0363159, 0x2, 0x0, 0xffffffff, 0x0, 0x8000}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002a80)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000002ac0)='./debug\x00', &(0x7f0000002b00)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000002b40)='./debug/failslab/times\x00', 0x2, 0x0) write(r2, &(0x7f0000002b80)='10000\x00', 0x5) close(0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000002bc0)='./debug/failslab/probability\x00', 0x2, 0x10) write(r3, &(0x7f0000002c00)='5', 0x1) r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000002c40)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r4, &(0x7f0000002c80)='1', 0x1) r5 = syz_open_dev$dvb_demux(&(0x7f0000002cc0), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000002d00)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) 21.719304954s ago: executing program 1 (id=1205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x4e, 0x3, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008085}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000b00)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000b40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0xffffffff, {0x0, 0x0, 0x0, r4, {0xe, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x1, 0x3}, 0x20}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000cc0), 0x56) sendmsg$kcm(r5, &(0x7f0000000d00)={&(0x7f0000000d40)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000e00)="27030200dc0f14000e0007000024c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 17.703261189s ago: executing program 2 (id=1223): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) 12.176682821s ago: executing program 1 (id=1240): syz_usb_connect$cdc_ecm(0x0, 0x51, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000000c0)={{0x10000, 0x100000, 0x0, 0x1}, {0x0, 0xffffffff, 0xf, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf7}, {0x1000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x0, 0xffff1000, 0xc, 0x9, 0x3, 0x10, 0x0, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x10000, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x400}, {}, 0xddf8ffdb, 0x0, 0x0, 0x100, 0x8, 0x0, 0x3000, [0x0, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000200)={0x8000000, 0xdddd0000, 0x2, 0x1, 0x50}) 11.897405739s ago: executing program 2 (id=1242): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add ', 0x4) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add 6', 0x5) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f0000000380)='add 2-', 0x6) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) write(r0, &(0x7f0000000440)='add 5-', 0x6) write(r0, &(0x7f0000000480)='add 6-', 0x6) write(r0, &(0x7f00000004c0)='add 7-', 0x6) 11.451823206s ago: executing program 2 (id=1244): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, 0x0, 0x0) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add 6', 0x5) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f0000000380)='add 2-', 0x6) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) write(r0, &(0x7f0000000440)='add 5-', 0x6) write(r0, &(0x7f00000004c0)='add 7-', 0x6) 10.582883346s ago: executing program 2 (id=1248): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sec\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000440)='./sec/integrity/ima/binary_runtime_measurements\x00', 0x100, 0x50) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) dup3(r1, r3, 0x0) 10.359442929s ago: executing program 2 (id=1250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a00)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000b00)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000b40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0xffffffff, {0x0, 0x0, 0x0, r4, {0xe, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x1, 0x3}, 0x20}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000cc0), 0x56) sendmsg$kcm(r5, &(0x7f0000000d00)={&(0x7f0000000d40)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000e00)="27030200dc0f14000e0007000024c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 9.395112369s ago: executing program 1 (id=1251): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000006800010400000000000000000000000000000000080001000300000014000200010000000000000002"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c00000018000104000000000000000002180000fe0300010000000008000100c000020008001e0003"], 0x2c}}, 0x0) 6.371221221s ago: executing program 0 (id=1267): socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./proc/thread-self/fail-nth\x00', 0x141002, 0x15b) write(r1, &(0x7f0000000680)='7', 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt(r0, 0x0, 0x482, &(0x7f00000006c0)="060000007f00000100500000000000006d6800"/44, 0x2c) 5.790530611s ago: executing program 0 (id=1269): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$xfs(&(0x7f0000000840), &(0x7f0000000880)='./file1\x00', 0x4800802, &(0x7f00000008c0), 0x4, 0x9828, &(0x7f0000002740)="$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") creat(&(0x7f0000011940)='./file1\x00', 0xd) r0 = openat(0xffffffffffffff9c, &(0x7f0000011980)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000119c0), 0x0, 0xe7b, 0x0, 0x0) 4.825740781s ago: executing program 0 (id=1271): r0 = socket$inet(0x2, 0x1, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}]}}}, {0x1c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x8, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x4}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x10c}}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000304), 0x4) write(r1, &(0x7f0000000300), 0x100) 3.873516209s ago: executing program 4 (id=1275): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x8, 0xb0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) sendto$inet(r0, &(0x7f0000018100)="17", 0xff64, 0xcd8a7ba2ac232aad, 0x0, 0x0) 3.427955446s ago: executing program 4 (id=1276): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x1, 0x2, 0x2}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000000200)}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000240)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000900)={&(0x7f00000006c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000804}, 0x4004005) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f00000002c0)={0x1}) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f00000003c0)={0x0, 0x3, @stop_pts=0x162a}) 3.084475771s ago: executing program 4 (id=1277): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, 0x0, 0x0) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add 6', 0x5) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f0000000380)='add 2-', 0x6) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) write(r0, &(0x7f0000000440)='add 5-', 0x6) write(r0, &(0x7f0000000480)='add 6-', 0x6) write(r0, &(0x7f00000004c0)='add 7-', 0x6) 3.019523448s ago: executing program 0 (id=1278): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000200)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000640)='./proc\x00', &(0x7f0000000680)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f0000000700)='7', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.net/syz1\x00', 0x1ff) syz_mount_image$ext4(&(0x7f0000000780)='ext2\x00', &(0x7f00000007c0)='./file0\x00', 0x14000, &(0x7f0000000800), 0x1, 0x50d, &(0x7f0000000840)="$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") 2.90056078s ago: executing program 4 (id=1280): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount(0x0, &(0x7f0000002ac0)='./debug\x00', &(0x7f0000002b00)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000002b40)='./debug/failslab/times\x00', 0x2, 0x0) write(r2, &(0x7f0000002b80)='10000\x00', 0x5) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000002c00)='5', 0x1) r3 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000002c40)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r3, &(0x7f0000002c80)='1', 0x1) r4 = syz_open_dev$dvb_demux(&(0x7f0000002cc0), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000002d00)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000002d40)={'batadv_slave_0\x00'}) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@linear={0x0, 0x2000, 0x0, 0x38, 'linear\x00', {@ram={'/dev/ram', 0x0}, 0x20, '0'}}]}) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x158, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @stats_create={'@stats_create ', '-', 0x20, '/1'}}}) mknodat$dm(0xffffffffffffff9c, &(0x7f0000000740)='./dm0\x00', 0x6180, r1) openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000780)='./dm0\x00', 0x2, 0x0) 2.102999963s ago: executing program 3 (id=1281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000004c00)={0x0, 0x0, &(0x7f0000004c40)={&(0x7f0000004c80)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 1.988035044s ago: executing program 4 (id=1282): r0 = openat$dm_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000002980)={0x1, @pix={0x0, 0x4, 0xa0363159, 0x2, 0x0, 0xffffffff, 0x0, 0x8000}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000002ac0)='./debug\x00', &(0x7f0000002b00)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000002b40)='./debug/failslab/times\x00', 0x2, 0x0) write(r2, &(0x7f0000002b80)='10000\x00', 0x5) close(0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000002bc0)='./debug/failslab/probability\x00', 0x2, 0x10) write(r3, &(0x7f0000002c00)='5', 0x1) r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000002c40)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r4, &(0x7f0000002c80)='1', 0x1) r5 = syz_open_dev$dvb_demux(&(0x7f0000002cc0), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000002d00)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) 1.977375585s ago: executing program 3 (id=1283): r0 = openat(0xffffffffffffff9c, &(0x7f000002bf00)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f000002bf40), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffe82) openat(0xffffffffffffff9c, &(0x7f000002bfc0)='./file1\x00', 0x22043, 0x69) 1.501137835s ago: executing program 0 (id=1284): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sec\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000440)='./sec/integrity/ima/binary_runtime_measurements\x00', 0x100, 0x50) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(0xffffffffffffffff, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) dup3(r0, r2, 0x0) 1.500850655s ago: executing program 3 (id=1285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x58}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.333586832s ago: executing program 4 (id=1286): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x9b00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000008640)=0x2) syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noacl}]}, 0x1, 0x5599, &(0x7f0000000580)="$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") ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000005b80)={0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x12, 0x3, "d2273078cf6175866187bbf62372bbb65d940f27bc28a5a442ff5a8d374a182008a1fd92701ce53ee6aa5d922917aeecbfb3db24b09909c24cc157a3780cf5d5", "09b49809fc32a5fc7be9f88c6b84907998105e3111daa2bd51b0d0c3bc93fb2d0f0244a8c7a99a75e76613c745458f5c1212e72d93b272fed81941f04edd0059", "a960f08042e0911947f87de59f1d912c538884a7a95c5a50e4be66183f9d5eb1", [0x80000000000004, 0x6c]}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000006540)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000006580)='\f', 0x1, 0x8000c61) r2 = openat(0xffffffffffffff9c, &(0x7f00000065c0)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) read$FUSE(r2, &(0x7f0000006600)={0x2020}, 0xfffffeb1) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000005d80)=ANY=[], 0x11) 1.326598903s ago: executing program 3 (id=1287): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x1, 0x2, 0x2}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000000200)}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000240)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000900)={&(0x7f00000006c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000804}, 0x4004005) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f00000002c0)={0x1}) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f00000003c0)={0x0, 0x3, @stop_pts=0x162a}) 1.116815235s ago: executing program 3 (id=1288): r0 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f000000ac00)={0x3, &(0x7f000000ac40)=[{0x26, '\x00', @data=0x8, 0x9}, {0xb, '\x00', @data=0x8000100, 0x2}, {0x32, '\x00', @data=0x6, 0x400}]}) 1.003083657s ago: executing program 3 (id=1289): r0 = socket$inet(0x2, 0x1, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}]}}}, {0x1c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x8, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x4}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x10c}}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000304), 0x4) write(r1, &(0x7f0000000300), 0x100) 641.351284ms ago: executing program 1 (id=1290): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, 0x0, 0x0) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add 6', 0x5) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f0000000380)='add 2-', 0x6) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) write(r0, &(0x7f0000000440)='add 5-', 0x6) write(r0, &(0x7f0000000480)='add 6-', 0x6) write(r0, &(0x7f00000004c0)='add 7-', 0x6) 593.720869ms ago: executing program 2 (id=1291): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x1, 0x2, 0x2}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000000200)}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000240)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000900)={&(0x7f00000006c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000804}, 0x4004005) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000280)=0x1) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f00000002c0)={0x1}) 468.537601ms ago: executing program 0 (id=1292): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) io_setup(0x8, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x10, r0, &(0x7f00000001c0)='B', 0x1}]) 467.411022ms ago: executing program 1 (id=1293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010800080000000000000000000005000100", @ANYRESDEC], 0x1c}}, 0x8050) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x14, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}}, 0x14}}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x10000) 0s ago: executing program 32 (id=1292): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) io_setup(0x8, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x10, r0, &(0x7f00000001c0)='B', 0x1}]) kernel console output (not intermixed with test programs): 27.279111][ T8008] [ 227.281896][ T27] audit: type=1804 audit(1793410591.374:11): pid=8010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1139" name="/newroot/204/file0/bus" dev="loop3" ino=263 res=1 errno=0 [ 227.543522][ T8038] udevd[8038]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 227.836748][ T4288] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 227.859061][ C0] net_ratelimit: 63 callbacks suppressed [ 227.986386][ T8032] loop1: detected capacity change from 0 to 32768 [ 228.024425][ T8008] FAULT_INJECTION: forcing a failure. [ 228.024425][ T8008] name failslab, interval 1, probability 5, space 0, times 93 [ 228.049760][ T8008] CPU: 0 PID: 8008 Comm: syz.1.1138 Not tainted syzkaller #0 [ 228.057230][ T8008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 228.067330][ T8008] Call Trace: [ 228.070654][ T8008] [ 228.073630][ T8008] dump_stack_lvl+0x188/0x24e [ 228.078369][ T8008] ? show_regs_print_info+0x12/0x12 [ 228.083625][ T8008] ? load_image+0x410/0x410 [ 228.088186][ T8008] ? __might_sleep+0xd0/0xd0 [ 228.092823][ T8008] ? __lock_acquire+0x7ea0/0x7ea0 [ 228.097909][ T8008] should_fail_ex+0x390/0x4c0 [ 228.102636][ T8008] should_failslab+0x5/0x20 [ 228.107174][ T8008] slab_pre_alloc_hook+0x59/0x300 [ 228.112239][ T8008] ? memcg_alloc_slab_cgroups+0x81/0x120 [ 228.117912][ T8008] __kmem_cache_alloc_node+0x4f/0x270 [ 228.123325][ T8008] ? memcg_alloc_slab_cgroups+0x81/0x120 [ 228.129010][ T8008] __kmalloc_node+0xa2/0x240 [ 228.133642][ T8008] memcg_alloc_slab_cgroups+0x81/0x120 [ 228.139175][ T8008] slab_post_alloc_hook+0xba/0x490 [ 228.144345][ T8008] kmem_cache_alloc+0x18b/0x2f0 [ 228.149337][ T8008] ? sk_prot_alloc+0x57/0x210 [ 228.154061][ T8008] sk_prot_alloc+0x57/0x210 [ 228.158610][ T8008] ? sk_alloc+0x20/0x330 [ 228.162901][ T8008] sk_alloc+0x36/0x330 [ 228.167025][ T8008] inet6_create+0x7ad/0x11b0 [ 228.171678][ T8008] ? inet6_create+0x7c/0x11b0 [ 228.176420][ T8008] __sock_create+0x49a/0x940 [ 228.181063][ T8008] __sys_socket+0xc4/0x190 [ 228.185550][ T8008] __x64_sys_socket+0x76/0x80 [ 228.190262][ T8008] do_syscall_64+0x4c/0xa0 [ 228.194728][ T8008] ? clear_bhb_loop+0x60/0xb0 [ 228.199460][ T8008] ? clear_bhb_loop+0x60/0xb0 [ 228.204185][ T8008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.210137][ T8008] RIP: 0033:0x7fe2b419f559 [ 228.214588][ T8008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.234243][ T8008] RSP: 002b:00007fe2b5071028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 228.242713][ T8008] RAX: ffffffffffffffda RBX: 00007fe2b4425fa0 RCX: 00007fe2b419f559 [ 228.250721][ T8008] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 000000000000000a [ 228.258741][ T8008] RBP: 00007fe2b4236b20 R08: 0000000000000000 R09: 0000000000000000 [ 228.266751][ T8008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.274767][ T8008] R13: 00007fe2b4426038 R14: 00007fe2b4425fa0 R15: 00007fff3c7bc5d8 [ 228.282798][ T8008] [ 228.313249][ T8008] FAULT_INJECTION: forcing a failure. [ 228.313249][ T8008] name failslab, interval 1, probability 5, space 0, times 92 [ 228.328260][ T8008] CPU: 0 PID: 8008 Comm: syz.1.1138 Not tainted syzkaller #0 [ 228.335682][ T8008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 228.345813][ T8008] Call Trace: [ 228.349126][ T8008] [ 228.352091][ T8008] dump_stack_lvl+0x188/0x24e [ 228.356847][ T8008] ? sctp_sendmsg+0x1686/0x2940 [ 228.361757][ T8008] ? __x64_sys_sendto+0xda/0xf0 [ 228.366639][ T8008] ? show_regs_print_info+0x12/0x12 [ 228.366710][ T8008] ? load_image+0x410/0x410 [ 228.366754][ T8008] should_fail_ex+0x390/0x4c0 [ 228.366790][ T8008] should_failslab+0x5/0x20 [ 228.366813][ T8008] slab_pre_alloc_hook+0x59/0x300 [ 228.366843][ T8008] ? sctp_add_bind_addr+0x89/0x350 [ 228.366888][ T8008] __kmem_cache_alloc_node+0x4f/0x270 [ 228.366917][ T8008] ? sctp_add_bind_addr+0x89/0x350 [ 228.366959][ T8008] kmalloc_trace+0x26/0xe0 [ 228.366986][ T8008] sctp_add_bind_addr+0x89/0x350 [ 228.367017][ T8008] sctp_copy_local_addr_list+0x317/0x4d0 [ 228.367048][ T8008] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 228.367078][ T8008] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 228.396190][ T8008] ? sctp_v6_is_any+0x60/0x70 [ 228.438275][ T8008] ? sctp_copy_one_addr+0x93/0x660 [ 228.443449][ T8008] sctp_bind_addr_copy+0xaf/0x3c0 [ 228.448545][ T8008] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 228.454946][ T8008] sctp_connect_new_asoc+0x2f5/0x6a0 [ 228.460315][ T8008] ? __sctp_connect+0xd80/0xd80 [ 228.465220][ T8008] ? __local_bh_enable_ip+0x136/0x1c0 [ 228.470628][ T8008] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 228.470661][ T8008] ? security_sctp_bind_connect+0x85/0xb0 [ 228.481968][ T8008] sctp_sendmsg+0x1686/0x2940 [ 228.482032][ T8008] ? sctp_getsockopt+0x8a0/0x8a0 [ 228.491674][ T8008] ? __lock_acquire+0x7ea0/0x7ea0 [ 228.496754][ T8008] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 228.503248][ T8008] ? aa_sock_msg_perm+0x94/0x150 [ 228.508236][ T8008] ? inet_sendmsg+0xca/0x2a0 [ 228.512856][ T8008] __sys_sendto+0x497/0x650 [ 228.517403][ T8008] ? __ia32_sys_getpeername+0x80/0x80 [ 228.522830][ T8008] ? __lock_acquire+0x7ea0/0x7ea0 [ 228.527908][ T8008] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 228.533965][ T8008] ? lock_chain_count+0x20/0x20 [ 228.538868][ T8008] __x64_sys_sendto+0xda/0xf0 [ 228.543592][ T8008] do_syscall_64+0x4c/0xa0 [ 228.548066][ T8008] ? clear_bhb_loop+0x60/0xb0 [ 228.552794][ T8008] ? clear_bhb_loop+0x60/0xb0 [ 228.557567][ T8008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.563500][ T8008] RIP: 0033:0x7fe2b419f559 [ 228.567957][ T8008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.587624][ T8008] RSP: 002b:00007fe2b5071028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 228.596087][ T8008] RAX: ffffffffffffffda RBX: 00007fe2b4425fa0 RCX: 00007fe2b419f559 [ 228.604089][ T8008] RDX: 0000000000014f8d RSI: 0000200000000780 RDI: 000000000000000c [ 228.612087][ T8008] RBP: 00007fe2b4236b20 R08: 00002000000007c0 R09: 000000000000001c [ 228.612104][ T8008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.612118][ T8008] R13: 00007fe2b4426038 R14: 00007fe2b4425fa0 R15: 00007fff3c7bc5d8 [ 228.612172][ T8008] [ 228.892253][ T8040] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1141'. [ 229.242980][ T8049] FAULT_INJECTION: forcing a failure. [ 229.242980][ T8049] name failslab, interval 1, probability 5, space 0, times 10000 [ 229.272241][ T8049] CPU: 1 PID: 8049 Comm: syz.3.1145 Not tainted syzkaller #0 [ 229.279698][ T8049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 229.289796][ T8049] Call Trace: [ 229.293113][ T8049] [ 229.296090][ T8049] dump_stack_lvl+0x188/0x24e [ 229.300855][ T8049] ? show_regs_print_info+0x12/0x12 [ 229.306091][ T8049] ? load_image+0x410/0x410 [ 229.310624][ T8049] ? __lock_acquire+0x7ea0/0x7ea0 [ 229.315694][ T8049] should_fail_ex+0x390/0x4c0 [ 229.320425][ T8049] should_failslab+0x5/0x20 [ 229.324946][ T8049] slab_pre_alloc_hook+0x59/0x300 [ 229.329999][ T8049] ? vidtv_psi_service_desc_init+0x9e/0x510 [ 229.335921][ T8049] __kmem_cache_alloc_node+0x4f/0x270 [ 229.341325][ T8049] ? vidtv_psi_service_desc_init+0x9e/0x510 [ 229.347251][ T8049] kmalloc_trace+0x26/0xe0 [ 229.351716][ T8049] vidtv_psi_service_desc_init+0x9e/0x510 [ 229.357486][ T8049] ? vidtv_psi_sdt_service_init+0x196/0x270 [ 229.363432][ T8049] vidtv_channel_s302m_init+0x125/0x830 [ 229.369007][ T8049] ? vidtv_mux_init+0x3ad/0x1950 [ 229.373995][ T8049] vidtv_channels_init+0x41/0x90 [ 229.378961][ T8049] vidtv_mux_init+0x4d0/0x1950 [ 229.383764][ T8049] vidtv_start_feed+0x368/0x590 [ 229.388653][ T8049] ? vidtv_i2c_func+0x10/0x10 [ 229.393366][ T8049] ? vidtv_stop_feed+0x250/0x250 [ 229.398347][ T8049] ? _raw_spin_unlock_irq+0x1f/0x40 [ 229.403588][ T8049] ? lockdep_hardirqs_on+0x94/0x140 [ 229.408828][ T8049] dmx_ts_feed_start_filtering+0x11c/0x210 [ 229.414667][ T8049] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 229.420587][ T8049] dvb_dmxdev_filter_start+0x422/0x1060 [ 229.426177][ T8049] dvb_demux_do_ioctl+0x48d/0x530 [ 229.431240][ T8049] dvb_usercopy+0x191/0x2b0 [ 229.435801][ T8049] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 229.441391][ T8049] ? dvb_generic_ioctl+0xb0/0xb0 [ 229.446383][ T8049] ? dvb_demux_poll+0x210/0x210 [ 229.451279][ T8049] dvb_demux_ioctl+0x25/0x30 [ 229.455907][ T8049] __se_sys_ioctl+0xfa/0x170 [ 229.460533][ T8049] do_syscall_64+0x4c/0xa0 [ 229.464982][ T8049] ? clear_bhb_loop+0x60/0xb0 [ 229.469714][ T8049] ? clear_bhb_loop+0x60/0xb0 [ 229.474424][ T8049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.480347][ T8049] RIP: 0033:0x7f1b90d9f559 [ 229.484785][ T8049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.504415][ T8049] RSP: 002b:00007f1b91d5a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.512854][ T8049] RAX: ffffffffffffffda RBX: 00007f1b91025fa0 RCX: 00007f1b90d9f559 [ 229.520865][ T8049] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000007 [ 229.528869][ T8049] RBP: 00007f1b90e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 229.536865][ T8049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.544874][ T8049] R13: 00007f1b91026038 R14: 00007f1b91025fa0 R15: 00007ffc5f8c08f8 [ 229.552887][ T8049] [ 229.628066][ T8049] FAULT_INJECTION: forcing a failure. [ 229.628066][ T8049] name failslab, interval 1, probability 5, space 0, times 9999 [ 229.647307][ T8049] CPU: 1 PID: 8049 Comm: syz.3.1145 Not tainted syzkaller #0 [ 229.654748][ T8049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 229.664848][ T8049] Call Trace: [ 229.668209][ T8049] [ 229.671181][ T8049] dump_stack_lvl+0x188/0x24e [ 229.675924][ T8049] ? show_regs_print_info+0x12/0x12 [ 229.681205][ T8049] ? load_image+0x410/0x410 [ 229.685825][ T8049] ? __might_sleep+0xd0/0xd0 [ 229.690470][ T8049] ? __lock_acquire+0x7ea0/0x7ea0 [ 229.695546][ T8049] should_fail_ex+0x390/0x4c0 [ 229.700280][ T8049] should_failslab+0x5/0x20 [ 229.704821][ T8049] slab_pre_alloc_hook+0x59/0x300 [ 229.709893][ T8049] ? vidtv_psi_pmt_stream_init+0x56/0x430 [ 229.715673][ T8049] __kmem_cache_alloc_node+0x4f/0x270 [ 229.721124][ T8049] ? vidtv_psi_pmt_stream_init+0x56/0x430 [ 229.726889][ T8049] kmalloc_trace+0x26/0xe0 [ 229.731366][ T8049] vidtv_psi_pmt_stream_init+0x56/0x430 [ 229.736983][ T8049] vidtv_channel_pmt_match_sections+0x23f/0x460 [ 229.743285][ T8049] vidtv_channel_si_init+0x12fc/0x15c0 [ 229.748815][ T8049] vidtv_mux_init+0x4ff/0x1950 [ 229.753630][ T8049] vidtv_start_feed+0x368/0x590 [ 229.758535][ T8049] ? vidtv_i2c_func+0x10/0x10 [ 229.763229][ T8049] ? vidtv_stop_feed+0x250/0x250 [ 229.768216][ T8049] ? _raw_spin_unlock_irq+0x1f/0x40 [ 229.773443][ T8049] ? lockdep_hardirqs_on+0x94/0x140 [ 229.778690][ T8049] dmx_ts_feed_start_filtering+0x11c/0x210 [ 229.784517][ T8049] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 229.790434][ T8049] dvb_dmxdev_filter_start+0x422/0x1060 [ 229.796023][ T8049] dvb_demux_do_ioctl+0x48d/0x530 [ 229.801086][ T8049] dvb_usercopy+0x191/0x2b0 [ 229.805625][ T8049] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 229.811211][ T8049] ? dvb_generic_ioctl+0xb0/0xb0 [ 229.816194][ T8049] ? dvb_demux_poll+0x210/0x210 [ 229.821080][ T8049] dvb_demux_ioctl+0x25/0x30 [ 229.825712][ T8049] __se_sys_ioctl+0xfa/0x170 [ 229.830359][ T8049] do_syscall_64+0x4c/0xa0 [ 229.834807][ T8049] ? clear_bhb_loop+0x60/0xb0 [ 229.839527][ T8049] ? clear_bhb_loop+0x60/0xb0 [ 229.844228][ T8049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.850156][ T8049] RIP: 0033:0x7f1b90d9f559 [ 229.854591][ T8049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.874218][ T8049] RSP: 002b:00007f1b91d5a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.882654][ T8049] RAX: ffffffffffffffda RBX: 00007f1b91025fa0 RCX: 00007f1b90d9f559 [ 229.882672][ T8049] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000007 [ 229.898637][ T8049] RBP: 00007f1b90e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 229.898654][ T8049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.914643][ T8049] R13: 00007f1b91026038 R14: 00007f1b91025fa0 R15: 00007ffc5f8c08f8 [ 229.922647][ T8049] [ 230.696528][ T8078] FAULT_INJECTION: forcing a failure. [ 230.696528][ T8078] name failslab, interval 1, probability 5, space 0, times 10000 [ 230.728428][ T8078] CPU: 0 PID: 8078 Comm: syz.2.1158 Not tainted syzkaller #0 [ 230.735872][ T8078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 230.745958][ T8078] Call Trace: [ 230.745969][ T8078] [ 230.745979][ T8078] dump_stack_lvl+0x188/0x24e [ 230.757004][ T8078] ? show_regs_print_info+0x12/0x12 [ 230.762238][ T8078] ? load_image+0x410/0x410 [ 230.762272][ T8078] ? __might_sleep+0xd0/0xd0 [ 230.762297][ T8078] ? __lock_acquire+0x7ea0/0x7ea0 [ 230.771438][ T8078] should_fail_ex+0x390/0x4c0 [ 230.771476][ T8078] should_failslab+0x5/0x20 [ 230.785718][ T8078] slab_pre_alloc_hook+0x59/0x300 [ 230.790822][ T8078] ? vidtv_channel_si_init+0xbcc/0x15c0 [ 230.796483][ T8078] __kmem_cache_alloc_node+0x4f/0x270 [ 230.801882][ T8078] ? vidtv_channel_si_init+0xbcc/0x15c0 [ 230.807456][ T8078] kmalloc_trace+0x26/0xe0 [ 230.811957][ T8078] vidtv_channel_si_init+0xbcc/0x15c0 [ 230.817355][ T8078] vidtv_mux_init+0x4ff/0x1950 [ 230.822140][ T8078] vidtv_start_feed+0x368/0x590 [ 230.827031][ T8078] ? vidtv_i2c_func+0x10/0x10 [ 230.831784][ T8078] ? vidtv_stop_feed+0x250/0x250 [ 230.836753][ T8078] ? _raw_spin_unlock_irq+0x1f/0x40 [ 230.841979][ T8078] ? lockdep_hardirqs_on+0x94/0x140 [ 230.847287][ T8078] dmx_ts_feed_start_filtering+0x11c/0x210 [ 230.853116][ T8078] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 230.859055][ T8078] dvb_dmxdev_filter_start+0x422/0x1060 [ 230.864669][ T8078] dvb_demux_do_ioctl+0x48d/0x530 [ 230.869728][ T8078] dvb_usercopy+0x191/0x2b0 [ 230.874269][ T8078] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 230.879844][ T8078] ? dvb_generic_ioctl+0xb0/0xb0 [ 230.884820][ T8078] ? dvb_demux_poll+0x210/0x210 [ 230.889695][ T8078] dvb_demux_ioctl+0x25/0x30 [ 230.894335][ T8078] __se_sys_ioctl+0xfa/0x170 [ 230.898961][ T8078] do_syscall_64+0x4c/0xa0 [ 230.903442][ T8078] ? clear_bhb_loop+0x60/0xb0 [ 230.908151][ T8078] ? clear_bhb_loop+0x60/0xb0 [ 230.912859][ T8078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.918780][ T8078] RIP: 0033:0x7f5aad19f559 [ 230.923236][ T8078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.942876][ T8078] RSP: 002b:00007f5aae0ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.951313][ T8078] RAX: ffffffffffffffda RBX: 00007f5aad425fa0 RCX: 00007f5aad19f559 [ 230.959310][ T8078] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000007 [ 230.967304][ T8078] RBP: 00007f5aad236b20 R08: 0000000000000000 R09: 0000000000000000 [ 230.975293][ T8078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.983276][ T8078] R13: 00007f5aad426038 R14: 00007f5aad425fa0 R15: 00007ffd8525a128 [ 230.991276][ T8078] [ 230.997057][ T4520] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 231.091807][ T8078] FAULT_INJECTION: forcing a failure. [ 231.091807][ T8078] name failslab, interval 1, probability 5, space 0, times 9999 [ 231.113531][ T8078] CPU: 1 PID: 8078 Comm: syz.2.1158 Not tainted syzkaller #0 [ 231.120999][ T8078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 231.131084][ T8078] Call Trace: [ 231.131093][ T8078] [ 231.131102][ T8078] dump_stack_lvl+0x188/0x24e [ 231.131139][ T8078] ? show_regs_print_info+0x12/0x12 [ 231.137590][ T8078] ? load_image+0x410/0x410 [ 231.147468][ T8078] ? __might_sleep+0xd0/0xd0 [ 231.156592][ T8078] ? __lock_acquire+0x7ea0/0x7ea0 [ 231.156637][ T8078] should_fail_ex+0x390/0x4c0 [ 231.166339][ T8078] should_failslab+0x5/0x20 [ 231.166366][ T8078] slab_pre_alloc_hook+0x59/0x300 [ 231.175907][ T8078] ? vidtv_mux_init+0xd46/0x1950 [ 231.175942][ T8078] __kmem_cache_alloc_node+0x4f/0x270 [ 231.186252][ T8078] ? vidtv_mux_init+0xd46/0x1950 [ 231.191229][ T8078] kmalloc_trace+0x26/0xe0 [ 231.191256][ T8078] vidtv_mux_init+0xd46/0x1950 [ 231.191310][ T8078] vidtv_start_feed+0x368/0x590 [ 231.200501][ T8078] ? vidtv_i2c_func+0x10/0x10 [ 231.200527][ T8078] ? vidtv_stop_feed+0x250/0x250 [ 231.210474][ T8078] ? _raw_spin_unlock_irq+0x1f/0x40 [ 231.210506][ T8078] ? lockdep_hardirqs_on+0x94/0x140 [ 231.220879][ T8078] dmx_ts_feed_start_filtering+0x11c/0x210 [ 231.220907][ T8078] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 231.232106][ T8078] dvb_dmxdev_filter_start+0x422/0x1060 [ 231.243812][ T8078] dvb_demux_do_ioctl+0x48d/0x530 [ 231.243854][ T8078] dvb_usercopy+0x191/0x2b0 [ 231.253464][ T8078] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 231.259092][ T8078] ? dvb_generic_ioctl+0xb0/0xb0 [ 231.264111][ T8078] ? dvb_demux_poll+0x210/0x210 [ 231.269020][ T8078] dvb_demux_ioctl+0x25/0x30 [ 231.269057][ T8078] __se_sys_ioctl+0xfa/0x170 [ 231.278297][ T8078] do_syscall_64+0x4c/0xa0 [ 231.282741][ T8078] ? clear_bhb_loop+0x60/0xb0 [ 231.287480][ T8078] ? clear_bhb_loop+0x60/0xb0 [ 231.292197][ T8078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.298148][ T8078] RIP: 0033:0x7f5aad19f559 [ 231.302603][ T8078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.322356][ T8078] RSP: 002b:00007f5aae0ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.330821][ T8078] RAX: ffffffffffffffda RBX: 00007f5aad425fa0 RCX: 00007f5aad19f559 [ 231.338824][ T8078] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000007 [ 231.346840][ T8078] RBP: 00007f5aad236b20 R08: 0000000000000000 R09: 0000000000000000 [ 231.354856][ T8078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.362846][ T8078] R13: 00007f5aad426038 R14: 00007f5aad425fa0 R15: 00007ffd8525a128 [ 231.362885][ T8078] [ 231.394825][ T4520] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 231.409566][ T4520] usb 2-1: config 1 has no interface number 0 [ 231.448310][ T4520] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 231.467739][ T4520] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.487784][ T4520] usb 2-1: Product: syz [ 231.492133][ T4520] usb 2-1: Manufacturer: syz [ 231.496901][ T4520] usb 2-1: SerialNumber: syz [ 231.720451][ T4520] usb 2-1: cannot find UAC_HEADER [ 231.803844][ T4520] snd-usb-audio: probe of 2-1:1.3 failed with error -22 [ 231.838343][ T4269] udevd[4269]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.861777][ T4520] usb 2-1: USB disconnect, device number 4 [ 231.984861][ T8105] syz.2.1168 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 232.063703][ T8103] device syzkaller0 entered promiscuous mode [ 232.608790][ T8099] loop4: detected capacity change from 0 to 32768 [ 232.721519][ T8107] loop2: detected capacity change from 0 to 32768 [ 232.729709][ T8107] (syz.2.1168,8107,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "ÿÿ" or missing value [ 232.748580][ T8107] (syz.2.1168,8107,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 232.821527][ T8099] XFS (loop4): Mounting V5 Filesystem [ 232.975138][ T8099] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 232.979181][ C0] net_ratelimit: 63 callbacks suppressed [ 233.067826][ T8099] XFS (loop4): Starting recovery (logdev: internal) [ 233.103368][ T4518] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 233.128249][ T8099] XFS (loop4): Ending recovery (logdev: internal) [ 233.300853][ T4283] XFS (loop4): Unmounting Filesystem [ 233.313560][ T4518] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.355123][ T4518] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 233.396449][ T4518] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.426292][ T4518] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 233.471786][ T4518] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 233.486897][ T8112] loop1: detected capacity change from 0 to 32768 [ 233.501785][ T8112] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1170 (8112) [ 233.520511][ T4518] usb 3-1: Product: syz [ 233.524837][ T4518] usb 3-1: Manufacturer: syz [ 233.538403][ T8112] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 233.557159][ T8105] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 233.564496][ T8112] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 233.578181][ T4518] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 233.609178][ T8112] BTRFS info (device loop1): using free space tree [ 233.638386][ T4518] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 233.982664][ T4518] usb 3-1: USB disconnect, device number 2 [ 234.026462][ T4518] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 234.049696][ T8112] BTRFS info (device loop1): enabling ssd optimizations [ 234.081945][ T4518] garmin_gps 3-1:1.0: device disconnected [ 234.182110][ T8139] udevd[8139]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 234.720174][ T8148] udevd[8148]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 234.745755][ T8150] FAULT_INJECTION: forcing a failure. [ 234.745755][ T8150] name failslab, interval 1, probability 5, space 0, times 10000 [ 234.764485][ T8150] CPU: 0 PID: 8150 Comm: syz.4.1175 Not tainted syzkaller #0 [ 234.771907][ T8150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 234.781995][ T8150] Call Trace: [ 234.785305][ T8150] [ 234.788290][ T8150] dump_stack_lvl+0x188/0x24e [ 234.793060][ T8150] ? show_regs_print_info+0x12/0x12 [ 234.798319][ T8150] ? load_image+0x410/0x410 [ 234.802874][ T8150] ? __might_sleep+0xd0/0xd0 [ 234.807514][ T8150] ? __lock_acquire+0x7ea0/0x7ea0 [ 234.812590][ T8150] should_fail_ex+0x390/0x4c0 [ 234.817319][ T8150] should_failslab+0x5/0x20 [ 234.821870][ T8150] slab_pre_alloc_hook+0x59/0x300 [ 234.826962][ T8150] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 234.832730][ T8150] __kmem_cache_alloc_node+0x4f/0x270 [ 234.838161][ T8150] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 234.843934][ T8150] __kmalloc+0xa3/0x240 [ 234.848131][ T8150] tomoyo_realpath_from_path+0xe2/0x5c0 [ 234.853728][ T8150] ? tomoyo_domain+0xd2/0x120 [ 234.858461][ T8150] ? tomoyo_path_number_perm+0x205/0x650 [ 234.864163][ T8150] tomoyo_path_number_perm+0x22f/0x650 [ 234.869691][ T8150] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 234.869729][ T8150] ? futex_wake_mark+0x150/0x150 [ 234.869790][ T8150] ? __fget_files+0x28/0x460 [ 234.884886][ T8150] security_file_ioctl+0x6c/0xa0 [ 234.889870][ T8150] __se_sys_ioctl+0x48/0x170 [ 234.889906][ T8150] do_syscall_64+0x4c/0xa0 [ 234.898926][ T8150] ? clear_bhb_loop+0x60/0xb0 [ 234.898958][ T8150] ? clear_bhb_loop+0x60/0xb0 [ 234.908344][ T8150] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 234.908380][ T8150] RIP: 0033:0x7f1541b9f559 [ 234.918716][ T8150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.938367][ T8150] RSP: 002b:00007f1542ab3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.946828][ T8150] RAX: ffffffffffffffda RBX: 00007f1541e25fa0 RCX: 00007f1541b9f559 [ 234.954866][ T8150] RDX: 0000200000002d00 RSI: 0000000040146f2c RDI: 0000000000000006 [ 234.962863][ T8150] RBP: 00007f1541c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 234.962884][ T8150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.978847][ T8150] R13: 00007f1541e26038 R14: 00007f1541e25fa0 R15: 00007ffde1f8ada8 [ 234.978891][ T8150] [ 235.007179][ T8150] ERROR: Out of memory at tomoyo_realpath_from_path. [ 235.872718][ T5892] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 236.063689][ T5892] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 236.081208][ T5892] usb 5-1: config 1 has no interface number 0 [ 236.102783][ T5892] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 236.127143][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.160220][ T5892] usb 5-1: Product: syz [ 236.166950][ T5892] usb 5-1: Manufacturer: syz [ 236.185845][ T5892] usb 5-1: SerialNumber: syz [ 236.307810][ T8166] loop3: detected capacity change from 0 to 32768 [ 236.427678][ T8166] XFS (loop3): Mounting V5 Filesystem [ 236.443406][ T5892] usb 5-1: cannot find UAC_HEADER [ 236.470854][ T5892] snd-usb-audio: probe of 5-1:1.3 failed with error -22 [ 236.482388][ T5892] usb 5-1: USB disconnect, device number 2 [ 236.578130][ T8166] XFS (loop3): Ending clean mount [ 236.643088][ T8166] XFS (loop3): Quotacheck needed: Please wait. [ 236.763254][ T4269] udevd[4269]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.783135][ T8166] XFS (loop3): Quotacheck: Done. [ 237.320536][ T8189] FAULT_INJECTION: forcing a failure. [ 237.320536][ T8189] name failslab, interval 1, probability 5, space 0, times 10000 [ 237.340577][ T8189] CPU: 0 PID: 8189 Comm: syz.4.1187 Not tainted syzkaller #0 [ 237.348017][ T8189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 237.358117][ T8189] Call Trace: [ 237.361428][ T8189] [ 237.364399][ T8189] dump_stack_lvl+0x188/0x24e [ 237.369137][ T8189] ? show_regs_print_info+0x12/0x12 [ 237.374386][ T8189] ? load_image+0x410/0x410 [ 237.378939][ T8189] ? __might_sleep+0xd0/0xd0 [ 237.383566][ T8189] ? __lock_acquire+0x7ea0/0x7ea0 [ 237.388636][ T8189] should_fail_ex+0x390/0x4c0 [ 237.393364][ T8189] should_failslab+0x5/0x20 [ 237.397904][ T8189] slab_pre_alloc_hook+0x59/0x300 [ 237.403050][ T8189] kmem_cache_alloc+0x56/0x2f0 [ 237.407886][ T8189] ? security_file_alloc+0x30/0x110 [ 237.413149][ T8189] security_file_alloc+0x30/0x110 [ 237.418236][ T8189] __alloc_file+0xc2/0x230 [ 237.422730][ T8189] alloc_empty_file+0x90/0x180 [ 237.427536][ T8189] path_openat+0x11c/0x2f10 [ 237.432103][ T8189] ? kasan_set_track+0x60/0x70 [ 237.436952][ T8189] ? verify_lock_unused+0x140/0x140 [ 237.442216][ T8189] ? do_sys_openat2+0xdd/0x4f0 [ 237.447020][ T8189] ? __x64_sys_openat+0x135/0x160 [ 237.452071][ T8189] ? do_syscall_64+0x4c/0xa0 [ 237.456692][ T8189] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.462787][ T8189] ? do_filp_open+0x420/0x420 [ 237.467501][ T8189] do_filp_open+0x1ee/0x420 [ 237.472059][ T8189] ? vfs_tmpfile+0x490/0x490 [ 237.476715][ T8189] ? _raw_spin_unlock+0x24/0x40 [ 237.481593][ T8189] ? alloc_fd+0x590/0x640 [ 237.485981][ T8189] do_sys_openat2+0x14b/0x4f0 [ 237.490728][ T8189] ? do_sys_open+0xe0/0xe0 [ 237.495199][ T8189] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 237.501223][ T8189] ? lock_chain_count+0x20/0x20 [ 237.506117][ T8189] __x64_sys_openat+0x135/0x160 [ 237.511034][ T8189] do_syscall_64+0x4c/0xa0 [ 237.515507][ T8189] ? clear_bhb_loop+0x60/0xb0 [ 237.520219][ T8189] ? clear_bhb_loop+0x60/0xb0 [ 237.524956][ T8189] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.530881][ T8189] RIP: 0033:0x7f1541b5fd8e [ 237.535319][ T8189] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 237.554953][ T8189] RSP: 002b:00007f1542ab2b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 237.563407][ T8189] RAX: ffffffffffffffda RBX: 00007f1542ab36c0 RCX: 00007f1541b5fd8e [ 237.571409][ T8189] RDX: 0000000000000002 RSI: 00007f1542ab2c00 RDI: ffffffffffffff9c [ 237.579394][ T8189] RBP: 00007f1542ab2c00 R08: 0000000000000000 R09: 0000000000000000 [ 237.587381][ T8189] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 237.595367][ T8189] R13: 00007f1541e26038 R14: 00007f1541e25fa0 R15: 00007ffde1f8ada8 [ 237.603363][ T8189] [ 237.611940][ T8140] block2mtd: error: cannot open device [ 238.099099][ C0] net_ratelimit: 85 callbacks suppressed [ 238.732928][ T8143] rxe_eth0 speed is unknown, defaulting to 1000 [ 239.259164][ T4518] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 239.461158][ T4518] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 239.475933][ T4518] usb 1-1: config 1 has no interface number 0 [ 239.508802][ T4518] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 239.554736][ T4518] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.598050][ T4518] usb 1-1: Product: syz [ 239.617725][ T4518] usb 1-1: Manufacturer: syz [ 239.630494][ T4518] usb 1-1: SerialNumber: syz [ 239.650794][ T4287] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 239.926950][ T4518] usb 1-1: cannot find UAC_HEADER [ 239.991989][ T4518] snd-usb-audio: probe of 1-1:1.3 failed with error -22 [ 240.015265][ T4269] udevd[4269]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.038162][ T4518] usb 1-1: USB disconnect, device number 2 [ 240.167970][ T8217] FAULT_INJECTION: forcing a failure. [ 240.167970][ T8217] name failslab, interval 1, probability 5, space 0, times 10000 [ 240.182784][ T8217] CPU: 1 PID: 8217 Comm: syz.1.1198 Not tainted syzkaller #0 [ 240.190235][ T8217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 240.200328][ T8217] Call Trace: [ 240.203636][ T8217] [ 240.206619][ T8217] dump_stack_lvl+0x188/0x24e [ 240.211360][ T8217] ? show_regs_print_info+0x12/0x12 [ 240.216609][ T8217] ? load_image+0x410/0x410 [ 240.221168][ T8217] ? __might_sleep+0xd0/0xd0 [ 240.225808][ T8217] ? __lock_acquire+0x7ea0/0x7ea0 [ 240.230891][ T8217] should_fail_ex+0x390/0x4c0 [ 240.235614][ T8217] should_failslab+0x5/0x20 [ 240.240131][ T8217] slab_pre_alloc_hook+0x59/0x300 [ 240.245304][ T8217] kmem_cache_alloc+0x56/0x2f0 [ 240.250118][ T8217] ? getname_flags+0xb7/0x500 [ 240.254886][ T8217] getname_flags+0xb7/0x500 [ 240.259431][ T8217] do_sys_openat2+0xdd/0x4f0 [ 240.264082][ T8217] ? do_sys_open+0xe0/0xe0 [ 240.268544][ T8217] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 240.274584][ T8217] ? lock_chain_count+0x20/0x20 [ 240.279496][ T8217] __x64_sys_openat+0x135/0x160 [ 240.284395][ T8217] do_syscall_64+0x4c/0xa0 [ 240.288852][ T8217] ? clear_bhb_loop+0x60/0xb0 [ 240.293576][ T8217] ? clear_bhb_loop+0x60/0xb0 [ 240.298314][ T8217] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.304300][ T8217] RIP: 0033:0x7fe2b415fd8e [ 240.308747][ T8217] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 240.328390][ T8217] RSP: 002b:00007fe2b5070b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 240.336846][ T8217] RAX: ffffffffffffffda RBX: 00007fe2b50716c0 RCX: 00007fe2b415fd8e [ 240.336868][ T8217] RDX: 0000000000000002 RSI: 00007fe2b5070c00 RDI: ffffffffffffff9c [ 240.352901][ T8217] RBP: 00007fe2b5070c00 R08: 0000000000000000 R09: 0000000000000000 [ 240.360918][ T8217] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 240.360937][ T8217] R13: 00007fe2b4426038 R14: 00007fe2b4425fa0 R15: 00007fff3c7bc5d8 [ 240.360969][ T8217] [ 240.395882][ T8182] syz.3.1181 (8182) used greatest stack depth: 19216 bytes left [ 240.526643][ T8166] syz.3.1181 (8166) used greatest stack depth: 19168 bytes left [ 240.782160][ T4288] XFS (loop3): Unmounting Filesystem [ 241.034878][ T8232] device syzkaller0 entered promiscuous mode [ 241.886198][ T8249] loop0: detected capacity change from 0 to 32768 [ 241.979974][ T8249] XFS (loop0): Mounting V5 Filesystem [ 242.063579][ T8249] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 242.128674][ T8249] XFS (loop0): Starting recovery (logdev: internal) [ 242.160625][ T8249] XFS (loop0): Ending recovery (logdev: internal) [ 242.246296][ T8238] loop2: detected capacity change from 0 to 32768 [ 242.314620][ T8238] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1208 (8238) [ 242.344851][ T4276] XFS (loop0): Unmounting Filesystem [ 242.364415][ T8238] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 242.399414][ T8238] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 242.478792][ T8238] BTRFS info (device loop2): using free space tree [ 242.759046][ T4518] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 242.809353][ T8238] BTRFS info (device loop2): enabling ssd optimizations [ 242.908312][ T8287] FAULT_INJECTION: forcing a failure. [ 242.908312][ T8287] name failslab, interval 1, probability 5, space 0, times 10000 [ 242.941178][ T8287] CPU: 0 PID: 8287 Comm: syz.0.1215 Not tainted syzkaller #0 [ 242.948632][ T8287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 242.958735][ T8287] Call Trace: [ 242.962049][ T8287] [ 242.965023][ T8287] dump_stack_lvl+0x188/0x24e [ 242.969783][ T8287] ? show_regs_print_info+0x12/0x12 [ 242.975045][ T8287] ? load_image+0x410/0x410 [ 242.979613][ T8287] ? __might_sleep+0xd0/0xd0 [ 242.984254][ T8287] ? __lock_acquire+0x7ea0/0x7ea0 [ 242.989315][ T8287] should_fail_ex+0x390/0x4c0 [ 242.994050][ T8287] should_failslab+0x5/0x20 [ 242.998592][ T8287] slab_pre_alloc_hook+0x59/0x300 [ 243.003654][ T8287] ? vidtv_psi_short_event_desc_init+0x290/0x6b0 [ 243.010013][ T8287] __kmem_cache_alloc_node+0x4f/0x270 [ 243.015411][ T8287] ? vidtv_psi_short_event_desc_init+0x290/0x6b0 [ 243.021774][ T8287] __kmalloc_node_track_caller+0xa0/0x240 [ 243.027518][ T8287] kstrdup+0x37/0x70 [ 243.031449][ T8287] vidtv_psi_short_event_desc_init+0x290/0x6b0 [ 243.037630][ T8287] vidtv_psi_desc_clone+0x25a/0x9b0 [ 243.042870][ T8287] ? vidtv_psi_sdt_service_init+0x196/0x270 [ 243.048791][ T8287] vidtv_channel_si_init+0x88f/0x15c0 [ 243.054200][ T8287] vidtv_mux_init+0x4ff/0x1950 [ 243.058992][ T8287] vidtv_start_feed+0x368/0x590 [ 243.063884][ T8287] ? vidtv_i2c_func+0x10/0x10 [ 243.068589][ T8287] ? vidtv_stop_feed+0x250/0x250 [ 243.073553][ T8287] ? _raw_spin_unlock_irq+0x1f/0x40 [ 243.078777][ T8287] ? lockdep_hardirqs_on+0x94/0x140 [ 243.084011][ T8287] dmx_ts_feed_start_filtering+0x11c/0x210 [ 243.089841][ T8287] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 243.095798][ T8287] dvb_dmxdev_filter_start+0x422/0x1060 [ 243.101391][ T8287] dvb_demux_do_ioctl+0x48d/0x530 [ 243.106448][ T8287] dvb_usercopy+0x191/0x2b0 [ 243.110996][ T8287] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 243.116577][ T8287] ? dvb_generic_ioctl+0xb0/0xb0 [ 243.121565][ T8287] ? dvb_demux_poll+0x210/0x210 [ 243.126444][ T8287] dvb_demux_ioctl+0x25/0x30 [ 243.131065][ T8287] __se_sys_ioctl+0xfa/0x170 [ 243.135681][ T8287] do_syscall_64+0x4c/0xa0 [ 243.140176][ T8287] ? clear_bhb_loop+0x60/0xb0 [ 243.144885][ T8287] ? clear_bhb_loop+0x60/0xb0 [ 243.149593][ T8287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 243.155511][ T8287] RIP: 0033:0x7f7329b9f559 [ 243.159962][ T8287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.179602][ T8287] RSP: 002b:00007f732aa8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.188050][ T8287] RAX: ffffffffffffffda RBX: 00007f7329e25fa0 RCX: 00007f7329b9f559 [ 243.196044][ T8287] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000007 [ 243.204043][ T8287] RBP: 00007f7329c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 243.212047][ T8287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.220028][ T8287] R13: 00007f7329e26038 R14: 00007f7329e25fa0 R15: 00007ffc29790758 [ 243.228032][ T8287] [ 243.231400][ C0] net_ratelimit: 61 callbacks suppressed [ 243.260371][ T8238] loop2: detected capacity change from 32768 to 64 [ 243.267546][ T4518] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 243.279393][ T8291] syz.2.1208: attempt to access beyond end of device [ 243.279393][ T8291] loop2: rw=2049, sector=10240, nr_sectors = 8 limit=64 [ 243.293574][ T4518] usb 4-1: config 1 has no interface number 0 [ 243.302983][ T8293] udevd[8293]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 243.319950][ T4518] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 243.336666][ T4518] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.345054][ T8291] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 243.357372][ T4518] usb 4-1: Product: syz [ 243.361620][ T4518] usb 4-1: Manufacturer: syz [ 243.374212][ T4518] usb 4-1: SerialNumber: syz [ 243.421626][ T8287] FAULT_INJECTION: forcing a failure. [ 243.421626][ T8287] name failslab, interval 1, probability 5, space 0, times 9999 [ 243.499341][ T8287] CPU: 1 PID: 8287 Comm: syz.0.1215 Not tainted syzkaller #0 [ 243.506804][ T8287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 243.516927][ T8287] Call Trace: [ 243.520242][ T8287] [ 243.523211][ T8287] dump_stack_lvl+0x188/0x24e [ 243.527952][ T8287] ? show_regs_print_info+0x12/0x12 [ 243.533218][ T8287] ? load_image+0x410/0x410 [ 243.537789][ T8287] ? __might_sleep+0xd0/0xd0 [ 243.542421][ T8287] ? __lock_acquire+0x7ea0/0x7ea0 [ 243.547512][ T8287] should_fail_ex+0x390/0x4c0 [ 243.552277][ T8287] should_failslab+0x5/0x20 [ 243.556835][ T8287] slab_pre_alloc_hook+0x59/0x300 [ 243.561925][ T8287] ? vidtv_psi_pat_program_init+0x56/0x270 [ 243.567783][ T8287] __kmem_cache_alloc_node+0x4f/0x270 [ 243.573201][ T8287] ? kstrdup+0x52/0x70 [ 243.577331][ T8287] ? vidtv_psi_pat_program_init+0x56/0x270 [ 243.583181][ T8287] kmalloc_trace+0x26/0xe0 [ 243.587630][ T8287] vidtv_psi_pat_program_init+0x56/0x270 [ 243.593301][ T8287] vidtv_channel_s302m_init+0x1f0/0x830 [ 243.598886][ T8287] ? vidtv_mux_init+0x3ad/0x1950 [ 243.603876][ T8287] vidtv_channels_init+0x41/0x90 [ 243.608860][ T8287] vidtv_mux_init+0x4d0/0x1950 [ 243.613716][ T8287] vidtv_start_feed+0x368/0x590 [ 243.618614][ T8287] ? vidtv_i2c_func+0x10/0x10 [ 243.623336][ T8287] ? vidtv_stop_feed+0x250/0x250 [ 243.628300][ T8287] ? _raw_spin_unlock_irq+0x1f/0x40 [ 243.633528][ T8287] ? lockdep_hardirqs_on+0x94/0x140 [ 243.638754][ T8287] dmx_ts_feed_start_filtering+0x11c/0x210 [ 243.644591][ T8287] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 243.650511][ T8287] dvb_dmxdev_filter_start+0x422/0x1060 [ 243.656093][ T8287] dvb_demux_do_ioctl+0x48d/0x530 [ 243.661159][ T8287] dvb_usercopy+0x191/0x2b0 [ 243.665688][ T8287] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 243.671285][ T8287] ? dvb_generic_ioctl+0xb0/0xb0 [ 243.676271][ T8287] ? dvb_demux_poll+0x210/0x210 [ 243.681152][ T8287] dvb_demux_ioctl+0x25/0x30 [ 243.685801][ T8287] __se_sys_ioctl+0xfa/0x170 [ 243.690427][ T8287] do_syscall_64+0x4c/0xa0 [ 243.694878][ T8287] ? clear_bhb_loop+0x60/0xb0 [ 243.699580][ T8287] ? clear_bhb_loop+0x60/0xb0 [ 243.704305][ T8287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 243.710250][ T8287] RIP: 0033:0x7f7329b9f559 [ 243.714690][ T8287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.734403][ T8287] RSP: 002b:00007f732aa8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.742849][ T8287] RAX: ffffffffffffffda RBX: 00007f7329e25fa0 RCX: 00007f7329b9f559 [ 243.750835][ T8287] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000007 [ 243.758830][ T8287] RBP: 00007f7329c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 243.766832][ T8287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.774824][ T8287] R13: 00007f7329e26038 R14: 00007f7329e25fa0 R15: 00007ffc29790758 [ 243.782839][ T8287] [ 243.822325][ T4518] usb 4-1: cannot find UAC_HEADER [ 243.888188][ T11] kworker/u4:1: attempt to access beyond end of device [ 243.888188][ T11] loop2: rw=4097, sector=10456, nr_sectors = 8 limit=64 [ 243.913297][ T4518] snd-usb-audio: probe of 4-1:1.3 failed with error -22 [ 243.933011][ T11] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 243.944617][ T4269] udevd[4269]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.973651][ T4518] usb 4-1: USB disconnect, device number 4 [ 243.979570][ T11] kworker/u4:1: attempt to access beyond end of device [ 243.979570][ T11] loop2: rw=4097, sector=13448, nr_sectors = 8 limit=64 [ 244.000804][ T11] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 244.043633][ T4277] BTRFS: error (device loop2: state A) in do_free_extent_accounting:2875: errno=-5 IO failure [ 244.066449][ T4277] BTRFS info (device loop2: state EA): forced readonly [ 244.073670][ T4277] BTRFS error (device loop2: state EA): failed to run delayed ref for logical 5296128 num_bytes 12288 type 178 action 2 ref_mod 1: -5 [ 244.087980][ T4277] BTRFS: error (device loop2: state EA) in btrfs_run_delayed_refs:2170: errno=-5 IO failure [ 244.104312][ T4277] BTRFS info (device loop2: state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 244.856476][ T8312] FAULT_INJECTION: forcing a failure. [ 244.856476][ T8312] name failslab, interval 1, probability 5, space 0, times 9998 [ 244.877547][ T8312] CPU: 0 PID: 8312 Comm: syz.0.1224 Not tainted syzkaller #0 [ 244.884976][ T8312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 244.895066][ T8312] Call Trace: [ 244.898374][ T8312] [ 244.901331][ T8312] dump_stack_lvl+0x188/0x24e [ 244.906069][ T8312] ? show_regs_print_info+0x12/0x12 [ 244.911338][ T8312] ? load_image+0x410/0x410 [ 244.915921][ T8312] ? __might_sleep+0xd0/0xd0 [ 244.920557][ T8312] ? __lock_acquire+0x7ea0/0x7ea0 [ 244.925645][ T8312] should_fail_ex+0x390/0x4c0 [ 244.930397][ T8312] should_failslab+0x5/0x20 [ 244.934932][ T8312] slab_pre_alloc_hook+0x59/0x300 [ 244.940011][ T8312] kmem_cache_alloc+0x56/0x2f0 [ 244.944822][ T8312] ? getname_flags+0xb7/0x500 [ 244.949550][ T8312] getname_flags+0xb7/0x500 [ 244.954121][ T8312] do_sys_openat2+0xdd/0x4f0 [ 244.958773][ T8312] ? do_sys_open+0xe0/0xe0 [ 244.963244][ T8312] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 244.969279][ T8312] ? lock_chain_count+0x20/0x20 [ 244.974184][ T8312] __x64_sys_openat+0x135/0x160 [ 244.979089][ T8312] do_syscall_64+0x4c/0xa0 [ 244.983559][ T8312] ? clear_bhb_loop+0x60/0xb0 [ 244.988300][ T8312] ? clear_bhb_loop+0x60/0xb0 [ 244.993041][ T8312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 244.998984][ T8312] RIP: 0033:0x7f7329b5fd8e [ 245.003433][ T8312] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 245.023090][ T8312] RSP: 002b:00007f732aa89b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 245.031573][ T8312] RAX: ffffffffffffffda RBX: 00007f732aa8a6c0 RCX: 00007f7329b5fd8e [ 245.039586][ T8312] RDX: 0000000000000002 RSI: 00007f732aa89c00 RDI: ffffffffffffff9c [ 245.047593][ T8312] RBP: 00007f732aa89c00 R08: 0000000000000000 R09: 0000000000000000 [ 245.055603][ T8312] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 245.063616][ T8312] R13: 00007f7329e26038 R14: 00007f7329e25fa0 R15: 00007ffc29790758 [ 245.071644][ T8312] [ 245.106410][ T8305] loop3: detected capacity change from 0 to 32768 [ 245.122819][ T8305] (syz.3.1221,8305,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "hear [ 245.122819][ T8305] " or missing value [ 245.150611][ T8312] FAULT_INJECTION: forcing a failure. [ 245.150611][ T8312] name failslab, interval 1, probability 5, space 0, times 9997 [ 245.164388][ T8305] (syz.3.1221,8305,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 245.183614][ T8312] CPU: 1 PID: 8312 Comm: syz.0.1224 Not tainted syzkaller #0 [ 245.191229][ T8312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 245.201339][ T8312] Call Trace: [ 245.204675][ T8312] [ 245.207636][ T8312] dump_stack_lvl+0x188/0x24e [ 245.212399][ T8312] ? show_regs_print_info+0x12/0x12 [ 245.217668][ T8312] ? load_image+0x410/0x410 [ 245.222186][ T8312] ? __might_sleep+0xd0/0xd0 [ 245.226833][ T8312] ? __lock_acquire+0x7ea0/0x7ea0 [ 245.231901][ T8312] should_fail_ex+0x390/0x4c0 [ 245.236616][ T8312] should_failslab+0x5/0x20 [ 245.241170][ T8312] slab_pre_alloc_hook+0x59/0x300 [ 245.246235][ T8312] ? lockdep_softirqs_off+0x430/0x430 [ 245.251645][ T8312] ? mempool_init_node+0x12b/0x480 [ 245.256816][ T8312] __kmem_cache_alloc_node+0x4f/0x270 [ 245.262254][ T8312] ? mempool_init_node+0x12b/0x480 [ 245.267414][ T8312] __kmalloc_node+0xa2/0x240 [ 245.272051][ T8312] ? __init_waitqueue_head+0xa4/0x140 [ 245.277480][ T8312] mempool_init_node+0x12b/0x480 [ 245.282487][ T8312] ? mempool_alloc_slab+0x60/0x60 [ 245.287583][ T8312] ? xa_load+0x60/0x2e0 [ 245.291793][ T8312] ? mempool_alloc_slab+0x60/0x60 [ 245.296871][ T8312] ? mempool_free+0x320/0x320 [ 245.301621][ T8312] mempool_init+0x36/0x50 [ 245.306011][ T8312] bioset_init+0x282/0x6d0 [ 245.310516][ T8312] dm_table_complete+0x1e23/0x24f0 [ 245.315679][ T8312] ? __kmem_cache_free+0xb6/0x200 [ 245.320820][ T8312] ? dm_table_add_target+0x6b8/0xbc0 [ 245.326194][ T8312] ? dm_destroy_crypto_profile+0x30/0x30 [ 245.331922][ T8312] table_load+0x375/0x760 [ 245.336329][ T8312] ? dev_wait+0x330/0x330 [ 245.340717][ T8312] ? __might_fault+0xc2/0x120 [ 245.345447][ T8312] ? __might_fault+0xa6/0x120 [ 245.350196][ T8312] dm_ctl_ioctl+0xa9c/0xec0 [ 245.354756][ T8312] ? dev_wait+0x330/0x330 [ 245.359128][ T8312] ? dm_poll+0x120/0x120 [ 245.363452][ T8312] ? bpf_lsm_file_ioctl+0x5/0x10 [ 245.368441][ T8312] ? security_file_ioctl+0x7c/0xa0 [ 245.373611][ T8312] ? dm_poll+0x120/0x120 [ 245.377899][ T8312] __se_sys_ioctl+0xfa/0x170 [ 245.382566][ T8312] do_syscall_64+0x4c/0xa0 [ 245.387068][ T8312] ? clear_bhb_loop+0x60/0xb0 [ 245.391798][ T8312] ? clear_bhb_loop+0x60/0xb0 [ 245.396533][ T8312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.402476][ T8312] RIP: 0033:0x7f7329b9f559 [ 245.406955][ T8312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.426617][ T8312] RSP: 002b:00007f732aa8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.435090][ T8312] RAX: ffffffffffffffda RBX: 00007f7329e25fa0 RCX: 00007f7329b9f559 [ 245.443120][ T8312] RDX: 0000200000000300 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 245.451137][ T8312] RBP: 00007f7329c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 245.459149][ T8312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.467174][ T8312] R13: 00007f7329e26038 R14: 00007f7329e25fa0 R15: 00007ffc29790758 [ 245.475208][ T8312] [ 245.507850][ T8312] device-mapper: table: unable to allocate mempools [ 245.546319][ T8312] FAULT_INJECTION: forcing a failure. [ 245.546319][ T8312] name failslab, interval 1, probability 5, space 0, times 9996 [ 245.579757][ T8312] CPU: 1 PID: 8312 Comm: syz.0.1224 Not tainted syzkaller #0 [ 245.587229][ T8312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 245.597318][ T8312] Call Trace: [ 245.600620][ T8312] [ 245.603566][ T8312] dump_stack_lvl+0x188/0x24e [ 245.608278][ T8312] ? show_regs_print_info+0x12/0x12 [ 245.613512][ T8312] ? load_image+0x410/0x410 [ 245.618033][ T8312] ? __might_sleep+0xd0/0xd0 [ 245.622637][ T8312] ? __lock_acquire+0x7ea0/0x7ea0 [ 245.627692][ T8312] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 245.633695][ T8312] should_fail_ex+0x390/0x4c0 [ 245.638395][ T8312] should_failslab+0x5/0x20 [ 245.642925][ T8312] slab_pre_alloc_hook+0x59/0x300 [ 245.648003][ T8312] ? lockdep_hardirqs_on+0x94/0x140 [ 245.653223][ T8312] kmem_cache_alloc+0x56/0x2f0 [ 245.658008][ T8312] ? taskstats_exit+0x149/0xcd0 [ 245.662889][ T8312] taskstats_exit+0x149/0xcd0 [ 245.667594][ T8312] ? sysctl_delayacct+0x220/0x220 [ 245.672646][ T8312] ? rcu_is_watching+0x11/0xa0 [ 245.677443][ T8312] ? mm_trace_rss_stat+0xa7/0x250 [ 245.682521][ T8312] ? sync_mm_rss+0x211/0x350 [ 245.687150][ T8312] do_exit+0x94b/0x2570 [ 245.691335][ T8312] ? put_task_struct+0x80/0x80 [ 245.696124][ T8312] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 245.702140][ T8312] ? lock_chain_count+0x20/0x20 [ 245.707028][ T8312] ? _raw_spin_lock_irq+0xb7/0xf0 [ 245.712071][ T8312] do_group_exit+0x229/0x2e0 [ 245.716684][ T8312] ? lockdep_hardirqs_on+0x94/0x140 [ 245.721908][ T8312] get_signal+0x1259/0x1340 [ 245.726452][ T8312] arch_do_signal_or_restart+0xc4/0x1310 [ 245.732117][ T8312] ? dm_poll+0x120/0x120 [ 245.736381][ T8312] ? do_futex+0x310/0x320 [ 245.740748][ T8312] ? get_sigframe_size+0x10/0x10 [ 245.745722][ T8312] ? __ia32_sys_get_robust_list+0x100/0x100 [ 245.751668][ T8312] ? exit_to_user_mode_loop+0x3b/0x110 [ 245.757165][ T8312] exit_to_user_mode_loop+0x70/0x110 [ 245.762474][ T8312] exit_to_user_mode_prepare+0xee/0x180 [ 245.768041][ T8312] syscall_exit_to_user_mode+0x16/0x40 [ 245.773531][ T8312] do_syscall_64+0x58/0xa0 [ 245.777970][ T8312] ? clear_bhb_loop+0x60/0xb0 [ 245.782672][ T8312] ? clear_bhb_loop+0x60/0xb0 [ 245.787379][ T8312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.793295][ T8312] RIP: 0033:0x7f7329b9f559 [ 245.797748][ T8312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.817377][ T8312] RSP: 002b:00007f732aa8a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 245.825806][ T8312] RAX: fffffffffffffe00 RBX: 00007f7329e25fa8 RCX: 00007f7329b9f559 [ 245.833882][ T8312] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7329e25fa8 [ 245.841867][ T8312] RBP: 00007f7329e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 245.849859][ T8312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.857934][ T8312] R13: 00007f7329e26038 R14: 00007ffc29790670 R15: 00007ffc29790758 [ 245.865935][ T8312] [ 246.139426][ T8316] loop3: detected capacity change from 0 to 32768 [ 246.250242][ T8316] XFS (loop3): Mounting V5 Filesystem [ 246.296448][ T8316] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 246.333295][ T8316] XFS (loop3): Starting recovery (logdev: internal) [ 246.354415][ T8316] XFS (loop3): Ending recovery (logdev: internal) [ 246.452770][ T4288] XFS (loop3): Unmounting Filesystem [ 246.641004][ T8330] FAULT_INJECTION: forcing a failure. [ 246.641004][ T8330] name failslab, interval 1, probability 5, space 0, times 10000 [ 246.663116][ T8330] CPU: 0 PID: 8330 Comm: syz.0.1229 Not tainted syzkaller #0 [ 246.670561][ T8330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 246.680620][ T8330] Call Trace: [ 246.683904][ T8330] [ 246.686853][ T8330] dump_stack_lvl+0x188/0x24e [ 246.691576][ T8330] ? show_regs_print_info+0x12/0x12 [ 246.696793][ T8330] ? load_image+0x410/0x410 [ 246.701314][ T8330] ? __lock_acquire+0x7ea0/0x7ea0 [ 246.706356][ T8330] should_fail_ex+0x390/0x4c0 [ 246.711070][ T8330] should_failslab+0x5/0x20 [ 246.715612][ T8330] slab_pre_alloc_hook+0x59/0x300 [ 246.720665][ T8330] ? vidtv_psi_service_desc_init+0x1f7/0x510 [ 246.726680][ T8330] __kmem_cache_alloc_node+0x4f/0x270 [ 246.732084][ T8330] ? vidtv_psi_service_desc_init+0x1f7/0x510 [ 246.738103][ T8330] __kmalloc_node_track_caller+0xa0/0x240 [ 246.743852][ T8330] kstrdup+0x37/0x70 [ 246.747813][ T8330] vidtv_psi_service_desc_init+0x1f7/0x510 [ 246.753653][ T8330] vidtv_channel_s302m_init+0x125/0x830 [ 246.759236][ T8330] ? vidtv_mux_init+0x3ad/0x1950 [ 246.764215][ T8330] vidtv_channels_init+0x41/0x90 [ 246.769192][ T8330] vidtv_mux_init+0x4d0/0x1950 [ 246.773990][ T8330] vidtv_start_feed+0x368/0x590 [ 246.778876][ T8330] ? vidtv_i2c_func+0x10/0x10 [ 246.783581][ T8330] ? vidtv_stop_feed+0x250/0x250 [ 246.788552][ T8330] ? _raw_spin_unlock_irq+0x1f/0x40 [ 246.793773][ T8330] ? lockdep_hardirqs_on+0x94/0x140 [ 246.799012][ T8330] dmx_ts_feed_start_filtering+0x11c/0x210 [ 246.804876][ T8330] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 246.810790][ T8330] dvb_dmxdev_filter_start+0x422/0x1060 [ 246.816381][ T8330] dvb_demux_do_ioctl+0x48d/0x530 [ 246.821441][ T8330] dvb_usercopy+0x191/0x2b0 [ 246.825970][ T8330] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 246.831551][ T8330] ? dvb_generic_ioctl+0xb0/0xb0 [ 246.836536][ T8330] ? dvb_demux_poll+0x210/0x210 [ 246.841484][ T8330] dvb_demux_ioctl+0x25/0x30 [ 246.846124][ T8330] __se_sys_ioctl+0xfa/0x170 [ 246.850756][ T8330] do_syscall_64+0x4c/0xa0 [ 246.855348][ T8330] ? clear_bhb_loop+0x60/0xb0 [ 246.860090][ T8330] ? clear_bhb_loop+0x60/0xb0 [ 246.864830][ T8330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 246.870780][ T8330] RIP: 0033:0x7f7329b9f559 [ 246.875238][ T8330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.894888][ T8330] RSP: 002b:00007f732aa8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.903346][ T8330] RAX: ffffffffffffffda RBX: 00007f7329e25fa0 RCX: 00007f7329b9f559 [ 246.911354][ T8330] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000007 [ 246.919363][ T8330] RBP: 00007f7329c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 246.927378][ T8330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.935411][ T8330] R13: 00007f7329e26038 R14: 00007f7329e25fa0 R15: 00007ffc29790758 [ 246.943464][ T8330] [ 247.001336][ T8330] FAULT_INJECTION: forcing a failure. [ 247.001336][ T8330] name failslab, interval 1, probability 5, space 0, times 9999 [ 247.021634][ T8330] CPU: 0 PID: 8330 Comm: syz.0.1229 Not tainted syzkaller #0 [ 247.029109][ T8330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 247.039203][ T8330] Call Trace: [ 247.042507][ T8330] [ 247.045465][ T8330] dump_stack_lvl+0x188/0x24e [ 247.050200][ T8330] ? show_regs_print_info+0x12/0x12 [ 247.055459][ T8330] ? load_image+0x410/0x410 [ 247.060018][ T8330] ? __might_sleep+0xd0/0xd0 [ 247.064649][ T8330] ? __lock_acquire+0x7ea0/0x7ea0 [ 247.069774][ T8330] should_fail_ex+0x390/0x4c0 [ 247.074505][ T8330] should_failslab+0x5/0x20 [ 247.079051][ T8330] slab_pre_alloc_hook+0x59/0x300 [ 247.084125][ T8330] ? vidtv_psi_registration_desc_init+0x30/0x2a0 [ 247.090514][ T8330] __kmem_cache_alloc_node+0x4f/0x270 [ 247.095937][ T8330] ? vidtv_psi_registration_desc_init+0x30/0x2a0 [ 247.102322][ T8330] __kmalloc+0xa3/0x240 [ 247.106531][ T8330] vidtv_psi_registration_desc_init+0x30/0x2a0 [ 247.112735][ T8330] ? vidtv_psi_pmt_stream_init+0x2c8/0x430 [ 247.118590][ T8330] vidtv_channel_s302m_init+0x286/0x830 [ 247.124181][ T8330] ? vidtv_mux_init+0x3ad/0x1950 [ 247.129183][ T8330] vidtv_channels_init+0x41/0x90 [ 247.134171][ T8330] vidtv_mux_init+0x4d0/0x1950 [ 247.138989][ T8330] vidtv_start_feed+0x368/0x590 [ 247.143891][ T8330] ? vidtv_i2c_func+0x10/0x10 [ 247.148722][ T8330] ? vidtv_stop_feed+0x250/0x250 [ 247.153724][ T8330] ? _raw_spin_unlock_irq+0x1f/0x40 [ 247.158975][ T8330] ? lockdep_hardirqs_on+0x94/0x140 [ 247.164231][ T8330] dmx_ts_feed_start_filtering+0x11c/0x210 [ 247.170087][ T8330] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 247.176034][ T8330] dvb_dmxdev_filter_start+0x422/0x1060 [ 247.181648][ T8330] dvb_demux_do_ioctl+0x48d/0x530 [ 247.186757][ T8330] dvb_usercopy+0x191/0x2b0 [ 247.191318][ T8330] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 247.196926][ T8330] ? dvb_generic_ioctl+0xb0/0xb0 [ 247.201949][ T8330] ? dvb_demux_poll+0x210/0x210 [ 247.206943][ T8330] dvb_demux_ioctl+0x25/0x30 [ 247.211591][ T8330] __se_sys_ioctl+0xfa/0x170 [ 247.216240][ T8330] do_syscall_64+0x4c/0xa0 [ 247.220711][ T8330] ? clear_bhb_loop+0x60/0xb0 [ 247.225436][ T8330] ? clear_bhb_loop+0x60/0xb0 [ 247.230164][ T8330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.236104][ T8330] RIP: 0033:0x7f7329b9f559 [ 247.240563][ T8330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.260210][ T8330] RSP: 002b:00007f732aa8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.268671][ T8330] RAX: ffffffffffffffda RBX: 00007f7329e25fa0 RCX: 00007f7329b9f559 [ 247.276727][ T8330] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000007 [ 247.284750][ T8330] RBP: 00007f7329c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 247.292767][ T8330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.300797][ T8330] R13: 00007f7329e26038 R14: 00007f7329e25fa0 R15: 00007ffc29790758 [ 247.308843][ T8330] [ 247.384453][ T8330] FAULT_INJECTION: forcing a failure. [ 247.384453][ T8330] name failslab, interval 1, probability 5, space 0, times 9998 [ 247.405602][ T8330] CPU: 0 PID: 8330 Comm: syz.0.1229 Not tainted syzkaller #0 [ 247.413078][ T8330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 247.423172][ T8330] Call Trace: [ 247.426490][ T8330] [ 247.429465][ T8330] dump_stack_lvl+0x188/0x24e [ 247.434195][ T8330] ? show_regs_print_info+0x12/0x12 [ 247.439435][ T8330] ? load_image+0x410/0x410 [ 247.443999][ T8330] ? __might_sleep+0xd0/0xd0 [ 247.448682][ T8330] ? __lock_acquire+0x7ea0/0x7ea0 [ 247.453800][ T8330] should_fail_ex+0x390/0x4c0 [ 247.458557][ T8330] should_failslab+0x5/0x20 [ 247.463081][ T8330] slab_pre_alloc_hook+0x59/0x300 [ 247.468153][ T8330] ? vidtv_psi_registration_desc_init+0x30/0x2a0 [ 247.474525][ T8330] __kmem_cache_alloc_node+0x4f/0x270 [ 247.479949][ T8330] ? vidtv_psi_registration_desc_init+0x30/0x2a0 [ 247.486303][ T8330] __kmalloc+0xa3/0x240 [ 247.490487][ T8330] vidtv_psi_registration_desc_init+0x30/0x2a0 [ 247.496663][ T8330] ? vidtv_psi_pmt_stream_init+0x2c8/0x430 [ 247.502501][ T8330] vidtv_channel_s302m_init+0x286/0x830 [ 247.508095][ T8330] ? vidtv_mux_init+0x3ad/0x1950 [ 247.513071][ T8330] vidtv_channels_init+0x41/0x90 [ 247.518054][ T8330] vidtv_mux_init+0x4d0/0x1950 [ 247.522853][ T8330] vidtv_start_feed+0x368/0x590 [ 247.527750][ T8330] ? vidtv_i2c_func+0x10/0x10 [ 247.532468][ T8330] ? vidtv_stop_feed+0x250/0x250 [ 247.537433][ T8330] ? _raw_spin_unlock_irq+0x1f/0x40 [ 247.542658][ T8330] ? lockdep_hardirqs_on+0x94/0x140 [ 247.547901][ T8330] dmx_ts_feed_start_filtering+0x11c/0x210 [ 247.553732][ T8330] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 247.559651][ T8330] dvb_dmxdev_filter_start+0x422/0x1060 [ 247.565238][ T8330] dvb_demux_do_ioctl+0x48d/0x530 [ 247.570300][ T8330] dvb_usercopy+0x191/0x2b0 [ 247.574830][ T8330] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 247.580417][ T8330] ? dvb_generic_ioctl+0xb0/0xb0 [ 247.585391][ T8330] ? dvb_demux_poll+0x210/0x210 [ 247.590282][ T8330] dvb_demux_ioctl+0x25/0x30 [ 247.594920][ T8330] __se_sys_ioctl+0xfa/0x170 [ 247.599534][ T8330] do_syscall_64+0x4c/0xa0 [ 247.603977][ T8330] ? clear_bhb_loop+0x60/0xb0 [ 247.608677][ T8330] ? clear_bhb_loop+0x60/0xb0 [ 247.613386][ T8330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.619304][ T8330] RIP: 0033:0x7f7329b9f559 [ 247.623740][ T8330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.643372][ T8330] RSP: 002b:00007f732aa8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.651810][ T8330] RAX: ffffffffffffffda RBX: 00007f7329e25fa0 RCX: 00007f7329b9f559 [ 247.659797][ T8330] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000007 [ 247.667786][ T8330] RBP: 00007f7329c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 247.675803][ T8330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.683792][ T8330] R13: 00007f7329e26038 R14: 00007f7329e25fa0 R15: 00007ffc29790758 [ 247.691794][ T8330] [ 248.189860][ T5757] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 248.342862][ C1] net_ratelimit: 63 callbacks suppressed [ 248.415871][ T5757] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 248.424263][ T5757] usb 1-1: config 1 has no interface number 0 [ 248.452612][ T5757] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 248.469091][ T5757] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.487350][ T5757] usb 1-1: Product: syz [ 248.496895][ T5757] usb 1-1: Manufacturer: syz [ 248.510696][ T5757] usb 1-1: SerialNumber: syz [ 248.775662][ T5757] usb 1-1: cannot find UAC_HEADER [ 248.860719][ T5757] snd-usb-audio: probe of 1-1:1.3 failed with error -22 [ 248.890132][ T4269] udevd[4269]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.913556][ T5757] usb 1-1: USB disconnect, device number 3 [ 249.103778][ T8354] FAULT_INJECTION: forcing a failure. [ 249.103778][ T8354] name failslab, interval 1, probability 5, space 0, times 9997 [ 249.126930][ T8354] CPU: 0 PID: 8354 Comm: syz.3.1237 Not tainted syzkaller #0 [ 249.134468][ T8354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 249.144583][ T8354] Call Trace: [ 249.147871][ T8354] [ 249.150828][ T8354] dump_stack_lvl+0x188/0x24e [ 249.155533][ T8354] ? show_regs_print_info+0x12/0x12 [ 249.160758][ T8354] ? load_image+0x410/0x410 [ 249.165276][ T8354] ? __might_sleep+0xd0/0xd0 [ 249.169897][ T8354] ? __lock_acquire+0x7ea0/0x7ea0 [ 249.174959][ T8354] should_fail_ex+0x390/0x4c0 [ 249.179686][ T8354] should_failslab+0x5/0x20 [ 249.184215][ T8354] slab_pre_alloc_hook+0x59/0x300 [ 249.189308][ T8354] ? tomoyo_encode+0x28a/0x550 [ 249.189338][ T8354] __kmem_cache_alloc_node+0x4f/0x270 [ 249.199504][ T8354] ? tomoyo_encode+0x28a/0x550 [ 249.199532][ T8354] __kmalloc+0xa3/0x240 [ 249.208736][ T8354] tomoyo_encode+0x28a/0x550 [ 249.213374][ T8354] tomoyo_realpath_from_path+0x578/0x5c0 [ 249.213421][ T8354] tomoyo_check_open_permission+0x212/0x440 [ 249.219312][ T8354] ? tomoyo_check_open_permission+0x1bf/0x440 [ 249.231604][ T8354] ? tomoyo_check_path_number_acl+0x280/0x280 [ 249.231642][ T8354] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 249.243938][ T8354] ? __lock_acquire+0x7ea0/0x7ea0 [ 249.244071][ T8354] ? __lock_acquire+0x7ea0/0x7ea0 [ 249.254035][ T8354] ? __rwlock_init+0x140/0x140 [ 249.254063][ T8354] ? tomoyo_file_open+0xe9/0x170 [ 249.263793][ T8354] security_file_open+0x5e/0xa0 [ 249.263819][ T8354] do_dentry_open+0x2fd/0x10b0 [ 249.273441][ T8354] ? memcpy+0x3c/0x60 [ 249.277466][ T8354] path_openat+0x2674/0x2f10 [ 249.277516][ T8354] ? kasan_set_track+0x60/0x70 [ 249.282340][ T8354] ? verify_lock_unused+0x140/0x140 [ 249.292312][ T8354] ? do_sys_openat2+0xdd/0x4f0 [ 249.292355][ T8354] ? do_filp_open+0x420/0x420 [ 249.301835][ T8354] do_filp_open+0x1ee/0x420 [ 249.306396][ T8354] ? vfs_tmpfile+0x490/0x490 [ 249.311085][ T8354] ? _raw_spin_unlock+0x24/0x40 [ 249.315998][ T8354] ? alloc_fd+0x590/0x640 [ 249.320379][ T8354] do_sys_openat2+0x14b/0x4f0 [ 249.325072][ T8354] ? do_sys_open+0xe0/0xe0 [ 249.329511][ T8354] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 249.335523][ T8354] ? lock_chain_count+0x20/0x20 [ 249.340399][ T8354] __x64_sys_openat+0x135/0x160 [ 249.345269][ T8354] do_syscall_64+0x4c/0xa0 [ 249.349699][ T8354] ? clear_bhb_loop+0x60/0xb0 [ 249.354384][ T8354] ? clear_bhb_loop+0x60/0xb0 [ 249.359092][ T8354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.365012][ T8354] RIP: 0033:0x7f1b90d5fd8e [ 249.369483][ T8354] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 249.389100][ T8354] RSP: 002b:00007f1b91d59b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 249.397520][ T8354] RAX: ffffffffffffffda RBX: 00007f1b91d5a6c0 RCX: 00007f1b90d5fd8e [ 249.405495][ T8354] RDX: 0000000000000002 RSI: 00007f1b91d59c00 RDI: ffffffffffffff9c [ 249.413470][ T8354] RBP: 00007f1b91d59c00 R08: 0000000000000000 R09: 0000000000000000 [ 249.421458][ T8354] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 249.429433][ T8354] R13: 00007f1b91026038 R14: 00007f1b91025fa0 R15: 00007ffc5f8c08f8 [ 249.437420][ T8354] [ 249.446762][ T8354] ERROR: Out of memory at tomoyo_realpath_from_path. [ 249.466528][ T8354] FAULT_INJECTION: forcing a failure. [ 249.466528][ T8354] name failslab, interval 1, probability 5, space 0, times 9996 [ 249.479730][ T8354] CPU: 0 PID: 8354 Comm: syz.3.1237 Not tainted syzkaller #0 [ 249.487164][ T8354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 249.487182][ T8354] Call Trace: [ 249.500540][ T8354] [ 249.500552][ T8354] dump_stack_lvl+0x188/0x24e [ 249.508282][ T8354] ? show_regs_print_info+0x12/0x12 [ 249.508318][ T8354] ? load_image+0x410/0x410 [ 249.518041][ T8354] ? __lock_acquire+0x7ea0/0x7ea0 [ 249.523101][ T8354] should_fail_ex+0x390/0x4c0 [ 249.527815][ T8354] should_failslab+0x5/0x20 [ 249.532347][ T8354] slab_pre_alloc_hook+0x59/0x300 [ 249.537409][ T8354] kmem_cache_alloc+0x56/0x2f0 [ 249.542212][ T8354] ? mempool_init_node+0x1e5/0x480 [ 249.547383][ T8354] ? mempool_free+0x320/0x320 [ 249.552115][ T8354] mempool_init_node+0x1e5/0x480 [ 249.557131][ T8354] ? mempool_alloc_slab+0x60/0x60 [ 249.562229][ T8354] ? mempool_free+0x320/0x320 [ 249.566988][ T8354] mempool_init+0x36/0x50 [ 249.571370][ T8354] bioset_init+0x282/0x6d0 [ 249.575906][ T8354] dm_table_complete+0x1e23/0x24f0 [ 249.581067][ T8354] ? __kmem_cache_free+0xb6/0x200 [ 249.586136][ T8354] ? dm_table_add_target+0x6b8/0xbc0 [ 249.591448][ T8354] ? dm_destroy_crypto_profile+0x30/0x30 [ 249.597124][ T8354] table_load+0x375/0x760 [ 249.601485][ T8354] ? dev_wait+0x330/0x330 [ 249.605839][ T8354] ? __might_fault+0xc2/0x120 [ 249.610537][ T8354] ? __might_fault+0xa6/0x120 [ 249.615239][ T8354] dm_ctl_ioctl+0xa9c/0xec0 [ 249.619795][ T8354] ? dev_wait+0x330/0x330 [ 249.624178][ T8354] ? dm_poll+0x120/0x120 [ 249.628488][ T8354] ? bpf_lsm_file_ioctl+0x5/0x10 [ 249.633478][ T8354] ? security_file_ioctl+0x7c/0xa0 [ 249.638619][ T8354] ? dm_poll+0x120/0x120 [ 249.642902][ T8354] __se_sys_ioctl+0xfa/0x170 [ 249.647528][ T8354] do_syscall_64+0x4c/0xa0 [ 249.651986][ T8354] ? clear_bhb_loop+0x60/0xb0 [ 249.656696][ T8354] ? clear_bhb_loop+0x60/0xb0 [ 249.661404][ T8354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.667321][ T8354] RIP: 0033:0x7f1b90d9f559 [ 249.671764][ T8354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.691491][ T8354] RSP: 002b:00007f1b91d5a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.699928][ T8354] RAX: ffffffffffffffda RBX: 00007f1b91025fa0 RCX: 00007f1b90d9f559 [ 249.707946][ T8354] RDX: 0000200000000300 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 249.715942][ T8354] RBP: 00007f1b90e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 249.723936][ T8354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.731929][ T8354] R13: 00007f1b91026038 R14: 00007f1b91025fa0 R15: 00007ffc5f8c08f8 [ 249.739983][ T8354] [ 249.755078][ T8354] device-mapper: table: unable to allocate mempools [ 249.813823][ T8354] FAULT_INJECTION: forcing a failure. [ 249.813823][ T8354] name failslab, interval 1, probability 5, space 0, times 9995 [ 249.832398][ T8354] CPU: 0 PID: 8354 Comm: syz.3.1237 Not tainted syzkaller #0 [ 249.832421][ T8354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 249.850042][ T8354] Call Trace: [ 249.853355][ T8354] [ 249.856326][ T8354] dump_stack_lvl+0x188/0x24e [ 249.861064][ T8354] ? show_regs_print_info+0x12/0x12 [ 249.866317][ T8354] ? load_image+0x410/0x410 [ 249.870869][ T8354] ? __might_sleep+0xd0/0xd0 [ 249.875482][ T8354] ? __lock_acquire+0x7ea0/0x7ea0 [ 249.880555][ T8354] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 249.880588][ T8354] should_fail_ex+0x390/0x4c0 [ 249.880617][ T8354] should_failslab+0x5/0x20 [ 249.880637][ T8354] slab_pre_alloc_hook+0x59/0x300 [ 249.880659][ T8354] ? lockdep_hardirqs_on+0x94/0x140 [ 249.880684][ T8354] kmem_cache_alloc+0x56/0x2f0 [ 249.880705][ T8354] ? taskstats_exit+0x149/0xcd0 [ 249.880738][ T8354] taskstats_exit+0x149/0xcd0 [ 249.880772][ T8354] ? sysctl_delayacct+0x220/0x220 [ 249.880801][ T8354] ? rcu_is_watching+0x11/0xa0 [ 249.880830][ T8354] ? mm_trace_rss_stat+0xa7/0x250 [ 249.896008][ T8354] ? sync_mm_rss+0x211/0x350 [ 249.906234][ T8354] do_exit+0x94b/0x2570 [ 249.920577][ T8354] ? put_task_struct+0x80/0x80 [ 249.930362][ T8354] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 249.930413][ T8354] ? lock_chain_count+0x20/0x20 [ 249.930444][ T8354] ? _raw_spin_lock_irq+0xb7/0xf0 [ 249.949086][ T8354] do_group_exit+0x229/0x2e0 [ 249.949119][ T8354] ? lockdep_hardirqs_on+0x94/0x140 [ 249.949147][ T8354] get_signal+0x1259/0x1340 [ 249.959999][ T8354] arch_do_signal_or_restart+0xc4/0x1310 [ 249.960066][ T8354] ? do_futex+0x310/0x320 [ 249.979375][ T8354] ? rcu_force_quiescent_state+0x220/0x220 [ 249.979412][ T8354] ? get_sigframe_size+0x10/0x10 [ 249.979437][ T8354] ? __ia32_sys_get_robust_list+0x100/0x100 [ 249.979458][ T8354] ? blkcg_maybe_throttle_current+0x1a0/0xa80 [ 249.979498][ T8354] ? exit_to_user_mode_loop+0x3b/0x110 [ 249.979530][ T8354] exit_to_user_mode_loop+0x70/0x110 [ 249.989526][ T8354] exit_to_user_mode_prepare+0xee/0x180 [ 249.989563][ T8354] syscall_exit_to_user_mode+0x16/0x40 [ 250.000289][ T8354] do_syscall_64+0x58/0xa0 [ 250.000319][ T8354] ? clear_bhb_loop+0x60/0xb0 [ 250.012371][ T8354] ? clear_bhb_loop+0x60/0xb0 [ 250.023120][ T8354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.023153][ T8354] RIP: 0033:0x7f1b90d9f559 [ 250.034165][ T8354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.034185][ T8354] RSP: 002b:00007f1b91d5a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 250.034209][ T8354] RAX: fffffffffffffe00 RBX: 00007f1b91025fa8 RCX: 00007f1b90d9f559 [ 250.043331][ T8354] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1b91025fa8 [ 250.043349][ T8354] RBP: 00007f1b91025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 250.043364][ T8354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.043378][ T8354] R13: 00007f1b91026038 R14: 00007ffc5f8c0810 R15: 00007ffc5f8c08f8 [ 250.053959][ T8354] [ 250.485681][ T8359] loop0: detected capacity change from 0 to 32768 [ 250.554309][ T8364] FAULT_INJECTION: forcing a failure. [ 250.554309][ T8364] name failslab, interval 1, probability 5, space 0, times 10000 [ 250.581349][ T8364] CPU: 1 PID: 8364 Comm: syz.4.1241 Not tainted syzkaller #0 [ 250.588791][ T8364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 250.598884][ T8364] Call Trace: [ 250.602196][ T8364] [ 250.605146][ T8364] dump_stack_lvl+0x188/0x24e [ 250.609856][ T8364] ? show_regs_print_info+0x12/0x12 [ 250.615096][ T8364] ? load_image+0x410/0x410 [ 250.619644][ T8364] ? __might_sleep+0xd0/0xd0 [ 250.624254][ T8364] ? __lock_acquire+0x7ea0/0x7ea0 [ 250.629297][ T8364] ? vidtv_start_feed+0x368/0x590 [ 250.634344][ T8364] ? dvb_dmxdev_filter_start+0x422/0x1060 [ 250.640087][ T8364] ? dvb_demux_do_ioctl+0x48d/0x530 [ 250.645326][ T8364] should_fail_ex+0x390/0x4c0 [ 250.650042][ T8364] should_failslab+0x5/0x20 [ 250.654564][ T8364] slab_pre_alloc_hook+0x59/0x300 [ 250.659611][ T8364] ? vidtv_s302m_encoder_init+0xde/0x770 [ 250.665277][ T8364] __kmem_cache_alloc_node+0x4f/0x270 [ 250.670662][ T8364] ? vidtv_s302m_encoder_init+0xde/0x770 [ 250.676309][ T8364] kmalloc_trace+0x26/0xe0 [ 250.680752][ T8364] vidtv_s302m_encoder_init+0xde/0x770 [ 250.686261][ T8364] ? vidtv_pes_write_into+0x11e0/0x11e0 [ 250.691880][ T8364] ? rcu_is_watching+0x11/0xa0 [ 250.696688][ T8364] ? vidtv_psi_registration_desc_init+0x30/0x2a0 [ 250.703047][ T8364] ? __kmalloc+0xe4/0x240 [ 250.707408][ T8364] vidtv_channel_s302m_init+0x357/0x830 [ 250.712996][ T8364] ? vidtv_mux_init+0x3ad/0x1950 [ 250.717992][ T8364] vidtv_channels_init+0x41/0x90 [ 250.722962][ T8364] vidtv_mux_init+0x4d0/0x1950 [ 250.727776][ T8364] vidtv_start_feed+0x368/0x590 [ 250.732676][ T8364] ? vidtv_i2c_func+0x10/0x10 [ 250.737374][ T8364] ? vidtv_stop_feed+0x250/0x250 [ 250.742336][ T8364] ? _raw_spin_unlock_irq+0x1f/0x40 [ 250.747558][ T8364] ? lockdep_hardirqs_on+0x94/0x140 [ 250.752786][ T8364] dmx_ts_feed_start_filtering+0x11c/0x210 [ 250.758618][ T8364] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 250.764538][ T8364] dvb_dmxdev_filter_start+0x422/0x1060 [ 250.770125][ T8364] dvb_demux_do_ioctl+0x48d/0x530 [ 250.775184][ T8364] dvb_usercopy+0x191/0x2b0 [ 250.779720][ T8364] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 250.785287][ T8364] ? dvb_generic_ioctl+0xb0/0xb0 [ 250.790297][ T8364] ? dvb_demux_poll+0x210/0x210 [ 250.795178][ T8364] dvb_demux_ioctl+0x25/0x30 [ 250.799791][ T8364] __se_sys_ioctl+0xfa/0x170 [ 250.804431][ T8364] do_syscall_64+0x4c/0xa0 [ 250.808881][ T8364] ? clear_bhb_loop+0x60/0xb0 [ 250.813593][ T8364] ? clear_bhb_loop+0x60/0xb0 [ 250.818309][ T8364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.824234][ T8364] RIP: 0033:0x7f1541b9f559 [ 250.828675][ T8364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.848305][ T8364] RSP: 002b:00007f1542ab3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.856746][ T8364] RAX: ffffffffffffffda RBX: 00007f1541e25fa0 RCX: 00007f1541b9f559 [ 250.864727][ T8364] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000007 [ 250.864744][ T8364] RBP: 00007f1541c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 250.880714][ T8364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.880731][ T8364] R13: 00007f1541e26038 R14: 00007f1541e25fa0 R15: 00007ffde1f8ada8 [ 250.896808][ T8364] [ 250.948767][ T8364] FAULT_INJECTION: forcing a failure. [ 250.948767][ T8364] name failslab, interval 1, probability 5, space 0, times 9999 [ 250.981681][ T8359] XFS (loop0): Mounting V5 Filesystem [ 250.997367][ T8364] CPU: 1 PID: 8364 Comm: syz.4.1241 Not tainted syzkaller #0 [ 251.004803][ T8364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 251.014902][ T8364] Call Trace: [ 251.018221][ T8364] [ 251.021186][ T8364] dump_stack_lvl+0x188/0x24e [ 251.021229][ T8364] ? show_regs_print_info+0x12/0x12 [ 251.031117][ T8364] ? load_image+0x410/0x410 [ 251.031148][ T8364] ? __might_sleep+0xd0/0xd0 [ 251.040273][ T8364] ? __lock_acquire+0x7ea0/0x7ea0 [ 251.040314][ T8364] should_fail_ex+0x390/0x4c0 [ 251.050058][ T8364] should_failslab+0x5/0x20 [ 251.050082][ T8364] slab_pre_alloc_hook+0x59/0x300 [ 251.050110][ T8364] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 251.059642][ T8364] __kmem_cache_alloc_node+0x4f/0x270 [ 251.059677][ T8364] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 251.070766][ T8364] __kmalloc+0xa3/0x240 [ 251.080674][ T8364] tomoyo_realpath_from_path+0xe2/0x5c0 [ 251.080704][ T8364] ? tomoyo_domain+0xd2/0x120 [ 251.090941][ T8364] ? tomoyo_path_number_perm+0x205/0x650 [ 251.090981][ T8364] tomoyo_path_number_perm+0x22f/0x650 [ 251.102148][ T8364] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 251.102264][ T8364] ? __fget_files+0x28/0x460 [ 251.112395][ T8364] security_file_ioctl+0x6c/0xa0 [ 251.117411][ T8364] __se_sys_ioctl+0x48/0x170 [ 251.122052][ T8364] do_syscall_64+0x4c/0xa0 [ 251.126528][ T8364] ? clear_bhb_loop+0x60/0xb0 [ 251.131240][ T8364] ? clear_bhb_loop+0x60/0xb0 [ 251.131276][ T8364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.136224][ T8364] RIP: 0033:0x7f1541b9f559 [ 251.136248][ T8364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.136268][ T8364] RSP: 002b:00007f1542ab3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.136293][ T8364] RAX: ffffffffffffffda RBX: 00007f1541e25fa0 RCX: 00007f1541b9f559 [ 251.136308][ T8364] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000007 [ 251.191023][ T8364] RBP: 00007f1541c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 251.191042][ T8364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.191055][ T8364] R13: 00007f1541e26038 R14: 00007f1541e25fa0 R15: 00007ffde1f8ada8 [ 251.191086][ T8364] [ 251.240470][ T8364] ERROR: Out of memory at tomoyo_realpath_from_path. [ 251.254859][ T8364] FAULT_INJECTION: forcing a failure. [ 251.254859][ T8364] name failslab, interval 1, probability 5, space 0, times 9998 [ 251.322921][ T8359] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 251.346154][ T8359] XFS (loop0): Starting recovery (logdev: internal) [ 251.351402][ T8364] CPU: 0 PID: 8364 Comm: syz.4.1241 Not tainted syzkaller #0 [ 251.360203][ T8364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 251.370279][ T8364] Call Trace: [ 251.370291][ T8364] [ 251.370306][ T8364] dump_stack_lvl+0x188/0x24e [ 251.370348][ T8364] ? show_regs_print_info+0x12/0x12 [ 251.370381][ T8364] ? load_image+0x410/0x410 [ 251.370412][ T8364] ? __might_sleep+0xd0/0xd0 [ 251.370435][ T8364] ? __lock_acquire+0x7ea0/0x7ea0 [ 251.370473][ T8364] should_fail_ex+0x390/0x4c0 [ 251.370506][ T8364] should_failslab+0x5/0x20 [ 251.370528][ T8364] slab_pre_alloc_hook+0x59/0x300 [ 251.391238][ T8364] ? vidtv_psi_pat_program_init+0x56/0x270 [ 251.405556][ T8364] __kmem_cache_alloc_node+0x4f/0x270 [ 251.405587][ T8364] ? kstrdup+0x52/0x70 [ 251.405630][ T8364] ? vidtv_psi_pat_program_init+0x56/0x270 [ 251.405656][ T8364] kmalloc_trace+0x26/0xe0 [ 251.405681][ T8364] vidtv_psi_pat_program_init+0x56/0x270 [ 251.405710][ T8364] vidtv_channel_s302m_init+0x1f0/0x830 [ 251.405758][ T8364] ? vidtv_mux_init+0x3ad/0x1950 [ 251.405795][ T8364] vidtv_channels_init+0x41/0x90 [ 251.405824][ T8364] vidtv_mux_init+0x4d0/0x1950 [ 251.405862][ T8364] vidtv_start_feed+0x368/0x590 [ 251.405893][ T8364] ? vidtv_i2c_func+0x10/0x10 [ 251.405916][ T8364] ? vidtv_stop_feed+0x250/0x250 [ 251.405945][ T8364] ? _raw_spin_unlock_irq+0x1f/0x40 [ 251.405973][ T8364] ? lockdep_hardirqs_on+0x94/0x140 [ 251.406006][ T8364] dmx_ts_feed_start_filtering+0x11c/0x210 [ 251.406031][ T8364] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 251.446855][ T8364] dvb_dmxdev_filter_start+0x422/0x1060 [ 251.470134][ T8359] XFS (loop0): Ending recovery (logdev: internal) [ 251.471987][ T8364] dvb_demux_do_ioctl+0x48d/0x530 [ 251.521076][ T8364] dvb_usercopy+0x191/0x2b0 [ 251.525629][ T8364] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 251.531246][ T8364] ? dvb_generic_ioctl+0xb0/0xb0 [ 251.536275][ T8364] ? dvb_demux_poll+0x210/0x210 [ 251.541186][ T8364] dvb_demux_ioctl+0x25/0x30 [ 251.545896][ T8364] __se_sys_ioctl+0xfa/0x170 [ 251.550553][ T8364] do_syscall_64+0x4c/0xa0 [ 251.555022][ T8364] ? clear_bhb_loop+0x60/0xb0 [ 251.559746][ T8364] ? clear_bhb_loop+0x60/0xb0 [ 251.564454][ T8364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.570407][ T8364] RIP: 0033:0x7f1541b9f559 [ 251.574845][ T8364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.574869][ T8364] RSP: 002b:00007f1542ab3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.602946][ T8364] RAX: ffffffffffffffda RBX: 00007f1541e25fa0 RCX: 00007f1541b9f559 [ 251.610952][ T8364] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000007 [ 251.618979][ T8364] RBP: 00007f1541c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 251.627071][ T8364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.635081][ T8364] R13: 00007f1541e26038 R14: 00007f1541e25fa0 R15: 00007ffde1f8ada8 [ 251.643087][ T8364] [ 251.749327][ T4276] XFS (loop0): Unmounting Filesystem [ 252.017352][ T8394] syz.0.1245 uses obsolete (PF_INET,SOCK_PACKET) [ 252.048484][ T8394] FAULT_INJECTION: forcing a failure. [ 252.048484][ T8394] name failslab, interval 1, probability 5, space 0, times 100 [ 252.084154][ T8394] CPU: 0 PID: 8394 Comm: syz.0.1245 Not tainted syzkaller #0 [ 252.091634][ T8394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 252.101749][ T8394] Call Trace: [ 252.105078][ T8394] [ 252.108046][ T8394] dump_stack_lvl+0x188/0x24e [ 252.112805][ T8394] ? show_regs_print_info+0x12/0x12 [ 252.118162][ T8394] ? load_image+0x410/0x410 [ 252.122696][ T8394] ? __lock_acquire+0x7ea0/0x7ea0 [ 252.122739][ T8394] should_fail_ex+0x390/0x4c0 [ 252.122771][ T8394] should_failslab+0x5/0x20 [ 252.122793][ T8394] slab_pre_alloc_hook+0x59/0x300 [ 252.122818][ T8394] ? do_user_addr_fault+0x818/0xbb0 [ 252.122851][ T8394] kmem_cache_alloc_lru+0x49/0x2e0 [ 252.122876][ T8394] ? sock_alloc_inode+0x24/0xc0 [ 252.122906][ T8394] ? apparmor_socket_create+0x1aa/0x220 [ 252.122936][ T8394] sock_alloc_inode+0x24/0xc0 [ 252.122965][ T8394] ? sockfs_init_fs_context+0xa0/0xa0 [ 252.122994][ T8394] new_inode_pseudo+0x5f/0x1c0 [ 252.123024][ T8394] __sock_create+0x129/0x940 [ 252.123045][ T8394] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 252.123081][ T8394] __sys_socket+0xc4/0x190 [ 252.123108][ T8394] __x64_sys_socket+0x76/0x80 [ 252.123135][ T8394] do_syscall_64+0x4c/0xa0 [ 252.123165][ T8394] ? clear_bhb_loop+0x60/0xb0 [ 252.163250][ T8394] ? clear_bhb_loop+0x60/0xb0 [ 252.188668][ T8394] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.217624][ T8394] RIP: 0033:0x7f7329b9f559 [ 252.222081][ T8394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.241718][ T8394] RSP: 002b:00007f732aa8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 252.241747][ T8394] RAX: ffffffffffffffda RBX: 00007f7329e25fa0 RCX: 00007f7329b9f559 [ 252.241763][ T8394] RDX: 0000000000000000 RSI: 0000000000000802 RDI: 000000000000000a [ 252.241776][ T8394] RBP: 00007f7329c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 252.241790][ T8394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.241804][ T8394] R13: 00007f7329e26038 R14: 00007f7329e25fa0 R15: 00007ffc29790758 [ 252.241836][ T8394] [ 252.339222][ T8394] FAULT_INJECTION: forcing a failure. [ 252.339222][ T8394] name failslab, interval 1, probability 5, space 0, times 99 [ 252.361359][ T8396] FAULT_INJECTION: forcing a failure. [ 252.361359][ T8396] name failslab, interval 1, probability 5, space 0, times 99 [ 252.395274][ T8394] CPU: 0 PID: 8394 Comm: syz.0.1245 Not tainted syzkaller #0 [ 252.402729][ T8394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 252.412825][ T8394] Call Trace: [ 252.416150][ T8394] [ 252.419102][ T8394] dump_stack_lvl+0x188/0x24e [ 252.423868][ T8394] ? show_regs_print_info+0x12/0x12 [ 252.429132][ T8394] ? load_image+0x410/0x410 [ 252.429168][ T8394] ? __might_sleep+0xd0/0xd0 [ 252.429193][ T8394] ? __lock_acquire+0x7ea0/0x7ea0 [ 252.429232][ T8394] should_fail_ex+0x390/0x4c0 [ 252.429265][ T8394] should_failslab+0x5/0x20 [ 252.429287][ T8394] slab_pre_alloc_hook+0x59/0x300 [ 252.429323][ T8394] ? mas_next_entry+0xde9/0xe90 [ 252.429357][ T8394] kmem_cache_alloc+0x56/0x2f0 [ 252.429381][ T8394] ? vm_area_dup+0x23/0x1a0 [ 252.429410][ T8394] vm_area_dup+0x23/0x1a0 [ 252.429436][ T8394] copy_mm+0xb08/0x16e0 [ 252.429475][ T8394] ? copy_signal+0x640/0x640 [ 252.429524][ T8394] ? __init_rwsem+0x11e/0x160 [ 252.434090][ T8394] ? copy_signal+0x51f/0x640 [ 252.448407][ T8394] copy_process+0x1952/0x4070 [ 252.499195][ T8394] ? plist_add+0x3d7/0x490 [ 252.503676][ T8394] ? copy_process+0x974/0x4070 [ 252.508477][ T8394] ? futex_wait+0x525/0x640 [ 252.513030][ T8394] ? idle_dummy+0x10/0x10 [ 252.517395][ T8394] kernel_clone+0x24b/0x900 [ 252.521925][ T8394] ? __seccomp_filter+0x848/0x1bf0 [ 252.527083][ T8394] ? create_io_thread+0x170/0x170 [ 252.532135][ T8394] ? do_futex+0x310/0x320 [ 252.536484][ T8394] ? slab_pre_alloc_hook+0x59/0x300 [ 252.541715][ T8394] __x64_sys_clone+0x1a7/0x220 [ 252.546507][ T8394] ? __ia32_sys_vfork+0x140/0x140 [ 252.551571][ T8394] ? lock_chain_count+0x20/0x20 [ 252.556456][ T8394] ? __secure_computing+0x10d/0x2f0 [ 252.561694][ T8394] do_syscall_64+0x4c/0xa0 [ 252.566146][ T8394] ? clear_bhb_loop+0x60/0xb0 [ 252.570854][ T8394] ? clear_bhb_loop+0x60/0xb0 [ 252.575556][ T8394] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.581477][ T8394] RIP: 0033:0x7f7329b9f559 [ 252.585917][ T8394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.605542][ T8394] RSP: 002b:00007f732aa89fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 252.613982][ T8394] RAX: ffffffffffffffda RBX: 00007f7329e25fa0 RCX: 00007f7329b9f559 [ 252.621984][ T8394] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 252.629996][ T8394] RBP: 00007f7329c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 252.637995][ T8394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.646000][ T8394] R13: 00007f7329e26038 R14: 00007f7329e25fa0 R15: 00007ffc29790758 [ 252.654010][ T8394] [ 252.709715][ T8396] CPU: 1 PID: 8396 Comm: syz.3.1249 Not tainted syzkaller #0 [ 252.717178][ T8396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 252.727269][ T8396] Call Trace: [ 252.730587][ T8396] [ 252.733577][ T8396] dump_stack_lvl+0x188/0x24e [ 252.738338][ T8396] ? show_regs_print_info+0x12/0x12 [ 252.743593][ T8396] ? load_image+0x410/0x410 [ 252.748154][ T8396] ? __might_sleep+0xd0/0xd0 [ 252.752880][ T8396] ? __lock_acquire+0x7ea0/0x7ea0 [ 252.757963][ T8396] should_fail_ex+0x390/0x4c0 [ 252.762730][ T8396] should_failslab+0x5/0x20 [ 252.767277][ T8396] slab_pre_alloc_hook+0x59/0x300 [ 252.772348][ T8396] ? vidtv_psi_nit_table_init+0x2b3/0x850 [ 252.778162][ T8396] __kmem_cache_alloc_node+0x4f/0x270 [ 252.783578][ T8396] ? vidtv_psi_nit_table_init+0x2b3/0x850 [ 252.789353][ T8396] __kmalloc_node_track_caller+0xa0/0x240 [ 252.795116][ T8396] kstrdup+0x37/0x70 [ 252.799063][ T8396] vidtv_psi_nit_table_init+0x2b3/0x850 [ 252.804669][ T8396] vidtv_channel_si_init+0x108e/0x15c0 [ 252.810206][ T8396] vidtv_mux_init+0x4ff/0x1950 [ 252.815024][ T8396] vidtv_start_feed+0x368/0x590 [ 252.819923][ T8396] ? vidtv_i2c_func+0x10/0x10 [ 252.824667][ T8396] ? vidtv_stop_feed+0x250/0x250 [ 252.829653][ T8396] ? _raw_spin_unlock_irq+0x1f/0x40 [ 252.834894][ T8396] ? lockdep_hardirqs_on+0x94/0x140 [ 252.840146][ T8396] dmx_ts_feed_start_filtering+0x11c/0x210 [ 252.846088][ T8396] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 252.852037][ T8396] dvb_dmxdev_filter_start+0x422/0x1060 [ 252.857662][ T8396] dvb_demux_do_ioctl+0x48d/0x530 [ 252.862729][ T8396] dvb_usercopy+0x191/0x2b0 [ 252.867283][ T8396] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 252.872902][ T8396] ? dvb_generic_ioctl+0xb0/0xb0 [ 252.872977][ T8396] ? dvb_demux_poll+0x210/0x210 [ 252.873010][ T8396] dvb_demux_ioctl+0x25/0x30 [ 252.873043][ T8396] __se_sys_ioctl+0xfa/0x170 [ 252.892153][ T8396] do_syscall_64+0x4c/0xa0 [ 252.896624][ T8396] ? clear_bhb_loop+0x60/0xb0 [ 252.901347][ T8396] ? clear_bhb_loop+0x60/0xb0 [ 252.906171][ T8396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.912121][ T8396] RIP: 0033:0x7f1b90d9f559 [ 252.916576][ T8396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.936235][ T8396] RSP: 002b:00007f1b91d39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.944701][ T8396] RAX: ffffffffffffffda RBX: 00007f1b91026090 RCX: 00007f1b90d9f559 [ 252.952720][ T8396] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000006 [ 252.960758][ T8396] RBP: 00007f1b90e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 252.968795][ T8396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.976812][ T8396] R13: 00007f1b91026128 R14: 00007f1b91026090 R15: 00007ffc5f8c08f8 [ 252.980319][ T8399] device syzkaller0 entered promiscuous mode [ 252.984832][ T8396] [ 253.125920][ T8398] netlink: 'syz.0.1245': attribute type 10 has an invalid length. [ 253.154865][ T8398] bridge0: port 3(syz_tun) entered disabled state [ 253.195164][ T8398] bridge0: port 3(syz_tun) entered disabled state [ 253.214709][ T8398] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 253.379043][ C1] net_ratelimit: 53 callbacks suppressed [ 253.725468][ T8415] loop3: detected capacity change from 0 to 32768 [ 253.775545][ T8424] FAULT_INJECTION: forcing a failure. [ 253.775545][ T8424] name failslab, interval 1, probability 5, space 0, times 10000 [ 253.792040][ T8415] XFS (loop3): Mounting V5 Filesystem [ 253.800750][ T8424] CPU: 0 PID: 8424 Comm: syz.4.1257 Not tainted syzkaller #0 [ 253.808180][ T8424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 253.818351][ T8424] Call Trace: [ 253.821666][ T8424] [ 253.824635][ T8424] dump_stack_lvl+0x188/0x24e [ 253.829385][ T8424] ? show_regs_print_info+0x12/0x12 [ 253.834729][ T8424] ? load_image+0x410/0x410 [ 253.839295][ T8424] ? __might_sleep+0xd0/0xd0 [ 253.844012][ T8424] ? __lock_acquire+0x7ea0/0x7ea0 [ 253.849192][ T8424] should_fail_ex+0x390/0x4c0 [ 253.853933][ T8424] should_failslab+0x5/0x20 [ 253.858484][ T8424] slab_pre_alloc_hook+0x59/0x300 [ 253.863585][ T8424] ? tomoyo_encode+0x28a/0x550 [ 253.868374][ T8424] __kmem_cache_alloc_node+0x4f/0x270 [ 253.873815][ T8424] ? tomoyo_encode+0x28a/0x550 [ 253.878615][ T8424] __kmalloc+0xa3/0x240 [ 253.882837][ T8424] tomoyo_encode+0x28a/0x550 [ 253.887485][ T8424] tomoyo_realpath_from_path+0x578/0x5c0 [ 253.893212][ T8424] ? tomoyo_domain+0xd2/0x120 [ 253.897936][ T8424] ? tomoyo_path_number_perm+0x205/0x650 [ 253.903639][ T8424] tomoyo_path_number_perm+0x22f/0x650 [ 253.909148][ T8424] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 253.914691][ T8424] ? __fget_files+0x28/0x460 [ 253.919349][ T8424] security_file_ioctl+0x6c/0xa0 [ 253.924354][ T8424] __se_sys_ioctl+0x48/0x170 [ 253.928999][ T8424] do_syscall_64+0x4c/0xa0 [ 253.933504][ T8424] ? clear_bhb_loop+0x60/0xb0 [ 253.938242][ T8424] ? clear_bhb_loop+0x60/0xb0 [ 253.942976][ T8424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.948959][ T8424] RIP: 0033:0x7f1541b9f559 [ 253.953421][ T8424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.973080][ T8424] RSP: 002b:00007f1542ab3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.981533][ T8424] RAX: ffffffffffffffda RBX: 00007f1541e25fa0 RCX: 00007f1541b9f559 [ 253.989544][ T8424] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000007 [ 253.997590][ T8424] RBP: 00007f1541c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 254.005742][ T8424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.013765][ T8424] R13: 00007f1541e26038 R14: 00007f1541e25fa0 R15: 00007ffde1f8ada8 [ 254.021831][ T8424] [ 254.037058][ T8424] ERROR: Out of memory at tomoyo_realpath_from_path. [ 254.045423][ T8424] FAULT_INJECTION: forcing a failure. [ 254.045423][ T8424] name failslab, interval 1, probability 5, space 0, times 9999 [ 254.058492][ T8424] CPU: 0 PID: 8424 Comm: syz.4.1257 Not tainted syzkaller #0 [ 254.065911][ T8424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 254.076094][ T8424] Call Trace: [ 254.079391][ T8424] [ 254.079402][ T8424] dump_stack_lvl+0x188/0x24e [ 254.079443][ T8424] ? show_regs_print_info+0x12/0x12 [ 254.087141][ T8424] ? load_image+0x410/0x410 [ 254.087173][ T8424] ? __might_sleep+0xd0/0xd0 [ 254.096901][ T8424] ? __lock_acquire+0x7ea0/0x7ea0 [ 254.106635][ T8424] should_fail_ex+0x390/0x4c0 [ 254.111396][ T8424] should_failslab+0x5/0x20 [ 254.115946][ T8424] slab_pre_alloc_hook+0x59/0x300 [ 254.121036][ T8424] ? vidtv_psi_nit_table_init+0x235/0x850 [ 254.126819][ T8424] __kmem_cache_alloc_node+0x4f/0x270 [ 254.132246][ T8424] ? vidtv_psi_nit_table_init+0x235/0x850 [ 254.138031][ T8424] kmalloc_trace+0x26/0xe0 [ 254.138139][ T8415] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 254.142501][ T8424] vidtv_psi_nit_table_init+0x235/0x850 [ 254.142549][ T8424] vidtv_channel_si_init+0x108e/0x15c0 [ 254.164484][ T8424] vidtv_mux_init+0x4ff/0x1950 [ 254.169318][ T8424] vidtv_start_feed+0x368/0x590 [ 254.174204][ T8424] ? vidtv_i2c_func+0x10/0x10 [ 254.178909][ T8424] ? vidtv_stop_feed+0x250/0x250 [ 254.183876][ T8424] ? _raw_spin_unlock_irq+0x1f/0x40 [ 254.189101][ T8424] ? lockdep_hardirqs_on+0x94/0x140 [ 254.194323][ T8424] dmx_ts_feed_start_filtering+0x11c/0x210 [ 254.200150][ T8424] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 254.206066][ T8424] dvb_dmxdev_filter_start+0x422/0x1060 [ 254.211658][ T8424] dvb_demux_do_ioctl+0x48d/0x530 [ 254.216724][ T8424] dvb_usercopy+0x191/0x2b0 [ 254.221265][ T8424] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 254.226842][ T8424] ? dvb_generic_ioctl+0xb0/0xb0 [ 254.231861][ T8424] ? dvb_demux_poll+0x210/0x210 [ 254.236745][ T8424] dvb_demux_ioctl+0x25/0x30 [ 254.241403][ T8424] __se_sys_ioctl+0xfa/0x170 [ 254.246032][ T8424] do_syscall_64+0x4c/0xa0 [ 254.250486][ T8424] ? clear_bhb_loop+0x60/0xb0 [ 254.255195][ T8424] ? clear_bhb_loop+0x60/0xb0 [ 254.259922][ T8424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.265845][ T8424] RIP: 0033:0x7f1541b9f559 [ 254.270281][ T8424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.289906][ T8424] RSP: 002b:00007f1542ab3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.298334][ T8424] RAX: ffffffffffffffda RBX: 00007f1541e25fa0 RCX: 00007f1541b9f559 [ 254.306323][ T8424] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000007 [ 254.314312][ T8424] RBP: 00007f1541c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 254.322299][ T8424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.330282][ T8424] R13: 00007f1541e26038 R14: 00007f1541e25fa0 R15: 00007ffde1f8ada8 [ 254.338277][ T8424] [ 254.375944][ T8415] XFS (loop3): Starting recovery (logdev: internal) [ 254.402458][ T8415] XFS (loop3): Ending recovery (logdev: internal) [ 254.546870][ T4288] XFS (loop3): Unmounting Filesystem [ 255.018515][ T8441] FAULT_INJECTION: forcing a failure. [ 255.018515][ T8441] name failslab, interval 1, probability 5, space 0, times 9998 [ 255.070736][ T8441] CPU: 1 PID: 8441 Comm: syz.4.1262 Not tainted syzkaller #0 [ 255.078185][ T8441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 255.088270][ T8441] Call Trace: [ 255.088281][ T8441] [ 255.094547][ T8441] dump_stack_lvl+0x188/0x24e [ 255.099264][ T8441] ? show_regs_print_info+0x12/0x12 [ 255.099301][ T8441] ? load_image+0x410/0x410 [ 255.099330][ T8441] ? __might_sleep+0xd0/0xd0 [ 255.109056][ T8441] ? __lock_acquire+0x7ea0/0x7ea0 [ 255.109097][ T8441] should_fail_ex+0x390/0x4c0 [ 255.109129][ T8441] should_failslab+0x5/0x20 [ 255.109151][ T8441] slab_pre_alloc_hook+0x59/0x300 [ 255.128023][ T8441] ? verify_lock_unused+0x140/0x140 [ 255.138256][ T8441] ? __get_vm_area_node+0x122/0x330 [ 255.138291][ T8441] __kmem_cache_alloc_node+0x4f/0x270 [ 255.148908][ T8441] ? __get_vm_area_node+0x122/0x330 [ 255.154163][ T8441] kmalloc_node_trace+0x22/0xe0 [ 255.159058][ T8441] __get_vm_area_node+0x122/0x330 [ 255.164165][ T8441] __vmalloc_node_range+0x357/0x1380 [ 255.169484][ T8441] ? dvb_dmxdev_filter_start+0x107/0x1060 [ 255.175257][ T8441] ? __mutex_trylock_common+0x15c/0x260 [ 255.180835][ T8441] ? __mutex_lock+0x1ab/0xb40 [ 255.180858][ T8441] ? free_vm_area+0x50/0x50 [ 255.190077][ T8441] ? tomoyo_path_number_perm+0x205/0x650 [ 255.190112][ T8441] ? tomoyo_path_number_perm+0x5a4/0x650 [ 255.201445][ T8441] ? tomoyo_path_number_perm+0x205/0x650 [ 255.201484][ T8441] ? dvb_demux_do_ioctl+0x2ad/0x530 [ 255.212337][ T8441] ? dvb_dmxdev_filter_start+0x107/0x1060 [ 255.212375][ T8441] vmalloc+0x75/0x80 [ 255.222006][ T8441] ? dvb_dmxdev_filter_start+0x107/0x1060 [ 255.222043][ T8441] dvb_dmxdev_filter_start+0x107/0x1060 [ 255.233349][ T8441] dvb_demux_do_ioctl+0x48d/0x530 [ 255.233392][ T8441] dvb_usercopy+0x191/0x2b0 [ 255.242956][ T8441] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 255.242995][ T8441] ? dvb_generic_ioctl+0xb0/0xb0 [ 255.253602][ T8441] ? dvb_demux_poll+0x210/0x210 [ 255.253640][ T8441] dvb_demux_ioctl+0x25/0x30 [ 255.263083][ T8441] __se_sys_ioctl+0xfa/0x170 [ 255.263124][ T8441] do_syscall_64+0x4c/0xa0 [ 255.272138][ T8441] ? clear_bhb_loop+0x60/0xb0 [ 255.272174][ T8441] ? clear_bhb_loop+0x60/0xb0 [ 255.281551][ T8441] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.281586][ T8441] RIP: 0033:0x7f1541b9f559 [ 255.291904][ T8441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.291932][ T8441] RSP: 002b:00007f1542ab3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 255.319982][ T8441] RAX: ffffffffffffffda RBX: 00007f1541e25fa0 RCX: 00007f1541b9f559 [ 255.320000][ T8441] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000006 [ 255.320013][ T8441] RBP: 00007f1541c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 255.320026][ T8441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.335963][ T8441] R13: 00007f1541e26038 R14: 00007f1541e25fa0 R15: 00007ffde1f8ada8 [ 255.359938][ T8441] [ 255.402236][ T8441] syz.4.1262: vmalloc error: size 8192, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 255.462521][ T8441] CPU: 1 PID: 8441 Comm: syz.4.1262 Not tainted syzkaller #0 [ 255.470053][ T8441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 255.480152][ T8441] Call Trace: [ 255.483465][ T8441] [ 255.486431][ T8441] dump_stack_lvl+0x188/0x24e [ 255.491178][ T8441] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 255.497645][ T8441] ? show_regs_print_info+0x12/0x12 [ 255.502928][ T8441] ? load_image+0x410/0x410 [ 255.507468][ T8441] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 255.507501][ T8441] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 255.520461][ T8441] warn_alloc+0x242/0x330 [ 255.524858][ T8441] ? __get_vm_area_node+0x122/0x330 [ 255.530109][ T8441] ? zone_watermark_ok_safe+0x270/0x270 [ 255.530146][ T8441] ? rcu_is_watching+0x11/0xa0 [ 255.530198][ T8441] ? __get_vm_area_node+0x318/0x330 [ 255.540528][ T8441] __vmalloc_node_range+0x37c/0x1380 [ 255.540576][ T8441] ? __mutex_trylock_common+0x15c/0x260 [ 255.556695][ T8441] ? __mutex_lock+0x1ab/0xb40 [ 255.561422][ T8441] ? free_vm_area+0x50/0x50 [ 255.565981][ T8441] ? tomoyo_path_number_perm+0x205/0x650 [ 255.571683][ T8441] ? tomoyo_path_number_perm+0x5a4/0x650 [ 255.577443][ T8441] ? tomoyo_path_number_perm+0x205/0x650 [ 255.577478][ T8441] ? dvb_demux_do_ioctl+0x2ad/0x530 [ 255.588373][ T8441] ? dvb_dmxdev_filter_start+0x107/0x1060 [ 255.594123][ T8441] vmalloc+0x75/0x80 [ 255.598049][ T8441] ? dvb_dmxdev_filter_start+0x107/0x1060 [ 255.603800][ T8441] dvb_dmxdev_filter_start+0x107/0x1060 [ 255.603850][ T8441] dvb_demux_do_ioctl+0x48d/0x530 [ 255.614463][ T8441] dvb_usercopy+0x191/0x2b0 [ 255.619017][ T8441] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 255.624613][ T8441] ? dvb_generic_ioctl+0xb0/0xb0 [ 255.629604][ T8441] ? dvb_demux_poll+0x210/0x210 [ 255.629642][ T8441] dvb_demux_ioctl+0x25/0x30 [ 255.639099][ T8441] __se_sys_ioctl+0xfa/0x170 [ 255.639137][ T8441] do_syscall_64+0x4c/0xa0 [ 255.648325][ T8441] ? clear_bhb_loop+0x60/0xb0 [ 255.648356][ T8441] ? clear_bhb_loop+0x60/0xb0 [ 255.657792][ T8441] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.663798][ T8441] RIP: 0033:0x7f1541b9f559 [ 255.663820][ T8441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.663840][ T8441] RSP: 002b:00007f1542ab3028 EFLAGS: 00000246 [ 255.687863][ T8441] ORIG_RAX: 0000000000000010 [ 255.698621][ T8441] RAX: ffffffffffffffda RBX: 00007f1541e25fa0 RCX: 00007f1541b9f559 [ 255.698642][ T8441] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000006 [ 255.698658][ T8441] RBP: 00007f1541c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 255.714606][ T8441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.714622][ T8441] R13: 00007f1541e26038 R14: 00007f1541e25fa0 R15: 00007ffde1f8ada8 [ 255.714662][ T8441] [ 255.742231][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.748560][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.790801][ T8441] Mem-Info: [ 255.794057][ T8441] active_anon:5826 inactive_anon:0 isolated_anon:0 [ 255.794057][ T8441] active_file:1226 inactive_file:40058 isolated_file:0 [ 255.794057][ T8441] unevictable:768 dirty:198 writeback:0 [ 255.794057][ T8441] slab_reclaimable:21675 slab_unreclaimable:102516 [ 255.794057][ T8441] mapped:31722 shmem:1386 pagetables:692 [ 255.794057][ T8441] sec_pagetables:0 bounce:0 [ 255.794057][ T8441] kernel_misc_reclaimable:0 [ 255.794057][ T8441] free:1331936 free_pcp:5003 free_cma:0 [ 255.928944][ T8441] Node 0 active_anon:23264kB inactive_anon:0kB active_file:4904kB inactive_file:160028kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126980kB dirty:792kB writeback:0kB shmem:3924kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12144kB pagetables:2660kB sec_pagetables:0kB all_unreclaimable? no [ 255.988236][ T8441] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 256.042909][ T8441] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 256.090200][ T8441] lowmem_reserve[]: 0 2509 2510 2510 2510 [ 256.096039][ T8441] Node 0 DMA32 free:1402736kB boost:0kB min:34540kB low:43172kB high:51804kB reserved_highatomic:0KB active_anon:23264kB inactive_anon:0kB active_file:4904kB inactive_file:160028kB unevictable:1536kB writepending:792kB present:3129332kB managed:2574604kB mlocked:0kB bounce:0kB free_pcp:8804kB local_pcp:6708kB free_cma:0kB [ 256.175283][ T8458] FAULT_INJECTION: forcing a failure. [ 256.175283][ T8458] name fail_futex, interval 1, probability 0, space 0, times 0 [ 256.202236][ T8458] CPU: 1 PID: 8458 Comm: syz.0.1267 Not tainted syzkaller #0 [ 256.209660][ T8458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 256.209678][ T8458] Call Trace: [ 256.223069][ T8458] [ 256.226052][ T8458] dump_stack_lvl+0x188/0x24e [ 256.230786][ T8458] ? show_regs_print_info+0x12/0x12 [ 256.236043][ T8458] ? load_image+0x410/0x410 [ 256.240598][ T8458] ? __cgroup_rstat_updated+0xce/0x350 [ 256.246114][ T8458] ? rcu_read_lock_sched_held+0x86/0x110 [ 256.251805][ T8458] ? sched_slice+0x430/0x430 [ 256.256464][ T8458] should_fail_ex+0x390/0x4c0 [ 256.261215][ T8458] get_futex_key+0x1a6/0xe70 [ 256.265987][ T8458] ? futex_setup_timer+0xc0/0xc0 [ 256.270965][ T8458] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 256.277004][ T8458] ? __lock_acquire+0x7ea0/0x7ea0 [ 256.282080][ T8458] ? lock_chain_count+0x20/0x20 [ 256.286991][ T8458] futex_wait_setup+0xb8/0x270 [ 256.291803][ T8458] ? futex_wait_multiple+0x970/0x970 [ 256.297154][ T8458] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 256.303095][ T8458] ? _raw_spin_unlock+0x40/0x40 [ 256.304072][ T8441] lowmem_reserve[]: 0 [ 256.307978][ T8458] futex_wait+0x1cb/0x640 [ 256.316368][ T8458] ? futex_wait_setup+0x270/0x270 [ 256.321465][ T8458] do_futex+0x310/0x320 [ 256.325666][ T8458] ? __ia32_sys_get_robust_list+0x100/0x100 [ 256.330376][ T8441] 0 1 [ 256.331646][ T8458] __se_sys_futex+0x381/0x410 [ 256.339094][ T8458] ? __x64_sys_futex+0xf0/0xf0 [ 256.344001][ T8458] ? __x64_sys_futex+0x1d/0xf0 [ 256.344897][ T8441] 1 1 [ 256.348786][ T8458] do_syscall_64+0x4c/0xa0 [ 256.355947][ T8458] ? clear_bhb_loop+0x60/0xb0 [ 256.360674][ T8441] [ 256.360674][ T8458] ? clear_bhb_loop+0x60/0xb0 [ 256.367719][ T8458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 256.370188][ T8441] Node 0 [ 256.373643][ T8458] RIP: 0033:0x7f7329b9f559 [ 256.373667][ T8458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.373688][ T8458] RSP: 002b:00007f732aa8a0e8 EFLAGS: 00000246 [ 256.387300][ T8441] Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 256.400671][ T8458] ORIG_RAX: 00000000000000ca [ 256.400685][ T8458] RAX: ffffffffffffffda RBX: 00007f7329e25fa8 RCX: 00007f7329b9f559 [ 256.400703][ T8458] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7329e25fa8 [ 256.400730][ T8458] RBP: 00007f7329e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 256.400744][ T8458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.400757][ T8458] R13: 00007f7329e26038 R14: 00007ffc29790670 R15: 00007ffc29790758 [ 256.400787][ T8458] [ 256.493901][ T8441] lowmem_reserve[]: 0 0 0 0 0 [ 256.533166][ T8441] Node 1 Normal free:3908680kB boost:0kB min:55344kB low:69180kB high:83016kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:12864kB local_pcp:6976kB free_cma:0kB [ 256.571386][ T8441] lowmem_reserve[]: 0 0 0 0 0 [ 256.576189][ T8441] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 256.589761][ T8441] Node 0 DMA32: 620*4kB (UME) 836*8kB (UME) 470*16kB (UME) 676*32kB (UME) 268*64kB (UME) 144*128kB (ME) 67*256kB (UME) 37*512kB (UME) 20*1024kB (UME) 5*2048kB (UM) 308*4096kB (UM) = 1402288kB [ 256.609465][ T8441] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 256.621262][ T8441] Node 1 Normal: 168*4kB (U) 37*8kB (UE) 28*16kB (UME) 52*32kB (UME) 29*64kB (UME) 12*128kB (UM) [ 256.632845][ T8441] 5*256kB (UM) 1*512kB (M) 1*1024kB (E) 2*2048kB (UE) 951*4096kB (M) = 3908680kB [ 256.676896][ T8441] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 256.699929][ T8441] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 256.717032][ T8441] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 256.814529][ T8441] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 256.875236][ T8441] 46117 total pagecache pages [ 256.907758][ T8441] 2 pages in swap cache [ 256.923237][ T8441] Free swap = 124700kB [ 256.927539][ T8441] Total swap = 124996kB [ 256.959210][ T8441] 2097051 pages RAM [ 256.963154][ T8441] 0 pages HighMem/MovableOnly [ 256.993675][ T8441] 419799 pages reserved [ 257.013444][ T8464] loop0: detected capacity change from 0 to 32768 [ 257.046761][ T8441] 0 pages cma reserved [ 257.137631][ T8460] loop3: detected capacity change from 0 to 32768 [ 257.150886][ T8460] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1268 (8460) [ 257.172969][ T8464] XFS (loop0): Mounting V5 Filesystem [ 257.191714][ T8460] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 257.216444][ T8460] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 257.225477][ T8460] BTRFS info (device loop3): using free space tree [ 257.259709][ T8464] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 257.387942][ T8464] XFS (loop0): Starting recovery (logdev: internal) [ 257.438451][ T8464] XFS (loop0): Ending recovery (logdev: internal) [ 257.516861][ T8489] FAULT_INJECTION: forcing a failure. [ 257.516861][ T8489] name failslab, interval 1, probability 5, space 0, times 10000 [ 257.556226][ T8460] BTRFS info (device loop3): enabling ssd optimizations [ 257.574847][ T8492] udevd[8492]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 257.588908][ T8489] CPU: 1 PID: 8489 Comm: syz.4.1270 Not tainted syzkaller #0 [ 257.596310][ T8489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 257.596326][ T8489] Call Trace: [ 257.596334][ T8489] [ 257.609692][ T8489] dump_stack_lvl+0x188/0x24e [ 257.617356][ T8489] ? show_regs_print_info+0x12/0x12 [ 257.617392][ T8489] ? load_image+0x410/0x410 [ 257.627096][ T8489] ? __might_sleep+0xd0/0xd0 [ 257.627121][ T8489] ? __lock_acquire+0x7ea0/0x7ea0 [ 257.636778][ T8489] should_fail_ex+0x390/0x4c0 [ 257.641520][ T8489] should_failslab+0x5/0x20 [ 257.646040][ T8489] slab_pre_alloc_hook+0x59/0x300 [ 257.651110][ T8489] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 257.656874][ T8489] __kmem_cache_alloc_node+0x4f/0x270 [ 257.662308][ T8489] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 257.668046][ T8489] __kmalloc+0xa3/0x240 [ 257.672217][ T8489] tomoyo_realpath_from_path+0xe2/0x5c0 [ 257.677803][ T8489] ? tomoyo_domain+0xd2/0x120 [ 257.682512][ T8489] ? tomoyo_path_number_perm+0x205/0x650 [ 257.682545][ T8489] tomoyo_path_number_perm+0x22f/0x650 [ 257.693648][ T8489] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 257.693782][ T8489] ? __fget_files+0x28/0x460 [ 257.703732][ T8489] security_file_ioctl+0x6c/0xa0 [ 257.703785][ T8489] __se_sys_ioctl+0x48/0x170 [ 257.713317][ T8489] do_syscall_64+0x4c/0xa0 [ 257.713353][ T8489] ? clear_bhb_loop+0x60/0xb0 [ 257.722501][ T8489] ? clear_bhb_loop+0x60/0xb0 [ 257.722538][ T8489] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.733235][ T8489] RIP: 0033:0x7f1541b9f559 [ 257.733258][ T8489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.733278][ T8489] RSP: 002b:00007f1542ab3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.757362][ T8489] RAX: ffffffffffffffda RBX: 00007f1541e25fa0 RCX: 00007f1541b9f559 [ 257.757381][ T8489] RDX: 0000200000002d00 RSI: 0000000040146f2c RDI: 0000000000000007 [ 257.757397][ T8489] RBP: 00007f1541c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 257.757412][ T8489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.773815][ T8489] R13: 00007f1541e26038 R14: 00007f1541e25fa0 R15: 00007ffde1f8ada8 [ 257.773853][ T8489] [ 257.828190][ T4276] XFS (loop0): Unmounting Filesystem [ 257.869936][ T8489] ERROR: Out of memory at tomoyo_realpath_from_path. [ 257.931606][ T8460] loop3: detected capacity change from 32768 to 64 [ 257.957149][ T8494] syz.3.1268: attempt to access beyond end of device [ 257.957149][ T8494] loop3: rw=2049, sector=10240, nr_sectors = 8 limit=64 [ 257.979523][ T8494] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 258.221849][ T8497] MPTCP: kernel_bind error, err=-98 [ 258.240970][ T33] kworker/u4:2: attempt to access beyond end of device [ 258.240970][ T33] loop3: rw=4097, sector=10456, nr_sectors = 8 limit=64 [ 258.295091][ T33] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 258.358450][ T33] kworker/u4:2: attempt to access beyond end of device [ 258.358450][ T33] loop3: rw=4097, sector=13448, nr_sectors = 8 limit=64 [ 258.378740][ T33] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 258.407501][ T4288] BTRFS: error (device loop3: state A) in do_free_extent_accounting:2875: errno=-5 IO failure [ 258.438245][ T4288] BTRFS info (device loop3: state EA): forced readonly [ 258.452995][ T4288] BTRFS error (device loop3: state EA): failed to run delayed ref for logical 5296128 num_bytes 12288 type 178 action 2 ref_mod 1: -5 [ 258.467336][ T4288] BTRFS: error (device loop3: state EA) in btrfs_run_delayed_refs:2170: errno=-5 IO failure [ 258.492804][ T4288] BTRFS info (device loop3: state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 258.899035][ C0] net_ratelimit: 84 callbacks suppressed [ 259.574161][ T8517] FAULT_INJECTION: forcing a failure. [ 259.574161][ T8517] name fail_futex, interval 1, probability 0, space 0, times 0 [ 259.577219][ T8514] FAULT_INJECTION: forcing a failure. [ 259.577219][ T8514] name failslab, interval 1, probability 5, space 0, times 9999 [ 259.602405][ T8514] CPU: 0 PID: 8514 Comm: syz.0.1278 Not tainted syzkaller #0 [ 259.609841][ T8514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 259.619948][ T8514] Call Trace: [ 259.623256][ T8514] [ 259.626264][ T8514] dump_stack_lvl+0x188/0x24e [ 259.631004][ T8514] ? show_regs_print_info+0x12/0x12 [ 259.636260][ T8514] ? load_image+0x410/0x410 [ 259.640794][ T8514] ? __might_sleep+0xd0/0xd0 [ 259.645407][ T8514] ? __lock_acquire+0x7ea0/0x7ea0 [ 259.650477][ T8514] should_fail_ex+0x390/0x4c0 [ 259.655285][ T8514] should_failslab+0x5/0x20 [ 259.659829][ T8514] slab_pre_alloc_hook+0x59/0x300 [ 259.664909][ T8514] ? ovl_encode_real_fh+0xd5/0x340 [ 259.670078][ T8514] __kmem_cache_alloc_node+0x4f/0x270 [ 259.675490][ T8514] ? ovl_encode_real_fh+0xd5/0x340 [ 259.680632][ T8514] kmalloc_trace+0x26/0xe0 [ 259.685070][ T8514] ovl_encode_real_fh+0xd5/0x340 [ 259.690056][ T8514] ? ovl_set_attr+0x4b0/0x4b0 [ 259.694789][ T8514] ? ovl_lookup_layer+0x379/0x440 [ 259.699850][ T8514] ovl_lookup_index+0x64/0x6e0 [ 259.704645][ T8514] ? ovl_lookup+0x523/0x18d0 [ 259.709271][ T8514] ovl_lookup+0x11f3/0x18d0 [ 259.713824][ T8514] ? ovl_path_next+0x260/0x260 [ 259.718607][ T8514] ? lockdep_softirqs_off+0x430/0x430 [ 259.724028][ T8514] ? d_hash_and_lookup+0x1b0/0x1b0 [ 259.729186][ T8514] ? __init_waitqueue_head+0xa4/0x140 [ 259.734589][ T8514] __lookup_slow+0x29d/0x3f0 [ 259.739214][ T8514] ? lookup_one_len+0x2d0/0x2d0 [ 259.744115][ T8514] ? down_read+0x1a8/0x2d0 [ 259.748563][ T8514] lookup_slow+0x53/0x70 [ 259.752830][ T8514] link_path_walk+0x976/0xea0 [ 259.757584][ T8514] ? handle_lookup_down+0x130/0x130 [ 259.762820][ T8514] __filename_parentat+0x22d/0x650 [ 259.767951][ T8514] ? vfs_path_parent_lookup+0x50/0x50 [ 259.773337][ T8514] ? __x64_sys_mkdirat+0x78/0x90 [ 259.778311][ T8514] ? __virt_addr_valid+0x188/0x540 [ 259.783449][ T8514] filename_create+0xd5/0x450 [ 259.788192][ T8514] ? kern_path_create+0x50/0x50 [ 259.793064][ T8514] ? __virt_addr_valid+0x467/0x540 [ 259.798206][ T8514] do_mkdirat+0xa5/0x440 [ 259.802467][ T8514] ? vfs_mkdir+0x570/0x570 [ 259.806907][ T8514] __x64_sys_mkdirat+0x85/0x90 [ 259.811710][ T8514] do_syscall_64+0x4c/0xa0 [ 259.816160][ T8514] ? clear_bhb_loop+0x60/0xb0 [ 259.820871][ T8514] ? clear_bhb_loop+0x60/0xb0 [ 259.825602][ T8514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.831522][ T8514] RIP: 0033:0x7f7329b9f559 [ 259.835964][ T8514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.855634][ T8514] RSP: 002b:00007f732aa8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 259.864071][ T8514] RAX: ffffffffffffffda RBX: 00007f7329e25fa0 RCX: 00007f7329b9f559 [ 259.872061][ T8514] RDX: 00000000000001ff RSI: 0000200000000740 RDI: ffffffffffffff9c [ 259.880062][ T8514] RBP: 00007f7329c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 259.888072][ T8514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.896062][ T8514] R13: 00007f7329e26038 R14: 00007f7329e25fa0 R15: 00007ffc29790758 [ 259.904068][ T8514] [ 259.909184][ T8517] CPU: 0 PID: 8517 Comm: syz.3.1279 Not tainted syzkaller #0 [ 259.916612][ T8517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 259.926713][ T8517] Call Trace: [ 259.930032][ T8517] [ 259.932996][ T8517] dump_stack_lvl+0x188/0x24e [ 259.937747][ T8517] ? show_regs_print_info+0x12/0x12 [ 259.943036][ T8517] ? load_image+0x410/0x410 [ 259.947598][ T8517] ? __cgroup_rstat_updated+0xce/0x350 [ 259.953091][ T8517] ? rcu_read_lock_sched_held+0x86/0x110 [ 259.958774][ T8517] ? sched_slice+0x430/0x430 [ 259.963423][ T8517] should_fail_ex+0x390/0x4c0 [ 259.968180][ T8517] get_futex_key+0x1a6/0xe70 [ 259.972824][ T8517] ? futex_setup_timer+0xc0/0xc0 [ 259.977810][ T8517] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 259.983855][ T8517] ? __lock_acquire+0x7ea0/0x7ea0 [ 259.988944][ T8517] ? lock_chain_count+0x20/0x20 [ 259.993830][ T8517] futex_wait_setup+0xb8/0x270 [ 259.998625][ T8517] ? futex_wait_multiple+0x970/0x970 [ 260.003948][ T8517] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 260.009315][ T8521] loop0: detected capacity change from 0 to 512 [ 260.009884][ T8517] ? _raw_spin_unlock+0x40/0x40 [ 260.021000][ T8517] futex_wait+0x1cb/0x640 [ 260.021038][ T8517] ? futex_wait_setup+0x270/0x270 [ 260.021093][ T8517] do_futex+0x310/0x320 [ 260.021122][ T8517] ? __ia32_sys_get_robust_list+0x100/0x100 [ 260.021157][ T8517] __se_sys_futex+0x381/0x410 [ 260.021186][ T8517] ? __x64_sys_futex+0xf0/0xf0 [ 260.021216][ T8517] ? __x64_sys_futex+0x1d/0xf0 [ 260.021243][ T8517] do_syscall_64+0x4c/0xa0 [ 260.021275][ T8517] ? clear_bhb_loop+0x60/0xb0 [ 260.021306][ T8517] ? clear_bhb_loop+0x60/0xb0 [ 260.021340][ T8517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.021371][ T8517] RIP: 0033:0x7f1b90d9f559 [ 260.021392][ T8517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.021412][ T8517] RSP: 002b:00007f1b91d5a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 260.021437][ T8517] RAX: ffffffffffffffda RBX: 00007f1b91025fa8 RCX: 00007f1b90d9f559 [ 260.021455][ T8517] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1b91025fa8 [ 260.021471][ T8517] RBP: 00007f1b91025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 260.021486][ T8517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.021500][ T8517] R13: 00007f1b91026038 R14: 00007ffc5f8c0810 R15: 00007ffc5f8c08f8 [ 260.021533][ T8517] [ 260.200915][ T4269] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 260.558852][ T8530] FAULT_INJECTION: forcing a failure. [ 260.558852][ T8530] name failslab, interval 1, probability 5, space 0, times 9998 [ 260.578324][ T8530] CPU: 0 PID: 8530 Comm: syz.4.1282 Not tainted syzkaller #0 [ 260.585792][ T8530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 260.595889][ T8530] Call Trace: [ 260.599196][ T8530] [ 260.602175][ T8530] dump_stack_lvl+0x188/0x24e [ 260.606952][ T8530] ? show_regs_print_info+0x12/0x12 [ 260.612198][ T8530] ? load_image+0x410/0x410 [ 260.616761][ T8530] ? __might_sleep+0xd0/0xd0 [ 260.621389][ T8530] ? __lock_acquire+0x7ea0/0x7ea0 [ 260.626465][ T8530] should_fail_ex+0x390/0x4c0 [ 260.631220][ T8530] should_failslab+0x5/0x20 [ 260.635766][ T8530] slab_pre_alloc_hook+0x59/0x300 [ 260.640868][ T8530] ? __lock_acquire+0x142d/0x7ea0 [ 260.640902][ T8530] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 260.651687][ T8530] __kmem_cache_alloc_node+0x4f/0x270 [ 260.657106][ T8530] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 260.662861][ T8530] __kmalloc+0xa3/0x240 [ 260.667038][ T8530] tomoyo_realpath_from_path+0xe2/0x5c0 [ 260.672654][ T8530] tomoyo_check_open_permission+0x212/0x440 [ 260.678599][ T8530] ? tomoyo_check_open_permission+0x1bf/0x440 [ 260.684717][ T8530] ? tomoyo_check_path_number_acl+0x280/0x280 [ 260.690838][ T8530] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 260.690874][ T8530] ? __lock_acquire+0x7ea0/0x7ea0 [ 260.701945][ T8530] ? __lock_acquire+0x7ea0/0x7ea0 [ 260.707003][ T8530] ? __rwlock_init+0x140/0x140 [ 260.711817][ T8530] ? tomoyo_file_open+0xe9/0x170 [ 260.716799][ T8530] security_file_open+0x5e/0xa0 [ 260.721701][ T8530] do_dentry_open+0x2fd/0x10b0 [ 260.726530][ T8530] ? memcpy+0x3c/0x60 [ 260.730545][ T8530] path_openat+0x2674/0x2f10 [ 260.730589][ T8530] ? kasan_set_track+0x60/0x70 [ 260.740007][ T8530] ? verify_lock_unused+0x140/0x140 [ 260.740038][ T8530] ? do_sys_openat2+0xdd/0x4f0 [ 260.750032][ T8530] ? do_filp_open+0x420/0x420 [ 260.750093][ T8530] do_filp_open+0x1ee/0x420 [ 260.759247][ T8530] ? vfs_tmpfile+0x490/0x490 [ 260.759329][ T8530] ? _raw_spin_unlock+0x24/0x40 [ 260.768725][ T8530] ? alloc_fd+0x590/0x640 [ 260.768776][ T8530] do_sys_openat2+0x14b/0x4f0 [ 260.777760][ T8530] ? do_sys_open+0xe0/0xe0 [ 260.777794][ T8530] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 260.788226][ T8530] ? lock_chain_count+0x20/0x20 [ 260.793155][ T8530] __x64_sys_openat+0x135/0x160 [ 260.798077][ T8530] do_syscall_64+0x4c/0xa0 [ 260.802548][ T8530] ? clear_bhb_loop+0x60/0xb0 [ 260.807325][ T8530] ? clear_bhb_loop+0x60/0xb0 [ 260.812060][ T8530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.818006][ T8530] RIP: 0033:0x7f1541b5fd8e [ 260.822459][ T8530] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 260.842088][ T8530] RSP: 002b:00007f1542ab2b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 260.842118][ T8530] RAX: ffffffffffffffda RBX: 00007f1542ab36c0 RCX: 00007f1541b5fd8e [ 260.842136][ T8530] RDX: 0000000000000002 RSI: 00007f1542ab2c00 RDI: ffffffffffffff9c [ 260.842154][ T8530] RBP: 00007f1542ab2c00 R08: 0000000000000000 R09: 0000000000000000 [ 260.842169][ T8530] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 260.858824][ T8530] R13: 00007f1541e26038 R14: 00007f1541e25fa0 R15: 00007ffde1f8ada8 [ 260.874822][ T8530] [ 260.935960][ T8530] ERROR: Out of memory at tomoyo_realpath_from_path. [ 260.963363][ T8533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1285'. [ 261.526563][ T8535] loop4: detected capacity change from 0 to 32768 [ 261.554778][ T8535] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1286 (8535) [ 261.594052][ T8535] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 261.612806][ T8535] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 261.626183][ T8535] BTRFS info (device loop4): using free space tree [ 261.773205][ T8535] BTRFS info (device loop4): enabling ssd optimizations [ 261.811667][ T4276] bond0: (slave syz_tun): Releasing backup interface [ 261.877082][ T8563] udevd[8563]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 262.078749][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.278549][ T8571] udevd[8571]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory SYZFAIL: posix_spawnp failed (errno 2: No such file or directory) [ 262.411332][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.577229][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.144607][ T4288] bond0: (slave syz_tun): Releasing backup interface [ 263.307580][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.761226][ T8535] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 263.931765][ C1] net_ratelimit: 98 callbacks suppressed [ 264.946533][ T11] device hsr_slave_0 left promiscuous mode [ 264.953675][ T11] device hsr_slave_1 left promiscuous mode [ 264.961228][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.968767][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.978851][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.993753][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.003045][ T11] device bridge_slave_1 left promiscuous mode [ 265.016469][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.040554][ T11] device bridge_slave_0 left promiscuous mode [ 265.046831][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.101999][ T11] device veth1_macvtap left promiscuous mode [ 265.108837][ T11] device veth0_macvtap left promiscuous mode [ 265.118423][ T11] device veth1_vlan left promiscuous mode [ 265.128081][ T11] device veth0_vlan left promiscuous mode [ 265.362244][ T11] bond1 (unregistering): Released all slaves [ 266.089947][ T11] team0 (unregistering): Port device team_slave_1 removed [ 266.144924][ T11] team0 (unregistering): Port device team_slave_0 removed [ 266.197116][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.263360][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.688120][ T11] bond0 (unregistering): Released all slaves [ 267.213317][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.287249][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.377862][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.456230][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.645956][ T11] device hsr_slave_0 left promiscuous mode [ 268.652835][ T11] device hsr_slave_1 left promiscuous mode [ 268.659942][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.667375][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.684027][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.694150][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.704664][ T11] device bridge_slave_1 left promiscuous mode [ 268.716980][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.727563][ T11] device bridge_slave_0 left promiscuous mode [ 268.738216][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.799298][ T11] device veth1_macvtap left promiscuous mode [ 268.805400][ T11] device veth0_macvtap left promiscuous mode [ 268.812532][ T11] device veth1_vlan left promiscuous mode [ 268.818888][ T11] device veth0_vlan left promiscuous mode [ 269.541305][ C0] net_ratelimit: 72 callbacks suppressed [ 269.635851][ T11] team0 (unregistering): Port device team_slave_1 removed [ 269.706000][ T11] team0 (unregistering): Port device team_slave_0 removed [ 269.760758][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.834382][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.251353][ T11] bond0 (unregistering): Released all slaves [ 270.956069][ T6842] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.033207][ T6842] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.103195][ T6842] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.305080][ T6842] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0