last executing test programs: 5.818907525s ago: executing program 1 (id=1177): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000100850000001b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.787415772s ago: executing program 1 (id=1178): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$eJzs3MtvVFUYAPDv3r54tyo+QNAqJhIfLS3PhRuMJi40MdEFxlVtC0EGqrQmQkhAF7g0JO6NSxP/Ale6MerKxMSV7g0JMWxEE5Mx9869nXE6Uzt0YID5/ZIL58w9wznfnHPmPs5cAuhb49kfScSWiPg1IjbUsv8tMF7768b1C7N/Xb8wm0S1+sYfSV7uz+sXZsui5fs21zLVapEfaVHv5bcjZiqV+bNFfnLp9HuTi+fOP3/y9MyJ+RPzZ6aPHDmwf/fwoemDXYlzNGvrSCzs2vHKW1demz125Z0fvsrau6XY3xhHt4zXPt2VBrpdU+9tbUgngz1sCB3JhmLWXUP5/B+Ngdi4vG80Xv64p40DbqlqtVptdXwuXKoC97Aket0CoDfKA312/Vtut+nU445w7WjE+4dr8d8ottqewUiLMkNN17fdNB4Rxy79/Xm2xS26DwEA0OiboxHxXKvzvzQeaii3rVhDGYuI+yLi/oh4ICK2R8SDEXnZhyPikQ7rb14hWXn+k169qcDWKDv/e6FY21o+//unmsdfGBsoclvz+IeS4ycr8/uKz2RvDI1k+alV6vj2pZ8/bbev8fwv27L6y3PBmvTqYNMNurmZpZl1hr3s2kcROweb4s8lUS7jJBGxIyJ2dvQv168wTj7z5a52perxb4yIVvGvogvrTNUvIp6u9f+laIq/lLRdn5w6fGj64OSGqMzvmyxHxUo//nT59Xb1/3//31pZ/29qHv/13ruYDflkQ8TiufOn8vXaxc7ruPzbJy2vaTatY/wPJ2/m6eHitQ9nlpbOTkUMJ6+ufH26/t4yX5bP4t+7p9X4T/PvuCj6/9GIyAbx7oh4LCIeL9r+REQ8GRF7Von/+xeferfdvvbxr3JXvouy+Oda9H/D+B/LUvX+7zwxcOq7rzuPv5T1/4E8tbd4ZS3ff2tt4Ho+OwAAALhbpPlv4JN0YjmdphMTtd/wb49NaWVhcenZ4wsfnJmr/VZ+LIbS8k7XaMP90Kni3nCZn27K7y/uG382sDHPT8wuVOZ6HTz0uc1t5n/m93vwORWgiee1oH+Z/9C/zH/oX/X5f6in7QBuP8d/6F+t5v/FHrQDuP0c/6F/mf/Qv8x/6F/mP/Slts/Gp+t65P+uTfyy7Y5oxl2QiLTzdw1GL9s83NPabzoxuOb/zOImEyMtd/X6mwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA7/g0AAP//hh/x1w==") mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000000)={[{@quota}, {@noload}, {@init_itable}]}, 0x1, 0x4d1, &(0x7f0000000500)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_open_dev$usbfs(&(0x7f0000000200), 0xfffffffffffffffe, 0x500) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0xfffffffffffffffe, 0x500) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) (async) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x22000, 0x1b4) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0)) (async) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0)) 5.499586784s ago: executing program 3 (id=1181): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 5.476397539s ago: executing program 3 (id=1182): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000040), 0x1, 0x5504, &(0x7f0000000300)="$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") syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='memory=low,background_gc=off,noquota,inline_dentry,data_flush,disable_roll_forward,noinline_xattr,discard,checkpoint=disable,user_xattr,atgc,resuid=', @ANYRESDEC, @ANYRESDEC], 0x0, 0x5512, &(0x7f00000079c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x94a4be, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x15, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0x1f, 0xfffffffffffffffd}, 0x10) 5.345208648s ago: executing program 1 (id=1184): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x15, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0x1f, 0xfffffffffffffffd}, 0x10) 5.258586156s ago: executing program 0 (id=1186): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @printk={@i}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) 5.229527402s ago: executing program 1 (id=1187): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x5, 0x72, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x8211, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x9, 0x80, 0x81, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xff, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x50, 0x4, 0x6, 0x10, {0x7, 0x25, 0x1, 0x0, 0x6, 0x20b}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0xc7, 0x6, {0x7, 0x25, 0x1, 0x8, 0x4, 0x4}}}}}}}}]}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0xfffffff4, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00", @ANYBLOB], 0x80}}, 0x44884) 5.165567376s ago: executing program 0 (id=1188): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x15, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0x1f, 0xfffffffffffffffd}, 0x10) (fail_nth: 1) 4.743252927s ago: executing program 0 (id=1189): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r0], 0xa) (fail_nth: 4) 4.107983124s ago: executing program 0 (id=1190): r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x3, 0x6b3dd8e01a9ed2f9, 0x2}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0}, 0x2020) stat(&(0x7f0000002500)='./bus\x00', &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000025c0)={0x0, 0x0, 0x0}, &(0x7f0000002600)=0xc) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002640)={0x90, 0x0, r2, {0x3, 0x3, 0x9, 0x4, 0x0, 0x800, {0x2, 0xfffffffffffffffd, 0x6, 0x100, 0x5, 0x7f, 0x5, 0x100, 0x9, 0xa000, 0x5, r3, r4, 0x4a8000, 0x7}}}, 0x90) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x403, 0x0) ioctl$FIBMAP(r8, 0x5319, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0x3, 0xe466}], 0x1) syz_emit_ethernet(0xd2, &(0x7f0000000a00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6c46a295009c1100fe80000000000000000000000000003cff0200000000000000000000000000014e214e23009c90780100000001000000370dbb1309b316bc1ddd53ff2123d1f61c2576d406fd5f02b1ca2ea02c4f3b59c2b5201ee1c3319d00000000ff07000000000000fa6e867460d12e5391b3152c4d09412ca49ac3e738ece17ee27772282fc2358541f108baf1deb01d2f7125363bc8060f15775d6c129ed04015895e2c968baa7d76ff12f41cee9ecb"], 0x0) 2.813647483s ago: executing program 0 (id=1200): bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0xc, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x100d, &(0x7f00000017c0)=""/4109, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x9}, 0x27) 2.541577252s ago: executing program 0 (id=1201): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@grpquota}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x521ca1, 0x0, 0x80, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x74, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x16}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) setxattr$incfs_id(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)={'0000000000000000000000000000000', 0x31}, 0x20, 0x0) ptrace$getregs(0xc, r3, 0x18f, &(0x7f0000001f80)=""/4096) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000280)={0x2c, &(0x7f0000000080)={0x0, 0xf, 0x17, {0x17, 0x5, "3cdf65bf73fcb469e0835885a4ffdc7d8ed7558a03"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.540761222s ago: executing program 3 (id=1202): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x20, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 2.08454481s ago: executing program 1 (id=1211): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b7, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x89, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x6, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x8, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x2, 0x13fff, 0x8, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r4, &(0x7f0000000b00)=[{0x0}, {&(0x7f00000001c0)}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000000)={0xa0000000}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000002c0)={0xa0000012}) (async) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000002c0)={0xa0000012}) epoll_pwait(r7, &(0x7f0000004080)=[{}, {}], 0x2, 0x7f, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) (async) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$FUSE_NOTIFY_STORE(r8, &(0x7f0000000040)={0x2d, 0x4, 0x0, {0x1, 0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2d) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r9) (async) r10 = dup(r9) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) socket$xdp(0x2c, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f0000000100)={0x3683}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 1.830479935s ago: executing program 3 (id=1212): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x2, 0xb4, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000610064200000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x5}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="052000000000000073119b008c00000095000000000000009500a5050000000002081cf44fe4626d8069d42710c52038c4dea2c3483a9540921fea1e824526cb97419b39e05701461d714698ecfa62f7b6842d29619d91350000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.125160398s ago: executing program 3 (id=1215): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x14, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") mount$incfs(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x82, 0x0) mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) chdir(&(0x7f0000000400)='./file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000002ac0)={0x1ec, 0xb, &(0x7f00000026c0)}) r2 = openat(r1, 0x0, 0xa80, 0x1ff) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0) ioctl$PPPIOCSMAXCID(r4, 0x40047451, 0x0) read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2020) 821.530543ms ago: executing program 3 (id=1221): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000e00)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/559], 0x25, 0x55bc, &(0x7f0000006a80)="$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") fsync(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) fdatasync(r1) r2 = socket$unix(0x1, 0x1, 0x0) getsockname$unix(r1, &(0x7f0000000080), &(0x7f0000000140)=0x6e) bind$unix(r2, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 786.420971ms ago: executing program 4 (id=1223): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 786.053481ms ago: executing program 1 (id=1224): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x8000, &(0x7f0000000740)={[{@barrier}]}, 0x3, 0x542, &(0x7f0000000cc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000300)='p:_est/_vent1 ./file0:0x0 _rg2=\\-', 0x21) getpid() socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1c00ffb0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1000000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 721.999824ms ago: executing program 4 (id=1225): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x14, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 720.825685ms ago: executing program 4 (id=1226): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000078085000000"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 661.436828ms ago: executing program 4 (id=1227): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) 613.482308ms ago: executing program 2 (id=1229): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) 553.85129ms ago: executing program 4 (id=1230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r1}, 0xc) 493.277894ms ago: executing program 2 (id=1231): bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0xc, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x100d, &(0x7f00000017c0)=""/4109, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x9}, 0x27) (fail_nth: 2) 492.847444ms ago: executing program 4 (id=1232): mmap(&(0x7f0000a48000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x40010, 0xffffffffffffffff, 0x1b5cb000) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) capset(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200001, 0x0, 0x0, 0x2, 0x3ffd}) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000300)={0x4, 0xd0c, 0x1000, 0xb, 0x6, 0x6, 0x20000001002, 0xf64, 0x697}) syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000004c0)={'fscrypt:', @desc3}, 0x0, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000010000001000000010000000020000000200982d53bc001102000000000000000000"], 0x0, 0x2a}, 0x28) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) gettid() fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000002050016000200000004001200050017"], 0x60}, 0x1, 0x0, 0x0, 0x40000d1}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000140)={0x77359400}, 0x0) writev(r1, &(0x7f0000000980)=[{&(0x7f00000006c0)="e1fb8b4d1176ff1f86e2c1a24a00642009bcbf69881b5fcdd8a727084ca5fa4cac4d62f15c7b69b97e33fe74c26f95eaeecaa2a74c388dd954609590908768c77df5f648ee4adae5ea2cf2"}, {&(0x7f0000000880)="beea2405a1a58e1a3000fb1c9481971558017179cac10868879547b4ade58b5b373e37e71f3d40636bc58c52738e6fa00a80314a2f88f9aecd499c1e266c77d0fde139457714207b50b8eb8d05e96a5482a035aa168457de299148da8050e4bf9c7568c682eaa38644e0a83370368aa92db3806f130cf3b02a446613d9cdb103dd35f23959565a5526d2afb1b4ac234c690b4637f54e41108aa5682a9c1f5e14703405ce301504da35629f77b68d2e5997b59318801d106e3ea4b699cb79cb6ff70be7060029b4b5d7f92f528b375a6a05e5f1ca7284aa54007ecd43"}], 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6, 0x2, 0x4, 0x100, 0x6, 0x180107, r5}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000500)={{r2, &(0x7f0000000480)='\xff\xffki\x94\xdd\xf1x#\xe1\x1ez\x7f G\xc0\xd2\xd7\x1b1\xd5\xbfZ\x05\x11]\x1a\xbbS(\x1e\x85\xd0', 0xc0043, &(0x7f00000001c0)={@align=0x4, {0xfff8, 0x6, 0x0, 0x7fff}}, 0x8000, &(0x7f00000003c0), &(0x7f0000000400)=0x222}, {[0xfffffff8, 0x9, 0x8, 0x6]}, 0xfffbfff7, 0xea, &(0x7f00000005c0)=""/234}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000a0000feffffff9500080000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xda, &(0x7f00000002c0)=""/218, 0x40f00, 0x78, '\x00', r5, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x800000}, 0x10}, 0x94) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x20, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280), 0x0) 141.62443ms ago: executing program 2 (id=1233): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000001080)='syzkaller\x00'}, 0x83) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r2], 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r1, &(0x7f0000000500)="b42ef3010e3ac8", 0x0}, 0x20) 91.025821ms ago: executing program 2 (id=1234): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007911c0000000000085000000390000009500740000000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x61, '\x00', 0x0, @sock_ops}, 0x94) 21.324356ms ago: executing program 2 (id=1235): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', 0x1, 0x100) write(r0, &(0x7f00000000c0)="2a56bb", 0x3) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000210404000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0dffa888d226000024001280090001007866726d0000000014000280080001000300000008000200250000000a000120aaaaaaaaaa2b0025ed1d169e5500f1815f62b28342dfe74abda0350aac6c6283e29bde7882bd8dc66d28adeb8c9e18a306354492fca04bba852ff24c5b708913a420ad65ceb17370fd6c93f1899928f41f3c855bbcca6e66d04273ad40eadd2113e7"], 0x50}}, 0xc080) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0b000000080000000c0200000000008001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000d50a0000000000000900000018110000", @ANYRES32=r3, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000700)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe}}}}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x32, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r5}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r7, &(0x7f0000000140)="7d39a68b7d0b59e8b4ebce0284470d9c65a2261112", &(0x7f00000009c0)=""/184}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711843000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711808000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=1236): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x5, 0x1, 0x100, 0x4, 0x401}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23003f) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r1], 0xa) kernel console output (not intermixed with test programs): .674981][ T1378] NEXT_ORPHAN(inode)=0 [ 45.679272][ T1378] max_ino=32 [ 45.685482][ T1378] i_nlink=2 [ 45.688865][ T1378] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 45.857878][ T451] attempt to access beyond end of device [ 45.857878][ T451] loop4: rw=1, want=1041, limit=128 [ 47.094883][ T58] wacom 0003:056A:0017.0002: Unknown device_type for 'HID 056a:0017'. Assuming pen. [ 47.128491][ T58] wacom 0003:056A:0017.0002: hidraw0: USB HID v0.00 Joystick [HID 056a:0017] on usb-dummy_hcd.1-1/input0 [ 47.192631][ T58] input: Wacom BambooFun 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0017.0002/input/input7 [ 47.271450][ T30] audit: type=1400 audit(1790501935.996:184): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=602 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.282354][ T58] usb 2-1: USB disconnect, device number 2 [ 47.361781][ T1423] fido_id[1423]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 47.376412][ T30] audit: type=1400 audit(1790501935.996:185): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=602 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.460758][ T30] audit: type=1400 audit(1790501936.066:186): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=602 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.713551][ T1464] loop4: detected capacity change from 0 to 128 [ 47.748819][ T1472] loop1: detected capacity change from 0 to 512 [ 47.798590][ T1472] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 47.831743][ T1472] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 47.839826][ T1472] System zones: 0-1, 15-15, 18-18, 34-34 [ 47.847085][ T1472] EXT4-fs (loop1): orphan cleanup on readonly fs [ 47.853601][ T1472] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 47.863040][ T1472] EXT4-fs warning (device loop1): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 47.882905][ T1472] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 47.891701][ T1472] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.541: bad orphan inode 16 [ 47.902692][ T1472] ext4_test_bit(bit=15, block=18) = 1 [ 47.908124][ T1472] is_bad_inode(inode)=0 [ 47.912697][ T1472] NEXT_ORPHAN(inode)=0 [ 47.916807][ T1472] max_ino=32 [ 47.920279][ T1472] i_nlink=2 [ 47.923562][ T1472] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 48.062883][ T1496] loop2: detected capacity change from 0 to 512 [ 49.164759][ T1496] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 49.410133][ T1496] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 49.418217][ T1496] System zones: 0-1, 15-15, 18-18, 34-34 [ 49.439271][ T1496] EXT4-fs (loop2): orphan cleanup on readonly fs [ 49.456171][ T10] attempt to access beyond end of device [ 49.456171][ T10] loop4: rw=1, want=1041, limit=128 [ 49.477237][ T1496] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 49.509644][ T1496] EXT4-fs warning (device loop2): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 49.525294][ T1496] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 49.533427][ T1496] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.549: bad orphan inode 16 [ 49.546083][ T1496] ext4_test_bit(bit=15, block=18) = 1 [ 49.551532][ T1496] is_bad_inode(inode)=0 [ 49.555749][ T1496] NEXT_ORPHAN(inode)=0 [ 49.559825][ T1496] max_ino=32 [ 49.563153][ T1496] i_nlink=2 [ 49.566360][ T1496] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 49.889085][ T1540] loop1: detected capacity change from 0 to 128 [ 50.262753][ T1554] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 50.676470][ T8] attempt to access beyond end of device [ 50.676470][ T8] loop1: rw=1, want=1041, limit=128 [ 50.927137][ T1593] loop2: detected capacity change from 0 to 512 [ 50.996644][ T1593] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 51.018476][ T1593] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 51.062414][ T1593] System zones: 0-1, 15-15, 18-18, 34-34 [ 51.070478][ T1606] loop1: detected capacity change from 0 to 128 [ 51.071165][ T1593] EXT4-fs (loop2): orphan cleanup on readonly fs [ 51.083268][ T1593] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 51.092705][ T1593] EXT4-fs warning (device loop2): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 51.107347][ T1593] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 51.114292][ T1593] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.591: bad orphan inode 16 [ 51.128522][ T1593] ext4_test_bit(bit=15, block=18) = 1 [ 51.139995][ T1593] is_bad_inode(inode)=0 [ 51.144214][ T1593] NEXT_ORPHAN(inode)=0 [ 51.158602][ T1593] max_ino=32 [ 51.161926][ T1593] i_nlink=2 [ 51.178122][ T1593] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 51.876842][ T10] attempt to access beyond end of device [ 51.876842][ T10] loop1: rw=1, want=1041, limit=128 [ 52.649550][ T1684] loop4: detected capacity change from 0 to 512 [ 52.762966][ T1684] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 52.781801][ T1684] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 52.789887][ T1684] System zones: 0-1, 15-15, 18-18, 34-34 [ 52.807521][ T1694] loop2: detected capacity change from 0 to 128 [ 52.818754][ T1684] EXT4-fs (loop4): orphan cleanup on readonly fs [ 52.838681][ T1684] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 52.885385][ T1684] EXT4-fs warning (device loop4): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 52.930112][ T1684] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 52.957833][ T1684] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.632: bad orphan inode 16 [ 52.991732][ T1684] ext4_test_bit(bit=15, block=18) = 1 [ 52.997226][ T1684] is_bad_inode(inode)=0 [ 53.006190][ T1684] NEXT_ORPHAN(inode)=0 [ 53.027162][ T1684] max_ino=32 [ 53.035887][ T1684] i_nlink=2 [ 53.042625][ T1684] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 53.293814][ T1731] loop1: detected capacity change from 0 to 512 [ 53.445624][ T1731] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 53.520369][ T1731] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 53.537331][ T1731] System zones: 0-1, 15-15, 18-18, 34-34 [ 53.554708][ T1731] EXT4-fs (loop1): orphan cleanup on readonly fs [ 53.561559][ T1731] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 53.571106][ T1731] EXT4-fs warning (device loop1): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 54.029735][ T1731] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 54.049513][ T1731] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.660: bad orphan inode 16 [ 54.190514][ T1731] ext4_test_bit(bit=15, block=18) = 1 [ 54.196310][ T1731] is_bad_inode(inode)=0 [ 54.200907][ T1731] NEXT_ORPHAN(inode)=0 [ 54.205004][ T1731] max_ino=32 [ 54.208296][ T1731] i_nlink=2 [ 54.211964][ T1731] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 54.663924][ T30] audit: type=1400 audit(1790501943.386:187): avc: denied { name_bind } for pid=1755 comm="syz.2.661" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 54.727773][ T30] audit: type=1400 audit(1790501943.406:188): avc: denied { node_bind } for pid=1755 comm="syz.2.661" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 54.781746][ T1767] loop3: detected capacity change from 0 to 512 [ 54.839504][ T1767] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 54.850001][ T1767] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 54.868292][ T1767] System zones: 0-1, 15-15, 18-18, 34-34 [ 54.880572][ T1767] EXT4-fs (loop3): orphan cleanup on readonly fs [ 54.900535][ T1774] loop2: detected capacity change from 0 to 128 [ 54.910252][ T1767] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 54.948643][ T1767] EXT4-fs warning (device loop3): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 54.979513][ T1767] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 55.009356][ T1767] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.665: bad orphan inode 16 [ 55.068587][ T1767] ext4_test_bit(bit=15, block=18) = 1 [ 55.086901][ T1767] is_bad_inode(inode)=0 [ 55.114797][ T1767] NEXT_ORPHAN(inode)=0 [ 55.129038][ T1767] max_ino=32 [ 55.139496][ T1767] i_nlink=2 [ 55.165518][ T1767] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 55.336073][ T1786] FAULT_INJECTION: forcing a failure. [ 55.336073][ T1786] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 55.417769][ T1786] CPU: 1 PID: 1786 Comm: syz.4.672 Not tainted syzkaller #0 [ 55.425106][ T1786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.435216][ T1786] Call Trace: [ 55.438524][ T1786] [ 55.441481][ T1786] __dump_stack+0x21/0x30 [ 55.445969][ T1786] dump_stack_lvl+0x110/0x170 [ 55.450678][ T1786] ? show_regs_print_info+0x20/0x20 [ 55.455925][ T1786] ? vfs_write+0xc72/0xfd0 [ 55.460373][ T1786] dump_stack+0x15/0x20 [ 55.464564][ T1786] should_fail+0x3ab/0x500 [ 55.469038][ T1786] should_fail_usercopy+0x1a/0x20 [ 55.474086][ T1786] _copy_from_user+0x20/0xd0 [ 55.478705][ T1786] __sys_bpf+0x258/0x7d0 [ 55.482970][ T1786] ? bpf_link_show_fdinfo+0x330/0x330 [ 55.488370][ T1786] ? debug_smp_processor_id+0x17/0x20 [ 55.493769][ T1786] __x64_sys_bpf+0x7c/0x90 [ 55.498209][ T1786] x64_sys_call+0x4b9/0x9a0 [ 55.502740][ T1786] do_syscall_64+0x4c/0xa0 [ 55.507183][ T1786] ? clear_bhb_loop+0x50/0xa0 [ 55.511885][ T1786] ? clear_bhb_loop+0x50/0xa0 [ 55.516589][ T1786] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 55.522507][ T1786] RIP: 0033:0x7f53b8009159 [ 55.526954][ T1786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.546720][ T1786] RSP: 002b:00007f53b6a62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 55.555174][ T1786] RAX: ffffffffffffffda RBX: 00007f53b8290fa0 RCX: 00007f53b8009159 [ 55.563181][ T1786] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 55.571202][ T1786] RBP: 00007f53b6a62090 R08: 0000000000000000 R09: 0000000000000000 [ 55.579205][ T1786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.587200][ T1786] R13: 00007f53b8291038 R14: 00007f53b8290fa0 R15: 00007fff4ae2de48 [ 55.595210][ T1786] [ 55.743644][ T1808] loop2: detected capacity change from 0 to 512 [ 55.840135][ T1812] netlink: 'syz.1.683': attribute type 3 has an invalid length. [ 55.848035][ T1808] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 55.857238][ T1812] netlink: 'syz.1.683': attribute type 3 has an invalid length. [ 55.860146][ T1808] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 55.873614][ T1808] System zones: 0-1, 15-15, 18-18, 34-34 [ 55.879892][ T1808] EXT4-fs (loop2): orphan cleanup on readonly fs [ 55.886551][ T1808] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 55.895997][ T1808] EXT4-fs warning (device loop2): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 55.910699][ T1808] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 55.917556][ T1808] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.681: bad orphan inode 16 [ 55.927945][ T1808] ext4_test_bit(bit=15, block=18) = 1 [ 55.933591][ T1808] is_bad_inode(inode)=0 [ 55.937915][ T1808] NEXT_ORPHAN(inode)=0 [ 55.942114][ T30] audit: type=1400 audit(1790501944.656:189): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 55.961981][ T1808] max_ino=32 [ 55.970043][ T1808] i_nlink=2 [ 55.973361][ T1808] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 56.100267][ T1822] FAULT_INJECTION: forcing a failure. [ 56.100267][ T1822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.240220][ T1822] CPU: 1 PID: 1822 Comm: syz.1.687 Not tainted syzkaller #0 [ 56.247565][ T1822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.257637][ T1822] Call Trace: [ 56.260943][ T1822] [ 56.263895][ T1822] __dump_stack+0x21/0x30 [ 56.268251][ T1822] dump_stack_lvl+0x110/0x170 [ 56.272953][ T1822] ? show_regs_print_info+0x20/0x20 [ 56.278176][ T1822] ? vfs_write+0xc72/0xfd0 [ 56.282731][ T1822] dump_stack+0x15/0x20 [ 56.286908][ T1822] should_fail+0x3ab/0x500 [ 56.291364][ T1822] should_fail_usercopy+0x1a/0x20 [ 56.296416][ T1822] _copy_from_user+0x20/0xd0 [ 56.301027][ T1822] __sys_bpf+0x258/0x7d0 [ 56.305291][ T1822] ? bpf_link_show_fdinfo+0x330/0x330 [ 56.310692][ T1822] ? debug_smp_processor_id+0x17/0x20 [ 56.316089][ T1822] __x64_sys_bpf+0x7c/0x90 [ 56.320528][ T1822] x64_sys_call+0x4b9/0x9a0 [ 56.325055][ T1822] do_syscall_64+0x4c/0xa0 [ 56.329495][ T1822] ? clear_bhb_loop+0x50/0xa0 [ 56.334209][ T1822] ? clear_bhb_loop+0x50/0xa0 [ 56.338906][ T1822] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 56.344818][ T1822] RIP: 0033:0x7f062b255159 [ 56.349256][ T1822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.368881][ T1822] RSP: 002b:00007f0629cae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 56.377319][ T1822] RAX: ffffffffffffffda RBX: 00007f062b4dcfa0 RCX: 00007f062b255159 [ 56.385321][ T1822] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 56.393327][ T1822] RBP: 00007f0629cae090 R08: 0000000000000000 R09: 0000000000000000 [ 56.401315][ T1822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.409310][ T1822] R13: 00007f062b4dd038 R14: 00007f062b4dcfa0 R15: 00007ffc28b01088 [ 56.417327][ T1822] [ 56.914373][ T1840] loop0: detected capacity change from 0 to 128 [ 57.346994][ T30] audit: type=1400 audit(1790501946.066:190): avc: denied { read write } for pid=1851 comm="syz.4.700" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 57.394085][ T30] audit: type=1400 audit(1790501946.066:191): avc: denied { open } for pid=1851 comm="syz.4.700" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 57.495968][ T1867] loop2: detected capacity change from 0 to 512 [ 57.589833][ T1867] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 57.599981][ T1867] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 57.611369][ T1867] System zones: 0-1, 15-15, 18-18, 34-34 [ 57.623156][ T1867] EXT4-fs (loop2): orphan cleanup on readonly fs [ 57.637187][ T1867] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 57.640105][ T468] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 57.657778][ T1867] EXT4-fs warning (device loop2): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 57.692924][ T1867] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 57.699867][ T1867] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.706: bad orphan inode 16 [ 57.711813][ T1867] ext4_test_bit(bit=15, block=18) = 1 [ 57.717257][ T1867] is_bad_inode(inode)=0 [ 57.721911][ T1867] NEXT_ORPHAN(inode)=0 [ 57.726001][ T1867] max_ino=32 [ 57.729236][ T1867] i_nlink=2 [ 57.739172][ T1867] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 57.880713][ T30] audit: type=1400 audit(1790501946.606:192): avc: denied { mount } for pid=1875 comm="syz.0.710" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 58.018217][ T30] audit: type=1400 audit(1790501946.606:193): avc: denied { read write } for pid=1875 comm="syz.0.710" name="inject" dev="tracefs" ino=7682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 58.127324][ T30] audit: type=1400 audit(1790501946.606:194): avc: denied { open } for pid=1875 comm="syz.0.710" path="/183/trace/events/dwc3/dwc3_ctrl_req/inject" dev="tracefs" ino=7682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 58.507827][ T30] audit: type=1400 audit(1790501946.766:195): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 58.723200][ T1901] loop0: detected capacity change from 0 to 128 [ 58.747169][ T1903] futex_wake_op: syz.3.719 tries to shift op by 144; fix this program [ 58.808491][ T1907] loop1: detected capacity change from 0 to 512 [ 58.824867][ T468] usb 5-1: Using ep0 maxpacket: 16 [ 58.896743][ T1907] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 58.908153][ T1907] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 58.925003][ T1907] System zones: 0-1, 15-15, 18-18, 34-34 [ 58.938855][ T1907] EXT4-fs (loop1): orphan cleanup on readonly fs [ 58.945479][ T1907] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 58.955068][ T468] usb 5-1: config 250 has too many interfaces: 91, using maximum allowed: 32 [ 58.963996][ T1907] EXT4-fs warning (device loop1): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 58.978845][ T468] usb 5-1: config 250 has an invalid interface number: 105 but max is 90 [ 58.980111][ T1907] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 58.987825][ T468] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 59.005192][ T468] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 91 [ 59.014631][ T468] usb 5-1: config 250 has no interface number 0 [ 59.014627][ T1907] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.721: bad orphan inode 16 [ 59.015148][ T1907] ext4_test_bit(bit=15, block=18) = 1 [ 59.053890][ T1907] is_bad_inode(inode)=0 [ 59.062510][ T1907] NEXT_ORPHAN(inode)=0 [ 59.070996][ T1907] max_ino=32 [ 59.077503][ T1907] i_nlink=2 [ 59.084045][ T1907] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 59.180069][ T468] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 59.199324][ T468] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.209408][ T468] usb 5-1: Product: syz [ 59.219497][ T468] usb 5-1: Manufacturer: syz [ 59.229587][ T468] usb 5-1: SerialNumber: syz [ 59.280693][ T468] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 59.287108][ T468] usb 5-1: No valid video chain found. [ 59.563618][ T1938] loop3: detected capacity change from 0 to 512 [ 59.572784][ T1940] FAULT_INJECTION: forcing a failure. [ 59.572784][ T1940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.598912][ T1940] CPU: 1 PID: 1940 Comm: syz.0.734 Not tainted syzkaller #0 [ 59.606247][ T1940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.616339][ T1940] Call Trace: [ 59.619631][ T1940] [ 59.622928][ T1940] __dump_stack+0x21/0x30 [ 59.627280][ T1940] dump_stack_lvl+0x110/0x170 [ 59.631972][ T1940] ? show_regs_print_info+0x20/0x20 [ 59.637186][ T1940] ? vfs_write+0xc72/0xfd0 [ 59.641622][ T1940] dump_stack+0x15/0x20 [ 59.645802][ T1940] should_fail+0x3ab/0x500 [ 59.650248][ T1940] should_fail_usercopy+0x1a/0x20 [ 59.655300][ T1940] _copy_from_user+0x20/0xd0 [ 59.659906][ T1940] __sys_bpf+0x258/0x7d0 [ 59.664173][ T1940] ? bpf_link_show_fdinfo+0x330/0x330 [ 59.669564][ T1940] ? debug_smp_processor_id+0x17/0x20 [ 59.674976][ T1940] __x64_sys_bpf+0x7c/0x90 [ 59.679419][ T1940] x64_sys_call+0x4b9/0x9a0 [ 59.684055][ T1940] do_syscall_64+0x4c/0xa0 [ 59.688500][ T1940] ? clear_bhb_loop+0x50/0xa0 [ 59.693207][ T1940] ? clear_bhb_loop+0x50/0xa0 [ 59.697910][ T1940] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 59.704028][ T1940] RIP: 0033:0x7fc6d9e2c159 [ 59.708473][ T1940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.728110][ T1940] RSP: 002b:00007fc6d8885028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 59.736555][ T1940] RAX: ffffffffffffffda RBX: 00007fc6da0b3fa0 RCX: 00007fc6d9e2c159 [ 59.744546][ T1940] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 59.752536][ T1940] RBP: 00007fc6d8885090 R08: 0000000000000000 R09: 0000000000000000 [ 59.760521][ T1940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.768590][ T1940] R13: 00007fc6da0b4038 R14: 00007fc6da0b3fa0 R15: 00007ffdba8df878 [ 59.776586][ T1940] [ 59.814244][ T1938] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 59.836714][ T1938] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 59.845143][ T1938] System zones: 0-1, 15-15, 18-18, 34-34 [ 59.851734][ T1938] EXT4-fs (loop3): orphan cleanup on readonly fs [ 59.860747][ T1938] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 59.870603][ T1938] EXT4-fs warning (device loop3): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 59.885642][ T1938] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 59.892636][ T1938] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.733: bad orphan inode 16 [ 59.902992][ T1938] ext4_test_bit(bit=15, block=18) = 1 [ 59.909241][ T1938] is_bad_inode(inode)=0 [ 59.913722][ T1938] NEXT_ORPHAN(inode)=0 [ 59.917874][ T1938] max_ino=32 [ 59.921321][ T1938] i_nlink=2 [ 59.924564][ T1938] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 60.203323][ T1961] loop2: detected capacity change from 0 to 128 [ 60.333940][ T30] audit: type=1400 audit(1790501949.056:196): avc: denied { execute } for pid=1965 comm="syz.0.742" path=2F6D656D66643AF365099F9138C07901631F6E7578202864656C6574656429 dev="tmpfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.452408][ T1966] loop0: detected capacity change from 0 to 256 [ 60.512452][ T1966] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.540015][ T1966] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 60.544208][ T313] usb 5-1: USB disconnect, device number 2 [ 60.568330][ T1966] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 60.991649][ T2012] ======================================================= [ 60.991649][ T2012] WARNING: The mand mount option has been deprecated and [ 60.991649][ T2012] and is ignored by this kernel. Remove the mand [ 60.991649][ T2012] option from the mount to silence this warning. [ 60.991649][ T2012] ======================================================= [ 61.110443][ T2017] loop2: detected capacity change from 0 to 1024 [ 61.162111][ T2017] EXT4-fs (loop2): Ignoring removed orlov option [ 61.170017][ T307] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 61.176497][ T2017] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 61.185891][ T2017] System zones: 0-1, 3-12 [ 61.202044][ T2017] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,debug,nodioread_nolock,min_batch_time=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,orlov,nodelalloc,jqfmt=vfsv1,auto_da_alloc=0x0000000001800000,,errors=continue. Quota mode: none. [ 61.342788][ T2042] FAULT_INJECTION: forcing a failure. [ 61.342788][ T2042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.349827][ T2038] loop1: detected capacity change from 0 to 128 [ 61.362286][ T2042] CPU: 1 PID: 2042 Comm: syz.2.771 Not tainted syzkaller #0 [ 61.369601][ T2042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.379681][ T2042] Call Trace: [ 61.382976][ T2042] [ 61.385930][ T2042] __dump_stack+0x21/0x30 [ 61.390283][ T2042] dump_stack_lvl+0x110/0x170 [ 61.394997][ T2042] ? show_regs_print_info+0x20/0x20 [ 61.400223][ T2042] ? vfs_write+0xc72/0xfd0 [ 61.404673][ T2042] dump_stack+0x15/0x20 [ 61.408853][ T2042] should_fail+0x3ab/0x500 [ 61.413292][ T2042] should_fail_usercopy+0x1a/0x20 [ 61.418338][ T2042] _copy_from_user+0x20/0xd0 [ 61.422957][ T2042] __sys_bpf+0x258/0x7d0 [ 61.427234][ T2042] ? bpf_link_show_fdinfo+0x330/0x330 [ 61.432635][ T2042] ? debug_smp_processor_id+0x17/0x20 [ 61.438028][ T2042] __x64_sys_bpf+0x7c/0x90 [ 61.442465][ T2042] x64_sys_call+0x4b9/0x9a0 [ 61.446994][ T2042] do_syscall_64+0x4c/0xa0 [ 61.451440][ T2042] ? clear_bhb_loop+0x50/0xa0 [ 61.456141][ T2042] ? clear_bhb_loop+0x50/0xa0 [ 61.460841][ T2042] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 61.466761][ T2042] RIP: 0033:0x7f6ce19b2159 [ 61.471196][ T2042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.490828][ T2042] RSP: 002b:00007f6ce040b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 61.499270][ T2042] RAX: ffffffffffffffda RBX: 00007f6ce1c39fa0 RCX: 00007f6ce19b2159 [ 61.507264][ T2042] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 61.515255][ T2042] RBP: 00007f6ce040b090 R08: 0000000000000000 R09: 0000000000000000 [ 61.523252][ T2042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.531242][ T2042] R13: 00007f6ce1c3a038 R14: 00007f6ce1c39fa0 R15: 00007ffd4ec69958 [ 61.539246][ T2042] [ 61.641122][ T2049] loop2: detected capacity change from 0 to 512 [ 61.700745][ T2051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.774'. [ 61.710078][ T307] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.721447][ T2049] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 61.729579][ T307] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.739605][ T2049] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 61.753109][ T307] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 61.762359][ T2049] System zones: 0-1, 15-15, 18-18, 34-34 [ 61.770665][ T2049] EXT4-fs (loop2): orphan cleanup on readonly fs [ 61.774854][ T307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.781129][ T2049] EXT4-fs warning (device loop2): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 61.809988][ T2049] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 61.820189][ T2049] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.775: bad orphan inode 16 [ 61.830953][ T2049] ext4_test_bit(bit=15, block=18) = 1 [ 61.836437][ T2049] is_bad_inode(inode)=0 [ 61.840833][ T2049] NEXT_ORPHAN(inode)=0 [ 61.845002][ T2049] max_ino=32 [ 61.848290][ T2049] i_nlink=2 [ 61.852809][ T2049] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 62.049552][ T2060] FAULT_INJECTION: forcing a failure. [ 62.049552][ T2060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.092486][ T2060] CPU: 1 PID: 2060 Comm: syz.0.777 Not tainted syzkaller #0 [ 62.099848][ T2060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.109949][ T2060] Call Trace: [ 62.113259][ T2060] [ 62.116220][ T2060] __dump_stack+0x21/0x30 [ 62.120601][ T2060] dump_stack_lvl+0x110/0x170 [ 62.125320][ T2060] ? show_regs_print_info+0x20/0x20 [ 62.130555][ T2060] ? vfs_write+0xc72/0xfd0 [ 62.135015][ T2060] dump_stack+0x15/0x20 [ 62.139210][ T2060] should_fail+0x3ab/0x500 [ 62.143667][ T2060] should_fail_usercopy+0x1a/0x20 [ 62.148735][ T2060] _copy_from_user+0x20/0xd0 [ 62.153364][ T2060] __sys_bpf+0x258/0x7d0 [ 62.157638][ T2060] ? bpf_link_show_fdinfo+0x330/0x330 [ 62.163045][ T2060] ? debug_smp_processor_id+0x17/0x20 [ 62.168458][ T2060] __x64_sys_bpf+0x7c/0x90 [ 62.172905][ T2060] x64_sys_call+0x4b9/0x9a0 [ 62.177448][ T2060] do_syscall_64+0x4c/0xa0 [ 62.181898][ T2060] ? clear_bhb_loop+0x50/0xa0 [ 62.186612][ T2060] ? clear_bhb_loop+0x50/0xa0 [ 62.191328][ T2060] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 62.197259][ T2060] RIP: 0033:0x7fc6d9e2c159 [ 62.201709][ T2060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.221344][ T2060] RSP: 002b:00007fc6d8885028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 62.229794][ T2060] RAX: ffffffffffffffda RBX: 00007fc6da0b3fa0 RCX: 00007fc6d9e2c159 [ 62.237811][ T2060] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 62.245823][ T2060] RBP: 00007fc6d8885090 R08: 0000000000000000 R09: 0000000000000000 [ 62.253839][ T2060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.261848][ T2060] R13: 00007fc6da0b4038 R14: 00007fc6da0b3fa0 R15: 00007ffdba8df878 [ 62.269872][ T2060] [ 62.301991][ T307] wacom 0003:056A:033B.0003: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 62.323099][ T307] wacom 0003:056A:033B.0003: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.4-1/input0 [ 62.345164][ T307] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:056A:033B.0003/input/input10 [ 62.487877][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 62.487894][ T30] audit: type=1400 audit(1790501951.206:248): avc: denied { mounton } for pid=2078 comm="syz.1.785" path="/proc/235/cgroup" dev="proc" ino=21038 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 62.554803][ T2084] FAULT_INJECTION: forcing a failure. [ 62.554803][ T2084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.581084][ T1404] usb 5-1: USB disconnect, device number 3 [ 62.584977][ T2084] CPU: 0 PID: 2084 Comm: syz.0.787 Not tainted syzkaller #0 [ 62.594235][ T2084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.604309][ T2084] Call Trace: [ 62.607609][ T2084] [ 62.610561][ T2084] __dump_stack+0x21/0x30 [ 62.614920][ T2084] dump_stack_lvl+0x110/0x170 [ 62.619654][ T2084] ? show_regs_print_info+0x20/0x20 [ 62.624885][ T2084] dump_stack+0x15/0x20 [ 62.629067][ T2084] should_fail+0x3ab/0x500 [ 62.633511][ T2084] should_fail_usercopy+0x1a/0x20 [ 62.638561][ T2084] strncpy_from_user+0x24/0x2d0 [ 62.643444][ T2084] bpf_prog_load+0x1ee/0x1620 [ 62.648234][ T2084] ? __kasan_check_write+0x14/0x20 [ 62.653380][ T2084] ? proc_fail_nth_write+0x180/0x200 [ 62.658693][ T2084] ? map_freeze+0x370/0x370 [ 62.663233][ T2084] ? selinux_bpf+0xc7/0xf0 [ 62.667678][ T2084] ? security_bpf+0x82/0xa0 [ 62.672212][ T2084] __sys_bpf+0x51d/0x7d0 [ 62.676480][ T2084] ? bpf_link_show_fdinfo+0x330/0x330 [ 62.681883][ T2084] ? debug_smp_processor_id+0x17/0x20 [ 62.687292][ T2084] __x64_sys_bpf+0x7c/0x90 [ 62.691736][ T2084] x64_sys_call+0x4b9/0x9a0 [ 62.696272][ T2084] do_syscall_64+0x4c/0xa0 [ 62.700713][ T2084] ? clear_bhb_loop+0x50/0xa0 [ 62.705422][ T2084] ? clear_bhb_loop+0x50/0xa0 [ 62.710129][ T2084] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 62.716059][ T2084] RIP: 0033:0x7fc6d9e2c159 [ 62.720505][ T2084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.740484][ T2084] RSP: 002b:00007fc6d8885028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 62.748937][ T2084] RAX: ffffffffffffffda RBX: 00007fc6da0b3fa0 RCX: 00007fc6d9e2c159 [ 62.757296][ T2084] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 62.765297][ T2084] RBP: 00007fc6d8885090 R08: 0000000000000000 R09: 0000000000000000 [ 62.773298][ T2084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.781657][ T2084] R13: 00007fc6da0b4038 R14: 00007fc6da0b3fa0 R15: 00007ffdba8df878 [ 62.789685][ T2084] [ 62.880041][ T307] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 63.041755][ T30] audit: type=1400 audit(1790501951.766:249): avc: denied { create } for pid=2086 comm="syz.0.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 63.079974][ T30] audit: type=1400 audit(1790501951.766:250): avc: denied { ioctl } for pid=2086 comm="syz.0.788" path="socket:[21070]" dev="sockfs" ino=21070 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 63.130391][ T30] audit: type=1400 audit(1790501951.786:251): avc: denied { read } for pid=2086 comm="syz.0.788" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.181711][ T30] audit: type=1400 audit(1790501951.786:252): avc: denied { open } for pid=2086 comm="syz.0.788" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.238079][ T2079] loop1: detected capacity change from 0 to 2048 [ 63.252850][ T30] audit: type=1400 audit(1790501951.786:253): avc: denied { write } for pid=2086 comm="syz.0.788" path="socket:[21070]" dev="sockfs" ino=21070 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 63.310206][ T1404] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 63.401363][ T2079] loop1: detected capacity change from 0 to 128 [ 63.439915][ T30] audit: type=1400 audit(1790501952.156:254): avc: denied { sys_admin } for pid=2110 comm="syz.4.793" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 63.510312][ T30] audit: type=1400 audit(1790501952.186:255): avc: denied { write } for pid=2078 comm="syz.1.785" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 63.600062][ T1404] usb 1-1: Using ep0 maxpacket: 32 [ 63.743558][ T30] audit: type=1400 audit(1790501952.466:256): avc: denied { mmap_zero } for pid=2132 comm="syz.4.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 63.775800][ T2133] loop4: detected capacity change from 0 to 256 [ 63.820111][ T1404] usb 1-1: config 1 interface 0 has no altsetting 0 [ 63.852758][ T2133] FAT-fs (loop4): Unrecognized mount option "gid=0x0000000000000000ÿÿÿÿ" or missing value [ 63.949907][ T2143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.807'. [ 63.982146][ T2142] device vlan2 entered promiscuous mode [ 63.987849][ T2142] device bridge0 entered promiscuous mode [ 63.993951][ T1404] usb 1-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.40 [ 64.010126][ T307] usb 2-1: unable to get BOS descriptor or descriptor too short [ 64.018167][ T307] usb 2-1: no configurations [ 64.023098][ T1404] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.033099][ T30] audit: type=1400 audit(1790501952.696:257): avc: denied { getopt } for pid=2141 comm="syz.4.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.065624][ T307] usb 2-1: can't read configurations, error -22 [ 64.065833][ T2152] FAULT_INJECTION: forcing a failure. [ 64.065833][ T2152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.076632][ T1404] usb 1-1: Product: syz [ 64.103525][ T2152] CPU: 0 PID: 2152 Comm: syz.1.810 Not tainted syzkaller #0 [ 64.110870][ T2152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.117447][ T1404] usb 1-1: Manufacturer: syz [ 64.120956][ T2152] Call Trace: [ 64.120965][ T2152] [ 64.120974][ T2152] __dump_stack+0x21/0x30 [ 64.121001][ T2152] dump_stack_lvl+0x110/0x170 [ 64.135966][ T1404] usb 1-1: SerialNumber: syz [ 64.140882][ T2152] ? show_regs_print_info+0x20/0x20 [ 64.140915][ T2152] dump_stack+0x15/0x20 [ 64.154933][ T2152] should_fail+0x3ab/0x500 [ 64.159397][ T2152] should_fail_usercopy+0x1a/0x20 [ 64.164461][ T2152] strncpy_from_user+0x24/0x2d0 [ 64.169363][ T2152] bpf_prog_load+0x1ee/0x1620 [ 64.174101][ T2152] ? __kasan_check_write+0x14/0x20 [ 64.179260][ T2152] ? proc_fail_nth_write+0x180/0x200 [ 64.184592][ T2152] ? map_freeze+0x370/0x370 [ 64.189146][ T2152] ? selinux_bpf+0xc7/0xf0 [ 64.193637][ T2152] ? security_bpf+0x82/0xa0 [ 64.198185][ T2152] __sys_bpf+0x51d/0x7d0 [ 64.202475][ T2152] ? bpf_link_show_fdinfo+0x330/0x330 [ 64.207896][ T2152] ? debug_smp_processor_id+0x17/0x20 [ 64.213307][ T2152] __x64_sys_bpf+0x7c/0x90 [ 64.217764][ T2152] x64_sys_call+0x4b9/0x9a0 [ 64.222312][ T2152] do_syscall_64+0x4c/0xa0 [ 64.226764][ T2152] ? clear_bhb_loop+0x50/0xa0 [ 64.231475][ T2152] ? clear_bhb_loop+0x50/0xa0 [ 64.236190][ T2152] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.242131][ T2152] RIP: 0033:0x7f062b255159 [ 64.246587][ T2152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.266229][ T2152] RSP: 002b:00007f0629cae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 64.274688][ T2152] RAX: ffffffffffffffda RBX: 00007f062b4dcfa0 RCX: 00007f062b255159 [ 64.276867][ T2156] loop4: detected capacity change from 0 to 256 [ 64.282699][ T2152] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 64.282717][ T2152] RBP: 00007f0629cae090 R08: 0000000000000000 R09: 0000000000000000 [ 64.282731][ T2152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.282745][ T2152] R13: 00007f062b4dd038 R14: 00007f062b4dcfa0 R15: 00007ffc28b01088 [ 64.320965][ T2152] [ 64.325698][ T2156] FAT-fs (loop4): Unrecognized mount option "iochar" or missing value [ 64.371685][ T2161] FAULT_INJECTION: forcing a failure. [ 64.371685][ T2161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.390858][ T2161] CPU: 0 PID: 2161 Comm: syz.2.815 Not tainted syzkaller #0 [ 64.398217][ T2161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.408484][ T2161] Call Trace: [ 64.411803][ T2161] [ 64.414769][ T2161] __dump_stack+0x21/0x30 [ 64.419144][ T2161] dump_stack_lvl+0x110/0x170 [ 64.422630][ T2156] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2156 comm=syz.4.812 [ 64.423869][ T2161] ? show_regs_print_info+0x20/0x20 [ 64.423900][ T2161] dump_stack+0x15/0x20 [ 64.445812][ T2161] should_fail+0x3ab/0x500 [ 64.450269][ T2161] should_fail_usercopy+0x1a/0x20 [ 64.455340][ T2161] strncpy_from_user+0x24/0x2d0 [ 64.460245][ T2161] bpf_prog_load+0x1ee/0x1620 [ 64.464963][ T2161] ? __kasan_check_write+0x14/0x20 [ 64.470113][ T2161] ? proc_fail_nth_write+0x180/0x200 [ 64.475441][ T2161] ? map_freeze+0x370/0x370 [ 64.479990][ T2161] ? selinux_bpf+0xc7/0xf0 [ 64.484438][ T2161] ? security_bpf+0x82/0xa0 [ 64.489008][ T2161] __sys_bpf+0x51d/0x7d0 [ 64.493295][ T2161] ? bpf_link_show_fdinfo+0x330/0x330 [ 64.498715][ T2161] ? debug_smp_processor_id+0x17/0x20 [ 64.504259][ T2161] __x64_sys_bpf+0x7c/0x90 [ 64.508714][ T2161] x64_sys_call+0x4b9/0x9a0 [ 64.513270][ T2161] do_syscall_64+0x4c/0xa0 [ 64.517712][ T2161] ? clear_bhb_loop+0x50/0xa0 [ 64.522438][ T2161] ? clear_bhb_loop+0x50/0xa0 [ 64.527145][ T2161] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.533068][ T2161] RIP: 0033:0x7f6ce19b2159 [ 64.537508][ T2161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.557222][ T2161] RSP: 002b:00007f6ce040b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 64.565675][ T2161] RAX: ffffffffffffffda RBX: 00007f6ce1c39fa0 RCX: 00007f6ce19b2159 [ 64.571868][ T2166] loop1: detected capacity change from 0 to 512 [ 64.573683][ T2161] RDX: 0000000000000094 RSI: 0000200000002500 RDI: 0000000000000005 [ 64.573700][ T2161] RBP: 00007f6ce040b090 R08: 0000000000000000 R09: 0000000000000000 [ 64.573713][ T2161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.603898][ T2161] R13: 00007f6ce1c3a038 R14: 00007f6ce1c39fa0 R15: 00007ffd4ec69958 [ 64.611894][ T2161] [ 64.670168][ T2166] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 64.678426][ T2166] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 64.700037][ T2166] System zones: 0-1, 15-15, 18-18, 34-34 [ 64.706259][ T2166] EXT4-fs (loop1): orphan cleanup on readonly fs [ 64.720924][ T2166] EXT4-fs warning (device loop1): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 64.747462][ T2178] FAULT_INJECTION: forcing a failure. [ 64.747462][ T2178] name failslab, interval 1, probability 0, space 0, times 1 [ 64.760620][ T2166] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 64.767479][ T2166] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.816: bad orphan inode 16 [ 64.778630][ T2166] ext4_test_bit(bit=15, block=18) = 1 [ 64.784251][ T2166] is_bad_inode(inode)=0 [ 64.790587][ T2166] NEXT_ORPHAN(inode)=0 [ 64.794828][ T2178] CPU: 0 PID: 2178 Comm: syz.3.821 Not tainted syzkaller #0 [ 64.802158][ T2178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.805147][ T2166] max_ino=32 [ 64.812246][ T2178] Call Trace: [ 64.812258][ T2178] [ 64.812267][ T2178] __dump_stack+0x21/0x30 [ 64.812291][ T2178] dump_stack_lvl+0x110/0x170 [ 64.830832][ T2178] ? show_regs_print_info+0x20/0x20 [ 64.836072][ T2178] ? kasan_set_track+0x5b/0x70 [ 64.837323][ T2166] i_nlink=2 [ 64.840866][ T2178] ? kasan_set_free_info+0x23/0x40 [ 64.840890][ T2178] ? ____kasan_slab_free+0x125/0x160 [ 64.840910][ T2178] ? __kasan_slab_free+0x11/0x20 [ 64.856760][ T2166] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 64.859483][ T2178] ? kmem_cache_free+0x100/0x320 [ 64.859511][ T2178] ? putname+0x111/0x160 [ 64.880345][ T2178] ? do_sys_openat2+0x6df/0x7f0 [ 64.885230][ T2178] ? __x64_sys_openat+0x136/0x160 [ 64.890287][ T2178] dump_stack+0x15/0x20 [ 64.894479][ T2178] should_fail+0x3ab/0x500 [ 64.898927][ T2178] __should_failslab+0xa4/0xe0 [ 64.903725][ T2178] should_failslab+0x9/0x20 [ 64.908262][ T2178] slab_pre_alloc_hook+0x39/0xd0 [ 64.913240][ T2178] __kmalloc+0x6d/0x2c0 [ 64.917426][ T2178] ? bpf_test_init+0x100/0x1c0 [ 64.922223][ T2178] bpf_test_init+0x100/0x1c0 [ 64.926963][ T2178] bpf_prog_test_run_skb+0x193/0x1180 [ 64.932364][ T2178] ? __fget_files+0x2e1/0x340 [ 64.937073][ T2178] ? __kasan_check_write+0x14/0x20 [ 64.942222][ T2178] ? fput_many+0x15a/0x1a0 [ 64.946673][ T2178] ? __bpf_prog_test_run_raw_tp+0x2c0/0x2c0 [ 64.952604][ T2178] bpf_prog_test_run+0x3a5/0x5b0 [ 64.957584][ T2178] ? bpf_prog_query+0x230/0x230 [ 64.962477][ T2178] ? selinux_bpf+0xce/0xf0 [ 64.966924][ T2178] ? security_bpf+0x82/0xa0 [ 64.971462][ T2178] __sys_bpf+0x590/0x7d0 [ 64.973432][ T2183] FAULT_INJECTION: forcing a failure. [ 64.973432][ T2183] name failslab, interval 1, probability 0, space 0, times 1 [ 64.975731][ T2178] ? bpf_link_show_fdinfo+0x330/0x330 [ 64.975760][ T2178] ? debug_smp_processor_id+0x17/0x20 [ 64.999097][ T2178] __x64_sys_bpf+0x7c/0x90 [ 65.003543][ T2178] x64_sys_call+0x4b9/0x9a0 [ 65.008075][ T2178] do_syscall_64+0x4c/0xa0 [ 65.012523][ T2178] ? clear_bhb_loop+0x50/0xa0 [ 65.017238][ T2178] ? clear_bhb_loop+0x50/0xa0 [ 65.021940][ T2178] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 65.027858][ T2178] RIP: 0033:0x7fec3ab53159 [ 65.032298][ T2178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.051932][ T2178] RSP: 002b:00007fec395ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 65.060378][ T2178] RAX: ffffffffffffffda RBX: 00007fec3addafa0 RCX: 00007fec3ab53159 [ 65.068375][ T2178] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 65.076375][ T2178] RBP: 00007fec395ac090 R08: 0000000000000000 R09: 0000000000000000 [ 65.084379][ T2178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.092378][ T2178] R13: 00007fec3addb038 R14: 00007fec3addafa0 R15: 00007ffd0a515ab8 [ 65.100385][ T2178] [ 65.103430][ T2183] CPU: 1 PID: 2183 Comm: syz.2.824 Not tainted syzkaller #0 [ 65.110776][ T2183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.120860][ T2183] Call Trace: [ 65.124152][ T2183] [ 65.127099][ T2183] __dump_stack+0x21/0x30 [ 65.131455][ T2183] dump_stack_lvl+0x110/0x170 [ 65.136285][ T2183] ? show_regs_print_info+0x20/0x20 [ 65.141521][ T2183] ? __kernel_text_address+0xa0/0x100 [ 65.146926][ T2183] ? unwind_get_return_address+0x4d/0x90 [ 65.152589][ T2183] dump_stack+0x15/0x20 [ 65.156771][ T2183] should_fail+0x3ab/0x500 [ 65.161211][ T2183] __should_failslab+0xa4/0xe0 [ 65.166005][ T2183] should_failslab+0x9/0x20 [ 65.170529][ T2183] slab_pre_alloc_hook+0x39/0xd0 [ 65.175498][ T2183] kmem_cache_alloc_trace+0x48/0x270 [ 65.180817][ T2183] ? __get_vm_area_node+0x11d/0x350 [ 65.186044][ T2183] __get_vm_area_node+0x11d/0x350 [ 65.191093][ T2183] __vmalloc_node_range+0xe8/0xad0 [ 65.196235][ T2183] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 65.201805][ T2183] ? selinux_capset+0xf0/0xf0 [ 65.206531][ T2183] ? _kstrtoull+0x3bb/0x4c0 [ 65.211059][ T2183] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 65.216650][ T2183] __vmalloc+0x79/0x90 [ 65.220746][ T2183] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 65.226321][ T2183] bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 65.231718][ T2183] ? bpf_prog_alloc+0x15/0x1e0 [ 65.236514][ T2183] bpf_prog_alloc+0x1f/0x1e0 [ 65.241126][ T2183] bpf_prog_load+0x80e/0x1620 [ 65.245985][ T2183] ? map_freeze+0x370/0x370 [ 65.250634][ T2183] ? selinux_bpf+0xc7/0xf0 [ 65.255078][ T2183] ? security_bpf+0x82/0xa0 [ 65.259605][ T2183] __sys_bpf+0x51d/0x7d0 [ 65.263887][ T2183] ? bpf_link_show_fdinfo+0x330/0x330 [ 65.269281][ T2183] ? debug_smp_processor_id+0x17/0x20 [ 65.274678][ T2183] __x64_sys_bpf+0x7c/0x90 [ 65.279115][ T2183] x64_sys_call+0x4b9/0x9a0 [ 65.283647][ T2183] do_syscall_64+0x4c/0xa0 [ 65.288086][ T2183] ? clear_bhb_loop+0x50/0xa0 [ 65.292789][ T2183] ? clear_bhb_loop+0x50/0xa0 [ 65.297493][ T2183] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 65.303412][ T2183] RIP: 0033:0x7f6ce19b2159 [ 65.307865][ T2183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.327483][ T2183] RSP: 002b:00007f6ce040b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 65.335916][ T2183] RAX: ffffffffffffffda RBX: 00007f6ce1c39fa0 RCX: 00007f6ce19b2159 [ 65.343913][ T2183] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 65.351897][ T2183] RBP: 00007f6ce040b090 R08: 0000000000000000 R09: 0000000000000000 [ 65.359886][ T2183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.367870][ T2183] R13: 00007f6ce1c3a038 R14: 00007f6ce1c39fa0 R15: 00007ffd4ec69958 [ 65.375862][ T2183] [ 65.457863][ T2183] syz.2.824: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 65.535519][ T2183] CPU: 0 PID: 2183 Comm: syz.2.824 Not tainted syzkaller #0 [ 65.542877][ T2183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.552964][ T2183] Call Trace: [ 65.556272][ T2183] [ 65.559232][ T2183] __dump_stack+0x21/0x30 [ 65.563603][ T2183] dump_stack_lvl+0x110/0x170 [ 65.568316][ T2183] ? show_regs_print_info+0x20/0x20 [ 65.573553][ T2183] ? pr_cont_kernfs_name+0xe3/0xf0 [ 65.578732][ T2183] dump_stack+0x15/0x20 [ 65.582917][ T2183] warn_alloc+0x1dc/0x200 [ 65.587279][ T2183] ? __should_failslab+0xa4/0xe0 [ 65.592266][ T2183] ? zone_watermark_ok_safe+0x270/0x270 [ 65.597851][ T2183] ? kmem_cache_alloc_trace+0x119/0x270 [ 65.603432][ T2183] __vmalloc_node_range+0x15e/0xad0 [ 65.608663][ T2183] ? selinux_capset+0xf0/0xf0 [ 65.613378][ T2183] ? _kstrtoull+0x3bb/0x4c0 [ 65.617918][ T2183] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 65.623494][ T2183] __vmalloc+0x79/0x90 [ 65.627599][ T2183] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 65.633359][ T2183] bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 65.638842][ T2183] ? bpf_prog_alloc+0x15/0x1e0 [ 65.643639][ T2183] bpf_prog_alloc+0x1f/0x1e0 [ 65.648260][ T2183] bpf_prog_load+0x80e/0x1620 [ 65.652978][ T2183] ? map_freeze+0x370/0x370 [ 65.657706][ T2183] ? selinux_bpf+0xc7/0xf0 [ 65.662171][ T2183] ? security_bpf+0x82/0xa0 [ 65.666714][ T2183] __sys_bpf+0x51d/0x7d0 [ 65.671003][ T2183] ? bpf_link_show_fdinfo+0x330/0x330 [ 65.676417][ T2183] ? debug_smp_processor_id+0x17/0x20 [ 65.681844][ T2183] __x64_sys_bpf+0x7c/0x90 [ 65.686301][ T2183] x64_sys_call+0x4b9/0x9a0 [ 65.690847][ T2183] do_syscall_64+0x4c/0xa0 [ 65.695295][ T2183] ? clear_bhb_loop+0x50/0xa0 [ 65.700006][ T2183] ? clear_bhb_loop+0x50/0xa0 [ 65.704716][ T2183] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 65.710644][ T2183] RIP: 0033:0x7f6ce19b2159 [ 65.715099][ T2183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.734742][ T2183] RSP: 002b:00007f6ce040b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 65.743198][ T2183] RAX: ffffffffffffffda RBX: 00007f6ce1c39fa0 RCX: 00007f6ce19b2159 [ 65.751223][ T2183] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 65.759236][ T2183] RBP: 00007f6ce040b090 R08: 0000000000000000 R09: 0000000000000000 [ 65.767233][ T2183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.775234][ T2183] R13: 00007f6ce1c3a038 R14: 00007f6ce1c39fa0 R15: 00007ffd4ec69958 [ 65.783250][ T2183] [ 65.815788][ T2190] FAULT_INJECTION: forcing a failure. [ 65.815788][ T2190] name failslab, interval 1, probability 0, space 0, times 0 [ 65.914358][ T2190] CPU: 0 PID: 2190 Comm: syz.3.825 Not tainted syzkaller #0 [ 65.921726][ T2190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.931816][ T2190] Call Trace: [ 65.935122][ T2190] [ 65.938082][ T2190] __dump_stack+0x21/0x30 [ 65.942447][ T2190] dump_stack_lvl+0x110/0x170 [ 65.947157][ T2190] ? show_regs_print_info+0x20/0x20 [ 65.952396][ T2190] dump_stack+0x15/0x20 [ 65.956620][ T2190] should_fail+0x3ab/0x500 [ 65.961078][ T2190] __should_failslab+0xa4/0xe0 [ 65.965882][ T2190] should_failslab+0x9/0x20 [ 65.970424][ T2190] slab_pre_alloc_hook+0x39/0xd0 [ 65.975397][ T2190] ? __alloc_file+0x28/0x2a0 [ 65.980054][ T2190] kmem_cache_alloc+0x44/0x260 [ 65.984860][ T2190] __alloc_file+0x28/0x2a0 [ 65.989319][ T2190] alloc_empty_file+0x97/0x180 [ 65.994126][ T2190] alloc_file+0x59/0x580 [ 65.998401][ T2190] alloc_file_pseudo+0x180/0x200 [ 66.003379][ T2190] ? alloc_empty_file_noaccount+0x80/0x80 [ 66.009142][ T2190] __anon_inode_getfd+0x26b/0x3d0 [ 66.014202][ T2190] ? anon_inode_getfd+0x40/0x40 [ 66.019091][ T2190] ? __kasan_check_write+0x14/0x20 [ 66.024242][ T2190] anon_inode_getfd+0x31/0x40 [ 66.028956][ T2190] do_inotify_init+0x346/0x4a0 [ 66.033836][ T2190] __x64_sys_inotify_init1+0x37/0x40 [ 66.039174][ T2190] x64_sys_call+0x687/0x9a0 [ 66.043726][ T2190] do_syscall_64+0x4c/0xa0 [ 66.048265][ T2190] ? clear_bhb_loop+0x50/0xa0 [ 66.052974][ T2190] ? clear_bhb_loop+0x50/0xa0 [ 66.057684][ T2190] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.063618][ T2190] RIP: 0033:0x7fec3ab53159 [ 66.068065][ T2190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.087708][ T2190] RSP: 002b:00007fec3958b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 66.096164][ T2190] RAX: ffffffffffffffda RBX: 00007fec3addb090 RCX: 00007fec3ab53159 [ 66.104168][ T2190] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 66.112177][ T2190] RBP: 00007fec3abea06b R08: 0000000000000000 R09: 0000000000000000 [ 66.120180][ T2190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.128181][ T2190] R13: 00007fec3addb128 R14: 00007fec3addb090 R15: 00007ffd0a515ab8 [ 66.136193][ T2190] [ 66.411554][ T2183] Mem-Info: [ 66.414775][ T2183] active_anon:2915 inactive_anon:29102 isolated_anon:0 [ 66.414775][ T2183] active_file:13120 inactive_file:7571 isolated_file:0 [ 66.414775][ T2183] unevictable:0 dirty:46 writeback:21 [ 66.414775][ T2183] slab_reclaimable:7943 slab_unreclaimable:75004 [ 66.414775][ T2183] mapped:32527 shmem:22400 pagetables:981 bounce:0 [ 66.414775][ T2183] kernel_misc_reclaimable:0 [ 66.414775][ T2183] free:1530953 free_pcp:4904 free_cma:0 [ 66.480755][ T2183] Node 0 active_anon:6760kB inactive_anon:104824kB active_file:52488kB inactive_file:30284kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123448kB dirty:192kB writeback:0kB shmem:78124kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4868kB pagetables:3828kB all_unreclaimable? no [ 66.512285][ T2183] DMA32 free:2978772kB min:62612kB low:78264kB high:93916kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2982744kB mlocked:0kB bounce:0kB free_pcp:3972kB local_pcp:3916kB free_cma:0kB [ 66.539809][ T2183] lowmem_reserve[]: 0 3941 3941 [ 66.545302][ T2183] Normal free:3145040kB min:84840kB low:106048kB high:127256kB reserved_highatomic:0KB active_anon:10660kB inactive_anon:100724kB active_file:52488kB inactive_file:30284kB unevictable:0kB writepending:192kB present:5242880kB managed:4036096kB mlocked:0kB bounce:0kB free_pcp:32808kB local_pcp:21888kB free_cma:0kB [ 66.575339][ T2183] lowmem_reserve[]: 0 0 0 [ 66.579753][ T2183] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 724*4096kB (M) = 2978772kB [ 66.595584][ T2183] Normal: 138*4kB (UME) 123*8kB (UE) 19*16kB (UME) 39*32kB (UE) 45*64kB (U) 28*128kB (UM) 22*256kB (UM) 13*512kB (UM) 8*1024kB (M) 3*2048kB (UM) 759*4096kB (UM) = 3145040kB [ 66.613391][ T2183] 40249 total pagecache pages [ 66.618106][ T2183] 0 pages in swap cache [ 66.622328][ T2183] Swap cache stats: add 15, delete 15, find 5/5 [ 66.628699][ T2183] Free swap = 124728kB [ 66.633065][ T2183] Total swap = 124996kB [ 66.637256][ T2183] 2097051 pages RAM [ 66.642963][ T2183] 0 pages HighMem/MovableOnly [ 66.647728][ T2183] 342341 pages reserved [ 66.652045][ T2183] 0 pages cma reserved [ 66.700461][ T2217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.831'. [ 66.710088][ T1404] usbhid 1-1:1.0: can't add hid device: -71 [ 66.719120][ T1404] usbhid: probe of 1-1:1.0 failed with error -71 [ 66.737305][ T1404] usb 1-1: USB disconnect, device number 2 [ 66.744221][ T2217] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.981737][ T2236] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 67.040010][ T307] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 67.046797][ T2238] loop4: detected capacity change from 0 to 1024 [ 67.087690][ T2238] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 67.123550][ T2238] EXT4-fs error (device loop4): ext4_map_blocks:742: inode #3: block 1: comm syz.4.841: lblock 1 mapped to illegal pblock 1 (length 1) [ 67.138254][ T2238] EXT4-fs (loop4): Remounting filesystem read-only [ 67.145696][ T2238] EXT4-fs error (device loop4): ext4_acquire_dquot:6227: comm syz.4.841: Failed to acquire dquot type 0 [ 67.157393][ T2238] EXT4-fs (loop4): Remounting filesystem read-only [ 67.164449][ T2238] EXT4-fs error (device loop4): ext4_free_blocks:6231: comm syz.4.841: Freeing blocks not in datazone - block = 0, count = 4096 [ 67.178428][ T2238] EXT4-fs (loop4): Remounting filesystem read-only [ 67.185605][ T2238] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.841: Invalid inode bitmap blk 0 in block_group 0 [ 67.198969][ T2238] EXT4-fs (loop4): Remounting filesystem read-only [ 67.205806][ T2238] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 67.206323][ T45] EXT4-fs error (device loop4): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 67.228989][ T2238] EXT4-fs (loop4): Remounting filesystem read-only [ 67.235860][ T45] EXT4-fs (loop4): Remounting filesystem read-only [ 67.242708][ T2238] EXT4-fs (loop4): 1 orphan inode deleted [ 67.248588][ T45] EXT4-fs error (device loop4): ext4_release_dquot:6263: comm kworker/u4:2: Failed to release dquot type 0 [ 67.260774][ T2238] EXT4-fs (loop4): mounted filesystem without journal. Opts: €�; acl,inlinecrypt,errors=remount-ro,dioread_nolock,journal_dev=0x000000000000000f,max_batch_time=0x00000000000008cb,user_xattr,max_batch_time=0x0000000000000100,. Quota mode: writeback. [ 67.285486][ T45] EXT4-fs (loop4): Remounting filesystem read-only [ 67.309981][ T307] usb 3-1: Invalid ep0 maxpacket: 32 [ 67.396631][ T2238] EXT4-fs error (device loop4): ext4_lookup:1858: inode #16: comm syz.4.841: iget: bad extra_isize 65535 (inode size 256) [ 67.430810][ T2238] EXT4-fs (loop4): Remounting filesystem read-only [ 67.442339][ T2238] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 16: comm syz.4.841: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 67.470412][ T307] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 67.515865][ T2238] EXT4-fs (loop4): Remounting filesystem read-only [ 67.542108][ T2245] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 16: comm syz.4.841: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 67.611096][ T2245] EXT4-fs (loop4): Remounting filesystem read-only [ 67.646165][ T2252] loop3: detected capacity change from 0 to 512 [ 67.675025][ T10] EXT4-fs error (device loop4): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 67.715051][ T10] EXT4-fs (loop4): Remounting filesystem read-only [ 67.739787][ T10] __quota_error: 5 callbacks suppressed [ 67.739803][ T10] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 67.761182][ T30] audit: type=1400 audit(1790501956.486:259): avc: denied { append } for pid=2255 comm="syz.0.849" name="uprobe_events" dev="tracefs" ino=13131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 67.789889][ T10] EXT4-fs error (device loop4): ext4_release_dquot:6263: comm kworker/u4:1: Failed to release dquot type 0 [ 67.801621][ T10] EXT4-fs (loop4): Remounting filesystem read-only [ 67.881126][ T307] usb 3-1: Invalid ep0 maxpacket: 32 [ 67.886598][ T307] usb usb3-port1: attempt power cycle [ 67.893266][ T2252] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 67.901278][ T2252] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 67.909460][ T2252] System zones: 0-1, 15-15, 18-18, 34-34 [ 67.916710][ T2252] EXT4-fs (loop3): orphan cleanup on readonly fs [ 67.923524][ T2252] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 68.033182][ T2252] EXT4-fs warning (device loop3): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 68.048305][ T2252] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 68.055349][ T2252] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.846: bad orphan inode 16 [ 68.065886][ T2252] ext4_test_bit(bit=15, block=18) = 1 [ 68.071526][ T2252] is_bad_inode(inode)=0 [ 68.075851][ T2252] NEXT_ORPHAN(inode)=0 [ 68.080180][ T2252] max_ino=32 [ 68.083448][ T2252] i_nlink=2 [ 68.086742][ T2252] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 68.470159][ T307] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 68.720049][ T307] usb 3-1: Invalid ep0 maxpacket: 32 [ 68.817079][ T2280] FAULT_INJECTION: forcing a failure. [ 68.817079][ T2280] name failslab, interval 1, probability 0, space 0, times 0 [ 68.831584][ T2280] CPU: 1 PID: 2280 Comm: syz.0.858 Not tainted syzkaller #0 [ 68.839003][ T2280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.849091][ T2280] Call Trace: [ 68.852404][ T2280] [ 68.855355][ T2280] __dump_stack+0x21/0x30 [ 68.859709][ T2280] dump_stack_lvl+0x110/0x170 [ 68.864410][ T2280] ? show_regs_print_info+0x20/0x20 [ 68.869639][ T2280] dump_stack+0x15/0x20 [ 68.873812][ T2280] should_fail+0x3ab/0x500 [ 68.878250][ T2280] ? ppp_write+0xb6/0x3b0 [ 68.882600][ T2280] __should_failslab+0xa4/0xe0 [ 68.887392][ T2280] should_failslab+0x9/0x20 [ 68.891917][ T2280] slab_pre_alloc_hook+0x39/0xd0 [ 68.896877][ T2280] ? ppp_write+0xb6/0x3b0 [ 68.901230][ T2280] ? ppp_write+0xb6/0x3b0 [ 68.905592][ T2280] __kmalloc_track_caller+0x6c/0x2c0 [ 68.910904][ T2280] ? ppp_write+0xb6/0x3b0 [ 68.915265][ T2280] ? ppp_write+0xb6/0x3b0 [ 68.919622][ T2280] __alloc_skb+0x210/0x730 [ 68.924067][ T2280] ppp_write+0xb6/0x3b0 [ 68.928244][ T2280] ? security_file_permission+0x83/0xa0 [ 68.933815][ T2280] ? ppp_read+0x770/0x770 [ 68.938168][ T2280] vfs_write+0x404/0xfd0 [ 68.942435][ T2280] ? file_end_write+0x1b0/0x1b0 [ 68.947309][ T2280] ? __fget_files+0x2e1/0x340 [ 68.952006][ T2280] ? __fdget_pos+0x1f7/0x380 [ 68.956622][ T2280] ? ksys_write+0x70/0x260 [ 68.961073][ T2280] ksys_write+0x14a/0x260 [ 68.965430][ T2280] ? __ia32_sys_read+0x90/0x90 [ 68.970218][ T2280] ? debug_smp_processor_id+0x17/0x20 [ 68.975617][ T2280] __x64_sys_write+0x7b/0x90 [ 68.980231][ T2280] x64_sys_call+0x8ef/0x9a0 [ 68.984767][ T2280] do_syscall_64+0x4c/0xa0 [ 68.989208][ T2280] ? clear_bhb_loop+0x50/0xa0 [ 68.993913][ T2280] ? clear_bhb_loop+0x50/0xa0 [ 68.998614][ T2280] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.004533][ T2280] RIP: 0033:0x7fc6d9e2c159 [ 69.008968][ T2280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.028600][ T2280] RSP: 002b:00007fc6d8885028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 69.037040][ T2280] RAX: ffffffffffffffda RBX: 00007fc6da0b3fa0 RCX: 00007fc6d9e2c159 [ 69.045039][ T2280] RDX: 000000000000000a RSI: 0000200000000080 RDI: 0000000000000005 [ 69.053038][ T2280] RBP: 00007fc6d8885090 R08: 0000000000000000 R09: 0000000000000000 [ 69.061048][ T2280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.069042][ T2280] R13: 00007fc6da0b4038 R14: 00007fc6da0b3fa0 R15: 00007ffdba8df878 [ 69.077057][ T2280] [ 69.080733][ T307] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 69.180638][ T307] usb 3-1: Invalid ep0 maxpacket: 32 [ 69.189033][ T307] usb usb3-port1: unable to enumerate USB device [ 69.460997][ T2309] IPv6: addrconf: prefix option has invalid lifetime [ 69.490663][ T2309] xt_hashlimit: size too large, truncated to 1048576 [ 69.563011][ T2311] loop3: detected capacity change from 0 to 512 [ 69.610164][ T2311] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 69.631531][ T30] audit: type=1400 audit(1790501958.356:260): avc: denied { mount } for pid=2312 comm="syz.4.872" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 69.735088][ T2320] loop2: detected capacity change from 0 to 512 [ 69.761836][ T2311] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 69.773052][ T2311] SELinux: security_context_str_to_sid(system_u) failed for (dev loop3, type ext4) errno=-22 [ 69.910315][ T2320] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 69.929987][ T2320] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 69.951370][ T2320] System zones: 0-1, 15-15, 18-18, 34-34 [ 69.957692][ T2320] EXT4-fs (loop2): orphan cleanup on readonly fs [ 69.964415][ T2320] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 69.973982][ T2320] EXT4-fs warning (device loop2): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 69.988795][ T2320] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 69.995821][ T2320] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.873: bad orphan inode 16 [ 70.006191][ T2320] ext4_test_bit(bit=15, block=18) = 1 [ 70.011790][ T2320] is_bad_inode(inode)=0 [ 70.016031][ T2320] NEXT_ORPHAN(inode)=0 [ 70.020376][ T2320] max_ino=32 [ 70.023656][ T2320] i_nlink=2 [ 70.026890][ T2320] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 70.202546][ T2313] device vlan2 left promiscuous mode [ 70.214354][ T2313] device bridge0 left promiscuous mode [ 70.227430][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 70.251381][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.296888][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 70.335665][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.344018][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.352244][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.372517][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.385050][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.689936][ C0] sched: RT throttling activated [ 71.717339][ T30] audit: type=1400 audit(1790501960.436:261): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 71.810270][ T2372] FAULT_INJECTION: forcing a failure. [ 71.810270][ T2372] name failslab, interval 1, probability 0, space 0, times 0 [ 71.905025][ T2372] CPU: 1 PID: 2372 Comm: syz.1.895 Not tainted syzkaller #0 [ 71.912378][ T2372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.922473][ T2372] Call Trace: [ 71.925772][ T2372] [ 71.928754][ T2372] __dump_stack+0x21/0x30 [ 71.933130][ T2372] dump_stack_lvl+0x110/0x170 [ 71.937828][ T2372] ? show_regs_print_info+0x20/0x20 [ 71.943050][ T2372] ? __kernel_text_address+0xa0/0x100 [ 71.948433][ T2372] ? unwind_get_return_address+0x4d/0x90 [ 71.954082][ T2372] dump_stack+0x15/0x20 [ 71.958256][ T2372] should_fail+0x3ab/0x500 [ 71.962696][ T2372] __should_failslab+0xa4/0xe0 [ 71.967479][ T2372] should_failslab+0x9/0x20 [ 71.971995][ T2372] slab_pre_alloc_hook+0x39/0xd0 [ 71.976949][ T2372] kmem_cache_alloc_trace+0x48/0x270 [ 71.982261][ T2372] ? __get_vm_area_node+0x11d/0x350 [ 71.987471][ T2372] __get_vm_area_node+0x11d/0x350 [ 71.992513][ T2372] __vmalloc_node_range+0xe8/0xad0 [ 71.997635][ T2372] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 72.003224][ T2372] ? selinux_capset+0xf0/0xf0 [ 72.007919][ T2372] ? _kstrtoull+0x3bb/0x4c0 [ 72.012444][ T2372] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 72.018012][ T2372] __vmalloc+0x79/0x90 [ 72.022097][ T2372] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 72.027657][ T2372] bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 72.033053][ T2372] ? bpf_prog_alloc+0x15/0x1e0 [ 72.037834][ T2372] bpf_prog_alloc+0x1f/0x1e0 [ 72.042434][ T2372] bpf_prog_load+0x80e/0x1620 [ 72.047129][ T2372] ? map_freeze+0x370/0x370 [ 72.051648][ T2372] ? selinux_bpf+0xc7/0xf0 [ 72.056085][ T2372] ? security_bpf+0x82/0xa0 [ 72.060601][ T2372] __sys_bpf+0x51d/0x7d0 [ 72.064879][ T2372] ? bpf_link_show_fdinfo+0x330/0x330 [ 72.070270][ T2372] ? debug_smp_processor_id+0x17/0x20 [ 72.075664][ T2372] __x64_sys_bpf+0x7c/0x90 [ 72.080094][ T2372] x64_sys_call+0x4b9/0x9a0 [ 72.084633][ T2372] do_syscall_64+0x4c/0xa0 [ 72.089070][ T2372] ? clear_bhb_loop+0x50/0xa0 [ 72.093758][ T2372] ? clear_bhb_loop+0x50/0xa0 [ 72.098445][ T2372] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.104353][ T2372] RIP: 0033:0x7f062b255159 [ 72.108808][ T2372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.128425][ T2372] RSP: 002b:00007f0629cae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 72.136853][ T2372] RAX: ffffffffffffffda RBX: 00007f062b4dcfa0 RCX: 00007f062b255159 [ 72.144845][ T2372] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 72.152827][ T2372] RBP: 00007f0629cae090 R08: 0000000000000000 R09: 0000000000000000 [ 72.160809][ T2372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.168791][ T2372] R13: 00007f062b4dd038 R14: 00007f062b4dcfa0 R15: 00007ffc28b01088 [ 72.176790][ T2372] [ 72.246223][ T2398] loop2: detected capacity change from 0 to 512 [ 72.399857][ T2398] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 72.410908][ T2398] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 72.418969][ T2398] System zones: 0-1, 15-15, 18-18, 34-34 [ 72.425458][ T2398] EXT4-fs (loop2): orphan cleanup on readonly fs [ 72.432057][ T2398] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 72.441602][ T2398] EXT4-fs warning (device loop2): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 72.458529][ T2398] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 72.504007][ T2429] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 72.522853][ T2398] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.909: bad orphan inode 16 [ 72.534341][ T2398] ext4_test_bit(bit=15, block=18) = 1 [ 72.539889][ T2398] is_bad_inode(inode)=0 [ 72.544814][ T2398] NEXT_ORPHAN(inode)=0 [ 72.549069][ T2398] max_ino=32 [ 72.552471][ T2398] i_nlink=2 [ 72.556040][ T2398] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 73.892945][ T2458] loop4: detected capacity change from 0 to 512 [ 73.976631][ T2458] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 74.030551][ T2458] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 74.080047][ T2458] System zones: 0-1, 15-15, 18-18, 34-34 [ 74.122541][ T2458] EXT4-fs (loop4): orphan cleanup on readonly fs [ 74.159447][ T2458] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 74.191830][ T2458] EXT4-fs warning (device loop4): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 74.218821][ T2458] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 74.237144][ T2458] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.935: bad orphan inode 16 [ 74.298863][ T2458] ext4_test_bit(bit=15, block=18) = 1 [ 74.319544][ T2458] is_bad_inode(inode)=0 [ 74.339957][ T2458] NEXT_ORPHAN(inode)=0 [ 74.344099][ T2458] max_ino=32 [ 74.347737][ T2458] i_nlink=2 [ 74.360528][ T2504] device syzkaller0 entered promiscuous mode [ 74.380012][ T2458] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 75.157313][ T2535] device syzkaller0 entered promiscuous mode [ 75.627775][ T2576] device syzkaller0 entered promiscuous mode [ 75.678675][ T2593] loop3: detected capacity change from 0 to 512 [ 75.752900][ T2593] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 75.760948][ T2593] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 75.770741][ T2593] System zones: 0-1, 15-15, 18-18, 34-34 [ 75.781765][ T2593] EXT4-fs (loop3): orphan cleanup on readonly fs [ 75.801355][ T2593] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 75.811287][ T2593] EXT4-fs warning (device loop3): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 75.826292][ T2593] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 75.833203][ T2593] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.997: bad orphan inode 16 [ 75.848809][ T2593] ext4_test_bit(bit=15, block=18) = 1 [ 75.857907][ T2593] is_bad_inode(inode)=0 [ 75.862192][ T2593] NEXT_ORPHAN(inode)=0 [ 75.866516][ T2593] max_ino=32 [ 75.869743][ T2593] i_nlink=2 [ 75.872993][ T2593] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 75.997802][ T30] audit: type=1400 audit(1790501964.716:262): avc: denied { read } for pid=2629 comm="syz.2.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.219382][ T2648] device syzkaller0 entered promiscuous mode [ 77.300028][ T26] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 77.413897][ T2686] loop1: detected capacity change from 0 to 512 [ 77.574559][ T2686] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 77.580102][ T26] usb 3-1: device descriptor read/64, error -71 [ 77.586185][ T2686] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 77.604089][ T2686] System zones: 0-1, 15-15, 18-18, 34-34 [ 77.610587][ T2686] EXT4-fs (loop1): orphan cleanup on readonly fs [ 77.623584][ T2686] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 77.633211][ T2686] EXT4-fs warning (device loop1): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 77.648603][ T2686] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 77.661925][ T2686] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.1035: bad orphan inode 16 [ 77.682299][ T2686] ext4_test_bit(bit=15, block=18) = 1 [ 77.687912][ T2686] is_bad_inode(inode)=0 [ 77.692350][ T2686] NEXT_ORPHAN(inode)=0 [ 77.696453][ T2686] max_ino=32 [ 77.699695][ T2686] i_nlink=2 [ 77.703366][ T2686] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 77.815258][ T2706] device syzkaller0 entered promiscuous mode [ 78.630054][ T26] usb 3-1: device descriptor read/64, error -71 [ 78.919986][ T26] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 79.102203][ T2739] device syzkaller0 entered promiscuous mode [ 79.115916][ T2747] loop2: detected capacity change from 0 to 1024 [ 79.264333][ T30] audit: type=1400 audit(1790501967.986:263): avc: denied { mounton } for pid=2746 comm="syz.2.1061" path="/dev/snd/timer" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 79.297915][ T2749] netlink: 3604 bytes leftover after parsing attributes in process `syz.2.1061'. [ 80.107071][ T2747] EXT4-fs (loop2): Unrecognized mount option "debug_want_e" or missing value [ 80.405294][ T2774] FAULT_INJECTION: forcing a failure. [ 80.405294][ T2774] name failslab, interval 1, probability 0, space 0, times 0 [ 80.460752][ T2774] CPU: 0 PID: 2774 Comm: syz.1.1068 Not tainted syzkaller #0 [ 80.468193][ T2774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.478280][ T2774] Call Trace: [ 80.481591][ T2774] [ 80.484548][ T2774] __dump_stack+0x21/0x30 [ 80.488912][ T2774] dump_stack_lvl+0x110/0x170 [ 80.493618][ T2774] ? show_regs_print_info+0x20/0x20 [ 80.498867][ T2774] ? __kernel_text_address+0xa0/0x100 [ 80.504265][ T2774] ? unwind_get_return_address+0x4d/0x90 [ 80.509915][ T2774] dump_stack+0x15/0x20 [ 80.514117][ T2774] should_fail+0x3ab/0x500 [ 80.518547][ T2774] __should_failslab+0xa4/0xe0 [ 80.523326][ T2774] should_failslab+0x9/0x20 [ 80.527842][ T2774] slab_pre_alloc_hook+0x39/0xd0 [ 80.532793][ T2774] kmem_cache_alloc_trace+0x48/0x270 [ 80.538092][ T2774] ? __get_vm_area_node+0x11d/0x350 [ 80.543309][ T2774] __get_vm_area_node+0x11d/0x350 [ 80.548348][ T2774] __vmalloc_node_range+0xe8/0xad0 [ 80.553476][ T2774] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 80.559036][ T2774] ? selinux_capset+0xf0/0xf0 [ 80.563726][ T2774] ? _kstrtoull+0x3bb/0x4c0 [ 80.568247][ T2774] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 80.573814][ T2774] __vmalloc+0x79/0x90 [ 80.577898][ T2774] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 80.583465][ T2774] bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 80.588854][ T2774] ? bpf_prog_alloc+0x15/0x1e0 [ 80.593629][ T2774] bpf_prog_alloc+0x1f/0x1e0 [ 80.598236][ T2774] bpf_prog_load+0x80e/0x1620 [ 80.602929][ T2774] ? map_freeze+0x370/0x370 [ 80.607450][ T2774] ? selinux_bpf+0xc7/0xf0 [ 80.611875][ T2774] ? security_bpf+0x82/0xa0 [ 80.616392][ T2774] __sys_bpf+0x51d/0x7d0 [ 80.620643][ T2774] ? bpf_link_show_fdinfo+0x330/0x330 [ 80.626033][ T2774] ? debug_smp_processor_id+0x17/0x20 [ 80.631419][ T2774] __x64_sys_bpf+0x7c/0x90 [ 80.635849][ T2774] x64_sys_call+0x4b9/0x9a0 [ 80.640364][ T2774] do_syscall_64+0x4c/0xa0 [ 80.644791][ T2774] ? clear_bhb_loop+0x50/0xa0 [ 80.649481][ T2774] ? clear_bhb_loop+0x50/0xa0 [ 80.654174][ T2774] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.660082][ T2774] RIP: 0033:0x7f062b255159 [ 80.664515][ T2774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.684136][ T2774] RSP: 002b:00007f0629cae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 80.692560][ T2774] RAX: ffffffffffffffda RBX: 00007f062b4dcfa0 RCX: 00007f062b255159 [ 80.700546][ T2774] RDX: 0000000000000094 RSI: 0000200000002500 RDI: 0000000000000005 [ 80.708540][ T2774] RBP: 00007f0629cae090 R08: 0000000000000000 R09: 0000000000000000 [ 80.716530][ T2774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.724544][ T2774] R13: 00007f062b4dd038 R14: 00007f062b4dcfa0 R15: 00007ffc28b01088 [ 80.732542][ T2774] [ 80.738965][ T2774] warn_alloc: 1 callbacks suppressed [ 80.738977][ T2774] syz.1.1068: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 80.788494][ T2774] CPU: 1 PID: 2774 Comm: syz.1.1068 Not tainted syzkaller #0 [ 80.795927][ T2774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.806007][ T2774] Call Trace: [ 80.809310][ T2774] [ 80.812260][ T2774] __dump_stack+0x21/0x30 [ 80.816628][ T2774] dump_stack_lvl+0x110/0x170 [ 80.821346][ T2774] ? show_regs_print_info+0x20/0x20 [ 80.826583][ T2774] dump_stack+0x15/0x20 [ 80.830765][ T2774] warn_alloc+0x1dc/0x200 [ 80.835121][ T2774] ? __should_failslab+0xa4/0xe0 [ 80.840091][ T2774] ? zone_watermark_ok_safe+0x270/0x270 [ 80.845670][ T2774] ? kmem_cache_alloc_trace+0x119/0x270 [ 80.851283][ T2774] __vmalloc_node_range+0x15e/0xad0 [ 80.856500][ T2774] ? selinux_capset+0xf0/0xf0 [ 80.861201][ T2774] ? _kstrtoull+0x3bb/0x4c0 [ 80.865722][ T2774] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 80.871287][ T2774] __vmalloc+0x79/0x90 [ 80.875372][ T2774] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 80.880935][ T2774] bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 80.886317][ T2774] ? bpf_prog_alloc+0x15/0x1e0 [ 80.891094][ T2774] bpf_prog_alloc+0x1f/0x1e0 [ 80.895696][ T2774] bpf_prog_load+0x80e/0x1620 [ 80.900850][ T2774] ? map_freeze+0x370/0x370 [ 80.905388][ T2774] ? selinux_bpf+0xc7/0xf0 [ 80.909829][ T2774] ? security_bpf+0x82/0xa0 [ 80.914357][ T2774] __sys_bpf+0x51d/0x7d0 [ 80.918663][ T2774] ? bpf_link_show_fdinfo+0x330/0x330 [ 80.924060][ T2774] ? debug_smp_processor_id+0x17/0x20 [ 80.929474][ T2774] __x64_sys_bpf+0x7c/0x90 [ 80.933939][ T2774] x64_sys_call+0x4b9/0x9a0 [ 80.938464][ T2774] do_syscall_64+0x4c/0xa0 [ 80.942904][ T2774] ? clear_bhb_loop+0x50/0xa0 [ 80.947606][ T2774] ? clear_bhb_loop+0x50/0xa0 [ 80.952302][ T2774] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.958234][ T2774] RIP: 0033:0x7f062b255159 [ 80.962666][ T2774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.982286][ T2774] RSP: 002b:00007f0629cae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 80.990721][ T2774] RAX: ffffffffffffffda RBX: 00007f062b4dcfa0 RCX: 00007f062b255159 [ 80.998704][ T2774] RDX: 0000000000000094 RSI: 0000200000002500 RDI: 0000000000000005 [ 81.006689][ T2774] RBP: 00007f0629cae090 R08: 0000000000000000 R09: 0000000000000000 [ 81.014674][ T2774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.022684][ T2774] R13: 00007f062b4dd038 R14: 00007f062b4dcfa0 R15: 00007ffc28b01088 [ 81.030681][ T2774] [ 81.037942][ T2774] Mem-Info: [ 81.043123][ T2774] active_anon:2649 inactive_anon:26147 isolated_anon:0 [ 81.043123][ T2774] active_file:13154 inactive_file:7533 isolated_file:0 [ 81.043123][ T2774] unevictable:0 dirty:179 writeback:0 [ 81.043123][ T2774] slab_reclaimable:7877 slab_unreclaimable:75174 [ 81.043123][ T2774] mapped:29641 shmem:20437 pagetables:970 bounce:0 [ 81.043123][ T2774] kernel_misc_reclaimable:0 [ 81.043123][ T2774] free:1520151 free_pcp:19111 free_cma:0 [ 81.090892][ T2774] Node 0 active_anon:5996kB inactive_anon:104588kB active_file:52616kB inactive_file:30132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118564kB dirty:716kB writeback:0kB shmem:77148kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4848kB pagetables:3980kB all_unreclaimable? no [ 81.163904][ T2774] DMA32 free:2978772kB min:62612kB low:78264kB high:93916kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2982744kB mlocked:0kB bounce:0kB free_pcp:3972kB local_pcp:3916kB free_cma:0kB [ 81.199201][ T2774] lowmem_reserve[]: 0 3941 3941 [ 81.208023][ T2794] device syzkaller0 entered promiscuous mode [ 81.208282][ T2774] Normal free:3115600kB min:84840kB low:106048kB high:127256kB reserved_highatomic:0KB active_anon:296kB inactive_anon:99788kB active_file:52616kB inactive_file:30132kB unevictable:0kB writepending:716kB present:5242880kB managed:4036096kB mlocked:0kB bounce:0kB free_pcp:68376kB local_pcp:23000kB free_cma:0kB [ 81.246139][ T2774] lowmem_reserve[]: 0 0 0 [ 81.265247][ T2774] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 724*4096kB (M) = 2978772kB [ 81.284375][ T2774] Normal: 961*4kB (UME) 1006*8kB (UME) 164*16kB (UME) 42*32kB (UME) 68*64kB (M) 27*128kB (UM) 14*256kB (UM) 13*512kB (M) 7*1024kB (UM) 1*2048kB (M) 750*4096kB (UM) = 3115124kB [ 81.304902][ T2774] 37324 total pagecache pages [ 81.309621][ T2774] 0 pages in swap cache [ 81.314552][ T2774] Swap cache stats: add 30, delete 30, find 10/10 [ 81.321243][ T2774] Free swap = 124728kB [ 81.325502][ T2774] Total swap = 124996kB [ 81.337820][ T2774] 2097051 pages RAM [ 81.341967][ T2804] loop3: detected capacity change from 0 to 512 [ 81.348391][ T2774] 0 pages HighMem/MovableOnly [ 81.353324][ T2774] 342341 pages reserved [ 81.357497][ T2774] 0 pages cma reserved [ 81.471549][ T2804] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 81.487635][ T2804] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 81.496103][ T2804] System zones: 0-1, 15-15, 18-18, 34-34 [ 81.527115][ T2804] EXT4-fs (loop3): orphan cleanup on readonly fs [ 81.588638][ T2804] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 81.744760][ T2804] EXT4-fs warning (device loop3): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 81.807523][ T2804] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 81.821309][ T2804] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.1081: bad orphan inode 16 [ 81.858546][ T2804] ext4_test_bit(bit=15, block=18) = 1 [ 81.871987][ T2804] is_bad_inode(inode)=0 [ 81.877952][ T2835] device syzkaller0 entered promiscuous mode [ 81.884300][ T2804] NEXT_ORPHAN(inode)=0 [ 81.888453][ T2804] max_ino=32 [ 81.895857][ T2804] i_nlink=2 [ 81.901172][ T30] audit: type=1400 audit(1790501970.626:264): avc: denied { bind } for pid=2832 comm="syz.2.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.925736][ T2804] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 83.517705][ T2863] device syzkaller0 entered promiscuous mode [ 83.566241][ T30] audit: type=1400 audit(1790501972.286:265): avc: denied { create } for pid=2880 comm="syz.0.1110" dev="anon_inodefs" ino=23252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 83.600814][ T2881] syz.0.1110 (2881): /proc/2880/oom_adj is deprecated, please use /proc/2880/oom_score_adj instead. [ 83.690187][ T2857] loop1: detected capacity change from 0 to 40427 [ 83.698920][ T2888] FAULT_INJECTION: forcing a failure. [ 83.698920][ T2888] name failslab, interval 1, probability 0, space 0, times 0 [ 83.730144][ T2888] CPU: 1 PID: 2888 Comm: syz.2.1113 Not tainted syzkaller #0 [ 83.732034][ T2857] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 83.737581][ T2888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.737598][ T2888] Call Trace: [ 83.737604][ T2888] [ 83.759678][ T2857] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 83.761172][ T2888] __dump_stack+0x21/0x30 [ 83.761202][ T2888] dump_stack_lvl+0x110/0x170 [ 83.778402][ T2888] ? show_regs_print_info+0x20/0x20 [ 83.783644][ T2888] ? stack_trace_save+0xa6/0xf0 [ 83.788546][ T2888] ? __stack_depot_save+0x34/0x480 [ 83.793699][ T2888] dump_stack+0x15/0x20 [ 83.797896][ T2888] should_fail+0x3ab/0x500 [ 83.799214][ T2857] F2FS-fs (loop1): Unrecognized mount option "ôõÃrÒƒçˆàu™ïÃòáBOO›Ž¥ý-—·Ñâx¸±7¯IeÇZ6€•(šÙjFð7ÀåÚÍœ¯cˆõDÞ*®åXÎåwìµ;á\‰ƒÖóŪ;¤�äÕ¥¬Òb^!¯‡ž¦Í�°;•%û8Š3²N™pL’„ã]ºk¶J0xffffffffffffffffÿÿÿÿÿÿÿÿ" or missing value [ 83.802351][ T2888] __should_failslab+0xa4/0xe0 [ 83.802382][ T2888] should_failslab+0x9/0x20 [ 83.802405][ T2888] slab_pre_alloc_hook+0x39/0xd0 [ 83.838706][ T2888] ? alloc_vmap_area+0x186/0x1a70 [ 83.840113][ T468] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 83.843775][ T2888] kmem_cache_alloc+0x44/0x260 [ 83.856073][ T2888] alloc_vmap_area+0x186/0x1a70 [ 83.860980][ T2888] ? vm_map_ram+0xa70/0xa70 [ 83.865521][ T2888] ? kmem_cache_alloc_trace+0x119/0x270 [ 83.871110][ T2888] ? __get_vm_area_node+0x11d/0x350 [ 83.876351][ T2888] __get_vm_area_node+0x14e/0x350 [ 83.881417][ T2888] __vmalloc_node_range+0xe8/0xad0 [ 83.886564][ T2888] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 83.892147][ T2888] ? selinux_capset+0xf0/0xf0 [ 83.896865][ T2888] ? _kstrtoull+0x3bb/0x4c0 [ 83.901410][ T2888] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 83.906995][ T2888] __vmalloc+0x79/0x90 [ 83.911102][ T2888] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 83.916724][ T2888] bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 83.922149][ T2888] ? bpf_prog_alloc+0x15/0x1e0 [ 83.926953][ T2888] bpf_prog_alloc+0x1f/0x1e0 [ 83.931570][ T2888] bpf_prog_load+0x80e/0x1620 [ 83.936314][ T2888] ? map_freeze+0x370/0x370 [ 83.940851][ T2888] ? selinux_bpf+0xc7/0xf0 [ 83.945288][ T2888] ? security_bpf+0x82/0xa0 [ 83.949819][ T2888] __sys_bpf+0x51d/0x7d0 [ 83.954084][ T2888] ? bpf_link_show_fdinfo+0x330/0x330 [ 83.959482][ T2888] ? debug_smp_processor_id+0x17/0x20 [ 83.964876][ T2888] __x64_sys_bpf+0x7c/0x90 [ 83.969311][ T2888] x64_sys_call+0x4b9/0x9a0 [ 83.973844][ T2888] do_syscall_64+0x4c/0xa0 [ 83.978283][ T2888] ? clear_bhb_loop+0x50/0xa0 [ 83.982993][ T2888] ? clear_bhb_loop+0x50/0xa0 [ 83.987691][ T2888] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.993605][ T2888] RIP: 0033:0x7f6ce19b2159 [ 83.998064][ T2888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.017694][ T2888] RSP: 002b:00007f6ce040b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.026136][ T2888] RAX: ffffffffffffffda RBX: 00007f6ce1c39fa0 RCX: 00007f6ce19b2159 [ 84.034134][ T2888] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 84.042127][ T2888] RBP: 00007f6ce040b090 R08: 0000000000000000 R09: 0000000000000000 [ 84.050156][ T2888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.058155][ T2888] R13: 00007f6ce1c3a038 R14: 00007f6ce1c39fa0 R15: 00007ffd4ec69958 [ 84.066161][ T2888] [ 85.329060][ T2857] overlayfs: unrecognized mount option "uuid=null" or missing value [ 85.377941][ T2857] loop1: detected capacity change from 0 to 1024 [ 85.384758][ T30] audit: type=1400 audit(1790501974.076:266): avc: denied { read write } for pid=2856 comm="syz.1.1101" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 85.409545][ T30] audit: type=1400 audit(1790501974.076:267): avc: denied { open } for pid=2856 comm="syz.1.1101" path="/dev/uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 85.439140][ T30] audit: type=1400 audit(1790501974.086:268): avc: denied { create } for pid=2856 comm="syz.1.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 85.468282][ T2857] EXT4-fs (loop1): Ignoring removed bh option [ 85.483452][ T2857] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.520026][ T468] usb 5-1: not running at top speed; connect to a high speed hub [ 85.559476][ T2857] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,min_batch_time=0x0000000000000008,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue. Quota mode: none. [ 85.622643][ T2907] FAULT_INJECTION: forcing a failure. [ 85.622643][ T2907] name failslab, interval 1, probability 0, space 0, times 0 [ 85.635446][ T2907] CPU: 1 PID: 2907 Comm: syz.2.1119 Not tainted syzkaller #0 [ 85.640296][ T468] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.642847][ T2907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.642861][ T2907] Call Trace: [ 85.642867][ T2907] [ 85.642874][ T2907] __dump_stack+0x21/0x30 [ 85.673597][ T2907] dump_stack_lvl+0x110/0x170 [ 85.678487][ T2907] ? show_regs_print_info+0x20/0x20 [ 85.683873][ T2907] dump_stack+0x15/0x20 [ 85.688185][ T2907] should_fail+0x3ab/0x500 [ 85.692651][ T2907] __should_failslab+0xa4/0xe0 [ 85.697466][ T2907] should_failslab+0x9/0x20 [ 85.702005][ T2907] slab_pre_alloc_hook+0x39/0xd0 [ 85.706986][ T2907] __kmalloc+0x6d/0x2c0 [ 85.711181][ T2907] ? selinux_file_permission+0x2aa/0x510 [ 85.716853][ T2907] ? kernfs_fop_write_iter+0x152/0x400 [ 85.722358][ T2907] kernfs_fop_write_iter+0x152/0x400 [ 85.727690][ T2907] vfs_write+0x831/0xfd0 [ 85.731976][ T2907] ? file_end_write+0x1b0/0x1b0 [ 85.736870][ T2907] ? wait_for_completion_killable_timeout+0x10/0x10 [ 85.743507][ T2907] ? __fget_files+0x2e1/0x340 [ 85.748227][ T2907] ? __fdget_pos+0x2d2/0x380 [ 85.752852][ T2907] ? ksys_write+0x70/0x260 [ 85.757303][ T2907] ksys_write+0x14a/0x260 [ 85.761671][ T2907] ? __ia32_sys_read+0x90/0x90 [ 85.766463][ T2907] ? debug_smp_processor_id+0x17/0x20 [ 85.771904][ T2907] __x64_sys_write+0x7b/0x90 [ 85.776522][ T2907] x64_sys_call+0x8ef/0x9a0 [ 85.781045][ T2907] do_syscall_64+0x4c/0xa0 [ 85.785477][ T2907] ? clear_bhb_loop+0x50/0xa0 [ 85.790172][ T2907] ? clear_bhb_loop+0x50/0xa0 [ 85.794871][ T2907] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.800786][ T2907] RIP: 0033:0x7f6ce19b2159 [ 85.805225][ T2907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.824847][ T2907] RSP: 002b:00007f6ce040b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.833281][ T2907] RAX: ffffffffffffffda RBX: 00007f6ce1c39fa0 RCX: 00007f6ce19b2159 [ 85.841298][ T2907] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000007 [ 85.849297][ T2907] RBP: 00007f6ce040b090 R08: 0000000000000000 R09: 0000000000000000 [ 85.857319][ T2907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.865307][ T2907] R13: 00007f6ce1c3a038 R14: 00007f6ce1c39fa0 R15: 00007ffd4ec69958 [ 85.873304][ T2907] [ 85.882955][ T6] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 85.919486][ T2915] device syzkaller0 entered promiscuous mode [ 85.940022][ T468] usb 5-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 85.955286][ T468] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 85.970503][ T468] usb 5-1: Product: syz [ 85.974858][ T468] usb 5-1: Manufacturer: syz [ 86.020808][ T468] usb 5-1: Found UVC 1.00 device syz (225a:e1d4) [ 86.028375][ T468] usb 5-1: No streaming interface found for terminal 2. [ 86.139958][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 86.221035][ T313] usb 5-1: USB disconnect, device number 4 [ 86.260060][ T6] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 86.268351][ T6] usb 1-1: config 0 has no interface number 0 [ 86.282945][ T2923] kvm: pic: non byte write [ 86.344949][ T2935] syz.3.1130 (2935) used greatest stack depth: 21896 bytes left [ 86.397840][ T30] audit: type=1400 audit(1790501975.116:269): avc: denied { ioctl } for pid=2957 comm="syz.2.1140" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 86.470044][ T6] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 86.482364][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.498813][ T6] usb 1-1: Product: syz [ 86.503371][ T6] usb 1-1: Manufacturer: syz [ 86.508061][ T6] usb 1-1: SerialNumber: syz [ 86.513968][ T6] usb 1-1: config 0 descriptor?? [ 86.560542][ T6] smsc95xx v2.0.0 [ 86.604311][ T2976] FAULT_INJECTION: forcing a failure. [ 86.604311][ T2976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.617801][ T2976] CPU: 0 PID: 2976 Comm: syz.1.1148 Not tainted syzkaller #0 [ 86.625228][ T2976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.635319][ T2976] Call Trace: [ 86.638629][ T2976] [ 86.641600][ T2976] __dump_stack+0x21/0x30 [ 86.645975][ T2976] dump_stack_lvl+0x110/0x170 [ 86.650692][ T2976] ? show_regs_print_info+0x20/0x20 [ 86.653715][ T30] audit: type=1400 audit(1790501975.366:270): avc: denied { mount } for pid=2977 comm="syz.2.1149" name="/" dev="configfs" ino=14491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 86.655931][ T2976] ? vfs_write+0xc72/0xfd0 [ 86.679396][ T30] audit: type=1400 audit(1790501975.376:271): avc: denied { mount } for pid=2977 comm="syz.2.1149" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 86.683239][ T2976] dump_stack+0x15/0x20 [ 86.683269][ T2976] should_fail+0x3ab/0x500 [ 86.683294][ T2976] should_fail_usercopy+0x1a/0x20 [ 86.718764][ T2976] _copy_from_user+0x20/0xd0 [ 86.723376][ T2976] __sys_bpf+0x258/0x7d0 [ 86.727639][ T2976] ? bpf_link_show_fdinfo+0x330/0x330 [ 86.733034][ T2976] ? debug_smp_processor_id+0x17/0x20 [ 86.738420][ T2976] __x64_sys_bpf+0x7c/0x90 [ 86.742852][ T2976] x64_sys_call+0x4b9/0x9a0 [ 86.747416][ T2976] do_syscall_64+0x4c/0xa0 [ 86.751843][ T2976] ? clear_bhb_loop+0x50/0xa0 [ 86.756542][ T2976] ? clear_bhb_loop+0x50/0xa0 [ 86.761269][ T2976] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.767211][ T2976] RIP: 0033:0x7f062b255159 [ 86.771635][ T2976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.791351][ T2976] RSP: 002b:00007f0629cae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.799769][ T2976] RAX: ffffffffffffffda RBX: 00007f062b4dcfa0 RCX: 00007f062b255159 [ 86.807749][ T2976] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 86.816135][ T2976] RBP: 00007f0629cae090 R08: 0000000000000000 R09: 0000000000000000 [ 86.824145][ T2976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.832141][ T2976] R13: 00007f062b4dd038 R14: 00007f062b4dcfa0 R15: 00007ffc28b01088 [ 86.840124][ T2976] [ 86.850393][ T30] audit: type=1400 audit(1790501975.566:272): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 86.908782][ T2990] loop2: detected capacity change from 0 to 512 [ 86.920126][ T6] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 86.930943][ T6] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 87.089182][ T3010] FAULT_INJECTION: forcing a failure. [ 87.089182][ T3010] name failslab, interval 1, probability 0, space 0, times 0 [ 87.102280][ T3010] CPU: 0 PID: 3010 Comm: syz.2.1164 Not tainted syzkaller #0 [ 87.109687][ T3010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.119776][ T3010] Call Trace: [ 87.123079][ T3010] [ 87.126024][ T3010] __dump_stack+0x21/0x30 [ 87.130375][ T3010] dump_stack_lvl+0x110/0x170 [ 87.135097][ T3010] ? show_regs_print_info+0x20/0x20 [ 87.140338][ T3010] dump_stack+0x15/0x20 [ 87.144530][ T3010] should_fail+0x3ab/0x500 [ 87.148966][ T3010] __should_failslab+0xa4/0xe0 [ 87.153748][ T3010] should_failslab+0x9/0x20 [ 87.158414][ T3010] slab_pre_alloc_hook+0x39/0xd0 [ 87.163396][ T3010] __kmalloc+0x6d/0x2c0 [ 87.167588][ T3010] ? sk_prot_alloc+0xed/0x320 [ 87.172298][ T3010] sk_prot_alloc+0xed/0x320 [ 87.176836][ T3010] sk_alloc+0x38/0x430 [ 87.180938][ T3010] bpf_prog_test_run_skb+0x24b/0x1180 [ 87.186365][ T3010] ? __fget_files+0x2e1/0x340 [ 87.191093][ T3010] ? __kasan_check_write+0x14/0x20 [ 87.196235][ T3010] ? fput_many+0x15a/0x1a0 [ 87.200680][ T3010] ? __bpf_prog_test_run_raw_tp+0x2c0/0x2c0 [ 87.206596][ T3010] bpf_prog_test_run+0x3a5/0x5b0 [ 87.211560][ T3010] ? bpf_prog_query+0x230/0x230 [ 87.216445][ T3010] ? selinux_bpf+0xce/0xf0 [ 87.220897][ T3010] ? security_bpf+0x82/0xa0 [ 87.225423][ T3010] __sys_bpf+0x590/0x7d0 [ 87.229735][ T3010] ? bpf_link_show_fdinfo+0x330/0x330 [ 87.235155][ T3010] ? debug_smp_processor_id+0x17/0x20 [ 87.240558][ T3010] __x64_sys_bpf+0x7c/0x90 [ 87.245016][ T3010] x64_sys_call+0x4b9/0x9a0 [ 87.249544][ T3010] do_syscall_64+0x4c/0xa0 [ 87.253976][ T3010] ? clear_bhb_loop+0x50/0xa0 [ 87.258932][ T3010] ? clear_bhb_loop+0x50/0xa0 [ 87.263645][ T3010] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.269561][ T3010] RIP: 0033:0x7f6ce19b2159 [ 87.274012][ T3010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.293792][ T3010] RSP: 002b:00007f6ce040b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.302255][ T3010] RAX: ffffffffffffffda RBX: 00007f6ce1c39fa0 RCX: 00007f6ce19b2159 [ 87.310245][ T3010] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 87.318231][ T3010] RBP: 00007f6ce040b090 R08: 0000000000000000 R09: 0000000000000000 [ 87.326215][ T3010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.334202][ T3010] R13: 00007f6ce1c3a038 R14: 00007f6ce1c39fa0 R15: 00007ffd4ec69958 [ 87.342200][ T3010] [ 87.380019][ T6] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 87.392752][ T6] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 87.401812][ T6] usb 1-1: USB disconnect, device number 3 [ 87.461035][ T3018] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 88.024774][ T3029] FAULT_INJECTION: forcing a failure. [ 88.024774][ T3029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.055417][ T3029] CPU: 1 PID: 3029 Comm: syz.0.1170 Not tainted syzkaller #0 [ 88.062878][ T3029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.072963][ T3029] Call Trace: [ 88.076278][ T3029] [ 88.079238][ T3029] __dump_stack+0x21/0x30 [ 88.083610][ T3029] dump_stack_lvl+0x110/0x170 [ 88.088321][ T3029] ? show_regs_print_info+0x20/0x20 [ 88.093555][ T3029] dump_stack+0x15/0x20 [ 88.097750][ T3029] should_fail+0x3ab/0x500 [ 88.102207][ T3029] should_fail_usercopy+0x1a/0x20 [ 88.107305][ T3029] strncpy_from_user+0x24/0x2d0 [ 88.112195][ T3029] bpf_prog_load+0x1ee/0x1620 [ 88.116909][ T3029] ? __kasan_check_write+0x14/0x20 [ 88.122062][ T3029] ? proc_fail_nth_write+0x180/0x200 [ 88.127473][ T3029] ? map_freeze+0x370/0x370 [ 88.132017][ T3029] ? selinux_bpf+0xc7/0xf0 [ 88.136504][ T3029] ? security_bpf+0x82/0xa0 [ 88.141050][ T3029] __sys_bpf+0x51d/0x7d0 [ 88.145325][ T3029] ? bpf_link_show_fdinfo+0x330/0x330 [ 88.150738][ T3029] ? debug_smp_processor_id+0x17/0x20 [ 88.156156][ T3029] __x64_sys_bpf+0x7c/0x90 [ 88.160608][ T3029] x64_sys_call+0x4b9/0x9a0 [ 88.165143][ T3029] do_syscall_64+0x4c/0xa0 [ 88.169590][ T3029] ? clear_bhb_loop+0x50/0xa0 [ 88.174301][ T3029] ? clear_bhb_loop+0x50/0xa0 [ 88.179013][ T3029] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.184948][ T3029] RIP: 0033:0x7fc6d9e2c159 [ 88.189393][ T3029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.209039][ T3029] RSP: 002b:00007fc6d8885028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.217490][ T3029] RAX: ffffffffffffffda RBX: 00007fc6da0b3fa0 RCX: 00007fc6d9e2c159 [ 88.225517][ T3029] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 88.233527][ T3029] RBP: 00007fc6d8885090 R08: 0000000000000000 R09: 0000000000000000 [ 88.241529][ T3029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.249555][ T3029] R13: 00007fc6da0b4038 R14: 00007fc6da0b3fa0 R15: 00007ffdba8df878 [ 88.257571][ T3029] [ 88.450067][ T30] audit: type=1400 audit(1790501977.166:273): avc: denied { read } for pid=3036 comm="syz.2.1174" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 88.479090][ T30] audit: type=1400 audit(1790501977.166:274): avc: denied { open } for pid=3036 comm="syz.2.1174" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 88.599602][ T3047] loop1: detected capacity change from 0 to 512 [ 88.613128][ T3052] loop4: detected capacity change from 0 to 512 [ 88.623362][ T3044] loop2: detected capacity change from 0 to 512 [ 88.652042][ T3047] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 88.659695][ T3047] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 88.671383][ T3047] EXT4-fs (loop1): 1 truncate cleaned up [ 88.677852][ T3047] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 88.696703][ T3044] EXT4-fs (loop2): Ignoring removed nobh option [ 88.703872][ T30] audit: type=1400 audit(1790501977.426:275): avc: denied { mounton } for pid=3046 comm="syz.1.1178" path="/196/file0/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.730713][ T3052] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 88.747069][ T3047] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: none. [ 88.763872][ T3052] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 88.776114][ T3044] EXT4-fs (loop2): orphan cleanup on readonly fs [ 88.799570][ T3044] EXT4-fs warning (device loop2): ext4_xattr_inode_get:492: inode #11: comm syz.2.1174: ea_inode file size=1535 entry size=6 [ 88.823015][ T3052] System zones: 0-1, 15-15, 18-18, 34-34 [ 88.851629][ T3052] EXT4-fs (loop4): orphan cleanup on readonly fs [ 88.858075][ T3052] EXT4-fs warning (device loop4): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 88.873808][ T3044] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 88.887044][ T3052] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 88.898968][ T3044] EXT4-fs error (device loop2): ext4_do_update_inode:5260: inode #15: comm syz.2.1174: corrupted inode contents [ 88.915559][ T3052] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.1180: bad orphan inode 16 [ 88.929647][ T3044] EXT4-fs (loop2): Remounting filesystem read-only [ 88.940686][ T3052] ext4_test_bit(bit=15, block=18) = 1 [ 88.946120][ T3052] is_bad_inode(inode)=0 [ 88.950391][ T3044] EXT4-fs error (device loop2): ext4_dirty_inode:6108: inode #15: comm syz.2.1174: mark_inode_dirty error [ 88.964207][ T3052] NEXT_ORPHAN(inode)=0 [ 88.968339][ T3052] max_ino=32 [ 88.977091][ T3052] i_nlink=2 [ 88.980307][ T3052] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 88.993399][ T3044] EXT4-fs (loop2): Remounting filesystem read-only [ 89.005666][ T3044] EXT4-fs error (device loop2): ext4_do_update_inode:5260: inode #15: comm syz.2.1174: corrupted inode contents [ 89.029744][ T3044] EXT4-fs (loop2): Remounting filesystem read-only [ 89.039115][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 89.111951][ T3073] FAULT_INJECTION: forcing a failure. [ 89.111951][ T3073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.125130][ T3044] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2954: inode #15: comm syz.2.1174: mark_inode_dirty error [ 89.137448][ T3073] CPU: 1 PID: 3073 Comm: syz.0.1188 Not tainted syzkaller #0 [ 89.144863][ T3073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.154940][ T3073] Call Trace: [ 89.158243][ T3073] [ 89.161195][ T3073] __dump_stack+0x21/0x30 [ 89.165554][ T3073] dump_stack_lvl+0x110/0x170 [ 89.170263][ T3073] ? show_regs_print_info+0x20/0x20 [ 89.175486][ T3073] ? vfs_write+0xc72/0xfd0 [ 89.179930][ T3073] dump_stack+0x15/0x20 [ 89.184117][ T3073] should_fail+0x3ab/0x500 [ 89.188564][ T3073] should_fail_usercopy+0x1a/0x20 [ 89.193618][ T3073] _copy_from_user+0x20/0xd0 [ 89.198235][ T3073] __sys_bpf+0x258/0x7d0 [ 89.202511][ T3073] ? bpf_link_show_fdinfo+0x330/0x330 [ 89.207924][ T3073] ? debug_smp_processor_id+0x17/0x20 [ 89.213553][ T3073] __x64_sys_bpf+0x7c/0x90 [ 89.217999][ T3073] x64_sys_call+0x4b9/0x9a0 [ 89.222537][ T3073] do_syscall_64+0x4c/0xa0 [ 89.226984][ T3073] ? clear_bhb_loop+0x50/0xa0 [ 89.231697][ T3073] ? clear_bhb_loop+0x50/0xa0 [ 89.236406][ T3073] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.242325][ T3073] RIP: 0033:0x7fc6d9e2c159 [ 89.246771][ T3073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.266580][ T3073] RSP: 002b:00007fc6d8885028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 89.275886][ T3073] RAX: ffffffffffffffda RBX: 00007fc6da0b3fa0 RCX: 00007fc6d9e2c159 [ 89.283892][ T3073] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 000000000000000f [ 89.291892][ T3073] RBP: 00007fc6d8885090 R08: 0000000000000000 R09: 0000000000000000 [ 89.299901][ T3073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.307938][ T3073] R13: 00007fc6da0b4038 R14: 00007fc6da0b3fa0 R15: 00007ffdba8df878 [ 89.315956][ T3073] [ 89.492292][ T3044] EXT4-fs (loop2): Remounting filesystem read-only [ 89.506090][ T3080] FAULT_INJECTION: forcing a failure. [ 89.506090][ T3080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.519749][ T3044] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2957: inode #15: comm syz.2.1174: mark inode dirty (error -117) [ 89.544845][ T3080] CPU: 1 PID: 3080 Comm: syz.0.1189 Not tainted syzkaller #0 [ 89.552280][ T3080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.562356][ T3080] Call Trace: [ 89.565670][ T3080] [ 89.568622][ T3080] __dump_stack+0x21/0x30 [ 89.572989][ T3080] dump_stack_lvl+0x110/0x170 [ 89.577696][ T3080] ? show_regs_print_info+0x20/0x20 [ 89.582929][ T3080] dump_stack+0x15/0x20 [ 89.587114][ T3080] should_fail+0x3ab/0x500 [ 89.591590][ T3080] should_fail_usercopy+0x1a/0x20 [ 89.596644][ T3080] _copy_to_user+0x20/0x90 [ 89.601081][ T3080] simple_read_from_buffer+0xe9/0x160 [ 89.606482][ T3080] proc_fail_nth_read+0x1a6/0x220 [ 89.611542][ T3080] ? proc_fault_inject_write+0x310/0x310 [ 89.617229][ T3080] ? security_file_permission+0x83/0xa0 [ 89.622802][ T3080] ? proc_fault_inject_write+0x310/0x310 [ 89.628489][ T3080] vfs_read+0x28c/0xc20 [ 89.632675][ T3080] ? kernel_read+0x1f0/0x1f0 [ 89.637293][ T3080] ? __kasan_check_write+0x14/0x20 [ 89.642447][ T3080] ? mutex_lock+0x9b/0x1c0 [ 89.646894][ T3080] ? wait_for_completion_killable_timeout+0x10/0x10 [ 89.653522][ T3080] ? __fget_files+0x2e1/0x340 [ 89.658251][ T3080] ? __fdget_pos+0x2d2/0x380 [ 89.662874][ T3080] ? ksys_read+0x70/0x260 [ 89.667241][ T3080] ksys_read+0x14a/0x260 [ 89.672028][ T3080] ? vfs_write+0xfd0/0xfd0 [ 89.676486][ T3080] ? debug_smp_processor_id+0x17/0x20 [ 89.681893][ T3080] __x64_sys_read+0x7b/0x90 [ 89.686516][ T3080] x64_sys_call+0x96d/0x9a0 [ 89.691198][ T3080] do_syscall_64+0x4c/0xa0 [ 89.695789][ T3080] ? clear_bhb_loop+0x50/0xa0 [ 89.700506][ T3080] ? clear_bhb_loop+0x50/0xa0 [ 89.705216][ T3080] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.711135][ T3080] RIP: 0033:0x7fc6d9dec98e [ 89.715573][ T3080] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 89.735505][ T3080] RSP: 002b:00007fc6d8884fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 89.743958][ T3080] RAX: ffffffffffffffda RBX: 00007fc6d88856c0 RCX: 00007fc6d9dec98e [ 89.752392][ T3080] RDX: 000000000000000f RSI: 00007fc6d88850a0 RDI: 0000000000000006 [ 89.760409][ T3080] RBP: 00007fc6d8885090 R08: 0000000000000000 R09: 0000000000000000 [ 89.768408][ T3080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.776421][ T3080] R13: 00007fc6da0b4038 R14: 00007fc6da0b3fa0 R15: 00007ffdba8df878 [ 89.784581][ T3080] [ 89.827864][ T3062] loop3: detected capacity change from 0 to 40427 [ 89.834884][ T3044] EXT4-fs (loop2): Remounting filesystem read-only [ 89.857694][ T3062] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 89.864540][ T3044] EXT4-fs warning (device loop2): ext4_evict_inode:305: xattr delete (err -117) [ 89.879992][ T3062] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 89.890399][ T3044] EXT4-fs (loop2): 1 orphan inode deleted [ 89.898144][ T3044] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 89.944736][ T3062] F2FS-fs (loop3): Found nat_bits in checkpoint [ 89.980068][ T290] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 90.016322][ T3062] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 90.023698][ T3062] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 90.259975][ T290] usb 2-1: Using ep0 maxpacket: 16 [ 90.319487][ T3090] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 90.550319][ T290] usb 2-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 90.598547][ T290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.741012][ T290] usb 2-1: Product: syz [ 90.795398][ T290] usb 2-1: Manufacturer: syz [ 90.857487][ T290] usb 2-1: SerialNumber: syz [ 91.324048][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 91.324064][ T30] audit: type=1400 audit(1790501980.046:281): avc: denied { mounton } for pid=3101 comm="syz.4.1198" path="/214/file0" dev="tmpfs" ino=1132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 91.365306][ T3102] overlayfs: missing 'workdir' [ 91.430099][ T290] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 91.442047][ T3106] FAULT_INJECTION: forcing a failure. [ 91.442047][ T3106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.460022][ T290] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 91.469204][ T3106] CPU: 1 PID: 3106 Comm: syz.4.1199 Not tainted syzkaller #0 [ 91.476636][ T3106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.486727][ T3106] Call Trace: [ 91.490049][ T3106] [ 91.493006][ T3106] __dump_stack+0x21/0x30 [ 91.497371][ T3106] dump_stack_lvl+0x110/0x170 [ 91.502070][ T3106] ? show_regs_print_info+0x20/0x20 [ 91.507298][ T3106] dump_stack+0x15/0x20 [ 91.511620][ T3106] should_fail+0x3ab/0x500 [ 91.516241][ T3106] should_fail_usercopy+0x1a/0x20 [ 91.521291][ T3106] _copy_to_user+0x20/0x90 [ 91.525724][ T3106] bpf_prog_test_run_raw_tp+0x4f5/0x670 [ 91.531283][ T3106] ? bpf_prog_test_run_tracing+0x500/0x500 [ 91.537113][ T3106] ? fput_many+0x15a/0x1a0 [ 91.541553][ T3106] ? bpf_prog_test_run_tracing+0x500/0x500 [ 91.547380][ T3106] bpf_prog_test_run+0x3a5/0x5b0 [ 91.552338][ T3106] ? bpf_prog_query+0x230/0x230 [ 91.557224][ T3106] ? selinux_bpf+0xce/0xf0 [ 91.561656][ T3106] ? security_bpf+0x82/0xa0 [ 91.566178][ T3106] __sys_bpf+0x590/0x7d0 [ 91.570438][ T3106] ? bpf_link_show_fdinfo+0x330/0x330 [ 91.575827][ T3106] ? debug_smp_processor_id+0x17/0x20 [ 91.581221][ T3106] __x64_sys_bpf+0x7c/0x90 [ 91.585650][ T3106] x64_sys_call+0x4b9/0x9a0 [ 91.590162][ T3106] do_syscall_64+0x4c/0xa0 [ 91.594612][ T3106] ? clear_bhb_loop+0x50/0xa0 [ 91.599303][ T3106] ? clear_bhb_loop+0x50/0xa0 [ 91.604007][ T3106] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.609916][ T3106] RIP: 0033:0x7f53b8009159 [ 91.614348][ T3106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.633964][ T3106] RSP: 002b:00007f53b6a62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 91.642388][ T3106] RAX: ffffffffffffffda RBX: 00007f53b8290fa0 RCX: 00007f53b8009159 [ 91.650394][ T3106] RDX: 000000000000000c RSI: 0000200000000080 RDI: 000000000000000a [ 91.658374][ T3106] RBP: 00007f53b6a62090 R08: 0000000000000000 R09: 0000000000000000 [ 91.666354][ T3106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.674345][ T3106] R13: 00007f53b8291038 R14: 00007f53b8290fa0 R15: 00007fff4ae2de48 [ 91.682340][ T3106] [ 91.703351][ T290] usb 2-1: USB disconnect, device number 5 [ 91.982592][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 92.008883][ T3075] syz.1.1187 (3075) used greatest stack depth: 21352 bytes left [ 92.252050][ T3139] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 92.340586][ T3131] capability: warning: `syz.1.1211' uses deprecated v2 capabilities in a way that may be insecure [ 92.425295][ T30] audit: type=1400 audit(1790501981.146:282): avc: denied { create } for pid=3130 comm="syz.1.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 93.105098][ T3149] loop3: detected capacity change from 0 to 512 [ 93.201661][ T3149] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 93.223936][ T3149] EXT4-fs (loop3): invalid journal inode [ 93.250085][ T3149] EXT4-fs (loop3): can't get journal size [ 93.295517][ T3149] EXT4-fs (loop3): 1 truncate cleaned up [ 93.314093][ T313] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 93.325074][ T3149] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 93.359393][ T30] audit: type=1400 audit(1790501982.076:283): avc: denied { write } for pid=3148 comm="syz.3.1215" name="/" dev="incremental-fs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.424395][ T30] audit: type=1400 audit(1790501982.106:284): avc: denied { add_name } for pid=3148 comm="syz.3.1215" name="lower" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.455983][ T3166] loop1: detected capacity change from 0 to 512 [ 93.480119][ T30] audit: type=1400 audit(1790501982.106:285): avc: denied { associate } for pid=3148 comm="syz.3.1215" name="lower" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 93.522060][ T30] audit: type=1400 audit(1790501982.116:286): avc: denied { rmdir } for pid=285 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.570047][ T30] audit: type=1400 audit(1790501982.116:287): avc: denied { unlink } for pid=285 comm="syz-executor" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.602963][ T3166] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 93.620121][ T3166] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 93.630267][ T3166] System zones: 0-1, 15-15, 18-18, 34-34 [ 93.636567][ T3166] EXT4-fs (loop1): orphan cleanup on readonly fs [ 93.649980][ T30] audit: type=1400 audit(1790501982.116:288): avc: denied { unlink } for pid=285 comm="syz-executor" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 93.688820][ T3166] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 93.698480][ T3166] EXT4-fs warning (device loop1): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 93.713413][ T3166] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 93.730027][ T3166] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.1224: bad orphan inode 16 [ 93.749678][ T3189] FAULT_INJECTION: forcing a failure. [ 93.749678][ T3189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.763346][ T3166] ext4_test_bit(bit=15, block=18) = 1 [ 93.768756][ T3166] is_bad_inode(inode)=0 [ 93.770275][ T30] audit: type=1400 audit(1790501982.486:289): avc: denied { connect } for pid=3186 comm="syz.4.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 93.780166][ T3166] NEXT_ORPHAN(inode)=0 [ 93.793299][ T313] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 93.806942][ T3166] max_ino=32 [ 93.810399][ T3189] CPU: 0 PID: 3189 Comm: syz.2.1231 Not tainted syzkaller #0 [ 93.810935][ T3166] i_nlink=2 [ 93.818214][ T3189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.818226][ T3189] Call Trace: [ 93.818233][ T3189] [ 93.818241][ T3189] __dump_stack+0x21/0x30 [ 93.840198][ T3166] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 93.842027][ T3189] dump_stack_lvl+0x110/0x170 [ 93.842054][ T3189] ? show_regs_print_info+0x20/0x20 [ 93.862826][ T3170] loop3: detected capacity change from 0 to 40427 [ 93.863561][ T3189] dump_stack+0x15/0x20 [ 93.874194][ T3189] should_fail+0x3ab/0x500 [ 93.878665][ T3189] should_fail_usercopy+0x1a/0x20 [ 93.883735][ T3189] strncpy_from_user+0x24/0x2d0 [ 93.888621][ T3189] bpf_prog_load+0x1ee/0x1620 [ 93.893358][ T3189] ? __kasan_check_write+0x14/0x20 [ 93.898489][ T3189] ? proc_fail_nth_write+0x180/0x200 [ 93.903780][ T3189] ? map_freeze+0x370/0x370 [ 93.908287][ T3189] ? selinux_bpf+0xc7/0xf0 [ 93.912725][ T3189] ? security_bpf+0x82/0xa0 [ 93.917228][ T3189] __sys_bpf+0x51d/0x7d0 [ 93.921556][ T3189] ? bpf_link_show_fdinfo+0x330/0x330 [ 93.926945][ T3189] ? debug_smp_processor_id+0x17/0x20 [ 93.932334][ T3189] __x64_sys_bpf+0x7c/0x90 [ 93.936749][ T3189] x64_sys_call+0x4b9/0x9a0 [ 93.941248][ T3189] do_syscall_64+0x4c/0xa0 [ 93.945662][ T3189] ? clear_bhb_loop+0x50/0xa0 [ 93.950366][ T3189] ? clear_bhb_loop+0x50/0xa0 [ 93.955048][ T3189] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.960952][ T3189] RIP: 0033:0x7f6ce19b2159 [ 93.965559][ T3189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.985177][ T3189] RSP: 002b:00007f6ce040b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 93.993605][ T3189] RAX: ffffffffffffffda RBX: 00007f6ce1c39fa0 RCX: 00007f6ce19b2159 [ 94.001585][ T3189] RDX: 0000000000000027 RSI: 00002000000004c0 RDI: 0000000000000005 [ 94.009559][ T3189] RBP: 00007f6ce040b090 R08: 0000000000000000 R09: 0000000000000000 [ 94.017535][ T3189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.025530][ T3189] R13: 00007f6ce1c3a038 R14: 00007f6ce1c39fa0 R15: 00007ffd4ec69958 [ 94.033509][ T3189] [ 94.038739][ T313] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.051780][ T313] usb 1-1: config 0 interface 0 has no altsetting 0 [ 94.058465][ T313] usb 1-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 94.067625][ T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.076410][ T313] usb 1-1: config 0 descriptor?? [ 94.096338][ T3170] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 94.113233][ T3170] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 94.126257][ T3170] F2FS-fs (loop3): invalid crc value [ 94.160265][ T3170] F2FS-fs (loop3): Found nat_bits in checkpoint [ 94.176796][ T3200] ip_tables: iptables: counters copy to user failed while replacing table [ 95.013864][ T3170] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 95.024374][ T3186] ================================================================== [ 95.032489][ T3186] BUG: KASAN: use-after-free in pppol2tp_sock_to_session+0x1a0/0x1b0 [ 95.040740][ T3186] Read of size 4 at addr ffff888127f31400 by task syz.4.1232/3186 [ 95.048597][ T3186] [ 95.050942][ T3186] CPU: 1 PID: 3186 Comm: syz.4.1232 Not tainted syzkaller #0 [ 95.058357][ T3186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.068446][ T3186] Call Trace: [ 95.071764][ T3186] [ 95.074728][ T3186] __dump_stack+0x21/0x30 [ 95.079098][ T3186] dump_stack_lvl+0x110/0x170 [ 95.083811][ T3186] ? show_regs_print_info+0x20/0x20 [ 95.089050][ T3186] ? load_image+0x3f0/0x3f0 [ 95.093586][ T3186] ? irqentry_exit_cond_resched+0x29/0x30 [ 95.099340][ T3186] print_address_description+0x7f/0x2c0 [ 95.104917][ T3186] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 95.110666][ T3186] kasan_report+0x10f/0x150 [ 95.115208][ T3186] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 95.120957][ T3186] __asan_report_load4_noabort+0x14/0x20 [ 95.126618][ T3186] pppol2tp_sock_to_session+0x1a0/0x1b0 [ 95.132198][ T3186] pppol2tp_release+0x150/0x2b0 [ 95.137084][ T3186] sock_close+0xb8/0x200 [ 95.141362][ T3186] ? sock_mmap+0xa0/0xa0 [ 95.145641][ T3186] __fput+0x22b/0x900 [ 95.149664][ T3186] ____fput+0x15/0x20 [ 95.153692][ T3186] task_work_run+0x127/0x190 [ 95.158314][ T3186] exit_to_user_mode_loop+0xd0/0xe0 [ 95.163545][ T3186] exit_to_user_mode_prepare+0x87/0xd0 [ 95.169038][ T3186] syscall_exit_to_user_mode+0x1a/0x30 [ 95.174527][ T3186] do_syscall_64+0x58/0xa0 [ 95.178976][ T3186] ? clear_bhb_loop+0x50/0xa0 [ 95.183684][ T3186] ? clear_bhb_loop+0x50/0xa0 [ 95.188400][ T3186] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.194320][ T3186] RIP: 0033:0x7f53b8009159 [ 95.198764][ T3186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.218398][ T3186] RSP: 002b:00007fff4ae2dfa8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 95.226964][ T3186] RAX: 0000000000000000 RBX: 00007f53b8292da0 RCX: 00007f53b8009159 [ 95.234992][ T3186] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 95.243009][ T3186] RBP: 00007f53b8292da0 R08: 0000000000000006 R09: 0000000000000000 [ 95.251018][ T3186] R10: 00007f53b8292cb0 R11: 0000000000000246 R12: 0000000000017155 [ 95.259024][ T3186] R13: 00007f53b829109c R14: 0000000000016f6a R15: 00007f53b8291090 [ 95.267043][ T3186] [ 95.270096][ T3186] [ 95.272445][ T3186] Allocated by task 3187: [ 95.276800][ T3186] __kasan_kmalloc+0xd4/0x100 [ 95.281513][ T3186] __kmalloc+0x13d/0x2c0 [ 95.285794][ T3186] l2tp_session_create+0x39/0xb60 [ 95.290862][ T3186] pppol2tp_connect+0xbf5/0x1640 [ 95.295839][ T3186] __sys_connect+0x3cb/0x450 [ 95.300477][ T3186] __x64_sys_connect+0x7a/0x90 [ 95.305272][ T3186] x64_sys_call+0x7c/0x9a0 [ 95.309718][ T3186] do_syscall_64+0x4c/0xa0 [ 95.314166][ T3186] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.320097][ T3186] [ 95.322447][ T3186] Freed by task 8: [ 95.326197][ T3186] kasan_set_track+0x4a/0x70 [ 95.330819][ T3186] kasan_set_free_info+0x23/0x40 [ 95.335790][ T3186] ____kasan_slab_free+0x125/0x160 [ 95.340935][ T3186] __kasan_slab_free+0x11/0x20 [ 95.345728][ T3186] slab_free_freelist_hook+0xc2/0x190 [ 95.351133][ T3186] kfree+0xc4/0x270 [ 95.354983][ T3186] l2tp_session_put+0xaf/0x1a0 [ 95.359789][ T3186] l2tp_session_delete+0x3a9/0x4a0 [ 95.364937][ T3186] l2tp_tunnel_del_work+0x180/0x3d0 [ 95.370175][ T3186] process_one_work+0x6c8/0xbb0 [ 95.375063][ T3186] worker_thread+0xaa0/0x1250 [ 95.379783][ T3186] kthread+0x3f5/0x4f0 [ 95.383886][ T3186] ret_from_fork+0x1f/0x30 [ 95.388358][ T3186] [ 95.390712][ T3186] The buggy address belongs to the object at ffff888127f31400 [ 95.390712][ T3186] which belongs to the cache kmalloc-512 of size 512 [ 95.404796][ T3186] The buggy address is located 0 bytes inside of [ 95.404796][ T3186] 512-byte region [ffff888127f31400, ffff888127f31600) [ 95.417925][ T3186] The buggy address belongs to the page: [ 95.423597][ T3186] page:ffffea00049fcc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x127f30 [ 95.433876][ T3186] head:ffffea00049fcc00 order:2 compound_mapcount:0 compound_pincount:0 [ 95.442233][ T3186] flags: 0x4000000000010200(slab|head|zone=1) [ 95.448345][ T3186] raw: 4000000000010200 ffffea000403e900 0000000400000004 ffff888100042f00 [ 95.456958][ T3186] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 95.465566][ T3186] page dumped because: kasan: bad access detected [ 95.472008][ T3186] page_owner tracks the page as allocated [ 95.477748][ T3186] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 287, ts 31442019884, free_ts 0 [ 95.495930][ T3186] post_alloc_hook+0x192/0x1b0 [ 95.500740][ T3186] prep_new_page+0x1c/0x110 [ 95.505274][ T3186] get_page_from_freelist+0x2c3a/0x2cd0 [ 95.510856][ T3186] __alloc_pages+0x1a2/0x460 [ 95.515488][ T3186] new_slab+0xa0/0x4d0 [ 95.519581][ T3186] ___slab_alloc+0x3ac/0x840 [ 95.524199][ T3186] __slab_alloc+0x49/0x90 [ 95.528562][ T3186] __kmalloc_track_caller+0x169/0x2c0 [ 95.533964][ T3186] __alloc_skb+0x210/0x730 [ 95.538422][ T3186] netlink_ack+0x35c/0xb10 [ 95.542983][ T3186] netlink_rcv_skb+0x267/0x430 [ 95.547819][ T3186] rtnetlink_rcv+0x1c/0x20 [ 95.552269][ T3186] netlink_unicast+0x86c/0xa30 [ 95.557069][ T3186] netlink_sendmsg+0x879/0xb80 [ 95.561875][ T3186] __sys_sendto+0x46d/0x620 [ 95.566414][ T3186] __x64_sys_sendto+0xe5/0x100 [ 95.571325][ T3186] page_owner free stack trace missing [ 95.576717][ T3186] [ 95.579064][ T3186] Memory state around the buggy address: [ 95.584730][ T3186] ffff888127f31300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 95.592823][ T3186] ffff888127f31380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 95.601027][ T3186] >ffff888127f31400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.609102][ T3186] ^ [ 95.613191][ T3186] ffff888127f31480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.621276][ T3186] ffff888127f31500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.629442][ T3186] ================================================================== [ 95.637533][ T3186] Disabling lock debugging due to kernel taint [ 95.652137][ T3170] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 95.666478][ T3186] ------------[ cut here ]------------ [ 95.672221][ T3186] WARNING: CPU: 0 PID: 3186 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 95.682463][ T3186] Modules linked in: [ 95.686386][ T3186] CPU: 0 PID: 3186 Comm: syz.4.1232 Tainted: G B syzkaller #0 [ 95.695357][ T3186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.705594][ T3186] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 95.712019][ T3186] Code: 5d c3 e8 ac ff 0a fd be 02 00 00 00 eb 0a e8 a0 ff 0a fd be 01 00 00 00 4c 89 f7 e8 53 6e f1 fd e9 0f ff ff ff e8 89 ff 0a fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 78 ff 0a fd 4c 89 f7 be 03 [ 95.732048][ T3186] RSP: 0018:ffffc90000bb7d10 EFLAGS: 00010293 [ 95.738156][ T3186] RAX: ffffffff845ec817 RBX: ffff88811987a000 RCX: ffff88811ad2bb40 [ 95.749817][ T3186] RDX: 0000000000000000 RSI: 000000000b697640 RDI: 000000000c04eb7d [ 95.758033][ T3186] RBP: ffffc90000bb7d30 R08: 0000000000000003 R09: 0000000000000004 [ 95.766285][ T3186] R10: dffffc0000000000 R11: fffffbfff0e18e4c R12: dffffc0000000000 [ 95.779780][ T3186] R13: dffffc0000000000 R14: 000000000b697640 R15: ffff888127f31400 [ 95.787878][ T3186] FS: 000055558f200500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 95.797404][ T3186] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.804514][ T3186] CR2: 00007f6ce040aff8 CR3: 0000000117c35000 CR4: 00000000003506a0 [ 95.814148][ T3186] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 95.822255][ T3186] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 95.830362][ T3186] Call Trace: [ 95.833668][ T3186] [ 95.836667][ T3186] pppol2tp_release+0x150/0x2b0 [ 95.841993][ T3186] sock_close+0xb8/0x200 [ 95.846418][ T3186] ? sock_mmap+0xa0/0xa0 [ 95.852130][ T3186] __fput+0x22b/0x900 [ 95.856224][ T3186] ____fput+0x15/0x20 [ 95.862934][ T3186] task_work_run+0x127/0x190 [ 95.868403][ T3186] exit_to_user_mode_loop+0xd0/0xe0 [ 95.873896][ T313] uclogic 0003:28BD:0074.0004: interface is invalid, ignoring [ 95.874162][ T3186] exit_to_user_mode_prepare+0x87/0xd0 [ 95.895681][ T3186] syscall_exit_to_user_mode+0x1a/0x30 [ 95.901793][ T3186] do_syscall_64+0x58/0xa0 [ 95.906258][ T3186] ? clear_bhb_loop+0x50/0xa0 [ 95.911216][ T3186] ? clear_bhb_loop+0x50/0xa0 [ 95.917040][ T3186] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.928704][ T3186] RIP: 0033:0x7f53b8009159 [ 95.933450][ T3186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.936342][ T3206] attempt to access beyond end of device [ 95.936342][ T3206] loop3: rw=2049, want=79480, limit=40427 [ 95.953801][ T3186] RSP: 002b:00007fff4ae2dfa8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 95.974609][ T3186] RAX: 0000000000000000 RBX: 00007f53b8292da0 RCX: 00007f53b8009159 [ 95.984506][ T3186] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 95.992943][ T3186] RBP: 00007f53b8292da0 R08: 0000000000000006 R09: 0000000000000000 [ 96.001298][ T3186] R10: 00007f53b8292cb0 R11: 0000000000000246 R12: 0000000000017155 [ 96.009354][ T3186] R13: 00007f53b829109c R14: 0000000000016f6a R15: 00007f53b8291090 [ 96.017665][ T3186] [ 96.020894][ T3186] ---[ end trace 551dac6ba6671551 ]--- [ 96.072876][ T307] usb 1-1: USB disconnect, device number 4 [ 96.127392][ T285] attempt to access beyond end of device [ 96.127392][ T285] loop3: rw=2049, want=40968, limit=40427