last executing test programs: 10.114021845s ago: executing program 4 (id=160): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r2], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.187419527s ago: executing program 1 (id=162): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @loopback, 0x106}, 0x1c) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x1c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.884605341s ago: executing program 4 (id=165): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000005c0)="306663353a313232373a3f7092c0f0bc085a193376cf620afaf6379a248d1d6534058f1095109da34b6d6537a6e78b0dc4b7bc0b", 0x34) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'hsr0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x2, 0x4e23, @broadcast}, 0xc8cc6de1a20d61c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x305020, &(0x7f0000000600)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './sys'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [{@appraise_type}, {@fowner_lt}, {@uid_lt}, {@subj_type={'subj_type', 0x3d, '@!&+:0-\x13\x02\xc6\xdf\xf8b6\xb9\xd7\xae\xe3s\x91U#q\x14\x93\xb2\"0\x1e$h\xbb\xa6`t\xf1\xc5|#]\x96<)\xdf\x87O?I\xda\xb6F\x80 \x02\x14F'}}, {@subj_role={'subj_role', 0x3d, 'uuid=off'}}], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000400), &(0x7f0000000440)=0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x6e, @private2, @local, 0x8000, 0x20, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl0\x00', r4, 0x29, 0x81, 0x7f, 0x4038a0b, 0x11, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2={0xff, 0x5}, 0x20, 0x0, 0x43, 0x4}}) 8.723503099s ago: executing program 1 (id=167): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)={0x2, 0x0, [{0x40000083, 0x0, 0x1001}, {0x400000b1, 0x0, 0x7}]}) 8.491326809s ago: executing program 1 (id=170): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0x1, &(0x7f0000000180)={0x9, 0x2}) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r2, &(0x7f0000001800)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca9ccf1cb8d871123f1c9c5e4ee16a1d71f8876bd9dd39cbd2831a51bf6016afee9c90f6acc9f9da9956", 0x3f) r3 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r3, &(0x7f00000091c0)=""/16384, 0x4000) 8.388339554s ago: executing program 1 (id=172): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000000)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x504, &(0x7f0000000c40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, &(0x7f0000000540)={0x4, 0x100000000, 0x3, 0x8, 0x6, 0x6, 0x20000000ffd, 0x6, 0xfffffffd}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 7.861282928s ago: executing program 4 (id=175): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0x1, &(0x7f0000000180)={0x9, 0x2}) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x7, 0x3, 0x0, 0x2240, 0xffffffffffffffff, 0x4, '\x00', r3, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r4, &(0x7f0000001800)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca9ccf1cb8d871123f1c9c5e4ee16a1d71f8876bd9dd39cbd2831a51bf6016afee9c90f6acc9f9da9956", 0x3f) r5 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r5, &(0x7f00000091c0)=""/16384, 0x4000) 7.501044865s ago: executing program 4 (id=177): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/43, 0x0, 0x25000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/220, &(0x7f00000000c0)=""/80, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x9c28, 0x7fff}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b40)={0x2, 0x0, [{0x7000, 0xb3, &(0x7f0000000800)=""/179}, {0x0, 0xc2, &(0x7f0000000940)=""/194}]}) 6.75119387s ago: executing program 4 (id=178): openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) remap_file_pages(&(0x7f0000045000/0x3000)=nil, 0x3000, 0x8, 0x9, 0x40a1942) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x46) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x404, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x6) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, 0x0, &(0x7f00000004c0)) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x10, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006200)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2810400, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000540)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) truncate(&(0x7f0000000180)='./file1\x00', 0xa75) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 6.598655017s ago: executing program 1 (id=179): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) socket(0x11, 0xa, 0x0) dup(r0) r2 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0) 6.461658892s ago: executing program 3 (id=183): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/64, 0x40}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000032c0)=""/71, 0x47}, 0x7f}], 0x3, 0x40000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x83, 0x7fff4000}]}) socket$inet6(0xa, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.899204608s ago: executing program 3 (id=185): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) socket(0x11, 0xa, 0x0) dup(r0) r2 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0) 4.725926863s ago: executing program 4 (id=190): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, 0x0, 0x0, 0x9, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) tee(r0, r3, 0x0, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f0000002d00), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setns(0xc9, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") 4.013598856s ago: executing program 0 (id=192): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r2], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.885131951s ago: executing program 0 (id=193): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x80, 0x8, 0x3, 0x3b4f, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x68, 0xe0, 0x5, 0x2f, 0x0, @private=0xa010102, @private=0xa0100fd}}}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002bbdbd0000000000ff010000000000000000000000000001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000729900000000000002000000000000080100000000000000010000000000000044000500fc020000000000000000000000000000000000003c00000002000000ffffffff000000000000000000000000060000000401"], 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004048, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @local, 0x4}, 0x1c) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)) chdir(&(0x7f0000000140)='./file0\x00') r2 = getpgrp(0xffffffffffffffff) setpgid(0xffffffffffffffff, r2) openat$make_it_fail(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000040)='./dev/sda1\x00') 3.841538143s ago: executing program 1 (id=194): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, 0x0, 0x0, 0x9, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) tee(r0, r3, 0x0, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f0000002d00), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") 3.503288389s ago: executing program 3 (id=195): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/64, 0x40}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000032c0)=""/71, 0x47}, 0x7f}], 0x3, 0x40000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x83, 0x7fff4000}]}) socket$inet6(0xa, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3.287100869s ago: executing program 3 (id=196): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) socket(0x11, 0xa, 0x0) dup(r0) r2 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0) 2.670684567s ago: executing program 0 (id=198): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r2], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.287361264s ago: executing program 2 (id=199): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000000180)) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x2, 0x0, [{0x40000083, 0x0, 0x1001}, {0x400000b0, 0x0, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.189420199s ago: executing program 2 (id=200): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000005c0)="306663353a313232373a3f7092c0f0bc085a193376cf620afaf6379a248d1d6534058f1095109da34b6d6537a6e78b0dc4b7bc0b", 0x34) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'hsr0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x2, 0x4e23, @broadcast}, 0xc8cc6de1a20d61c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x305020, &(0x7f0000000600)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './sys'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [{@appraise_type}, {@fowner_lt}, {@uid_lt}, {@subj_type={'subj_type', 0x3d, '@!&+:0-\x13\x02\xc6\xdf\xf8b6\xb9\xd7\xae\xe3s\x91U#q\x14\x93\xb2\"0\x1e$h\xbb\xa6`t\xf1\xc5|#]\x96<)\xdf\x87O?I\xda\xb6F\x80 \x02\x14F'}}, {@subj_role={'subj_role', 0x3d, 'uuid=off'}}], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000400), &(0x7f0000000440)=0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x6e, @private2, @local, 0x8000, 0x20, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl0\x00', r5, 0x29, 0x81, 0x7f, 0x4038a0b, 0x11, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2={0xff, 0x5}, 0x20, 0x0, 0x43, 0x4}}) 1.581377837s ago: executing program 0 (id=201): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000d00)="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", 0x559, r0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x1808e2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x20001, 0x18b) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x800) 1.274609051s ago: executing program 3 (id=202): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r3, r1, 0x4}, 0x5) 1.051728072s ago: executing program 0 (id=203): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket$inet6(0xa, 0x1, 0x84) socket(0xa, 0x3, 0xff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xc, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x439, 0x6, 0x9, 0x4, 0x8, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.043956812s ago: executing program 3 (id=204): r0 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xf, 0xe, 0x7, 0x1}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x820}}]}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f00000003c0)={0x0, 0x7, 0x1, "c2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.002653174s ago: executing program 2 (id=205): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, 0x0, 0x0, 0x9, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) tee(r0, r3, 0x0, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f0000002d00), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setns(0xc9, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") 373.242863ms ago: executing program 2 (id=206): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r3, r1, 0x4}, 0x5) 94.656386ms ago: executing program 2 (id=207): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket(0xa, 0x3, 0xff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x2, 0x3, 0x5fffffffffffffff, 0x58f24867, 0xffff, 0x7f, 0x0, 0x9, 0x0, 0xb197, 0x1, 0x2, 0x4, 0x100000000000008, 0x1], 0x54000, 0x100204}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 67.807267ms ago: executing program 0 (id=208): socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000380)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84c42, 0x1fa) mkdirat(0xffffffffffffff9c, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001e00)={0x29c, 0x18, 0x1, 0x70bd25, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x168, 0x12, 0x0, 0x1, [@nested={0x164, 0x30, 0x0, 0x1, [@nested={0x160, 0x7d, 0x0, 0x1, [@nested={0x4, 0xc1}, @nested={0x158, 0xb0, 0x0, 0x1, [@nested={0x14c, 0xf2, 0x0, 0x1, [@generic, @generic="93dd38dd51537da1ad11753d0c1ceab83c362b5bda23d993b8cb1220cc2748b3a2488f92fc06feb1bb217b446b3107a584d1a5319bae88f269bc92097d75fcffc0119e33b42663c9eb333c2c85097c43e72da466c59550766fdf49bd413c42c128aae01a49a64900a42b1b75ef5c86c01eb69b79e163404ec2a866d81865ca2337cefbc02b6e4362386d86e17473354ea96ea73044ee885f088b0ce32de12e3c5c46d9a922ddbb7b5a104d3b573b2851f05d0c14dbb2b74feb5ed4cd7694fa5173", @nested={0x4, 0xe3}, @nested={0x4, 0x62}, @typed={0x14, 0x75, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="0292407a2b43ff3ce8c9dd35ad07bb3a260a3b0d6c197ac3b2b688c4126c5e884e718558e8b8969fb13fb88126d621bb3509944bb549f0a368b5514db669533304d2ad3442687ab4b42607986169e231d43d31c68e92a2a193120ca327e4588e0aa5623ff205073dc5bc0c"]}, @typed={0x4, 0x136}, @nested={0x4, 0xa7}]}]}]}]}, @nested={0x120, 0x6, 0x0, 0x1, [@nested={0x11c, 0xfa, 0x0, 0x1, [@nested={0x118, 0x13e, 0x0, 0x1, [@nested={0x114, 0xa0, 0x0, 0x1, [@nested={0x110, 0x4b, 0x0, 0x1, [@nested={0x10c, 0x6d, 0x0, 0x1, [@nested={0x108, 0xd1, 0x0, 0x1, [@typed={0x101, 0x15b, 0x0, 0x0, @binary="b0f8329888a406345ed6af238391d63c5c7d26b39562b4ccec455772585f5792b64544e4928ea287ef4d300e73f7fb664706d3030ae7d46d75575f48a39b2951a8eff5347137f6315696cf95b229950c2e7261ef27c570864d501cf94ccec5671926ce44f707745de6235c951cb9fcef0f4712e763f7df4af87b8f2c046ad316b35a23cbd252cc83d779832836dd2f4f564d6594db9b68f3a7e858a56b3ab5c23c7f7a0d618cadc2463d5f47df2a3b68488ed54f0370e527c0bd2fdf3174314cc762f05b0a1c57c4f0283c091d7e9cccb71935f4aa9bc9bf90870c65079e97621550e4cc83f1fa4fe7c31d703cf9dab1b51515f47657ac90cc25b90000"}]}]}]}]}]}]}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x5}, 0x0) unshare(0x22020600) write$binfmt_script(r0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) fadvise64(r2, 0xa, 0x7fff, 0x4) clock_getres(0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 0s ago: executing program 2 (id=209): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8}, 0x8}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)='%+9llu \x00'}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) kernel console output (not intermixed with test programs): ap: link becomes ready [ 25.770552][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.778839][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.787081][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.795328][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.803286][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.811452][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.819291][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.827705][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.835227][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.842812][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.850216][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.858330][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.866438][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.875432][ T283] device veth0_vlan entered promiscuous mode [ 25.893078][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.901904][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.910260][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.918807][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.934335][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.942639][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.951336][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.961601][ T281] device veth0_vlan entered promiscuous mode [ 25.967984][ T282] device veth1_macvtap entered promiscuous mode [ 25.980518][ T283] device veth1_macvtap entered promiscuous mode [ 25.989506][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.998352][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.006702][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.015623][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.024215][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.031963][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.050579][ T279] device veth0_vlan entered promiscuous mode [ 26.058666][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.068090][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.076714][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.077723][ T280] request_module fs-gadgetfs succeeded, but still no fs? [ 26.086142][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.102248][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.111046][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.118990][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.127190][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.134797][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.147286][ T281] device veth1_macvtap entered promiscuous mode [ 26.155005][ T280] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 26.169177][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.185867][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.195449][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.203892][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.212635][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.221243][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.232133][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.240501][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.250451][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.258915][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.272626][ T305] Zero length message leads to an empty skb [ 26.282640][ T279] device veth1_macvtap entered promiscuous mode [ 26.295469][ T307] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.323027][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.347629][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.390658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.399009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.713137][ T326] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 26.730700][ T5] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.888471][ T317] tipc: Started in network mode [ 26.893664][ T317] tipc: Own node identity 229164f2bff9, cluster identity 4711 [ 26.901349][ T317] tipc: Enabled bearer , priority 0 [ 26.909455][ T316] tipc: Disabling bearer [ 26.940880][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.980772][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 27.001634][ T331] FAULT_INJECTION: forcing a failure. [ 27.001634][ T331] name failslab, interval 1, probability 0, space 0, times 1 [ 27.014489][ T331] CPU: 1 PID: 331 Comm: syz.2.10 Not tainted syzkaller #0 [ 27.021600][ T331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.031771][ T331] Call Trace: [ 27.035080][ T331] __dump_stack+0x21/0x24 [ 27.039548][ T331] dump_stack_lvl+0x1a7/0x208 [ 27.044240][ T331] ? show_regs_print_info+0x18/0x18 [ 27.049438][ T331] dump_stack+0x15/0x1c [ 27.053607][ T331] should_fail+0x3ab/0x500 [ 27.056938][ T332] FAULT_INJECTION: forcing a failure. [ 27.056938][ T332] name failslab, interval 1, probability 0, space 0, times 1 [ 27.058104][ T331] ? selinux_sb_alloc_security+0x53/0x200 [ 27.076376][ T331] __should_failslab+0xa4/0xe0 [ 27.081164][ T331] should_failslab+0x9/0x20 [ 27.085693][ T331] kmem_cache_alloc_trace+0x3a/0x2e0 [ 27.090995][ T331] ? __kasan_check_write+0x14/0x20 [ 27.096124][ T331] selinux_sb_alloc_security+0x53/0x200 [ 27.101681][ T331] security_sb_alloc+0x62/0x90 [ 27.106461][ T331] alloc_super+0x13c/0x7d0 [ 27.110894][ T331] sget_fc+0x2c9/0x700 [ 27.114977][ T331] ? kill_litter_super+0xa0/0xa0 [ 27.119935][ T331] ? proc_reconfigure+0x3c0/0x3c0 [ 27.124974][ T331] get_tree_nodev+0x2a/0x160 [ 27.129581][ T331] ? proc_get_tree+0xd/0x20 [ 27.134212][ T331] proc_get_tree+0x1c/0x20 [ 27.138758][ T331] vfs_get_tree+0x89/0x260 [ 27.143205][ T331] do_new_mount+0x25a/0xa30 [ 27.147727][ T331] path_mount+0x581/0xca0 [ 27.152083][ T331] __se_sys_mount+0x320/0x390 [ 27.156779][ T331] ? __x64_sys_mount+0xd0/0xd0 [ 27.161566][ T331] __x64_sys_mount+0xbf/0xd0 [ 27.166190][ T331] do_syscall_64+0x31/0x40 [ 27.170624][ T331] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.176563][ T331] RIP: 0033:0x7fe89c9bf159 [ 27.180993][ T331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.182465][ T290] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.200620][ T331] RSP: 002b:00007fe89b418028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 27.200636][ T331] RAX: ffffffffffffffda RBX: 00007fe89cc46fa0 RCX: 00007fe89c9bf159 [ 27.200644][ T331] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000 [ 27.200652][ T331] RBP: 00007fe89ca5606b R08: 0000000000000000 R09: 0000000000000000 [ 27.200658][ T331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.200666][ T331] R13: 00007fe89cc47038 R14: 00007fe89cc46fa0 R15: 00007ffdb8bbd688 [ 27.258873][ T332] CPU: 0 PID: 332 Comm: syz.2.10 Not tainted syzkaller #0 [ 27.266046][ T332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.276110][ T332] Call Trace: [ 27.279416][ T332] __dump_stack+0x21/0x24 [ 27.283765][ T332] dump_stack_lvl+0x1a7/0x208 [ 27.288457][ T332] ? show_regs_print_info+0x18/0x18 [ 27.293668][ T332] dump_stack+0x15/0x1c [ 27.297833][ T332] should_fail+0x3ab/0x500 [ 27.302255][ T332] ? mempool_alloc_slab+0x1d/0x30 [ 27.307378][ T332] __should_failslab+0xa4/0xe0 [ 27.312153][ T332] should_failslab+0x9/0x20 [ 27.316774][ T332] kmem_cache_alloc+0x3d/0x2d0 [ 27.321558][ T332] ? kasan_poison+0x62/0x70 [ 27.326079][ T332] mempool_alloc_slab+0x1d/0x30 [ 27.330947][ T332] ? mempool_free+0x330/0x330 [ 27.335640][ T332] mempool_init_node+0x1e3/0x4a0 [ 27.340602][ T332] ? mempool_alloc_slab+0x30/0x30 [ 27.345650][ T332] ? mempool_free+0x330/0x330 [ 27.350437][ T332] mempool_init+0x3c/0x50 [ 27.354787][ T332] ? bioset_init+0x44c/0x5f0 [ 27.359568][ T332] bioset_init+0x4c2/0x5f0 [ 27.364107][ T332] blk_alloc_queue+0xb7/0x5f0 [ 27.368807][ T332] dm_create+0x4c7/0xdd0 [ 27.373193][ T332] dev_create+0x12e/0x2c0 [ 27.377549][ T332] ? list_devices+0x570/0x570 [ 27.382240][ T332] ? __kasan_check_write+0x14/0x20 [ 27.387392][ T332] ? _copy_from_user+0x95/0xd0 [ 27.392190][ T332] dm_ctl_ioctl+0x8ee/0xca0 [ 27.396711][ T332] ? list_devices+0x570/0x570 [ 27.401473][ T332] ? dm_poll+0x120/0x120 [ 27.405740][ T332] ? security_file_ioctl+0x84/0xa0 [ 27.410864][ T332] ? dm_poll+0x120/0x120 [ 27.415121][ T332] __se_sys_ioctl+0x121/0x1a0 [ 27.419811][ T332] __x64_sys_ioctl+0x7b/0x90 [ 27.424423][ T332] do_syscall_64+0x31/0x40 [ 27.428852][ T332] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.434750][ T332] RIP: 0033:0x7fe89c9bf159 [ 27.439201][ T332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.458822][ T332] RSP: 002b:00007fe89b3f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 27.467250][ T332] RAX: ffffffffffffffda RBX: 00007fe89cc47090 RCX: 00007fe89c9bf159 [ 27.475236][ T332] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 27.483222][ T332] RBP: 00007fe89ca5606b R08: 0000000000000000 R09: 0000000000000000 [ 27.491333][ T332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.499327][ T332] R13: 00007fe89cc47128 R14: 00007fe89cc47090 R15: 00007ffdb8bbd688 [ 27.508420][ T5] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.520325][ T5] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 27.690834][ T5] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 27.700034][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.708497][ T5] usb 1-1: Product: syz [ 27.711046][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 27.713510][ T5] usb 1-1: Manufacturer: syz [ 27.725269][ T5] usb 1-1: SerialNumber: syz [ 27.750707][ T290] usb 4-1: Using ep0 maxpacket: 16 [ 27.788034][ T355] FAULT_INJECTION: forcing a failure. [ 27.788034][ T355] name failslab, interval 1, probability 0, space 0, times 0 [ 27.800913][ T25] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 27.806671][ T355] CPU: 0 PID: 355 Comm: syz.4.18 Not tainted syzkaller #0 [ 27.818977][ T355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.829030][ T355] Call Trace: [ 27.832350][ T355] __dump_stack+0x21/0x24 [ 27.836674][ T355] dump_stack_lvl+0x1a7/0x208 [ 27.841348][ T355] ? thaw_kernel_threads+0x220/0x220 [ 27.846625][ T355] ? show_regs_print_info+0x18/0x18 [ 27.851818][ T355] dump_stack+0x15/0x1c [ 27.855988][ T355] should_fail+0x3ab/0x500 [ 27.860400][ T355] ? vm_area_dup+0x26/0x250 [ 27.864951][ T355] __should_failslab+0xa4/0xe0 [ 27.869779][ T355] should_failslab+0x9/0x20 [ 27.874285][ T355] kmem_cache_alloc+0x3d/0x2d0 [ 27.879075][ T355] ? __kasan_check_read+0x11/0x20 [ 27.884200][ T355] vm_area_dup+0x26/0x250 [ 27.888530][ T355] copy_mm+0x857/0x13d0 [ 27.892694][ T355] ? copy_signal+0x5f0/0x5f0 [ 27.897285][ T355] ? __init_rwsem+0xd5/0x1c0 [ 27.901884][ T355] ? copy_signal+0x4cc/0x5f0 [ 27.906489][ T355] copy_process+0x1386/0x3320 [ 27.911177][ T355] ? __pidfd_prepare+0x150/0x150 [ 27.916128][ T355] ? fput_many+0x15a/0x1a0 [ 27.920537][ T355] kernel_clone+0x233/0x950 [ 27.925126][ T355] ? __se_sys_process_madvise+0x430/0x4e0 [ 27.930852][ T355] ? create_io_thread+0x170/0x170 [ 27.935887][ T355] __x64_sys_clone+0x198/0x210 [ 27.940676][ T355] ? __ia32_sys_vfork+0x130/0x130 [ 27.945714][ T355] ? switch_fpu_return+0x19c/0x330 [ 27.950833][ T355] ? __kasan_check_read+0x11/0x20 [ 27.955868][ T355] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 27.961496][ T355] do_syscall_64+0x31/0x40 [ 27.965910][ T355] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.971809][ T355] RIP: 0033:0x7fbb907bd159 [ 27.974769][ T25] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 27.976274][ T355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.986254][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.005108][ T355] RSP: 002b:00007fbb8f215fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 28.005124][ T355] RAX: ffffffffffffffda RBX: 00007fbb90a44fa0 RCX: 00007fbb907bd159 [ 28.005131][ T355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.005139][ T355] RBP: 00007fbb9085406b R08: 0000000000000000 R09: 0000000000000000 [ 28.005146][ T355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.005154][ T355] R13: 00007fbb90a45038 R14: 00007fbb90a44fa0 R15: 00007ffeaf973e28 [ 28.062002][ T25] usb 2-1: Product: syz [ 28.066209][ T25] usb 2-1: Manufacturer: syz [ 28.070872][ T25] usb 2-1: SerialNumber: syz [ 28.072403][ T5] usb 1-1: 0:2 : does not exist [ 28.081011][ T347] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.096134][ T290] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.109531][ T5] usb 1-1: USB disconnect, device number 2 [ 28.119595][ T290] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 28.242610][ T360] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 28.300957][ T290] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 28.310692][ T290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.318837][ T290] usb 4-1: Product: syz [ 28.323525][ T290] usb 4-1: Manufacturer: syz [ 28.328242][ T290] usb 4-1: SerialNumber: syz [ 28.333565][ T25] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 28.350645][ T347] usb 3-1: device descriptor read/64, error -71 [ 28.689568][ T366] FAULT_INJECTION: forcing a failure. [ 28.689568][ T366] name failslab, interval 1, probability 0, space 0, times 0 [ 28.702643][ T366] CPU: 0 PID: 366 Comm: syz.4.22 Not tainted syzkaller #0 [ 28.709758][ T366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.719814][ T366] Call Trace: [ 28.723114][ T366] __dump_stack+0x21/0x24 [ 28.727441][ T366] dump_stack_lvl+0x1a7/0x208 [ 28.732115][ T366] ? show_regs_print_info+0x18/0x18 [ 28.737308][ T366] dump_stack+0x15/0x1c [ 28.741558][ T366] should_fail+0x3ab/0x500 [ 28.745976][ T366] ? blk_ioprio_init+0x53/0x200 [ 28.750850][ T366] __should_failslab+0xa4/0xe0 [ 28.755856][ T366] should_failslab+0x9/0x20 [ 28.760386][ T366] kmem_cache_alloc_trace+0x3a/0x2e0 [ 28.765679][ T366] blk_ioprio_init+0x53/0x200 [ 28.770395][ T366] blkcg_init_queue+0x19f/0x330 [ 28.775267][ T366] blk_alloc_queue+0x444/0x5f0 [ 28.780053][ T366] dm_create+0x4c7/0xdd0 [ 28.784306][ T366] dev_create+0x12e/0x2c0 [ 28.788649][ T366] ? list_devices+0x570/0x570 [ 28.793430][ T366] ? __kasan_check_write+0x14/0x20 [ 28.798574][ T366] ? _copy_from_user+0x95/0xd0 [ 28.803354][ T366] dm_ctl_ioctl+0x8ee/0xca0 [ 28.807865][ T366] ? list_devices+0x570/0x570 [ 28.812554][ T366] ? dm_poll+0x120/0x120 [ 28.816807][ T366] ? security_file_ioctl+0x84/0xa0 [ 28.821925][ T366] ? dm_poll+0x120/0x120 [ 28.826172][ T366] __se_sys_ioctl+0x121/0x1a0 [ 28.830854][ T366] __x64_sys_ioctl+0x7b/0x90 [ 28.835449][ T366] do_syscall_64+0x31/0x40 [ 28.839975][ T366] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.845876][ T366] RIP: 0033:0x7fbb907bd159 [ 28.850327][ T366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.869944][ T366] RSP: 002b:00007fbb8f216028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 28.878370][ T366] RAX: ffffffffffffffda RBX: 00007fbb90a44fa0 RCX: 00007fbb907bd159 [ 28.886351][ T366] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 28.894334][ T366] RBP: 00007fbb9085406b R08: 0000000000000000 R09: 0000000000000000 [ 28.902311][ T366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.910291][ T366] R13: 00007fbb90a45038 R14: 00007fbb90a44fa0 R15: 00007ffeaf973e28 [ 28.918591][ T347] usb 3-1: device descriptor read/64, error -71 [ 28.943389][ T368] FAULT_INJECTION: forcing a failure. [ 28.943389][ T368] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 28.956890][ T368] CPU: 0 PID: 368 Comm: syz.4.23 Not tainted syzkaller #0 [ 28.964337][ T368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.974400][ T368] Call Trace: [ 28.977728][ T368] __dump_stack+0x21/0x24 [ 28.982065][ T368] dump_stack_lvl+0x1a7/0x208 [ 28.986743][ T368] ? show_regs_print_info+0x18/0x18 [ 28.991965][ T368] ? __kernel_text_address+0xa0/0x100 [ 28.997348][ T368] dump_stack+0x15/0x1c [ 29.001527][ T368] should_fail+0x3ab/0x500 [ 29.005986][ T368] should_fail_alloc_page+0x4f/0x60 [ 29.011186][ T368] __alloc_pages_nodemask+0x11a/0x640 [ 29.016555][ T368] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 29.022101][ T368] ? slab_post_alloc_hook+0x5d/0x2f0 [ 29.027381][ T368] ? __kasan_slab_alloc+0xc9/0xe0 [ 29.032401][ T368] ? __kasan_slab_alloc+0xb7/0xe0 [ 29.037416][ T368] ? slab_post_alloc_hook+0x5d/0x2f0 [ 29.042695][ T368] ? kmem_cache_alloc+0x15a/0x2d0 [ 29.047724][ T368] ? anon_vma_fork+0x1ff/0x520 [ 29.052486][ T368] get_zeroed_page+0x19/0x40 [ 29.057067][ T368] __pud_alloc+0x37/0x1a0 [ 29.061394][ T368] copy_page_range+0x24ce/0x27a0 [ 29.066327][ T368] ? __kasan_check_write+0x14/0x20 [ 29.071433][ T368] ? pfn_valid+0x1c0/0x1c0 [ 29.075848][ T368] ? trace_raw_output_vm_unmapped_area+0x210/0x210 [ 29.082344][ T368] ? _raw_write_unlock+0x2b/0x60 [ 29.087274][ T368] copy_mm+0xbfc/0x13d0 [ 29.091430][ T368] ? copy_signal+0x5f0/0x5f0 [ 29.096054][ T368] ? __init_rwsem+0xd5/0x1c0 [ 29.100648][ T368] ? copy_signal+0x4cc/0x5f0 [ 29.105259][ T368] copy_process+0x1386/0x3320 [ 29.109944][ T368] ? __pidfd_prepare+0x150/0x150 [ 29.114904][ T368] ? fput_many+0x15a/0x1a0 [ 29.119319][ T368] kernel_clone+0x233/0x950 [ 29.123829][ T368] ? __se_sys_process_madvise+0x430/0x4e0 [ 29.129546][ T368] ? create_io_thread+0x170/0x170 [ 29.130976][ T25] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 29.134571][ T368] __x64_sys_clone+0x198/0x210 [ 29.134584][ T368] ? __ia32_sys_vfork+0x130/0x130 [ 29.134639][ T368] ? switch_fpu_return+0x19c/0x330 [ 29.159486][ T368] ? __kasan_check_read+0x11/0x20 [ 29.164529][ T368] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 29.170196][ T368] do_syscall_64+0x31/0x40 [ 29.174648][ T368] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.178039][ T25] usb 2-1: USB disconnect, device number 2 [ 29.180597][ T368] RIP: 0033:0x7fbb907bd159 [ 29.190825][ T368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.210458][ T368] RSP: 002b:00007fbb8f215fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 29.218909][ T368] RAX: ffffffffffffffda RBX: 00007fbb90a44fa0 RCX: 00007fbb907bd159 [ 29.226919][ T368] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.234928][ T368] RBP: 00007fbb9085406b R08: 0000000000000000 R09: 0000000000000000 [ 29.242932][ T368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.251050][ T368] R13: 00007fbb90a45038 R14: 00007fbb90a44fa0 R15: 00007ffeaf973e28 [ 29.264304][ T368] FAULT_INJECTION: forcing a failure. [ 29.264304][ T368] name failslab, interval 1, probability 0, space 0, times 0 [ 29.277284][ T368] CPU: 0 PID: 368 Comm: syz.4.23 Not tainted syzkaller #0 [ 29.284444][ T368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.294529][ T368] Call Trace: [ 29.297854][ T368] __dump_stack+0x21/0x24 [ 29.302207][ T368] dump_stack_lvl+0x1a7/0x208 [ 29.306918][ T368] ? show_regs_print_info+0x18/0x18 [ 29.312143][ T368] dump_stack+0x15/0x1c [ 29.316293][ T368] should_fail+0x3ab/0x500 [ 29.320743][ T368] ? rand_initialize_disk+0x4f/0xa8 [ 29.325949][ T368] __should_failslab+0xa4/0xe0 [ 29.330752][ T368] should_failslab+0x9/0x20 [ 29.335267][ T368] kmem_cache_alloc_trace+0x3a/0x2e0 [ 29.340546][ T368] ? percpu_ref_init+0x20f/0x310 [ 29.345500][ T368] ? hd_ref_init+0x40/0x40 [ 29.349914][ T368] rand_initialize_disk+0x4f/0xa8 [ 29.354930][ T368] __alloc_disk_node+0x3ee/0x5b0 [ 29.359882][ T368] dm_create+0x523/0xdd0 [ 29.364129][ T368] dev_create+0x12e/0x2c0 [ 29.368452][ T368] ? list_devices+0x570/0x570 [ 29.373125][ T368] ? __kasan_check_write+0x14/0x20 [ 29.378247][ T368] ? _copy_from_user+0x95/0xd0 [ 29.383027][ T368] dm_ctl_ioctl+0x8ee/0xca0 [ 29.387524][ T368] ? list_devices+0x570/0x570 [ 29.392234][ T368] ? dm_poll+0x120/0x120 [ 29.396472][ T368] ? copy_pid_ns+0xe1/0x810 [ 29.400977][ T368] ? security_file_ioctl+0x84/0xa0 [ 29.406086][ T368] ? dm_poll+0x120/0x120 [ 29.410384][ T368] __se_sys_ioctl+0x121/0x1a0 [ 29.412389][ T349] udevd[349]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.415121][ T368] __x64_sys_ioctl+0x7b/0x90 [ 29.435429][ T368] do_syscall_64+0x31/0x40 [ 29.439879][ T368] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.445799][ T368] RIP: 0033:0x7fbb907bd159 [ 29.450247][ T368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.469880][ T368] RSP: 002b:00007fbb8f216028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 29.478504][ T368] RAX: ffffffffffffffda RBX: 00007fbb90a44fa0 RCX: 00007fbb907bd159 [ 29.486493][ T368] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 29.494474][ T368] RBP: 00007fbb9085406b R08: 0000000000000000 R09: 0000000000000000 [ 29.502617][ T368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.510608][ T368] R13: 00007fbb90a45038 R14: 00007fbb90a44fa0 R15: 00007ffeaf973e28 [ 29.539773][ T24] kauditd_printk_skb: 52 callbacks suppressed [ 29.539786][ T24] audit: type=1400 audit(1789743063.300:126): avc: denied { create } for pid=371 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.581628][ T290] usb 4-1: 0:2 : does not exist [ 29.587306][ T347] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.610499][ T290] usb 4-1: USB disconnect, device number 2 [ 29.751589][ T24] audit: type=1400 audit(1789743063.520:127): avc: denied { write } for pid=390 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 29.890656][ T347] usb 3-1: device descriptor read/64, error -71 [ 29.942649][ T24] audit: type=1400 audit(1789743063.710:128): avc: denied { create } for pid=399 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.969550][ T24] audit: type=1400 audit(1789743063.710:129): avc: denied { ioctl } for pid=399 comm="syz.1.33" path="socket:[15353]" dev="sockfs" ino=15353 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.088153][ T24] audit: type=1400 audit(1789743063.850:130): avc: denied { mount } for pid=405 comm="syz.3.36" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 30.110385][ T24] audit: type=1400 audit(1789743063.850:131): avc: denied { remount } for pid=405 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 30.182866][ T290] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.185635][ T24] audit: type=1400 audit(1789743063.950:132): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 30.216419][ T24] audit: type=1400 audit(1789743063.980:133): avc: denied { write } for pid=408 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 30.235236][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 30.235385][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.249620][ T24] audit: type=1400 audit(1789743063.980:134): avc: denied { name_bind } for pid=408 comm="syz.3.37" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 30.257517][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 30.281287][ T24] audit: type=1400 audit(1789743063.980:135): avc: denied { node_bind } for pid=408 comm="syz.3.37" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 30.320720][ T411] loop_set_block_size: loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) has still dirty pages (nrpages=1) [ 30.320729][ T347] usb 3-1: device descriptor read/64, error -71 [ 30.340493][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.351396][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 30.359368][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.370360][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 30.379925][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.390850][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 30.398703][ T409] loop7: unable to read partition table [ 30.399434][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.415375][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 30.415813][ T409] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 30.437278][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.448229][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 30.450925][ T347] usb usb3-port1: attempt power cycle [ 30.462113][ T290] usb 1-1: Using ep0 maxpacket: 16 [ 30.464094][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.478181][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 30.590751][ T290] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.610669][ T290] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.800750][ T290] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.809847][ T290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.817919][ T290] usb 1-1: Product: syz [ 30.822227][ T290] usb 1-1: Manufacturer: syz [ 30.826883][ T290] usb 1-1: SerialNumber: syz [ 30.840747][ T421] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 30.847145][ T421] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 30.860288][ T421] F2FS-fs (loop3): invalid crc value [ 30.909062][ T421] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 30.958835][ T421] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 30.966136][ T421] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 31.510784][ T290] usb 1-1: 0:2 : does not exist [ 31.543520][ T290] usb 1-1: USB disconnect, device number 3 [ 31.656256][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 31.668365][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 31.679312][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 31.687984][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 31.697306][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 31.891015][ T451] loop7: unable to read partition table [ 31.898331][ T451] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 32.036258][ T472] SELinux: policydb table sizes (8,2) do not match mine (8,7) [ 32.076299][ T472] SELinux: failed to load policy [ 32.261994][ T483] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 32.495788][ T489] tipc: Started in network mode [ 32.501398][ T489] tipc: Own node identity e2b388dd1044, cluster identity 4711 [ 32.508947][ T489] tipc: Enabled bearer , priority 0 [ 32.587604][ T491] netlink: 48 bytes leftover after parsing attributes in process `syz.0.61'. [ 32.670553][ T496] loop7: unable to read partition table [ 32.676538][ T496] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 32.701293][ T466] syzkaller0: MTU too low for tipc bearer [ 32.719465][ T466] tipc: Disabling bearer [ 32.958612][ T501] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.122172][ T497] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 33.150676][ T497] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 33.165819][ T497] F2FS-fs (loop3): invalid crc value [ 33.191491][ T497] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 33.224522][ T497] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 33.231798][ T497] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 33.489885][ T525] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 33.536985][ T534] mmap: syz.4.74 (534) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 33.572724][ T525] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 33.591456][ T525] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 33.610561][ T525] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 33.629658][ T525] pit: kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 33.649077][ T525] pit: kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 33.660744][ T525] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 33.679282][ T525] pit: kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 33.693236][ T525] pit: kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 33.749628][ T525] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 33.848147][ T540] attempt to access beyond end of device [ 33.848147][ T540] loop4: rw=2049, want=250, limit=128 [ 33.861837][ T540] attempt to access beyond end of device [ 33.861837][ T540] loop4: rw=2049, want=144, limit=128 [ 34.071544][ T543] FAULT_INJECTION: forcing a failure. [ 34.071544][ T543] name failslab, interval 1, probability 0, space 0, times 0 [ 34.111028][ T543] CPU: 0 PID: 543 Comm: syz.2.76 Not tainted syzkaller #0 [ 34.118191][ T543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.128265][ T543] Call Trace: [ 34.131571][ T543] __dump_stack+0x21/0x24 [ 34.135961][ T543] dump_stack_lvl+0x1a7/0x208 [ 34.140651][ T543] ? show_regs_print_info+0x18/0x18 [ 34.145863][ T543] dump_stack+0x15/0x1c [ 34.150028][ T543] should_fail+0x3ab/0x500 [ 34.154462][ T543] ? kvm_io_bus_register_dev+0x134/0x530 [ 34.160108][ T543] __should_failslab+0xa4/0xe0 [ 34.164886][ T543] should_failslab+0x9/0x20 [ 34.169398][ T543] __kmalloc+0x60/0x330 [ 34.173568][ T543] kvm_io_bus_register_dev+0x134/0x530 [ 34.179063][ T543] ? __kasan_check_write+0x14/0x20 [ 34.184193][ T543] ? mutex_trylock+0xb0/0xb0 [ 34.188815][ T543] ? kvm_pic_init+0x57/0x2f0 [ 34.193427][ T543] kvm_pic_init+0x19a/0x2f0 [ 34.197948][ T543] kvm_arch_vm_ioctl+0x1022/0x1400 [ 34.203078][ T543] ? kvm_vm_ioctl_set_msr_filter+0xb00/0xb00 [ 34.209075][ T543] ? compat_start_thread+0x80/0x80 [ 34.214219][ T543] ? pick_next_task_fair+0x81d/0xa50 [ 34.219518][ T543] ? native_set_ldt+0x370/0x370 [ 34.224382][ T543] ? __update_idle_core+0x280/0x280 [ 34.229596][ T543] ? _raw_spin_unlock_irq+0x4e/0x70 [ 34.234805][ T543] ? finish_task_switch+0x12e/0x5a0 [ 34.240015][ T543] ? switch_mm_irqs_off+0x752/0x990 [ 34.245221][ T543] ? __switch_to_asm+0x3a/0x60 [ 34.250084][ T543] ? __schedule+0xc0b/0x13e0 [ 34.254687][ T543] ? __sched_text_start+0x8/0x8 [ 34.259555][ T543] ? preempt_schedule_common+0xbe/0xf0 [ 34.265027][ T543] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 34.270671][ T543] ? __kasan_check_write+0x14/0x20 [ 34.275790][ T543] ? __switch_to+0x53e/0x10a0 [ 34.280481][ T543] ? set_next_entity+0xb4/0x5d0 [ 34.285345][ T543] ? compat_start_thread+0x80/0x80 [ 34.290498][ T543] ? pick_next_task_fair+0x81d/0xa50 [ 34.295799][ T543] ? native_set_ldt+0x370/0x370 [ 34.300666][ T543] kvm_vm_ioctl+0x6e9/0xab0 [ 34.305186][ T543] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 34.310830][ T543] ? finish_task_switch+0x12e/0x5a0 [ 34.316066][ T543] ? switch_mm_irqs_off+0x752/0x990 [ 34.321278][ T543] ? __switch_to_asm+0x3a/0x60 [ 34.326059][ T543] ? ioctl_has_perm+0x1b8/0x4f0 [ 34.330923][ T543] ? __asan_set_shadow_00+0xe/0x10 [ 34.336075][ T543] ? do_vfs_ioctl+0x1403/0x15d0 [ 34.340949][ T543] ? ioctl_has_perm+0x40f/0x4f0 [ 34.345837][ T543] ? __ia32_compat_sys_ioctl+0x8c0/0x8c0 [ 34.351491][ T543] ? has_cap_mac_admin+0x370/0x370 [ 34.356646][ T543] ? __kasan_check_read+0x11/0x20 [ 34.361689][ T543] ? preempt_schedule_irq+0xca/0x120 [ 34.366991][ T543] ? preempt_schedule_notrace+0x120/0x120 [ 34.372733][ T543] ? selinux_file_ioctl+0x3ad/0x4c0 [ 34.377955][ T543] ? selinux_file_alloc_security+0x120/0x120 [ 34.383949][ T543] ? sysvec_reschedule_ipi+0x69/0x70 [ 34.389256][ T543] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 34.395008][ T543] ? security_file_ioctl+0x84/0xa0 [ 34.400140][ T543] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 34.405798][ T543] __se_sys_ioctl+0x121/0x1a0 [ 34.410489][ T543] __x64_sys_ioctl+0x7b/0x90 [ 34.415102][ T543] do_syscall_64+0x31/0x40 [ 34.419543][ T543] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 34.425540][ T543] RIP: 0033:0x7fe89c9bf159 [ 34.429974][ T543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.449591][ T543] RSP: 002b:00007fe89b418028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 34.458022][ T543] RAX: ffffffffffffffda RBX: 00007fe89cc46fa0 RCX: 00007fe89c9bf159 [ 34.466013][ T543] RDX: 0000000000000000 RSI: 000000000000ae60 RDI: 0000000000000004 [ 34.474002][ T543] RBP: 00007fe89ca5606b R08: 0000000000000000 R09: 0000000000000000 [ 34.481995][ T543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.489984][ T543] R13: 00007fe89cc47038 R14: 00007fe89cc46fa0 R15: 00007ffdb8bbd688 [ 34.520607][ C1] sched: RT throttling activated [ 34.564657][ T24] kauditd_printk_skb: 15 callbacks suppressed [ 34.564668][ T24] audit: type=1400 audit(1789743068.330:151): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 34.727867][ T24] audit: type=1400 audit(1789743068.490:152): avc: denied { mount } for pid=548 comm="syz.2.78" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 34.754877][ T549] FAULT_INJECTION: forcing a failure. [ 34.754877][ T549] name failslab, interval 1, probability 0, space 0, times 0 [ 34.790671][ T549] CPU: 0 PID: 549 Comm: syz.2.78 Not tainted syzkaller #0 [ 34.797859][ T549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.807928][ T549] Call Trace: [ 34.811243][ T549] __dump_stack+0x21/0x24 [ 34.815590][ T549] dump_stack_lvl+0x1a7/0x208 [ 34.820307][ T549] ? thaw_kernel_threads+0x220/0x220 [ 34.825606][ T549] ? show_regs_print_info+0x18/0x18 [ 34.830814][ T549] dump_stack+0x15/0x1c [ 34.834985][ T549] should_fail+0x3ab/0x500 [ 34.839418][ T549] ? security_inode_alloc+0x33/0x110 [ 34.844726][ T549] __should_failslab+0xa4/0xe0 [ 34.849536][ T549] should_failslab+0x9/0x20 [ 34.854052][ T549] kmem_cache_alloc+0x3d/0x2d0 [ 34.858845][ T549] security_inode_alloc+0x33/0x110 [ 34.864006][ T549] inode_init_always+0x725/0x9c0 [ 34.868966][ T549] new_inode_pseudo+0x91/0x210 [ 34.873767][ T549] new_inode+0x28/0x1e0 [ 34.877935][ T549] ? __d_instantiate+0x439/0x780 [ 34.882890][ T549] proc_setup_self+0xe3/0x310 [ 34.887586][ T549] ? _raw_spin_unlock+0x4d/0x70 [ 34.892471][ T549] proc_fill_super+0x516/0x750 [ 34.897250][ T549] get_tree_nodev+0xb3/0x160 [ 34.901881][ T549] ? proc_reconfigure+0x3c0/0x3c0 [ 34.906942][ T549] proc_get_tree+0x1c/0x20 [ 34.911390][ T549] vfs_get_tree+0x89/0x260 [ 34.915833][ T549] do_new_mount+0x25a/0xa30 [ 34.920357][ T549] path_mount+0x581/0xca0 [ 34.924707][ T549] __se_sys_mount+0x320/0x390 [ 34.929412][ T549] ? __x64_sys_mount+0xd0/0xd0 [ 34.934195][ T549] __x64_sys_mount+0xbf/0xd0 [ 34.938813][ T549] do_syscall_64+0x31/0x40 [ 34.943246][ T549] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 34.949329][ T549] RIP: 0033:0x7fe89c9bf159 [ 34.953770][ T549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.973398][ T549] RSP: 002b:00007fe89b418028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 34.981844][ T549] RAX: ffffffffffffffda RBX: 00007fe89cc46fa0 RCX: 00007fe89c9bf159 [ 34.989831][ T549] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000 [ 34.997823][ T549] RBP: 00007fe89ca5606b R08: 0000000000000000 R09: 0000000000000000 [ 35.005895][ T549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.013971][ T549] R13: 00007fe89cc47038 R14: 00007fe89cc46fa0 R15: 00007ffdb8bbd688 [ 35.041319][ T550] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.130850][ T549] proc_fill_super: can't allocate /proc/self [ 35.145650][ T549] FAULT_INJECTION: forcing a failure. [ 35.145650][ T549] name failslab, interval 1, probability 0, space 0, times 0 [ 35.158297][ T549] CPU: 1 PID: 549 Comm: syz.2.78 Not tainted syzkaller #0 [ 35.165423][ T549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.175500][ T549] Call Trace: [ 35.178837][ T549] __dump_stack+0x21/0x24 [ 35.183189][ T549] dump_stack_lvl+0x1a7/0x208 [ 35.187880][ T549] ? show_regs_print_info+0x18/0x18 [ 35.193106][ T549] ? dm_create+0x4c7/0xdd0 [ 35.197540][ T549] ? __x64_sys_ioctl+0x7b/0x90 [ 35.202327][ T549] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.208410][ T549] dump_stack+0x15/0x1c [ 35.212589][ T549] should_fail+0x3ab/0x500 [ 35.217026][ T549] ? ioprio_alloc_pd+0x59/0x60 [ 35.221809][ T549] __should_failslab+0xa4/0xe0 [ 35.226617][ T549] should_failslab+0x9/0x20 [ 35.231229][ T549] kmem_cache_alloc_trace+0x3a/0x2e0 [ 35.236537][ T549] ioprio_alloc_pd+0x59/0x60 [ 35.241169][ T549] ? ioprio_free_cpd+0x20/0x20 [ 35.245950][ T549] blkcg_activate_policy+0x254/0xd70 [ 35.251259][ T549] blk_ioprio_init+0x6d/0x200 [ 35.255968][ T549] blkcg_init_queue+0x19f/0x330 [ 35.260845][ T549] blk_alloc_queue+0x444/0x5f0 [ 35.265642][ T549] dm_create+0x4c7/0xdd0 [ 35.269948][ T549] dev_create+0x12e/0x2c0 [ 35.274342][ T549] ? list_devices+0x570/0x570 [ 35.279310][ T549] ? __kasan_check_write+0x14/0x20 [ 35.284476][ T549] ? _copy_from_user+0x95/0xd0 [ 35.289273][ T549] dm_ctl_ioctl+0x8ee/0xca0 [ 35.293813][ T549] ? list_devices+0x570/0x570 [ 35.298523][ T549] ? dm_poll+0x120/0x120 [ 35.302818][ T549] ? security_file_ioctl+0x84/0xa0 [ 35.307945][ T549] ? dm_poll+0x120/0x120 [ 35.312200][ T549] __se_sys_ioctl+0x121/0x1a0 [ 35.316894][ T549] __x64_sys_ioctl+0x7b/0x90 [ 35.321491][ T549] do_syscall_64+0x31/0x40 [ 35.325939][ T549] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.331842][ T549] RIP: 0033:0x7fe89c9bf159 [ 35.336267][ T549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.355973][ T549] RSP: 002b:00007fe89b418028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 35.364492][ T549] RAX: ffffffffffffffda RBX: 00007fe89cc46fa0 RCX: 00007fe89c9bf159 [ 35.372477][ T549] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 35.380460][ T549] RBP: 00007fe89ca5606b R08: 0000000000000000 R09: 0000000000000000 [ 35.388440][ T549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.396419][ T549] R13: 00007fe89cc47038 R14: 00007fe89cc46fa0 R15: 00007ffdb8bbd688 [ 35.467687][ T24] audit: type=1400 audit(1789743069.230:153): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 35.520065][ T560] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 35.543677][ T560] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 35.566923][ T560] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 35.590970][ T560] System zones: 0-1, 3-36 [ 35.620679][ T560] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue [ 35.727776][ T24] audit: type=1400 audit(1789743069.490:154): avc: denied { write } for pid=559 comm="syz.2.81" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.786100][ T24] audit: type=1400 audit(1789743069.510:155): avc: denied { add_name } for pid=559 comm="syz.2.81" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.840287][ T24] audit: type=1400 audit(1789743069.510:156): avc: denied { create } for pid=559 comm="syz.2.81" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.860357][ T24] audit: type=1400 audit(1789743069.510:157): avc: denied { read append } for pid=559 comm="syz.2.81" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.882790][ T24] audit: type=1400 audit(1789743069.510:158): avc: denied { open } for pid=559 comm="syz.2.81" path="/13/bus/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.963830][ T24] audit: type=1400 audit(1789743069.730:159): avc: denied { ioctl } for pid=559 comm="syz.2.81" path="/13/bus/file1" dev="loop2" ino=15 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.080223][ T24] audit: type=1400 audit(1789743069.790:160): avc: denied { create } for pid=559 comm="syz.2.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.325766][ C1] print_req_error: 15 callbacks suppressed [ 36.325783][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 36.343046][ C1] buffer_io_error: 12 callbacks suppressed [ 36.343056][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.427221][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 36.438167][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.444220][ T564] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 36.456072][ T573] loop7: unable to read partition table [ 36.468072][ T573] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 36.480929][ T564] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 36.490999][ T564] F2FS-fs (loop3): invalid crc value [ 36.497717][ T564] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 36.539554][ T564] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 36.547657][ T564] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 36.574005][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 36.591276][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 36.602216][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.706508][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 36.717469][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.725756][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 36.736667][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.750629][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 36.761653][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.770041][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 36.780954][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 36.789165][ T585] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.961354][ T588] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 37.967767][ T588] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 37.967928][ T602] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 37.978260][ T588] F2FS-fs (loop2): invalid crc value [ 37.987990][ T602] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 37.997614][ T602] F2FS-fs (loop0): invalid crc value [ 38.004187][ T588] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 38.029018][ T599] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 38.043304][ T588] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 38.050664][ T588] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 38.050749][ T599] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 38.068733][ T602] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 38.086944][ T599] F2FS-fs (loop1): invalid crc value [ 38.112222][ T602] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 38.119358][ T602] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 38.128659][ T599] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 38.186456][ T599] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 38.200701][ T599] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 38.399892][ T279] attempt to access beyond end of device [ 38.399892][ T279] loop1: rw=2049, want=45104, limit=40427 [ 38.592579][ T290] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 38.758916][ T637] create_pit_timer: 28 callbacks suppressed [ 38.758926][ T637] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 38.784800][ T637] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 38.793270][ T637] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 38.801932][ T637] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 38.810534][ T637] pit: kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 38.819196][ T637] pit: kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 38.828645][ T637] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 38.837599][ T637] pit: kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 38.846365][ T290] usb 5-1: Using ep0 maxpacket: 16 [ 38.851969][ T637] pit: kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 38.860450][ T637] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 38.952811][ T653] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 38.963940][ T653] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.010750][ T290] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.020985][ T290] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.073937][ T660] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.190711][ T290] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 39.199859][ T290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.207910][ T290] usb 5-1: Product: syz [ 39.210747][ T503] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 39.212491][ T290] usb 5-1: Manufacturer: syz [ 39.228720][ T290] usb 5-1: SerialNumber: syz [ 39.531065][ T667] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 39.537522][ T667] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 39.546790][ T667] F2FS-fs (loop2): invalid crc value [ 39.551094][ T290] usb 5-1: 0:2 : does not exist [ 39.559246][ T667] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 39.566832][ T290] usb 5-1: USB disconnect, device number 2 [ 39.605471][ T667] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 39.612850][ T667] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 39.746607][ T503] usb 1-1: unable to get BOS descriptor or descriptor too short [ 39.781067][ T303] udevd[303]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.830878][ T503] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 40.110722][ T503] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 40.121684][ T503] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.129818][ T503] usb 1-1: Product: syz [ 40.130485][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 40.145652][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 40.153876][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 40.164916][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 40.172980][ T686] loop7: unable to read partition table [ 40.180656][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 40.189441][ T686] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 40.259330][ T503] usb 1-1: Manufacturer: syz [ 40.264080][ T503] usb 1-1: SerialNumber: syz [ 40.265601][ T283] attempt to access beyond end of device [ 40.265601][ T283] loop2: rw=2049, want=45104, limit=40427 [ 40.974012][ T503] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 41.104347][ T690] attempt to access beyond end of device [ 41.104347][ T690] loop3: rw=2049, want=250, limit=128 [ 41.123844][ T690] attempt to access beyond end of device [ 41.123844][ T690] loop3: rw=2049, want=144, limit=128 [ 41.430701][ T503] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 41.503728][ T503] usb 1-1: USB disconnect, device number 4 [ 41.751540][ T303] udevd[303]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.815347][ T701] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 41.841851][ T701] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 41.853757][ T701] F2FS-fs (loop1): invalid crc value [ 41.868888][ T701] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 41.901506][ T701] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 41.908767][ T701] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 42.042471][ T725] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.219033][ T290] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 42.490751][ T290] usb 5-1: Using ep0 maxpacket: 32 [ 42.597814][ T743] netlink: 48 bytes leftover after parsing attributes in process `syz.1.123'. [ 42.610961][ T290] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.621742][ T290] usb 5-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xEA, skipping [ 42.634751][ T290] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 42.830730][ T290] usb 5-1: New USB device found, idVendor=1235, idProduct=0002, bcdDevice= 0.40 [ 42.840183][ T290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.848492][ T290] usb 5-1: Product: syz [ 42.853226][ T290] usb 5-1: Manufacturer: syz [ 42.857924][ T290] usb 5-1: SerialNumber: syz [ 42.949766][ T745] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 42.956462][ T745] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 42.966214][ T745] F2FS-fs (loop1): invalid crc value [ 43.011835][ T745] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 43.050977][ T745] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 43.058284][ T745] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 43.967835][ T760] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.148088][ T769] netlink: 48 bytes leftover after parsing attributes in process `syz.4.131'. [ 44.355279][ T772] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.413633][ T290] usb 5-1: unit 5 not found! [ 44.435226][ T290] usb 5-1: USB disconnect, device number 3 [ 44.452221][ T775] create_pit_timer: 29 callbacks suppressed [ 44.452230][ T775] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 44.840708][ T290] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 44.876108][ T787] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.090659][ T290] usb 5-1: Using ep0 maxpacket: 32 [ 45.210742][ T290] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.221101][ T290] usb 5-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xEA, skipping [ 45.232026][ T290] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 45.352716][ T791] FAULT_INJECTION: forcing a failure. [ 45.352716][ T791] name failslab, interval 1, probability 0, space 0, times 0 [ 45.366215][ T791] CPU: 0 PID: 791 Comm: syz.0.137 Not tainted syzkaller #0 [ 45.373450][ T791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.383535][ T791] Call Trace: [ 45.386866][ T791] __dump_stack+0x21/0x24 [ 45.391334][ T791] dump_stack_lvl+0x1a7/0x208 [ 45.396042][ T791] ? show_regs_print_info+0x18/0x18 [ 45.401276][ T791] dump_stack+0x15/0x1c [ 45.405459][ T791] should_fail+0x3ab/0x500 [ 45.409909][ T791] ? blk_ioprio_init+0x53/0x200 [ 45.414811][ T791] __should_failslab+0xa4/0xe0 [ 45.419617][ T791] should_failslab+0x9/0x20 [ 45.424165][ T791] kmem_cache_alloc_trace+0x3a/0x2e0 [ 45.429482][ T791] blk_ioprio_init+0x53/0x200 [ 45.434292][ T791] blkcg_init_queue+0x19f/0x330 [ 45.439194][ T791] blk_alloc_queue+0x444/0x5f0 [ 45.443991][ T791] dm_create+0x4c7/0xdd0 [ 45.448439][ T791] dev_create+0x12e/0x2c0 [ 45.452813][ T791] ? list_devices+0x570/0x570 [ 45.457521][ T791] ? __kasan_check_write+0x14/0x20 [ 45.462663][ T791] ? _copy_from_user+0x95/0xd0 [ 45.467452][ T791] dm_ctl_ioctl+0x8ee/0xca0 [ 45.472118][ T791] ? list_devices+0x570/0x570 [ 45.476836][ T791] ? dm_poll+0x120/0x120 [ 45.481133][ T791] ? security_file_ioctl+0x84/0xa0 [ 45.486283][ T791] ? dm_poll+0x120/0x120 [ 45.490557][ T791] __se_sys_ioctl+0x121/0x1a0 [ 45.495266][ T791] __x64_sys_ioctl+0x7b/0x90 [ 45.499889][ T791] do_syscall_64+0x31/0x40 [ 45.504347][ T791] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.510265][ T791] RIP: 0033:0x7f2b0ae00159 [ 45.514713][ T791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.534369][ T791] RSP: 002b:00007f2b09859028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 45.542819][ T791] RAX: ffffffffffffffda RBX: 00007f2b0b087fa0 RCX: 00007f2b0ae00159 [ 45.550859][ T791] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 45.558862][ T791] RBP: 00007f2b0ae9706b R08: 0000000000000000 R09: 0000000000000000 [ 45.566861][ T791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.574865][ T791] R13: 00007f2b0b088038 R14: 00007f2b0b087fa0 R15: 00007fffebb33a38 [ 45.630695][ T290] usb 5-1: New USB device found, idVendor=1235, idProduct=0002, bcdDevice= 0.40 [ 45.641671][ T290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.654863][ T290] usb 5-1: Product: syz [ 45.659344][ T290] usb 5-1: Manufacturer: syz [ 45.664490][ T290] usb 5-1: SerialNumber: syz [ 45.848243][ T798] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.991723][ T802] FAULT_INJECTION: forcing a failure. [ 45.991723][ T802] name failslab, interval 1, probability 0, space 0, times 0 [ 46.005551][ T802] CPU: 0 PID: 802 Comm: syz.2.141 Not tainted syzkaller #0 [ 46.012784][ T802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.022854][ T802] Call Trace: [ 46.026167][ T802] __dump_stack+0x21/0x24 [ 46.030533][ T802] dump_stack_lvl+0x1a7/0x208 [ 46.035236][ T802] ? thaw_kernel_threads+0x220/0x220 [ 46.040548][ T802] ? show_regs_print_info+0x18/0x18 [ 46.045758][ T802] dump_stack+0x15/0x1c [ 46.049927][ T802] should_fail+0x3ab/0x500 [ 46.054368][ T802] ? vm_area_dup+0x26/0x250 [ 46.058888][ T802] __should_failslab+0xa4/0xe0 [ 46.063673][ T802] should_failslab+0x9/0x20 [ 46.068193][ T802] kmem_cache_alloc+0x3d/0x2d0 [ 46.072972][ T802] ? __kasan_check_read+0x11/0x20 [ 46.078022][ T802] vm_area_dup+0x26/0x250 [ 46.082363][ T802] copy_mm+0x857/0x13d0 [ 46.086539][ T802] ? copy_signal+0x5f0/0x5f0 [ 46.091141][ T802] ? __init_rwsem+0xd5/0x1c0 [ 46.095750][ T802] ? copy_signal+0x4cc/0x5f0 [ 46.100360][ T802] copy_process+0x1386/0x3320 [ 46.105091][ T802] ? __pidfd_prepare+0x150/0x150 [ 46.110048][ T802] ? fput_many+0x15a/0x1a0 [ 46.114475][ T802] kernel_clone+0x233/0x950 [ 46.119073][ T802] ? __se_sys_process_madvise+0x430/0x4e0 [ 46.124802][ T802] ? create_io_thread+0x170/0x170 [ 46.129850][ T802] __x64_sys_clone+0x198/0x210 [ 46.134627][ T802] ? __ia32_sys_vfork+0x130/0x130 [ 46.139660][ T802] ? switch_fpu_return+0x19c/0x330 [ 46.144871][ T802] ? __kasan_check_read+0x11/0x20 [ 46.149899][ T802] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 46.155536][ T802] do_syscall_64+0x31/0x40 [ 46.159961][ T802] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 46.165857][ T802] RIP: 0033:0x7fe89c9bf159 [ 46.170283][ T802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.189891][ T802] RSP: 002b:00007fe89b417fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 46.198309][ T802] RAX: ffffffffffffffda RBX: 00007fe89cc46fa0 RCX: 00007fe89c9bf159 [ 46.206283][ T802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 46.214264][ T802] RBP: 00007fe89ca5606b R08: 0000000000000000 R09: 0000000000000000 [ 46.222238][ T802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.230218][ T802] R13: 00007fe89cc47038 R14: 00007fe89cc46fa0 R15: 00007ffdb8bbd688 [ 46.255348][ T802] FAULT_INJECTION: forcing a failure. [ 46.255348][ T802] name failslab, interval 1, probability 0, space 0, times 0 [ 46.268120][ T802] CPU: 1 PID: 802 Comm: syz.2.141 Not tainted syzkaller #0 [ 46.275333][ T802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.285405][ T802] Call Trace: [ 46.288711][ T802] __dump_stack+0x21/0x24 [ 46.293057][ T802] dump_stack_lvl+0x1a7/0x208 [ 46.297761][ T802] ? show_regs_print_info+0x18/0x18 [ 46.302986][ T802] ? slab_post_alloc_hook+0x5d/0x2f0 [ 46.308297][ T802] ? security_inode_alloc+0x33/0x110 [ 46.313704][ T802] ? inode_init_always+0x725/0x9c0 [ 46.318835][ T802] ? iget5_locked+0xe0/0x270 [ 46.320978][ T290] usb 5-1: unit 5 not found! [ 46.323441][ T802] ? dm_create+0x8b5/0xdd0 [ 46.323484][ T802] ? dev_create+0x12e/0x2c0 [ 46.336984][ T802] dump_stack+0x15/0x1c [ 46.341170][ T802] should_fail+0x3ab/0x500 [ 46.345640][ T802] ? device_create+0x13a/0x300 [ 46.350425][ T802] __should_failslab+0xa4/0xe0 [ 46.352534][ T290] usb 5-1: USB disconnect, device number 4 [ 46.355212][ T802] should_failslab+0x9/0x20 [ 46.355280][ T802] kmem_cache_alloc_trace+0x3a/0x2e0 [ 46.370863][ T802] device_create+0x13a/0x300 [ 46.375474][ T802] ? root_device_unregister+0x80/0x80 [ 46.380873][ T802] ? vsnprintf+0x189d/0x1990 [ 46.385486][ T802] bdi_register_va+0x90/0x5f0 [ 46.390182][ T802] bdi_register+0xdf/0x130 [ 46.394627][ T802] ? __kasan_check_write+0x14/0x20 [ 46.399762][ T802] ? _raw_spin_lock+0x94/0xf0 [ 46.404457][ T802] ? bdi_register_va+0x5f0/0x5f0 [ 46.409419][ T802] ? hashlen_string+0x55/0x120 [ 46.414208][ T802] ? blk_alloc_devt+0xda/0x330 [ 46.418992][ T802] __device_add_disk+0x538/0x1010 [ 46.424046][ T802] device_add_disk_no_queue_reg+0x21/0x30 [ 46.429889][ T802] dm_create+0x992/0xdd0 [ 46.434155][ T802] dev_create+0x12e/0x2c0 [ 46.438510][ T802] ? list_devices+0x570/0x570 [ 46.443218][ T802] ? __kasan_check_write+0x14/0x20 [ 46.448352][ T802] ? _copy_from_user+0x95/0xd0 [ 46.453117][ T802] dm_ctl_ioctl+0x8ee/0xca0 [ 46.459358][ T802] ? list_devices+0x570/0x570 [ 46.464044][ T802] ? dm_poll+0x120/0x120 [ 46.468285][ T802] ? copy_pid_ns+0xe1/0x810 [ 46.472800][ T802] ? security_file_ioctl+0x84/0xa0 [ 46.477908][ T802] ? dm_poll+0x120/0x120 [ 46.482154][ T802] __se_sys_ioctl+0x121/0x1a0 [ 46.486828][ T802] __x64_sys_ioctl+0x7b/0x90 [ 46.491418][ T802] do_syscall_64+0x31/0x40 [ 46.495829][ T802] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 46.501713][ T802] RIP: 0033:0x7fe89c9bf159 [ 46.506154][ T802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.525790][ T802] RSP: 002b:00007fe89b418028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 46.534220][ T802] RAX: ffffffffffffffda RBX: 00007fe89cc46fa0 RCX: 00007fe89c9bf159 [ 46.542188][ T802] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 46.550155][ T802] RBP: 00007fe89ca5606b R08: 0000000000000000 R09: 0000000000000000 [ 46.558125][ T802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.566095][ T802] R13: 00007fe89cc47038 R14: 00007fe89cc46fa0 R15: 00007ffdb8bbd688 [ 46.574875][ T802] ------------[ cut here ]------------ [ 46.580447][ T802] WARNING: CPU: 1 PID: 802 at block/genhd.c:821 __device_add_disk+0xcf9/0x1010 [ 46.589563][ T802] Modules linked in: [ 46.593552][ T802] CPU: 1 PID: 802 Comm: syz.2.141 Not tainted syzkaller #0 [ 46.600852][ T802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.611073][ T802] RIP: 0010:__device_add_disk+0xcf9/0x1010 [ 46.616983][ T802] Code: ff e8 3b 8a 31 ff 0f 0b e9 74 fe ff ff e8 2f 8a 31 ff 0f 0b e9 64 f4 ff ff e8 23 8a 31 ff 0f 0b e9 a4 f9 ff ff e8 17 8a 31 ff <0f> 0b e9 52 f8 ff ff e8 0b 8a 31 ff e9 77 fd ff ff e8 01 8a 31 ff [ 46.624900][ T303] udevd[303]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.636726][ T802] RSP: 0018:ffffc90000f1fa78 EFLAGS: 00010287 [ 46.658471][ T802] RAX: ffffffff82332a99 RBX: ffff8881073e1000 RCX: 0000000000080000 [ 46.666699][ T802] RDX: ffffc900024cf000 RSI: 000000000003b9d3 RDI: 000000000003b9d4 [ 46.674863][ T802] RBP: ffffc90000f1fb00 R08: 0000000000000800 R09: 1ffffffff0cc74c2 [ 46.682962][ T808] netlink: 48 bytes leftover after parsing attributes in process `syz.0.143'. [ 46.691915][ T802] R10: dffffc0000000000 R11: fffffbfff0cc74c3 R12: ffff8881073e1348 [ 46.699980][ T802] R13: ffff88810bfef000 R14: 00000000fffffff4 R15: ffff8881073e1068 [ 46.715289][ T811] FAULT_INJECTION: forcing a failure. [ 46.715289][ T811] name failslab, interval 1, probability 0, space 0, times 0 [ 46.739616][ T811] CPU: 1 PID: 811 Comm: syz.1.144 Not tainted syzkaller #0 [ 46.746876][ T811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.756992][ T811] Call Trace: [ 46.760413][ T811] __dump_stack+0x21/0x24 [ 46.764771][ T811] dump_stack_lvl+0x1a7/0x208 [ 46.769486][ T811] ? thaw_kernel_threads+0x220/0x220 [ 46.774793][ T811] ? show_regs_print_info+0x18/0x18 [ 46.780102][ T811] ? mutex_trylock+0xb0/0xb0 [ 46.784711][ T811] dump_stack+0x15/0x1c [ 46.788891][ T811] should_fail+0x3ab/0x500 [ 46.793326][ T811] ? __alloc_disk_node+0x79/0x5b0 [ 46.798374][ T811] __should_failslab+0xa4/0xe0 [ 46.803159][ T811] should_failslab+0x9/0x20 [ 46.807694][ T811] kmem_cache_alloc_trace+0x3a/0x2e0 [ 46.812995][ T811] __alloc_disk_node+0x79/0x5b0 [ 46.817867][ T811] dm_create+0x523/0xdd0 [ 46.822130][ T811] dev_create+0x12e/0x2c0 [ 46.826477][ T811] ? list_devices+0x570/0x570 [ 46.831177][ T811] ? __kasan_check_write+0x14/0x20 [ 46.836313][ T811] ? _copy_from_user+0x95/0xd0 [ 46.841106][ T811] dm_ctl_ioctl+0x8ee/0xca0 [ 46.845629][ T811] ? list_devices+0x570/0x570 [ 46.850327][ T811] ? dm_poll+0x120/0x120 [ 46.854597][ T811] ? security_file_ioctl+0x84/0xa0 [ 46.859742][ T811] ? dm_poll+0x120/0x120 [ 46.864108][ T811] __se_sys_ioctl+0x121/0x1a0 [ 46.868819][ T811] __x64_sys_ioctl+0x7b/0x90 [ 46.873521][ T811] do_syscall_64+0x31/0x40 [ 46.877956][ T811] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 46.883877][ T811] RIP: 0033:0x7f49671a5159 [ 46.888316][ T811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.908072][ T811] RSP: 002b:00007f4965bfe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 46.916516][ T811] RAX: ffffffffffffffda RBX: 00007f496742cfa0 RCX: 00007f49671a5159 [ 46.924683][ T811] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 46.932689][ T811] RBP: 00007f496723c06b R08: 0000000000000000 R09: 0000000000000000 [ 46.940951][ T811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.948940][ T811] R13: 00007f496742d038 R14: 00007f496742cfa0 R15: 00007ffe803eb718 [ 46.959990][ T802] FS: 00007fe89b4186c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 46.969648][ T802] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.976410][ T802] CR2: 0000200000000000 CR3: 0000000127a4f000 CR4: 00000000003506a0 [ 46.989875][ T802] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.998042][ T802] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 47.006130][ T802] Call Trace: [ 47.009511][ T802] device_add_disk_no_queue_reg+0x21/0x30 [ 47.015862][ T802] dm_create+0x992/0xdd0 [ 47.020207][ T802] dev_create+0x12e/0x2c0 [ 47.024738][ T802] ? list_devices+0x570/0x570 [ 47.029484][ T802] ? __kasan_check_write+0x14/0x20 [ 47.035024][ T802] ? _copy_from_user+0x95/0xd0 [ 47.039869][ T802] dm_ctl_ioctl+0x8ee/0xca0 [ 47.044592][ T802] ? list_devices+0x570/0x570 [ 47.047166][ T24] kauditd_printk_skb: 15 callbacks suppressed [ 47.047212][ T24] audit: type=1326 audit(1789743080.810:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=818 comm="syz.4.147" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb907bd159 code=0x0 [ 47.049396][ T802] ? dm_poll+0x120/0x120 [ 47.106364][ T802] ? copy_pid_ns+0xe1/0x810 [ 47.111096][ T802] ? security_file_ioctl+0x84/0xa0 [ 47.116315][ T802] ? dm_poll+0x120/0x120 [ 47.120959][ T802] __se_sys_ioctl+0x121/0x1a0 [ 47.125758][ T802] __x64_sys_ioctl+0x7b/0x90 [ 47.130424][ T802] do_syscall_64+0x31/0x40 [ 47.135118][ T802] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 47.141554][ T802] RIP: 0033:0x7fe89c9bf159 [ 47.146003][ T802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.167244][ T802] RSP: 002b:00007fe89b418028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.176096][ T802] RAX: ffffffffffffffda RBX: 00007fe89cc46fa0 RCX: 00007fe89c9bf159 [ 47.184442][ T802] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 47.192643][ T802] RBP: 00007fe89ca5606b R08: 0000000000000000 R09: 0000000000000000 [ 47.200826][ T802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.208872][ T802] R13: 00007fe89cc47038 R14: 00007fe89cc46fa0 R15: 00007ffdb8bbd688 [ 47.217869][ T802] ---[ end trace 4bdfb001f704a8cb ]--- [ 47.373284][ T24] audit: type=1400 audit(1789743081.140:177): avc: denied { remount } for pid=838 comm="syz.2.154" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 47.944698][ T854] attempt to access beyond end of device [ 47.944698][ T854] loop2: rw=2049, want=250, limit=128 [ 47.978576][ T854] attempt to access beyond end of device [ 47.978576][ T854] loop2: rw=2049, want=144, limit=128 [ 47.989611][ T854] buffer_io_error: 5 callbacks suppressed [ 47.989632][ T854] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 48.140510][ T851] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.782489][ T845] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 48.826291][ T845] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 48.859835][ T845] F2FS-fs (loop0): invalid crc value [ 48.867346][ T845] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 48.937369][ T845] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 48.957830][ T845] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 49.133703][ T858] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 49.150553][ T858] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 49.160007][ T858] F2FS-fs (loop1): invalid crc value [ 49.167192][ T858] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 49.266605][ T858] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 49.274114][ T858] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 50.208494][ T281] attempt to access beyond end of device [ 50.208494][ T281] loop0: rw=2049, want=45104, limit=40427 [ 50.387391][ C0] print_req_error: 6 callbacks suppressed [ 50.387410][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.404190][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 50.412172][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.423164][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 50.431335][ T900] loop7: unable to read partition table [ 50.439365][ T900] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 50.452902][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.452915][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 50.520848][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 50.539144][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.550086][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 50.563723][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.574638][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 50.583080][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.594000][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 50.603713][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.614635][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 50.860225][ T911] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 50.881235][ T911] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.152970][ T925] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 51.456829][ T925] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 51.558503][ T927] attempt to access beyond end of device [ 51.558503][ T927] loop3: rw=2049, want=250, limit=128 [ 51.593047][ T927] attempt to access beyond end of device [ 51.593047][ T927] loop3: rw=2049, want=144, limit=128 [ 51.604064][ T927] Buffer I/O error on dev loop3, logical block 71, lost async page write [ 51.701777][ T24] audit: type=1400 audit(1789743085.470:178): avc: denied { read write } for pid=931 comm="syz.4.177" name="vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.767366][ T925] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 52.360717][ T925] System zones: 0-1, 3-36 [ 52.375865][ T925] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue [ 52.418143][ T24] audit: type=1400 audit(1789743085.490:179): avc: denied { open } for pid=931 comm="syz.4.177" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.442146][ T24] audit: type=1400 audit(1789743085.560:180): avc: denied { ioctl } for pid=931 comm="syz.4.177" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.591739][ T950] FAULT_INJECTION: forcing a failure. [ 52.591739][ T950] name failslab, interval 1, probability 0, space 0, times 0 [ 52.610891][ T950] CPU: 1 PID: 950 Comm: syz.2.182 Tainted: G W syzkaller #0 [ 52.619532][ T950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.629618][ T950] Call Trace: [ 52.632972][ T950] __dump_stack+0x21/0x24 [ 52.637334][ T950] dump_stack_lvl+0x1a7/0x208 [ 52.642046][ T950] ? show_regs_print_info+0x18/0x18 [ 52.647270][ T950] dump_stack+0x15/0x1c [ 52.651451][ T950] should_fail+0x3ab/0x500 [ 52.655881][ T950] ? dup_fd+0x78/0xab0 [ 52.659968][ T950] __should_failslab+0xa4/0xe0 [ 52.664763][ T950] should_failslab+0x9/0x20 [ 52.669321][ T950] kmem_cache_alloc+0x3d/0x2d0 [ 52.674109][ T950] dup_fd+0x78/0xab0 [ 52.678027][ T950] copy_files+0xcf/0x170 [ 52.682287][ T950] ? dup_task_struct+0xbd0/0xbd0 [ 52.687251][ T950] ? security_task_alloc+0xfb/0x130 [ 52.692467][ T950] copy_process+0x12d6/0x3320 [ 52.697251][ T950] ? __pidfd_prepare+0x150/0x150 [ 52.702200][ T950] ? fput_many+0x15a/0x1a0 [ 52.706623][ T950] kernel_clone+0x233/0x950 [ 52.711141][ T950] ? __se_sys_process_madvise+0x430/0x4e0 [ 52.716865][ T950] ? create_io_thread+0x170/0x170 [ 52.721896][ T950] __x64_sys_clone+0x198/0x210 [ 52.726663][ T950] ? __ia32_sys_vfork+0x130/0x130 [ 52.731694][ T950] ? switch_fpu_return+0x19c/0x330 [ 52.736814][ T950] ? __kasan_check_read+0x11/0x20 [ 52.741842][ T950] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 52.747481][ T950] do_syscall_64+0x31/0x40 [ 52.751925][ T950] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 52.757821][ T950] RIP: 0033:0x7fe89c9bf159 [ 52.762241][ T950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.781856][ T950] RSP: 002b:00007fe89b3f6fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 52.790290][ T950] RAX: ffffffffffffffda RBX: 00007fe89cc47090 RCX: 00007fe89c9bf159 [ 52.798269][ T950] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.806247][ T950] RBP: 00007fe89ca5606b R08: 0000000000000000 R09: 0000000000000000 [ 52.814230][ T950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.822209][ T950] R13: 00007fe89cc47128 R14: 00007fe89cc47090 R15: 00007ffdb8bbd688 [ 53.112574][ T942] attempt to access beyond end of device [ 53.112574][ T942] loop4: rw=2049, want=250, limit=128 [ 53.125142][ T942] attempt to access beyond end of device [ 53.125142][ T942] loop4: rw=2049, want=144, limit=128 [ 53.140646][ T942] Buffer I/O error on dev loop4, logical block 71, lost async page write [ 53.164247][ T488] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 53.177379][ T960] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.386290][ T5] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 53.430639][ T488] usb 2-1: Using ep0 maxpacket: 16 [ 53.564977][ T488] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.610877][ T488] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.630661][ T5] usb 4-1: Using ep0 maxpacket: 16 [ 53.750802][ T5] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.770522][ T5] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.780827][ T488] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 53.790675][ T488] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.799399][ T488] usb 2-1: Product: syz [ 53.804735][ T488] usb 2-1: Manufacturer: syz [ 53.809430][ T488] usb 2-1: SerialNumber: syz [ 53.950689][ T5] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 53.969983][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.992293][ T5] usb 4-1: Product: syz [ 53.996672][ T5] usb 4-1: Manufacturer: syz [ 54.010659][ T5] usb 4-1: SerialNumber: syz [ 54.095966][ T972] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 54.110671][ T972] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 54.125929][ T972] F2FS-fs (loop2): invalid crc value [ 54.156275][ T972] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 54.190702][ T488] usb 2-1: 0:2 : does not exist [ 54.208422][ T488] usb 2-1: USB disconnect, device number 3 [ 54.245350][ T972] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 54.253178][ T972] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 54.287701][ T982] FAULT_INJECTION: forcing a failure. [ 54.287701][ T982] name failslab, interval 1, probability 0, space 0, times 0 [ 54.305197][ T982] CPU: 0 PID: 982 Comm: syz.4.190 Tainted: G W syzkaller #0 [ 54.313838][ T982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.324523][ T982] Call Trace: [ 54.327844][ T982] __dump_stack+0x21/0x24 [ 54.332365][ T982] dump_stack_lvl+0x1a7/0x208 [ 54.337070][ T982] ? show_regs_print_info+0x18/0x18 [ 54.342319][ T982] ? _raw_spin_lock+0x94/0xf0 [ 54.347010][ T982] ? dup_fd+0x4f1/0xab0 [ 54.351214][ T982] dump_stack+0x15/0x1c [ 54.355393][ T982] should_fail+0x3ab/0x500 [ 54.359828][ T982] ? copy_fs_struct+0x4c/0x220 [ 54.364610][ T982] __should_failslab+0xa4/0xe0 [ 54.369398][ T982] should_failslab+0x9/0x20 [ 54.373919][ T982] kmem_cache_alloc+0x3d/0x2d0 [ 54.378698][ T982] ? copy_files+0xdc/0x170 [ 54.383127][ T982] copy_fs_struct+0x4c/0x220 [ 54.387774][ T982] copy_fs+0x6f/0x140 [ 54.391790][ T982] copy_process+0x1302/0x3320 [ 54.396504][ T982] ? __pidfd_prepare+0x150/0x150 [ 54.401476][ T982] ? fput_many+0x15a/0x1a0 [ 54.405909][ T982] kernel_clone+0x233/0x950 [ 54.410457][ T982] ? __se_sys_process_madvise+0x430/0x4e0 [ 54.416190][ T982] ? create_io_thread+0x170/0x170 [ 54.421232][ T982] __x64_sys_clone+0x198/0x210 [ 54.426015][ T982] ? __ia32_sys_vfork+0x130/0x130 [ 54.431067][ T982] ? switch_fpu_return+0x19c/0x330 [ 54.436369][ T982] ? __kasan_check_read+0x11/0x20 [ 54.441411][ T982] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 54.447070][ T982] do_syscall_64+0x31/0x40 [ 54.451678][ T982] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 54.457666][ T982] RIP: 0033:0x7fbb907bd159 [ 54.462095][ T982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.481708][ T982] RSP: 002b:00007fbb8f215fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 54.490133][ T982] RAX: ffffffffffffffda RBX: 00007fbb90a44fa0 RCX: 00007fbb907bd159 [ 54.498235][ T982] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 54.506233][ T982] RBP: 00007fbb9085406b R08: 0000000000000000 R09: 0000000000000000 [ 54.514222][ T982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.522298][ T982] R13: 00007fbb90a45038 R14: 00007fbb90a44fa0 R15: 00007ffeaf973e28 [ 54.550718][ T5] usb 4-1: 0:2 : does not exist [ 54.570738][ T5] usb 4-1: USB disconnect, device number 3 [ 54.604597][ T982] FAULT_INJECTION: forcing a failure. [ 54.604597][ T982] name failslab, interval 1, probability 0, space 0, times 0 [ 54.618874][ T982] CPU: 1 PID: 982 Comm: syz.4.190 Tainted: G W syzkaller #0 [ 54.627505][ T982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.637673][ T982] Call Trace: [ 54.640995][ T982] __dump_stack+0x21/0x24 [ 54.645349][ T982] dump_stack_lvl+0x1a7/0x208 [ 54.650051][ T982] ? show_regs_print_info+0x18/0x18 [ 54.655274][ T982] dump_stack+0x15/0x1c [ 54.659450][ T982] should_fail+0x3ab/0x500 [ 54.663889][ T982] ? security_inode_alloc+0x33/0x110 [ 54.669297][ T982] __should_failslab+0xa4/0xe0 [ 54.674177][ T982] should_failslab+0x9/0x20 [ 54.678698][ T982] kmem_cache_alloc+0x3d/0x2d0 [ 54.683494][ T982] security_inode_alloc+0x33/0x110 [ 54.688656][ T982] inode_init_always+0x725/0x9c0 [ 54.693617][ T982] ? dax_init_fs_context+0x60/0x60 [ 54.698758][ T982] ? write_cache_store+0x1a0/0x1a0 [ 54.703899][ T982] iget5_locked+0xe0/0x270 [ 54.708346][ T982] ? dax_test+0x90/0x90 [ 54.712535][ T982] alloc_dax+0x14e/0x560 [ 54.716812][ T982] ? run_dax+0x30/0x30 [ 54.720905][ T982] ? device_initialize+0x1d6/0x410 [ 54.726049][ T982] ? __kasan_check_write+0x14/0x20 [ 54.731179][ T982] dm_create+0x8b5/0xdd0 [ 54.735441][ T982] dev_create+0x12e/0x2c0 [ 54.739783][ T982] ? list_devices+0x570/0x570 [ 54.744470][ T982] ? __kasan_check_write+0x14/0x20 [ 54.749604][ T982] ? _copy_from_user+0x95/0xd0 [ 54.754380][ T982] dm_ctl_ioctl+0x8ee/0xca0 [ 54.758898][ T982] ? list_devices+0x570/0x570 [ 54.763614][ T982] ? dm_poll+0x120/0x120 [ 54.767862][ T982] ? copy_pid_ns+0xe1/0x810 [ 54.772381][ T982] ? security_file_ioctl+0x84/0xa0 [ 54.777501][ T982] ? dm_poll+0x120/0x120 [ 54.781757][ T982] __se_sys_ioctl+0x121/0x1a0 [ 54.786441][ T982] __x64_sys_ioctl+0x7b/0x90 [ 54.791035][ T982] do_syscall_64+0x31/0x40 [ 54.795543][ T982] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 54.801449][ T982] RIP: 0033:0x7fbb907bd159 [ 54.805959][ T982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.825659][ T982] RSP: 002b:00007fbb8f216028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.834086][ T982] RAX: ffffffffffffffda RBX: 00007fbb90a44fa0 RCX: 00007fbb907bd159 [ 54.842070][ T982] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 54.850053][ T982] RBP: 00007fbb9085406b R08: 0000000000000000 R09: 0000000000000000 [ 54.858027][ T982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.866103][ T982] R13: 00007fbb90a45038 R14: 00007fbb90a44fa0 R15: 00007ffeaf973e28 [ 54.874405][ T982] ------------[ cut here ]------------ [ 54.879893][ T982] kernfs: can not remove 'events', no directory [ 54.887785][ T982] WARNING: CPU: 0 PID: 982 at fs/kernfs/dir.c:1588 kernfs_remove_by_name_ns+0x103/0x160 [ 54.898120][ T982] Modules linked in: [ 54.902965][ T982] CPU: 0 PID: 982 Comm: syz.4.190 Tainted: G W syzkaller #0 [ 54.911763][ T982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.924265][ T982] RIP: 0010:kernfs_remove_by_name_ns+0x103/0x160 [ 54.930997][ T982] Code: 06 4c 89 f7 e8 fe ee ff ff 4c 89 f7 e8 86 af ff ff 45 31 f6 eb 29 e8 9c 22 9d ff 48 c7 c7 80 3a 2b 85 4c 89 f6 e8 9d f4 b1 02 <0f> 0b 41 be fe ff ff ff eb 13 e8 7e 22 9d ff 41 be fe ff ff ff 48 [ 54.951169][ T982] RSP: 0018:ffffc90000ebfa10 EFLAGS: 00010246 [ 54.957519][ T982] RAX: 6e958981164d1300 RBX: 0000000000000001 RCX: 0000000000080000 [ 54.966015][ T982] RDX: ffffc900034d3000 RSI: 0000000000026759 RDI: 000000000002675a [ 54.979249][ T982] RBP: ffffc90000ebfa38 R08: ffff8881f7052fbf R09: 1ffff1103ee0a5f7 [ 54.988555][ T982] R10: dffffc0000000000 R11: ffffed103ee0a5f8 R12: 0000000000000000 [ 54.996757][ T982] R13: ffffffff8674ece0 R14: ffffffff853fc420 R15: 0000000000000000 [ 55.004998][ T982] FS: 00007fbb8f2166c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 55.016550][ T982] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.026530][ T982] CR2: 00007fe89ca0c840 CR3: 000000012990a000 CR4: 00000000003526b0 [ 55.034875][ T982] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.054996][ T982] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.078480][ T982] Call Trace: [ 55.086007][ T982] sysfs_remove_files+0xa4/0x100 [ 55.163191][ T24] audit: type=1326 audit(1789743088.930:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=994 comm="syz.0.193" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b0ae00159 code=0x0 [ 55.188841][ T997] FAULT_INJECTION: forcing a failure. [ 55.188841][ T997] name failslab, interval 1, probability 0, space 0, times 0 [ 55.210771][ T982] del_gendisk+0x254/0xa10 [ 55.225500][ T997] CPU: 0 PID: 997 Comm: syz.1.194 Tainted: G W syzkaller #0 [ 55.234132][ T997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.244207][ T997] Call Trace: [ 55.247525][ T997] __dump_stack+0x21/0x24 [ 55.251874][ T997] dump_stack_lvl+0x1a7/0x208 [ 55.256564][ T997] ? thaw_kernel_threads+0x220/0x220 [ 55.261861][ T997] ? show_regs_print_info+0x18/0x18 [ 55.267071][ T997] dump_stack+0x15/0x1c [ 55.271251][ T997] should_fail+0x3ab/0x500 [ 55.275689][ T997] ? alloc_fdtable+0xac/0x2a0 [ 55.280439][ T997] __should_failslab+0xa4/0xe0 [ 55.285218][ T997] should_failslab+0x9/0x20 [ 55.289746][ T997] kmem_cache_alloc_trace+0x3a/0x2e0 [ 55.295044][ T997] alloc_fdtable+0xac/0x2a0 [ 55.299667][ T997] dup_fd+0x7a2/0xab0 [ 55.303668][ T997] copy_files+0xcf/0x170 [ 55.307924][ T997] ? dup_task_struct+0xbd0/0xbd0 [ 55.312880][ T997] ? security_task_alloc+0xfb/0x130 [ 55.318087][ T997] copy_process+0x12d6/0x3320 [ 55.322804][ T997] ? __pidfd_prepare+0x150/0x150 [ 55.327750][ T997] ? fput_many+0x15a/0x1a0 [ 55.332185][ T997] kernel_clone+0x233/0x950 [ 55.336700][ T997] ? __se_sys_process_madvise+0x430/0x4e0 [ 55.342429][ T997] ? create_io_thread+0x170/0x170 [ 55.347467][ T997] __x64_sys_clone+0x198/0x210 [ 55.352242][ T997] ? __ia32_sys_vfork+0x130/0x130 [ 55.357285][ T997] ? switch_fpu_return+0x19c/0x330 [ 55.362433][ T997] ? __kasan_check_read+0x11/0x20 [ 55.367491][ T997] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 55.373136][ T997] do_syscall_64+0x31/0x40 [ 55.377586][ T997] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 55.383493][ T997] RIP: 0033:0x7f49671a5159 [ 55.387937][ T997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.407564][ T997] RSP: 002b:00007f4965bfdfd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 55.415998][ T997] RAX: ffffffffffffffda RBX: 00007f496742cfa0 RCX: 00007f49671a5159 [ 55.424022][ T997] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.432014][ T997] RBP: 00007f496723c06b R08: 0000000000000000 R09: 0000000000000000 [ 55.440009][ T997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.447995][ T997] R13: 00007f496742d038 R14: 00007f496742cfa0 R15: 00007ffe803eb718 [ 55.481067][ T982] cleanup_mapped_device+0x16c/0x270 [ 55.486424][ T982] dm_create+0xb03/0xdd0 [ 55.506456][ T982] dev_create+0x12e/0x2c0 [ 55.530778][ T982] ? list_devices+0x570/0x570 [ 55.555791][ T982] ? __kasan_check_write+0x14/0x20 [ 55.578186][ T982] ? _copy_from_user+0x95/0xd0 [ 55.610760][ T982] dm_ctl_ioctl+0x8ee/0xca0 [ 55.615480][ T982] ? list_devices+0x570/0x570 [ 55.620178][ T982] ? dm_poll+0x120/0x120 [ 55.653790][ T982] ? copy_pid_ns+0xe1/0x810 [ 55.663904][ T982] ? security_file_ioctl+0x84/0xa0 [ 55.679232][ T982] ? dm_poll+0x120/0x120 [ 55.684636][ T982] __se_sys_ioctl+0x121/0x1a0 [ 55.693684][ T982] __x64_sys_ioctl+0x7b/0x90 [ 55.698383][ T982] do_syscall_64+0x31/0x40 [ 55.703097][ T982] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 55.709092][ T982] RIP: 0033:0x7fbb907bd159 [ 55.713781][ T982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.733785][ T982] RSP: 002b:00007fbb8f216028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.742885][ T982] RAX: ffffffffffffffda RBX: 00007fbb90a44fa0 RCX: 00007fbb907bd159 [ 55.751181][ T982] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 55.759232][ T982] RBP: 00007fbb9085406b R08: 0000000000000000 R09: 0000000000000000 [ 55.767824][ T982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.776091][ T982] R13: 00007fbb90a45038 R14: 00007fbb90a44fa0 R15: 00007ffeaf973e28 [ 55.784430][ T982] ---[ end trace 4bdfb001f704a8cc ]--- [ 55.790298][ T982] ------------[ cut here ]------------ [ 55.796079][ T982] kernfs: can not remove 'events_async', no directory [ 55.803211][ T982] WARNING: CPU: 0 PID: 982 at fs/kernfs/dir.c:1588 kernfs_remove_by_name_ns+0x103/0x160 [ 55.813208][ T982] Modules linked in: [ 55.817174][ T982] CPU: 0 PID: 982 Comm: syz.4.190 Tainted: G W syzkaller #0 [ 55.826155][ T982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.836532][ T982] RIP: 0010:kernfs_remove_by_name_ns+0x103/0x160 [ 55.843186][ T982] Code: 06 4c 89 f7 e8 fe ee ff ff 4c 89 f7 e8 86 af ff ff 45 31 f6 eb 29 e8 9c 22 9d ff 48 c7 c7 80 3a 2b 85 4c 89 f6 e8 9d f4 b1 02 <0f> 0b 41 be fe ff ff ff eb 13 e8 7e 22 9d ff 41 be fe ff ff ff 48 [ 55.864122][ T982] RSP: 0018:ffffc90000ebfa10 EFLAGS: 00010246 [ 55.870574][ T997] FAULT_INJECTION: forcing a failure. [ 55.870574][ T997] name failslab, interval 1, probability 0, space 0, times 0 [ 55.870594][ T997] CPU: 1 PID: 997 Comm: syz.1.194 Tainted: G W syzkaller #0 [ 55.870601][ T997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.870607][ T997] Call Trace: [ 55.870621][ T997] __dump_stack+0x21/0x24 [ 55.870631][ T997] dump_stack_lvl+0x1a7/0x208 [ 55.870645][ T997] ? thaw_kernel_threads+0x220/0x220 [ 55.870656][ T997] ? show_regs_print_info+0x18/0x18 [ 55.870667][ T997] ? pointer+0xc40/0xc40 [ 55.870677][ T997] dump_stack+0x15/0x1c [ 55.870689][ T997] should_fail+0x3ab/0x500 [ 55.870701][ T997] ? alloc_dax+0xbf/0x560 [ 55.870716][ T997] __should_failslab+0xa4/0xe0 [ 55.870730][ T997] should_failslab+0x9/0x20 [ 55.870739][ T997] __kmalloc_track_caller+0x5f/0x310 [ 55.870781][ T997] kstrdup+0x36/0x70 [ 55.892090][ T982] RAX: 6e958981164d1300 RBX: 0000000000000002 RCX: 0000000000080000 [ 55.902021][ T997] alloc_dax+0xbf/0x560 [ 55.902035][ T997] ? run_dax+0x30/0x30 [ 55.902048][ T997] ? device_initialize+0x1d6/0x410 [ 55.902063][ T997] ? __kasan_check_write+0x14/0x20 [ 55.902113][ T997] dm_create+0x8b5/0xdd0 [ 55.906534][ T982] RDX: ffffc900034d3000 RSI: 0000000000050ebe RDI: 0000000000050ebf [ 55.909720][ T997] dev_create+0x12e/0x2c0 [ 55.909767][ T997] ? list_devices+0x570/0x570 [ 55.915037][ T347] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 55.919796][ T997] ? __kasan_check_write+0x14/0x20 [ 55.919810][ T997] ? _copy_from_user+0x95/0xd0 [ 55.919858][ T997] dm_ctl_ioctl+0x8ee/0xca0 [ 55.925719][ T982] RBP: ffffc90000ebfa38 R08: ffff8881f7052fbf R09: 1ffff1103ee0a5f7 [ 55.929295][ T997] ? list_devices+0x570/0x570 [ 55.929334][ T997] ? dm_poll+0x120/0x120 [ 55.934576][ T982] R10: dffffc0000000000 R11: ffffed103ee0a5f8 R12: 0000000000000000 [ 55.937908][ T997] ? security_file_ioctl+0x84/0xa0 [ 55.937954][ T997] ? dm_poll+0x120/0x120 [ 55.943245][ T982] R13: ffffffff8674ece0 R14: ffffffff853fc500 R15: 0000000000000000 [ 55.947030][ T997] __se_sys_ioctl+0x121/0x1a0 [ 55.947077][ T997] __x64_sys_ioctl+0x7b/0x90 [ 55.952176][ T982] FS: 00007fbb8f2166c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 55.956870][ T997] do_syscall_64+0x31/0x40 [ 55.956885][ T997] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 55.956932][ T997] RIP: 0033:0x7f49671a5159 [ 55.962117][ T982] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.968794][ T997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.968824][ T997] RSP: 002b:00007f4965bfe028 EFLAGS: 00000246 [ 55.973646][ T982] CR2: 00007fdcc0329c2e CR3: 000000012990a000 CR4: 00000000003506b0 [ 55.977046][ T997] ORIG_RAX: 0000000000000010 [ 55.977056][ T997] RAX: ffffffffffffffda RBX: 00007f496742cfa0 RCX: 00007f49671a5159 [ 55.977094][ T997] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 55.983118][ T982] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.987302][ T997] RBP: 00007f496723c06b R08: 0000000000000000 R09: 0000000000000000 [ 55.987310][ T997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.987320][ T997] R13: 00007f496742d038 R14: 00007f496742cfa0 R15: 00007ffe803eb718 [ 55.988538][ T997] ------------[ cut here ]------------ [ 56.030805][ T982] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.031589][ T997] kernfs: can not remove 'events', no directory [ 56.060860][ T982] Call Trace: [ 56.062497][ T997] WARNING: CPU: 1 PID: 997 at fs/kernfs/dir.c:1588 kernfs_remove_by_name_ns+0x103/0x160 [ 56.065813][ T982] sysfs_remove_files+0xa4/0x100 [ 56.065871][ T982] del_gendisk+0x254/0xa10 [ 56.078754][ T997] Modules linked in: [ 56.120815][ T982] cleanup_mapped_device+0x16c/0x270 [ 56.164508][ T997] [ 56.190738][ T347] usb 4-1: Using ep0 maxpacket: 16 [ 56.199503][ T997] CPU: 1 PID: 997 Comm: syz.1.194 Tainted: G W syzkaller #0 [ 56.210890][ T982] dm_create+0xb03/0xdd0 [ 56.214944][ T997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.230945][ T982] dev_create+0x12e/0x2c0 [ 56.234326][ T997] RIP: 0010:kernfs_remove_by_name_ns+0x103/0x160 [ 56.239117][ T982] ? list_devices+0x570/0x570 [ 56.245421][ T997] Code: 06 4c 89 f7 e8 fe ee ff ff 4c 89 f7 e8 86 af ff ff 45 31 f6 eb 29 e8 9c 22 9d ff 48 c7 c7 80 3a 2b 85 4c 89 f6 e8 9d f4 b1 02 <0f> 0b 41 be fe ff ff ff eb 13 e8 7e 22 9d ff 41 be fe ff ff ff 48 [ 56.260846][ T982] ? __kasan_check_write+0x14/0x20 [ 56.294174][ T997] RSP: 0018:ffffc90000e87a10 EFLAGS: 00010246 [ 56.301799][ T982] ? _copy_from_user+0x95/0xd0 [ 56.335038][ T982] dm_ctl_ioctl+0x8ee/0xca0 [ 56.339623][ T982] ? list_devices+0x570/0x570 [ 56.344601][ T982] ? dm_poll+0x120/0x120 [ 56.348921][ T982] ? copy_pid_ns+0xe1/0x810 [ 56.355959][ T982] ? security_file_ioctl+0x84/0xa0 [ 56.370737][ T347] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.371619][ T997] [ 56.385002][ T982] ? dm_poll+0x120/0x120 [ 56.389287][ T982] __se_sys_ioctl+0x121/0x1a0 [ 56.394300][ T347] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.401124][ T997] RAX: 57c83949e99efe00 RBX: 0000000000000001 RCX: 0000000000080000 [ 56.403774][ T982] __x64_sys_ioctl+0x7b/0x90 [ 56.420656][ T997] RDX: ffffc900018cc000 RSI: 000000000006116a RDI: 000000000006116b [ 56.438962][ T997] RBP: ffffc90000e87a38 R08: ffff8881f7152fbf R09: 1ffff1103ee2a5f7 [ 56.447210][ T982] do_syscall_64+0x31/0x40 [ 56.460692][ T997] R10: dffffc0000000000 R11: ffffed103ee2a5f8 R12: 0000000000000000 [ 56.461562][ T982] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 56.471541][ T997] R13: ffffffff8674ece0 R14: ffffffff853fc420 R15: 0000000000000000 [ 56.482881][ T982] RIP: 0033:0x7fbb907bd159 [ 56.490985][ T982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.510664][ T997] FS: 00007f4965bfe6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 56.510673][ T997] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.510682][ T997] CR2: 00007fe89d7766c8 CR3: 000000011ab3c000 CR4: 00000000003526a0 [ 56.510694][ T997] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.510735][ T997] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.547221][ T982] RSP: 002b:00007fbb8f216028 EFLAGS: 00000246 [ 56.551781][ T997] Call Trace: [ 56.555515][ T982] ORIG_RAX: 0000000000000010 [ 56.558192][ T997] sysfs_remove_files+0xa4/0x100 [ 56.571004][ T347] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 56.571292][ T997] del_gendisk+0x254/0xa10 [ 56.580351][ T982] RAX: ffffffffffffffda RBX: 00007fbb90a44fa0 RCX: 00007fbb907bd159 [ 56.584600][ T997] cleanup_mapped_device+0x16c/0x270 [ 56.597037][ T347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.606987][ T997] dm_create+0xb03/0xdd0 [ 56.616253][ T347] usb 4-1: Product: syz [ 56.619494][ T997] dev_create+0x12e/0x2c0 [ 56.620498][ T347] usb 4-1: Manufacturer: syz [ 56.624938][ T997] ? list_devices+0x570/0x570 [ 56.630169][ T982] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 56.655688][ T347] usb 4-1: SerialNumber: syz [ 56.662836][ T982] RBP: 00007fbb9085406b R08: 0000000000000000 R09: 0000000000000000 [ 56.668157][ T997] ? __kasan_check_write+0x14/0x20 [ 56.676101][ T997] ? _copy_from_user+0x95/0xd0 [ 56.684466][ T997] dm_ctl_ioctl+0x8ee/0xca0 [ 56.689153][ T997] ? list_devices+0x570/0x570 [ 56.689609][ T982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.709402][ T997] ? dm_poll+0x120/0x120 [ 56.713915][ T997] ? security_file_ioctl+0x84/0xa0 [ 56.719079][ T997] ? dm_poll+0x120/0x120 [ 56.723881][ T982] R13: 00007fbb90a45038 R14: 00007fbb90a44fa0 R15: 00007ffeaf973e28 [ 56.744021][ T982] ---[ end trace 4bdfb001f704a8cd ]--- [ 56.750657][ T997] __se_sys_ioctl+0x121/0x1a0 [ 56.756660][ T982] ------------[ cut here ]------------ [ 56.760954][ T997] __x64_sys_ioctl+0x7b/0x90 [ 56.769439][ T982] kernfs: can not remove 'events_poll_msecs', no directory [ 56.776950][ T997] do_syscall_64+0x31/0x40 [ 56.784795][ T997] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 56.790938][ T997] RIP: 0033:0x7f49671a5159 [ 56.792141][ T982] WARNING: CPU: 0 PID: 982 at fs/kernfs/dir.c:1588 kernfs_remove_by_name_ns+0x103/0x160 [ 56.815431][ T982] Modules linked in: [ 56.819399][ T982] CPU: 0 PID: 982 Comm: syz.4.190 Tainted: G W syzkaller #0 [ 56.841176][ T982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.861619][ T982] RIP: 0010:kernfs_remove_by_name_ns+0x103/0x160 [ 56.877881][ T982] Code: 06 4c 89 f7 e8 fe ee ff ff 4c 89 f7 e8 86 af ff ff 45 31 f6 eb 29 e8 9c 22 9d ff 48 c7 c7 80 3a 2b 85 4c 89 f6 e8 9d f4 b1 02 <0f> 0b 41 be fe ff ff ff eb 13 e8 7e 22 9d ff 41 be fe ff ff ff 48 [ 56.905295][ T997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.918487][ T982] RSP: 0018:ffffc90000ebfa10 EFLAGS: 00010246 [ 56.925434][ T997] RSP: 002b:00007f4965bfe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.940079][ T997] RAX: ffffffffffffffda RBX: 00007f496742cfa0 RCX: 00007f49671a5159 [ 56.948869][ T997] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 56.955099][ T982] [ 56.956936][ T997] RBP: 00007f496723c06b R08: 0000000000000000 R09: 0000000000000000 [ 56.964424][ T982] RAX: 6e958981164d1300 RBX: 0000000000000003 RCX: 0000000000080000 [ 56.967300][ T997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.982811][ T982] RDX: ffffc900034d3000 RSI: 000000000007ffff RDI: 0000000000080000 [ 56.983335][ T997] R13: 00007f496742d038 R14: 00007f496742cfa0 R15: 00007ffe803eb718 [ 56.999289][ T997] ---[ end trace 4bdfb001f704a8ce ]--- [ 57.004940][ T982] RBP: ffffc90000ebfa38 R08: ffff8881f7052fbf R09: 1ffff1103ee0a5f7 [ 57.005359][ T997] ------------[ cut here ]------------ [ 57.019190][ T347] usb 4-1: 0:2 : does not exist [ 57.024383][ T982] R10: dffffc0000000000 R11: ffffed103ee0a5f8 R12: 0000000000000000 [ 57.028099][ T997] kernfs: can not remove 'events_async', no directory [ 57.041740][ T982] R13: ffffffff8674ece0 R14: ffffffff853fc560 R15: 0000000000000000 [ 57.044351][ T347] usb 4-1: USB disconnect, device number 4 [ 57.081492][ T997] WARNING: CPU: 0 PID: 997 at fs/kernfs/dir.c:1588 kernfs_remove_by_name_ns+0x103/0x160 [ 57.097162][ T982] FS: 00007fbb8f2166c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 57.102876][ T997] Modules linked in: [ 57.114135][ T997] CPU: 0 PID: 997 Comm: syz.1.194 Tainted: G W syzkaller #0 [ 57.122898][ T982] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.125427][ T997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.140209][ T997] RIP: 0010:kernfs_remove_by_name_ns+0x103/0x160 [ 57.146677][ T982] CR2: 00007fe89b3f6ff8 CR3: 000000012990a000 CR4: 00000000003526a0 [ 57.147150][ T997] Code: 06 4c 89 f7 e8 fe ee ff ff 4c 89 f7 e8 86 af ff ff 45 31 f6 eb 29 e8 9c 22 9d ff 48 c7 c7 80 3a 2b 85 4c 89 f6 e8 9d f4 b1 02 <0f> 0b 41 be fe ff ff ff eb 13 e8 7e 22 9d ff 41 be fe ff ff ff 48 [ 57.175417][ T997] RSP: 0018:ffffc90000e87a10 EFLAGS: 00010246 [ 57.181638][ T982] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.190159][ T997] RAX: 57c83949e99efe00 RBX: 0000000000000002 RCX: 0000000000080000 [ 57.198459][ T982] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.198922][ T997] RDX: ffffc900018cc000 RSI: 000000000007ffff RDI: 0000000000080000 [ 57.215304][ T997] RBP: ffffc90000e87a38 R08: ffff8881f7052fbf R09: 1ffff1103ee0a5f7 [ 57.223414][ T982] Call Trace: [ 57.224020][ T997] R10: dffffc0000000000 R11: ffffed103ee0a5f8 R12: 0000000000000000 [ 57.234921][ T982] sysfs_remove_files+0xa4/0x100 [ 57.235521][ T997] R13: ffffffff8674ece0 R14: ffffffff853fc500 R15: 0000000000000000 [ 57.248442][ T997] FS: 00007f4965bfe6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 57.257517][ T982] del_gendisk+0x254/0xa10 [ 57.257874][ T997] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.268647][ T982] cleanup_mapped_device+0x16c/0x270 [ 57.269196][ T997] CR2: 0000001b2e715ff8 CR3: 000000011ab3c000 CR4: 00000000003526b0 [ 57.282769][ T997] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.288052][ T982] dm_create+0xb03/0xdd0 [ 57.295138][ T982] dev_create+0x12e/0x2c0 [ 57.300765][ T997] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.313236][ T982] ? list_devices+0x570/0x570 [ 57.318859][ T997] Call Trace: [ 57.322649][ T997] sysfs_remove_files+0xa4/0x100 [ 57.327790][ T997] del_gendisk+0x254/0xa10 [ 57.328199][ T982] ? __kasan_check_write+0x14/0x20 [ 57.337452][ T982] ? _copy_from_user+0x95/0xd0 [ 57.344459][ T303] udevd[303]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.348266][ T997] cleanup_mapped_device+0x16c/0x270 [ 57.365725][ T982] dm_ctl_ioctl+0x8ee/0xca0 [ 57.370335][ T982] ? list_devices+0x570/0x570 [ 57.375306][ T997] dm_create+0xb03/0xdd0 [ 57.384577][ T982] ? dm_poll+0x120/0x120 [ 57.389992][ T982] ? copy_pid_ns+0xe1/0x810 [ 57.395075][ T982] ? security_file_ioctl+0x84/0xa0 [ 57.401737][ T997] dev_create+0x12e/0x2c0 [ 57.406225][ T997] ? list_devices+0x570/0x570 [ 57.412107][ T997] ? __kasan_check_write+0x14/0x20 [ 57.422447][ T982] ? dm_poll+0x120/0x120 [ 57.427021][ T982] __se_sys_ioctl+0x121/0x1a0 [ 57.431894][ T982] __x64_sys_ioctl+0x7b/0x90 [ 57.436528][ T997] ? _copy_from_user+0x95/0xd0 [ 57.436572][ T997] dm_ctl_ioctl+0x8ee/0xca0 [ 57.446084][ T982] do_syscall_64+0x31/0x40 [ 57.448551][ T997] ? list_devices+0x570/0x570 [ 57.455385][ T982] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 57.455933][ T997] ? dm_poll+0x120/0x120 [ 57.466035][ T982] RIP: 0033:0x7fbb907bd159 [ 57.468384][ T997] ? security_file_ioctl+0x84/0xa0 [ 57.476396][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.477049][ T997] ? dm_poll+0x120/0x120 [ 57.487399][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 57.499742][ T982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.499813][ T997] __se_sys_ioctl+0x121/0x1a0 [ 57.524527][ T982] RSP: 002b:00007fbb8f216028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.533196][ T997] __x64_sys_ioctl+0x7b/0x90 [ 57.533612][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.548805][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 57.556945][ T982] RAX: ffffffffffffffda RBX: 00007fbb90a44fa0 RCX: 00007fbb907bd159 [ 57.557633][ T997] do_syscall_64+0x31/0x40 [ 57.569783][ T997] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 57.576036][ T997] RIP: 0033:0x7f49671a5159 [ 57.579039][ T1020] loop7: unable to read partition table [ 57.586357][ T982] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 57.589471][ T997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.614630][ T982] RBP: 00007fbb9085406b R08: 0000000000000000 R09: 0000000000000000 [ 57.614916][ T1020] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 57.651801][ T997] RSP: 002b:00007f4965bfe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.660250][ T997] RAX: ffffffffffffffda RBX: 00007f496742cfa0 RCX: 00007f49671a5159 [ 57.669518][ T997] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 57.677548][ T997] RBP: 00007f496723c06b R08: 0000000000000000 R09: 0000000000000000 [ 57.685876][ T982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.695978][ T997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.704261][ T982] R13: 00007fbb90a45038 R14: 00007fbb90a44fa0 R15: 00007ffeaf973e28 [ 57.712611][ T997] R13: 00007f496742d038 R14: 00007f496742cfa0 R15: 00007ffe803eb718 [ 57.734966][ T982] ---[ end trace 4bdfb001f704a8cf ]--- [ 57.743004][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 57.754722][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.765633][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 57.774382][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.785317][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 57.793600][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.804672][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 57.815451][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.826385][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 57.834661][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.845553][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 57.855934][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.867100][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 57.875606][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.886527][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 57.894768][ T95] loop7: unable to read partition table [ 57.912677][ T982] ------------[ cut here ]------------ [ 57.919334][ T997] ---[ end trace 4bdfb001f704a8d0 ]--- [ 57.927452][ T982] kernfs: can not remove 'bdi', no directory [ 57.933667][ T997] ------------[ cut here ]------------ [ 57.939146][ T997] kernfs: can not remove 'events_poll_msecs', no directory [ 57.946691][ T982] WARNING: CPU: 0 PID: 982 at fs/kernfs/dir.c:1588 kernfs_remove_by_name_ns+0x103/0x160 [ 57.949088][ T997] WARNING: CPU: 1 PID: 997 at fs/kernfs/dir.c:1588 kernfs_remove_by_name_ns+0x103/0x160 [ 57.966905][ T997] Modules linked in: [ 57.976332][ T997] CPU: 1 PID: 997 Comm: syz.1.194 Tainted: G W syzkaller #0 [ 57.986043][ T1027] FAULT_INJECTION: forcing a failure. [ 57.986043][ T1027] name failslab, interval 1, probability 0, space 0, times 0 [ 57.988918][ T982] Modules linked in: [ 57.999807][ T1027] CPU: 0 PID: 1027 Comm: syz.2.205 Tainted: G W syzkaller #0 [ 58.009197][ T982] [ 58.012413][ T1027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.012418][ T1027] Call Trace: [ 58.012435][ T1027] __dump_stack+0x21/0x24 [ 58.012478][ T1027] dump_stack_lvl+0x1a7/0x208 [ 58.015470][ T982] CPU: 1 PID: 982 Comm: syz.4.190 Tainted: G W syzkaller #0 [ 58.024878][ T1027] ? show_regs_print_info+0x18/0x18 [ 58.024891][ T1027] dump_stack+0x15/0x1c [ 58.024902][ T1027] should_fail+0x3ab/0x500 [ 58.024944][ T1027] ? dup_fd+0x78/0xab0 [ 58.038515][ T997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.045942][ T1027] __should_failslab+0xa4/0xe0 [ 58.045995][ T1027] should_failslab+0x9/0x20 [ 58.083136][ T1027] kmem_cache_alloc+0x3d/0x2d0 [ 58.087907][ T1027] dup_fd+0x78/0xab0 [ 58.091915][ T1027] copy_files+0xcf/0x170 [ 58.096165][ T1027] ? dup_task_struct+0xbd0/0xbd0 [ 58.101120][ T1027] ? security_task_alloc+0xfb/0x130 [ 58.106324][ T1027] copy_process+0x12d6/0x3320 [ 58.111011][ T1027] ? __pidfd_prepare+0x150/0x150 [ 58.115957][ T1027] ? fput_many+0x15a/0x1a0 [ 58.120379][ T1027] kernel_clone+0x233/0x950 [ 58.124891][ T1027] ? __se_sys_process_madvise+0x430/0x4e0 [ 58.130618][ T1027] ? create_io_thread+0x170/0x170 [ 58.135650][ T1027] __x64_sys_clone+0x198/0x210 [ 58.140417][ T1027] ? __ia32_sys_vfork+0x130/0x130 [ 58.145447][ T1027] ? switch_fpu_return+0x19c/0x330 [ 58.150566][ T1027] ? __kasan_check_read+0x11/0x20 [ 58.155594][ T1027] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 58.161258][ T1027] do_syscall_64+0x31/0x40 [ 58.165681][ T1027] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 58.171574][ T1027] RIP: 0033:0x7fe89c9bf159 [ 58.176001][ T1027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.195616][ T1027] RSP: 002b:00007fe89b417fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 58.204038][ T1027] RAX: ffffffffffffffda RBX: 00007fe89cc46fa0 RCX: 00007fe89c9bf159 [ 58.212036][ T1027] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 58.220013][ T1027] RBP: 00007fe89ca5606b R08: 0000000000000000 R09: 0000000000000000 [ 58.227994][ T1027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.235971][ T1027] R13: 00007fe89cc47038 R14: 00007fe89cc46fa0 R15: 00007ffdb8bbd688 [ 58.244850][ T997] RIP: 0010:kernfs_remove_by_name_ns+0x103/0x160 [ 58.251253][ T24] audit: type=1400 audit(1789743092.020:182): avc: denied { create } for pid=1029 comm="syz.0.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.270668][ T982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.281605][ T1027] FAULT_INJECTION: forcing a failure. [ 58.281605][ T1027] name failslab, interval 1, probability 0, space 0, times 0 [ 58.290602][ T982] RIP: 0010:kernfs_remove_by_name_ns+0x103/0x160 [ 58.294220][ T1027] CPU: 1 PID: 1027 Comm: syz.2.205 Tainted: G W syzkaller #0 [ 58.294250][ T1027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.307358][ T997] Code: 06 4c 89 f7 e8 fe ee ff ff 4c 89 f7 e8 86 af ff ff 45 31 f6 eb 29 e8 9c 22 9d ff 48 c7 c7 80 3a 2b 85 4c 89 f6 e8 9d f4 b1 02 <0f> 0b 41 be fe ff ff ff eb 13 e8 7e 22 9d ff 41 be fe ff ff ff 48 [ 58.309242][ T1027] Call Trace: [ 58.329408][ T982] Code: 06 4c 89 f7 e8 fe ee ff ff 4c 89 f7 e8 86 af ff ff 45 31 f6 eb 29 e8 9c 22 9d ff 48 c7 c7 80 3a 2b 85 4c 89 f6 e8 9d f4 b1 02 <0f> 0b 41 be fe ff ff ff eb 13 e8 7e 22 9d ff 41 be fe ff ff ff 48 [ 58.338952][ T1027] __dump_stack+0x21/0x24 [ 58.338964][ T1027] dump_stack_lvl+0x1a7/0x208 [ 58.338975][ T1027] ? show_regs_print_info+0x18/0x18 [ 58.339027][ T1027] ? dm_create+0x4c7/0xdd0 [ 58.348251][ T982] RSP: 0018:ffffc90000ebfa30 EFLAGS: 00010246 [ 58.361891][ T1027] ? __x64_sys_ioctl+0x7b/0x90 [ 58.361906][ T1027] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 58.361919][ T1027] dump_stack+0x15/0x1c [ 58.361930][ T1027] should_fail+0x3ab/0x500 [ 58.361972][ T1027] ? ioprio_alloc_pd+0x59/0x60 [ 58.366450][ T997] RSP: 0018:ffffc90000e87a10 EFLAGS: 00010246 [ 58.370991][ T1027] __should_failslab+0xa4/0xe0 [ 58.371006][ T1027] should_failslab+0x9/0x20 [ 58.371062][ T1027] kmem_cache_alloc_trace+0x3a/0x2e0 [ 58.377274][ T982] [ 58.380638][ T1027] ioprio_alloc_pd+0x59/0x60 [ 58.380650][ T1027] ? ioprio_free_cpd+0x20/0x20 [ 58.380686][ T1027] blkcg_activate_policy+0x254/0xd70 [ 58.386796][ T982] RAX: 6e958981164d1300 RBX: ffffffff853fbe40 RCX: 0000000000080000 [ 58.391507][ T1027] blk_ioprio_init+0x6d/0x200 [ 58.391523][ T1027] blkcg_init_queue+0x19f/0x330 [ 58.391577][ T1027] blk_alloc_queue+0x444/0x5f0 [ 58.397658][ T997] [ 58.401854][ T1027] dm_create+0x4c7/0xdd0 [ 58.401867][ T1027] dev_create+0x12e/0x2c0 [ 58.401880][ T1027] ? list_devices+0x570/0x570 [ 58.401935][ T1027] ? __kasan_check_write+0x14/0x20 [ 58.408273][ T982] RDX: ffffc900034d3000 RSI: 000000000007ffff RDI: 0000000000080000 [ 58.411080][ T1027] ? _copy_from_user+0x95/0xd0 [ 58.411095][ T1027] dm_ctl_ioctl+0x8ee/0xca0 [ 58.411136][ T1027] ? list_devices+0x570/0x570 [ 58.417245][ T997] RAX: 57c83949e99efe00 RBX: 0000000000000003 RCX: 0000000000080000 [ 58.421946][ T1027] ? dm_poll+0x120/0x120 [ 58.421970][ T1027] ? security_file_ioctl+0x84/0xa0 [ 58.421980][ T1027] ? dm_poll+0x120/0x120 [ 58.422026][ T1027] __se_sys_ioctl+0x121/0x1a0 [ 58.426585][ T982] RBP: ffffc90000ebfa58 R08: ffff8881f7052fbf R09: 1ffff1103ee0a5f7 [ 58.431790][ T1027] __x64_sys_ioctl+0x7b/0x90 [ 58.431805][ T1027] do_syscall_64+0x31/0x40 [ 58.431817][ T1027] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 58.431853][ T1027] RIP: 0033:0x7fe89c9bf159 [ 58.434192][ T997] RDX: ffffc900018cc000 RSI: 000000000007ffff RDI: 0000000000080000 [ 58.438760][ T1027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.438769][ T1027] RSP: 002b:00007fe89b418028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.443731][ T982] R10: dffffc0000000000 R11: ffffed103ee0a5f8 R12: 0000000000000000 [ 58.448818][ T1027] RAX: ffffffffffffffda RBX: 00007fe89cc46fa0 RCX: 00007fe89c9bf159 [ 58.448826][ T1027] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 58.448859][ T1027] RBP: 00007fe89ca5606b R08: 0000000000000000 R09: 0000000000000000 [ 58.456959][ T997] RBP: ffffc90000e87a38 R08: ffff8881f7152fbf R09: 1ffff1103ee2a5f7 [ 58.461591][ T1027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.461602][ T1027] R13: 00007fe89cc47038 R14: 00007fe89cc46fa0 R15: 00007ffdb8bbd688 [ 58.493427][ T982] R13: 1ffff11024e5d08f R14: ffffffff853fbe40 R15: 0000000000000000 [ 58.507365][ T997] R10: dffffc0000000000 R11: ffffed103ee2a5f8 R12: 0000000000000000 [ 58.510499][ T982] FS: 00007fbb8f2166c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 58.514634][ T997] R13: ffffffff8674ece0 R14: ffffffff853fc560 R15: 0000000000000000 [ 58.523544][ T982] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.526635][ T997] FS: 00007f4965bfe6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 58.532289][ T982] CR2: 00007fe89ca0c840 CR3: 000000012990a000 CR4: 00000000003526a0 [ 58.535964][ T997] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.542190][ T53] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 58.551594][ T982] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.590730][ T997] CR2: 00007f04b9058ecc CR3: 000000011ab3c000 CR4: 00000000003526b0 [ 58.600420][ T982] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.606139][ T997] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.612564][ T982] Call Trace: [ 58.612584][ T982] sysfs_remove_link+0x50/0x60 [ 58.612596][ T982] del_gendisk+0x3f8/0xa10 [ 58.612648][ T982] cleanup_mapped_device+0x16c/0x270 [ 58.623126][ T997] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.628781][ T982] dm_create+0xb03/0xdd0 [ 58.649024][ T997] Call Trace: [ 58.668198][ T982] dev_create+0x12e/0x2c0 [ 58.693894][ T997] sysfs_remove_files+0xa4/0x100 [ 58.700735][ T982] ? list_devices+0x570/0x570 [ 58.731609][ T997] del_gendisk+0x254/0xa10 [ 58.739647][ T982] ? __kasan_check_write+0x14/0x20 [ 58.755944][ T997] cleanup_mapped_device+0x16c/0x270 [ 58.764334][ T982] ? _copy_from_user+0x95/0xd0 [ 58.778271][ T997] dm_create+0xb03/0xdd0 [ 58.785715][ T982] dm_ctl_ioctl+0x8ee/0xca0 [ 58.792304][ T997] dev_create+0x12e/0x2c0 [ 58.802099][ T982] ? list_devices+0x570/0x570 [ 58.823495][ T997] ? list_devices+0x570/0x570 [ 58.848584][ T982] ? dm_poll+0x120/0x120 [ 58.854800][ T997] ? __kasan_check_write+0x14/0x20 [ 58.868102][ T997] ? _copy_from_user+0x95/0xd0 [ 58.873240][ T997] dm_ctl_ioctl+0x8ee/0xca0 [ 58.877911][ T997] ? list_devices+0x570/0x570 [ 58.883106][ T997] ? dm_poll+0x120/0x120 [ 58.887405][ T997] ? security_file_ioctl+0x84/0xa0 [ 58.896332][ T982] ? copy_pid_ns+0xe1/0x810 [ 58.920732][ T997] ? dm_poll+0x120/0x120 [ 58.925065][ T997] __se_sys_ioctl+0x121/0x1a0 [ 58.929879][ T982] ? security_file_ioctl+0x84/0xa0 [ 58.935166][ T982] ? dm_poll+0x120/0x120 [ 58.939449][ T982] __se_sys_ioctl+0x121/0x1a0 [ 58.944986][ T982] __x64_sys_ioctl+0x7b/0x90 [ 58.949674][ T982] do_syscall_64+0x31/0x40 [ 58.954335][ T982] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 58.954386][ T997] __x64_sys_ioctl+0x7b/0x90 [ 58.960449][ T982] RIP: 0033:0x7fbb907bd159 [ 58.973179][ T982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.991098][ T997] do_syscall_64+0x31/0x40 [ 58.997447][ T982] RSP: 002b:00007fbb8f216028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.005957][ T997] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 59.011932][ T982] RAX: ffffffffffffffda RBX: 00007fbb90a44fa0 RCX: 00007fbb907bd159 [ 59.011941][ T982] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 59.011950][ T982] RBP: 00007fbb9085406b R08: 0000000000000000 R09: 0000000000000000 [ 59.011958][ T982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.011990][ T982] R13: 00007fbb90a45038 R14: 00007fbb90a44fa0 R15: 00007ffeaf973e28 [ 59.037275][ T997] RIP: 0033:0x7f49671a5159 [ 59.044427][ T982] ---[ end trace 4bdfb001f704a8d1 ]--- [ 59.052443][ T53] usb 4-1: unable to get BOS descriptor or descriptor too short [ 59.069975][ T982] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 59.081713][ T982] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 59.081995][ T997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.090146][ T982] CPU: 0 PID: 982 Comm: syz.4.190 Tainted: G W syzkaller #0 [ 59.090162][ T982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.113409][ T997] RSP: 002b:00007f4965bfe028 EFLAGS: 00000246 [ 59.118458][ T982] RIP: 0010:strlen+0x29/0x70 [ 59.118504][ T982] Code: 00 55 48 89 e5 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 59.130841][ T24] audit: type=1400 audit(1789743092.830:183): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 59.134693][ T982] RSP: 0018:ffffc90000ebf9a8 EFLAGS: 00010246 [ 59.145881][ T1041] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 59.158983][ T982] [ 59.158996][ T982] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 59.159004][ T982] RDX: ffff888111751400 RSI: 0000000000000000 RDI: 0000000000000000 [ 59.159012][ T982] RBP: ffffc90000ebf9c8 R08: ffff888100059377 R09: 1ffff1102000b26e [ 59.159022][ T982] R10: dffffc0000000000 R11: ffffed102000b26f R12: ffff8881069a5680 [ 59.159030][ T982] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 59.159078][ T982] FS: 00007fbb8f2166c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 59.191309][ T24] audit: type=1400 audit(1789743092.830:184): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.196256][ T982] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.198603][ T24] audit: type=1400 audit(1789743092.830:185): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.206548][ T982] CR2: 00007fe89cc48dac CR3: 000000012990a000 CR4: 00000000003506b0 [ 59.206559][ T982] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.206567][ T982] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.206571][ T982] Call Trace: [ 59.206588][ T982] kernfs_find_ns+0x95/0x4b0 [ 59.206638][ T982] kernfs_remove_by_name_ns+0x89/0x160 [ 59.220693][ T997] ORIG_RAX: 0000000000000010 [ 59.222620][ T982] sysfs_remove_link+0x50/0x60 [ 59.244595][ T997] RAX: ffffffffffffffda RBX: 00007f496742cfa0 RCX: 00007f49671a5159 [ 59.247712][ T982] del_gendisk+0x84b/0xa10 [ 59.269660][ T24] audit: type=1400 audit(1789743092.830:186): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.275520][ T982] cleanup_mapped_device+0x16c/0x270 [ 59.275532][ T982] dm_create+0xb03/0xdd0 [ 59.275572][ T982] dev_create+0x12e/0x2c0 [ 59.298103][ T1041] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 59.305125][ T982] ? list_devices+0x570/0x570 [ 59.305139][ T982] ? __kasan_check_write+0x14/0x20 [ 59.305191][ T982] ? _copy_from_user+0x95/0xd0 [ 59.314094][ T53] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 59.321220][ T982] dm_ctl_ioctl+0x8ee/0xca0 [ 59.321264][ T982] ? list_devices+0x570/0x570 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 59.325720][ T997] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 59.329186][ T982] ? dm_poll+0x120/0x120 [ 59.335639][ T24] audit: type=1400 audit(1789743092.830:187): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.339338][ T982] ? copy_pid_ns+0xe1/0x810 [ 59.344583][ T997] RBP: 00007f496723c06b R08: 0000000000000000 R09: 0000000000000000 [ 59.352143][ T982] ? security_file_ioctl+0x84/0xa0 [ 59.352156][ T982] ? dm_poll+0x120/0x120 [ 59.352195][ T982] __se_sys_ioctl+0x121/0x1a0 [ 59.357304][ T997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.377079][ T982] __x64_sys_ioctl+0x7b/0x90 [ 59.377098][ T982] do_syscall_64+0x31/0x40 [ 59.377112][ T982] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 59.377122][ T982] RIP: 0033:0x7fbb907bd159 [ 59.377135][ T982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.377143][ T982] RSP: 002b:00007fbb8f216028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.377156][ T982] RAX: ffffffffffffffda RBX: 00007fbb90a44fa0 RCX: 00007fbb907bd159 [ 59.377185][ T982] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 59.383858][ T24] audit: type=1400 audit(1789743092.830:188): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.386752][ T982] RBP: 00007fbb9085406b R08: 0000000000000000 R09: 0000000000000000 [ 59.391538][ T24] audit: type=1400 audit(1789743092.830:189): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.403038][ T982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.403047][ T982] R13: 00007fbb90a45038 R14: 00007fbb90a44fa0 R15: 00007ffeaf973e28 [ 59.403056][ T982] Modules linked in: [ 59.492810][ T997] R13: 00007f496742d038 R14: 00007f496742cfa0 R15: 00007ffe803eb718 [ 59.498822][ T982] ---[ end trace 4bdfb001f704a8d2 ]--- [ 59.550924][ T997] ---[ end trace 4bdfb001f704a8d3 ]--- [ 59.584197][ T1041] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 59.629047][ T997] ------------[ cut here ]------------ [ 59.676850][ T24] audit: type=1400 audit(1789743093.180:190): avc: denied { write } for pid=271 comm="syz-executor" path="pipe:[13064]" dev="pipefs" ino=13064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 59.702284][ T1041] System zones: 0-1, 3-36 [ 59.706841][ T997] kernfs: can not remove 'bdi', no directory [ 59.713108][ T997] WARNING: CPU: 0 PID: 997 at fs/kernfs/dir.c:1588 kernfs_remove_by_name_ns+0x103/0x160 [ 59.723749][ T997] Modules linked in: [ 59.727677][ T997] CPU: 0 PID: 997 Comm: syz.1.194 Tainted: G D W syzkaller #0 [ 59.746753][ T997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.756484][ T982] RIP: 0010:strlen+0x29/0x70 [ 59.757721][ T997] RIP: 0010:kernfs_remove_by_name_ns+0x103/0x160 [ 59.761531][ T982] Code: 00 55 48 89 e5 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 59.761567][ T982] RSP: 0018:ffffc90000ebf9a8 EFLAGS: 00010246 [ 59.768450][ T997] Code: 06 4c 89 f7 e8 fe ee ff ff 4c 89 f7 e8 86 af ff ff 45 31 f6 eb 29 e8 9c 22 9d ff 48 c7 c7 80 3a 2b 85 4c 89 f6 e8 9d f4 b1 02 <0f> 0b 41 be fe ff ff ff eb 13 e8 7e 22 9d ff 41 be fe ff ff ff 48 [ 59.787614][ T982] [ 59.794274][ T997] RSP: 0018:ffffc90000e87a30 EFLAGS: 00010246 [ 59.813866][ T982] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 59.816508][ T997] [ 59.822063][ T982] RDX: ffff888111751400 RSI: 0000000000000000 RDI: 0000000000000000 [ 59.833392][ T997] RAX: 57c83949e99efe00 RBX: ffffffff853fbe40 RCX: 0000000000080000 [ 59.840405][ T982] RBP: ffffc90000ebf9c8 R08: ffff888100059377 R09: 1ffff1102000b26e [ 59.849019][ T997] RDX: ffffc900018cc000 RSI: 000000000007ffff RDI: 0000000000080000 [ 59.856425][ T982] R10: dffffc0000000000 R11: ffffed102000b26f R12: ffff8881069a5680 [ 59.856434][ T982] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 59.856478][ T982] FS: 00007fbb8f2166c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 59.865242][ T997] RBP: ffffc90000e87a58 R08: ffff8881f7052fbf R09: 1ffff1103ee0a5f7 [ 59.872573][ T982] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.880721][ T997] R10: dffffc0000000000 R11: ffffed103ee0a5f8 R12: 0000000000000000 [ 59.889622][ T982] CR2: 00007fe89cc102f8 CR3: 000000012990a000 CR4: 00000000003506a0 [ 59.898340][ T997] R13: 1ffff1102159748f R14: ffffffff853fbe40 R15: 0000000000000000 [ 59.904339][ T982] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.913295][ T997] FS: 00007f4965bfe6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 59.920495][ T982] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.928768][ T997] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.936723][ T982] Kernel panic - not syncing: Fatal exception [ 59.946333][ T997] CR2: 00005565ee55daf8 CR3: 000000011ab3c000 CR4: 00000000003506b0 [ 59.953804][ T982] Kernel Offset: disabled [ 59.978790][ T982] Rebooting in 86400 seconds..