last executing test programs: 5.200342301s ago: executing program 2 (id=1055): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000000b40)=[{{0x0, 0xfffffffffffffe97, &(0x7f0000000a80)=[{&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f0000000080)=""/57, 0x39}, {&(0x7f0000000480)=""/52, 0x34}, {&(0x7f0000000800)=""/199, 0xc7}, {&(0x7f00000005c0)=""/159, 0x9f}, {&(0x7f0000000740)=""/171, 0xab}, {&(0x7f0000000200)=""/70, 0x46}, {&(0x7f0000007ec0)=""/4097, 0x1007}, {&(0x7f0000003ac0)=""/4107, 0x100b}, {&(0x7f0000000900)=""/225, 0xe1}], 0xa}, 0x3}], 0x1, 0x40010022, 0x0) 5.020793391s ago: executing program 3 (id=1057): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x123100, 0xa7) 4.725132924s ago: executing program 3 (id=1058): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x30, r0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000804) 4.653104834s ago: executing program 3 (id=1059): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, 0x0) 4.400205854s ago: executing program 2 (id=1060): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x260048f4}, 0x20004810) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4.143104016s ago: executing program 2 (id=1064): userfaultfd(0x801) userfaultfd(0x801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r2, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r2, 0x5, 0x4) 3.962205636s ago: executing program 1 (id=1067): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e02, 0xffffffff, @empty, 0x5}}, 0x0, 0x0, 0x23f, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 3.849084128s ago: executing program 2 (id=1069): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x30, r0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000804) 3.802140491s ago: executing program 4 (id=1070): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syzkaller0\x00'}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000000b40)=[{{0x0, 0xfffffffffffffe97, &(0x7f0000000a80)=[{&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f0000000080)=""/57, 0x39}, {&(0x7f0000000480)=""/52, 0x34}, {&(0x7f0000000800)=""/199, 0xc7}, {&(0x7f00000005c0)=""/159, 0x9f}, {&(0x7f0000000740)=""/171, 0xab}, {&(0x7f0000000200)=""/70, 0x46}, {&(0x7f0000007ec0)=""/4097, 0x1007}, {&(0x7f0000003ac0)=""/4107, 0x100b}, {&(0x7f0000000900)=""/225, 0xe1}], 0xa}, 0x3}], 0x1, 0x40010022, 0x0) 3.681008374s ago: executing program 2 (id=1071): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x6, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="4500001c12344000402f149b0a0000010a00000204d2"], 0x1c) 3.66270914s ago: executing program 1 (id=1072): socket$inet6_sctp(0xa, 0x1, 0x84) socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120110030a4308083767010080910102030109022400018e0510070904fb0b0282d2d20009059f0240000700070805010240"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) write(0xffffffffffffffff, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r1, 0x0, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 3.48309064s ago: executing program 4 (id=1074): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x260048f4}, 0x20004810) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.831633771s ago: executing program 4 (id=1076): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x440040c4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000080108805400078008000500000000000800050000000000080005009d2c690d08000500000000000800050000000000080005000000000008000500"], 0x134}}, 0x4048014) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, 0x0, 0x4004040) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x10, 0x3, '/dev/video#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0x1ff, 0x6, 0x7f, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f0000000300)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r11, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0x8}], 0x2}, 0x0) 2.735596128s ago: executing program 2 (id=1077): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) write(r0, 0x0, 0x0) 2.412266788s ago: executing program 4 (id=1078): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x80, r1, 0x1, 0x4, 0x0, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 2.193232059s ago: executing program 4 (id=1079): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f00000003c0)="00012c61adc5397e") 2.037833482s ago: executing program 0 (id=1080): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf2564010101000000000000000000000000ff020000000000000000000000000001000400004e210003000000a02100", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="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", @ANYBLOB="dd75fb7ee5"], 0x15c}, 0x1, 0x0, 0x0, 0x8040880}, 0x2014) 1.837638808s ago: executing program 0 (id=1081): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x30, r0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000804) 1.649045901s ago: executing program 1 (id=1082): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e02, 0xffffffff, @empty, 0x5}}, 0x0, 0x0, 0x23f, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 1.633744275s ago: executing program 0 (id=1083): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000000480)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000018) 1.440223089s ago: executing program 3 (id=1084): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x14, r1, 0x5, 0xfd, 0x0, {0x22}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000014) 1.369036619s ago: executing program 0 (id=1085): r0 = socket(0x2, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x4000000) 1.215632052s ago: executing program 3 (id=1086): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x260048f4}, 0x20004810) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 916.594495ms ago: executing program 1 (id=1087): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x1}, {0x6, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="4500001c12344000402f149b0a0000010a00000204d2"], 0x1c) 732.861366ms ago: executing program 0 (id=1088): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x440040c4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000080108805400078008000500000000000800050000000000080005009d2c690d08000500000000000800050000000000080005000000000008000500"], 0x134}}, 0x4048014) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, 0x0, 0x4004040) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x10, 0x3, '/dev/video#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0x1ff, 0x6, 0x7f, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f0000000300)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r11, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0x8}], 0x2}, 0x0) 509.141269ms ago: executing program 3 (id=1089): syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 203.314574ms ago: executing program 4 (id=1090): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 161.269885ms ago: executing program 1 (id=1091): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000140)={'erspan0\x00', 0xfffffffe}) 77.434718ms ago: executing program 0 (id=1092): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_marker\x00', 0x1, 0x5a) write(r0, &(0x7f0000000340)="2d2519d01038dc3dc2547dfbde71febae03d46fdca85c1a1862b9b169eceaaca9ccf1cb8d8714bdef1c9e7253595f944123f1c9c5e4ee16a1d71f8876bd9dd39cbd2831a51bf6016afee9c90f6acc9", 0x4f) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000160001035c52b6c37384270b13"], 0x14}, 0x1, 0x0, 0x0, 0x24044001}, 0x90) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r2, &(0x7f00000091c0)=""/16384, 0x4000) 0s ago: executing program 1 (id=1093): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x64, 0x100) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, 0x0) kernel console output (not intermixed with test programs): 00007ffe41e9aa28 [ 189.250124][ T5791] [ 189.340791][ T5791] socket: no more sockets [ 189.355303][ T5794] netlink: 108 bytes leftover after parsing attributes in process `syz.0.470'. [ 190.711861][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 190.819738][ T9] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 191.170586][ T5826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.481'. [ 191.275159][ T5828] FAULT_INJECTION: forcing a failure. [ 191.275159][ T5828] name failslab, interval 1, probability 0, space 0, times 0 [ 191.300236][ T5828] CPU: 1 PID: 5828 Comm: syz.3.482 Not tainted syzkaller #0 [ 191.308309][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.318427][ T5828] Call Trace: [ 191.321758][ T5828] [ 191.324725][ T5828] dump_stack_lvl+0x188/0x24e [ 191.329450][ T5828] ? show_regs_print_info+0x12/0x12 [ 191.334687][ T5828] ? load_image+0x410/0x410 [ 191.339233][ T5828] ? __lock_acquire+0x7c40/0x7c40 [ 191.344304][ T5828] should_fail_ex+0x390/0x4c0 [ 191.349022][ T5828] should_failslab+0x5/0x20 [ 191.353549][ T5828] slab_pre_alloc_hook+0x59/0x300 [ 191.358603][ T5828] kmem_cache_alloc_lru+0x49/0x2e0 [ 191.363743][ T5828] ? sock_alloc_inode+0x24/0xc0 [ 191.368632][ T5828] sock_alloc_inode+0x24/0xc0 [ 191.373346][ T5828] ? sockfs_init_fs_context+0xa0/0xa0 [ 191.378745][ T5828] new_inode_pseudo+0x5f/0x1c0 [ 191.383544][ T5828] __sock_create+0x129/0x940 [ 191.388169][ T5828] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 191.394189][ T5828] __sys_socket+0xc4/0x190 [ 191.398646][ T5828] __x64_sys_socket+0x76/0x80 [ 191.403359][ T5828] do_syscall_64+0x4c/0xa0 [ 191.407800][ T5828] ? clear_bhb_loop+0x60/0xb0 [ 191.412502][ T5828] ? clear_bhb_loop+0x60/0xb0 [ 191.417204][ T5828] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.423131][ T5828] RIP: 0033:0x7f83a119e159 [ 191.427573][ T5828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.447220][ T5828] RSP: 002b:00007f83a2042028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 191.455663][ T5828] RAX: ffffffffffffffda RBX: 00007f83a1425fa0 RCX: 00007f83a119e159 [ 191.463671][ T5828] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 191.471670][ T5828] RBP: 00007f83a123506b R08: 0000000000000000 R09: 0000000000000000 [ 191.479665][ T5828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.487661][ T5828] R13: 00007f83a1426038 R14: 00007f83a1425fa0 R15: 00007ffd58636868 [ 191.495668][ T5828] [ 191.522128][ T5828] socket: no more sockets [ 192.909979][ T5847] loop3: detected capacity change from 0 to 512 [ 192.931516][ T5847] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 192.939690][ T5847] System zones: 1-12 [ 192.946452][ T5847] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.488: missing EA_INODE flag [ 192.962611][ T5847] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.488: error while reading EA inode 12 err=-117 [ 192.977105][ T5847] EXT4-fs (loop3): 1 orphan inode deleted [ 192.986390][ T5847] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 193.568731][ T5807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 193.988573][ T5860] loop4: detected capacity change from 0 to 1024 [ 194.010708][ T5860] EXT4-fs: Ignoring removed nomblk_io_submit option [ 194.048255][ T5860] EXT4-fs: inline encryption not supported [ 194.105716][ T5860] EXT4-fs: Ignoring removed nomblk_io_submit option [ 194.133082][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 194.149747][ T5863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.494'. [ 194.149777][ T5860] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 194.311790][ T5860] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 194.397106][ T5860] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.430336][ T5869] device syzkaller0 entered promiscuous mode [ 194.478999][ T5869] tipc: Started in network mode [ 194.502825][ T5869] tipc: Node identity 02787b6805cc, cluster identity 4711 [ 194.510481][ T5869] tipc: Enabled bearer , priority 0 [ 194.543206][ T5869] tipc: Resetting bearer [ 194.552336][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.558882][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.805154][ T5868] tipc: Resetting bearer [ 194.899736][ T5870] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 195.239458][ T5870] EXT4-fs (loop4): Remounting filesystem read-only [ 195.397920][ T5868] tipc: Disabling bearer [ 195.433551][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 196.104840][ T5895] netlink: 'syz.0.504': attribute type 1 has an invalid length. [ 196.126872][ T5898] loop3: detected capacity change from 0 to 512 [ 196.205328][ T5904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.508'. [ 196.251277][ T5895] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.267006][ T5898] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 196.280424][ T5898] System zones: 1-12 [ 196.295899][ T5898] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.507: missing EA_INODE flag [ 196.354837][ T5909] loop2: detected capacity change from 0 to 1024 [ 196.362339][ T5909] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.369095][ T5909] EXT4-fs: inline encryption not supported [ 196.377639][ T5909] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.395634][ T5898] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.507: error while reading EA inode 12 err=-117 [ 196.413849][ T5895] bond1: (slave veth0_to_bond): making interface the new active one [ 196.424079][ T5909] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 196.475264][ T5898] EXT4-fs (loop3): 1 orphan inode deleted [ 196.484278][ T5898] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 196.509606][ T5895] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 196.533066][ T5909] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 196.542330][ T5909] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.550956][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 196.644822][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 196.994382][ T5917] FAULT_INJECTION: forcing a failure. [ 196.994382][ T5917] name failslab, interval 1, probability 0, space 0, times 0 [ 197.028268][ T5919] device syzkaller0 entered promiscuous mode [ 197.596447][ T5917] CPU: 1 PID: 5917 Comm: syz.0.514 Not tainted syzkaller #0 [ 197.603843][ T5917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 197.613966][ T5917] Call Trace: [ 197.617282][ T5917] [ 197.620249][ T5917] dump_stack_lvl+0x188/0x24e [ 197.624982][ T5917] ? show_regs_print_info+0x12/0x12 [ 197.630227][ T5917] ? load_image+0x410/0x410 [ 197.634793][ T5917] ? __might_sleep+0xd0/0xd0 [ 197.639424][ T5917] ? __lock_acquire+0x7c40/0x7c40 [ 197.644505][ T5917] should_fail_ex+0x390/0x4c0 [ 197.649245][ T5917] should_failslab+0x5/0x20 [ 197.653784][ T5917] slab_pre_alloc_hook+0x59/0x300 [ 197.658853][ T5917] ? _raw_spin_unlock_irq+0x1f/0x40 [ 197.664101][ T5917] ? blk_throtl_init+0x8f/0x480 [ 197.669008][ T5917] __kmem_cache_alloc_node+0x4f/0x270 [ 197.674425][ T5917] ? blkcg_activate_policy+0x6a6/0xa10 [ 197.679978][ T5917] ? blk_throtl_init+0x8f/0x480 [ 197.684888][ T5917] kmalloc_node_trace+0x22/0xe0 [ 197.689993][ T5917] blk_throtl_init+0x8f/0x480 [ 197.694851][ T5917] blkcg_init_disk+0x33a/0x3f0 [ 197.699764][ T5917] ? blkcg_unpin_online+0x250/0x250 [ 197.705019][ T5917] ? __xa_insert+0x242/0x290 [ 197.709702][ T5917] ? do_raw_spin_unlock+0x11d/0x230 [ 197.715037][ T5917] __alloc_disk_node+0x2b3/0x570 [ 197.720042][ T5917] __blk_alloc_disk+0x2c/0x80 [ 197.724769][ T5917] dm_create+0x46b/0xf90 [ 197.729060][ T5917] dev_create+0x12e/0x2c0 [ 197.733451][ T5917] ? list_devices+0x820/0x820 [ 197.738187][ T5917] ? __might_fault+0xc2/0x120 [ 197.742936][ T5917] ? __might_fault+0xa6/0x120 [ 197.747678][ T5917] dm_ctl_ioctl+0xa9c/0xec0 [ 197.752245][ T5917] ? list_devices+0x820/0x820 [ 197.756978][ T5917] ? dm_poll+0x120/0x120 [ 197.761304][ T5917] ? bpf_lsm_file_ioctl+0x5/0x10 [ 197.766307][ T5917] ? security_file_ioctl+0x7c/0xa0 [ 197.771462][ T5917] ? dm_poll+0x120/0x120 [ 197.775788][ T5917] __se_sys_ioctl+0xfa/0x170 [ 197.780432][ T5917] do_syscall_64+0x4c/0xa0 [ 197.784896][ T5917] ? clear_bhb_loop+0x60/0xb0 [ 197.789613][ T5917] ? clear_bhb_loop+0x60/0xb0 [ 197.794339][ T5917] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.800290][ T5917] RIP: 0033:0x7fd2dcf9e159 [ 197.804750][ T5917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.824405][ T5917] RSP: 002b:00007fd2dde43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.832966][ T5917] RAX: ffffffffffffffda RBX: 00007fd2dd225fa0 RCX: 00007fd2dcf9e159 [ 197.841078][ T5917] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 197.849188][ T5917] RBP: 00007fd2dd03506b R08: 0000000000000000 R09: 0000000000000000 [ 197.857476][ T5917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.865507][ T5917] R13: 00007fd2dd226038 R14: 00007fd2dd225fa0 R15: 00007ffd75749238 [ 197.873556][ T5917] [ 198.041459][ T5919] tipc: Enabled bearer , priority 0 [ 198.118007][ T5919] tipc: Resetting bearer [ 198.147497][ T5918] tipc: Resetting bearer [ 198.346392][ T5918] tipc: Disabling bearer [ 198.435927][ T5935] tipc: Started in network mode [ 198.456717][ T5935] tipc: Node identity 1001001, cluster identity 4711 [ 198.547732][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 198.564992][ T5940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.520'. [ 198.748426][ T5948] loop1: detected capacity change from 0 to 2048 [ 198.773450][ T5948] EXT4-fs: Ignoring removed nomblk_io_submit option [ 198.857331][ T5948] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 198.887150][ T5948] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #15: comm syz.1.522: inline data xattr refers to an external xattr inode [ 198.907734][ T5948] EXT4-fs (loop1): Remounting filesystem read-only [ 198.932911][ T5948] EXT4-fs error (device loop1): empty_inline_dir:1912: inode #12: block 5: comm syz.1.522: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0 [ 198.955115][ T5935] tipc: Node number set to 16781313 [ 198.978409][ T5936] tipc: Enabled bearer , priority 0 [ 198.985996][ T5948] EXT4-fs (loop1): Remounting filesystem read-only [ 198.994052][ T5957] loop3: detected capacity change from 0 to 1024 [ 199.000676][ T5948] EXT4-fs warning (device loop1): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 199.034958][ T5957] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.059115][ T5957] EXT4-fs: inline encryption not supported [ 199.095061][ T5957] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.130774][ T5957] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 199.211876][ T5957] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 199.226477][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 199.230137][ T5957] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.240252][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 201.113973][ T5983] tipc: Cannot configure node identity twice [ 201.213353][ T5988] loop0: detected capacity change from 0 to 512 [ 201.251119][ T5988] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 201.270270][ T5988] System zones: 1-12 [ 201.309811][ T5988] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.532: missing EA_INODE flag [ 201.370699][ T5988] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.532: error while reading EA inode 12 err=-117 [ 201.383497][ T5988] EXT4-fs (loop0): 1 orphan inode deleted [ 201.389300][ T5988] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 201.434197][ T5992] Bluetooth: MGMT ver 1.22 [ 201.506297][ T5995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.533'. [ 201.823579][ T6000] loop2: detected capacity change from 0 to 512 [ 202.338982][ T6000] EXT4-fs: Mount option(s) incompatible with ext3 [ 202.865120][ T6007] ip_tables: iptables: counters copy to user failed while replacing table [ 205.420107][ T6031] tipc: Enabled bearer , priority 0 [ 205.517510][ T6031] tipc: Resetting bearer [ 205.751180][ T6045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.548'. [ 205.896858][ T6029] tipc: Disabling bearer [ 206.107346][ T6050] device syzkaller0 entered promiscuous mode [ 206.140794][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.550'. [ 206.176375][ T6051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.193527][ T6053] loop3: detected capacity change from 0 to 512 [ 206.235851][ T6051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.259240][ T6053] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 206.286624][ T6051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.297362][ T6051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.307277][ T6051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.318551][ T6051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.328577][ T6051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.339279][ T6051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.349222][ T6051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.359912][ T6051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.372044][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 206.485129][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.550'. [ 206.513613][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.525607][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.556300][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.635823][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.667836][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.743470][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.777068][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.788219][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.798172][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.808690][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.822388][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 206.869687][ T4291] Bluetooth: hci3: command 0x0406 tx timeout [ 206.889667][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 207.525297][ T6076] loop3: detected capacity change from 0 to 1024 [ 207.531929][ T4289] Bluetooth: hci1: command 0x0406 tx timeout [ 207.538151][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 207.671515][ T6076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 207.678206][ T6076] EXT4-fs: inline encryption not supported [ 207.779560][ T6076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 207.801472][ T6076] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 207.866848][ T6080] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 207.896577][ T6076] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 207.917156][ T6086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.559'. [ 207.932512][ T6076] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.220536][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 208.422434][ T6099] loop3: detected capacity change from 0 to 512 [ 208.487606][ T6099] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 208.704259][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 208.887587][ T6108] can0: slcan on ttyS3. [ 208.936384][ T6111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.571'. [ 209.454724][ T6106] can0 (unregistered): slcan off ttyS3. [ 209.698309][ T6131] device syzkaller0 entered promiscuous mode [ 209.721451][ T6132] loop1: detected capacity change from 0 to 512 [ 209.742397][ T6131] tipc: Enabled bearer , priority 0 [ 209.798651][ T6132] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 209.828121][ T6131] tipc: Resetting bearer [ 209.903078][ T6129] tipc: Resetting bearer [ 210.072379][ T6129] tipc: Disabling bearer [ 210.164920][ T6150] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 210.218017][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 210.424528][ T6150] netlink: 'syz.4.583': attribute type 21 has an invalid length. [ 210.463619][ T6162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.584'. [ 210.467646][ T6163] loop0: detected capacity change from 0 to 512 [ 210.550280][ T6150] netlink: 156 bytes leftover after parsing attributes in process `syz.4.583'. [ 210.771747][ T6163] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.586: inode has both inline data and extents flags [ 210.799962][ T6163] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.586: couldn't read orphan inode 15 (err -117) [ 210.825358][ T6163] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 211.908729][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 212.114722][ T6205] loop0: detected capacity change from 0 to 512 [ 212.186277][ T6205] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 212.207403][ T6210] device syzkaller0 entered promiscuous mode [ 212.219223][ T6210] tipc: Enabled bearer , priority 0 [ 212.237026][ T6210] tipc: Resetting bearer [ 212.246175][ T6209] tipc: Resetting bearer [ 212.279205][ T6209] tipc: Disabling bearer [ 212.426511][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 213.029721][ T6234] loop2: detected capacity change from 0 to 512 [ 213.083297][ T6234] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.604: inode has both inline data and extents flags [ 213.112681][ T6234] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.604: couldn't read orphan inode 15 (err -117) [ 213.192871][ T6234] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 213.576596][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 213.710596][ T6248] loop2: detected capacity change from 0 to 512 [ 213.759050][ T6248] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 214.009268][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 214.104898][ T6256] device syzkaller0 entered promiscuous mode [ 214.152107][ T6256] tipc: Enabled bearer , priority 0 [ 214.163925][ T6260] netlink: 'syz.4.613': attribute type 19 has an invalid length. [ 214.171987][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.613'. [ 214.213402][ T6260] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.223058][ T6260] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.231856][ T6260] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.240640][ T6260] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.268868][ T6256] tipc: Resetting bearer [ 214.327734][ T6255] tipc: Resetting bearer [ 214.374065][ T6266] loop1: detected capacity change from 0 to 1024 [ 214.403751][ T6266] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.413539][ T6266] EXT4-fs: inline encryption not supported [ 214.419545][ T6266] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.427616][ T6255] tipc: Disabling bearer [ 214.433641][ T6266] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 214.456763][ T6264] Unknown status report in ack skb [ 214.525765][ T6266] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 214.610054][ T6266] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.068497][ T6286] can0: slcan on ttyS3. [ 215.189534][ T6274] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 215.226379][ T6274] EXT4-fs (loop1): Remounting filesystem read-only [ 215.346231][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 215.410072][ T6285] can0 (unregistered): slcan off ttyS3. [ 215.578663][ T6301] loop1: detected capacity change from 0 to 512 [ 215.706533][ T6301] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 215.981055][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 216.170704][ T6324] netlink: 28 bytes leftover after parsing attributes in process `syz.3.627'. [ 216.742644][ T6338] tipc: Enabling of bearer rejected, failed to enable media [ 216.971558][ T6349] loop4: detected capacity change from 0 to 1024 [ 217.002316][ T6349] EXT4-fs: Ignoring removed nomblk_io_submit option [ 217.050885][ T6349] EXT4-fs: inline encryption not supported [ 217.111768][ T6349] EXT4-fs: Ignoring removed nomblk_io_submit option [ 217.146118][ T6349] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 217.291388][ T6349] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 217.305850][ T6349] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.370125][ T6358] ip_tables: iptables: counters copy to user failed while replacing table [ 217.618551][ T6364] loop1: detected capacity change from 0 to 512 [ 217.681146][ T6364] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 217.896295][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 217.917502][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 218.436817][ T6391] can0: slcan on ttyS3. [ 218.631325][ T6390] can0 (unregistered): slcan off ttyS3. [ 218.860744][ T6406] fuse: Bad value for 'group_id' [ 219.448352][ T6404] loop1: detected capacity change from 0 to 1024 [ 219.498287][ T6405] tipc: Enabled bearer , priority 0 [ 219.506247][ T6404] EXT4-fs: Ignoring removed nomblk_io_submit option [ 219.525869][ T6404] EXT4-fs: inline encryption not supported [ 219.582134][ T6404] EXT4-fs: Ignoring removed nomblk_io_submit option [ 219.645193][ T6401] tipc: Disabling bearer [ 219.665243][ T6404] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 219.908396][ T6404] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 219.955956][ T6404] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.125982][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 221.564837][ T6463] fuse: Bad value for 'group_id' [ 222.270636][ T6465] device syzkaller0 entered promiscuous mode [ 222.355429][ T6465] tipc: Enabled bearer , priority 0 [ 222.389073][ T6464] tipc: Resetting bearer [ 222.471111][ T6464] tipc: Disabling bearer [ 223.107725][ T6481] can0: slcan on ttyS3. [ 223.200223][ T6479] can0 (unregistered): slcan off ttyS3. [ 223.281917][ T6484] FAULT_INJECTION: forcing a failure. [ 223.281917][ T6484] name failslab, interval 1, probability 0, space 0, times 0 [ 223.330280][ T6484] CPU: 1 PID: 6484 Comm: syz.1.672 Not tainted syzkaller #0 [ 223.337674][ T6484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.347833][ T6484] Call Trace: [ 223.351339][ T6484] [ 223.354317][ T6484] dump_stack_lvl+0x188/0x24e [ 223.359099][ T6484] ? show_regs_print_info+0x12/0x12 [ 223.364357][ T6484] ? load_image+0x410/0x410 [ 223.368928][ T6484] ? __might_sleep+0xd0/0xd0 [ 223.373577][ T6484] ? __lock_acquire+0x7c40/0x7c40 [ 223.378683][ T6484] should_fail_ex+0x390/0x4c0 [ 223.383426][ T6484] should_failslab+0x5/0x20 [ 223.387983][ T6484] slab_pre_alloc_hook+0x59/0x300 [ 223.393059][ T6484] ? __kernfs_new_node+0xa6/0x7f0 [ 223.398144][ T6484] ? rcu_is_watching+0x11/0xa0 [ 223.402973][ T6484] kmem_cache_alloc+0x56/0x2f0 [ 223.407796][ T6484] ? __kernfs_new_node+0xe1/0x7f0 [ 223.412890][ T6484] __kernfs_new_node+0xe1/0x7f0 [ 223.417797][ T6484] ? __lock_acquire+0x1465/0x7c40 [ 223.423233][ T6484] ? kernfs_new_node+0x250/0x250 [ 223.428335][ T6484] ? make_kgid+0x1c4/0x650 [ 223.432897][ T6484] ? from_kuid_munged+0x6e0/0x6e0 [ 223.437985][ T6484] kernfs_new_node+0x148/0x250 [ 223.442826][ T6484] kernfs_create_dir_ns+0x40/0x120 [ 223.448006][ T6484] sysfs_create_dir_ns+0x12c/0x290 [ 223.453212][ T6484] ? __lock_acquire+0x7c40/0x7c40 [ 223.458395][ T6484] ? sysfs_warn_dup+0xa0/0xa0 [ 223.463280][ T6484] ? do_raw_spin_unlock+0x11d/0x230 [ 223.468546][ T6484] kobject_add_internal+0x617/0xca0 [ 223.473821][ T6484] kobject_add+0x160/0x230 [ 223.478350][ T6484] ? kobject_init+0x1c0/0x1c0 [ 223.483105][ T6484] ? get_device_parent+0x288/0x3e0 [ 223.488293][ T6484] device_add+0x470/0x1050 [ 223.493215][ T6484] netdev_register_kobject+0x184/0x320 [ 223.498743][ T6484] register_netdevice+0x133a/0x1b80 [ 223.504018][ T6484] ? netif_stacked_transfer_operstate+0x200/0x200 [ 223.510508][ T6484] ? memset+0x1e/0x40 [ 223.514547][ T6484] ? alloc_netdev_mqs+0xad6/0xf10 [ 223.519623][ T6484] ? memcpy+0x3c/0x60 [ 223.523931][ T6484] ? __ip_tunnel_create+0x310/0x450 [ 223.529205][ T6484] __ip_tunnel_create+0x346/0x450 [ 223.534302][ T6484] ? ip_tunnel_init_net+0x7a0/0x7a0 [ 223.539561][ T6484] ? net_generic+0x1e/0x240 [ 223.544130][ T6484] ip_tunnel_init_net+0x2ac/0x7a0 [ 223.549219][ T6484] ? ip_tunnel_get_iflink+0x50/0x50 [ 223.554542][ T6484] ops_init+0x360/0x5e0 [ 223.558772][ T6484] setup_net+0x4f2/0xbd0 [ 223.563075][ T6484] ? copy_net_ns+0x5b0/0x5b0 [ 223.567731][ T6484] ? copy_net_ns+0x324/0x5b0 [ 223.572380][ T6484] ? down_read_killable+0x1cc/0x340 [ 223.577663][ T6484] copy_net_ns+0x33e/0x5b0 [ 223.582150][ T6484] create_new_namespaces+0x3ce/0x700 [ 223.587595][ T6484] unshare_nsproxy_namespaces+0x116/0x160 [ 223.593377][ T6484] ksys_unshare+0x4f6/0x8e0 [ 223.597945][ T6484] ? sighand_ctor+0x40/0x40 [ 223.602512][ T6484] ? lock_chain_count+0x20/0x20 [ 223.607427][ T6484] ? syscall_enter_from_user_mode+0x21/0x80 [ 223.613390][ T6484] __x64_sys_unshare+0x34/0x40 [ 223.618216][ T6484] do_syscall_64+0x4c/0xa0 [ 223.622681][ T6484] ? clear_bhb_loop+0x60/0xb0 [ 223.627405][ T6484] ? clear_bhb_loop+0x60/0xb0 [ 223.632145][ T6484] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.638102][ T6484] RIP: 0033:0x7f7c1e39e159 [ 223.642561][ T6484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.662254][ T6484] RSP: 002b:00007f7c1f207028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 223.670731][ T6484] RAX: ffffffffffffffda RBX: 00007f7c1e625fa0 RCX: 00007f7c1e39e159 [ 223.678803][ T6484] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 223.686867][ T6484] RBP: 00007f7c1e43506b R08: 0000000000000000 R09: 0000000000000000 [ 223.694895][ T6484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.702918][ T6484] R13: 00007f7c1e626038 R14: 00007f7c1e625fa0 R15: 00007fffacd8eae8 [ 223.710956][ T6484] [ 223.822770][ T6484] kobject_add_internal failed for erspan0 (error: -12 parent: net) [ 224.118592][ T6499] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 224.451844][ T6500] fuse: Bad value for 'group_id' [ 225.129631][ T6512] loop3: detected capacity change from 0 to 512 [ 225.296294][ T6512] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 225.320817][ T6516] device syzkaller0 entered promiscuous mode [ 225.389326][ T6516] tipc: Enabled bearer , priority 0 [ 225.537924][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 225.580132][ T6515] tipc: Resetting bearer [ 225.706507][ T6515] tipc: Disabling bearer [ 226.106493][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.686'. [ 227.515589][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.693'. [ 227.545310][ T6565] netlink: 176 bytes leftover after parsing attributes in process `syz.2.693'. [ 227.573390][ T6565] netlink: 24 bytes leftover after parsing attributes in process `syz.2.693'. [ 227.699930][ T6565] device syzkaller0 entered promiscuous mode [ 227.720993][ T6571] ip_tables: iptables: counters copy to user failed while replacing table [ 227.744631][ T6565] simple: /dev/video#_1 [ 227.749269][ T6565] simple: /dev/video#_2 [ 227.753589][ T6565] simple: /dev/video#_3 [ 227.757792][ T6565] simple: /dev/video#_4 [ 227.762028][ T6565] simple: /dev/video#_5 [ 227.766231][ T6565] simple: /dev/video#_6 [ 227.770471][ T6565] simple: /dev/video#_7 [ 227.774702][ T6565] simple: /dev/video#_8 [ 227.778932][ T6565] simple: /dev/video#_9 [ 227.783176][ T6565] simple: /dev/video#_10 [ 227.787466][ T6565] simple: /dev/video#_11 [ 227.791790][ T6565] simple: /dev/video#_12 [ 227.796106][ T6565] simple: /dev/video#_13 [ 227.800508][ T6565] simple: /dev/video#_14 [ 227.804791][ T6565] simple: /dev/video#_15 [ 227.809081][ T6565] simple: /dev/video#_16 [ 227.813415][ T6565] simple: /dev/video#_17 [ 227.817707][ T6565] simple: /dev/video#_18 [ 227.822021][ T6565] simple: /dev/video#_19 [ 227.826308][ T6565] simple: /dev/video#_20 [ 227.830637][ T6565] simple: /dev/video#_21 [ 227.834838][ T6577] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 227.834897][ T6565] simple: /dev/video#_22 [ 227.851049][ T6565] simple: /dev/video#_23 [ 227.855344][ T6565] simple: /dev/video#_24 [ 227.859697][ T6565] simple: /dev/video#_25 [ 227.863977][ T6565] simple: /dev/video#_26 [ 227.868262][ T6565] simple: /dev/video#_27 [ 227.872589][ T6565] simple: /dev/video#_28 [ 227.876871][ T6565] simple: /dev/video#_29 [ 227.881240][ T6565] simple: /dev/video#_30 [ 227.885527][ T6565] simple: /dev/video#_31 [ 227.889874][ T6565] simple: /dev/video#_32 [ 227.894154][ T6565] TC_ACT_REPEAT abuse ? [ 229.784450][ T6618] loop1: detected capacity change from 0 to 512 [ 229.800866][ T6619] loop2: detected capacity change from 0 to 512 [ 229.839823][ T6619] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.709: inode has both inline data and extents flags [ 229.854954][ T6618] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 229.890950][ T6619] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.709: couldn't read orphan inode 15 (err -117) [ 229.956566][ T6618] System zones: 1-12 [ 229.959323][ T6619] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 229.983565][ T6618] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.708: missing EA_INODE flag [ 230.040009][ T6618] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.708: error while reading EA inode 12 err=-117 [ 230.081316][ T6618] EXT4-fs (loop1): 1 orphan inode deleted [ 230.107519][ T6618] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 230.240572][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 230.544138][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 231.108457][ T6651] FAULT_INJECTION: forcing a failure. [ 231.108457][ T6651] name failslab, interval 1, probability 0, space 0, times 0 [ 231.173677][ T6651] CPU: 0 PID: 6651 Comm: syz.3.716 Not tainted syzkaller #0 [ 231.181066][ T6651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 231.191179][ T6651] Call Trace: [ 231.194499][ T6651] [ 231.197508][ T6651] dump_stack_lvl+0x188/0x24e [ 231.202254][ T6651] ? show_regs_print_info+0x12/0x12 [ 231.207510][ T6651] ? load_image+0x410/0x410 [ 231.212074][ T6651] ? __lock_acquire+0x7c40/0x7c40 [ 231.217279][ T6651] ? __prealloc_shrinker+0x6e3/0x7e0 [ 231.222624][ T6651] should_fail_ex+0x390/0x4c0 [ 231.227371][ T6651] should_failslab+0x5/0x20 [ 231.231936][ T6651] slab_pre_alloc_hook+0x59/0x300 [ 231.237012][ T6651] ? idr_alloc_u32+0x330/0x330 [ 231.241834][ T6651] ? lockdep_init_map_type+0x98/0x8d0 [ 231.247273][ T6651] ? __list_lru_init+0xb0/0x600 [ 231.252187][ T6651] __kmem_cache_alloc_node+0x4f/0x270 [ 231.257622][ T6651] ? __list_lru_init+0xb0/0x600 [ 231.262532][ T6651] __kmalloc+0xa3/0x240 [ 231.266751][ T6651] __list_lru_init+0xb0/0x600 [ 231.271496][ T6651] alloc_super+0x766/0x930 [ 231.275976][ T6651] ? kill_litter_super+0xa0/0xa0 [ 231.280968][ T6651] sget_fc+0x2d4/0x750 [ 231.285096][ T6651] ? kill_litter_super+0xa0/0xa0 [ 231.290103][ T6651] ? mqueue_get_tree+0xe0/0xe0 [ 231.294911][ T6651] get_tree_nodev+0x26/0x160 [ 231.299554][ T6651] vfs_get_tree+0x88/0x270 [ 231.304008][ T6651] fc_mount+0x18/0xa0 [ 231.308022][ T6651] mq_init_ns+0x39d/0x510 [ 231.312395][ T6651] copy_ipcs+0x2de/0x500 [ 231.316674][ T6651] create_new_namespaces+0x212/0x700 [ 231.322004][ T6651] unshare_nsproxy_namespaces+0x116/0x160 [ 231.327756][ T6651] ksys_unshare+0x4f6/0x8e0 [ 231.332300][ T6651] ? sighand_ctor+0x40/0x40 [ 231.336832][ T6651] ? lock_chain_count+0x20/0x20 [ 231.341720][ T6651] ? syscall_enter_from_user_mode+0x21/0x80 [ 231.347664][ T6651] __x64_sys_unshare+0x34/0x40 [ 231.352461][ T6651] do_syscall_64+0x4c/0xa0 [ 231.356918][ T6651] ? clear_bhb_loop+0x60/0xb0 [ 231.361620][ T6651] ? clear_bhb_loop+0x60/0xb0 [ 231.366325][ T6651] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.372252][ T6651] RIP: 0033:0x7f83a119e159 [ 231.376705][ T6651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.396432][ T6651] RSP: 002b:00007f83a2042028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 231.404877][ T6651] RAX: ffffffffffffffda RBX: 00007f83a1425fa0 RCX: 00007f83a119e159 [ 231.412972][ T6651] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 231.420979][ T6651] RBP: 00007f83a123506b R08: 0000000000000000 R09: 0000000000000000 [ 231.428976][ T6651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.436976][ T6651] R13: 00007f83a1426038 R14: 00007f83a1425fa0 R15: 00007ffd58636868 [ 231.444994][ T6651] [ 231.642794][ T6663] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 233.055767][ T6674] loop4: detected capacity change from 0 to 512 [ 233.196710][ T6674] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.722: inode has both inline data and extents flags [ 233.225860][ T6674] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.722: couldn't read orphan inode 15 (err -117) [ 233.265169][ T6674] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 233.369929][ T6680] loop1: detected capacity change from 0 to 512 [ 233.402841][ T6680] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 233.423281][ T6680] System zones: 1-12 [ 233.439016][ T6680] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.725: missing EA_INODE flag [ 233.563057][ T6680] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.725: error while reading EA inode 12 err=-117 [ 233.589923][ T6680] EXT4-fs (loop1): 1 orphan inode deleted [ 233.595750][ T6680] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 233.627726][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 234.331713][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 235.598071][ T6713] loop1: detected capacity change from 0 to 1024 [ 235.628874][ T6715] FAULT_INJECTION: forcing a failure. [ 235.628874][ T6715] name failslab, interval 1, probability 0, space 0, times 0 [ 235.661076][ T6713] EXT4-fs: Ignoring removed nomblk_io_submit option [ 235.667777][ T6713] EXT4-fs: inline encryption not supported [ 235.715571][ T6713] EXT4-fs: Ignoring removed nomblk_io_submit option [ 235.728207][ T6713] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 235.789710][ T6715] CPU: 0 PID: 6715 Comm: syz.0.733 Not tainted syzkaller #0 [ 235.797210][ T6715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.807321][ T6715] Call Trace: [ 235.810732][ T6715] [ 235.813711][ T6715] dump_stack_lvl+0x188/0x24e [ 235.818460][ T6715] ? show_regs_print_info+0x12/0x12 [ 235.823716][ T6715] ? load_image+0x410/0x410 [ 235.828284][ T6715] ? __lock_acquire+0x7c40/0x7c40 [ 235.833377][ T6715] ? __prealloc_shrinker+0x6e3/0x7e0 [ 235.838722][ T6715] should_fail_ex+0x390/0x4c0 [ 235.843462][ T6715] should_failslab+0x5/0x20 [ 235.848021][ T6715] slab_pre_alloc_hook+0x59/0x300 [ 235.853105][ T6715] ? idr_alloc_u32+0x330/0x330 [ 235.857931][ T6715] ? lockdep_init_map_type+0x98/0x8d0 [ 235.863360][ T6715] ? __list_lru_init+0xb0/0x600 [ 235.868266][ T6715] __kmem_cache_alloc_node+0x4f/0x270 [ 235.873698][ T6715] ? __list_lru_init+0xb0/0x600 [ 235.878612][ T6715] __kmalloc+0xa3/0x240 [ 235.882833][ T6715] __list_lru_init+0xb0/0x600 [ 235.887570][ T6715] alloc_super+0x766/0x930 [ 235.892052][ T6715] ? kill_litter_super+0xa0/0xa0 [ 235.897030][ T6715] sget_fc+0x2d4/0x750 [ 235.901140][ T6715] ? kill_litter_super+0xa0/0xa0 [ 235.906112][ T6715] ? mqueue_get_tree+0xe0/0xe0 [ 235.911348][ T6715] get_tree_nodev+0x26/0x160 [ 235.915975][ T6715] vfs_get_tree+0x88/0x270 [ 235.920434][ T6715] fc_mount+0x18/0xa0 [ 235.924449][ T6715] mq_init_ns+0x39d/0x510 [ 235.928818][ T6715] copy_ipcs+0x2de/0x500 [ 235.933102][ T6715] create_new_namespaces+0x212/0x700 [ 235.938426][ T6715] unshare_nsproxy_namespaces+0x116/0x160 [ 235.944180][ T6715] ksys_unshare+0x4f6/0x8e0 [ 235.948745][ T6715] ? sighand_ctor+0x40/0x40 [ 235.953309][ T6715] ? lock_chain_count+0x20/0x20 [ 235.958196][ T6715] ? syscall_enter_from_user_mode+0x21/0x80 [ 235.964136][ T6715] __x64_sys_unshare+0x34/0x40 [ 235.968954][ T6715] do_syscall_64+0x4c/0xa0 [ 235.973408][ T6715] ? clear_bhb_loop+0x60/0xb0 [ 235.978117][ T6715] ? clear_bhb_loop+0x60/0xb0 [ 235.982827][ T6715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.988762][ T6715] RIP: 0033:0x7fd2dcf9e159 [ 235.993210][ T6715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.012847][ T6715] RSP: 002b:00007fd2dde43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 236.021296][ T6715] RAX: ffffffffffffffda RBX: 00007fd2dd225fa0 RCX: 00007fd2dcf9e159 [ 236.029293][ T6715] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 236.037292][ T6715] RBP: 00007fd2dd03506b R08: 0000000000000000 R09: 0000000000000000 [ 236.045295][ T6715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.053309][ T6715] R13: 00007fd2dd226038 R14: 00007fd2dd225fa0 R15: 00007ffd75749238 [ 236.061365][ T6715] [ 236.152307][ T6726] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 236.171325][ T6713] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 236.193942][ T6713] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.222619][ T6715] FAULT_INJECTION: forcing a failure. [ 236.222619][ T6715] name failslab, interval 1, probability 0, space 0, times 0 [ 236.235529][ T6715] CPU: 1 PID: 6715 Comm: syz.0.733 Not tainted syzkaller #0 [ 236.242873][ T6715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.253050][ T6715] Call Trace: [ 236.256358][ T6715] [ 236.259319][ T6715] dump_stack_lvl+0x188/0x24e [ 236.264297][ T6715] ? show_regs_print_info+0x12/0x12 [ 236.269524][ T6715] ? load_image+0x410/0x410 [ 236.274118][ T6715] ? __might_sleep+0xd0/0xd0 [ 236.278741][ T6715] ? __lock_acquire+0x7c40/0x7c40 [ 236.283826][ T6715] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 236.289852][ T6715] should_fail_ex+0x390/0x4c0 [ 236.294663][ T6715] should_failslab+0x5/0x20 [ 236.299190][ T6715] slab_pre_alloc_hook+0x59/0x300 [ 236.304248][ T6715] ? lockdep_hardirqs_on+0x94/0x140 [ 236.309490][ T6715] kmem_cache_alloc+0x56/0x2f0 [ 236.314291][ T6715] ? taskstats_exit+0x149/0xcd0 [ 236.319218][ T6715] taskstats_exit+0x149/0xcd0 [ 236.323952][ T6715] ? sysctl_delayacct+0x220/0x220 [ 236.329016][ T6715] ? rcu_is_watching+0x11/0xa0 [ 236.333825][ T6715] ? mm_trace_rss_stat+0xa7/0x250 [ 236.338892][ T6715] ? sync_mm_rss+0x211/0x350 [ 236.343559][ T6715] do_exit+0x94b/0x2570 [ 236.347765][ T6715] ? put_task_struct+0x80/0x80 [ 236.352566][ T6715] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 236.358610][ T6715] ? lock_chain_count+0x20/0x20 [ 236.363499][ T6715] ? _raw_spin_lock_irq+0xb7/0xf0 [ 236.368588][ T6715] do_group_exit+0x229/0x2e0 [ 236.373215][ T6715] ? lockdep_hardirqs_on+0x94/0x140 [ 236.378474][ T6715] get_signal+0x1259/0x1340 [ 236.383053][ T6715] arch_do_signal_or_restart+0xc4/0x1310 [ 236.388851][ T6715] ? file_end_write+0xd8/0x250 [ 236.393738][ T6715] ? vfs_write+0x777/0x9a0 [ 236.398188][ T6715] ? do_futex+0x310/0x320 [ 236.402551][ T6715] ? file_end_write+0x250/0x250 [ 236.407432][ T6715] ? get_sigframe_size+0x10/0x10 [ 236.412451][ T6715] ? __ia32_sys_get_robust_list+0x100/0x100 [ 236.418386][ T6715] ? exit_to_user_mode_loop+0x3b/0x110 [ 236.423885][ T6715] exit_to_user_mode_loop+0x70/0x110 [ 236.429208][ T6715] exit_to_user_mode_prepare+0xee/0x180 [ 236.434793][ T6715] syscall_exit_to_user_mode+0x16/0x40 [ 236.440283][ T6715] do_syscall_64+0x58/0xa0 [ 236.444741][ T6715] ? clear_bhb_loop+0x60/0xb0 [ 236.449445][ T6715] ? clear_bhb_loop+0x60/0xb0 [ 236.454166][ T6715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.460092][ T6715] RIP: 0033:0x7fd2dcf9e159 [ 236.464547][ T6715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.484273][ T6715] RSP: 002b:00007fd2dde430e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 236.492713][ T6715] RAX: fffffffffffffe00 RBX: 00007fd2dd225fa8 RCX: 00007fd2dcf9e159 [ 236.500706][ T6715] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd2dd225fa8 [ 236.508704][ T6715] RBP: 00007fd2dd225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 236.516696][ T6715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.524691][ T6715] R13: 00007fd2dd226038 R14: 00007ffd75749150 R15: 00007ffd75749238 [ 236.532706][ T6715] [ 236.732833][ T6731] loop3: detected capacity change from 0 to 512 [ 236.760139][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 236.812200][ T6731] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.739: inode has both inline data and extents flags [ 236.979949][ T6731] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.739: couldn't read orphan inode 15 (err -117) [ 237.024197][ T6731] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 237.173427][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 237.277764][ T6746] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 237.289907][ T6746] FAULT_INJECTION: forcing a failure. [ 237.289907][ T6746] name failslab, interval 1, probability 0, space 0, times 0 [ 237.302936][ T6746] CPU: 1 PID: 6746 Comm: syz.4.743 Not tainted syzkaller #0 [ 237.310271][ T6746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.320410][ T6746] Call Trace: [ 237.323728][ T6746] [ 237.326702][ T6746] dump_stack_lvl+0x188/0x24e [ 237.331435][ T6746] ? show_regs_print_info+0x12/0x12 [ 237.336681][ T6746] ? load_image+0x410/0x410 [ 237.341235][ T6746] ? __might_sleep+0xd0/0xd0 [ 237.345952][ T6746] ? __lock_acquire+0x7c40/0x7c40 [ 237.351059][ T6746] should_fail_ex+0x390/0x4c0 [ 237.355805][ T6746] should_failslab+0x5/0x20 [ 237.360443][ T6746] slab_pre_alloc_hook+0x59/0x300 [ 237.365523][ T6746] ? security_sk_alloc+0x47/0x130 [ 237.370604][ T6746] __kmem_cache_alloc_node+0x4f/0x270 [ 237.376034][ T6746] ? security_sk_alloc+0x47/0x130 [ 237.381112][ T6746] __kmalloc+0xa3/0x240 [ 237.385327][ T6746] ? sk_prot_alloc+0xe7/0x210 [ 237.390199][ T6746] security_sk_alloc+0x47/0x130 [ 237.395112][ T6746] sk_prot_alloc+0x101/0x210 [ 237.399756][ T6746] ? sk_alloc+0x20/0x330 [ 237.404050][ T6746] sk_alloc+0x36/0x330 [ 237.408171][ T6746] __netlink_create+0x6b/0x2d0 [ 237.412984][ T6746] ? __lock_acquire+0x7c40/0x7c40 [ 237.418065][ T6746] ? nfnetlink_bind+0x3c0/0x3c0 [ 237.422974][ T6746] netlink_create+0x3a7/0x510 [ 237.427710][ T6746] ? nfnetlink_rcv+0x2470/0x2470 [ 237.432710][ T6746] __sock_create+0x49a/0x940 [ 237.437361][ T6746] __sys_socket+0xc4/0x190 [ 237.441841][ T6746] __x64_sys_socket+0x76/0x80 [ 237.446575][ T6746] do_syscall_64+0x4c/0xa0 [ 237.451034][ T6746] ? clear_bhb_loop+0x60/0xb0 [ 237.455754][ T6746] ? clear_bhb_loop+0x60/0xb0 [ 237.460472][ T6746] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.466418][ T6746] RIP: 0033:0x7f58f099e159 [ 237.470874][ T6746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.490521][ T6746] RSP: 002b:00007f58f183a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 237.498991][ T6746] RAX: ffffffffffffffda RBX: 00007f58f0c26180 RCX: 00007f58f099e159 [ 237.507004][ T6746] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 237.515013][ T6746] RBP: 00007f58f0a3506b R08: 0000000000000000 R09: 0000000000000000 [ 237.523026][ T6746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.531034][ T6746] R13: 00007f58f0c26218 R14: 00007f58f0c26180 R15: 00007fff46970e08 [ 237.539069][ T6746] [ 239.165170][ T6768] FAULT_INJECTION: forcing a failure. [ 239.165170][ T6768] name failslab, interval 1, probability 0, space 0, times 0 [ 239.215880][ T6767] loop4: detected capacity change from 0 to 1024 [ 239.229470][ T6768] CPU: 1 PID: 6768 Comm: syz.1.750 Not tainted syzkaller #0 [ 239.236846][ T6768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.247045][ T6768] Call Trace: [ 239.250372][ T6768] [ 239.253354][ T6768] dump_stack_lvl+0x188/0x24e [ 239.258091][ T6768] ? show_regs_print_info+0x12/0x12 [ 239.263352][ T6768] ? load_image+0x410/0x410 [ 239.267921][ T6768] ? __lock_acquire+0x7c40/0x7c40 [ 239.273005][ T6768] ? trace_contention_end+0x5f/0x170 [ 239.278361][ T6768] should_fail_ex+0x390/0x4c0 [ 239.283111][ T6768] should_failslab+0x5/0x20 [ 239.287662][ T6768] slab_pre_alloc_hook+0x59/0x300 [ 239.292741][ T6768] ? __list_lru_init+0xb0/0x600 [ 239.297661][ T6768] __kmem_cache_alloc_node+0x4f/0x270 [ 239.303097][ T6768] ? __list_lru_init+0xb0/0x600 [ 239.308051][ T6768] __kmalloc+0xa3/0x240 [ 239.312275][ T6768] __list_lru_init+0xb0/0x600 [ 239.317015][ T6768] alloc_super+0x795/0x930 [ 239.321503][ T6768] ? kill_litter_super+0xa0/0xa0 [ 239.326509][ T6768] sget_fc+0x2d4/0x750 [ 239.330636][ T6768] ? kill_litter_super+0xa0/0xa0 [ 239.335629][ T6768] ? mqueue_get_tree+0xe0/0xe0 [ 239.340448][ T6768] get_tree_nodev+0x26/0x160 [ 239.345107][ T6768] vfs_get_tree+0x88/0x270 [ 239.349594][ T6768] fc_mount+0x18/0xa0 [ 239.353634][ T6768] mq_init_ns+0x39d/0x510 [ 239.358033][ T6768] copy_ipcs+0x2de/0x500 [ 239.362340][ T6768] create_new_namespaces+0x212/0x700 [ 239.367724][ T6768] unshare_nsproxy_namespaces+0x116/0x160 [ 239.373524][ T6768] ksys_unshare+0x4f6/0x8e0 [ 239.378101][ T6768] ? sighand_ctor+0x40/0x40 [ 239.378937][ T6767] EXT4-fs: Ignoring removed nomblk_io_submit option [ 239.382639][ T6768] ? lock_chain_count+0x20/0x20 [ 239.382678][ T6768] ? syscall_enter_from_user_mode+0x21/0x80 [ 239.382713][ T6768] __x64_sys_unshare+0x34/0x40 [ 239.382737][ T6768] do_syscall_64+0x4c/0xa0 [ 239.382764][ T6768] ? clear_bhb_loop+0x60/0xb0 [ 239.382786][ T6768] ? clear_bhb_loop+0x60/0xb0 [ 239.382810][ T6768] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.382845][ T6768] RIP: 0033:0x7f7c1e39e159 [ 239.382866][ T6768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.382886][ T6768] RSP: 002b:00007f7c1f207028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 239.382911][ T6768] RAX: ffffffffffffffda RBX: 00007f7c1e625fa0 RCX: 00007f7c1e39e159 [ 239.382928][ T6768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 239.382943][ T6768] RBP: 00007f7c1e43506b R08: 0000000000000000 R09: 0000000000000000 [ 239.382957][ T6768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.382971][ T6768] R13: 00007f7c1e626038 R14: 00007f7c1e625fa0 R15: 00007fffacd8eae8 [ 239.383003][ T6768] [ 239.573403][ T6776] loop0: detected capacity change from 0 to 512 [ 239.659196][ T6776] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.755: inode has both inline data and extents flags [ 239.733508][ T6776] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.755: couldn't read orphan inode 15 (err -117) [ 239.779915][ T6767] EXT4-fs: inline encryption not supported [ 239.785892][ T6767] EXT4-fs: Ignoring removed nomblk_io_submit option [ 239.806368][ T6776] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 239.871296][ T6768] FAULT_INJECTION: forcing a failure. [ 239.871296][ T6768] name failslab, interval 1, probability 0, space 0, times 0 [ 239.949669][ T6768] CPU: 1 PID: 6768 Comm: syz.1.750 Not tainted syzkaller #0 [ 239.957059][ T6768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.967260][ T6768] Call Trace: [ 239.970604][ T6768] [ 239.973566][ T6768] dump_stack_lvl+0x188/0x24e [ 239.978277][ T6768] ? show_regs_print_info+0x12/0x12 [ 239.983509][ T6768] ? load_image+0x410/0x410 [ 239.988058][ T6768] ? __might_sleep+0xd0/0xd0 [ 239.992684][ T6768] ? __lock_acquire+0x7c40/0x7c40 [ 239.997753][ T6768] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 240.003770][ T6768] should_fail_ex+0x390/0x4c0 [ 240.008489][ T6768] should_failslab+0x5/0x20 [ 240.013019][ T6768] slab_pre_alloc_hook+0x59/0x300 [ 240.018096][ T6768] ? lockdep_hardirqs_on+0x94/0x140 [ 240.023343][ T6768] kmem_cache_alloc+0x56/0x2f0 [ 240.028132][ T6768] ? taskstats_exit+0x149/0xcd0 [ 240.033048][ T6768] taskstats_exit+0x149/0xcd0 [ 240.037762][ T6768] ? sysctl_delayacct+0x220/0x220 [ 240.042817][ T6768] ? rcu_is_watching+0x11/0xa0 [ 240.048766][ T6768] ? mm_trace_rss_stat+0xa7/0x250 [ 240.053840][ T6768] ? sync_mm_rss+0x211/0x350 [ 240.058479][ T6768] do_exit+0x94b/0x2570 [ 240.062719][ T6768] ? put_task_struct+0x80/0x80 [ 240.067545][ T6768] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 240.073664][ T6768] ? lock_chain_count+0x20/0x20 [ 240.078658][ T6768] ? _raw_spin_lock_irq+0xb7/0xf0 [ 240.083725][ T6768] do_group_exit+0x229/0x2e0 [ 240.088367][ T6768] ? lockdep_hardirqs_on+0x94/0x140 [ 240.093600][ T6768] get_signal+0x1259/0x1340 [ 240.098193][ T6768] arch_do_signal_or_restart+0xc4/0x1310 [ 240.103865][ T6768] ? file_end_write+0xd8/0x250 [ 240.108666][ T6768] ? vfs_write+0x777/0x9a0 [ 240.113151][ T6768] ? do_futex+0x310/0x320 [ 240.117513][ T6768] ? file_end_write+0x250/0x250 [ 240.122490][ T6768] ? get_sigframe_size+0x10/0x10 [ 240.127470][ T6768] ? __ia32_sys_get_robust_list+0x100/0x100 [ 240.133405][ T6768] ? exit_to_user_mode_loop+0x3b/0x110 [ 240.138923][ T6768] exit_to_user_mode_loop+0x70/0x110 [ 240.144609][ T6768] exit_to_user_mode_prepare+0xee/0x180 [ 240.150285][ T6768] syscall_exit_to_user_mode+0x16/0x40 [ 240.155779][ T6768] do_syscall_64+0x58/0xa0 [ 240.160227][ T6768] ? clear_bhb_loop+0x60/0xb0 [ 240.164935][ T6768] ? clear_bhb_loop+0x60/0xb0 [ 240.169642][ T6768] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.175579][ T6768] RIP: 0033:0x7f7c1e39e159 [ 240.180032][ T6768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.199672][ T6768] RSP: 002b:00007f7c1f2070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 240.208120][ T6768] RAX: fffffffffffffe00 RBX: 00007f7c1e625fa8 RCX: 00007f7c1e39e159 [ 240.216206][ T6768] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7c1e625fa8 [ 240.224206][ T6768] RBP: 00007f7c1e625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 240.232208][ T6768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.240201][ T6768] R13: 00007f7c1e626038 R14: 00007fffacd8ea00 R15: 00007fffacd8eae8 [ 240.248212][ T6768] [ 240.265815][ T6767] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 240.301410][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 240.328863][ T6767] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 240.358467][ T6767] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.487156][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 240.973651][ T6803] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 240.986163][ T6803] FAULT_INJECTION: forcing a failure. [ 240.986163][ T6803] name failslab, interval 1, probability 0, space 0, times 0 [ 240.999119][ T6803] CPU: 1 PID: 6803 Comm: syz.4.758 Not tainted syzkaller #0 [ 241.006461][ T6803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.016646][ T6803] Call Trace: [ 241.019972][ T6803] [ 241.022959][ T6803] dump_stack_lvl+0x188/0x24e [ 241.027687][ T6803] ? show_regs_print_info+0x12/0x12 [ 241.032943][ T6803] ? load_image+0x410/0x410 [ 241.037589][ T6803] ? __might_sleep+0xd0/0xd0 [ 241.042570][ T6803] ? __lock_acquire+0x7c40/0x7c40 [ 241.047658][ T6803] should_fail_ex+0x390/0x4c0 [ 241.053107][ T6803] should_failslab+0x5/0x20 [ 241.057672][ T6803] slab_pre_alloc_hook+0x59/0x300 [ 241.062758][ T6803] ? security_sk_alloc+0x47/0x130 [ 241.067865][ T6803] __kmem_cache_alloc_node+0x4f/0x270 [ 241.073302][ T6803] ? security_sk_alloc+0x47/0x130 [ 241.078383][ T6803] __kmalloc+0xa3/0x240 [ 241.082608][ T6803] ? sk_prot_alloc+0xe7/0x210 [ 241.087409][ T6803] security_sk_alloc+0x47/0x130 [ 241.092328][ T6803] sk_prot_alloc+0x101/0x210 [ 241.096965][ T6803] ? sk_alloc+0x20/0x330 [ 241.101259][ T6803] sk_alloc+0x36/0x330 [ 241.105383][ T6803] __netlink_create+0x6b/0x2d0 [ 241.110189][ T6803] ? __lock_acquire+0x7c40/0x7c40 [ 241.115264][ T6803] ? nfnetlink_bind+0x3c0/0x3c0 [ 241.120168][ T6803] netlink_create+0x3a7/0x510 [ 241.124890][ T6803] ? nfnetlink_rcv+0x2470/0x2470 [ 241.129884][ T6803] __sock_create+0x49a/0x940 [ 241.134540][ T6803] __sys_socket+0xc4/0x190 [ 241.139011][ T6803] __x64_sys_socket+0x76/0x80 [ 241.143783][ T6803] do_syscall_64+0x4c/0xa0 [ 241.148250][ T6803] ? clear_bhb_loop+0x60/0xb0 [ 241.152972][ T6803] ? clear_bhb_loop+0x60/0xb0 [ 241.157697][ T6803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.163655][ T6803] RIP: 0033:0x7f58f099e159 [ 241.168110][ T6803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.187765][ T6803] RSP: 002b:00007f58f183a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 241.196225][ T6803] RAX: ffffffffffffffda RBX: 00007f58f0c26180 RCX: 00007f58f099e159 [ 241.204337][ T6803] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 241.212344][ T6803] RBP: 00007f58f0a3506b R08: 0000000000000000 R09: 0000000000000000 [ 241.220355][ T6803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.228365][ T6803] R13: 00007f58f0c26218 R14: 00007f58f0c26180 R15: 00007fff46970e08 [ 241.236398][ T6803] [ 242.018530][ T6821] loop4: detected capacity change from 0 to 512 [ 242.064662][ T6821] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.767: inode has both inline data and extents flags [ 242.134643][ T6821] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.767: couldn't read orphan inode 15 (err -117) [ 242.147194][ T6821] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 242.228928][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 242.268771][ T6826] loop2: detected capacity change from 0 to 1024 [ 242.305462][ T6826] EXT4-fs: Ignoring removed nomblk_io_submit option [ 242.341299][ T6826] EXT4-fs: inline encryption not supported [ 242.363489][ T6828] IPVS: sh: FWM 3 0x00000003 - no destination available [ 242.377607][ T6826] EXT4-fs: Ignoring removed nomblk_io_submit option [ 242.479805][ T6826] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 242.547490][ T6826] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 242.564551][ T6826] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.646287][ T6835] device syzkaller0 entered promiscuous mode [ 242.654840][ T6834] loop1: detected capacity change from 0 to 512 [ 242.715591][ T6834] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 242.735727][ T6834] System zones: 1-12 [ 242.771087][ T6834] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.770: missing EA_INODE flag [ 242.803867][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 242.837871][ T6839] Bluetooth: MGMT ver 1.22 [ 242.858477][ T6834] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.770: error while reading EA inode 12 err=-117 [ 242.949652][ T6834] EXT4-fs (loop1): 1 orphan inode deleted [ 242.955493][ T6834] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 243.037109][ T6843] loop4: detected capacity change from 0 to 512 [ 243.149642][ T6843] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 243.544330][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 243.545228][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 243.645241][ T6859] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 243.657224][ T6859] FAULT_INJECTION: forcing a failure. [ 243.657224][ T6859] name failslab, interval 1, probability 0, space 0, times 0 [ 243.670526][ T6859] CPU: 0 PID: 6859 Comm: syz.2.773 Not tainted syzkaller #0 [ 243.677898][ T6859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 243.688019][ T6859] Call Trace: [ 243.691344][ T6859] [ 243.694323][ T6859] dump_stack_lvl+0x188/0x24e [ 243.699070][ T6859] ? show_regs_print_info+0x12/0x12 [ 243.704344][ T6859] ? load_image+0x410/0x410 [ 243.708924][ T6859] ? __lock_acquire+0x7c40/0x7c40 [ 243.714018][ T6859] should_fail_ex+0x390/0x4c0 [ 243.718767][ T6859] should_failslab+0x5/0x20 [ 243.723326][ T6859] slab_pre_alloc_hook+0x59/0x300 [ 243.728409][ T6859] kmem_cache_alloc_lru+0x49/0x2e0 [ 243.733583][ T6859] ? sock_alloc_inode+0x24/0xc0 [ 243.738496][ T6859] sock_alloc_inode+0x24/0xc0 [ 243.743224][ T6859] ? sockfs_init_fs_context+0xa0/0xa0 [ 243.748656][ T6859] new_inode_pseudo+0x5f/0x1c0 [ 243.753494][ T6859] __sock_create+0x129/0x940 [ 243.758153][ T6859] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 243.764206][ T6859] __sys_socket+0xc4/0x190 [ 243.768691][ T6859] __x64_sys_socket+0x76/0x80 [ 243.773439][ T6859] do_syscall_64+0x4c/0xa0 [ 243.777909][ T6859] ? clear_bhb_loop+0x60/0xb0 [ 243.782642][ T6859] ? clear_bhb_loop+0x60/0xb0 [ 243.787378][ T6859] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 243.793341][ T6859] RIP: 0033:0x7fd07759e159 [ 243.797813][ T6859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.817480][ T6859] RSP: 002b:00007fd078460028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 243.825967][ T6859] RAX: ffffffffffffffda RBX: 00007fd077826180 RCX: 00007fd07759e159 [ 243.834000][ T6859] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 243.842023][ T6859] RBP: 00007fd07763506b R08: 0000000000000000 R09: 0000000000000000 [ 243.850138][ T6859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.858165][ T6859] R13: 00007fd077826218 R14: 00007fd077826180 R15: 00007ffe41e9aa28 [ 243.866217][ T6859] [ 243.871420][ T6859] socket: no more sockets [ 243.983364][ T6864] loop4: detected capacity change from 0 to 512 [ 244.035589][ T6864] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.779: inode has both inline data and extents flags [ 244.145635][ T6864] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.779: couldn't read orphan inode 15 (err -117) [ 244.199263][ T6864] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 244.378403][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 244.486697][ T6877] loop0: detected capacity change from 0 to 1024 [ 244.513788][ T6879] FAULT_INJECTION: forcing a failure. [ 244.513788][ T6879] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 244.540365][ T6877] EXT4-fs: Ignoring removed nomblk_io_submit option [ 244.564061][ T6879] CPU: 1 PID: 6879 Comm: syz.4.784 Not tainted syzkaller #0 [ 244.566502][ T6877] EXT4-fs: inline encryption not supported [ 244.571440][ T6879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 244.571457][ T6879] Call Trace: [ 244.571466][ T6879] [ 244.571475][ T6879] dump_stack_lvl+0x188/0x24e [ 244.571506][ T6879] ? show_regs_print_info+0x12/0x12 [ 244.571530][ T6879] ? load_image+0x410/0x410 [ 244.571563][ T6879] ? __lock_acquire+0x7c40/0x7c40 [ 244.571599][ T6879] should_fail_ex+0x390/0x4c0 [ 244.594132][ T6877] EXT4-fs: Ignoring removed nomblk_io_submit option [ 244.598823][ T6879] prepare_alloc_pages+0x1e1/0x5b0 [ 244.598869][ T6879] __alloc_pages+0x130/0x4f0 [ 244.634944][ T6879] ? alloc_pgt_page+0x30/0x30 [ 244.639688][ T6879] ? zone_statistics+0x170/0x170 [ 244.644702][ T6879] ? alloc_pages+0x4dd/0x740 [ 244.649367][ T6879] get_zeroed_page+0x13/0x30 [ 244.654057][ T6879] machine_kexec_prepare+0x5c1/0x920 [ 244.659408][ T6879] ? arch_crash_save_vmcoreinfo+0xe0/0xe0 [ 244.665274][ T6879] ? arch_kexec_pre_free_pages+0x10/0x10 [ 244.670965][ T6879] ? kimage_free_pages+0x1e0/0x1e0 [ 244.676124][ T6879] ? do_kexec_load+0x28f/0x670 [ 244.680935][ T6879] do_kexec_load+0x442/0x670 [ 244.685577][ T6879] __se_sys_kexec_load+0x170/0x1c0 [ 244.690730][ T6879] do_syscall_64+0x4c/0xa0 [ 244.695178][ T6879] ? clear_bhb_loop+0x60/0xb0 [ 244.699889][ T6879] ? clear_bhb_loop+0x60/0xb0 [ 244.704599][ T6879] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 244.710534][ T6879] RIP: 0033:0x7f58f099e159 [ 244.714989][ T6879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.734670][ T6879] RSP: 002b:00007f58f187c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 244.743139][ T6879] RAX: ffffffffffffffda RBX: 00007f58f0c25fa0 RCX: 00007f58f099e159 [ 244.751152][ T6879] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002 [ 244.759165][ T6879] RBP: 00007f58f0a3506b R08: 0000000000000000 R09: 0000000000000000 [ 244.767264][ T6879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.775291][ T6879] R13: 00007f58f0c26038 R14: 00007f58f0c25fa0 R15: 00007fff46970e08 [ 244.783323][ T6879] [ 244.896937][ T6881] IPVS: sh: FWM 3 0x00000003 - no destination available [ 244.920175][ T6877] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 244.949913][ T4289] Bluetooth: hci0: command 0x0c3a tx timeout [ 244.956115][ T4291] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 245.016620][ T6877] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 245.038917][ T6877] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.106801][ T4291] Bluetooth: hci3: unexpected event for opcode 0x0005 [ 245.313945][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 245.561133][ T6899] ip_tables: iptables: counters copy to user failed while replacing table [ 245.639159][ T6903] loop4: detected capacity change from 0 to 512 [ 245.667591][ T6903] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.794: inode has both inline data and extents flags [ 245.737739][ T6906] FAULT_INJECTION: forcing a failure. [ 245.737739][ T6906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.752696][ T6906] CPU: 0 PID: 6906 Comm: syz.1.797 Not tainted syzkaller #0 [ 245.760148][ T6906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.770266][ T6906] Call Trace: [ 245.773597][ T6906] [ 245.776574][ T6906] dump_stack_lvl+0x188/0x24e [ 245.781314][ T6906] ? show_regs_print_info+0x12/0x12 [ 245.786571][ T6906] ? load_image+0x410/0x410 [ 245.791137][ T6906] ? __lock_acquire+0x7c40/0x7c40 [ 245.796231][ T6906] should_fail_ex+0x390/0x4c0 [ 245.800972][ T6906] _copy_from_user+0x2c/0x170 [ 245.805702][ T6906] kimage_load_segment+0x851/0x9f0 [ 245.810884][ T6906] do_kexec_load+0x4a5/0x670 [ 245.815538][ T6906] __se_sys_kexec_load+0x170/0x1c0 [ 245.820700][ T6906] do_syscall_64+0x4c/0xa0 [ 245.825154][ T6906] ? clear_bhb_loop+0x60/0xb0 [ 245.829858][ T6906] ? clear_bhb_loop+0x60/0xb0 [ 245.834581][ T6906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.840521][ T6906] RIP: 0033:0x7f7c1e39e159 [ 245.844974][ T6906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.864675][ T6906] RSP: 002b:00007f7c1f207028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 245.873136][ T6906] RAX: ffffffffffffffda RBX: 00007f7c1e625fa0 RCX: 00007f7c1e39e159 [ 245.881149][ T6906] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002 [ 245.889153][ T6906] RBP: 00007f7c1e43506b R08: 0000000000000000 R09: 0000000000000000 [ 245.897155][ T6906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.905177][ T6906] R13: 00007f7c1e626038 R14: 00007f7c1e625fa0 R15: 00007fffacd8eae8 [ 245.913287][ T6906] [ 245.929997][ T6903] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.794: couldn't read orphan inode 15 (err -117) [ 245.979612][ T6903] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 246.096195][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 246.503520][ T6922] loop1: detected capacity change from 0 to 1024 [ 246.532040][ T6922] EXT4-fs: Ignoring removed nomblk_io_submit option [ 246.539175][ T6922] EXT4-fs: inline encryption not supported [ 246.597027][ T6922] EXT4-fs: Ignoring removed nomblk_io_submit option [ 246.621556][ T6929] IPVS: sh: FWM 3 0x00000003 - no destination available [ 246.653088][ T6922] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 246.720945][ T6922] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 246.730571][ T6922] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.812453][ T6936] loop4: detected capacity change from 0 to 512 [ 246.832489][ T6937] netlink: 'syz.2.804': attribute type 1 has an invalid length. [ 246.843493][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 246.919201][ T6936] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 247.038784][ T6947] FAULT_INJECTION: forcing a failure. [ 247.038784][ T6947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.052146][ T6947] CPU: 0 PID: 6947 Comm: syz.1.810 Not tainted syzkaller #0 [ 247.059495][ T6947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.069874][ T6947] Call Trace: [ 247.073237][ T6947] [ 247.076214][ T6947] dump_stack_lvl+0x188/0x24e [ 247.080952][ T6947] ? show_regs_print_info+0x12/0x12 [ 247.086205][ T6947] ? load_image+0x410/0x410 [ 247.090772][ T6947] ? __lock_acquire+0x7c40/0x7c40 [ 247.095868][ T6947] should_fail_ex+0x390/0x4c0 [ 247.100622][ T6947] _copy_from_user+0x2c/0x170 [ 247.105359][ T6947] kimage_load_segment+0x851/0x9f0 [ 247.110536][ T6947] do_kexec_load+0x4a5/0x670 [ 247.115266][ T6947] __se_sys_kexec_load+0x170/0x1c0 [ 247.120503][ T6947] do_syscall_64+0x4c/0xa0 [ 247.124960][ T6947] ? clear_bhb_loop+0x60/0xb0 [ 247.129759][ T6947] ? clear_bhb_loop+0x60/0xb0 [ 247.134553][ T6947] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.140481][ T6947] RIP: 0033:0x7f7c1e39e159 [ 247.144920][ T6947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.164737][ T6947] RSP: 002b:00007f7c1f207028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 247.173194][ T6947] RAX: ffffffffffffffda RBX: 00007f7c1e625fa0 RCX: 00007f7c1e39e159 [ 247.181217][ T6947] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002 [ 247.189243][ T6947] RBP: 00007f7c1e43506b R08: 0000000000000000 R09: 0000000000000000 [ 247.197247][ T6947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.205283][ T6947] R13: 00007f7c1e626038 R14: 00007f7c1e625fa0 R15: 00007fffacd8eae8 [ 247.213492][ T6947] [ 247.736227][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 247.774433][ T6959] loop2: detected capacity change from 0 to 1024 [ 247.825277][ T6959] EXT4-fs: Ignoring removed nomblk_io_submit option [ 247.852347][ T6959] EXT4-fs: inline encryption not supported [ 247.885100][ T6959] EXT4-fs: Ignoring removed nomblk_io_submit option [ 247.949664][ T6959] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 248.014940][ T6959] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 248.042721][ T6959] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.206775][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 248.363115][ T6978] loop1: detected capacity change from 0 to 512 [ 248.438800][ T6978] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 248.616195][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 248.747309][ T6990] FAULT_INJECTION: forcing a failure. [ 248.747309][ T6990] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 248.762016][ T6990] CPU: 0 PID: 6990 Comm: syz.1.825 Not tainted syzkaller #0 [ 248.769472][ T6990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.779604][ T6990] Call Trace: [ 248.783020][ T6990] [ 248.786003][ T6990] dump_stack_lvl+0x188/0x24e [ 248.790748][ T6990] ? show_regs_print_info+0x12/0x12 [ 248.796092][ T6990] ? load_image+0x410/0x410 [ 248.800671][ T6990] ? __lock_acquire+0x7c40/0x7c40 [ 248.805783][ T6990] should_fail_ex+0x390/0x4c0 [ 248.810525][ T6990] prepare_alloc_pages+0x1e1/0x5b0 [ 248.815719][ T6990] __alloc_pages+0x130/0x4f0 [ 248.820379][ T6990] ? alloc_pgt_page+0x30/0x30 [ 248.825142][ T6990] ? zone_statistics+0x170/0x170 [ 248.830168][ T6990] ? alloc_pages+0x4dd/0x740 [ 248.834838][ T6990] get_zeroed_page+0x13/0x30 [ 248.839493][ T6990] machine_kexec_prepare+0x5c1/0x920 [ 248.844837][ T6990] ? arch_crash_save_vmcoreinfo+0xe0/0xe0 [ 248.850610][ T6990] ? arch_kexec_pre_free_pages+0x10/0x10 [ 248.856369][ T6990] ? kimage_free_pages+0x1e0/0x1e0 [ 248.861520][ T6990] ? do_kexec_load+0x28f/0x670 [ 248.866332][ T6990] do_kexec_load+0x442/0x670 [ 248.870971][ T6990] __se_sys_kexec_load+0x170/0x1c0 [ 248.876154][ T6990] do_syscall_64+0x4c/0xa0 [ 248.880622][ T6990] ? clear_bhb_loop+0x60/0xb0 [ 248.885337][ T6990] ? clear_bhb_loop+0x60/0xb0 [ 248.890048][ T6990] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.895991][ T6990] RIP: 0033:0x7f7c1e39e159 [ 248.900439][ T6990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.920291][ T6990] RSP: 002b:00007f7c1f207028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 248.928974][ T6990] RAX: ffffffffffffffda RBX: 00007f7c1e625fa0 RCX: 00007f7c1e39e159 [ 248.936997][ T6990] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002 [ 248.945011][ T6990] RBP: 00007f7c1e43506b R08: 0000000000000000 R09: 0000000000000000 [ 248.953058][ T6990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.961145][ T6990] R13: 00007f7c1e626038 R14: 00007f7c1e625fa0 R15: 00007fffacd8eae8 [ 248.969161][ T6990] [ 249.971353][ T7008] loop1: detected capacity change from 0 to 1024 [ 249.992079][ T7008] EXT4-fs: Ignoring removed nomblk_io_submit option [ 249.998780][ T7008] EXT4-fs: inline encryption not supported [ 250.006956][ T7008] EXT4-fs: Ignoring removed nomblk_io_submit option [ 250.038667][ T7008] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 250.117508][ T7008] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 250.128654][ T7008] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.227772][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 250.383883][ T7022] loop1: detected capacity change from 0 to 512 [ 250.457638][ T7022] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 250.485592][ T7029] ip_tables: iptables: counters copy to user failed while replacing table [ 250.560833][ T7031] FAULT_INJECTION: forcing a failure. [ 250.560833][ T7031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.574324][ T7031] CPU: 0 PID: 7031 Comm: syz.4.839 Not tainted syzkaller #0 [ 250.581665][ T7031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 250.591760][ T7031] Call Trace: [ 250.595124][ T7031] [ 250.598094][ T7031] dump_stack_lvl+0x188/0x24e [ 250.602832][ T7031] ? show_regs_print_info+0x12/0x12 [ 250.608166][ T7031] ? load_image+0x410/0x410 [ 250.612725][ T7031] ? __lock_acquire+0x7c40/0x7c40 [ 250.617826][ T7031] should_fail_ex+0x390/0x4c0 [ 250.622562][ T7031] _copy_from_user+0x2c/0x170 [ 250.627288][ T7031] kimage_load_segment+0x851/0x9f0 [ 250.632459][ T7031] do_kexec_load+0x4a5/0x670 [ 250.637087][ T7031] __se_sys_kexec_load+0x170/0x1c0 [ 250.642239][ T7031] do_syscall_64+0x4c/0xa0 [ 250.646682][ T7031] ? clear_bhb_loop+0x60/0xb0 [ 250.651383][ T7031] ? clear_bhb_loop+0x60/0xb0 [ 250.656091][ T7031] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.662026][ T7031] RIP: 0033:0x7f58f099e159 [ 250.666465][ T7031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.686116][ T7031] RSP: 002b:00007f58f187c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 250.694593][ T7031] RAX: ffffffffffffffda RBX: 00007f58f0c25fa0 RCX: 00007f58f099e159 [ 250.702607][ T7031] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002 [ 250.710607][ T7031] RBP: 00007f58f0a3506b R08: 0000000000000000 R09: 0000000000000000 [ 250.718604][ T7031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.726621][ T7031] R13: 00007f58f0c26038 R14: 00007f58f0c25fa0 R15: 00007fff46970e08 [ 250.734653][ T7031] [ 250.788216][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 251.653616][ T7045] netlink: 20 bytes leftover after parsing attributes in process `syz.2.844'. [ 251.756734][ T7045] FAULT_INJECTION: forcing a failure. [ 251.756734][ T7045] name fail_futex, interval 1, probability 0, space 0, times 0 [ 251.855552][ T7045] CPU: 0 PID: 7045 Comm: syz.2.844 Not tainted syzkaller #0 [ 251.862944][ T7045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.873332][ T7045] Call Trace: [ 251.876663][ T7045] [ 251.879736][ T7045] dump_stack_lvl+0x188/0x24e [ 251.884481][ T7045] ? show_regs_print_info+0x12/0x12 [ 251.889739][ T7045] ? load_image+0x410/0x410 [ 251.894301][ T7045] ? get_user_pages_fast_only+0x40/0x40 [ 251.899921][ T7045] should_fail_ex+0x390/0x4c0 [ 251.904665][ T7045] get_futex_key+0x922/0x1000 [ 251.909418][ T7045] ? futex_setup_timer+0xc0/0xc0 [ 251.914406][ T7045] ? verify_lock_unused+0x140/0x140 [ 251.919659][ T7045] futex_wake+0x123/0x4f0 [ 251.924038][ T7045] ? trace_raw_output_rdev_start_radar_detection+0x370/0x390 [ 251.931916][ T7045] ? futex_wake_mark+0x150/0x150 [ 251.936938][ T7045] do_futex+0x2e2/0x320 [ 251.941160][ T7045] ? __ia32_sys_get_robust_list+0x100/0x100 [ 251.947139][ T7045] ? __might_fault+0xc2/0x120 [ 251.951874][ T7045] mm_release+0x20a/0x330 [ 251.956249][ T7045] ? exit_robust_list+0x2ce/0x2f0 [ 251.961322][ T7045] ? exit_mm_release+0x30/0x30 [ 251.966137][ T7045] ? lockdep_hardirqs_on+0x94/0x140 [ 251.971401][ T7045] exit_mm+0xa0/0x350 [ 251.975437][ T7045] ? sysctl_delayacct+0x220/0x220 [ 251.980516][ T7045] ? do_exit+0x2570/0x2570 [ 251.984980][ T7045] ? mm_trace_rss_stat+0xa7/0x250 [ 251.990060][ T7045] ? sync_mm_rss+0x211/0x350 [ 251.994709][ T7045] do_exit+0x958/0x2570 [ 251.998935][ T7045] ? put_task_struct+0x80/0x80 [ 252.003752][ T7045] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 252.009784][ T7045] ? lock_chain_count+0x20/0x20 [ 252.014681][ T7045] ? _raw_spin_lock_irq+0xb7/0xf0 [ 252.019761][ T7045] do_group_exit+0x229/0x2e0 [ 252.024401][ T7045] ? lockdep_hardirqs_on+0x94/0x140 [ 252.029658][ T7045] get_signal+0x1259/0x1340 [ 252.034227][ T7045] arch_do_signal_or_restart+0xc4/0x1310 [ 252.039919][ T7045] ? do_futex+0x310/0x320 [ 252.044293][ T7045] ? get_sigframe_size+0x10/0x10 [ 252.049308][ T7045] ? __ia32_sys_get_robust_list+0x100/0x100 [ 252.055258][ T7045] ? fput+0x150/0x1a0 [ 252.059307][ T7045] ? exit_to_user_mode_loop+0x3b/0x110 [ 252.064839][ T7045] exit_to_user_mode_loop+0x70/0x110 [ 252.070188][ T7045] exit_to_user_mode_prepare+0xee/0x180 [ 252.075795][ T7045] syscall_exit_to_user_mode+0x16/0x40 [ 252.081308][ T7045] do_syscall_64+0x58/0xa0 [ 252.085774][ T7045] ? clear_bhb_loop+0x60/0xb0 [ 252.090499][ T7045] ? clear_bhb_loop+0x60/0xb0 [ 252.095221][ T7045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.101168][ T7045] RIP: 0033:0x7fd07759e159 [ 252.105627][ T7045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.125630][ T7045] RSP: 002b:00007fd0784a20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 252.134102][ T7045] RAX: fffffffffffffe00 RBX: 00007fd077825fa8 RCX: 00007fd07759e159 [ 252.142124][ T7045] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd077825fa8 [ 252.150227][ T7045] RBP: 00007fd077825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 252.158330][ T7045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.166357][ T7045] R13: 00007fd077826038 R14: 00007ffe41e9a940 R15: 00007ffe41e9aa28 [ 252.174429][ T7045] [ 252.428911][ T7063] IPVS: sh: FWM 3 0x00000003 - no destination available [ 252.547536][ T7067] FAULT_INJECTION: forcing a failure. [ 252.547536][ T7067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.564791][ T7067] CPU: 1 PID: 7067 Comm: syz.3.852 Not tainted syzkaller #0 [ 252.572180][ T7067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.582293][ T7067] Call Trace: [ 252.585618][ T7067] [ 252.588587][ T7067] dump_stack_lvl+0x188/0x24e [ 252.593324][ T7067] ? show_regs_print_info+0x12/0x12 [ 252.598580][ T7067] ? load_image+0x410/0x410 [ 252.603148][ T7067] ? __lock_acquire+0x7c40/0x7c40 [ 252.608252][ T7067] should_fail_ex+0x390/0x4c0 [ 252.613006][ T7067] _copy_from_user+0x2c/0x170 [ 252.617993][ T7067] kimage_load_segment+0x851/0x9f0 [ 252.623187][ T7067] do_kexec_load+0x4a5/0x670 [ 252.627847][ T7067] __se_sys_kexec_load+0x170/0x1c0 [ 252.633021][ T7067] do_syscall_64+0x4c/0xa0 [ 252.637486][ T7067] ? clear_bhb_loop+0x60/0xb0 [ 252.642221][ T7067] ? clear_bhb_loop+0x60/0xb0 [ 252.646954][ T7067] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.652915][ T7067] RIP: 0033:0x7f83a119e159 [ 252.657379][ T7067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.677038][ T7067] RSP: 002b:00007f83a2042028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 252.685515][ T7067] RAX: ffffffffffffffda RBX: 00007f83a1425fa0 RCX: 00007f83a119e159 [ 252.693536][ T7067] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002 [ 252.701561][ T7067] RBP: 00007f83a123506b R08: 0000000000000000 R09: 0000000000000000 [ 252.709580][ T7067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.717635][ T7067] R13: 00007f83a1426038 R14: 00007f83a1425fa0 R15: 00007ffd58636868 [ 252.725676][ T7067] [ 252.755489][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.853'. [ 253.603854][ T7089] netlink: 20 bytes leftover after parsing attributes in process `syz.4.861'. [ 253.872689][ T7098] FAULT_INJECTION: forcing a failure. [ 253.872689][ T7098] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 253.886371][ T7098] CPU: 1 PID: 7098 Comm: syz.4.865 Not tainted syzkaller #0 [ 253.893719][ T7098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.903826][ T7098] Call Trace: [ 253.907142][ T7098] [ 253.910110][ T7098] dump_stack_lvl+0x188/0x24e [ 253.914860][ T7098] ? show_regs_print_info+0x12/0x12 [ 253.920192][ T7098] ? load_image+0x410/0x410 [ 253.924758][ T7098] ? __lock_acquire+0x7c40/0x7c40 [ 253.929845][ T7098] should_fail_ex+0x390/0x4c0 [ 253.934584][ T7098] prepare_alloc_pages+0x1e1/0x5b0 [ 253.939765][ T7098] __alloc_pages+0x130/0x4f0 [ 253.944416][ T7098] ? alloc_pgt_page+0x30/0x30 [ 253.949247][ T7098] ? zone_statistics+0x170/0x170 [ 253.954420][ T7098] ? alloc_pages+0x4dd/0x740 [ 253.959078][ T7098] get_zeroed_page+0x13/0x30 [ 253.963760][ T7098] machine_kexec_prepare+0x5c1/0x920 [ 253.969129][ T7098] ? arch_crash_save_vmcoreinfo+0xe0/0xe0 [ 253.975007][ T7098] ? arch_kexec_pre_free_pages+0x10/0x10 [ 253.980717][ T7098] ? kimage_free_pages+0x1e0/0x1e0 [ 253.985896][ T7098] ? do_kexec_load+0x28f/0x670 [ 253.990725][ T7098] do_kexec_load+0x442/0x670 [ 253.995384][ T7098] __se_sys_kexec_load+0x170/0x1c0 [ 254.000545][ T7098] do_syscall_64+0x4c/0xa0 [ 254.005010][ T7098] ? clear_bhb_loop+0x60/0xb0 [ 254.009823][ T7098] ? clear_bhb_loop+0x60/0xb0 [ 254.014564][ T7098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.020516][ T7098] RIP: 0033:0x7f58f099e159 [ 254.024980][ T7098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.044648][ T7098] RSP: 002b:00007f58f187c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 254.053212][ T7098] RAX: ffffffffffffffda RBX: 00007f58f0c25fa0 RCX: 00007f58f099e159 [ 254.061248][ T7098] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002 [ 254.069307][ T7098] RBP: 00007f58f0a3506b R08: 0000000000000000 R09: 0000000000000000 [ 254.077540][ T7098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.085657][ T7098] R13: 00007f58f0c26038 R14: 00007f58f0c25fa0 R15: 00007fff46970e08 [ 254.093693][ T7098] [ 254.918089][ T7120] netlink: 20 bytes leftover after parsing attributes in process `syz.1.876'. [ 255.051193][ T7123] IPVS: sh: FWM 3 0x00000003 - no destination available [ 255.070997][ T7125] loop3: detected capacity change from 0 to 512 [ 255.125457][ T7125] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 255.152128][ T7128] loop1: detected capacity change from 0 to 512 [ 255.173533][ T7125] System zones: 1-12 [ 255.190584][ T7130] FAULT_INJECTION: forcing a failure. [ 255.190584][ T7130] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 255.216166][ T7125] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.878: missing EA_INODE flag [ 255.248711][ T7130] CPU: 1 PID: 7130 Comm: syz.0.879 Not tainted syzkaller #0 [ 255.256142][ T7130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 255.266261][ T7130] Call Trace: [ 255.269607][ T7130] [ 255.272582][ T7130] dump_stack_lvl+0x188/0x24e [ 255.277310][ T7130] ? show_regs_print_info+0x12/0x12 [ 255.282544][ T7130] ? load_image+0x410/0x410 [ 255.287096][ T7130] ? __lock_acquire+0x7c40/0x7c40 [ 255.292194][ T7130] should_fail_ex+0x390/0x4c0 [ 255.296914][ T7130] prepare_alloc_pages+0x1e1/0x5b0 [ 255.302062][ T7130] __alloc_pages+0x130/0x4f0 [ 255.306688][ T7130] ? zone_statistics+0x170/0x170 [ 255.311693][ T7130] ? alloc_pages+0x4dd/0x740 [ 255.316323][ T7130] kimage_alloc_pages+0xc5/0x330 [ 255.321303][ T7130] kimage_alloc_control_pages+0x47f/0xb30 [ 255.327154][ T7130] ? kimage_free_pages+0x1e0/0x1e0 [ 255.332306][ T7130] ? do_kexec_load+0x28f/0x670 [ 255.337110][ T7130] do_kexec_load+0x39e/0x670 [ 255.341826][ T7130] __se_sys_kexec_load+0x170/0x1c0 [ 255.346975][ T7130] do_syscall_64+0x4c/0xa0 [ 255.351416][ T7130] ? clear_bhb_loop+0x60/0xb0 [ 255.356116][ T7130] ? clear_bhb_loop+0x60/0xb0 [ 255.360824][ T7130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.366753][ T7130] RIP: 0033:0x7fd2dcf9e159 [ 255.371204][ T7130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.390847][ T7130] RSP: 002b:00007fd2dde43028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 255.399291][ T7130] RAX: ffffffffffffffda RBX: 00007fd2dd225fa0 RCX: 00007fd2dcf9e159 [ 255.407284][ T7130] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002 [ 255.415289][ T7130] RBP: 00007fd2dd03506b R08: 0000000000000000 R09: 0000000000000000 [ 255.423288][ T7130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.431279][ T7130] R13: 00007fd2dd226038 R14: 00007fd2dd225fa0 R15: 00007ffd75749238 [ 255.439320][ T7130] [ 255.445862][ T7125] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.878: error while reading EA inode 12 err=-117 [ 255.473149][ T7128] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 255.482339][ T7125] EXT4-fs (loop3): 1 orphan inode deleted [ 255.486778][ T7130] kexec: Could not allocate swap buffer [ 255.488126][ T7125] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 255.816299][ T7140] netlink: 'syz.4.883': attribute type 5 has an invalid length. [ 255.894968][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 256.010072][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.016744][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.049593][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 256.523704][ T7159] IPVS: sh: FWM 3 0x00000003 - no destination available [ 256.574326][ T7165] loop3: detected capacity change from 0 to 512 [ 256.693889][ T7165] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 256.734165][ T7170] ip_tables: iptables: counters copy to user failed while replacing table [ 256.846290][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 257.097392][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.900'. [ 257.127419][ T7184] netlink: 176 bytes leftover after parsing attributes in process `syz.2.900'. [ 257.137398][ T7184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.900'. [ 257.206563][ T7184] device syzkaller0 entered promiscuous mode [ 257.416786][ T7190] device syzkaller0 entered promiscuous mode [ 257.782589][ T7201] IPVS: sh: FWM 3 0x00000003 - no destination available [ 257.880932][ T7205] loop2: detected capacity change from 0 to 512 [ 257.961281][ T7205] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 258.069750][ T7215] tipc: Cannot configure node identity twice [ 258.229675][ T4291] Bluetooth: hci1: command 0x2041 tx timeout [ 258.276024][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 258.667465][ T7238] loop1: detected capacity change from 0 to 512 [ 258.876196][ T7238] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.918: inode has both inline data and extents flags [ 258.918572][ T7238] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.918: couldn't read orphan inode 15 (err -117) [ 259.001675][ T7238] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 259.780447][ T7249] ip_tables: iptables: counters copy to user failed while replacing table [ 259.864036][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 259.888617][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.922'. [ 260.105622][ T7259] netlink: 80 bytes leftover after parsing attributes in process `syz.1.924'. [ 260.507875][ T7273] netlink: 180 bytes leftover after parsing attributes in process `syz.4.933'. [ 260.754473][ T7280] loop0: detected capacity change from 0 to 512 [ 260.848141][ T7281] fuse: Unknown parameter 'group_id00000000000000000000' [ 261.531548][ T7280] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.935: inode has both inline data and extents flags [ 261.578827][ T7280] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.935: couldn't read orphan inode 15 (err -117) [ 261.615307][ T7285] ip_tables: iptables: counters copy to user failed while replacing table [ 261.690412][ T7280] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 261.711618][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.937'. [ 261.770984][ T7286] FAULT_INJECTION: forcing a failure. [ 261.770984][ T7286] name fail_futex, interval 1, probability 0, space 0, times 0 [ 261.822352][ T7286] CPU: 0 PID: 7286 Comm: syz.3.937 Not tainted syzkaller #0 [ 261.829770][ T7286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 261.839880][ T7286] Call Trace: [ 261.843243][ T7286] [ 261.846232][ T7286] dump_stack_lvl+0x188/0x24e [ 261.850968][ T7286] ? show_regs_print_info+0x12/0x12 [ 261.856228][ T7286] ? load_image+0x410/0x410 [ 261.860799][ T7286] ? get_user_pages_fast_only+0x40/0x40 [ 261.866404][ T7286] should_fail_ex+0x390/0x4c0 [ 261.871148][ T7286] get_futex_key+0x922/0x1000 [ 261.875878][ T7286] ? futex_setup_timer+0xc0/0xc0 [ 261.881054][ T7286] ? verify_lock_unused+0x140/0x140 [ 261.886498][ T7286] futex_wake+0x123/0x4f0 [ 261.890883][ T7286] ? futex_wake_mark+0x150/0x150 [ 261.895883][ T7286] do_futex+0x2e2/0x320 [ 261.900262][ T7286] ? __ia32_sys_get_robust_list+0x100/0x100 [ 261.906213][ T7286] ? __might_fault+0xc2/0x120 [ 261.910935][ T7286] mm_release+0x20a/0x330 [ 261.915304][ T7286] ? exit_robust_list+0x2ce/0x2f0 [ 261.920368][ T7286] ? exit_mm_release+0x30/0x30 [ 261.925183][ T7286] ? lockdep_hardirqs_on+0x94/0x140 [ 261.930446][ T7286] exit_mm+0xa0/0x350 [ 261.934482][ T7286] ? sysctl_delayacct+0x220/0x220 [ 261.939546][ T7286] ? do_exit+0x2570/0x2570 [ 261.944007][ T7286] ? mm_trace_rss_stat+0xa7/0x250 [ 261.949068][ T7286] ? sync_mm_rss+0x211/0x350 [ 261.953693][ T7286] do_exit+0x958/0x2570 [ 261.957895][ T7286] ? put_task_struct+0x80/0x80 [ 261.962695][ T7286] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 261.968709][ T7286] ? lock_chain_count+0x20/0x20 [ 261.973599][ T7286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 261.978691][ T7286] do_group_exit+0x229/0x2e0 [ 261.983318][ T7286] ? lockdep_hardirqs_on+0x94/0x140 [ 261.988565][ T7286] get_signal+0x1259/0x1340 [ 261.993126][ T7286] arch_do_signal_or_restart+0xc4/0x1310 [ 261.998810][ T7286] ? do_futex+0x310/0x320 [ 262.003178][ T7286] ? get_sigframe_size+0x10/0x10 [ 262.008145][ T7286] ? __ia32_sys_get_robust_list+0x100/0x100 [ 262.014067][ T7286] ? fput+0x150/0x1a0 [ 262.018090][ T7286] ? exit_to_user_mode_loop+0x3b/0x110 [ 262.023838][ T7286] exit_to_user_mode_loop+0x70/0x110 [ 262.029159][ T7286] exit_to_user_mode_prepare+0xee/0x180 [ 262.034740][ T7286] syscall_exit_to_user_mode+0x16/0x40 [ 262.040235][ T7286] do_syscall_64+0x58/0xa0 [ 262.044677][ T7286] ? clear_bhb_loop+0x60/0xb0 [ 262.049387][ T7286] ? clear_bhb_loop+0x60/0xb0 [ 262.054097][ T7286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 262.060140][ T7286] RIP: 0033:0x7f83a119e159 [ 262.064579][ T7286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.084309][ T7286] RSP: 002b:00007f83a20420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 262.092761][ T7286] RAX: fffffffffffffe00 RBX: 00007f83a1425fa8 RCX: 00007f83a119e159 [ 262.100793][ T7286] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f83a1425fa8 [ 262.108788][ T7286] RBP: 00007f83a1425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 262.116870][ T7286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.124870][ T7286] R13: 00007f83a1426038 R14: 00007ffd58636780 R15: 00007ffd58636868 [ 262.132888][ T7286] [ 262.153676][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 263.212072][ T7332] fuse: Unknown parameter 'group_id00000000000000000000' [ 263.982541][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.952'. [ 264.211301][ T7342] device syzkaller0 entered promiscuous mode [ 264.224551][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.955'. [ 264.250975][ T7346] netlink: 176 bytes leftover after parsing attributes in process `syz.1.955'. [ 264.286845][ T7346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.955'. [ 264.439150][ T7346] device syzkaller0 entered promiscuous mode [ 264.842162][ T7363] device syzkaller0 entered promiscuous mode [ 264.884637][ T7370] netlink: 108 bytes leftover after parsing attributes in process `syz.0.963'. [ 265.219219][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.965'. [ 265.350802][ T7377] FAULT_INJECTION: forcing a failure. [ 265.350802][ T7377] name failslab, interval 1, probability 0, space 0, times 0 [ 265.588025][ T7377] CPU: 0 PID: 7377 Comm: syz.4.965 Not tainted syzkaller #0 [ 265.595509][ T7377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 265.605603][ T7377] Call Trace: [ 265.608922][ T7377] [ 265.611894][ T7377] dump_stack_lvl+0x188/0x24e [ 265.616708][ T7377] ? show_regs_print_info+0x12/0x12 [ 265.621948][ T7377] ? load_image+0x410/0x410 [ 265.626511][ T7377] ? verify_lock_unused+0x140/0x140 [ 265.631772][ T7377] should_fail_ex+0x390/0x4c0 [ 265.636515][ T7377] should_failslab+0x5/0x20 [ 265.641062][ T7377] slab_pre_alloc_hook+0x59/0x300 [ 265.646133][ T7377] kmem_cache_alloc+0x56/0x2f0 [ 265.650942][ T7377] ? skb_clone+0x1e7/0x370 [ 265.655406][ T7377] skb_clone+0x1e7/0x370 [ 265.659739][ T7377] __netlink_deliver_tap+0x3e4/0x7e0 [ 265.665081][ T7377] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.670326][ T7377] netlink_deliver_tap+0x19c/0x1b0 [ 265.675511][ T7377] netlink_sendskb+0x64/0x130 [ 265.680229][ T7377] netlink_ack+0xcd1/0x1160 [ 265.684812][ T7377] ? preempt_schedule_notrace+0x120/0x120 [ 265.690609][ T7377] ? netlink_dump+0xcd0/0xcd0 [ 265.695336][ T7377] ? netlink_rcv_skb+0x258/0x440 [ 265.700327][ T7377] netlink_rcv_skb+0x26d/0x440 [ 265.705150][ T7377] ? nfnetlink_unbind+0x160/0x160 [ 265.710247][ T7377] ? netlink_ack+0x1160/0x1160 [ 265.715074][ T7377] ? bpf_lsm_capable+0x5/0x10 [ 265.719845][ T7377] ? security_capable+0x85/0xb0 [ 265.724754][ T7377] nfnetlink_rcv+0x2b0/0x2470 [ 265.729501][ T7377] ? __local_bh_enable_ip+0x136/0x1c0 [ 265.734924][ T7377] ? _local_bh_enable+0xa0/0xa0 [ 265.739837][ T7377] ? __dev_queue_xmit+0x281/0x3810 [ 265.745018][ T7377] ? __dev_queue_xmit+0x281/0x3810 [ 265.750185][ T7377] ? __dev_queue_xmit+0x1d84/0x3810 [ 265.755449][ T7377] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 265.761057][ T7377] ? ref_tracker_free+0x682/0x830 [ 265.766149][ T7377] ? refcount_inc+0x70/0x70 [ 265.770716][ T7377] ? memcpy+0x3c/0x60 [ 265.774741][ T7377] ? __copy_skb_header+0x3ba/0x4f0 [ 265.780017][ T7377] ? __skb_clone+0x446/0x6c0 [ 265.784654][ T7377] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.789918][ T7377] ? __netlink_deliver_tap+0x7a9/0x7e0 [ 265.795425][ T7377] ? __lock_acquire+0x7c40/0x7c40 [ 265.800507][ T7377] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.805749][ T7377] netlink_unicast+0x7ad/0x920 [ 265.810574][ T7377] netlink_sendmsg+0x8ad/0xbd0 [ 265.815396][ T7377] ? netlink_getsockopt+0x550/0x550 [ 265.820644][ T7377] ? apparmor_socket_sendmsg+0x8a/0x330 [ 265.826243][ T7377] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 265.831573][ T7377] ? security_socket_sendmsg+0x7c/0xa0 [ 265.837085][ T7377] ? netlink_getsockopt+0x550/0x550 [ 265.842330][ T7377] ____sys_sendmsg+0x5ed/0x9a0 [ 265.847155][ T7377] ? __sys_sendmsg_sock+0x30/0x30 [ 265.852219][ T7377] ? __import_iovec+0x306/0x510 [ 265.857140][ T7377] ? import_iovec+0x6f/0xa0 [ 265.861736][ T7377] ___sys_sendmsg+0x2a2/0x360 [ 265.866475][ T7377] ? __sys_sendmsg+0x2a0/0x2a0 [ 265.871333][ T7377] __se_sys_sendmsg+0x1c3/0x2b0 [ 265.876226][ T7377] ? __x64_sys_sendmsg+0x80/0x80 [ 265.881225][ T7377] ? lockdep_hardirqs_on+0x94/0x140 [ 265.886473][ T7377] do_syscall_64+0x4c/0xa0 [ 265.890930][ T7377] ? clear_bhb_loop+0x60/0xb0 [ 265.895662][ T7377] ? clear_bhb_loop+0x60/0xb0 [ 265.900414][ T7377] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.906369][ T7377] RIP: 0033:0x7f58f099e159 [ 265.910866][ T7377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.930533][ T7377] RSP: 002b:00007f58f187c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.938996][ T7377] RAX: ffffffffffffffda RBX: 00007f58f0c25fa0 RCX: 00007f58f099e159 [ 265.947016][ T7377] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000005 [ 265.955061][ T7377] RBP: 00007f58f0a3506b R08: 0000000000000000 R09: 0000000000000000 [ 265.963160][ T7377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.971174][ T7377] R13: 00007f58f0c26038 R14: 00007f58f0c25fa0 R15: 00007fff46970e08 [ 265.979209][ T7377] [ 266.449016][ T7396] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 267.005455][ T7406] netlink: 108 bytes leftover after parsing attributes in process `syz.0.976'. [ 267.076514][ T7408] loop4: detected capacity change from 0 to 512 [ 267.144547][ T7408] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 267.241277][ T7408] System zones: 1-12 [ 267.312940][ T7408] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.977: missing EA_INODE flag [ 267.334904][ T7408] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.977: error while reading EA inode 12 err=-117 [ 267.353388][ T7408] EXT4-fs (loop4): 1 orphan inode deleted [ 267.361797][ T7408] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 268.275768][ T7424] fuse: Bad value for 'user_id' [ 268.476038][ T7421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.979'. [ 268.518322][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 268.567969][ T7421] netlink: 176 bytes leftover after parsing attributes in process `syz.0.979'. [ 268.702241][ T7421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.979'. [ 268.742094][ T7426] device syzkaller0 entered promiscuous mode [ 268.779427][ T7428] UDC core: g1: couldn't find an available UDC or it's busy [ 269.118827][ T7439] FAULT_INJECTION: forcing a failure. [ 269.118827][ T7439] name fail_futex, interval 1, probability 0, space 0, times 0 [ 269.133203][ T7439] CPU: 0 PID: 7439 Comm: syz.1.988 Not tainted syzkaller #0 [ 269.140554][ T7439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 269.150138][ T7444] netlink: 108 bytes leftover after parsing attributes in process `syz.0.989'. [ 269.150624][ T7439] Call Trace: [ 269.150634][ T7439] [ 269.165866][ T7439] dump_stack_lvl+0x188/0x24e [ 269.170599][ T7439] ? show_regs_print_info+0x12/0x12 [ 269.175836][ T7439] ? load_image+0x410/0x410 [ 269.180378][ T7439] ? mark_lock+0x94/0x320 [ 269.184754][ T7439] ? __lock_acquire+0x1465/0x7c40 [ 269.189821][ T7439] should_fail_ex+0x390/0x4c0 [ 269.194554][ T7439] get_futex_key+0x1b1/0x1000 [ 269.199371][ T7439] ? verify_lock_unused+0x140/0x140 [ 269.204966][ T7439] ? futex_setup_timer+0xc0/0xc0 [ 269.209945][ T7439] ? verify_lock_unused+0x140/0x140 [ 269.215804][ T7439] futex_wake+0x123/0x4f0 [ 269.220183][ T7439] ? futex_wake_mark+0x150/0x150 [ 269.225174][ T7439] do_futex+0x2e2/0x320 [ 269.229374][ T7439] ? __ia32_sys_get_robust_list+0x100/0x100 [ 269.235309][ T7439] ? __might_fault+0xc2/0x120 [ 269.240040][ T7439] mm_release+0x20a/0x330 [ 269.244424][ T7439] ? exit_robust_list+0x2ce/0x2f0 [ 269.249580][ T7439] ? exit_mm_release+0x30/0x30 [ 269.254381][ T7439] ? lockdep_hardirqs_on+0x94/0x140 [ 269.259627][ T7439] exit_mm+0xa0/0x350 [ 269.263664][ T7439] ? sysctl_delayacct+0x220/0x220 [ 269.268732][ T7439] ? do_exit+0x2570/0x2570 [ 269.273222][ T7439] ? tty_audit_exit+0x149/0x1f0 [ 269.278112][ T7439] do_exit+0x958/0x2570 [ 269.282318][ T7439] ? put_task_struct+0x80/0x80 [ 269.287135][ T7439] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 269.293157][ T7439] ? lock_chain_count+0x20/0x20 [ 269.298047][ T7439] ? _raw_spin_lock_irq+0xb7/0xf0 [ 269.303126][ T7439] do_group_exit+0x229/0x2e0 [ 269.307765][ T7439] ? lockdep_hardirqs_on+0x94/0x140 [ 269.313003][ T7439] get_signal+0x1259/0x1340 [ 269.317578][ T7439] arch_do_signal_or_restart+0xc4/0x1310 [ 269.323258][ T7439] ? do_futex+0x310/0x320 [ 269.327619][ T7439] ? get_sigframe_size+0x10/0x10 [ 269.332620][ T7439] ? __ia32_sys_get_robust_list+0x100/0x100 [ 269.338570][ T7439] ? exit_to_user_mode_loop+0x3b/0x110 [ 269.344269][ T7439] exit_to_user_mode_loop+0x70/0x110 [ 269.349603][ T7439] exit_to_user_mode_prepare+0xee/0x180 [ 269.355198][ T7439] syscall_exit_to_user_mode+0x16/0x40 [ 269.360700][ T7439] do_syscall_64+0x58/0xa0 [ 269.365152][ T7439] ? clear_bhb_loop+0x60/0xb0 [ 269.369851][ T7439] ? clear_bhb_loop+0x60/0xb0 [ 269.374559][ T7439] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.380486][ T7439] RIP: 0033:0x7f7c1e39e159 [ 269.384922][ T7439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.404553][ T7439] RSP: 002b:00007f7c1f2070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 269.412997][ T7439] RAX: fffffffffffffe00 RBX: 00007f7c1e625fa8 RCX: 00007f7c1e39e159 [ 269.421003][ T7439] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7c1e625fa8 [ 269.429004][ T7439] RBP: 00007f7c1e625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 269.437002][ T7439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.445019][ T7439] R13: 00007f7c1e626038 R14: 00007fffacd8ea00 R15: 00007fffacd8eae8 [ 269.453041][ T7439] [ 270.168195][ T7468] UDC core: g1: couldn't find an available UDC or it's busy [ 270.225419][ T7471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.999'. [ 270.234690][ T7471] netlink: 176 bytes leftover after parsing attributes in process `syz.0.999'. [ 270.244438][ T7471] netlink: 24 bytes leftover after parsing attributes in process `syz.0.999'. [ 270.277761][ T7471] device syzkaller0 entered promiscuous mode [ 270.329442][ T7472] fuse: Bad value for 'user_id' [ 271.201399][ T7476] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1001'. [ 271.305631][ T7481] jffs2: notice: (7481) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 271.341267][ T7483] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 271.815799][ T7502] UDC core: g1: couldn't find an available UDC or it's busy [ 272.818611][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1015'. [ 272.837139][ T7534] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1015'. [ 272.854370][ T7534] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1015'. [ 272.937391][ T7537] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1016'. [ 272.989647][ T4323] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 273.184372][ T4323] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 273.209551][ T4323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.248757][ T4323] usb 2-1: config 0 descriptor?? [ 273.318658][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 273.318672][ T26] audit: type=1800 audit(1790387313.989:17): pid=7547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1021" name=06 dev="sda1" ino=2047 res=0 errno=0 [ 273.465286][ T7554] loop4: detected capacity change from 0 to 512 [ 273.540931][ T7554] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 273.554845][ T7554] System zones: 1-12 [ 273.570537][ T7554] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.1023: missing EA_INODE flag [ 273.589816][ T7554] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1023: error while reading EA inode 12 err=-117 [ 273.609744][ T7554] EXT4-fs (loop4): 1 orphan inode deleted [ 273.636231][ T7554] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 273.855458][ T4323] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 273.864099][ T4323] [drm] Initialized udl on minor 2 [ 273.946001][ T4323] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 274.141360][ T4323] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 274.385332][ T4323] usb 2-1: USB disconnect, device number 2 [ 274.432081][ T955] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 274.475566][ T955] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 274.514894][ T955] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 274.620023][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 274.644068][ T7565] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1028'. [ 274.856851][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1029'. [ 274.947011][ T7571] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1029'. [ 274.979153][ T7571] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1029'. [ 275.447400][ T7596] loop3: detected capacity change from 0 to 512 [ 275.514771][ T7596] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 275.534290][ T7596] System zones: 1-12 [ 275.606156][ T7596] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.1039: missing EA_INODE flag [ 275.653511][ T4291] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 275.673075][ T5405] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 275.689815][ T7596] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1039: error while reading EA inode 12 err=-117 [ 275.714299][ T7596] EXT4-fs (loop3): 1 orphan inode deleted [ 275.725872][ T7596] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 275.857523][ T7606] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1042'. [ 276.035531][ T5405] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 276.098123][ T5405] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 276.108490][ T5405] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 276.120099][ T5405] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 276.130577][ T5405] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 276.140020][ T5405] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.328863][ T7594] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 276.338470][ T7594] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 276.357376][ T5405] pl2303 3-1:1.0: pl2303 converter detected [ 276.385820][ T5405] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 276.736629][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 276.769780][ T7594] pl2303 ttyUSB0: pl2303_get_line_request - failed: -110 [ 276.803142][ T7594] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 276.840212][ T7594] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 276.855321][ T7594] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 276.858192][ T7626] FAULT_INJECTION: forcing a failure. [ 276.858192][ T7626] name fail_futex, interval 1, probability 0, space 0, times 0 [ 276.903867][ T5405] usb 3-1: USB disconnect, device number 2 [ 276.940071][ T5405] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 276.956975][ T7626] CPU: 0 PID: 7626 Comm: syz.0.1047 Not tainted syzkaller #0 [ 276.964441][ T7626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 276.974646][ T7626] Call Trace: [ 276.978012][ T7626] [ 276.980988][ T7626] dump_stack_lvl+0x188/0x24e [ 276.985722][ T7626] ? show_regs_print_info+0x12/0x12 [ 276.990971][ T7626] ? load_image+0x410/0x410 [ 276.995527][ T7626] ? mark_lock+0x94/0x320 [ 276.995701][ T5405] pl2303 3-1:1.0: device disconnected [ 276.999900][ T7626] ? __lock_acquire+0x1465/0x7c40 [ 276.999938][ T7626] should_fail_ex+0x390/0x4c0 [ 276.999974][ T7626] get_futex_key+0x1b1/0x1000 [ 277.000001][ T7626] ? verify_lock_unused+0x140/0x140 [ 277.025034][ T7626] ? futex_setup_timer+0xc0/0xc0 [ 277.030028][ T7626] ? verify_lock_unused+0x140/0x140 [ 277.035263][ T7626] futex_wake+0x123/0x4f0 [ 277.039654][ T7626] ? futex_wake_mark+0x150/0x150 [ 277.044654][ T7626] do_futex+0x2e2/0x320 [ 277.048856][ T7626] ? __ia32_sys_get_robust_list+0x100/0x100 [ 277.054793][ T7626] ? __might_fault+0xc2/0x120 [ 277.059512][ T7626] mm_release+0x20a/0x330 [ 277.063885][ T7626] ? exit_robust_list+0x2ce/0x2f0 [ 277.068964][ T7626] ? exit_mm_release+0x30/0x30 [ 277.073762][ T7626] ? lockdep_hardirqs_on+0x94/0x140 [ 277.079009][ T7626] exit_mm+0xa0/0x350 [ 277.083027][ T7626] ? sysctl_delayacct+0x220/0x220 [ 277.088086][ T7626] ? do_exit+0x2570/0x2570 [ 277.092542][ T7626] ? tty_audit_exit+0x149/0x1f0 [ 277.097436][ T7626] do_exit+0x958/0x2570 [ 277.101807][ T7626] ? put_task_struct+0x80/0x80 [ 277.106609][ T7626] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 277.112622][ T7626] ? lock_chain_count+0x20/0x20 [ 277.117515][ T7626] ? _raw_spin_lock_irq+0xb7/0xf0 [ 277.122579][ T7626] do_group_exit+0x229/0x2e0 [ 277.127200][ T7626] ? lockdep_hardirqs_on+0x94/0x140 [ 277.132437][ T7626] get_signal+0x1259/0x1340 [ 277.136990][ T7626] arch_do_signal_or_restart+0xc4/0x1310 [ 277.142664][ T7626] ? do_futex+0x310/0x320 [ 277.147041][ T7626] ? get_sigframe_size+0x10/0x10 [ 277.152039][ T7626] ? __ia32_sys_get_robust_list+0x100/0x100 [ 277.158072][ T7626] ? exit_to_user_mode_loop+0x3b/0x110 [ 277.163569][ T7626] exit_to_user_mode_loop+0x70/0x110 [ 277.169287][ T7626] exit_to_user_mode_prepare+0xee/0x180 [ 277.174882][ T7626] syscall_exit_to_user_mode+0x16/0x40 [ 277.180385][ T7626] do_syscall_64+0x58/0xa0 [ 277.184838][ T7626] ? clear_bhb_loop+0x60/0xb0 [ 277.189558][ T7626] ? clear_bhb_loop+0x60/0xb0 [ 277.194259][ T7626] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.200276][ T7626] RIP: 0033:0x7fd2dcf9e159 [ 277.204990][ T7626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.224808][ T7626] RSP: 002b:00007fd2dde430e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 277.233265][ T7626] RAX: fffffffffffffe00 RBX: 00007fd2dd225fa8 RCX: 00007fd2dcf9e159 [ 277.241273][ T7626] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd2dd225fa8 [ 277.249292][ T7626] RBP: 00007fd2dd225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 277.257288][ T7626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.265283][ T7626] R13: 00007fd2dd226038 R14: 00007ffd75749150 R15: 00007ffd75749238 [ 277.273317][ T7626] [ 277.544211][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1048'. [ 277.568121][ T7635] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1048'. [ 277.577540][ T7635] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1048'. [ 277.799696][ T4355] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 277.808769][ T7643] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1053'. [ 277.999629][ T4355] usb 1-1: Using ep0 maxpacket: 8 [ 278.007334][ T4355] usb 1-1: unable to get BOS descriptor or descriptor too short [ 278.047220][ T4355] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 278.077656][ T4355] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 278.105117][ T4355] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 278.132083][ T4355] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 278.155764][ T4355] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 278.183939][ T4355] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 278.213914][ T4355] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 278.240342][ T4355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.264294][ T4355] usb 1-1: Product: syz [ 278.274398][ T4355] usb 1-1: Manufacturer: syz [ 278.284863][ T4355] usb 1-1: SerialNumber: syz [ 278.303451][ T4355] usb 1-1: config 0 descriptor?? [ 278.316208][ T7639] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 278.523355][ T4285] udevd[4285]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 278.584922][ T955] usb 1-1: USB disconnect, device number 3 [ 278.767623][ T7669] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 278.810750][ T4323] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 278.905374][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1062'. [ 278.928174][ T7675] tmpfs: Bad value for 'gid' [ 279.001358][ T4323] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 279.022086][ T4323] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 279.049605][ T4323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.737531][ T7706] FAULT_INJECTION: forcing a failure. [ 279.737531][ T7706] name fail_futex, interval 1, probability 0, space 0, times 0 [ 279.772620][ T7707] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 279.783967][ T7706] CPU: 0 PID: 7706 Comm: syz.0.1073 Not tainted syzkaller #0 [ 279.791422][ T7706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 279.801525][ T7706] Call Trace: [ 279.804845][ T7706] [ 279.807822][ T7706] dump_stack_lvl+0x188/0x24e [ 279.812641][ T7706] ? show_regs_print_info+0x12/0x12 [ 279.817888][ T7706] ? load_image+0x410/0x410 [ 279.822459][ T7706] ? cgroup_rstat_updated+0xce/0x350 [ 279.827801][ T7706] ? rcu_read_lock_sched_held+0x86/0x110 [ 279.833506][ T7706] should_fail_ex+0x390/0x4c0 [ 279.838248][ T7706] get_futex_key+0x1b1/0x1000 [ 279.842999][ T7706] ? futex_setup_timer+0xc0/0xc0 [ 279.848072][ T7706] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 279.854116][ T7706] ? __lock_acquire+0x7c40/0x7c40 [ 279.859198][ T7706] ? lock_chain_count+0x20/0x20 [ 279.864113][ T7706] futex_wait_setup+0xb8/0x270 [ 279.868930][ T7706] ? futex_wait_multiple+0x920/0x920 [ 279.874276][ T7706] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 279.880280][ T7706] ? _raw_spin_unlock+0x40/0x40 [ 279.885281][ T7706] futex_wait+0x1b8/0x5c0 [ 279.889669][ T7706] ? futex_wait_setup+0x270/0x270 [ 279.894753][ T7706] do_futex+0x310/0x320 [ 279.898945][ T7706] ? __ia32_sys_get_robust_list+0x100/0x100 [ 279.904960][ T7706] __se_sys_futex+0x381/0x410 [ 279.909675][ T7706] ? __x64_sys_futex+0xf0/0xf0 [ 279.914472][ T7706] ? __x64_sys_futex+0x1d/0xf0 [ 279.919267][ T7706] do_syscall_64+0x4c/0xa0 [ 279.923708][ T7706] ? clear_bhb_loop+0x60/0xb0 [ 279.928409][ T7706] ? clear_bhb_loop+0x60/0xb0 [ 279.933114][ T7706] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 279.939053][ T7706] RIP: 0033:0x7fd2dcf9e159 [ 279.943495][ T7706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.963133][ T7706] RSP: 002b:00007fd2dde430e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 279.971577][ T7706] RAX: ffffffffffffffda RBX: 00007fd2dd225fa8 RCX: 00007fd2dcf9e159 [ 279.979581][ T7706] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd2dd225fa8 [ 279.987581][ T7706] RBP: 00007fd2dd225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 279.995589][ T7706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.003589][ T7706] R13: 00007fd2dd226038 R14: 00007ffd75749150 R15: 00007ffd75749238 [ 280.011610][ T7706] [ 280.021538][ T4323] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 280.215670][ T4323] usb 2-1: unable to get BOS descriptor or descriptor too short [ 280.238402][ T4323] usb 2-1: config 142 has an invalid interface number: 251 but max is 0 [ 280.282663][ T4323] usb 2-1: config 142 descriptor has 1 excess byte, ignoring [ 280.300662][ T4323] usb 2-1: config 142 has no interface number 0 [ 280.315504][ T4323] usb 2-1: config 142 interface 251 altsetting 11 has an invalid endpoint with address 0x9F, skipping [ 280.341501][ T4323] usb 2-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 280.368681][ T4323] usb 2-1: config 142 interface 251 has no altsetting 0 [ 280.387957][ T4323] usb 2-1: string descriptor 0 read error: -22 [ 280.414962][ T4323] usb 2-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 280.425896][ T7722] __nla_validate_parse: 3 callbacks suppressed [ 280.425913][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1076'. [ 280.444406][ T4323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.465318][ T7722] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1076'. [ 280.479173][ T7694] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 280.487774][ T7722] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1076'. [ 280.492284][ T7694] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 280.535721][ T4323] cypress_m8 2-1:142.251: HID->COM RS232 Adapter converter detected [ 280.547006][ T4323] cyphidcom ttyUSB0: required endpoint is missing [ 280.768128][ T4323] usb 2-1: USB disconnect, device number 3 [ 280.780744][ T4323] cypress_m8 2-1:142.251: device disconnected [ 281.135975][ T7740] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1080'. [ 281.209460][ T4280] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 281.421460][ T4280] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 281.455298][ T4280] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 281.502074][ T4280] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 281.538311][ T4280] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 281.566179][ T4280] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 281.604792][ T4280] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 281.633013][ T14] usb 4-1: USB disconnect, device number 2 [ 281.635224][ T4280] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 281.711085][ T4280] usb 5-1: Product: syz [ 281.731432][ T4280] usb 5-1: Manufacturer: syz [ 281.773239][ T4280] cdc_wdm 5-1:1.0: skipping garbage [ 281.795116][ T4280] cdc_wdm 5-1:1.0: skipping garbage [ 281.818842][ T7758] FAULT_INJECTION: forcing a failure. [ 281.818842][ T7758] name fail_futex, interval 1, probability 0, space 0, times 0 [ 281.848673][ T4280] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 281.866396][ T4280] cdc_wdm 5-1:1.0: Unknown control protocol [ 281.878867][ T7758] CPU: 1 PID: 7758 Comm: syz.0.1085 Not tainted syzkaller #0 [ 281.886329][ T7758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 281.896443][ T7758] Call Trace: [ 281.899769][ T7758] [ 281.902742][ T7758] dump_stack_lvl+0x188/0x24e [ 281.907476][ T7758] ? show_regs_print_info+0x12/0x12 [ 281.912722][ T7758] ? load_image+0x410/0x410 [ 281.917304][ T7758] ? cgroup_rstat_updated+0xce/0x350 [ 281.922643][ T7758] ? rcu_read_lock_sched_held+0x86/0x110 [ 281.928337][ T7758] should_fail_ex+0x390/0x4c0 [ 281.933083][ T7758] get_futex_key+0x1b1/0x1000 [ 281.937840][ T7758] ? futex_setup_timer+0xc0/0xc0 [ 281.942846][ T7758] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 281.949165][ T7758] ? __lock_acquire+0x7c40/0x7c40 [ 281.954293][ T7758] ? lock_chain_count+0x20/0x20 [ 281.959226][ T7758] futex_wait_setup+0xb8/0x270 [ 281.964063][ T7758] ? futex_wait_multiple+0x920/0x920 [ 281.969412][ T7758] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 281.975376][ T7758] ? _raw_spin_unlock+0x40/0x40 [ 281.980351][ T7758] futex_wait+0x1b8/0x5c0 [ 281.984752][ T7758] ? futex_wait_setup+0x270/0x270 [ 281.989880][ T7758] do_futex+0x310/0x320 [ 281.994106][ T7758] ? __ia32_sys_get_robust_list+0x100/0x100 [ 282.000072][ T7758] __se_sys_futex+0x381/0x410 [ 282.004813][ T7758] ? __x64_sys_futex+0xf0/0xf0 [ 282.009638][ T7758] ? __x64_sys_futex+0x1d/0xf0 [ 282.014454][ T7758] do_syscall_64+0x4c/0xa0 [ 282.018917][ T7758] ? clear_bhb_loop+0x60/0xb0 [ 282.023642][ T7758] ? clear_bhb_loop+0x60/0xb0 [ 282.028409][ T7758] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.034359][ T7758] RIP: 0033:0x7fd2dcf9e159 [ 282.038813][ T7758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.058654][ T7758] RSP: 002b:00007fd2dde430e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 282.067134][ T7758] RAX: ffffffffffffffda RBX: 00007fd2dd225fa8 RCX: 00007fd2dcf9e159 [ 282.075204][ T7758] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd2dd225fa8 [ 282.083233][ T7758] RBP: 00007fd2dd225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 282.091268][ T7758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.099348][ T7758] R13: 00007fd2dd226038 R14: 00007ffd75749150 R15: 00007ffd75749238 [ 282.107562][ T7758] [ 282.232186][ T7762] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 282.349716][ T4280] usb 5-1: USB disconnect, device number 2 [ 282.753086][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1088'. [ 282.782403][ T7771] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1088'. [ 282.801668][ T7771] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1088'. [ 282.989783][ T4326] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 283.048128][ T7784] erspan0: mtu less than device minimum [ 283.131211][ T7786] ------------[ cut here ]------------ [ 283.137036][ T7786] WARNING: CPU: 0 PID: 7786 at kernel/trace/ring_buffer.c:4571 rb_get_reader_page+0xabf/0xcd0 [ 283.147355][ T7786] Modules linked in: [ 283.151297][ T7786] CPU: 0 PID: 7786 Comm: syz.0.1092 Not tainted syzkaller #0 [ 283.158799][ T7786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 283.168895][ T7786] RIP: 0010:rb_get_reader_page+0xabf/0xcd0 [ 283.174787][ T7786] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 58 4b 4e 00 4d 8b 3c 24 49 8d 7f 08 be 04 00 00 00 e8 e6 4c 4e 00 f0 41 ff 47 08 <0f> 0b 49 bf 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 83 7c 24 18 [ 283.194462][ T7786] RSP: 0018:ffffc9000d51f820 EFLAGS: 00010002 [ 283.200588][ T7786] RAX: 1ffff11002e8f101 RBX: 1ffff11002e8e876 RCX: ffffffff81852c5a [ 283.208612][ T7786] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888017470408 [ 283.216633][ T7786] RBP: ffffc9000d51f9b0 R08: ffff88801747040b R09: 1ffff11002e8e081 [ 283.224684][ T7786] R10: dffffc0000000000 R11: ffffed1002e8e082 R12: ffff888017478810 [ 283.232708][ T7786] R13: 000000000000008c R14: 1ffff11002e8e873 R15: ffff888017470400 [ 283.240725][ T7786] FS: 00007fd2dde436c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 283.249699][ T7786] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 283.256318][ T7786] CR2: 000000110c348560 CR3: 0000000056fe5000 CR4: 00000000003506f0 [ 283.264321][ T7786] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 283.272343][ T7786] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 283.280345][ T7786] Call Trace: [ 283.283654][ T7786] [ 283.286633][ T7786] ? ring_buffer_read_page+0x1370/0x1370 [ 283.292304][ T7786] ? mark_lock+0x94/0x320 [ 283.296676][ T7786] ? do_raw_spin_lock+0x128/0x2f0 [ 283.301739][ T7786] rb_buffer_peek+0x5e/0x940 [ 283.306365][ T7786] ring_buffer_peek+0x1f8/0x440 [ 283.311255][ T7786] ? ring_buffer_iter_empty+0x340/0x340 [ 283.316852][ T7786] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 283.322899][ T7786] ? lock_chain_count+0x20/0x20 [ 283.327791][ T7786] ? _find_next_bit+0x87/0x130 [ 283.332603][ T7786] __find_next_entry+0x33f/0x6c0 [ 283.337611][ T7786] ? trace_find_next_entry+0x3a0/0x3a0 [ 283.343121][ T7786] tracing_read_pipe+0x3bd/0xb10 [ 283.348103][ T7786] ? s_show+0x300/0x300 [ 283.352294][ T7786] vfs_read+0x2db/0x960 [ 283.356492][ T7786] ? kernel_read+0x1e0/0x1e0 [ 283.361113][ T7786] ? __fget_files+0x28/0x460 [ 283.365732][ T7786] ? __fget_files+0x3fc/0x460 [ 283.370455][ T7786] ? __fdget_pos+0x2ae/0x360 [ 283.375073][ T7786] ? ksys_read+0x70/0x260 [ 283.379447][ T7786] ksys_read+0x14d/0x260 [ 283.383722][ T7786] ? vfs_write+0x9a0/0x9a0 [ 283.388178][ T7786] ? lockdep_hardirqs_on+0x94/0x140 [ 283.393419][ T7786] do_syscall_64+0x4c/0xa0 [ 283.397891][ T7786] ? clear_bhb_loop+0x60/0xb0 [ 283.402594][ T7786] ? clear_bhb_loop+0x60/0xb0 [ 283.407300][ T7786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.413228][ T7786] RIP: 0033:0x7fd2dcf9e159 [ 283.417666][ T7786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.437472][ T7786] RSP: 002b:00007fd2dde43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 283.445925][ T7786] RAX: ffffffffffffffda RBX: 00007fd2dd225fa0 RCX: 00007fd2dcf9e159 [ 283.453922][ T7786] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000004 [ 283.461913][ T7786] RBP: 00007fd2dd03506b R08: 0000000000000000 R09: 0000000000000000 [ 283.469912][ T7786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.477913][ T7786] R13: 00007fd2dd226038 R14: 00007fd2dd225fa0 R15: 00007ffd75749238 [ 283.485929][ T7786] [ 283.489007][ T7786] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 283.496318][ T7786] CPU: 0 PID: 7786 Comm: syz.0.1092 Not tainted syzkaller #0 [ 283.503724][ T7786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 283.513805][ T7786] Call Trace: [ 283.517113][ T7786] [ 283.520068][ T7786] dump_stack_lvl+0x188/0x24e [ 283.524777][ T7786] ? memcpy+0x3c/0x60 [ 283.528779][ T7786] ? show_regs_print_info+0x12/0x12 [ 283.534002][ T7786] ? load_image+0x410/0x410 [ 283.538543][ T7786] panic+0x2d3/0x710 [ 283.542472][ T7786] ? bpf_jit_dump+0xd0/0xd0 [ 283.547014][ T7786] __warn+0x2f8/0x4f0 [ 283.551030][ T7786] ? rb_get_reader_page+0xabf/0xcd0 [ 283.556256][ T7786] ? rb_get_reader_page+0xabf/0xcd0 [ 283.561475][ T7786] report_bug+0x2ba/0x4f0 [ 283.565832][ T7786] ? rb_get_reader_page+0xabf/0xcd0 [ 283.571066][ T7786] handle_bug+0x3a/0x70 [ 283.575250][ T7786] exc_invalid_op+0x16/0x40 [ 283.579781][ T7786] asm_exc_invalid_op+0x16/0x20 [ 283.584661][ T7786] RIP: 0010:rb_get_reader_page+0xabf/0xcd0 [ 283.590510][ T7786] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 58 4b 4e 00 4d 8b 3c 24 49 8d 7f 08 be 04 00 00 00 e8 e6 4c 4e 00 f0 41 ff 47 08 <0f> 0b 49 bf 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 83 7c 24 18 [ 283.610142][ T7786] RSP: 0018:ffffc9000d51f820 EFLAGS: 00010002 [ 283.616247][ T7786] RAX: 1ffff11002e8f101 RBX: 1ffff11002e8e876 RCX: ffffffff81852c5a [ 283.624253][ T7786] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888017470408 [ 283.632268][ T7786] RBP: ffffc9000d51f9b0 R08: ffff88801747040b R09: 1ffff11002e8e081 [ 283.640259][ T7786] R10: dffffc0000000000 R11: ffffed1002e8e082 R12: ffff888017478810 [ 283.648255][ T7786] R13: 000000000000008c R14: 1ffff11002e8e873 R15: ffff888017470400 [ 283.656261][ T7786] ? rb_get_reader_page+0xaba/0xcd0 [ 283.661600][ T7786] ? ring_buffer_read_page+0x1370/0x1370 [ 283.667263][ T7786] ? mark_lock+0x94/0x320 [ 283.671626][ T7786] ? do_raw_spin_lock+0x128/0x2f0 [ 283.676680][ T7786] rb_buffer_peek+0x5e/0x940 [ 283.681331][ T7786] ring_buffer_peek+0x1f8/0x440 [ 283.686214][ T7786] ? ring_buffer_iter_empty+0x340/0x340 [ 283.691784][ T7786] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 283.697799][ T7786] ? lock_chain_count+0x20/0x20 [ 283.702681][ T7786] ? _find_next_bit+0x87/0x130 [ 283.707481][ T7786] __find_next_entry+0x33f/0x6c0 [ 283.712457][ T7786] ? trace_find_next_entry+0x3a0/0x3a0 [ 283.717962][ T7786] tracing_read_pipe+0x3bd/0xb10 [ 283.722943][ T7786] ? s_show+0x300/0x300 [ 283.727130][ T7786] vfs_read+0x2db/0x960 [ 283.731326][ T7786] ? kernel_read+0x1e0/0x1e0 [ 283.735965][ T7786] ? __fget_files+0x28/0x460 [ 283.740606][ T7786] ? __fget_files+0x3fc/0x460 [ 283.745428][ T7786] ? __fdget_pos+0x2ae/0x360 [ 283.750046][ T7786] ? ksys_read+0x70/0x260 [ 283.754414][ T7786] ksys_read+0x14d/0x260 [ 283.758690][ T7786] ? vfs_write+0x9a0/0x9a0 [ 283.763158][ T7786] ? lockdep_hardirqs_on+0x94/0x140 [ 283.768422][ T7786] do_syscall_64+0x4c/0xa0 [ 283.772864][ T7786] ? clear_bhb_loop+0x60/0xb0 [ 283.777565][ T7786] ? clear_bhb_loop+0x60/0xb0 [ 283.782268][ T7786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.788196][ T7786] RIP: 0033:0x7fd2dcf9e159 [ 283.792637][ T7786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.812529][ T7786] RSP: 002b:00007fd2dde43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 283.820967][ T7786] RAX: ffffffffffffffda RBX: 00007fd2dd225fa0 RCX: 00007fd2dcf9e159 [ 283.828980][ T7786] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000004 [ 283.836975][ T7786] RBP: 00007fd2dd03506b R08: 0000000000000000 R09: 0000000000000000 [ 283.844966][ T7786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.852957][ T7786] R13: 00007fd2dd226038 R14: 00007fd2dd225fa0 R15: 00007ffd75749238 [ 283.860962][ T7786] [ 283.864584][ T7786] Kernel Offset: disabled [ 283.868984][ T7786] Rebooting in 86400 seconds..