last executing test programs: 5.377057813s ago: executing program 4 (id=518): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x20800, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, 0x0) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x160, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @stats_create={'@stats_create ', '-', 0x20, '/1', ' 0 syz aux'}}}) 5.30695723s ago: executing program 3 (id=520): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000880), 0x0) r0 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x2000000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000500)="$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") r1 = openat(r0, &(0x7f00000007c0)='./file2\x00', 0x101042, 0x15) syz_emit_ethernet(0x7e, &(0x7f0000000100)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000480)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)=ANY=[], 0x28) sync_file_range(r1, 0x3, 0x1000, 0x7) 5.266119014s ago: executing program 4 (id=521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000340)="2efdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f00000003c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) accept4(r0, &(0x7f0000000500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x80, 0x81000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x80, 0x3, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x4, 0x9, 0x4}}}}}]}}]}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x2000, 0x2, 0x5, 0x8, 0x4}, 0x9c) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x8, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x106, &(0x7f0000000b00)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf4, 0x2, 0x1, 0x8, 0xc0, 0x9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "417e2e01ceb8"}, {0x5, 0x24, 0x0, 0xd8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1000, 0x7, 0x5}, {0x6, 0x24, 0x1a, 0x9}, [@mdlm_detail={0xa, 0x24, 0x13, 0x81, "a477cf439ff8"}, @mdlm_detail={0x5c, 0x24, 0x13, 0x1, "2df578ea851ad5b29821a89d96b1b21d689e204cb4bf0bdf61759c0bcb71cc9c3245784de84d52853b0c4857bbad4a0556631c387ff59e1102b4611de9bd58a58035527780b6b28793023732757d22b6f77b645e75b5a0be"}, @country_functional={0x6, 0x24, 0x7, 0x7, 0xd9f}, @mdlm_detail={0x26, 0x24, 0x13, 0x9, "3e9f82c8d5f3563faab5c51866b26400073ac8e393a13cdbf0deecd3f0681a30e039"}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x0, 0x12}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0x3, 0xfc}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0x0, 0xfa}}}}}}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x5, &(0x7f0000000900)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x2403}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x1c09}}]}) mkdir(&(0x7f0000000a80)='./file1\x00', 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 3.897283213s ago: executing program 3 (id=524): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0x3, 0x4) 3.34343752s ago: executing program 0 (id=525): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x240000c8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc_mnt\x00', 0x1ff) 3.34333825s ago: executing program 3 (id=526): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000440)={0x43, 0x0, 0x3, 0x3}, 0x10) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000004c0)={0x43, 0x0, 0x3, 0x3}, 0x10) write(r0, &(0x7f0000000500)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 3.207624373s ago: executing program 2 (id=527): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0xc0d4) 3.207411694s ago: executing program 4 (id=528): connect$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x6, 0x1f, {0x7, 0x4, 0x3, 0x3a, 0x7ff, 0x68, 0x1ce2, 0xd9, 0x2f, 0xe5c, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x8, 0x3, [{0x1, 0x2}]}]}}}}}}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x41, 0x0) 3.189417245s ago: executing program 3 (id=529): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r1, 0x20, &(0x7f00000003c0)={&(0x7f0000000400)=""/237, 0xffffffffffffffb5, 0x0, 0x0}}, 0x1e) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x101c088, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000700)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='.\x00', 0x0, 0x160) open_by_handle_at(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB='K\x00\x00\x00r'], 0x840) 2.974631397s ago: executing program 2 (id=530): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000a00)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1400"], 0x18}}], 0x1, 0x24008880) 2.311692935s ago: executing program 1 (id=531): r0 = fsopen(&(0x7f00000002c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=r1, 0xf, 0x0, 0x15eaca6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.309743325s ago: executing program 4 (id=532): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x8, 0x4, 0x100, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000006c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000007c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000800), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) setns(0xc9, 0x40000000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000280)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x1e2, @tick, 0x8}) 2.301773306s ago: executing program 0 (id=533): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000540), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/lru_gen\x00', 0x2, 0x0) pread64(r2, 0x0, 0x0, 0x81) bpf$MAP_CREATE(0x0, 0x0, 0x50) pread64(r2, 0x0, 0x0, 0x3f00) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400017e) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) rmdir(&(0x7f0000000880)='./config/usb_gadget/g1/functions/uvc.0\x00') 2.223610664s ago: executing program 2 (id=534): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000440)={0x1, 0x0, [{0xdddddff8, 0xb2, &(0x7f0000000380)=""/178}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000180)=""/66, 0x0, 0x200000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000240)=""/85, 0x0, 0x60000}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000300)=0xfffffffe) 2.109058305s ago: executing program 1 (id=535): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000001840)={'ip6_vti0\x00', {0x2, 0x0, @multicast2}}) 2.088190738s ago: executing program 2 (id=536): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000c00), 0x2) r1 = memfd_create(&(0x7f0000000c40)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000d40)={r1, 0x0, 0x0, 0x8000}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000b80)={0x1, &(0x7f0000000bc0)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.027550994s ago: executing program 1 (id=537): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000019340)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f00000193c0)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000"], 0x66) 1.747818662s ago: executing program 3 (id=538): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000012c0)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000001380)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000001400)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001440)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.746090593s ago: executing program 2 (id=539): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x802) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000340)="2efdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f00000003c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0xfffffffd}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) accept4(0xffffffffffffffff, &(0x7f0000000500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x80, 0x81000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="12015002000000ff2505a8a440000e4013c122000102030109021b000101058003090400060107010201090501020004040904"], 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = userfaultfd(0x1) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x2000, 0x2, 0x5, 0x8, 0x4}, 0x9c) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x106, &(0x7f0000000b00)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf4, 0x2, 0x1, 0x8, 0xc0, 0x9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "417e2e01ceb8"}, {0x5, 0x24, 0x0, 0xd8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1000, 0x7, 0x5}, {0x6, 0x24, 0x1a, 0x9}, [@mdlm_detail={0xa, 0x24, 0x13, 0x81, "a477cf439ff8"}, @mdlm_detail={0x5c, 0x24, 0x13, 0x1, "2df578ea851ad5b29821a89d96b1b21d689e204cb4bf0bdf61759c0bcb71cc9c3245784de84d52853b0c4857bbad4a0556631c387ff59e1102b4611de9bd58a58035527780b6b28793023732757d22b6f77b645e75b5a0be"}, @country_functional={0x6, 0x24, 0x7, 0x7, 0xd9f}, @mdlm_detail={0x26, 0x24, 0x13, 0x9, "3e9f82c8d5f3563faab5c51866b26400073ac8e393a13cdbf0deecd3f0681a30e039"}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x0, 0x12}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0x3, 0xfc}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0x0, 0xfa}}}}}}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x5, &(0x7f0000000900)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x2403}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x1c09}}]}) mkdir(&(0x7f0000000a80)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000440)='./file1\x00', &(0x7f0000000480), 0x810000, &(0x7f0000002c80)={'trans=virtio,', {[{@cache_mmap}, {@access_uid}, {@msize={'msize', 0x3d, 0x7f}}, {@version_L}, {@cache_readahead}, {@cache_fscache}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@smackfstransmute}, {@fsname={'fsname', 0x3d, './binderfs/binder0\x00'}}, {@audit}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/sequencer\x00'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}]}}) socket$pppl2tp(0x18, 0x1, 0x1) 1.459561342s ago: executing program 4 (id=540): syz_open_dev$media(&(0x7f0000000080), 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000440)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fd}, 0xe) r1 = syz_open_dev$video(&(0x7f00000003c0), 0x7fff, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000740)={0x1, @output={0x0, 0x0, {0x0, 0x10000}}}) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/cpu/drivers/processor\x00', 0x0, 0x0) r5 = openat(r4, &(0x7f00000002c0)='unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='cpu1\n', 0x5) r6 = openat(r4, &(0x7f0000000340)='bind\x00', 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x19, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = fsopen(&(0x7f0000000680)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000006c0)={r7, r9, 0x16, 0x0, @void}, 0x10) r10 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r10, 0x114, 0x6, &(0x7f0000000700)=0x1, 0x4) write(r6, &(0x7f0000000380)='cpu1\n', 0x5) ioctl$KDGETKEYCODE(r3, 0x4b4c, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000480)={r0, r0, 0x8, 0x0, 0x0, 0x1, 0x61, 0x6, 0x1012, 0xc3, 0x2, 0x7, 'syz1\x00'}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) 1.414074047s ago: executing program 0 (id=541): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0xc0d4) 1.232143705s ago: executing program 1 (id=542): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) 1.125635216s ago: executing program 1 (id=543): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x240000c8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc_mnt\x00', 0x1ff) 1.124059516s ago: executing program 4 (id=544): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002680)='./file2\x00', 0x14552, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRES32=r0], 0x1, 0x1204, &(0x7f00000026c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x8042, 0x15) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) truncate(&(0x7f0000000740)='./file2\x00', 0xda) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(0x0, &(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)='devpts\x00', 0x8, &(0x7f0000000f40)='uid=1\x00nk]e\t\xee\x00\xb5\x91[!\xb9\xe0f\xd9\xd8\xca\x13\x05\xdb\xddA\xcb\xa1\x03\x03\xd0\xf9ds\x80@\xef\xce<\x8b\xd8|\x85U\xa7\xb3;^U*\x16\xa8\xb4S L\xd3\x8b \x14\x8a\xf6\xf9\x95\x8b*qy4J\xf4\\\xe2\xa5\x04U\xfd\x02G\xa9\x8fS[\xe5\xafE@\xa2\x9e3\x1a`\xa9\xe4v\xd49k\xc2\xfc\xadL\xe6EIe\xd4\xea\xed\xa3\b~\xce\x8a\xec\xb3\x89Nq\x1b\x12\xc2\"\xf8&C\x93\xd4\x99\xf0x\xcb\x9a\x938\xe9\x81\x13\xbba\xca\xcfaQ\x9f;\"T\x85\xe4\a\xb8u\x82\x8c\x03&=M\xf3j\xb6\xde\xf2M\xd3\xad2\x91\x8a\xc7\xb1\xbe\xe0\r\xb4M+\xad\x01\x90=\xb2\xeb\xebY\xc7Q\b\xa9\xc1\xa9\x8d8}\xc7CV\xd5.T\xda$\fA\xf5\xfe\xdfV\x990\x93\xbf\xc5OX\x0e\fua\x8c\x1b\x92\xd5\xceWC\x96\n\xf15\b\xb2\xf0\xbb\x1d9\xed\xf5TYw&\xa85\xdes\x92\x1d\x88\xa5\xd0 \x1c^4\xf2o\xd2&>\xdff\xd6\x9f\xb2\x8ffT\x89w\xc7EW\xe7\x1f\xea;\xae\x1d0[\x1e\xa4\x00\v)\r\xedW\x13\x90\xd6\b\x95\x12\xd8N\x90\xf8\x9ad\xb6Bm\x80\xbfw\xd8!l\x97\x19\t\xcd\x97WP\x1d\xa6\x8d}!\x82\x18T\x04\xbe') 1.118818157s ago: executing program 0 (id=545): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f00000004c0)) 1.011543008s ago: executing program 1 (id=546): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000005c0)='27', 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) getsockopt$inet6_int(r2, 0x29, 0x35, 0x0, &(0x7f0000001180)) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, 0x0, 0x0) add_key(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={'syz', 0x0}, 0x0, 0xfffff, 0xffffffffffffffff) 1.011349808s ago: executing program 0 (id=547): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x10083, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt\x00', 0x1ff) mount(&(0x7f0000000580)=@filename='./dev/sda1\x00', &(0x7f00000005c0)='./mnt\x00', &(0x7f0000000600)='ext4\x00', 0x8410, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x40086610, 0x0) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f00000006c0)={0x10, 0x0, "cd6354aaf48bd635ea1ffc70164cafa0"}) 1.011128557s ago: executing program 2 (id=548): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='100', 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r1 = openat$md_new_array(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000240)='/sys/kernel/uevent_helper', 0x40042, 0x80) write$md_new_array(r1, &(0x7f0000000340)={'md', @named={'_syz', 0x0, '2'}}, 0x8) 940.497575ms ago: executing program 32 (id=546): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000005c0)='27', 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) getsockopt$inet6_int(r2, 0x29, 0x35, 0x0, &(0x7f0000001180)) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, 0x0, 0x0) add_key(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={'syz', 0x0}, 0x0, 0xfffff, 0xffffffffffffffff) 914.683958ms ago: executing program 3 (id=550): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x8, 0x4, 0x100, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000006c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000007c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000800), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) setns(0xc9, 0x40000000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000280)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x1e2, @tick, 0x8}) 0s ago: executing program 0 (id=551): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000540), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/lru_gen\x00', 0x2, 0x0) pread64(r2, 0x0, 0x0, 0x81) bpf$MAP_CREATE(0x0, 0x0, 0x50) pread64(r2, 0x0, 0x0, 0x3f00) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400017e) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) rmdir(&(0x7f0000000880)='./config/usb_gadget/g1/functions/uvc.0\x00') kernel console output (not intermixed with test programs): e name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 90.858974][ T4777] Call Trace: [ 90.862263][ T4777] [ 90.865209][ T4777] dump_stack_lvl+0x188/0x250 [ 90.869916][ T4777] ? show_regs_print_info+0x20/0x20 [ 90.875141][ T4777] ? load_image+0x410/0x410 [ 90.879672][ T4777] ? __lock_acquire+0x7d40/0x7d40 [ 90.884720][ T4777] ? verify_lock_unused+0x140/0x140 [ 90.889968][ T4777] should_fail+0x383/0x4b0 [ 90.894412][ T4777] prepare_alloc_pages+0x1e3/0x5b0 [ 90.899577][ T4777] __alloc_pages+0x11b/0x480 [ 90.904231][ T4777] ? zone_statistics+0x170/0x170 [ 90.909492][ T4777] alloc_buddy_huge_page+0xec/0x1c0 [ 90.914735][ T4777] alloc_fresh_huge_page+0xf9/0x6e0 [ 90.919969][ T4777] ? hstate_next_node_to_alloc+0xd5/0x140 [ 90.925714][ T4777] alloc_pool_huge_page+0xef/0x350 [ 90.930849][ T4777] __nr_hugepages_store_common+0x416/0x9a0 [ 90.936650][ T4777] ? nr_hugepages_store_common+0x2f0/0x2f0 [ 90.942452][ T4777] ? proc_doulongvec_minmax+0x36/0x50 [ 90.947821][ T4777] hugetlb_sysctl_handler+0x200/0x280 [ 90.953228][ T4777] ? hstate_next_node_to_alloc+0x140/0x140 [ 90.959029][ T4777] ? hstate_next_node_to_alloc+0x140/0x140 [ 90.964846][ T4777] ? __virt_addr_valid+0x3c6/0x470 [ 90.969983][ T4777] ? __phys_addr_symbol+0x2b/0x70 [ 90.975008][ T4777] ? __check_object_size+0x30c/0x410 [ 90.980294][ T4777] proc_sys_call_handler+0x458/0x6c0 [ 90.985670][ T4777] ? proc_sys_open+0x260/0x260 [ 90.990453][ T4777] ? memset+0x1e/0x40 [ 90.994554][ T4777] ? iov_iter_init+0xb4/0x170 [ 90.999251][ T4777] vfs_write+0x748/0xd70 [ 91.003508][ T4777] ? file_end_write+0x250/0x250 [ 91.008377][ T4777] ? mutex_lock_nested+0x17/0x20 [ 91.013316][ T4777] ? __fdget_pos+0x2bf/0x370 [ 91.017910][ T4777] ? ksys_write+0x70/0x260 [ 91.022327][ T4777] ksys_write+0x153/0x260 [ 91.026664][ T4777] ? __ia32_sys_read+0x80/0x80 [ 91.031422][ T4777] ? lockdep_hardirqs_on+0x94/0x140 [ 91.036610][ T4777] do_syscall_64+0x4c/0xa0 [ 91.041013][ T4777] ? clear_bhb_loop+0x30/0x80 [ 91.045675][ T4777] ? clear_bhb_loop+0x30/0x80 [ 91.050337][ T4777] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.056220][ T4777] RIP: 0033:0x7fa05a1aab19 [ 91.060624][ T4777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.080234][ T4777] RSP: 002b:00007fa058401028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 91.088670][ T4777] RAX: ffffffffffffffda RBX: 00007fa05a430fa0 RCX: 00007fa05a1aab19 [ 91.096637][ T4777] RDX: 0000000000000012 RSI: 0000200000000240 RDI: 0000000000000004 [ 91.104604][ T4777] RBP: 00007fa05a242b70 R08: 0000000000000000 R09: 0000000000000000 [ 91.112583][ T4777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.120572][ T4777] R13: 00007fa05a431038 R14: 00007fa05a430fa0 R15: 00007ffdde932948 [ 91.128551][ T4777] [ 91.141101][ T4293] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 91.153540][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 91.163544][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 91.173545][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 91.183536][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 91.193531][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 91.203530][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 91.213536][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 91.223537][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 92.264331][ T4293] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 92.278695][ T4293] mos7720 2-1:1.0: device disconnected [ 92.286564][ T4790] lo speed is unknown, defaulting to 1000 [ 92.305492][ T4794] jffs2: notice: (4794) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 92.333456][ T4790] lo speed is unknown, defaulting to 1000 [ 92.349047][ T4790] lo speed is unknown, defaulting to 1000 [ 92.440548][ T4797] loop0: detected capacity change from 0 to 512 [ 92.740170][ T4685] udevd[4685]: symlink '../../loop0' '/dev/disk/by-diskseq/116.tmp-b7:0' failed: Read-only file system [ 92.811579][ T4685] udevd[4685]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 93.277558][ T4685] udevd[4685]: symlink '../../loop0' '/dev/disk/by-diskseq/116.tmp-b7:0' failed: Read-only file system [ 93.333724][ T1338] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 93.386078][ T4293] lo speed is unknown, defaulting to 1000 [ 93.392549][ T4685] udevd[4685]: symlink '../../loop0' '/dev/disk/by-diskseq/116.tmp-b7:0' failed: Read-only file system [ 93.385290][ T4790] infiniband syz2: set active [ 93.418297][ T4790] infiniband syz2: added lo [ 93.437788][ T4685] udevd[4685]: symlink '../../loop0' '/dev/disk/by-diskseq/116.tmp-b7:0' failed: Read-only file system [ 93.563784][ T4809] tmpfs: Unknown parameter 'usrquota' [ 93.586979][ T4790] infiniband syz2: Couldn't open port 1 [ 93.913810][ T1338] usb 2-1: unable to get BOS descriptor or descriptor too short [ 94.197879][ T4790] RDS/IB: syz2: added [ 94.214554][ T4790] smc: adding ib device syz2 with port count 1 [ 94.283760][ T1338] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.519660][ T4790] smc: ib device syz2 port 1 has pnetid [ 95.067708][ T1338] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 95.077404][ T1338] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 95.089319][ T1338] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 95.089531][ T4815] jffs2: notice: (4815) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 95.103230][ T1338] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 95.123416][ T4790] lo speed is unknown, defaulting to 1000 [ 95.131091][ T1338] usb 2-1: config 1 interface 1 has no altsetting 0 [ 95.210766][ T4252] lo speed is unknown, defaulting to 1000 [ 95.223777][ T4824] comedi comedi3: 8255: I/O port conflict (0x40100,4) [ 95.245541][ T4824] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 95.262367][ T4824] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 95.292047][ T4821] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 95.301426][ T4821] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 95.302882][ T4824] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 95.347891][ T4824] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 95.364722][ T4824] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 95.383610][ T4824] comedi comedi3: 8255: I/O port conflict (0x20000000,4) [ 95.387716][ T1338] usb 2-1: string descriptor 0 read error: -22 [ 95.390694][ T4824] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 95.390728][ T4824] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 95.402712][ T1338] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 95.423745][ T4824] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 95.450802][ T1338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.451856][ T4824] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 95.469002][ T4824] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 95.476056][ T4790] lo speed is unknown, defaulting to 1000 [ 95.503634][ T4824] comedi comedi3: 8255: I/O port conflict (0x10001,4) [ 95.510843][ T4824] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 95.526061][ T4824] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 95.532677][ T4824] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 95.548783][ T4824] comedi comedi3: 8255: I/O port conflict (0x401,4) [ 95.560949][ T4824] comedi comedi3: 8255: I/O port conflict (0xffffffffffff0000,4) [ 95.571778][ T4824] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 95.581950][ T4824] comedi comedi3: 8255: I/O port conflict (0x200007,4) [ 95.604756][ T4824] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 95.611428][ T4824] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 95.626609][ T4824] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 95.639858][ T4824] comedi comedi3: 8255: I/O port conflict (0x400,4) [ 95.722560][ T4790] lo speed is unknown, defaulting to 1000 [ 95.724120][ T26] audit: type=1800 audit(1793930765.611:2): pid=4815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.164" name="file0" dev="jffs2" ino=2 res=0 errno=0 [ 95.872135][ T4839] loop4: detected capacity change from 0 to 512 [ 95.888213][ T4837] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 95.911265][ T4790] lo speed is unknown, defaulting to 1000 [ 95.998417][ T4683] udevd[4683]: symlink '../../loop4' '/dev/disk/by-diskseq/118.tmp-b7:4' failed: Read-only file system [ 96.313199][ T4847] loop4: detected capacity change from 0 to 512 [ 96.496589][ T4790] lo speed is unknown, defaulting to 1000 [ 96.853433][ T4683] udevd[4683]: symlink '../../loop4' '/dev/disk/by-diskseq/118.tmp-b7:4' failed: Read-only file system [ 96.853648][ T13] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 96.878844][ T4683] udevd[4683]: symlink '../../loop4' '/dev/disk/by-diskseq/118.tmp-b7:4' failed: Read-only file system [ 96.918253][ T4683] udevd[4683]: symlink '../../loop4' '/dev/disk/by-diskseq/118.tmp-b7:4' failed: Read-only file system [ 96.949506][ T4683] udevd[4683]: symlink '../../loop4' '/dev/disk/by-diskseq/120.tmp-b7:4' failed: Read-only file system [ 97.156976][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 97.223698][ T1338] usb 2-1: Warning! Unlikely big volume range (=24496), cval->res is probably wrong. [ 97.239559][ T1338] usb 2-1: [2] FU [Speaker Playback Volume] ch = 1, val = -24496/0/1 [ 97.269110][ T1338] usb 2-1: USB disconnect, device number 7 [ 97.313805][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 97.340244][ T13] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 97.349593][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.367678][ T13] usb 4-1: config 0 descriptor?? [ 97.409573][ T4862] FAULT_INJECTION: forcing a failure. [ 97.409573][ T4862] name failslab, interval 1, probability 0, space 0, times 0 [ 97.423800][ T4862] CPU: 0 PID: 4862 Comm: syz.4.179 Not tainted syzkaller #0 [ 97.431114][ T4862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 97.441171][ T4862] Call Trace: [ 97.444463][ T4862] [ 97.447402][ T4862] dump_stack_lvl+0x188/0x250 [ 97.452104][ T4862] ? show_regs_print_info+0x20/0x20 [ 97.457330][ T4862] ? load_image+0x410/0x410 [ 97.461857][ T4862] ? __might_sleep+0xf0/0xf0 [ 97.466462][ T4862] ? __lock_acquire+0x7d40/0x7d40 [ 97.471506][ T4862] should_fail+0x383/0x4b0 [ 97.475946][ T4862] should_failslab+0x5/0x20 [ 97.480462][ T4862] slab_pre_alloc_hook+0x51/0xc0 [ 97.484132][ T4867] tmpfs: Unknown parameter 'usrquota' [ 97.485411][ T4862] ? __proc_create+0x36f/0x8b0 [ 97.495536][ T4862] kmem_cache_alloc+0x3d/0x280 [ 97.500322][ T4862] __proc_create+0x36f/0x8b0 [ 97.504938][ T4862] ? proc_symlink+0x210/0x210 [ 97.509631][ T4862] ? proc_symlink+0x210/0x210 [ 97.514335][ T4862] proc_create_data+0xa0/0x2d0 [ 97.519123][ T4862] cache_register_net+0x27a/0x480 [ 97.524184][ T4862] nfsd_idmap_init+0x157/0x1e0 [ 97.528966][ T4862] ? nfsd_init_net+0x34/0x1e0 [ 97.533665][ T4862] nfsd_init_net+0x47/0x1e0 [ 97.538187][ T4862] ops_init+0x360/0x5f0 [ 97.542360][ T4862] setup_net+0x39e/0xa10 [ 97.546606][ T4862] ? copy_net_ns+0x5b0/0x5b0 [ 97.551186][ T4862] ? copy_net_ns+0x324/0x5b0 [ 97.555767][ T4862] ? down_read_killable+0x1ce/0x340 [ 97.560984][ T4862] copy_net_ns+0x33e/0x5b0 [ 97.565410][ T4862] create_new_namespaces+0x3ce/0x700 [ 97.570720][ T4862] unshare_nsproxy_namespaces+0x116/0x160 [ 97.576463][ T4862] ksys_unshare+0x4f6/0x8e0 [ 97.581001][ T4862] ? __lock_acquire+0x7d40/0x7d40 [ 97.586038][ T4862] ? sighand_ctor+0x40/0x40 [ 97.590544][ T4862] ? lock_chain_count+0x20/0x20 [ 97.595402][ T4862] ? syscall_enter_from_user_mode+0x21/0x70 [ 97.601291][ T4862] __x64_sys_unshare+0x34/0x40 [ 97.606044][ T4862] do_syscall_64+0x4c/0xa0 [ 97.610452][ T4862] ? clear_bhb_loop+0x30/0x80 [ 97.615123][ T4862] ? clear_bhb_loop+0x30/0x80 [ 97.619798][ T4862] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.625681][ T4862] RIP: 0033:0x7fac2870fb19 [ 97.630088][ T4862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.649684][ T4862] RSP: 002b:00007fac26966028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 97.658175][ T4862] RAX: ffffffffffffffda RBX: 00007fac28995fa0 RCX: 00007fac2870fb19 [ 97.666225][ T4862] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 97.674187][ T4862] RBP: 00007fac287a7b70 R08: 0000000000000000 R09: 0000000000000000 [ 97.682151][ T4862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.690109][ T4862] R13: 00007fac28996038 R14: 00007fac28995fa0 R15: 00007ffded40d158 [ 97.698086][ T4862] [ 97.738869][ T13] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 97.805736][ T4685] udevd[4685]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.853890][ T4293] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 97.900149][ T4874] FAULT_INJECTION: forcing a failure. [ 97.900149][ T4874] name failslab, interval 1, probability 0, space 0, times 0 [ 97.913566][ T4874] CPU: 1 PID: 4874 Comm: syz.1.183 Not tainted syzkaller #0 [ 97.920884][ T4874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 97.930970][ T4874] Call Trace: [ 97.934248][ T4874] [ 97.937183][ T4874] dump_stack_lvl+0x188/0x250 [ 97.941882][ T4874] ? show_regs_print_info+0x20/0x20 [ 97.947101][ T4874] ? load_image+0x410/0x410 [ 97.951630][ T4874] ? __might_sleep+0xf0/0xf0 [ 97.956238][ T4874] ? __lock_acquire+0x7d40/0x7d40 [ 97.961288][ T4874] should_fail+0x383/0x4b0 [ 97.965750][ T4874] should_failslab+0x5/0x20 [ 97.970246][ T4874] slab_pre_alloc_hook+0x51/0xc0 [ 97.975186][ T4874] ? security_file_alloc+0x30/0x110 [ 97.980420][ T4874] kmem_cache_alloc+0x3d/0x280 [ 97.985173][ T4874] ? rcu_is_watching+0x11/0xa0 [ 97.989928][ T4874] security_file_alloc+0x30/0x110 [ 97.994955][ T4874] __alloc_file+0xc2/0x240 [ 97.999416][ T4874] alloc_empty_file+0x90/0x180 [ 98.004167][ T4874] alloc_file+0x5c/0x510 [ 98.008398][ T4874] ? do_raw_spin_unlock+0x11d/0x230 [ 98.013622][ T4874] alloc_file_pseudo+0x180/0x200 [ 98.018572][ T4874] ? alloc_empty_file_noaccount+0x80/0x80 [ 98.024311][ T4874] anon_inode_getfile+0xc1/0x1a0 [ 98.029238][ T4874] sync_file_ioctl+0xb19/0x1850 [ 98.034092][ T4874] ? sync_file_poll+0x230/0x230 [ 98.038971][ T4874] ? bpf_lsm_file_ioctl+0x5/0x10 [ 98.043917][ T4874] ? security_file_ioctl+0x7c/0xa0 [ 98.049018][ T4874] ? sync_file_poll+0x230/0x230 [ 98.053860][ T4874] __se_sys_ioctl+0xfa/0x170 [ 98.058457][ T4874] do_syscall_64+0x4c/0xa0 [ 98.062880][ T4874] ? clear_bhb_loop+0x30/0x80 [ 98.067546][ T4874] ? clear_bhb_loop+0x30/0x80 [ 98.072213][ T4874] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.078099][ T4874] RIP: 0033:0x7f377c3e2b19 [ 98.082534][ T4874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.102132][ T4874] RSP: 002b:00007f377a639028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.110555][ T4874] RAX: ffffffffffffffda RBX: 00007f377c668fa0 RCX: 00007f377c3e2b19 [ 98.118535][ T4874] RDX: 0000200000000600 RSI: 00000000c0303e03 RDI: 0000000000000005 [ 98.126522][ T4874] RBP: 00007f377c47ab70 R08: 0000000000000000 R09: 0000000000000000 [ 98.134493][ T4874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.142494][ T4874] R13: 00007f377c669038 R14: 00007f377c668fa0 R15: 00007ffcae824308 [ 98.150483][ T4874] [ 98.218014][ T24] usb 4-1: USB disconnect, device number 6 [ 98.224177][ T4293] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 98.237664][ T4293] usb 3-1: config 0 has no interface number 0 [ 98.246354][ T4293] usb 3-1: config 0 interface 16 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.261248][ T4293] usb 3-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.277013][ T4293] usb 3-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.292190][ T4293] usb 3-1: config 0 interface 16 has no altsetting 0 [ 98.303422][ T4293] usb 3-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.4b [ 98.318755][ T4293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.329108][ T4293] usb 3-1: config 0 descriptor?? [ 98.429762][ T4887] loop0: detected capacity change from 0 to 512 [ 98.538197][ T4683] udevd[4683]: symlink '../../loop0' '/dev/disk/by-diskseq/123.tmp-b7:0' failed: Read-only file system [ 98.581899][ T4683] udevd[4683]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 98.818064][ T4890] loop0: detected capacity change from 0 to 512 [ 99.171119][ T4864] kAFS: No cell specified [ 99.343919][ T4293] usbhid 3-1:0.16: can't add hid device: -71 [ 99.362503][ T4683] udevd[4683]: symlink '../../loop0' '/dev/disk/by-diskseq/123.tmp-b7:0' failed: Read-only file system [ 99.377182][ T4293] usbhid: probe of 3-1:0.16 failed with error -71 [ 99.538016][ T4293] usb 3-1: USB disconnect, device number 4 [ 99.866832][ T4683] udevd[4683]: symlink '../../loop0' '/dev/disk/by-diskseq/123.tmp-b7:0' failed: Read-only file system [ 100.249304][ T4902] jffs2: notice: (4902) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 100.277970][ T4683] udevd[4683]: symlink '../../loop0' '/dev/disk/by-diskseq/125.tmp-b7:0' failed: Read-only file system [ 100.485997][ T4685] udevd[4685]: symlink '../../loop0' '/dev/disk/by-diskseq/125.tmp-b7:0' failed: Read-only file system [ 100.782061][ T4685] udevd[4685]: symlink '../../loop0' '/dev/disk/by-diskseq/125.tmp-b7:0' failed: Read-only file system [ 101.145924][ T4685] udevd[4685]: symlink '../../loop0' '/dev/disk/by-diskseq/126.tmp-b7:0' failed: Read-only file system [ 101.329740][ T4916] jffs2: notice: (4916) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 103.445926][ T4955] ieee802154 phy0 wpan0: encryption failed: -22 [ 103.555346][ T4963] using random self ethernet address [ 103.556748][ T4967] comedi comedi0: dmm32at: I/O port conflict (0x100,16) [ 103.562015][ T4963] using random host ethernet address [ 103.613360][ T4969] block device autoloading is deprecated and will be removed. [ 103.635598][ T4963] FAULT_INJECTION: forcing a failure. [ 103.635598][ T4963] name failslab, interval 1, probability 0, space 0, times 0 [ 103.661958][ T4963] CPU: 0 PID: 4963 Comm: syz.2.215 Not tainted syzkaller #0 [ 103.669300][ T4963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 103.675816][ T4979] FAULT_INJECTION: forcing a failure. [ 103.675816][ T4979] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 103.679365][ T4963] Call Trace: [ 103.695872][ T4963] [ 103.698808][ T4963] dump_stack_lvl+0x188/0x250 [ 103.703502][ T4963] ? show_regs_print_info+0x20/0x20 [ 103.708706][ T4963] ? load_image+0x410/0x410 [ 103.713213][ T4963] ? __might_sleep+0xf0/0xf0 [ 103.717804][ T4963] ? __lock_acquire+0x7d40/0x7d40 [ 103.722839][ T4963] should_fail+0x383/0x4b0 [ 103.727265][ T4963] should_failslab+0x5/0x20 [ 103.731775][ T4963] slab_pre_alloc_hook+0x51/0xc0 [ 103.736710][ T4963] kmem_cache_alloc_node+0x47/0x2c0 [ 103.741923][ T4963] ? __alloc_skb+0xf4/0x750 [ 103.746426][ T4963] __alloc_skb+0xf4/0x750 [ 103.750757][ T4963] inet_netconf_notify_devconf+0x16f/0x230 [ 103.756561][ T4963] __devinet_sysctl_register+0x319/0x380 [ 103.762195][ T4963] ? devinet_sysctl_register+0x1f0/0x1f0 [ 103.767832][ T4963] ? neigh_parms_alloc+0x3cc/0x4b0 [ 103.772945][ T4963] devinet_sysctl_register+0x17c/0x1f0 [ 103.778406][ T4963] inetdev_init+0x28c/0x4d0 [ 103.782906][ T4963] inetdev_event+0x26f/0x1350 [ 103.787582][ T4963] ? devinet_exit_net+0x220/0x220 [ 103.792601][ T4963] ? netdev_upper_walk+0x1f0/0x1f0 [ 103.797710][ T4963] ? add_default_gids+0xe0/0xe0 [ 103.802555][ T4963] ? enum_all_gids_of_dev_cb+0x290/0x290 [ 103.808198][ T4963] ? del_netdev_ips+0x30/0x30 [ 103.812905][ T4963] raw_notifier_call_chain+0xcb/0x160 [ 103.818298][ T4963] register_netdevice+0x12a8/0x1720 [ 103.823508][ T4963] ? netif_stacked_transfer_operstate+0x200/0x200 [ 103.829923][ T4963] ? mutex_lock_io_nested+0x60/0x60 [ 103.835137][ T4963] register_netdev+0x37/0x50 [ 103.839724][ T4963] gether_register_netdev+0x9d/0x170 [ 103.845011][ T4963] ecm_bind+0x196/0xac0 [ 103.849177][ T4963] usb_add_function+0x2d9/0x980 [ 103.854031][ T4963] ? check_remote_wakeup_config+0x54/0x1b0 [ 103.859839][ T4963] configfs_composite_bind+0xa02/0xf60 [ 103.865306][ T4963] ? os_desc_qw_sign_store+0x130/0x130 [ 103.870761][ T4963] udc_bind_to_driver+0x203/0x5f0 [ 103.875800][ T4963] usb_gadget_probe_driver+0x1fb/0x380 [ 103.881395][ T4963] gadget_dev_desc_UDC_store+0x1ba/0x2e0 [ 103.887049][ T4963] configfs_write_iter+0x30b/0x400 [ 103.892163][ T4963] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 103.897715][ T4963] vfs_write+0x748/0xd70 [ 103.901971][ T4963] ? file_end_write+0x250/0x250 [ 103.906838][ T4963] ? mutex_lock_nested+0x17/0x20 [ 103.911776][ T4963] ? __fdget_pos+0x2bf/0x370 [ 103.916361][ T4963] ? ksys_write+0x70/0x260 [ 103.920865][ T4963] ksys_write+0x153/0x260 [ 103.925193][ T4963] ? __ia32_sys_read+0x80/0x80 [ 103.929957][ T4963] ? lockdep_hardirqs_on+0x94/0x140 [ 103.935156][ T4963] do_syscall_64+0x4c/0xa0 [ 103.939567][ T4963] ? clear_bhb_loop+0x30/0x80 [ 103.944238][ T4963] ? clear_bhb_loop+0x30/0x80 [ 103.948912][ T4963] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.954802][ T4963] RIP: 0033:0x7f2784fb5b19 [ 103.959217][ T4963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.978818][ T4963] RSP: 002b:00007f278320c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.987235][ T4963] RAX: ffffffffffffffda RBX: 00007f278523bfa0 RCX: 00007f2784fb5b19 [ 103.995204][ T4963] RDX: 000000000000000b RSI: 00002000000004c0 RDI: 0000000000000008 [ 104.003167][ T4963] RBP: 00007f278504db70 R08: 0000000000000000 R09: 0000000000000000 [ 104.011132][ T4963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.019099][ T4963] R13: 00007f278523c038 R14: 00007f278523bfa0 R15: 00007ffeca84ab08 [ 104.027084][ T4963] [ 104.030097][ T4979] CPU: 1 PID: 4979 Comm: syz.0.220 Not tainted syzkaller #0 [ 104.030168][ C0] vkms_vblank_simulate: vblank timer overrun [ 104.037384][ T4979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 104.053393][ T4979] Call Trace: [ 104.056685][ T4979] [ 104.059622][ T4979] dump_stack_lvl+0x188/0x250 [ 104.064320][ T4979] ? show_regs_print_info+0x20/0x20 [ 104.069539][ T4979] ? load_image+0x410/0x410 [ 104.070207][ T4963] usb0: HOST MAC ce:bb:7e:ae:7b:9b [ 104.074057][ T4979] ? mark_lock+0x94/0x320 [ 104.074080][ T4979] should_fail+0x383/0x4b0 [ 104.074104][ T4979] prepare_alloc_pages+0x1e3/0x5b0 [ 104.074129][ T4979] __alloc_pages+0x11b/0x480 [ 104.074150][ T4979] ? zone_statistics+0x170/0x170 [ 104.074171][ T4979] ? rcu_lock_acquire+0x30/0x30 [ 104.074191][ T4979] ? alloc_pages+0x452/0x560 [ 104.074216][ T4979] __get_free_pages+0x8/0x30 [ 104.074231][ T4979] __tlb_remove_page_size+0x1f2/0x3f0 [ 104.083000][ T4963] usb0: MAC 42:16:c8:c4:32:49 [ 104.084177][ T4979] unmap_page_range+0xfcf/0x2410 [ 104.084225][ T4979] unmap_vmas+0x131/0x250 [ 104.084243][ T4979] ? unmap_page_range+0x2410/0x2410 [ 104.084258][ T4979] ? __mutex_lock_common+0x435/0x2400 [ 104.084279][ T4979] ? exit_mm_release+0x16/0x30 [ 104.084307][ T4979] exit_mmap+0x3b9/0x640 [ 104.084329][ T4979] ? vm_brk+0x20/0x20 [ 104.084359][ T4979] ? uprobe_clear_state+0x2f6/0x460 [ 104.165243][ T4979] __mmput+0x115/0x390 [ 104.169332][ T4979] exit_mm+0x632/0x7b0 [ 104.173429][ T4979] ? perf_pmu_migrate_context+0xb70/0xb70 [ 104.179169][ T4979] ? do_exit+0x2100/0x2100 [ 104.183596][ T4979] ? __ia32_sys_timer_delete+0x40/0x40 [ 104.189092][ T4979] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 104.194550][ T4979] ? tty_audit_exit+0x149/0x1f0 [ 104.199404][ T4979] do_exit+0x5b8/0x2100 [ 104.203552][ T4979] ? put_task_struct+0x80/0x80 [ 104.208316][ T4979] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 104.214294][ T4979] ? _raw_spin_lock_irq+0xb7/0xf0 [ 104.219324][ T4979] do_group_exit+0x12c/0x2f0 [ 104.223908][ T4979] ? lockdep_hardirqs_on+0x94/0x140 [ 104.229122][ T4979] get_signal+0x7eb/0x12e0 [ 104.233548][ T4979] arch_do_signal_or_restart+0xe6/0x12a0 [ 104.239187][ T4979] ? rcu_lock_release+0x5/0x20 [ 104.243966][ T4979] ? futex_exit_release+0x1c0/0x1c0 [ 104.249168][ T4979] ? get_sigframe_size+0x10/0x10 [ 104.254102][ T4979] ? __context_tracking_exit+0x4c/0x80 [ 104.259655][ T4979] ? exit_to_user_mode_loop+0x3b/0x130 [ 104.265105][ T4979] exit_to_user_mode_loop+0x9e/0x130 [ 104.270402][ T4979] exit_to_user_mode_prepare+0xee/0x180 [ 104.275980][ T4979] syscall_exit_to_user_mode+0x16/0x40 [ 104.281432][ T4979] do_syscall_64+0x58/0xa0 [ 104.285845][ T4979] ? clear_bhb_loop+0x30/0x80 [ 104.290547][ T4979] ? clear_bhb_loop+0x30/0x80 [ 104.295223][ T4979] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.301120][ T4979] RIP: 0033:0x7fa05a1aab19 [ 104.305534][ T4979] Code: Unable to access opcode bytes at RIP 0x7fa05a1aaaef. [ 104.312894][ T4979] RSP: 002b:00007fa0584010e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 104.321315][ T4979] RAX: 0000000000000001 RBX: 00007fa05a430fa8 RCX: 00007fa05a1aab19 [ 104.329278][ T4979] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa05a430fac [ 104.337241][ T4979] RBP: 00007fa05a430fa0 R08: 002568eccafae425 R09: 0000000000000000 [ 104.345208][ T4979] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 104.353189][ T4979] R13: 00007fa05a431038 R14: 00007ffdde932860 R15: 00007ffdde932948 [ 104.361190][ T4979] [ 104.363815][ T4293] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 104.365344][ T21] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 104.412428][ T4984] loop2: detected capacity change from 0 to 512 [ 104.493295][ T4685] udevd[4685]: symlink '../../loop2' '/dev/disk/by-diskseq/129.tmp-b7:2' failed: Read-only file system [ 104.506225][ T4685] udevd[4685]: symlink '../../loop2' '/dev/disk/by-label/SYZKALLER.tmp-b7:2' failed: Read-only file system [ 104.518740][ T4685] udevd[4685]: symlink '../../loop2' '/dev/disk/by-uuid/8B9B-8193.tmp-b7:2' failed: Read-only file system [ 104.535198][ T4989] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 104.564097][ T4989] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 104.566824][ T4685] udevd[4685]: symlink '../../loop2' '/dev/disk/by-diskseq/129.tmp-b7:2' failed: Read-only file system [ 104.583654][ T4685] udevd[4685]: symlink '../../loop2' '/dev/disk/by-label/SYZKALLER.tmp-b7:2' failed: Read-only file system [ 104.598115][ T4685] udevd[4685]: symlink '../../loop2' '/dev/disk/by-uuid/8B9B-8193.tmp-b7:2' failed: Read-only file system [ 104.663718][ T4293] usb 1-1: Dual-Role OTG device on HNP port [ 104.685564][ T4293] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 5.15 [ 104.695286][ T4293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.750132][ T4683] udevd[4683]: symlink '../../loop2' '/dev/disk/by-diskseq/129.tmp-b7:2' failed: Read-only file system [ 104.773169][ T4683] udevd[4683]: symlink '../../loop2' '/dev/disk/by-diskseq/129.tmp-b7:2' failed: Read-only file system [ 104.838594][ T4293] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, ce:bb:7e:ae:7b:9b [ 104.864523][ T21] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 104.888672][ T21] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 105.123796][ T21] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.135544][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.145675][ T21] usb 4-1: Product: syz [ 105.149978][ T21] usb 4-1: Manufacturer: ᰉ [ 105.155863][ T21] usb 4-1: SerialNumber: syz [ 105.455201][ T21] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 105.462165][ T21] cdc_ncm 4-1:1.0: bind() failure [ 105.470137][ T21] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 105.477606][ T21] cdc_ncm 4-1:1.1: bind() failure [ 105.486706][ T21] usb 4-1: USB disconnect, device number 7 [ 106.313702][ T21] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 106.545973][ T4970] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 106.574507][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 107.636758][ T21] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 107.645969][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.680991][ T4293] usb 1-1: USB disconnect, device number 5 [ 107.702822][ T4293] cdc_ether 1-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 107.740234][ T21] usb 4-1: Product: syz [ 107.758396][ T21] usb 4-1: Manufacturer: syz [ 107.775862][ T5025] process 'syz.4.235' launched './file0' with NULL argv: empty string added [ 107.790488][ T21] usb 4-1: SerialNumber: syz [ 107.829731][ T21] usb 4-1: config 0 descriptor?? [ 107.898484][ T21] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 107.914869][ T21] dvb-usb: bulk message failed: -22 (4/0) [ 107.951185][ T21] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 107.969451][ T21] dvb-usb: bulk message failed: -22 (5/0) [ 107.976585][ T21] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 108.233804][ T4293] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 108.605756][ T4293] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 108.637832][ T4293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.805717][ T4293] usb 1-1: config 0 descriptor?? [ 108.842348][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 108.874391][ T21] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 108.882441][ T21] usb 4-1: media controller created [ 108.893168][ T5046] FAULT_INJECTION: forcing a failure. [ 108.893168][ T5046] name failslab, interval 1, probability 0, space 0, times 0 [ 108.937431][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.968602][ T21] usb 4-1: selecting invalid altsetting 3 [ 108.974437][ T21] ttusb2: set interface to alts=3 failed [ 108.985997][ T5046] CPU: 1 PID: 5046 Comm: syz.2.237 Not tainted syzkaller #0 [ 108.993424][ T5046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 109.003492][ T5046] Call Trace: [ 109.006777][ T5046] [ 109.009723][ T5046] dump_stack_lvl+0x188/0x250 [ 109.014428][ T5046] ? show_regs_print_info+0x20/0x20 [ 109.019649][ T5046] ? load_image+0x410/0x410 [ 109.024177][ T5046] ? __might_sleep+0xf0/0xf0 [ 109.028784][ T5046] ? __lock_acquire+0x7d40/0x7d40 [ 109.033835][ T5046] should_fail+0x383/0x4b0 [ 109.038274][ T5046] should_failslab+0x5/0x20 [ 109.042790][ T5046] slab_pre_alloc_hook+0x51/0xc0 [ 109.047746][ T5046] ? security_file_alloc+0x30/0x110 [ 109.052962][ T5046] kmem_cache_alloc+0x3d/0x280 [ 109.057747][ T5046] ? rcu_is_watching+0x11/0xa0 [ 109.062634][ T5046] security_file_alloc+0x30/0x110 [ 109.067682][ T5046] __alloc_file+0xc2/0x240 [ 109.072220][ T5046] alloc_empty_file+0x90/0x180 [ 109.077007][ T5046] alloc_file+0x5c/0x510 [ 109.081267][ T5046] ? do_raw_spin_unlock+0x11d/0x230 [ 109.086486][ T5046] alloc_file_pseudo+0x180/0x200 [ 109.091446][ T5046] ? alloc_empty_file_noaccount+0x80/0x80 [ 109.097187][ T5046] ? shmem_get_inode+0x87b/0xa40 [ 109.102158][ T5046] __shmem_file_setup+0x1cf/0x290 [ 109.107210][ T5046] shmem_zero_setup+0x8e/0x1c0 [ 109.112005][ T5046] mmap_region+0x135d/0x1730 [ 109.116641][ T5046] do_mmap+0x801/0xe30 [ 109.120733][ T5046] ? vm_mmap_pgoff+0x16c/0x2d0 [ 109.125515][ T5046] vm_mmap_pgoff+0x1c1/0x2d0 [ 109.130130][ T5046] ? account_locked_vm+0xe0/0xe0 [ 109.135093][ T5046] ? __context_tracking_exit+0x4c/0x80 [ 109.140574][ T5046] ? __lock_acquire+0x7d40/0x7d40 [ 109.145629][ T5046] ksys_mmap_pgoff+0x140/0x790 [ 109.150423][ T5046] ? mmap_region+0x1730/0x1730 [ 109.155290][ T5046] ? lockdep_hardirqs_on+0x94/0x140 [ 109.160509][ T5046] do_syscall_64+0x4c/0xa0 [ 109.164937][ T5046] ? clear_bhb_loop+0x30/0x80 [ 109.169627][ T5046] ? clear_bhb_loop+0x30/0x80 [ 109.174321][ T5046] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.180229][ T5046] RIP: 0033:0x7f2784fb5b19 [ 109.184666][ T5046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.204290][ T5046] RSP: 002b:00007f278320c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 109.212728][ T5046] RAX: ffffffffffffffda RBX: 00007f278523bfa0 RCX: 00007f2784fb5b19 [ 109.220720][ T5046] RDX: 000000000300000b RSI: 0000000000200000 RDI: 0000200000000000 [ 109.228712][ T5046] RBP: 00007f278504db70 R08: ffffffffffffffff R09: 000000004cec2000 [ 109.236706][ T5046] R10: 0000000000204031 R11: 0000000000000246 R12: 0000000000000000 [ 109.244698][ T5046] R13: 00007f278523c038 R14: 00007f278523bfa0 R15: 00007ffeca84ab08 [ 109.252704][ T5046] [ 109.333630][ T21] DVB: Unable to find symbol tda10086_attach() [ 109.340900][ T21] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 109.433799][ T21] dvb-usb: bulk message failed: -22 (4/0) [ 109.465366][ T21] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 109.476040][ T4293] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 109.487867][ T4293] [drm] Initialized udl on minor 2 [ 109.560205][ T21] dvb-usb: bulk message failed: -22 (5/0) [ 109.652460][ T21] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 109.929925][ T21] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 110.089561][ T4293] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 110.159148][ T21] usb 4-1: USB disconnect, device number 8 [ 110.197017][ T4293] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 110.221603][ T4293] usb 1-1: USB disconnect, device number 6 [ 110.289113][ T21] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 110.315915][ T7] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 110.365097][ T7] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 110.374928][ T7] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 110.953608][ T4293] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 111.273664][ T4293] usb 1-1: not running at top speed; connect to a high speed hub [ 112.013937][ T4293] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 112.025170][ T4293] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 112.035269][ T4293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.067764][ T5082] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 112.084717][ T4293] cyberjack 1-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 112.104582][ T4293] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 112.155603][ T24] Bluetooth: hci5: command 0x1003 tx timeout [ 112.161805][ T4206] Bluetooth: hci5: sending frame failed (-49) [ 112.935553][ T4293] usb 1-1: USB disconnect, device number 7 [ 113.043013][ T4252] Bluetooth: hci4: command 0x0405 tx timeout [ 113.048136][ T4293] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 113.114483][ T4252] Bluetooth: hci0: command 0x0c24 tx timeout [ 113.236880][ T4293] cyberjack 1-1:1.0: device disconnected [ 114.006291][ T5133] loop7: detected capacity change from 0 to 16384 [ 114.223625][ T24] Bluetooth: hci5: command 0x1001 tx timeout [ 114.230526][ T4206] Bluetooth: hci5: sending frame failed (-49) [ 114.901898][ T5140] loop1: detected capacity change from 0 to 512 [ 115.103926][ T5137] loop_set_status: loop7 () has still dirty pages (nrpages=262) [ 115.114941][ T5146] FAT-fs (loop1): error, corrupted file size (i_pos 51, 8960) [ 115.147070][ T5140] FAT-fs (loop1): error, corrupted file size (i_pos 51, 8960) [ 115.333685][ T4293] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 115.395808][ T5152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.271'. [ 115.458869][ T4296] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 115.593640][ T4293] usb 4-1: Using ep0 maxpacket: 16 [ 115.733917][ T4293] usb 4-1: config 0 interface 0 has no altsetting 0 [ 115.740653][ T4293] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 115.749966][ T4293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.760393][ T4293] usb 4-1: config 0 descriptor?? [ 115.873720][ T4296] usb 1-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 115.884721][ T4296] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 115.896069][ T4296] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 64 [ 115.903888][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 115.907225][ T4296] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 115.927824][ T4296] usb 1-1: config 0 interface 0 has no altsetting 0 [ 115.934603][ T4296] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 115.943813][ T4296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.953838][ T4296] usb 1-1: config 0 descriptor?? [ 115.974664][ T5148] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 116.238495][ T4293] input: HID 258a:6a88 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:258A:6A88.0002/input/input10 [ 116.303589][ T1111] Bluetooth: hci5: command 0x1009 tx timeout [ 116.327584][ T4293] itetech 0003:258A:6A88.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.3-1/input0 [ 116.404164][ T24] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 116.416249][ T24] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 116.435511][ T4296] logitech-djreceiver 0003:046D:C52F.0003: unknown main item tag 0x2 [ 116.444923][ T1111] usb 4-1: USB disconnect, device number 9 [ 116.449795][ T4296] logitech-djreceiver 0003:046D:C52F.0003: unknown main item tag 0x0 [ 116.459238][ T4296] logitech-djreceiver 0003:046D:C52F.0003: unknown main item tag 0x0 [ 116.614324][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.623738][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.631743][ T24] usb 2-1: Product: syz [ 116.642834][ T24] usb 2-1: Manufacturer: ᰉ [ 116.647720][ T24] usb 2-1: SerialNumber: syz [ 116.653936][ T4252] usb 1-1: USB disconnect, device number 8 [ 116.934701][ T24] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 116.941586][ T24] cdc_ncm 2-1:1.0: bind() failure [ 116.950607][ T24] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 116.968687][ T24] cdc_ncm 2-1:1.1: bind() failure [ 116.993098][ T24] usb 2-1: USB disconnect, device number 8 [ 117.253752][ T4296] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 117.503623][ T4255] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 117.563171][ T5169] page:ffffea0001430000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x50c00 [ 117.576696][ T5169] head:ffffea0001430000 order:6 compound_mapcount:0 compound_pincount:0 [ 117.585436][ T5169] flags: 0xfff00000010000(head|node=0|zone=1|lastcpupid=0x7ff) [ 117.593119][ T5169] raw: 00fff00000010000 0000000000000000 dead000000000122 0000000000000000 [ 117.602085][ T5169] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 117.611286][ T5169] page dumped because: unmovable page [ 117.616728][ T5169] page_owner tracks the page as allocated [ 117.622550][ T5169] page last allocated via order 6, migratetype Unmovable, gfp_mask 0x140dc0(GFP_USER|__GFP_COMP|__GFP_ZERO), pid 4790, ts 96807361356, free_ts 92631774415 [ 117.639624][ T5169] get_page_from_freelist+0x24f6/0x2670 [ 117.645388][ T5169] __alloc_pages+0x1ee/0x480 [ 117.650028][ T5169] kmalloc_order+0x40/0x150 [ 117.654646][ T5169] kmalloc_order_trace+0x14/0xf0 [ 117.659593][ T5169] ib_setup_port_attrs+0xffc/0x2140 [ 117.665049][ T5169] add_one_compat_dev+0x3da/0x5c0 [ 117.670208][ T5169] enable_device_and_get+0x2ac/0x3d0 [ 117.675578][ T5169] ib_register_device+0x1039/0x12e0 [ 117.680791][ T5169] rxe_register_device+0x256/0x360 [ 117.687881][ T5169] rxe_net_add+0x77/0xe0 [ 117.692152][ T5169] rxe_newlink+0x66/0x100 [ 117.696536][ T5169] nldev_newlink+0x524/0x580 [ 117.701139][ T5169] rdma_nl_rcv+0x6d8/0xa00 [ 117.705777][ T5169] netlink_unicast+0x804/0x9e0 [ 117.710558][ T5169] netlink_sendmsg+0x8ba/0xbe0 [ 117.715396][ T5169] ____sys_sendmsg+0x5be/0x8f0 [ 117.720182][ T5169] page last free stack trace: [ 117.725041][ T5169] free_unref_page_prepare+0x637/0x6c0 [ 117.730546][ T5169] free_unref_page_list+0x119/0x830 [ 117.736527][ T5169] release_pages+0x185f/0x1bd0 [ 117.741317][ T5169] __pagevec_release+0x6d/0xe0 [ 117.746221][ T5169] shmem_undo_range+0x5cd/0x19a0 [ 117.751173][ T5169] shmem_evict_inode+0x1e2/0x9a0 [ 117.756192][ T4255] usb 1-1: Using ep0 maxpacket: 16 [ 117.761390][ T5169] evict+0x4b2/0x9d0 [ 117.765349][ T5169] __dentry_kill+0x412/0x630 [ 117.769946][ T5169] dentry_kill+0xb8/0x290 [ 117.773879][ T4296] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 117.774501][ T5169] dput+0xd8/0x1a0 [ 117.787044][ T5169] __fput+0x5a5/0x8c0 [ 117.788957][ T4296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.791042][ T5169] task_work_run+0x125/0x1a0 [ 117.791071][ T5169] do_exit+0x635/0x2100 [ 117.800037][ T4296] usb 4-1: Product: syz [ 117.806366][ T5169] do_group_exit+0x12c/0x2f0 [ 117.812164][ T4296] usb 4-1: Manufacturer: syz [ 117.812254][ T5169] get_signal+0x7eb/0x12e0 [ 117.817905][ T4296] usb 4-1: SerialNumber: syz [ 117.822160][ T5169] arch_do_signal_or_restart+0xe6/0x12a0 [ 117.878232][ T5171] FAULT_INJECTION: forcing a failure. [ 117.878232][ T5171] name failslab, interval 1, probability 0, space 0, times 0 [ 117.891850][ T5171] CPU: 1 PID: 5171 Comm: syz.1.278 Not tainted syzkaller #0 [ 117.899160][ T5171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 117.909227][ T5171] Call Trace: [ 117.912526][ T5171] [ 117.915453][ T5171] dump_stack_lvl+0x188/0x250 [ 117.920124][ T5171] ? show_regs_print_info+0x20/0x20 [ 117.925310][ T5171] ? load_image+0x410/0x410 [ 117.929896][ T5171] ? __lock_acquire+0x7d40/0x7d40 [ 117.934915][ T5171] should_fail+0x383/0x4b0 [ 117.939345][ T5171] should_failslab+0x5/0x20 [ 117.943843][ T5171] slab_pre_alloc_hook+0x51/0xc0 [ 117.948794][ T5171] ? security_inode_alloc+0x30/0x110 [ 117.954076][ T5171] kmem_cache_alloc+0x3d/0x280 [ 117.958852][ T5171] security_inode_alloc+0x30/0x110 [ 117.963949][ T5171] inode_init_always+0x8e5/0xc90 [ 117.968892][ T5171] new_inode_pseudo+0x8e/0x210 [ 117.973656][ T5171] new_inode+0x25/0x1d0 [ 117.977829][ T5171] proc_pid_make_inode+0x20/0x1a0 [ 117.982853][ T5171] proc_ns_dir_lookup+0x6a0/0x7c0 [ 117.987874][ T5171] ? proc_ns_dir_readdir+0x440/0x440 [ 117.993180][ T5171] path_openat+0x1046/0x2fb0 [ 117.997800][ T5171] ? do_filp_open+0x400/0x400 [ 118.002472][ T5171] do_filp_open+0x1df/0x400 [ 118.006959][ T5171] ? vfs_tmpfile+0x300/0x300 [ 118.011532][ T5171] ? noop_direct_IO+0x10/0x10 [ 118.016195][ T5171] ? _raw_spin_unlock+0x24/0x40 [ 118.021028][ T5171] ? alloc_fd+0x59e/0x650 [ 118.025345][ T5171] do_sys_openat2+0x14b/0x500 [ 118.030002][ T5171] ? __lock_acquire+0x7d40/0x7d40 [ 118.035010][ T5171] ? do_sys_open+0xe0/0xe0 [ 118.039417][ T5171] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 118.045386][ T5171] ? lock_chain_count+0x20/0x20 [ 118.050231][ T5171] __x64_sys_openat+0x135/0x160 [ 118.055077][ T5171] do_syscall_64+0x4c/0xa0 [ 118.059498][ T5171] ? clear_bhb_loop+0x30/0x80 [ 118.064160][ T5171] ? clear_bhb_loop+0x30/0x80 [ 118.068843][ T5171] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.074759][ T5171] RIP: 0033:0x7f377c3a334e [ 118.079173][ T5171] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 118.098781][ T5171] RSP: 002b:00007f377a638f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 118.107189][ T5171] RAX: ffffffffffffffda RBX: 00007f377a6396c0 RCX: 00007f377c3a334e [ 118.115152][ T5171] RDX: 0000000000000000 RSI: 00007f377c47a29e RDI: ffffffffffffff9c [ 118.123114][ T5171] RBP: 00007f377c47ab70 R08: 0000000000000000 R09: 0000000000000000 [ 118.131074][ T5171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.139055][ T5171] R13: 00007f377c669038 R14: 00007f377c668fa0 R15: 00007ffcae824308 [ 118.147028][ T5171] [ 118.152048][ T4255] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 118.160499][ T4255] usb 1-1: config 0 has no interface number 0 [ 118.166850][ T4255] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 118.177148][ T4255] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 118.309697][ T4296] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 118.342124][ T5175] FAULT_INJECTION: forcing a failure. [ 118.342124][ T5175] name failslab, interval 1, probability 0, space 0, times 0 [ 118.355526][ T5175] CPU: 1 PID: 5175 Comm: syz.4.280 Not tainted syzkaller #0 [ 118.362823][ T5175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 118.372881][ T5175] Call Trace: [ 118.376147][ T5175] [ 118.379063][ T5175] dump_stack_lvl+0x188/0x250 [ 118.383740][ T5175] ? show_regs_print_info+0x20/0x20 [ 118.388941][ T5175] ? load_image+0x410/0x410 [ 118.393441][ T5175] should_fail+0x383/0x4b0 [ 118.397854][ T5175] should_failslab+0x5/0x20 [ 118.402350][ T5175] slab_pre_alloc_hook+0x51/0xc0 [ 118.407276][ T5175] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 118.412980][ T5175] ? iolatency_pd_alloc+0x9b/0x170 [ 118.418079][ T5175] ? _raw_spin_lock_irqsave+0x100/0x100 [ 118.423624][ T5175] iolatency_pd_alloc+0x9b/0x170 [ 118.428558][ T5175] ? rcu_lock_release+0x20/0x20 [ 118.433420][ T5175] blkcg_activate_policy+0x23c/0x9c0 [ 118.438714][ T5175] blk_iolatency_init+0x256/0x470 [ 118.443727][ T5175] blkcg_init_queue+0x39b/0x430 [ 118.448591][ T5175] blk_alloc_queue+0x427/0x580 [ 118.453340][ T5175] __blk_alloc_disk+0x15/0x60 [ 118.458022][ T5175] dm_create+0x57f/0xf90 [ 118.462257][ T5175] dev_create+0x12e/0x2c0 [ 118.466582][ T5175] ? list_devices+0x8a0/0x8a0 [ 118.471252][ T5175] ? __might_fault+0xb3/0x110 [ 118.475928][ T5175] dm_ctl_ioctl+0x947/0xd00 [ 118.480436][ T5175] ? list_devices+0x8a0/0x8a0 [ 118.485109][ T5175] ? dm_poll+0x120/0x120 [ 118.489370][ T5175] ? bpf_lsm_file_ioctl+0x5/0x10 [ 118.494295][ T5175] ? security_file_ioctl+0x7c/0xa0 [ 118.499407][ T5175] ? dm_poll+0x120/0x120 [ 118.503648][ T5175] __se_sys_ioctl+0xfa/0x170 [ 118.508238][ T5175] do_syscall_64+0x4c/0xa0 [ 118.512666][ T5175] ? clear_bhb_loop+0x30/0x80 [ 118.517350][ T5175] ? clear_bhb_loop+0x30/0x80 [ 118.522050][ T5175] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.527964][ T5175] RIP: 0033:0x7fac2870fb19 [ 118.532437][ T5175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.552046][ T5175] RSP: 002b:00007fac26966028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.560468][ T5175] RAX: ffffffffffffffda RBX: 00007fac28995fa0 RCX: 00007fac2870fb19 [ 118.568449][ T5175] RDX: 0000200000000280 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 118.576408][ T5175] RBP: 00007fac287a7b70 R08: 0000000000000000 R09: 0000000000000000 [ 118.584365][ T5175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.592325][ T5175] R13: 00007fac28996038 R14: 00007fac28995fa0 R15: 00007ffded40d158 [ 118.600293][ T5175] [ 118.633994][ T4255] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 118.643478][ T4255] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.651689][ T4255] usb 1-1: Product: syz [ 118.656217][ T4255] usb 1-1: Manufacturer: syz [ 118.661731][ T4255] usb 1-1: SerialNumber: syz [ 118.671584][ T4255] usb 1-1: config 0 descriptor?? [ 118.705104][ T5165] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 118.715949][ T5165] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 118.957445][ T5165] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 118.965354][ T5165] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 119.053328][ T5198] loop1: detected capacity change from 0 to 512 [ 119.098259][ T5198] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 119.131707][ T5198] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.286: inode has both inline data and extents flags [ 119.146863][ T5198] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.286: couldn't read orphan inode 15 (err -117) [ 119.159065][ T5198] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,auto_da_alloc=0x0000000000000002,discard,dioread_nolock,nodiscard,,errors=continue. Quota mode: writeback. [ 119.283690][ T4255] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 119.301196][ T4255] asix: probe of 1-1:0.34 failed with error -71 [ 119.309860][ T4255] usb 1-1: USB disconnect, device number 9 [ 119.939228][ T4296] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 119.969183][ T4296] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 120.023437][ T4296] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 120.054077][ T4296] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 120.093679][ T4296] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 120.153655][ T4296] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 120.190052][ T4296] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 120.214927][ T4296] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 120.270039][ T4296] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 120.313837][ T4296] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 120.336004][ T4296] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 120.369337][ T26] audit: type=1400 audit(1793930790.261:3): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=5213 comm="syz.0.291" name="unknown" offset=82 [ 120.370922][ T4296] lan78xx: probe of 4-1:1.0 failed with error -71 [ 120.431591][ T4296] usb 4-1: USB disconnect, device number 10 [ 120.976629][ T5234] loop2: detected capacity change from 0 to 512 [ 121.028470][ T5234] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 121.063434][ T5234] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.298: inode has both inline data and extents flags [ 121.080000][ T5234] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.298: couldn't read orphan inode 15 (err -117) [ 121.089466][ T5204] ODEBUG: Out of memory. ODEBUG disabled [ 121.093123][ T5234] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,auto_da_alloc=0x0000000000000002,discard,dioread_nolock,nodiscard,,errors=continue. Quota mode: writeback. [ 121.249525][ T4252] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 122.042217][ T5246] loop0: detected capacity change from 0 to 256 [ 122.183737][ T4252] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 122.547194][ T5246] FAT-fs (loop0): Directory bread(block 64) failed [ 122.643276][ T5246] FAT-fs (loop0): Directory bread(block 65) failed [ 122.735664][ T5246] FAT-fs (loop0): Directory bread(block 66) failed [ 122.836176][ T5246] FAT-fs (loop0): Directory bread(block 67) failed [ 122.882888][ T4252] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 122.909947][ T5246] FAT-fs (loop0): Directory bread(block 68) failed [ 122.940710][ T5246] FAT-fs (loop0): Directory bread(block 69) failed [ 122.956257][ T5246] FAT-fs (loop0): Directory bread(block 70) failed [ 122.963878][ T5246] FAT-fs (loop0): Directory bread(block 71) failed [ 122.971796][ T5246] FAT-fs (loop0): Directory bread(block 72) failed [ 122.978563][ T5246] FAT-fs (loop0): Directory bread(block 73) failed [ 123.041713][ T5246] attempt to access beyond end of device [ 123.041713][ T5246] loop0: rw=524288, want=1196, limit=256 [ 123.104897][ T5246] attempt to access beyond end of device [ 123.104897][ T5246] loop0: rw=0, want=1196, limit=256 [ 123.153794][ T4252] usb 4-1: string descriptor 0 read error: -22 [ 123.160024][ T26] audit: type=1800 audit(1793930793.051:4): pid=5246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.301" name="file1" dev="loop0" ino=1048644 res=0 errno=0 [ 123.184573][ T4252] usb 4-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 123.210496][ T4252] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.294366][ T4252] etas_es58x 4-1:1.0: Starting (null) (null) (Serial Number (null)) driver version 1.00 [ 123.323618][ T4252] etas_es58x 4-1:1.0: es58x_get_product_info: Could not read the product info: -EPIPE [ 123.335186][ T5274] netlink: 24 bytes leftover after parsing attributes in process `syz.0.306'. [ 123.355013][ T4252] etas_es58x: probe of 4-1:1.0 failed with error -32 [ 123.372740][ T5274] net_ratelimit: 1 callbacks suppressed [ 123.372758][ T5274] ip_tables: iptables: counters copy to user failed while replacing table [ 123.531594][ T5283] FAULT_INJECTION: forcing a failure. [ 123.531594][ T5283] name fail_futex, interval 1, probability 0, space 0, times 0 [ 123.572428][ T5283] CPU: 0 PID: 5283 Comm: syz.2.309 Not tainted syzkaller #0 [ 123.575258][ T5286] netlink: 'syz.1.310': attribute type 1 has an invalid length. [ 123.579761][ T5283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 123.579779][ T5283] Call Trace: [ 123.579787][ T5283] [ 123.579796][ T5283] dump_stack_lvl+0x188/0x250 [ 123.608332][ T5283] ? show_regs_print_info+0x20/0x20 [ 123.613560][ T5283] ? load_image+0x410/0x410 [ 123.618089][ T5283] ? cgroup_rstat_updated+0xce/0x350 [ 123.623393][ T5283] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 123.629400][ T5283] should_fail+0x383/0x4b0 [ 123.633839][ T5283] get_futex_key+0x1a0/0x1200 [ 123.638541][ T5283] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 123.644551][ T5283] ? futex_wait_restart+0x250/0x250 [ 123.649778][ T5283] ? lock_chain_count+0x20/0x20 [ 123.654647][ T5283] futex_wait_setup+0x4b/0x520 [ 123.659421][ T5283] ? lockdep_hardirqs_on+0x94/0x140 [ 123.664629][ T5283] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 123.670535][ T5283] futex_wait+0x22f/0x680 [ 123.674897][ T5283] ? __lock_acquire+0x13b3/0x7d40 [ 123.679936][ T5283] ? do_futex+0x12b0/0x12b0 [ 123.684464][ T5283] ? verify_lock_unused+0x140/0x140 [ 123.689673][ T5283] ? verify_lock_unused+0x140/0x140 [ 123.694897][ T5283] do_futex+0xdc2/0x12b0 [ 123.699158][ T5283] ? slab_free_freelist_hook+0xec/0x170 [ 123.704729][ T5283] ? futex_exit_release+0x1c0/0x1c0 [ 123.709953][ T5283] ? __context_tracking_exit+0x4c/0x80 [ 123.715430][ T5283] __se_sys_futex+0x389/0x420 [ 123.720119][ T5283] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 123.726119][ T5283] ? __x64_sys_futex+0xf0/0xf0 [ 123.730901][ T5283] ? __x64_sys_futex+0x1d/0xf0 [ 123.735678][ T5283] do_syscall_64+0x4c/0xa0 [ 123.740098][ T5283] ? clear_bhb_loop+0x30/0x80 [ 123.744783][ T5283] ? clear_bhb_loop+0x30/0x80 [ 123.749469][ T5283] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.755376][ T5283] RIP: 0033:0x7f2784fb5b19 [ 123.759796][ T5283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.779409][ T5283] RSP: 002b:00007f278320c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 123.787849][ T5283] RAX: ffffffffffffffda RBX: 00007f278523bfa8 RCX: 00007f2784fb5b19 [ 123.795836][ T5283] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f278523bfa8 [ 123.803821][ T5283] RBP: 00007f278523bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 123.811814][ T5283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.819795][ T5283] R13: 00007f278523c038 R14: 00007ffeca84aa20 R15: 00007ffeca84ab08 [ 123.827797][ T5283] [ 123.890601][ T4252] usb 4-1: USB disconnect, device number 11 [ 123.951497][ T5289] bond1: (slave veth3): Enslaving as an active interface with a down link [ 124.019810][ T5290] bond1: (slave veth0_to_bond): making interface the new active one [ 124.062071][ T5290] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 124.071608][ T5291] FAULT_INJECTION: forcing a failure. [ 124.071608][ T5291] name failslab, interval 1, probability 0, space 0, times 0 [ 124.091074][ T5291] CPU: 0 PID: 5291 Comm: syz.0.311 Not tainted syzkaller #0 [ 124.098408][ T5291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 124.108481][ T5291] Call Trace: [ 124.111784][ T5291] [ 124.114729][ T5291] dump_stack_lvl+0x188/0x250 [ 124.119433][ T5291] ? show_regs_print_info+0x20/0x20 [ 124.119786][ T5290] syz.1.310 (5290) used greatest stack depth: 19472 bytes left [ 124.124676][ T5291] ? load_image+0x410/0x410 [ 124.124705][ T5291] ? __might_sleep+0xf0/0xf0 [ 124.141322][ T5291] ? __lock_acquire+0x7d40/0x7d40 [ 124.146376][ T5291] should_fail+0x383/0x4b0 [ 124.150816][ T5291] should_failslab+0x5/0x20 [ 124.155328][ T5291] slab_pre_alloc_hook+0x51/0xc0 [ 124.160292][ T5291] __kmalloc+0x6b/0x340 [ 124.164459][ T5291] ? fib_create_info+0xad1/0x2450 [ 124.169511][ T5291] fib_create_info+0xad1/0x2450 [ 124.174373][ T5291] ? __mutex_lock_common+0x147b/0x2400 [ 124.179857][ T5291] fib_table_insert+0xe4/0x1b80 [ 124.184718][ T5291] ? mutex_lock_io_nested+0x60/0x60 [ 124.189941][ T5291] ? apparmor_capable+0x12c/0x190 [ 124.194991][ T5291] ? fib_new_table+0x106/0x2d0 [ 124.199785][ T5291] ip_rt_ioctl+0x4c8/0x1160 [ 124.204322][ T5291] ? fib_validate_source+0x1330/0x1330 [ 124.209811][ T5291] ? __might_fault+0xb3/0x110 [ 124.214511][ T5291] ? _copy_from_user+0x111/0x170 [ 124.219466][ T5291] inet_ioctl+0x391/0x460 [ 124.220601][ T5204] Set syz1 is full, maxelem 65536 reached [ 124.223816][ T5291] ? inet_shutdown+0x370/0x370 [ 124.223841][ T5291] ? kfree+0xef/0x2a0 [ 124.223869][ T5291] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 124.243768][ T5291] sock_do_ioctl+0xfb/0x320 [ 124.248297][ T5291] ? sock_show_fdinfo+0xb0/0xb0 [ 124.253183][ T5291] sock_ioctl+0x48a/0x700 [ 124.257541][ T5291] ? sock_poll+0x420/0x420 [ 124.261984][ T5291] ? bpf_lsm_file_ioctl+0x5/0x10 [ 124.266934][ T5291] ? security_file_ioctl+0x7c/0xa0 [ 124.272065][ T5291] ? sock_poll+0x420/0x420 [ 124.276502][ T5291] __se_sys_ioctl+0xfa/0x170 [ 124.281197][ T5291] do_syscall_64+0x4c/0xa0 [ 124.285628][ T5291] ? clear_bhb_loop+0x30/0x80 [ 124.290323][ T5291] ? clear_bhb_loop+0x30/0x80 [ 124.295019][ T5291] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.300931][ T5291] RIP: 0033:0x7fa05a1aab19 [ 124.305363][ T5291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.325069][ T5291] RSP: 002b:00007fa058401028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.333505][ T5291] RAX: ffffffffffffffda RBX: 00007fa05a430fa0 RCX: 00007fa05a1aab19 [ 124.341491][ T5291] RDX: 0000200000001740 RSI: 000000000000890b RDI: 0000000000000006 [ 124.349477][ T5291] RBP: 00007fa05a242b70 R08: 0000000000000000 R09: 0000000000000000 [ 124.357463][ T5291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.365493][ T5291] R13: 00007fa05a431038 R14: 00007fa05a430fa0 R15: 00007ffdde932948 [ 124.373489][ T5291] [ 124.417893][ T5302] netlink: 4 bytes leftover after parsing attributes in process `syz_tun'. [ 124.475969][ T5305] FAULT_INJECTION: forcing a failure. [ 124.475969][ T5305] name fail_futex, interval 1, probability 0, space 0, times 0 [ 124.489283][ T5305] CPU: 1 PID: 5305 Comm: syz.3.316 Not tainted syzkaller #0 [ 124.496595][ T5305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 124.506667][ T5305] Call Trace: [ 124.509963][ T5305] [ 124.512909][ T5305] dump_stack_lvl+0x188/0x250 [ 124.517609][ T5305] ? show_regs_print_info+0x20/0x20 [ 124.522826][ T5305] ? load_image+0x410/0x410 [ 124.527346][ T5305] ? cgroup_rstat_updated+0xce/0x350 [ 124.532650][ T5305] ? place_entity+0x4f0/0x4f0 [ 124.537352][ T5305] should_fail+0x383/0x4b0 [ 124.541793][ T5305] get_futex_key+0x1a0/0x1200 [ 124.546500][ T5305] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 124.552517][ T5305] ? futex_wait_restart+0x250/0x250 [ 124.557743][ T5305] ? lock_chain_count+0x20/0x20 [ 124.562617][ T5305] futex_wait_setup+0x4b/0x520 [ 124.567400][ T5305] ? lockdep_hardirqs_on+0x94/0x140 [ 124.572621][ T5305] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 124.578545][ T5305] futex_wait+0x22f/0x680 [ 124.582898][ T5305] ? __lock_acquire+0x13b3/0x7d40 [ 124.587944][ T5305] ? do_futex+0x12b0/0x12b0 [ 124.592480][ T5305] ? verify_lock_unused+0x140/0x140 [ 124.597702][ T5305] ? verify_lock_unused+0x140/0x140 [ 124.602925][ T5305] do_futex+0xdc2/0x12b0 [ 124.607199][ T5305] ? __lock_acquire+0x7d40/0x7d40 [ 124.612240][ T5305] ? rcu_read_lock_sched_held+0x86/0x110 [ 124.617898][ T5305] ? futex_exit_release+0x1c0/0x1c0 [ 124.623115][ T5305] ? __context_tracking_exit+0x4c/0x80 [ 124.628602][ T5305] __se_sys_futex+0x389/0x420 [ 124.633296][ T5305] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 124.639300][ T5305] ? __x64_sys_futex+0xf0/0xf0 [ 124.644088][ T5305] ? __x64_sys_futex+0x1d/0xf0 [ 124.648870][ T5305] do_syscall_64+0x4c/0xa0 [ 124.653298][ T5305] ? clear_bhb_loop+0x30/0x80 [ 124.657985][ T5305] ? clear_bhb_loop+0x30/0x80 [ 124.662676][ T5305] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.665785][ T5307] FAULT_INJECTION: forcing a failure. [ 124.665785][ T5307] name failslab, interval 1, probability 0, space 0, times 0 [ 124.668583][ T5305] RIP: 0033:0x7f9b66d70b19 [ 124.668608][ T5305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.668626][ T5305] RSP: 002b:00007f9b64fc70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.668648][ T5305] RAX: ffffffffffffffda RBX: 00007f9b66ff6fa8 RCX: 00007f9b66d70b19 [ 124.668664][ T5305] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9b66ff6fa8 [ 124.668675][ T5305] RBP: 00007f9b66ff6fa0 R08: 0000000000000000 R09: 0000000000000000 [ 124.738312][ T5305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.746298][ T5305] R13: 00007f9b66ff7038 R14: 00007ffd684146e0 R15: 00007ffd684147c8 [ 124.754313][ T5305] [ 124.757342][ T5307] CPU: 0 PID: 5307 Comm: syz.0.317 Not tainted syzkaller #0 [ 124.764644][ T5307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 124.774711][ T5307] Call Trace: [ 124.777999][ T5307] [ 124.780940][ T5307] dump_stack_lvl+0x188/0x250 [ 124.785636][ T5307] ? show_regs_print_info+0x20/0x20 [ 124.790850][ T5307] ? load_image+0x410/0x410 [ 124.795376][ T5307] ? __might_sleep+0xf0/0xf0 [ 124.799981][ T5307] ? __lock_acquire+0x7d40/0x7d40 [ 124.805043][ T5307] should_fail+0x383/0x4b0 [ 124.809485][ T5307] should_failslab+0x5/0x20 [ 124.814002][ T5307] slab_pre_alloc_hook+0x51/0xc0 [ 124.819077][ T5307] ? ovl_fill_super+0x71d/0x42a0 [ 124.824031][ T5307] __kmalloc_track_caller+0x69/0x330 [ 124.829324][ T5307] ? ovl_fill_super+0x71d/0x42a0 [ 124.834261][ T5307] kmemdup_nul+0x28/0xa0 [ 124.838502][ T5307] ovl_fill_super+0x71d/0x42a0 [ 124.843276][ T5307] ? sget+0x435/0x450 [ 124.847259][ T5307] ? ovl_mount+0x30/0x30 [ 124.851495][ T5307] ? __lock_acquire+0x7d40/0x7d40 [ 124.856528][ T5307] ? rwsem_write_trylock+0x135/0x1c0 [ 124.861828][ T5307] ? clear_nonspinnable+0x60/0x60 [ 124.866866][ T5307] ? __lock_acquire+0x7d40/0x7d40 [ 124.871891][ T5307] ? __rwlock_init+0x140/0x140 [ 124.876646][ T5307] ? strlcpy+0x83/0xc0 [ 124.880718][ T5307] ? free_anon_bdev+0x20/0x20 [ 124.885391][ T5307] ? ovl_mount+0x30/0x30 [ 124.889638][ T5307] mount_nodev+0x52/0xe0 [ 124.893877][ T5307] legacy_get_tree+0xe6/0x180 [ 124.898551][ T5307] ? virtio_fs_zero_page_range+0x120/0x120 [ 124.904352][ T5307] vfs_get_tree+0x88/0x270 [ 124.908765][ T5307] do_new_mount+0x247/0xa50 [ 124.913272][ T5307] __se_sys_mount+0x2e3/0x3d0 [ 124.917948][ T5307] ? __x64_sys_mount+0xc0/0xc0 [ 124.922722][ T5307] ? lockdep_hardirqs_on+0x94/0x140 [ 124.927920][ T5307] ? __x64_sys_mount+0x1c/0xc0 [ 124.932679][ T5307] do_syscall_64+0x4c/0xa0 [ 124.937082][ T5307] ? clear_bhb_loop+0x30/0x80 [ 124.941748][ T5307] ? clear_bhb_loop+0x30/0x80 [ 124.946423][ T5307] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.952310][ T5307] RIP: 0033:0x7fa05a1aab19 [ 124.956720][ T5307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.976318][ T5307] RSP: 002b:00007fa058401028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 124.984725][ T5307] RAX: ffffffffffffffda RBX: 00007fa05a430fa0 RCX: 00007fa05a1aab19 [ 124.992700][ T5307] RDX: 0000200000000440 RSI: 0000200000000400 RDI: 0000000000000000 [ 125.000664][ T5307] RBP: 00007fa05a242b70 R08: 00002000000004c0 R09: 0000000000000000 [ 125.008659][ T5307] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 125.016622][ T5307] R13: 00007fa05a431038 R14: 00007fa05a430fa0 R15: 00007ffdde932948 [ 125.024598][ T5307] [ 125.081469][ T5309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.317'. [ 125.422398][ T5332] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 125.491210][ T5338] FAULT_INJECTION: forcing a failure. [ 125.491210][ T5338] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 125.504858][ T5338] CPU: 0 PID: 5338 Comm: syz.2.325 Not tainted syzkaller #0 [ 125.512163][ T5338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 125.522225][ T5338] Call Trace: [ 125.525519][ T5338] [ 125.528468][ T5338] dump_stack_lvl+0x188/0x250 [ 125.533166][ T5338] ? show_regs_print_info+0x20/0x20 [ 125.538381][ T5338] ? load_image+0x410/0x410 [ 125.542904][ T5338] ? uncharge_page+0x490/0x490 [ 125.547686][ T5338] should_fail+0x383/0x4b0 [ 125.552122][ T5338] prepare_alloc_pages+0x1e3/0x5b0 [ 125.557252][ T5338] __alloc_pages+0x11b/0x480 [ 125.561860][ T5338] ? zone_statistics+0x170/0x170 [ 125.566816][ T5338] ? rcu_lock_acquire+0x30/0x30 [ 125.571683][ T5338] ? alloc_pages+0x452/0x560 [ 125.576293][ T5338] __get_free_pages+0x8/0x30 [ 125.580904][ T5338] __tlb_remove_page_size+0x1f2/0x3f0 [ 125.586308][ T5338] unmap_page_range+0xfcf/0x2410 [ 125.591290][ T5338] unmap_vmas+0x131/0x250 [ 125.595633][ T5338] ? unmap_page_range+0x2410/0x2410 [ 125.600839][ T5338] ? __mutex_lock_common+0x435/0x2400 [ 125.606227][ T5338] ? exit_mm_release+0x16/0x30 [ 125.611002][ T5338] exit_mmap+0x3b9/0x640 [ 125.615246][ T5338] ? vm_brk+0x20/0x20 [ 125.619258][ T5338] ? uprobe_clear_state+0x2f6/0x460 [ 125.624484][ T5338] __mmput+0x115/0x390 [ 125.628562][ T5338] exit_mm+0x632/0x7b0 [ 125.632619][ T5338] ? perf_pmu_migrate_context+0xb70/0xb70 [ 125.638359][ T5338] ? do_exit+0x2100/0x2100 [ 125.642797][ T5338] ? __ia32_sys_timer_delete+0x40/0x40 [ 125.648268][ T5338] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 125.653742][ T5338] ? tty_audit_exit+0x149/0x1f0 [ 125.658595][ T5338] do_exit+0x5b8/0x2100 [ 125.662783][ T5338] ? put_task_struct+0x80/0x80 [ 125.667544][ T5338] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 125.673553][ T5338] ? _raw_spin_lock_irq+0xb7/0xf0 [ 125.678592][ T5338] do_group_exit+0x12c/0x2f0 [ 125.683188][ T5338] ? lockdep_hardirqs_on+0x94/0x140 [ 125.688374][ T5338] get_signal+0x7eb/0x12e0 [ 125.692783][ T5338] arch_do_signal_or_restart+0xe6/0x12a0 [ 125.698408][ T5338] ? kfree+0x4a/0x2a0 [ 125.702394][ T5338] ? futex_exit_release+0x1c0/0x1c0 [ 125.707619][ T5338] ? get_sigframe_size+0x10/0x10 [ 125.712603][ T5338] ? __context_tracking_exit+0x4c/0x80 [ 125.718096][ T5338] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 125.724099][ T5338] ? exit_to_user_mode_loop+0x3b/0x130 [ 125.729655][ T5338] exit_to_user_mode_loop+0x9e/0x130 [ 125.734935][ T5338] exit_to_user_mode_prepare+0xee/0x180 [ 125.740476][ T5338] syscall_exit_to_user_mode+0x16/0x40 [ 125.745928][ T5338] do_syscall_64+0x58/0xa0 [ 125.750334][ T5338] ? clear_bhb_loop+0x30/0x80 [ 125.754996][ T5338] ? clear_bhb_loop+0x30/0x80 [ 125.759681][ T5338] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 125.765600][ T5338] RIP: 0033:0x7f2784fb5b19 [ 125.770021][ T5338] Code: Unable to access opcode bytes at RIP 0x7f2784fb5aef. [ 125.777384][ T5338] RSP: 002b:00007f278320c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.785788][ T5338] RAX: 0000000000000001 RBX: 00007f278523bfa8 RCX: 00007f2784fb5b19 [ 125.793760][ T5338] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f278523bfac [ 125.801748][ T5338] RBP: 00007f278523bfa0 R08: 001b46eec48866a8 R09: 0000000000000000 [ 125.809740][ T5338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.817712][ T5338] R13: 00007f278523c038 R14: 00007ffeca84aa20 R15: 00007ffeca84ab08 [ 125.825713][ T5338] [ 125.993905][ T4295] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 126.454018][ T4295] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 126.504440][ T4295] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 126.774323][ T4295] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.844066][ T4295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.855635][ T4295] usb 4-1: Product: syz [ 126.859899][ T4295] usb 4-1: Manufacturer: ᰉ [ 126.864766][ T4295] usb 4-1: SerialNumber: syz [ 127.005297][ T5366] netlink: 64 bytes leftover after parsing attributes in process `syz.2.335'. [ 127.522898][ T4295] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 128.800296][ T4295] cdc_ncm 4-1:1.0: bind() failure [ 128.900932][ T4295] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 128.951753][ T4295] cdc_ncm 4-1:1.1: bind() failure [ 129.089415][ T4295] usb 4-1: USB disconnect, device number 12 [ 131.803775][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 132.275462][ T24] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 132.300245][ T24] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 132.534608][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.535986][ T5377] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 132.543965][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.561890][ T24] usb 4-1: Product: syz [ 132.566423][ T24] usb 4-1: Manufacturer: ᰉ [ 132.571147][ T24] usb 4-1: SerialNumber: syz [ 132.612777][ T5416] netlink: 64 bytes leftover after parsing attributes in process `syz.4.349'. [ 132.706104][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.763691][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.254189][ T24] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 133.417098][ T24] cdc_ncm 4-1:1.0: bind() failure [ 133.425393][ T24] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 133.432225][ T24] cdc_ncm 4-1:1.1: bind() failure [ 133.445009][ T24] usb 4-1: USB disconnect, device number 13 [ 134.691098][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 134.733230][ T5337] Set syz1 is full, maxelem 65536 reached [ 134.992286][ T5452] loop1: detected capacity change from 0 to 16 [ 135.020650][ T5445] device syzkaller0 entered promiscuous mode [ 135.036206][ T5454] loop0: detected capacity change from 0 to 16 [ 135.096416][ T5452] erofs: (device loop1): mounted with root inode @ nid 36. [ 135.098318][ T4685] udevd[4685]: symlink '../../loop1' '/dev/disk/by-diskseq/141.tmp-b7:1' failed: Read-only file system [ 135.124142][ T5454] erofs: (device loop0): mounted with root inode @ nid 36. [ 135.139523][ T4683] udevd[4683]: symlink '../../loop0' '/dev/disk/by-diskseq/142.tmp-b7:0' failed: Read-only file system [ 135.168528][ T5454] erofs: (device loop0): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 135.178329][ T4683] udevd[4683]: symlink '../../loop0' '/dev/disk/by-uuid/b90ffb29-db69-4fbb-9730-eedcb9c04b39.tmp-b7:0' failed: Read-only file system [ 135.201211][ T4685] udevd[4685]: symlink '../../loop1' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:1' failed: Read-only file system [ 135.203962][ T5454] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 135.230450][ T5456] netlink: 64 bytes leftover after parsing attributes in process `syz.4.364'. [ 135.239120][ T4683] udevd[4683]: symlink '../../loop0' '/dev/disk/by-diskseq/142.tmp-b7:0' failed: Read-only file system [ 135.304131][ T5454] erofs: (device loop0): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 135.427635][ T5454] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 135.535905][ T5454] erofs: (device loop0): z_erofs_readpage: failed to read, err [-95] [ 135.536332][ T4683] udevd[4683]: symlink '../../loop0' '/dev/disk/by-uuid/b90ffb29-db69-4fbb-9730-eedcb9c04b39.tmp-b7:0' failed: Read-only file system [ 135.571599][ T26] audit: type=1800 audit(1700000009.800:5): pid=5454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.363" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 135.572108][ T4685] udevd[4685]: symlink '../../loop1' '/dev/disk/by-diskseq/141.tmp-b7:1' failed: Read-only file system [ 136.063056][ T4685] udevd[4685]: symlink '../../loop1' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:1' failed: Read-only file system [ 136.137316][ T4685] udevd[4685]: symlink '../../loop1' '/dev/disk/by-diskseq/141.tmp-b7:1' failed: Read-only file system [ 136.159850][ T4685] udevd[4685]: symlink '../../loop1' '/dev/disk/by-diskseq/141.tmp-b7:1' failed: Read-only file system [ 136.164525][ T5464] ip_tables: iptables: counters copy to user failed while replacing table [ 136.782788][ T5481] capability: warning: `syz.3.373' uses deprecated v2 capabilities in a way that may be insecure [ 137.566713][ T5497] netlink: 64 bytes leftover after parsing attributes in process `syz.3.377'. [ 137.711905][ T5501] FAULT_INJECTION: forcing a failure. [ 137.711905][ T5501] name failslab, interval 1, probability 0, space 0, times 0 [ 137.726598][ T5501] CPU: 0 PID: 5501 Comm: syz.2.379 Not tainted syzkaller #0 [ 137.733921][ T5501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 137.744118][ T5501] Call Trace: [ 137.747467][ T5501] [ 137.750754][ T5501] dump_stack_lvl+0x188/0x250 [ 137.755478][ T5501] ? show_regs_print_info+0x20/0x20 [ 137.760706][ T5501] ? load_image+0x410/0x410 [ 137.763660][ T1111] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 137.765315][ T5501] ? __might_sleep+0xf0/0xf0 [ 137.777442][ T5501] ? __lock_acquire+0x7d40/0x7d40 [ 137.782503][ T5501] should_fail+0x383/0x4b0 [ 137.786938][ T5501] should_failslab+0x5/0x20 [ 137.791453][ T5501] slab_pre_alloc_hook+0x51/0xc0 [ 137.796408][ T5501] __kmalloc+0x6b/0x340 [ 137.800571][ T5501] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 137.806838][ T5501] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 137.812932][ T5501] genl_rcv_msg+0xa91/0xfa0 [ 137.817467][ T5501] ? genl_bind+0x370/0x370 [ 137.821904][ T5501] ? __dev_queue_xmit+0x1b64/0x2e50 [ 137.827111][ T5501] ? verify_lock_unused+0x140/0x140 [ 137.832344][ T5501] ? dev_queue_xmit+0x20/0x20 [ 137.837033][ T5501] ? nla_put_string+0x30/0x30 [ 137.841731][ T5501] ? ctrl_getfamily+0x5b0/0x5b0 [ 137.846600][ T5501] netlink_rcv_skb+0x1e9/0x430 [ 137.851382][ T5501] ? genl_bind+0x370/0x370 [ 137.855807][ T5501] ? netlink_ack+0xb10/0xb10 [ 137.860405][ T5501] ? __lock_acquire+0x7d40/0x7d40 [ 137.865445][ T5501] ? down_read+0x1aa/0x2e0 [ 137.869878][ T5501] genl_rcv+0x24/0x40 [ 137.873870][ T5501] netlink_unicast+0x804/0x9e0 [ 137.878654][ T5501] netlink_sendmsg+0x8ba/0xbe0 [ 137.883440][ T5501] ? netlink_getsockopt+0x570/0x570 [ 137.888672][ T5501] ? aa_sock_msg_perm+0x94/0x150 [ 137.893619][ T5501] ? apparmor_socket_sendmsg+0x88/0x230 [ 137.899176][ T5501] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 137.904472][ T5501] ? security_socket_sendmsg+0x7c/0xa0 [ 137.909950][ T5501] __sys_sendto+0x46d/0x620 [ 137.914470][ T5501] ? __ia32_sys_getpeername+0x80/0x80 [ 137.919875][ T5501] ? lock_chain_count+0x20/0x20 [ 137.924743][ T5501] __x64_sys_sendto+0xda/0xf0 [ 137.929433][ T5501] do_syscall_64+0x4c/0xa0 [ 137.933859][ T5501] ? clear_bhb_loop+0x30/0x80 [ 137.938539][ T5501] ? clear_bhb_loop+0x30/0x80 [ 137.943223][ T5501] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 137.949121][ T5501] RIP: 0033:0x7f2784f7634e [ 137.953547][ T5501] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 137.973163][ T5501] RSP: 002b:00007f278320ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 137.981589][ T5501] RAX: ffffffffffffffda RBX: 00007f278320c6c0 RCX: 00007f2784f7634e [ 137.989572][ T5501] RDX: 0000000000000020 RSI: 00007f278320b000 RDI: 0000000000000004 [ 137.997549][ T5501] RBP: 0000000000000000 R08: 00007f278320af04 R09: 000000000000000c [ 138.005554][ T5501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 138.013530][ T5501] R13: 00007f278320af58 R14: 00007f278320b000 R15: 0000000000000000 [ 138.021530][ T5501] [ 138.340951][ T5505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.380'. [ 138.599042][ T5514] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 138.736053][ T5518] loop2: detected capacity change from 0 to 512 [ 138.783031][ T5518] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 138.931392][ T5518] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.384: inode has both inline data and extents flags [ 138.933670][ T1111] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 138.946341][ T5518] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.384: couldn't read orphan inode 15 (err -117) [ 138.967531][ T5518] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,auto_da_alloc=0x0000000000000002,discard,dioread_nolock,nodiscard,,errors=continue. Quota mode: writeback. [ 139.359669][ T5534] ip_tables: iptables: counters copy to user failed while replacing table [ 139.789755][ T1111] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 139.847938][ T5537] loop1: detected capacity change from 0 to 512 [ 139.873645][ T1111] usb 1-1: string descriptor 0 read error: -71 [ 139.882375][ T1111] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.954615][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.129572][ T1111] usb 1-1: can't set config #1, error -71 [ 140.236014][ T5542] FAT-fs (loop1): error, corrupted file size (i_pos 51, 8960) [ 140.298685][ T1111] usb 1-1: USB disconnect, device number 10 [ 140.452332][ T5546] FAT-fs (loop1): error, corrupted file size (i_pos 51, 8960) [ 140.763415][ T5549] netlink: 64 bytes leftover after parsing attributes in process `syz.2.393'. [ 143.118896][ T5562] loop0: detected capacity change from 0 to 512 [ 143.222997][ T4683] udevd[4683]: symlink '../../loop0' '/dev/disk/by-diskseq/149.tmp-b7:0' failed: Read-only file system [ 143.277581][ T5571] FAT-fs (loop0): error, corrupted file size (i_pos 51, 8960) [ 143.305392][ T4683] udevd[4683]: symlink '../../loop0' '/dev/disk/by-label/SYZKALLER.tmp-b7:0' failed: Read-only file system [ 143.323689][ T26] audit: type=1326 audit(1700000017.550:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5569 comm="syz.1.400" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f377c3e2b19 code=0x0 [ 143.382982][ T4683] udevd[4683]: symlink '../../loop0' '/dev/disk/by-uuid/8B9B-8193.tmp-b7:0' failed: Read-only file system [ 143.412464][ T5577] loop4: detected capacity change from 0 to 512 [ 143.530956][ T5580] FAULT_INJECTION: forcing a failure. [ 143.530956][ T5580] name failslab, interval 1, probability 0, space 0, times 0 [ 143.578433][ T5577] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 143.603630][ T5580] CPU: 0 PID: 5580 Comm: syz.1.400 Not tainted syzkaller #0 [ 143.610967][ T5580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 143.621043][ T5580] Call Trace: [ 143.623050][ T4685] udevd[4685]: symlink '../../loop4' '/dev/disk/by-diskseq/150.tmp-b7:4' failed: Read-only file system [ 143.624411][ T5580] [ 143.624421][ T5580] dump_stack_lvl+0x188/0x250 [ 143.624455][ T5580] ? show_regs_print_info+0x20/0x20 [ 143.648273][ T5580] ? load_image+0x410/0x410 [ 143.649536][ T4685] udevd[4685]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 143.652802][ T5580] ? __might_sleep+0xf0/0xf0 [ 143.652830][ T5580] ? __lock_acquire+0x7d40/0x7d40 [ 143.673927][ T5580] should_fail+0x383/0x4b0 [ 143.678382][ T5580] should_failslab+0x5/0x20 [ 143.682893][ T5580] slab_pre_alloc_hook+0x51/0xc0 [ 143.687852][ T5580] kmem_cache_alloc_node+0x47/0x2c0 [ 143.693070][ T5580] ? alloc_vmap_area+0x199/0x1b30 [ 143.698120][ T5580] alloc_vmap_area+0x199/0x1b30 [ 143.703003][ T5580] ? vm_map_ram+0xba0/0xba0 [ 143.707543][ T5580] __get_vm_area_node+0x14f/0x2d0 [ 143.712586][ T5580] ? aa_get_newest_label+0xf5/0x5a0 [ 143.717806][ T5580] __vmalloc_node_range+0xef/0x8b0 [ 143.722942][ T5580] ? bpf_jit_binary_alloc+0x120/0x240 [ 143.728346][ T5580] module_alloc+0x81/0x90 [ 143.732693][ T5580] ? bpf_jit_binary_alloc+0x120/0x240 [ 143.738090][ T5580] bpf_jit_binary_alloc+0x120/0x240 [ 143.743302][ T5580] ? bpf_int_jit_compile+0xc4d0/0xc4d0 [ 143.748781][ T5580] bpf_int_jit_compile+0xb2f5/0xc4d0 [ 143.754090][ T5580] ? kfree+0xef/0x2a0 [ 143.758105][ T5580] ? stack_trace_snprint+0xe0/0xe0 [ 143.763290][ T5580] ? emit_bpf_dispatcher+0x1050/0x1050 [ 143.763413][ T4685] udevd[4685]: symlink '../../loop0' '/dev/disk/by-diskseq/149.tmp-b7:0' failed: Read-only file system [ 143.768784][ T5580] bpf_prog_select_runtime+0x46f/0x7b0 [ 143.768810][ T5580] ? bpf_prog_realloc+0x142/0x1c0 [ 143.790284][ T5580] bpf_prepare_filter+0x100e/0x11b0 [ 143.790403][ T4683] udevd[4683]: symlink '../../loop4' '/dev/disk/by-diskseq/150.tmp-b7:4' failed: Read-only file system [ 143.795495][ T5580] ? seccomp_attach_filter+0xbb0/0xbb0 [ 143.795524][ T5580] ? bpf_prog_create+0x1f0/0x1f0 [ 143.795544][ T5580] ? kmemdup+0x3d/0x50 [ 143.818117][ T4685] udevd[4685]: symlink '../../loop0' '/dev/disk/by-label/SYZKALLER.tmp-b7:0' failed: Read-only file system [ 143.821033][ T5580] ? memcpy+0x3c/0x60 [ 143.821063][ T5580] bpf_prog_create_from_user+0x2cc/0x420 [ 143.841995][ T5580] ? seccomp_attach_filter+0xbb0/0xbb0 [ 143.842940][ T4683] udevd[4683]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 143.847479][ T5580] do_seccomp+0x808/0x16a0 [ 143.847508][ T5580] ? __lock_acquire+0x7d40/0x7d40 [ 143.847536][ T5580] ? prctl_set_seccomp+0x60/0x60 [ 143.847556][ T5580] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 143.847587][ T5580] ? lockdep_hardirqs_on+0x94/0x140 [ 143.847612][ T5580] do_syscall_64+0x4c/0xa0 [ 143.847630][ T5580] ? clear_bhb_loop+0x30/0x80 [ 143.847650][ T5580] ? clear_bhb_loop+0x30/0x80 [ 143.847678][ T5580] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.847701][ T5580] RIP: 0033:0x7f377c3e2b19 [ 143.847719][ T5580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.847738][ T5580] RSP: 002b:00007f377a5f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 143.847780][ T5580] RAX: ffffffffffffffda RBX: 00007f377c669180 RCX: 00007f377c3e2b19 [ 143.847796][ T5580] RDX: 00002000000004c0 RSI: 0000000000000008 RDI: 0000000000000001 [ 143.847810][ T5580] RBP: 00007f377c47ab70 R08: 0000000000000000 R09: 0000000000000000 [ 143.847824][ T5580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.847836][ T5580] R13: 00007f377c669218 R14: 00007f377c669180 R15: 00007ffcae824308 [ 143.847866][ T5580] [ 143.877863][ T4685] udevd[4685]: symlink '../../loop0' '/dev/disk/by-uuid/8B9B-8193.tmp-b7:0' failed: Read-only file system [ 143.891436][ T5577] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.401: inode has both inline data and extents flags [ 144.034084][ T5577] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.401: couldn't read orphan inode 15 (err -117) [ 144.046889][ T5577] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,auto_da_alloc=0x0000000000000002,discard,dioread_nolock,nodiscard,,errors=continue. Quota mode: writeback. [ 144.474260][ T5580] syz.1.400: vmalloc error: size 4096, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 144.560495][ T5589] ip_tables: iptables: counters copy to user failed while replacing table [ 145.073582][ T5580] CPU: 1 PID: 5580 Comm: syz.1.400 Not tainted syzkaller #0 [ 145.080927][ T5580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 145.090997][ T5580] Call Trace: [ 145.094291][ T5580] [ 145.097223][ T5580] dump_stack_lvl+0x188/0x250 [ 145.101915][ T5580] ? rcu_lock_release+0x5/0x20 [ 145.106689][ T5580] ? show_regs_print_info+0x20/0x20 [ 145.111903][ T5580] ? load_image+0x410/0x410 [ 145.116436][ T5580] warn_alloc+0x245/0x320 [ 145.120793][ T5580] ? zone_watermark_ok_safe+0x250/0x250 [ 145.126356][ T5580] ? __get_vm_area_node+0x164/0x2d0 [ 145.131561][ T5580] ? aa_get_newest_label+0xf5/0x5a0 [ 145.136782][ T5580] __vmalloc_node_range+0x2b1/0x8b0 [ 145.142000][ T5580] module_alloc+0x81/0x90 [ 145.146336][ T5580] ? bpf_jit_binary_alloc+0x120/0x240 [ 145.151721][ T5580] bpf_jit_binary_alloc+0x120/0x240 [ 145.156923][ T5580] ? bpf_int_jit_compile+0xc4d0/0xc4d0 [ 145.162391][ T5580] bpf_int_jit_compile+0xb2f5/0xc4d0 [ 145.167719][ T5580] ? kfree+0xef/0x2a0 [ 145.171735][ T5580] ? stack_trace_snprint+0xe0/0xe0 [ 145.176869][ T5580] ? emit_bpf_dispatcher+0x1050/0x1050 [ 145.182381][ T5580] bpf_prog_select_runtime+0x46f/0x7b0 [ 145.187857][ T5580] ? bpf_prog_realloc+0x142/0x1c0 [ 145.192907][ T5580] bpf_prepare_filter+0x100e/0x11b0 [ 145.198120][ T5580] ? seccomp_attach_filter+0xbb0/0xbb0 [ 145.203594][ T5580] ? bpf_prog_create+0x1f0/0x1f0 [ 145.208553][ T5580] ? kmemdup+0x3d/0x50 [ 145.212636][ T5580] ? memcpy+0x3c/0x60 [ 145.216634][ T5580] bpf_prog_create_from_user+0x2cc/0x420 [ 145.222295][ T5580] ? seccomp_attach_filter+0xbb0/0xbb0 [ 145.227950][ T5580] do_seccomp+0x808/0x16a0 [ 145.232387][ T5580] ? __lock_acquire+0x7d40/0x7d40 [ 145.237443][ T5580] ? prctl_set_seccomp+0x60/0x60 [ 145.242393][ T5580] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 145.248406][ T5580] ? lockdep_hardirqs_on+0x94/0x140 [ 145.253627][ T5580] do_syscall_64+0x4c/0xa0 [ 145.258031][ T5580] ? clear_bhb_loop+0x30/0x80 [ 145.262691][ T5580] ? clear_bhb_loop+0x30/0x80 [ 145.267360][ T5580] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 145.273238][ T5580] RIP: 0033:0x7f377c3e2b19 [ 145.277660][ T5580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.297254][ T5580] RSP: 002b:00007f377a5f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 145.305683][ T5580] RAX: ffffffffffffffda RBX: 00007f377c669180 RCX: 00007f377c3e2b19 [ 145.313683][ T5580] RDX: 00002000000004c0 RSI: 0000000000000008 RDI: 0000000000000001 [ 145.321655][ T5580] RBP: 00007f377c47ab70 R08: 0000000000000000 R09: 0000000000000000 [ 145.329619][ T5580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.337577][ T5580] R13: 00007f377c669218 R14: 00007f377c669180 R15: 00007ffcae824308 [ 145.345550][ T5580] [ 146.273879][ T5580] Mem-Info: [ 146.277120][ T5580] active_anon:501 inactive_anon:20092 isolated_anon:0 [ 146.277120][ T5580] active_file:12838 inactive_file:40086 isolated_file:0 [ 146.277120][ T5580] unevictable:768 dirty:222 writeback:0 [ 146.277120][ T5580] slab_reclaimable:21064 slab_unreclaimable:105188 [ 146.277120][ T5580] mapped:40075 shmem:15907 pagetables:710 bounce:0 [ 146.277120][ T5580] kernel_misc_reclaimable:0 [ 146.277120][ T5580] free:982582 free_pcp:8977 free_cma:0 [ 146.290738][ T5598] loop2: detected capacity change from 0 to 512 [ 146.321231][ T5580] Node 0 active_anon:1972kB inactive_anon:80556kB active_file:51148kB inactive_file:160344kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:160300kB dirty:888kB writeback:0kB shmem:62248kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11032kB pagetables:2840kB all_unreclaimable? no [ 146.357670][ T5580] Node 1 active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 146.389842][ T5580] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 146.418065][ T5580] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 146.422266][ T5602] netlink: 64 bytes leftover after parsing attributes in process `syz.0.408'. [ 146.428774][ T5580] Node 0 DMA32 free:722540kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1972kB inactive_anon:81716kB active_file:51148kB inactive_file:160344kB unevictable:1536kB writepending:896kB present:3129332kB managed:2590800kB mlocked:0kB bounce:0kB free_pcp:23648kB local_pcp:3224kB free_cma:0kB [ 146.466723][ T5580] lowmem_reserve[]: 0 0 0 0 0 [ 146.471549][ T5580] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 147.280829][ T5580] lowmem_reserve[]: 0 0 0 0 0 [ 147.285921][ T5580] Node 1 Normal free:3192352kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:11296kB local_pcp:6728kB free_cma:0kB [ 147.315145][ T5580] lowmem_reserve[]: 0 0 0 0 0 [ 147.319975][ T5580] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 147.337623][ T5580] Node 0 DMA32: 767*4kB (UME) 267*8kB (UE) 126*16kB (UE) 469*32kB (UME) 156*64kB (UME) 17*128kB (UME) 5*256kB (UM) 2*512kB (UM) 2*1024kB (M) 1*2048kB (M) 166*4096kB (M) = 720724kB [ 147.359956][ T5580] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 147.372503][ T5580] Node 1 Normal: 102*4kB (UME) 37*8kB (UME) 22*16kB (UME) 134*32kB (UME) 49*64kB (UE) 16*128kB (UE) 9*256kB (UM) 2*512kB (U) 2*1024kB (UE) 3*2048kB (ME) 774*4096kB (M) = 3192352kB [ 147.372735][ T5609] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 147.420315][ T5580] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 147.436975][ T5606] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 147.455716][ T5580] Node 0 hugepages_total=355 hugepages_free=355 hugepages_surp=0 hugepages_size=2048kB [ 147.474689][ T5580] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 147.518747][ T5580] Node 1 hugepages_total=354 hugepages_free=354 hugepages_surp=0 hugepages_size=2048kB [ 147.529430][ T5580] 70441 total pagecache pages [ 147.535047][ T5580] 0 pages in swap cache [ 147.539276][ T5580] Swap cache stats: add 2, delete 2, find 0/1 [ 147.545488][ T5580] Free swap = 124984kB [ 147.549722][ T5580] Total swap = 124996kB [ 147.554190][ T5616] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 147.561885][ T5580] 2097051 pages RAM [ 147.645441][ T5580] 0 pages HighMem/MovableOnly [ 147.739764][ T5580] 415364 pages reserved [ 147.744155][ T5580] 0 pages cma reserved [ 148.516437][ T5627] loop3: detected capacity change from 0 to 128 [ 148.537086][ T4685] udevd[4685]: symlink '../../loop3' '/dev/disk/by-diskseq/154.tmp-b7:3' failed: Read-only file system [ 148.550955][ T5625] loop1: detected capacity change from 0 to 512 [ 148.595369][ T4682] udevd[4682]: symlink '../../loop2' '/dev/disk/by-diskseq/153.tmp-b7:2' failed: Read-only file system [ 148.617476][ T4683] udevd[4683]: symlink '../../loop1' '/dev/disk/by-diskseq/155.tmp-b7:1' failed: Read-only file system [ 148.644756][ T4685] udevd[4685]: symlink '../../loop3' '/dev/disk/by-label/SYZKALLER.tmp-b7:3' failed: Read-only file system [ 148.661136][ T4682] udevd[4682]: symlink '../../loop2' '/dev/disk/by-diskseq/153.tmp-b7:2' failed: Read-only file system [ 148.672599][ T4685] udevd[4685]: symlink '../../loop3' '/dev/disk/by-uuid/1DC8-5927.tmp-b7:3' failed: Read-only file system [ 148.691474][ T5634] FAT-fs (loop1): error, corrupted file size (i_pos 51, 8960) [ 148.773573][ T4255] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 149.599416][ T4685] udevd[4685]: symlink '../../loop3' '/dev/disk/by-diskseq/154.tmp-b7:3' failed: Read-only file system [ 149.635066][ T4683] udevd[4683]: symlink '../../loop1' '/dev/disk/by-diskseq/155.tmp-b7:1' failed: Read-only file system [ 149.658588][ T4685] udevd[4685]: symlink '../../loop3' '/dev/disk/by-diskseq/154.tmp-b7:3' failed: Read-only file system [ 149.668168][ T5638] ip_tables: iptables: counters copy to user failed while replacing table [ 149.935638][ T4685] udevd[4685]: symlink '../../loop1' '/dev/disk/by-diskseq/155.tmp-b7:1' failed: Read-only file system [ 149.973857][ T4255] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 150.584864][ T4255] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 150.637244][ T4255] usb 1-1: string descriptor 0 read error: -71 [ 150.647241][ T4255] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 150.658272][ T4255] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.682783][ T5656] loop2: detected capacity change from 0 to 512 [ 150.689741][ T4255] usb 1-1: can't set config #1, error -71 [ 150.697094][ T4255] usb 1-1: USB disconnect, device number 11 [ 151.827364][ T5656] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 152.040760][ T5665] device veth3 entered promiscuous mode [ 152.073077][ T5674] loop3: detected capacity change from 0 to 512 [ 152.186223][ T5679] FAT-fs (loop3): error, corrupted file size (i_pos 51, 8960) [ 153.213029][ T5695] loop0: detected capacity change from 0 to 16 [ 153.442976][ T5695] erofs: (device loop0): mounted with root inode @ nid 36. [ 153.508093][ T5702] loop3: detected capacity change from 0 to 1764 [ 153.700670][ T5695] attempt to access beyond end of device [ 153.700670][ T5695] loop0: rw=524288, want=34359738368, limit=16 [ 154.108669][ T26] audit: type=1800 audit(1700000028.340:7): pid=5695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.440" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 154.739991][ T4685] udevd[4685]: symlink '../../loop3' '/dev/disk/by-diskseq/164.tmp-b7:3' failed: Read-only file system [ 154.761556][ T5717] loop2: detected capacity change from 0 to 512 [ 154.814853][ T4685] udevd[4685]: symlink '../../loop3' '/dev/disk/by-diskseq/164.tmp-b7:3' failed: Read-only file system [ 154.852894][ T4685] udevd[4685]: symlink '../../loop3' '/dev/disk/by-diskseq/164.tmp-b7:3' failed: Read-only file system [ 154.864883][ T4682] udevd[4682]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 154.872236][ T4685] udevd[4685]: symlink '../../loop3' '/dev/disk/by-diskseq/165.tmp-b7:3' failed: Read-only file system [ 154.895366][ T4682] udevd[4682]: symlink '../../loop2' '/dev/disk/by-label/SYZKALLER.tmp-b7:2' failed: Read-only file system [ 154.910030][ T4682] udevd[4682]: symlink '../../loop2' '/dev/disk/by-uuid/8B9B-8193.tmp-b7:2' failed: Read-only file system [ 154.925272][ T5717] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 155.771094][ T5727] FAULT_INJECTION: forcing a failure. [ 155.771094][ T5727] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 155.785513][ T5727] CPU: 1 PID: 5727 Comm: syz.4.451 Not tainted syzkaller #0 [ 155.792803][ T5727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 155.802854][ T5727] Call Trace: [ 155.806133][ T5727] [ 155.809065][ T5727] dump_stack_lvl+0x188/0x250 [ 155.813768][ T5727] ? show_regs_print_info+0x20/0x20 [ 155.818962][ T5727] ? load_image+0x410/0x410 [ 155.823474][ T5727] ? __lock_acquire+0x7d40/0x7d40 [ 155.828530][ T5727] should_fail+0x383/0x4b0 [ 155.832949][ T5727] prepare_alloc_pages+0x1e3/0x5b0 [ 155.838086][ T5727] __alloc_pages+0x11b/0x480 [ 155.842671][ T5727] ? zone_statistics+0x170/0x170 [ 155.847603][ T5727] ? count_memcg_event_mm+0x324/0x370 [ 155.852964][ T5727] ? interleave_nid+0x276/0x340 [ 155.857809][ T5727] alloc_page_interleave+0x24/0x1e0 [ 155.863041][ T5727] handle_mm_fault+0x23be/0x4440 [ 155.868006][ T5727] ? get_page+0xe0/0xe0 [ 155.872167][ T5727] ? vmacache_find+0x238/0x590 [ 155.877040][ T5727] ? find_vma+0xd2/0x230 [ 155.881284][ T5727] do_user_addr_fault+0x494/0xc90 [ 155.886314][ T5727] exc_page_fault+0x60/0x100 [ 155.890903][ T5727] asm_exc_page_fault+0x22/0x30 [ 155.895782][ T5727] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 155.902515][ T5727] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 155.922409][ T5727] RSP: 0018:ffffc900032bf9a0 EFLAGS: 00050206 [ 155.928479][ T5727] RAX: ffffffff83e98901 RBX: 0000000000d3034c RCX: 0000000000d2b64c [ 155.936450][ T5727] RDX: 0000000000d3034c RSI: ffffffff8bfdde98 RDI: 0000200000005000 [ 155.944422][ T5727] RBP: 0000000000000000 R08: ffffffff8cd094e3 R09: 1ffffffff19a129c [ 155.952395][ T5727] R10: dffffc0000000000 R11: fffffbfff19a129d R12: 00007ffffffff000 [ 155.960393][ T5727] R13: 0000200000d3064c R14: ffffffff8bfd9198 R15: 0000200000000300 [ 155.968397][ T5727] ? _copy_from_user+0x161/0x170 [ 155.973392][ T5727] _copy_to_user+0xf0/0x130 [ 155.977898][ T5727] btf_get_info_by_fd+0x1cc/0x570 [ 155.982975][ T5727] ? btf_get_by_fd+0x160/0x160 [ 155.987736][ T5727] ? __fdget+0x18b/0x210 [ 155.991976][ T5727] bpf_obj_get_info_by_fd+0xc05/0x2df0 [ 155.997439][ T5727] ? bpf_map_get_fd_by_id+0x330/0x330 [ 156.002822][ T5727] ? __might_fault+0xb7/0x110 [ 156.007493][ T5727] ? __lock_acquire+0x7d40/0x7d40 [ 156.012640][ T5727] ? __might_fault+0xb3/0x110 [ 156.017311][ T5727] ? bpf_lsm_bpf+0x5/0x10 [ 156.021649][ T5727] ? security_bpf+0x7a/0xa0 [ 156.026149][ T5727] __sys_bpf+0x484/0x6f0 [ 156.030385][ T5727] ? bpf_link_show_fdinfo+0x380/0x380 [ 156.035783][ T5727] __x64_sys_bpf+0x78/0x90 [ 156.040189][ T5727] do_syscall_64+0x4c/0xa0 [ 156.044602][ T5727] ? clear_bhb_loop+0x30/0x80 [ 156.049297][ T5727] ? clear_bhb_loop+0x30/0x80 [ 156.053973][ T5727] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.059862][ T5727] RIP: 0033:0x7fac2870fb19 [ 156.064282][ T5727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.084159][ T5727] RSP: 002b:00007fac26966028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 156.092565][ T5727] RAX: ffffffffffffffda RBX: 00007fac28995fa0 RCX: 00007fac2870fb19 [ 156.100534][ T5727] RDX: 000000000000001e RSI: 0000200000000280 RDI: 000000000000000f [ 156.108497][ T5727] RBP: 00007fac287a7b70 R08: 0000000000000000 R09: 0000000000000000 [ 156.116489][ T5727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.124475][ T5727] R13: 00007fac28996038 R14: 00007fac28995fa0 R15: 00007ffded40d158 [ 156.132450][ T5727] [ 156.163054][ T5732] loop1: detected capacity change from 0 to 512 [ 156.180369][ T4685] udevd[4685]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 156.250839][ T4685] udevd[4685]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 156.250921][ T4683] udevd[4683]: symlink '../../loop1' '/dev/disk/by-diskseq/168.tmp-b7:1' failed: Read-only file system [ 157.128485][ T5742] FAT-fs (loop1): error, corrupted file size (i_pos 51, 8960) [ 157.191706][ T5742] FAT-fs (loop1): error, corrupted file size (i_pos 51, 8960) [ 158.505279][ T5773] loop2: detected capacity change from 0 to 512 [ 158.666283][ T5776] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 158.687144][ T5776] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 158.909267][ T5786] loop0: detected capacity change from 0 to 512 [ 159.887742][ T4683] udevd[4683]: symlink '../../loop2' '/dev/disk/by-diskseq/171.tmp-b7:2' failed: Read-only file system [ 159.889341][ T4685] udevd[4685]: symlink '../../loop0' '/dev/disk/by-diskseq/172.tmp-b7:0' failed: Read-only file system [ 160.757793][ T4685] udevd[4685]: symlink '../../loop0' '/dev/disk/by-label/SYZKALLER.tmp-b7:0' failed: Read-only file system [ 160.770811][ T4685] udevd[4685]: symlink '../../loop0' '/dev/disk/by-uuid/8B9B-8193.tmp-b7:0' failed: Read-only file system [ 160.906381][ T4685] udevd[4685]: symlink '../../loop0' '/dev/disk/by-diskseq/172.tmp-b7:0' failed: Read-only file system [ 160.963227][ T5809] loop4: detected capacity change from 0 to 512 [ 160.995531][ T5813] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 161.008174][ T5812] loop2: detected capacity change from 0 to 512 [ 161.091513][ T5809] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 161.190106][ T4682] udevd[4682]: symlink '../../loop2' '/dev/disk/by-diskseq/176.tmp-b7:2' failed: Read-only file system [ 161.219287][ T4683] udevd[4683]: symlink '../../loop4' '/dev/disk/by-diskseq/175.tmp-b7:4' failed: Read-only file system [ 161.243864][ T5809] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.475: inode has both inline data and extents flags [ 161.258124][ T5809] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.475: couldn't read orphan inode 15 (err -117) [ 161.271322][ T5809] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,auto_da_alloc=0x0000000000000002,discard,dioread_nolock,nodiscard,,errors=continue. Quota mode: writeback. [ 161.305418][ T5812] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 161.391095][ T4685] udevd[4685]: symlink '../../loop0' '/dev/disk/by-diskseq/172.tmp-b7:0' failed: Read-only file system [ 161.410512][ T4682] udevd[4682]: symlink '../../loop2' '/dev/disk/by-label/SYZKALLER.tmp-b7:2' failed: Read-only file system [ 161.437428][ T4685] udevd[4685]: symlink '../../loop0' '/dev/disk/by-diskseq/172.tmp-b7:0' failed: Read-only file system [ 161.520710][ T5826] ip_tables: iptables: counters copy to user failed while replacing table [ 162.023643][ T5828] loop1: detected capacity change from 0 to 512 [ 163.129065][ T7] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 163.615902][ T5852] loop2: detected capacity change from 0 to 128 [ 163.664279][ T7] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 163.756107][ T7] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 163.803580][ T5852] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 164.030884][ T7] usb 4-1: string descriptor 0 read error: -71 [ 164.050044][ T4525] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 164.092143][ T5856] FAULT_INJECTION: forcing a failure. [ 164.092143][ T5856] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 164.106230][ T5856] CPU: 1 PID: 5856 Comm: syz.1.487 Not tainted syzkaller #0 [ 164.113549][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 164.123613][ T5856] Call Trace: [ 164.126901][ T5856] [ 164.129848][ T5856] dump_stack_lvl+0x188/0x250 [ 164.134541][ T5856] ? show_regs_print_info+0x20/0x20 [ 164.139748][ T5856] ? load_image+0x410/0x410 [ 164.144251][ T5856] ? __lock_acquire+0x7d40/0x7d40 [ 164.149452][ T5856] should_fail+0x383/0x4b0 [ 164.153875][ T5856] prepare_alloc_pages+0x1e3/0x5b0 [ 164.158993][ T5856] __alloc_pages+0x11b/0x480 [ 164.163580][ T5856] ? zone_statistics+0x170/0x170 [ 164.168519][ T5856] ? count_memcg_event_mm+0x324/0x370 [ 164.173880][ T5856] ? interleave_nid+0x27d/0x340 [ 164.178730][ T5856] alloc_page_interleave+0x24/0x1e0 [ 164.183923][ T5856] handle_mm_fault+0x23be/0x4440 [ 164.188862][ T5856] ? get_page+0xe0/0xe0 [ 164.193011][ T5856] ? follow_page_mask+0xa51/0x12b0 [ 164.198121][ T5856] __get_user_pages+0x952/0x11e0 [ 164.203063][ T5856] ? populate_vma_page_range+0x290/0x290 [ 164.208687][ T5856] ? __might_sleep+0xf0/0xf0 [ 164.213268][ T5856] ? read_lock_is_recursive+0x10/0x10 [ 164.218636][ T5856] ? vma_is_secretmem+0x9/0x40 [ 164.223395][ T5856] ? check_vma_flags+0x410/0x470 [ 164.228330][ T5856] faultin_vma_page_range+0x1e0/0x260 [ 164.233703][ T5856] do_madvise+0x9d1/0x2aa0 [ 164.238115][ T5856] ? mark_lock+0x94/0x320 [ 164.242437][ T5856] ? __lock_acquire+0x13b3/0x7d40 [ 164.247456][ T5856] ? get_nr_vmemmap_pages_cb+0x40/0x40 [ 164.252920][ T5856] ? verify_lock_unused+0x140/0x140 [ 164.258110][ T5856] ? verify_lock_unused+0x140/0x140 [ 164.263308][ T5856] ? do_futex+0xdc2/0x12b0 [ 164.267717][ T5856] ? vfs_write+0xaa6/0xd70 [ 164.272140][ T5856] ? __context_tracking_exit+0x4c/0x80 [ 164.277601][ T5856] ? __lock_acquire+0x7d40/0x7d40 [ 164.282631][ T5856] ? lock_chain_count+0x20/0x20 [ 164.287483][ T5856] __x64_sys_madvise+0xa2/0xb0 [ 164.292244][ T5856] do_syscall_64+0x4c/0xa0 [ 164.296714][ T5856] ? clear_bhb_loop+0x30/0x80 [ 164.301391][ T5856] ? clear_bhb_loop+0x30/0x80 [ 164.306059][ T5856] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.311951][ T5856] RIP: 0033:0x7f377c3e2b19 [ 164.316360][ T5856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.336050][ T5856] RSP: 002b:00007f377a639028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 164.344629][ T5856] RAX: ffffffffffffffda RBX: 00007f377c668fa0 RCX: 00007f377c3e2b19 [ 164.352603][ T5856] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000 [ 164.360592][ T5856] RBP: 00007f377c47ab70 R08: 0000000000000000 R09: 0000000000000000 [ 164.368568][ T5856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.376536][ T5856] R13: 00007f377c669038 R14: 00007f377c668fa0 R15: 00007ffcae824308 [ 164.384514][ T5856] [ 164.391275][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.400391][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.516357][ T7] usb 4-1: can't set config #1, error -71 [ 164.578059][ T7] usb 4-1: USB disconnect, device number 14 [ 164.632047][ T5868] loop0: detected capacity change from 0 to 512 [ 164.696208][ T5868] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 164.749097][ T5868] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.492: inode has both inline data and extents flags [ 164.762812][ T5868] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.492: couldn't read orphan inode 15 (err -117) [ 164.787072][ T5868] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,auto_da_alloc=0x0000000000000002,discard,dioread_nolock,nodiscard,,errors=continue. Quota mode: writeback. [ 164.900731][ T4685] udevd[4685]: symlink '../../loop0' '/dev/disk/by-diskseq/183.tmp-b7:0' failed: Read-only file system [ 164.937316][ T4685] udevd[4685]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 165.015804][ T5875] ip_tables: iptables: counters copy to user failed while replacing table [ 165.829524][ T4685] udevd[4685]: symlink '../../loop0' '/dev/disk/by-diskseq/183.tmp-b7:0' failed: Read-only file system [ 166.499154][ T5876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.493'. [ 166.552599][ T4685] udevd[4685]: symlink '../../loop0' '/dev/disk/by-diskseq/183.tmp-b7:0' failed: Read-only file system [ 166.819021][ T4685] udevd[4685]: symlink '../../loop0' '/dev/disk/by-diskseq/183.tmp-b7:0' failed: Read-only file system [ 167.824630][ T5908] loop2: detected capacity change from 0 to 512 [ 167.932908][ T5910] loop0: detected capacity change from 0 to 512 [ 167.945815][ T5908] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.975721][ T4685] udevd[4685]: symlink '../../loop2' '/dev/disk/by-diskseq/185.tmp-b7:2' failed: Read-only file system [ 167.988033][ T4685] udevd[4685]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 167.996228][ T5908] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.505: inode has both inline data and extents flags [ 168.014110][ T5908] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.505: couldn't read orphan inode 15 (err -117) [ 168.021110][ T5912] FAT-fs (loop0): error, corrupted file size (i_pos 51, 8960) [ 168.027334][ T5908] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,auto_da_alloc=0x0000000000000002,discard,dioread_nolock,nodiscard,,errors=continue. Quota mode: writeback. [ 168.203112][ T5915] FAT-fs (loop0): error, corrupted file size (i_pos 51, 8960) [ 168.210042][ T5917] FAULT_INJECTION: forcing a failure. [ 168.210042][ T5917] name failslab, interval 1, probability 0, space 0, times 0 [ 168.222751][ T4685] udevd[4685]: symlink '../../loop2' '/dev/disk/by-diskseq/185.tmp-b7:2' failed: Read-only file system [ 168.238064][ T4685] udevd[4685]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 168.283798][ T5918] ip_tables: iptables: counters copy to user failed while replacing table [ 168.736790][ T4683] udevd[4683]: symlink '../../loop0' '/dev/disk/by-diskseq/186.tmp-b7:0' failed: Read-only file system [ 168.835545][ T5917] CPU: 1 PID: 5917 Comm: syz.4.507 Not tainted syzkaller #0 [ 168.842877][ T5917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 168.852949][ T5917] Call Trace: [ 168.856240][ T5917] [ 168.859352][ T5917] dump_stack_lvl+0x188/0x250 [ 168.864054][ T5917] ? show_regs_print_info+0x20/0x20 [ 168.869273][ T5917] ? load_image+0x410/0x410 [ 168.873797][ T5917] ? __might_sleep+0xf0/0xf0 [ 168.878390][ T5917] ? __lock_acquire+0x7d40/0x7d40 [ 168.883424][ T5917] should_fail+0x383/0x4b0 [ 168.887856][ T5917] should_failslab+0x5/0x20 [ 168.892461][ T5917] slab_pre_alloc_hook+0x51/0xc0 [ 168.897420][ T5917] kmem_cache_alloc_trace+0x47/0x290 [ 168.902734][ T5917] ? __list_lru_init+0x535/0xac0 [ 168.907844][ T5917] __list_lru_init+0x535/0xac0 [ 168.912634][ T5917] alloc_super+0x787/0x970 [ 168.917075][ T5917] ? kill_litter_super+0xa0/0xa0 [ 168.922004][ T5917] sget_fc+0x2d4/0x6f0 [ 168.926062][ T5917] ? kill_litter_super+0xa0/0xa0 [ 168.930986][ T5917] ? pseudo_fs_get_tree+0x20/0x20 [ 168.935994][ T5917] get_tree_nodev+0x26/0x160 [ 168.940576][ T5917] vfs_get_tree+0x88/0x270 [ 168.944987][ T5917] do_new_mount+0x247/0xa50 [ 168.949514][ T5917] __se_sys_mount+0x2e3/0x3d0 [ 168.954218][ T5917] ? __x64_sys_mount+0xc0/0xc0 [ 168.959002][ T5917] ? lockdep_hardirqs_on+0x94/0x140 [ 168.964208][ T5917] ? __x64_sys_mount+0x1c/0xc0 [ 168.968961][ T5917] do_syscall_64+0x4c/0xa0 [ 168.973362][ T5917] ? clear_bhb_loop+0x30/0x80 [ 168.978023][ T5917] ? clear_bhb_loop+0x30/0x80 [ 168.982687][ T5917] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.988569][ T5917] RIP: 0033:0x7fac2870fb19 [ 168.992969][ T5917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.012563][ T5917] RSP: 002b:00007fac26966028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 169.020990][ T5917] RAX: ffffffffffffffda RBX: 00007fac28995fa0 RCX: 00007fac2870fb19 [ 169.028952][ T5917] RDX: 00002000000003c0 RSI: 0000200000000380 RDI: 0000200000000340 [ 169.036929][ T5917] RBP: 00007fac287a7b70 R08: 0000000000000000 R09: 0000000000000000 [ 169.044889][ T5917] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 169.052868][ T5917] R13: 00007fac28996038 R14: 00007fac28995fa0 R15: 00007ffded40d158 [ 169.060845][ T5917] [ 169.897753][ T5940] loop0: detected capacity change from 0 to 512 [ 169.917295][ T5943] loop3: detected capacity change from 0 to 512 [ 170.089046][ T5940] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 170.970651][ T5954] FAT-fs (loop3): error, corrupted file size (i_pos 51, 8960) [ 171.004600][ T4685] udevd[4685]: symlink '../../loop0' '/dev/disk/by-diskseq/189.tmp-b7:0' failed: Read-only file system [ 171.019166][ T5943] FAT-fs (loop3): error, corrupted file size (i_pos 51, 8960) [ 171.055309][ T4685] udevd[4685]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 171.057227][ T4683] udevd[4683]: symlink '../../loop3' '/dev/disk/by-diskseq/190.tmp-b7:3' failed: Read-only file system [ 171.127528][ T4685] udevd[4685]: symlink '../../loop0' '/dev/disk/by-diskseq/189.tmp-b7:0' failed: Read-only file system [ 171.142336][ T4685] udevd[4685]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 171.161592][ T5940] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.519: inode has both inline data and extents flags [ 171.176328][ T5940] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.519: couldn't read orphan inode 15 (err -117) [ 171.188960][ T5940] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,auto_da_alloc=0x0000000000000002,discard,dioread_nolock,nodiscard,,errors=continue. Quota mode: writeback. [ 171.219345][ T5960] loop1: detected capacity change from 0 to 164 [ 171.310326][ T4683] udevd[4683]: symlink '../../loop3' '/dev/disk/by-label/SYZKALLER.tmp-b7:3' failed: Read-only file system [ 171.334559][ T4683] udevd[4683]: symlink '../../loop3' '/dev/disk/by-uuid/8B9B-8193.tmp-b7:3' failed: Read-only file system [ 171.435801][ T5963] ip_tables: iptables: counters copy to user failed while replacing table [ 171.937368][ T4683] udevd[4683]: symlink '../../loop3' '/dev/disk/by-diskseq/190.tmp-b7:3' failed: Read-only file system [ 171.960562][ T4683] udevd[4683]: symlink '../../loop3' '/dev/disk/by-diskseq/190.tmp-b7:3' failed: Read-only file system [ 171.988580][ T5960] rock: directory entry would overflow storage [ 172.006535][ T5960] rock: sig=0x66, size=4, remaining=3 [ 172.009258][ T4683] udevd[4683]: symlink '../../loop0' '/dev/disk/by-diskseq/189.tmp-b7:0' failed: Read-only file system [ 172.075177][ T5960] rock: directory entry would overflow storage [ 172.104386][ T5960] rock: sig=0x66, size=4, remaining=3 [ 172.117753][ T5974] FAULT_INJECTION: forcing a failure. [ 172.117753][ T5974] name failslab, interval 1, probability 0, space 0, times 0 [ 172.385881][ T5974] CPU: 1 PID: 5974 Comm: syz.4.528 Not tainted syzkaller #0 [ 172.393215][ T5974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 172.403280][ T5974] Call Trace: [ 172.406569][ T5974] [ 172.409507][ T5974] dump_stack_lvl+0x188/0x250 [ 172.414206][ T5974] ? show_regs_print_info+0x20/0x20 [ 172.419421][ T5974] ? load_image+0x410/0x410 [ 172.423950][ T5974] ? __might_sleep+0xf0/0xf0 [ 172.428556][ T5974] ? __lock_acquire+0x7d40/0x7d40 [ 172.433600][ T5974] should_fail+0x383/0x4b0 [ 172.438040][ T5974] should_failslab+0x5/0x20 [ 172.442565][ T5974] slab_pre_alloc_hook+0x51/0xc0 [ 172.447512][ T5974] kmem_cache_alloc_node+0x47/0x2c0 [ 172.452719][ T5974] ? alloc_vmap_area+0x668/0x1b30 [ 172.457758][ T5974] alloc_vmap_area+0x668/0x1b30 [ 172.462639][ T5974] ? vm_map_ram+0xba0/0xba0 [ 172.467164][ T5974] __get_vm_area_node+0x14f/0x2d0 [ 172.472209][ T5974] __vmalloc_node_range+0xef/0x8b0 [ 172.477341][ T5974] ? n_tty_open+0x19/0x150 [ 172.481785][ T5974] ? read_lock_is_recursive+0x10/0x10 [ 172.487179][ T5974] ? remove_wait_queue+0x120/0x120 [ 172.492326][ T5974] ? n_tty_open+0x19/0x150 [ 172.496758][ T5974] vzalloc+0x75/0x80 [ 172.500667][ T5974] ? n_tty_open+0x19/0x150 [ 172.505186][ T5974] n_tty_open+0x19/0x150 [ 172.509545][ T5974] tty_ldisc_setup+0xbf/0x250 [ 172.514243][ T5974] tty_init_dev+0x239/0x470 [ 172.518771][ T5974] ptmx_open+0xe1/0x2c0 [ 172.523033][ T5974] ? pty_start+0x140/0x140 [ 172.527473][ T5974] chrdev_open+0x585/0x5f0 [ 172.531909][ T5974] ? cd_forget+0x160/0x160 [ 172.536339][ T5974] ? fsnotify_perm+0x3a7/0x560 [ 172.541115][ T5974] ? cd_forget+0x160/0x160 [ 172.545546][ T5974] do_dentry_open+0x7f7/0xf90 [ 172.550238][ T5974] ? vfs_open+0x2b/0x80 [ 172.554413][ T5974] path_openat+0x2718/0x2fb0 [ 172.559148][ T5974] ? do_filp_open+0x400/0x400 [ 172.563864][ T5974] do_filp_open+0x1df/0x400 [ 172.568386][ T5974] ? vfs_tmpfile+0x300/0x300 [ 172.573011][ T5974] ? _raw_spin_unlock+0x24/0x40 [ 172.577875][ T5974] ? alloc_fd+0x59e/0x650 [ 172.582229][ T5974] do_sys_openat2+0x14b/0x500 [ 172.586928][ T5974] ? __lock_acquire+0x7d40/0x7d40 [ 172.591968][ T5974] ? do_sys_open+0xe0/0xe0 [ 172.596392][ T5974] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 172.602391][ T5974] ? lock_chain_count+0x20/0x20 [ 172.607263][ T5974] __x64_sys_openat+0x135/0x160 [ 172.612136][ T5974] do_syscall_64+0x4c/0xa0 [ 172.616566][ T5974] ? clear_bhb_loop+0x30/0x80 [ 172.621251][ T5974] ? clear_bhb_loop+0x30/0x80 [ 172.625936][ T5974] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.631855][ T5974] RIP: 0033:0x7fac2870fb19 [ 172.636280][ T5974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.655899][ T5974] RSP: 002b:00007fac26966028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 172.664332][ T5974] RAX: ffffffffffffffda RBX: 00007fac28995fa0 RCX: 00007fac2870fb19 [ 172.672318][ T5974] RDX: 0000000000000041 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 172.680303][ T5974] RBP: 00007fac287a7b70 R08: 0000000000000000 R09: 0000000000000000 [ 172.688283][ T5974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.696269][ T5974] R13: 00007fac28996038 R14: 00007fac28995fa0 R15: 00007ffded40d158 [ 172.704272][ T5974] [ 172.782585][ T5976] loop3: detected capacity change from 0 to 256 [ 173.835673][ T6005] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 174.275653][ T4818] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.300127][ T6022] FAULT_INJECTION: forcing a failure. [ 174.300127][ T6022] name failslab, interval 1, probability 0, space 0, times 0 [ 174.337424][ T6022] CPU: 0 PID: 6022 Comm: syz.2.548 Not tainted syzkaller #0 [ 174.344765][ T6022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 174.354831][ T6022] Call Trace: [ 174.358117][ T6022] [ 174.361053][ T6022] dump_stack_lvl+0x188/0x250 [ 174.365757][ T6022] ? show_regs_print_info+0x20/0x20 [ 174.370978][ T6022] ? load_image+0x410/0x410 [ 174.375552][ T6022] ? __might_sleep+0xf0/0xf0 [ 174.380153][ T6022] ? __lock_acquire+0x7d40/0x7d40 [ 174.385199][ T6022] should_fail+0x383/0x4b0 [ 174.389637][ T6022] should_failslab+0x5/0x20 [ 174.394149][ T6022] slab_pre_alloc_hook+0x51/0xc0 [ 174.399102][ T6022] ? __kernfs_new_node+0xe3/0x6b0 [ 174.404149][ T6022] kmem_cache_alloc+0x3d/0x280 [ 174.408945][ T6022] __kernfs_new_node+0xe3/0x6b0 [ 174.413822][ T6022] ? kernfs_new_node+0x250/0x250 [ 174.418793][ T6022] ? sysfs_do_create_link_sd+0x75/0x110 [ 174.424360][ T6022] kernfs_new_node+0x148/0x250 [ 174.429206][ T6022] kernfs_create_link+0xa3/0x200 [ 174.434156][ T6022] sysfs_do_create_link_sd+0x83/0x110 [ 174.439542][ T6022] device_add_disk+0x421/0xde0 [ 174.444324][ T6022] md_alloc+0x80e/0xc10 [ 174.448498][ T6022] add_named_array+0x1bd/0x290 [ 174.453269][ T6022] ? get_ro+0x20/0x20 [ 174.457270][ T6022] ? read_lock_is_recursive+0x10/0x10 [ 174.462663][ T6022] param_attr_store+0x20a/0x300 [ 174.467527][ T6022] ? param_attr_show+0x170/0x170 [ 174.472473][ T6022] ? sysfs_kf_read+0x350/0x350 [ 174.477240][ T6022] module_attr_store+0x5b/0x80 [ 174.482013][ T6022] kernfs_fop_write_iter+0x3a8/0x500 [ 174.487319][ T6022] vfs_write+0x748/0xd70 [ 174.491581][ T6022] ? file_end_write+0x250/0x250 [ 174.496456][ T6022] ? mutex_lock_nested+0x17/0x20 [ 174.501403][ T6022] ? __fdget_pos+0x2bf/0x370 [ 174.505996][ T6022] ? ksys_write+0x70/0x260 [ 174.510419][ T6022] ksys_write+0x153/0x260 [ 174.514755][ T6022] ? __ia32_sys_read+0x80/0x80 [ 174.519536][ T6022] ? lockdep_hardirqs_on+0x94/0x140 [ 174.524761][ T6022] do_syscall_64+0x4c/0xa0 [ 174.529181][ T6022] ? clear_bhb_loop+0x30/0x80 [ 174.533861][ T6022] ? clear_bhb_loop+0x30/0x80 [ 174.538544][ T6022] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 174.544440][ T6022] RIP: 0033:0x7f2784fb5b19 [ 174.548857][ T6022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.568556][ T6022] RSP: 002b:00007f278320c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 174.576984][ T6022] RAX: ffffffffffffffda RBX: 00007f278523bfa0 RCX: 00007f2784fb5b19 [ 174.584964][ T6022] RDX: 0000000000000008 RSI: 0000200000000340 RDI: 0000000000000004 [ 174.592942][ T6022] RBP: 00007f278504db70 R08: 0000000000000000 R09: 0000000000000000 [ 174.600921][ T6022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.608898][ T6022] R13: 00007f278523c038 R14: 00007f278523bfa0 R15: 00007ffeca84ab08 [ 174.616908][ T6022] [ 175.122631][ T6020] loop4: detected capacity change from 0 to 8192 [ 175.201802][ T6022] ------------[ cut here ]------------ [ 175.207481][ T6022] WARNING: CPU: 1 PID: 6022 at block/genhd.c:554 device_add_disk+0x8d6/0xde0 [ 175.216429][ T6022] Modules linked in: [ 175.221034][ T6022] CPU: 1 PID: 6022 Comm: syz.2.548 Not tainted syzkaller #0 [ 175.229761][ T6022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 175.240094][ T6022] RIP: 0010:device_add_disk+0x8d6/0xde0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 175.256493][ T6022] Code: 04 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 8f 03 00 00 8b 33 48 c7 c7 a0 fc 70 8d e8 41 43 37 00 eb 05 e8 9a c6 a5 fd <0f> 0b 41 bd 01 00 00 00 44 89 e8 48 83 c4 50 5b 41 5c 41 5d 41 5e [ 175.305178][ T6020] attempt to access beyond end of device [ 175.305178][ T6020] loop4: rw=0, want=57848, limit=8192 [ 175.347578][ T4818] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.385738][ T6020] Buffer I/O error on dev loop4, logical block 57847, async page read [ 175.400505][ T6022] RSP: 0018:ffffc90004697a00 EFLAGS: 00010283 [ 175.407773][ T6022] RAX: ffffffff83d366f6 RBX: ffff888078ca4800 RCX: 0000000000080000 [ 175.425781][ T6022] RDX: ffffc900057f1000 RSI: 000000000007c45a RDI: 000000000007c45b [ 175.442125][ T4818] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.465763][ T26] audit: type=1800 audit(1700000049.700:8): pid=6020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.544" name="file2" dev="loop4" ino=1048685 res=0 errno=0 [ 175.476434][ T6022] RBP: 0000000000000009 R08: ffffc90004697887 R09: 1ffff920008d2f10 [ 175.521353][ T6032] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 175.548869][ T6032] FAT-fs (loop4): Filesystem has been set read-only [ 175.555586][ T6022] R10: dffffc0000000000 R11: fffff520008d2f11 R12: 1ffff1100bd7900f [ 175.577656][ T6022] R13: 1ffff1100f194914 R14: dffffc0000000000 R15: ffff88805ebc8040 [ 175.589021][ T4818] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.601740][ T6022] FS: 00007f278320c6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 175.611057][ T6022] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 175.617802][ T6022] CR2: 00007f1f025ca000 CR3: 0000000087330000 CR4: 00000000003506e0 [ 175.627687][ T6022] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 175.635789][ T6022] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 175.644013][ T6022] Call Trace: [ 175.647310][ T6022] [ 175.650257][ T6022] md_alloc+0x80e/0xc10 [ 175.654536][ T6022] add_named_array+0x1bd/0x290 [ 175.659494][ T6022] ? get_ro+0x20/0x20 [ 175.663573][ T6022] ? read_lock_is_recursive+0x10/0x10 [ 175.669384][ T6022] param_attr_store+0x20a/0x300 [ 175.674370][ T6022] ? param_attr_show+0x170/0x170 [ 175.679439][ T6022] ? sysfs_kf_read+0x350/0x350 [ 175.684265][ T6022] module_attr_store+0x5b/0x80 [ 175.689170][ T6022] kernfs_fop_write_iter+0x3a8/0x500 [ 175.703827][ T6022] vfs_write+0x748/0xd70 [ 175.713773][ T6022] ? file_end_write+0x250/0x250 [ 175.718694][ T6022] ? mutex_lock_nested+0x17/0x20 [ 175.733563][ T6022] ? __fdget_pos+0x2bf/0x370 [ 175.738263][ T6022] ? ksys_write+0x70/0x260 [ 175.742708][ T6022] ksys_write+0x153/0x260 [ 175.773544][ T6022] ? __ia32_sys_read+0x80/0x80 [ 175.778367][ T6022] ? lockdep_hardirqs_on+0x94/0x140 [ 175.797261][ T6022] do_syscall_64+0x4c/0xa0 [ 175.801738][ T6022] ? clear_bhb_loop+0x30/0x80 [ 175.807593][ T6022] ? clear_bhb_loop+0x30/0x80 [ 175.812315][ T6022] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 175.818623][ T6022] RIP: 0033:0x7f2784fb5b19 [ 175.823068][ T6022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.887668][ T6022] RSP: 002b:00007f278320c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 175.902497][ T6022] RAX: ffffffffffffffda RBX: 00007f278523bfa0 RCX: 00007f2784fb5b19 [ 175.914205][ T6022] RDX: 0000000000000008 RSI: 0000200000000340 RDI: 0000000000000004 [ 175.922227][ T6022] RBP: 00007f278504db70 R08: 0000000000000000 R09: 0000000000000000 [ 175.930378][ T6022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.993615][ T6022] R13: 00007f278523c038 R14: 00007f278523bfa0 R15: 00007ffeca84ab08 [ 176.001818][ T6022] [ 176.034253][ T6022] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 176.041579][ T6022] CPU: 0 PID: 6022 Comm: syz.2.548 Not tainted syzkaller #0 [ 176.048880][ T6022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 176.059129][ T6022] Call Trace: [ 176.062420][ T6022] [ 176.065359][ T6022] dump_stack_lvl+0x188/0x250 [ 176.070067][ T6022] ? show_regs_print_info+0x20/0x20 [ 176.075288][ T6022] ? load_image+0x410/0x410 [ 176.079822][ T6022] panic+0x2f8/0x850 [ 176.083734][ T6022] ? bpf_jit_dump+0xd0/0xd0 [ 176.088252][ T6022] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 176.093910][ T6022] ? __warn+0x230/0x2b0 [ 176.098090][ T6022] ? device_add_disk+0x8d6/0xde0 [ 176.103040][ T6022] __warn+0x248/0x2b0 [ 176.107039][ T6022] ? device_add_disk+0x8d6/0xde0 [ 176.112000][ T6022] report_bug+0x1b9/0x2e0 [ 176.116358][ T6022] handle_bug+0x3a/0x70 [ 176.120533][ T6022] exc_invalid_op+0x16/0x40 [ 176.125050][ T6022] asm_exc_invalid_op+0x16/0x20 [ 176.129924][ T6022] RIP: 0010:device_add_disk+0x8d6/0xde0 [ 176.135490][ T6022] Code: 04 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 8f 03 00 00 8b 33 48 c7 c7 a0 fc 70 8d e8 41 43 37 00 eb 05 e8 9a c6 a5 fd <0f> 0b 41 bd 01 00 00 00 44 89 e8 48 83 c4 50 5b 41 5c 41 5d 41 5e [ 176.155110][ T6022] RSP: 0018:ffffc90004697a00 EFLAGS: 00010283 [ 176.161198][ T6022] RAX: ffffffff83d366f6 RBX: ffff888078ca4800 RCX: 0000000000080000 [ 176.169185][ T6022] RDX: ffffc900057f1000 RSI: 000000000007c45a RDI: 000000000007c45b [ 176.177168][ T6022] RBP: 0000000000000009 R08: ffffc90004697887 R09: 1ffff920008d2f10 [ 176.185152][ T6022] R10: dffffc0000000000 R11: fffff520008d2f11 R12: 1ffff1100bd7900f [ 176.193148][ T6022] R13: 1ffff1100f194914 R14: dffffc0000000000 R15: ffff88805ebc8040 [ 176.201148][ T6022] ? device_add_disk+0x8d6/0xde0 [ 176.206129][ T6022] md_alloc+0x80e/0xc10 [ 176.210304][ T6022] add_named_array+0x1bd/0x290 [ 176.215087][ T6022] ? get_ro+0x20/0x20 [ 176.219089][ T6022] ? read_lock_is_recursive+0x10/0x10 [ 176.224486][ T6022] param_attr_store+0x20a/0x300 [ 176.229354][ T6022] ? param_attr_show+0x170/0x170 [ 176.234298][ T6022] ? sysfs_kf_read+0x350/0x350 [ 176.239065][ T6022] module_attr_store+0x5b/0x80 [ 176.243832][ T6022] kernfs_fop_write_iter+0x3a8/0x500 [ 176.249157][ T6022] vfs_write+0x748/0xd70 [ 176.253425][ T6022] ? file_end_write+0x250/0x250 [ 176.258302][ T6022] ? mutex_lock_nested+0x17/0x20 [ 176.263250][ T6022] ? __fdget_pos+0x2bf/0x370 [ 176.267846][ T6022] ? ksys_write+0x70/0x260 [ 176.272277][ T6022] ksys_write+0x153/0x260 [ 176.276616][ T6022] ? __ia32_sys_read+0x80/0x80 [ 176.281386][ T6022] ? lockdep_hardirqs_on+0x94/0x140 [ 176.286606][ T6022] do_syscall_64+0x4c/0xa0 [ 176.291042][ T6022] ? clear_bhb_loop+0x30/0x80 [ 176.295737][ T6022] ? clear_bhb_loop+0x30/0x80 [ 176.300437][ T6022] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.306345][ T6022] RIP: 0033:0x7f2784fb5b19 [ 176.310779][ T6022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.330465][ T6022] RSP: 002b:00007f278320c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 176.338899][ T6022] RAX: ffffffffffffffda RBX: 00007f278523bfa0 RCX: 00007f2784fb5b19 [ 176.346891][ T6022] RDX: 0000000000000008 RSI: 0000200000000340 RDI: 0000000000000004 [ 176.354885][ T6022] RBP: 00007f278504db70 R08: 0000000000000000 R09: 0000000000000000 [ 176.362877][ T6022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.370865][ T6022] R13: 00007f278523c038 R14: 00007f278523bfa0 R15: 00007ffeca84ab08 [ 176.378876][ T6022] [ 176.382139][ T6022] Kernel Offset: disabled [ 176.386833][ T6022] Rebooting in 86400 seconds..