last executing test programs: 40.733949281s ago: executing program 3 (id=4): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) syz_mount_image$ocfs2(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8c0, &(0x7f0000001a00)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x445a, &(0x7f0000001a80)="$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") creat(&(0x7f0000005f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) open(&(0x7f0000006040)='./bus\x00', 0x400141042, 0x22) mount(&(0x7f0000006080)=@loop={'/dev/loop', 0x0}, &(0x7f00000060c0)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000006100)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000006140)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006240)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000006280), 0x208e24b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000062c0)={&(0x7f0000006300)=[0x0], 0x0, 0x0, 0x0, '\x00', 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x810, 0xffffffffffffffff, 0x10000000) mkdirat(0xffffffffffffff9c, &(0x7f0000006340)='./file0\x00', 0x0) socket(0x400000000010, 0x3, 0x0) r4 = openat(r3, 0x0, 0xc041, 0x0) getdents64(r4, &(0x7f00000001c0)=""/191, 0xbf) read(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) 38.048145767s ago: executing program 3 (id=13): unshare(0x24040400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000001c0)={0x1000000}) 35.789543219s ago: executing program 3 (id=25): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000440)={@private2, 0x9, 0x1, 0x3, 0xd, 0x5, 0x80}, 0x75) 35.29819962s ago: executing program 32 (id=25): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000440)={@private2, 0x9, 0x1, 0x3, 0xd, 0x5, 0x80}, 0x75) 10.133728708s ago: executing program 4 (id=101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {}, {0xc, 0xb}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x64}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000680)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x4, &(0x7f0000000740)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 8.673233908s ago: executing program 4 (id=106): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080), 0x0, 0x559e, &(0x7f00000003c0)="$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") openat(0xffffffffffffff9c, &(0x7f00000059c0)='.\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f000000d1c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f000000d200)='./debug\x00', &(0x7f000000d240)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000d300)='./debug/failslab/probability\x00', 0x2, 0x0) write(r0, &(0x7f000000d340)='5\x00', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000d380)={0x10, 0x3, &(0x7f0000006a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f000000d480)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r1, &(0x7f000000d4c0)='1', 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x1, 0x1d4) getpid() mkdirat(0xffffffffffffffff, 0x0, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000240), 0x4, 0xbaf, &(0x7f000000c200)="$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") prlimit64(0x0, 0xe, &(0x7f000000cdc0)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f000000ce00)=0x7) mount(0x0, &(0x7f000000ce80)='./file0\x00', &(0x7f000000cec0)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f000000cf00)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f000000cf80)='./file1\x00', &(0x7f000000cfc0), 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000d000)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r2, &(0x7f000000d040)={0x18}, 0xfffffdef) 8.004057787s ago: executing program 2 (id=109): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 7.68611226s ago: executing program 2 (id=112): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000300), &(0x7f0000000340)=r1}, 0x20) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/195, 0xc3}], 0x1}, 0x2000) shutdown(r0, 0x1) 6.166326356s ago: executing program 2 (id=114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {}, {0xc, 0xb}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x64}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000680)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x4, &(0x7f0000000740)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.540810623s ago: executing program 4 (id=116): r0 = socket$kcm(0x23, 0x5, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) accept4(r0, 0x0, 0x0, 0x80000) close_range(r0, r1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4.027809256s ago: executing program 2 (id=118): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001d", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x19, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x6d75, 0x5, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.027344736s ago: executing program 0 (id=120): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x0) 3.862351133s ago: executing program 0 (id=121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000bc0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @remote}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 3.472240733s ago: executing program 0 (id=123): listen(0xffffffffffffffff, 0x800) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) close_range(0xffffffffffffffff, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.252484895s ago: executing program 2 (id=124): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080), 0x0, 0x559e, &(0x7f00000003c0)="$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") openat(0xffffffffffffff9c, &(0x7f00000059c0)='.\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f000000d1c0)='./debug\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f000000d300)='./debug/failslab/probability\x00', 0x2, 0x0) write(r0, &(0x7f000000d340)='5\x00', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000d380)={0x10, 0x3, &(0x7f0000006a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f000000d480)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r1, &(0x7f000000d4c0)='1', 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x1, 0x1d4) getpid() mkdirat(0xffffffffffffffff, 0x0, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000240), 0x4, 0xbaf, &(0x7f000000c200)="$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") prlimit64(0x0, 0xe, &(0x7f000000cdc0)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f000000ce00)=0x7) mount(0x0, &(0x7f000000ce80)='./file0\x00', &(0x7f000000cec0)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f000000cf00)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f000000cf80)='./file1\x00', &(0x7f000000cfc0), 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000d000)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r2, &(0x7f000000d040)={0x18}, 0xfffffdef) 2.902068051s ago: executing program 1 (id=125): mkdirat(0xffffffffffffff9c, &(0x7f0000001280)='./debug\x00', 0x17f) mount(0x0, &(0x7f00000012c0)='./debug\x00', &(0x7f0000001300)='debugfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001340)='./debug/tracing/trace_pipe\x00', 0x22600, 0x34) close(0x3) 2.671892575s ago: executing program 1 (id=126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {}, {0xc, 0xb}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x64}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000680)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000700), 0x0, 0x4, &(0x7f0000000740)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.402042033s ago: executing program 0 (id=127): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80003, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000bc0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8800, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'LVM-syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, 0x0) 2.373443006s ago: executing program 4 (id=128): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x60000021) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001180)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYRES16], 0x1, 0xc5f, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='.\x00', 0x0, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) 2.055225568s ago: executing program 0 (id=129): mkdirat(0xffffffffffffff9c, &(0x7f0000004bc0)='./mnt\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000004cc0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./mnt/trace_marker\x00', 0x1, 0x5a) r0 = openat(0xffffffffffffff9c, &(0x7f0000004dc0)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r0, &(0x7f0000004e00)=""/16384, 0x4000) 1.950186599s ago: executing program 1 (id=130): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x0) 1.857125979s ago: executing program 4 (id=131): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x24000084) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="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", 0x148}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4) writev(r0, &(0x7f0000001d40)=[{&(0x7f0000002d80)="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", 0x744}], 0x1) 1.435477822s ago: executing program 0 (id=132): syz_emit_vhci(0x0, 0x7) 1.434226152s ago: executing program 1 (id=133): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000001740)=ANY=[@ANYBLOB="040e04080520"], 0x7) 1.432685522s ago: executing program 4 (id=134): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001d", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x19, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x6d75, 0x5, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 269.823222ms ago: executing program 1 (id=135): listen(0xffffffffffffffff, 0x800) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) close_range(0xffffffffffffffff, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 242.627855ms ago: executing program 2 (id=136): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)) pselect6(0x40, &(0x7f0000000500)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=137): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080), 0x0, 0x559e, &(0x7f00000003c0)="$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") openat(0xffffffffffffff9c, &(0x7f00000059c0)='.\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) write(0xffffffffffffffff, &(0x7f000000d2c0)='100', 0x3) write(0xffffffffffffffff, &(0x7f000000d340)='5\x00', 0x1) r0 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f000000d480)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r0, &(0x7f000000d4c0)='1', 0x1) getpid() mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sched_setscheduler(0x0, 0x1, &(0x7f000000ce00)=0x7) chdir(&(0x7f000000cf00)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f000000cf80)='./file1\x00', &(0x7f000000cfc0), 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000d000)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r1, &(0x7f000000d040)={0x18}, 0xfffffdef) mknodat(0xffffffffffffff9c, &(0x7f000000d080)='./file7\x00', 0x21c0, 0x103) kernel console output (not intermixed with test programs): 74.726108][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.737731][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.750578][ T5448] infiniband rxe0: set active [ 74.756147][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.763273][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.771113][ T5791] bridge_slave_1: entered allmulticast mode [ 74.779024][ T5791] bridge_slave_1: entered promiscuous mode [ 74.820877][ T5425] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.845828][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.858313][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.906222][ T5791] team0: Port device team_slave_0 added [ 74.916869][ T5791] team0: Port device team_slave_1 added [ 74.922767][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.943638][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.953134][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.976559][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.997522][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.005060][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.031107][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.043987][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.051099][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.077836][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.175511][ T5791] hsr_slave_0: entered promiscuous mode [ 75.182758][ T5791] hsr_slave_1: entered promiscuous mode [ 75.190157][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.197879][ T5791] Cannot create hsr debugfs directory [ 75.215672][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.225074][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.274505][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.299476][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.469040][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.507117][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.556818][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.571069][ T5791] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.589627][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.600417][ T5791] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.611836][ T5791] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.622465][ T5791] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.634016][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.641347][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.669883][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.677006][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.689404][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.696538][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.712916][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.720082][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.785405][ T5098] Bluetooth: hci1: command tx timeout [ 75.791245][ T5783] Bluetooth: hci2: command tx timeout [ 75.865044][ T5098] Bluetooth: hci0: command tx timeout [ 75.870545][ T5783] Bluetooth: hci3: command tx timeout [ 75.880130][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.962473][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.988410][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.030085][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.037302][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.069785][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.111494][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.118725][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.147070][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.154250][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.200330][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.207539][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.263960][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.328307][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.448037][ T5781] veth0_vlan: entered promiscuous mode [ 76.486710][ T5781] veth1_vlan: entered promiscuous mode [ 76.497790][ T5786] veth0_vlan: entered promiscuous mode [ 76.527769][ T5786] veth1_vlan: entered promiscuous mode [ 76.571148][ T5781] veth0_macvtap: entered promiscuous mode [ 76.598391][ T5781] veth1_macvtap: entered promiscuous mode [ 76.616524][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.649360][ T5786] veth0_macvtap: entered promiscuous mode [ 76.689662][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.717254][ T5786] veth1_macvtap: entered promiscuous mode [ 76.736791][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.772146][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.782279][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.791205][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.800080][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.819038][ T5785] veth0_vlan: entered promiscuous mode [ 76.845771][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.857400][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.868818][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.885106][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.906988][ T5785] veth1_vlan: entered promiscuous mode [ 76.931777][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.943632][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.960281][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.993243][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.003934][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.015274][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.024008][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.154806][ T5785] veth0_macvtap: entered promiscuous mode [ 77.168619][ T5785] veth1_macvtap: entered promiscuous mode [ 77.188991][ T5791] veth0_vlan: entered promiscuous mode [ 77.202276][ T2957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.213750][ T2957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.221612][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.241001][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.252207][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.263180][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.275667][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.290649][ T5791] veth1_vlan: entered promiscuous mode [ 77.313396][ T2994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.330231][ T2994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.342205][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.358621][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.368808][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.380655][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.392203][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.417528][ T5791] veth0_macvtap: entered promiscuous mode [ 77.439375][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.449771][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.458628][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.468659][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.498540][ T2957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.507166][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.508142][ T2957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.523033][ T5791] veth1_macvtap: entered promiscuous mode [ 77.529813][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.591117][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.602324][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.614896][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.627672][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.638038][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.648677][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.661145][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.696264][ T5786] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.718103][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.740347][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.751336][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.763060][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.773108][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.784643][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.797627][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.809167][ T5791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.818666][ T5791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.827926][ T5791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.836749][ T5791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.867645][ T5783] Bluetooth: hci2: command tx timeout [ 77.873473][ T5098] Bluetooth: hci1: command tx timeout [ 77.944734][ T5783] Bluetooth: hci0: command tx timeout [ 77.950278][ T5098] Bluetooth: hci3: command tx timeout [ 77.977923][ T1080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.995064][ T1080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.011253][ T5900] syz.1.2[5900]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 78.031498][ T5900] loop1: detected capacity change from 0 to 1024 [ 78.061268][ T5902] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.091530][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.128926][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.210021][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.228062][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.251128][ T2994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.283683][ T2994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.330495][ T5911] loop3: detected capacity change from 0 to 32768 [ 79.345828][ T5911] ======================================================= [ 79.345828][ T5911] WARNING: The mand mount option has been deprecated and [ 79.345828][ T5911] and is ignored by this kernel. Remove the mand [ 79.345828][ T5911] option from the mount to silence this warning. [ 79.345828][ T5911] ======================================================= [ 79.470596][ T5911] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 79.500801][ T5911] JBD2: Ignoring recovery information on journal [ 79.567251][ T5911] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 79.916341][ T5897] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.953127][ T5098] Bluetooth: hci1: command tx timeout [ 79.958749][ T5783] Bluetooth: hci2: command tx timeout [ 80.040561][ T5783] Bluetooth: hci3: command tx timeout [ 80.046164][ T5098] Bluetooth: hci0: command tx timeout [ 80.298652][ T5897] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 80.495493][ T5897] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 80.511881][ T5897] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 80.526146][ T5911] loop3: detected capacity change from 32768 to 64 [ 80.550674][ T5897] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 80.575030][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.626346][ T5915] loop1: detected capacity change from 0 to 32768 [ 80.633003][ T5897] usb 3-1: Product: syz [ 80.637720][ T5897] usb 3-1: Manufacturer: syz [ 80.642340][ T5897] usb 3-1: SerialNumber: syz [ 80.681562][ T5929] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 80.695932][ T5915] (syz.1.5,5915,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 80.725305][ T5929] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 80.737277][ T5897] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 80.755069][ T5915] (syz.1.5,5915,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 80.778865][ T5897] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 80.805395][ T5897] usbserial_generic 3-1:1.0: generic converter detected [ 80.854352][ T5897] usb 3-1: generic converter now attached to ttyUSB0 [ 80.998868][ T5911] syz.3.4 (5911) used greatest stack depth: 18264 bytes left [ 81.129426][ T5791] syz-executor: attempt to access beyond end of device [ 81.129426][ T5791] loop3: rw=0, sector=17057, nr_sectors = 1 limit=64 [ 81.165316][ T23] usb 3-1: USB disconnect, device number 2 [ 81.181516][ T5791] (syz-executor,5791,0):ocfs2_read_locked_inode:568 ERROR: status = -5 [ 81.206910][ T23] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 81.207609][ T5791] syz-executor: attempt to access beyond end of device [ 81.207609][ T5791] loop3: rw=0, sector=17057, nr_sectors = 1 limit=64 [ 81.242338][ T23] usbserial_generic 3-1:1.0: device disconnected [ 81.300027][ T5791] (syz-executor,5791,0):ocfs2_read_locked_inode:568 ERROR: status = -5 [ 81.492076][ T5947] loop0: detected capacity change from 0 to 512 [ 81.534367][ T5947] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.603076][ T5947] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 81.650523][ T5947] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.685737][ T5947] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 81.697457][ T5947] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 81.724836][ T5947] EXT4-fs error (device loop0): ext4_acquire_dquot:6958: comm syz.0.15: Failed to acquire dquot type 0 [ 81.861548][ T5791] syz-executor: attempt to access beyond end of device [ 81.861548][ T5791] loop3: rw=2049, sector=20128, nr_sectors = 1 limit=64 [ 81.905003][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 81.924023][ T5791] Buffer I/O error on dev loop3, logical block 20128, lost async page write [ 81.930283][ T5952] loop2: detected capacity change from 0 to 1024 [ 81.969440][ T5791] syz-executor: attempt to access beyond end of device [ 81.969440][ T5791] loop3: rw=2049, sector=20129, nr_sectors = 1 limit=64 [ 82.014635][ T5791] Buffer I/O error on dev loop3, logical block 20129, lost async page write [ 82.023374][ T5791] syz-executor: attempt to access beyond end of device [ 82.023374][ T5791] loop3: rw=2049, sector=20130, nr_sectors = 1 limit=64 [ 82.050852][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.071446][ T5791] Buffer I/O error on dev loop3, logical block 20130, lost async page write [ 82.091215][ T5952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 82.104273][ T5791] syz-executor: attempt to access beyond end of device [ 82.104273][ T5791] loop3: rw=2049, sector=20131, nr_sectors = 1 limit=64 [ 82.129139][ T5952] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.164979][ T5791] Buffer I/O error on dev loop3, logical block 20131, lost async page write [ 82.173755][ T5791] syz-executor: attempt to access beyond end of device [ 82.173755][ T5791] loop3: rw=2049, sector=20132, nr_sectors = 1 limit=64 [ 82.194052][ T5791] Buffer I/O error on dev loop3, logical block 20132, lost async page write [ 82.203482][ T5791] syz-executor: attempt to access beyond end of device [ 82.203482][ T5791] loop3: rw=2049, sector=20133, nr_sectors = 1 limit=64 [ 82.217507][ T5791] Buffer I/O error on dev loop3, logical block 20133, lost async page write [ 82.235439][ T5791] syz-executor: attempt to access beyond end of device [ 82.235439][ T5791] loop3: rw=2049, sector=20134, nr_sectors = 1 limit=64 [ 82.249810][ T5791] Buffer I/O error on dev loop3, logical block 20134, lost async page write [ 82.284845][ T5791] syz-executor: attempt to access beyond end of device [ 82.284845][ T5791] loop3: rw=2049, sector=20135, nr_sectors = 1 limit=64 [ 82.314508][ T5791] Buffer I/O error on dev loop3, logical block 20135, lost async page write [ 82.324216][ T5791] Buffer I/O error on dev loop3, logical block 20136, lost async page write [ 82.367118][ T5791] Buffer I/O error on dev loop3, logical block 20137, lost async page write [ 82.386891][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.423961][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 82.642213][ T5925] Aborting journal on device loop3-75. [ 82.657531][ T5925] JBD2: I/O error when updating journal superblock for loop3-75. [ 82.692005][ T5791] (syz-executor,5791,0):ocfs2_start_trans:379 ERROR: status = -30 [ 82.713151][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.734332][ T5791] OCFS2: abort (device loop3): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal [ 82.764703][ T5791] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 82.776772][ T5791] OCFS2: File system is now read-only. [ 82.782258][ T5791] (syz-executor,5791,0):ocfs2_shutdown_local_alloc:418 ERROR: status = -30 [ 82.793968][ T5966] fuse: Bad value for 'fd' [ 82.802757][ T5791] (syz-executor,5791,0):ocfs2_write_block:78 ERROR: status = -5 [ 82.813280][ T5791] (syz-executor,5791,0):ocfs2_update_disk_slot:199 ERROR: status = -5 [ 82.853728][ T5791] (syz-executor,5791,0):ocfs2_put_slot:517 ERROR: status = -5 [ 82.871159][ T5791] (syz-executor,5791,0):ocfs2_journal_shutdown:1108 ERROR: status = -5 [ 82.890336][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.920928][ T5791] ocfs2: Unmounting device (7,3) on (node local) [ 83.211865][ T5972] loop2: detected capacity change from 0 to 1024 [ 83.298875][ T5972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 83.429034][ T5972] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.574636][ T5972] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 3: comm syz.2.22: lblock 3 mapped to illegal pblock 3 (length 1) [ 83.673002][ T5972] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 83.705066][ T5972] EXT4-fs (loop2): This should not happen!! Data will be lost [ 83.705066][ T5972] [ 83.792673][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 84.354816][ T5425] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 84.547476][ T5425] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 84.593161][ T5425] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x3 has invalid maxpacket 513, setting to 64 [ 84.634615][ T5425] usb 1-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 84.662655][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.663625][ T5425] usb 1-1: config 1 interface 0 has no altsetting 0 [ 84.682094][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.695942][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.713292][ T5425] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.737765][ T5425] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 84.747878][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.764384][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.772768][ T5425] usb 1-1: SerialNumber: syz [ 84.778062][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.809048][ T5993] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 84.817930][ T5993] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 84.867776][ T5897] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.972195][ T6021] loop1: detected capacity change from 0 to 1024 [ 85.059584][ T5993] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 85.085053][ T6021] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 85.100503][ T5993] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 85.288058][ T6010] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.638747][ T5425] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 85.778043][ T42] usb 1-1: USB disconnect, device number 2 [ 85.810621][ T42] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 86.498104][ T6032] loop2: detected capacity change from 0 to 32768 [ 86.504667][ C1] net_ratelimit: 49 callbacks suppressed [ 86.539112][ T6032] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.38 (6032) [ 86.643152][ T50] hsr_slave_0: left promiscuous mode [ 86.646477][ T6032] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 86.675014][ T50] hsr_slave_1: left promiscuous mode [ 86.688590][ T6032] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 86.701581][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.708760][ T6032] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 86.726061][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.750803][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.755494][ T6032] BTRFS info (device loop2): use zstd compression, level 3 [ 86.781109][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.793654][ T6032] BTRFS info (device loop2): setting nodatasum [ 86.817519][ T6032] BTRFS info (device loop2): use zlib compression, level 3 [ 86.827402][ T50] bridge_slave_1: left allmulticast mode [ 86.833090][ T50] bridge_slave_1: left promiscuous mode [ 86.834847][ T5098] Bluetooth: hci3: command tx timeout [ 86.851834][ T9] cfg80211: failed to load regulatory.db [ 86.862315][ T6032] BTRFS error (device loop2): unrecognized mount option 'fragment=metadata' [ 86.873980][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.900187][ T6032] BTRFS error (device loop2): open_ctree failed: -22 [ 86.913312][ T6055] fuse: Invalid rootmode [ 86.920604][ T6055] netlink: 20 bytes leftover after parsing attributes in process `syz.0.42'. [ 86.940359][ T50] bridge_slave_0: left allmulticast mode [ 86.946487][ T50] bridge_slave_0: left promiscuous mode [ 86.952388][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.011491][ T50] veth1_macvtap: left promiscuous mode [ 87.039194][ T50] veth0_macvtap: left promiscuous mode [ 87.070480][ T50] veth1_vlan: left promiscuous mode [ 87.103678][ T50] veth0_vlan: left promiscuous mode [ 88.204298][ T6064] loop0: detected capacity change from 0 to 32768 [ 88.264999][ T6064] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.45 (6064) [ 88.323853][ T6064] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 88.345705][ T6064] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 88.375248][ T6064] BTRFS info (device loop0): using free space tree [ 88.535880][ T6064] BTRFS info (device loop0): enabling ssd optimizations [ 88.564554][ T6064] BTRFS info (device loop0): auto enabling async discard [ 88.767751][ T6064] loop0: detected capacity change from 32768 to 32767 [ 88.909118][ T5098] Bluetooth: hci3: command tx timeout [ 89.075903][ T50] team0 (unregistering): Port device team_slave_1 removed [ 89.226990][ T50] team0 (unregistering): Port device team_slave_0 removed [ 89.294356][ T6064] jffs2: notice: (6064) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 89.379444][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.483146][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.592419][ T5785] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 90.392895][ T50] bond0 (unregistering): Released all slaves [ 90.394718][ T5425] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 90.611278][ T5425] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 90.624659][ T5425] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x3 has invalid maxpacket 513, setting to 64 [ 90.635594][ T5425] usb 1-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 90.648582][ T5425] usb 1-1: config 1 interface 0 has no altsetting 0 [ 90.656712][ T5425] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.670203][ T5425] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 90.678326][ T5425] usb 1-1: SerialNumber: syz [ 90.689580][ T6101] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 90.699506][ T6101] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 90.946650][ T6101] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 90.974258][ T6101] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 90.984663][ T5098] Bluetooth: hci3: command tx timeout [ 91.183929][ T6113] fuse: Invalid rootmode [ 91.195055][ T6113] netlink: 20 bytes leftover after parsing attributes in process `syz.1.53'. [ 91.371189][ T6010] chnl_net:caif_netlink_parms(): no params data found [ 91.475119][ T5425] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 91.682406][ T5425] usb 1-1: USB disconnect, device number 3 [ 91.704479][ C1] net_ratelimit: 41 callbacks suppressed [ 91.718516][ T5425] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 92.185308][ T6010] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.198384][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.220056][ T6010] bridge_slave_0: entered allmulticast mode [ 92.240821][ T6010] bridge_slave_0: entered promiscuous mode [ 92.269334][ T6010] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.294722][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.322960][ T6010] bridge_slave_1: entered allmulticast mode [ 92.331052][ T6010] bridge_slave_1: entered promiscuous mode [ 92.381116][ T6119] loop2: detected capacity change from 0 to 32768 [ 92.459276][ T6119] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.54 (6119) [ 92.548788][ T6010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.591807][ T6010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.655759][ T6119] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 92.759075][ T6119] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 92.814528][ T6119] BTRFS info (device loop2): using free space tree [ 92.851196][ T6131] loop1: detected capacity change from 0 to 32768 [ 92.891298][ T6131] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.55 (6131) [ 92.997585][ T6010] team0: Port device team_slave_0 added [ 93.053324][ T6010] team0: Port device team_slave_1 added [ 93.065263][ T5098] Bluetooth: hci3: command tx timeout [ 93.202201][ T6119] BTRFS info (device loop2): enabling ssd optimizations [ 93.220143][ T6119] BTRFS info (device loop2): auto enabling async discard [ 93.400024][ T5797] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (5797) [ 93.412743][ T6119] FAULT_INJECTION: forcing a failure. [ 93.412743][ T6119] name failslab, interval 1, probability 5, space 0, times 100 [ 93.431186][ T6010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.471776][ T6010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.515642][ T6119] CPU: 1 PID: 6119 Comm: syz.2.54 Not tainted syzkaller #0 [ 93.522894][ T6119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 93.528997][ T6010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.532967][ T6119] Call Trace: [ 93.546762][ T6119] [ 93.549718][ T6119] dump_stack_lvl+0x18c/0x250 [ 93.554427][ T6119] ? show_regs_print_info+0x20/0x20 [ 93.559655][ T6119] ? load_image+0x420/0x420 [ 93.564168][ T6119] ? __might_sleep+0xe0/0xe0 [ 93.564198][ T6119] ? __lock_acquire+0x7eb0/0x7eb0 [ 93.573811][ T6119] should_fail_ex+0x394/0x4c0 [ 93.578670][ T6119] should_failslab+0x9/0x20 [ 93.583179][ T6119] slab_pre_alloc_hook+0x59/0x300 [ 93.588204][ T6119] kmem_cache_alloc+0x5a/0x2d0 [ 93.592966][ T6119] ? ptlock_alloc+0x20/0x70 [ 93.597465][ T6119] ptlock_alloc+0x20/0x70 [ 93.601787][ T6119] pte_alloc_one+0xcc/0x540 [ 93.606286][ T6119] ? pfn_modify_allowed+0x560/0x560 [ 93.611495][ T6119] __pte_alloc+0x22/0x2a0 [ 93.615821][ T6119] handle_mm_fault+0x3dc0/0x4a40 [ 93.620754][ T6119] ? handle_mm_fault+0xe6/0x4a40 [ 93.625697][ T6119] ? lock_vma_under_rcu+0x52c/0x660 [ 93.630889][ T6119] ? numa_migrate_prep+0x350/0x350 [ 93.635995][ T6119] ? lock_vma_under_rcu+0xe5/0x660 [ 93.641110][ T6119] ? do_user_addr_fault+0x1ae/0x13e0 [ 93.646395][ T6119] do_user_addr_fault+0x5b2/0x13e0 [ 93.651506][ T6119] ? rcu_is_watching+0x15/0xb0 [ 93.656272][ T6119] exc_page_fault+0x64/0x100 [ 93.660856][ T6119] asm_exc_page_fault+0x26/0x30 [ 93.665717][ T6119] RIP: 0033:0x7f197c25644e [ 93.670131][ T6119] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 93.689815][ T6119] RSP: 002b:00007f197d2ed470 EFLAGS: 00010206 [ 93.695876][ T6119] RAX: 0000000000009001 RBX: 00007f197d2ed530 RCX: 0000000000000018 [ 93.703851][ T6119] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f197d2ed5d0 [ 93.711817][ T6119] RBP: 0000000000000102 R08: 00007f19721f7000 R09: 0000000000009000 [ 93.719787][ T6119] R10: 0000000000000000 R11: 00007f197d2ed540 R12: 0000000000000001 [ 93.727773][ T6119] R13: 00007f197c4582e0 R14: 0000000000000000 R15: 00007f197d2ed5d0 [ 93.735752][ T6119] [ 93.740374][ T6131] loop1: detected capacity change from 0 to 4096 [ 93.795147][ T6010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.802112][ T6010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.909205][ T6119] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 93.919750][ T6131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.956815][ T6010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.025676][ T6131] jffs2: notice: (6131) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 94.213894][ T6119] FAULT_INJECTION: forcing a failure. [ 94.213894][ T6119] name failslab, interval 1, probability 5, space 0, times 99 [ 94.291714][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.326093][ T6119] CPU: 1 PID: 6119 Comm: syz.2.54 Not tainted syzkaller #0 [ 94.333346][ T6119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 94.343426][ T6119] Call Trace: [ 94.346721][ T6119] [ 94.349646][ T6119] dump_stack_lvl+0x18c/0x250 [ 94.354349][ T6119] ? show_regs_print_info+0x20/0x20 [ 94.359553][ T6119] ? load_image+0x420/0x420 [ 94.364061][ T6119] ? __might_sleep+0xe0/0xe0 [ 94.368648][ T6119] ? __lock_acquire+0x7eb0/0x7eb0 [ 94.373672][ T6119] ? stack_trace_save+0xaa/0x100 [ 94.378609][ T6119] should_fail_ex+0x394/0x4c0 [ 94.378655][ T6119] should_failslab+0x9/0x20 [ 94.378672][ T6119] slab_pre_alloc_hook+0x59/0x300 [ 94.378692][ T6119] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 94.378717][ T6119] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 94.387875][ T6119] __kmem_cache_alloc_node+0x53/0x260 [ 94.409885][ T6119] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 94.415628][ T6119] __kmalloc+0xa7/0x240 [ 94.419790][ T6119] tomoyo_realpath_from_path+0xe6/0x5c0 [ 94.425339][ T6119] ? tomoyo_domain+0xd6/0x120 [ 94.430020][ T6119] tomoyo_path_number_perm+0x248/0x5e0 [ 94.435474][ T6119] ? tomoyo_path_number_perm+0x217/0x5e0 [ 94.441102][ T6119] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 94.446581][ T6119] ? __fget_files+0x28/0x460 [ 94.451178][ T6119] security_file_ioctl+0x70/0xa0 [ 94.456112][ T6119] __se_sys_ioctl+0x48/0x170 [ 94.460700][ T6119] do_syscall_64+0x55/0xb0 [ 94.465110][ T6119] ? clear_bhb_loop+0x40/0x90 [ 94.469783][ T6119] ? clear_bhb_loop+0x40/0x90 [ 94.474455][ T6119] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.480343][ T6119] RIP: 0033:0x7f197c39f7ab [ 94.484751][ T6119] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 94.504363][ T6119] RSP: 002b:00007f197d2eddb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.514534][ T6119] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f197c39f7ab [ 94.522497][ T6119] RDX: 000000000000000a RSI: 0000000000004c00 RDI: 000000000000000b [ 94.530462][ T6119] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.538422][ T6119] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 94.546382][ T6119] R13: 00007f197d2edee0 R14: 00007f197d2edea0 R15: 00007f19721f7000 [ 94.554376][ T6119] [ 94.632965][ T6119] ERROR: Out of memory at tomoyo_realpath_from_path. [ 94.651998][ T6010] hsr_slave_0: entered promiscuous mode [ 94.712639][ T6010] hsr_slave_1: entered promiscuous mode [ 94.719649][ T6010] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.735714][ T6010] Cannot create hsr debugfs directory [ 95.077956][ T5786] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 95.886524][ T6195] fuse: Invalid rootmode [ 95.913170][ T6195] netlink: 20 bytes leftover after parsing attributes in process `syz.0.62'. [ 96.072602][ T6010] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.099477][ T6010] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.132077][ T6010] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.152095][ T6010] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.324661][ T5872] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 96.412354][ T6010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.471470][ T6010] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.519270][ T6086] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.526913][ T6086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.546236][ T5872] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 96.560245][ T5872] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x3 has invalid maxpacket 513, setting to 64 [ 96.599014][ T5872] usb 2-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 96.618922][ T6090] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.626305][ T6090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.644813][ T5872] usb 2-1: config 1 interface 0 has no altsetting 0 [ 96.664699][ T5872] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.673781][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 96.694860][ T5872] usb 2-1: SerialNumber: syz [ 96.728413][ T6200] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.740100][ T6200] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.824495][ C0] net_ratelimit: 30 callbacks suppressed [ 96.960039][ T6200] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.980024][ T6200] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 97.307029][ T6010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.458592][ T5872] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 97.668611][ T789] usb 2-1: USB disconnect, device number 2 [ 97.700234][ T789] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 98.112157][ T6010] veth0_vlan: entered promiscuous mode [ 98.161481][ T6010] veth1_vlan: entered promiscuous mode [ 98.205089][ T6212] loop0: detected capacity change from 0 to 32768 [ 98.259559][ T6212] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.65 (6212) [ 98.281339][ T6010] veth0_macvtap: entered promiscuous mode [ 98.339324][ T6010] veth1_macvtap: entered promiscuous mode [ 98.402999][ T6212] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 98.447233][ T6010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.461277][ T6212] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 98.492595][ T6010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.524703][ T6212] BTRFS info (device loop0): using free space tree [ 98.532219][ T6010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.554518][ T6010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.564350][ T6010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.604532][ T6010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.626344][ T6010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.678918][ T6010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.745123][ T6010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.804591][ T6010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.874296][ T6010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.885840][ T6212] BTRFS info (device loop0): enabling ssd optimizations [ 98.914594][ T6212] BTRFS info (device loop0): auto enabling async discard [ 98.922163][ T6010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.974954][ T6010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.985928][ T6251] loop1: detected capacity change from 0 to 32768 [ 99.007925][ T6251] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.68 (6251) [ 99.019539][ T6010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.127977][ T6010] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.164531][ T6010] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.193932][ T6010] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.213287][ T6251] FAULT_INJECTION: forcing a failure. [ 99.213287][ T6251] name failslab, interval 1, probability 5, space 0, times 97 [ 99.224742][ T6010] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.280027][ T6251] CPU: 1 PID: 6251 Comm: syz.1.68 Not tainted syzkaller #0 [ 99.287265][ T6251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 99.287283][ T6251] Call Trace: [ 99.287305][ T6251] [ 99.287314][ T6251] dump_stack_lvl+0x18c/0x250 [ 99.287347][ T6251] ? show_regs_print_info+0x20/0x20 [ 99.287371][ T6251] ? load_image+0x420/0x420 [ 99.287397][ T6251] ? __lock_acquire+0x7eb0/0x7eb0 [ 99.287426][ T6251] should_fail_ex+0x394/0x4c0 [ 99.287454][ T6251] should_failslab+0x9/0x20 [ 99.287471][ T6251] slab_pre_alloc_hook+0x59/0x300 [ 99.287489][ T6251] ? mark_lock+0x94/0x320 [ 99.287510][ T6251] kmem_cache_alloc+0x5a/0x2d0 [ 99.297735][ T6251] ? alloc_empty_file+0x9e/0x1d0 [ 99.297766][ T6251] alloc_empty_file+0x9e/0x1d0 [ 99.297786][ T6251] path_openat+0x120/0x3270 [ 99.297820][ T6251] ? kasan_set_track+0x5f/0x70 [ 99.297844][ T6251] ? verify_lock_unused+0x140/0x140 [ 99.297864][ T6251] ? do_sys_openat2+0xda/0x1d0 [ 99.297887][ T6251] ? __x64_sys_openat+0x139/0x160 [ 99.297910][ T6251] ? do_syscall_64+0x55/0xb0 [ 99.318633][ T6251] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.346882][ T6251] ? verify_lock_unused+0x140/0x140 [ 99.346910][ T6251] ? do_filp_open+0x430/0x430 [ 99.346945][ T6251] do_filp_open+0x1f2/0x430 [ 99.346970][ T6251] ? vfs_tmpfile+0x620/0x620 [ 99.356755][ T6251] ? _raw_spin_unlock+0x28/0x40 [ 99.356783][ T6251] ? alloc_fd+0x590/0x640 [ 99.356819][ T6251] do_sys_openat2+0x134/0x1d0 [ 99.356845][ T6251] ? do_sys_open+0xe0/0xe0 [ 99.356866][ T6251] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 99.356891][ T6251] ? lock_chain_count+0x20/0x20 [ 99.356918][ T6251] __x64_sys_openat+0x139/0x160 [ 99.356948][ T6251] do_syscall_64+0x55/0xb0 [ 99.356969][ T6251] ? clear_bhb_loop+0x40/0x90 [ 99.356992][ T6251] ? clear_bhb_loop+0x40/0x90 [ 99.376182][ T6251] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.376212][ T6251] RIP: 0033:0x7f34f8b6034e [ 99.376230][ T6251] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 99.376245][ T6251] RSP: 002b:00007f34f9a5dd58 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 99.376264][ T6251] RAX: ffffffffffffffda RBX: 00007f34f9a5e6c0 RCX: 00007f34f8b6034e [ 99.376279][ T6251] RDX: 0000000000000002 RSI: 00007f34f9a5dea0 RDI: ffffffffffffff9c [ 99.376293][ T6251] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 99.376303][ T6251] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 99.397310][ T6251] R13: 00007f34f9a5dee0 R14: 00007f34f9a5dea0 R15: 00007f34ee9f7000 [ 99.397345][ T6251] [ 99.423091][ T5797] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (5797) [ 99.633160][ T6251] No source specified [ 99.916601][ T6212] loop0: detected capacity change from 32768 to 32767 [ 100.176085][ T2994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.184299][ T2994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.414011][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.455940][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.698328][ T6212] jffs2: notice: (6212) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 100.814352][ T6306] fuse: Invalid rootmode [ 100.837908][ T6306] netlink: 20 bytes leftover after parsing attributes in process `syz.2.72'. [ 100.969885][ T5785] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 101.651178][ T6320] loop4: detected capacity change from 0 to 512 [ 101.735974][ T6320] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 101.767051][ T6320] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.76: invalid indirect mapped block 256 (level 1) [ 101.871681][ T6320] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.76: invalid indirect mapped block 2683928664 (level 1) [ 101.948537][ T6320] EXT4-fs (loop4): 1 truncate cleaned up [ 101.964355][ T6320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.024504][ C1] net_ratelimit: 79 callbacks suppressed [ 102.474190][ T6010] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.604111][ T6322] loop1: detected capacity change from 0 to 32768 [ 102.635389][ T6351] netlink: 'syz.4.80': attribute type 2 has an invalid length. [ 102.665478][ T6322] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.77 (6322) [ 102.724930][ T6322] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 102.774537][ T6322] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 102.783232][ T6322] BTRFS info (device loop1): using free space tree [ 102.941327][ T6322] BTRFS info (device loop1): enabling ssd optimizations [ 102.954456][ T6322] BTRFS info (device loop1): auto enabling async discard [ 103.050208][ T6322] FAULT_INJECTION: forcing a failure. [ 103.050208][ T6322] name failslab, interval 1, probability 5, space 0, times 100 [ 103.090388][ T6322] CPU: 1 PID: 6322 Comm: syz.1.77 Not tainted syzkaller #0 [ 103.097661][ T6322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 103.107740][ T6322] Call Trace: [ 103.111046][ T6322] [ 103.114000][ T6322] dump_stack_lvl+0x18c/0x250 [ 103.118719][ T6322] ? show_regs_print_info+0x20/0x20 [ 103.123953][ T6322] ? load_image+0x420/0x420 [ 103.128497][ T6322] ? __might_sleep+0xe0/0xe0 [ 103.133124][ T6322] ? __lock_acquire+0x7eb0/0x7eb0 [ 103.138196][ T6322] should_fail_ex+0x394/0x4c0 [ 103.142916][ T6322] should_failslab+0x9/0x20 [ 103.147455][ T6322] slab_pre_alloc_hook+0x59/0x300 [ 103.152521][ T6322] kmem_cache_alloc+0x5a/0x2d0 [ 103.157313][ T6322] ? __anon_vma_prepare+0xb6/0x440 [ 103.162437][ T6322] __anon_vma_prepare+0xb6/0x440 [ 103.167406][ T6322] do_wp_page+0x24b7/0x34d0 [ 103.171931][ T6322] ? folio_put+0xd0/0xd0 [ 103.176232][ T6322] ? do_raw_spin_lock+0x11f/0x2b0 [ 103.181292][ T6322] ? __rwlock_init+0x150/0x150 [ 103.186099][ T6322] handle_mm_fault+0x1300/0x4a40 [ 103.191067][ T6322] ? handle_mm_fault+0xe6/0x4a40 [ 103.196032][ T6322] ? numa_migrate_prep+0x350/0x350 [ 103.201160][ T6322] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 103.206443][ T6322] do_user_addr_fault+0xeb7/0x13e0 [ 103.211562][ T6322] exc_page_fault+0x64/0x100 [ 103.216162][ T6322] asm_exc_page_fault+0x26/0x30 [ 103.221018][ T6322] RIP: 0033:0x7f34f8a563a3 [ 103.225432][ T6322] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 103.245050][ T6322] RSP: 002b:00007f34f9a5d470 EFLAGS: 00010202 [ 103.251112][ T6322] RAX: 0000000000000400 RBX: 00007f34f9a5d530 RCX: 00007f34ee9f7000 [ 103.259081][ T6322] RDX: 00007f34f9a5d6d0 RSI: 0000000000000000 RDI: 00007f34f9a5d5d0 [ 103.267047][ T6322] RBP: 00000000000000f9 R08: 0000000000000008 R09: 000000000000009a [ 103.275010][ T6322] R10: 00000000000000b8 R11: 00007f34f9a5d530 R12: 0000000000000001 [ 103.282978][ T6322] R13: 00007f34f8c582e0 R14: 0000000000000020 R15: 00007f34f9a5d5d0 [ 103.290962][ T6322] [ 103.344899][ T6322] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 103.365049][ T6322] FAULT_INJECTION: forcing a failure. [ 103.365049][ T6322] name failslab, interval 1, probability 5, space 0, times 99 [ 103.406558][ T6322] CPU: 0 PID: 6322 Comm: syz.1.77 Not tainted syzkaller #0 [ 103.413814][ T6322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 103.423892][ T6322] Call Trace: [ 103.427170][ T6322] [ 103.427181][ T6322] dump_stack_lvl+0x18c/0x250 [ 103.434774][ T6322] ? show_regs_print_info+0x20/0x20 [ 103.434804][ T6322] ? load_image+0x420/0x420 [ 103.434829][ T6322] ? __might_sleep+0xe0/0xe0 [ 103.434854][ T6322] ? __lock_acquire+0x7eb0/0x7eb0 [ 103.434879][ T6322] should_fail_ex+0x394/0x4c0 [ 103.444753][ T6322] should_failslab+0x9/0x20 [ 103.444773][ T6322] slab_pre_alloc_hook+0x59/0x300 [ 103.444797][ T6322] kmem_cache_alloc+0x5a/0x2d0 [ 103.454352][ T6322] ? ptlock_alloc+0x20/0x70 [ 103.463504][ T6322] ptlock_alloc+0x20/0x70 [ 103.473274][ T6322] pte_alloc_one+0xcc/0x540 [ 103.473303][ T6322] ? pfn_modify_allowed+0x560/0x560 [ 103.477972][ T6322] __pte_alloc+0x22/0x2a0 [ 103.477996][ T6322] handle_mm_fault+0x3dc0/0x4a40 [ 103.478021][ T6322] ? handle_mm_fault+0xe6/0x4a40 [ 103.486912][ T6322] ? lock_vma_under_rcu+0x52c/0x660 [ 103.496392][ T6322] ? numa_migrate_prep+0x350/0x350 [ 103.496412][ T6322] ? lock_vma_under_rcu+0xe5/0x660 [ 103.506257][ T6322] ? do_user_addr_fault+0x1ae/0x13e0 [ 103.506288][ T6322] do_user_addr_fault+0x5b2/0x13e0 [ 103.506319][ T6322] ? rcu_is_watching+0x15/0xb0 [ 103.516574][ T6322] exc_page_fault+0x64/0x100 [ 103.516596][ T6322] asm_exc_page_fault+0x26/0x30 [ 103.536820][ T6322] RIP: 0033:0x7f34f8a5644e [ 103.546228][ T6322] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 103.546244][ T6322] RSP: 002b:00007f34f9a5d470 EFLAGS: 00010206 [ 103.546261][ T6322] RAX: 0000000000009001 RBX: 00007f34f9a5d530 RCX: 0000000000000018 [ 103.546274][ T6322] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f34f9a5d5d0 [ 103.546286][ T6322] RBP: 0000000000000102 R08: 00007f34ee9f7000 R09: 0000000000009000 [ 103.550693][ T6322] R10: 0000000000000000 R11: 00007f34f9a5d540 R12: 0000000000000001 [ 103.576516][ T6322] R13: 00007f34f8c582e0 R14: 0000000000000000 R15: 00007f34f9a5d5d0 [ 103.576547][ T6322] [ 103.645498][ T6322] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 103.902672][ T6322] No source specified [ 103.909644][ T6322] FAULT_INJECTION: forcing a failure. [ 103.909644][ T6322] name failslab, interval 1, probability 5, space 0, times 98 [ 103.922757][ T6322] CPU: 1 PID: 6322 Comm: syz.1.77 Not tainted syzkaller #0 [ 103.929977][ T6322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 103.940051][ T6322] Call Trace: [ 103.943344][ T6322] [ 103.946291][ T6322] dump_stack_lvl+0x18c/0x250 [ 103.951007][ T6322] ? show_regs_print_info+0x20/0x20 [ 103.956212][ T6322] ? load_image+0x420/0x420 [ 103.960719][ T6322] ? __might_sleep+0xe0/0xe0 [ 103.965310][ T6322] ? __lock_acquire+0x7eb0/0x7eb0 [ 103.965366][ T6322] should_fail_ex+0x394/0x4c0 [ 103.965402][ T6322] should_failslab+0x9/0x20 [ 103.965421][ T6322] slab_pre_alloc_hook+0x59/0x300 [ 103.984830][ T6322] ? join_transaction+0x155/0xcd0 [ 103.989882][ T6322] __kmem_cache_alloc_node+0x53/0x260 [ 103.995284][ T6322] ? join_transaction+0x155/0xcd0 [ 104.000331][ T6322] kmalloc_trace+0x2a/0xe0 [ 104.004777][ T6322] join_transaction+0x155/0xcd0 [ 104.009637][ T6322] start_transaction+0x781/0x1110 [ 104.014662][ T6322] ? start_transaction+0xf40/0x1110 [ 104.019861][ T6322] btrfs_setxattr_trans+0xcb/0x2a0 [ 104.024973][ T6322] ? btrfs_xattr_handler_get+0x50/0x50 [ 104.030436][ T6322] __vfs_setxattr+0x437/0x470 [ 104.035123][ T6322] __vfs_setxattr_noperm+0x12a/0x5e0 [ 104.040415][ T6322] vfs_setxattr+0x16b/0x2f0 [ 104.044925][ T6322] ? xattr_permission+0x460/0x460 [ 104.049942][ T6322] ? __mnt_want_write+0x223/0x2a0 [ 104.054976][ T6322] ? path_setxattr+0x2ec/0x590 [ 104.059764][ T6322] path_setxattr+0x33a/0x590 [ 104.064377][ T6322] ? simple_xattrs_free+0x150/0x150 [ 104.069610][ T6322] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 104.075598][ T6322] ? lock_chain_count+0x20/0x20 [ 104.080455][ T6322] __x64_sys_setxattr+0xbb/0xd0 [ 104.085310][ T6322] do_syscall_64+0x55/0xb0 [ 104.089725][ T6322] ? clear_bhb_loop+0x40/0x90 [ 104.094402][ T6322] ? clear_bhb_loop+0x40/0x90 [ 104.099083][ T6322] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.104980][ T6322] RIP: 0033:0x7f34f8b9fb19 [ 104.109412][ T6322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.129026][ T6322] RSP: 002b:00007f34f9a5e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 104.137476][ T6322] RAX: ffffffffffffffda RBX: 00007f34f8e25fa0 RCX: 00007f34f8b9fb19 [ 104.145791][ T6322] RDX: 0000000000000000 RSI: 000020000000cfc0 RDI: 000020000000cf80 [ 104.153776][ T6322] RBP: 00007f34f8c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 104.161752][ T6322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.169726][ T6322] R13: 00007f34f8e26038 R14: 00007f34f8e25fa0 R15: 00007ffc5c292b68 [ 104.177711][ T6322] [ 104.204269][ T6322] FAULT_INJECTION: forcing a failure. [ 104.204269][ T6322] name failslab, interval 1, probability 5, space 0, times 97 [ 104.217489][ T6322] CPU: 1 PID: 6322 Comm: syz.1.77 Not tainted syzkaller #0 [ 104.224711][ T6322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 104.234783][ T6322] Call Trace: [ 104.238075][ T6322] [ 104.241023][ T6322] dump_stack_lvl+0x18c/0x250 [ 104.245734][ T6322] ? show_regs_print_info+0x20/0x20 [ 104.250941][ T6322] ? load_image+0x420/0x420 [ 104.255471][ T6322] ? __might_sleep+0xe0/0xe0 [ 104.260095][ T6322] ? __lock_acquire+0x7eb0/0x7eb0 [ 104.265161][ T6322] should_fail_ex+0x394/0x4c0 [ 104.269923][ T6322] should_failslab+0x9/0x20 [ 104.274451][ T6322] slab_pre_alloc_hook+0x59/0x300 [ 104.279494][ T6322] ? __lock_acquire+0x7eb0/0x7eb0 [ 104.284537][ T6322] ? ima_collect_measurement+0x567/0xa30 [ 104.290173][ T6322] ? ima_collect_measurement+0x567/0xa30 [ 104.295824][ T6322] __kmem_cache_alloc_node+0x53/0x260 [ 104.301229][ T6322] ? ima_collect_measurement+0x567/0xa30 [ 104.306893][ T6322] __kmalloc_node_track_caller+0xa4/0x230 [ 104.312649][ T6322] krealloc+0x86/0x120 [ 104.316751][ T6322] ima_collect_measurement+0x567/0xa30 [ 104.322221][ T6322] ? ima_get_action+0xb0/0xb0 [ 104.326922][ T6322] ? lockdep_hardirqs_on+0x98/0x150 [ 104.332146][ T6322] ? slab_free_freelist_hook+0x154/0x240 [ 104.337812][ T6322] ? btrfs_getxattr+0x195/0x1b0 [ 104.342686][ T6322] ? kmem_cache_free+0xf8/0x290 [ 104.347573][ T6322] ? ima_get_hash_algo+0x91/0x4a0 [ 104.352626][ T6322] ? ima_get_cache_status+0xd0/0xd0 [ 104.357865][ T6322] process_measurement+0x123a/0x1d50 [ 104.360076][ T6389] fuse: Invalid rootmode [ 104.363178][ T6322] ? ima_file_mmap+0x1d0/0x1d0 [ 104.372225][ T6322] ? tomoyo_check_open_permission+0x384/0x460 [ 104.378321][ T6322] ? tomoyo_check_open_permission+0x1cf/0x460 [ 104.384416][ T6322] ? tomoyo_check_path_number_acl+0x280/0x280 [ 104.390541][ T6322] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 104.396730][ T6322] ima_file_check+0xcc/0x110 [ 104.401344][ T6322] ? ima_bprm_check+0x200/0x200 [ 104.406237][ T6322] path_openat+0x2910/0x3270 [ 104.410887][ T6322] ? do_sys_openat2+0xda/0x1d0 [ 104.415695][ T6322] ? do_filp_open+0x430/0x430 [ 104.420417][ T6322] do_filp_open+0x1f2/0x430 [ 104.424945][ T6322] ? vfs_tmpfile+0x620/0x620 [ 104.429577][ T6322] ? _raw_spin_unlock+0x28/0x40 [ 104.434446][ T6322] ? alloc_fd+0x590/0x640 [ 104.438806][ T6322] do_sys_openat2+0x134/0x1d0 [ 104.443520][ T6322] ? do_sys_open+0xe0/0xe0 [ 104.447962][ T6322] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 104.453961][ T6322] ? lock_chain_count+0x20/0x20 [ 104.458853][ T6322] __x64_sys_openat+0x139/0x160 [ 104.463738][ T6322] do_syscall_64+0x55/0xb0 [ 104.468158][ T6322] ? clear_bhb_loop+0x40/0x90 [ 104.468186][ T6322] ? clear_bhb_loop+0x40/0x90 [ 104.473046][ T6322] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.473073][ T6322] RIP: 0033:0x7f34f8b9fb19 [ 104.488252][ T6322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.507858][ T6322] RSP: 002b:00007f34f9a5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 104.516293][ T6322] RAX: ffffffffffffffda RBX: 00007f34f8e25fa0 RCX: 00007f34f8b9fb19 [ 104.524285][ T6322] RDX: 0000000000000042 RSI: 000020000000d000 RDI: ffffffffffffff9c [ 104.532278][ T6322] RBP: 00007f34f8c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 104.540267][ T6322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.548256][ T6322] R13: 00007f34f8e26038 R14: 00007f34f8e25fa0 R15: 00007ffc5c292b68 [ 104.556262][ T6322] [ 104.559027][ T6394] netlink: 20 bytes leftover after parsing attributes in process `syz.2.83'. [ 104.561869][ T6322] FAULT_INJECTION: forcing a failure. [ 104.561869][ T6322] name failslab, interval 1, probability 5, space 0, times 96 [ 104.581527][ T6322] CPU: 1 PID: 6322 Comm: syz.1.77 Not tainted syzkaller #0 [ 104.588751][ T6322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 104.598830][ T6322] Call Trace: [ 104.602127][ T6322] [ 104.605071][ T6322] dump_stack_lvl+0x18c/0x250 [ 104.609774][ T6322] ? vsnprintf+0x1ae7/0x1ba0 [ 104.614389][ T6322] ? show_regs_print_info+0x20/0x20 [ 104.619618][ T6322] ? load_image+0x420/0x420 [ 104.624145][ T6322] ? snprintf+0xe9/0x140 [ 104.628411][ T6322] should_fail_ex+0x394/0x4c0 [ 104.633110][ T6322] should_failslab+0x9/0x20 [ 104.637628][ T6322] slab_pre_alloc_hook+0x59/0x300 [ 104.642668][ T6322] ? aa_label_asxprint+0x70/0x120 [ 104.647709][ T6322] ? aa_label_asxprint+0x70/0x120 [ 104.652748][ T6322] __kmem_cache_alloc_node+0x53/0x260 [ 104.658144][ T6322] ? aa_label_asxprint+0x70/0x120 [ 104.663188][ T6322] __kmalloc+0xa7/0x240 [ 104.667372][ T6322] aa_label_asxprint+0x70/0x120 [ 104.672248][ T6322] apparmor_secid_to_secctx+0xac/0x150 [ 104.677730][ T6322] security_secid_to_secctx+0x70/0xa0 [ 104.683132][ T6322] audit_log_task_context+0xd4/0x210 [ 104.688446][ T6322] ? audit_log_key+0x50/0x50 [ 104.693057][ T6322] ? from_kuid+0x1f9/0x6a0 [ 104.697513][ T6322] integrity_audit_message+0x238/0x420 [ 104.703016][ T6322] ? integrity_audit_msg+0x50/0x50 [ 104.708155][ T6322] ? __lock_acquire+0x7eb0/0x7eb0 [ 104.713199][ T6322] ? ima_collect_measurement+0x567/0xa30 [ 104.718852][ T6322] ? take_dentry_name_snapshot+0xc7/0x160 [ 104.724599][ T6322] integrity_audit_msg+0x41/0x50 [ 104.729565][ T6322] ima_collect_measurement+0x7b1/0xa30 [ 104.735055][ T6322] ? ima_get_action+0xb0/0xb0 [ 104.739749][ T6322] ? lockdep_hardirqs_on+0x98/0x150 [ 104.744971][ T6322] ? slab_free_freelist_hook+0x154/0x240 [ 104.750631][ T6322] ? btrfs_getxattr+0x195/0x1b0 [ 104.755501][ T6322] ? kmem_cache_free+0xf8/0x290 [ 104.760362][ T6322] ? ima_get_hash_algo+0x91/0x4a0 [ 104.765394][ T6322] ? ima_get_cache_status+0xd0/0xd0 [ 104.765429][ T6322] process_measurement+0x123a/0x1d50 [ 104.765469][ T6322] ? ima_file_mmap+0x1d0/0x1d0 [ 104.765492][ T6322] ? tomoyo_check_open_permission+0x384/0x460 [ 104.765514][ T6322] ? tomoyo_check_open_permission+0x1cf/0x460 [ 104.765535][ T6322] ? tomoyo_check_path_number_acl+0x280/0x280 [ 104.765598][ T6322] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 104.765631][ T6322] ima_file_check+0xcc/0x110 [ 104.765651][ T6322] ? ima_bprm_check+0x200/0x200 [ 104.765679][ T6322] path_openat+0x2910/0x3270 [ 104.765720][ T6322] ? do_sys_openat2+0xda/0x1d0 [ 104.824016][ T6322] ? do_filp_open+0x430/0x430 [ 104.828741][ T6322] do_filp_open+0x1f2/0x430 [ 104.833249][ T6322] ? vfs_tmpfile+0x620/0x620 [ 104.833451][ T6383] loop0: detected capacity change from 0 to 32768 [ 104.837858][ T6322] ? _raw_spin_unlock+0x28/0x40 [ 104.837881][ T6322] ? alloc_fd+0x590/0x640 [ 104.837911][ T6322] do_sys_openat2+0x134/0x1d0 [ 104.837938][ T6322] ? do_sys_open+0xe0/0xe0 [ 104.837961][ T6322] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 104.837987][ T6322] ? lock_chain_count+0x20/0x20 [ 104.838015][ T6322] __x64_sys_openat+0x139/0x160 [ 104.838043][ T6322] do_syscall_64+0x55/0xb0 [ 104.838063][ T6322] ? clear_bhb_loop+0x40/0x90 [ 104.838087][ T6322] ? clear_bhb_loop+0x40/0x90 [ 104.868650][ T6322] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.878308][ T6322] RIP: 0033:0x7f34f8b9fb19 [ 104.878331][ T6322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.878346][ T6322] RSP: 002b:00007f34f9a5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 104.878367][ T6322] RAX: ffffffffffffffda RBX: 00007f34f8e25fa0 RCX: 00007f34f8b9fb19 [ 104.878380][ T6322] RDX: 0000000000000042 RSI: 000020000000d000 RDI: ffffffffffffff9c [ 104.878393][ T6322] RBP: 00007f34f8c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 104.878405][ T6322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.878417][ T6322] R13: 00007f34f8e26038 R14: 00007f34f8e25fa0 R15: 00007ffc5c292b68 [ 104.878446][ T6322] [ 104.891826][ T6322] audit: error in audit_log_task_context [ 104.982277][ T27] audit: type=1800 audit(1793831340.100:2): pid=6322 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.77" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 105.040084][ T5781] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 105.056508][ T6383] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.84 (6383) [ 105.142064][ T6380] FAULT_INJECTION: forcing a failure. [ 105.142064][ T6380] name failslab, interval 1, probability 5, space 0, times 95 [ 105.202815][ T6380] CPU: 1 PID: 6380 Comm: syz.0.84 Not tainted syzkaller #0 [ 105.210062][ T6380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 105.220133][ T6380] Call Trace: [ 105.223431][ T6380] [ 105.226377][ T6380] dump_stack_lvl+0x18c/0x250 [ 105.231091][ T6380] ? show_regs_print_info+0x20/0x20 [ 105.236297][ T6380] ? load_image+0x420/0x420 [ 105.240807][ T6380] ? __might_sleep+0xe0/0xe0 [ 105.245405][ T6380] ? __lock_acquire+0x7eb0/0x7eb0 [ 105.250428][ T6380] should_fail_ex+0x394/0x4c0 [ 105.255104][ T6380] should_failslab+0x9/0x20 [ 105.259600][ T6380] slab_pre_alloc_hook+0x59/0x300 [ 105.264618][ T6380] ? prepend_path+0x8a7/0x950 [ 105.269287][ T6380] ? tomoyo_encode+0x2ad/0x570 [ 105.274048][ T6380] ? tomoyo_encode+0x2ad/0x570 [ 105.278806][ T6380] __kmem_cache_alloc_node+0x53/0x260 [ 105.284173][ T6380] ? tomoyo_encode+0x2ad/0x570 [ 105.288929][ T6380] __kmalloc+0xa7/0x240 [ 105.293087][ T6380] tomoyo_encode+0x2ad/0x570 [ 105.297677][ T6380] tomoyo_realpath_from_path+0x57c/0x5c0 [ 105.303334][ T6380] tomoyo_check_open_permission+0x224/0x460 [ 105.309244][ T6380] ? tomoyo_check_open_permission+0x1cf/0x460 [ 105.315319][ T6380] ? tomoyo_check_path_number_acl+0x280/0x280 [ 105.321393][ T6380] ? verify_lock_unused+0x140/0x140 [ 105.326598][ T6380] ? __asan_memset+0x22/0x40 [ 105.331207][ T6380] ? __rwlock_init+0x150/0x150 [ 105.335971][ T6380] ? tomoyo_file_open+0xed/0x180 [ 105.340907][ T6380] security_file_open+0x62/0xa0 [ 105.345760][ T6380] do_dentry_open+0x32b/0x14b0 [ 105.350525][ T6380] ? __asan_memcpy+0x40/0x70 [ 105.355115][ T6380] path_openat+0x284f/0x3270 [ 105.359725][ T6380] ? do_filp_open+0x430/0x430 [ 105.364414][ T6380] do_filp_open+0x1f2/0x430 [ 105.368921][ T6380] ? vfs_tmpfile+0x620/0x620 [ 105.373520][ T6380] ? _raw_spin_unlock+0x28/0x40 [ 105.378365][ T6380] ? alloc_fd+0x590/0x640 [ 105.382705][ T6380] do_sys_openat2+0x134/0x1d0 [ 105.387373][ T6380] ? do_sys_open+0xe0/0xe0 [ 105.387401][ T6380] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 105.397954][ T6380] ? lock_chain_count+0x20/0x20 [ 105.402809][ T6380] __x64_sys_openat+0x139/0x160 [ 105.407667][ T6380] do_syscall_64+0x55/0xb0 [ 105.412089][ T6380] ? clear_bhb_loop+0x40/0x90 [ 105.416765][ T6380] ? clear_bhb_loop+0x40/0x90 [ 105.421442][ T6380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.427329][ T6380] RIP: 0033:0x7f0bb5d9fb19 [ 105.431738][ T6380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.451343][ T6380] RSP: 002b:00007f0bb6b91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 105.459755][ T6380] RAX: ffffffffffffffda RBX: 00007f0bb6025fa0 RCX: 00007f0bb5d9fb19 [ 105.467719][ T6380] RDX: 0000000000000042 RSI: 000020000000d000 RDI: ffffffffffffff9c [ 105.475681][ T6380] RBP: 00007f0bb5e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 105.483648][ T6380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.491609][ T6380] R13: 00007f0bb6026038 R14: 00007f0bb6025fa0 R15: 00007ffd9b41f998 [ 105.499585][ T6380] [ 105.556743][ T6380] ERROR: Out of memory at tomoyo_realpath_from_path. [ 105.637643][ T5782] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (5782) [ 105.668405][ T6391] loop4: detected capacity change from 0 to 32768 [ 105.719369][ T6391] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 105.775389][ T6391] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 105.784082][ T6391] BTRFS info (device loop4): using free space tree [ 106.130675][ T6391] BTRFS info (device loop4): enabling ssd optimizations [ 106.162422][ T6391] BTRFS info (device loop4): auto enabling async discard [ 106.377371][ T6428] FAULT_INJECTION: forcing a failure. [ 106.377371][ T6428] name failslab, interval 1, probability 5, space 0, times 100 [ 106.415133][ T6391] loop0: detected capacity change from 32768 to 32767 [ 106.424642][ T6428] CPU: 0 PID: 6428 Comm: syz.4.85 Not tainted syzkaller #0 [ 106.431890][ T6428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 106.441973][ T6428] Call Trace: [ 106.445252][ T6428] [ 106.448213][ T6428] dump_stack_lvl+0x18c/0x250 [ 106.452906][ T6428] ? show_regs_print_info+0x20/0x20 [ 106.452938][ T6428] ? load_image+0x420/0x420 [ 106.452962][ T6428] ? __might_sleep+0xe0/0xe0 [ 106.467201][ T6428] ? __lock_acquire+0x7eb0/0x7eb0 [ 106.472271][ T6428] should_fail_ex+0x394/0x4c0 [ 106.476981][ T6428] should_failslab+0x9/0x20 [ 106.481510][ T6428] slab_pre_alloc_hook+0x59/0x300 [ 106.486573][ T6428] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 106.492245][ T6428] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 106.497918][ T6428] __kmem_cache_alloc_node+0x53/0x260 [ 106.503300][ T6428] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 106.508932][ T6428] __kmalloc_node+0xa6/0x240 [ 106.508958][ T6428] ? lock_chain_count+0x20/0x20 [ 106.508981][ T6428] memcg_alloc_slab_cgroups+0x85/0x120 [ 106.509005][ T6428] new_slab+0xc3/0x2d0 [ 106.509028][ T6428] ___slab_alloc+0xc5c/0x12f0 [ 106.518438][ T6428] ? vm_area_alloc+0x24/0x1d0 [ 106.518470][ T6428] kmem_cache_alloc+0x109/0x2d0 [ 106.542190][ T6428] ? vm_area_alloc+0x24/0x1d0 [ 106.546904][ T6428] vm_area_alloc+0x24/0x1d0 [ 106.551440][ T6428] mmap_region+0xcfa/0x2090 [ 106.555991][ T6428] ? file_mmap_ok+0x170/0x170 [ 106.560680][ T6428] ? cap_mmap_addr+0x157/0x2b0 [ 106.565453][ T6428] do_mmap+0x98f/0x10a0 [ 106.565488][ T6428] ? mlock_future_ok+0xf0/0xf0 [ 106.565512][ T6428] ? down_write+0x200/0x200 [ 106.565539][ T6428] vm_mmap_pgoff+0x1c4/0x3f0 [ 106.574610][ T6428] ? account_locked_vm+0x200/0x200 [ 106.574641][ T6428] ? ksys_mmap_pgoff+0xf3/0x720 [ 106.574665][ T6428] ? __x64_sys_mmap+0x7a/0x130 [ 106.574689][ T6428] do_syscall_64+0x55/0xb0 [ 106.583735][ T6428] ? clear_bhb_loop+0x40/0x90 [ 106.593658][ T6428] ? clear_bhb_loop+0x40/0x90 [ 106.602807][ T6428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.612135][ T6428] RIP: 0033:0x7f3f8739f882 [ 106.612156][ T6428] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 106.612172][ T6428] RSP: 002b:00007f3f88260df8 EFLAGS: 00000246 [ 106.622439][ T6428] ORIG_RAX: 0000000000000009 [ 106.622449][ T6428] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3f8739f882 [ 106.648086][ T6428] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 106.648099][ T6428] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 106.648111][ T6428] R10: 0000000000000022 R11: 0000000000000246 R12: 000000000000000a [ 106.648124][ T6428] R13: 00007f3f88260ee0 R14: 00007f3f88260ea0 R15: 0000200000000180 [ 106.648154][ T6428] [ 106.906561][ T6434] syzkaller0: entered promiscuous mode [ 106.912158][ T6434] syzkaller0: entered allmulticast mode [ 107.064466][ C1] net_ratelimit: 47 callbacks suppressed [ 107.091184][ T6441] FAULT_INJECTION: forcing a failure. [ 107.091184][ T6441] name failslab, interval 1, probability 5, space 0, times 99 [ 107.144755][ T6441] CPU: 1 PID: 6441 Comm: syz.0.92 Not tainted syzkaller #0 [ 107.151985][ T6441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 107.152000][ T6441] Call Trace: [ 107.152008][ T6441] [ 107.168302][ T6441] dump_stack_lvl+0x18c/0x250 [ 107.173018][ T6441] ? show_regs_print_info+0x20/0x20 [ 107.178250][ T6441] ? load_image+0x420/0x420 [ 107.182790][ T6441] ? __might_sleep+0xe0/0xe0 [ 107.187413][ T6441] ? __lock_acquire+0x7eb0/0x7eb0 [ 107.192464][ T6441] ? mark_lock+0x94/0x320 [ 107.196805][ T6441] should_fail_ex+0x394/0x4c0 [ 107.201492][ T6441] should_failslab+0x9/0x20 [ 107.205990][ T6441] slab_pre_alloc_hook+0x59/0x300 [ 107.206016][ T6441] kmem_cache_alloc+0x5a/0x2d0 [ 107.206032][ T6441] ? mas_alloc_nodes+0x2f8/0x8c0 [ 107.206057][ T6441] mas_alloc_nodes+0x2f8/0x8c0 [ 107.206086][ T6441] mas_preallocate+0xa1f/0x1170 [ 107.206112][ T6441] ? lockdep_softirqs_off+0x440/0x440 [ 107.206134][ T6441] ? mas_destroy+0x20a0/0x20a0 [ 107.206167][ T6441] ? vma_iter_config+0xe6/0x270 [ 107.225612][ T6441] __split_vma+0x2dd/0xc20 [ 107.249877][ T6441] ? mmap_write_unlock+0x160/0x160 [ 107.255027][ T6441] ? __lock_acquire+0x135d/0x7eb0 [ 107.260099][ T6441] do_vmi_align_munmap+0x310/0x16a0 [ 107.265346][ T6441] ? verify_lock_unused+0x140/0x140 [ 107.270590][ T6441] ? do_vmi_munmap+0x2d0/0x2d0 [ 107.270627][ T6441] ? mtree_range_walk+0x68c/0x7b0 [ 107.275584][ T6441] ? mas_find_setup+0x47f/0x590 [ 107.275617][ T6441] do_vmi_munmap+0x252/0x2d0 [ 107.275648][ T6441] do_munmap+0xe6/0x140 [ 107.275673][ T6441] ? do_vmi_align_munmap+0x16a0/0x16a0 [ 107.275694][ T6441] ? mtree_load+0x7a4/0x840 [ 107.275717][ T6441] ? mtree_load+0x109/0x840 [ 107.275740][ T6441] ? mas_alloc_nodes+0x8c0/0x8c0 [ 107.275760][ T6441] ? down_write_killable+0x181/0x230 [ 107.275782][ T6441] mremap_to+0x310/0x5d0 [ 107.275808][ T6441] __se_sys_mremap+0x6a8/0x11a0 [ 107.308881][ T6441] ? __x64_sys_mremap+0xc0/0xc0 [ 107.333410][ T6441] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 107.339427][ T6441] ? lock_chain_count+0x20/0x20 [ 107.344318][ T6441] ? lockdep_hardirqs_on+0x98/0x150 [ 107.349545][ T6441] ? __x64_sys_mremap+0x20/0xc0 [ 107.354424][ T6441] do_syscall_64+0x55/0xb0 [ 107.358874][ T6441] ? clear_bhb_loop+0x40/0x90 [ 107.363578][ T6441] ? clear_bhb_loop+0x40/0x90 [ 107.368282][ T6441] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.374182][ T6441] RIP: 0033:0x7f0bb5d9fb19 [ 107.374207][ T6441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.374222][ T6441] RSP: 002b:00007f0bb6b91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 107.374245][ T6441] RAX: ffffffffffffffda RBX: 00007f0bb6025fa0 RCX: 00007f0bb5d9fb19 [ 107.414662][ T6441] RDX: 0000000000600000 RSI: 0000000000003000 RDI: 0000200000064000 [ 107.422681][ T6441] RBP: 00007f0bb5e37b70 R08: 0000200000a00000 R09: 0000000000000000 [ 107.430691][ T6441] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 107.438693][ T6441] R13: 00007f0bb6026038 R14: 00007f0bb6025fa0 R15: 00007ffd9b41f998 [ 107.446716][ T6441] [ 107.575988][ T6391] jffs2: notice: (6391) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 107.798203][ T6454] netlink: 'syz.1.93': attribute type 2 has an invalid length. [ 107.852208][ T6456] loop0: detected capacity change from 0 to 164 [ 107.932241][ T6456] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 107.999570][ T6456] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 108.046768][ T6456] Symlink component flag not implemented [ 108.213854][ T6010] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 108.407278][ T6467] fuse: Invalid rootmode [ 108.432514][ T6467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.96'. [ 108.957636][ T6464] loop0: detected capacity change from 0 to 32768 [ 108.984681][ T6464] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.95 (6464) [ 109.042309][ T6464] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.074869][ T6464] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 109.083551][ T6464] BTRFS info (device loop0): using free space tree [ 109.301870][ T6464] BTRFS info (device loop0): enabling ssd optimizations [ 109.309506][ T6464] BTRFS info (device loop0): auto enabling async discard [ 109.444822][ T6501] syzkaller0: entered promiscuous mode [ 109.444839][ T6501] syzkaller0: entered allmulticast mode [ 109.457996][ T6464] FAULT_INJECTION: forcing a failure. [ 109.457996][ T6464] name failslab, interval 1, probability 5, space 0, times 98 [ 109.512586][ T6464] CPU: 1 PID: 6464 Comm: syz.0.95 Not tainted syzkaller #0 [ 109.519838][ T6464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 109.529910][ T6464] Call Trace: [ 109.533204][ T6464] [ 109.536151][ T6464] dump_stack_lvl+0x18c/0x250 [ 109.540840][ T6464] ? show_regs_print_info+0x20/0x20 [ 109.540872][ T6464] ? load_image+0x420/0x420 [ 109.550596][ T6464] ? __might_sleep+0xe0/0xe0 [ 109.555215][ T6464] ? __lock_acquire+0x7eb0/0x7eb0 [ 109.560275][ T6464] should_fail_ex+0x394/0x4c0 [ 109.564984][ T6464] should_failslab+0x9/0x20 [ 109.569507][ T6464] slab_pre_alloc_hook+0x59/0x300 [ 109.574551][ T6464] ? ima_alloc_init_template+0x93/0x6e0 [ 109.580114][ T6464] ? ima_alloc_init_template+0x93/0x6e0 [ 109.585683][ T6464] __kmem_cache_alloc_node+0x53/0x260 [ 109.591058][ T6464] ? copy_from_kernel_nofault_allowed+0xbd/0x130 [ 109.591096][ T6464] ? ima_alloc_init_template+0x93/0x6e0 [ 109.602971][ T6464] __kmalloc+0xa7/0x240 [ 109.607157][ T6464] ? prepend_path+0x8a7/0x950 [ 109.611869][ T6464] ima_alloc_init_template+0x93/0x6e0 [ 109.617271][ T6464] ima_store_measurement+0x1db/0x690 [ 109.622587][ T6464] ? ima_collect_measurement+0xa30/0xa30 [ 109.628244][ T6464] ? ima_d_path+0x184/0x240 [ 109.632780][ T6464] ? ima_get_hash_algo+0x91/0x4a0 [ 109.637835][ T6464] ? ima_get_cache_status+0xd0/0xd0 [ 109.643068][ T6464] process_measurement+0x1304/0x1d50 [ 109.648401][ T6464] ? ima_file_mmap+0x1d0/0x1d0 [ 109.653199][ T6464] ? tomoyo_check_open_permission+0x384/0x460 [ 109.659292][ T6464] ? tomoyo_check_open_permission+0x1cf/0x460 [ 109.665399][ T6464] ? tomoyo_check_path_number_acl+0x280/0x280 [ 109.671505][ T6464] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 109.677689][ T6464] ima_file_check+0xcc/0x110 [ 109.682298][ T6464] ? ima_bprm_check+0x200/0x200 [ 109.687174][ T6464] path_openat+0x2910/0x3270 [ 109.691827][ T6464] ? do_sys_openat2+0xda/0x1d0 [ 109.696618][ T6464] ? do_filp_open+0x430/0x430 [ 109.701334][ T6464] do_filp_open+0x1f2/0x430 [ 109.705863][ T6464] ? vfs_tmpfile+0x620/0x620 [ 109.710497][ T6464] ? _raw_spin_unlock+0x28/0x40 [ 109.715368][ T6464] ? alloc_fd+0x590/0x640 [ 109.719728][ T6464] do_sys_openat2+0x134/0x1d0 [ 109.724424][ T6464] ? do_sys_open+0xe0/0xe0 [ 109.728845][ T6464] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 109.734835][ T6464] ? lock_chain_count+0x20/0x20 [ 109.734862][ T6464] __x64_sys_openat+0x139/0x160 [ 109.734889][ T6464] do_syscall_64+0x55/0xb0 [ 109.734911][ T6464] ? clear_bhb_loop+0x40/0x90 [ 109.734933][ T6464] ? clear_bhb_loop+0x40/0x90 [ 109.734957][ T6464] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.744624][ T6464] RIP: 0033:0x7f0bb5d9fb19 [ 109.744645][ T6464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.744660][ T6464] RSP: 002b:00007f0bb6b91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 109.744680][ T6464] RAX: ffffffffffffffda RBX: 00007f0bb6025fa0 RCX: 00007f0bb5d9fb19 [ 109.744694][ T6464] RDX: 0000000000000042 RSI: 000020000000d000 RDI: ffffffffffffff9c [ 109.744707][ T6464] RBP: 00007f0bb5e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 109.744719][ T6464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.744731][ T6464] R13: 00007f0bb6026038 R14: 00007f0bb6025fa0 R15: 00007ffd9b41f998 [ 109.753799][ T6464] [ 109.898605][ T27] audit: type=1804 audit(1793831345.420:3): pid=6464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.0.95" name="/newroot/33/file0/file1" dev="loop0" ino=260 res=0 errno=0 [ 109.938272][ T6511] loop2: detected capacity change from 0 to 128 [ 110.086697][ T5785] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 110.222008][ T6510] FAULT_INJECTION: forcing a failure. [ 110.222008][ T6510] name failslab, interval 1, probability 5, space 0, times 97 [ 110.305523][ T6510] CPU: 1 PID: 6510 Comm: syz.2.103 Not tainted syzkaller #0 [ 110.312898][ T6510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 110.322979][ T6510] Call Trace: [ 110.326264][ T6510] [ 110.326276][ T6510] dump_stack_lvl+0x18c/0x250 [ 110.333872][ T6510] ? show_regs_print_info+0x20/0x20 [ 110.339072][ T6510] ? load_image+0x420/0x420 [ 110.339096][ T6510] ? __might_sleep+0xe0/0xe0 [ 110.339118][ T6510] ? __lock_acquire+0x7eb0/0x7eb0 [ 110.339142][ T6510] should_fail_ex+0x394/0x4c0 [ 110.339168][ T6510] should_failslab+0x9/0x20 [ 110.339184][ T6510] slab_pre_alloc_hook+0x59/0x300 [ 110.339214][ T6510] kmem_cache_alloc+0x5a/0x2d0 [ 110.339231][ T6510] ? vm_area_dup+0x27/0x270 [ 110.348305][ T6510] vm_area_dup+0x27/0x270 [ 110.348332][ T6510] copy_vma+0x4ff/0x9c0 [ 110.348368][ T6510] ? vma_link+0x530/0x530 [ 110.358045][ T6510] move_vma+0x7d4/0x1940 [ 110.358081][ T6510] ? vma_expandable+0xf0/0xf0 [ 110.398617][ T6510] ? arch_get_unmapped_area+0x7c0/0x7c0 [ 110.404215][ T6510] ? bpf_lsm_mmap_addr+0x9/0x10 [ 110.409099][ T6510] ? security_mmap_addr+0x72/0x90 [ 110.414151][ T6510] ? get_unmapped_area+0x2f9/0x360 [ 110.419311][ T6510] mremap_to+0x51f/0x5d0 [ 110.423589][ T6510] __se_sys_mremap+0x6a8/0x11a0 [ 110.428465][ T6510] ? __x64_sys_mremap+0xc0/0xc0 [ 110.433330][ T6510] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 110.439320][ T6510] ? lock_chain_count+0x20/0x20 [ 110.444182][ T6510] ? lockdep_hardirqs_on+0x98/0x150 [ 110.449376][ T6510] ? __x64_sys_mremap+0x20/0xc0 [ 110.454229][ T6510] do_syscall_64+0x55/0xb0 [ 110.458646][ T6510] ? clear_bhb_loop+0x40/0x90 [ 110.463322][ T6510] ? clear_bhb_loop+0x40/0x90 [ 110.468001][ T6510] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.473890][ T6510] RIP: 0033:0x7f197c39fb19 [ 110.478303][ T6510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.497907][ T6510] RSP: 002b:00007f197d2ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 110.506359][ T6510] RAX: ffffffffffffffda RBX: 00007f197c625fa0 RCX: 00007f197c39fb19 [ 110.514350][ T6510] RDX: 0000000000600000 RSI: 0000000000003000 RDI: 0000200000064000 [ 110.522327][ T6510] RBP: 00007f197c437b70 R08: 0000200000a00000 R09: 0000000000000000 [ 110.530303][ T6510] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 110.538283][ T6510] R13: 00007f197c626038 R14: 00007f197c625fa0 R15: 00007fff574f9f28 [ 110.546266][ T6510] [ 111.371614][ T6538] fuse: Invalid rootmode [ 111.398461][ T6538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.110'. [ 111.409184][ T6521] loop4: detected capacity change from 0 to 32768 [ 111.434732][ T6521] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.106 (6521) [ 111.498195][ T6521] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.507072][ T6543] netlink: 'syz.1.111': attribute type 2 has an invalid length. [ 111.519240][ T6521] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 111.528247][ T6521] BTRFS info (device loop4): using free space tree [ 111.638343][ T6521] BTRFS info (device loop4): enabling ssd optimizations [ 111.645624][ T6521] BTRFS info (device loop4): auto enabling async discard [ 111.805078][ T6521] No source specified [ 111.816540][ T6521] FAULT_INJECTION: forcing a failure. [ 111.816540][ T6521] name failslab, interval 1, probability 5, space 0, times 95 [ 111.829744][ T6521] CPU: 0 PID: 6521 Comm: syz.4.106 Not tainted syzkaller #0 [ 111.837063][ T6521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 111.847137][ T6521] Call Trace: [ 111.850414][ T6521] [ 111.853341][ T6521] dump_stack_lvl+0x18c/0x250 [ 111.858029][ T6521] ? show_regs_print_info+0x20/0x20 [ 111.863233][ T6521] ? load_image+0x420/0x420 [ 111.867738][ T6521] ? __might_sleep+0xe0/0xe0 [ 111.872329][ T6521] ? __lock_acquire+0x7eb0/0x7eb0 [ 111.877350][ T6521] ? __set_extent_bit+0x17ab/0x1f20 [ 111.882544][ T6521] should_fail_ex+0x394/0x4c0 [ 111.887223][ T6521] should_failslab+0x9/0x20 [ 111.891720][ T6521] slab_pre_alloc_hook+0x59/0x300 [ 111.896736][ T6521] ? do_raw_spin_unlock+0x121/0x230 [ 111.901935][ T6521] kmem_cache_alloc+0x5a/0x2d0 [ 111.906693][ T6521] ? alloc_extent_state+0x22/0x2b0 [ 111.911798][ T6521] alloc_extent_state+0x22/0x2b0 [ 111.916730][ T6521] __clear_extent_bit+0x238/0xf00 [ 111.921756][ T6521] ? free_extent_state+0x2b0/0x2b0 [ 111.926866][ T6521] btrfs_reset_extent_delalloc+0x39d/0x470 [ 111.932671][ T6521] btrfs_dirty_pages+0x152/0x2b0 [ 111.937614][ T6521] btrfs_buffered_write+0x9fb/0x1110 [ 111.942906][ T6521] ? btrfs_buffered_write+0x800/0x1110 [ 111.948370][ T6521] ? btrfs_do_write_iter+0x11c0/0x11c0 [ 111.953835][ T6521] btrfs_do_write_iter+0x25a/0x11c0 [ 111.959042][ T6521] ? btrfs_check_nocow_unlock+0x40/0x40 [ 111.964609][ T6521] vfs_write+0x474/0x9a0 [ 111.968862][ T6521] ? file_end_write+0x250/0x250 [ 111.973712][ T6521] ? __fget_files+0x3fc/0x460 [ 111.978392][ T6521] ? __fdget_pos+0x2a3/0x330 [ 111.982976][ T6521] ? ksys_write+0x74/0x260 [ 111.987393][ T6521] ksys_write+0x151/0x260 [ 111.991720][ T6521] ? __ia32_sys_read+0x90/0x90 [ 111.996486][ T6521] ? lockdep_hardirqs_on+0x98/0x150 [ 112.001678][ T6521] do_syscall_64+0x55/0xb0 [ 112.006092][ T6521] ? clear_bhb_loop+0x40/0x90 [ 112.010764][ T6521] ? clear_bhb_loop+0x40/0x90 [ 112.015437][ T6521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.021326][ T6521] RIP: 0033:0x7f3f8739fb19 [ 112.025735][ T6521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.045367][ T6521] RSP: 002b:00007f3f88282028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 112.053782][ T6521] RAX: ffffffffffffffda RBX: 00007f3f87625fa0 RCX: 00007f3f8739fb19 [ 112.061764][ T6521] RDX: 00000000fffffdef RSI: 000020000000d040 RDI: 000000000000000a [ 112.069735][ T6521] RBP: 00007f3f87437b70 R08: 0000000000000000 R09: 0000000000000000 [ 112.077708][ T6521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.085675][ T6521] R13: 00007f3f87626038 R14: 00007f3f87625fa0 R15: 00007ffc23f59368 [ 112.093655][ T6521] [ 112.133322][ C0] net_ratelimit: 43 callbacks suppressed [ 112.256852][ T6521] FAULT_INJECTION: forcing a failure. [ 112.256852][ T6521] name failslab, interval 1, probability 5, space 0, times 93 [ 112.270705][ T6521] CPU: 0 PID: 6521 Comm: syz.4.106 Not tainted syzkaller #0 [ 112.278004][ T6521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 112.278051][ T6521] Call Trace: [ 112.278061][ T6521] [ 112.278069][ T6521] dump_stack_lvl+0x18c/0x250 [ 112.278103][ T6521] ? show_regs_print_info+0x20/0x20 [ 112.291412][ T6521] ? load_image+0x420/0x420 [ 112.298985][ T6521] ? __might_sleep+0xe0/0xe0 [ 112.299013][ T6521] ? __lock_acquire+0x7eb0/0x7eb0 [ 112.308672][ T6521] should_fail_ex+0x394/0x4c0 [ 112.308704][ T6521] should_failslab+0x9/0x20 [ 112.308721][ T6521] slab_pre_alloc_hook+0x59/0x300 [ 112.318287][ T6521] kmem_cache_alloc+0x5a/0x2d0 [ 112.318305][ T6521] ? alloc_extent_state+0x22/0x2b0 [ 112.318331][ T6521] alloc_extent_state+0x22/0x2b0 [ 112.347271][ T6521] __set_extent_bit+0x246/0x1f20 [ 112.352214][ T6521] ? __clear_extent_bit+0xc5d/0xf00 [ 112.357416][ T6521] ? free_extent_state+0x2b0/0x2b0 [ 112.362516][ T6521] ? set_extent_bit+0x50/0x50 [ 112.367185][ T6521] ? iov_iter_zero+0x1160/0x1160 [ 112.372119][ T6521] ? lockdep_hardirqs_on+0x98/0x150 [ 112.377320][ T6521] set_extent_bit+0x38/0x50 [ 112.381820][ T6521] btrfs_dirty_pages+0x152/0x2b0 [ 112.386765][ T6521] btrfs_buffered_write+0x9fb/0x1110 [ 112.392056][ T6521] ? btrfs_buffered_write+0x800/0x1110 [ 112.397518][ T6521] ? btrfs_do_write_iter+0x11c0/0x11c0 [ 112.402980][ T6521] btrfs_do_write_iter+0x25a/0x11c0 [ 112.408247][ T6521] ? btrfs_check_nocow_unlock+0x40/0x40 [ 112.413850][ T6521] vfs_write+0x474/0x9a0 [ 112.418115][ T6521] ? file_end_write+0x250/0x250 [ 112.422974][ T6521] ? __fget_files+0x3fc/0x460 [ 112.427656][ T6521] ? __fdget_pos+0x2a3/0x330 [ 112.432242][ T6521] ? ksys_write+0x74/0x260 [ 112.436658][ T6521] ksys_write+0x151/0x260 [ 112.440985][ T6521] ? __ia32_sys_read+0x90/0x90 [ 112.445749][ T6521] ? lockdep_hardirqs_on+0x98/0x150 [ 112.450943][ T6521] do_syscall_64+0x55/0xb0 [ 112.455372][ T6521] ? clear_bhb_loop+0x40/0x90 [ 112.460046][ T6521] ? clear_bhb_loop+0x40/0x90 [ 112.464729][ T6521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.470629][ T6521] RIP: 0033:0x7f3f8739fb19 [ 112.475042][ T6521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.494648][ T6521] RSP: 002b:00007f3f88282028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 112.503074][ T6521] RAX: ffffffffffffffda RBX: 00007f3f87625fa0 RCX: 00007f3f8739fb19 [ 112.511041][ T6521] RDX: 00000000fffffdef RSI: 000020000000d040 RDI: 000000000000000a [ 112.519008][ T6521] RBP: 00007f3f87437b70 R08: 0000000000000000 R09: 0000000000000000 [ 112.526972][ T6521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.534935][ T6521] R13: 00007f3f87626038 R14: 00007f3f87625fa0 R15: 00007ffc23f59368 [ 112.542914][ T6521] [ 112.575840][ T6521] FAULT_INJECTION: forcing a failure. [ 112.575840][ T6521] name failslab, interval 1, probability 5, space 0, times 92 [ 112.588680][ T6521] CPU: 0 PID: 6521 Comm: syz.4.106 Not tainted syzkaller #0 [ 112.595989][ T6521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 112.606068][ T6521] Call Trace: [ 112.609366][ T6521] [ 112.612313][ T6521] dump_stack_lvl+0x18c/0x250 [ 112.617024][ T6521] ? show_regs_print_info+0x20/0x20 [ 112.622233][ T6521] ? load_image+0x420/0x420 [ 112.626742][ T6521] ? __might_sleep+0xe0/0xe0 [ 112.626765][ T6521] ? __lock_acquire+0x7eb0/0x7eb0 [ 112.626785][ T6521] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 112.626811][ T6521] should_fail_ex+0x394/0x4c0 [ 112.626838][ T6521] should_failslab+0x9/0x20 [ 112.626856][ T6521] slab_pre_alloc_hook+0x59/0x300 [ 112.636427][ T6521] kmem_cache_alloc+0x5a/0x2d0 [ 112.636445][ T6521] ? alloc_extent_state+0x22/0x2b0 [ 112.647065][ T6521] alloc_extent_state+0x22/0x2b0 [ 112.647088][ T6521] __set_extent_bit+0x246/0x1f20 [ 112.647108][ T6521] ? folio_put+0xd0/0xd0 [ 112.656612][ T6521] ? filemap_alloc_folio+0xdf/0x490 [ 112.656641][ T6521] ? folio_add_lru+0xce0/0xce0 [ 112.656662][ T6521] ? folio_add_lru+0x323/0xce0 [ 112.656688][ T6521] ? filemap_add_folio+0x190/0x3d0 [ 112.656704][ T6521] ? set_extent_bit+0x50/0x50 [ 112.666770][ T6521] lock_extent+0x60/0x140 [ 112.666802][ T6521] lock_and_cleanup_extent+0xfe/0x660 [ 112.676644][ T6521] btrfs_buffered_write+0x70a/0x1110 [ 112.676685][ T6521] ? btrfs_buffered_write+0x800/0x1110 [ 112.676721][ T6521] ? btrfs_do_write_iter+0x11c0/0x11c0 [ 112.686134][ T6521] btrfs_do_write_iter+0x25a/0x11c0 [ 112.686177][ T6521] ? btrfs_check_nocow_unlock+0x40/0x40 [ 112.695643][ T6521] vfs_write+0x474/0x9a0 [ 112.695677][ T6521] ? file_end_write+0x250/0x250 [ 112.705420][ T6521] ? __fget_files+0x3fc/0x460 [ 112.705457][ T6521] ? __fdget_pos+0x2a3/0x330 [ 112.715135][ T6521] ? ksys_write+0x74/0x260 [ 112.715165][ T6521] ksys_write+0x151/0x260 [ 112.715194][ T6521] ? __ia32_sys_read+0x90/0x90 [ 112.725898][ T6521] ? lockdep_hardirqs_on+0x98/0x150 [ 112.725923][ T6521] do_syscall_64+0x55/0xb0 [ 112.725946][ T6521] ? clear_bhb_loop+0x40/0x90 [ 112.736548][ T6521] ? clear_bhb_loop+0x40/0x90 [ 112.736575][ T6521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.746338][ T6521] RIP: 0033:0x7f3f8739fb19 [ 112.746359][ T6521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.746374][ T6521] RSP: 002b:00007f3f88282028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 112.755872][ T6521] RAX: ffffffffffffffda RBX: 00007f3f87625fa0 RCX: 00007f3f8739fb19 [ 112.755888][ T6521] RDX: 00000000fffffdef RSI: 000020000000d040 RDI: 000000000000000a [ 112.755901][ T6521] RBP: 00007f3f87437b70 R08: 0000000000000000 R09: 0000000000000000 [ 112.764857][ T6521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.764871][ T6521] R13: 00007f3f87626038 R14: 00007f3f87625fa0 R15: 00007ffc23f59368 [ 112.764901][ T6521] [ 112.882279][ T6521] FAULT_INJECTION: forcing a failure. [ 112.882279][ T6521] name failslab, interval 1, probability 5, space 0, times 91 [ 112.895073][ T6521] CPU: 0 PID: 6521 Comm: syz.4.106 Not tainted syzkaller #0 [ 112.902376][ T6521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 112.912447][ T6521] Call Trace: [ 112.915742][ T6521] [ 112.918686][ T6521] dump_stack_lvl+0x18c/0x250 [ 112.923378][ T6521] ? show_regs_print_info+0x20/0x20 [ 112.928579][ T6521] ? load_image+0x420/0x420 [ 112.928604][ T6521] ? __might_sleep+0xe0/0xe0 [ 112.928627][ T6521] ? __lock_acquire+0x7eb0/0x7eb0 [ 112.937687][ T6521] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 112.937714][ T6521] should_fail_ex+0x394/0x4c0 [ 112.948678][ T6521] should_failslab+0x9/0x20 [ 112.948697][ T6521] slab_pre_alloc_hook+0x59/0x300 [ 112.957843][ T6521] kmem_cache_alloc+0x5a/0x2d0 [ 112.957863][ T6521] ? alloc_extent_state+0x22/0x2b0 [ 112.957888][ T6521] alloc_extent_state+0x22/0x2b0 [ 112.957910][ T6521] __set_extent_bit+0x246/0x1f20 [ 112.967976][ T6521] ? folio_put+0xd0/0xd0 [ 112.967995][ T6521] ? filemap_alloc_folio+0xdf/0x490 [ 112.968020][ T6521] ? folio_add_lru+0xce0/0xce0 [ 112.978008][ T6521] ? folio_add_lru+0x323/0xce0 [ 112.978034][ T6521] ? filemap_add_folio+0x190/0x3d0 [ 112.978053][ T6521] ? set_extent_bit+0x50/0x50 [ 112.978084][ T6521] lock_extent+0x60/0x140 [ 112.987220][ T6521] lock_and_cleanup_extent+0xfe/0x660 [ 112.987255][ T6521] btrfs_buffered_write+0x70a/0x1110 [ 112.997175][ T6521] ? btrfs_buffered_write+0x800/0x1110 [ 113.032264][ T6521] ? btrfs_do_write_iter+0x11c0/0x11c0 [ 113.037770][ T6521] btrfs_do_write_iter+0x25a/0x11c0 [ 113.043011][ T6521] ? btrfs_check_nocow_unlock+0x40/0x40 [ 113.048599][ T6521] vfs_write+0x474/0x9a0 [ 113.052876][ T6521] ? file_end_write+0x250/0x250 [ 113.057739][ T6521] ? __fget_files+0x3fc/0x460 [ 113.062451][ T6521] ? __fdget_pos+0x2a3/0x330 [ 113.067059][ T6521] ? ksys_write+0x74/0x260 [ 113.071488][ T6521] ksys_write+0x151/0x260 [ 113.075834][ T6521] ? __ia32_sys_read+0x90/0x90 [ 113.075864][ T6521] ? lockdep_hardirqs_on+0x98/0x150 [ 113.075887][ T6521] do_syscall_64+0x55/0xb0 [ 113.075910][ T6521] ? clear_bhb_loop+0x40/0x90 [ 113.075935][ T6521] ? clear_bhb_loop+0x40/0x90 [ 113.085854][ T6521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.085880][ T6521] RIP: 0033:0x7f3f8739fb19 [ 113.094940][ T6521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.094957][ T6521] RSP: 002b:00007f3f88282028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 113.105488][ T6521] RAX: ffffffffffffffda RBX: 00007f3f87625fa0 RCX: 00007f3f8739fb19 [ 113.105508][ T6521] RDX: 00000000fffffdef RSI: 000020000000d040 RDI: 000000000000000a [ 113.105521][ T6521] RBP: 00007f3f87437b70 R08: 0000000000000000 R09: 0000000000000000 [ 113.105534][ T6521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.129540][ T6521] R13: 00007f3f87626038 R14: 00007f3f87625fa0 R15: 00007ffc23f59368 [ 113.129572][ T6521] [ 113.192982][ T6521] FAULT_INJECTION: forcing a failure. [ 113.192982][ T6521] name failslab, interval 1, probability 5, space 0, times 90 [ 113.205804][ T6521] CPU: 0 PID: 6521 Comm: syz.4.106 Not tainted syzkaller #0 [ 113.213105][ T6521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 113.223182][ T6521] Call Trace: [ 113.223193][ T6521] [ 113.223203][ T6521] dump_stack_lvl+0x18c/0x250 [ 113.229397][ T6521] ? show_regs_print_info+0x20/0x20 [ 113.239234][ T6521] ? load_image+0x420/0x420 [ 113.239267][ T6521] ? __might_sleep+0xe0/0xe0 [ 113.239293][ T6521] ? __lock_acquire+0x7eb0/0x7eb0 [ 113.239319][ T6521] should_fail_ex+0x394/0x4c0 [ 113.239346][ T6521] should_failslab+0x9/0x20 [ 113.248418][ T6521] slab_pre_alloc_hook+0x59/0x300 [ 113.258088][ T6521] kmem_cache_alloc+0x5a/0x2d0 [ 113.258110][ T6521] ? alloc_extent_state+0x22/0x2b0 [ 113.277895][ T6521] alloc_extent_state+0x22/0x2b0 [ 113.282870][ T6521] __clear_extent_bit+0x238/0xf00 [ 113.287914][ T6521] ? filemap_dirty_folio+0x169/0x340 [ 113.287945][ T6521] ? free_extent_state+0x2b0/0x2b0 [ 113.287965][ T6521] ? btrfs_dirty_pages+0x22c/0x2b0 [ 113.287996][ T6521] btrfs_buffered_write+0xa2a/0x1110 [ 113.288035][ T6521] ? btrfs_buffered_write+0x800/0x1110 [ 113.288071][ T6521] ? btrfs_do_write_iter+0x11c0/0x11c0 [ 113.288109][ T6521] btrfs_do_write_iter+0x25a/0x11c0 [ 113.288150][ T6521] ? btrfs_check_nocow_unlock+0x40/0x40 [ 113.288186][ T6521] vfs_write+0x474/0x9a0 [ 113.288220][ T6521] ? file_end_write+0x250/0x250 [ 113.288251][ T6521] ? __fget_files+0x3fc/0x460 [ 113.288286][ T6521] ? __fdget_pos+0x2a3/0x330 [ 113.288310][ T6521] ? ksys_write+0x74/0x260 [ 113.288339][ T6521] ksys_write+0x151/0x260 [ 113.288368][ T6521] ? __ia32_sys_read+0x90/0x90 [ 113.288395][ T6521] ? lockdep_hardirqs_on+0x98/0x150 [ 113.288414][ T6521] do_syscall_64+0x55/0xb0 [ 113.288435][ T6521] ? clear_bhb_loop+0x40/0x90 [ 113.288457][ T6521] ? clear_bhb_loop+0x40/0x90 [ 113.288482][ T6521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.288506][ T6521] RIP: 0033:0x7f3f8739fb19 [ 113.288525][ T6521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.288541][ T6521] RSP: 002b:00007f3f88282028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 113.288564][ T6521] RAX: ffffffffffffffda RBX: 00007f3f87625fa0 RCX: 00007f3f8739fb19 [ 113.288579][ T6521] RDX: 00000000fffffdef RSI: 000020000000d040 RDI: 000000000000000a [ 113.288593][ T6521] RBP: 00007f3f87437b70 R08: 0000000000000000 R09: 0000000000000000 [ 113.288606][ T6521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.288619][ T6521] R13: 00007f3f87626038 R14: 00007f3f87625fa0 R15: 00007ffc23f59368 [ 113.288651][ T6521] [ 113.302218][ T6521] FAULT_INJECTION: forcing a failure. [ 113.302218][ T6521] name failslab, interval 1, probability 5, space 0, times 89 [ 113.310144][ T6521] CPU: 0 PID: 6521 Comm: syz.4.106 Not tainted syzkaller #0 [ 113.321018][ T6521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 113.321033][ T6521] Call Trace: [ 113.331719][ T6521] [ 113.331729][ T6521] dump_stack_lvl+0x18c/0x250 [ 113.340773][ T6521] ? show_regs_print_info+0x20/0x20 [ 113.340804][ T6521] ? load_image+0x420/0x420 [ 113.350284][ T6521] ? __might_sleep+0xe0/0xe0 [ 113.350313][ T6521] ? __lock_acquire+0x7eb0/0x7eb0 [ 113.350334][ T6521] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 113.359042][ T6521] should_fail_ex+0x394/0x4c0 [ 113.359074][ T6521] should_failslab+0x9/0x20 [ 113.368984][ T6521] slab_pre_alloc_hook+0x59/0x300 [ 113.369009][ T6521] kmem_cache_alloc+0x5a/0x2d0 [ 113.369025][ T6521] ? alloc_extent_state+0x22/0x2b0 [ 113.378084][ T6521] alloc_extent_state+0x22/0x2b0 [ 113.378109][ T6521] __set_extent_bit+0x246/0x1f20 [ 113.388891][ T6521] ? folio_put+0xd0/0xd0 [ 113.388914][ T6521] ? filemap_alloc_folio+0xdf/0x490 [ 113.429291][ T6521] ? folio_add_lru+0xce0/0xce0 [ 113.445223][ T6521] ? folio_add_lru+0x323/0xce0 [ 113.445257][ T6521] ? filemap_add_folio+0x190/0x3d0 [ 113.461389][ T6521] ? set_extent_bit+0x50/0x50 [ 113.477058][ T6521] lock_extent+0x60/0x140 [ 113.477089][ T6521] lock_and_cleanup_extent+0xfe/0x660 [ 113.477122][ T6521] btrfs_buffered_write+0x70a/0x1110 [ 113.515801][ T6521] ? btrfs_buffered_write+0x800/0x1110 [ 113.525395][ T6521] ? btrfs_do_write_iter+0x11c0/0x11c0 [ 113.525438][ T6521] btrfs_do_write_iter+0x25a/0x11c0 [ 113.525474][ T6521] ? btrfs_check_nocow_unlock+0x40/0x40 [ 113.525507][ T6521] vfs_write+0x474/0x9a0 [ 113.550475][ T6521] ? file_end_write+0x250/0x250 [ 113.560501][ T6521] ? __fget_files+0x3fc/0x460 [ 113.574847][ T6521] ? __fdget_pos+0x2a3/0x330 [ 113.574877][ T6521] ? ksys_write+0x74/0x260 [ 113.574905][ T6521] ksys_write+0x151/0x260 [ 113.579859][ T6521] ? __ia32_sys_read+0x90/0x90 [ 113.579894][ T6521] ? lockdep_hardirqs_on+0x98/0x150 [ 113.584740][ T6521] do_syscall_64+0x55/0xb0 [ 113.594498][ T6521] ? clear_bhb_loop+0x40/0x90 [ 113.604172][ T6521] ? clear_bhb_loop+0x40/0x90 [ 113.625548][ T6521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.625580][ T6521] RIP: 0033:0x7f3f8739fb19 [ 113.625598][ T6521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.645223][ T6521] RSP: 002b:00007f3f88282028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 113.645247][ T6521] RAX: ffffffffffffffda RBX: 00007f3f87625fa0 RCX: 00007f3f8739fb19 [ 113.645261][ T6521] RDX: 00000000fffffdef RSI: 000020000000d040 RDI: 000000000000000a [ 113.645274][ T6521] RBP: 00007f3f87437b70 R08: 0000000000000000 R09: 0000000000000000 [ 113.654268][ T6521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.663325][ T6521] R13: 00007f3f87626038 R14: 00007f3f87625fa0 R15: 00007ffc23f59368 [ 113.663362][ T6521] [ 113.677716][ T6521] FAULT_INJECTION: forcing a failure. [ 113.677716][ T6521] name failslab, interval 1, probability 5, space 0, times 88 [ 113.688303][ T6521] CPU: 0 PID: 6521 Comm: syz.4.106 Not tainted syzkaller #0 [ 113.712286][ T6521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 113.712299][ T6521] Call Trace: [ 113.712308][ T6521] [ 113.712318][ T6521] dump_stack_lvl+0x18c/0x250 [ 113.728674][ T6521] ? show_regs_print_info+0x20/0x20 [ 113.728702][ T6521] ? load_image+0x420/0x420 [ 113.744607][ T6521] ? __might_sleep+0xe0/0xe0 [ 113.744635][ T6521] ? __lock_acquire+0x7eb0/0x7eb0 [ 113.776266][ T6521] should_fail_ex+0x394/0x4c0 [ 113.814166][ T6521] should_failslab+0x9/0x20 [ 113.814192][ T6521] slab_pre_alloc_hook+0x59/0x300 [ 113.824065][ T6521] kmem_cache_alloc+0x5a/0x2d0 [ 113.833375][ T6521] ? alloc_extent_state+0x22/0x2b0 [ 113.843133][ T6521] alloc_extent_state+0x22/0x2b0 [ 113.853694][ T6521] __set_extent_bit+0x246/0x1f20 [ 113.858637][ T6521] ? __clear_extent_bit+0xc5d/0xf00 [ 113.863870][ T6521] ? free_extent_state+0x2b0/0x2b0 [ 113.868989][ T6521] ? set_extent_bit+0x50/0x50 [ 113.873667][ T6521] ? iov_iter_zero+0x1160/0x1160 [ 113.873690][ T6521] ? lockdep_hardirqs_on+0x98/0x150 [ 113.873718][ T6521] set_extent_bit+0x38/0x50 [ 113.888794][ T6521] btrfs_dirty_pages+0x152/0x2b0 [ 113.893775][ T6521] btrfs_buffered_write+0x9fb/0x1110 [ 113.899109][ T6521] ? btrfs_buffered_write+0x800/0x1110 [ 113.904609][ T6521] ? btrfs_do_write_iter+0x11c0/0x11c0 [ 113.910113][ T6521] btrfs_do_write_iter+0x25a/0x11c0 [ 113.915358][ T6521] ? btrfs_check_nocow_unlock+0x40/0x40 [ 113.920940][ T6521] vfs_write+0x474/0x9a0 [ 113.925220][ T6521] ? file_end_write+0x250/0x250 [ 113.930105][ T6521] ? __fget_files+0x3fc/0x460 [ 113.934820][ T6521] ? __fdget_pos+0x2a3/0x330 [ 113.939438][ T6521] ? ksys_write+0x74/0x260 [ 113.943870][ T6521] ksys_write+0x151/0x260 [ 113.948235][ T6521] ? __ia32_sys_read+0x90/0x90 [ 113.953032][ T6521] ? lockdep_hardirqs_on+0x98/0x150 [ 113.958232][ T6521] do_syscall_64+0x55/0xb0 [ 113.958258][ T6521] ? clear_bhb_loop+0x40/0x90 [ 113.967358][ T6521] ? clear_bhb_loop+0x40/0x90 [ 113.972048][ T6521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.972076][ T6521] RIP: 0033:0x7f3f8739fb19 [ 113.972095][ T6521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.982390][ T6521] RSP: 002b:00007f3f88282028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 114.010447][ T6521] RAX: ffffffffffffffda RBX: 00007f3f87625fa0 RCX: 00007f3f8739fb19 [ 114.018445][ T6521] RDX: 00000000fffffdef RSI: 000020000000d040 RDI: 000000000000000a [ 114.026435][ T6521] RBP: 00007f3f87437b70 R08: 0000000000000000 R09: 0000000000000000 [ 114.034468][ T6521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.042445][ T6521] R13: 00007f3f87626038 R14: 00007f3f87625fa0 R15: 00007ffc23f59368 [ 114.042479][ T6521] [ 114.053497][ C0] sched: RT throttling activated [ 114.059428][ T6521] FAULT_INJECTION: forcing a failure. [ 114.059428][ T6521] name failslab, interval 1, probability 5, space 0, times 87 [ 114.072733][ T6521] CPU: 0 PID: 6521 Comm: syz.4.106 Not tainted syzkaller #0 [ 114.080024][ T6521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 114.080039][ T6521] Call Trace: [ 114.093382][ T6521] [ 114.096338][ T6521] dump_stack_lvl+0x18c/0x250 [ 114.101050][ T6521] ? show_regs_print_info+0x20/0x20 [ 114.106275][ T6521] ? load_image+0x420/0x420 [ 114.110810][ T6521] ? __might_sleep+0xe0/0xe0 [ 114.115437][ T6521] ? __lock_acquire+0x7eb0/0x7eb0 [ 114.120491][ T6521] should_fail_ex+0x394/0x4c0 [ 114.125196][ T6521] should_failslab+0x9/0x20 [ 114.129725][ T6521] slab_pre_alloc_hook+0x59/0x300 [ 114.134787][ T6521] kmem_cache_alloc+0x5a/0x2d0 [ 114.139560][ T6521] ? alloc_extent_state+0x22/0x2b0 [ 114.139592][ T6521] alloc_extent_state+0x22/0x2b0 [ 114.139617][ T6521] __set_extent_bit+0x246/0x1f20 [ 114.149612][ T6521] ? __clear_extent_bit+0xc5d/0xf00 [ 114.159719][ T6521] ? free_extent_state+0x2b0/0x2b0 [ 114.159742][ T6521] ? set_extent_bit+0x50/0x50 [ 114.159762][ T6521] ? iov_iter_zero+0x1160/0x1160 [ 114.169501][ T6521] ? lockdep_hardirqs_on+0x98/0x150 [ 114.179609][ T6521] set_extent_bit+0x38/0x50 [ 114.179637][ T6521] btrfs_dirty_pages+0x152/0x2b0 [ 114.189108][ T6521] btrfs_buffered_write+0x9fb/0x1110 [ 114.194443][ T6521] ? btrfs_buffered_write+0x800/0x1110 [ 114.199944][ T6521] ? btrfs_do_write_iter+0x11c0/0x11c0 [ 114.205428][ T6521] btrfs_do_write_iter+0x25a/0x11c0 [ 114.210646][ T6521] ? btrfs_check_nocow_unlock+0x40/0x40 [ 114.210685][ T6521] vfs_write+0x474/0x9a0 [ 114.210717][ T6521] ? file_end_write+0x250/0x250 [ 114.210746][ T6521] ? __fget_files+0x3fc/0x460 [ 114.210781][ T6521] ? __fdget_pos+0x2a3/0x330 [ 114.210803][ T6521] ? ksys_write+0x74/0x260 [ 114.210839][ T6521] ksys_write+0x151/0x260 [ 114.210867][ T6521] ? __ia32_sys_read+0x90/0x90 [ 114.210899][ T6521] ? lockdep_hardirqs_on+0x98/0x150 [ 114.210923][ T6521] do_syscall_64+0x55/0xb0 [ 114.210946][ T6521] ? clear_bhb_loop+0x40/0x90 [ 114.210970][ T6521] ? clear_bhb_loop+0x40/0x90 [ 114.210998][ T6521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.211021][ T6521] RIP: 0033:0x7f3f8739fb19 [ 114.211041][ T6521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.211057][ T6521] RSP: 002b:00007f3f88282028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 114.211080][ T6521] RAX: ffffffffffffffda RBX: 00007f3f87625fa0 RCX: 00007f3f8739fb19 [ 114.211095][ T6521] RDX: 00000000fffffdef RSI: 000020000000d040 RDI: 000000000000000a [ 114.211109][ T6521] RBP: 00007f3f87437b70 R08: 0000000000000000 R09: 0000000000000000 [ 114.211122][ T6521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.211136][ T6521] R13: 00007f3f87626038 R14: 00007f3f87625fa0 R15: 00007ffc23f59368 [ 114.211164][ T6521] [ 114.226825][ T6521] FAULT_INJECTION: forcing a failure. [ 114.226825][ T6521] name failslab, interval 1, probability 5, space 0, times 86 [ 114.298217][ T6521] CPU: 0 PID: 6521 Comm: syz.4.106 Not tainted syzkaller #0 [ 114.322497][ T6521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 114.379522][ T6521] Call Trace: [ 114.382831][ T6521] [ 114.385786][ T6521] dump_stack_lvl+0x18c/0x250 [ 114.390488][ T6521] ? show_regs_print_info+0x20/0x20 [ 114.395721][ T6521] ? load_image+0x420/0x420 [ 114.400265][ T6521] ? __might_sleep+0xe0/0xe0 [ 114.404884][ T6521] ? __lock_acquire+0x7eb0/0x7eb0 [ 114.409930][ T6521] should_fail_ex+0x394/0x4c0 [ 114.414628][ T6521] should_failslab+0x9/0x20 [ 114.419136][ T6521] slab_pre_alloc_hook+0x59/0x300 [ 114.424160][ T6521] kmem_cache_alloc+0x5a/0x2d0 [ 114.428920][ T6521] ? alloc_extent_state+0x22/0x2b0 [ 114.434043][ T6521] alloc_extent_state+0x22/0x2b0 [ 114.438977][ T6521] __clear_extent_bit+0x238/0xf00 [ 114.444003][ T6521] ? free_extent_state+0x2b0/0x2b0 [ 114.449104][ T6521] ? iov_iter_zero+0x1160/0x1160 [ 114.454036][ T6521] ? lockdep_hardirqs_on+0x98/0x150 [ 114.459231][ T6521] btrfs_reset_extent_delalloc+0x39d/0x470 [ 114.465040][ T6521] btrfs_dirty_pages+0x152/0x2b0 [ 114.469978][ T6521] btrfs_buffered_write+0x9fb/0x1110 [ 114.475271][ T6521] ? btrfs_buffered_write+0x800/0x1110 [ 114.480733][ T6521] ? btrfs_do_write_iter+0x11c0/0x11c0 [ 114.486202][ T6521] btrfs_do_write_iter+0x25a/0x11c0 [ 114.491407][ T6521] ? btrfs_check_nocow_unlock+0x40/0x40 [ 114.496956][ T6521] vfs_write+0x474/0x9a0 [ 114.501202][ T6521] ? file_end_write+0x250/0x250 [ 114.506053][ T6521] ? __fget_files+0x3fc/0x460 [ 114.510733][ T6521] ? __fdget_pos+0x2a3/0x330 [ 114.515322][ T6521] ? ksys_write+0x74/0x260 [ 114.519742][ T6521] ksys_write+0x151/0x260 [ 114.524076][ T6521] ? __ia32_sys_read+0x90/0x90 [ 114.528844][ T6521] ? lockdep_hardirqs_on+0x98/0x150 [ 114.534037][ T6521] do_syscall_64+0x55/0xb0 [ 114.538466][ T6521] ? clear_bhb_loop+0x40/0x90 [ 114.543138][ T6521] ? clear_bhb_loop+0x40/0x90 [ 114.547815][ T6521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.553702][ T6521] RIP: 0033:0x7f3f8739fb19 [ 114.558111][ T6521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.577711][ T6521] RSP: 002b:00007f3f88282028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 114.586128][ T6521] RAX: ffffffffffffffda RBX: 00007f3f87625fa0 RCX: 00007f3f8739fb19 [ 114.594090][ T6521] RDX: 00000000fffffdef RSI: 000020000000d040 RDI: 000000000000000a [ 114.602051][ T6521] RBP: 00007f3f87437b70 R08: 0000000000000000 R09: 0000000000000000 [ 114.610013][ T6521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.610033][ T6521] R13: 00007f3f87626038 R14: 00007f3f87625fa0 R15: 00007ffc23f59368 [ 114.610066][ T6521] [ 114.887985][ T6578] loop1: detected capacity change from 0 to 128 [ 115.357393][ T6010] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.900923][ T6607] netlink: 'syz.0.123': attribute type 2 has an invalid length. [ 115.997374][ T6610] netlink: 'syz.4.116': attribute type 2 has an invalid length. [ 116.755836][ T6628] syzkaller0: entered promiscuous mode [ 116.772706][ T6613] loop2: detected capacity change from 0 to 32768 [ 116.782867][ T6628] syzkaller0: entered allmulticast mode [ 116.796430][ T6613] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.124 (6613) [ 116.922124][ T6613] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.943790][ T6613] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 116.965882][ T6613] BTRFS info (device loop2): using free space tree [ 117.040652][ T6631] loop4: detected capacity change from 0 to 2048 [ 117.144729][ T6631] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.233399][ T6613] BTRFS info (device loop2): enabling ssd optimizations [ 117.266891][ T6613] BTRFS info (device loop2): auto enabling async discard [ 117.449619][ T6613] FAULT_INJECTION: forcing a failure. [ 117.449619][ T6613] name failslab, interval 1, probability 5, space 0, times 84 [ 117.520789][ T6613] CPU: 0 PID: 6613 Comm: syz.2.124 Not tainted syzkaller #0 [ 117.528139][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 117.538220][ T6613] Call Trace: [ 117.541502][ T6613] [ 117.541520][ T6613] dump_stack_lvl+0x18c/0x250 [ 117.549135][ T6613] ? show_regs_print_info+0x20/0x20 [ 117.554344][ T6613] ? load_image+0x420/0x420 [ 117.558877][ T6613] ? __might_sleep+0xe0/0xe0 [ 117.563517][ T6613] ? __lock_acquire+0x7eb0/0x7eb0 [ 117.568551][ T6613] should_fail_ex+0x394/0x4c0 [ 117.568581][ T6613] should_failslab+0x9/0x20 [ 117.568598][ T6613] slab_pre_alloc_hook+0x59/0x300 [ 117.568619][ T6613] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 117.573475][ T6613] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 117.573498][ T6613] __kmem_cache_alloc_node+0x53/0x260 [ 117.573529][ T6613] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 117.578358][ C1] net_ratelimit: 41 callbacks suppressed [ 117.583092][ T6613] __kmalloc+0xa7/0x240 [ 117.605733][ T6613] tomoyo_realpath_from_path+0xe6/0x5c0 [ 117.621126][ T6613] ? tomoyo_domain+0xd6/0x120 [ 117.625841][ T6613] tomoyo_path_number_perm+0x248/0x5e0 [ 117.631331][ T6613] ? tomoyo_path_number_perm+0x217/0x5e0 [ 117.636977][ T6613] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 117.642465][ T6613] ? __fget_files+0x28/0x460 [ 117.647074][ T6613] security_file_ioctl+0x70/0xa0 [ 117.652018][ T6613] __se_sys_ioctl+0x48/0x170 [ 117.656610][ T6613] do_syscall_64+0x55/0xb0 [ 117.661025][ T6613] ? clear_bhb_loop+0x40/0x90 [ 117.665698][ T6613] ? clear_bhb_loop+0x40/0x90 [ 117.670397][ T6613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.676380][ T6613] RIP: 0033:0x7f197c39f7ab [ 117.680808][ T6613] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 117.700436][ T6613] RSP: 002b:00007f197d2eddb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.708850][ T6613] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007f197c39f7ab [ 117.716816][ T6613] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 000000000000000a [ 117.724781][ T6613] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 117.732744][ T6613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 117.740707][ T6613] R13: 00007f197d2edee0 R14: 00007f197d2ee6a8 R15: 00007f19721f7000 [ 117.748686][ T6613] [ 117.897323][ T6613] ERROR: Out of memory at tomoyo_realpath_from_path. [ 117.950000][ T6613] No source specified [ 117.956652][ T6613] FAULT_INJECTION: forcing a failure. [ 117.956652][ T6613] name failslab, interval 1, probability 5, space 0, times 83 [ 117.969901][ T6613] CPU: 0 PID: 6613 Comm: syz.2.124 Not tainted syzkaller #0 [ 117.977221][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 117.987305][ T6613] Call Trace: [ 117.990604][ T6613] [ 117.993553][ T6613] dump_stack_lvl+0x18c/0x250 [ 117.998267][ T6613] ? show_regs_print_info+0x20/0x20 [ 118.003501][ T6613] ? load_image+0x420/0x420 [ 118.008012][ T6613] ? __might_sleep+0xe0/0xe0 [ 118.012613][ T6613] ? __lock_acquire+0x7eb0/0x7eb0 [ 118.017642][ T6613] should_fail_ex+0x394/0x4c0 [ 118.022324][ T6613] should_failslab+0x9/0x20 [ 118.026821][ T6613] slab_pre_alloc_hook+0x59/0x300 [ 118.031865][ T6613] ? __write_extent_buffer+0x21c/0x420 [ 118.037329][ T6613] kmem_cache_alloc+0x5a/0x2d0 [ 118.042087][ T6613] ? btrfs_alloc_tree_block+0xa41/0x13b0 [ 118.047722][ T6613] btrfs_alloc_tree_block+0xa41/0x13b0 [ 118.053192][ T6613] ? alloc_reserved_file_extent+0x590/0x590 [ 118.059090][ T6613] ? read_extent_buffer+0x140/0x2e0 [ 118.064296][ T6613] ? __asan_memcpy+0x40/0x70 [ 118.068890][ T6613] btrfs_force_cow_block+0x43e/0x1b70 [ 118.074281][ T6613] ? btrfs_block_can_be_shared+0x340/0x340 [ 118.080093][ T6613] ? rcu_is_watching+0x15/0xb0 [ 118.084858][ T6613] btrfs_cow_block+0x342/0x7f0 [ 118.089635][ T6613] btrfs_search_slot+0xad4/0x27d0 [ 118.094663][ T6613] ? stack_trace_save+0x100/0x100 [ 118.099708][ T6613] ? crc32c+0x13f/0x200 [ 118.103872][ T6613] ? btrfs_find_item+0x500/0x500 [ 118.108825][ T6613] btrfs_insert_empty_items+0xa3/0x190 [ 118.114286][ T6613] insert_with_overflow+0x105/0x370 [ 118.119488][ T6613] ? btrfs_insert_xattr_item+0x3e0/0x3e0 [ 118.125134][ T6613] btrfs_insert_xattr_item+0x1e5/0x3e0 [ 118.130620][ T6613] ? btrfs_subvolume_reserve_metadata+0x280/0x280 [ 118.137040][ T6613] ? slab_post_alloc_hook+0x86/0x4d0 [ 118.142323][ T6613] ? rcu_is_watching+0x15/0xb0 [ 118.147084][ T6613] ? kmem_cache_alloc+0x1a6/0x2d0 [ 118.152117][ T6613] ? btrfs_setxattr+0xfe/0x890 [ 118.156885][ T6613] btrfs_setxattr+0x324/0x890 [ 118.161573][ T6613] btrfs_setxattr_trans+0xfe/0x2a0 [ 118.166682][ T6613] ? btrfs_xattr_handler_get+0x50/0x50 [ 118.172136][ T6613] __vfs_setxattr+0x437/0x470 [ 118.176829][ T6613] __vfs_setxattr_noperm+0x12a/0x5e0 [ 118.182130][ T6613] vfs_setxattr+0x16b/0x2f0 [ 118.186634][ T6613] ? xattr_permission+0x460/0x460 [ 118.191665][ T6613] ? __mnt_want_write+0x223/0x2a0 [ 118.196684][ T6613] ? path_setxattr+0x2ec/0x590 [ 118.201450][ T6613] path_setxattr+0x33a/0x590 [ 118.206047][ T6613] ? simple_xattrs_free+0x150/0x150 [ 118.211296][ T6613] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 118.217284][ T6613] ? lock_chain_count+0x20/0x20 [ 118.222152][ T6613] __x64_sys_setxattr+0xbb/0xd0 [ 118.227008][ T6613] do_syscall_64+0x55/0xb0 [ 118.231423][ T6613] ? clear_bhb_loop+0x40/0x90 [ 118.236102][ T6613] ? clear_bhb_loop+0x40/0x90 [ 118.240779][ T6613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.246670][ T6613] RIP: 0033:0x7f197c39fb19 [ 118.251082][ T6613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.270685][ T6613] RSP: 002b:00007f197d2ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 118.279096][ T6613] RAX: ffffffffffffffda RBX: 00007f197c625fa0 RCX: 00007f197c39fb19 [ 118.287082][ T6613] RDX: 0000000000000000 RSI: 000020000000cfc0 RDI: 000020000000cf80 [ 118.295062][ T6613] RBP: 00007f197c437b70 R08: 0000000000000000 R09: 0000000000000000 [ 118.303034][ T6613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.311041][ T6613] R13: 00007f197c626038 R14: 00007f197c625fa0 R15: 00007fff574f9f28 [ 118.319033][ T6613] [ 118.357324][ T6613] FAULT_INJECTION: forcing a failure. [ 118.357324][ T6613] name failslab, interval 1, probability 5, space 0, times 82 [ 118.370110][ T6613] CPU: 0 PID: 6613 Comm: syz.2.124 Not tainted syzkaller #0 [ 118.377397][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 118.377413][ T6613] Call Trace: [ 118.377421][ T6613] [ 118.377430][ T6613] dump_stack_lvl+0x18c/0x250 [ 118.377468][ T6613] ? show_regs_print_info+0x20/0x20 [ 118.377492][ T6613] ? load_image+0x420/0x420 [ 118.377516][ T6613] ? __might_sleep+0xe0/0xe0 [ 118.387770][ T6613] ? __lock_acquire+0x7eb0/0x7eb0 [ 118.387803][ T6613] should_fail_ex+0x394/0x4c0 [ 118.394290][ T6613] should_failslab+0x9/0x20 [ 118.404255][ T6613] slab_pre_alloc_hook+0x59/0x300 [ 118.413397][ T6613] kmem_cache_alloc+0x5a/0x2d0 [ 118.413423][ T6613] ? alloc_extent_state+0x22/0x2b0 [ 118.423118][ T6613] alloc_extent_state+0x22/0x2b0 [ 118.432640][ T6613] __set_extent_bit+0x246/0x1f20 [ 118.432669][ T6613] ? __clear_extent_bit+0xc5d/0xf00 [ 118.432702][ T6613] ? free_extent_state+0x2b0/0x2b0 [ 118.442518][ T6613] ? set_extent_bit+0x50/0x50 [ 118.452371][ T6613] ? iov_iter_zero+0x1160/0x1160 [ 118.452398][ T6613] ? lockdep_hardirqs_on+0x98/0x150 [ 118.462683][ T6613] set_extent_bit+0x38/0x50 [ 118.472307][ T6613] btrfs_dirty_pages+0x152/0x2b0 [ 118.481999][ T6613] btrfs_buffered_write+0x9fb/0x1110 [ 118.482040][ T6613] ? btrfs_buffered_write+0x800/0x1110 [ 118.487158][ T6613] ? btrfs_do_write_iter+0x11c0/0x11c0 [ 118.487198][ T6613] btrfs_do_write_iter+0x25a/0x11c0 [ 118.492573][ T6613] ? btrfs_check_nocow_unlock+0x40/0x40 [ 118.503461][ T6613] vfs_write+0x474/0x9a0 [ 118.503500][ T6613] ? file_end_write+0x250/0x250 [ 118.518549][ T6613] ? __fget_files+0x3fc/0x460 [ 118.528045][ T6613] ? __fdget_pos+0x2a3/0x330 [ 118.528069][ T6613] ? ksys_write+0x74/0x260 [ 118.528097][ T6613] ksys_write+0x151/0x260 [ 118.528125][ T6613] ? __ia32_sys_read+0x90/0x90 [ 118.528152][ T6613] ? lockdep_hardirqs_on+0x98/0x150 [ 118.528178][ T6613] do_syscall_64+0x55/0xb0 [ 118.528198][ T6613] ? clear_bhb_loop+0x40/0x90 [ 118.528222][ T6613] ? clear_bhb_loop+0x40/0x90 [ 118.541856][ T6613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.556177][ T6613] RIP: 0033:0x7f197c39fb19 [ 118.565578][ T6613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.565596][ T6613] RSP: 002b:00007f197d2ee028 EFLAGS: 00000246 [ 118.575856][ T6613] ORIG_RAX: 0000000000000001 [ 118.575867][ T6613] RAX: ffffffffffffffda RBX: 00007f197c625fa0 RCX: 00007f197c39fb19 [ 118.601515][ T6613] RDX: 00000000fffffdef RSI: 000020000000d040 RDI: 0000000000000009 [ 118.601530][ T6613] RBP: 00007f197c437b70 R08: 0000000000000000 R09: 0000000000000000 [ 118.614130][ T6613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.614145][ T6613] R13: 00007f197c626038 R14: 00007f197c625fa0 R15: 00007fff574f9f28 [ 118.630064][ T6613] [ 118.647469][ T6613] FAULT_INJECTION: forcing a failure. [ 118.647469][ T6613] name failslab, interval 1, probability 5, space 0, times 81 [ 118.661924][ T6613] CPU: 0 PID: 6613 Comm: syz.2.124 Not tainted syzkaller #0 [ 118.669205][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 118.669219][ T6613] Call Trace: [ 118.669228][ T6613] [ 118.682522][ T6613] dump_stack_lvl+0x18c/0x250 [ 118.690102][ T6613] ? show_regs_print_info+0x20/0x20 [ 118.695298][ T6613] ? load_image+0x420/0x420 [ 118.695325][ T6613] ? __might_sleep+0xe0/0xe0 [ 118.704404][ T6613] ? __lock_acquire+0x7eb0/0x7eb0 [ 118.709541][ T6613] should_fail_ex+0x394/0x4c0 [ 118.714243][ T6613] should_failslab+0x9/0x20 [ 118.718744][ T6613] slab_pre_alloc_hook+0x59/0x300 [ 118.723770][ T6613] kmem_cache_alloc+0x5a/0x2d0 [ 118.728526][ T6613] ? alloc_extent_state+0x22/0x2b0 [ 118.728551][ T6613] alloc_extent_state+0x22/0x2b0 [ 118.728574][ T6613] __clear_extent_bit+0x238/0xf00 [ 118.738791][ T6613] ? filemap_dirty_folio+0x169/0x340 [ 118.749152][ T6613] ? free_extent_state+0x2b0/0x2b0 [ 118.749174][ T6613] ? btrfs_dirty_pages+0x22c/0x2b0 [ 118.749203][ T6613] btrfs_buffered_write+0xa2a/0x1110 [ 118.749236][ T6613] ? btrfs_buffered_write+0x800/0x1110 [ 118.749271][ T6613] ? btrfs_do_write_iter+0x11c0/0x11c0 [ 118.749305][ T6613] btrfs_do_write_iter+0x25a/0x11c0 [ 118.749346][ T6613] ? btrfs_check_nocow_unlock+0x40/0x40 [ 118.749381][ T6613] vfs_write+0x474/0x9a0 [ 118.749410][ T6613] ? file_end_write+0x250/0x250 [ 118.754527][ T6613] ? __fget_files+0x3fc/0x460 [ 118.764877][ T6613] ? __fdget_pos+0x2a3/0x330 [ 118.775753][ T6613] ? ksys_write+0x74/0x260 [ 118.786461][ T6613] ksys_write+0x151/0x260 [ 118.786493][ T6613] ? __ia32_sys_read+0x90/0x90 [ 118.795529][ T6613] ? lockdep_hardirqs_on+0x98/0x150 [ 118.804789][ T6613] do_syscall_64+0x55/0xb0 [ 118.818250][ T6613] ? clear_bhb_loop+0x40/0x90 [ 118.827840][ T6613] ? clear_bhb_loop+0x40/0x90 [ 118.827871][ T6613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.827893][ T6613] RIP: 0033:0x7f197c39fb19 [ 118.847729][ T6613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.867335][ T6613] RSP: 002b:00007f197d2ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 118.875772][ T6613] RAX: ffffffffffffffda RBX: 00007f197c625fa0 RCX: 00007f197c39fb19 [ 118.883768][ T6613] RDX: 00000000fffffdef RSI: 000020000000d040 RDI: 0000000000000009 [ 118.891768][ T6613] RBP: 00007f197c437b70 R08: 0000000000000000 R09: 0000000000000000 [ 118.899765][ T6613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.907766][ T6613] R13: 00007f197c626038 R14: 00007f197c625fa0 R15: 00007fff574f9f28 [ 118.915752][ T6613] [ 119.144730][ T6671] netlink: 'syz.1.135': attribute type 2 has an invalid length. [ 119.170014][ T5786] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 119.242679][ T5786] ------------[ cut here ]------------ [ 119.248908][ T5786] WARNING: CPU: 0 PID: 5786 at fs/btrfs/space-info.h:208 btrfs_space_info_update_bytes_may_use+0x2d6/0x5b0 [ 119.260615][ T5786] Modules linked in: [ 119.264598][ T5786] CPU: 0 PID: 5786 Comm: syz-executor Not tainted syzkaller #0 [ 119.272163][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 119.282304][ T5786] RIP: 0010:btrfs_space_info_update_bytes_may_use+0x2d6/0x5b0 [ 119.289888][ T5786] Code: 35 00 00 74 08 4c 89 ff e8 e7 9a 3d fe 4d 8b 27 4c 89 e7 48 8b 6c 24 18 48 89 ee e8 34 94 e4 fd 49 39 ec 73 1a e8 1a 92 e4 fd <0f> 0b 31 db 43 80 7c 35 00 00 0f 85 6d ff ff ff e9 70 ff ff ff e8 [ 119.309728][ T5786] RSP: 0018:ffffc90004407a10 EFLAGS: 00010293 [ 119.315878][ T5786] [ 119.315886][ T5786] RAX: ffffffff83a34c86 RBX: ffffffffffea0000 RCX: ffff88802d711e00 [ 119.315901][ T5786] RDX: 0000000000000000 RSI: 0000000000160000 RDI: 000000000015f000 [ 119.315915][ T5786] RBP: 0000000000160000 R08: ffffffff8f8dda6f R09: 1ffffffff1f1bb4d [ 119.315929][ T5786] R10: dffffc0000000000 R11: fffffbfff1f1bb4e R12: 000000000015f000 [ 119.326280][ T5786] R13: 1ffff110044e8810 R14: dffffc0000000000 R15: ffff888022744080 [ 119.359526][ T5786] FS: 000055557d25d500(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 119.368640][ T5786] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.375295][ T5786] CR2: 0000200000000440 CR3: 000000006209d000 CR4: 00000000003506f0 [ 119.383309][ T5786] Call Trace: [ 119.386729][ T5786] [ 119.389683][ T5786] btrfs_block_rsv_release+0x479/0x550 [ 119.395201][ T5786] btrfs_release_global_block_rsv+0x33/0x260 [ 119.395230][ T5786] btrfs_free_block_groups+0xc04/0xe70 [ 119.395263][ T5786] close_ctree+0x7de/0xcc0 [ 119.406750][ T5786] ? do_raw_spin_unlock+0x121/0x230 [ 119.416340][ T5786] ? __btrfs_handle_fs_error+0x3a0/0x3a0 [ 119.421993][ T5786] ? hook_sb_delete+0xa59/0xba0 [ 119.427430][ T5786] ? init_tree_roots+0x1d50/0x1d50 [ 119.433474][ T5786] ? hook_inode_free_security+0xb0/0xb0 [ 119.439327][ T5786] ? clear_inode+0x140/0x140 [ 119.443957][ T5786] ? btrfs_sync_fs+0x19c/0x670 [ 119.448841][ T5786] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 119.454576][ T5786] ? btrfs_fill_super+0x300/0x300 [ 119.459616][ T5786] generic_shutdown_super+0x134/0x2b0 [ 119.465231][ T5786] kill_anon_super+0x41/0x190 [ 119.469949][ T5786] btrfs_kill_super+0x41/0x50 [ 119.474727][ T5786] deactivate_locked_super+0x9c/0x210 [ 119.480136][ T5786] cleanup_mnt+0x3d7/0x460 [ 119.484652][ T5786] task_work_run+0x1d4/0x260 [ 119.489276][ T5786] ? task_work_cancel+0x220/0x220 [ 119.494342][ T5786] ? exit_to_user_mode_loop+0x3b/0x110 [ 119.499894][ T5786] exit_to_user_mode_loop+0xe6/0x110 [ 119.505270][ T5786] exit_to_user_mode_prepare+0xee/0x180 [ 119.510879][ T5786] syscall_exit_to_user_mode+0x1a/0x50 [ 119.516450][ T5786] do_syscall_64+0x61/0xb0 [ 119.520884][ T5786] ? clear_bhb_loop+0x40/0x90 [ 119.525772][ T5786] ? clear_bhb_loop+0x40/0x90 [ 119.530474][ T5786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 119.537227][ T5786] RIP: 0033:0x7f197c3a0d57 [ 119.541685][ T5786] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 119.561527][ T5786] RSP: 002b:00007fff574f9198 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 119.570046][ T5786] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f197c3a0d57 [ 119.578091][ T5786] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff574f9250 [ 119.586175][ T5786] RBP: 00007fff574f9250 R08: 00007fff574fa250 R09: 00000000ffffffff [ 119.594176][ T5786] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff574fa2e0 [ 119.602321][ T5786] R13: 00007f197c436fb3 R14: 000000000001cef8 R15: 00007fff574fa320 [ 119.610433][ T5786] [ 119.613473][ T5786] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 119.620806][ T5786] CPU: 0 PID: 5786 Comm: syz-executor Not tainted syzkaller #0 [ 119.628363][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 119.638428][ T5786] Call Trace: [ 119.641719][ T5786] [ 119.644661][ T5786] dump_stack_lvl+0x18c/0x250 [ 119.649360][ T5786] ? show_regs_print_info+0x20/0x20 [ 119.654575][ T5786] ? load_image+0x420/0x420 [ 119.659111][ T5786] panic+0x2ca/0x720 [ 119.663026][ T5786] ? bpf_jit_dump+0xd0/0xd0 [ 119.667546][ T5786] __warn+0x2e0/0x470 [ 119.671522][ T5786] ? btrfs_space_info_update_bytes_may_use+0x2d6/0x5b0 [ 119.678368][ T5786] ? btrfs_space_info_update_bytes_may_use+0x2d6/0x5b0 [ 119.685206][ T5786] report_bug+0x2be/0x4f0 [ 119.689528][ T5786] ? btrfs_space_info_update_bytes_may_use+0x2d6/0x5b0 [ 119.696365][ T5786] ? btrfs_space_info_update_bytes_may_use+0x2d6/0x5b0 [ 119.703207][ T5786] ? btrfs_space_info_update_bytes_may_use+0x2d8/0x5b0 [ 119.710042][ T5786] handle_bug+0xcf/0x120 [ 119.714283][ T5786] exc_invalid_op+0x1a/0x50 [ 119.718787][ T5786] asm_exc_invalid_op+0x1a/0x20 [ 119.723634][ T5786] RIP: 0010:btrfs_space_info_update_bytes_may_use+0x2d6/0x5b0 [ 119.731088][ T5786] Code: 35 00 00 74 08 4c 89 ff e8 e7 9a 3d fe 4d 8b 27 4c 89 e7 48 8b 6c 24 18 48 89 ee e8 34 94 e4 fd 49 39 ec 73 1a e8 1a 92 e4 fd <0f> 0b 31 db 43 80 7c 35 00 00 0f 85 6d ff ff ff e9 70 ff ff ff e8 [ 119.750685][ T5786] RSP: 0018:ffffc90004407a10 EFLAGS: 00010293 [ 119.756748][ T5786] RAX: ffffffff83a34c86 RBX: ffffffffffea0000 RCX: ffff88802d711e00 [ 119.764716][ T5786] RDX: 0000000000000000 RSI: 0000000000160000 RDI: 000000000015f000 [ 119.772675][ T5786] RBP: 0000000000160000 R08: ffffffff8f8dda6f R09: 1ffffffff1f1bb4d [ 119.780634][ T5786] R10: dffffc0000000000 R11: fffffbfff1f1bb4e R12: 000000000015f000 [ 119.788594][ T5786] R13: 1ffff110044e8810 R14: dffffc0000000000 R15: ffff888022744080 [ 119.796561][ T5786] ? btrfs_space_info_update_bytes_may_use+0x2d6/0x5b0 [ 119.803414][ T5786] btrfs_block_rsv_release+0x479/0x550 [ 119.808867][ T5786] btrfs_release_global_block_rsv+0x33/0x260 [ 119.814838][ T5786] btrfs_free_block_groups+0xc04/0xe70 [ 119.820296][ T5786] close_ctree+0x7de/0xcc0 [ 119.824705][ T5786] ? do_raw_spin_unlock+0x121/0x230 [ 119.829898][ T5786] ? __btrfs_handle_fs_error+0x3a0/0x3a0 [ 119.835515][ T5786] ? hook_sb_delete+0xa59/0xba0 [ 119.840359][ T5786] ? init_tree_roots+0x1d50/0x1d50 [ 119.845468][ T5786] ? hook_inode_free_security+0xb0/0xb0 [ 119.851011][ T5786] ? clear_inode+0x140/0x140 [ 119.855593][ T5786] ? btrfs_sync_fs+0x19c/0x670 [ 119.860350][ T5786] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 119.865976][ T5786] ? btrfs_fill_super+0x300/0x300 [ 119.870995][ T5786] generic_shutdown_super+0x134/0x2b0 [ 119.876358][ T5786] kill_anon_super+0x41/0x190 [ 119.881025][ T5786] btrfs_kill_super+0x41/0x50 [ 119.885696][ T5786] deactivate_locked_super+0x9c/0x210 [ 119.891060][ T5786] cleanup_mnt+0x3d7/0x460 [ 119.895480][ T5786] task_work_run+0x1d4/0x260 [ 119.900066][ T5786] ? task_work_cancel+0x220/0x220 [ 119.905084][ T5786] ? exit_to_user_mode_loop+0x3b/0x110 [ 119.910539][ T5786] exit_to_user_mode_loop+0xe6/0x110 [ 119.915831][ T5786] exit_to_user_mode_prepare+0xee/0x180 [ 119.921369][ T5786] syscall_exit_to_user_mode+0x1a/0x50 [ 119.926819][ T5786] do_syscall_64+0x61/0xb0 [ 119.931229][ T5786] ? clear_bhb_loop+0x40/0x90 [ 119.935905][ T5786] ? clear_bhb_loop+0x40/0x90 [ 119.940575][ T5786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 119.946459][ T5786] RIP: 0033:0x7f197c3a0d57 [ 119.950866][ T5786] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 119.970462][ T5786] RSP: 002b:00007fff574f9198 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 119.978864][ T5786] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f197c3a0d57 [ 119.986824][ T5786] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff574f9250 [ 119.994780][ T5786] RBP: 00007fff574f9250 R08: 00007fff574fa250 R09: 00000000ffffffff [ 120.002739][ T5786] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff574fa2e0 [ 120.010697][ T5786] R13: 00007f197c436fb3 R14: 000000000001cef8 R15: 00007fff574fa320 [ 120.018670][ T5786] [ 120.021916][ T5786] Kernel Offset: disabled [ 120.026313][ T5786] Rebooting in 86400 seconds..