last executing test programs: 5m4.112840189s ago: executing program 3 (id=1354): r0 = socket$nl_generic(0x10, 0x3, 0x10) read(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x4040080) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$video(&(0x7f0000000140), 0x4, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2008010}, 0x2400c804) 5m1.959570055s ago: executing program 3 (id=1357): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r2 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x2, 0x141102) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000440)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) pselect6(0x0, 0x0, 0x0, &(0x7f0000000540)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x100000000000000}, 0x0, 0x0) 4m59.805347021s ago: executing program 3 (id=1362): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000a40)='./gadget\x00', &(0x7f0000000a80)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000b00)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r1, &(0x7f0000000b80)="010000000705", 0x6) 4m59.617385609s ago: executing program 3 (id=1365): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./dev\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/mtdblock0\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/mtdblock0\x00', 0x8000, 0x0) close(r0) 4m57.435823448s ago: executing program 3 (id=1371): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000000340)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 4m55.680658754s ago: executing program 3 (id=1375): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/172, 0xac, 0x38) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000640), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(0x0, 0x0) write$tun(r3, &(0x7f0000000280)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x3) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) fchdir(r5) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f00000006c0)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) 4m40.105885264s ago: executing program 32 (id=1375): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/172, 0xac, 0x38) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000640), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(0x0, 0x0) write$tun(r3, &(0x7f0000000280)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x3) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) fchdir(r5) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f00000006c0)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) 20.212838025s ago: executing program 4 (id=2037): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) 19.104376086s ago: executing program 4 (id=2040): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x345) r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x6000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) r2 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000001c0)={0x1, 0x0, 0x7, &(0x7f0000000200)={0x0, "f4e1a230b44f44eaa65e405b747aa95df8c02c12eb4eaf00"}}) fallocate(r0, 0x20, 0x7fffffffffffffff, 0x3fff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x200a7a) sched_setscheduler(r3, 0x2, &(0x7f0000000300)=0x4) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000193c0)='net/tcp6\x00') bind$bt_hci(0xffffffffffffffff, 0x0, 0x19a8b62a0f9f6146) mount(0x0, 0x0, 0x0, 0x100054, 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000019400), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000019440)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x6, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2'}, 0x5b) mount(&(0x7f00000194c0)=@filename='mtd0\x00', &(0x7f0000019500)='./file0\x00', &(0x7f0000019540)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000019580)='./file0\x00') creat(&(0x7f00000195c0)='./file0\x00', 0x40) mkdirat(r0, &(0x7f0000019600)='./proc\x00', 0x1ff) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000019640)=@o_path={&(0x7f0000019680)='./file2\x00', 0xffffffffffffffff, 0x4000, r4}, 0x18) 18.302076997s ago: executing program 4 (id=2042): syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="043e1f1b"], 0x22) 17.588139258s ago: executing program 4 (id=2047): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000440)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "69598f", "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"}}, 0x110) 17.499773967s ago: executing program 4 (id=2048): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/52, 0x34, 0x10000) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r1, &(0x7f0000000240)='6', 0x32) fsopen(&(0x7f0000000340)='ufs\x00', 0x1) syz_emit_ethernet(0x4a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x10083, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt\x00', 0x1ff) mount(&(0x7f0000000580)=@filename='./dev/sda1\x00', &(0x7f00000005c0)='./mnt\x00', &(0x7f0000000600)='ext4\x00', 0x8410, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x40086610, &(0x7f0000000680)=@v2={0x2, @aes256, 0x8, '\x00', @c}) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f00000006c0)={0x10, 0x0, "cd6354aaf48bd635ea1ffc70164cafa0"}) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) setrlimit(0x0, 0x0) 17.098104827s ago: executing program 4 (id=2051): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000104feffff7ffedbdf2500000006", @ANYRES32=r4, @ANYBLOB="600000000020000008000300", @ANYRES32=r2], 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10) 12.170088381s ago: executing program 0 (id=2067): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) open(0x0, 0x24842, 0x1a6) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000640), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000680), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000006c0)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./tracing\x00', &(0x7f00000007c0)='tracefs\x00', 0x0, 0x0) syz_emit_ethernet(0xe, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r3, &(0x7f0000000840)='p:s/p ./file0:0', 0xf) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x4, 0x0, &(0x7f0000000380)='GPL\x00', 0x2, 0x95, &(0x7f00000003c0)=""/149}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r4, &(0x7f00000008c0)='1', 0x1) 10.954886373s ago: executing program 0 (id=2068): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0xa, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x5, 0x0, 0x9, 0x7, 0xffffff7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x60}, 0x1, 0x7}, 0x0) 10.412860777s ago: executing program 5 (id=2070): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x345) r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x6000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) r2 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000001c0)={0x1, 0x0, 0x7, &(0x7f0000000200)={0x0, "f4e1a230b44f44eaa65e405b747aa95df8c02c12eb4eaf00"}}) fallocate(r0, 0x20, 0x7fffffffffffffff, 0x3fff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x200a7a) sched_setscheduler(r3, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019380)=0x410000002) syz_open_procfs(0x0, &(0x7f00000193c0)='net/tcp6\x00') bind$bt_hci(0xffffffffffffffff, 0x0, 0x19a8b62a0f9f6146) mount(0x0, 0x0, 0x0, 0x100054, 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000019400), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000019440)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x6, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2'}, 0x5b) mount(&(0x7f00000194c0)=@filename='mtd0\x00', &(0x7f0000019500)='./file0\x00', &(0x7f0000019540)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000019580)='./file0\x00') creat(&(0x7f00000195c0)='./file0\x00', 0x40) mkdirat(r0, &(0x7f0000019600)='./proc\x00', 0x1ff) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000019640)=@o_path={&(0x7f0000019680)='./file2\x00', 0xffffffffffffffff, 0x4000, r4}, 0x18) 10.389656689s ago: executing program 0 (id=2071): sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000005c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x498fe000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000640), 0x0, 0x0) read$msr(r2, &(0x7f0000000680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000019680)=0x7) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42f82, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000400000002000084fdf7ffff0a00"], 0x0, 0x58}, 0x28) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_SUBDINFO(r4, 0x80486402, &(0x7f00000001c0)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) 8.635385225s ago: executing program 1 (id=2073): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/52, 0x34, 0x10000) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r1, &(0x7f0000000240)='6', 0x32) fsopen(&(0x7f0000000340)='ufs\x00', 0x1) syz_emit_ethernet(0x4a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x10083, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt\x00', 0x1ff) mount(&(0x7f0000000580)=@filename='./dev/sda1\x00', &(0x7f00000005c0)='./mnt\x00', &(0x7f0000000600)='ext4\x00', 0x8410, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x40086610, &(0x7f0000000680)=@v2={0x2, @aes256, 0x8, '\x00', @c}) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f00000006c0)={0x10, 0x0, "cd6354aaf48bd635ea1ffc70164cafa0"}) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) setrlimit(0x0, 0x0) 8.495448489s ago: executing program 5 (id=2075): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x800, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x0, 0x4}, 0x9c) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000080), &(0x7f0000000000)="15", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 8.150404263s ago: executing program 5 (id=2077): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x47, &(0x7f0000000200)=0x7) r3 = getpid() syz_pidfd_open(r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000400)={0x2020}, 0x2020) recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x700, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7.145147544s ago: executing program 5 (id=2078): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) open(0x0, 0x24842, 0x1a6) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000640), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000680), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000006c0)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./tracing\x00', &(0x7f00000007c0)='tracefs\x00', 0x0, 0x0) syz_emit_ethernet(0xe, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r3, &(0x7f0000000840)='p:s/p ./file0:0', 0xf) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x4, 0x0, &(0x7f0000000380)='GPL\x00', 0x2, 0x95, &(0x7f00000003c0)=""/149}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r4, &(0x7f00000008c0)='1', 0x1) 6.515737247s ago: executing program 2 (id=2081): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) listen(r0, 0x5) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c90012000e00050017420a008000000200020a0040"], 0x17) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0x2a0, 0x2) 5.79052014s ago: executing program 1 (id=2082): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xd0, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffff94, 0x9b00, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100)=0x3, 0x4) recvfrom$inet(r0, &(0x7f00000001c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 5.720757067s ago: executing program 0 (id=2083): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80080, &(0x7f0000000180)={[{@noquota}, {@abort}, {@bh}, {@delalloc}, {@jqfmt_vfsold}, {@noquota}]}, 0x0, 0x4ab, &(0x7f00000004c0)="$eJzs3c1rXFUbAPBnZpo0SfO+/XhfpK1gCxXqB83kA2miLnSlLgpiwY1Cjck01kwyITOpTegi1V0XLkRREBfu/Qvc2JVFENe6FxdS0RpBBWFk7syk+Zp20HQGcn8/mM6599ze55wMz+HOuffODSC1Ttb+yUQMRsQ3EXGwvrh5g5P1t7XbV6dqr0xUq+d/ziTb1Zabmzb/34GIWI2Ivoh46bmI1zPb45aXV2Yni8XCYmM5X5lbyJeXV85cmpucKcwU5kfGz05MjA+PjU7sWl+vv/vm9XOfv9D72e/v3Lr53pdf1Jo12Kjb2I/dVO96TxzesG5fRDx9P4J1Qa7Rn/5uN4R/pPb5/S8iTiX5fzByyacJpEG1Wq3+Vd3fqnq1CuxZ2eQYOJMdioh6OZsdGqofw/8/BrLFUrny+MXS0vx0/Vj5UPRkL14qFoYb3xUORU+mtjySlO8sj25ZHotIjoHfz/Uny0NTpeJ0Z4c6YIsDW/L/t1w9/+8h25HGAfefr/yQXvIf0kv+Q3rJf0gv+Q/pJf8hveQ/pJf8h/SS/5Be8h/SS/5DKr147lztVW3e/z59eXlptnT5zHShPDs0tzQ1NFVaXBiaKZVmknt25u61v2KptDDyRCxdyVcK5Uq+vLxyYa60NF+5kNzXf6HQ05FeAe04fOLGd5mIWH2yP3nV9Dbq5CrsbdVqJrp9DzLQHbluD0BA15j6g/TyHR/Y4Sd6N+lrVbGw+20BOsMPeUF6nT7m/B+klfl/SC/z/5BejvEB8/+QPub/Ib0GWzz/6z8bnt01HBH/jYhvcz37m8/6AvaC7I+ZxvH/6YMPD26t7c38kZwi6I2Itz4+/+GVyUplcaS2/pf19ZWPGutHu9F+oF3NPG3mMQCQXmu3r041X52M+9Oz9YsQtsff15ib7EvOUQ6sZTZdq5DZpWsXVq9FxNGd4mcazzuvn/kYWMtti3+k8Z6p7yJp777kuemdiX9sQ/yHNsQ//q//KpAON2rjz/BO+ZdNcjrW82/z+DO4S9dOtB7/suvjX67F+Hdi++52HBLf+OTtH1rGvxZxfMf4zXh9Sayt8WttO91mH2+9+vIDreqqn9b3s1P8plopX5lbyJeXV84kvyM3U5gfGT87MTE+PDY6kU/mqPPNmertnjr69c279X+gRfxW/X+m0aZH2+z/nw9+9crJu8R/5NTOn/+RFvFr+iPisTbj/zr6/Wut6mrxp1v0P3uX+LV1Y23GL3/w/P42NwUAOqC8vDI7WSwWFhUUFBTWC90emYD77U7Sd7slAAAAAAAAAAAAQLs6cTlxt/sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAX/B0AAP//KpzWoQ==") prlimit64(0x0, 0xe, &(0x7f0000000980)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000009c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000a00)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000a40)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000b80), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000bc0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000c00)='pagemap\x00') fsmount(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x78, 0x0, 0xfffffffffffffff8, {0x6, 0xcbff, 0x0, {0x5, 0x5, 0x200000003, 0x6c, 0xa, 0x6, 0x1, 0x6, 0x101, 0x4000, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0, 0x0, 0x0) pread64(r3, 0x0, 0x0, 0x1000000300) io_setup(0x4fe, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000c06, &(0x7f0000000440)={[{@dioread_lock}, {@noblock_validity}, {@grpquota}, {@usrquota}, {@nolazytime}, {@grpjquota, 0x2e}, {@errors_continue}, {@resuid}, {@bh}, {@noload}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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") 5.535929515s ago: executing program 2 (id=2084): socket$nl_route(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x38) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x8) r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@grpquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@discard}, {@dioread_nolock}, {@nodiscard}]}, 0x3, 0x49e, &(0x7f0000001040)="$eJzs3M9vFFUcAPDvTLcFKVBEROWHVtHY+KO1BZWDBzV608RED3gxqW0hyEINLYkQosUYPBoS78STMfoXeNKLUU8mXvVuSIgSE9CDrpndmdItu0tLt93ifj7Jtu/Nvu173755M2/m7W4AXWsw+5FEbI6IXyJioJatLzBY+3XtytmJv66cnUiiUnn996Ra7uqVsxNF0eJ1/XlmKI1IP0rySurNnD5zbLxcnjqZ50dmj787MnP6zJNHj48fmToydWLs4MED+0effWbs6bbEmcV1ddf703uS0psXXp04dOHtH74qRcTOvbXnF8axImn/fHIwC/yPStXiYo+0pbL1Y8uCdFLqYENYlp6IyLqrtzr+B6InrnfeQLz8YUcbB6yq7Ny0ofnTcxXgfyyJTrcA6IziRJ9d/xaPpc8e5lY6/ei4yy/ULoCyuK/lj9ozpUjzMr2rWP+9EXFo7u+L2SPyfvhnc4OC9/WvYisAgG7yTTb/eaLR/C+NnQvKbc3XULZFxJ0RsT0i7oqIHRFxd0S17D35fGY5aktDPfP5G+ef6aVbDm4Jsvnfc/naVv38rzb7q1Qq//bkuS3V+HuTw0fLU0/l/5Oh6N2Q5Udb1PHtSz9/smjTWDHxHrw+/xvIfmf1F3PBvB2XSotu0E2Oz463a1J6+VzErlKj+JP5lYAkm35GxK7l/emtReLoY1/saVZoQfwXG8ffQhvWmSqfRTxa6/+5qI//XFEmab0+ObIxyn0xUuwVN/rxp/OvNat/RfG3Qdb/m+r3/0UlBv5MFq7Xziy/jvO/ftz0mvLm8Tfe//uSN6pr1n35tvfGZ2dPjkb0Ja9U83Xbx66/tsgX5bP4h/Y1Hv/b89dk8e+OiGwn3hsR9+dLnFnbH4yIhyJiX4v4v3/x4XduPf7VlcU/2fD4N/8ugG31/b/8RM+x775uVv/S+v9ANTWUb6ke/26ieXOiPJUd1m95bwYAAIDbTxoRmyNJh+fTaTo8XHsP/47YlJanZ2YfPzx96sRk7TMC26I3Le50DeT3Q7Or7dGkeC9A7f7oWH6vuLhfuj+/b/xpzx3V/PDEdHmyw7FDt+tvMv4zv/V0unXAqvN5Lehei8d/2qF2AGvP+R+6V9PxX3p+bRsCrDnnf+heC8b/l6fO764mPqj+fGD+iYZrAS2+OQS4PTj/Q/cy/qF7Gf/QvYx/6Eor+Vz/+k70rY9mLCWxMe+M2pbPezvdniUlIm1V5q1Y84bFuvi3tDuRtPwyi1VMdPjABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Cb/BQAA///a3O7u") ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000001500)={0x8, 0xffffe1aa, 0x7ff, 0x1, 0x9}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000640), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000006c0)) setpgid(r1, r1) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000700)=@usbdevfs_driver={0xffffffff, 0x9, 0x0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSLCKTRMIOS(r6, 0x80047437, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000f00)=@filename='127.0.0.1:/test\x00', &(0x7f0000000f40)='./mnt\x00', &(0x7f0000000f80)='nfs\x00', 0x0, &(0x7f0000000fc0)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000800)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b49cb0b1a4bbff03a8b3db280000000000000079103000000000003b0a00ff000000009500740000000000"], &(0x7f0000000940)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 4.363888813s ago: executing program 2 (id=2085): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) read(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x4040080) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$video(0x0, 0x4, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2008010}, 0x2400c804) 4.276361202s ago: executing program 1 (id=2086): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x345) r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x6000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) r2 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000001c0)={0x1, 0x0, 0x7, &(0x7f0000000200)={0x0, "f4e1a230b44f44eaa65e405b747aa95df8c02c12eb4eaf00"}}) fallocate(r0, 0x20, 0x7fffffffffffffff, 0x3fff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x200a7a) sched_setscheduler(r3, 0x2, &(0x7f0000000300)=0x4) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019380)=0x410000002) syz_open_procfs(0x0, &(0x7f00000193c0)='net/tcp6\x00') bind$bt_hci(0xffffffffffffffff, 0x0, 0x19a8b62a0f9f6146) mount(0x0, 0x0, 0x0, 0x100054, 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000019400), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000019440)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x6, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2'}, 0x5b) mount(&(0x7f00000194c0)=@filename='mtd0\x00', &(0x7f0000019500)='./file0\x00', &(0x7f0000019540)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000019580)='./file0\x00') creat(&(0x7f00000195c0)='./file0\x00', 0x40) mkdirat(r0, &(0x7f0000019600)='./proc\x00', 0x1ff) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000019640)=@o_path={&(0x7f0000019680)='./file2\x00', 0xffffffffffffffff, 0x4000, r4}, 0x18) 4.075548542s ago: executing program 0 (id=2087): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) mkdir(&(0x7f0000000040)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='dir0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='dir0/tracing_on\x00', 0x1, 0x0) write$binfmt_format(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000740), 0x0, 0x0) read$msr(r2, &(0x7f0000000e80)=""/102392, 0x18ff8) io_setup(0x3fd, &(0x7f0000019f00)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x1ef) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file2\x00', 0x2c3) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) truncate(&(0x7f0000000580)='./file0/file1\x00', 0xe2) io_pgetevents(r3, 0x8000000202, 0x0, &(0x7f00000005c0), 0x0, 0x0) 2.330344097s ago: executing program 0 (id=2088): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000140)=@filename='mtd0\x00', 0x0, &(0x7f00000001c0)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000200)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[], 0xfffffee2) ioctl$TCSBRK(r1, 0x5409, 0x5) ftruncate(r1, 0xb) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r4, &(0x7f00000008c0)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000198c0)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000001d00"/21], 0x50) syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000380)={0x1, 0x0, 0x1, 0x8, 0x7, 0xb41, 0x10000}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r5, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000680)={0xa, 0x4e20, 0x100060, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) pipe2$9p(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r6, 0x0, r7, 0x0, 0x7ffff000, 0x8) lseek(r7, 0xc1, 0x0) 2.276198402s ago: executing program 2 (id=2089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x47, &(0x7f0000000200)=0x7) r3 = getpid() syz_pidfd_open(r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000400)={0x2020}, 0x2020) recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x700, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.272057432s ago: executing program 1 (id=2090): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet(0xa, 0x801, 0x84) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) flock(r4, 0x5) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f00000028c0)={{r2}, "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"}) fcntl$lock(r4, 0x6, &(0x7f0000000240)={0x0, 0x0, 0x8}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000700), 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xdc) io_submit(0x0, 0x0, &(0x7f0000003900)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000000880)={0x2020}, 0x2020) 1.527894617s ago: executing program 33 (id=2051): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000104feffff7ffedbdf2500000006", @ANYRES32=r4, @ANYBLOB="600000000020000008000300", @ANYRES32=r2], 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10) 1.518654658s ago: executing program 2 (id=2092): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x345) r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x6000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) r2 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000001c0)={0x1, 0x0, 0x7, &(0x7f0000000200)={0x0, "f4e1a230b44f44eaa65e405b747aa95df8c02c12eb4eaf00"}}) fallocate(r0, 0x20, 0x7fffffffffffffff, 0x3fff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x200a7a) sched_setscheduler(r3, 0x2, &(0x7f0000000300)=0x4) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019380)=0x410000002) syz_open_procfs(0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x19a8b62a0f9f6146) mount(0x0, 0x0, 0x0, 0x100054, 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000019400), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000019440)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x6, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2'}, 0x5b) mount(&(0x7f00000194c0)=@filename='mtd0\x00', &(0x7f0000019500)='./file0\x00', &(0x7f0000019540)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000019580)='./file0\x00') creat(&(0x7f00000195c0)='./file0\x00', 0x40) mkdirat(r0, &(0x7f0000019600)='./proc\x00', 0x1ff) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000019640)=@o_path={&(0x7f0000019680)='./file2\x00', 0xffffffffffffffff, 0x4000, r4}, 0x18) 1.513121108s ago: executing program 5 (id=2093): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/52, 0x34, 0x10000) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r1, &(0x7f0000000240)='6', 0x32) fsopen(&(0x7f0000000340)='ufs\x00', 0x1) syz_emit_ethernet(0x4a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x10083, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt\x00', 0x1ff) mount(&(0x7f0000000580)=@filename='./dev/sda1\x00', &(0x7f00000005c0)='./mnt\x00', &(0x7f0000000600)='ext4\x00', 0x8410, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x40086610, &(0x7f0000000680)=@v2={0x2, @aes256, 0x8, '\x00', @c}) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f00000006c0)={0x10, 0x0, "cd6354aaf48bd635ea1ffc70164cafa0"}) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) setrlimit(0x0, 0x0) 180.278552ms ago: executing program 2 (id=2094): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000005c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x498fe000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000640), 0x0, 0x0) read$msr(r2, &(0x7f0000000680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000019680)=0x7) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42f82, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000400000002000084fdf7ffff0a00"], 0x0, 0x58}, 0x28) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_SUBDINFO(r4, 0x80486402, &(0x7f00000001c0)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) 178.915582ms ago: executing program 1 (id=2095): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x100) 120.666858ms ago: executing program 5 (id=2096): socket$nl_route(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x38) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x8) r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@grpquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@discard}, {@dioread_nolock}, {@nodiscard}]}, 0x3, 0x49e, &(0x7f0000001040)="$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") ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000001500)={0x8, 0xffffe1aa, 0x7ff, 0x1, 0x9}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000640), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000006c0)) setpgid(r1, r1) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000700)=@usbdevfs_driver={0xffffffff, 0x9, 0x0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSLCKTRMIOS(r6, 0x80047437, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000f00)=@filename='127.0.0.1:/test\x00', &(0x7f0000000f40)='./mnt\x00', &(0x7f0000000f80)='nfs\x00', 0x0, &(0x7f0000000fc0)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000800)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b49cb0b1a4bbff03a8b3db280000000000000079103000000000003b0a00ff000000009500740000000000"], &(0x7f0000000940)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 1 (id=2097): socket$inet_tcp(0x2, 0x1, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000540), 0x100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000380)={0x2, &(0x7f00000000c0)=[{0x20, '\x00', @data=0x37ad, 0xfff}]}) kernel console output (not intermixed with test programs): 000001 RDI: 0000200000000340 [ 865.608889][T10969] RBP: 00007f935c710b70 R08: 0000000000000000 R09: 0000000000000000 [ 865.616896][T10969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 865.624900][T10969] R13: 00007f935c8ff128 R14: 00007f935c8ff090 R15: 00007fff4c5a74f8 [ 865.632923][T10969] [ 865.646855][T10970] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 870.010297][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.020976][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.957555][T11031] jffs2: notice: (11031) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 871.436095][T11030] FAULT_INJECTION: forcing a failure. [ 871.436095][T11030] name failslab, interval 1, probability 0, space 0, times 0 [ 871.448877][T11030] CPU: 1 PID: 11030 Comm: syz.1.1595 Not tainted syzkaller #0 [ 871.456368][T11030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 871.466435][T11030] Call Trace: [ 871.469724][T11030] [ 871.472659][T11030] dump_stack_lvl+0x188/0x250 [ 871.477368][T11030] ? show_regs_print_info+0x20/0x20 [ 871.482602][T11030] ? load_image+0x410/0x410 [ 871.487125][T11030] ? __might_sleep+0xf0/0xf0 [ 871.491789][T11030] ? __lock_acquire+0x7d40/0x7d40 [ 871.495643][T11035] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 871.496891][T11030] should_fail+0x383/0x4b0 [ 871.511471][T11030] should_failslab+0x5/0x20 [ 871.515980][T11030] slab_pre_alloc_hook+0x51/0xc0 [ 871.520941][T11030] kmem_cache_alloc_trace+0x47/0x290 [ 871.526249][T11030] ? legacy_init_fs_context+0x4d/0xb0 [ 871.531645][T11030] ? __raw_spin_lock_init+0x41/0x100 [ 871.536937][T11030] legacy_init_fs_context+0x4d/0xb0 [ 871.542170][T11030] alloc_fs_context+0x628/0x7d0 [ 871.547068][T11030] __se_sys_fsopen+0x111/0x320 [ 871.552004][T11030] do_syscall_64+0x4c/0xa0 [ 871.556454][T11030] ? clear_bhb_loop+0x30/0x80 [ 871.561144][T11030] ? clear_bhb_loop+0x30/0x80 [ 871.565833][T11030] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 871.571761][T11030] RIP: 0033:0x7ffa97b89b19 [ 871.576189][T11030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 871.595805][T11030] RSP: 002b:00007ffa95de0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 871.604243][T11030] RAX: ffffffffffffffda RBX: 00007ffa97e0ffa0 RCX: 00007ffa97b89b19 [ 871.612254][T11030] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 871.620263][T11030] RBP: 00007ffa97c21b70 R08: 0000000000000000 R09: 0000000000000000 [ 871.628270][T11030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 871.636273][T11030] R13: 00007ffa97e10038 R14: 00007ffa97e0ffa0 R15: 00007ffc8e62c538 [ 871.644291][T11030] [ 875.868454][T11098] jffs2: notice: (11098) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 877.029905][T11098] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 878.638455][T11110] FAULT_INJECTION: forcing a failure. [ 878.638455][T11110] name failslab, interval 1, probability 0, space 0, times 0 [ 878.651354][T11110] CPU: 1 PID: 11110 Comm: syz.1.1610 Not tainted syzkaller #0 [ 878.658900][T11110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 878.669007][T11110] Call Trace: [ 878.672293][T11110] [ 878.675252][T11110] dump_stack_lvl+0x188/0x250 [ 878.679944][T11110] ? show_regs_print_info+0x20/0x20 [ 878.685244][T11110] ? load_image+0x410/0x410 [ 878.689947][T11110] ? __might_sleep+0xf0/0xf0 [ 878.694703][T11110] ? __lock_acquire+0x7d40/0x7d40 [ 878.699785][T11110] should_fail+0x383/0x4b0 [ 878.704254][T11110] should_failslab+0x5/0x20 [ 878.708906][T11110] slab_pre_alloc_hook+0x51/0xc0 [ 878.713900][T11110] kmem_cache_alloc_trace+0x47/0x290 [ 878.719253][T11110] ? __se_sys_fsopen+0x19c/0x320 [ 878.724256][T11110] __se_sys_fsopen+0x19c/0x320 [ 878.729065][T11110] do_syscall_64+0x4c/0xa0 [ 878.733522][T11110] ? clear_bhb_loop+0x30/0x80 [ 878.738210][T11110] ? clear_bhb_loop+0x30/0x80 [ 878.742900][T11110] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 878.748818][T11110] RIP: 0033:0x7ffa97b89b19 [ 878.753273][T11110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.772914][T11110] RSP: 002b:00007ffa95dbf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 878.781371][T11110] RAX: ffffffffffffffda RBX: 00007ffa97e10090 RCX: 00007ffa97b89b19 [ 878.789430][T11110] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 878.797504][T11110] RBP: 00007ffa97c21b70 R08: 0000000000000000 R09: 0000000000000000 [ 878.805507][T11110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 878.813486][T11110] R13: 00007ffa97e10128 R14: 00007ffa97e10090 R15: 00007ffc8e62c538 [ 878.821517][T11110] [ 878.846796][T11110] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 881.598686][ T26] audit: type=1400 audit(1793881070.594:83): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=11125 comm="syz.2.1617" [ 885.133591][T11170] FAULT_INJECTION: forcing a failure. [ 885.133591][T11170] name failslab, interval 1, probability 0, space 0, times 0 [ 885.146556][T11170] CPU: 1 PID: 11170 Comm: syz.4.1625 Not tainted syzkaller #0 [ 885.154065][T11170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 885.164251][T11170] Call Trace: [ 885.167566][T11170] [ 885.170524][T11170] dump_stack_lvl+0x188/0x250 [ 885.175333][T11170] ? show_regs_print_info+0x20/0x20 [ 885.180582][T11170] ? load_image+0x410/0x410 [ 885.185127][T11170] ? __might_sleep+0xf0/0xf0 [ 885.189753][T11170] ? __lock_acquire+0x7d40/0x7d40 [ 885.194822][T11170] should_fail+0x383/0x4b0 [ 885.199289][T11170] should_failslab+0x5/0x20 [ 885.203852][T11170] slab_pre_alloc_hook+0x51/0xc0 [ 885.208827][T11170] kmem_cache_alloc_trace+0x47/0x290 [ 885.214146][T11170] ? __se_sys_fsopen+0x19c/0x320 [ 885.219129][T11170] __se_sys_fsopen+0x19c/0x320 [ 885.226481][T11170] do_syscall_64+0x4c/0xa0 [ 885.231018][T11170] ? clear_bhb_loop+0x30/0x80 [ 885.235731][T11170] ? clear_bhb_loop+0x30/0x80 [ 885.240442][T11170] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 885.246397][T11170] RIP: 0033:0x7f74529beb19 [ 885.250843][T11170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 885.270487][T11170] RSP: 002b:00007f7450bf4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 885.278940][T11170] RAX: ffffffffffffffda RBX: 00007f7452c45090 RCX: 00007f74529beb19 [ 885.286950][T11170] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 885.294953][T11170] RBP: 00007f7452a56b70 R08: 0000000000000000 R09: 0000000000000000 [ 885.303052][T11170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 885.311170][T11170] R13: 00007f7452c45128 R14: 00007f7452c45090 R15: 00007ffe3c9f6b38 [ 885.319198][T11170] [ 885.335993][T11171] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 887.065217][T11193] loop2: detected capacity change from 0 to 512 [ 887.291111][T11193] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 887.698337][T11193] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.1630: inode has both inline data and extents flags [ 887.992054][T11193] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.1630: couldn't read orphan inode 15 (err -117) [ 888.013428][T11203] udevd[11203]: symlink '../../loop2' '/dev/disk/by-diskseq/418.tmp-b7:2' failed: Read-only file system [ 888.014707][T11193] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,auto_da_alloc=0x0000000000000002,discard,dioread_nolock,nodiscard,,errors=continue. Quota mode: writeback. [ 888.133380][T11203] udevd[11203]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 888.309485][T11203] udevd[11203]: symlink '../../loop2' '/dev/disk/by-diskseq/418.tmp-b7:2' failed: Read-only file system [ 888.337352][T11203] udevd[11203]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 889.131629][T11228] jffs2: notice: (11228) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 889.777220][T11249] ip_tables: iptables: counters copy to user failed while replacing table [ 896.713482][T11317] jffs2: notice: (11317) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 899.962093][T11352] udevd[11352]: symlink '../../loop2' '/dev/disk/by-diskseq/418.tmp-b7:2' failed: Read-only file system [ 900.388125][T11352] udevd[11352]: symlink '../../loop2' '/dev/disk/by-diskseq/418.tmp-b7:2' failed: Read-only file system [ 900.402953][T11366] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1662'. [ 901.576506][T11385] loop0: detected capacity change from 0 to 512 [ 901.653548][T11385] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 901.715027][T11352] udevd[11352]: symlink '../../loop0' '/dev/disk/by-diskseq/420.tmp-b7:0' failed: Read-only file system [ 901.987770][T11352] udevd[11352]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 902.919127][ T1327] Bluetooth: hci5: command 0x0406 tx timeout [ 903.049013][T11352] udevd[11352]: symlink '../../loop0' '/dev/disk/by-diskseq/420.tmp-b7:0' failed: Read-only file system [ 903.061694][T11352] udevd[11352]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 903.944661][T11385] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.1668: inode has both inline data and extents flags [ 903.963849][T11385] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.1668: couldn't read orphan inode 15 (err -117) [ 903.976345][T11385] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,auto_da_alloc=0x0000000000000002,discard,dioread_nolock,nodiscard,,errors=continue. Quota mode: writeback. [ 904.163326][T11413] jffs2: notice: (11413) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 905.111495][T11439] ip_tables: iptables: counters copy to user failed while replacing table [ 905.887491][T11447] FAULT_INJECTION: forcing a failure. [ 905.887491][T11447] name failslab, interval 1, probability 0, space 0, times 0 [ 905.900427][T11447] CPU: 1 PID: 11447 Comm: syz.4.1661 Not tainted syzkaller #0 [ 905.907934][T11447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 905.918022][T11447] Call Trace: [ 905.921342][T11447] [ 905.924303][T11447] dump_stack_lvl+0x188/0x250 [ 905.929036][T11447] ? show_regs_print_info+0x20/0x20 [ 905.934391][T11447] ? load_image+0x410/0x410 [ 905.938940][T11447] ? __might_sleep+0xf0/0xf0 [ 905.943577][T11447] ? __lock_acquire+0x7d40/0x7d40 [ 905.948641][T11447] should_fail+0x383/0x4b0 [ 905.953111][T11447] should_failslab+0x5/0x20 [ 905.957655][T11447] slab_pre_alloc_hook+0x51/0xc0 [ 905.962633][T11447] kmem_cache_alloc_trace+0x47/0x290 [ 905.967980][T11447] ? __se_sys_fsopen+0x19c/0x320 [ 905.972955][T11447] __se_sys_fsopen+0x19c/0x320 [ 905.977758][T11447] do_syscall_64+0x4c/0xa0 [ 905.982208][T11447] ? clear_bhb_loop+0x30/0x80 [ 905.986924][T11447] ? clear_bhb_loop+0x30/0x80 [ 905.991638][T11447] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 905.997565][T11447] RIP: 0033:0x7f74529beb19 [ 906.002020][T11447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.021660][T11447] RSP: 002b:00007f7450bf4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 906.030119][T11447] RAX: ffffffffffffffda RBX: 00007f7452c45090 RCX: 00007f74529beb19 [ 906.038132][T11447] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 906.046149][T11447] RBP: 00007f7452a56b70 R08: 0000000000000000 R09: 0000000000000000 [ 906.054174][T11447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 906.062177][T11447] R13: 00007f7452c45128 R14: 00007f7452c45090 R15: 00007ffe3c9f6b38 [ 906.070197][T11447] [ 906.098885][T11447] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 910.063983][T11482] ip6gretap0: default FDB implementation only supports local addresses [ 910.219632][T11489] jffs2: notice: (11489) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 910.753391][T11500] udevd[11500]: symlink '../../loop0' '/dev/disk/by-diskseq/420.tmp-b7:0' failed: Read-only file system [ 910.821751][T11500] udevd[11500]: symlink '../../loop0' '/dev/disk/by-diskseq/420.tmp-b7:0' failed: Read-only file system [ 911.827805][T11510] FAULT_INJECTION: forcing a failure. [ 911.827805][T11510] name failslab, interval 1, probability 0, space 0, times 0 [ 911.840723][T11510] CPU: 0 PID: 11510 Comm: syz.5.1693 Not tainted syzkaller #0 [ 911.848719][T11510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 911.858959][T11510] Call Trace: [ 911.862378][T11510] [ 911.865316][T11510] dump_stack_lvl+0x188/0x250 [ 911.870013][T11510] ? show_regs_print_info+0x20/0x20 [ 911.875259][T11510] ? load_image+0x410/0x410 [ 911.879777][T11510] ? __might_sleep+0xf0/0xf0 [ 911.884473][T11510] ? __lock_acquire+0x7d40/0x7d40 [ 911.889557][T11510] should_fail+0x383/0x4b0 [ 911.890504][T11512] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 911.894109][T11510] should_failslab+0x5/0x20 [ 911.908695][T11510] slab_pre_alloc_hook+0x51/0xc0 [ 911.913688][T11510] kmem_cache_alloc_trace+0x47/0x290 [ 911.918989][T11510] ? legacy_init_fs_context+0x4d/0xb0 [ 911.924368][T11510] ? __raw_spin_lock_init+0x41/0x100 [ 911.929658][T11510] legacy_init_fs_context+0x4d/0xb0 [ 911.934863][T11510] alloc_fs_context+0x628/0x7d0 [ 911.939756][T11510] __se_sys_fsopen+0x111/0x320 [ 911.944624][T11510] do_syscall_64+0x4c/0xa0 [ 911.949075][T11510] ? clear_bhb_loop+0x30/0x80 [ 911.953760][T11510] ? clear_bhb_loop+0x30/0x80 [ 911.958444][T11510] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 911.964354][T11510] RIP: 0033:0x7fa3f2c86b19 [ 911.968775][T11510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.988390][T11510] RSP: 002b:00007fa3f0edd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 911.996817][T11510] RAX: ffffffffffffffda RBX: 00007fa3f2f0cfa0 RCX: 00007fa3f2c86b19 [ 912.004841][T11510] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 912.012851][T11510] RBP: 00007fa3f2d1eb70 R08: 0000000000000000 R09: 0000000000000000 [ 912.020855][T11510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 912.028853][T11510] R13: 00007fa3f2f0d038 R14: 00007fa3f2f0cfa0 R15: 00007fff41707698 [ 912.036887][T11510] [ 912.087710][ T4262] libceph: connect (1)[c::]:6789 error -101 [ 912.097472][ T4262] libceph: mon0 (1)[c::]:6789 connect error [ 912.194628][T11513] ceph: No mds server is up or the cluster is laggy [ 912.833156][ T4332] libceph: connect (1)[c::]:6789 error -101 [ 912.840259][ T4332] libceph: mon0 (1)[c::]:6789 connect error [ 914.134917][T11533] loop0: detected capacity change from 0 to 512 [ 914.189480][T11531] dlm: no local IP address has been set [ 914.230637][T11531] dlm: cannot start dlm midcomms -107 [ 914.246298][T11500] udevd[11500]: symlink '../../loop0' '/dev/disk/by-diskseq/422.tmp-b7:0' failed: Read-only file system [ 914.292519][T11500] udevd[11500]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 915.738298][T11500] udevd[11500]: symlink '../../loop0' '/dev/disk/by-diskseq/422.tmp-b7:0' failed: Read-only file system [ 916.145442][T11534] loop0: detected capacity change from 0 to 512 [ 916.155053][T11534] EXT4-fs (loop0): Ignoring removed bh option [ 916.161259][T11534] EXT4-fs (loop0): old and new quota format mixing [ 916.287665][T11537] loop5: detected capacity change from 0 to 512 [ 916.318471][T11500] udevd[11500]: symlink '../../loop0' '/dev/disk/by-diskseq/422.tmp-b7:0' failed: Read-only file system [ 916.404663][T11537] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 916.495277][T11500] udevd[11500]: symlink '../../loop0' '/dev/disk/by-diskseq/422.tmp-b7:0' failed: Read-only file system [ 916.557805][T11500] udevd[11500]: symlink '../../loop0' '/dev/disk/by-diskseq/424.tmp-b7:0' failed: Read-only file system [ 916.598346][T11537] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #15: comm syz.5.1702: inode has both inline data and extents flags [ 917.278190][T11537] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.1702: couldn't read orphan inode 15 (err -117) [ 917.425965][T11538] udevd[11538]: symlink '../../loop5' '/dev/disk/by-diskseq/425.tmp-b7:5' failed: Read-only file system [ 917.451792][T11537] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,auto_da_alloc=0x0000000000000002,discard,dioread_nolock,nodiscard,,errors=continue. Quota mode: writeback. [ 917.502624][T11500] udevd[11500]: symlink '../../loop0' '/dev/disk/by-diskseq/424.tmp-b7:0' failed: Read-only file system [ 917.513585][T11551] FAULT_INJECTION: forcing a failure. [ 917.513585][T11551] name failslab, interval 1, probability 0, space 0, times 0 [ 917.526446][T11551] CPU: 1 PID: 11551 Comm: syz.1.1706 Not tainted syzkaller #0 [ 917.533923][T11551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 917.544010][T11551] Call Trace: [ 917.547992][T11551] [ 917.550924][T11551] dump_stack_lvl+0x188/0x250 [ 917.555609][T11551] ? show_regs_print_info+0x20/0x20 [ 917.560825][T11551] ? load_image+0x410/0x410 [ 917.565352][T11551] ? __might_sleep+0xf0/0xf0 [ 917.569980][T11551] ? __lock_acquire+0x7d40/0x7d40 [ 917.575029][T11551] should_fail+0x383/0x4b0 [ 917.579471][T11551] should_failslab+0x5/0x20 [ 917.583979][T11551] slab_pre_alloc_hook+0x51/0xc0 [ 917.588932][T11551] kmem_cache_alloc_trace+0x47/0x290 [ 917.594228][T11551] ? legacy_init_fs_context+0x4d/0xb0 [ 917.599691][T11551] ? __raw_spin_lock_init+0x41/0x100 [ 917.604984][T11551] legacy_init_fs_context+0x4d/0xb0 [ 917.610187][T11551] alloc_fs_context+0x628/0x7d0 [ 917.615060][T11551] __se_sys_fsopen+0x111/0x320 [ 917.619859][T11551] do_syscall_64+0x4c/0xa0 [ 917.624302][T11551] ? clear_bhb_loop+0x30/0x80 [ 917.629163][T11551] ? clear_bhb_loop+0x30/0x80 [ 917.633846][T11551] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 917.639742][T11551] RIP: 0033:0x7ffa97b89b19 [ 917.644162][T11551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 917.663767][T11551] RSP: 002b:00007ffa95de0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 917.672190][T11551] RAX: ffffffffffffffda RBX: 00007ffa97e0ffa0 RCX: 00007ffa97b89b19 [ 917.680198][T11551] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 917.688206][T11551] RBP: 00007ffa97c21b70 R08: 0000000000000000 R09: 0000000000000000 [ 917.696211][T11551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 917.704644][T11551] R13: 00007ffa97e10038 R14: 00007ffa97e0ffa0 R15: 00007ffc8e62c538 [ 917.712677][T11551] [ 917.764352][T11538] udevd[11538]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 917.815070][T11500] udevd[11500]: symlink '../../loop0' '/dev/disk/by-diskseq/424.tmp-b7:0' failed: Read-only file system [ 917.893127][T11538] udevd[11538]: symlink '../../loop5' '/dev/disk/by-diskseq/425.tmp-b7:5' failed: Read-only file system [ 918.201300][T11538] udevd[11538]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 918.240545][T11565] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 920.414362][ T26] audit: type=1800 audit(1793881110.534:84): pid=11543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1705" name="file0" dev="jffs2" ino=2 res=0 errno=0 [ 920.517626][T11573] 9pnet_virtio: no channels available for device syz [ 920.530346][T11500] udevd[11500]: symlink '../../loop5' '/dev/disk/by-diskseq/425.tmp-b7:5' failed: Read-only file system [ 922.485766][T11587] vivid-004: ================= START STATUS ================= [ 922.493718][T11587] vivid-004: FM Deviation: 75000 [ 922.499174][T11587] vivid-004: ================== END STATUS ================== [ 922.544770][T11587] loop2: detected capacity change from 0 to 512 [ 922.624755][T11587] EXT4-fs (loop2): Ignoring removed bh option [ 922.646043][T11587] EXT4-fs (loop2): quotafile must be on filesystem root [ 924.589952][ T26] audit: type=1400 audit(1793881113.944:85): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=11588 comm="syz.2.1717" [ 924.696267][T11500] udevd[11500]: symlink '../../loop2' '/dev/disk/by-diskseq/428.tmp-b7:2' failed: Read-only file system [ 924.752618][T11500] udevd[11500]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 924.928176][T11500] udevd[11500]: symlink '../../loop2' '/dev/disk/by-diskseq/428.tmp-b7:2' failed: Read-only file system [ 925.001398][T11500] udevd[11500]: symlink '../../loop2' '/dev/disk/by-diskseq/428.tmp-b7:2' failed: Read-only file system [ 925.073834][T11500] udevd[11500]: symlink '../../loop2' '/dev/disk/by-diskseq/428.tmp-b7:2' failed: Read-only file system [ 925.426027][T11594] binder: 11593:11594 ioctl 5000940a 2000000028c0 returned -22 [ 925.556277][T11596] loop1: detected capacity change from 0 to 512 [ 925.588541][T11586] binder: 11583:11586 ioctl 5000940a 2000000028c0 returned -22 [ 927.489816][T11500] udevd[11500]: symlink '../../loop1' '/dev/disk/by-diskseq/430.tmp-b7:1' failed: Read-only file system [ 927.505795][T11602] loop0: detected capacity change from 0 to 512 [ 927.548462][T11500] udevd[11500]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 927.703594][T11602] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 927.826283][T11538] udevd[11538]: symlink '../../loop0' '/dev/disk/by-diskseq/431.tmp-b7:0' failed: Read-only file system [ 927.912993][T11602] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.1722: inode has both inline data and extents flags [ 927.951046][T11500] udevd[11500]: symlink '../../loop1' '/dev/disk/by-diskseq/430.tmp-b7:1' failed: Read-only file system [ 928.413685][T11602] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.1722: couldn't read orphan inode 15 (err -117) [ 928.421889][T11538] udevd[11538]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 928.464955][T11609] FAULT_INJECTION: forcing a failure. [ 928.464955][T11609] name failslab, interval 1, probability 0, space 0, times 0 [ 928.477688][T11609] CPU: 0 PID: 11609 Comm: syz.5.1719 Not tainted syzkaller #0 [ 928.485159][T11609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 928.495303][T11609] Call Trace: [ 928.498589][T11609] [ 928.501524][T11609] dump_stack_lvl+0x188/0x250 [ 928.506214][T11609] ? show_regs_print_info+0x20/0x20 [ 928.511676][T11609] ? load_image+0x410/0x410 [ 928.516199][T11609] ? __might_sleep+0xf0/0xf0 [ 928.520830][T11609] ? __lock_acquire+0x7d40/0x7d40 [ 928.525886][T11609] should_fail+0x383/0x4b0 [ 928.530324][T11609] should_failslab+0x5/0x20 [ 928.534848][T11609] slab_pre_alloc_hook+0x51/0xc0 [ 928.539881][T11609] kmem_cache_alloc_trace+0x47/0x290 [ 928.545174][T11609] ? legacy_init_fs_context+0x4d/0xb0 [ 928.550554][T11609] ? __raw_spin_lock_init+0x41/0x100 [ 928.555845][T11609] legacy_init_fs_context+0x4d/0xb0 [ 928.561139][T11609] alloc_fs_context+0x628/0x7d0 [ 928.566004][T11609] __se_sys_fsopen+0x111/0x320 [ 928.570831][T11609] do_syscall_64+0x4c/0xa0 [ 928.575300][T11609] ? clear_bhb_loop+0x30/0x80 [ 928.576573][T11613] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 928.580041][T11609] ? clear_bhb_loop+0x30/0x80 [ 928.580073][T11609] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 928.600749][T11609] RIP: 0033:0x7fa3f2c86b19 [ 928.605293][T11609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.624973][T11609] RSP: 002b:00007fa3f0edd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 928.633516][T11609] RAX: ffffffffffffffda RBX: 00007fa3f2f0cfa0 RCX: 00007fa3f2c86b19 [ 928.641535][T11609] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 928.649569][T11609] RBP: 00007fa3f2d1eb70 R08: 0000000000000000 R09: 0000000000000000 [ 928.657575][T11609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 928.665604][T11609] R13: 00007fa3f2f0d038 R14: 00007fa3f2f0cfa0 R15: 00007fff41707698 [ 928.673630][T11609] [ 928.702022][T11602] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,auto_da_alloc=0x0000000000000002,discard,dioread_nolock,nodiscard,,errors=continue. Quota mode: writeback. [ 928.719582][ C1] vkms_vblank_simulate: vblank timer overrun [ 928.758272][T11616] device syzkaller0 entered promiscuous mode [ 928.777513][T11610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 929.025619][ T4845] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 929.081630][ T4845] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 929.248819][T11625] fido_id[11625]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 929.293795][T11630] ip_tables: iptables: counters copy to user failed while replacing table [ 929.310151][T11630] hub 5-0:1.0: USB hub found [ 929.315007][T11630] hub 5-0:1.0: 1 port detected [ 929.880727][T11500] udevd[11500]: symlink '../../loop0' '/dev/disk/by-diskseq/431.tmp-b7:0' failed: Read-only file system [ 929.963903][T11639] Cannot find add_set index 0 as target [ 930.002588][T11500] udevd[11500]: symlink '../../loop0' '/dev/disk/by-diskseq/431.tmp-b7:0' failed: Read-only file system [ 930.747753][ T26] audit: type=1400 audit(1793881120.174:86): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=11628 comm="syz.5.1728" [ 930.814815][T11643] jffs2: notice: (11643) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 930.965252][T11646] TC_ACT_REPEAT abuse ? [ 931.366311][T11652] jffs2: notice: (11652) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 931.677814][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.686616][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.050416][T11649] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 932.155767][ T4845] libceph: connect (1)[c::]:6789 error -101 [ 932.183723][ T4845] libceph: mon0 (1)[c::]:6789 connect error [ 932.205161][T11655] ceph: No mds server is up or the cluster is laggy [ 932.395354][T11664] jffs2: notice: (11664) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 932.858009][T11681] dlm: no local IP address has been set [ 932.874186][T11681] dlm: cannot start dlm midcomms -107 [ 934.047176][ T26] audit: type=1400 audit(1793881123.404:87): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=11684 comm="syz.0.1747" [ 935.997559][ T26] audit: type=1800 audit(1793881126.124:88): pid=11664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1739" name="file0" dev="jffs2" ino=2 res=0 errno=0 [ 936.017075][ C0] vkms_vblank_simulate: vblank timer overrun [ 936.076060][T11699] binder: 11698:11699 ioctl 5000940a 2000000028c0 returned -22 [ 936.439854][ T26] audit: type=1800 audit(1793881126.564:89): pid=11709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1755" name="UDC" dev="configfs" ino=55471 res=0 errno=0 [ 936.553436][T11713] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 936.656975][T11716] dlm: no local IP address has been set [ 936.662604][T11716] dlm: cannot start dlm midcomms -107 [ 937.627010][ T26] audit: type=1400 audit(1793881126.964:90): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=11718 comm="syz.1.1759" [ 939.392253][T11740] binder: 11739:11740 ioctl 5000940a 2000000028c0 returned -22 [ 940.645056][T11756] jffs2: notice: (11756) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 940.764157][T11761] loop0: detected capacity change from 0 to 512 [ 940.993155][T11763] loop0: detected capacity change from 0 to 512 [ 941.051018][T11763] EXT4-fs (loop0): Ignoring removed bh option [ 941.057215][T11763] EXT4-fs (loop0): old and new quota format mixing [ 943.142116][T11791] binder: 11786:11791 ioctl 5000940a 2000000028c0 returned -22 [ 943.334562][ T26] audit: type=1800 audit(1793881133.454:91): pid=11799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1769" name="UDC" dev="configfs" ino=54693 res=0 errno=0 [ 946.094535][ T26] audit: type=1800 audit(1793881136.214:92): pid=11835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1793" name="UDC" dev="configfs" ino=54739 res=0 errno=0 [ 948.253189][T11861] tmpfs: Unknown parameter 'quota' [ 948.855725][T11868] loop2: detected capacity change from 0 to 512 [ 949.023796][T11868] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 949.130569][T11868] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.1802: inode has both inline data and extents flags [ 949.149272][T11868] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.1802: couldn't read orphan inode 15 (err -117) [ 949.164368][T11868] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,auto_da_alloc=0x0000000000000002,discard,dioread_nolock,nodiscard,,errors=continue. Quota mode: writeback. [ 949.209408][T11850] ceph: No mds server is up or the cluster is laggy [ 952.268331][T11896] jffs2: notice: (11896) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 952.364078][ T26] audit: type=1800 audit(1793881142.484:93): pid=11899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1811" name="UDC" dev="configfs" ino=54820 res=0 errno=0 [ 952.409698][T11905] dlm: no local IP address has been set [ 952.437071][T11905] dlm: cannot start dlm midcomms -107 [ 952.644648][T11911] tmpfs: Unknown parameter 'quota' [ 953.714329][T11908] binder: 11907:11908 ioctl 5000940a 2000000028c0 returned -22 [ 955.257305][T11936] FAULT_INJECTION: forcing a failure. [ 955.257305][T11936] name failslab, interval 1, probability 0, space 0, times 0 [ 955.270313][T11936] CPU: 0 PID: 11936 Comm: syz.1.1821 Not tainted syzkaller #0 [ 955.277815][T11936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 955.287880][T11936] Call Trace: [ 955.291166][T11936] [ 955.294100][T11936] dump_stack_lvl+0x188/0x250 [ 955.298788][T11936] ? show_regs_print_info+0x20/0x20 [ 955.303997][T11936] ? load_image+0x410/0x410 [ 955.308521][T11936] ? __might_sleep+0xf0/0xf0 [ 955.313142][T11936] ? __lock_acquire+0x7d40/0x7d40 [ 955.318178][T11936] should_fail+0x383/0x4b0 [ 955.322624][T11936] should_failslab+0x5/0x20 [ 955.327135][T11936] slab_pre_alloc_hook+0x51/0xc0 [ 955.332208][T11936] kmem_cache_alloc_trace+0x47/0x290 [ 955.337520][T11936] ? __se_sys_fsopen+0x19c/0x320 [ 955.342464][T11936] __se_sys_fsopen+0x19c/0x320 [ 955.347316][T11936] do_syscall_64+0x4c/0xa0 [ 955.351913][T11936] ? clear_bhb_loop+0x30/0x80 [ 955.356602][T11936] ? clear_bhb_loop+0x30/0x80 [ 955.361293][T11936] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 955.367213][T11936] RIP: 0033:0x7ffa97b89b19 [ 955.371638][T11936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.391293][T11936] RSP: 002b:00007ffa95dbf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 955.399745][T11936] RAX: ffffffffffffffda RBX: 00007ffa97e10090 RCX: 00007ffa97b89b19 [ 955.407764][T11936] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 955.415762][T11936] RBP: 00007ffa97c21b70 R08: 0000000000000000 R09: 0000000000000000 [ 955.423852][T11936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 955.431862][T11936] R13: 00007ffa97e10128 R14: 00007ffa97e10090 R15: 00007ffc8e62c538 [ 955.439885][T11936] [ 955.457017][T11941] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 955.883601][T10201] libceph: connect (1)[c::]:6789 error -101 [ 955.925707][T10201] libceph: mon0 (1)[c::]:6789 connect error [ 955.959405][ T26] audit: type=1800 audit(1793881146.084:94): pid=11952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1824" name="UDC" dev="configfs" ino=55855 res=0 errno=0 [ 956.006568][T11953] loop5: detected capacity change from 0 to 512 [ 956.070363][T11936] ceph: No mds server is up or the cluster is laggy [ 956.091039][T11955] dlm: no local IP address has been set [ 956.197180][T11953] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 956.318624][ T4301] libceph: connect (1)[c::]:6789 error -101 [ 956.324948][ T4301] libceph: mon0 (1)[c::]:6789 connect error [ 956.332207][T11955] dlm: cannot start dlm midcomms -107 [ 956.344276][T11751] udevd[11751]: symlink '../../loop5' '/dev/disk/by-diskseq/440.tmp-b7:5' failed: Read-only file system [ 956.357656][T11751] udevd[11751]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 956.671057][T11953] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #15: comm syz.5.1826: inode has both inline data and extents flags [ 956.774535][T11751] udevd[11751]: symlink '../../loop5' '/dev/disk/by-diskseq/440.tmp-b7:5' failed: Read-only file system [ 956.917487][T11953] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.1826: couldn't read orphan inode 15 (err -117) [ 956.944475][T11751] udevd[11751]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 956.964501][T11953] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,auto_da_alloc=0x0000000000000002,discard,dioread_nolock,nodiscard,,errors=continue. Quota mode: writeback. [ 957.051885][T11970] jffs2: notice: (11970) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 962.293010][T12007] FAULT_INJECTION: forcing a failure. [ 962.293010][T12007] name failslab, interval 1, probability 0, space 0, times 0 [ 962.305901][T12007] CPU: 1 PID: 12007 Comm: syz.1.1843 Not tainted syzkaller #0 [ 962.313377][T12007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 962.323459][T12007] Call Trace: [ 962.326743][T12007] [ 962.329720][T12007] dump_stack_lvl+0x188/0x250 [ 962.334437][T12007] ? show_regs_print_info+0x20/0x20 [ 962.339655][T12007] ? load_image+0x410/0x410 [ 962.344210][T12007] ? __might_sleep+0xf0/0xf0 [ 962.348842][T12007] ? __lock_acquire+0x7d40/0x7d40 [ 962.352570][T12010] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 962.353948][T12007] should_fail+0x383/0x4b0 [ 962.368474][T12007] should_failslab+0x5/0x20 [ 962.372986][T12007] slab_pre_alloc_hook+0x51/0xc0 [ 962.377932][T12007] kmem_cache_alloc_trace+0x47/0x290 [ 962.383226][T12007] ? legacy_init_fs_context+0x4d/0xb0 [ 962.388606][T12007] ? __raw_spin_lock_init+0x41/0x100 [ 962.393903][T12007] legacy_init_fs_context+0x4d/0xb0 [ 962.399119][T12007] alloc_fs_context+0x628/0x7d0 [ 962.403993][T12007] __se_sys_fsopen+0x111/0x320 [ 962.408798][T12007] do_syscall_64+0x4c/0xa0 [ 962.413247][T12007] ? clear_bhb_loop+0x30/0x80 [ 962.417932][T12007] ? clear_bhb_loop+0x30/0x80 [ 962.422646][T12007] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 962.428575][T12007] RIP: 0033:0x7ffa97b89b19 [ 962.433023][T12007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.452851][T12007] RSP: 002b:00007ffa95de0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 962.461288][T12007] RAX: ffffffffffffffda RBX: 00007ffa97e0ffa0 RCX: 00007ffa97b89b19 [ 962.469306][T12007] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 962.477317][T12007] RBP: 00007ffa97c21b70 R08: 0000000000000000 R09: 0000000000000000 [ 962.485341][T12007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 962.493374][T12007] R13: 00007ffa97e10038 R14: 00007ffa97e0ffa0 R15: 00007ffc8e62c538 [ 962.501418][T12007] [ 962.555013][ T4262] libceph: connect (1)[c::]:6789 error -101 [ 962.571912][ T4262] libceph: mon0 (1)[c::]:6789 connect error [ 962.582732][T12009] dlm: no local IP address has been set [ 962.736715][T12011] ceph: No mds server is up or the cluster is laggy [ 962.743379][T12009] dlm: cannot start dlm midcomms -107 [ 963.039857][ T1349] libceph: connect (1)[c::]:6789 error -101 [ 963.060197][ T1349] libceph: mon0 (1)[c::]:6789 connect error [ 963.658344][ T4332] libceph: connect (1)[c::]:6789 error -101 [ 964.362202][ T4332] libceph: mon0 (1)[c::]:6789 connect error [ 964.371771][T12028] loop2: detected capacity change from 0 to 512 [ 965.193061][T12028] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 965.244295][T11751] udevd[11751]: symlink '../../loop2' '/dev/disk/by-diskseq/442.tmp-b7:2' failed: Read-only file system [ 965.293135][T12028] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.1846: inode has both inline data and extents flags [ 965.306841][T12028] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.1846: couldn't read orphan inode 15 (err -117) [ 965.319957][T12028] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,auto_da_alloc=0x0000000000000002,discard,dioread_nolock,nodiscard,,errors=continue. Quota mode: writeback. [ 965.975416][ T4263] libceph: connect (1)[c::]:6789 error -101 [ 965.981752][T12036] ip_tables: iptables: counters copy to user failed while replacing table [ 966.052542][ T4263] libceph: mon0 (1)[c::]:6789 connect error [ 966.386476][T11751] udevd[11751]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 966.704637][T12039] jffs2: notice: (12039) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 966.754575][ T26] audit: type=1800 audit(1793881156.874:95): pid=12042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1849" name="UDC" dev="configfs" ino=54984 res=0 errno=0 [ 966.775898][T11751] udevd[11751]: symlink '../../loop2' '/dev/disk/by-diskseq/442.tmp-b7:2' failed: Read-only file system [ 966.823979][T11751] udevd[11751]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 966.990805][T11751] udevd[11751]: symlink '../../loop2' '/dev/disk/by-diskseq/442.tmp-b7:2' failed: Read-only file system [ 967.676083][T12054] jffs2: notice: (12054) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 967.778543][T12065] dlm: no local IP address has been set [ 967.784406][T12065] dlm: cannot start dlm midcomms -107 [ 968.337740][T12073] vivid-008: ================= START STATUS ================= [ 968.345547][T12073] vivid-008: FM Deviation: 75000 [ 968.350830][T12073] vivid-008: ================== END STATUS ================== [ 968.387465][T12073] loop4: detected capacity change from 0 to 512 [ 968.437570][T12073] EXT4-fs (loop4): Ignoring removed bh option [ 968.445272][T12073] EXT4-fs (loop4): quotafile must be on filesystem root [ 969.429709][T12078] loop1: detected capacity change from 0 to 512 [ 969.482788][T12078] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 969.588825][T12078] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.1860: inode has both inline data and extents flags [ 969.602563][T12078] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.1860: couldn't read orphan inode 15 (err -117) [ 969.620021][T12078] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,auto_da_alloc=0x0000000000000002,discard,dioread_nolock,nodiscard,,errors=continue. Quota mode: writeback. [ 969.699006][T12086] FAULT_INJECTION: forcing a failure. [ 969.699006][T12086] name failslab, interval 1, probability 0, space 0, times 0 [ 969.800659][T12085] FAULT_INJECTION: forcing a failure. [ 969.800659][T12085] name failslab, interval 1, probability 0, space 0, times 0 [ 969.813388][T12085] CPU: 1 PID: 12085 Comm: syz.4.1862 Not tainted syzkaller #0 [ 969.820853][T12085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 969.830915][T12085] Call Trace: [ 969.834193][T12085] [ 969.837128][T12085] dump_stack_lvl+0x188/0x250 [ 969.841837][T12085] ? show_regs_print_info+0x20/0x20 [ 969.847052][T12085] ? load_image+0x410/0x410 [ 969.851582][T12085] ? __might_sleep+0xf0/0xf0 [ 969.856189][T12085] ? __lock_acquire+0x7d40/0x7d40 [ 969.861338][T12085] should_fail+0x383/0x4b0 [ 969.865785][T12085] should_failslab+0x5/0x20 [ 969.870311][T12085] slab_pre_alloc_hook+0x51/0xc0 [ 969.875257][T12085] kmem_cache_alloc_trace+0x47/0x290 [ 969.880540][T12085] ? legacy_init_fs_context+0x4d/0xb0 [ 969.885930][T12085] ? __raw_spin_lock_init+0x41/0x100 [ 969.891308][T12085] legacy_init_fs_context+0x4d/0xb0 [ 969.896609][T12085] alloc_fs_context+0x628/0x7d0 [ 969.901477][T12085] __se_sys_fsopen+0x111/0x320 [ 969.906261][T12085] do_syscall_64+0x4c/0xa0 [ 969.910683][T12085] ? clear_bhb_loop+0x30/0x80 [ 969.915362][T12085] ? clear_bhb_loop+0x30/0x80 [ 969.920045][T12085] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 969.925942][T12085] RIP: 0033:0x7f74529beb19 [ 969.930358][T12085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.949972][T12085] RSP: 002b:00007f7450c15028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 969.951565][T12089] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 969.958543][T12085] RAX: ffffffffffffffda RBX: 00007f7452c44fa0 RCX: 00007f74529beb19 [ 969.958564][T12085] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 969.958580][T12085] RBP: 00007f7452a56b70 R08: 0000000000000000 R09: 0000000000000000 [ 969.958594][T12085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 969.958608][T12085] R13: 00007f7452c45038 R14: 00007f7452c44fa0 R15: 00007ffe3c9f6b38 [ 969.958640][T12085] [ 970.014722][T12086] CPU: 0 PID: 12086 Comm: syz.5.1852 Not tainted syzkaller #0 [ 970.022227][T12086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 970.032311][T12086] Call Trace: [ 970.035619][T12086] [ 970.038571][T12086] dump_stack_lvl+0x188/0x250 [ 970.043286][T12086] ? show_regs_print_info+0x20/0x20 [ 970.048619][T12086] ? load_image+0x410/0x410 [ 970.053164][T12086] ? __might_sleep+0xf0/0xf0 [ 970.057786][T12086] ? __lock_acquire+0x7d40/0x7d40 [ 970.062843][T12086] ? rcu_is_watching+0x11/0xa0 [ 970.067646][T12086] should_fail+0x383/0x4b0 [ 970.072141][T12086] should_failslab+0x5/0x20 [ 970.076678][T12086] slab_pre_alloc_hook+0x51/0xc0 [ 970.081653][T12086] ? __pmd_alloc+0x116/0x750 [ 970.086279][T12086] kmem_cache_alloc+0x3d/0x280 [ 970.091184][T12086] __pmd_alloc+0x116/0x750 [ 970.095634][T12086] ? __lock_acquire+0x7d40/0x7d40 [ 970.100687][T12086] ? do_raw_spin_lock+0x128/0x2f0 [ 970.105745][T12086] ? __pud_alloc+0x140/0x140 [ 970.110366][T12086] ? __rwlock_init+0x140/0x140 [ 970.115157][T12086] ? count_memcg_event_mm+0x324/0x370 [ 970.120564][T12086] ? do_raw_spin_unlock+0x11d/0x230 [ 970.125806][T12086] ? _raw_spin_unlock+0x24/0x40 [ 970.130691][T12086] ? __pud_alloc+0x122/0x140 [ 970.135312][T12086] handle_mm_fault+0xbd3/0x4440 [ 970.140243][T12086] ? get_page+0xe0/0xe0 [ 970.144440][T12086] ? follow_page_mask+0x272/0x12b0 [ 970.149589][T12086] ? vma_is_secretmem+0x9/0x40 [ 970.154385][T12086] ? check_vma_flags+0x359/0x470 [ 970.159361][T12086] __get_user_pages+0x952/0x11e0 [ 970.164351][T12086] ? populate_vma_page_range+0x290/0x290 [ 970.170031][T12086] ? __might_sleep+0xf0/0xf0 [ 970.174659][T12086] ? read_lock_is_recursive+0x10/0x10 [ 970.180092][T12086] __get_user_pages_remote+0x1c2/0x730 [ 970.185590][T12086] ? get_user_pages_remote+0x55/0xa0 [ 970.190926][T12086] get_arg_page+0x11b/0x350 [ 970.195461][T12086] ? copy_string_kernel+0x280/0x280 [ 970.200693][T12086] ? up_write+0x1b6/0x410 [ 970.205081][T12086] copy_string_kernel+0x14d/0x280 [ 970.210141][T12086] do_execveat_common+0x360/0x6b0 [ 970.215204][T12086] __x64_sys_execve+0x8e/0xa0 [ 970.220103][T12086] do_syscall_64+0x4c/0xa0 [ 970.224547][T12086] ? clear_bhb_loop+0x30/0x80 [ 970.229258][T12086] ? clear_bhb_loop+0x30/0x80 [ 970.233982][T12086] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 970.239990][T12086] RIP: 0033:0x7fa3f2c86b19 [ 970.244645][T12086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 970.264317][T12086] RSP: 002b:00007fa3f0edd028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 970.272773][T12086] RAX: ffffffffffffffda RBX: 00007fa3f2f0cfa0 RCX: 00007fa3f2c86b19 [ 970.280774][T12086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000680 [ 970.288801][T12086] RBP: 00007fa3f2d1eb70 R08: 0000000000000000 R09: 0000000000000000 [ 970.296802][T12086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 970.304809][T12086] R13: 00007fa3f2f0d038 R14: 00007fa3f2f0cfa0 R15: 00007fff41707698 [ 970.312830][T12086] [ 970.331964][T12090] ip_tables: iptables: counters copy to user failed while replacing table [ 970.365693][T12090] EXT4-fs error (device loop1): ext4_add_entry:2488: inode #2: comm syz.1.1860: Directory hole found for htree leaf block 0 [ 970.555820][T11755] udevd[11755]: symlink '../../loop1' '/dev/disk/by-diskseq/446.tmp-b7:1' failed: Read-only file system [ 970.609228][T11755] udevd[11755]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 970.773501][T11751] udevd[11751]: symlink '../../loop1' '/dev/disk/by-diskseq/446.tmp-b7:1' failed: Read-only file system [ 970.858008][T11751] udevd[11751]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 970.948814][T12085] ceph: No mds server is up or the cluster is laggy [ 970.958612][ T4262] libceph: connect (1)[c::]:6789 error -101 [ 970.964624][ T4262] libceph: mon0 (1)[c::]:6789 connect error [ 971.002405][ T26] audit: type=1800 audit(1793881161.114:96): pid=12095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1863" name="UDC" dev="configfs" ino=56038 res=0 errno=0 [ 971.045414][T11751] udevd[11751]: symlink '../../loop1' '/dev/disk/by-diskseq/446.tmp-b7:1' failed: Read-only file system [ 971.117664][T11751] udevd[11751]: symlink '../../loop1' '/dev/disk/by-diskseq/446.tmp-b7:1' failed: Read-only file system [ 971.923794][T12107] jffs2: notice: (12107) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 972.104306][T12106] binder: 12104:12106 ioctl 5000940a 2000000028c0 returned -22 [ 972.500887][T12123] FAULT_INJECTION: forcing a failure. [ 972.500887][T12123] name failslab, interval 1, probability 0, space 0, times 0 [ 972.513921][T12123] CPU: 1 PID: 12123 Comm: syz.2.1870 Not tainted syzkaller #0 [ 972.521393][T12123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 972.531464][T12123] Call Trace: [ 972.534926][T12123] [ 972.537867][T12123] dump_stack_lvl+0x188/0x250 [ 972.542576][T12123] ? show_regs_print_info+0x20/0x20 [ 972.547803][T12123] ? load_image+0x410/0x410 [ 972.552349][T12123] ? __might_sleep+0xf0/0xf0 [ 972.557076][T12123] ? __lock_acquire+0x7d40/0x7d40 [ 972.562130][T12123] should_fail+0x383/0x4b0 [ 972.566572][T12123] should_failslab+0x5/0x20 [ 972.571079][T12123] slab_pre_alloc_hook+0x51/0xc0 [ 972.576042][T12123] kmem_cache_alloc_trace+0x47/0x290 [ 972.581442][T12123] ? legacy_init_fs_context+0x4d/0xb0 [ 972.586819][T12123] ? __raw_spin_lock_init+0x41/0x100 [ 972.592127][T12123] legacy_init_fs_context+0x4d/0xb0 [ 972.597365][T12123] alloc_fs_context+0x628/0x7d0 [ 972.602237][T12123] __se_sys_fsopen+0x111/0x320 [ 972.607022][T12123] do_syscall_64+0x4c/0xa0 [ 972.611469][T12123] ? clear_bhb_loop+0x30/0x80 [ 972.616238][T12123] ? clear_bhb_loop+0x30/0x80 [ 972.620939][T12123] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 972.626870][T12123] RIP: 0033:0x7f5e7157bb19 [ 972.631291][T12123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 972.651164][T12123] RSP: 002b:00007f5e6f7d2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 972.659600][T12123] RAX: ffffffffffffffda RBX: 00007f5e71801fa0 RCX: 00007f5e7157bb19 [ 972.667609][T12123] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 972.675607][T12123] RBP: 00007f5e71613b70 R08: 0000000000000000 R09: 0000000000000000 [ 972.683605][T12123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 972.691610][T12123] R13: 00007f5e71802038 R14: 00007f5e71801fa0 R15: 00007fff2d408848 [ 972.699756][T12123] [ 972.954867][ T26] audit: type=1800 audit(1793881163.074:97): pid=12130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1872" name=08 dev="sda1" ino=2051 res=0 errno=0 [ 973.714676][ T26] audit: type=1800 audit(1793881163.834:98): pid=12142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1876" name="UDC" dev="configfs" ino=56118 res=0 errno=0 [ 975.929711][T12169] FAULT_INJECTION: forcing a failure. [ 975.929711][T12169] name failslab, interval 1, probability 0, space 0, times 0 [ 976.477479][T12169] CPU: 1 PID: 12169 Comm: syz.2.1883 Not tainted syzkaller #0 [ 976.485025][T12169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 976.495122][T12169] Call Trace: [ 976.498442][T12169] [ 976.501437][T12169] dump_stack_lvl+0x188/0x250 [ 976.506241][T12169] ? show_regs_print_info+0x20/0x20 [ 976.511498][T12169] ? load_image+0x410/0x410 [ 976.516033][T12169] ? __might_sleep+0xf0/0xf0 [ 976.520648][T12169] ? __lock_acquire+0x7d40/0x7d40 [ 976.525726][T12169] should_fail+0x383/0x4b0 [ 976.530293][T12169] should_failslab+0x5/0x20 [ 976.534920][T12169] slab_pre_alloc_hook+0x51/0xc0 [ 976.539897][T12169] kmem_cache_alloc_trace+0x47/0x290 [ 976.545205][T12169] ? __se_sys_fsopen+0x19c/0x320 [ 976.550167][T12169] __se_sys_fsopen+0x19c/0x320 [ 976.554976][T12169] do_syscall_64+0x4c/0xa0 [ 976.559503][T12169] ? clear_bhb_loop+0x30/0x80 [ 976.564368][T12169] ? clear_bhb_loop+0x30/0x80 [ 976.569086][T12169] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 976.574995][T12169] RIP: 0033:0x7f5e7157bb19 [ 976.579449][T12169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 976.599221][T12169] RSP: 002b:00007f5e6f7d2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 976.607679][T12169] RAX: ffffffffffffffda RBX: 00007f5e71801fa0 RCX: 00007f5e7157bb19 [ 976.615669][T12169] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 976.623657][T12169] RBP: 00007f5e71613b70 R08: 0000000000000000 R09: 0000000000000000 [ 976.631803][T12169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 976.639802][T12169] R13: 00007f5e71802038 R14: 00007f5e71801fa0 R15: 00007fff2d408848 [ 976.647982][T12169] [ 976.885206][ T26] audit: type=1800 audit(1793881167.004:99): pid=12181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1887" name="UDC" dev="configfs" ino=55153 res=0 errno=0 [ 976.968847][T12183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1888'. [ 977.051556][T12169] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 977.151600][ T5798] libceph: connect (1)[c::]:6789 error -101 [ 977.163657][ T5798] libceph: mon0 (1)[c::]:6789 connect error [ 977.174405][T12173] ceph: No mds server is up or the cluster is laggy [ 977.445807][ T5798] libceph: connect (1)[c::]:6789 error -101 [ 977.458043][ T5798] libceph: mon0 (1)[c::]:6789 connect error [ 977.551048][T12194] jffs2: notice: (12194) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 979.792216][T12210] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 979.949295][T12217] loop0: detected capacity change from 0 to 512 [ 979.979546][T12211] ceph: No mds server is up or the cluster is laggy [ 979.986533][ T5798] libceph: connect (1)[c::]:6789 error -101 [ 979.996259][T12217] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 980.002074][ T5798] libceph: mon0 (1)[c::]:6789 connect error [ 980.179735][T12217] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.1896: inode has both inline data and extents flags [ 980.193311][T12217] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.1896: couldn't read orphan inode 15 (err -117) [ 980.206330][T12217] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,auto_da_alloc=0x0000000000000002,discard,dioread_nolock,nodiscard,,errors=continue. Quota mode: writeback. [ 980.508316][T12191] udevd[12191]: symlink '../../loop0' '/dev/disk/by-diskseq/448.tmp-b7:0' failed: Read-only file system [ 980.621126][ T26] audit: type=1800 audit(1793881170.744:100): pid=12225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1899" name="UDC" dev="configfs" ino=55209 res=0 errno=0 [ 980.647117][T12191] udevd[12191]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 980.795209][T12223] udevd[12223]: symlink '../../loop0' '/dev/disk/by-diskseq/448.tmp-b7:0' failed: Read-only file system [ 980.868464][T12223] udevd[12223]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 982.220572][ T26] audit: type=1400 audit(1793881171.204:101): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=12228 comm="syz.4.1901" [ 982.379414][T12233] Cannot find set identified by id 0 to match [ 984.614481][T12244] FAULT_INJECTION: forcing a failure. [ 984.614481][T12244] name failslab, interval 1, probability 0, space 0, times 0 [ 984.634253][T12244] CPU: 0 PID: 12244 Comm: syz.1.1904 Not tainted syzkaller #0 [ 984.641779][T12244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 984.651864][T12244] Call Trace: [ 984.655177][T12244] [ 984.658135][T12244] dump_stack_lvl+0x188/0x250 [ 984.662874][T12244] ? show_regs_print_info+0x20/0x20 [ 984.668107][T12244] ? load_image+0x410/0x410 [ 984.672647][T12244] ? __might_sleep+0xf0/0xf0 [ 984.677270][T12244] ? __lock_acquire+0x7d40/0x7d40 [ 984.682340][T12244] should_fail+0x383/0x4b0 [ 984.686800][T12244] should_failslab+0x5/0x20 [ 984.691346][T12244] slab_pre_alloc_hook+0x51/0xc0 [ 984.696325][T12244] kmem_cache_alloc_trace+0x47/0x290 [ 984.701640][T12244] ? legacy_init_fs_context+0x4d/0xb0 [ 984.707047][T12244] ? __raw_spin_lock_init+0x41/0x100 [ 984.712380][T12244] legacy_init_fs_context+0x4d/0xb0 [ 984.717649][T12244] alloc_fs_context+0x628/0x7d0 [ 984.722549][T12244] __se_sys_fsopen+0x111/0x320 [ 984.727343][T12244] do_syscall_64+0x4c/0xa0 [ 984.731790][T12244] ? clear_bhb_loop+0x30/0x80 [ 984.736498][T12244] ? clear_bhb_loop+0x30/0x80 [ 984.741221][T12244] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 984.747266][T12244] RIP: 0033:0x7ffa97b89b19 [ 984.751713][T12244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 984.771330][T12244] RSP: 002b:00007ffa95dbf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 984.779757][T12244] RAX: ffffffffffffffda RBX: 00007ffa97e10090 RCX: 00007ffa97b89b19 [ 984.787756][T12244] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 984.795731][T12244] RBP: 00007ffa97c21b70 R08: 0000000000000000 R09: 0000000000000000 [ 984.803711][T12244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 984.811691][T12244] R13: 00007ffa97e10128 R14: 00007ffa97e10090 R15: 00007ffc8e62c538 [ 984.819680][T12244] [ 985.875030][ T13] libceph: connect (1)[c::]:6789 error -101 [ 985.882539][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 985.891995][T12243] ceph: No mds server is up or the cluster is laggy [ 986.888265][T12271] FAULT_INJECTION: forcing a failure. [ 986.888265][T12271] name failslab, interval 1, probability 0, space 0, times 0 [ 987.010233][T12271] CPU: 1 PID: 12271 Comm: syz.1.1910 Not tainted syzkaller #0 [ 987.010941][T12272] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 987.017766][T12271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 987.017784][T12271] Call Trace: [ 987.017795][T12271] [ 987.017805][T12271] dump_stack_lvl+0x188/0x250 [ 987.048955][T12271] ? show_regs_print_info+0x20/0x20 [ 987.054215][T12271] ? load_image+0x410/0x410 [ 987.058769][T12271] ? __might_sleep+0xf0/0xf0 [ 987.063403][T12271] ? __lock_acquire+0x7d40/0x7d40 [ 987.068486][T12271] should_fail+0x383/0x4b0 [ 987.072951][T12271] should_failslab+0x5/0x20 [ 987.077496][T12271] slab_pre_alloc_hook+0x51/0xc0 [ 987.082477][T12271] kmem_cache_alloc_trace+0x47/0x290 [ 987.087801][T12271] ? legacy_init_fs_context+0x4d/0xb0 [ 987.093216][T12271] ? __raw_spin_lock_init+0x41/0x100 [ 987.098575][T12271] legacy_init_fs_context+0x4d/0xb0 [ 987.107983][T12271] alloc_fs_context+0x628/0x7d0 [ 987.112882][T12271] __se_sys_fsopen+0x111/0x320 [ 987.117713][T12271] do_syscall_64+0x4c/0xa0 [ 987.122171][T12271] ? clear_bhb_loop+0x30/0x80 [ 987.126919][T12271] ? clear_bhb_loop+0x30/0x80 [ 987.131645][T12271] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 987.137577][T12271] RIP: 0033:0x7ffa97b89b19 [ 987.142039][T12271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.161680][T12271] RSP: 002b:00007ffa95de0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 987.170142][T12271] RAX: ffffffffffffffda RBX: 00007ffa97e0ffa0 RCX: 00007ffa97b89b19 [ 987.178156][T12271] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 987.186407][T12271] RBP: 00007ffa97c21b70 R08: 0000000000000000 R09: 0000000000000000 [ 987.194420][T12271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 987.202552][T12271] R13: 00007ffa97e10038 R14: 00007ffa97e0ffa0 R15: 00007ffc8e62c538 [ 987.210551][T12271] [ 987.317786][T12266] udevd[12266]: symlink '../../loop0' '/dev/disk/by-diskseq/448.tmp-b7:0' failed: Read-only file system [ 987.335096][T12271] ceph: No mds server is up or the cluster is laggy [ 987.342385][ T4263] libceph: connect (1)[c::]:6789 error -101 [ 987.352233][ T4263] libceph: mon0 (1)[c::]:6789 connect error [ 987.439983][T12266] udevd[12266]: symlink '../../loop0' '/dev/disk/by-diskseq/448.tmp-b7:0' failed: Read-only file system [ 987.840756][ T4263] libceph: connect (1)[c::]:6789 error -101 [ 987.848716][ T4263] libceph: mon0 (1)[c::]:6789 connect error [ 988.465141][ T1349] libceph: connect (1)[c::]:6789 error -101 [ 988.477160][ T1349] libceph: mon0 (1)[c::]:6789 connect error [ 989.443110][T12295] jffs2: notice: (12295) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 990.780710][T12305] ip_tables: iptables: counters copy to user failed while replacing table [ 991.846811][T12311] FAULT_INJECTION: forcing a failure. [ 991.846811][T12311] name failslab, interval 1, probability 0, space 0, times 0 [ 991.997127][T12311] CPU: 0 PID: 12311 Comm: syz.1.1920 Not tainted syzkaller #0 [ 992.004661][T12311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 992.014751][T12311] Call Trace: [ 992.018069][T12311] [ 992.021027][T12311] dump_stack_lvl+0x188/0x250 [ 992.025746][T12311] ? show_regs_print_info+0x20/0x20 [ 992.030983][T12311] ? load_image+0x410/0x410 [ 992.035532][T12311] ? __might_sleep+0xf0/0xf0 [ 992.040162][T12311] ? __lock_acquire+0x7d40/0x7d40 [ 992.045240][T12311] should_fail+0x383/0x4b0 [ 992.049694][T12311] should_failslab+0x5/0x20 [ 992.054218][T12311] slab_pre_alloc_hook+0x51/0xc0 [ 992.059170][T12311] kmem_cache_alloc_trace+0x47/0x290 [ 992.064496][T12311] ? legacy_init_fs_context+0x4d/0xb0 [ 992.069951][T12311] ? __raw_spin_lock_init+0x41/0x100 [ 992.075270][T12311] legacy_init_fs_context+0x4d/0xb0 [ 992.080487][T12311] alloc_fs_context+0x628/0x7d0 [ 992.085378][T12311] __se_sys_fsopen+0x111/0x320 [ 992.090148][T12311] do_syscall_64+0x4c/0xa0 [ 992.094577][T12311] ? clear_bhb_loop+0x30/0x80 [ 992.099287][T12311] ? clear_bhb_loop+0x30/0x80 [ 992.103999][T12311] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 992.109898][T12311] RIP: 0033:0x7ffa97b89b19 [ 992.114316][T12311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 992.133928][T12311] RSP: 002b:00007ffa95de0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 992.142355][T12311] RAX: ffffffffffffffda RBX: 00007ffa97e0ffa0 RCX: 00007ffa97b89b19 [ 992.150339][T12311] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 992.158321][T12311] RBP: 00007ffa97c21b70 R08: 0000000000000000 R09: 0000000000000000 [ 992.166302][T12311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 992.174293][T12311] R13: 00007ffa97e10038 R14: 00007ffa97e0ffa0 R15: 00007ffc8e62c538 [ 992.182299][T12311] [ 992.880005][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.886392][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.587373][T12311] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 993.897539][ T4262] libceph: connect (1)[c::]:6789 error -101 [ 993.917187][ T4262] libceph: mon0 (1)[c::]:6789 connect error [ 995.350176][T12311] ceph: No mds server is up or the cluster is laggy [ 995.360137][ T4262] libceph: connect (1)[c::]:6789 error -101 [ 995.369821][ T4262] libceph: mon0 (1)[c::]:6789 connect error [ 995.990012][T12332] FAULT_INJECTION: forcing a failure. [ 995.990012][T12332] name failslab, interval 1, probability 0, space 0, times 0 [ 996.002918][T12332] CPU: 1 PID: 12332 Comm: syz.5.1928 Not tainted syzkaller #0 [ 996.010415][T12332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 996.020497][T12332] Call Trace: [ 996.023808][T12332] [ 996.026782][T12332] dump_stack_lvl+0x188/0x250 [ 996.031519][T12332] ? show_regs_print_info+0x20/0x20 [ 996.036773][T12332] ? load_image+0x410/0x410 [ 996.041321][T12332] ? __might_sleep+0xf0/0xf0 [ 996.045944][T12332] ? __lock_acquire+0x7d40/0x7d40 [ 996.051013][T12332] should_fail+0x383/0x4b0 [ 996.055500][T12332] should_failslab+0x5/0x20 [ 996.060040][T12332] slab_pre_alloc_hook+0x51/0xc0 [ 996.065021][T12332] kmem_cache_alloc_trace+0x47/0x290 [ 996.070334][T12332] ? __se_sys_fsopen+0x19c/0x320 [ 996.075306][T12332] __se_sys_fsopen+0x19c/0x320 [ 996.080109][T12332] do_syscall_64+0x4c/0xa0 [ 996.084561][T12332] ? clear_bhb_loop+0x30/0x80 [ 996.089267][T12332] ? clear_bhb_loop+0x30/0x80 [ 996.093979][T12332] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 996.099926][T12332] RIP: 0033:0x7fa3f2c86b19 [ 996.104383][T12332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 996.124017][T12332] RSP: 002b:00007fa3f0ebc028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 996.132465][T12332] RAX: ffffffffffffffda RBX: 00007fa3f2f0d090 RCX: 00007fa3f2c86b19 [ 996.140480][T12332] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 996.148485][T12332] RBP: 00007fa3f2d1eb70 R08: 0000000000000000 R09: 0000000000000000 [ 996.156485][T12332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 996.164486][T12332] R13: 00007fa3f2f0d128 R14: 00007fa3f2f0d090 R15: 00007fff41707698 [ 996.172506][T12332] [ 996.188351][T12333] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 997.553209][T12341] jffs2: notice: (12341) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1003.570424][T12364] FAULT_INJECTION: forcing a failure. [ 1003.570424][T12364] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1003.687095][T12364] CPU: 1 PID: 12364 Comm: syz.5.1936 Not tainted syzkaller #0 [ 1003.694622][T12364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1003.704729][T12364] Call Trace: [ 1003.708053][T12364] [ 1003.711010][T12364] dump_stack_lvl+0x188/0x250 [ 1003.715740][T12364] ? show_regs_print_info+0x20/0x20 [ 1003.720980][T12364] ? load_image+0x410/0x410 [ 1003.725515][T12364] ? __lock_acquire+0x12df/0x7d40 [ 1003.730580][T12364] ? mark_lock+0x94/0x320 [ 1003.734940][T12364] should_fail+0x383/0x4b0 [ 1003.739391][T12364] get_futex_key+0x1a0/0x1200 [ 1003.744106][T12364] ? futex_wait_restart+0x250/0x250 [ 1003.749374][T12364] futex_wake+0x101/0x540 [ 1003.753745][T12364] ? verify_lock_unused+0x140/0x140 [ 1003.758991][T12364] ? verify_lock_unused+0x140/0x140 [ 1003.764238][T12364] ? futex_wait+0x680/0x680 [ 1003.768797][T12364] do_futex+0xd83/0x12b0 [ 1003.773089][T12364] ? __might_sleep+0xf0/0xf0 [ 1003.777708][T12364] ? __might_fault+0xb7/0x110 [ 1003.782417][T12364] ? futex_exit_release+0x1c0/0x1c0 [ 1003.787643][T12364] ? __lock_acquire+0x7d40/0x7d40 [ 1003.792705][T12364] mm_release+0x278/0x3c0 [ 1003.797062][T12364] ? exit_mm_release+0x30/0x30 [ 1003.801873][T12364] ? lockdep_hardirqs_on+0x94/0x140 [ 1003.807116][T12364] exit_mm+0xaf/0x7b0 [ 1003.811121][T12364] ? perf_pmu_migrate_context+0xb70/0xb70 [ 1003.816886][T12364] ? do_exit+0x2100/0x2100 [ 1003.821319][T12364] ? rcu_is_watching+0x11/0xa0 [ 1003.826087][T12364] ? mm_trace_rss_stat+0x81/0x1c0 [ 1003.831112][T12364] ? sync_mm_rss+0x211/0x350 [ 1003.835703][T12364] do_exit+0x5b8/0x2100 [ 1003.839872][T12364] ? put_task_struct+0x80/0x80 [ 1003.844641][T12364] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1003.850642][T12364] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1003.855676][T12364] do_group_exit+0x12c/0x2f0 [ 1003.860268][T12364] ? lockdep_hardirqs_on+0x94/0x140 [ 1003.865468][T12364] get_signal+0x7eb/0x12e0 [ 1003.869914][T12364] arch_do_signal_or_restart+0xe6/0x12a0 [ 1003.875571][T12364] ? futex_exit_release+0x1c0/0x1c0 [ 1003.880790][T12364] ? get_sigframe_size+0x10/0x10 [ 1003.885733][T12364] ? __context_tracking_exit+0x4c/0x80 [ 1003.891208][T12364] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1003.897332][T12364] ? exit_to_user_mode_loop+0x3b/0x130 [ 1003.902822][T12364] exit_to_user_mode_loop+0x9e/0x130 [ 1003.908113][T12364] exit_to_user_mode_prepare+0xee/0x180 [ 1003.913667][T12364] syscall_exit_to_user_mode+0x16/0x40 [ 1003.919135][T12364] do_syscall_64+0x58/0xa0 [ 1003.923561][T12364] ? clear_bhb_loop+0x30/0x80 [ 1003.928274][T12364] ? clear_bhb_loop+0x30/0x80 [ 1003.932976][T12364] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1003.938877][T12364] RIP: 0033:0x7fa3f2c86b19 [ 1003.943297][T12364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1003.962919][T12364] RSP: 002b:00007fa3f0ebc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1003.971378][T12364] RAX: fffffffffffffe00 RBX: 00007fa3f2f0d098 RCX: 00007fa3f2c86b19 [ 1003.979378][T12364] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa3f2f0d098 [ 1003.987394][T12364] RBP: 00007fa3f2f0d090 R08: 0000000000000000 R09: 0000000000000000 [ 1003.995388][T12364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1004.003670][T12364] R13: 00007fa3f2f0d128 R14: 00007fff417075b0 R15: 00007fff41707698 [ 1004.011692][T12364] [ 1004.139045][T12379] binder: 12378:12379 ioctl 5000940a 2000000028c0 returned -22 [ 1005.722107][T12396] FAULT_INJECTION: forcing a failure. [ 1005.722107][T12396] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.734901][T12396] CPU: 1 PID: 12396 Comm: syz.2.1943 Not tainted syzkaller #0 [ 1005.742398][T12396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1005.752484][T12396] Call Trace: [ 1005.755790][T12396] [ 1005.758750][T12396] dump_stack_lvl+0x188/0x250 [ 1005.763475][T12396] ? show_regs_print_info+0x20/0x20 [ 1005.768704][T12396] ? load_image+0x410/0x410 [ 1005.773250][T12396] ? __might_sleep+0xf0/0xf0 [ 1005.777891][T12396] ? __lock_acquire+0x7d40/0x7d40 [ 1005.782972][T12396] should_fail+0x383/0x4b0 [ 1005.787432][T12396] should_failslab+0x5/0x20 [ 1005.791969][T12396] slab_pre_alloc_hook+0x51/0xc0 [ 1005.796938][T12396] kmem_cache_alloc_trace+0x47/0x290 [ 1005.802260][T12396] ? __se_sys_fsopen+0x19c/0x320 [ 1005.807258][T12396] __se_sys_fsopen+0x19c/0x320 [ 1005.812058][T12396] do_syscall_64+0x4c/0xa0 [ 1005.816516][T12396] ? clear_bhb_loop+0x30/0x80 [ 1005.821221][T12396] ? clear_bhb_loop+0x30/0x80 [ 1005.825934][T12396] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1005.831862][T12396] RIP: 0033:0x7f5e7157bb19 [ 1005.836332][T12396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1005.855970][T12396] RSP: 002b:00007f5e6f7b1028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1005.864431][T12396] RAX: ffffffffffffffda RBX: 00007f5e71802090 RCX: 00007f5e7157bb19 [ 1005.872440][T12396] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 1005.880622][T12396] RBP: 00007f5e71613b70 R08: 0000000000000000 R09: 0000000000000000 [ 1005.888628][T12396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1005.896635][T12396] R13: 00007f5e71802128 R14: 00007f5e71802090 R15: 00007fff2d408848 [ 1005.904670][T12396] [ 1005.922422][T12397] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 1010.057660][T12420] FAULT_INJECTION: forcing a failure. [ 1010.057660][T12420] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.070622][T12420] CPU: 0 PID: 12420 Comm: syz.5.1951 Not tainted syzkaller #0 [ 1010.078087][T12420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1010.088158][T12420] Call Trace: [ 1010.091448][T12420] [ 1010.094382][T12420] dump_stack_lvl+0x188/0x250 [ 1010.099081][T12420] ? show_regs_print_info+0x20/0x20 [ 1010.104459][T12420] ? load_image+0x410/0x410 [ 1010.108990][T12420] ? __might_sleep+0xf0/0xf0 [ 1010.113589][T12420] ? __lock_acquire+0x7d40/0x7d40 [ 1010.118629][T12420] should_fail+0x383/0x4b0 [ 1010.123080][T12420] should_failslab+0x5/0x20 [ 1010.127840][T12420] slab_pre_alloc_hook+0x51/0xc0 [ 1010.132804][T12420] kmem_cache_alloc_trace+0x47/0x290 [ 1010.138193][T12420] ? legacy_init_fs_context+0x4d/0xb0 [ 1010.143590][T12420] ? __raw_spin_lock_init+0x41/0x100 [ 1010.148884][T12420] legacy_init_fs_context+0x4d/0xb0 [ 1010.154473][T12420] alloc_fs_context+0x628/0x7d0 [ 1010.159352][T12420] __se_sys_fsopen+0x111/0x320 [ 1010.164130][T12420] do_syscall_64+0x4c/0xa0 [ 1010.168563][T12420] ? clear_bhb_loop+0x30/0x80 [ 1010.173255][T12420] ? clear_bhb_loop+0x30/0x80 [ 1010.177938][T12420] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1010.183838][T12420] RIP: 0033:0x7fa3f2c86b19 [ 1010.188285][T12420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1010.207894][T12420] RSP: 002b:00007fa3f0edd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1010.216311][T12420] RAX: ffffffffffffffda RBX: 00007fa3f2f0cfa0 RCX: 00007fa3f2c86b19 [ 1010.224294][T12420] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 1010.232282][T12420] RBP: 00007fa3f2d1eb70 R08: 0000000000000000 R09: 0000000000000000 [ 1010.240268][T12420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1010.248389][T12420] R13: 00007fa3f2f0d038 R14: 00007fa3f2f0cfa0 R15: 00007fff41707698 [ 1010.256384][T12420] [ 1010.294824][T12420] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 1010.337667][ T5798] libceph: connect (1)[c::]:6789 error -101 [ 1010.343780][ T5798] libceph: mon0 (1)[c::]:6789 connect error [ 1010.366858][T12420] ceph: No mds server is up or the cluster is laggy [ 1011.654062][T12429] jffs2: notice: (12429) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1012.252506][T12436] FAULT_INJECTION: forcing a failure. [ 1012.252506][T12436] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.265347][T12436] CPU: 0 PID: 12436 Comm: syz.5.1956 Not tainted syzkaller #0 [ 1012.272994][T12436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1012.283140][T12436] Call Trace: [ 1012.286458][T12436] [ 1012.289424][T12436] dump_stack_lvl+0x188/0x250 [ 1012.294166][T12436] ? show_regs_print_info+0x20/0x20 [ 1012.299535][T12436] ? load_image+0x410/0x410 [ 1012.304099][T12436] ? __might_sleep+0xf0/0xf0 [ 1012.308746][T12436] ? __lock_acquire+0x7d40/0x7d40 [ 1012.313940][T12436] should_fail+0x383/0x4b0 [ 1012.318427][T12436] should_failslab+0x5/0x20 [ 1012.322972][T12436] slab_pre_alloc_hook+0x51/0xc0 [ 1012.328041][T12436] kmem_cache_alloc_trace+0x47/0x290 [ 1012.333392][T12436] ? __se_sys_fsopen+0x19c/0x320 [ 1012.338377][T12436] __se_sys_fsopen+0x19c/0x320 [ 1012.343199][T12436] do_syscall_64+0x4c/0xa0 [ 1012.347659][T12436] ? clear_bhb_loop+0x30/0x80 [ 1012.352384][T12436] ? clear_bhb_loop+0x30/0x80 [ 1012.357107][T12436] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1012.363047][T12436] RIP: 0033:0x7fa3f2c86b19 [ 1012.367505][T12436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1012.387157][T12436] RSP: 002b:00007fa3f0ebc028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1012.395624][T12436] RAX: ffffffffffffffda RBX: 00007fa3f2f0d090 RCX: 00007fa3f2c86b19 [ 1012.403877][T12436] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 1012.411893][T12436] RBP: 00007fa3f2d1eb70 R08: 0000000000000000 R09: 0000000000000000 [ 1012.419903][T12436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1012.428033][T12436] R13: 00007fa3f2f0d128 R14: 00007fa3f2f0d090 R15: 00007fff41707698 [ 1012.436082][T12436] [ 1012.451434][T12437] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 1012.954084][T12443] binder: 12440:12443 ioctl 5000940a 2000000028c0 returned -22 [ 1014.934621][T12448] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1014.977476][T12448] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1015.127839][T12461] jffs2: notice: (12461) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1017.840559][T12478] FAULT_INJECTION: forcing a failure. [ 1017.840559][T12478] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.853361][T12478] CPU: 1 PID: 12478 Comm: syz.1.1964 Not tainted syzkaller #0 [ 1017.860843][T12478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1017.870914][T12478] Call Trace: [ 1017.874203][T12478] [ 1017.877147][T12478] dump_stack_lvl+0x188/0x250 [ 1017.881870][T12478] ? show_regs_print_info+0x20/0x20 [ 1017.887108][T12478] ? load_image+0x410/0x410 [ 1017.891644][T12478] ? __might_sleep+0xf0/0xf0 [ 1017.896278][T12478] ? __lock_acquire+0x7d40/0x7d40 [ 1017.900534][T12482] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 1017.901365][T12478] should_fail+0x383/0x4b0 [ 1017.915905][T12478] should_failslab+0x5/0x20 [ 1017.920452][T12478] slab_pre_alloc_hook+0x51/0xc0 [ 1017.925407][T12478] kmem_cache_alloc_trace+0x47/0x290 [ 1017.930702][T12478] ? legacy_init_fs_context+0x4d/0xb0 [ 1017.936099][T12478] ? __raw_spin_lock_init+0x41/0x100 [ 1017.941400][T12478] legacy_init_fs_context+0x4d/0xb0 [ 1017.946617][T12478] alloc_fs_context+0x628/0x7d0 [ 1017.951497][T12478] __se_sys_fsopen+0x111/0x320 [ 1017.956312][T12478] do_syscall_64+0x4c/0xa0 [ 1017.960769][T12478] ? clear_bhb_loop+0x30/0x80 [ 1017.965459][T12478] ? clear_bhb_loop+0x30/0x80 [ 1017.970150][T12478] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1017.976075][T12478] RIP: 0033:0x7ffa97b89b19 [ 1017.980523][T12478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1018.000159][T12478] RSP: 002b:00007ffa95de0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1018.008600][T12478] RAX: ffffffffffffffda RBX: 00007ffa97e0ffa0 RCX: 00007ffa97b89b19 [ 1018.016620][T12478] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 1018.024632][T12478] RBP: 00007ffa97c21b70 R08: 0000000000000000 R09: 0000000000000000 [ 1018.032649][T12478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1018.040657][T12478] R13: 00007ffa97e10038 R14: 00007ffa97e0ffa0 R15: 00007ffc8e62c538 [ 1018.048687][T12478] [ 1018.187838][ T4263] libceph: connect (1)[c::]:6789 error -101 [ 1018.197267][ T4263] libceph: mon0 (1)[c::]:6789 connect error [ 1018.299440][T12483] ceph: No mds server is up or the cluster is laggy [ 1018.340164][T12491] No source specified [ 1018.537418][ T4263] libceph: connect (1)[c::]:6789 error -101 [ 1018.543490][ T4263] libceph: mon0 (1)[c::]:6789 connect error [ 1018.628809][ T4301] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1019.470858][ T4263] libceph: connect (1)[c::]:6789 error -101 [ 1019.531729][ T4263] libceph: mon0 (1)[c::]:6789 connect error [ 1019.767635][ T4301] usb 3-1: Using ep0 maxpacket: 8 [ 1019.907399][ T4301] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1019.934284][ T4301] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1019.969268][ T4301] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1019.987401][ T4301] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1020.027158][ T4301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.061801][ T4301] usb 3-1: config 0 descriptor?? [ 1020.342324][T12502] jffs2: notice: (12502) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1020.419169][T12500] loop1: detected capacity change from 0 to 512 [ 1020.540610][ T4301] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 1020.913910][T12513] loop1: detected capacity change from 0 to 512 [ 1020.994687][T12513] EXT4-fs (loop1): Ignoring removed bh option [ 1021.001044][T12513] EXT4-fs (loop1): old and new quota format mixing [ 1021.735896][ T4301] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 1021.743207][ T4301] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 1021.750405][ T4301] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 1021.757587][ T4301] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 1021.765123][ T4301] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1021.938520][T12455] udevd[12455]: symlink '../../loop1' '/dev/disk/by-diskseq/450.tmp-b7:1' failed: Read-only file system [ 1021.957723][T12487] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1022.004139][ T4301] usb 3-1: USB disconnect, device number 4 [ 1022.062452][T12514] udevd[12514]: symlink '../../loop1' '/dev/disk/by-diskseq/450.tmp-b7:1' failed: Read-only file system [ 1022.172458][T12514] udevd[12514]: symlink '../../loop1' '/dev/disk/by-diskseq/452.tmp-b7:1' failed: Read-only file system [ 1022.262550][T12514] udevd[12514]: symlink '../../loop1' '/dev/disk/by-diskseq/452.tmp-b7:1' failed: Read-only file system [ 1022.349617][T12523] FAULT_INJECTION: forcing a failure. [ 1022.349617][T12523] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.389199][T12514] udevd[12514]: symlink '../../loop1' '/dev/disk/by-diskseq/452.tmp-b7:1' failed: Read-only file system [ 1022.393915][T12523] CPU: 0 PID: 12523 Comm: syz.0.1969 Not tainted syzkaller #0 [ 1022.407848][T12523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1022.417910][T12523] Call Trace: [ 1022.421210][T12523] [ 1022.424149][T12523] dump_stack_lvl+0x188/0x250 [ 1022.428862][T12523] ? show_regs_print_info+0x20/0x20 [ 1022.434090][T12523] ? load_image+0x410/0x410 [ 1022.438610][T12523] ? __might_sleep+0xf0/0xf0 [ 1022.443394][T12523] ? __lock_acquire+0x7d40/0x7d40 [ 1022.448527][T12523] should_fail+0x383/0x4b0 [ 1022.452996][T12523] should_failslab+0x5/0x20 [ 1022.457662][T12523] slab_pre_alloc_hook+0x51/0xc0 [ 1022.462783][T12523] kmem_cache_alloc_trace+0x47/0x290 [ 1022.468115][T12523] ? legacy_init_fs_context+0x4d/0xb0 [ 1022.473691][T12523] ? __raw_spin_lock_init+0x41/0x100 [ 1022.479029][T12523] legacy_init_fs_context+0x4d/0xb0 [ 1022.484436][T12523] alloc_fs_context+0x628/0x7d0 [ 1022.489499][T12523] __se_sys_fsopen+0x111/0x320 [ 1022.494337][T12523] do_syscall_64+0x4c/0xa0 [ 1022.498812][T12523] ? clear_bhb_loop+0x30/0x80 [ 1022.503807][T12523] ? clear_bhb_loop+0x30/0x80 [ 1022.508530][T12523] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1022.514507][T12523] RIP: 0033:0x7f935c678b19 [ 1022.518972][T12523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1022.538688][T12523] RSP: 002b:00007f935a8cf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1022.547125][T12523] RAX: ffffffffffffffda RBX: 00007f935c8fefa0 RCX: 00007f935c678b19 [ 1022.555142][T12523] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 1022.563180][T12523] RBP: 00007f935c710b70 R08: 0000000000000000 R09: 0000000000000000 [ 1022.571186][T12523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1022.579185][T12523] R13: 00007f935c8ff038 R14: 00007f935c8fefa0 R15: 00007fff4c5a74f8 [ 1022.587233][T12523] [ 1022.648026][T12514] udevd[12514]: symlink '../../loop1' '/dev/disk/by-diskseq/452.tmp-b7:1' failed: Read-only file system [ 1022.739495][T12514] udevd[12514]: symlink '../../loop1' '/dev/disk/by-diskseq/453.tmp-b7:1' failed: Read-only file system [ 1022.978223][T12533] No source specified [ 1024.599219][T12523] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 1024.965386][T12531] ceph: No mds server is up or the cluster is laggy [ 1024.974261][ T4263] libceph: connect (1)[c::]:6789 error -101 [ 1024.987163][ T4263] libceph: mon0 (1)[c::]:6789 connect error [ 1025.203989][T12556] loop0: detected capacity change from 0 to 512 [ 1026.846173][T12514] udevd[12514]: symlink '../../loop0' '/dev/disk/by-diskseq/454.tmp-b7:0' failed: Read-only file system [ 1027.817680][T12514] udevd[12514]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1027.975401][T12514] udevd[12514]: symlink '../../loop0' '/dev/disk/by-diskseq/454.tmp-b7:0' failed: Read-only file system [ 1028.030417][T12514] udevd[12514]: symlink '../../loop0' '/dev/disk/by-diskseq/454.tmp-b7:0' failed: Read-only file system [ 1028.142928][T12576] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.211500][T12583] loop2: detected capacity change from 0 to 512 [ 1028.328537][T12583] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1028.444015][T12514] udevd[12514]: symlink '../../loop2' '/dev/disk/by-diskseq/456.tmp-b7:2' failed: Read-only file system [ 1028.471872][T12576] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.488288][T12514] udevd[12514]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1028.491310][T12583] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.1997: inode has both inline data and extents flags [ 1028.513767][T12583] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.1997: couldn't read orphan inode 15 (err -117) [ 1028.526145][T12583] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,auto_da_alloc=0x0000000000000002,discard,dioread_nolock,nodiscard,,errors=continue. Quota mode: writeback. [ 1028.696690][T12583] ip_tables: iptables: counters copy to user failed while replacing table [ 1028.711470][T12583] hub 5-0:1.0: USB hub found [ 1028.716872][T12583] hub 5-0:1.0: 1 port detected [ 1028.800415][T12584] FAULT_INJECTION: forcing a failure. [ 1028.800415][T12584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1028.843723][T12584] CPU: 1 PID: 12584 Comm: syz.5.1996 Not tainted syzkaller #0 [ 1028.851263][T12584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1028.861369][T12584] Call Trace: [ 1028.864659][T12584] [ 1028.867724][T12584] dump_stack_lvl+0x188/0x250 [ 1028.872427][T12584] ? show_regs_print_info+0x20/0x20 [ 1028.877652][T12584] ? load_image+0x410/0x410 [ 1028.882353][T12584] ? __lock_acquire+0x7d40/0x7d40 [ 1028.887434][T12584] should_fail+0x383/0x4b0 [ 1028.891900][T12584] _copy_from_user+0x2e/0x170 [ 1028.896625][T12584] strndup_user+0xae/0x150 [ 1028.901080][T12584] __se_sys_fsopen+0xae/0x320 [ 1028.905831][T12584] do_syscall_64+0x4c/0xa0 [ 1028.910294][T12584] ? clear_bhb_loop+0x30/0x80 [ 1028.915152][T12584] ? clear_bhb_loop+0x30/0x80 [ 1028.919869][T12584] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1028.925829][T12584] RIP: 0033:0x7fa3f2c86b19 [ 1028.930307][T12584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1028.949980][T12584] RSP: 002b:00007fa3f0ebc028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1028.958441][T12584] RAX: ffffffffffffffda RBX: 00007fa3f2f0d090 RCX: 00007fa3f2c86b19 [ 1028.966541][T12584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 1028.974558][T12584] RBP: 00007fa3f2d1eb70 R08: 0000000000000000 R09: 0000000000000000 [ 1028.982591][T12584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1028.990595][T12584] R13: 00007fa3f2f0d128 R14: 00007fa3f2f0d090 R15: 00007fff41707698 [ 1028.998621][T12584] [ 1029.001818][ C1] vkms_vblank_simulate: vblank timer overrun [ 1029.107244][T12514] udevd[12514]: symlink '../../loop2' '/dev/disk/by-diskseq/456.tmp-b7:2' failed: Read-only file system [ 1029.266400][T12514] udevd[12514]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1029.282131][T12576] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.682626][T12576] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.743976][T12592] jffs2: notice: (12592) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1029.783770][T12514] udevd[12514]: symlink '../../loop2' '/dev/disk/by-diskseq/456.tmp-b7:2' failed: Read-only file system [ 1029.857648][T12514] udevd[12514]: symlink '../../loop2' '/dev/disk/by-diskseq/456.tmp-b7:2' failed: Read-only file system [ 1029.948540][T12600] loop4: detected capacity change from 0 to 512 [ 1029.971498][T12576] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.987635][T12576] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.004553][T12576] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.036818][T12576] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.083974][T12514] udevd[12514]: symlink '../../loop4' '/dev/disk/by-diskseq/458.tmp-b7:4' failed: Read-only file system [ 1030.676048][T12609] FAULT_INJECTION: forcing a failure. [ 1030.676048][T12609] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.930480][T12609] CPU: 1 PID: 12609 Comm: syz.0.2003 Not tainted syzkaller #0 [ 1030.938813][T12609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1030.948910][T12609] Call Trace: [ 1030.952224][T12609] [ 1030.955207][T12609] dump_stack_lvl+0x188/0x250 [ 1030.959969][T12609] ? show_regs_print_info+0x20/0x20 [ 1030.965309][T12609] ? load_image+0x410/0x410 [ 1030.969853][T12609] ? __lock_acquire+0x7d40/0x7d40 [ 1030.974918][T12609] ? release_firmware_map_entry+0x190/0x190 [ 1030.980858][T12609] should_fail+0x383/0x4b0 [ 1030.985322][T12609] should_failslab+0x5/0x20 [ 1030.989859][T12609] slab_pre_alloc_hook+0x51/0xc0 [ 1030.994838][T12609] ? __alloc_file+0x25/0x240 [ 1030.999465][T12609] kmem_cache_alloc+0x3d/0x280 [ 1031.004296][T12609] __alloc_file+0x25/0x240 [ 1031.008789][T12609] alloc_empty_file+0x90/0x180 [ 1031.013618][T12609] alloc_file+0x5c/0x510 [ 1031.017909][T12609] alloc_file_pseudo+0x180/0x200 [ 1031.022895][T12609] ? alloc_empty_file_noaccount+0x80/0x80 [ 1031.028661][T12609] ? alloc_fd+0x59e/0x650 [ 1031.033027][T12609] sock_alloc_file+0xb3/0x240 [ 1031.037796][T12609] __sys_socket+0x11d/0x170 [ 1031.042338][T12609] __x64_sys_socket+0x76/0x80 [ 1031.047062][T12609] do_syscall_64+0x4c/0xa0 [ 1031.051515][T12609] ? clear_bhb_loop+0x30/0x80 [ 1031.056225][T12609] ? clear_bhb_loop+0x30/0x80 [ 1031.061026][T12609] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1031.066951][T12609] RIP: 0033:0x7f935c678b19 [ 1031.071403][T12609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1031.091044][T12609] RSP: 002b:00007f935a8cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1031.099504][T12609] RAX: ffffffffffffffda RBX: 00007f935c8fefa0 RCX: 00007f935c678b19 [ 1031.107520][T12609] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 1031.115530][T12609] RBP: 00007f935c710b70 R08: 0000000000000000 R09: 0000000000000000 [ 1031.123529][T12609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1031.131548][T12609] R13: 00007f935c8ff038 R14: 00007f935c8fefa0 R15: 00007fff4c5a74f8 [ 1031.139570][T12609] [ 1031.190320][T12615] FAULT_INJECTION: forcing a failure. [ 1031.190320][T12615] name failslab, interval 1, probability 0, space 0, times 0 [ 1031.204369][T12615] CPU: 1 PID: 12615 Comm: syz.2.2005 Not tainted syzkaller #0 [ 1031.211884][T12615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1031.221979][T12615] Call Trace: [ 1031.225290][T12615] [ 1031.228247][T12615] dump_stack_lvl+0x188/0x250 [ 1031.232939][T12615] ? show_regs_print_info+0x20/0x20 [ 1031.238146][T12615] ? load_image+0x410/0x410 [ 1031.242674][T12615] ? __might_sleep+0xf0/0xf0 [ 1031.247291][T12615] ? __lock_acquire+0x7d40/0x7d40 [ 1031.252346][T12615] should_fail+0x383/0x4b0 [ 1031.256784][T12615] should_failslab+0x5/0x20 [ 1031.261306][T12615] slab_pre_alloc_hook+0x51/0xc0 [ 1031.266250][T12615] kmem_cache_alloc_trace+0x47/0x290 [ 1031.271543][T12615] ? legacy_init_fs_context+0x4d/0xb0 [ 1031.276945][T12615] ? __raw_spin_lock_init+0x41/0x100 [ 1031.282289][T12615] legacy_init_fs_context+0x4d/0xb0 [ 1031.287694][T12615] alloc_fs_context+0x628/0x7d0 [ 1031.292580][T12615] __se_sys_fsopen+0x111/0x320 [ 1031.297361][T12615] do_syscall_64+0x4c/0xa0 [ 1031.301791][T12615] ? clear_bhb_loop+0x30/0x80 [ 1031.306492][T12615] ? clear_bhb_loop+0x30/0x80 [ 1031.311215][T12615] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1031.317120][T12615] RIP: 0033:0x7f5e7157bb19 [ 1031.321578][T12615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1031.341191][T12615] RSP: 002b:00007f5e6f7b1028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1031.349637][T12615] RAX: ffffffffffffffda RBX: 00007f5e71802090 RCX: 00007f5e7157bb19 [ 1031.357614][T12615] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 1031.365591][T12615] RBP: 00007f5e71613b70 R08: 0000000000000000 R09: 0000000000000000 [ 1031.373566][T12615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1031.381538][T12615] R13: 00007f5e71802128 R14: 00007f5e71802090 R15: 00007fff2d408848 [ 1031.389521][T12615] [ 1031.409070][T12613] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 1031.528444][ T4845] libceph: connect (1)[c::]:6789 error -101 [ 1031.543399][ T4845] libceph: mon0 (1)[c::]:6789 connect error [ 1031.559259][T12613] ceph: No mds server is up or the cluster is laggy [ 1031.683768][T12628] FAULT_INJECTION: forcing a failure. [ 1031.683768][T12628] name failslab, interval 1, probability 0, space 0, times 0 [ 1031.704393][T12628] CPU: 1 PID: 12628 Comm: syz.1.2009 Not tainted syzkaller #0 [ 1031.711916][T12628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1031.722007][T12628] Call Trace: [ 1031.725353][T12628] [ 1031.728314][T12628] dump_stack_lvl+0x188/0x250 [ 1031.733041][T12628] ? show_regs_print_info+0x20/0x20 [ 1031.738285][T12628] ? load_image+0x410/0x410 [ 1031.742851][T12628] ? __might_sleep+0xf0/0xf0 [ 1031.747463][T12628] ? __lock_acquire+0x7d40/0x7d40 [ 1031.752501][T12628] should_fail+0x383/0x4b0 [ 1031.756968][T12628] should_failslab+0x5/0x20 [ 1031.761520][T12628] slab_pre_alloc_hook+0x51/0xc0 [ 1031.766481][T12628] kmem_cache_alloc_trace+0x47/0x290 [ 1031.771771][T12628] ? __list_lru_init+0x535/0xac0 [ 1031.776741][T12628] __list_lru_init+0x535/0xac0 [ 1031.781521][T12628] alloc_super+0x787/0x970 [ 1031.785944][T12628] ? kill_litter_super+0xa0/0xa0 [ 1031.790885][T12628] sget_fc+0x2d4/0x6f0 [ 1031.794961][T12628] ? kill_litter_super+0xa0/0xa0 [ 1031.799939][T12628] ? mqueue_get_tree+0xe0/0xe0 [ 1031.804767][T12628] get_tree_nodev+0x26/0x160 [ 1031.809396][T12628] vfs_get_tree+0x88/0x270 [ 1031.813831][T12628] fc_mount+0x18/0xa0 [ 1031.817832][T12628] mq_init_ns+0x39d/0x510 [ 1031.822174][T12628] copy_ipcs+0x2ea/0x4b0 [ 1031.826432][T12628] create_new_namespaces+0x212/0x700 [ 1031.831766][T12628] unshare_nsproxy_namespaces+0x116/0x160 [ 1031.837515][T12628] ksys_unshare+0x4f6/0x8e0 [ 1031.842049][T12628] ? __lock_acquire+0x7d40/0x7d40 [ 1031.847093][T12628] ? sighand_ctor+0x40/0x40 [ 1031.851607][T12628] ? lock_chain_count+0x20/0x20 [ 1031.856470][T12628] ? syscall_enter_from_user_mode+0x21/0x70 [ 1031.862374][T12628] __x64_sys_unshare+0x34/0x40 [ 1031.867257][T12628] do_syscall_64+0x4c/0xa0 [ 1031.871686][T12628] ? clear_bhb_loop+0x30/0x80 [ 1031.876367][T12628] ? clear_bhb_loop+0x30/0x80 [ 1031.881051][T12628] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1031.886973][T12628] RIP: 0033:0x7ffa97b89b19 [ 1031.891435][T12628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1031.911059][T12628] RSP: 002b:00007ffa95de0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1031.919509][T12628] RAX: ffffffffffffffda RBX: 00007ffa97e0ffa0 RCX: 00007ffa97b89b19 [ 1031.927493][T12628] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000200 [ 1031.935472][T12628] RBP: 00007ffa97c21b70 R08: 0000000000000000 R09: 0000000000000000 [ 1031.943473][T12628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1031.951451][T12628] R13: 00007ffa97e10038 R14: 00007ffa97e0ffa0 R15: 00007ffc8e62c538 [ 1031.959446][T12628] [ 1032.051452][T12631] jffs2: notice: (12631) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1032.452314][T12634] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 1032.505581][T12648] loop4: detected capacity change from 0 to 512 [ 1032.518716][ T4262] libceph: connect (1)[c::]:6789 error -101 [ 1032.537101][ T4262] libceph: mon0 (1)[c::]:6789 connect error [ 1032.543480][T12643] FAULT_INJECTION: forcing a failure. [ 1032.543480][T12643] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1032.563735][T12634] ceph: No mds server is up or the cluster is laggy [ 1032.564119][T12643] CPU: 0 PID: 12643 Comm: syz.2.2012 Not tainted syzkaller #0 [ 1032.577845][T12643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1032.587908][T12643] Call Trace: [ 1032.591208][T12643] [ 1032.594140][T12643] dump_stack_lvl+0x188/0x250 [ 1032.598826][T12643] ? show_regs_print_info+0x20/0x20 [ 1032.604036][T12643] ? load_image+0x410/0x410 [ 1032.608550][T12643] ? cgroup_rstat_updated+0xce/0x350 [ 1032.613843][T12643] ? place_entity+0x4f0/0x4f0 [ 1032.618534][T12643] should_fail+0x383/0x4b0 [ 1032.622964][T12643] get_futex_key+0x1a0/0x1200 [ 1032.627674][T12643] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1032.633697][T12643] ? futex_wait_restart+0x250/0x250 [ 1032.638924][T12643] ? lock_chain_count+0x20/0x20 [ 1032.643785][T12643] futex_wait_setup+0x4b/0x520 [ 1032.648573][T12643] ? lockdep_hardirqs_on+0x94/0x140 [ 1032.653777][T12643] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1032.659678][T12643] futex_wait+0x22f/0x680 [ 1032.664019][T12643] ? __lock_acquire+0x13b3/0x7d40 [ 1032.669067][T12643] ? do_futex+0x12b0/0x12b0 [ 1032.673588][T12643] ? verify_lock_unused+0x140/0x140 [ 1032.678803][T12643] ? verify_lock_unused+0x140/0x140 [ 1032.684009][T12643] do_futex+0xdc2/0x12b0 [ 1032.688260][T12643] ? fixup_exception+0xc41/0x1560 [ 1032.693297][T12643] ? futex_exit_release+0x1c0/0x1c0 [ 1032.698496][T12643] ? __context_tracking_exit+0x4c/0x80 [ 1032.703970][T12643] __se_sys_futex+0x389/0x420 [ 1032.708654][T12643] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1032.714647][T12643] ? __x64_sys_futex+0xf0/0xf0 [ 1032.719422][T12643] ? __x64_sys_futex+0x1d/0xf0 [ 1032.724358][T12643] do_syscall_64+0x4c/0xa0 [ 1032.728788][T12643] ? clear_bhb_loop+0x30/0x80 [ 1032.733496][T12643] ? clear_bhb_loop+0x30/0x80 [ 1032.738187][T12643] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1032.744087][T12643] RIP: 0033:0x7f5e7157bb19 [ 1032.748526][T12643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1032.768176][T12643] RSP: 002b:00007f5e6f7b10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1032.776631][T12643] RAX: ffffffffffffffda RBX: 00007f5e71802098 RCX: 00007f5e7157bb19 [ 1032.784641][T12643] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5e71802098 [ 1032.792668][T12643] RBP: 00007f5e71802090 R08: 0000000000000000 R09: 0000000000000000 [ 1032.800769][T12643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1032.808776][T12643] R13: 00007f5e71802128 R14: 00007fff2d408760 R15: 00007fff2d408848 [ 1032.816801][T12643] [ 1032.876330][T12514] udevd[12514]: symlink '../../loop4' '/dev/disk/by-diskseq/460.tmp-b7:4' failed: Read-only file system [ 1032.944783][T12514] udevd[12514]: symlink '../../loop4' '/dev/disk/by-diskseq/460.tmp-b7:4' failed: Read-only file system [ 1034.697535][ T4262] libceph: connect (1)[c::]:6789 error -101 [ 1034.703630][ T4262] libceph: mon0 (1)[c::]:6789 connect error [ 1034.710268][T12658] loop4: detected capacity change from 0 to 512 [ 1034.733808][T12658] EXT4-fs (loop4): Ignoring removed bh option [ 1034.740013][T12658] EXT4-fs (loop4): old and new quota format mixing [ 1034.914876][T12514] udevd[12514]: symlink '../../loop4' '/dev/disk/by-diskseq/460.tmp-b7:4' failed: Read-only file system [ 1034.950759][T12667] FAULT_INJECTION: forcing a failure. [ 1034.950759][T12667] name failslab, interval 1, probability 0, space 0, times 0 [ 1034.963578][T12667] CPU: 0 PID: 12667 Comm: syz.0.2022 Not tainted syzkaller #0 [ 1034.971050][T12667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1034.981110][T12667] Call Trace: [ 1034.984428][T12667] [ 1034.987361][T12667] dump_stack_lvl+0x188/0x250 [ 1034.992051][T12667] ? show_regs_print_info+0x20/0x20 [ 1034.997274][T12667] ? load_image+0x410/0x410 [ 1035.001805][T12667] ? __might_sleep+0xf0/0xf0 [ 1035.006414][T12667] ? __lock_acquire+0x7d40/0x7d40 [ 1035.011489][T12667] should_fail+0x383/0x4b0 [ 1035.014929][T12668] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 1035.015952][T12667] should_failslab+0x5/0x20 [ 1035.030537][T12667] slab_pre_alloc_hook+0x51/0xc0 [ 1035.035488][T12667] kmem_cache_alloc_trace+0x47/0x290 [ 1035.040800][T12667] ? legacy_init_fs_context+0x4d/0xb0 [ 1035.046201][T12667] ? __raw_spin_lock_init+0x41/0x100 [ 1035.051500][T12667] legacy_init_fs_context+0x4d/0xb0 [ 1035.056705][T12667] alloc_fs_context+0x628/0x7d0 [ 1035.061584][T12667] __se_sys_fsopen+0x111/0x320 [ 1035.066366][T12667] do_syscall_64+0x4c/0xa0 [ 1035.070829][T12667] ? clear_bhb_loop+0x30/0x80 [ 1035.075523][T12667] ? clear_bhb_loop+0x30/0x80 [ 1035.080220][T12667] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1035.086119][T12667] RIP: 0033:0x7f935c678b19 [ 1035.090544][T12667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.110153][T12667] RSP: 002b:00007f935a8cf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1035.118587][T12667] RAX: ffffffffffffffda RBX: 00007f935c8fefa0 RCX: 00007f935c678b19 [ 1035.126592][T12667] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 1035.134597][T12667] RBP: 00007f935c710b70 R08: 0000000000000000 R09: 0000000000000000 [ 1035.142599][T12667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1035.150684][T12667] R13: 00007f935c8ff038 R14: 00007f935c8fefa0 R15: 00007fff4c5a74f8 [ 1035.158703][T12667] [ 1035.216420][T12514] udevd[12514]: symlink '../../loop4' '/dev/disk/by-diskseq/461.tmp-b7:4' failed: Read-only file system [ 1035.265888][T12514] udevd[12514]: symlink '../../loop4' '/dev/disk/by-diskseq/462.tmp-b7:4' failed: Read-only file system [ 1035.343676][T12677] binder: 12675:12677 ioctl 5000940a 2000000028c0 returned -22 [ 1035.787661][T12514] udevd[12514]: symlink '../../loop4' '/dev/disk/by-diskseq/462.tmp-b7:4' failed: Read-only file system [ 1036.581382][T12679] jffs2: notice: (12679) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1036.623667][T12514] udevd[12514]: symlink '../../loop4' '/dev/disk/by-diskseq/462.tmp-b7:4' failed: Read-only file system [ 1036.954104][T12705] loop4: detected capacity change from 0 to 512 [ 1036.975708][ T155] nci: nci_rsp_packet: unknown rsp opcode 0x300 [ 1037.041686][T12708] FAULT_INJECTION: forcing a failure. [ 1037.041686][T12708] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.054664][T12708] CPU: 1 PID: 12708 Comm: syz.0.2035 Not tainted syzkaller #0 [ 1037.062145][T12708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1037.072217][T12708] Call Trace: [ 1037.075513][T12708] [ 1037.078456][T12708] dump_stack_lvl+0x188/0x250 [ 1037.083160][T12708] ? show_regs_print_info+0x20/0x20 [ 1037.088372][T12708] ? load_image+0x410/0x410 [ 1037.092902][T12708] ? __might_sleep+0xf0/0xf0 [ 1037.097538][T12708] ? __lock_acquire+0x7d40/0x7d40 [ 1037.102602][T12708] should_fail+0x383/0x4b0 [ 1037.107053][T12708] should_failslab+0x5/0x20 [ 1037.111589][T12708] slab_pre_alloc_hook+0x51/0xc0 [ 1037.116550][T12708] kmem_cache_alloc_trace+0x47/0x290 [ 1037.121859][T12708] ? legacy_init_fs_context+0x4d/0xb0 [ 1037.127251][T12708] ? __raw_spin_lock_init+0x41/0x100 [ 1037.132580][T12708] legacy_init_fs_context+0x4d/0xb0 [ 1037.137823][T12708] alloc_fs_context+0x628/0x7d0 [ 1037.142715][T12708] __se_sys_fsopen+0x111/0x320 [ 1037.147507][T12708] do_syscall_64+0x4c/0xa0 [ 1037.151974][T12708] ? clear_bhb_loop+0x30/0x80 [ 1037.156667][T12708] ? clear_bhb_loop+0x30/0x80 [ 1037.161365][T12708] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1037.167284][T12708] RIP: 0033:0x7f935c678b19 [ 1037.171709][T12708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.191348][T12708] RSP: 002b:00007f935a8cf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1037.199787][T12708] RAX: ffffffffffffffda RBX: 00007f935c8fefa0 RCX: 00007f935c678b19 [ 1037.207802][T12708] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 1037.215813][T12708] RBP: 00007f935c710b70 R08: 0000000000000000 R09: 0000000000000000 [ 1037.223822][T12708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1037.231837][T12708] R13: 00007f935c8ff038 R14: 00007f935c8fefa0 R15: 00007fff4c5a74f8 [ 1037.239875][T12708] [ 1037.991584][T12514] udevd[12514]: symlink '../../loop4' '/dev/disk/by-diskseq/464.tmp-b7:4' failed: Read-only file system [ 1038.049384][T12514] udevd[12514]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1038.215810][T12514] udevd[12514]: symlink '../../loop4' '/dev/disk/by-diskseq/464.tmp-b7:4' failed: Read-only file system [ 1038.281737][T12724] binder: 12720:12724 ioctl 5000940a 2000000028c0 returned -22 [ 1038.694457][T12514] udevd[12514]: symlink '../../loop4' '/dev/disk/by-diskseq/464.tmp-b7:4' failed: Read-only file system [ 1039.056739][T12514] udevd[12514]: symlink '../../loop4' '/dev/disk/by-diskseq/464.tmp-b7:4' failed: Read-only file system [ 1039.152192][T12728] FAULT_INJECTION: forcing a failure. [ 1039.152192][T12728] name failslab, interval 1, probability 0, space 0, times 0 [ 1039.164932][T12728] CPU: 1 PID: 12728 Comm: syz.1.2041 Not tainted syzkaller #0 [ 1039.172407][T12728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1039.182474][T12728] Call Trace: [ 1039.185758][T12728] [ 1039.188693][T12728] dump_stack_lvl+0x188/0x250 [ 1039.193390][T12728] ? show_regs_print_info+0x20/0x20 [ 1039.198595][T12728] ? load_image+0x410/0x410 [ 1039.203105][T12728] ? __might_sleep+0xf0/0xf0 [ 1039.207716][T12728] ? __lock_acquire+0x7d40/0x7d40 [ 1039.212764][T12728] should_fail+0x383/0x4b0 [ 1039.217218][T12728] should_failslab+0x5/0x20 [ 1039.221729][T12728] slab_pre_alloc_hook+0x51/0xc0 [ 1039.226673][T12728] kmem_cache_alloc_trace+0x47/0x290 [ 1039.231962][T12728] ? legacy_init_fs_context+0x4d/0xb0 [ 1039.237350][T12728] ? __raw_spin_lock_init+0x41/0x100 [ 1039.242658][T12728] legacy_init_fs_context+0x4d/0xb0 [ 1039.247899][T12728] alloc_fs_context+0x628/0x7d0 [ 1039.252767][T12728] __se_sys_fsopen+0x111/0x320 [ 1039.257535][T12728] do_syscall_64+0x4c/0xa0 [ 1039.261978][T12728] ? clear_bhb_loop+0x30/0x80 [ 1039.266681][T12728] ? clear_bhb_loop+0x30/0x80 [ 1039.271391][T12728] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1039.277317][T12728] RIP: 0033:0x7ffa97b89b19 [ 1039.281735][T12728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.301347][T12728] RSP: 002b:00007ffa95de0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1039.309862][T12728] RAX: ffffffffffffffda RBX: 00007ffa97e0ffa0 RCX: 00007ffa97b89b19 [ 1039.318001][T12728] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 1039.326096][T12728] RBP: 00007ffa97c21b70 R08: 0000000000000000 R09: 0000000000000000 [ 1039.334140][T12728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1039.342155][T12728] R13: 00007ffa97e10038 R14: 00007ffa97e0ffa0 R15: 00007ffc8e62c538 [ 1039.350175][T12728] [ 1039.439536][T12734] jffs2: notice: (12734) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1039.877119][T12700] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1040.018674][T12741] loop5: detected capacity change from 0 to 512 [ 1040.086710][T12741] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1040.124722][T12741] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #15: comm syz.5.2043: inode has both inline data and extents flags [ 1040.138399][T12741] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.2043: couldn't read orphan inode 15 (err -117) [ 1040.150957][T12741] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,auto_da_alloc=0x0000000000000002,discard,dioread_nolock,nodiscard,,errors=continue. Quota mode: writeback. [ 1040.160555][T12514] udevd[12514]: symlink '../../loop5' '/dev/disk/by-diskseq/466.tmp-b7:5' failed: Read-only file system [ 1040.181163][T12514] udevd[12514]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1040.212351][T12514] udevd[12514]: symlink '../../loop5' '/dev/disk/by-diskseq/466.tmp-b7:5' failed: Read-only file system [ 1040.224813][T12514] udevd[12514]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1040.392435][T12741] ip_tables: iptables: counters copy to user failed while replacing table [ 1040.406626][T12741] hub 5-0:1.0: USB hub found [ 1040.412892][T12741] hub 5-0:1.0: 1 port detected [ 1040.605464][T12514] udevd[12514]: symlink '../../loop5' '/dev/disk/by-diskseq/466.tmp-b7:5' failed: Read-only file system [ 1040.767309][T12757] FAULT_INJECTION: forcing a failure. [ 1040.767309][T12757] name failslab, interval 1, probability 0, space 0, times 0 [ 1040.780084][T12757] CPU: 0 PID: 12757 Comm: syz.4.2048 Not tainted syzkaller #0 [ 1040.787568][T12757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1040.797631][T12757] Call Trace: [ 1040.800939][T12757] [ 1040.803875][T12757] dump_stack_lvl+0x188/0x250 [ 1040.808572][T12757] ? show_regs_print_info+0x20/0x20 [ 1040.813789][T12757] ? load_image+0x410/0x410 [ 1040.818318][T12757] ? __might_sleep+0xf0/0xf0 [ 1040.822940][T12757] ? __lock_acquire+0x7d40/0x7d40 [ 1040.827980][T12757] should_fail+0x383/0x4b0 [ 1040.832496][T12757] should_failslab+0x5/0x20 [ 1040.837014][T12757] slab_pre_alloc_hook+0x51/0xc0 [ 1040.841980][T12757] kmem_cache_alloc_trace+0x47/0x290 [ 1040.847271][T12757] ? legacy_init_fs_context+0x4d/0xb0 [ 1040.852652][T12757] ? __raw_spin_lock_init+0x41/0x100 [ 1040.857952][T12757] legacy_init_fs_context+0x4d/0xb0 [ 1040.863169][T12757] alloc_fs_context+0x628/0x7d0 [ 1040.868065][T12757] __se_sys_fsopen+0x111/0x320 [ 1040.872885][T12757] do_syscall_64+0x4c/0xa0 [ 1040.877340][T12757] ? clear_bhb_loop+0x30/0x80 [ 1040.882143][T12757] ? clear_bhb_loop+0x30/0x80 [ 1040.886865][T12757] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1040.892814][T12757] RIP: 0033:0x7f74529beb19 [ 1040.897241][T12757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1040.916858][T12757] RSP: 002b:00007f7450c15028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1040.925310][T12757] RAX: ffffffffffffffda RBX: 00007f7452c44fa0 RCX: 00007f74529beb19 [ 1040.933326][T12757] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 1040.941348][T12757] RBP: 00007f7452a56b70 R08: 0000000000000000 R09: 0000000000000000 [ 1040.949358][T12757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1040.957366][T12757] R13: 00007f7452c45038 R14: 00007f7452c44fa0 R15: 00007ffe3c9f6b38 [ 1040.965476][T12757] [ 1041.203664][T12765] xt_hashlimit: size too large, truncated to 1048576 [ 1041.282394][T12768] binder: 12766:12768 ioctl 5000940a 2000000028c0 returned -22 [ 1043.037054][T12781] tmpfs: Unknown parameter 'quota' [ 1044.071237][T12795] FAULT_INJECTION: forcing a failure. [ 1044.071237][T12795] name failslab, interval 1, probability 0, space 0, times 0 [ 1044.084113][T12795] CPU: 0 PID: 12795 Comm: syz.5.2061 Not tainted syzkaller #0 [ 1044.091590][T12795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1044.101668][T12795] Call Trace: [ 1044.104971][T12795] [ 1044.107904][T12795] dump_stack_lvl+0x188/0x250 [ 1044.112597][T12795] ? show_regs_print_info+0x20/0x20 [ 1044.117804][T12795] ? load_image+0x410/0x410 [ 1044.122327][T12795] ? __might_sleep+0xf0/0xf0 [ 1044.126954][T12795] ? __lock_acquire+0x7d40/0x7d40 [ 1044.132005][T12795] should_fail+0x383/0x4b0 [ 1044.136432][T12795] should_failslab+0x5/0x20 [ 1044.140946][T12795] slab_pre_alloc_hook+0x51/0xc0 [ 1044.145887][T12795] kmem_cache_alloc_trace+0x47/0x290 [ 1044.151171][T12795] ? legacy_init_fs_context+0x4d/0xb0 [ 1044.156550][T12795] ? __raw_spin_lock_init+0x41/0x100 [ 1044.161862][T12795] legacy_init_fs_context+0x4d/0xb0 [ 1044.167066][T12795] alloc_fs_context+0x628/0x7d0 [ 1044.171926][T12795] __se_sys_fsopen+0x111/0x320 [ 1044.176702][T12795] do_syscall_64+0x4c/0xa0 [ 1044.181124][T12795] ? clear_bhb_loop+0x30/0x80 [ 1044.185804][T12795] ? clear_bhb_loop+0x30/0x80 [ 1044.190515][T12795] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1044.196414][T12795] RIP: 0033:0x7fa3f2c86b19 [ 1044.200887][T12795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1044.220494][T12795] RSP: 002b:00007fa3f0edd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1044.228944][T12795] RAX: ffffffffffffffda RBX: 00007fa3f2f0cfa0 RCX: 00007fa3f2c86b19 [ 1044.236952][T12795] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 1044.245037][T12795] RBP: 00007fa3f2d1eb70 R08: 0000000000000000 R09: 0000000000000000 [ 1044.253041][T12795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1044.261045][T12795] R13: 00007fa3f2f0d038 R14: 00007fa3f2f0cfa0 R15: 00007fff41707698 [ 1044.269072][T12795] [ 1044.555702][T12804] binder: 12802:12804 ioctl 5000940a 2000000028c0 returned -22 [ 1047.411954][T12816] loop2: detected capacity change from 0 to 512 [ 1047.471999][T12816] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1047.524885][T12816] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.2057: inode has both inline data and extents flags [ 1047.542455][T12816] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.2057: couldn't read orphan inode 15 (err -117) [ 1047.552126][T12815] udevd[12815]: symlink '../../loop2' '/dev/disk/by-diskseq/468.tmp-b7:2' failed: Read-only file system [ 1047.567409][T12815] udevd[12815]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1047.590262][T12816] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,auto_da_alloc=0x0000000000000002,discard,dioread_nolock,nodiscard,,errors=continue. Quota mode: writeback. [ 1047.613879][T12815] udevd[12815]: symlink '../../loop2' '/dev/disk/by-diskseq/468.tmp-b7:2' failed: Read-only file system [ 1047.639302][T12815] udevd[12815]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1048.441273][T12835] ip_tables: iptables: counters copy to user failed while replacing table [ 1048.456862][T12835] hub 5-0:1.0: USB hub found [ 1048.461813][T12835] hub 5-0:1.0: 1 port detected [ 1048.884464][T12829] udevd[12829]: symlink '../../loop2' '/dev/disk/by-diskseq/468.tmp-b7:2' failed: Read-only file system [ 1049.502608][T12837] jffs2: notice: (12837) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1049.539127][T12829] udevd[12829]: symlink '../../loop2' '/dev/disk/by-diskseq/468.tmp-b7:2' failed: Read-only file system [ 1050.051285][T12853] binder: 12849:12853 ioctl 5000940a 2000000028c0 returned -22 [ 1051.857610][ T8069] Bluetooth: Wrong link type (-22) [ 1051.979156][T12872] FAULT_INJECTION: forcing a failure. [ 1051.979156][T12872] name failslab, interval 1, probability 0, space 0, times 0 [ 1051.992508][T12872] CPU: 0 PID: 12872 Comm: syz.1.2073 Not tainted syzkaller #0 [ 1051.999998][T12872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1052.010191][T12872] Call Trace: [ 1052.013481][T12872] [ 1052.016458][T12872] dump_stack_lvl+0x188/0x250 [ 1052.021161][T12872] ? show_regs_print_info+0x20/0x20 [ 1052.026371][T12872] ? load_image+0x410/0x410 [ 1052.030904][T12872] ? __might_sleep+0xf0/0xf0 [ 1052.035512][T12872] ? __lock_acquire+0x7d40/0x7d40 [ 1052.040588][T12872] should_fail+0x383/0x4b0 [ 1052.045109][T12872] should_failslab+0x5/0x20 [ 1052.049625][T12872] slab_pre_alloc_hook+0x51/0xc0 [ 1052.054570][T12872] kmem_cache_alloc_trace+0x47/0x290 [ 1052.059862][T12872] ? legacy_init_fs_context+0x4d/0xb0 [ 1052.065241][T12872] ? __raw_spin_lock_init+0x41/0x100 [ 1052.070534][T12872] legacy_init_fs_context+0x4d/0xb0 [ 1052.075742][T12872] alloc_fs_context+0x628/0x7d0 [ 1052.080619][T12872] __se_sys_fsopen+0x111/0x320 [ 1052.085434][T12872] do_syscall_64+0x4c/0xa0 [ 1052.089856][T12872] ? clear_bhb_loop+0x30/0x80 [ 1052.094542][T12872] ? clear_bhb_loop+0x30/0x80 [ 1052.099227][T12872] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1052.105132][T12872] RIP: 0033:0x7ffa97b89b19 [ 1052.109551][T12872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1052.129185][T12872] RSP: 002b:00007ffa95de0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1052.137626][T12872] RAX: ffffffffffffffda RBX: 00007ffa97e0ffa0 RCX: 00007ffa97b89b19 [ 1052.145611][T12872] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 1052.153702][T12872] RBP: 00007ffa97c21b70 R08: 0000000000000000 R09: 0000000000000000 [ 1052.161727][T12872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1052.169821][T12872] R13: 00007ffa97e10038 R14: 00007ffa97e0ffa0 R15: 00007ffc8e62c538 [ 1052.177862][T12872] [ 1052.679883][T12878] loop2: detected capacity change from 0 to 512 [ 1052.732615][T12878] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1052.801464][T12878] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.2084: inode has both inline data and extents flags [ 1052.815209][T12878] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.2084: couldn't read orphan inode 15 (err -117) [ 1052.827583][T12878] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,auto_da_alloc=0x0000000000000002,discard,dioread_nolock,nodiscard,,errors=continue. Quota mode: writeback. [ 1052.863063][T12829] udevd[12829]: symlink '../../loop2' '/dev/disk/by-diskseq/471.tmp-b7:2' failed: Read-only file system [ 1052.926497][T12885] loop0: detected capacity change from 0 to 512 [ 1052.944715][T12829] udevd[12829]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1053.188209][T12889] ip_tables: iptables: counters copy to user failed while replacing table [ 1053.207594][T12889] hub 5-0:1.0: USB hub found [ 1053.217975][T12889] hub 5-0:1.0: 1 port detected [ 1053.843197][T12815] udevd[12815]: symlink '../../loop0' '/dev/disk/by-diskseq/472.tmp-b7:0' failed: Read-only file system [ 1053.857824][T12815] udevd[12815]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1053.982105][T12829] udevd[12829]: symlink '../../loop2' '/dev/disk/by-diskseq/471.tmp-b7:2' failed: Read-only file system [ 1054.323996][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.332452][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.400225][T12829] udevd[12829]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1054.420605][T12815] udevd[12815]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1054.703489][T12815] udevd[12815]: symlink '../../loop0' '/dev/disk/by-diskseq/472.tmp-b7:0' failed: Read-only file system [ 1055.779448][T12895] jffs2: notice: (12895) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1055.807153][T12815] udevd[12815]: symlink '../../loop0' '/dev/disk/by-diskseq/472.tmp-b7:0' failed: Read-only file system [ 1055.899908][T12829] udevd[12829]: symlink '../../loop2' '/dev/disk/by-diskseq/471.tmp-b7:2' failed: Read-only file system [ 1056.756380][T12911] binder: 12906:12911 ioctl 5000940a 2000000028c0 returned -22 [ 1057.586268][T12910] jffs2: notice: (12910) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1057.681435][T12914] FAULT_INJECTION: forcing a failure. [ 1057.681435][T12914] name failslab, interval 1, probability 0, space 0, times 0 [ 1057.694097][T12914] CPU: 1 PID: 12914 Comm: syz.5.2093 Not tainted syzkaller #0 [ 1057.701572][T12914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1057.711726][T12914] Call Trace: [ 1057.715047][T12914] [ 1057.718002][T12914] dump_stack_lvl+0x188/0x250 [ 1057.722695][T12914] ? show_regs_print_info+0x20/0x20 [ 1057.727923][T12914] ? load_image+0x410/0x410 [ 1057.732453][T12914] ? __might_sleep+0xf0/0xf0 [ 1057.737069][T12914] ? __lock_acquire+0x7d40/0x7d40 [ 1057.742142][T12914] should_fail+0x383/0x4b0 [ 1057.746714][T12914] should_failslab+0x5/0x20 [ 1057.748403][T12916] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 1057.751422][T12914] slab_pre_alloc_hook+0x51/0xc0 [ 1057.766489][T12914] kmem_cache_alloc_trace+0x47/0x290 [ 1057.771834][T12914] ? legacy_init_fs_context+0x4d/0xb0 [ 1057.777233][T12914] ? __raw_spin_lock_init+0x41/0x100 [ 1057.782582][T12914] legacy_init_fs_context+0x4d/0xb0 [ 1057.787954][T12914] alloc_fs_context+0x628/0x7d0 [ 1057.792835][T12914] __se_sys_fsopen+0x111/0x320 [ 1057.797641][T12914] do_syscall_64+0x4c/0xa0 [ 1057.802092][T12914] ? clear_bhb_loop+0x30/0x80 [ 1057.806845][T12914] ? clear_bhb_loop+0x30/0x80 [ 1057.811647][T12914] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1057.817592][T12914] RIP: 0033:0x7fa3f2c86b19 [ 1057.822176][T12914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1057.841947][T12914] RSP: 002b:00007fa3f0edd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1057.850518][T12914] RAX: ffffffffffffffda RBX: 00007fa3f2f0cfa0 RCX: 00007fa3f2c86b19 [ 1057.858540][T12914] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 1057.866582][T12914] RBP: 00007fa3f2d1eb70 R08: 0000000000000000 R09: 0000000000000000 [ 1057.874589][T12914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1057.882608][T12914] R13: 00007fa3f2f0d038 R14: 00007fa3f2f0cfa0 R15: 00007fff41707698 [ 1057.890632][T12914] [ 1058.277158][T12928] ================================================================== [ 1058.286189][T12928] BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360 [ 1058.293442][T12928] Read of size 8 at addr ffff88814a44c418 by task syz.1.2097/12928 [ 1058.301365][T12928] [ 1058.303714][T12928] CPU: 0 PID: 12928 Comm: syz.1.2097 Not tainted syzkaller #0 [ 1058.311295][T12928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1058.321380][T12928] Call Trace: [ 1058.324692][T12928] [ 1058.327651][T12928] dump_stack_lvl+0x188/0x250 [ 1058.332376][T12928] ? show_regs_print_info+0x20/0x20 [ 1058.337626][T12928] ? _printk+0xda/0x130 [ 1058.341811][T12928] ? dvb_device_open+0xc5/0x360 [ 1058.346728][T12928] ? load_image+0x410/0x410 [ 1058.351277][T12928] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1058.356793][T12928] print_address_description+0x60/0x2d0 [ 1058.362409][T12928] ? dvb_device_open+0xc5/0x360 [ 1058.367316][T12928] kasan_report+0xdf/0x130 [ 1058.371760][T12928] ? dvb_device_open+0xc5/0x360 [ 1058.376643][T12928] dvb_device_open+0xc5/0x360 [ 1058.381348][T12928] chrdev_open+0x585/0x5f0 [ 1058.385797][T12928] ? cd_forget+0x160/0x160 [ 1058.390242][T12928] ? fsnotify_perm+0x3a7/0x560 [ 1058.395041][T12928] ? cd_forget+0x160/0x160 [ 1058.399479][T12928] do_dentry_open+0x7f7/0xf90 [ 1058.404180][T12928] ? vfs_open+0x2b/0x80 [ 1058.408361][T12928] path_openat+0x2718/0x2fb0 [ 1058.413008][T12928] ? __kasan_slab_alloc+0xa9/0xc0 [ 1058.418061][T12928] ? do_filp_open+0x400/0x400 [ 1058.422777][T12928] do_filp_open+0x1df/0x400 [ 1058.427314][T12928] ? vfs_tmpfile+0x300/0x300 [ 1058.431975][T12928] ? _raw_spin_unlock+0x24/0x40 [ 1058.436859][T12928] ? alloc_fd+0x59e/0x650 [ 1058.441219][T12928] do_sys_openat2+0x14b/0x500 [ 1058.445929][T12928] ? __lock_acquire+0x7d40/0x7d40 [ 1058.451160][T12928] ? do_sys_open+0xe0/0xe0 [ 1058.455616][T12928] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1058.461627][T12928] ? lock_chain_count+0x20/0x20 [ 1058.466531][T12928] __x64_sys_openat+0x135/0x160 [ 1058.471411][T12928] do_syscall_64+0x4c/0xa0 [ 1058.475968][T12928] ? clear_bhb_loop+0x30/0x80 [ 1058.480669][T12928] ? clear_bhb_loop+0x30/0x80 [ 1058.485381][T12928] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1058.491304][T12928] RIP: 0033:0x7ffa97b4a34e [ 1058.495785][T12928] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1058.515437][T12928] RSP: 002b:00007ffa95ddfb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1058.523880][T12928] RAX: ffffffffffffffda RBX: 00007ffa95de06c0 RCX: 00007ffa97b4a34e [ 1058.531876][T12928] RDX: 0000000000000002 RSI: 00007ffa95ddfc00 RDI: ffffffffffffff9c [ 1058.539892][T12928] RBP: 00007ffa95ddfc00 R08: 0000000000000000 R09: 0000000000000000 [ 1058.548017][T12928] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1058.556190][T12928] R13: 00007ffa97e10038 R14: 00007ffa97e0ffa0 R15: 00007ffc8e62c538 [ 1058.564210][T12928] [ 1058.567246][T12928] [ 1058.569582][T12928] Allocated by task 1: [ 1058.573681][T12928] __kasan_kmalloc+0xaf/0xe0 [ 1058.578295][T12928] dvb_register_device+0x300/0x1dc0 [ 1058.583520][T12928] dvb_register_frontend+0x629/0x900 [ 1058.588827][T12928] vidtv_bridge_probe+0x9c1/0xf30 [ 1058.593876][T12928] platform_probe+0x137/0x1c0 [ 1058.598592][T12928] really_probe+0x276/0xc70 [ 1058.603114][T12928] __driver_probe_device+0x1f5/0x390 [ 1058.608504][T12928] driver_probe_device+0x4f/0x420 [ 1058.613724][T12928] __driver_attach+0x45d/0x660 [ 1058.618525][T12928] bus_for_each_dev+0x182/0x1f0 [ 1058.623535][T12928] bus_add_driver+0x324/0x5d0 [ 1058.628255][T12928] driver_register+0x32d/0x430 [ 1058.633037][T12928] vidtv_bridge_init+0x45/0x80 [ 1058.637922][T12928] do_one_initcall+0x272/0x730 [ 1058.642708][T12928] do_initcall_level+0x13d/0x1f0 [ 1058.647694][T12928] do_initcalls+0x4b/0x90 [ 1058.652047][T12928] kernel_init_freeable+0x3d5/0x560 [ 1058.657295][T12928] kernel_init+0x19/0x1b0 [ 1058.661757][T12928] ret_from_fork+0x1f/0x30 [ 1058.666283][T12928] [ 1058.668618][T12928] The buggy address belongs to the object at ffff88814a44c400 [ 1058.668618][T12928] which belongs to the cache kmalloc-256 of size 256 [ 1058.682993][T12928] The buggy address is located 24 bytes inside of [ 1058.682993][T12928] 256-byte region [ffff88814a44c400, ffff88814a44c500) [ 1058.696292][T12928] The buggy address belongs to the page: [ 1058.701958][T12928] page:ffffea0005291300 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88814a44c400 pfn:0x14a44c [ 1058.713528][T12928] head:ffffea0005291300 order:1 compound_mapcount:0 [ 1058.720221][T12928] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 1058.728316][T12928] raw: 057ff00000010200 ffffea0005291488 ffff888140000708 ffff888017841b40 [ 1058.736945][T12928] raw: ffff88814a44c400 000000000010000f 00000001ffffffff 0000000000000000 [ 1058.745546][T12928] page dumped because: kasan: bad access detected [ 1058.751970][T12928] page_owner tracks the page as allocated [ 1058.757706][T12928] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 21969041771, free_ts 0 [ 1058.775708][T12928] get_page_from_freelist+0x24f6/0x2670 [ 1058.781302][T12928] __alloc_pages+0x1ee/0x480 [ 1058.785924][T12928] alloc_page_interleave+0x24/0x1e0 [ 1058.791139][T12928] new_slab+0xc0/0x4b0 [ 1058.795225][T12928] ___slab_alloc+0x807/0xdd0 [ 1058.799832][T12928] kmem_cache_alloc_trace+0xf9/0x290 [ 1058.805146][T12928] bus_add_driver+0xdc/0x5d0 [ 1058.809753][T12928] driver_register+0x32d/0x430 [ 1058.814542][T12928] i2c_register_driver+0xb6/0x160 [ 1058.819772][T12928] do_one_initcall+0x272/0x730 [ 1058.824640][T12928] do_initcall_level+0x13d/0x1f0 [ 1058.829600][T12928] do_initcalls+0x4b/0x90 [ 1058.833949][T12928] kernel_init_freeable+0x3d5/0x560 [ 1058.839167][T12928] kernel_init+0x19/0x1b0 [ 1058.843520][T12928] ret_from_fork+0x1f/0x30 [ 1058.847955][T12928] page_owner free stack trace missing [ 1058.853333][T12928] [ 1058.855686][T12928] Memory state around the buggy address: [ 1058.861389][T12928] ffff88814a44c300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1058.869482][T12928] ffff88814a44c380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1058.877748][T12928] >ffff88814a44c400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1058.885848][T12928] ^ [ 1058.890720][T12928] ffff88814a44c480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1058.898801][T12928] ffff88814a44c500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1058.906968][T12928] ================================================================== [ 1058.915042][T12928] Disabling lock debugging due to kernel taint [ 1058.973930][T12929] loop5: detected capacity change from 0 to 512 [ 1059.038682][T12924] rxe_eth0 speed is unknown, defaulting to 1000 [ 1059.076818][T12928] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1059.084315][T12928] CPU: 1 PID: 12928 Comm: syz.1.2097 Tainted: G B syzkaller #0 [ 1059.093206][T12928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1059.103300][T12928] Call Trace: [ 1059.106703][T12928] [ 1059.109667][T12928] dump_stack_lvl+0x188/0x250 [ 1059.114391][T12928] ? show_regs_print_info+0x20/0x20 [ 1059.119628][T12928] ? load_image+0x410/0x410 [ 1059.124191][T12928] panic+0x2f8/0x850 [ 1059.128212][T12928] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1059.134403][T12928] ? bpf_jit_dump+0xd0/0xd0 [ 1059.138948][T12928] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1059.145000][T12928] ? _raw_spin_unlock+0x40/0x40 [ 1059.149859][T12928] ? dvb_device_open+0xc5/0x360 [ 1059.154724][T12928] check_panic_on_warn+0x80/0xa0 [ 1059.159679][T12928] ? dvb_device_open+0xc5/0x360 [ 1059.164657][T12928] end_report+0x6d/0xf0 [ 1059.168852][T12928] kasan_report+0x102/0x130 [ 1059.173482][T12928] ? dvb_device_open+0xc5/0x360 [ 1059.178354][T12928] dvb_device_open+0xc5/0x360 [ 1059.183054][T12928] chrdev_open+0x585/0x5f0 [ 1059.187585][T12928] ? cd_forget+0x160/0x160 [ 1059.192048][T12928] ? fsnotify_perm+0x3a7/0x560 [ 1059.197051][T12928] ? cd_forget+0x160/0x160 [ 1059.201532][T12928] do_dentry_open+0x7f7/0xf90 [ 1059.206220][T12928] ? vfs_open+0x2b/0x80 [ 1059.210536][T12928] path_openat+0x2718/0x2fb0 [ 1059.215159][T12928] ? __kasan_slab_alloc+0xa9/0xc0 [ 1059.220595][T12928] ? do_filp_open+0x400/0x400 [ 1059.225421][T12928] do_filp_open+0x1df/0x400 [ 1059.229969][T12928] ? vfs_tmpfile+0x300/0x300 [ 1059.234598][T12928] ? _raw_spin_unlock+0x24/0x40 [ 1059.239459][T12928] ? alloc_fd+0x59e/0x650 [ 1059.243815][T12928] do_sys_openat2+0x14b/0x500 [ 1059.248526][T12928] ? __lock_acquire+0x7d40/0x7d40 [ 1059.253724][T12928] ? do_sys_open+0xe0/0xe0 [ 1059.258157][T12928] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1059.264168][T12928] ? lock_chain_count+0x20/0x20 [ 1059.269037][T12928] __x64_sys_openat+0x135/0x160 [ 1059.273925][T12928] do_syscall_64+0x4c/0xa0 [ 1059.278370][T12928] ? clear_bhb_loop+0x30/0x80 [ 1059.283078][T12928] ? clear_bhb_loop+0x30/0x80 [ 1059.287769][T12928] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1059.293680][T12928] RIP: 0033:0x7ffa97b4a34e [ 1059.298103][T12928] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1059.317907][T12928] RSP: 002b:00007ffa95ddfb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1059.326326][T12928] RAX: ffffffffffffffda RBX: 00007ffa95de06c0 RCX: 00007ffa97b4a34e [ 1059.334421][T12928] RDX: 0000000000000002 RSI: 00007ffa95ddfc00 RDI: ffffffffffffff9c [ 1059.342632][T12928] RBP: 00007ffa95ddfc00 R08: 0000000000000000 R09: 0000000000000000 [ 1059.350877][T12928] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1059.358895][T12928] R13: 00007ffa97e10038 R14: 00007ffa97e0ffa0 R15: 00007ffc8e62c538 [ 1059.366951][T12928] [ 1059.370372][T12928] Kernel Offset: disabled [ 1059.383422][T12928] Rebooting in 86400 seconds..