last executing test programs: 30.23264951s ago: executing program 4 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(0xffffffffffffffff, 0x8b2a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000740), 0x181000, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000780)) unshare(0x2c020400) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000018c0)={0x0, 0x0, 0xb16, 0x897b}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000700)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 29.081443878s ago: executing program 4 (id=238): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000000), 0x492492492492654, 0x800) 28.965426502s ago: executing program 4 (id=239): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@oldalloc}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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") write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="014029bd7000fbdbdf25010000000800010001000000080002"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000100) 27.230461285s ago: executing program 4 (id=246): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x20200ccc, &(0x7f0000002c00)=ANY=[], 0xfe, 0x1528, &(0x7f0000000140)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000100)='?', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0xab0b, 0x1) getdents64(r2, 0x0, 0x0) (fail_nth: 1) 25.579345517s ago: executing program 4 (id=250): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) getpriority(0x0, 0x0) r0 = getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000080), 0x5005) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc_mnt\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='loc', 0x3) 24.933314673s ago: executing program 4 (id=252): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x32874000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) socket$unix(0x1, 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) getsockopt$inet_opts(r5, 0x0, 0x9, 0x0, &(0x7f00000000c0)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000080)=0xffffffffffffffff) 24.804223466s ago: executing program 32 (id=252): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x32874000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) socket$unix(0x1, 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) getsockopt$inet_opts(r5, 0x0, 0x9, 0x0, &(0x7f00000000c0)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000080)=0xffffffffffffffff) 1.99720694s ago: executing program 5 (id=335): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.940475951s ago: executing program 5 (id=337): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d0000000400"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000080), &(0x7f0000000400)=r0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000500000028"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a80)={r0, 0x20, &(0x7f00000009c0)={&(0x7f0000000840)=""/199, 0xc7, 0x0, &(0x7f0000000940)=""/127, 0x7f}}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b80)={r3, &(0x7f0000000a80), &(0x7f0000000b40)=""/61}, 0x20) 1.749316666s ago: executing program 5 (id=341): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2c, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac141416070807034d2f87e5890c", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff0016e0", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) 1.297219737s ago: executing program 0 (id=350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0xc, 0x0, 0x4}, {0x6}]}) 1.246915659s ago: executing program 5 (id=351): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 1.234868099s ago: executing program 2 (id=352): openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1c1341, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x600f00, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 1.048478964s ago: executing program 0 (id=355): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="030000000400000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 997.321065ms ago: executing program 5 (id=356): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 889.602868ms ago: executing program 1 (id=358): ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'pim6reg0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xc, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f0000000080), 0x0}, 0x20) 805.18921ms ago: executing program 0 (id=360): bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x4, 0x4, 0xc}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 768.498671ms ago: executing program 3 (id=361): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, 0x0, 0x0}, 0x20) 657.154334ms ago: executing program 2 (id=362): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)="c19472dee01d", &(0x7f00000002c0), 0x4d, r0, 0x0, 0x1c000000007400}, 0x38) 657.029503ms ago: executing program 1 (id=363): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0xbec151108205ee6d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 605.666245ms ago: executing program 3 (id=364): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x5}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000007}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 569.757546ms ago: executing program 0 (id=365): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[], 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x8, 0x0, 0x0}}, 0x10) 477.296168ms ago: executing program 1 (id=366): socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000005000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1, r0}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 477.182918ms ago: executing program 3 (id=367): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000000}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 477.099598ms ago: executing program 2 (id=368): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 361.603741ms ago: executing program 2 (id=369): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r2}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1, r0}, 0xc) 357.741491ms ago: executing program 1 (id=370): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000007a000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 301.300052ms ago: executing program 3 (id=371): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x5, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0xd0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 222.935404ms ago: executing program 2 (id=372): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="a836", 0x2}], 0x1}, 0x4040001) recvmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x1e0) 215.506475ms ago: executing program 0 (id=373): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 161.301736ms ago: executing program 3 (id=374): bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x9e}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 140.601747ms ago: executing program 1 (id=375): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r0, 0x0, &(0x7f0000000540)=""/153}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 70.277709ms ago: executing program 2 (id=376): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 13.31045ms ago: executing program 3 (id=377): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 13.18525ms ago: executing program 0 (id=378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000580)={0x0, 0x0}) 13.10965ms ago: executing program 5 (id=379): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3) ioctl$TUNSETVNETLE(r0, 0x400454dc, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 0s ago: executing program 1 (id=380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x60, 0x8, 0x0, 0xfffffffe}]}) kernel console output (not intermixed with test programs): ogle Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.901308][ T4799] Call Trace: [ 112.904630][ T4799] [ 112.907603][ T4799] dump_stack_lvl+0x188/0x250 [ 112.912329][ T4799] ? show_regs_print_info+0x20/0x20 [ 112.917581][ T4799] ? load_image+0x410/0x410 [ 112.922187][ T4799] ? __might_sleep+0xf0/0xf0 [ 112.926821][ T4799] ? __lock_acquire+0x7b50/0x7b50 [ 112.931980][ T4799] should_fail+0x383/0x4b0 [ 112.936448][ T4799] should_failslab+0x5/0x20 [ 112.940992][ T4799] slab_pre_alloc_hook+0x51/0xc0 [ 112.945971][ T4799] __kmalloc+0x6b/0x340 [ 112.950167][ T4799] ? file_tty_write+0x2f7/0x8a0 [ 112.955068][ T4799] file_tty_write+0x2f7/0x8a0 [ 112.959796][ T4799] ? memset+0x1e/0x40 [ 112.963827][ T4799] ? n_tty_read+0x1a50/0x1a50 [ 112.968547][ T4799] vfs_write+0x748/0xd70 [ 112.972847][ T4799] ? file_end_write+0x250/0x250 [ 112.977743][ T4799] ? __fget_files+0x402/0x470 [ 112.982489][ T4799] ? __fdget_pos+0x1e2/0x370 [ 112.987126][ T4799] ? ksys_write+0x70/0x260 [ 112.991612][ T4799] ksys_write+0x153/0x260 [ 112.996015][ T4799] ? __ia32_sys_read+0x80/0x80 [ 113.000826][ T4799] ? lockdep_hardirqs_on+0x94/0x140 [ 113.006077][ T4799] do_syscall_64+0x4c/0xa0 [ 113.010545][ T4799] ? clear_bhb_loop+0x30/0x80 [ 113.015262][ T4799] ? clear_bhb_loop+0x30/0x80 [ 113.020208][ T4799] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.026147][ T4799] RIP: 0033:0x7ff3ac71f019 [ 113.030597][ T4799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.050329][ T4799] RSP: 002b:00007ff3aa977028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 113.058881][ T4799] RAX: ffffffffffffffda RBX: 00007ff3ac9a6fa0 RCX: 00007ff3ac71f019 [ 113.066901][ T4799] RDX: 0000000000001006 RSI: 0000200000001080 RDI: 0000000000000004 [ 113.074922][ T4799] RBP: 00007ff3aa977090 R08: 0000000000000000 R09: 0000000000000000 [ 113.082933][ T4799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.090947][ T4799] R13: 00007ff3ac9a7038 R14: 00007ff3ac9a6fa0 R15: 00007ffe01865348 [ 113.098988][ T4799] [ 113.290229][ T4807] loop1: detected capacity change from 0 to 512 [ 113.427667][ T4809] loop4: detected capacity change from 0 to 1024 [ 113.539820][ T4810] loop3: detected capacity change from 0 to 4096 [ 113.604722][ T4810] EXT4-fs (loop3): Test dummy encryption mode enabled [ 113.629449][ T4810] EXT4-fs (loop3): Ignoring removed oldalloc option [ 113.683108][ T4807] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 113.715493][ T4810] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,oldalloc,,errors=continue. Quota mode: writeback. [ 113.731051][ T4807] UDF-fs: Scanning with blocksize 512 failed [ 113.890105][ T4807] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 113.903027][ T4807] UDF-fs: Scanning with blocksize 1024 failed [ 113.909912][ T4807] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 113.923612][ T4807] UDF-fs: Scanning with blocksize 2048 failed [ 113.930548][ T4807] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 113.990270][ T4807] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.352905][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 114.362927][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 114.372902][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 114.382897][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 114.392898][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 114.402894][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 114.412892][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 114.422892][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 114.432895][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 114.588144][ T4809] hfsplus: b-tree write err: -5, ino 3 [ 114.699171][ T4249] hfsplus: b-tree write err: -5, ino 3 [ 114.761380][ T4807] capability: warning: `syz.1.124' uses deprecated v2 capabilities in a way that may be insecure [ 114.854616][ T4819] loop3: detected capacity change from 0 to 4096 [ 114.920835][ T4825] loop4: detected capacity change from 0 to 2048 [ 114.937907][ T4819] EXT4-fs (loop3): Test dummy encryption mode enabled [ 114.954544][ T4819] EXT4-fs (loop3): Ignoring removed oldalloc option [ 114.978467][ T4825] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.061642][ T4819] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,oldalloc,,errors=continue. Quota mode: writeback. [ 115.301893][ T4227] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 115.331069][ T4831] loop1: detected capacity change from 0 to 8 [ 115.534496][ T4834] FAULT_INJECTION: forcing a failure. [ 115.534496][ T4834] name failslab, interval 1, probability 0, space 0, times 0 [ 115.548846][ T4831] SQUASHFS error: lzo decompression failed, data probably corrupt [ 115.570408][ T4831] SQUASHFS error: Failed to read block 0x91: -5 [ 115.618881][ T4831] SQUASHFS error: Unable to read metadata cache entry [8f] [ 115.645895][ T4834] CPU: 0 PID: 4834 Comm: syz.2.131 Not tainted syzkaller #0 [ 115.653261][ T4834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 115.663344][ T4834] Call Trace: [ 115.666652][ T4834] [ 115.669614][ T4834] dump_stack_lvl+0x188/0x250 [ 115.674330][ T4834] ? show_regs_print_info+0x20/0x20 [ 115.679565][ T4834] ? load_image+0x410/0x410 [ 115.684109][ T4834] ? __lock_acquire+0x7b50/0x7b50 [ 115.689176][ T4834] should_fail+0x383/0x4b0 [ 115.693635][ T4834] should_failslab+0x5/0x20 [ 115.698183][ T4834] slab_pre_alloc_hook+0x51/0xc0 [ 115.703159][ T4834] __kmalloc+0x6b/0x340 [ 115.707351][ T4834] ? __se_sys_memfd_create+0x142/0x450 [ 115.712931][ T4834] ? strnlen_user+0x19b/0x250 [ 115.717643][ T4834] __se_sys_memfd_create+0x142/0x450 [ 115.722969][ T4834] ? lock_chain_count+0x20/0x20 [ 115.727866][ T4834] ? __x64_sys_memfd_create+0x60/0x60 [ 115.733287][ T4834] ? lockdep_hardirqs_on+0x94/0x140 [ 115.738525][ T4834] do_syscall_64+0x4c/0xa0 [ 115.743267][ T4834] ? clear_bhb_loop+0x30/0x80 [ 115.747974][ T4834] ? clear_bhb_loop+0x30/0x80 [ 115.752704][ T4834] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.758727][ T4834] RIP: 0033:0x7f1285528019 [ 115.763177][ T4834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.782814][ T4834] RSP: 002b:00007f128377fe08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 115.791269][ T4834] RAX: ffffffffffffffda RBX: 000000000000019d RCX: 00007f1285528019 [ 115.799298][ T4834] RDX: 00007f128377fee0 RSI: 0000000000000000 RDI: 00007f12855bf1ec [ 115.807319][ T4834] RBP: 0000200000000340 R08: 00000000ffffffff R09: 0000000000000000 [ 115.815339][ T4834] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000003280 [ 115.823361][ T4834] R13: 00007f128377fee0 R14: 00007f128377fea0 R15: 0000200000000500 [ 115.831391][ T4834] [ 115.854921][ T4831] SQUASHFS error: Unable to read inode 0x11f [ 116.107805][ T4837] FAULT_INJECTION: forcing a failure. [ 116.107805][ T4837] name failslab, interval 1, probability 0, space 0, times 0 [ 116.143182][ T4837] CPU: 1 PID: 4837 Comm: syz.2.133 Not tainted syzkaller #0 [ 116.150553][ T4837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 116.160650][ T4837] Call Trace: [ 116.163977][ T4837] [ 116.166952][ T4837] dump_stack_lvl+0x188/0x250 [ 116.171694][ T4837] ? show_regs_print_info+0x20/0x20 [ 116.176957][ T4837] ? load_image+0x410/0x410 [ 116.181564][ T4837] ? __might_sleep+0xf0/0xf0 [ 116.186211][ T4837] ? __lock_acquire+0x7b50/0x7b50 [ 116.191295][ T4837] should_fail+0x383/0x4b0 [ 116.195776][ T4837] should_failslab+0x5/0x20 [ 116.200329][ T4837] slab_pre_alloc_hook+0x51/0xc0 [ 116.205320][ T4837] __kmalloc+0x6b/0x340 [ 116.209521][ T4837] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 116.215307][ T4837] tomoyo_realpath_from_path+0xed/0x5e0 [ 116.220925][ T4837] tomoyo_path_number_perm+0x251/0x6b0 [ 116.226431][ T4837] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 116.231949][ T4837] ? ksys_write+0x1d4/0x260 [ 116.236555][ T4837] security_file_ioctl+0x6c/0xa0 [ 116.241580][ T4837] __se_sys_ioctl+0x48/0x170 [ 116.246241][ T4837] do_syscall_64+0x4c/0xa0 [ 116.250702][ T4837] ? clear_bhb_loop+0x30/0x80 [ 116.255430][ T4837] ? clear_bhb_loop+0x30/0x80 [ 116.260152][ T4837] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.266093][ T4837] RIP: 0033:0x7f1285528019 [ 116.270550][ T4837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.290203][ T4837] RSP: 002b:00007f1283780028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.298672][ T4837] RAX: ffffffffffffffda RBX: 00007f12857affa0 RCX: 00007f1285528019 [ 116.306696][ T4837] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 116.314720][ T4837] RBP: 00007f1283780090 R08: 0000000000000000 R09: 0000000000000000 [ 116.322742][ T4837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.330759][ T4837] R13: 00007f12857b0038 R14: 00007f12857affa0 R15: 00007fff78589068 [ 116.338814][ T4837] [ 116.414073][ T4837] ERROR: Out of memory at tomoyo_realpath_from_path. [ 116.432564][ T4844] loop1: detected capacity change from 0 to 512 [ 116.453520][ T4227] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 116.467497][ T4227] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.477940][ T4227] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 116.492321][ T4844] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 116.512483][ T4227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.519041][ T4844] blk_update_request: I/O error, dev loop20, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.541064][ T4844] EXT4-fs (loop1): couldn't read superblock of external journal [ 116.564731][ T4227] hub 1-1:4.0: USB hub found [ 116.738931][ T4847] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 116.783129][ T4227] hub 1-1:4.0: 2 ports detected [ 116.796195][ T4227] usb 1-1: selecting invalid altsetting 1 [ 116.808900][ T4227] hub 1-1:4.0: Using single TT (err -22) [ 116.881616][ T4849] FAULT_INJECTION: forcing a failure. [ 116.881616][ T4849] name failslab, interval 1, probability 0, space 0, times 0 [ 116.900761][ T4849] CPU: 1 PID: 4849 Comm: syz.1.137 Not tainted syzkaller #0 [ 116.908114][ T4849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 116.918208][ T4849] Call Trace: [ 116.921527][ T4849] [ 116.924492][ T4849] dump_stack_lvl+0x188/0x250 [ 116.929222][ T4849] ? show_regs_print_info+0x20/0x20 [ 116.934451][ T4849] ? load_image+0x410/0x410 [ 116.938991][ T4849] ? __might_sleep+0xf0/0xf0 [ 116.943616][ T4849] ? __lock_acquire+0x7b50/0x7b50 [ 116.948690][ T4849] should_fail+0x383/0x4b0 [ 116.953161][ T4849] should_failslab+0x5/0x20 [ 116.957695][ T4849] slab_pre_alloc_hook+0x51/0xc0 [ 116.962684][ T4849] __kmalloc+0x6b/0x340 [ 116.966882][ T4849] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 116.972647][ T4849] tomoyo_realpath_from_path+0xed/0x5e0 [ 116.978249][ T4849] tomoyo_path_number_perm+0x251/0x6b0 [ 116.983745][ T4849] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 116.989237][ T4849] ? ksys_write+0x1d4/0x260 [ 116.993825][ T4849] security_file_ioctl+0x6c/0xa0 [ 116.998803][ T4849] __se_sys_ioctl+0x48/0x170 [ 117.003429][ T4849] do_syscall_64+0x4c/0xa0 [ 117.007878][ T4849] ? clear_bhb_loop+0x30/0x80 [ 117.012594][ T4849] ? clear_bhb_loop+0x30/0x80 [ 117.017309][ T4849] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.023240][ T4849] RIP: 0033:0x7ff3ac71f019 [ 117.027697][ T4849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.047389][ T4849] RSP: 002b:00007ff3aa977028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.055850][ T4849] RAX: ffffffffffffffda RBX: 00007ff3ac9a6fa0 RCX: 00007ff3ac71f019 [ 117.063873][ T4849] RDX: 0000200000000100 RSI: 000000004140aecd RDI: 0000000000000006 [ 117.071886][ T4849] RBP: 00007ff3aa977090 R08: 0000000000000000 R09: 0000000000000000 [ 117.079898][ T4849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.087908][ T4849] R13: 00007ff3ac9a7038 R14: 00007ff3ac9a6fa0 R15: 00007ffe01865348 [ 117.095970][ T4849] [ 117.102455][ T4821] udc-core: couldn't find an available UDC or it's busy [ 117.135493][ T4821] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 117.178688][ T4821] loop0: detected capacity change from 0 to 64 [ 117.190953][ T4849] ERROR: Out of memory at tomoyo_realpath_from_path. [ 117.290012][ T4855] FAULT_INJECTION: forcing a failure. [ 117.290012][ T4855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.314150][ T4855] CPU: 0 PID: 4855 Comm: syz.1.140 Not tainted syzkaller #0 [ 117.321513][ T4855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 117.332006][ T4855] Call Trace: [ 117.335322][ T4855] [ 117.338297][ T4855] dump_stack_lvl+0x188/0x250 [ 117.343019][ T4855] ? show_regs_print_info+0x20/0x20 [ 117.348297][ T4855] ? load_image+0x410/0x410 [ 117.352857][ T4855] ? __lock_acquire+0x7b50/0x7b50 [ 117.357933][ T4855] should_fail+0x383/0x4b0 [ 117.362405][ T4855] _copy_from_user+0x2e/0x170 [ 117.367133][ T4855] __copy_msghdr_from_user+0xc9/0x630 [ 117.372554][ T4855] ? verify_lock_unused+0x140/0x140 [ 117.377794][ T4855] ? mark_lock+0x94/0x320 [ 117.382173][ T4855] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 117.387502][ T4855] ? __lock_acquire+0x13dc/0x7b50 [ 117.392597][ T4855] ___sys_sendmsg+0x19a/0x2e0 [ 117.397495][ T4855] ? __sys_sendmsg+0x290/0x290 [ 117.402320][ T4855] __se_sys_sendmsg+0x1b7/0x2a0 [ 117.407195][ T4855] ? __x64_sys_sendmsg+0x80/0x80 [ 117.412149][ T4855] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 117.418167][ T4855] ? lockdep_hardirqs_on+0x94/0x140 [ 117.423387][ T4855] do_syscall_64+0x4c/0xa0 [ 117.427823][ T4855] ? clear_bhb_loop+0x30/0x80 [ 117.432520][ T4855] ? clear_bhb_loop+0x30/0x80 [ 117.437217][ T4855] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.443154][ T4855] RIP: 0033:0x7ff3ac71f019 [ 117.447604][ T4855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.467235][ T4855] RSP: 002b:00007ff3aa977028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.475691][ T4855] RAX: ffffffffffffffda RBX: 00007ff3ac9a6fa0 RCX: 00007ff3ac71f019 [ 117.483705][ T4855] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 117.491705][ T4855] RBP: 00007ff3aa977090 R08: 0000000000000000 R09: 0000000000000000 [ 117.499706][ T4855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.507693][ T4855] R13: 00007ff3ac9a7038 R14: 00007ff3ac9a6fa0 R15: 00007ffe01865348 [ 117.515712][ T4855] [ 117.613055][ T4227] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 117.628970][ T4227] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 117.693890][ T4227] usb 1-1: USB disconnect, device number 3 [ 118.072422][ T4870] loop2: detected capacity change from 0 to 256 [ 118.114918][ T4870] exfat: Deprecated parameter 'namecase' [ 118.131416][ T4870] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 118.678717][ T4876] loop1: detected capacity change from 0 to 4096 [ 118.741775][ T4876] EXT4-fs (loop1): Test dummy encryption mode enabled [ 118.780069][ T4876] EXT4-fs (loop1): Ignoring removed oldalloc option [ 118.828936][ T4876] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,oldalloc,,errors=continue. Quota mode: writeback. [ 119.944414][ T4904] netlink: 16 bytes leftover after parsing attributes in process `syz.1.153'. [ 120.958219][ T4889] loop4: detected capacity change from 0 to 32768 [ 121.481366][ T4889] XFS (loop4): Mounting V5 Filesystem [ 121.640852][ T4889] XFS (loop4): Ending clean mount [ 121.648642][ T4926] netlink: 176 bytes leftover after parsing attributes in process `syz.0.157'. [ 121.688514][ T4889] XFS (loop4): User initiated shutdown received. [ 121.696531][ T4889] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 121.725033][ T4889] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 121.746218][ T4925] FAULT_INJECTION: forcing a failure. [ 121.746218][ T4925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.781709][ T4902] loop2: detected capacity change from 0 to 32768 [ 121.822726][ T4197] XFS (loop4): Unmounting Filesystem [ 121.823833][ T4925] CPU: 1 PID: 4925 Comm: syz.0.157 Not tainted syzkaller #0 [ 121.835709][ T4925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 121.845803][ T4925] Call Trace: [ 121.849123][ T4925] [ 121.852083][ T4925] dump_stack_lvl+0x188/0x250 [ 121.856809][ T4925] ? show_regs_print_info+0x20/0x20 [ 121.862044][ T4925] ? load_image+0x410/0x410 [ 121.866587][ T4925] ? __lock_acquire+0x7b50/0x7b50 [ 121.871659][ T4925] should_fail+0x383/0x4b0 [ 121.876123][ T4925] _copy_to_user+0x2e/0x130 [ 121.880673][ T4925] simple_read_from_buffer+0xe3/0x150 [ 121.886096][ T4925] proc_fail_nth_read+0x1a6/0x220 [ 121.891166][ T4925] ? proc_fault_inject_write+0x310/0x310 [ 121.896868][ T4925] ? fsnotify_perm+0x254/0x560 [ 121.901680][ T4925] ? proc_fault_inject_write+0x310/0x310 [ 121.907364][ T4925] vfs_read+0x2ff/0xd50 [ 121.911576][ T4925] ? __lock_acquire+0x7b50/0x7b50 [ 121.916658][ T4925] ? kernel_read+0x1e0/0x1e0 [ 121.921323][ T4925] ? mutex_lock_nested+0x17/0x20 [ 121.926312][ T4925] ? __fdget_pos+0x2bf/0x370 [ 121.930951][ T4925] ? ksys_read+0x70/0x260 [ 121.935323][ T4925] ksys_read+0x153/0x260 [ 121.939615][ T4925] ? vfs_write+0xd70/0xd70 [ 121.944069][ T4925] ? lockdep_hardirqs_on+0x94/0x140 [ 121.949312][ T4925] do_syscall_64+0x4c/0xa0 [ 121.953777][ T4925] ? clear_bhb_loop+0x30/0x80 [ 121.958497][ T4925] ? clear_bhb_loop+0x30/0x80 [ 121.963219][ T4925] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.969151][ T4925] RIP: 0033:0x7efeb3e4e84e [ 121.973636][ T4925] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 121.993618][ T4925] RSP: 002b:00007efeb20c4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 122.002077][ T4925] RAX: ffffffffffffffda RBX: 00007efeb20c56c0 RCX: 00007efeb3e4e84e [ 122.010092][ T4925] RDX: 000000000000000f RSI: 00007efeb20c50a0 RDI: 0000000000000008 [ 122.018102][ T4925] RBP: 00007efeb20c5090 R08: 0000000000000000 R09: 0000000000000000 [ 122.026704][ T4925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.034721][ T4925] R13: 00007efeb4116128 R14: 00007efeb4116090 R15: 00007fffcf0a8ff8 [ 122.042813][ T4925] [ 122.047028][ T4902] (syz.2.150,4902,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 122.093389][ T4902] (syz.2.150,4902,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 122.280042][ T4906] loop3: detected capacity change from 0 to 32768 [ 122.308941][ T4896] loop2: detected capacity change from 0 to 1764 [ 122.536815][ T4896] loop2: detected capacity change from 0 to 128 [ 122.594787][ T4896] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 122.632576][ T4906] XFS (loop3): Mounting V5 Filesystem [ 122.698574][ T4896] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.895414][ T4906] XFS (loop3): Ending clean mount [ 122.994629][ T4193] XFS (loop3): Unmounting Filesystem [ 123.077275][ T4945] FAULT_INJECTION: forcing a failure. [ 123.077275][ T4945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.114117][ T4945] CPU: 0 PID: 4945 Comm: syz.2.161 Not tainted syzkaller #0 [ 123.121526][ T4945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 123.131620][ T4945] Call Trace: [ 123.134935][ T4945] [ 123.137898][ T4945] dump_stack_lvl+0x188/0x250 [ 123.142624][ T4945] ? show_regs_print_info+0x20/0x20 [ 123.147878][ T4945] ? load_image+0x410/0x410 [ 123.152434][ T4945] ? __lock_acquire+0x7b50/0x7b50 [ 123.157503][ T4945] should_fail+0x383/0x4b0 [ 123.162077][ T4945] _copy_to_user+0x2e/0x130 [ 123.166628][ T4945] simple_read_from_buffer+0xe3/0x150 [ 123.172061][ T4945] proc_fail_nth_read+0x1a6/0x220 [ 123.177159][ T4945] ? proc_fault_inject_write+0x310/0x310 [ 123.182850][ T4945] ? fsnotify_perm+0x254/0x560 [ 123.187658][ T4945] ? proc_fault_inject_write+0x310/0x310 [ 123.193347][ T4945] vfs_read+0x2ff/0xd50 [ 123.197548][ T4945] ? __lock_acquire+0x7b50/0x7b50 [ 123.202626][ T4945] ? kernel_read+0x1e0/0x1e0 [ 123.202645][ T4917] loop1: detected capacity change from 0 to 40427 [ 123.207272][ T4945] ? mutex_lock_nested+0x17/0x20 [ 123.207300][ T4945] ? __fdget_pos+0x2bf/0x370 [ 123.207319][ T4945] ? ksys_read+0x70/0x260 [ 123.207342][ T4945] ksys_read+0x153/0x260 [ 123.207365][ T4945] ? vfs_write+0xd70/0xd70 [ 123.207390][ T4945] ? lockdep_hardirqs_on+0x94/0x140 [ 123.207418][ T4945] do_syscall_64+0x4c/0xa0 [ 123.207438][ T4945] ? clear_bhb_loop+0x30/0x80 [ 123.207459][ T4945] ? clear_bhb_loop+0x30/0x80 [ 123.207483][ T4945] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.207506][ T4945] RIP: 0033:0x7f12854e884e [ 123.207527][ T4945] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 123.207546][ T4945] RSP: 002b:00007f128377ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 123.207570][ T4945] RAX: ffffffffffffffda RBX: 00007f12837806c0 RCX: 00007f12854e884e [ 123.207587][ T4945] RDX: 000000000000000f RSI: 00007f12837800a0 RDI: 0000000000000003 [ 123.207602][ T4945] RBP: 00007f1283780090 R08: 0000000000000000 R09: 0000000000000000 [ 123.207616][ T4945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.207629][ T4945] R13: 00007f12857b0038 R14: 00007f12857affa0 R15: 00007fff78589068 [ 123.207663][ T4945] [ 123.339307][ T4232] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 123.715383][ T4917] F2FS-fs (loop1): Zoned block device path is missing [ 123.737196][ T4955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.162'. [ 123.747146][ T4917] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 123.782491][ T4955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.162'. [ 123.831734][ T4917] F2FS-fs (loop1): invalid crc value [ 123.887574][ T4917] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 123.898964][ T4232] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 123.914746][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.949254][ T4232] usb 1-1: Product: syz [ 123.953892][ T4232] usb 1-1: Manufacturer: syz [ 123.958533][ T4232] usb 1-1: SerialNumber: syz [ 123.995587][ T4232] usb 1-1: config 0 descriptor?? [ 124.124507][ T4917] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 124.152158][ T4917] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 124.553689][ T2308] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 124.599883][ T4969] loop0: detected capacity change from 0 to 128 [ 124.943624][ T2308] usb 2-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config [ 124.995881][ T2308] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.299063][ T4969] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 125.308686][ T2308] usb 2-1: New USB device found, idVendor=04b4, idProduct=931e, bcdDevice= 0.40 [ 125.324449][ T4232] usb 1-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -110 [ 125.361979][ T4232] usb 1-1: Firmware version (0.0) predates our first public release. [ 125.394731][ T2308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.433499][ T4232] usb 1-1: Please update to version 0.2 or newer [ 125.449292][ T2308] usb 2-1: Product: syz [ 125.454206][ T4974] FAULT_INJECTION: forcing a failure. [ 125.454206][ T4974] name failslab, interval 1, probability 0, space 0, times 0 [ 125.475396][ T2308] usb 2-1: Manufacturer: syz [ 125.478499][ T4974] CPU: 0 PID: 4974 Comm: syz.2.169 Not tainted syzkaller #0 [ 125.480698][ T2308] usb 2-1: SerialNumber: syz [ 125.487659][ T4974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 125.487680][ T4974] Call Trace: [ 125.487692][ T4974] [ 125.487702][ T4974] dump_stack_lvl+0x188/0x250 [ 125.487741][ T4974] ? show_regs_print_info+0x20/0x20 [ 125.487770][ T4974] ? load_image+0x410/0x410 [ 125.487799][ T4974] ? __might_sleep+0xf0/0xf0 [ 125.487825][ T4974] ? __lock_acquire+0x7b50/0x7b50 [ 125.487861][ T4974] should_fail+0x383/0x4b0 [ 125.487892][ T4974] should_failslab+0x5/0x20 [ 125.487915][ T4974] slab_pre_alloc_hook+0x51/0xc0 [ 125.487942][ T4974] __kmalloc+0x6b/0x340 [ 125.487963][ T4974] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 125.487999][ T4974] tomoyo_realpath_from_path+0xed/0x5e0 [ 125.488057][ T4974] tomoyo_path_number_perm+0x251/0x6b0 [ 125.523626][ T4232] usb 1-1: atusb_probe: initialization failed, error = -110 [ 125.528003][ T4974] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 125.528036][ T4974] ? ksys_write+0x1d4/0x260 [ 125.537531][ T4969] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 125.542085][ T4974] security_file_ioctl+0x6c/0xa0 [ 125.593479][ T2308] usb 2-1: can't set config #1, error -71 [ 125.594381][ T4974] __se_sys_ioctl+0x48/0x170 [ 125.601072][ T4232] atusb: probe of 1-1:0.0 failed with error -110 [ 125.605085][ T4974] do_syscall_64+0x4c/0xa0 [ 125.605115][ T4974] ? clear_bhb_loop+0x30/0x80 [ 125.605137][ T4974] ? clear_bhb_loop+0x30/0x80 [ 125.605161][ T4974] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 125.605184][ T4974] RIP: 0033:0x7f1285528019 [ 125.605206][ T4974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.605224][ T4974] RSP: 002b:00007f1283780028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.622590][ T4969] FAT-fs (loop0): Filesystem has been set read-only [ 125.625304][ T4974] RAX: ffffffffffffffda RBX: 00007f12857affa0 RCX: 00007f1285528019 [ 125.625336][ T4974] RDX: 0000200000000240 RSI: 00000000c0306201 RDI: 0000000000000005 [ 125.625351][ T4974] RBP: 00007f1283780090 R08: 0000000000000000 R09: 0000000000000000 [ 125.625364][ T4974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.625377][ T4974] R13: 00007f12857b0038 R14: 00007f12857affa0 R15: 00007fff78589068 [ 125.625408][ T4974] [ 125.721176][ T2308] usb 2-1: USB disconnect, device number 3 [ 125.731929][ T4189] attempt to access beyond end of device [ 125.731929][ T4189] loop1: rw=2049, want=45104, limit=40427 [ 125.795532][ T4974] ERROR: Out of memory at tomoyo_realpath_from_path. [ 125.959244][ T4983] FAULT_INJECTION: forcing a failure. [ 125.959244][ T4983] name failslab, interval 1, probability 0, space 0, times 0 [ 125.985537][ T4232] usb 1-1: USB disconnect, device number 4 [ 126.003730][ T4983] CPU: 0 PID: 4983 Comm: syz.4.172 Not tainted syzkaller #0 [ 126.011096][ T4983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 126.021194][ T4983] Call Trace: [ 126.024510][ T4983] [ 126.027481][ T4983] dump_stack_lvl+0x188/0x250 [ 126.032211][ T4983] ? show_regs_print_info+0x20/0x20 [ 126.037466][ T4983] ? load_image+0x410/0x410 [ 126.042025][ T4983] ? __lock_acquire+0x7b50/0x7b50 [ 126.047105][ T4983] should_fail+0x383/0x4b0 [ 126.051562][ T4983] should_failslab+0x5/0x20 [ 126.056109][ T4983] slab_pre_alloc_hook+0x51/0xc0 [ 126.061094][ T4983] __kmalloc+0x6b/0x340 [ 126.065289][ T4983] ? __se_sys_memfd_create+0x142/0x450 [ 126.070799][ T4983] ? strnlen_user+0x19b/0x250 [ 126.075522][ T4983] __se_sys_memfd_create+0x142/0x450 [ 126.080954][ T4983] ? lock_chain_count+0x20/0x20 [ 126.085892][ T4983] ? __x64_sys_memfd_create+0x60/0x60 [ 126.091318][ T4983] ? lockdep_hardirqs_on+0x94/0x140 [ 126.096568][ T4983] do_syscall_64+0x4c/0xa0 [ 126.101017][ T4983] ? clear_bhb_loop+0x30/0x80 [ 126.105738][ T4983] ? clear_bhb_loop+0x30/0x80 [ 126.110479][ T4983] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.116405][ T4983] RIP: 0033:0x7f6377ff3019 [ 126.120857][ T4983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.138978][ T4985] loop2: detected capacity change from 0 to 164 [ 126.140499][ T4983] RSP: 002b:00007f637624ae08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 126.140526][ T4983] RAX: ffffffffffffffda RBX: 000000000000028c RCX: 00007f6377ff3019 [ 126.140543][ T4983] RDX: 00007f637624aee0 RSI: 0000000000000000 RDI: 00007f637808a1ec [ 126.171221][ T4983] RBP: 0000200000000340 R08: 00000000ffffffff R09: 0000000000000000 [ 126.179251][ T4983] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000800 [ 126.187271][ T4983] R13: 00007f637624aee0 R14: 00007f637624aea0 R15: 0000200000000040 [ 126.195302][ T4983] [ 126.241196][ T4985] FAULT_INJECTION: forcing a failure. [ 126.241196][ T4985] name failslab, interval 1, probability 0, space 0, times 0 [ 126.276432][ T4985] CPU: 0 PID: 4985 Comm: syz.2.174 Not tainted syzkaller #0 [ 126.283793][ T4985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 126.294010][ T4985] Call Trace: [ 126.297328][ T4985] [ 126.300303][ T4985] dump_stack_lvl+0x188/0x250 [ 126.305035][ T4985] ? show_regs_print_info+0x20/0x20 [ 126.310283][ T4985] ? load_image+0x410/0x410 [ 126.314839][ T4985] ? __lock_acquire+0x7b50/0x7b50 [ 126.319920][ T4985] should_fail+0x383/0x4b0 [ 126.324386][ T4985] should_failslab+0x5/0x20 [ 126.328931][ T4985] slab_pre_alloc_hook+0x51/0xc0 [ 126.334070][ T4985] ? getname_flags+0xb7/0x4f0 [ 126.338793][ T4985] kmem_cache_alloc+0x3d/0x280 [ 126.343602][ T4985] getname_flags+0xb7/0x4f0 [ 126.348151][ T4985] __x64_sys_symlink+0x5b/0x90 [ 126.352967][ T4985] do_syscall_64+0x4c/0xa0 [ 126.357512][ T4985] ? clear_bhb_loop+0x30/0x80 [ 126.362319][ T4985] ? clear_bhb_loop+0x30/0x80 [ 126.367040][ T4985] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.372977][ T4985] RIP: 0033:0x7f1285528019 [ 126.377469][ T4985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.397120][ T4985] RSP: 002b:00007f1283780028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 126.405687][ T4985] RAX: ffffffffffffffda RBX: 00007f12857affa0 RCX: 00007f1285528019 [ 126.413715][ T4985] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000200000000100 [ 126.422166][ T4985] RBP: 00007f1283780090 R08: 0000000000000000 R09: 0000000000000000 [ 126.430212][ T4985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.438322][ T4985] R13: 00007f12857b0038 R14: 00007f12857affa0 R15: 00007fff78589068 [ 126.446351][ T4985] [ 126.517680][ T4991] loop4: detected capacity change from 0 to 164 [ 126.636432][ T4993] netlink: 16 bytes leftover after parsing attributes in process `syz.1.170'. [ 126.773085][ T1110] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 127.043176][ T1110] usb 1-1: Using ep0 maxpacket: 32 [ 127.243727][ T1110] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 127.473660][ T1110] usb 1-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 127.529491][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.588525][ T4991] loop4: detected capacity change from 0 to 8192 [ 127.612799][ T1110] usb 1-1: Product: ࠝ [ 127.615545][ T1110] usb 1-1: Manufacturer: ፯सથ頋߱ञ㬙ꎣ䬒䤶Ș磵✆⇲䔑쭹쓓♴촩餧횀懤噺ᾝ೤⛞提℻夔窸舮죆磓쇊燝ᣬ䣛ҙ㋕굘慗ꉣⷃ﨎⣎Ȼퟢ〽㷾᷿㈍䷁鏄抝꽚Ⴧ졬긏퓗嫊ꅺ❳骝ᡀऺ艓訥 [ 127.645834][ T1110] usb 1-1: SerialNumber: 黷錠≐혮㜥ꤼꬥ鞈켨啕鹰촒鰊뻀௷螟넁≅햑훩㓹뙘눺뗏鯽ꤛ䓂왖ꨑ暽郒禾 [ 127.686706][ T1110] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 127.699302][ T4999] netlink: 16 bytes leftover after parsing attributes in process `syz.3.178'. [ 127.699800][ T1110] usb 1-1: no configuration chosen from 1 choice [ 127.741993][ T4991] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 127.762486][ T4991] REISERFS (device loop4): using ordered data mode [ 127.774182][ T4991] reiserfs: using flush barriers [ 127.804875][ T4991] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 127.825310][ T4991] REISERFS (device loop4): checking transaction log (loop4) [ 127.922684][ T4683] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 127.944260][ T4991] REISERFS (device loop4): Using r5 hash to sort names [ 128.663724][ T5006] fuse: Bad value for 'fd' [ 129.020997][ T5009] loop4: detected capacity change from 0 to 4096 [ 129.329144][ T5025] loop4: detected capacity change from 0 to 512 [ 129.452250][ T5025] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.187: ea_inode with extended attributes [ 129.483454][ T1108] usb 1-1: USB disconnect, device number 5 [ 129.502980][ T5025] EXT4-fs (loop4): Remounting filesystem read-only [ 129.509750][ T5025] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.187: error while reading EA inode 11 err=-117 [ 129.548000][ T5029] loop3: detected capacity change from 0 to 512 [ 129.571864][ T5025] EXT4-fs (loop4): Remounting filesystem read-only [ 129.638876][ T5025] EXT4-fs (loop4): 1 orphan inode deleted [ 129.678616][ T5025] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 129.786180][ T5029] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 129.818193][ T5034] netlink: 16 bytes leftover after parsing attributes in process `syz.2.189'. [ 129.915225][ T5029] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.422617][ T5047] loop2: detected capacity change from 0 to 256 [ 131.564907][ T5047] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 131.682297][ T26] audit: type=1800 audit(1785666381.277:3): pid=5047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.193" name="file1" dev="loop2" ino=1048609 res=0 errno=0 [ 132.593223][ T5064] bridge0: port 2(bridge_slave_1) entered listening state [ 132.652179][ T5064] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.670298][ T5071] loop2: detected capacity change from 0 to 256 [ 132.740097][ T5073] FAULT_INJECTION: forcing a failure. [ 132.740097][ T5073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.773659][ T5071] exfat: Bad value for 'uid' [ 132.801858][ T5075] FAULT_INJECTION: forcing a failure. [ 132.801858][ T5075] name failslab, interval 1, probability 0, space 0, times 0 [ 132.805843][ T5073] CPU: 1 PID: 5073 Comm: syz.0.200 Not tainted syzkaller #0 [ 132.821839][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 132.831959][ T5073] Call Trace: [ 132.835314][ T5073] [ 132.838269][ T5073] dump_stack_lvl+0x188/0x250 [ 132.842990][ T5073] ? show_regs_print_info+0x20/0x20 [ 132.848219][ T5073] ? load_image+0x410/0x410 [ 132.852751][ T5073] ? __lock_acquire+0x7b50/0x7b50 [ 132.857812][ T5073] should_fail+0x383/0x4b0 [ 132.862268][ T5073] _copy_from_user+0x2e/0x170 [ 132.867063][ T5073] __copy_msghdr_from_user+0xc9/0x630 [ 132.872470][ T5073] ? verify_lock_unused+0x140/0x140 [ 132.877692][ T5073] ? mark_lock+0x94/0x320 [ 132.882067][ T5073] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 132.887482][ T5073] ? __lock_acquire+0x13dc/0x7b50 [ 132.892811][ T5073] ___sys_sendmsg+0x19a/0x2e0 [ 132.897521][ T5073] ? __sys_sendmsg+0x290/0x290 [ 132.902337][ T5073] __se_sys_sendmsg+0x1b7/0x2a0 [ 132.907216][ T5073] ? __x64_sys_sendmsg+0x80/0x80 [ 132.912203][ T5073] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 132.918217][ T5073] ? lockdep_hardirqs_on+0x94/0x140 [ 132.923455][ T5073] do_syscall_64+0x4c/0xa0 [ 132.927920][ T5073] ? clear_bhb_loop+0x30/0x80 [ 132.932626][ T5073] ? clear_bhb_loop+0x30/0x80 [ 132.937332][ T5073] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 132.943249][ T5073] RIP: 0033:0x7efeb3e8e019 [ 132.947687][ T5073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.967317][ T5073] RSP: 002b:00007efeb20a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.975757][ T5073] RAX: ffffffffffffffda RBX: 00007efeb4116180 RCX: 00007efeb3e8e019 [ 132.983753][ T5073] RDX: 0000000004004040 RSI: 0000200000000140 RDI: 0000000000000005 [ 132.991751][ T5073] RBP: 00007efeb20a4090 R08: 0000000000000000 R09: 0000000000000000 [ 132.999745][ T5073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.007909][ T5073] R13: 00007efeb4116218 R14: 00007efeb4116180 R15: 00007fffcf0a8ff8 [ 133.015917][ T5073] [ 133.026459][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.046780][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.069216][ T5075] CPU: 1 PID: 5075 Comm: syz.3.201 Not tainted syzkaller #0 [ 133.076600][ T5075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 133.086696][ T5075] Call Trace: [ 133.090011][ T5075] [ 133.092978][ T5075] dump_stack_lvl+0x188/0x250 [ 133.097709][ T5075] ? show_regs_print_info+0x20/0x20 [ 133.102956][ T5075] ? load_image+0x410/0x410 [ 133.107508][ T5075] ? __might_sleep+0xf0/0xf0 [ 133.112143][ T5075] ? __lock_acquire+0x7b50/0x7b50 [ 133.117217][ T5075] should_fail+0x383/0x4b0 [ 133.121680][ T5075] should_failslab+0x5/0x20 [ 133.126220][ T5075] slab_pre_alloc_hook+0x51/0xc0 [ 133.131203][ T5075] __kmalloc+0x6b/0x340 [ 133.135406][ T5075] ? file_tty_write+0x2f7/0x8a0 [ 133.140308][ T5075] file_tty_write+0x2f7/0x8a0 [ 133.145035][ T5075] ? memset+0x1e/0x40 [ 133.149058][ T5075] ? n_tty_read+0x1a50/0x1a50 [ 133.153772][ T5075] vfs_write+0x748/0xd70 [ 133.158072][ T5075] ? file_end_write+0x250/0x250 [ 133.162972][ T5075] ? __fget_files+0x402/0x470 [ 133.167706][ T5075] ? __fdget_pos+0x1e2/0x370 [ 133.172339][ T5075] ? ksys_write+0x70/0x260 [ 133.176800][ T5075] ksys_write+0x153/0x260 [ 133.181351][ T5075] ? __ia32_sys_read+0x80/0x80 [ 133.186209][ T5075] ? lockdep_hardirqs_on+0x94/0x140 [ 133.191463][ T5075] do_syscall_64+0x4c/0xa0 [ 133.195924][ T5075] ? clear_bhb_loop+0x30/0x80 [ 133.200651][ T5075] ? clear_bhb_loop+0x30/0x80 [ 133.205375][ T5075] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 133.211365][ T5075] RIP: 0033:0x7ff76fc72019 [ 133.215829][ T5075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.235495][ T5075] RSP: 002b:00007ff76deca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 133.244001][ T5075] RAX: ffffffffffffffda RBX: 00007ff76fef9fa0 RCX: 00007ff76fc72019 [ 133.252043][ T5075] RDX: 0000000000001006 RSI: 0000200000002140 RDI: 0000000000000005 [ 133.260053][ T5075] RBP: 00007ff76deca090 R08: 0000000000000000 R09: 0000000000000000 [ 133.268068][ T5075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.276095][ T5075] R13: 00007ff76fefa038 R14: 00007ff76fef9fa0 R15: 00007ffe995c1378 [ 133.284147][ T5075] [ 134.630092][ T5092] FAULT_INJECTION: forcing a failure. [ 134.630092][ T5092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.708927][ T5092] CPU: 0 PID: 5092 Comm: syz.3.207 Not tainted syzkaller #0 [ 134.716295][ T5092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 134.726390][ T5092] Call Trace: [ 134.729711][ T5092] [ 134.732672][ T5092] dump_stack_lvl+0x188/0x250 [ 134.737398][ T5092] ? show_regs_print_info+0x20/0x20 [ 134.742645][ T5092] ? load_image+0x410/0x410 [ 134.747197][ T5092] ? __lock_acquire+0x7b50/0x7b50 [ 134.752284][ T5092] should_fail+0x383/0x4b0 [ 134.756750][ T5092] _copy_from_user+0x2e/0x170 [ 134.761471][ T5092] iovec_from_user+0x142/0x370 [ 134.766277][ T5092] __import_iovec+0x70/0x490 [ 134.770916][ T5092] import_iovec+0x6f/0xa0 [ 134.775282][ T5092] do_preadv+0x1fb/0x390 [ 134.779567][ T5092] ? do_writev+0x480/0x480 [ 134.784042][ T5092] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 134.790068][ T5092] ? lock_chain_count+0x20/0x20 [ 134.794961][ T5092] ? lockdep_hardirqs_on+0x94/0x140 [ 134.800201][ T5092] do_syscall_64+0x4c/0xa0 [ 134.804666][ T5092] ? clear_bhb_loop+0x30/0x80 [ 134.809382][ T5092] ? clear_bhb_loop+0x30/0x80 [ 134.814092][ T5092] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.820035][ T5092] RIP: 0033:0x7ff76fc72019 [ 134.824494][ T5092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.844269][ T5092] RSP: 002b:00007ff76deca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 134.852759][ T5092] RAX: ffffffffffffffda RBX: 00007ff76fef9fa0 RCX: 00007ff76fc72019 [ 134.860770][ T5092] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000004 [ 134.868816][ T5092] RBP: 00007ff76deca090 R08: 000000000000065a R09: 0000000000000000 [ 134.876834][ T5092] R10: 000000000000005c R11: 0000000000000246 R12: 0000000000000001 [ 134.884845][ T5092] R13: 00007ff76fefa038 R14: 00007ff76fef9fa0 R15: 00007ffe995c1378 [ 134.892881][ T5092] [ 135.435853][ T5105] loop3: detected capacity change from 0 to 8 [ 136.225151][ T5119] loop1: detected capacity change from 0 to 512 [ 136.247359][ T5119] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 136.281971][ T5122] FAULT_INJECTION: forcing a failure. [ 136.281971][ T5122] name failslab, interval 1, probability 0, space 0, times 0 [ 136.353711][ T5122] CPU: 0 PID: 5122 Comm: syz.3.214 Not tainted syzkaller #0 [ 136.361077][ T5122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.371189][ T5122] Call Trace: [ 136.374510][ T5122] [ 136.377476][ T5122] dump_stack_lvl+0x188/0x250 [ 136.382305][ T5122] ? show_regs_print_info+0x20/0x20 [ 136.387569][ T5122] ? load_image+0x410/0x410 [ 136.392122][ T5122] ? __might_sleep+0xf0/0xf0 [ 136.396759][ T5122] ? __lock_acquire+0x7b50/0x7b50 [ 136.401835][ T5122] should_fail+0x383/0x4b0 [ 136.406294][ T5122] should_failslab+0x5/0x20 [ 136.410949][ T5122] slab_pre_alloc_hook+0x51/0xc0 [ 136.416030][ T5122] __kmalloc+0x6b/0x340 [ 136.420257][ T5122] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 136.426034][ T5122] tomoyo_realpath_from_path+0xed/0x5e0 [ 136.431658][ T5122] tomoyo_path_number_perm+0x251/0x6b0 [ 136.437169][ T5122] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 136.442670][ T5122] ? ksys_write+0x1d4/0x260 [ 136.447269][ T5122] security_file_ioctl+0x6c/0xa0 [ 136.452260][ T5122] __se_sys_ioctl+0x48/0x170 [ 136.456896][ T5122] do_syscall_64+0x4c/0xa0 [ 136.461442][ T5122] ? clear_bhb_loop+0x30/0x80 [ 136.466246][ T5122] ? clear_bhb_loop+0x30/0x80 [ 136.470963][ T5122] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 136.476896][ T5122] RIP: 0033:0x7ff76fc72019 [ 136.481348][ T5122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.500992][ T5122] RSP: 002b:00007ff76dea9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.509461][ T5122] RAX: ffffffffffffffda RBX: 00007ff76fefa090 RCX: 00007ff76fc72019 [ 136.517482][ T5122] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 136.525523][ T5122] RBP: 00007ff76dea9090 R08: 0000000000000000 R09: 0000000000000000 [ 136.533540][ T5122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.541560][ T5122] R13: 00007ff76fefa128 R14: 00007ff76fefa090 R15: 00007ffe995c1378 [ 136.549615][ T5122] [ 136.562507][ T5119] EXT4-fs (loop1): 1 truncate cleaned up [ 136.588692][ T5119] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000101,nobarrier,,errors=continue. Quota mode: none. [ 136.629095][ T5093] loop4: detected capacity change from 0 to 32768 [ 136.695232][ T5119] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.1.215: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 136.741914][ T5122] ERROR: Out of memory at tomoyo_realpath_from_path. [ 136.809807][ T5093] XFS (loop4): Mounting V5 Filesystem [ 136.836793][ T5119] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 136.990981][ T5093] XFS (loop4): Ending clean mount [ 137.061443][ T5093] XFS (loop4): Quotacheck needed: Please wait. [ 137.216596][ T5093] XFS (loop4): Quotacheck: Done. [ 138.102944][ T2308] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 138.146728][ T4197] XFS (loop4): Unmounting Filesystem [ 138.161300][ T5148] loop0: detected capacity change from 0 to 2048 [ 138.321351][ T5148] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,max_dir_size_kb=0x0000000000000004,noquota,,errors=continue. Quota mode: none. [ 138.471764][ T2308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.502122][ T2308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.541336][ T5148] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 138.747738][ T2308] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.894062][ T5148] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 138.972961][ T2308] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.006380][ T5159] FAULT_INJECTION: forcing a failure. [ 139.006380][ T5159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.027844][ T2308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.065965][ T2308] usb 3-1: config 0 descriptor?? [ 139.073187][ T5148] EXT4-fs (loop0): This should not happen!! Data will be lost [ 139.073187][ T5148] [ 139.341335][ T5159] CPU: 1 PID: 5159 Comm: syz.0.221 Not tainted syzkaller #0 [ 139.348699][ T5159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 139.358814][ T5159] Call Trace: [ 139.362130][ T5159] [ 139.365096][ T5159] dump_stack_lvl+0x188/0x250 [ 139.369826][ T5159] ? show_regs_print_info+0x20/0x20 [ 139.375240][ T5159] ? load_image+0x410/0x410 [ 139.379796][ T5159] ? __lock_acquire+0x7b50/0x7b50 [ 139.384913][ T5159] should_fail+0x383/0x4b0 [ 139.389505][ T5159] _copy_to_user+0x2e/0x130 [ 139.394078][ T5159] simple_read_from_buffer+0xe3/0x150 [ 139.399511][ T5159] proc_fail_nth_read+0x1a6/0x220 [ 139.404587][ T5159] ? proc_fault_inject_write+0x310/0x310 [ 139.410278][ T5159] ? fsnotify_perm+0x254/0x560 [ 139.415079][ T5159] ? proc_fault_inject_write+0x310/0x310 [ 139.420750][ T5159] vfs_read+0x2ff/0xd50 [ 139.424949][ T5159] ? __lock_acquire+0x7b50/0x7b50 [ 139.430215][ T5159] ? kernel_read+0x1e0/0x1e0 [ 139.434890][ T5159] ? mutex_lock_nested+0x17/0x20 [ 139.439864][ T5159] ? __fdget_pos+0x2bf/0x370 [ 139.444489][ T5159] ? ksys_read+0x70/0x260 [ 139.448864][ T5159] ksys_read+0x153/0x260 [ 139.453143][ T5159] ? vfs_write+0xd70/0xd70 [ 139.457622][ T5159] ? lockdep_hardirqs_on+0x94/0x140 [ 139.462868][ T5159] do_syscall_64+0x4c/0xa0 [ 139.467316][ T5159] ? clear_bhb_loop+0x30/0x80 [ 139.472028][ T5159] ? clear_bhb_loop+0x30/0x80 [ 139.476744][ T5159] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.482683][ T5159] RIP: 0033:0x7efeb3e4e84e [ 139.487133][ T5159] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 139.506768][ T5159] RSP: 002b:00007efeb20a3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 139.515222][ T5159] RAX: ffffffffffffffda RBX: 00007efeb20a46c0 RCX: 00007efeb3e4e84e [ 139.523234][ T5159] RDX: 000000000000000f RSI: 00007efeb20a40a0 RDI: 0000000000000007 [ 139.531276][ T5159] RBP: 00007efeb20a4090 R08: 0000000000000000 R09: 0000000000000000 [ 139.539285][ T5159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.547293][ T5159] R13: 00007efeb4116218 R14: 00007efeb4116180 R15: 00007fffcf0a8ff8 [ 139.555322][ T5159] [ 139.897704][ T2308] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 139.967989][ T2308] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 140.814043][ T5148] EXT4-fs (loop0): Total free blocks count 0 [ 140.820982][ T5148] EXT4-fs (loop0): Free/Dirty block details [ 140.828538][ T5148] EXT4-fs (loop0): free_blocks=2415919104 [ 140.834459][ T5148] EXT4-fs (loop0): dirty_blocks=32 [ 140.839706][ T5148] EXT4-fs (loop0): Block reservation details [ 140.877484][ T5139] udc-core: couldn't find an available UDC or it's busy [ 140.884639][ T5139] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 140.894730][ T5148] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 141.053478][ T4330] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 141.103091][ T4330] EXT4-fs (loop0): This should not happen!! Data will be lost [ 141.103091][ T4330] [ 141.487751][ T2308] usb 3-1: USB disconnect, device number 5 [ 141.887216][ T5183] FAULT_INJECTION: forcing a failure. [ 141.887216][ T5183] name failslab, interval 1, probability 0, space 0, times 0 [ 141.899934][ T5183] CPU: 1 PID: 5183 Comm: syz.4.222 Not tainted syzkaller #0 [ 141.907259][ T5183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 141.917387][ T5183] Call Trace: [ 141.920684][ T5183] [ 141.923636][ T5183] dump_stack_lvl+0x188/0x250 [ 141.928346][ T5183] ? show_regs_print_info+0x20/0x20 [ 141.933576][ T5183] ? load_image+0x410/0x410 [ 141.938111][ T5183] ? __lock_acquire+0x7b50/0x7b50 [ 141.943176][ T5183] should_fail+0x383/0x4b0 [ 141.947630][ T5183] should_failslab+0x5/0x20 [ 141.952160][ T5183] slab_pre_alloc_hook+0x51/0xc0 [ 141.957121][ T5183] ? __se_sys_mount+0x9b/0x3d0 [ 141.961909][ T5183] __kmalloc_track_caller+0x69/0x330 [ 141.967246][ T5183] ? __se_sys_mount+0x9b/0x3d0 [ 141.972058][ T5183] ? strnlen_user+0x150/0x250 [ 141.976761][ T5183] strndup_user+0x71/0x150 [ 141.981200][ T5183] __se_sys_mount+0x9b/0x3d0 [ 141.985820][ T5183] ? __x64_sys_mount+0xc0/0xc0 [ 141.990612][ T5183] ? lockdep_hardirqs_on+0x94/0x140 [ 141.995830][ T5183] ? __x64_sys_mount+0x1c/0xc0 [ 142.000625][ T5183] do_syscall_64+0x4c/0xa0 [ 142.005149][ T5183] ? clear_bhb_loop+0x30/0x80 [ 142.009968][ T5183] ? clear_bhb_loop+0x30/0x80 [ 142.014685][ T5183] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 142.020615][ T5183] RIP: 0033:0x7f6377ff3019 [ 142.025060][ T5183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.044778][ T5183] RSP: 002b:00007f6376209028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 142.053221][ T5183] RAX: ffffffffffffffda RBX: 00007f637827b180 RCX: 00007f6377ff3019 [ 142.061232][ T5183] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000000000000000 [ 142.069229][ T5183] RBP: 00007f6376209090 R08: 0000200000000080 R09: 0000000000000000 [ 142.077220][ T5183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.085220][ T5183] R13: 00007f637827b218 R14: 00007f637827b180 R15: 00007ffd7d35b7d8 [ 142.093316][ T5183] [ 143.012942][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 143.292959][ T23] usb 1-1: device descriptor read/64, error -71 [ 143.563321][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 143.823084][ T23] usb 1-1: device descriptor read/64, error -71 [ 143.953820][ T23] usb usb1-port1: attempt power cycle [ 144.192051][ T5193] FAULT_INJECTION: forcing a failure. [ 144.192051][ T5193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.249111][ T5193] CPU: 1 PID: 5193 Comm: syz.1.231 Not tainted syzkaller #0 [ 144.256475][ T5193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 144.266573][ T5193] Call Trace: [ 144.269891][ T5193] [ 144.272856][ T5193] dump_stack_lvl+0x188/0x250 [ 144.277585][ T5193] ? show_regs_print_info+0x20/0x20 [ 144.282829][ T5193] ? load_image+0x410/0x410 [ 144.287390][ T5193] ? __lock_acquire+0x7b50/0x7b50 [ 144.292473][ T5193] should_fail+0x383/0x4b0 [ 144.296942][ T5193] _copy_from_user+0x2e/0x170 [ 144.301868][ T5193] __copy_msghdr_from_user+0xc9/0x630 [ 144.307290][ T5193] ? verify_lock_unused+0x140/0x140 [ 144.312534][ T5193] ? mark_lock+0x94/0x320 [ 144.316911][ T5193] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 144.322238][ T5193] ? __lock_acquire+0x13dc/0x7b50 [ 144.327324][ T5193] ___sys_sendmsg+0x19a/0x2e0 [ 144.332048][ T5193] ? __sys_sendmsg+0x290/0x290 [ 144.336900][ T5193] __se_sys_sendmsg+0x1b7/0x2a0 [ 144.342083][ T5193] ? __x64_sys_sendmsg+0x80/0x80 [ 144.347066][ T5193] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 144.353110][ T5193] ? lockdep_hardirqs_on+0x94/0x140 [ 144.358353][ T5193] do_syscall_64+0x4c/0xa0 [ 144.362815][ T5193] ? clear_bhb_loop+0x30/0x80 [ 144.367529][ T5193] ? clear_bhb_loop+0x30/0x80 [ 144.372244][ T5193] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.378210][ T5193] RIP: 0033:0x7ff3ac71f019 [ 144.382667][ T5193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.402331][ T5193] RSP: 002b:00007ff3aa977028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.410818][ T5193] RAX: ffffffffffffffda RBX: 00007ff3ac9a6fa0 RCX: 00007ff3ac71f019 [ 144.418825][ T5193] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 144.426817][ T5193] RBP: 00007ff3aa977090 R08: 0000000000000000 R09: 0000000000000000 [ 144.434802][ T5193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.442825][ T5193] R13: 00007ff3ac9a7038 R14: 00007ff3ac9a6fa0 R15: 00007ffe01865348 [ 144.450865][ T5193] [ 144.473430][ T5195] team0: Device wg0 is of different type [ 144.522936][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 145.379048][ T23] usb 1-1: device descriptor read/8, error -71 [ 145.599445][ T5216] FAULT_INJECTION: forcing a failure. [ 145.599445][ T5216] name failslab, interval 1, probability 0, space 0, times 0 [ 145.680669][ T5226] FAULT_INJECTION: forcing a failure. [ 145.680669][ T5226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.694156][ T5216] CPU: 1 PID: 5216 Comm: syz.2.236 Not tainted syzkaller #0 [ 145.701502][ T5216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 145.711590][ T5216] Call Trace: [ 145.714902][ T5216] [ 145.717866][ T5216] dump_stack_lvl+0x188/0x250 [ 145.722585][ T5216] ? show_regs_print_info+0x20/0x20 [ 145.727825][ T5216] ? load_image+0x410/0x410 [ 145.732370][ T5216] ? __might_sleep+0xf0/0xf0 [ 145.737012][ T5216] ? __lock_acquire+0x7b50/0x7b50 [ 145.742143][ T5216] should_fail+0x383/0x4b0 [ 145.746603][ T5216] should_failslab+0x5/0x20 [ 145.751145][ T5216] slab_pre_alloc_hook+0x51/0xc0 [ 145.756217][ T5216] __kmalloc+0x6b/0x340 [ 145.760417][ T5216] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 145.766186][ T5216] tomoyo_realpath_from_path+0xed/0x5e0 [ 145.771800][ T5216] tomoyo_path_number_perm+0x251/0x6b0 [ 145.777297][ T5216] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 145.782794][ T5216] ? ksys_write+0x1d4/0x260 [ 145.787387][ T5216] security_file_ioctl+0x6c/0xa0 [ 145.792381][ T5216] __se_sys_ioctl+0x48/0x170 [ 145.797008][ T5216] do_syscall_64+0x4c/0xa0 [ 145.801466][ T5216] ? clear_bhb_loop+0x30/0x80 [ 145.806187][ T5216] ? clear_bhb_loop+0x30/0x80 [ 145.810905][ T5216] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 145.816849][ T5216] RIP: 0033:0x7f1285528019 [ 145.821306][ T5216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.841133][ T5216] RSP: 002b:00007f128375f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.849588][ T5216] RAX: ffffffffffffffda RBX: 00007f12857b0090 RCX: 00007f1285528019 [ 145.857680][ T5216] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 145.865688][ T5216] RBP: 00007f128375f090 R08: 0000000000000000 R09: 0000000000000000 [ 145.873721][ T5216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.881837][ T5216] R13: 00007f12857b0128 R14: 00007f12857b0090 R15: 00007fff78589068 [ 145.889865][ T5216] [ 145.968696][ T5217] loop4: detected capacity change from 0 to 4096 [ 145.980571][ T5226] CPU: 1 PID: 5226 Comm: syz.3.240 Not tainted syzkaller #0 [ 145.987910][ T5226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 145.998008][ T5226] Call Trace: [ 146.001314][ T5226] [ 146.004268][ T5226] dump_stack_lvl+0x188/0x250 [ 146.008995][ T5226] ? show_regs_print_info+0x20/0x20 [ 146.014231][ T5226] ? load_image+0x410/0x410 [ 146.018774][ T5226] ? __lock_acquire+0x7b50/0x7b50 [ 146.023843][ T5226] should_fail+0x383/0x4b0 [ 146.028302][ T5226] _copy_from_user+0x2e/0x170 [ 146.033023][ T5226] __copy_msghdr_from_user+0xc9/0x630 [ 146.038449][ T5226] ? verify_lock_unused+0x140/0x140 [ 146.043697][ T5226] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 146.049038][ T5226] ___sys_sendmsg+0x19a/0x2e0 [ 146.053794][ T5226] ? __sys_sendmsg+0x290/0x290 [ 146.058638][ T5226] __sys_sendmmsg+0x2ba/0x500 [ 146.063354][ T5226] ? __ia32_sys_sendmsg+0x80/0x80 [ 146.068480][ T5226] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 146.074512][ T5226] ? lock_chain_count+0x20/0x20 [ 146.079406][ T5226] __x64_sys_sendmmsg+0x9c/0xb0 [ 146.084289][ T5226] do_syscall_64+0x4c/0xa0 [ 146.088737][ T5226] ? clear_bhb_loop+0x30/0x80 [ 146.093447][ T5226] ? clear_bhb_loop+0x30/0x80 [ 146.098156][ T5226] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.104085][ T5226] RIP: 0033:0x7ff76fc72019 [ 146.108535][ T5226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.128448][ T5226] RSP: 002b:00007ff76deca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 146.136930][ T5226] RAX: ffffffffffffffda RBX: 00007ff76fef9fa0 RCX: 00007ff76fc72019 [ 146.144947][ T5226] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 146.152963][ T5226] RBP: 00007ff76deca090 R08: 0000000000000000 R09: 0000000000000000 [ 146.160985][ T5226] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 [ 146.169000][ T5226] R13: 00007ff76fefa038 R14: 00007ff76fef9fa0 R15: 00007ffe995c1378 [ 146.177110][ T5226] [ 146.236276][ T5217] EXT4-fs (loop4): Test dummy encryption mode enabled [ 146.276123][ T5216] ERROR: Out of memory at tomoyo_realpath_from_path. [ 146.305411][ T5217] EXT4-fs (loop4): Ignoring removed oldalloc option [ 146.349949][ T5217] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,oldalloc,,errors=continue. Quota mode: writeback. [ 147.273107][ T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 147.493115][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 147.618802][ T23] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 147.647898][ T23] usb 1-1: config 179 has no interface number 0 [ 147.673088][ T23] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 147.693519][ T23] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 147.710136][ T23] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 147.756345][ T23] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 147.808260][ T23] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 147.831643][ T23] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 147.845087][ T5248] loop4: detected capacity change from 0 to 256 [ 147.852252][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.913290][ T5228] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 147.955556][ T5248] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 148.030745][ T5252] netlink: 'syz.1.247': attribute type 2 has an invalid length. [ 148.067393][ T5253] FAULT_INJECTION: forcing a failure. [ 148.067393][ T5253] name failslab, interval 1, probability 0, space 0, times 0 [ 148.082286][ T5240] loop3: detected capacity change from 0 to 32768 [ 148.126059][ T5253] CPU: 1 PID: 5253 Comm: syz.4.246 Not tainted syzkaller #0 [ 148.133423][ T5253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 148.143522][ T5253] Call Trace: [ 148.146842][ T5253] [ 148.149816][ T5253] dump_stack_lvl+0x188/0x250 [ 148.154764][ T5253] ? show_regs_print_info+0x20/0x20 [ 148.160018][ T5253] ? load_image+0x410/0x410 [ 148.164576][ T5253] ? __might_sleep+0xf0/0xf0 [ 148.169214][ T5253] ? __lock_acquire+0x7b50/0x7b50 [ 148.174290][ T5253] should_fail+0x383/0x4b0 [ 148.178849][ T5253] should_failslab+0x5/0x20 [ 148.183398][ T5253] slab_pre_alloc_hook+0x51/0xc0 [ 148.188380][ T5253] ? exfat_iterate+0x4b4/0x2700 [ 148.193275][ T5253] kmem_cache_alloc+0x3d/0x280 [ 148.198086][ T5253] exfat_iterate+0x4b4/0x2700 [ 148.202819][ T5253] ? check_noncircular+0x189/0x330 [ 148.207982][ T5253] ? exfat_iterate+0x2b1/0x2700 [ 148.212882][ T5253] ? add_chain_block+0x9b0/0x9b0 [ 148.217873][ T5253] ? lockdep_unlock+0x143/0x2e0 [ 148.222787][ T5253] ? lockdep_lock+0x1f0/0x1f0 [ 148.227520][ T5253] ? add_lock_to_list+0x18d/0x280 [ 148.232598][ T5253] ? exfat_check_dir_empty+0x3a0/0x3a0 [ 148.238105][ T5253] ? __lock_acquire+0x2844/0x7b50 [ 148.243203][ T5253] ? verify_lock_unused+0x140/0x140 [ 148.248473][ T5253] ? aa_file_perm+0x38b/0xe80 [ 148.253221][ T5253] ? __lock_acquire+0x7b50/0x7b50 [ 148.258419][ T5253] ? vfs_write+0xaa6/0xd70 [ 148.262897][ T5253] ? common_file_perm+0x171/0x1c0 [ 148.267965][ T5253] ? iterate_dir+0x133/0x550 [ 148.272612][ T5253] iterate_dir+0x213/0x550 [ 148.277078][ T5253] __se_sys_getdents64+0xf2/0x270 [ 148.282151][ T5253] ? __x64_sys_getdents64+0x80/0x80 [ 148.287398][ T5253] ? filldir+0x700/0x700 [ 148.291690][ T5253] ? lockdep_hardirqs_on+0x94/0x140 [ 148.296947][ T5253] do_syscall_64+0x4c/0xa0 [ 148.301402][ T5253] ? clear_bhb_loop+0x30/0x80 [ 148.306243][ T5253] ? clear_bhb_loop+0x30/0x80 [ 148.311086][ T5253] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.317057][ T5253] RIP: 0033:0x7f6377ff3019 [ 148.321518][ T5253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.341160][ T5253] RSP: 002b:00007f637622a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 148.349627][ T5253] RAX: ffffffffffffffda RBX: 00007f637827b090 RCX: 00007f6377ff3019 [ 148.357648][ T5253] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 148.365656][ T5253] RBP: 00007f637622a090 R08: 0000000000000000 R09: 0000000000000000 [ 148.373669][ T5253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.381680][ T5253] R13: 00007f637827b128 R14: 00007f637827b090 R15: 00007ffd7d35b7d8 [ 148.389717][ T5253] [ 148.395077][ T1110] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 148.443707][ T5240] FAULT_INJECTION: forcing a failure. [ 148.443707][ T5240] name failslab, interval 1, probability 0, space 0, times 0 [ 148.465807][ T23] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input8 [ 148.477470][ T5240] CPU: 1 PID: 5240 Comm: syz.3.245 Not tainted syzkaller #0 [ 148.484812][ T5240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 148.494910][ T5240] Call Trace: [ 148.498218][ T5240] [ 148.501185][ T5240] dump_stack_lvl+0x188/0x250 [ 148.505917][ T5240] ? show_regs_print_info+0x20/0x20 [ 148.511161][ T5240] ? load_image+0x410/0x410 [ 148.515713][ T5240] ? __might_sleep+0xf0/0xf0 [ 148.520342][ T5240] ? __lock_acquire+0x7b50/0x7b50 [ 148.525422][ T5240] should_fail+0x383/0x4b0 [ 148.529927][ T5240] should_failslab+0x5/0x20 [ 148.534472][ T5240] slab_pre_alloc_hook+0x51/0xc0 [ 148.539456][ T5240] ? getname_flags+0xb7/0x4f0 [ 148.544167][ T5240] kmem_cache_alloc+0x3d/0x280 [ 148.548973][ T5240] getname_flags+0xb7/0x4f0 [ 148.553537][ T5240] user_path_at_empty+0x2a/0x190 [ 148.558522][ T5240] vfs_statx+0x107/0x4c0 [ 148.562818][ T5240] ? vfs_fstatat+0x40/0x40 [ 148.567322][ T5240] __x64_sys_newstat+0x116/0x1c0 [ 148.572308][ T5240] ? __ia32_sys_fstat+0x210/0x210 [ 148.577477][ T5240] ? lock_chain_count+0x20/0x20 [ 148.582379][ T5240] ? lockdep_hardirqs_on+0x94/0x140 [ 148.587625][ T5240] do_syscall_64+0x4c/0xa0 [ 148.592123][ T5240] ? clear_bhb_loop+0x30/0x80 [ 148.596840][ T5240] ? clear_bhb_loop+0x30/0x80 [ 148.601563][ T5240] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.607504][ T5240] RIP: 0033:0x7ff76fc72019 [ 148.611957][ T5240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.624832][ T4317] usb 1-1: USB disconnect, device number 9 [ 148.631599][ T5240] RSP: 002b:00007ff76deca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 148.631631][ T5240] RAX: ffffffffffffffda RBX: 00007ff76fef9fa0 RCX: 00007ff76fc72019 [ 148.631649][ T5240] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000020000000af40 [ 148.631663][ T5240] RBP: 00007ff76deca090 R08: 0000000000000000 R09: 0000000000000000 [ 148.669906][ T5240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.677982][ T5240] R13: 00007ff76fefa038 R14: 00007ff76fef9fa0 R15: 00007ffe995c1378 [ 148.686020][ T5240] [ 148.689345][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 148.726246][ T4317] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 148.773794][ T2308] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 148.829012][ T1110] usb 3-1: Using ep0 maxpacket: 16 [ 148.888500][ T4197] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 148.904999][ T4197] exFAT-fs (loop4): Filesystem has been set read-only [ 148.922741][ T4197] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 148.953886][ T1110] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 148.968422][ T1110] usb 3-1: config 1 has no interface number 0 [ 148.975009][ T1110] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 148.985422][ T1110] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 148.996298][ T1110] usb 3-1: config 1 interface 105 has no altsetting 0 [ 149.012950][ T2308] usb 2-1: Using ep0 maxpacket: 32 [ 149.136399][ T2308] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.166430][ T1110] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 149.179468][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 149.190976][ T1110] usb 3-1: Product: syz [ 149.198946][ T1110] usb 3-1: Manufacturer: syz [ 149.206329][ T1110] usb 3-1: SerialNumber: syz [ 149.263405][ T5246] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 149.279109][ T5246] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 149.307783][ T5258] loop0: detected capacity change from 0 to 128 [ 149.321330][ T2308] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 149.331264][ T2308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.343265][ T2308] usb 2-1: Product: syz [ 149.347505][ T2308] usb 2-1: Manufacturer: syz [ 149.352120][ T2308] usb 2-1: SerialNumber: syz [ 149.385352][ T5258] FAT-fs (loop0): bogus number of FAT structure [ 149.386977][ T2308] usb 2-1: config 0 descriptor?? [ 149.403793][ T5258] FAT-fs (loop0): Can't find a valid FAT filesystem [ 149.434153][ T2308] usb 2-1: bad CDC descriptors [ 149.440110][ T2308] usb 2-1: unsupported MDLM descriptors [ 149.551989][ T5258] nfs4: Unknown parameter ':'' [ 149.560114][ T4330] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.625714][ T4330] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.648293][ T5250] loop1: detected capacity change from 0 to 256 [ 149.673819][ T5250] exfat: Unknown parameter 'b8 [ 149.673819][ T5250] O[v֯._@Zq8/;5wͫ 85OVʏ6z:>Pn0Ytb/BC|&B45' [ 149.817552][ T4330] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.880174][ T4317] usb 2-1: USB disconnect, device number 4 [ 149.984403][ T4330] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.119317][ T5246] loop2: detected capacity change from 0 to 32768 [ 150.190505][ T5246] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.248 (5246) [ 150.273401][ T5246] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 150.284075][ T5246] BTRFS info (device loop2): using free space tree [ 150.290654][ T5246] BTRFS info (device loop2): has skinny extents [ 150.386243][ T4330] tipc: Disabling bearer [ 150.423240][ T4330] tipc: Left network mode [ 150.628854][ T5246] BTRFS info (device loop2): enabling ssd optimizations [ 150.676274][ T5264] chnl_net:caif_netlink_parms(): no params data found [ 150.843128][ T1110] aqc111: probe of 3-1:1.105 failed with error -71 [ 150.884367][ T1110] usb 3-1: USB disconnect, device number 6 [ 151.066374][ T5264] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.073641][ T5264] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.081811][ T5264] device bridge_slave_0 entered promiscuous mode [ 151.091480][ T5264] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.098986][ T5264] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.107231][ T5264] device bridge_slave_1 entered promiscuous mode [ 151.146806][ T5264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.191479][ T5318] FAULT_INJECTION: forcing a failure. [ 151.191479][ T5318] name failslab, interval 1, probability 0, space 0, times 0 [ 151.204599][ T5264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.232996][ T5318] CPU: 0 PID: 5318 Comm: syz.1.259 Not tainted syzkaller #0 [ 151.240394][ T5318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 151.250528][ T5318] Call Trace: [ 151.253843][ T5318] [ 151.256807][ T5318] dump_stack_lvl+0x188/0x250 [ 151.261571][ T5318] ? show_regs_print_info+0x20/0x20 [ 151.266814][ T5318] ? load_image+0x410/0x410 [ 151.271364][ T5318] ? __might_sleep+0xf0/0xf0 [ 151.275990][ T5318] ? __lock_acquire+0x7b50/0x7b50 [ 151.281082][ T5318] should_fail+0x383/0x4b0 [ 151.285551][ T5318] should_failslab+0x5/0x20 [ 151.290095][ T5318] slab_pre_alloc_hook+0x51/0xc0 [ 151.295081][ T5318] __kmalloc+0x6b/0x340 [ 151.299290][ T5318] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 151.305057][ T5318] tomoyo_realpath_from_path+0xed/0x5e0 [ 151.310668][ T5318] tomoyo_path_number_perm+0x251/0x6b0 [ 151.316174][ T5318] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 151.321679][ T5318] ? ksys_write+0x1d4/0x260 [ 151.326276][ T5318] security_file_ioctl+0x6c/0xa0 [ 151.331256][ T5318] __se_sys_ioctl+0x48/0x170 [ 151.335893][ T5318] do_syscall_64+0x4c/0xa0 [ 151.340386][ T5318] ? clear_bhb_loop+0x30/0x80 [ 151.345096][ T5318] ? clear_bhb_loop+0x30/0x80 [ 151.349840][ T5318] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.355808][ T5318] RIP: 0033:0x7ff3ac71f019 [ 151.360263][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.379935][ T5318] RSP: 002b:00007ff3aa977028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.388400][ T5318] RAX: ffffffffffffffda RBX: 00007ff3ac9a6fa0 RCX: 00007ff3ac71f019 [ 151.396456][ T5318] RDX: 0000200000000140 RSI: 0000000000008983 RDI: 0000000000000004 [ 151.404473][ T5318] RBP: 00007ff3aa977090 R08: 0000000000000000 R09: 0000000000000000 [ 151.412601][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.420746][ T5318] R13: 00007ff3ac9a7038 R14: 00007ff3ac9a6fa0 R15: 00007ffe01865348 [ 151.428793][ T5318] [ 151.459902][ T5318] ERROR: Out of memory at tomoyo_realpath_from_path. [ 151.694060][ T5264] team0: Port device team_slave_0 added [ 151.746630][ T5336] loop2: detected capacity change from 0 to 512 [ 151.764838][ T5332] netlink: 40 bytes leftover after parsing attributes in process `syz.0.260'. [ 151.788675][ T5336] EXT4-fs (loop2): Ignoring removed orlov option [ 151.820860][ T5336] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 151.954395][ T5336] loop2: detected capacity change from 0 to 512 [ 151.992232][ T5264] team0: Port device team_slave_1 added [ 152.006559][ T5336] EXT4-fs (loop2): Ignoring removed orlov option [ 152.046197][ T5336] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 152.105835][ T5264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.121383][ T5264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.192947][ T4226] Bluetooth: hci4: command 0x0409 tx timeout [ 152.214005][ T5350] loop1: detected capacity change from 0 to 512 [ 152.226197][ T5264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.313387][ T5264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.329372][ T5347] loop0: detected capacity change from 0 to 4096 [ 152.340899][ T5264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.393690][ T5353] FAULT_INJECTION: forcing a failure. [ 152.393690][ T5353] name failslab, interval 1, probability 0, space 0, times 0 [ 152.401013][ T5264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.420584][ T5353] CPU: 1 PID: 5353 Comm: syz.3.263 Not tainted syzkaller #0 [ 152.427936][ T5353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.438045][ T5353] Call Trace: [ 152.441359][ T5353] [ 152.444325][ T5353] dump_stack_lvl+0x188/0x250 [ 152.449055][ T5353] ? show_regs_print_info+0x20/0x20 [ 152.454294][ T5353] ? load_image+0x410/0x410 [ 152.458850][ T5353] ? __lock_acquire+0x7b50/0x7b50 [ 152.463921][ T5353] should_fail+0x383/0x4b0 [ 152.468384][ T5353] should_failslab+0x5/0x20 [ 152.472929][ T5353] slab_pre_alloc_hook+0x51/0xc0 [ 152.477977][ T5353] __kmalloc+0x6b/0x340 [ 152.482202][ T5353] ? __se_sys_memfd_create+0x142/0x450 [ 152.487699][ T5353] ? strnlen_user+0x19b/0x250 [ 152.492459][ T5353] __se_sys_memfd_create+0x142/0x450 [ 152.497791][ T5353] ? lock_chain_count+0x20/0x20 [ 152.502748][ T5353] ? __x64_sys_memfd_create+0x60/0x60 [ 152.508205][ T5353] ? lockdep_hardirqs_on+0x94/0x140 [ 152.513451][ T5353] do_syscall_64+0x4c/0xa0 [ 152.517902][ T5353] ? clear_bhb_loop+0x30/0x80 [ 152.522612][ T5353] ? clear_bhb_loop+0x30/0x80 [ 152.527332][ T5353] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.533264][ T5353] RIP: 0033:0x7ff76fc72019 [ 152.537712][ T5353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.557354][ T5353] RSP: 002b:00007ff76dec9e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 152.565822][ T5353] RAX: ffffffffffffffda RBX: 0000000000000bc1 RCX: 00007ff76fc72019 [ 152.573840][ T5353] RDX: 00007ff76dec9ee0 RSI: 0000000000000000 RDI: 00007ff76fd091ec [ 152.581856][ T5353] RBP: 00002000000004c0 R08: 00000000ffffffff R09: 0000000000000000 [ 152.583319][ T4226] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 152.589866][ T5353] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000280 [ 152.589886][ T5353] R13: 00007ff76dec9ee0 R14: 00007ff76dec9ea0 R15: 0000200000000400 [ 152.589919][ T5353] [ 152.643124][ T5347] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 152.672175][ T5264] device hsr_slave_0 entered promiscuous mode [ 152.683170][ T5347] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 152.713619][ T5264] device hsr_slave_1 entered promiscuous mode [ 152.720666][ T5264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.730250][ T5264] Cannot create hsr debugfs directory [ 152.748133][ T5358] loop2: detected capacity change from 0 to 256 [ 152.767043][ T5347] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c118, mo2=0002] [ 152.787863][ T5347] System zones: 0-5 [ 152.804191][ T5358] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.821771][ T5347] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,grpjquota=./file1,noload,init_itable=0x000000000a2a41b4,nodiscard,jqfmt=vfsv1,debug,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 152.911355][ T5364] loop3: detected capacity change from 0 to 256 [ 152.932912][ T4226] usb 2-1: Using ep0 maxpacket: 32 [ 152.943914][ T5358] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 153.016026][ T5358] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 153.054476][ T5364] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.096722][ T5364] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 153.118833][ T4226] usb 2-1: unable to get BOS descriptor or descriptor too short [ 153.146854][ T5364] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 154.072389][ T7] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 154.091829][ T26] audit: type=1800 audit(1785666403.427:4): pid=5371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.264" name="file1" dev="loop2" ino=1048611 res=0 errno=0 [ 154.111917][ T4226] usb 2-1: config 14 has an invalid interface number: 38 but max is 0 [ 154.253242][ T4226] usb 2-1: config 14 has no interface number 0 [ 154.265790][ T26] audit: type=1800 audit(1785666403.527:5): pid=5373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.265" name="file1" dev="loop3" ino=1048612 res=0 errno=0 [ 154.345270][ T7] dvb_usb_az6007: probe of 4-1:0.0 failed with error -110 [ 154.383630][ T7] usb 4-1: USB disconnect, device number 2 [ 154.438004][ T1108] Bluetooth: hci4: command 0x041b tx timeout [ 154.475014][ T4330] device hsr_slave_0 left promiscuous mode [ 154.481697][ T4330] device hsr_slave_1 left promiscuous mode [ 154.488225][ T4226] usb 2-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=3b.44 [ 154.527625][ T4226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.556440][ T4226] usb 2-1: Product: syz [ 154.560669][ T4226] usb 2-1: Manufacturer: syz [ 154.589261][ T5377] FAULT_INJECTION: forcing a failure. [ 154.589261][ T5377] name failslab, interval 1, probability 0, space 0, times 0 [ 154.591172][ T4226] usb 2-1: SerialNumber: syz [ 154.607042][ T5377] CPU: 0 PID: 5377 Comm: syz.2.267 Not tainted syzkaller #0 [ 154.614382][ T5377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 154.624471][ T5377] Call Trace: [ 154.627788][ T5377] [ 154.630840][ T5377] dump_stack_lvl+0x188/0x250 [ 154.635562][ T5377] ? show_regs_print_info+0x20/0x20 [ 154.640805][ T5377] ? load_image+0x410/0x410 [ 154.645387][ T5377] ? __might_sleep+0xf0/0xf0 [ 154.650016][ T5377] ? __lock_acquire+0x7b50/0x7b50 [ 154.655179][ T5377] should_fail+0x383/0x4b0 [ 154.659637][ T5377] should_failslab+0x5/0x20 [ 154.664176][ T5377] slab_pre_alloc_hook+0x51/0xc0 [ 154.669154][ T5377] __kmalloc+0x6b/0x340 [ 154.673354][ T5377] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 154.679130][ T5377] tomoyo_realpath_from_path+0xed/0x5e0 [ 154.684736][ T5377] tomoyo_path_number_perm+0x251/0x6b0 [ 154.690247][ T5377] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 154.695748][ T5377] ? ksys_write+0x1d4/0x260 [ 154.700341][ T5377] security_file_ioctl+0x6c/0xa0 [ 154.705326][ T5377] __se_sys_ioctl+0x48/0x170 [ 154.709962][ T5377] do_syscall_64+0x4c/0xa0 [ 154.714414][ T5377] ? clear_bhb_loop+0x30/0x80 [ 154.719128][ T5377] ? clear_bhb_loop+0x30/0x80 [ 154.723846][ T5377] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.729776][ T5377] RIP: 0033:0x7f1285528019 [ 154.734231][ T5377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.753872][ T5377] RSP: 002b:00007f1283780028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.762332][ T5377] RAX: ffffffffffffffda RBX: 00007f12857affa0 RCX: 00007f1285528019 [ 154.770351][ T5377] RDX: 0000000000000000 RSI: 0000000040044145 RDI: 0000000000000003 [ 154.778476][ T5377] RBP: 00007f1283780090 R08: 0000000000000000 R09: 0000000000000000 [ 154.786494][ T5377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.794502][ T5377] R13: 00007f12857b0038 R14: 00007f12857affa0 R15: 00007fff78589068 [ 154.802625][ T5377] [ 154.848568][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.856797][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.884539][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.902266][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.917910][ T4330] device bridge_slave_1 left promiscuous mode [ 154.934980][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.989868][ T4330] device bridge_slave_0 left promiscuous mode [ 155.008233][ T5377] ERROR: Out of memory at tomoyo_realpath_from_path. [ 155.032305][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.062729][ T5370] loop0: detected capacity change from 0 to 32768 [ 155.088983][ T4330] device veth1_macvtap left promiscuous mode [ 155.100889][ T4330] device veth0_macvtap left promiscuous mode [ 155.368257][ T4330] device veth1_vlan left promiscuous mode [ 155.374589][ T4330] device veth0_vlan left promiscuous mode [ 155.499082][ T5370] jfs_mount: Mount Failure: File System Dirty. [ 155.515464][ T5370] Mount JFS Failure: -22 [ 155.600762][ T5370] 9pnet_virtio: no channels available for device qY3aK [ 155.711123][ T4330] team0 (unregistering): Port device team_slave_1 removed [ 155.727306][ T4330] team0 (unregistering): Port device team_slave_0 removed [ 155.748839][ T4330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.772712][ T4330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.900369][ T5388] loop2: detected capacity change from 0 to 4096 [ 155.930314][ T5388] EXT4-fs (loop2): Test dummy encryption mode enabled [ 155.944970][ T5388] EXT4-fs (loop2): Ignoring removed oldalloc option [ 155.957722][ T4330] bond0 (unregistering): Released all slaves [ 155.971753][ T5388] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,oldalloc,,errors=continue. Quota mode: writeback. [ 156.234465][ T4226] as10x_usb: device has been detected [ 156.243729][ T4226] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 156.278765][ T4226] usb 2-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 156.322755][ T5394] FAULT_INJECTION: forcing a failure. [ 156.322755][ T5394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.441060][ T5394] CPU: 0 PID: 5394 Comm: syz.1.271 Not tainted syzkaller #0 [ 156.448422][ T5394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 156.458514][ T5394] Call Trace: [ 156.461823][ T5394] [ 156.464786][ T5394] dump_stack_lvl+0x188/0x250 [ 156.469531][ T5394] ? show_regs_print_info+0x20/0x20 [ 156.474929][ T5394] ? load_image+0x410/0x410 [ 156.479491][ T5394] ? __lock_acquire+0x7b50/0x7b50 [ 156.484582][ T5394] should_fail+0x383/0x4b0 [ 156.489057][ T5394] _copy_from_user+0x2e/0x170 [ 156.493782][ T5394] __copy_msghdr_from_user+0xc9/0x630 [ 156.499194][ T5394] ? verify_lock_unused+0x140/0x140 [ 156.504687][ T5394] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 156.510022][ T5394] ___sys_sendmsg+0x19a/0x2e0 [ 156.514741][ T5394] ? __sys_sendmsg+0x290/0x290 [ 156.519584][ T5394] __se_sys_sendmsg+0x1b7/0x2a0 [ 156.524476][ T5394] ? __x64_sys_sendmsg+0x80/0x80 [ 156.529471][ T5394] ? syscall_enter_from_user_mode+0x2a/0x70 [ 156.535412][ T5394] do_syscall_64+0x4c/0xa0 [ 156.539868][ T5394] ? clear_bhb_loop+0x30/0x80 [ 156.544575][ T5394] ? clear_bhb_loop+0x30/0x80 [ 156.549294][ T5394] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.555244][ T5394] RIP: 0033:0x7ff3ac71f019 [ 156.559734][ T5394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.579387][ T5394] RSP: 002b:00007ff3aa956028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.587929][ T5394] RAX: ffffffffffffffda RBX: 00007ff3ac9a7090 RCX: 00007ff3ac71f019 [ 156.595934][ T5394] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000004 [ 156.603936][ T5394] RBP: 00007ff3aa956090 R08: 0000000000000000 R09: 0000000000000000 [ 156.611968][ T5394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.620140][ T5394] R13: 00007ff3ac9a7128 R14: 00007ff3ac9a7090 R15: 00007ffe01865348 [ 156.628162][ T5394] [ 156.646856][ T4341] Bluetooth: hci4: command 0x040f tx timeout [ 156.662592][ T4226] as10x_usb: error during firmware upload part1 [ 156.680059][ T4226] Registered device PCTV Systems picoStick (74e) [ 156.706211][ T4226] usb 2-1: USB disconnect, device number 5 [ 156.754702][ T4226] Unregistered device PCTV Systems picoStick (74e) [ 156.759935][ T4226] as10x_usb: device has been disconnected [ 156.979893][ T5264] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 157.081615][ T5264] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 157.111726][ T5264] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 157.141195][ T5264] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 157.232805][ T5408] loop1: detected capacity change from 0 to 512 [ 157.235107][ T5406] loop2: detected capacity change from 0 to 24 [ 157.361164][ T5408] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 157.371895][ T5411] loop0: detected capacity change from 0 to 512 [ 157.380361][ T5406] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 157.503283][ T5408] EXT4-fs (loop1): 1 truncate cleaned up [ 157.511056][ T5406] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 157.519712][ T5408] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.562065][ T5411] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 157.630253][ T5411] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.697954][ T5264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.830720][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.840280][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.896500][ T5264] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.944180][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.959361][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.980354][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.987589][ T4277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.031465][ T5434] loop3: detected capacity change from 0 to 4096 [ 158.042088][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.125008][ T5437] loop2: detected capacity change from 0 to 512 [ 158.132691][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.151657][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.158979][ T4277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.190237][ T5440] fuse: Bad value for 'fd' [ 158.192390][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.245453][ T5437] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.282: missing EA_INODE flag [ 158.293027][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.301841][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.316594][ T5437] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.282: error while reading EA inode 12 err=-117 [ 158.330679][ T5437] EXT4-fs (loop2): 1 orphan inode deleted [ 158.337228][ T5437] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 158.360308][ T5434] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 158.401084][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.412379][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.452582][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.498724][ T1108] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 158.527964][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.614357][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 158.742521][ T5264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 158.784428][ T4226] Bluetooth: hci4: command 0x0419 tx timeout [ 158.793113][ T5264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.823145][ T1108] usb 1-1: Using ep0 maxpacket: 32 [ 158.836748][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 158.863608][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.886658][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 158.895873][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.916256][ T5457] FAULT_INJECTION: forcing a failure. [ 158.916256][ T5457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.962068][ T5452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.284'. [ 158.968389][ T1108] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 158.979279][ T5457] CPU: 1 PID: 5457 Comm: syz.1.285 Not tainted syzkaller #0 [ 158.986608][ T5457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 158.987259][ T1108] usb 1-1: config 0 has no interface number 0 [ 158.996704][ T5457] Call Trace: [ 158.996716][ T5457] [ 158.996731][ T5457] dump_stack_lvl+0x188/0x250 [ 158.996768][ T5457] ? show_regs_print_info+0x20/0x20 [ 159.018979][ T5457] ? load_image+0x410/0x410 [ 159.023532][ T5457] ? __lock_acquire+0x7b50/0x7b50 [ 159.028609][ T5457] should_fail+0x383/0x4b0 [ 159.033065][ T5457] _copy_to_user+0x2e/0x130 [ 159.033079][ T1108] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.037606][ T5457] simple_read_from_buffer+0xe3/0x150 [ 159.037640][ T5457] proc_fail_nth_read+0x1a6/0x220 [ 159.052312][ T4332] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 159.053998][ T5457] ? proc_fault_inject_write+0x310/0x310 [ 159.054036][ T5457] ? fsnotify_perm+0x254/0x560 [ 159.079627][ T5457] ? proc_fault_inject_write+0x310/0x310 [ 159.084221][ T1108] usb 1-1: config 0 interface 85 has no altsetting 0 [ 159.085311][ T5457] vfs_read+0x2ff/0xd50 [ 159.085344][ T5457] ? __lock_acquire+0x7b50/0x7b50 [ 159.101226][ T5457] ? kernel_read+0x1e0/0x1e0 [ 159.105875][ T5457] ? mutex_lock_nested+0x17/0x20 [ 159.110860][ T5457] ? __fdget_pos+0x2bf/0x370 [ 159.115484][ T5457] ? ksys_read+0x70/0x260 [ 159.119860][ T5457] ksys_read+0x153/0x260 [ 159.124173][ T5457] ? vfs_write+0xd70/0xd70 [ 159.128633][ T5457] ? lockdep_hardirqs_on+0x94/0x140 [ 159.133873][ T5457] do_syscall_64+0x4c/0xa0 [ 159.138325][ T5457] ? clear_bhb_loop+0x30/0x80 [ 159.143066][ T5457] ? clear_bhb_loop+0x30/0x80 [ 159.147781][ T5457] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.153714][ T5457] RIP: 0033:0x7ff3ac6df84e [ 159.158160][ T5457] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 159.177799][ T5457] RSP: 002b:00007ff3aa955fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 159.186258][ T5457] RAX: ffffffffffffffda RBX: 00007ff3aa9566c0 RCX: 00007ff3ac6df84e [ 159.194268][ T5457] RDX: 000000000000000f RSI: 00007ff3aa9560a0 RDI: 0000000000000005 [ 159.202270][ T5457] RBP: 00007ff3aa956090 R08: 0000000000000000 R09: 0000000000000000 [ 159.210284][ T5457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.218293][ T5457] R13: 00007ff3ac9a7128 R14: 00007ff3ac9a7090 R15: 00007ffe01865348 [ 159.226410][ T5457] [ 159.229538][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.246128][ T5456] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 159.276026][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.323950][ T1108] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 159.382887][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.433692][ T1108] usb 1-1: Product: syz [ 159.438002][ T1108] usb 1-1: Manufacturer: syz [ 159.467862][ T1108] usb 1-1: SerialNumber: syz [ 159.490387][ T1108] usb 1-1: config 0 descriptor?? [ 159.711208][ T5476] FAULT_INJECTION: forcing a failure. [ 159.711208][ T5476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.866267][ T5476] CPU: 0 PID: 5476 Comm: syz.1.288 Not tainted syzkaller #0 [ 159.873759][ T5476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 159.883847][ T5476] Call Trace: [ 159.887156][ T5476] [ 159.890122][ T5476] dump_stack_lvl+0x188/0x250 [ 159.894845][ T5476] ? show_regs_print_info+0x20/0x20 [ 159.900083][ T5476] ? load_image+0x410/0x410 [ 159.904638][ T5476] ? __lock_acquire+0x7b50/0x7b50 [ 159.909714][ T5476] should_fail+0x383/0x4b0 [ 159.914175][ T5476] _copy_to_user+0x2e/0x130 [ 159.918721][ T5476] simple_read_from_buffer+0xe3/0x150 [ 159.924130][ T5476] proc_fail_nth_read+0x1a6/0x220 [ 159.929199][ T5476] ? proc_fault_inject_write+0x310/0x310 [ 159.934958][ T5476] ? fsnotify_perm+0x254/0x560 [ 159.939769][ T5476] ? proc_fault_inject_write+0x310/0x310 [ 159.945489][ T5476] vfs_read+0x2ff/0xd50 [ 159.949692][ T5476] ? __lock_acquire+0x7b50/0x7b50 [ 159.954766][ T5476] ? kernel_read+0x1e0/0x1e0 [ 159.959413][ T5476] ? mutex_lock_nested+0x17/0x20 [ 159.964402][ T5476] ? __fdget_pos+0x2bf/0x370 [ 159.969030][ T5476] ? ksys_read+0x70/0x260 [ 159.973400][ T5476] ksys_read+0x153/0x260 [ 159.977683][ T5476] ? vfs_write+0xd70/0xd70 [ 159.982138][ T5476] ? lockdep_hardirqs_on+0x94/0x140 [ 159.987392][ T5476] do_syscall_64+0x4c/0xa0 [ 159.991841][ T5476] ? clear_bhb_loop+0x30/0x80 [ 159.996553][ T5476] ? clear_bhb_loop+0x30/0x80 [ 160.001300][ T5476] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.007236][ T5476] RIP: 0033:0x7ff3ac6df84e [ 160.011692][ T5476] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 160.031422][ T5476] RSP: 002b:00007ff3aa955fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 160.039890][ T5476] RAX: ffffffffffffffda RBX: 00007ff3aa9566c0 RCX: 00007ff3ac6df84e [ 160.047905][ T5476] RDX: 000000000000000f RSI: 00007ff3aa9560a0 RDI: 0000000000000004 [ 160.055914][ T5476] RBP: 00007ff3aa956090 R08: 0000000000000000 R09: 0000000000000000 [ 160.063925][ T5476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.071941][ T5476] R13: 00007ff3ac9a7128 R14: 00007ff3ac9a7090 R15: 00007ffe01865348 [ 160.079976][ T5476] [ 160.769576][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.783065][ T1108] appletouch 1-1:0.85: Geyser mode initialized. [ 160.792271][ T1108] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input9 [ 160.794119][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.862651][ T5264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.921190][ T5495] loop1: detected capacity change from 0 to 256 [ 161.045471][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 161.313069][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 161.411170][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 161.434007][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.443147][ T7] usb 4-1: config 3 has an invalid interface number: 254 but max is 0 [ 161.451370][ T7] usb 4-1: config 3 has no interface number 0 [ 161.477681][ T7] usb 4-1: config 3 interface 254 has no altsetting 0 [ 161.523680][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 161.535635][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.561005][ T5264] device veth0_vlan entered promiscuous mode [ 161.605607][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.625490][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.666348][ T5264] device veth1_vlan entered promiscuous mode [ 161.673392][ T7] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=ba.b0 [ 161.685828][ T5522] FAULT_INJECTION: forcing a failure. [ 161.685828][ T5522] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 161.706640][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.736686][ T7] usb 4-1: Product: syz [ 161.748885][ T5522] CPU: 0 PID: 5522 Comm: syz.2.296 Not tainted syzkaller #0 [ 161.756245][ T5522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 161.766345][ T5522] Call Trace: [ 161.768434][ T5525] loop1: detected capacity change from 0 to 8 [ 161.769655][ T5522] [ 161.769667][ T5522] dump_stack_lvl+0x188/0x250 [ 161.783379][ T5522] ? show_regs_print_info+0x20/0x20 [ 161.788633][ T5522] ? load_image+0x410/0x410 [ 161.793195][ T5522] should_fail+0x383/0x4b0 [ 161.797649][ T5522] prepare_alloc_pages+0x1e3/0x5b0 [ 161.802813][ T5522] __alloc_pages+0x11b/0x480 [ 161.808155][ T5522] ? zone_statistics+0x170/0x170 [ 161.813143][ T5522] ? alloc_pages+0x452/0x560 [ 161.817788][ T5522] skb_page_frag_refill+0x225/0x4c0 [ 161.823029][ T5522] tun_get_user+0x191e/0x3b60 [ 161.827769][ T5522] ? tun_ring_recv+0xc90/0xc90 [ 161.832579][ T5522] ? rcu_lock_release+0x5/0x20 [ 161.837389][ T5522] ? __lock_acquire+0x7b50/0x7b50 [ 161.842487][ T5522] tun_chr_write_iter+0x112/0x1e0 [ 161.847562][ T5522] vfs_write+0x748/0xd70 [ 161.851853][ T5522] ? file_end_write+0x250/0x250 [ 161.856760][ T5522] ? __fget_files+0x402/0x470 [ 161.861486][ T5522] ? __fdget_pos+0x1e2/0x370 [ 161.866111][ T5522] ? ksys_write+0x70/0x260 [ 161.870568][ T5522] ksys_write+0x153/0x260 [ 161.875071][ T5522] ? __ia32_sys_read+0x80/0x80 [ 161.880050][ T5522] ? lockdep_hardirqs_on+0x94/0x140 [ 161.885299][ T5522] do_syscall_64+0x4c/0xa0 [ 161.886671][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 161.889843][ T5522] ? clear_bhb_loop+0x30/0x80 [ 161.902008][ T5522] ? clear_bhb_loop+0x30/0x80 [ 161.906734][ T5522] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.912677][ T5522] RIP: 0033:0x7f12854e884e [ 161.917146][ T5522] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 161.931458][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 161.936788][ T5522] RSP: 002b:00007f128377ffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 161.936816][ T5522] RAX: ffffffffffffffda RBX: 00007f12837806c0 RCX: 00007f12854e884e [ 161.936833][ T5522] RDX: 0000000000000083 RSI: 0000200000000040 RDI: 00000000000000c8 [ 161.936847][ T5522] RBP: 00007f1283780090 R08: 0000000000000000 R09: 0000000000000000 [ 161.936862][ T5522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.936875][ T5522] R13: 00007f12857b0038 R14: 00007f12857affa0 R15: 00007fff78589068 [ 161.992770][ T5522] [ 161.999920][ T7] usb 4-1: Manufacturer: syz [ 162.009442][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 162.016550][ T7] usb 4-1: SerialNumber: syz [ 162.042444][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.068374][ T4341] usb 1-1: USB disconnect, device number 10 [ 162.099043][ T5264] device veth0_macvtap entered promiscuous mode [ 162.122456][ T4341] appletouch 1-1:0.85: input: appletouch disconnected [ 162.147981][ T5264] device veth1_macvtap entered promiscuous mode [ 162.310497][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.331857][ T5491] udc-core: couldn't find an available UDC or it's busy [ 162.349405][ T5491] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 162.363194][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.421343][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.474452][ T7] legousbtower 4-1:3.254: interrupt endpoints not found [ 162.490145][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.726557][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.818380][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.879286][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.974368][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.028748][ T5264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.073789][ T7] usb 4-1: USB disconnect, device number 3 [ 163.094691][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.103627][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 163.117077][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 163.126273][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.138239][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.197590][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.258542][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.274994][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.030828][ T5557] loop3: detected capacity change from 0 to 256 [ 164.425493][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.436975][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.449915][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.461275][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.529286][ T5560] FAULT_INJECTION: forcing a failure. [ 164.529286][ T5560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.596324][ T5264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.734253][ T5560] CPU: 0 PID: 5560 Comm: syz.1.301 Not tainted syzkaller #0 [ 164.741623][ T5560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 164.751716][ T5560] Call Trace: [ 164.755034][ T5560] [ 164.757998][ T5560] dump_stack_lvl+0x188/0x250 [ 164.762727][ T5560] ? show_regs_print_info+0x20/0x20 [ 164.768000][ T5560] ? load_image+0x410/0x410 [ 164.772554][ T5560] ? __lock_acquire+0x7b50/0x7b50 [ 164.777631][ T5560] should_fail+0x383/0x4b0 [ 164.782090][ T5560] _copy_to_user+0x2e/0x130 [ 164.786637][ T5560] simple_read_from_buffer+0xe3/0x150 [ 164.792061][ T5560] proc_fail_nth_read+0x1a6/0x220 [ 164.797134][ T5560] ? proc_fault_inject_write+0x310/0x310 [ 164.802812][ T5560] ? fsnotify_perm+0x254/0x560 [ 164.807637][ T5560] ? proc_fault_inject_write+0x310/0x310 [ 164.813321][ T5560] vfs_read+0x2ff/0xd50 [ 164.817526][ T5560] ? __lock_acquire+0x7b50/0x7b50 [ 164.822595][ T5560] ? kernel_read+0x1e0/0x1e0 [ 164.827256][ T5560] ? mutex_lock_nested+0x17/0x20 [ 164.832241][ T5560] ? __fdget_pos+0x2bf/0x370 [ 164.836881][ T5560] ? ksys_read+0x70/0x260 [ 164.841259][ T5560] ksys_read+0x153/0x260 [ 164.845539][ T5560] ? vfs_write+0xd70/0xd70 [ 164.849993][ T5560] ? lockdep_hardirqs_on+0x94/0x140 [ 164.851218][ T5557] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 164.855239][ T5560] do_syscall_64+0x4c/0xa0 [ 164.855263][ T5560] ? clear_bhb_loop+0x30/0x80 [ 164.855286][ T5560] ? clear_bhb_loop+0x30/0x80 [ 164.855311][ T5560] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.887197][ T5560] RIP: 0033:0x7ff3ac6df84e [ 164.891676][ T5560] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 164.911322][ T5560] RSP: 002b:00007ff3aa934fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 164.914495][ T5264] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.919779][ T5560] RAX: ffffffffffffffda RBX: 00007ff3aa9356c0 RCX: 00007ff3ac6df84e [ 164.936471][ T5560] RDX: 000000000000000f RSI: 00007ff3aa9350a0 RDI: 0000000000000006 [ 164.944530][ T5560] RBP: 00007ff3aa935090 R08: 0000000000000000 R09: 0000000000000000 [ 164.952544][ T5560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.960554][ T5560] R13: 00007ff3ac9a7218 R14: 00007ff3ac9a7180 R15: 00007ffe01865348 [ 164.968589][ T5560] [ 164.975073][ T26] audit: type=1800 audit(1785666414.577:6): pid=5556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.304" name="file1" dev="loop3" ino=1048613 res=0 errno=0 [ 164.975535][ T5556] FAULT_INJECTION: forcing a failure. [ 164.975535][ T5556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.011020][ T5556] CPU: 1 PID: 5556 Comm: syz.3.304 Not tainted syzkaller #0 [ 165.016399][ T5264] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.018349][ T5556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 165.037109][ T5556] Call Trace: [ 165.040432][ T5556] [ 165.043396][ T5556] dump_stack_lvl+0x188/0x250 [ 165.048221][ T5556] ? show_regs_print_info+0x20/0x20 [ 165.053467][ T5556] ? load_image+0x410/0x410 [ 165.058020][ T5556] ? __lock_acquire+0x7b50/0x7b50 [ 165.063089][ T5556] should_fail+0x383/0x4b0 [ 165.067598][ T5556] _copy_from_user+0x2e/0x170 [ 165.072324][ T5556] iovec_from_user+0x142/0x370 [ 165.073144][ T5564] netlink: 64 bytes leftover after parsing attributes in process `syz.0.305'. [ 165.077140][ T5556] __import_iovec+0x70/0x490 [ 165.077177][ T5556] import_iovec+0x6f/0xa0 [ 165.095253][ T5556] do_preadv+0x1fb/0x390 [ 165.099536][ T5556] ? do_writev+0x480/0x480 [ 165.101258][ T5264] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.103998][ T5556] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 165.118686][ T5556] ? lock_chain_count+0x20/0x20 [ 165.123580][ T5556] ? lockdep_hardirqs_on+0x94/0x140 [ 165.128815][ T5556] ? __x64_sys_preadv2+0xba/0x100 [ 165.133927][ T5556] do_syscall_64+0x4c/0xa0 [ 165.138383][ T5556] ? clear_bhb_loop+0x30/0x80 [ 165.143100][ T5556] ? clear_bhb_loop+0x30/0x80 [ 165.147815][ T5556] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.152998][ T5264] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.153740][ T5556] RIP: 0033:0x7ff76fc72019 [ 165.166874][ T5556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.186518][ T5556] RSP: 002b:00007ff76dea9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 165.194974][ T5556] RAX: ffffffffffffffda RBX: 00007ff76fefa090 RCX: 00007ff76fc72019 [ 165.202987][ T5556] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000007 [ 165.210995][ T5556] RBP: 00007ff76dea9090 R08: 0000000000000000 R09: 0000000000000007 [ 165.219012][ T5556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.227016][ T5556] R13: 00007ff76fefa128 R14: 00007ff76fefa090 R15: 00007ffe995c1378 [ 165.235049][ T5556] [ 165.305355][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 165.340988][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 165.528997][ T5574] loop3: detected capacity change from 0 to 256 [ 166.833483][ T5580] FAULT_INJECTION: forcing a failure. [ 166.833483][ T5580] name failslab, interval 1, probability 0, space 0, times 0 [ 166.846243][ T5580] CPU: 1 PID: 5580 Comm: syz.2.308 Not tainted syzkaller #0 [ 166.853580][ T5580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 166.863668][ T5580] Call Trace: [ 166.866973][ T5580] [ 166.869927][ T5580] dump_stack_lvl+0x188/0x250 [ 166.874675][ T5580] ? show_regs_print_info+0x20/0x20 [ 166.879933][ T5580] ? load_image+0x410/0x410 [ 166.884737][ T5580] ? __might_sleep+0xf0/0xf0 [ 166.889357][ T5580] ? __lock_acquire+0x7b50/0x7b50 [ 166.894424][ T5580] should_fail+0x383/0x4b0 [ 166.898884][ T5580] should_failslab+0x5/0x20 [ 166.903419][ T5580] slab_pre_alloc_hook+0x51/0xc0 [ 166.908387][ T5580] ? getname_flags+0xb7/0x4f0 [ 166.913094][ T5580] kmem_cache_alloc+0x3d/0x280 [ 166.917895][ T5580] getname_flags+0xb7/0x4f0 [ 166.922465][ T5580] __x64_sys_symlinkat+0x78/0xa0 [ 166.927438][ T5580] do_syscall_64+0x4c/0xa0 [ 166.931885][ T5580] ? clear_bhb_loop+0x30/0x80 [ 166.936593][ T5580] ? clear_bhb_loop+0x30/0x80 [ 166.941303][ T5580] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.947229][ T5580] RIP: 0033:0x7f1285528019 [ 166.951673][ T5580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.971310][ T5580] RSP: 002b:00007f128373e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 166.979759][ T5580] RAX: ffffffffffffffda RBX: 00007f12857b0180 RCX: 00007f1285528019 [ 166.987760][ T5580] RDX: 0000200000000100 RSI: 0000000000000005 RDI: 00002000000000c0 [ 166.995760][ T5580] RBP: 00007f128373e090 R08: 0000000000000000 R09: 0000000000000000 [ 167.003762][ T5580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.011765][ T5580] R13: 00007f12857b0218 R14: 00007f12857b0180 R15: 00007fff78589068 [ 167.019784][ T5580] [ 167.391400][ T5574] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 167.433225][ T26] audit: type=1800 audit(1785666417.037:7): pid=5573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.306" name="file1" dev="loop3" ino=1048616 res=0 errno=0 [ 167.458440][ T5573] attempt to access beyond end of device [ 167.458440][ T5573] loop3: rw=16777216, want=6303, limit=256 [ 167.556347][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.594078][ T5573] attempt to access beyond end of device [ 167.594078][ T5573] loop3: rw=16777216, want=29463, limit=256 [ 167.607121][ T5573] attempt to access beyond end of device [ 167.607121][ T5573] loop3: rw=16777216, want=29487, limit=256 [ 167.656882][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.701043][ T4231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.709746][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 167.796725][ T4231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.929578][ T5330] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 167.954934][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 168.192980][ T5330] usb 2-1: Using ep0 maxpacket: 16 [ 168.230929][ T5592] FAULT_INJECTION: forcing a failure. [ 168.230929][ T5592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.483620][ T5330] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 168.625755][ T5330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.636014][ T5592] CPU: 1 PID: 5592 Comm: syz.3.312 Not tainted syzkaller #0 [ 168.643357][ T5592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 168.653574][ T5592] Call Trace: [ 168.656880][ T5592] [ 168.659841][ T5592] dump_stack_lvl+0x188/0x250 [ 168.664572][ T5592] ? show_regs_print_info+0x20/0x20 [ 168.669811][ T5592] ? load_image+0x410/0x410 [ 168.674361][ T5592] ? __lock_acquire+0x7b50/0x7b50 [ 168.679473][ T5592] should_fail+0x383/0x4b0 [ 168.683948][ T5592] _copy_from_user+0x2e/0x170 [ 168.688662][ T5592] __copy_msghdr_from_user+0xc9/0x630 [ 168.694070][ T5592] ? verify_lock_unused+0x140/0x140 [ 168.699322][ T5592] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 168.704673][ T5592] ___sys_sendmsg+0x19a/0x2e0 [ 168.709407][ T5592] ? __sys_sendmsg+0x290/0x290 [ 168.714272][ T5592] __sys_sendmmsg+0x2ba/0x500 [ 168.718992][ T5592] ? __ia32_sys_sendmsg+0x80/0x80 [ 168.724159][ T5592] ? lockdep_hardirqs_on+0x94/0x140 [ 168.729394][ T5592] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 168.735089][ T5592] __x64_sys_sendmmsg+0x9c/0xb0 [ 168.739978][ T5592] do_syscall_64+0x4c/0xa0 [ 168.744426][ T5592] ? clear_bhb_loop+0x30/0x80 [ 168.749263][ T5592] ? clear_bhb_loop+0x30/0x80 [ 168.753981][ T5592] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.759907][ T5592] RIP: 0033:0x7ff76fc72019 [ 168.764353][ T5592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.783997][ T5592] RSP: 002b:00007ff76deca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 168.792455][ T5592] RAX: ffffffffffffffda RBX: 00007ff76fef9fa0 RCX: 00007ff76fc72019 [ 168.800554][ T5592] RDX: 0000000000000001 RSI: 0000200000005640 RDI: 0000000000000003 [ 168.808558][ T5592] RBP: 00007ff76deca090 R08: 0000000000000000 R09: 0000000000000000 [ 168.816598][ T5592] R10: 00000000000040c0 R11: 0000000000000246 R12: 0000000000000001 [ 168.824610][ T5592] R13: 00007ff76fefa038 R14: 00007ff76fef9fa0 R15: 00007ffe995c1378 [ 168.832645][ T5592] [ 168.893316][ T5330] usb 2-1: Product: syz [ 168.897651][ T5330] usb 2-1: Manufacturer: syz [ 168.902278][ T5330] usb 2-1: SerialNumber: syz [ 168.970201][ T5330] usb 2-1: config 0 descriptor?? [ 169.094825][ T5603] FAULT_INJECTION: forcing a failure. [ 169.094825][ T5603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.108053][ T5603] CPU: 1 PID: 5603 Comm: syz.3.314 Not tainted syzkaller #0 [ 169.115375][ T5603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 169.125454][ T5603] Call Trace: [ 169.128761][ T5603] [ 169.131707][ T5603] dump_stack_lvl+0x188/0x250 [ 169.136438][ T5603] ? show_regs_print_info+0x20/0x20 [ 169.141663][ T5603] ? load_image+0x410/0x410 [ 169.146224][ T5603] ? __lock_acquire+0x7b50/0x7b50 [ 169.151306][ T5603] should_fail+0x383/0x4b0 [ 169.155748][ T5603] _copy_from_user+0x2e/0x170 [ 169.160457][ T5603] iovec_from_user+0x142/0x370 [ 169.165278][ T5603] __import_iovec+0x70/0x490 [ 169.169899][ T5603] import_iovec+0x6f/0xa0 [ 169.174280][ T5603] do_preadv+0x1fb/0x390 [ 169.178545][ T5603] ? do_writev+0x480/0x480 [ 169.182994][ T5603] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 169.189005][ T5603] ? lock_chain_count+0x20/0x20 [ 169.193880][ T5603] ? lockdep_hardirqs_on+0x94/0x140 [ 169.199103][ T5603] do_syscall_64+0x4c/0xa0 [ 169.203539][ T5603] ? clear_bhb_loop+0x30/0x80 [ 169.208250][ T5603] ? clear_bhb_loop+0x30/0x80 [ 169.213086][ T5603] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.219030][ T5603] RIP: 0033:0x7ff76fc72019 [ 169.223474][ T5603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.243112][ T5603] RSP: 002b:00007ff76de88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 169.251561][ T5603] RAX: ffffffffffffffda RBX: 00007ff76fefa180 RCX: 00007ff76fc72019 [ 169.259553][ T5603] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 169.267551][ T5603] RBP: 00007ff76de88090 R08: 0000000000000000 R09: 0000000000000000 [ 169.275545][ T5603] R10: 0000000000000111 R11: 0000000000000246 R12: 0000000000000001 [ 169.283538][ T5603] R13: 00007ff76fefa218 R14: 00007ff76fefa180 R15: 00007ffe995c1378 [ 169.291542][ T5603] [ 169.510289][ T5603] loop3: detected capacity change from 0 to 2048 [ 169.551872][ T5330] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 169.746842][ T5586] udc-core: couldn't find an available UDC or it's busy [ 169.817722][ T5586] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 169.957049][ T5586] udc-core: couldn't find an available UDC or it's busy [ 170.033658][ T5586] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 170.130618][ T5610] FAULT_INJECTION: forcing a failure. [ 170.130618][ T5610] name failslab, interval 1, probability 0, space 0, times 0 [ 170.154264][ T5610] CPU: 0 PID: 5610 Comm: syz.5.253 Not tainted syzkaller #0 [ 170.161657][ T5610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 170.171760][ T5610] Call Trace: [ 170.175082][ T5610] [ 170.178055][ T5610] dump_stack_lvl+0x188/0x250 [ 170.182778][ T5610] ? show_regs_print_info+0x20/0x20 [ 170.185882][ T5614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.315'. [ 170.188097][ T5610] ? load_image+0x410/0x410 [ 170.201484][ T5610] ? __might_sleep+0xf0/0xf0 [ 170.206123][ T5610] ? __lock_acquire+0x7b50/0x7b50 [ 170.211388][ T5610] should_fail+0x383/0x4b0 [ 170.215854][ T5610] should_failslab+0x5/0x20 [ 170.220400][ T5610] slab_pre_alloc_hook+0x51/0xc0 [ 170.225391][ T5610] __kmalloc+0x6b/0x340 [ 170.229589][ T5610] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 170.235361][ T5610] tomoyo_realpath_from_path+0xed/0x5e0 [ 170.240970][ T5610] tomoyo_path_number_perm+0x251/0x6b0 [ 170.246469][ T5610] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 170.251965][ T5610] ? ksys_write+0x1d4/0x260 [ 170.256615][ T5610] security_file_ioctl+0x6c/0xa0 [ 170.261597][ T5610] __se_sys_ioctl+0x48/0x170 [ 170.266230][ T5610] do_syscall_64+0x4c/0xa0 [ 170.270689][ T5610] ? clear_bhb_loop+0x30/0x80 [ 170.275412][ T5610] ? clear_bhb_loop+0x30/0x80 [ 170.280130][ T5610] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.286261][ T5610] RIP: 0033:0x7f2c8f429019 [ 170.290724][ T5610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.310889][ T5610] RSP: 002b:00007f2c8d681028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.319431][ T5610] RAX: ffffffffffffffda RBX: 00007f2c8f6b0fa0 RCX: 00007f2c8f429019 [ 170.327446][ T5610] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 170.335462][ T5610] RBP: 00007f2c8d681090 R08: 0000000000000000 R09: 0000000000000000 [ 170.335782][ T5603] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.343464][ T5610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.343481][ T5610] R13: 00007f2c8f6b1038 R14: 00007f2c8f6b0fa0 R15: 00007ffccfa69ef8 [ 170.343514][ T5610] [ 170.385246][ T5610] ERROR: Out of memory at tomoyo_realpath_from_path. [ 170.439291][ T5330] usb 2-1: USB disconnect, device number 6 [ 170.869225][ T5622] loop2: detected capacity change from 0 to 2048 [ 171.582053][ T5622] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 171.660146][ T5635] FAULT_INJECTION: forcing a failure. [ 171.660146][ T5635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.773040][ T5635] CPU: 0 PID: 5635 Comm: syz.3.317 Not tainted syzkaller #0 [ 171.780407][ T5635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 171.790596][ T5635] Call Trace: [ 171.793910][ T5635] [ 171.796878][ T5635] dump_stack_lvl+0x188/0x250 [ 171.801615][ T5635] ? show_regs_print_info+0x20/0x20 [ 171.806864][ T5635] ? load_image+0x410/0x410 [ 171.811417][ T5635] ? __lock_acquire+0x7b50/0x7b50 [ 171.816490][ T5635] should_fail+0x383/0x4b0 [ 171.820952][ T5635] _copy_from_user+0x2e/0x170 [ 171.825697][ T5635] __sys_bpf+0x26d/0x6f0 [ 171.829997][ T5635] ? bpf_link_show_fdinfo+0x380/0x380 [ 171.835438][ T5635] __x64_sys_bpf+0x78/0x90 [ 171.839899][ T5635] do_syscall_64+0x4c/0xa0 [ 171.844351][ T5635] ? clear_bhb_loop+0x30/0x80 [ 171.849066][ T5635] ? clear_bhb_loop+0x30/0x80 [ 171.853783][ T5635] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 171.859716][ T5635] RIP: 0033:0x7ff76fc72019 [ 171.864181][ T5635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.883831][ T5635] RSP: 002b:00007ff76deca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 171.892294][ T5635] RAX: ffffffffffffffda RBX: 00007ff76fef9fa0 RCX: 00007ff76fc72019 [ 171.900313][ T5635] RDX: 0000000000000015 RSI: 00002000000002c0 RDI: 000000000000000a [ 171.908330][ T5635] RBP: 00007ff76deca090 R08: 0000000000000000 R09: 0000000000000000 [ 171.916344][ T5635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.924358][ T5635] R13: 00007ff76fefa038 R14: 00007ff76fef9fa0 R15: 00007ffe995c1378 [ 171.932480][ T5635] [ 172.916149][ T5688] device syzkaller0 entered promiscuous mode [ 174.473835][ T5784] [ 174.476547][ T5784] ============================= [ 174.500090][ T5784] WARNING: suspicious RCU usage [ 174.524173][ T5784] syzkaller #0 Not tainted [ 174.552428][ T5784] ----------------------------- [ 174.562977][ T5784] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 174.580050][ T5790] pimreg0: tun_chr_ioctl cmd 1074025692 [ 174.612470][ T5784] [ 174.612470][ T5784] other info that might help us debug this: [ 174.612470][ T5784] [ 174.635312][ T5784] [ 174.635312][ T5784] rcu_scheduler_active = 2, debug_locks = 1 [ 174.679842][ T5784] 1 lock held by syz.2.376/5784: [ 174.691248][ T5784] #0: ffffffff8c31f0e0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x9/0x30 [ 174.782490][ T5784] [ 174.782490][ T5784] stack backtrace: [ 174.823304][ T5784] CPU: 1 PID: 5784 Comm: syz.2.376 Not tainted syzkaller #0 [ 174.830695][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 174.840791][ T5784] Call Trace: [ 174.844117][ T5784] [ 174.847092][ T5784] dump_stack_lvl+0x188/0x250 [ 174.851827][ T5784] ? load_image+0x410/0x410 [ 174.856395][ T5784] ? show_regs_print_info+0x20/0x20 [ 174.861645][ T5784] ? print_tainted+0x148/0x170 [ 174.866464][ T5784] ? lockdep_rcu_suspicious+0x110/0x180 [ 174.872060][ T5784] get_callchain_entry+0x2a5/0x3b0 [ 174.877224][ T5784] get_perf_callchain+0xab/0x460 [ 174.882211][ T5784] ? put_callchain_entry+0xb0/0xb0 [ 174.887390][ T5784] ? mark_lock+0x94/0x320 [ 174.891760][ T5784] __bpf_get_stack+0x2db/0x530 [ 174.896583][ T5784] ? stack_map_get_build_id_offset+0x860/0x860 [ 174.902791][ T5784] ? __cant_sleep+0x220/0x220 [ 174.907512][ T5784] ? bpf_prog_14d9fb3786f83342+0x3d/0xc18 [ 174.913302][ T5784] bpf_get_stack_raw_tp+0x189/0x1c0 [ 174.918561][ T5784] bpf_prog_14d9fb3786f83342+0x3d/0xc18 [ 174.924158][ T5784] bpf_prog_run_pin_on_cpu+0xa4/0x140 [ 174.929620][ T5784] bpf_prog_test_run_syscall+0x361/0x500 [ 174.935308][ T5784] ? sock_gen_cookie+0x60/0x60 [ 174.940130][ T5784] ? sock_gen_cookie+0x60/0x60 [ 174.944934][ T5784] bpf_prog_test_run+0x31c/0x390 [ 174.949923][ T5784] __sys_bpf+0x5a5/0x6f0 [ 174.954249][ T5784] ? bpf_link_show_fdinfo+0x380/0x380 [ 174.959697][ T5784] __x64_sys_bpf+0x78/0x90 [ 174.964169][ T5784] do_syscall_64+0x4c/0xa0 [ 174.968657][ T5784] ? clear_bhb_loop+0x30/0x80 [ 174.973383][ T5784] ? clear_bhb_loop+0x30/0x80 [ 174.978106][ T5784] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 174.984075][ T5784] RIP: 0033:0x7f1285528019 [ 174.988536][ T5784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.008184][ T5784] RSP: 002b:00007f1283780028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 175.016651][ T5784] RAX: ffffffffffffffda RBX: 00007f12857affa0 RCX: 00007f1285528019 [ 175.024802][ T5784] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 175.032821][ T5784] RBP: 00007f12855bf00c R08: 0000000000000000 R09: 0000000000000000 [ 175.040838][ T5784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.049035][ T5784] R13: 00007f12857b0038 R14: 00007f12857affa0 R15: 00007fff78589068 [ 175.057080][ T5784] [ 175.101326][ T5784] [ 175.104134][ T5784] ============================= [ 175.109123][ T5784] WARNING: suspicious RCU usage [ 175.116451][ T5784] syzkaller #0 Not tainted [ 175.130751][ T5784] ----------------------------- [ 175.143792][ T5784] include/linux/perf_event.h:1274 suspicious rcu_dereference_check() usage! [ 175.165007][ T5784] [ 175.165007][ T5784] other info that might help us debug this: [ 175.165007][ T5784] [ 175.179632][ T5784] [ 175.179632][ T5784] rcu_scheduler_active = 2, debug_locks = 1 [ 175.192472][ T5784] 1 lock held by syz.2.376/5784: [ 175.208848][ T5784] #0: ffffffff8c31f0e0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x9/0x30 [ 175.225844][ T5784] [ 175.225844][ T5784] stack backtrace: [ 175.231908][ T5784] CPU: 1 PID: 5784 Comm: syz.2.376 Not tainted syzkaller #0 [ 175.239244][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 175.249354][ T5784] Call Trace: [ 175.252677][ T5784] [ 175.255647][ T5784] dump_stack_lvl+0x188/0x250 [ 175.260373][ T5784] ? load_image+0x410/0x410 [ 175.264953][ T5784] ? show_regs_print_info+0x20/0x20 [ 175.270209][ T5784] ? lockdep_rcu_suspicious+0x110/0x180 [ 175.275807][ T5784] perf_callchain_kernel+0x625/0x760 [ 175.281145][ T5784] ? load_image+0x410/0x410 [ 175.285700][ T5784] ? show_regs_print_info+0x20/0x20 [ 175.290948][ T5784] ? print_tainted+0x148/0x170 [ 175.295783][ T5784] ? arch_perf_update_userpage+0x3c0/0x3c0 [ 175.301663][ T5784] ? get_callchain_entry+0x181/0x3b0 [ 175.307184][ T5784] get_perf_callchain+0x356/0x460 [ 175.312488][ T5784] ? put_callchain_entry+0xb0/0xb0 [ 175.317675][ T5784] ? mark_lock+0x94/0x320 [ 175.322063][ T5784] __bpf_get_stack+0x2db/0x530 [ 175.326895][ T5784] ? stack_map_get_build_id_offset+0x860/0x860 [ 175.333117][ T5784] ? __cant_sleep+0x220/0x220 [ 175.337846][ T5784] ? bpf_prog_14d9fb3786f83342+0x3d/0xc18 [ 175.343634][ T5784] bpf_get_stack_raw_tp+0x189/0x1c0 [ 175.348883][ T5784] bpf_prog_14d9fb3786f83342+0x3d/0xc18 [ 175.354594][ T5784] bpf_prog_run_pin_on_cpu+0xa4/0x140 [ 175.360036][ T5784] bpf_prog_test_run_syscall+0x361/0x500 [ 175.365714][ T5784] ? sock_gen_cookie+0x60/0x60 [ 175.370521][ T5784] ? sock_gen_cookie+0x60/0x60 [ 175.375318][ T5784] bpf_prog_test_run+0x31c/0x390 [ 175.380291][ T5784] __sys_bpf+0x5a5/0x6f0 [ 175.384586][ T5784] ? bpf_link_show_fdinfo+0x380/0x380 [ 175.390005][ T5784] __x64_sys_bpf+0x78/0x90 [ 175.394448][ T5784] do_syscall_64+0x4c/0xa0 [ 175.399066][ T5784] ? clear_bhb_loop+0x30/0x80 [ 175.403795][ T5784] ? clear_bhb_loop+0x30/0x80 [ 175.408509][ T5784] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 175.414557][ T5784] RIP: 0033:0x7f1285528019 [ 175.419012][ T5784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.438837][ T5784] RSP: 002b:00007f1283780028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 175.447287][ T5784] RAX: ffffffffffffffda RBX: 00007f12857affa0 RCX: 00007f1285528019 [ 175.455281][ T5784] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 175.463371][ T5784] RBP: 00007f12855bf00c R08: 0000000000000000 R09: 0000000000000000 [ 175.471362][ T5784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.479359][ T5784] R13: 00007f12857b0038 R14: 00007f12857affa0 R15: 00007fff78589068 [ 175.487385][ T5784]