last executing test programs: 9.572234468s ago: executing program 0 (id=844): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) syz_mount_image$exfat(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x2000084c, &(0x7f0000004f40)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r3, @ANYRES16=r1, @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000005040)="$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") lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 9.371611173s ago: executing program 0 (id=846): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000740)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000780)={0x3c}, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0xa8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={0x0, 0x48}}, 0x4000800) 8.736409068s ago: executing program 0 (id=847): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) syz_create_resource$futex(0x0) syz_create_resource$futex(&(0x7f0000000340)=0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x7f18, 0x0, 0x4, 0x7ab, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x64, 0x0, 0x9, 0x29, 0x0, @multicast1, @broadcast}}}}) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000740)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000c80)=""/102392, 0x18ff8) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) 8.635403571s ago: executing program 3 (id=848): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa09"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f00000001c0)="900100"/64) ioctl$sock_SIOCOUTQNSD(r1, 0x40106151, &(0x7f0000000200)) 6.386498546s ago: executing program 2 (id=851): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) syz_usb_connect(0x6, 0x0, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x40000000040201, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000002c0)=0xdfe5) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='wwnn=0x2000000010000001,wwpn=0x2000000010000002,lpwwnn=0x1000000010000001,lpwwpn=0x1000000010000002,roles=32', 0x6c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 6.17138851s ago: executing program 0 (id=853): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2204806, &(0x7f00000000c0)=ANY=[@ANYBLOB='map=off,check=relaxed\x00mode=0x0000000000000001,map=off,session=0x0000000000000062,uid=', @ANYBLOB="f0d14b7e80ccc8866005f040e820a431b5d2f5a0bc98aff231fa269072f62426c53f83e54d2f41316e07e44d011e57e548f94a912dd4aa8727e6b084ac4d60f9d67b46fb0590653deda9774c2570d026ebb24970a3c6e54c62a2688cc877c0eeb5cf22daf06df69d65f3b3a6938e957fb8a7cd8a7aac1132d97b814061ca041bd156a9b8e14b6f1d44e1c87d775b9e370d53f1603dfc050d66dde04eb304bc68c5c8f0fc7b61e04b9dac232299655b", @ANYRES32, @ANYRESDEC, @ANYRESOCT], 0xf8, 0x6c8, &(0x7f0000000280)="$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") getdents64(0xffffffffffffffff, &(0x7f00000009c0)=""/4086, 0x1062) 5.892716727s ago: executing program 1 (id=854): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000080)={0xdf, 0x0, 0x8000}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000340)={0x2710, 0x0, &(0x7f0000ffc000/0x1000)=nil}) 5.108495736s ago: executing program 4 (id=855): ioperm(0x4, 0x8, 0x5) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4000000000000003) 5.038651268s ago: executing program 2 (id=856): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="04000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c1}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@private=0xa010101, 0x0, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x4d6, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7}}, 0xe8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={0xffffffffffffffff, 0x0, 0x13, 0x65, &(0x7f0000000100)="b5bc38e043377a0090049e813ff268b420f2ba", &(0x7f0000000700)=""/101, 0x7f, 0x0, 0xa4, 0xb1, &(0x7f0000000780)="0c5fbdda7d2fa137f5ef45c3ea5ce35a485421fd939bd71cfa9e3d57c957ba797dd1917435460f9e20f65b36c62dd8bdab5448f7e68068d7b82b9709cb0c68829f1f5b5e267ff59842583560205a11cb1e0a2925fb537ebd25ae8482d0e61c321bf27dda6ce8082b66755e6ff31af0ca13c05a897382be70c5b82ac30fb521c35433b4fb002671af5a2685142019ca0c613db8a631ca7f07d754ff58a41e91c68b8cb109", &(0x7f0000000840)="8d9d07a69efaf6e10a86e1a4b1934f47fee2fa603befdc6ddf5ced5fe4f5b55a7d1271fb8177fcd222634c0980d8704904e4562734b56545f4ff5081fff3e6eb00b5f212a91f4601403a229c4f37e43f808e13e5dd83aeccc81d9f82849d2a17cffdfc94bad8f22d415fc989a8ef295b6f735225f8b69e78ccc9f5033b0a1cb42c97129889f7891757c40c7a0789a10307768af4d5703268659831be83e10114e22042426541bbbefdc250cb227cfb597b", 0x4, 0x0, 0x8000}, 0x50) syz_emit_ethernet(0x82, &(0x7f00000009c0)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "43ea56", 0x44, 0x2f, 0x0, @private1, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x22eb, 0x3, {{0x0, 0x2, 0x4}, 0x2, {0x0, 0x4}}}}}}}}}, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) accept4(r1, 0x0, 0x0, 0x80000) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0xc840, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r3, 0x0, 0x24008000) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) 4.931537761s ago: executing program 4 (id=857): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180200002020702500000000002020207b0af8ff00000000bda106000000000026010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000042, &(0x7f0000000040)=ANY=[], 0x0, 0x2d6, &(0x7f0000000a80)="$eJzs3MFrI1UYAPBvmqTtFpb0ICyK4IgXT2W74sHbLlJBLChKEcWDxY0ombrQQCE5bHcv+k8o3jzqUfAk6sWL/4IIooIXwYuIEMlMJskm0yRdSIX6+0HJx3vve997k2mnpe17+/Gj9u07G1FIop7Ezfg7YjvWohalbwIAuDz+6vfjj35hzrDGBS4JAFixJZ//AMAlUv38r08Pe6V4Ob3IpQEAK/JQP///WQZXVrUsAGCFXnvjzZdu7e/vvZqmmxFHH50cnBzkr+Wj/d14P7KIuB7N+CeiP1LEL7y4v3c9Hfh1Ow6OTof5pycHxV8P3iryW7Ebzdiuyk/2dtPCg/mN2Brm/7gVrbgRzXikuv6Nyvz1ePqpifo70WzEO3Ensrgdg9xx/t3dNH3+5f006jGRv5GPy1V/m+P3JQAAAAAAAAAAAAAAAAAAAAAAPLSddKTy/J6dnbP6i/zR+ToPnA+0OZx98nyg6fN56vHYzDHDAAAAAAAAAAAAAAAAAAAA8P/U6fbah1nWOp4XfPD9599GzB/T/eWHe68vmKfbayfDuouLnhVsVq95cxB8liw/z9Unf/64qmsrD+4ni69PsqBEbTjHOTf49ROjlohB8Fatep61smVQJ2mccVW/ujpuKc9lmJqnIqs2almP2eprEfHeo890rj07u4uyRt4yCqZKbFTvPe4tdcXWo6qrMe/W+r0Z0e19N9t1//z3Yf62jlu+yG+/YfHz38+t406t2PKVinenvii93PXE59fkmMao69onNw+/vPvTb8ssrB6H2Uq+3AAAAAAAAAAAAAAAAAAAAHPk/0a+lA+fK6Nk+AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAl0Wn22sfZllrPbq9TyPLWsdly7wgiYhFY8bBf71HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4NwAA//+j6GER") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.930615541s ago: executing program 2 (id=858): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000480, &(0x7f0000000140)={[{@grpid}, {@data_journal}]}, 0x1, 0x521, &(0x7f0000000640)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x182) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) ptrace(0x10, 0x1) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xfc, 0xc44, &(0x7f0000000b80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001840), 0x802, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000580)={{0x0, 0x2001, 0x1, 0x3e}, 'syz1\x00', 0x16}) ioctl$UI_DEV_CREATE(r4, 0x5501) writev(r4, &(0x7f0000001900)=[{&(0x7f0000001940)="37213f058280ccca2746cf17c21cbade483205c2d771e381", 0x18}], 0x1) r5 = dup(r1) fanotify_mark(0xffffffffffffffff, 0x21, 0x1020, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[], 0xac}}, 0x0) ioctl$OCFS2_IOC_UNRESVSP(0xffffffffffffffff, 0x40305829, 0x0) setsockopt$inet_int(r5, 0x0, 0x31, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x40000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 4.851433093s ago: executing program 1 (id=859): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x80000000}, 0x19a) write(r0, &(0x7f0000000200), 0x0) 4.714360056s ago: executing program 1 (id=860): r0 = socket$inet(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x8000, 0x5a) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = semget$private(0x0, 0x6, 0x80) semop(r1, &(0x7f0000000680)=[{0x4, 0xfffe}, {0x2, 0xf996, 0x800}], 0x2) semop(r1, &(0x7f00000006c0)=[{0x4, 0x6, 0x800}], 0x5b) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x40000, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0) userfaultfd(0x1) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/mapper/control\x00', 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r2], 0x7) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000100)='bridge0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newsa={0x140, 0x10, 0x713, 0x70bd2a, 0x24dfdbfe, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x102, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xfe, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x9, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2e, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x60, "210466d3"}}]}, 0x140}, 0x1, 0x0, 0x0, 0x40040}, 0x0) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) 4.483349812s ago: executing program 3 (id=861): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/ip6_flowlabel\x00') r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000002500)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) 3.825106217s ago: executing program 0 (id=862): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) epoll_create1(0x0) keyctl$invalidate(0x15, 0x0) r3 = socket(0x28, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='1', 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r5, 0x84, 0x7d, &(0x7f0000000300)='\x00\x00\x00\x00', 0x4) pselect6(0x40, &(0x7f0000000180)={0x1de80000000000, 0x1, 0x5c, 0x40, 0x4, 0x1000, 0xffffffffffffff47, 0x7}, &(0x7f00000001c0)={0x1, 0x8000, 0x6, 0x0, 0x800000000, 0x5f, 0x8000000000000000, 0x11}, &(0x7f0000000280)={0x7, 0x0, 0xc5d2, 0xa35a, 0x1, 0x800, 0x10, 0x7fffffffffffffff}, &(0x7f0000000340)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x7]}, 0x8}) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r5, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r5, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) sendto(r5, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) 3.70072354s ago: executing program 2 (id=863): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000380)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0x0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0x800, 0x3, 0xffffffff]], '\x00', [{0x10, 0xe, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x9, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0xe47, 0xf4240, 0x0, 0x0, 0x1}]}) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="58010000100001002bbc700000000004fe800000000000000000000000000022ac14144300"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001000000000000000ffffe00000010000000032000000e0000002000000000000000000000000feffffffffffffff0400000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000890000000000000003000000000000000408400000000000090000000000000092020000000000000000b01c000000000000000026bd700000000000020004006c00000000000000680002006362632874776f6669736829000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) 3.698315011s ago: executing program 3 (id=864): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x210000, &(0x7f0000000080), 0xfc, 0x57d, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x40000, 0x120) getdents64(r0, &(0x7f0000001440)=""/245, 0xf5) 3.390154748s ago: executing program 2 (id=865): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) clock_gettime(0x8, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, 0x0) syz_open_dev$sndctrl(&(0x7f0000000980), 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000c00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000002c40)='./file1\x00', r6, r7) stat(&(0x7f0000002dc0)='./file0\x00', &(0x7f0000002e00)) socket$inet6(0xa, 0x4, 0x3) 3.063548186s ago: executing program 4 (id=866): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) syz_usb_connect(0x6, 0x0, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x40000000040201, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000002c0)=0xdfe5) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='wwnn=0x2000000010000001,wwpn=0x2000000010000002,lpwwnn=0x1000000010000001,lpwwpn=0x1000000010000002,roles=32', 0x6c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.770275973s ago: executing program 1 (id=867): mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x161, 0x103) r0 = fsopen(&(0x7f00000000c0)='nfs\x00', 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000540)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000140)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000640)='Sdd\a\x00>7\xc5\t\xe1\x99,\x18\xa0o\\b\xd1\x13\xf0|\t\v\xfe\x89\xf3bU:\xafW7{\x0e\xab\x7f\xe5N\x04\xb09\xf2\xf8Z:i\x88]/?\xa7\x06\x04\xaa\xd3tR\x04\x00\x00\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="03000000d20000001c00128008000100677265001000028008010700e000000104001200"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="040e05003e20"], 0x8) write(r4, &(0x7f00000003c0)='3', 0x4e) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x34}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(r5, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 2.712477625s ago: executing program 3 (id=868): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000840)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x20, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0) 2.678615215s ago: executing program 0 (id=869): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) syz_usb_connect(0x6, 0x0, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000002c0)=0xdfe5) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='wwnn=0x2000000010000001,wwpn=0x2000000010000002,lpwwnn=0x1000000010000001,lpwwpn=0x1000000010000002,roles=32', 0x6c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.512939544s ago: executing program 2 (id=870): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x80000000}, 0x19a) write(r0, &(0x7f0000000200), 0x0) 1.083807534s ago: executing program 3 (id=871): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000140), &(0x7f0000000180)=@tcp}, 0x20) 931.444377ms ago: executing program 3 (id=872): prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000940)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000980)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000009c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000a40)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000ac0), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000b00)=0x2) recvmmsg(r1, &(0x7f0000000b40), 0x10106, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b80)='mountaddr\x00', &(0x7f0000000bc0)='127.0.0.1\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000dc0)={0x3, &(0x7f0000000e00)=[{0x40, 0x9, 0xfe, 0xa4}, {0x30, 0x1, 0x1, 0xe406}, {0x6, 0x15, 0x2, 0xb}]}, 0x10) write$binfmt_aout(r3, 0x0, 0x9ffc) mount$9p_fd(0x0, &(0x7f0000000e40)='./mnt_trace\x00', 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000f00), 0x0, 0x4040, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0), 0xfd, 0x4bd, &(0x7f0000000100)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f00000005c0)='.log\x00', 0x386c2, 0x0) 721.392303ms ago: executing program 4 (id=873): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2204806, &(0x7f00000000c0)=ANY=[@ANYBLOB='map=off,check=relaxed\x00mode=0x0000000000000001,map=off,session=0x0000000000000062,uid=', @ANYBLOB="f0d14b7e80ccc8866005f040e820a431b5d2f5a0bc98aff231fa269072f62426c53f83e54d2f41316e07e44d011e57e548f94a912dd4aa8727e6b084ac4d60f9d67b46fb0590653deda9774c2570d026ebb24970a3c6e54c62a2688cc877c0eeb5cf22daf06df69d65f3b3a6938e957fb8a7cd8a7aac1132d97b814061ca041bd156a9b8e14b6f1d44e1c87d775b9e370d53f1603dfc050d66dde04eb304bc68c5c8f0fc7b61e04b9dac232299655b", @ANYRES32, @ANYRESDEC, @ANYRESOCT], 0xf8, 0x6c8, &(0x7f0000000280)="$eJzs3dtv2+YZx/Ef5ZPsbEGwDUEQ5PAmWQEHyxRJbhwYHtBqFGVzk0SBlAcbGFBkjV0EkdMt6YDFN51vdgA6YNe9680udrd/YECvi2H/w+42oNjuNmwXGniSdaJkN86p/X6EVhT58H2fl1T4mLZICQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyLKrxWLJUt1tbm2bbHbV9xoTlsetzelmPHFzar+SFf6nfF4X4lkXvnW0+Hz4v+u6FL+6pHz4lNfBmfPn1r85m0vXn5DQF6GTNvjk6cHDe53O7uNjxM7oxM2/TMpNCVhIdlXguY3KhmPcwDNrq6vF25u1wNTcuhPsBG2nYWzfybU93yzbN01pbW3FOIUdb6u5Ua3UnXTm3e+Wi8VV84OFeEdLKgT2pluvu82NKCZcHMbcNR/9OA5wKg1j9h50dlemjSQMKpnee3RwL+T6gsrTWioXy+VSqVwurd5Zu3O3WJwdmVEMWcUejUSc+psWr5lnPmYDpyUX1v+/WVJdeTW1pW2ZsQ9bVfny1Ihf/zVcuX95Iq3/b9x2JvbbX//TKn9BeitZfFFR/b8Sv7qSVf8zcjUy+eH80ofVP3//L0l/me1kPOaijIye6KkO9FD31FFHu3p84pbGPq6eSisv4LEhR025CuTJVUOVaI5J5hitaVWrKuodbaqmQEY1uarLUaAdBWrLid5Rtnw5qqgtT76MlmXrpoxKWtOaVmTkqKAdedpSUxuqqqJ/d7vdPT2ItvvKhByVBpUyAhb6g8oTWsqq/z/5MH4XJfW/OK7+f13U/y+/+H2Q/Gj82aQY4BXQTc7/p5gfen31+WUEAAAAAABOmxX99t2K/nZ/WVJXNbfuFLNXGP5NAAAAAAAAeOVZ6i7okqzw/F/SZVlTzv8BAAAAAMBrx4qusbMkLUUf6reOroQ6zi8BZl5AigAAAAAA4BlFV/5fmZe60U0rrso60fk/AAAAAAB4Dfym7x77s+k9drvpn/VzkoLWgvXnfy7In7MOW9vftvYr4ZLK/kwuChn5BEC7dtEKfh/fqPfgzPlz//nYryl6ZTuXrKS35CaYvfsOfr437V7/lj+UwPxMfwNDCZxN1rbCnldnk1f6SNfeGoi9f5BTtCTuZanm1p2C7dXXS6pUzubaznb7548e/ELye+Pce9DZLbz7fud+lMthOOtwP8zjwzSdP80nm24wl+ipl8v/ujHp8tgRL6qWdvnbZmPJivotpuOfUWU/d7SPMsc/2Kd+pevxPru+FMcuHfTuuB+OPx+Ov1RYDwcwMHp/zjrKojQ88nE7IiOLfJTFjTjmxvKN+CnNL2wnZ+W/MyOVC6P7YCCLcn8W07eF9a+RbTEpi2RbrIRZfBo2lJHFysmyGNkjAPCy7EV3/Ymu/ItuYj5Sd9PykB7UvlDdmV7d3x6s7h98HFbG+MeL2eRvExN7ySs8oi9bUR2aV3Rgnb04ckRPR1M5m1fGEb34DNUt7OuPR9+BlKQ9ksV/u93ueinq93dDVfWTcIVPMvsN6vFmv/3B/k+jG+CH3tt9b/dRubyyWnyzWLxT1lw0jORpRtQeAMCI6d+xMzXCelPX4ohr9//xRjw1UPG+0ftIQUHv6n11dF9z6VcIXB3f6lLfxxBuxWet6jtrNefPrS9Kw7El3co8q4tqaV9suRc7p3SVwUp9FLvynPcCAAAv1vUpdXh8/c8P1P9bWo4jluNzyuHz7sFanpwd907ps2JL05N/+5Q3BgAAXxGO/7m11P615ftu653S2lqp0t50jO/ZPzS+W91wjNtsO769WWluOKble23P9uqm5WvBrTqBCbZaLc9vm5rnm5YXuNvRN7+b5KvfA6dRabZdO2jVnUrgGNtrtit221TdwDatre/X3WDT8aOVg5ZjuzXXrrRdr2kCb8u3nYIxgeP0BbpVp9l2a2442TQt321U/B3zI6++1XBM1Qls3221vbjBtC+3WfP8RtRsQd2pX3QIAMBXwZOnBw/vdTq7j4cnFsNT83jOoTJiRifmxzTIPYIAAHjFHJXrE6yU70192n0uWQEAAAAAAAAAAAAAAAAAAAAAgH7TL+k74cTcuIsFpd6cn51N5uiXOrrEcKQdS6ed2EkmciddK70k4uDhZxOCF3tz0s3fH3P4XIaTXqvRv+jvX5PORDGK58yOWz2f3bI1vffFCTv3mBMz4QY6bvD39uJxZsYMb4TexEJvX8ye/j+HcOLRHzIWdbvd7uTVFwa34fykAQ5OzEp6PD+8C9Kbdh8j+Rd3DALwcvw/AAD//xawNjM=") getdents64(0xffffffffffffffff, &(0x7f00000009c0)=""/4086, 0x1062) 379.770241ms ago: executing program 4 (id=874): setns(0xc9, 0x0) sched_setaffinity(0x0, 0x0, 0x0) unshare(0x22020600) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0xdd27753632db5af5, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80d0}, 0x880) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) 368.681411ms ago: executing program 1 (id=875): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000380)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0x0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0x800, 0x3, 0xffffffff]], '\x00', [{0x10, 0xe, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x9, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0xe47, 0xf4240, 0x0, 0x0, 0x1}]}) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="58010000100001002bbc700000000004fe800000000000000000000000000022ac14144300"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001000000000000000ffffe00000010000000032000000e0000002000000000000000000000000feffffffffffffff0400000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000890000000000000003000000000000000408400000000000090000000000000092020000000000000000b01c000000000000000026bd700000000000020004006c00000000000000680002006362632874776f6669736829000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) 27.63964ms ago: executing program 4 (id=876): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000280)}], 0x5, 0x4, 0x6) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 1 (id=877): syz_open_dev$loop(0x0, 0xfffe, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt/trace_marker\x00', 0x1, 0x5a) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f00000195c0)=""/16384, 0x4000) kernel console output (not intermixed with test programs): /dev/loop2, 10) failed: Not a directory [ 104.489674][ T4919] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 104.514521][ T4919] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.166: bg 0: block 255: padding at end of block bitmap is not set [ 104.535124][ T4919] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 104.544437][ T4919] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.166: invalid indirect mapped block 1 (level 1) [ 104.563540][ T4919] EXT4-fs (loop2): 1 truncate cleaned up [ 104.570274][ T4919] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 104.627713][ T4927] FAULT_INJECTION: forcing a failure. [ 104.627713][ T4927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.641050][ T4927] CPU: 1 PID: 4927 Comm: syz.4.169 Not tainted syzkaller #0 [ 104.648355][ T4927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 104.658424][ T4927] Call Trace: [ 104.661712][ T4927] [ 104.664651][ T4927] dump_stack_lvl+0x188/0x24e [ 104.669351][ T4927] ? show_regs_print_info+0x12/0x12 [ 104.674572][ T4927] ? load_image+0x410/0x410 [ 104.679101][ T4927] ? __lock_acquire+0x7ea0/0x7ea0 [ 104.684156][ T4927] should_fail_ex+0x390/0x4c0 [ 104.688864][ T4927] _copy_from_user+0x2c/0x170 [ 104.693572][ T4927] strndup_user+0xb3/0x150 [ 104.698031][ T4927] __se_sys_fsopen+0x3d/0x2c0 [ 104.702732][ T4927] do_syscall_64+0x4c/0xa0 [ 104.707167][ T4927] ? clear_bhb_loop+0x60/0xb0 [ 104.711868][ T4927] ? clear_bhb_loop+0x60/0xb0 [ 104.716565][ T4927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.722477][ T4927] RIP: 0033:0x7f62bab9e559 [ 104.726906][ T4927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.746524][ T4927] RSP: 002b:00007f62bb9ec028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 104.754935][ T4927] RAX: ffffffffffffffda RBX: 00007f62bae25fa0 RCX: 00007f62bab9e559 [ 104.762904][ T4927] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 104.770868][ T4927] RBP: 00007f62bac358b0 R08: 0000000000000000 R09: 0000000000000000 [ 104.778832][ T4927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.786795][ T4927] R13: 00007f62bae26038 R14: 00007f62bae25fa0 R15: 00007ffe57f99f78 [ 104.794777][ T4927] [ 105.325483][ T4349] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.541031][ T4349] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 105.583154][ T4349] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 105.623065][ T4349] usb 2-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40 [ 105.653649][ T4349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.678206][ T4349] usb 2-1: Product: syz [ 105.682409][ T4349] usb 2-1: Manufacturer: syz [ 105.688533][ T4349] usb 2-1: SerialNumber: syz [ 105.702060][ T4935] jffs2: notice: (4935) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 105.721650][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 105.744192][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 105.787480][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 106.527230][ T4280] Bluetooth: hci4: unexpected event 0x3e length: 1004 > 260 [ 106.527261][ T4280] Bluetooth: hci4: unexpected subevent 0x0d length: 1003 > 260 [ 107.225399][ T4347] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.361892][ T4964] tipc: Started in network mode [ 107.372416][ T4964] tipc: Node identity ac1414aa, cluster identity 4711 [ 107.383050][ T4964] tipc: New replicast peer: 172.20.20.187 [ 107.407197][ T4964] tipc: Enabled bearer , priority 10 [ 107.422042][ T4347] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.439158][ T4347] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 107.453826][ T4347] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 107.474751][ T4347] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 107.503454][ T4347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.725717][ T4969] loop2: detected capacity change from 0 to 512 [ 107.740004][ T4969] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 108.134897][ T4414] udevd[4414]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 108.276248][ T4969] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.182: bg 0: block 255: padding at end of block bitmap is not set [ 108.293639][ T4969] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 108.306619][ T4969] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.182: invalid indirect mapped block 1 (level 1) [ 108.326137][ T4969] EXT4-fs (loop2): 1 truncate cleaned up [ 108.330254][ T4349] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 108.331832][ T4969] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 108.349877][ T4349] usb 2-1: unit 2 not found! [ 108.392465][ T4976] jffs2: notice: (4976) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 108.470184][ T4342] tipc: Node number set to 2886997162 [ 108.480730][ T4349] usb 2-1: can't set first interface for hiFace device. [ 108.502641][ T4349] snd-usb-hiface: probe of 2-1:1.2 failed with error -5 [ 108.554655][ T4349] usb 2-1: USB disconnect, device number 3 [ 108.670000][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 108.699679][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 108.741233][ T4347] cxacru 4-1:1.0: receive of cm 0x90 failed (-71) [ 108.747632][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 108.784522][ T4347] usb 4-1: USB disconnect, device number 2 [ 108.797679][ T4983] cxacru 4-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 108.815587][ T4983] cxacru 4-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 108.828829][ T4985] CacheFiles: Empty tag specified [ 109.278257][ T5000] kvm: pic: non byte write [ 109.474338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 110.907887][ T5019] CacheFiles: Empty tag specified [ 111.269268][ T5038] jffs2: notice: (5038) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 113.143487][ T5061] Bluetooth: (null): Too short H5 packet [ 113.453222][ T5071] CacheFiles: Empty tag specified [ 114.211259][ T5094] loop3: detected capacity change from 0 to 512 [ 114.241075][ T5094] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 114.359723][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 114.483393][ T5094] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.220: bg 0: block 255: padding at end of block bitmap is not set [ 114.500900][ T5094] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 114.513709][ T5094] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.220: invalid indirect mapped block 1 (level 1) [ 114.529976][ T5094] EXT4-fs (loop3): 1 truncate cleaned up [ 114.535918][ T5094] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 114.692617][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 114.710463][ T5097] kvm: pic: non byte write [ 114.848325][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 114.881633][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 114.906768][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 114.923692][ T5106] jffs2: notice: (5106) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 115.103818][ T5113] CacheFiles: Empty tag specified [ 115.768926][ T5135] FAULT_INJECTION: forcing a failure. [ 115.768926][ T5135] name failslab, interval 1, probability 0, space 0, times 0 [ 115.835791][ T5135] CPU: 0 PID: 5135 Comm: syz.4.232 Not tainted syzkaller #0 [ 115.843126][ T5135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 115.853199][ T5135] Call Trace: [ 115.856487][ T5135] [ 115.859431][ T5135] dump_stack_lvl+0x188/0x24e [ 115.864131][ T5135] ? show_regs_print_info+0x12/0x12 [ 115.869349][ T5135] ? load_image+0x410/0x410 [ 115.873870][ T5135] ? __might_sleep+0xd0/0xd0 [ 115.878475][ T5135] ? __lock_acquire+0x7ea0/0x7ea0 [ 115.883527][ T5135] should_fail_ex+0x390/0x4c0 [ 115.888230][ T5135] should_failslab+0x5/0x20 [ 115.892752][ T5135] slab_pre_alloc_hook+0x59/0x300 [ 115.897798][ T5135] kmem_cache_alloc+0x56/0x2f0 [ 115.902578][ T5135] ? do_timer_create+0x1c1/0x12f0 [ 115.907630][ T5135] do_timer_create+0x1c1/0x12f0 [ 115.912503][ T5135] ? vfs_write+0x777/0x9a0 [ 115.916950][ T5135] ? do_futex+0x310/0x320 [ 115.921305][ T5135] ? __ia32_sys_clock_nanosleep_time32+0xa0/0xa0 [ 115.927658][ T5135] __x64_sys_timer_create+0x149/0x1c0 [ 115.933052][ T5135] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 115.939059][ T5135] ? posix_timer_event+0xf0/0xf0 [ 115.944011][ T5135] ? lock_chain_count+0x20/0x20 [ 115.948871][ T5135] ? lockdep_hardirqs_on+0x94/0x140 [ 115.954074][ T5135] do_syscall_64+0x4c/0xa0 [ 115.958493][ T5135] ? clear_bhb_loop+0x60/0xb0 [ 115.963168][ T5135] ? clear_bhb_loop+0x60/0xb0 [ 115.967845][ T5135] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.973729][ T5135] RIP: 0033:0x7f62bab9e559 [ 115.978142][ T5135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.997747][ T5135] RSP: 002b:00007f62bb9ec028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 116.006153][ T5135] RAX: ffffffffffffffda RBX: 00007f62bae25fa0 RCX: 00007f62bab9e559 [ 116.014113][ T5135] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 116.022074][ T5135] RBP: 00007f62bac358b0 R08: 0000000000000000 R09: 0000000000000000 [ 116.030035][ T5135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.037994][ T5135] R13: 00007f62bae26038 R14: 00007f62bae25fa0 R15: 00007ffe57f99f78 [ 116.045974][ T5135] [ 116.340693][ T5148] loop0: detected capacity change from 0 to 512 [ 116.417277][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 116.459888][ T5148] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 116.607654][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 116.874051][ T5148] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.235: bg 0: block 255: padding at end of block bitmap is not set [ 116.896152][ T5148] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 116.909183][ T5148] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.235: invalid indirect mapped block 1 (level 1) [ 116.936372][ T5148] EXT4-fs (loop0): 1 truncate cleaned up [ 116.942348][ T5148] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 117.003344][ T5156] CacheFiles: Empty tag specified [ 117.105174][ T5159] loop2: detected capacity change from 0 to 256 [ 117.181825][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 117.212617][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 117.247464][ T4414] udevd[4414]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 117.294098][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 117.331630][ T5159] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 117.605687][ T5180] jffs2: notice: (5180) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 117.951022][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 118.082708][ T4344] libceph: connect (1)[c::]:6789 error -101 [ 118.095514][ T4344] libceph: mon0 (1)[c::]:6789 connect error [ 118.104748][ T4344] libceph: connect (1)[c::]:6789 error -101 [ 118.110928][ T4344] libceph: mon0 (1)[c::]:6789 connect error [ 118.376679][ T4344] libceph: connect (1)[c::]:6789 error -101 [ 118.382916][ T4344] libceph: mon0 (1)[c::]:6789 connect error [ 118.854799][ T5187] ceph: No mds server is up or the cluster is laggy [ 118.905649][ T4390] libceph: connect (1)[c::]:6789 error -101 [ 118.918705][ T4390] libceph: mon0 (1)[c::]:6789 connect error [ 119.005065][ T5204] tipc: Started in network mode [ 119.010191][ T5204] tipc: Node identity ac1414aa, cluster identity 4711 [ 119.024230][ T5204] tipc: New replicast peer: 172.20.20.187 [ 119.031646][ T5204] tipc: Enabled bearer , priority 10 [ 119.404829][ T5217] loop0: detected capacity change from 0 to 512 [ 119.556115][ T5217] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 119.640496][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 119.748620][ T5217] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.254: bg 0: block 255: padding at end of block bitmap is not set [ 119.771386][ T5217] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 119.782509][ T5217] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.254: invalid indirect mapped block 1 (level 1) [ 119.805295][ T5217] EXT4-fs (loop0): 1 truncate cleaned up [ 119.811083][ T5217] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 119.934679][ T5224] FAULT_INJECTION: forcing a failure. [ 119.934679][ T5224] name fail_futex, interval 1, probability 0, space 0, times 1 [ 120.053237][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 120.055893][ T5224] CPU: 1 PID: 5224 Comm: syz.3.258 Not tainted syzkaller #0 [ 120.066265][ T5224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 120.076349][ T5224] Call Trace: [ 120.079642][ T5224] [ 120.082586][ T5224] dump_stack_lvl+0x188/0x24e [ 120.087304][ T5224] ? show_regs_print_info+0x12/0x12 [ 120.092520][ T5224] ? load_image+0x410/0x410 [ 120.097051][ T5224] ? cgroup_rstat_updated+0xce/0x350 [ 120.102360][ T5224] ? rcu_read_lock_sched_held+0x86/0x110 [ 120.107997][ T5224] should_fail_ex+0x390/0x4c0 [ 120.112682][ T5224] get_futex_key+0x1b1/0x1000 [ 120.117362][ T5224] ? futex_setup_timer+0xc0/0xc0 [ 120.122291][ T5224] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 120.128269][ T5224] ? __lock_acquire+0x7ea0/0x7ea0 [ 120.133291][ T5224] ? lock_chain_count+0x20/0x20 [ 120.138143][ T5224] futex_wait_setup+0xb8/0x270 [ 120.142899][ T5224] ? futex_wait_multiple+0x920/0x920 [ 120.148180][ T5224] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 120.154073][ T5224] ? _raw_spin_unlock+0x40/0x40 [ 120.158925][ T5224] futex_wait+0x1b8/0x5c0 [ 120.163711][ T5224] ? futex_wait_setup+0x270/0x270 [ 120.168771][ T5224] ? __fget_files+0x28/0x460 [ 120.173378][ T5224] do_futex+0x310/0x320 [ 120.177539][ T5224] ? __ia32_sys_get_robust_list+0x100/0x100 [ 120.183443][ T5224] __se_sys_futex+0x381/0x410 [ 120.188127][ T5224] ? __x64_sys_futex+0xf0/0xf0 [ 120.192891][ T5224] ? __x64_sys_futex+0x1d/0xf0 [ 120.197665][ T5224] do_syscall_64+0x4c/0xa0 [ 120.202100][ T5224] ? clear_bhb_loop+0x60/0xb0 [ 120.206773][ T5224] ? clear_bhb_loop+0x60/0xb0 [ 120.211444][ T5224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.217356][ T5224] RIP: 0033:0x7f31fbb9e559 [ 120.221771][ T5224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.241391][ T5224] RSP: 002b:00007f31fc9c20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.249808][ T5224] RAX: ffffffffffffffda RBX: 00007f31fbe25fa8 RCX: 00007f31fbb9e559 [ 120.257774][ T5224] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f31fbe25fa8 [ 120.265734][ T5224] RBP: 00007f31fbe25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 120.273695][ T5224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.281655][ T5224] R13: 00007f31fbe26038 R14: 00007ffeeaa87040 R15: 00007ffeeaa87128 [ 120.289630][ T5224] [ 120.292838][ T4342] tipc: Node number set to 2886997162 [ 120.362773][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 120.410085][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 120.624504][ T4345] libceph: connect (1)[c::]:6789 error -101 [ 120.631142][ T4345] libceph: mon0 (1)[c::]:6789 connect error [ 120.895690][ T4345] libceph: connect (1)[c::]:6789 error -101 [ 120.902944][ T4345] libceph: mon0 (1)[c::]:6789 connect error [ 121.426546][ T4345] libceph: connect (1)[c::]:6789 error -101 [ 121.433139][ T4345] libceph: mon0 (1)[c::]:6789 connect error [ 121.439853][ T5243] ceph: No mds server is up or the cluster is laggy [ 121.738517][ T5285] tipc: Started in network mode [ 121.743433][ T5285] tipc: Node identity ac1414aa, cluster identity 4711 [ 121.753774][ T5285] tipc: New replicast peer: 172.20.20.187 [ 121.760668][ T5285] tipc: Enabled bearer , priority 10 [ 122.122248][ T5300] device syzkaller0 entered promiscuous mode [ 122.438926][ T5312] loop1: detected capacity change from 0 to 1024 [ 122.478083][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 122.514368][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 122.755247][ T22] tipc: Node number set to 2886997162 [ 123.445794][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 123.502524][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 124.723231][ T5360] loop4: detected capacity change from 0 to 256 [ 124.757087][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 124.797882][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 124.820531][ T5360] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 124.883642][ T5370] loop1: detected capacity change from 0 to 1024 [ 124.892870][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 124.928608][ T5360] exFAT-fs (loop4): hint_cluster is invalid (17) [ 125.890895][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 125.939194][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 125.986919][ T5388] loop1: detected capacity change from 0 to 128 [ 126.011014][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 126.039743][ T5388] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 126.052376][ T5388] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.184288][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 126.215357][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 126.365269][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 126.414167][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 126.440259][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 126.882851][ T5427] loop1: detected capacity change from 0 to 1024 [ 127.003832][ T5433] netlink: 620 bytes leftover after parsing attributes in process `syz.3.323'. [ 127.142327][ T5436] device syzkaller0 entered promiscuous mode [ 128.287940][ T5462] netlink: 620 bytes leftover after parsing attributes in process `syz.2.335'. [ 128.452510][ T4342] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 128.647687][ T4342] usb 5-1: not running at top speed; connect to a high speed hub [ 128.671693][ T4342] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 128.686587][ T4342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.702327][ T4342] usb 5-1: Product: syz [ 128.712513][ T4342] usb 5-1: Manufacturer: syz [ 128.717898][ T4342] usb 5-1: SerialNumber: syz [ 128.744477][ T4342] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 128.761894][ T4342] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 128.775962][ T4342] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 128.787626][ T4342] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 128.800185][ T4342] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 130.166314][ T5497] loop1: detected capacity change from 0 to 512 [ 130.200895][ T5497] EXT4-fs: Ignoring removed bh option [ 130.204618][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 130.228134][ T5497] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 130.327812][ T5497] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 130.350430][ T5497] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.554563][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 130.647634][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 130.678206][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 130.965086][ T4344] wiimote 0005:057E:0330.0002: item fetching failed at offset 26/27 [ 130.975258][ T4344] wiimote 0005:057E:0330.0002: HID parse failed [ 130.982637][ T4344] wiimote: probe of 0005:057E:0330.0002 failed with error -22 [ 131.224145][ T4345] usb 5-1: USB disconnect, device number 2 [ 131.361678][ T4345] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 131.544625][ T4345] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 131.773865][ T4345] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 132.033533][ T4345] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 132.059825][ T4345] keyspan 5-1:1.0: device disconnected [ 132.135846][ T4344] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 132.412871][ T4390] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 132.460735][ T4345] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 132.627251][ T5540] ceph: No mds server is up or the cluster is laggy [ 132.639690][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.646401][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.782335][ T4345] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.887146][ T4345] usb 5-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 133.006955][ T4345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.085644][ T4345] usb 5-1: Product: syz [ 133.098382][ T4345] usb 5-1: Manufacturer: syz [ 133.106305][ T4345] usb 5-1: SerialNumber: syz [ 133.139752][ T4344] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 133.148560][ T4345] keyspan 5-1:1.0: Keyspan 1 port adapter converter detected [ 133.157379][ T4345] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 133.166637][ T4345] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 133.177055][ T4345] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 82 [ 133.184830][ T4345] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 133.193072][ T4345] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 133.200819][ T4345] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 83 [ 133.208589][ T4345] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 3 [ 133.217320][ T4345] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 133.346065][ T4345] usb 5-1: USB disconnect, device number 3 [ 133.355270][ T4345] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 133.365265][ T4345] keyspan 5-1:1.0: device disconnected [ 133.402855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 133.522409][ T5565] device syzkaller0 entered promiscuous mode [ 133.684920][ T5574] CacheFiles: Empty tag specified [ 134.234470][ T4342] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 134.256040][ T5590] loop0: detected capacity change from 0 to 2048 [ 134.266173][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 134.297529][ T5590] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.537733][ T4342] usb 3-1: Using ep0 maxpacket: 8 [ 134.640642][ T4280] Bluetooth: hci4: command 0x0405 tx timeout [ 134.686508][ T4342] usb 3-1: unable to get BOS descriptor or descriptor too short [ 135.031921][ T4342] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 2 [ 135.041862][ T4342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 135.051570][ T4342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 135.063363][ T4342] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 135.074148][ T4342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 135.084106][ T4342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 135.096323][ T4342] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 135.107402][ T4342] usb 3-1: New USB device strings: Mfr=1, Product=45, SerialNumber=52 [ 135.116125][ T4342] usb 3-1: Product: syz [ 135.120721][ T4342] usb 3-1: Manufacturer: syz [ 135.125335][ T4342] usb 3-1: SerialNumber: syz [ 135.145250][ T4342] usb 3-1: config 0 descriptor?? [ 135.150938][ T5582] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 135.164677][ T5582] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 135.304691][ T5599] Bluetooth: MGMT ver 1.22 [ 135.308532][ T4391] udevd[4391]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.395948][ T4342] usb 3-1: USB disconnect, device number 2 [ 136.510570][ T4285] Bluetooth: hci4: unexpected event 0x3e length: 1004 > 260 [ 136.510603][ T4285] Bluetooth: hci4: unexpected subevent 0x0d length: 1003 > 260 [ 137.007709][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 137.075869][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 137.212873][ T4285] Bluetooth: hci4: link tx timeout [ 137.223860][ T4285] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.348315][ T4280] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 137.355349][ T4280] Bluetooth: hci0: command 0x0c24 tx timeout [ 137.467889][ T4342] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 137.664608][ T4342] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.787325][ T4342] usb 1-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 138.039209][ T4342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.252069][ T4342] usb 1-1: Product: syz [ 138.376491][ T4342] usb 1-1: Manufacturer: syz [ 138.398080][ T4342] usb 1-1: SerialNumber: syz [ 138.429071][ T4342] keyspan 1-1:1.0: Keyspan 1 port adapter converter detected [ 138.436602][ T4342] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 138.468945][ T4342] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 138.476667][ T4342] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 82 [ 138.544860][ T4342] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 138.568262][ T4342] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 138.575887][ T4342] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 83 [ 138.609374][ T4342] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 3 [ 138.639310][ T4342] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 138.660246][ T4342] usb 1-1: USB disconnect, device number 3 [ 138.690534][ T4342] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 138.698332][ T4280] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 138.708227][ T4342] keyspan 1-1:1.0: device disconnected [ 138.716471][ T5660] FAULT_INJECTION: forcing a failure. [ 138.716471][ T5660] name failslab, interval 1, probability 0, space 0, times 0 [ 138.730239][ T5660] CPU: 1 PID: 5660 Comm: syz.1.394 Not tainted syzkaller #0 [ 138.737544][ T5660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 138.747593][ T5660] Call Trace: [ 138.750863][ T5660] [ 138.753786][ T5660] dump_stack_lvl+0x188/0x24e [ 138.758462][ T5660] ? show_regs_print_info+0x12/0x12 [ 138.763656][ T5660] ? load_image+0x410/0x410 [ 138.768158][ T5660] ? __lock_acquire+0x7ea0/0x7ea0 [ 138.773176][ T5660] ? pointer+0x870/0xfe0 [ 138.777422][ T5660] ? lock_chain_count+0x20/0x20 [ 138.782271][ T5660] should_fail_ex+0x390/0x4c0 [ 138.786947][ T5660] should_failslab+0x5/0x20 [ 138.791440][ T5660] slab_pre_alloc_hook+0x59/0x300 [ 138.796469][ T5660] ? kasprintf+0xdf/0x130 [ 138.800794][ T5660] __kmem_cache_alloc_node+0x4f/0x270 [ 138.806161][ T5660] ? kasprintf+0xdf/0x130 [ 138.810481][ T5660] __kmalloc_node_track_caller+0xa0/0x240 [ 138.816194][ T5660] kvasprintf+0xe8/0x1a0 [ 138.820431][ T5660] ? bust_spinlocks+0xd0/0xd0 [ 138.825105][ T5660] ? plist_add+0x3d7/0x490 [ 138.829526][ T5660] kasprintf+0xdf/0x130 [ 138.833671][ T5660] ? schedule+0xd0/0x180 [ 138.837910][ T5660] ? kvasprintf_const+0x240/0x240 [ 138.842933][ T5660] logfc+0x152/0x4f0 [ 138.846819][ T5660] ? trace_raw_output_contention_end+0xd0/0xd0 [ 138.852972][ T5660] ? vfs_parse_fs_param_source+0x190/0x190 [ 138.858769][ T5660] ? aa_get_newest_label+0xf9/0x5b0 [ 138.863964][ T5660] ? end_current_label_crit_section+0x170/0x170 [ 138.870199][ T5660] ? __mutex_lock+0x1ab/0xae0 [ 138.874872][ T5660] ? file_end_write+0x156/0x250 [ 138.879726][ T5660] nfs_get_tree+0xd0c/0x1520 [ 138.884311][ T5660] ? bpf_lsm_capable+0x5/0x10 [ 138.888978][ T5660] ? security_capable+0x85/0xb0 [ 138.893821][ T5660] vfs_get_tree+0x88/0x270 [ 138.898234][ T5660] vfs_fsconfig_locked+0x22f/0x400 [ 138.903337][ T5660] __se_sys_fsconfig+0x69e/0x7e0 [ 138.908281][ T5660] ? __x64_sys_fsconfig+0xc0/0xc0 [ 138.913303][ T5660] ? lockdep_hardirqs_on+0x94/0x140 [ 138.918495][ T5660] ? __x64_sys_fsconfig+0x1c/0xc0 [ 138.923526][ T5660] do_syscall_64+0x4c/0xa0 [ 138.927934][ T5660] ? clear_bhb_loop+0x60/0xb0 [ 138.932607][ T5660] ? clear_bhb_loop+0x60/0xb0 [ 138.937276][ T5660] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.943159][ T5660] RIP: 0033:0x7f5a3b39e559 [ 138.947566][ T5660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.967162][ T5660] RSP: 002b:00007f5a3c330028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 138.975565][ T5660] RAX: ffffffffffffffda RBX: 00007f5a3b626090 RCX: 00007f5a3b39e559 [ 138.983527][ T5660] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 138.991486][ T5660] RBP: 00007f5a3b4358b0 R08: 0000000000000000 R09: 0000000000000000 [ 138.999451][ T5660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.007410][ T5660] R13: 00007f5a3b626128 R14: 00007f5a3b626090 R15: 00007ffef7036058 [ 139.015380][ T5660] [ 139.348384][ T5671] device syzkaller0 entered promiscuous mode [ 139.484188][ T5675] device syzkaller0 entered promiscuous mode [ 140.026815][ T4348] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 140.282550][ T4348] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.364149][ T4348] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.540049][ T4348] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 140.823015][ T4348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 140.831899][ T4348] usb 1-1: SerialNumber: syz [ 141.057115][ T4348] usb 1-1: 0:2 : does not exist [ 141.082700][ T4348] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 141.128219][ T4348] usb 1-1: USB disconnect, device number 4 [ 141.381886][ T4416] udevd[4416]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.359150][ T5735] netlink: 608 bytes leftover after parsing attributes in process `syz.0.410'. [ 142.519637][ T5738] udevd[5738]: open /dev/null failed: Not a directory [ 142.619408][ T4416] udevd[4416]: inotify_add_watch(7, /dev/sda, 10) failed: Not a directory [ 142.654277][ T4416] udevd[4416]: inotify_add_watch(7, /dev/sda1, 10) failed: Not a directory [ 142.745322][ T4280] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 142.753932][ T4280] Bluetooth: hci3: Injecting HCI hardware error event [ 142.762414][ T4280] Bluetooth: hci3: hardware error 0x00 [ 142.938731][ T5744] loop0: detected capacity change from 0 to 512 [ 142.953336][ T5744] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 143.055837][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 143.145485][ T5744] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.412: bg 0: block 255: padding at end of block bitmap is not set [ 143.161427][ T5744] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 143.175012][ T5744] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.412: invalid indirect mapped block 1 (level 1) [ 143.190578][ T5744] EXT4-fs (loop0): 1 truncate cleaned up [ 143.196464][ T5744] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 143.558104][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 143.575430][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 143.620633][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 143.658116][ T4285] Bluetooth: hci4: unexpected event 0x3e length: 1004 > 260 [ 143.658146][ T4285] Bluetooth: hci4: unexpected subevent 0x0d length: 1003 > 260 [ 143.763006][ T5746] wiimote 0005:057E:0330.0003: item fetching failed at offset 46/47 [ 143.783045][ T5746] wiimote 0005:057E:0330.0003: HID parse failed [ 143.795315][ T5746] wiimote: probe of 0005:057E:0330.0003 failed with error -22 [ 143.814878][ T5757] loop0: detected capacity change from 0 to 512 [ 143.826019][ T4414] udevd[4414]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 143.872474][ T5757] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 143.904942][ T5757] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.418: invalid indirect mapped block 1023410176 (level 0) [ 143.930556][ T5757] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, inode 11: block 237:freeing already freed block (bit 236); block bitmap corrupt. [ 143.955201][ T5757] EXT4-fs (loop0): 1 truncate cleaned up [ 143.961354][ T5757] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 144.117746][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 144.136430][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 144.196655][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 144.785057][ T4280] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 145.613851][ T5786] loop3: detected capacity change from 0 to 512 [ 145.628925][ T5786] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 145.799250][ T5786] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.425: bg 0: block 255: padding at end of block bitmap is not set [ 145.816053][ T5786] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 145.826679][ T5786] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.425: invalid indirect mapped block 1 (level 1) [ 145.842995][ T5786] EXT4-fs (loop3): 1 truncate cleaned up [ 145.848832][ T5786] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 146.148761][ T5782] kvm: pic: non byte write [ 146.245158][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 146.284808][ T5797] netlink: 608 bytes leftover after parsing attributes in process `syz.1.429'. [ 146.479643][ T5805] netlink: 104 bytes leftover after parsing attributes in process `syz.1.432'. [ 146.874185][ T4348] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 147.003139][ T4349] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 147.083650][ T4348] usb 1-1: Using ep0 maxpacket: 16 [ 147.090714][ T4348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.128244][ T4348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.168216][ T4348] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 147.201513][ T4348] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 147.217759][ T4349] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.244196][ T4348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.258826][ T4349] usb 3-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 147.280070][ T4349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.306600][ T4348] usb 1-1: config 0 descriptor?? [ 147.324184][ T4349] usb 3-1: Product: syz [ 147.328370][ T4349] usb 3-1: Manufacturer: syz [ 147.364326][ T4349] usb 3-1: SerialNumber: syz [ 148.604717][ T4349] keyspan 3-1:1.0: Keyspan 1 port adapter converter detected [ 148.612627][ T4349] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 148.621458][ T4349] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 148.630257][ T4349] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 82 [ 148.638286][ T4349] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 148.658073][ T4349] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 148.685611][ T4349] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 83 [ 148.696967][ T4280] Bluetooth: hci0: unexpected event 0x3e length: 1004 > 260 [ 148.696993][ T4280] Bluetooth: hci0: unexpected subevent 0x0d length: 1003 > 260 [ 148.722856][ T4349] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 3 [ 148.743350][ T4349] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 148.810625][ T4373] usb 3-1: USB disconnect, device number 3 [ 148.836674][ T4348] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0004/input/input8 [ 148.850382][ T4373] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 148.870664][ T4373] keyspan 3-1:1.0: device disconnected [ 148.893151][ T4348] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 148.975670][ T5847] udevd[5847]: open /dev/null failed: Not a directory [ 149.084140][ T5852] loop0: detected capacity change from 0 to 16 [ 149.094044][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 149.130665][ T5852] erofs: (device loop0): z_erofs_parse_cfgs: algorithm 1 isn't enabled on this kernel [ 149.179859][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 149.195353][ T4390] usb 1-1: USB disconnect, device number 5 [ 149.255206][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 149.486835][ T5863] CacheFiles: Empty tag specified [ 149.661597][ T4390] wiimote 0005:057E:0330.0005: unbalanced collection at end of report description [ 149.696595][ T4390] wiimote 0005:057E:0330.0005: HID parse failed [ 149.722356][ T4390] wiimote: probe of 0005:057E:0330.0005 failed with error -22 [ 149.875627][ T4348] libceph: connect (1)[c::]:6789 error -101 [ 149.884049][ T4348] libceph: mon0 (1)[c::]:6789 connect error [ 149.904934][ T5878] loop4: detected capacity change from 0 to 512 [ 149.948300][ T5878] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 149.950462][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 149.967300][ T5878] EXT4-fs (loop4): 1 truncate cleaned up [ 149.978125][ T5878] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 150.795073][ T4373] libceph: connect (1)[c::]:6789 error -101 [ 150.801098][ T4373] libceph: mon0 (1)[c::]:6789 connect error [ 150.808330][ T5882] ceph: No mds server is up or the cluster is laggy [ 150.904335][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 150.974354][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 151.049898][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 151.162191][ T5904] CacheFiles: Empty tag specified [ 151.398061][ T5910] device syzkaller0 entered promiscuous mode [ 151.525287][ T5915] jffs2: notice: (5915) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 152.015922][ T5937] netlink: 104 bytes leftover after parsing attributes in process `syz.0.460'. [ 152.203802][ T5945] loop0: detected capacity change from 0 to 1024 [ 152.229427][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 153.212547][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 153.233249][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 153.338150][ T5962] device syzkaller0 entered promiscuous mode [ 153.751802][ T5980] jffs2: notice: (5980) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 153.836619][ T5984] loop2: detected capacity change from 0 to 512 [ 154.628367][ T5984] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 154.675951][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 154.679213][ C0] sched: RT throttling activated [ 154.726632][ T5984] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.482: bg 0: block 255: padding at end of block bitmap is not set [ 154.747379][ T5984] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 154.761504][ T5984] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.482: invalid indirect mapped block 1 (level 1) [ 154.777018][ T5984] EXT4-fs (loop2): 1 truncate cleaned up [ 154.783028][ T5984] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 155.028168][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 155.059654][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 155.106835][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 155.257675][ T5746] wiimote 0005:057E:0330.0006: unbalanced collection at end of report description [ 155.284023][ T5746] wiimote 0005:057E:0330.0006: HID parse failed [ 155.298761][ T5746] wiimote: probe of 0005:057E:0330.0006 failed with error -22 [ 155.817026][ T6028] jffs2: notice: (6028) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 155.871413][ T6015] loop2: detected capacity change from 0 to 8 [ 155.894846][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 155.916506][ T6015] SQUASHFS error: zlib decompression failed, data probably corrupt [ 155.948841][ T6015] SQUASHFS error: Failed to read block 0x9b: -5 [ 155.955121][ T6015] SQUASHFS error: Unable to read metadata cache entry [99] [ 155.983148][ T6015] SQUASHFS error: Unable to read inode 0x127 [ 155.985689][ T4342] wiimote 0005:057E:0330.0007: unbalanced collection at end of report description [ 156.011278][ T4342] wiimote 0005:057E:0330.0007: HID parse failed [ 156.022196][ T4342] wiimote: probe of 0005:057E:0330.0007 failed with error -22 [ 156.025017][ T6036] misc userio: No port type given on /dev/userio [ 156.040329][ T6036] misc userio: The device must be registered before sending interrupts [ 156.054221][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 156.110531][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 156.316916][ T6041] kvm: pic: non byte write [ 156.698392][ T4342] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 156.737315][ T4280] Bluetooth: hci4: unexpected cc 0x203e length: 2 > 1 [ 156.738400][ T6067] FAULT_INJECTION: forcing a failure. [ 156.738400][ T6067] name fail_futex, interval 1, probability 0, space 0, times 0 [ 156.758527][ T6067] CPU: 0 PID: 6067 Comm: syz.4.515 Not tainted syzkaller #0 [ 156.765829][ T6067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 156.775867][ T6067] Call Trace: [ 156.779152][ T6067] [ 156.782066][ T6067] dump_stack_lvl+0x188/0x24e [ 156.786730][ T6067] ? show_regs_print_info+0x12/0x12 [ 156.791941][ T6067] ? load_image+0x410/0x410 [ 156.796434][ T6067] should_fail_ex+0x390/0x4c0 [ 156.801101][ T6067] get_futex_key+0x1b1/0x1000 [ 156.805768][ T6067] ? kvasprintf_const+0x240/0x240 [ 156.810781][ T6067] ? futex_setup_timer+0xc0/0xc0 [ 156.815721][ T6067] futex_wake+0x123/0x4f0 [ 156.820046][ T6067] ? futex_wake_mark+0x150/0x150 [ 156.824981][ T6067] ? __mutex_lock+0x1ab/0xae0 [ 156.829660][ T6067] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 156.835289][ T6067] do_futex+0x2e2/0x320 [ 156.839435][ T6067] ? bpf_lsm_capable+0x5/0x10 [ 156.844109][ T6067] ? security_capable+0x85/0xb0 [ 156.848956][ T6067] ? __ia32_sys_get_robust_list+0x100/0x100 [ 156.854841][ T6067] ? fput+0x150/0x1a0 [ 156.858821][ T6067] __se_sys_futex+0x381/0x410 [ 156.863510][ T6067] ? __x64_sys_fsconfig+0xc0/0xc0 [ 156.868536][ T6067] ? __x64_sys_futex+0xf0/0xf0 [ 156.873302][ T6067] ? __x64_sys_futex+0x1d/0xf0 [ 156.878058][ T6067] do_syscall_64+0x4c/0xa0 [ 156.882473][ T6067] ? clear_bhb_loop+0x60/0xb0 [ 156.887144][ T6067] ? clear_bhb_loop+0x60/0xb0 [ 156.891899][ T6067] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.897781][ T6067] RIP: 0033:0x7f62bab9e559 [ 156.902187][ T6067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.921784][ T6067] RSP: 002b:00007f62bb9ec0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 156.930192][ T6067] RAX: ffffffffffffffda RBX: 00007f62bae25fa8 RCX: 00007f62bab9e559 [ 156.938157][ T6067] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f62bae25fac [ 156.946119][ T6067] RBP: 00007f62bae25fa0 R08: 002a89f48a8a6312 R09: 0000000000000000 [ 156.954078][ T6067] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 156.962042][ T6067] R13: 00007f62bae26038 R14: 00007ffe57f99e90 R15: 00007ffe57f99f78 [ 156.970032][ T6067] [ 157.079563][ T4342] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.092276][ T4342] usb 1-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 157.102292][ T4342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.110867][ T4342] usb 1-1: Product: syz [ 157.115300][ T4342] usb 1-1: Manufacturer: syz [ 157.117299][ T4390] wiimote 0005:057E:0330.0008: unbalanced collection at end of report description [ 157.125681][ T4342] usb 1-1: SerialNumber: syz [ 157.135008][ T4390] wiimote 0005:057E:0330.0008: HID parse failed [ 157.137701][ T4342] keyspan 1-1:1.0: Keyspan 1 port adapter converter detected [ 157.141912][ T4390] wiimote: probe of 0005:057E:0330.0008 failed with error -22 [ 157.149204][ T4342] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 157.175090][ T4342] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 157.193094][ T4342] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 82 [ 157.215093][ T4342] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 157.228189][ T4342] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 157.234009][ T6073] loop1: detected capacity change from 0 to 1024 [ 157.237341][ T4342] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 83 [ 157.253404][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 157.264184][ T4342] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 3 [ 157.273408][ T4342] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 157.356236][ T4342] usb 1-1: USB disconnect, device number 6 [ 157.392447][ T4342] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 157.403883][ T6075] misc userio: No port type given on /dev/userio [ 157.424005][ T6075] misc userio: The device must be registered before sending interrupts [ 157.457165][ T4342] keyspan 1-1:1.0: device disconnected [ 158.221728][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 158.272828][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 158.488801][ T6090] tipc: Enabling of bearer rejected, already enabled [ 158.499952][ T4390] wiimote 0005:057E:0330.0009: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 158.514508][ T4390] wiimote 0005:057E:0330.0009: New device registered [ 158.721641][ T6094] wiimote 0005:057E:0330.0009: Device removed [ 159.218975][ T6100] udevd[6100]: open /dev/null failed: Not a directory [ 159.486306][ T6110] FAULT_INJECTION: forcing a failure. [ 159.486306][ T6110] name fail_futex, interval 1, probability 0, space 0, times 0 [ 159.499620][ T6110] CPU: 0 PID: 6110 Comm: syz.2.532 Not tainted syzkaller #0 [ 159.506934][ T6110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 159.516996][ T6110] Call Trace: [ 159.520231][ T6112] FAULT_INJECTION: forcing a failure. [ 159.520231][ T6112] name fail_futex, interval 1, probability 0, space 0, times 0 [ 159.520270][ T6110] [ 159.535956][ T6110] dump_stack_lvl+0x188/0x24e [ 159.540650][ T6110] ? show_regs_print_info+0x12/0x12 [ 159.545855][ T6110] ? load_image+0x410/0x410 [ 159.550373][ T6110] should_fail_ex+0x390/0x4c0 [ 159.555066][ T6110] get_futex_key+0x1b1/0x1000 [ 159.559746][ T6110] ? kvasprintf_const+0x240/0x240 [ 159.564775][ T6110] ? futex_setup_timer+0xc0/0xc0 [ 159.569718][ T6110] futex_wake+0x123/0x4f0 [ 159.574044][ T6110] ? futex_wake_mark+0x150/0x150 [ 159.578978][ T6110] ? __mutex_lock+0x1ab/0xae0 [ 159.583655][ T6110] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 159.589292][ T6110] do_futex+0x2e2/0x320 [ 159.593439][ T6110] ? bpf_lsm_capable+0x5/0x10 [ 159.598111][ T6110] ? security_capable+0x85/0xb0 [ 159.602954][ T6110] ? __ia32_sys_get_robust_list+0x100/0x100 [ 159.608852][ T6110] ? fput+0x150/0x1a0 [ 159.612831][ T6110] __se_sys_futex+0x381/0x410 [ 159.617528][ T6110] ? __x64_sys_fsconfig+0xc0/0xc0 [ 159.622549][ T6110] ? __x64_sys_futex+0xf0/0xf0 [ 159.627315][ T6110] ? __x64_sys_futex+0x1d/0xf0 [ 159.632074][ T6110] do_syscall_64+0x4c/0xa0 [ 159.636488][ T6110] ? clear_bhb_loop+0x60/0xb0 [ 159.641159][ T6110] ? clear_bhb_loop+0x60/0xb0 [ 159.645828][ T6110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.651711][ T6110] RIP: 0033:0x7f3fb3b9e559 [ 159.656116][ T6110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.675712][ T6110] RSP: 002b:00007f3fb4a690e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 159.684119][ T6110] RAX: ffffffffffffffda RBX: 00007f3fb3e25fa8 RCX: 00007f3fb3b9e559 [ 159.692085][ T6110] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3fb3e25fac [ 159.700047][ T6110] RBP: 00007f3fb3e25fa0 R08: 001bb83d02bfb9b2 R09: 0000000000000000 [ 159.708010][ T6110] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 159.715977][ T6110] R13: 00007f3fb3e26038 R14: 00007ffc794e3600 R15: 00007ffc794e36e8 [ 159.723952][ T6110] [ 159.727201][ T4280] Bluetooth: hci4: unexpected cc 0x203e length: 2 > 1 [ 159.736780][ T4390] wiimote 0005:057E:0330.0009: detected device: Nintendo Wii Remote Plus (Gen 2) [ 159.759498][ T6112] CPU: 0 PID: 6112 Comm: syz.4.533 Not tainted syzkaller #0 [ 159.766812][ T6112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 159.776880][ T6112] Call Trace: [ 159.780170][ T6112] [ 159.783115][ T6112] dump_stack_lvl+0x188/0x24e [ 159.787823][ T6112] ? show_regs_print_info+0x12/0x12 [ 159.790272][ T4390] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0009/input/input10 [ 159.793024][ T6112] ? load_image+0x410/0x410 [ 159.808895][ T6112] should_fail_ex+0x390/0x4c0 [ 159.813571][ T6112] get_futex_key+0x1b1/0x1000 [ 159.818247][ T6112] ? kvasprintf_const+0x240/0x240 [ 159.823309][ T6112] ? futex_setup_timer+0xc0/0xc0 [ 159.828281][ T6112] futex_wake+0x123/0x4f0 [ 159.832640][ T6112] ? futex_wake_mark+0x150/0x150 [ 159.837603][ T6112] ? __mutex_lock+0x1ab/0xae0 [ 159.837655][ T4390] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0009/input/input11 [ 159.842287][ T6112] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 159.858319][ T6112] do_futex+0x2e2/0x320 [ 159.862493][ T6112] ? bpf_lsm_capable+0x5/0x10 [ 159.867196][ T6112] ? security_capable+0x85/0xb0 [ 159.872068][ T6112] ? __ia32_sys_get_robust_list+0x100/0x100 [ 159.877976][ T6112] ? fput+0x150/0x1a0 [ 159.881977][ T6112] __se_sys_futex+0x381/0x410 [ 159.886675][ T6112] ? __x64_sys_fsconfig+0xc0/0xc0 [ 159.891725][ T6112] ? __x64_sys_futex+0xf0/0xf0 [ 159.892701][ T4390] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0009/input/input9 [ 159.896494][ T6112] ? __x64_sys_futex+0x1d/0xf0 [ 159.896532][ T6112] do_syscall_64+0x4c/0xa0 [ 159.915756][ T6112] ? clear_bhb_loop+0x60/0xb0 [ 159.920459][ T6112] ? clear_bhb_loop+0x60/0xb0 [ 159.925153][ T6112] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.931067][ T6112] RIP: 0033:0x7f62bab9e559 [ 159.935495][ T6112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.955120][ T6112] RSP: 002b:00007f62bb9ec0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 159.963553][ T6112] RAX: ffffffffffffffda RBX: 00007f62bae25fa8 RCX: 00007f62bab9e559 [ 159.971537][ T6112] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f62bae25fac [ 159.979506][ T6112] RBP: 00007f62bae25fa0 R08: 001ce991147f64b8 R09: 0000000000000000 [ 159.987471][ T6112] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 159.995442][ T6112] R13: 00007f62bae26038 R14: 00007ffe57f99e90 R15: 00007ffe57f99f78 [ 160.003417][ T6112] [ 160.044956][ T6117] loop3: detected capacity change from 0 to 1024 [ 160.056345][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 160.777566][ T4280] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 160.788015][ T4280] Bluetooth: hci4: Injecting HCI hardware error event [ 160.809068][ T4285] Bluetooth: hci4: hardware error 0x00 [ 160.984006][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 160.999020][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 162.363289][ T6137] tipc: Enabling of bearer rejected, already enabled [ 162.534670][ T4348] hid-generic 0003:0001:0001.000A: No inputs registered, leaving [ 162.563628][ T4348] hid-generic 0003:0001:0001.000A: hidraw1: USB HID v0.01 Mouse [syz1] on syz0 [ 162.619662][ T6146] udevd[6146]: open /dev/null failed: Not a directory [ 162.855380][ T4285] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 162.920253][ T6152] FAULT_INJECTION: forcing a failure. [ 162.920253][ T6152] name failslab, interval 1, probability 0, space 0, times 0 [ 162.953444][ T6152] CPU: 1 PID: 6152 Comm: syz.4.547 Not tainted syzkaller #0 [ 162.960779][ T6152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 162.970847][ T6152] Call Trace: [ 162.974131][ T6152] [ 162.977072][ T6152] dump_stack_lvl+0x188/0x24e [ 162.981772][ T6152] ? show_regs_print_info+0x12/0x12 [ 162.986992][ T6152] ? load_image+0x410/0x410 [ 162.991508][ T6152] ? __lock_acquire+0x7ea0/0x7ea0 [ 162.996548][ T6152] ? pointer+0x870/0xfe0 [ 163.000817][ T6152] ? lock_chain_count+0x20/0x20 [ 163.005693][ T6152] should_fail_ex+0x390/0x4c0 [ 163.010396][ T6152] should_failslab+0x5/0x20 [ 163.014914][ T6152] slab_pre_alloc_hook+0x59/0x300 [ 163.019961][ T6152] ? kasprintf+0xdf/0x130 [ 163.024307][ T6152] __kmem_cache_alloc_node+0x4f/0x270 [ 163.029702][ T6152] ? kasprintf+0xdf/0x130 [ 163.034049][ T6152] __kmalloc_node_track_caller+0xa0/0x240 [ 163.039792][ T6152] kvasprintf+0xe8/0x1a0 [ 163.044058][ T6152] ? bust_spinlocks+0xd0/0xd0 [ 163.048760][ T6152] ? plist_add+0x3d7/0x490 [ 163.053204][ T6152] kasprintf+0xdf/0x130 [ 163.057385][ T6152] ? schedule+0xd0/0x180 [ 163.061655][ T6152] ? kvasprintf_const+0x240/0x240 [ 163.066714][ T6152] logfc+0x152/0x4f0 [ 163.070635][ T6152] ? trace_raw_output_contention_end+0xd0/0xd0 [ 163.076812][ T6152] ? vfs_parse_fs_param_source+0x190/0x190 [ 163.082638][ T6152] ? aa_get_newest_label+0xf9/0x5b0 [ 163.087866][ T6152] ? end_current_label_crit_section+0x170/0x170 [ 163.094130][ T6152] ? __mutex_lock+0x1ab/0xae0 [ 163.098837][ T6152] ? file_end_write+0x156/0x250 [ 163.103717][ T6152] nfs_get_tree+0xd0c/0x1520 [ 163.108331][ T6152] ? bpf_lsm_capable+0x5/0x10 [ 163.113034][ T6152] ? security_capable+0x85/0xb0 [ 163.117908][ T6152] vfs_get_tree+0x88/0x270 [ 163.122345][ T6152] vfs_fsconfig_locked+0x22f/0x400 [ 163.127490][ T6152] __se_sys_fsconfig+0x69e/0x7e0 [ 163.132456][ T6152] ? __x64_sys_fsconfig+0xc0/0xc0 [ 163.137516][ T6152] ? lockdep_hardirqs_on+0x94/0x140 [ 163.142734][ T6152] ? __x64_sys_fsconfig+0x1c/0xc0 [ 163.147787][ T6152] do_syscall_64+0x4c/0xa0 [ 163.152217][ T6152] ? clear_bhb_loop+0x60/0xb0 [ 163.156892][ T6152] ? clear_bhb_loop+0x60/0xb0 [ 163.161580][ T6152] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.167486][ T6152] RIP: 0033:0x7f62bab9e559 [ 163.171911][ T6152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.191532][ T6152] RSP: 002b:00007f62bb9ec028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 163.199967][ T6152] RAX: ffffffffffffffda RBX: 00007f62bae25fa0 RCX: 00007f62bab9e559 [ 163.207959][ T6152] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 163.215947][ T6152] RBP: 00007f62bac358b0 R08: 0000000000000000 R09: 0000000000000000 [ 163.223939][ T6152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.231962][ T6152] R13: 00007f62bae26038 R14: 00007f62bae25fa0 R15: 00007ffe57f99f78 [ 163.239974][ T6152] [ 166.024553][ T6173] tipc: Enabling of bearer rejected, already enabled [ 166.803700][ T6194] loop4: detected capacity change from 0 to 1024 [ 166.834997][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 166.883428][ T6198] FAULT_INJECTION: forcing a failure. [ 166.883428][ T6198] name failslab, interval 1, probability 0, space 0, times 0 [ 166.914126][ T6192] rxe_eth0 speed is unknown, defaulting to 1000 [ 166.944436][ T6198] CPU: 0 PID: 6198 Comm: syz.3.563 Not tainted syzkaller #0 [ 166.951763][ T6198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 166.961830][ T6198] Call Trace: [ 166.965116][ T6198] [ 166.968058][ T6198] dump_stack_lvl+0x188/0x24e [ 166.972756][ T6198] ? show_regs_print_info+0x12/0x12 [ 166.977973][ T6198] ? load_image+0x410/0x410 [ 166.982497][ T6198] ? __might_sleep+0xd0/0xd0 [ 166.987097][ T6198] ? __lock_acquire+0x7ea0/0x7ea0 [ 166.992143][ T6198] should_fail_ex+0x390/0x4c0 [ 166.996846][ T6198] should_failslab+0x5/0x20 [ 167.001356][ T6198] slab_pre_alloc_hook+0x59/0x300 [ 167.006402][ T6198] kmem_cache_alloc+0x56/0x2f0 [ 167.011178][ T6198] ? do_timer_create+0x1c1/0x12f0 [ 167.016217][ T6198] do_timer_create+0x1c1/0x12f0 [ 167.021078][ T6198] ? vfs_write+0x777/0x9a0 [ 167.025515][ T6198] ? do_futex+0x310/0x320 [ 167.029861][ T6198] ? __ia32_sys_clock_nanosleep_time32+0xa0/0xa0 [ 167.036213][ T6198] __x64_sys_timer_create+0x149/0x1c0 [ 167.041597][ T6198] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 167.047577][ T6198] ? posix_timer_event+0xf0/0xf0 [ 167.052514][ T6198] ? lock_chain_count+0x20/0x20 [ 167.057368][ T6198] ? lockdep_hardirqs_on+0x94/0x140 [ 167.062570][ T6198] do_syscall_64+0x4c/0xa0 [ 167.067005][ T6198] ? clear_bhb_loop+0x60/0xb0 [ 167.071692][ T6198] ? clear_bhb_loop+0x60/0xb0 [ 167.076378][ T6198] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.082276][ T6198] RIP: 0033:0x7f31fbb9e559 [ 167.086707][ T6198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.106317][ T6198] RSP: 002b:00007f31fc9c2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 167.114739][ T6198] RAX: ffffffffffffffda RBX: 00007f31fbe25fa0 RCX: 00007f31fbb9e559 [ 167.122718][ T6198] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 167.130686][ T6198] RBP: 00007f31fbc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 167.138671][ T6198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.146651][ T6198] R13: 00007f31fbe26038 R14: 00007f31fbe25fa0 R15: 00007ffeeaa87128 [ 167.154639][ T6198] [ 167.845679][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 167.901861][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 167.983183][ T6216] FAULT_INJECTION: forcing a failure. [ 167.983183][ T6216] name failslab, interval 1, probability 0, space 0, times 0 [ 168.047352][ T6216] CPU: 1 PID: 6216 Comm: syz.4.567 Not tainted syzkaller #0 [ 168.054696][ T6216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 168.064768][ T6216] Call Trace: [ 168.068060][ T6216] [ 168.071007][ T6216] dump_stack_lvl+0x188/0x24e [ 168.075720][ T6216] ? show_regs_print_info+0x12/0x12 [ 168.080947][ T6216] ? load_image+0x410/0x410 [ 168.085463][ T6216] ? __lock_acquire+0x7ea0/0x7ea0 [ 168.090507][ T6216] ? pointer+0x870/0xfe0 [ 168.094772][ T6216] ? lock_chain_count+0x20/0x20 [ 168.099648][ T6216] should_fail_ex+0x390/0x4c0 [ 168.104353][ T6216] should_failslab+0x5/0x20 [ 168.108870][ T6216] slab_pre_alloc_hook+0x59/0x300 [ 168.113913][ T6216] ? kasprintf+0xdf/0x130 [ 168.118271][ T6216] __kmem_cache_alloc_node+0x4f/0x270 [ 168.123661][ T6216] ? kasprintf+0xdf/0x130 [ 168.127995][ T6216] __kmalloc_node_track_caller+0xa0/0x240 [ 168.133717][ T6216] kvasprintf+0xe8/0x1a0 [ 168.137961][ T6216] ? bust_spinlocks+0xd0/0xd0 [ 168.142636][ T6216] ? plist_add+0x3d7/0x490 [ 168.147054][ T6216] kasprintf+0xdf/0x130 [ 168.151204][ T6216] ? schedule+0xd0/0x180 [ 168.155462][ T6216] ? kvasprintf_const+0x240/0x240 [ 168.160505][ T6216] logfc+0x152/0x4f0 [ 168.164411][ T6216] ? trace_raw_output_contention_end+0xd0/0xd0 [ 168.170600][ T6216] ? vfs_parse_fs_param_source+0x190/0x190 [ 168.176407][ T6216] ? aa_get_newest_label+0xf9/0x5b0 [ 168.181623][ T6216] ? end_current_label_crit_section+0x170/0x170 [ 168.187875][ T6216] ? __mutex_lock+0x1ab/0xae0 [ 168.192566][ T6216] ? file_end_write+0x156/0x250 [ 168.197423][ T6216] nfs_get_tree+0xd0c/0x1520 [ 168.202016][ T6216] ? bpf_lsm_capable+0x5/0x10 [ 168.206688][ T6216] ? security_capable+0x85/0xb0 [ 168.211537][ T6216] vfs_get_tree+0x88/0x270 [ 168.215968][ T6216] vfs_fsconfig_locked+0x22f/0x400 [ 168.221083][ T6216] __se_sys_fsconfig+0x69e/0x7e0 [ 168.226023][ T6216] ? __x64_sys_fsconfig+0xc0/0xc0 [ 168.231050][ T6216] ? lockdep_hardirqs_on+0x94/0x140 [ 168.236247][ T6216] ? __x64_sys_fsconfig+0x1c/0xc0 [ 168.241273][ T6216] do_syscall_64+0x4c/0xa0 [ 168.245688][ T6216] ? clear_bhb_loop+0x60/0xb0 [ 168.250359][ T6216] ? clear_bhb_loop+0x60/0xb0 [ 168.255032][ T6216] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.260922][ T6216] RIP: 0033:0x7f62bab9e559 [ 168.265334][ T6216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.284939][ T6216] RSP: 002b:00007f62bb9ec028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 168.293348][ T6216] RAX: ffffffffffffffda RBX: 00007f62bae25fa0 RCX: 00007f62bab9e559 [ 168.301313][ T6216] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 168.309273][ T6216] RBP: 00007f62bac358b0 R08: 0000000000000000 R09: 0000000000000000 [ 168.317238][ T6216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.325200][ T6216] R13: 00007f62bae26038 R14: 00007f62bae25fa0 R15: 00007ffe57f99f78 [ 168.333175][ T6216] [ 170.471999][ T4285] Bluetooth: hci0: unexpected event 0x3e length: 1004 > 260 [ 170.472032][ T4285] Bluetooth: hci0: unexpected subevent 0x0d length: 1003 > 260 [ 170.559131][ T6250] loop2: detected capacity change from 0 to 1024 [ 170.591710][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 171.538797][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 171.597105][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 173.571330][ T4983] cxacru 4-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 173.806400][ T6274] rxe_eth0 speed is unknown, defaulting to 1000 [ 174.682637][ T6286] FAULT_INJECTION: forcing a failure. [ 174.682637][ T6286] name failslab, interval 1, probability 0, space 0, times 0 [ 174.761152][ T6286] CPU: 0 PID: 6286 Comm: syz.4.586 Not tainted syzkaller #0 [ 174.768557][ T6286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 174.778630][ T6286] Call Trace: [ 174.781927][ T6286] [ 174.784873][ T6286] dump_stack_lvl+0x188/0x24e [ 174.789582][ T6286] ? show_regs_print_info+0x12/0x12 [ 174.794804][ T6286] ? load_image+0x410/0x410 [ 174.799328][ T6286] ? __lock_acquire+0x7ea0/0x7ea0 [ 174.804375][ T6286] ? pointer+0x870/0xfe0 [ 174.808648][ T6286] ? lock_chain_count+0x20/0x20 [ 174.813528][ T6286] should_fail_ex+0x390/0x4c0 [ 174.818237][ T6286] should_failslab+0x5/0x20 [ 174.822758][ T6286] slab_pre_alloc_hook+0x59/0x300 [ 174.827808][ T6286] ? kasprintf+0xdf/0x130 [ 174.832161][ T6286] __kmem_cache_alloc_node+0x4f/0x270 [ 174.837563][ T6286] ? kasprintf+0xdf/0x130 [ 174.841910][ T6286] __kmalloc_node_track_caller+0xa0/0x240 [ 174.847655][ T6286] kvasprintf+0xe8/0x1a0 [ 174.851919][ T6286] ? bust_spinlocks+0xd0/0xd0 [ 174.856615][ T6286] ? plist_add+0x3d7/0x490 [ 174.861054][ T6286] kasprintf+0xdf/0x130 [ 174.865221][ T6286] ? schedule+0xd0/0x180 [ 174.869485][ T6286] ? kvasprintf_const+0x240/0x240 [ 174.874542][ T6286] logfc+0x152/0x4f0 [ 174.878447][ T6286] ? trace_raw_output_contention_end+0xd0/0xd0 [ 174.884607][ T6286] ? vfs_parse_fs_param_source+0x190/0x190 [ 174.890409][ T6286] ? aa_get_newest_label+0xf9/0x5b0 [ 174.895609][ T6286] ? end_current_label_crit_section+0x170/0x170 [ 174.901848][ T6286] ? __mutex_lock+0x1ab/0xae0 [ 174.906556][ T6286] ? file_end_write+0x156/0x250 [ 174.911410][ T6286] nfs_get_tree+0xd0c/0x1520 [ 174.916002][ T6286] ? bpf_lsm_capable+0x5/0x10 [ 174.920678][ T6286] ? security_capable+0x85/0xb0 [ 174.925535][ T6286] vfs_get_tree+0x88/0x270 [ 174.929951][ T6286] vfs_fsconfig_locked+0x22f/0x400 [ 174.935062][ T6286] __se_sys_fsconfig+0x69e/0x7e0 [ 174.940003][ T6286] ? __x64_sys_fsconfig+0xc0/0xc0 [ 174.945057][ T6286] ? lockdep_hardirqs_on+0x94/0x140 [ 174.950256][ T6286] ? __x64_sys_fsconfig+0x1c/0xc0 [ 174.955277][ T6286] do_syscall_64+0x4c/0xa0 [ 174.959694][ T6286] ? clear_bhb_loop+0x60/0xb0 [ 174.964363][ T6286] ? clear_bhb_loop+0x60/0xb0 [ 174.969037][ T6286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.974939][ T6286] RIP: 0033:0x7f62bab9e559 [ 174.979353][ T6286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.998954][ T6286] RSP: 002b:00007f62bb9ec028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 175.007367][ T6286] RAX: ffffffffffffffda RBX: 00007f62bae25fa0 RCX: 00007f62bab9e559 [ 175.015331][ T6286] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 175.023314][ T6286] RBP: 00007f62bac358b0 R08: 0000000000000000 R09: 0000000000000000 [ 175.031277][ T6286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.039242][ T6286] R13: 00007f62bae26038 R14: 00007f62bae25fa0 R15: 00007ffe57f99f78 [ 175.047217][ T6286] [ 175.793573][ T4285] Bluetooth: hci1: unexpected event 0x3e length: 1004 > 260 [ 175.793605][ T4285] Bluetooth: hci1: unexpected subevent 0x0d length: 1003 > 260 [ 177.141778][ T6327] FAULT_INJECTION: forcing a failure. [ 177.141778][ T6327] name failslab, interval 1, probability 0, space 0, times 0 [ 177.164191][ T6327] CPU: 1 PID: 6327 Comm: syz.2.594 Not tainted syzkaller #0 [ 177.171529][ T6327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 177.181607][ T6327] Call Trace: [ 177.184901][ T6327] [ 177.187846][ T6327] dump_stack_lvl+0x188/0x24e [ 177.192560][ T6327] ? show_regs_print_info+0x12/0x12 [ 177.197793][ T6327] ? load_image+0x410/0x410 [ 177.202342][ T6327] ? __lock_acquire+0x7ea0/0x7ea0 [ 177.207376][ T6327] ? pointer+0x870/0xfe0 [ 177.211623][ T6327] ? lock_chain_count+0x20/0x20 [ 177.216482][ T6327] should_fail_ex+0x390/0x4c0 [ 177.221176][ T6327] should_failslab+0x5/0x20 [ 177.225680][ T6327] slab_pre_alloc_hook+0x59/0x300 [ 177.230710][ T6327] ? kasprintf+0xdf/0x130 [ 177.235059][ T6327] __kmem_cache_alloc_node+0x4f/0x270 [ 177.240431][ T6327] ? kasprintf+0xdf/0x130 [ 177.244759][ T6327] __kmalloc_node_track_caller+0xa0/0x240 [ 177.250475][ T6327] kvasprintf+0xe8/0x1a0 [ 177.254745][ T6327] ? bust_spinlocks+0xd0/0xd0 [ 177.259425][ T6327] ? plist_add+0x3d7/0x490 [ 177.263846][ T6327] kasprintf+0xdf/0x130 [ 177.267999][ T6327] ? schedule+0xd0/0x180 [ 177.272243][ T6327] ? kvasprintf_const+0x240/0x240 [ 177.277277][ T6327] logfc+0x152/0x4f0 [ 177.281175][ T6327] ? trace_raw_output_contention_end+0xd0/0xd0 [ 177.287327][ T6327] ? vfs_parse_fs_param_source+0x190/0x190 [ 177.293129][ T6327] ? aa_get_newest_label+0xf9/0x5b0 [ 177.298332][ T6327] ? end_current_label_crit_section+0x170/0x170 [ 177.304572][ T6327] ? __mutex_lock+0x1ab/0xae0 [ 177.309247][ T6327] ? file_end_write+0x156/0x250 [ 177.314098][ T6327] nfs_get_tree+0xd0c/0x1520 [ 177.318689][ T6327] ? bpf_lsm_capable+0x5/0x10 [ 177.323359][ T6327] ? security_capable+0x85/0xb0 [ 177.328203][ T6327] vfs_get_tree+0x88/0x270 [ 177.332614][ T6327] vfs_fsconfig_locked+0x22f/0x400 [ 177.337725][ T6327] __se_sys_fsconfig+0x69e/0x7e0 [ 177.342665][ T6327] ? __x64_sys_fsconfig+0xc0/0xc0 [ 177.347690][ T6327] ? lockdep_hardirqs_on+0x94/0x140 [ 177.352887][ T6327] ? __x64_sys_fsconfig+0x1c/0xc0 [ 177.357913][ T6327] do_syscall_64+0x4c/0xa0 [ 177.362326][ T6327] ? clear_bhb_loop+0x60/0xb0 [ 177.366998][ T6327] ? clear_bhb_loop+0x60/0xb0 [ 177.371671][ T6327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.377556][ T6327] RIP: 0033:0x7f3fb3b9e559 [ 177.381971][ T6327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.401598][ T6327] RSP: 002b:00007f3fb4a69028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 177.410010][ T6327] RAX: ffffffffffffffda RBX: 00007f3fb3e25fa0 RCX: 00007f3fb3b9e559 [ 177.417975][ T6327] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 177.425936][ T6327] RBP: 00007f3fb3c358b0 R08: 0000000000000000 R09: 0000000000000000 [ 177.433926][ T6327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.441901][ T6327] R13: 00007f3fb3e26038 R14: 00007f3fb3e25fa0 R15: 00007ffc794e36e8 [ 177.449878][ T6327] [ 179.290922][ T4389] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 179.628875][ T4389] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 179.656813][ T4389] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 179.671834][ T4389] usb 3-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40 [ 179.690984][ T4389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.699902][ T4389] usb 3-1: Product: syz [ 179.704088][ T4389] usb 3-1: Manufacturer: syz [ 179.709048][ T4389] usb 3-1: SerialNumber: syz [ 179.811109][ T6365] misc userio: Invalid payload size [ 180.802884][ T6375] misc userio: No port type given on /dev/userio [ 180.810367][ T6365] misc userio: The device must be registered before sending interrupts [ 180.832541][ T6372] FAULT_INJECTION: forcing a failure. [ 180.832541][ T6372] name failslab, interval 1, probability 0, space 0, times 0 [ 180.900833][ T6372] CPU: 0 PID: 6372 Comm: syz.4.607 Not tainted syzkaller #0 [ 180.908173][ T6372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 180.918255][ T6372] Call Trace: [ 180.921558][ T6372] [ 180.924507][ T6372] dump_stack_lvl+0x188/0x24e [ 180.929215][ T6372] ? show_regs_print_info+0x12/0x12 [ 180.934447][ T6372] ? load_image+0x410/0x410 [ 180.938978][ T6372] ? __lock_acquire+0x7ea0/0x7ea0 [ 180.944035][ T6372] ? pointer+0x870/0xfe0 [ 180.948310][ T6372] ? lock_chain_count+0x20/0x20 [ 180.953209][ T6372] should_fail_ex+0x390/0x4c0 [ 180.957927][ T6372] should_failslab+0x5/0x20 [ 180.962455][ T6372] slab_pre_alloc_hook+0x59/0x300 [ 180.967508][ T6372] ? kasprintf+0xdf/0x130 [ 180.971871][ T6372] __kmem_cache_alloc_node+0x4f/0x270 [ 180.977272][ T6372] ? kasprintf+0xdf/0x130 [ 180.981621][ T6372] __kmalloc_node_track_caller+0xa0/0x240 [ 180.987376][ T6372] kvasprintf+0xe8/0x1a0 [ 180.991644][ T6372] ? bust_spinlocks+0xd0/0xd0 [ 180.996349][ T6372] ? plist_add+0x3d7/0x490 [ 181.000791][ T6372] kasprintf+0xdf/0x130 [ 181.004969][ T6372] ? schedule+0xd0/0x180 [ 181.009239][ T6372] ? kvasprintf_const+0x240/0x240 [ 181.014309][ T6372] logfc+0x152/0x4f0 [ 181.018238][ T6372] ? trace_raw_output_contention_end+0xd0/0xd0 [ 181.024424][ T6372] ? vfs_parse_fs_param_source+0x190/0x190 [ 181.030252][ T6372] ? aa_get_newest_label+0xf9/0x5b0 [ 181.035478][ T6372] ? end_current_label_crit_section+0x170/0x170 [ 181.041744][ T6372] ? __mutex_lock+0x1ab/0xae0 [ 181.046446][ T6372] ? file_end_write+0x156/0x250 [ 181.051327][ T6372] nfs_get_tree+0xd0c/0x1520 [ 181.055944][ T6372] ? bpf_lsm_capable+0x5/0x10 [ 181.060644][ T6372] ? security_capable+0x85/0xb0 [ 181.065517][ T6372] vfs_get_tree+0x88/0x270 [ 181.069956][ T6372] vfs_fsconfig_locked+0x22f/0x400 [ 181.075092][ T6372] __se_sys_fsconfig+0x69e/0x7e0 [ 181.080058][ T6372] ? __x64_sys_fsconfig+0xc0/0xc0 [ 181.085112][ T6372] ? lockdep_hardirqs_on+0x94/0x140 [ 181.090329][ T6372] ? __x64_sys_fsconfig+0x1c/0xc0 [ 181.095376][ T6372] do_syscall_64+0x4c/0xa0 [ 181.099811][ T6372] ? clear_bhb_loop+0x60/0xb0 [ 181.104506][ T6372] ? clear_bhb_loop+0x60/0xb0 [ 181.109204][ T6372] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.115121][ T6372] RIP: 0033:0x7f62bab9e559 [ 181.119551][ T6372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.139178][ T6372] RSP: 002b:00007f62bb9ec028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 181.147623][ T6372] RAX: ffffffffffffffda RBX: 00007f62bae25fa0 RCX: 00007f62bab9e559 [ 181.155620][ T6372] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 181.163618][ T6372] RBP: 00007f62bac358b0 R08: 0000000000000000 R09: 0000000000000000 [ 181.171606][ T6372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.179598][ T6372] R13: 00007f62bae26038 R14: 00007f62bae25fa0 R15: 00007ffe57f99f78 [ 181.187605][ T6372] [ 182.142481][ T4389] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 182.152219][ T4389] usb 3-1: unit 2 not found! [ 182.176665][ T4389] usb 3-1: can't set first interface for hiFace device. [ 182.183658][ T4389] snd-usb-hiface: probe of 3-1:1.2 failed with error -5 [ 182.235750][ T4389] usb 3-1: USB disconnect, device number 4 [ 185.877209][ T6414] loop0: detected capacity change from 0 to 512 [ 185.996663][ T6358] udevd[6358]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 186.269865][ T6414] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 187.443793][ T6414] EXT4-fs: error -4 creating inode table initialization thread [ 187.452171][ T6414] EXT4-fs (loop0): mount failed [ 187.625698][ T6358] udevd[6358]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 187.656043][ T6358] udevd[6358]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 188.672074][ T6446] loop0: detected capacity change from 0 to 1024 [ 188.682165][ T6358] udevd[6358]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 188.719481][ T6448] loop4: detected capacity change from 0 to 8 [ 188.761984][ T6448] SQUASHFS error: zlib decompression failed, data probably corrupt [ 188.770163][ T6448] SQUASHFS error: Failed to read block 0x9b: -5 [ 188.792964][ T6358] udevd[6358]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 188.821554][ T6448] SQUASHFS error: Unable to read metadata cache entry [99] [ 188.857606][ T6448] SQUASHFS error: Unable to read inode 0x127 [ 188.899501][ T6450] FAULT_INJECTION: forcing a failure. [ 188.899501][ T6450] name failslab, interval 1, probability 0, space 0, times 0 [ 189.030765][ T6450] CPU: 0 PID: 6450 Comm: syz.2.630 Not tainted syzkaller #0 [ 189.038106][ T6450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 189.048171][ T6450] Call Trace: [ 189.051463][ T6450] [ 189.054403][ T6450] dump_stack_lvl+0x188/0x24e [ 189.059537][ T6450] ? show_regs_print_info+0x12/0x12 [ 189.064750][ T6450] ? load_image+0x410/0x410 [ 189.069264][ T6450] ? __lock_acquire+0x7ea0/0x7ea0 [ 189.074302][ T6450] ? pointer+0x870/0xfe0 [ 189.078562][ T6450] ? lock_chain_count+0x20/0x20 [ 189.083441][ T6450] should_fail_ex+0x390/0x4c0 [ 189.088150][ T6450] should_failslab+0x5/0x20 [ 189.092663][ T6450] slab_pre_alloc_hook+0x59/0x300 [ 189.097705][ T6450] ? kasprintf+0xdf/0x130 [ 189.102052][ T6450] __kmem_cache_alloc_node+0x4f/0x270 [ 189.107443][ T6450] ? kasprintf+0xdf/0x130 [ 189.111785][ T6450] __kmalloc_node_track_caller+0xa0/0x240 [ 189.117524][ T6450] kvasprintf+0xe8/0x1a0 [ 189.121783][ T6450] ? bust_spinlocks+0xd0/0xd0 [ 189.126473][ T6450] ? plist_add+0x3d7/0x490 [ 189.130910][ T6450] kasprintf+0xdf/0x130 [ 189.135074][ T6450] ? schedule+0xd0/0x180 [ 189.139331][ T6450] ? kvasprintf_const+0x240/0x240 [ 189.144383][ T6450] logfc+0x152/0x4f0 [ 189.148295][ T6450] ? trace_raw_output_contention_end+0xd0/0xd0 [ 189.154464][ T6450] ? vfs_parse_fs_param_source+0x190/0x190 [ 189.160283][ T6450] ? aa_get_newest_label+0xf9/0x5b0 [ 189.165497][ T6450] ? end_current_label_crit_section+0x170/0x170 [ 189.171749][ T6450] ? __mutex_lock+0x1ab/0xae0 [ 189.176445][ T6450] ? file_end_write+0x156/0x250 [ 189.181316][ T6450] nfs_get_tree+0xd0c/0x1520 [ 189.185921][ T6450] ? bpf_lsm_capable+0x5/0x10 [ 189.190609][ T6450] ? security_capable+0x85/0xb0 [ 189.195470][ T6450] vfs_get_tree+0x88/0x270 [ 189.199902][ T6450] vfs_fsconfig_locked+0x22f/0x400 [ 189.205029][ T6450] __se_sys_fsconfig+0x69e/0x7e0 [ 189.209982][ T6450] ? __x64_sys_fsconfig+0xc0/0xc0 [ 189.215029][ T6450] ? lockdep_hardirqs_on+0x94/0x140 [ 189.220240][ T6450] ? __x64_sys_fsconfig+0x1c/0xc0 [ 189.225280][ T6450] do_syscall_64+0x4c/0xa0 [ 189.229707][ T6450] ? clear_bhb_loop+0x60/0xb0 [ 189.234396][ T6450] ? clear_bhb_loop+0x60/0xb0 [ 189.239084][ T6450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.244987][ T6450] RIP: 0033:0x7f3fb3b9e559 [ 189.249409][ T6450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.269025][ T6450] RSP: 002b:00007f3fb4a69028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 189.277541][ T6450] RAX: ffffffffffffffda RBX: 00007f3fb3e25fa0 RCX: 00007f3fb3b9e559 [ 189.285520][ T6450] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 189.293504][ T6450] RBP: 00007f3fb3c358b0 R08: 0000000000000000 R09: 0000000000000000 [ 189.301489][ T6450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.309478][ T6450] R13: 00007f3fb3e26038 R14: 00007f3fb3e25fa0 R15: 00007ffc794e36e8 [ 189.317481][ T6450] [ 189.338976][ T6358] udevd[6358]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 189.395402][ T6358] udevd[6358]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 190.743499][ T6358] udevd[6358]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 190.770110][ T6358] udevd[6358]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 191.503613][ T6479] loop1: detected capacity change from 0 to 512 [ 191.561881][ T6358] udevd[6358]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 191.606405][ T6479] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 191.747704][ T6479] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.636: bg 0: block 255: padding at end of block bitmap is not set [ 191.764505][ T6479] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 191.776335][ T6479] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.636: invalid indirect mapped block 1 (level 1) [ 191.792456][ T6479] EXT4-fs (loop1): 1 truncate cleaned up [ 191.798207][ T6479] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 192.116288][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 193.586979][ T6358] udevd[6358]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 193.628700][ T6358] udevd[6358]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 194.801027][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.807360][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.912071][ T6503] loop2: detected capacity change from 0 to 1024 [ 194.927404][ T6358] udevd[6358]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 196.583277][ T6358] udevd[6358]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 196.616861][ T6358] udevd[6358]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 196.838816][ T4280] Bluetooth: hci0: command 0x0406 tx timeout [ 197.074243][ T6525] loop4: detected capacity change from 0 to 128 [ 197.084024][ T6358] udevd[6358]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 197.086429][ T6525] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 197.103298][ T6525] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.267417][ T6535] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 3 [ 197.397151][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 197.410661][ T6539] device syzkaller0 entered promiscuous mode [ 197.530005][ T6358] udevd[6358]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 197.552407][ T6358] udevd[6358]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 199.446039][ T4280] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 199.454230][ T4280] Bluetooth: hci0: unexpected event for opcode 0x203e [ 200.856415][ T6564] netlink: 104 bytes leftover after parsing attributes in process `syz.1.666'. [ 202.494827][ T6585] device syzkaller0 entered promiscuous mode [ 202.505034][ T6589] fuse: Unknown parameter 'grou00000000000000000000' [ 203.475618][ T4280] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 203.484265][ T4280] Bluetooth: hci0: Injecting HCI hardware error event [ 203.495113][ T4285] Bluetooth: hci0: hardware error 0x00 [ 203.520033][ T6596] rxe_eth0 speed is unknown, defaulting to 1000 [ 203.999756][ T6613] kvm: pic: non byte write [ 204.102710][ T4280] Bluetooth: hci1: link tx timeout [ 204.111648][ T4280] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 204.180343][ T6624] netlink: 104 bytes leftover after parsing attributes in process `syz.4.686'. [ 205.386306][ T6634] loop4: detected capacity change from 0 to 1024 [ 205.396197][ T6602] udevd[6602]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 205.634075][ T4285] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 206.193705][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 206.425974][ T6602] udevd[6602]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 206.451263][ T6602] udevd[6602]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 206.522837][ T6657] rxe_eth0 speed is unknown, defaulting to 1000 [ 207.005382][ T6666] loop1: detected capacity change from 0 to 256 [ 207.112606][ T6602] udevd[6602]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 207.310883][ T6666] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 207.425914][ T6666] exFAT-fs (loop1): hint_cluster is invalid (17) [ 208.272631][ T4285] Bluetooth: hci1: command 0x0405 tx timeout [ 208.489917][ T6694] udevd[6694]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 208.562855][ T6699] fuse: Unknown parameter 'grou00000000000000000000' [ 208.569169][ T6602] udevd[6602]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 208.702745][ T6701] netlink: 104 bytes leftover after parsing attributes in process `syz.2.713'. [ 209.733353][ T6713] rxe_eth0 speed is unknown, defaulting to 1000 [ 210.345153][ T6739] fuse: Unknown parameter 'group_i00000000000000000000' [ 210.783792][ T6753] netlink: 104 bytes leftover after parsing attributes in process `syz.1.733'. [ 210.808298][ T6758] loop4: detected capacity change from 0 to 1024 [ 210.823034][ T6602] udevd[6602]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 210.945477][ T6758] hfsplus: invalid length 32517 has been corrected to 255 [ 211.459280][ T6758] hfsplus: invalid length 32517 has been corrected to 255 [ 211.646510][ T6602] udevd[6602]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 211.712079][ T6602] udevd[6602]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 211.824897][ T6765] kvm: pic: non byte write [ 211.942497][ T6768] rxe_eth0 speed is unknown, defaulting to 1000 [ 212.037369][ T6775] fuse: Unknown parameter 'group_i00000000000000000000' [ 212.463638][ T6782] loop3: detected capacity change from 0 to 256 [ 212.483251][ T6602] udevd[6602]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 212.719600][ T6793] netlink: 104 bytes leftover after parsing attributes in process `syz.1.747'. [ 212.734293][ T6602] udevd[6602]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 212.752722][ T6602] udevd[6602]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 212.828294][ T6798] loop0: detected capacity change from 0 to 1024 [ 212.864998][ T6602] udevd[6602]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 212.912947][ T6796] FAULT_INJECTION: forcing a failure. [ 212.912947][ T6796] name fail_futex, interval 1, probability 0, space 0, times 0 [ 212.931900][ T26] audit: type=1800 audit(1792174092.419:2): pid=6798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.751" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=0 res=0 errno=0 [ 212.940305][ T6796] CPU: 0 PID: 6796 Comm: syz.4.749 Not tainted syzkaller #0 [ 212.980628][ T6796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 212.990701][ T6796] Call Trace: [ 212.991962][ T6798] hfsplus: request for non-existent node 262144 in B*Tree [ 212.993975][ T6796] [ 212.993986][ T6796] dump_stack_lvl+0x188/0x24e [ 213.008883][ T6796] ? show_regs_print_info+0x12/0x12 [ 213.014107][ T6796] ? load_image+0x410/0x410 [ 213.018625][ T6796] ? release_firmware_map_entry+0x187/0x187 [ 213.024532][ T6796] ? plist_add+0x3d7/0x490 [ 213.028950][ T6796] should_fail_ex+0x390/0x4c0 [ 213.033654][ T6796] get_futex_key+0x1b1/0x1000 [ 213.038325][ T6796] ? futex_unqueue+0xc7/0xf0 [ 213.042907][ T6796] ? futex_setup_timer+0xc0/0xc0 [ 213.047839][ T6796] futex_wake+0x123/0x4f0 [ 213.052161][ T6796] ? futex_wake_mark+0x150/0x150 [ 213.057102][ T6796] ? file_end_write+0x156/0x250 [ 213.061959][ T6796] ? vfs_write+0x777/0x9a0 [ 213.066373][ T6796] do_futex+0x2e2/0x320 [ 213.070533][ T6796] ? __ia32_sys_get_robust_list+0x100/0x100 [ 213.076428][ T6796] __se_sys_futex+0x381/0x410 [ 213.081098][ T6796] ? __x64_sys_fsconfig+0xc0/0xc0 [ 213.086118][ T6796] ? __x64_sys_futex+0xf0/0xf0 [ 213.090874][ T6796] ? __x64_sys_futex+0x1d/0xf0 [ 213.095644][ T6796] do_syscall_64+0x4c/0xa0 [ 213.100056][ T6796] ? clear_bhb_loop+0x60/0xb0 [ 213.104726][ T6796] ? clear_bhb_loop+0x60/0xb0 [ 213.109394][ T6796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.115278][ T6796] RIP: 0033:0x7f62bab9e559 [ 213.119685][ T6796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.139287][ T6796] RSP: 002b:00007f62bb9ec0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 213.147712][ T6796] RAX: ffffffffffffffda RBX: 00007f62bae25fa8 RCX: 00007f62bab9e559 [ 213.155693][ T6796] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f62bae25fac [ 213.163667][ T6796] RBP: 00007f62bae25fa0 R08: 0036f12579173b6a R09: 0000000000000000 [ 213.171660][ T6796] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 213.179626][ T6796] R13: 00007f62bae26038 R14: 00007ffe57f99e90 R15: 00007ffe57f99f78 [ 213.187608][ T6796] [ 213.397876][ T6798] hfsplus: request for non-existent node 262144 in B*Tree [ 213.582942][ T6807] hfsplus: request for non-existent node 262144 in B*Tree [ 213.660184][ T6807] hfsplus: request for non-existent node 262144 in B*Tree [ 214.976065][ T6602] udevd[6602]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 215.017789][ T6602] udevd[6602]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 215.238125][ T6823] loop4: detected capacity change from 0 to 128 [ 215.256233][ T6602] udevd[6602]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 215.279219][ T6820] rxe_eth0 speed is unknown, defaulting to 1000 [ 215.289951][ T6823] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 215.299157][ T4344] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 215.316251][ T6823] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.459029][ T4344] usb 3-1: device descriptor read/64, error -71 [ 215.490691][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 215.748798][ T4344] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 215.821928][ T6832] kvm: pic: non byte write [ 215.908708][ T4344] usb 3-1: device descriptor read/64, error -71 [ 216.039289][ T4344] usb usb3-port1: attempt power cycle [ 216.067927][ T4285] Bluetooth: hci1: unexpected event 0x3e length: 1004 > 260 [ 216.067959][ T4285] Bluetooth: hci1: unexpected subevent 0x0d length: 1003 > 260 [ 216.068309][ T6845] netlink: 104 bytes leftover after parsing attributes in process `syz.0.764'. [ 217.074063][ T6854] loop4: detected capacity change from 0 to 128 [ 217.083303][ T6852] udevd[6852]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 217.115335][ T6854] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 217.128267][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 217.128274][ T4344] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 217.143704][ T6854] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.188673][ T4344] usb 3-1: device descriptor read/8, error -71 [ 217.235377][ T6857] loop3: detected capacity change from 0 to 1024 [ 217.247719][ T6852] udevd[6852]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 217.274432][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 217.444975][ T6852] udevd[6852]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 217.449668][ T7] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 217.468393][ T7] usb 2-1: config 0 has no interface number 0 [ 217.473592][ T4344] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 217.474581][ T7] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 255, changing to 11 [ 217.523622][ T6852] udevd[6852]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 217.566667][ T4344] usb 3-1: device descriptor read/8, error -71 [ 217.685411][ T6860] loop0: detected capacity change from 0 to 128 [ 217.728670][ T4344] usb usb3-port1: unable to enumerate USB device [ 217.781041][ T6852] udevd[6852]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 217.879074][ T6860] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 218.020532][ T6860] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.043311][ T7] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 59391, setting to 1024 [ 218.054776][ T7] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 218.064149][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.174378][ T7] usb 2-1: config 0 descriptor?? [ 218.180695][ T6851] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 218.191455][ T6602] udevd[6602]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 218.205789][ T7] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input13 [ 218.230913][ T6602] udevd[6602]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 219.122813][ T4389] usb 2-1: USB disconnect, device number 4 [ 219.186820][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 219.255253][ T6852] udevd[6852]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 219.304202][ T6852] udevd[6852]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 220.047480][ T6887] 9pnet_fd: Insufficient options for proto=fd [ 220.207426][ T4285] Bluetooth: hci1: unexpected event 0x3e length: 1004 > 260 [ 220.207461][ T4285] Bluetooth: hci1: unexpected subevent 0x0d length: 1003 > 260 [ 220.207756][ T6889] netlink: 104 bytes leftover after parsing attributes in process `syz.0.780'. [ 220.715457][ T6901] loop2: detected capacity change from 0 to 1024 [ 220.727231][ T6852] udevd[6852]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 220.816213][ T4389] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 220.985675][ T4389] usb 2-1: device descriptor read/64, error -71 [ 221.276568][ T4389] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 221.456192][ T4389] usb 2-1: device descriptor read/64, error -71 [ 221.563280][ T6909] 9pnet_fd: Insufficient options for proto=fd [ 221.576016][ T4389] usb usb2-port1: attempt power cycle [ 221.596040][ T26] audit: type=1326 audit(1792174101.083:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.0.786" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620399e559 code=0x7ffc0000 [ 221.654708][ T26] audit: type=1326 audit(1792174101.123:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.0.786" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620399e559 code=0x7ffc0000 [ 221.678761][ T26] audit: type=1326 audit(1792174101.123:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.0.786" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620399e559 code=0x7ffc0000 [ 221.710935][ T26] audit: type=1326 audit(1792174101.123:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.0.786" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f620399e559 code=0x7ffc0000 [ 221.746026][ T26] audit: type=1326 audit(1792174101.133:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.0.786" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620399e559 code=0x7ffc0000 [ 221.785879][ T26] audit: type=1326 audit(1792174101.133:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.0.786" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620399e559 code=0x7ffc0000 [ 221.816710][ T26] audit: type=1326 audit(1792174101.133:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.0.786" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620399e559 code=0x7ffc0000 [ 221.847301][ T26] audit: type=1326 audit(1792174101.133:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.0.786" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f620399e559 code=0x7ffc0000 [ 221.896333][ T26] audit: type=1326 audit(1792174101.133:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.0.786" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620399e559 code=0x7ffc0000 [ 221.929337][ T26] audit: type=1326 audit(1792174101.143:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.0.786" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620399e559 code=0x7ffc0000 [ 222.055801][ T4389] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 223.125551][ T4389] usb 2-1: device descriptor read/8, error -71 [ 223.132947][ T6921] loop4: detected capacity change from 0 to 128 [ 223.140325][ T6919] fuse: Unknown parameter 'group_id00000000000000000000' [ 223.164586][ T6852] udevd[6852]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 223.209450][ T6921] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 223.229462][ T6921] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.508026][ T4389] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 223.545661][ T4389] usb 2-1: device descriptor read/8, error -71 [ 223.572764][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 223.666099][ T6930] loop0: detected capacity change from 0 to 512 [ 223.679448][ T4389] usb usb2-port1: unable to enumerate USB device [ 223.693848][ T6930] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 223.823579][ T6602] udevd[6602]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 223.888406][ T6852] udevd[6852]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 223.918560][ T6930] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.791: bg 0: block 255: padding at end of block bitmap is not set [ 223.934287][ T6930] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 223.948852][ T6930] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.791: invalid indirect mapped block 1 (level 1) [ 223.965337][ T6930] EXT4-fs (loop0): 1 truncate cleaned up [ 223.971083][ T6930] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 224.158142][ T6602] udevd[6602]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 224.261531][ T6934] loop4: detected capacity change from 0 to 512 [ 224.276619][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 224.317755][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 224.329445][ T6852] udevd[6852]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 224.347518][ T6936] netlink: 104 bytes leftover after parsing attributes in process `syz.1.794'. [ 224.359599][ T6934] EXT4-fs (loop4): 1 truncate cleaned up [ 224.365932][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 224.389322][ T6934] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 225.105244][ T6951] loop3: detected capacity change from 0 to 1024 [ 225.116514][ T6946] FAULT_INJECTION: forcing a failure. [ 225.116514][ T6946] name failslab, interval 1, probability 0, space 0, times 0 [ 225.133524][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 225.135375][ T6946] CPU: 0 PID: 6946 Comm: syz.2.790 Not tainted syzkaller #0 [ 225.149468][ T6946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 225.159521][ T6946] Call Trace: [ 225.162819][ T6946] [ 225.165765][ T6946] dump_stack_lvl+0x188/0x24e [ 225.170462][ T6946] ? show_regs_print_info+0x12/0x12 [ 225.175691][ T6946] ? load_image+0x410/0x410 [ 225.180213][ T6946] ? __lock_acquire+0x7ea0/0x7ea0 [ 225.185264][ T6946] ? pointer+0x870/0xfe0 [ 225.189535][ T6946] ? lock_chain_count+0x20/0x20 [ 225.194409][ T6946] should_fail_ex+0x390/0x4c0 [ 225.199114][ T6946] should_failslab+0x5/0x20 [ 225.203631][ T6946] slab_pre_alloc_hook+0x59/0x300 [ 225.208674][ T6946] ? kasprintf+0xdf/0x130 [ 225.213024][ T6946] __kmem_cache_alloc_node+0x4f/0x270 [ 225.218418][ T6946] ? kasprintf+0xdf/0x130 [ 225.222759][ T6946] __kmalloc_node_track_caller+0xa0/0x240 [ 225.228498][ T6946] kvasprintf+0xe8/0x1a0 [ 225.232758][ T6946] ? bust_spinlocks+0xd0/0xd0 [ 225.237454][ T6946] ? plist_add+0x3d7/0x490 [ 225.241897][ T6946] kasprintf+0xdf/0x130 [ 225.246074][ T6946] ? schedule+0xd0/0x180 [ 225.250338][ T6946] ? kvasprintf_const+0x240/0x240 [ 225.255389][ T6946] logfc+0x152/0x4f0 [ 225.259301][ T6946] ? trace_raw_output_contention_end+0xd0/0xd0 [ 225.265473][ T6946] ? vfs_parse_fs_param_source+0x190/0x190 [ 225.271295][ T6946] ? aa_get_newest_label+0xf9/0x5b0 [ 225.276514][ T6946] ? end_current_label_crit_section+0x170/0x170 [ 225.282769][ T6946] ? __mutex_lock+0x1ab/0xae0 [ 225.287461][ T6946] ? file_end_write+0x156/0x250 [ 225.292332][ T6946] nfs_get_tree+0xd0c/0x1520 [ 225.296938][ T6946] ? bpf_lsm_capable+0x5/0x10 [ 225.301636][ T6946] ? security_capable+0x85/0xb0 [ 225.306503][ T6946] vfs_get_tree+0x88/0x270 [ 225.310949][ T6946] vfs_fsconfig_locked+0x22f/0x400 [ 225.316081][ T6946] __se_sys_fsconfig+0x69e/0x7e0 [ 225.321046][ T6946] ? __x64_sys_fsconfig+0xc0/0xc0 [ 225.326104][ T6946] ? lockdep_hardirqs_on+0x94/0x140 [ 225.331323][ T6946] ? __x64_sys_fsconfig+0x1c/0xc0 [ 225.336365][ T6946] do_syscall_64+0x4c/0xa0 [ 225.340779][ T6946] ? clear_bhb_loop+0x60/0xb0 [ 225.345474][ T6946] ? clear_bhb_loop+0x60/0xb0 [ 225.350146][ T6946] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.356034][ T6946] RIP: 0033:0x7f3fb3b9e559 [ 225.360444][ T6946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.380063][ T6946] RSP: 002b:00007f3fb4a69028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 225.388472][ T6946] RAX: ffffffffffffffda RBX: 00007f3fb3e25fa0 RCX: 00007f3fb3b9e559 [ 225.396436][ T6946] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 225.404401][ T6946] RBP: 00007f3fb3c358b0 R08: 0000000000000000 R09: 0000000000000000 [ 225.412362][ T6946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.420324][ T6946] R13: 00007f3fb3e26038 R14: 00007f3fb3e25fa0 R15: 00007ffc794e36e8 [ 225.428298][ T6946] [ 225.774719][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 225.917251][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 225.939083][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 226.089306][ T6958] loop4: detected capacity change from 0 to 1024 [ 226.128488][ T6958] hfsplus: invalid file type 0174377 for inode 21 [ 226.586071][ T6976] loop3: detected capacity change from 0 to 8 [ 227.649030][ T6978] loop4: detected capacity change from 0 to 512 [ 227.990193][ T6978] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 228.074311][ T6978] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.806: bg 0: block 255: padding at end of block bitmap is not set [ 228.092760][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 228.100673][ T6978] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 228.110350][ T6978] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.806: invalid indirect mapped block 1 (level 1) [ 228.124577][ T6978] EXT4-fs (loop4): 1 truncate cleaned up [ 228.130676][ T6978] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 228.168097][ T6985] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 228.378811][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 228.402578][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 228.425659][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.436486][ T7] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 228.438524][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 228.445640][ T7] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 228.445665][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.491779][ T6992] loop4: detected capacity change from 0 to 1024 [ 228.557944][ T4390] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 228.813199][ T4390] usb 3-1: Using ep0 maxpacket: 32 [ 228.849531][ T4390] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 229.005804][ T4390] usb 3-1: config 2 has no interface number 0 [ 229.073265][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 229.101572][ T4390] usb 3-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 229.279487][ T4390] usb 3-1: config 2 interface 88 has no altsetting 0 [ 229.285460][ T7] usb 2-1: USB disconnect, device number 9 [ 229.299149][ T4390] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 229.594968][ T4390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 229.603070][ T4390] usb 3-1: Product: syz [ 229.607260][ T4390] usb 3-1: Manufacturer: syz [ 229.609212][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 229.611904][ T4390] usb 3-1: SerialNumber: syz [ 229.637296][ T6987] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 229.881315][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 230.078906][ T6987] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 230.598207][ T7013] FAULT_INJECTION: forcing a failure. [ 230.598207][ T7013] name failslab, interval 1, probability 0, space 0, times 0 [ 230.641265][ T7013] CPU: 1 PID: 7013 Comm: syz.1.819 Not tainted syzkaller #0 [ 230.648604][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 230.658678][ T7013] Call Trace: [ 230.661968][ T7013] [ 230.664907][ T7013] dump_stack_lvl+0x188/0x24e [ 230.669612][ T7013] ? show_regs_print_info+0x12/0x12 [ 230.674829][ T7013] ? load_image+0x410/0x410 [ 230.679356][ T7013] ? __lock_acquire+0x7ea0/0x7ea0 [ 230.684398][ T7013] ? pointer+0x870/0xfe0 [ 230.688672][ T7013] should_fail_ex+0x390/0x4c0 [ 230.693385][ T7013] should_failslab+0x5/0x20 [ 230.697915][ T7013] slab_pre_alloc_hook+0x59/0x300 [ 230.702958][ T7013] ? kasprintf+0xdf/0x130 [ 230.707292][ T7013] __kmem_cache_alloc_node+0x4f/0x270 [ 230.712667][ T7013] ? kasprintf+0xdf/0x130 [ 230.717001][ T7013] __kmalloc_node_track_caller+0xa0/0x240 [ 230.722718][ T7013] kvasprintf+0xe8/0x1a0 [ 230.726962][ T7013] ? bust_spinlocks+0xd0/0xd0 [ 230.731635][ T7013] ? plist_add+0x3d7/0x490 [ 230.736052][ T7013] kasprintf+0xdf/0x130 [ 230.740200][ T7013] ? schedule+0xd0/0x180 [ 230.744437][ T7013] ? kvasprintf_const+0x240/0x240 [ 230.749472][ T7013] logfc+0x152/0x4f0 [ 230.753364][ T7013] ? trace_raw_output_contention_end+0xd0/0xd0 [ 230.759517][ T7013] ? vfs_parse_fs_param_source+0x190/0x190 [ 230.765314][ T7013] ? aa_get_newest_label+0xf9/0x5b0 [ 230.770516][ T7013] ? end_current_label_crit_section+0x170/0x170 [ 230.776752][ T7013] ? __mutex_lock+0x1ab/0xae0 [ 230.781423][ T7013] ? file_end_write+0x156/0x250 [ 230.786274][ T7013] nfs_get_tree+0xd0c/0x1520 [ 230.790875][ T7013] ? bpf_lsm_capable+0x5/0x10 [ 230.795545][ T7013] ? security_capable+0x85/0xb0 [ 230.800392][ T7013] vfs_get_tree+0x88/0x270 [ 230.804811][ T7013] vfs_fsconfig_locked+0x22f/0x400 [ 230.809923][ T7013] __se_sys_fsconfig+0x69e/0x7e0 [ 230.814858][ T7013] ? __x64_sys_fsconfig+0xc0/0xc0 [ 230.819894][ T7013] ? lockdep_hardirqs_on+0x94/0x140 [ 230.825090][ T7013] ? __x64_sys_fsconfig+0x1c/0xc0 [ 230.830110][ T7013] do_syscall_64+0x4c/0xa0 [ 230.834519][ T7013] ? clear_bhb_loop+0x60/0xb0 [ 230.839187][ T7013] ? clear_bhb_loop+0x60/0xb0 [ 230.843919][ T7013] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.849806][ T7013] RIP: 0033:0x7f5a3b39e559 [ 230.854215][ T7013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.873822][ T7013] RSP: 002b:00007f5a3c351028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 230.882234][ T7013] RAX: ffffffffffffffda RBX: 00007f5a3b625fa0 RCX: 00007f5a3b39e559 [ 230.890202][ T7013] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 230.898170][ T7013] RBP: 00007f5a3b4358b0 R08: 0000000000000000 R09: 0000000000000000 [ 230.906140][ T7013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.914107][ T7013] R13: 00007f5a3b626038 R14: 00007f5a3b625fa0 R15: 00007ffef7036058 [ 230.922084][ T7013] [ 232.145909][ T4390] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 232.193930][ T4390] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 232.291214][ T4390] asix: probe of 3-1:2.88 failed with error -71 [ 232.394336][ T4390] usb 3-1: USB disconnect, device number 9 [ 234.129605][ T4390] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 234.359226][ T4390] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.425689][ T4390] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 234.470620][ T4390] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 234.489657][ T4390] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.074449][ T4390] usb 3-1: USB disconnect, device number 10 [ 235.259956][ T7054] loop4: detected capacity change from 0 to 1024 [ 235.269953][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 235.413299][ T7056] loop3: detected capacity change from 0 to 512 [ 235.445854][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 235.491483][ T7056] EXT4-fs (loop3): 1 truncate cleaned up [ 235.506262][ T7056] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 236.008713][ T26] kauditd_printk_skb: 90 callbacks suppressed [ 236.008771][ T26] audit: type=1800 audit(1792174115.490:103): pid=7056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.834" name="file1" dev="loop3" ino=13 res=0 errno=0 [ 236.220813][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 236.224350][ T7065] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.834: bg 0: block 465: padding at end of block bitmap is not set [ 236.235937][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 237.468448][ T7078] FAULT_INJECTION: forcing a failure. [ 237.468448][ T7078] name failslab, interval 1, probability 0, space 0, times 0 [ 237.474843][ T7065] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 117 [ 237.483226][ T7077] loop4: detected capacity change from 0 to 164 [ 237.539368][ T7078] CPU: 1 PID: 7078 Comm: syz.0.839 Not tainted syzkaller #0 [ 237.546703][ T7078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 237.556777][ T7078] Call Trace: [ 237.560064][ T7078] [ 237.562998][ T7078] dump_stack_lvl+0x188/0x24e [ 237.567701][ T7078] ? show_regs_print_info+0x12/0x12 [ 237.572918][ T7078] ? load_image+0x410/0x410 [ 237.577436][ T7078] ? __might_sleep+0xd0/0xd0 [ 237.582040][ T7078] ? __lock_acquire+0x7ea0/0x7ea0 [ 237.587082][ T7078] should_fail_ex+0x390/0x4c0 [ 237.591787][ T7078] should_failslab+0x5/0x20 [ 237.596305][ T7078] slab_pre_alloc_hook+0x59/0x300 [ 237.601351][ T7078] kmem_cache_alloc+0x56/0x2f0 [ 237.605162][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 237.606112][ T7078] ? security_file_alloc+0x30/0x110 [ 237.619976][ T7078] security_file_alloc+0x30/0x110 [ 237.625006][ T7078] __alloc_file+0xc2/0x230 [ 237.629425][ T7078] alloc_empty_file+0x90/0x180 [ 237.634189][ T7078] alloc_file+0x5b/0x5f0 [ 237.638431][ T7078] alloc_file_pseudo+0x180/0x200 [ 237.643368][ T7078] ? alloc_empty_file_noaccount+0x80/0x80 [ 237.649079][ T7078] ? do_raw_spin_unlock+0x11d/0x230 [ 237.654270][ T7078] ? put_pid+0xc3/0x120 [ 237.658426][ T7078] sock_alloc_file+0xb3/0x240 [ 237.663104][ T7078] __sys_socketpair+0x372/0x540 [ 237.667952][ T7078] __x64_sys_socketpair+0x97/0xb0 [ 237.672973][ T7078] do_syscall_64+0x4c/0xa0 [ 237.677382][ T7078] ? clear_bhb_loop+0x60/0xb0 [ 237.682054][ T7078] ? clear_bhb_loop+0x60/0xb0 [ 237.686725][ T7078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.692610][ T7078] RIP: 0033:0x7f620399e559 [ 237.697015][ T7078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.716610][ T7078] RSP: 002b:00007f62048ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 237.725016][ T7078] RAX: ffffffffffffffda RBX: 00007f6203c25fa0 RCX: 00007f620399e559 [ 237.732978][ T7078] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 237.740940][ T7078] RBP: 00007f6203a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 237.748900][ T7078] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 237.756859][ T7078] R13: 00007f6203c26038 R14: 00007f6203c25fa0 R15: 00007ffc71039bf8 [ 237.764834][ T7078] [ 237.818275][ T7077] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 237.879060][ T7065] EXT4-fs (loop3): This should not happen!! Data will be lost [ 237.879060][ T7065] [ 237.927655][ T4390] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 237.930676][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 237.970760][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 238.020661][ T7083] loop4: detected capacity change from 0 to 256 [ 238.030084][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 238.053702][ T7083] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 238.080197][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 238.099833][ T7083] exFAT-fs (loop4): hint_cluster is invalid (17) [ 238.114618][ T7086] loop0: detected capacity change from 0 to 256 [ 238.134369][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 238.151205][ T7086] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 238.239488][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 238.280396][ T4390] usb 2-1: Using ep0 maxpacket: 32 [ 238.289614][ T4390] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 238.307469][ T4390] usb 2-1: config 0 has no interface number 0 [ 238.313617][ T4390] usb 2-1: config 0 interface 184 has no altsetting 0 [ 238.336658][ T4390] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 239.012609][ T4390] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.020987][ T4390] usb 2-1: Product: syz [ 239.025532][ T4390] usb 2-1: Manufacturer: syz [ 239.030250][ T4390] usb 2-1: SerialNumber: syz [ 239.043473][ T4390] usb 2-1: config 0 descriptor?? [ 239.747807][ T4390] smsc75xx v1.0.0 [ 241.261937][ T4390] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 241.276027][ T126] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 241.303819][ T4390] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 241.330785][ T4390] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 241.359573][ T7113] loop1: detected capacity change from 0 to 128 [ 241.366611][ T4390] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 241.379990][ T6852] udevd[6852]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 241.406458][ T4390] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 241.435922][ T4390] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 241.446445][ T7113] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 241.473077][ T7113] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.491839][ T4390] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 241.500465][ T126] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.517240][ T126] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 241.554535][ T4390] usb 2-1: USB disconnect, device number 10 [ 241.581691][ T126] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 241.630908][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.748534][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 242.008349][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 242.469246][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 242.570055][ T7] usb 4-1: USB disconnect, device number 3 [ 242.765862][ T7132] loop2: detected capacity change from 0 to 512 [ 242.776677][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 242.816789][ T7131] loop4: detected capacity change from 0 to 256 [ 242.824872][ T7131] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 242.826725][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 242.880272][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 242.930096][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 242.958136][ T7132] EXT4-fs (loop2): 1 orphan inode deleted [ 242.984249][ T7132] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 242.997383][ T57] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 243.024575][ T57] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:4: Failed to release dquot type 1 [ 243.037000][ T7132] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.057217][ T7142] loop0: detected capacity change from 0 to 164 [ 243.073961][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 243.370393][ T7150] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4272] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7150] [ 243.484999][ T7150] EXT4-fs error (device loop2): ext4_lookup:1860: inode #15: comm syz.2.858: iget: bad i_size value: 360287970189639690 [ 243.524497][ T7150] input: syz1 as /devices/virtual/input/input14 [ 243.757321][ T7138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.830423][ T6852] udevd[6852]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 243.888471][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 243.967215][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 244.133260][ T7158] loop3: detected capacity change from 0 to 1024 [ 244.157969][ T7158] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 244.205837][ T7163] netlink: 104 bytes leftover after parsing attributes in process `syz.2.863'. [ 244.221388][ T7158] EXT4-fs error (device loop3): ext4_read_inline_dir:1628: inode #12: block 7: comm syz.3.864: path /162/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 244.934986][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 246.194905][ T7175] FAULT_INJECTION: forcing a failure. [ 246.194905][ T7175] name failslab, interval 1, probability 0, space 0, times 0 [ 246.253822][ T7175] CPU: 1 PID: 7175 Comm: syz.1.867 Not tainted syzkaller #0 [ 246.261163][ T7175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 246.271251][ T7175] Call Trace: [ 246.274543][ T7175] [ 246.277570][ T7175] dump_stack_lvl+0x188/0x24e [ 246.282275][ T7175] ? show_regs_print_info+0x12/0x12 [ 246.287497][ T7175] ? load_image+0x410/0x410 [ 246.292021][ T7175] ? __lock_acquire+0x7ea0/0x7ea0 [ 246.297071][ T7175] ? pointer+0x870/0xfe0 [ 246.301336][ T7175] ? lock_chain_count+0x20/0x20 [ 246.306211][ T7175] should_fail_ex+0x390/0x4c0 [ 246.310913][ T7175] should_failslab+0x5/0x20 [ 246.315418][ T7175] slab_pre_alloc_hook+0x59/0x300 [ 246.320491][ T7175] ? kasprintf+0xdf/0x130 [ 246.324819][ T7175] __kmem_cache_alloc_node+0x4f/0x270 [ 246.330201][ T7175] ? kasprintf+0xdf/0x130 [ 246.334529][ T7175] __kmalloc_node_track_caller+0xa0/0x240 [ 246.340243][ T7175] kvasprintf+0xe8/0x1a0 [ 246.344483][ T7175] ? bust_spinlocks+0xd0/0xd0 [ 246.349155][ T7175] ? plist_add+0x3d7/0x490 [ 246.353577][ T7175] kasprintf+0xdf/0x130 [ 246.357727][ T7175] ? schedule+0xd0/0x180 [ 246.361969][ T7175] ? kvasprintf_const+0x240/0x240 [ 246.367008][ T7175] logfc+0x152/0x4f0 [ 246.370900][ T7175] ? trace_raw_output_contention_end+0xd0/0xd0 [ 246.377052][ T7175] ? vfs_parse_fs_param_source+0x190/0x190 [ 246.382850][ T7175] ? aa_get_newest_label+0xf9/0x5b0 [ 246.388047][ T7175] ? end_current_label_crit_section+0x170/0x170 [ 246.394285][ T7175] ? __mutex_lock+0x1ab/0xae0 [ 246.398965][ T7175] ? file_end_write+0x156/0x250 [ 246.403818][ T7175] nfs_get_tree+0xd0c/0x1520 [ 246.408437][ T7175] ? bpf_lsm_capable+0x5/0x10 [ 246.413109][ T7175] ? security_capable+0x85/0xb0 [ 246.417959][ T7175] vfs_get_tree+0x88/0x270 [ 246.422371][ T7175] vfs_fsconfig_locked+0x22f/0x400 [ 246.427483][ T7175] __se_sys_fsconfig+0x69e/0x7e0 [ 246.432421][ T7175] ? __x64_sys_fsconfig+0xc0/0xc0 [ 246.437446][ T7175] ? lockdep_hardirqs_on+0x94/0x140 [ 246.442641][ T7175] ? __x64_sys_fsconfig+0x1c/0xc0 [ 246.447668][ T7175] do_syscall_64+0x4c/0xa0 [ 246.452082][ T7175] ? clear_bhb_loop+0x60/0xb0 [ 246.456754][ T7175] ? clear_bhb_loop+0x60/0xb0 [ 246.461427][ T7175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 246.467316][ T7175] RIP: 0033:0x7f5a3b39e559 [ 246.471737][ T7175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.491336][ T7175] RSP: 002b:00007f5a3c351028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 246.499744][ T7175] RAX: ffffffffffffffda RBX: 00007f5a3b625fa0 RCX: 00007f5a3b39e559 [ 246.507712][ T7175] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 246.515702][ T7175] RBP: 00007f5a3b4358b0 R08: 0000000000000000 R09: 0000000000000000 [ 246.523669][ T7175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.531629][ T7175] R13: 00007f5a3b626038 R14: 00007f5a3b625fa0 R15: 00007ffef7036058 [ 246.539606][ T7175] [ 247.044805][ T7190] loop4: detected capacity change from 0 to 164 [ 247.137065][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 247.246319][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 247.314453][ T6932] udevd[6932]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 247.482677][ T7198] netlink: 104 bytes leftover after parsing attributes in process `syz.1.875'. [ 247.836689][ T7205] ------------[ cut here ]------------ [ 247.842456][ T7205] WARNING: CPU: 0 PID: 7205 at kernel/trace/ring_buffer.c:4570 rb_get_reader_page+0xabf/0xcd0 [ 247.852735][ T7205] Modules linked in: [ 247.856640][ T7205] CPU: 0 PID: 7205 Comm: syz.1.877 Not tainted syzkaller #0 [ 247.863930][ T7205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 247.873993][ T7205] RIP: 0010:rb_get_reader_page+0xabf/0xcd0 [ 247.879819][ T7205] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 68 62 4e 00 4d 8b 3c 24 49 8d 7f 08 be 04 00 00 00 e8 f6 63 4e 00 f0 41 ff 47 08 <0f> 0b 49 bf 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 83 7c 24 18 [ 247.899443][ T7205] RSP: 0018:ffffc9001c4e7820 EFLAGS: 00010002 [ 247.905530][ T7205] RAX: 1ffff110030ea001 RBX: 1ffff11027fdfbd6 RCX: ffffffff8185401a [ 247.913520][ T7205] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888018470408 [ 247.921501][ T7205] RBP: ffffc9001c4e79b0 R08: ffff88801847040b R09: 1ffff1100308e081 [ 247.929492][ T7205] R10: dffffc0000000000 R11: ffffed100308e082 R12: ffff888018750010 [ 247.937482][ T7205] R13: 0000000000000040 R14: 1ffff11027fdfbd3 R15: ffff888018470400 [ 247.945470][ T7205] FS: 00007f5a3c3516c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 247.954420][ T7205] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.961010][ T7205] CR2: 000000110c390767 CR3: 0000000029acc000 CR4: 00000000003526f0 [ 247.968998][ T7205] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 247.976974][ T7205] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 247.984953][ T7205] Call Trace: [ 247.988241][ T7205] [ 247.991202][ T7205] ? ring_buffer_read_page+0x1370/0x1370 [ 247.996851][ T7205] ? mark_lock+0x94/0x320 [ 248.001203][ T7205] ? do_raw_spin_lock+0x128/0x2f0 [ 248.006243][ T7205] rb_buffer_peek+0x5e/0x940 [ 248.010855][ T7205] ring_buffer_peek+0x1f8/0x440 [ 248.015724][ T7205] ? ring_buffer_iter_empty+0x340/0x340 [ 248.021299][ T7205] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 248.027322][ T7205] ? lock_chain_count+0x20/0x20 [ 248.032206][ T7205] ? _find_next_bit+0x87/0x130 [ 248.038584][ T7205] __find_next_entry+0x33f/0x6c0 [ 248.038657][ T7205] ? trace_find_next_entry+0x3a0/0x3a0 [ 248.038698][ T7205] tracing_read_pipe+0x3bd/0xb10 [ 248.038735][ T7205] ? s_show+0x300/0x300 [ 248.038761][ T7205] vfs_read+0x2db/0x960 [ 248.038793][ T7205] ? kernel_read+0x1e0/0x1e0 [ 248.038821][ T7205] ? __fget_files+0x28/0x460 [ 248.038847][ T7205] ? __fget_files+0x3fc/0x460 [ 248.038881][ T7205] ? __fdget_pos+0x2ae/0x360 [ 248.038905][ T7205] ? ksys_read+0x70/0x260 [ 248.038933][ T7205] ksys_read+0x14d/0x260 [ 248.038961][ T7205] ? vfs_write+0x9a0/0x9a0 [ 248.038991][ T7205] ? lockdep_hardirqs_on+0x94/0x140 [ 248.039021][ T7205] do_syscall_64+0x4c/0xa0 [ 248.039041][ T7205] ? clear_bhb_loop+0x60/0xb0 [ 248.039062][ T7205] ? clear_bhb_loop+0x60/0xb0 [ 248.039085][ T7205] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.039106][ T7205] RIP: 0033:0x7f5a3b39e559 [ 248.039125][ T7205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.039140][ T7205] RSP: 002b:00007f5a3c351028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 248.039163][ T7205] RAX: ffffffffffffffda RBX: 00007f5a3b625fa0 RCX: 00007f5a3b39e559 [ 248.039177][ T7205] RDX: 0000000000004000 RSI: 00002000000195c0 RDI: 0000000000000005 [ 248.039190][ T7205] RBP: 00007f5a3b4358b0 R08: 0000000000000000 R09: 0000000000000000 [ 248.039203][ T7205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.039216][ T7205] R13: 00007f5a3b626038 R14: 00007f5a3b625fa0 R15: 00007ffef7036058 [ 248.039248][ T7205] [ 248.039272][ T7205] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 248.039282][ T7205] CPU: 0 PID: 7205 Comm: syz.1.877 Not tainted syzkaller #0 [ 248.039300][ T7205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 248.039311][ T7205] Call Trace: [ 248.039317][ T7205] [ 248.039324][ T7205] dump_stack_lvl+0x188/0x24e [ 248.039347][ T7205] ? memcpy+0x3c/0x60 [ 248.039366][ T7205] ? show_regs_print_info+0x12/0x12 [ 248.039388][ T7205] ? load_image+0x410/0x410 [ 248.039420][ T7205] panic+0x2d3/0x710 [ 248.039451][ T7205] ? bpf_jit_dump+0xd0/0xd0 [ 248.039501][ T7205] __warn+0x2f8/0x4f0 [ 248.039523][ T7205] ? rb_get_reader_page+0xabf/0xcd0 [ 248.039547][ T7205] ? rb_get_reader_page+0xabf/0xcd0 [ 248.039566][ T7205] report_bug+0x2ba/0x4f0 [ 248.039587][ T7205] ? rb_get_reader_page+0xabf/0xcd0 [ 248.039612][ T7205] handle_bug+0x3a/0x70 [ 248.039633][ T7205] exc_invalid_op+0x16/0x40 [ 248.039654][ T7205] asm_exc_invalid_op+0x16/0x20 [ 248.039673][ T7205] RIP: 0010:rb_get_reader_page+0xabf/0xcd0 [ 248.039693][ T7205] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 68 62 4e 00 4d 8b 3c 24 49 8d 7f 08 be 04 00 00 00 e8 f6 63 4e 00 f0 41 ff 47 08 <0f> 0b 49 bf 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 83 7c 24 18 [ 248.039708][ T7205] RSP: 0018:ffffc9001c4e7820 EFLAGS: 00010002 [ 248.039724][ T7205] RAX: 1ffff110030ea001 RBX: 1ffff11027fdfbd6 RCX: ffffffff8185401a [ 248.039737][ T7205] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888018470408 [ 248.039748][ T7205] RBP: ffffc9001c4e79b0 R08: ffff88801847040b R09: 1ffff1100308e081 [ 248.039762][ T7205] R10: dffffc0000000000 R11: ffffed100308e082 R12: ffff888018750010 [ 248.039775][ T7205] R13: 0000000000000040 R14: 1ffff11027fdfbd3 R15: ffff888018470400 [ 248.039797][ T7205] ? rb_get_reader_page+0xaba/0xcd0 [ 248.039843][ T7205] ? ring_buffer_read_page+0x1370/0x1370 [ 248.039865][ T7205] ? mark_lock+0x94/0x320 [ 248.039893][ T7205] ? do_raw_spin_lock+0x128/0x2f0 [ 248.039918][ T7205] rb_buffer_peek+0x5e/0x940 [ 248.039944][ T7205] ring_buffer_peek+0x1f8/0x440 [ 248.039969][ T7205] ? ring_buffer_iter_empty+0x340/0x340 [ 248.039987][ T7205] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 248.040014][ T7205] ? lock_chain_count+0x20/0x20 [ 248.040037][ T7205] ? _find_next_bit+0x87/0x130 [ 248.040060][ T7205] __find_next_entry+0x33f/0x6c0 [ 248.040095][ T7205] ? trace_find_next_entry+0x3a0/0x3a0 [ 248.040134][ T7205] tracing_read_pipe+0x3bd/0xb10 [ 248.040169][ T7205] ? s_show+0x300/0x300 [ 248.040194][ T7205] vfs_read+0x2db/0x960 [ 248.040224][ T7205] ? kernel_read+0x1e0/0x1e0 [ 248.040251][ T7205] ? __fget_files+0x28/0x460 [ 248.040276][ T7205] ? __fget_files+0x3fc/0x460 [ 248.040310][ T7205] ? __fdget_pos+0x2ae/0x360 [ 248.040333][ T7205] ? ksys_read+0x70/0x260 [ 248.040360][ T7205] ksys_read+0x14d/0x260 [ 248.040387][ T7205] ? vfs_write+0x9a0/0x9a0 [ 248.040416][ T7205] ? lockdep_hardirqs_on+0x94/0x140 [ 248.040445][ T7205] do_syscall_64+0x4c/0xa0 [ 248.040464][ T7205] ? clear_bhb_loop+0x60/0xb0 [ 248.040490][ T7205] ? clear_bhb_loop+0x60/0xb0 [ 248.040512][ T7205] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.040531][ T7205] RIP: 0033:0x7f5a3b39e559 [ 248.040546][ T7205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.040561][ T7205] RSP: 002b:00007f5a3c351028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 248.040580][ T7205] RAX: ffffffffffffffda RBX: 00007f5a3b625fa0 RCX: 00007f5a3b39e559 [ 248.040594][ T7205] RDX: 0000000000004000 RSI: 00002000000195c0 RDI: 0000000000000005 [ 248.040606][ T7205] RBP: 00007f5a3b4358b0 R08: 0000000000000000 R09: 0000000000000000 [ 248.040618][ T7205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.040629][ T7205] R13: 00007f5a3b626038 R14: 00007f5a3b625fa0 R15: 00007ffef7036058 [ 248.040659][ T7205] [ 248.040917][ T7205] Kernel Offset: disabled [ 248.570145][ T7205] Rebooting in 86400 seconds..