last executing test programs: 21.526712138s ago: executing program 3 (id=294): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201080a, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) ptrace$setregset(0x4205, 0x0, 0x202, &(0x7f00000000c0)={0x0}) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x181081) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x1, 0x3, 0x8, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r3, 0x40026f34, &(0x7f0000000040)=0x1) syz_open_procfs(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='tmpfs\x00', 0x20849b, 0x0) 20.224909508s ago: executing program 3 (id=301): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201080a, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) ptrace$setregset(0x4205, 0x0, 0x202, &(0x7f00000000c0)={0x0}) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x3, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x181081) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x1, 0x3, 0x8, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r3, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_START(r3, 0x6f29) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) mount(0x0, 0x0, &(0x7f0000000080)='tmpfs\x00', 0x20849b, 0x0) 18.825908865s ago: executing program 3 (id=305): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000640)=[{0x0}], 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff}) shutdown(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x0, 0x0) unshare(0x20000400) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) ioctl$TCFLSH(r1, 0x541b, 0x8000000000000002) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x1) 14.95574143s ago: executing program 3 (id=307): chdir(0x0) fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="61124c00000000006113300000000000bf300000000000002500050007ffffffbd2001000000000095002000000000006916320000000000bf670000000000000407000072c960354607feff00200000540700000ee60090bf050000000000000c5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f055af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6901fcecc8158f0200000000c8fb735fd552bdc268694aeb0763f65e439ec1120843e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3abd5dedd3f7d2cf5834f2af97787f696649a46e17e090000000000000045eac1720e83b7838e3eede14308d582685e1becd6f35154bcb400000000000000000000008129277dc467148670ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbfea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f14c3f2ed6c64ec90000022d600000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca51c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233ba3d4ce26ed703dcb9fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c17d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be6910023a26faea764fae160cc2260bd02816291"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, &(0x7f0000000280)=""/135, &(0x7f0000000340), &(0x7f0000000380), 0x80, r1}, 0x38) 13.65804776s ago: executing program 4 (id=315): unshare(0x400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e, 0x0, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0100000003"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r2, &(0x7f0000000240), 0x0, 0x4}, 0x20) 12.061929581s ago: executing program 4 (id=319): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r0, &(0x7f0000000100)=""/9, 0xfffffd87) write$tun(r0, 0x0, 0xffe) 11.790911316s ago: executing program 1 (id=320): openat(0xffffffffffffffff, 0x0, 0x141c00, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x72e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) 11.351544515s ago: executing program 4 (id=322): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x3f}, 0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$9p(0x0, 0x8db4b180104f9007) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r0}}, 0x1c) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) 11.193922907s ago: executing program 2 (id=324): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 9.835010649s ago: executing program 4 (id=325): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/dev0/control\x00', 0x2, 0x0) 9.672758934s ago: executing program 2 (id=327): bind$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000340)=0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)='}m', 0x2}], 0x1) 9.601524579s ago: executing program 1 (id=328): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201080a, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) ptrace$setregset(0x4205, 0x0, 0x202, &(0x7f00000000c0)={0x0}) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x3, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x181081) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x1, 0x3, 0x8, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r3, 0x40026f34, &(0x7f0000000040)=0x1) syz_open_procfs(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='tmpfs\x00', 0x20849b, 0x0) 9.493977881s ago: executing program 0 (id=330): setns(0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 9.373682116s ago: executing program 2 (id=331): unshare(0x400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e, 0x0, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0100000003"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r2, &(0x7f0000000240), 0x0, 0x4}, 0x20) 8.328125274s ago: executing program 1 (id=332): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x34}}, 0x4004000) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) 8.279883501s ago: executing program 3 (id=333): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xf811, 0xffffffff}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000780)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x4e20, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xda90) accept4(r2, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 7.962703764s ago: executing program 5 (id=334): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/kernel/sem\x00', 0x1, 0x0) write(r0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r1, 0x5) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) 7.557301881s ago: executing program 2 (id=335): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r0, &(0x7f0000000100)=""/9, 0xfffffd87) write$tun(r0, 0x0, 0xffe) 6.811967968s ago: executing program 1 (id=336): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r1, r2, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r1, &(0x7f0000000640)='\x00', &(0x7f0000000680)=@tcp=r0}, 0x20) sendto(r0, &(0x7f0000000700)="010203", 0x3, 0x0, 0x0, 0x0) 6.758277692s ago: executing program 2 (id=337): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x5, 0x559a, &(0x7f0000005680)="$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") fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100)={[{@block_validity}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@discard}, {@prjquota}]}, 0x1, 0x4a0, &(0x7f0000000b80)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x59b801, 0x1ce) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x8, 0x3ff, 0x0, 0x8, 0x7}) lseek(0xffffffffffffffff, 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000680)="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", 0x170}], 0x1, 0x5405, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x14800, &(0x7f0000000140)={[{@noauto_da_alloc}, {@dioread_lock}, {@oldalloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x5b9, &(0x7f0000000680)="$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") open$dir(0x0, 0x311100, 0xa) truncate(0x0, 0x3000000) syz_mount_image$exfat(0x0, &(0x7f0000000540)='./bus\x00', 0x38c180a, 0x0, 0x0, 0x0, &(0x7f0000000240)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) openat$nullb(0xffffffffffffff9c, 0x0, 0x6200, 0x0) sendfile(r3, r0, 0x0, 0x4000020fffe82) openat(0xffffffffffffff9c, 0x0, 0x109042, 0x23) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b8) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x17f18a7, 0x0, 0x83, 0x0, &(0x7f0000000480)) rmdir(&(0x7f0000000000)='./bus\x00') readv(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7a680000) ioctl$F2FS_IOC_COMPRESS_FILE(r2, 0xf518, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000540)='./bus\x00', 0x38c180a, 0x0, 0x0, 0x0, &(0x7f0000000240)) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1301c29, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0, @ANYBLOB=',gid=ignore,adinicb,\x00'], 0x1, 0xc32, &(0x7f0000001a40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='A\x00', 0x1ff) mount$bind(0x0, 0x0, 0x0, 0x3, 0x0) 6.213032382s ago: executing program 5 (id=338): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1b5) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) 6.084389379s ago: executing program 0 (id=339): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 5.92853468s ago: executing program 5 (id=340): openat(0xffffffffffffffff, 0x0, 0x141c00, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x72e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) 5.849302463s ago: executing program 0 (id=341): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000480)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0/virtual_scsi_port\x00') 5.429408648s ago: executing program 1 (id=342): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x80000001, @empty, 0x2}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000800)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) write$P9_RSETATTR(r1, &(0x7f00000000c0)={0x7, 0x1b, 0x2}, 0xffac) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000400)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={r7, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x8}}, 0x0, 0x0, 0x0, 0x4, 0x94}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0xcb, &(0x7f0000000000)={[{@cruft}, {@check_strict}, {@map_off}, {@showassoc}, {@utf8}, {@map_normal}]}, 0x1, 0x56e, &(0x7f0000000b00)="$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") fadvise64(r1, 0x2, 0x7, 0x5) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r8, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@report={0x9c, 0x29, 0x1, 0x70bd2b, 0x25dfdbfe, {0x33, {@in=@rand_addr=0x64010102, @in6=@remote, 0x7ff, 0x6, 0x4e23, 0x0, 0x0, 0xb0, 0xa0, 0x90}}, [@algo_auth={0x48, 0x1, {{'blake2s-160-generic\x00'}}}, @iptfs_max_qsize={0x8, 0x28, 0xdc}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4008815}, 0x4000) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x17}, 0x3}}}, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0x4, @empty, 0x6}}, 0x0, 0x9, 0xffff1896, 0x104, 0x25, 0x7fff, 0x9}, 0x9c) 2.757816138s ago: executing program 0 (id=343): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='}m', 0x2}], 0x1) 2.517580171s ago: executing program 5 (id=344): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201080a, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) ptrace$setregset(0x4205, 0x0, 0x202, &(0x7f00000000c0)={0x0}) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x3, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x181081) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x1, 0x3, 0x8, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r3, 0x40026f34, &(0x7f0000000040)=0x1) syz_open_procfs(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='tmpfs\x00', 0x20849b, 0x0) 2.332422229s ago: executing program 0 (id=345): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x70, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13c4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xffffffff}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x70}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000b00)='INVITE sip:test@127.0.0.1 SIP/2.0\r\nCall-ID: test12345\r', 0x36, 0x0, &(0x7f0000000c00)={0x2, 0x13c4, @loopback}, 0x10) 1.991088845s ago: executing program 4 (id=346): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, 0x0, 0x0) shutdown(r6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f00000000c0)="510003000000", 0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x570, 0x2c0, 0x0, 0xffffffff, 0x0, 0x360, 0x4d8, 0x4d8, 0xffffffff, 0x4d8, 0x4d8, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x288, 0x2c0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e494b2bfd892aa74009b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f5d010000fa5fad26a5925da2650a12bdf9d29248ae63e2349b63b5fb75ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x79, 0x2, {0x1}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_to_bridge\x00', {0x5, 0x1, 0x24, 0xffffffff, 0x4da01491, 0x5, 0x3bde, 0x1ff, 0x78, 0x40}, {0xb}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x1, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @port=0x4e22, @port=0x4f23}}}}, {{@ip={@empty, @remote, 0xffffffff, 0xffffff00, 'vcan0\x00', 'pimreg1\x00', {}, {0xff}, 0x32, 0x2, 0x2d}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5d0) 1.304061549s ago: executing program 2 (id=347): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000180)={[{@data_err_ignore}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}]}, 0x9, 0x624, &(0x7f0000001340)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/214, 0xd6, 0x1, 0x0, 0x0) shutdown(r3, 0x1) 1.302809842s ago: executing program 5 (id=348): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x34}}, 0x4004000) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) 1.032390515s ago: executing program 0 (id=349): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.030604815s ago: executing program 1 (id=350): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/kernel/sem\x00', 0x1, 0x0) write(r0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) 853.776157ms ago: executing program 3 (id=351): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/dev0/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='rd_pages=1024\n\x00', 0xf) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0/dev0/enable\x00', 0x2, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) 1.967256ms ago: executing program 4 (id=352): prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r0 = socket$inet6(0xa, 0xb0c8d8ad4c48b294, 0x3) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000480)={'filter\x00', 0xb001, 0x4, 0x418, 0x0, 0x110, 0x220, 0x330, 0x330, 0x330, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @loopback, @rand_addr=0x74010102, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}}}, {{@arp={@remote, @local, 0x0, 0xff000000, 0x1, 0x6, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0xfff8, 0xfff7, 0x1, 0x6, 0x3, 0x5, 'gretap0\x00', 'dvmrp1\x00', {0x7f}, {0xff}, 0x0, 0x5}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @private=0xa010100, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) setrlimit(0x4, &(0x7f0000000040)={0x40, 0xfffffffffffffff7}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x2500}], 0x0, 0xa}, 0x20) socket$inet6(0xa, 0x4, 0x4) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000370400008000fedbdf2500000000", @ANYRES32, @ANYBLOB="cb04050000000000240012800b00010069703667726500009e603bdd44085270dbc9fe6145140002", @ANYRES32, @ANYRESDEC=r3, @ANYRESHEX=r0, @ANYRES64=r6], 0x44}, 0x1, 0x0, 0x0, 0xc8d4}, 0x0) 0s ago: executing program 5 (id=353): socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.28' (ED25519) to the list of known hosts. [ 77.712476][ T5600] cgroup: Unknown subsys name 'net' [ 77.807175][ T5600] cgroup: Unknown subsys name 'cpuset' [ 77.811044][ T5600] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.288472][ T5600] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.860309][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.864727][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.868516][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.869385][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.869418][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.869822][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.872652][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.872842][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.873767][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.875332][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.877218][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.878005][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.881282][ T4929] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.923493][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.933621][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.935980][ T5627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 81.937371][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.937995][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.938206][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.938639][ T5627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 81.940079][ T5627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 81.948856][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.949862][ T5631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.951507][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.952912][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 81.954716][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.955020][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 81.955530][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.022693][ T4929] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.023551][ T4929] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.922885][ T4929] Bluetooth: hci0: command tx timeout [ 83.923010][ T4929] Bluetooth: hci1: command tx timeout [ 84.003189][ T4929] Bluetooth: hci2: command tx timeout [ 84.003317][ T4929] Bluetooth: hci5: command tx timeout [ 84.003504][ T5623] Bluetooth: hci4: command tx timeout [ 84.083817][ T5623] Bluetooth: hci3: command tx timeout [ 84.308198][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.308313][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.308453][ T5618] bridge_slave_0: entered allmulticast mode [ 84.310489][ T5618] bridge_slave_0: entered promiscuous mode [ 84.382781][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.382966][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.383102][ T5618] bridge_slave_1: entered allmulticast mode [ 84.385104][ T5618] bridge_slave_1: entered promiscuous mode [ 84.526134][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.526302][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.526413][ T5619] bridge_slave_0: entered allmulticast mode [ 84.527961][ T5619] bridge_slave_0: entered promiscuous mode [ 84.530774][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.530933][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.531338][ T5619] bridge_slave_1: entered allmulticast mode [ 84.533594][ T5619] bridge_slave_1: entered promiscuous mode [ 84.608041][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.608150][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.609573][ T5620] bridge_slave_0: entered allmulticast mode [ 84.611216][ T5620] bridge_slave_0: entered promiscuous mode [ 84.650254][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.681180][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.681345][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.681457][ T5620] bridge_slave_1: entered allmulticast mode [ 84.683959][ T5620] bridge_slave_1: entered promiscuous mode [ 84.704373][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.708225][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.711478][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.803658][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.803782][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.804195][ T5615] bridge_slave_0: entered allmulticast mode [ 84.806147][ T5615] bridge_slave_0: entered promiscuous mode [ 84.853225][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.871103][ T5618] team0: Port device team_slave_0 added [ 84.874601][ T5619] team0: Port device team_slave_0 added [ 84.875685][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.875806][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.875947][ T5615] bridge_slave_1: entered allmulticast mode [ 84.879327][ T5615] bridge_slave_1: entered promiscuous mode [ 84.917599][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.919584][ T5618] team0: Port device team_slave_1 added [ 84.921787][ T5619] team0: Port device team_slave_1 added [ 84.946278][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.946382][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.946514][ T5614] bridge_slave_0: entered allmulticast mode [ 84.948238][ T5614] bridge_slave_0: entered promiscuous mode [ 85.031516][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.031679][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.031796][ T5614] bridge_slave_1: entered allmulticast mode [ 85.034555][ T5614] bridge_slave_1: entered promiscuous mode [ 85.054442][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.054458][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.054486][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.059076][ T5620] team0: Port device team_slave_0 added [ 85.088513][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.147504][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.147522][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.147544][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.162559][ T5620] team0: Port device team_slave_1 added [ 85.163679][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.163713][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.163742][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.168716][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.185547][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.185658][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.185801][ T5617] bridge_slave_0: entered allmulticast mode [ 85.188129][ T5617] bridge_slave_0: entered promiscuous mode [ 85.197748][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.219224][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.219242][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.219271][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.236195][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.236907][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.237329][ T5617] bridge_slave_1: entered allmulticast mode [ 85.240091][ T5617] bridge_slave_1: entered promiscuous mode [ 85.280181][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.331821][ T5615] team0: Port device team_slave_0 added [ 85.386988][ T5618] hsr_slave_0: entered promiscuous mode [ 85.388002][ T5618] hsr_slave_1: entered promiscuous mode [ 85.389552][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.389564][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.389585][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.404112][ T5615] team0: Port device team_slave_1 added [ 85.411344][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.448522][ T5614] team0: Port device team_slave_0 added [ 85.450193][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.450209][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.450238][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.486550][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.489338][ T5614] team0: Port device team_slave_1 added [ 85.590063][ T5619] hsr_slave_0: entered promiscuous mode [ 85.590916][ T5619] hsr_slave_1: entered promiscuous mode [ 85.591557][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 85.591618][ T5619] Cannot create hsr debugfs directory [ 85.617239][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.617253][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.617279][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.687839][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.687856][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.687886][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.695775][ T5620] hsr_slave_0: entered promiscuous mode [ 85.696874][ T5620] hsr_slave_1: entered promiscuous mode [ 85.697745][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 85.697768][ T5620] Cannot create hsr debugfs directory [ 85.710849][ T5617] team0: Port device team_slave_0 added [ 85.713126][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.713140][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.713172][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.771472][ T5617] team0: Port device team_slave_1 added [ 85.773436][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.773451][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.773480][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.959169][ T5615] hsr_slave_0: entered promiscuous mode [ 85.960019][ T5615] hsr_slave_1: entered promiscuous mode [ 85.960853][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 85.960875][ T5615] Cannot create hsr debugfs directory [ 85.998170][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.998190][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.998220][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.002851][ T5627] Bluetooth: hci0: command tx timeout [ 86.002988][ T5623] Bluetooth: hci1: command tx timeout [ 86.062436][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.062456][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.062480][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.082226][ T5627] Bluetooth: hci5: command tx timeout [ 86.082260][ T5627] Bluetooth: hci2: command tx timeout [ 86.082481][ T5623] Bluetooth: hci4: command tx timeout [ 86.138788][ T10] cfg80211: failed to load regulatory.db [ 86.162608][ T5623] Bluetooth: hci3: command tx timeout [ 86.235952][ T5614] hsr_slave_0: entered promiscuous mode [ 86.237112][ T5614] hsr_slave_1: entered promiscuous mode [ 86.237790][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 86.237812][ T5614] Cannot create hsr debugfs directory [ 86.382758][ T5617] hsr_slave_0: entered promiscuous mode [ 86.383650][ T5617] hsr_slave_1: entered promiscuous mode [ 86.384244][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 86.384265][ T5617] Cannot create hsr debugfs directory [ 86.594523][ T5618] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 86.600910][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.644598][ T5618] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 86.648548][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.649395][ T5618] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 86.655213][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.701521][ T5618] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 86.712845][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.882473][ T5619] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.887771][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.888884][ T5619] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.914411][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.915325][ T5619] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.920310][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.948383][ T5619] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.955798][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.049860][ T5620] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.055446][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.056365][ T5620] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.063340][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.065681][ T5620] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.071666][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.087831][ T5620] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.099771][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.167505][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.217481][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.220067][ T5615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.235094][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.252637][ T5615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.255868][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.259750][ T1477] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.259847][ T1477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.284992][ T5615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.297011][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.304699][ T5615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.316963][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.354435][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.354534][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.425777][ T5614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.429892][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.430781][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.441268][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.473331][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.477606][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.478400][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.481823][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.493161][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.637123][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.640515][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.645629][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.655036][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.674014][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.677401][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.678267][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.681068][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.691032][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.745716][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.761474][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.761572][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.803715][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.803934][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.917829][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.976393][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.976503][ T3304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.980694][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.024208][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.024317][ T3304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.046947][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.060354][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.060434][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.078041][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.083816][ T5623] Bluetooth: hci1: command tx timeout [ 88.083850][ T5623] Bluetooth: hci0: command tx timeout [ 88.114266][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.114368][ T3304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.159357][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.163107][ T4929] Bluetooth: hci4: command tx timeout [ 88.163143][ T4929] Bluetooth: hci2: command tx timeout [ 88.163169][ T4929] Bluetooth: hci5: command tx timeout [ 88.218892][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.219031][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.243064][ T5623] Bluetooth: hci3: command tx timeout [ 88.274199][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.274316][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.378477][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.540592][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.625126][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.625264][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.681028][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.681139][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.782479][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.561609][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.876991][ T5618] veth0_vlan: entered promiscuous mode [ 89.929069][ T5618] veth1_vlan: entered promiscuous mode [ 90.033298][ T5618] veth0_macvtap: entered promiscuous mode [ 90.075695][ T5618] veth1_macvtap: entered promiscuous mode [ 90.148043][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.163415][ T4929] Bluetooth: hci1: command tx timeout [ 90.163470][ T5623] Bluetooth: hci0: command tx timeout [ 90.216489][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.247019][ T5623] Bluetooth: hci5: command tx timeout [ 90.247055][ T5623] Bluetooth: hci2: command tx timeout [ 90.247081][ T5623] Bluetooth: hci4: command tx timeout [ 90.270965][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.332313][ T4929] Bluetooth: hci3: command tx timeout [ 90.355367][ T1477] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.409509][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.506681][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.533212][ T143] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.581159][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.595387][ T5620] veth0_vlan: entered promiscuous mode [ 90.636012][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.636038][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.642222][ T143] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.694646][ T5620] veth1_vlan: entered promiscuous mode [ 90.731327][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.731352][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.749861][ T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.777974][ T5615] veth0_vlan: entered promiscuous mode [ 90.783693][ T5619] veth0_vlan: entered promiscuous mode [ 90.810743][ T5620] veth0_macvtap: entered promiscuous mode [ 90.845019][ T5620] veth1_macvtap: entered promiscuous mode [ 90.847111][ T5614] veth0_vlan: entered promiscuous mode [ 90.860209][ T5618] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.893592][ T5619] veth1_vlan: entered promiscuous mode [ 90.901790][ T5615] veth1_vlan: entered promiscuous mode [ 90.926419][ T5614] veth1_vlan: entered promiscuous mode [ 90.970708][ T5617] veth0_vlan: entered promiscuous mode [ 91.017822][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.036471][ T5617] veth1_vlan: entered promiscuous mode [ 91.061653][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.116199][ T5619] veth0_macvtap: entered promiscuous mode [ 91.118646][ T5615] veth0_macvtap: entered promiscuous mode [ 91.149762][ T5615] veth1_macvtap: entered promiscuous mode [ 91.156194][ T5619] veth1_macvtap: entered promiscuous mode [ 91.173726][ T5614] veth0_macvtap: entered promiscuous mode [ 91.176257][ T1111] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.196844][ T5614] veth1_macvtap: entered promiscuous mode [ 91.229051][ T5617] veth0_macvtap: entered promiscuous mode [ 91.253346][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.253412][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.255465][ T5617] veth1_macvtap: entered promiscuous mode [ 91.291278][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.300518][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.307553][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.344936][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.359845][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.361063][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.361081][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.388007][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.404111][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.427364][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.467000][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.467024][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.623016][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.626551][ T143] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.626639][ T143] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.626682][ T143] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.626724][ T143] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.626765][ T143] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.626806][ T143] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.626852][ T143] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.626894][ T143] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.626935][ T143] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.626976][ T143] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.627017][ T143] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.627058][ T143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.627100][ T143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.627142][ T143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.627183][ T143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.755521][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.755546][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.795685][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.915123][ T1477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.915148][ T1477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.954157][ T5858] warning: `syz.5.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.037061][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.037081][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.181629][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.181649][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.304122][ T3304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.304146][ T3304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.467068][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.467093][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.620819][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.620845][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.662913][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 94.738247][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.738266][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.872323][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 94.873963][ T10] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 94.912359][ T10] usb 6-1: config index 0 descriptor too short (expected 27632, got 27) [ 94.912396][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.912423][ T10] usb 6-1: config 0 has no interfaces? [ 94.912458][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.971125][ T10] usb 6-1: config 0 descriptor?? [ 95.213465][ T30] usb 6-1: USB disconnect, device number 2 [ 95.563154][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.712619][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 95.719285][ T25] usb 4-1: New USB device found, idVendor=06cb, idProduct=0013, bcdDevice=ec.ae [ 95.737526][ T25] usb 4-1: config 15 has an invalid interface number: 151 but max is 0 [ 95.737560][ T25] usb 4-1: config 15 has no interface number 0 [ 95.737595][ T25] usb 4-1: config 15 interface 151 has no altsetting 0 [ 95.776163][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.776196][ T25] usb 4-1: Product: syz [ 95.776213][ T25] usb 4-1: Manufacturer: syz [ 95.776230][ T25] usb 4-1: SerialNumber: syz [ 96.142051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 97.477860][ T25] usb 4-1: selecting invalid altsetting 1 [ 97.477890][ T25] usb 4-1: Can not set alternate setting to 1, error: -22 [ 97.477916][ T25] synaptics_usb 4-1:15.151: probe with driver synaptics_usb failed with error -22 [ 97.503905][ T25] usb 4-1: USB disconnect, device number 2 [ 98.036115][ T5889] FAULT_INJECTION: forcing a failure. [ 98.036115][ T5889] name failslab, interval 1, probability 0, space 0, times 1 [ 98.036155][ T5889] CPU: 1 UID: 0 PID: 5889 Comm: syz.5.16 Not tainted syzkaller #0 PREEMPT(full) [ 98.036183][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 98.036205][ T5889] Call Trace: [ 98.036215][ T5889] [ 98.036226][ T5889] dump_stack_lvl+0xe8/0x150 [ 98.036268][ T5889] should_fail_ex+0x410/0x560 [ 98.036304][ T5889] should_failslab+0xa8/0x100 [ 98.036337][ T5889] ? do_getname+0x2e/0x250 [ 98.036369][ T5889] kmem_cache_alloc_noprof+0xa1/0x600 [ 98.036408][ T5889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.036438][ T5889] ? do_futex+0x3e7/0x4e0 [ 98.036472][ T5889] ? do_getname+0x2e/0x250 [ 98.036510][ T5889] do_getname+0x2e/0x250 [ 98.036539][ T5889] ? getname_flags+0x11/0x20 [ 98.036574][ T5889] do_sys_openat2+0xcc/0x200 [ 98.036605][ T5889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.036635][ T5889] ? __se_sys_futex+0x3a8/0x450 [ 98.036668][ T5889] ? __pfx_do_sys_openat2+0x10/0x10 [ 98.036707][ T5889] ? rcu_is_watching+0x16/0xb0 [ 98.036738][ T5889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.036772][ T5889] __x64_sys_openat+0x138/0x170 [ 98.036811][ T5889] do_syscall_64+0x166/0x520 [ 98.036849][ T5889] ? trace_irq_disable+0x3b/0x140 [ 98.036875][ T5889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.036906][ T5889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.036931][ T5889] RIP: 0033:0x7fbb2cd9e159 [ 98.036954][ T5889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.036974][ T5889] RSP: 002b:00007fbb2dc52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 98.037001][ T5889] RAX: ffffffffffffffda RBX: 00007fbb2d025fa0 RCX: 00007fbb2cd9e159 [ 98.037020][ T5889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 98.037036][ T5889] RBP: 00007fbb2ce3506b R08: 0000000000000000 R09: 0000000000000000 [ 98.037052][ T5889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.037068][ T5889] R13: 00007fbb2d026038 R14: 00007fbb2d025fa0 R15: 00007ffd6a4322e8 [ 98.037106][ T5889] [ 99.927743][ T5903] loop5: detected capacity change from 0 to 164 [ 99.928634][ T5903] ======================================================= [ 99.928634][ T5903] WARNING: The mand mount option has been deprecated and [ 99.928634][ T5903] and is ignored by this kernel. Remove the mand [ 99.928634][ T5903] option from the mount to silence this warning. [ 99.928634][ T5903] ======================================================= [ 100.019956][ T5903] isofs_fill_super: root inode is not a directory. Corrupted media? [ 100.586602][ T5922] loop3: detected capacity change from 0 to 512 [ 100.587650][ T5922] vfat: Unknown parameter '' [ 100.888974][ T31] audit: type=1326 audit(1790328676.290:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.0.10" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405599e159 code=0x7ffc0000 [ 100.889535][ T31] audit: type=1326 audit(1790328676.290:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.0.10" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f405599e159 code=0x7ffc0000 [ 100.890305][ T31] audit: type=1326 audit(1790328676.290:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.0.10" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405599e159 code=0x7ffc0000 [ 100.890526][ T31] audit: type=1326 audit(1790328676.290:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.0.10" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f405599e159 code=0x7ffc0000 [ 100.896652][ T31] audit: type=1326 audit(1790328676.300:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.0.10" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405599e159 code=0x7ffc0000 [ 100.908966][ T31] audit: type=1326 audit(1790328676.300:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.0.10" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405599e159 code=0x7ffc0000 [ 100.909891][ T31] audit: type=1326 audit(1790328676.300:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.0.10" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f405599e159 code=0x7ffc0000 [ 100.920074][ T31] audit: type=1326 audit(1790328676.330:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.0.10" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405599e159 code=0x7ffc0000 [ 100.920160][ T31] audit: type=1326 audit(1790328676.330:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.0.10" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405599e159 code=0x7ffc0000 [ 100.923106][ T31] audit: type=1326 audit(1790328676.330:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.0.10" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f405599e159 code=0x7ffc0000 [ 103.242590][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 103.652127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 104.510762][ T5940] bridge0: port 3(syz_tun) entered blocking state [ 104.512708][ T5940] bridge0: port 3(syz_tun) entered disabled state [ 104.512912][ T5940] syz_tun: entered allmulticast mode [ 104.518142][ T5940] syz_tun: entered promiscuous mode [ 104.524586][ T5940] bridge0: port 3(syz_tun) entered blocking state [ 104.524711][ T5940] bridge0: port 3(syz_tun) entered forwarding state [ 104.530461][ T5934] netlink: 28 bytes leftover after parsing attributes in process `syz.1.28'. [ 104.530613][ T5934] netlink: 'syz.1.28': attribute type 7 has an invalid length. [ 104.530629][ T5934] netlink: 'syz.1.28': attribute type 8 has an invalid length. [ 104.530644][ T5934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 104.557927][ T5934] ip6gretap0: entered promiscuous mode [ 104.582327][ T5934] syz_tun: entered promiscuous mode [ 104.591838][ T5934] gretap0: entered promiscuous mode [ 105.392415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 105.802103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.337034][ T5956] x_tables: unsorted entry at hook 3 [ 107.334174][ T5966] loop1: detected capacity change from 0 to 512 [ 107.335898][ T5966] vfat: Unknown parameter '' [ 114.451790][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 114.451812][ T31] audit: type=1804 audit(1790328689.850:14): pid=6015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.54" name="/newroot/11/file0" dev="tmpfs" ino=80 res=1 errno=0 [ 114.719880][ T6019] netlink: 'syz.1.57': attribute type 1 has an invalid length. [ 114.719936][ T6019] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 114.719949][ T6019] IPv6: NLM_F_CREATE should be set when creating new route [ 115.054621][ T6034] gadgetfs: bound to dummy_udc driver [ 116.264865][ T6046] netlink: 20 bytes leftover after parsing attributes in process `syz.5.59'. [ 118.189066][ T1904] IPVS: starting estimator thread 0... [ 118.272181][ T6063] IPVS: using max 25 ests per chain, 60000 per kthread [ 118.274575][ T6067] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 121.642813][ T6085] ptp ptp0: only physical clock in use now [ 121.965400][ T31] audit: type=1804 audit(1790328697.330:15): pid=6092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.79" name="/newroot/13/file0" dev="tmpfs" ino=89 res=1 errno=0 [ 124.132126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 127.663628][ T31] audit: type=1326 audit(1790328703.070:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.4.75" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26c4f9e159 code=0x0 [ 129.099518][ T6144] overlayfs: missing 'lowerdir' [ 129.119443][ T6142] loop4: detected capacity change from 0 to 512 [ 129.370803][ T6142] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 129.370827][ T6142] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 130.187942][ T6142] EXT4-fs (loop4): 1 truncate cleaned up [ 130.215425][ T6142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.241037][ T6133] netlink: 20 bytes leftover after parsing attributes in process `'. [ 130.312578][ T6156] Zero length message leads to an empty skb [ 130.312786][ T6156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.95'. [ 130.561863][ T31] audit: type=1326 audit(1790328705.960:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.3.96" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f327219e159 code=0x0 [ 131.211197][ T5619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.184768][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.184883][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.962110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 135.235485][ T6188] syzkaller0: entered promiscuous mode [ 135.235512][ T6188] syzkaller0: entered allmulticast mode [ 135.512410][ T31] audit: type=1800 audit(1790328710.910:18): pid=6199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.107" name=08 dev="sda1" ino=2051 res=0 errno=0 [ 135.777707][ T6208] loop1: detected capacity change from 0 to 164 [ 135.835163][ T31] audit: type=1326 audit(1790328711.240:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.0.110" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f405599e159 code=0x0 [ 135.837724][ T6208] isofs_fill_super: root inode is not a directory. Corrupted media? [ 137.951438][ T6239] loop1: detected capacity change from 0 to 512 [ 138.036156][ T6239] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.116: bg 0: block 5: invalid block bitmap [ 138.036362][ T6239] loop1: lost filesystem error report for type 5 error -117 [ 138.042133][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 138.042156][ C0] EXT4-fs (loop1): initial error at time 1790328713: ext4_validate_block_bitmap:436 [ 138.042183][ C0] EXT4-fs (loop1): last error at time 1790328713: ext4_validate_block_bitmap:436 [ 138.155780][ T6239] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 138.155811][ T6239] loop1: lost filesystem error report for type 5 error -117 [ 138.176432][ T6239] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.116: invalid indirect mapped block 3 (level 2) [ 138.176652][ T6239] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 138.182428][ T6239] EXT4-fs (loop1): 1 orphan inode deleted [ 138.182451][ T6239] EXT4-fs (loop1): 1 truncate cleaned up [ 138.208039][ T6239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.435931][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.764751][ T6269] netlink: 128 bytes leftover after parsing attributes in process `syz.5.122'. [ 141.764822][ T6269] netlink: 20 bytes leftover after parsing attributes in process `syz.5.122'. [ 142.534746][ T31] audit: type=1800 audit(1790328717.940:20): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.124" name=08 dev="sda1" ino=2051 res=0 errno=0 [ 142.663625][ T6277] loop0: detected capacity change from 0 to 164 [ 142.765173][ T6277] isofs_fill_super: root inode is not a directory. Corrupted media? [ 143.566627][ T6295] loop3: detected capacity change from 0 to 164 [ 143.620464][ T6295] isofs_fill_super: root inode is not a directory. Corrupted media? [ 146.317531][ T6313] netlink: 20 bytes leftover after parsing attributes in process `syz.4.132'. [ 146.619844][ T6321] loop1: detected capacity change from 0 to 512 [ 146.706743][ T6321] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.135: bg 0: block 5: invalid block bitmap [ 146.706781][ T6321] loop1: lost filesystem error report for type 5 error -117 [ 146.710815][ T6321] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 146.710842][ T6321] loop1: lost filesystem error report for type 5 error -117 [ 146.712068][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 146.712092][ C1] EXT4-fs (loop1): initial error at time 1790328722: ext4_validate_block_bitmap:436 [ 146.712120][ C1] EXT4-fs (loop1): last error at time 1790328722: ext4_mb_clear_bb:6680 [ 146.752866][ T6321] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.135: invalid indirect mapped block 3 (level 2) [ 146.752906][ T6321] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 146.759426][ T6321] EXT4-fs (loop1): 1 orphan inode deleted [ 146.759465][ T6321] EXT4-fs (loop1): 1 truncate cleaned up [ 146.803758][ T6321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.181893][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.267662][ T6354] loop1: detected capacity change from 0 to 164 [ 149.312747][ T6354] isofs_fill_super: root inode is not a directory. Corrupted media? [ 151.472615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 154.290467][ T6373] netlink: 20 bytes leftover after parsing attributes in process `syz.1.148'. [ 155.710760][ T6398] loop1: detected capacity change from 0 to 512 [ 155.719654][ T6398] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 155.740284][ T6398] EXT4-fs (loop1): 1 truncate cleaned up [ 155.792443][ T6398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.856693][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.412166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 157.822402][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 159.749104][ T6413] loop2: detected capacity change from 0 to 164 [ 159.840517][ T6413] isofs_fill_super: root inode is not a directory. Corrupted media? [ 161.031533][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.5.162'. [ 161.997027][ T31] audit: type=1326 audit(1790328737.400:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.0.165" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405599e159 code=0x7ffc0000 [ 161.998872][ T31] audit: type=1326 audit(1790328737.400:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.0.165" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405599e159 code=0x7ffc0000 [ 162.003540][ T31] audit: type=1326 audit(1790328737.410:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.0.165" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f405599e159 code=0x7ffc0000 [ 162.003596][ T31] audit: type=1326 audit(1790328737.410:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.0.165" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405599e159 code=0x7ffc0000 [ 162.003644][ T31] audit: type=1326 audit(1790328737.410:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.0.165" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405599e159 code=0x7ffc0000 [ 162.003995][ T31] audit: type=1326 audit(1790328737.410:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.0.165" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f405599e159 code=0x7ffc0000 [ 162.006244][ T31] audit: type=1326 audit(1790328737.410:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.0.165" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405599e159 code=0x7ffc0000 [ 162.006610][ T31] audit: type=1326 audit(1790328737.410:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.0.165" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f405599e159 code=0x7ffc0000 [ 162.006836][ T31] audit: type=1326 audit(1790328737.410:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.0.165" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405599e159 code=0x7ffc0000 [ 162.314979][ T6434] loop0: detected capacity change from 0 to 512 [ 162.318324][ T6434] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 162.361477][ T6434] EXT4-fs (loop0): 1 truncate cleaned up [ 162.389184][ T6434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.425464][ T5620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.569803][ T6459] FAULT_INJECTION: forcing a failure. [ 164.569803][ T6459] name failslab, interval 1, probability 0, space 0, times 0 [ 164.569897][ T6459] CPU: 1 UID: 0 PID: 6459 Comm: syz.4.163 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.569933][ T6459] Tainted: [L]=SOFTLOCKUP [ 164.569943][ T6459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 164.569958][ T6459] Call Trace: [ 164.569969][ T6459] [ 164.569980][ T6459] dump_stack_lvl+0xe8/0x150 [ 164.570025][ T6459] should_fail_ex+0x410/0x560 [ 164.570068][ T6459] ? alloc_vmap_area+0x21c/0x1420 [ 164.570106][ T6459] should_failslab+0xa8/0x100 [ 164.570141][ T6459] ? alloc_vmap_area+0x21c/0x1420 [ 164.570176][ T6459] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 164.570224][ T6459] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 164.570251][ T6459] ? alloc_vmap_area+0x21c/0x1420 [ 164.570296][ T6459] alloc_vmap_area+0x21c/0x1420 [ 164.570346][ T6459] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.570382][ T6459] ? __pfx_alloc_vmap_area+0x10/0x10 [ 164.570416][ T6459] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 164.570446][ T6459] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 164.570474][ T6459] ? __get_vm_area_node+0x155/0x2f0 [ 164.570517][ T6459] __get_vm_area_node+0x200/0x2f0 [ 164.570564][ T6459] __vmalloc_node_range_noprof+0x343/0x1540 [ 164.570606][ T6459] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 164.570640][ T6459] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.570682][ T6459] ? irqentry_exit+0x218/0x910 [ 164.570723][ T6459] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.570763][ T6459] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 164.570815][ T6459] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 164.570844][ T6459] __vmalloc_noprof+0xd2/0x120 [ 164.570884][ T6459] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 164.570918][ T6459] bpf_prog_alloc_no_stats+0x47/0x560 [ 164.570948][ T6459] ? bpf_prog_alloc+0x2a/0x1a0 [ 164.570982][ T6459] bpf_prog_alloc+0x3c/0x1a0 [ 164.571015][ T6459] bpf_prog_load+0x7f8/0x1c20 [ 164.571072][ T6459] ? __pfx_bpf_prog_load+0x10/0x10 [ 164.571123][ T6459] ? __sys_bpf+0x40e/0xd90 [ 164.571159][ T6459] __sys_bpf+0xd0d/0xd90 [ 164.571199][ T6459] ? __pfx___sys_bpf+0x10/0x10 [ 164.571232][ T6459] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.571263][ T6459] ? do_futex+0x3e7/0x4e0 [ 164.571331][ T6459] ? rcu_is_watching+0x16/0xb0 [ 164.571363][ T6459] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.571400][ T6459] __x64_sys_bpf+0xba/0xd0 [ 164.571431][ T6459] do_syscall_64+0x166/0x520 [ 164.571466][ T6459] ? trace_irq_disable+0x3b/0x140 [ 164.571493][ T6459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.571526][ T6459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.571553][ T6459] RIP: 0033:0x7f26c4f9e159 [ 164.571576][ T6459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.571597][ T6459] RSP: 002b:00007f26c5e85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 164.571625][ T6459] RAX: ffffffffffffffda RBX: 00007f26c5225fa0 RCX: 00007f26c4f9e159 [ 164.571644][ T6459] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 164.571661][ T6459] RBP: 00007f26c503506b R08: 0000000000000000 R09: 0000000000000000 [ 164.571677][ T6459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.571693][ T6459] R13: 00007f26c5226038 R14: 00007f26c5225fa0 R15: 00007ffc1b8f07f8 [ 164.571732][ T6459] [ 164.903638][ T6459] syz.4.163: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 165.064995][ T6459] CPU: 1 UID: 0 PID: 6459 Comm: syz.4.163 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.065031][ T6459] Tainted: [L]=SOFTLOCKUP [ 165.065041][ T6459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 165.065062][ T6459] Call Trace: [ 165.065072][ T6459] [ 165.065084][ T6459] dump_stack_lvl+0xe8/0x150 [ 165.065129][ T6459] warn_alloc+0x24d/0x270 [ 165.065157][ T6459] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.065188][ T6459] ? lockdep_hardirqs_on+0x7b/0x110 [ 165.065226][ T6459] ? __pfx_warn_alloc+0x10/0x10 [ 165.065250][ T6459] ? kfree+0x1c5/0x650 [ 165.065295][ T6459] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.065325][ T6459] ? __get_vm_area_node+0x219/0x2f0 [ 165.065372][ T6459] __vmalloc_node_range_noprof+0x36b/0x1540 [ 165.065414][ T6459] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.065459][ T6459] ? irqentry_exit+0x218/0x910 [ 165.065498][ T6459] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.065536][ T6459] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 165.065587][ T6459] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 165.065617][ T6459] __vmalloc_noprof+0xd2/0x120 [ 165.065656][ T6459] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 165.065690][ T6459] bpf_prog_alloc_no_stats+0x47/0x560 [ 165.065719][ T6459] ? bpf_prog_alloc+0x2a/0x1a0 [ 165.065752][ T6459] bpf_prog_alloc+0x3c/0x1a0 [ 165.065786][ T6459] bpf_prog_load+0x7f8/0x1c20 [ 165.065831][ T6459] ? __pfx_bpf_prog_load+0x10/0x10 [ 165.065880][ T6459] ? __sys_bpf+0x40e/0xd90 [ 165.065916][ T6459] __sys_bpf+0xd0d/0xd90 [ 165.065955][ T6459] ? __pfx___sys_bpf+0x10/0x10 [ 165.065988][ T6459] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.066018][ T6459] ? do_futex+0x3e7/0x4e0 [ 165.066092][ T6459] ? rcu_is_watching+0x16/0xb0 [ 165.066123][ T6459] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.066160][ T6459] __x64_sys_bpf+0xba/0xd0 [ 165.066190][ T6459] do_syscall_64+0x166/0x520 [ 165.066224][ T6459] ? trace_irq_disable+0x3b/0x140 [ 165.066250][ T6459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.066283][ T6459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.066309][ T6459] RIP: 0033:0x7f26c4f9e159 [ 165.066332][ T6459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.066352][ T6459] RSP: 002b:00007f26c5e85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 165.066378][ T6459] RAX: ffffffffffffffda RBX: 00007f26c5225fa0 RCX: 00007f26c4f9e159 [ 165.066396][ T6459] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 165.066413][ T6459] RBP: 00007f26c503506b R08: 0000000000000000 R09: 0000000000000000 [ 165.066428][ T6459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.066444][ T6459] R13: 00007f26c5226038 R14: 00007f26c5225fa0 R15: 00007ffc1b8f07f8 [ 165.066482][ T6459] [ 165.206120][ T6459] Mem-Info: [ 165.206142][ T6459] active_anon:9911 inactive_anon:2 isolated_anon:0 [ 165.206142][ T6459] active_file:307 inactive_file:60547 isolated_file:0 [ 165.206142][ T6459] unevictable:0 dirty:117 writeback:0 [ 165.206142][ T6459] slab_reclaimable:10592 slab_unreclaimable:98171 [ 165.206142][ T6459] mapped:36401 shmem:2728 pagetables:1253 [ 165.206142][ T6459] sec_pagetables:0 bounce:0 [ 165.206142][ T6459] kernel_misc_reclaimable:0 [ 165.206142][ T6459] free:1282369 free_pcp:22383 free_cma:0 [ 165.206208][ T6459] Node 0 active_anon:39644kB inactive_anon:8kB active_file:1228kB inactive_file:241976kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:145604kB dirty:468kB writeback:0kB shmem:10912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:12704kB pagetables:4864kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 165.206277][ T6459] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 165.206339][ T6459] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 165.206411][ T6459] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 165.206459][ T6459] Node 0 DMA32 free:1175980kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:39668kB inactive_anon:8kB active_file:1228kB inactive_file:241976kB unevictable:0kB writepending:468kB zspages:0kB present:3129332kB managed:2546900kB mlocked:0kB bounce:0kB free_pcp:87816kB local_pcp:42224kB free_cma:0kB [ 165.206528][ T6459] lowmem_reserve[]: 0 0 0 0 0 [ 165.206572][ T6459] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 165.206632][ T6459] lowmem_reserve[]: 0 0 0 0 0 [ 165.206667][ T6459] Node 1 Normal free:3939784kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 165.206717][ T6459] lowmem_reserve[]: 0 0 0 0 0 [ 165.206751][ T6459] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 165.206867][ T6459] Node 0 DMA32: 1626*4kB (UME) 1224*8kB (UME) 935*16kB (UM) 537*32kB (UM) 298*64kB (UME) 91*128kB (UME) 17*256kB (UME) 12*512kB (ME) 5*1024kB (M) 4*2048kB (UM) 262*4096kB (M) = 1176120kB [ 165.207029][ T6459] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 165.207131][ T6459] Node 1 Normal: 4*4kB (UM) 5*8kB (UM) 5*16kB (UM) 8*32kB (UM) 5*64kB (UM) 4*128kB (UM) 5*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 960*4096kB (M) = 3939784kB [ 165.207285][ T6459] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 165.282213][ T6459] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 165.282241][ T6459] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 165.282260][ T6459] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 165.282279][ T6459] 63579 total pagecache pages [ 165.282289][ T6459] 1 pages in swap cache [ 165.282298][ T6459] Free swap = 124992kB [ 165.282307][ T6459] Total swap = 124996kB [ 165.282319][ T6459] 2097051 pages RAM [ 165.282328][ T6459] 0 pages HighMem/MovableOnly [ 165.282337][ T6459] 428710 pages reserved [ 165.282347][ T6459] 0 pages cma reserved [ 166.865855][ T6483] loop4: detected capacity change from 0 to 1024 [ 166.889491][ T6483] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 166.923821][ T6483] JBD2: no valid journal superblock found [ 166.950625][ T6483] EXT4-fs (loop4): Could not load journal inode [ 167.899505][ T6485] loop1: detected capacity change from 0 to 164 [ 167.949191][ T6485] isofs_fill_super: root inode is not a directory. Corrupted media? [ 168.119017][ T6495] loop5: detected capacity change from 0 to 512 [ 168.149486][ T6495] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 168.196252][ T6496] se_device not configured yet, cannot port link [ 168.212988][ T6495] EXT4-fs (loop5): 1 truncate cleaned up [ 168.231023][ T6495] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.252228][ T5345] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 168.438697][ T5345] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 168.439890][ T5345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.439916][ T5345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.439948][ T5345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.504910][ T5345] usb 1-1: config 0 descriptor?? [ 169.345999][ T5618] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.655661][ T6515] 9p: Bad value for 'rfdno' [ 169.734614][ T5345] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 169.734768][ T5345] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 169.765338][ T5345] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0001/input/input5 [ 169.864751][ T5345] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 169.921901][ T5345] usb 1-1: USB disconnect, device number 2 [ 171.209818][ T6522] fido_id[6522]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 171.962485][ T6538] netlink: 20 bytes leftover after parsing attributes in process `syz.4.193'. [ 172.060990][ T6533] overlayfs: failed lookup in lower (newroot/32, name='file0', err=-40): overlapping layers [ 172.378445][ T6547] loop4: detected capacity change from 0 to 512 [ 172.401938][ T6547] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 172.403398][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.197'. [ 172.426355][ T6547] EXT4-fs (loop4): 1 truncate cleaned up [ 172.445924][ T6547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.669704][ T5619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.949967][ T6558] bridge0: port 3(syz_tun) entered blocking state [ 173.950090][ T6558] bridge0: port 3(syz_tun) entered disabled state [ 173.950296][ T6558] syz_tun: entered allmulticast mode [ 173.969305][ T6558] syz_tun: entered promiscuous mode [ 173.971937][ T6558] bridge0: port 3(syz_tun) entered blocking state [ 173.972136][ T6558] bridge0: port 3(syz_tun) entered forwarding state [ 174.122689][ T6562] loop0: detected capacity change from 0 to 164 [ 174.187909][ T6562] isofs_fill_super: root inode is not a directory. Corrupted media? [ 175.334459][ T25] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 175.717497][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 175.832187][ T25] usb 3-1: not running at top speed; connect to a high speed hub [ 175.832471][ T25] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=5d.b4 [ 175.865980][ T25] usb 3-1: config 1 has an invalid interface number: 177 but max is 0 [ 175.866316][ T25] usb 3-1: config 1 has no interface number 0 [ 175.878544][ T25] usb 3-1: config 1 interface 177 has no altsetting 0 [ 175.976222][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.976295][ T25] usb 3-1: Product: syz [ 175.976442][ T25] usb 3-1: Manufacturer: syz [ 175.976545][ T25] usb 3-1: SerialNumber: syz [ 177.482771][ T25] usb 3-1: can't set config #1, error -71 [ 177.485912][ T25] usb 3-1: USB disconnect, device number 2 [ 180.558732][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 180.743376][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 180.765939][ T25] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 180.797721][ T25] usb 6-1: config index 0 descriptor too short (expected 27632, got 27) [ 180.797743][ T25] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 180.797760][ T25] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.797776][ T25] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 180.797793][ T25] usb 6-1: config 1 has no interface number 0 [ 180.797827][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.907871][ T25] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 181.178391][ T6592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.178894][ T6592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.224211][ T6592] netlink: 'syz.5.208': attribute type 10 has an invalid length. [ 181.289924][ T6596] overlayfs: failed lookup in lower (newroot/36, name='file0', err=-40): overlapping layers [ 181.296597][ T6592] team0 (unregistering): Port device team_slave_0 removed [ 181.302405][ T1662] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 181.359932][ T6592] team0 (unregistering): Port device team_slave_1 removed [ 181.495912][ T6594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.496567][ T6594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.522987][ T25] snd_usb_pod 6-1:1.1: set_interface failed [ 181.523598][ T25] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 181.523902][ T25] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 181.559858][ T25] usb 6-1: USB disconnect, device number 3 [ 181.586485][ T6600] loop0: detected capacity change from 0 to 512 [ 181.591734][ T6600] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 181.643684][ T6600] EXT4-fs (loop0): 1 truncate cleaned up [ 181.652918][ T6600] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.948856][ T5620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.977810][ T6617] FAULT_INJECTION: forcing a failure. [ 184.977810][ T6617] name fail_futex, interval 1, probability 0, space 0, times 1 [ 184.977852][ T6617] CPU: 1 UID: 0 PID: 6617 Comm: syz.3.216 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.977884][ T6617] Tainted: [L]=SOFTLOCKUP [ 184.977893][ T6617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 184.977911][ T6617] Call Trace: [ 184.977921][ T6617] [ 184.977932][ T6617] dump_stack_lvl+0xe8/0x150 [ 184.977978][ T6617] should_fail_ex+0x410/0x560 [ 184.978013][ T6617] get_futex_key+0xf12/0x1580 [ 184.978056][ T6617] ? __pfx_get_futex_key+0x10/0x10 [ 184.978099][ T6617] futex_wake+0x119/0x5f0 [ 184.978142][ T6617] ? __pfx_futex_wake+0x10/0x10 [ 184.978182][ T6617] ? mm_exit_exec_release+0x20/0x290 [ 184.978213][ T6617] do_futex+0x458/0x4e0 [ 184.978242][ T6617] ? __pfx_do_futex+0x10/0x10 [ 184.978271][ T6617] ? __might_fault+0xaf/0x130 [ 184.978301][ T6617] mm_exit_exec_release+0x10d/0x290 [ 184.978329][ T6617] exit_mm+0x4d/0x2d0 [ 184.978350][ T6617] do_exit+0x6cd/0x2360 [ 184.978376][ T6617] ? __pfx_do_exit+0x10/0x10 [ 184.978398][ T6617] ? do_raw_spin_lock+0x12b/0x2f0 [ 184.978427][ T6617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.978455][ T6617] do_group_exit+0x22d/0x2f0 [ 184.978473][ T6617] ? _raw_spin_unlock_irq+0x23/0x50 [ 184.978505][ T6617] get_signal+0x121b/0x12c0 [ 184.978563][ T6617] arch_do_signal_or_restart+0xbb/0x860 [ 184.978608][ T6617] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 184.978665][ T6617] exit_to_user_mode_loop+0x10e/0x770 [ 184.978692][ T6617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.978728][ T6617] ? rcu_is_watching+0x16/0xb0 [ 184.978762][ T6617] do_syscall_64+0x328/0x520 [ 184.978795][ T6617] ? trace_irq_disable+0x3b/0x140 [ 184.978820][ T6617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.978852][ T6617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.978877][ T6617] RIP: 0033:0x7f327219e159 [ 184.978899][ T6617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.978919][ T6617] RSP: 002b:00007f3272fdb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 184.978945][ T6617] RAX: fffffffffffffe00 RBX: 00007f3272425fa8 RCX: 00007f327219e159 [ 184.978963][ T6617] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3272425fa8 [ 184.978979][ T6617] RBP: 00007f3272425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 184.978995][ T6617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.979009][ T6617] R13: 00007f3272426038 R14: 00007ffea76b25d0 R15: 00007ffea76b26b8 [ 184.979046][ T6617] [ 185.340852][ T1662] usb 2-1: unable to get BOS descriptor or descriptor too short [ 185.342382][ T1662] usb 2-1: New USB device found, idVendor=0582, idProduct=00c4, bcdDevice= 0.40 [ 185.362366][ T1662] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 185.362410][ T1662] usb 2-1: can't read configurations, error -71 [ 185.752184][ T5750] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 185.802571][ T5345] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 186.596644][ T5345] usb 6-1: unable to get BOS descriptor or descriptor too short [ 186.787302][ T5345] usb 6-1: not running at top speed; connect to a high speed hub [ 188.006607][ T5345] usb 6-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=5d.b4 [ 188.318850][ T5750] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 188.403439][ T5345] usb 6-1: config 1 has an invalid interface number: 177 but max is 0 [ 188.403475][ T5345] usb 6-1: config 1 has no interface number 0 [ 188.403509][ T5345] usb 6-1: config 1 interface 177 has no altsetting 0 [ 188.695220][ T5750] usb 5-1: unable to read config index 0 descriptor/all [ 188.695278][ T5750] usb 5-1: can't read configurations, error -71 [ 188.767372][ T5345] usb 6-1: string descriptor 0 read error: -71 [ 188.767529][ T5345] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.831208][ T5345] usb 6-1: can't set config #1, error -71 [ 188.850705][ T5345] usb 6-1: USB disconnect, device number 4 [ 189.850093][ T6648] loop5: detected capacity change from 0 to 164 [ 189.909138][ T6647] overlayfs: failed lookup in lower (newroot/43, name='file0', err=-40): overlapping layers [ 189.913305][ T6648] isofs_fill_super: root inode is not a directory. Corrupted media? [ 193.204127][ T6661] FAULT_INJECTION: forcing a failure. [ 193.204127][ T6661] name fail_futex, interval 1, probability 0, space 0, times 0 [ 193.204170][ T6661] CPU: 1 UID: 0 PID: 6661 Comm: syz.1.231 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.204202][ T6661] Tainted: [L]=SOFTLOCKUP [ 193.204225][ T6661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 193.204239][ T6661] Call Trace: [ 193.204249][ T6661] [ 193.204260][ T6661] dump_stack_lvl+0xe8/0x150 [ 193.204303][ T6661] should_fail_ex+0x410/0x560 [ 193.204340][ T6661] get_futex_key+0x1b4/0x1580 [ 193.204378][ T6661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.204415][ T6661] ? __pfx_get_futex_key+0x10/0x10 [ 193.204459][ T6661] futex_wake+0x119/0x5f0 [ 193.204504][ T6661] ? __pfx_futex_wake+0x10/0x10 [ 193.204539][ T6661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.204574][ T6661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.204603][ T6661] ? do_mprotect_pkey+0xb1e/0xd10 [ 193.204635][ T6661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.204672][ T6661] do_futex+0x458/0x4e0 [ 193.204711][ T6661] ? __pfx_do_futex+0x10/0x10 [ 193.204759][ T6661] __se_sys_futex+0x3a8/0x450 [ 193.204800][ T6661] ? __pfx___se_sys_futex+0x10/0x10 [ 193.204835][ T6661] ? rcu_is_watching+0x16/0xb0 [ 193.204872][ T6661] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.204901][ T6661] ? __x64_sys_futex+0x21/0xf0 [ 193.204938][ T6661] do_syscall_64+0x166/0x520 [ 193.204972][ T6661] ? trace_irq_disable+0x3b/0x140 [ 193.204998][ T6661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.205030][ T6661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.205056][ T6661] RIP: 0033:0x7fef4d39e159 [ 193.205079][ T6661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.205099][ T6661] RSP: 002b:00007fef4e1d70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 193.205126][ T6661] RAX: ffffffffffffffda RBX: 00007fef4d625fa8 RCX: 00007fef4d39e159 [ 193.205144][ T6661] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fef4d625fac [ 193.205161][ T6661] RBP: 00007fef4d625fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 193.205178][ T6661] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 193.205195][ T6661] R13: 00007fef4d626038 R14: 00007fffa33523c0 R15: 00007fffa33524a8 [ 193.205239][ T6661] [ 193.605826][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.605892][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.335374][ T5345] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 196.772298][ T5345] usb 3-1: unable to get BOS descriptor or descriptor too short [ 196.778979][ T5345] usb 3-1: not running at top speed; connect to a high speed hub [ 196.779501][ T5345] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=5d.b4 [ 196.798444][ T5345] usb 3-1: config 1 has an invalid interface number: 177 but max is 0 [ 196.798534][ T5345] usb 3-1: config 1 has no interface number 0 [ 196.798809][ T5345] usb 3-1: config 1 interface 177 has no altsetting 0 [ 196.870149][ T5345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.870198][ T5345] usb 3-1: Product: syz [ 196.870239][ T5345] usb 3-1: Manufacturer: syz [ 196.870382][ T5345] usb 3-1: SerialNumber: syz [ 198.201613][ T5345] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 198.210476][ T5345] gspca_sn9c2028: read1 error -71 [ 198.211620][ T5345] gspca_sn9c2028: read1 error -71 [ 198.224389][ T5345] gspca_sn9c2028: read1 error -71 [ 198.224464][ T5345] sn9c2028 3-1:1.177: probe with driver sn9c2028 failed with error -71 [ 198.270844][ T5345] usb 3-1: USB disconnect, device number 3 [ 198.606303][ T5871] udevd[5871]: setting mode of /dev/bus/usb/003/003 to 020664 failed: No such file or directory [ 198.635446][ T5871] udevd[5871]: setting owner of /dev/bus/usb/003/003 to uid=0, gid=0 failed: No such file or directory [ 201.323517][ T6698] loop5: detected capacity change from 0 to 512 [ 201.331287][ T6698] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 201.361111][ T6698] EXT4-fs (loop5): 1 truncate cleaned up [ 201.368386][ T6698] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.429648][ T6702] loop2: detected capacity change from 0 to 164 [ 201.630919][ T6702] isofs_fill_super: root inode is not a directory. Corrupted media? [ 202.665373][ T6710] loop3: detected capacity change from 0 to 512 [ 202.732676][ T6710] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 202.768894][ T5618] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.843121][ T6710] EXT4-fs (loop3): 1 truncate cleaned up [ 202.857894][ T6710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.390435][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.706563][ T6736] loop4: detected capacity change from 0 to 164 [ 204.729458][ T6736] isofs_fill_super: root inode is not a directory. Corrupted media? [ 205.675572][ T5345] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 206.002325][ T5621] Bluetooth: hci1: command 0x0406 tx timeout [ 206.007036][ T5621] Bluetooth: hci2: command 0x0406 tx timeout [ 206.007165][ T5621] Bluetooth: hci4: command 0x0406 tx timeout [ 206.008030][ T5621] Bluetooth: hci3: command 0x0406 tx timeout [ 206.011633][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 206.281466][ T5345] usb 4-1: unable to get BOS descriptor or descriptor too short [ 206.295443][ T5345] usb 4-1: not running at top speed; connect to a high speed hub [ 206.298130][ T5345] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=5d.b4 [ 206.499731][ T5345] usb 4-1: config 1 has an invalid interface number: 177 but max is 0 [ 206.501716][ T5345] usb 4-1: config 1 has no interface number 0 [ 206.511240][ T5345] usb 4-1: config 1 interface 177 has no altsetting 0 [ 206.671804][ T5345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.671852][ T5345] usb 4-1: Product: syz [ 206.671908][ T5345] usb 4-1: Manufacturer: syz [ 206.671926][ T5345] usb 4-1: SerialNumber: syz [ 208.828789][ T6762] loop1: detected capacity change from 0 to 512 [ 208.839225][ T6762] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 208.876879][ T5345] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 208.881104][ T5345] gspca_sn9c2028: read1 error -71 [ 208.881316][ T6762] EXT4-fs (loop1): 1 truncate cleaned up [ 208.888331][ T5345] gspca_sn9c2028: read1 error -71 [ 208.890242][ T5345] gspca_sn9c2028: read1 error -71 [ 208.890321][ T5345] sn9c2028 4-1:1.177: probe with driver sn9c2028 failed with error -71 [ 208.906040][ T6762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.912564][ T5345] usb 4-1: USB disconnect, device number 3 [ 209.012197][ T6768] loop0: detected capacity change from 0 to 512 [ 209.162360][ T6768] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 210.115162][ T6768] EXT4-fs (loop0): 1 truncate cleaned up [ 210.130499][ T6768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.208141][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.223211][ T6785] loop2: detected capacity change from 0 to 164 [ 211.122458][ T6785] isofs_fill_super: root inode is not a directory. Corrupted media? [ 211.892660][ T5620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.720260][ T6823] loop3: detected capacity change from 0 to 164 [ 217.155650][ T6823] isofs_fill_super: root inode is not a directory. Corrupted media? [ 217.348983][ T6809] syz.2.271 (6809): drop_caches: 2 [ 217.391754][ T6828] se_device not configured yet, cannot port link [ 218.776637][ T6847] loop4: detected capacity change from 0 to 512 [ 218.800078][ T6847] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 218.843177][ T6847] EXT4-fs (loop4): 1 truncate cleaned up [ 218.849441][ T6847] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.873096][ T5750] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 219.133146][ T5750] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 219.134308][ T5750] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.171430][ T5750] usb 3-1: config 0 descriptor?? [ 219.806092][ T5750] cp210x 3-1:0.0: cp210x converter detected [ 219.868320][ T5619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.052981][ T5750] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 220.053015][ T5750] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 220.079199][ T5750] usb 3-1: cp210x converter now attached to ttyUSB0 [ 220.094340][ T5750] usb 3-1: USB disconnect, device number 4 [ 220.111452][ T5750] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 220.111994][ T5750] cp210x 3-1:0.0: device disconnected [ 220.864832][ T5750] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 221.042481][ T5750] usb 4-1: Using ep0 maxpacket: 16 [ 221.133143][ T5750] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 221.279310][ T5750] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.279452][ T5750] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.279493][ T5750] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 221.279636][ T5750] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.009147][ T5750] usb 4-1: config 0 descriptor?? [ 223.100617][ T5750] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 223.136010][ T5750] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 223.136054][ T5750] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 223.136077][ T5750] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 223.136100][ T5750] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 223.136123][ T5750] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 223.136147][ T5750] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 223.136171][ T5750] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 223.136195][ T5750] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 223.136218][ T5750] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 223.136242][ T5750] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 223.324987][ T5750] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 223.328710][ T5750] usb 4-1: USB disconnect, device number 4 [ 224.429859][ T6900] loop4: detected capacity change from 0 to 164 [ 224.519904][ T6900] isofs_fill_super: root inode is not a directory. Corrupted media? [ 224.736695][ T6907] loop3: detected capacity change from 0 to 512 [ 224.741715][ T6907] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 224.794065][ T6909] geneve3: entered allmulticast mode [ 224.814886][ T6907] EXT4-fs (loop3): 1 truncate cleaned up [ 224.818540][ T6907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.908638][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.966800][ T6913] fido_id[6913]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 225.972807][ T6922] netlink: 48 bytes leftover after parsing attributes in process `syz.1.299'. [ 226.233563][ T6928] loop3: detected capacity change from 0 to 512 [ 226.240145][ T6928] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 226.280694][ T6928] EXT4-fs (loop3): 1 truncate cleaned up [ 226.293678][ T6928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.502567][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.576556][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.309'. [ 232.004712][ T6963] loop0: detected capacity change from 0 to 512 [ 232.021439][ T6963] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 232.052850][ T6963] EXT4-fs (loop0): 1 truncate cleaned up [ 232.080606][ T6963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.103599][ T5620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.876875][ T12] IPVS: starting estimator thread 0... [ 234.004677][ T6979] IPVS: using max 34 ests per chain, 81600 per kthread [ 234.146808][ T6987] loop0: detected capacity change from 0 to 164 [ 234.173645][ T6987] isofs_fill_super: root inode is not a directory. Corrupted media? [ 236.558975][ T7018] loop1: detected capacity change from 0 to 512 [ 236.577788][ T7018] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 236.600032][ T7018] EXT4-fs (loop1): 1 truncate cleaned up [ 236.625300][ T7018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.451366][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.415105][ T7068] loop1: detected capacity change from 0 to 164 [ 243.444643][ T7068] isofs_fill_super: root inode is not a directory. Corrupted media? [ 243.735707][ T7075] loop5: detected capacity change from 0 to 512 [ 243.742975][ T7075] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 243.774335][ T7075] EXT4-fs (loop5): 1 truncate cleaned up [ 243.795042][ T7075] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.821292][ T61] IPVS: starting estimator thread 0... [ 244.829070][ T5618] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.866619][ T7085] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 244.912153][ T7084] IPVS: using max 27 ests per chain, 64800 per kthread [ 245.198303][ T7089] loop2: detected capacity change from 0 to 1024 [ 245.214383][ T7089] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 245.217918][ T7089] JBD2: no valid journal superblock found [ 245.328023][ T7093] Bluetooth: MGMT ver 1.23 [ 245.337963][ T7093] xt_hashlimit: size too large, truncated to 1048576 [ 245.338184][ T7093] xt_hashlimit: max too large, truncated to 1048576 [ 246.045194][ T7089] EXT4-fs (loop2): Could not load journal inode [ 246.117267][ T7099] [ 246.119650][ T7099] ====================================================== [ 246.126666][ T7099] WARNING: possible circular locking dependency detected [ 246.133700][ T7099] syzkaller #0 Tainted: G L [ 246.139684][ T7099] ------------------------------------------------------ [ 246.146704][ T7099] syz.3.351/7099 is trying to acquire lock: [ 246.152591][ T7099] ffffffff8fc70e80 (tpg_instances_lock){+.+.}-{4:4}, at: tcm_alloc+0x21/0x2e0 [ 246.161480][ T7099] [ 246.161480][ T7099] but task is already holding lock: [ 246.168836][ T7099] ffff88804c1b8390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x59/0x260 [ 246.177822][ T7099] [ 246.177822][ T7099] which lock already depends on the new lock. [ 246.177822][ T7099] [ 246.188227][ T7099] [ 246.188227][ T7099] the existing dependency chain (in reverse order) is: [ 246.197246][ T7099] [ 246.197246][ T7099] -> #2 (&gi->lock){+.+.}-{4:4}: [ 246.204390][ T7099] __mutex_lock+0x19d/0x1550 [ 246.209539][ T7099] config_usb_cfg_link+0x59/0x260 [ 246.215086][ T7099] configfs_symlink+0x74e/0x11d0 [ 246.220560][ T7099] vfs_symlink+0x18b/0x330 [ 246.225515][ T7099] filename_symlinkat+0x1cd/0x410 [ 246.231070][ T7099] __se_sys_symlinkat+0x4e/0x2b0 [ 246.236544][ T7099] do_syscall_64+0x166/0x520 [ 246.241665][ T7099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.248078][ T7099] [ 246.248078][ T7099] -> #1 (&sb->s_type->i_mutex_key#27){++++}-{4:4}: [ 246.256784][ T7099] down_write+0x96/0x200 [ 246.261566][ T7099] configfs_depend_item_unlocked+0x153/0x420 [ 246.268076][ T7099] usbg_make_tpg+0x1e0/0x550 [ 246.273195][ T7099] target_fabric_make_tpg+0xa8/0x6d0 [ 246.279001][ T7099] configfs_mkdir+0x4f6/0x9e0 [ 246.284203][ T7099] vfs_mkdir+0x40c/0x620 [ 246.288964][ T7099] filename_mkdirat+0x285/0x510 [ 246.294337][ T7099] __se_sys_mkdirat+0x35/0x150 [ 246.299627][ T7099] do_syscall_64+0x166/0x520 [ 246.304745][ T7099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.311158][ T7099] [ 246.311158][ T7099] -> #0 (tpg_instances_lock){+.+.}-{4:4}: [ 246.319068][ T7099] __lock_acquire+0x164c/0x2de0 [ 246.324443][ T7099] lock_acquire+0x115/0x350 [ 246.329463][ T7099] __mutex_lock+0x19d/0x1550 [ 246.334580][ T7099] tcm_alloc+0x21/0x2e0 [ 246.339249][ T7099] usb_get_function+0x63/0xb0 [ 246.344445][ T7099] config_usb_cfg_link+0x148/0x260 [ 246.350071][ T7099] configfs_symlink+0x74e/0x11d0 [ 246.355525][ T7099] vfs_symlink+0x18b/0x330 [ 246.360459][ T7099] filename_symlinkat+0x1cd/0x410 [ 246.365999][ T7099] __se_sys_symlinkat+0x4e/0x2b0 [ 246.371460][ T7099] do_syscall_64+0x166/0x520 [ 246.376572][ T7099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.382983][ T7099] [ 246.382983][ T7099] other info that might help us debug this: [ 246.382983][ T7099] [ 246.393196][ T7099] Chain exists of: [ 246.393196][ T7099] tpg_instances_lock --> &sb->s_type->i_mutex_key#27 --> &gi->lock [ 246.393196][ T7099] [ 246.407043][ T7099] Possible unsafe locking scenario: [ 246.407043][ T7099] [ 246.414496][ T7099] CPU0 CPU1 [ 246.419848][ T7099] ---- ---- [ 246.425204][ T7099] lock(&gi->lock); [ 246.429100][ T7099] lock(&sb->s_type->i_mutex_key#27); [ 246.437085][ T7099] lock(&gi->lock); [ 246.443498][ T7099] lock(tpg_instances_lock); [ 246.448167][ T7099] [ 246.448167][ T7099] *** DEADLOCK *** [ 246.448167][ T7099] [ 246.456298][ T7099] locks held by syz.3.351/7099: 3, last CPU#0: [ 246.462442][ T7099] #0: ffff88801d7ac460 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 246.471711][ T7099] #1: ffff88804f0c0600 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: configfs_symlink+0x4d0/0x11d0 [ 246.484179][ T7099] #2: ffff88804c1b8390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x59/0x260 [ 246.493693][ T7099] [ 246.493693][ T7099] stack backtrace: [ 246.499578][ T7099] CPU: 0 UID: 0 PID: 7099 Comm: syz.3.351 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.510338][ T7099] Tainted: [L]=SOFTLOCKUP [ 246.514653][ T7099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 246.524696][ T7099] Call Trace: [ 246.527965][ T7099] [ 246.530883][ T7099] dump_stack_lvl+0xe8/0x150 [ 246.535477][ T7099] print_circular_bug+0x2e2/0x300 [ 246.540506][ T7099] check_noncircular+0x12f/0x150 [ 246.545449][ T7099] __lock_acquire+0x164c/0x2de0 [ 246.550294][ T7099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.555920][ T7099] ? __lock_acquire+0x1511/0x2de0 [ 246.560942][ T7099] lock_acquire+0x115/0x350 [ 246.565434][ T7099] ? tcm_alloc+0x21/0x2e0 [ 246.569757][ T7099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.575412][ T7099] __mutex_lock+0x19d/0x1550 [ 246.580003][ T7099] ? tcm_alloc+0x21/0x2e0 [ 246.584323][ T7099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.589976][ T7099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.595602][ T7099] ? trace_contention_end+0x3d/0x140 [ 246.600889][ T7099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.606515][ T7099] ? __mutex_lock+0x30b/0x1550 [ 246.611297][ T7099] ? tcm_alloc+0x21/0x2e0 [ 246.615648][ T7099] ? __pfx___mutex_lock+0x10/0x10 [ 246.620671][ T7099] ? lock_acquire+0x115/0x350 [ 246.625338][ T7099] ? __pfx___mutex_lock+0x10/0x10 [ 246.630363][ T7099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.635994][ T7099] tcm_alloc+0x21/0x2e0 [ 246.640143][ T7099] usb_get_function+0x63/0xb0 [ 246.644821][ T7099] config_usb_cfg_link+0x148/0x260 [ 246.650013][ T7099] configfs_symlink+0x74e/0x11d0 [ 246.654989][ T7099] ? lookup_one_qstr_excl+0x1d4/0x360 [ 246.660370][ T7099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.665996][ T7099] ? make_vfsuid+0x49/0xa0 [ 246.670415][ T7099] ? generic_permission+0x2bf/0x670 [ 246.675616][ T7099] ? __pfx_configfs_symlink+0x10/0x10 [ 246.681028][ T7099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.686660][ T7099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.692287][ T7099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.697917][ T7099] vfs_symlink+0x18b/0x330 [ 246.702329][ T7099] ? security_path_symlink+0xfd/0x360 [ 246.707704][ T7099] filename_symlinkat+0x1cd/0x410 [ 246.712732][ T7099] ? __pfx_filename_symlinkat+0x10/0x10 [ 246.718312][ T7099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.723980][ T7099] ? do_getname+0x151/0x250 [ 246.728480][ T7099] __se_sys_symlinkat+0x4e/0x2b0 [ 246.733415][ T7099] do_syscall_64+0x166/0x520 [ 246.738004][ T7099] ? trace_irq_disable+0x3b/0x140 [ 246.743023][ T7099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.749089][ T7099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.755011][ T7099] RIP: 0033:0x7f327219e159 [ 246.759428][ T7099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.779025][ T7099] RSP: 002b:00007f3272fdb028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 246.787448][ T7099] RAX: ffffffffffffffda RBX: 00007f3272425fa0 RCX: 00007f327219e159 [ 246.795422][ T7099] RDX: 0000200000000300 RSI: ffffffffffffff9c RDI: 00002000000002c0 [ 246.803384][ T7099] RBP: 00007f327223506b R08: 0000000000000000 R09: 0000000000000000 [ 246.811347][ T7099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.819313][ T7099] R13: 00007f3272426038 R14: 00007f3272425fa0 R15: 00007ffea76b26b8 [ 246.827294][ T7099] [ 247.359866][ T43] IPVS: starting estimator thread 0... [ 247.492123][ T7103] IPVS: using max 36 ests per chain, 86400 per kthread [ 248.157408][ T7113] netlink: 20 bytes leftover after parsing attributes in process `syz.4.352'. [ 255.043492][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.043548][ T1303] ieee802154 phy1 wpan1: encryption failed: -22