last executing test programs: 1m37.736129725s ago: executing program 0 (id=707): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x800, 0xf}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000500)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000005c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000600)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m37.286214218s ago: executing program 0 (id=717): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140), 0xfe, 0x259, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x101e42, 0x112) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000440)=0x400) pwrite64(0xffffffffffffffff, &(0x7f0000000500)='\f', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x40000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000090c0)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000000900)="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", 0x701}], 0x1, &(0x7f0000002f40)=[@hopopts={{0x30, 0x29, 0x36, {0x32, 0x2, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x8, 0x0, [0x6]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x800}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x33, 0x8, 0x0, 0x8d, 0x0, [@ipv4={'\x00', '\xff\xff', @local}, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast1]}}}], 0xc8}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004200)=ANY=[@ANYBLOB="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"], 0x10b8}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000007b00)=[{0x0}], 0x1, &(0x7f00000092c0)=[@hopopts_2292={{0x108, 0x29, 0x36, {0x8, 0x1d, '\x00', [@enc_lim={0x4, 0x1, 0xcc}, @pad1, @generic={0x2, 0x3a, "f3b702c5e44fb0071edadb55cd69d7737085ba3422d5213295ebf573acfa56314584a5271d7cfd63727101696b5d5a5efeddf18e4db16ee3d7f3"}, @generic={0x6, 0x7d, "7b9f7dc7a80f417534e59983c08a4d7789b6b23e9ab6f3725caddc5ecb813dd998fe6c2977db813b274ab770e551a5b0f82fe821fd9e5a67c7fbd9f8cc95e24964a8ef785b4b9298ce916803411079a3cd4e5794616c4e597fd643af5ae1d261104950c1c4859d2f739291648b5b770fdd5ae1407f92ccf386415c7b3d"}, @ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1d}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}, @rthdrdstopts={{0xc18, 0x29, 0x37, {0x84, 0x17f, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0xa, 0x9b29, [0x0, 0x0]}}, @generic={0x5, 0xbdd, "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"}]}}}], 0xd48}}], 0x4, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) 1m36.218338414s ago: executing program 0 (id=723): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000800)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000840)=0x7) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000062) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000008c0)=@file={0x0, './cfg\x00'}, 0x61) sendmmsg$unix(r4, &(0x7f0000000940), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000980), 0x10106, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x10, 0x4, &(0x7f0000000e40)=ANY=[], &(0x7f0000000ec0)='GPL\x00', 0x2, 0xc3, &(0x7f0000001000)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000001100)=0x9) sched_setscheduler(0x0, 0x2, &(0x7f00000009c0)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000a40)='./cfg\x00', &(0x7f0000000a80)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000ffffffff0000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f6164003400028008000440000000000800054000000000082b45224f88dfe07b00024000000002080006400000000208000740000000080900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a"], 0x9c}}, 0x4) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@iptfs_pkt_size={0x8, 0x29, 0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40844}, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@migrate={0xcc, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e80), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x10000}, 0x20008000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x78}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xc, &(0x7f0000000140)=""/12, 0x41100, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 1m35.102181376s ago: executing program 0 (id=732): syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x16, &(0x7f0000000000)={[{@compress_force_algo={'compress-force', 0x3d, 'zstd'}}, {@nossd_spread}, {@nodatasum}, {@notreelog}, {@max_inline={'max_inline', 0x3d, [0x6b, 0x78, 0x67, 0x56, 0x78]}}, {@skip_balance}]}, 0x19, 0x50f6, &(0x7f0000000c80)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8400002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000180)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000000200)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000240)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_settime(0x0, 0x0) mlockall(0x7) capset(&(0x7f00000002c0)={0x20080522}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) open(0x0, 0x20000, 0x0) socket(0x10, 0x3, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000003c0)={0x0, 0x3, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000021e80)='./file1\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc4009420, &(0x7f0000021ec0)={0x2, 0x1, 0x4000000000000000}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace(0x10, r3) ptrace$poke(0x5, r3, &(0x7f00000000c0), 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0185879, &(0x7f0000000340)={@desc={0x1, 0x0, @desc3}}) 1m32.700398555s ago: executing program 0 (id=756): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000800)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000840)=0x7) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000062) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000008c0)=@file={0x0, './cfg\x00'}, 0x61) sendmmsg$unix(r3, &(0x7f0000000940), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000980), 0x10106, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x10, 0x4, &(0x7f0000000e40)=ANY=[], &(0x7f0000000ec0)='GPL\x00', 0x2, 0xc3, &(0x7f0000001000)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000001100)=0x9) sched_setscheduler(0x0, 0x2, &(0x7f00000009c0)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000a40)='./cfg\x00', &(0x7f0000000a80)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000ffffffff0000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f6164003400028008000440000000000800054000000000082b45224f88dfe07b00024000000002080006400000000208000740000000080900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a"], 0x9c}}, 0x4) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@iptfs_pkt_size={0x8, 0x29, 0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40844}, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@migrate={0xcc, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x10000}, 0x20008000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x78}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xc, &(0x7f0000000140)=""/12, 0x41100, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 1m29.786914134s ago: executing program 0 (id=774): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd8}}, 0x0) 1m29.451395965s ago: executing program 32 (id=774): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd8}}, 0x0) 7.28534693s ago: executing program 4 (id=1268): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x12300, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000016c0)=0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000200)='6', 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="bf160000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000a9ffffffb702000008000000b7030000060000008500000006000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b7040000ffffffffb70500000000000085000000540000001500020000000000bf01000000000000850000005600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) rename(&(0x7f0000002380)='./proc/thread-self/fail-nth\x00', &(0x7f00000023c0)='./proc/thread-self/fail-nth\x00') sendmsg$inet(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="30a0", 0x2}], 0x1}, 0x4040001) recvmsg$unix(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40012141) sendmsg$key(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[], 0x10}}, 0x4001) recvmsg$unix(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1}, 0x12002) r5 = syz_mount_image$nilfs2(&(0x7f0000001700), &(0x7f0000001740)='./file0\x00', 0x0, &(0x7f0000001780)=ANY=[@ANYRES32=0x0], 0x0, 0xa46, &(0x7f00000017c0)="$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") ioctl$NILFS_IOCTL_GET_CPINFO(r5, 0x80186e82, &(0x7f0000002240)={&(0x7f0000002280)=[{0x3, 0x0, 0x4, 0x9, 0x8, 0x4, 0x5, 0x5f}], 0x1, 0x38, 0x1, 0x5}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0xe, 0x0, &(0x7f0000000400)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, 0x0, 0x0) fsopen(&(0x7f0000002480)='pipefs\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000024c0)='./file0\x00', 0x40042, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002500)='./proc\x00', 0x4) mount(0x0, &(0x7f0000002540)='./proc\x00', &(0x7f0000002580)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000025c0)='./proc/thread-self/fail-nth\x00', 0xa142, 0x14b) write(r6, &(0x7f0000002600)='8', 0x1) r7 = gettid() getpriority(0x1, r7) rt_sigqueueinfo(r7, 0x21, &(0x7f0000002640)={0x0, 0x0, 0x6}) mount(0x0, &(0x7f00000026c0)='./tracing\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002700)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x800, 0x149) mount$9p_fd(0x0, &(0x7f0000002740)='./file0\x00', 0x0, 0x0, 0x0) 5.687965263s ago: executing program 4 (id=1273): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write$cgroup_pid(r2, &(0x7f0000000480)=0xffffffffffffffff, 0x12) 5.551616739s ago: executing program 5 (id=1274): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write$cgroup_pid(r2, &(0x7f0000000480)=0xffffffffffffffff, 0x12) 5.461014004s ago: executing program 2 (id=1277): link(&(0x7f000000b200)='./file1\x00', &(0x7f000000b240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.304701867s ago: executing program 2 (id=1279): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000a080) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000440)="ab60ee00000000000000000000a3", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f0000000180), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f00000001c0)={0x5, "1f7f67491b5a90eeaddb94a4031a82687063ba6e44f7b91d902d0008424ad04b9634bef178be4ba64223a1d6da6d232b4ea6a453724e5a9c45a204ec36715596"}) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000240)={0xa, {0x1, 0x3, 0xff}}, 0x5) 5.228228201s ago: executing program 1 (id=1280): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f00000001c0)='./file1\x00', 0x2000, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f00000006c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000780)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$trusted_overlay_origin(&(0x7f0000000800)='./file0/file1\x00', &(0x7f0000000840), 0x0, 0x0, 0x3) umount2(&(0x7f0000000880)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x4008, &(0x7f0000000940)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 4.37319783s ago: executing program 1 (id=1281): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x120444c, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRESDEC, @ANYBLOB="a6af891d142bbbe86c2b6c42ac9eefc3f3124a519189b105d77c5f5267121c170995cd3bb174096f3c", @ANYBLOB="a51b7d19e69bbcb11700c2dcb2d851f79d44e9bb8469d2a5dd66597db213ade6acfaffd88afce31be876c207fb5d362b6e91010b006a4279f2d4d02752a02b76b5413c5e7cd22d3cfad489bd1b84a85aa8ad47cc69d09522d51cf5cf88cf9da13593310d5e0d03a6e17940ddd391c7796ad75f4fa75bd62cb78c43c92e61de110508c5d605a2f981314c38526ac5aac6e4445e32d7cf128b440ca715e901f8b4299226dfd9bfec7a37f3bf63e1906fe520b65051ea9c14827e9cd737a6952d478ff3cb4436a913", @ANYBLOB="01ce6671a3b30f673148672100038bbb4413ea284b892438cdddda3dc5766f98f85fb413504b3bbb8dce2bcd2b09f68cd741168d69dae50652ca7b67c5b0a27ab80ff9afa5000443de8c748e1d5beabee7c1346b215f641ae190d56ea4ab81bacd909929deb5757040e8d5b2752ea779c30f600bd516a68d881e9cc7289826d49e35134a94e27f115c8195a0f152cbd840ffdb008356c72319cceb43ccb1280556efdf0fdf582fd3cfc830dff178a068d948b7400f5aef57b6dcbfde7af6012383adb085c40e4c295c2a3be750a42400e58523d24b8eecd758aabcee22347bdb78b72b400d080a044ebde5d39ad91ff0ef75aa244381cf00cd6fe9b9a92a9968104bf02481022af426853287e521a4e3cfe480f984efcea1319ff932ebd3bc75aefea41074799f3502a7472a6686b4011a41d7f0cfb25b3dc3077b4e8ded17cfff2b1d59bc12f637c36690f5ca91ee999ec138f6ce76522e652939847435edb78f9ae18489f9d2b73c81609399f0d123f1721171bd72c012623f04d8965d3e5785d057c17998ab36af821c9b308731422ba3859b9895ace14068ea58f8cb6060c205caf209a73628eff5b9270a4a55c2d7fc59a4fe6e023bd424d8b010e2232d1b2e6ca603b466b2c82afff4a8cc469e8664d54769fc97df122b3ff8c34354dad46f900eaf6e72e5e9f8090000000000000074dadad47a42af7cdae5bde6a12f412fe2a876aa191e78e91fbf780e2f4a20f57d41376b29f990ce63aa6edf622d2203fee37df269abf869d13b175852b775fff70491d1e5d1311b7e82cba4584c147c6e79c77e89ef954a101ddb98c5ba2b312528485ece7aff23cc6fee599daea0fca71a902c969fc9077bd75970cf0f11b52af4c82b49640cc3fabbc401dead4f83aa0c4072a9e98ab5afca90be17961fc073e2f8ec0000000000f7f574d97d4b4fcece55eeac5968262e9bd94c1d1bc1138cda4410bee318185f933c130b8765e5078e7642abf5aa7fb04f7b7c930d776622f38fc1422af38d18398766ab0e98f3b07603981b1d0c0b353eb0ae7089ea49a060367512a13eea1d7d608b7297a902508744e4d75dfcdf75fc6dc73f23ef3e97dc7a357cc2e6a0f0c43636f5bdc6beddc09858a6a2ced9d33bd0e0eca77d1821865ad6e4d61b2b65005d", @ANYRES16, @ANYRES32], 0x0, 0x1e1, &(0x7f0000000640)="$eJzslc9qFEEQxn8905vJ6h5y9mowuehmJyC+gXkAH8BlM8bgrH8yC7pLwNVLLh7Elwj4FB4EvXsQEbzEg4IeIp4istLT1Z0eDWwiriLMB0N99XVVdVcP3X29uFMkwPf97R4LlFC0eKsUGlhSVjuYs/aL2Ingg7Z+R/SnYt+LLYajV48sHd3o5nm2VQynEKVgWkyF/CrpY092BHn5sKoofq/O7Mkgtjub53NUhx5XgpMy5qd0yeWfdzEL8rUFofLxT1RuB0qDWXcBXvnWmv6b3jyxv/PImFjSm1S35S+Q5AQn/xgkOlFWgVxfxeUHEZ9L5/X+ds+Qq3KLGW3dfu5IlDHGeR7EnNEwBhUz8XV0eVvCEtAe9G+3i+Ho/Ga/u5FtZDfTdPXiyovTckQn92Ezz1YawTIiQzQeZq+awXgDeHc4PiaAkqUl4p8C5XJdirucl88GiU2IgracPaz7zM/vasf0ucI55oG7YzOcYndrEVNNc820toYiFqejg3XCARHz5cCF3q18fQeFcmm7aF+js0fDO6k4ZqJs9ZJvf0fsotg1sbti98S6t8u9Sbqs8Em85THMca87GGyVj5dlXku9li74mSOZ1b2Gyq0koUaNGjVq1KhR4z/BjwAAAP//NR9MVg==") mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000880)='./bus\x00', &(0x7f00000008c0), 0x0, &(0x7f0000000900)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000940)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) getdents64(r0, &(0x7f0000001000)=""/4096, 0x1000) 4.107861387s ago: executing program 3 (id=1283): unshare(0x22020600) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0) 4.024220371s ago: executing program 1 (id=1284): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000680)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./gadget\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./gadget/dummy_udc\x00', 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.906833985s ago: executing program 3 (id=1285): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000100)={[{@norecovery}, {@inlinecrypt}, {@nobarrier}, {@journal_checksum}, {@debug}, {@nodiscard}, {@noinit_itable}, {@journal_checksum}]}, 0xed, 0x480, &(0x7f00000002c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b80)='cpuset.effective_cpus\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x2004d053}, 0x24000084) lseek(r1, 0x7fffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f00000008c0)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1000, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000a00)='./file1\x00', 0x2a0471a, &(0x7f0000000a40)={[{@errors_remount}]}, 0x82, 0x4a7, &(0x7f0000000e80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file1\x00', 0xd02, 0x15) pwrite64(r4, &(0x7f0000001380)='2', 0xfdef, 0xc00) mkdirat(0xffffffffffffff9c, &(0x7f00000013c0)='./proc\x00', 0x1ff) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000b40), 0x400000, 0x0) mount(0x0, &(0x7f0000001400)='./proc\x00', &(0x7f0000001440)='proc\x00', 0x0, 0x0) open(0x0, 0x14b142, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./sys/class/tty/ttyS1/console\x00', 0x2, 0x0) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000ac0)={'team_slave_1', 0x32, 0x37}, 0xf) sendmsg$nl_generic(r6, &(0x7f00000017c0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001780)={&(0x7f0000001500)={0x248, 0x33, 0x400, 0x70bd25, 0x25dfdbfe, {0x13}, [@nested={0x232, 0x6e, 0x0, 0x1, [@generic="5f66d497794fc45f873f968b3d41b249cf5362dbacc9d2078e96f84445b56d0d48cfb8a45b03f19b4a52ca61673840ca9d7c3a49bdc65369ecf58192e7af3642ffc83c0960d7b3846364e3efcd10cf49a930d6f67f107910a1ca1e5559bc272420bd7440743ee761a9911c69b0813c9f1b2a97061dd83891505942e0425fcb254e11ce5ade763953cdb5568e1dfb681f2d4f1b9c33b3fda05e98dc769e", @nested={0x4, 0x101}, @nested={0x4, 0x12c}, @typed={0xbf, 0xee, 0x0, 0x0, @binary="9258a058b81490b559d73725f0cf0c3c3963075bf14e1019031fddf5d1f612cfee747898089a384106790db7b52512f54ed4f4f210b090a901ac2e90ff147556b3c164bfca6296d6b2d3efca92be5a9cc8183c59cb2b2380bae22c0b86a27968c6a9574998e443cd2a15d66ddcb833e360b77d68df5967737b11b311c3ca1f0320fb0df33477133802dab636b0a9833e71a320f3f190796c5acfd85406f593cdf8710dd03e679c570e798101a402c855b7f4ec64f760f42ceab51c"}, @nested={0x4, 0x12}, @nested={0x4, 0x8f}, @typed={0x8, 0x49, 0x0, 0x0, @fd=r5}, @generic="8ae6ddeebf14f71c32c38155373c1befcd8d211905fb7aed2e9828cec5abf7e90e390ced77babd4510489cd0d5c9e1ea414c3a1969d261cbe4a77cfe4669bbe4aa016fa95b92a51cd43dc225a85a8a11e98f7837fb22a6f2887912e8045b48d4ea6d9613cccb246b11aeb3c55b4ed2607daa835de7170a79bd171626dd5e7c53a3d5ed152070501b64b1f680e6c3628cffe83bc462cd43d62b90e20e5e544468a135351caa0d2b671c7713cc63c99d6d940b30f4d496a1bd55"]}]}, 0x248}, 0x1, 0x0, 0x0, 0x8850}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000001480)={'sit0\x00', 0x0}) ioctl$OCFS2_IOC_UNRESVSP64(r4, 0x4030582b, &(0x7f00000014c0)={0x1, 0x1, 0x9, 0x719b, 0x5, 0x6}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_mute_present\x00', 0x1, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000d7dda4108911930800000102030109022400020000000009046802006e02c0000904680001253e5300090508", @ANYRESDEC], 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r7, &(0x7f00000009c0)=ANY=[], 0x24) ftruncate(r0, 0x2000009) write$binfmt_script(r0, &(0x7f0000000bc0)={'#! ', './file1', [{0x20, 'timerslack_ns\x00'}, {0x20, 'nobarrier'}, {0x20, '\xc5(/\'\'('}, {}], 0xa, "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"/646}, 0x2b2) 3.670007759s ago: executing program 1 (id=1286): sched_setscheduler(0x0, 0x2, &(0x7f0000000a00)=0x8) getrlimit(0x0, &(0x7f0000000000)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000a40)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000ac0)=@abs, 0x6e) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1) sendmmsg$unix(r2, &(0x7f0000000b40), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000b80), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000067c0)={0x2, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xd, 0x4, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) r4 = syz_open_dev$usbfs(&(0x7f0000000200), 0x200, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000240)={0x0, 0x0, "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"}) ioctl$USBDEVFS_RESETEP(r4, 0x80045503, &(0x7f0000000400)={0x1, 0x1}) 3.21128039s ago: executing program 2 (id=1287): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000004, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) getrlimit(0xd, &(0x7f00000001c0)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000100)={0x80000001}, 0x4) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000140)='./proc\x00', 0x0, 0x10}, 0x18) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x2d) r2 = dup(0xffffffffffffffff) ioctl$TIOCL_SETVESABLANK(r2, 0x560e, 0x0) syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x10800, &(0x7f0000000340)=ANY=[], 0x11, 0x193, &(0x7f0000000380)="$eJzskr1KI1EUx/93ZjLZLLthF7ZKsynCfhRLJpNV7LSMvZ2NIRljcKImM6AJAUdEUliIpU/gawi+gBYi2EnqIMHGRkbuvWeGG/UJ5P6K+c85c+75urMRdIMsgOfpsIElCEzkcc0YLAA/mfRNDKmnpDekJ1JwRXHLOamH9L0Q9Ac2xRTxXTo2677v9YoAHoUvdQWLBwYmItXtdNjgL2sA4jiOua8JiKa+KDEmgK4SU7CAH2KIOI3hZ7jxG0A57OyUg/7gX7tTb3ktb8s1q/POf8eZc8vrbd9z5JMpJWgUcP0LIPsJKfx7BsAR2Q+YhSmtcT4DLIfV9Kyd7DDP8BpDOZsow0XaV9ZO7gtYwS/wtnajJA/3lkQWC2KkGhhMMiqW0p+slUy57TdHYGAicnwvVp7kqIyRSQ1XNaoLEb7KBCNKVCKtkZ6TjukW757ol6HKVsSfx2T9iQAbe/Uw7FX4nPKNYR9AGPZcI/G53yJ1YbzqmTE73KXxZrd8o+84NRqNRqPRaDQajebD8hIAAP//uLd4IQ==") syz_mount_image$hfsplus(&(0x7f0000000540), &(0x7f0000000580)='./file1\x00', 0x1008404, &(0x7f00000005c0)=ANY=[], 0x85, 0x6b9, &(0x7f0000000780)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000e40)='.\x00', 0xa880, 0x97) getdents64(r3, &(0x7f0000000e80)=""/163, 0xba974ed140df4995) getdents64(r3, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r4, 0x5606, 0x9) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='afs\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000680)='100', 0x3) socket$nl_route(0x10, 0x3, 0x0) 3.183956482s ago: executing program 4 (id=1288): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x8, 0x1ff, 0x8, 0x2, 0x5, 0x7c099268, 0x80000000, 0x3bb}}}}]}, 0x96}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000400)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000480)="05031c00d3fc142efd004788031c09102c28", 0xfdef, 0x4, &(0x7f00000004c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.151471796s ago: executing program 5 (id=1289): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='/dev', 0xb3) 2.859305783s ago: executing program 5 (id=1290): link(&(0x7f000000b200)='./file1\x00', &(0x7f000000b240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.647895248s ago: executing program 5 (id=1291): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'veth0\x00'}) openat$audio(0xffffffffffffff9c, &(0x7f0000000700), 0x48141, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20008000) r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x400, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff0}}}, 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) 2.446290593s ago: executing program 2 (id=1292): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000800)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000840)=0x7) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000062) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000008c0)=@file={0x0, './cfg\x00'}, 0x61) sendmmsg$unix(r4, &(0x7f0000000940), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000980), 0x10106, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x10, 0x4, &(0x7f0000000e40)=ANY=[], &(0x7f0000000ec0)='GPL\x00', 0x2, 0xc3, &(0x7f0000001000)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000009c0)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000a40)='./cfg\x00', &(0x7f0000000a80)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000ffffffff0000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f6164003400028008000440000000000800054000000000082b45224f88dfe07b00024000000002080006400000000208000740000000080900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a"], 0x9c}}, 0x4) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@iptfs_pkt_size={0x8, 0x29, 0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40844}, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@migrate={0xcc, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e80), r0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x10000}, 0x20008000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x78}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xc, &(0x7f0000000140)=""/12, 0x41100, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 2.312852173s ago: executing program 5 (id=1293): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x200000, &(0x7f00000000c0), 0x3, 0x589, &(0x7f0000000680)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000c40)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000c80)='./proc\x00', &(0x7f0000000cc0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000d40)='.\x00', 0x8000, &(0x7f0000000d80)={0xb, 0x0, 0x100000}, 0x20) 2.18725858s ago: executing program 4 (id=1294): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x40000}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) add_key$fscrypt_v1(&(0x7f0000000d40), 0x0, 0x0, 0x0, 0xfffffffffffffffc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0xd, 0x4, &(0x7f0000001440)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000001480)='GPL\x00', 0x2, 0xfd90, &(0x7f00000014c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f00000015c0), 0x1f2, 0x10, &(0x7f0000001600), 0xfffffe51}, 0x48) unshare(0x26000600) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) r5 = timerfd_create(0x8, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000001640)={{}, {0x0, 0x989680}}, 0x0) ioctl$DM_DEV_WAIT(r2, 0xc138fd08, &(0x7f0000000640)={0x4, 0x0, 0x0, 0x140, 0x138, 0x0, 0x0, 0xc00, 0x7e, 0x0, @by_dev={r3}, "b917c1"}) r6 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@init_itable_val={'init_itable', 0x3d, 0xff}}, {@resgid}, {@noblock_validity}]}, 0x0, 0x48f, &(0x7f0000000780)="$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") r7 = openat(r6, &(0x7f0000000c40)='./file0\x00', 0x4c8c2bb75bdfc39a, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000c80)={0x8, 0x4, 0x0, 0x6, 0x4}) write$binfmt_script(r7, &(0x7f0000000cc0)={'#! ', './bus'}, 0x9) syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000d00)='./file0\x00', 0x18010, &(0x7f0000001140)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8, @ANYRES16=r7, @ANYRESDEC=r2], 0x1, 0x304, &(0x7f0000000d80)="$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") r8 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a00000003000000ef05000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140), &(0x7f0000001180), 0x8000224d, r8}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0xd, &(0x7f0000001280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x3}]}, &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001340)={r9, r8}, 0xc) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r10}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r1, r11, 0x5}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000001800)={'wlan0\x00'}) 2.085812451s ago: executing program 3 (id=1295): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000002440)={0xe, 0x4, &(0x7f0000002500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@generic={0x91, 0x1, 0x1, 0xb5}]}, &(0x7f0000002540)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000000900010073797a31000000002800048024000180090005006d65746100000000f1ff0180080003400000000508000240000000130900020073797a3200000000140000001100000000010000bfcbe65cad510ccc865d2b93c50b0a"], 0x7c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002400)=ANY=[@ANYBLOB="10000000fcffffff", @ANYRES64=0x3], 0x10) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket(0x2a, 0x3, 0x80000001) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000100)=@generic={0x82}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000002640)={0x1, 0xfffffffffffff092, @start={0x0, 0x1, "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", "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"}, [0xb69, 0x7507, 0xa, 0x3, 0x8, 0x1, 0xfffffffffffffffe, 0x7ff, 0x4000000000000, 0x77, 0x0, 0x0, 0xc, 0x5, 0x1, 0x10001, 0x4edf, 0x800, 0x9, 0x2, 0x7fffffff, 0x9, 0x6, 0x5, 0x7fff, 0x9, 0x8b3, 0x8, 0xc3, 0xc39, 0x8, 0x2, 0xfffffffffffffff7, 0xa, 0x0, 0x9, 0x4, 0x6f, 0xd138, 0xcac, 0x1000, 0x0, 0x3, 0x7, 0x8, 0x5, 0x1, 0x5, 0x8, 0x9, 0xfffffffffffffe01, 0x6, 0x1, 0x7fff, 0xffff, 0x8, 0x1800, 0x6, 0x8, 0xd3, 0x9, 0x37f72698, 0x1, 0x80000001]}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='/dev', 0x4) 1.363570982s ago: executing program 2 (id=1296): setns(0xc9, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000100)={'wlan1\x00', @random="01000300ffff"}) 1.177214159s ago: executing program 5 (id=1297): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write$cgroup_pid(r2, &(0x7f0000000480)=0xffffffffffffffff, 0x12) 1.064798132s ago: executing program 2 (id=1298): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write$cgroup_pid(r2, &(0x7f0000000480)=0xffffffffffffffff, 0x12) 938.708839ms ago: executing program 1 (id=1299): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000240)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000", 0x34) r2 = socket$nl_route(0x10, 0x3, 0x0) sendto(r2, &(0x7f0000000280)="340000001a00010001000000000000000220000000000000000000000800030001000000080002000101010108000100e1010203", 0x34, 0x0, 0x0, 0x0) close(0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f00000002c0)="0fc71fd3b1800066b91406000066b80800000066ba000000000f300f0fe490360f21dd3667660f6b476f360fc779bd660fc732660f38802fbaf80c66b8c8d4388366efbafc0c66b81c00000066ef", 0x4e}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001080)={'vcan0\x00'}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x6a, 0x1, 0x0, 0xc) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000010c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000001100)={0x1d, r7, 0x8000000000000003, {0x0, 0xf}}, 0x18) r8 = socket$kcm(0x2, 0xa, 0x2) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000001140)={'vcan0\x00', 0x0}) sendto$packet(r9, &(0x7f0000001180)="18", 0x48, 0x20008884, &(0x7f00000011c0)={0x11, 0xd, r10, 0x1, 0xfd, 0x6, @multicast}, 0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001340)={&(0x7f0000001200)=ANY=[@ANYBLOB="1c010000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf25040000007000018008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000000800030000000000140002006772657461703000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB='\x00\f\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020064766d727031000000000000000000001400020076657468305f746f5f626174616476003400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000200000014000180080003000200000008000100", @ANYRES32=r10, @ANYBLOB="5000018008000300020000001400020064766d72703100000000000000000000080003000200000014000200766c616e3000000000000000000000001400020077673000"/80], 0x11c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000801) memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000340)={[0x9, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x911d, 0x7, 0x8, 0x9, 0x5, 0x1006, 0xc, 0x8, 0x8000, 0xffffffffffffffff], 0x1000, 0x200000}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000400)=@x86={0x40, 0x1, 0xc, 0x0, 0x2, 0x3, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x20005, 0xfffffff8, 0xfd, 0xff, 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 796.064562ms ago: executing program 3 (id=1300): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000300)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_clone(0x80081000, 0x0, 0x300, 0x0, 0x0, 0x0) 744.06899ms ago: executing program 4 (id=1301): link(&(0x7f000000b200)='./file1\x00', &(0x7f000000b240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 395.093438ms ago: executing program 4 (id=1302): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000180)=0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x29d6, 0x4) sendmmsg$inet(r0, &(0x7f0000000200)=[{{&(0x7f0000000240)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24004800) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000900)="02", 0x1, 0x4) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40012000, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'ip6gre0\x00', 0x0}) sendmmsg$sock(r3, &(0x7f0000000400)=[{{&(0x7f0000000440)=@xdp={0x2c, 0x5, r4, 0xe}, 0x80, 0x0}}], 0x1, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, &(0x7f0000000000), 0x8, &(0x7f0000000040)) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg(r3, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001100)="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", 0x1000}, {&(0x7f0000002100)="5fa4b921a2c4a091dcb032c97c0783d5a060df53297362845d583ce18fa975bfe146102755a00c9b019732e8feca9e871e833c1814081ea1ce5b2f805b6adc", 0x3f}, {&(0x7f0000002140)="2d90f44cebd9d02bd7f068c0bd6a6578490db06dc1b9ec08d976ca883acca76e9d8e697d85d4e69186a25a7a62", 0x2d}, {&(0x7f0000002180)="d8f794751d47043cea2af2af2ec5881f6cc409c89d11d4e9b42f0fd6893d6bdbbb842cb118249d5a7587fb00b357d940c295525dbff981709b3c93b310d327850f7bddbf1ac0a48f958e695a4fa2f5558dc90e87ddda7e8dbcff8a2078a65aed140662a2f19e1704afb78b59a40d18841e61c4a20c8a018b21410d29562f681f", 0x80}], 0x4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x13, 0x8, &(0x7f00000024c0)=ANY=[@ANYBLOB="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", @ANYRES64=r6, @ANYRES32=r4, @ANYRES16=r1, @ANYRES64=r4, @ANYRES16=r3, @ANYRESDEC=0x0], &(0x7f0000000f40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, r1, 0x8, &(0x7f0000000f80), 0x8, 0x10, &(0x7f0000000fc0)={0x5, 0x5, 0x0, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000540)={0x8, {{0xa, 0x4e20, 0x4c2, @empty, 0x800}}, {{0xa, 0x4e24, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}}, 0x108) write(r6, &(0x7f0000000140)="560002002a000000000000000001010001000000000000000000000000000000000000000000000000ffffffffffffff", 0x30) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000300)={"bd4568df", 0x3, 0x5, 0x4, 0x100, 0x803, "000000ffff0600fdff090000000800", "00008000", "0600f8ff", '\x00', ["00fbff010000c100", "6cb8fffffd00", "f0ffffffffebffff00000010", "fdff2dc44d0f00"]}) syz_usb_connect(0x7, 0x311, &(0x7f0000000940)=ANY=[@ANYBLOB="120110031f7aeb08041c1500a9ea010203010902ff020206bc00fe0904c40907ffe3132009058000400004a1070725010ce400008623b0c0cd6422a00f7dba9044b36037a0eb2978421f6657302d658f9b44ed36078a00f3247e5600fd247c36140d8dd03234bdb906ec62461ff8fe04551bfaa58ab5a2580bdeebbd12626808d50d1c73d7f7b06f31185e6c954c568b4573909e42f5f66ec6efe6627379d153294b9b468c57adb349b5c2ba2036f1fbe05179125545ee0ef0300905090000000000000025010c0800000725010401000009057c00080001e3a007250104ed0d00090501100004a80d0709050a10000498040909050110000209c90c0905000120000905fc0904aa0207ffffff0409210104020122930409050000000201012a0905020308000106040725010009010009050302ff030e050a09050c0100040fc0010725010481ff030905061010000001fa09050b000800ff0510c122c17139b70c0e0049203d57585fea3bf18d4b3b414e43de785973828e9b0e0b06d45847cbc99baf29aa142cd4c1c7dce114e5d0cbaf84e96a2667489517579df12df382c5dfc14dc287b279efb51c7c5477bb558100282ff4876404afb00ce89f3088e135e087ee338c42cca690cd582d45ccb629126e2cd9770c473b36b38d582d6237178424b3abde9d8681c74b8ac4a060ff827c8349516ab820cdb9dc167841a7bd46395a2d35821071a219137809f832e2e7803a81564a7f3a7caa30390725010cb80400090580032002060c01e522553bd5b1dc3de51c9c1bc40f99a1e25d5ae502d87edddf9fc492765b04b4dae5af73b05ed2a57a8a960517eb75502a51ee9b1b1de792be13e551920ef5acb57bacc91c48211618593fc96a41fe0aded02465203e51b9ed5213e02cac618923774e11b0d63db282e12adfa8c36cd16a52b76272dcde22e50144d061d2107e665a638099fbe047ff96d5628e4476a56822838907dbdcb1e430a5bbb53cef4ba093b9cc06fe2ca14206dc4b7ed5d643d0d9dd2346e445d8d964094c84d82eced67f67cd56e0a25bcb61bb45ecc32b795c01b89703f46a6765fb3bafbcd402c563e25a57affcf668d991aa289f415e1d2c4c51020e8f6a398b969d7ab0c38953ff1a1c2adc55ad6d43d277d73eabfe2e3b788d4c901670a42299ed5f7b3f334c4880cab226fe1df8a69b14969616054ee79d29746be31faa6b586ba0174f0f4d07265c95c96ae1fb2ee1bfe30161be58266b340c66a6d5f215a587fc1b4c1ef6694fcf34426d02802376b8d18a64efae87181d124398c130841f8c8a03435ad92ca95b54106b654801aa8b056ed164b3d4d5662eaa417fbbf738f111d6f52b48babd40aa3d95049c241c1c5a1d97c2f122fc4bd9debfc50a0daaa2bf8ba7"], &(0x7f00000010c0)={0x0, 0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="050f051ccffaad9a740c884d65c0230f70eac11882cc93b32f7ee4250000"]}) 96.496544ms ago: executing program 3 (id=1303): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'veth0\x00'}) openat$audio(0xffffffffffffff9c, &(0x7f0000000700), 0x48141, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20008000) r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x400, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff0}}}, 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) 96.207949ms ago: executing program 1 (id=1304): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x8, 0x1ff, 0x8, 0x2, 0x5, 0x7c099268, 0x80000000, 0x3bb}}}}]}, 0x96}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000400)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000480)="05031c00d3fc142efd004788031c09102c28", 0xfdef, 0x4, &(0x7f00000004c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 3 (id=1305): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001cc0)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001d00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001ec0)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0xfff3, 0xfff1}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x80000001, 0x101, 0x206, 0xc3ac, 0x80, 0x7ff, 0x5950, 0x4, 0x0, 0x4, 0x2, 0xc, 0x9, 0x7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001f40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000002000)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) kernel console output (not intermixed with test programs): 0 [ 187.890666][ T8723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.890683][ T8723] ? clear_bhb_loop+0x70/0xc0 [ 187.890703][ T8723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.890718][ T8723] RIP: 0033:0x00007fb18e36034e [ 187.890736][ T8723] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 187.890751][ T8723] RSP: 002b:00007fb18f1cbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 187.890770][ T8723] RAX: ffffffffffffffda RBX: 00007fb18f1cc6c0 RCX: 00007fb18e36034e [ 187.890782][ T8723] RDX: 000000000000000f RSI: 00007fb18f1cc0a0 RDI: 0000000000000003 [ 187.890793][ T8723] RBP: 00007fb18f1cc090 R08: 0000000000000000 R09: 0000000000000000 [ 187.890805][ T8723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.890815][ T8723] R13: 00007fb18e626038 R14: 00007fb18e625fa0 R15: 00007ffe594a2948 [ 187.890843][ T8723] [ 188.360502][ T8730] syzkaller0: entered promiscuous mode [ 188.360526][ T8730] syzkaller0: entered allmulticast mode [ 188.378714][ T5642] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 190.004034][ T8759] loop3: detected capacity change from 0 to 32768 [ 190.011616][ T8759] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.992 (8759) [ 190.019370][ T8759] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 190.019398][ T8759] BTRFS info (device loop3): using blake2b checksum algorithm [ 190.019693][ T8759] BTRFS error (device loop3): superblock checksum mismatch [ 190.019864][ T8759] BTRFS error (device loop3): open_ctree failed: -EINVAL [ 191.295903][ T4959] Bluetooth: hci2: command 0x0406 tx timeout [ 191.312980][ T4959] Bluetooth: hci1: command 0x0406 tx timeout [ 191.313014][ T4959] Bluetooth: hci3: command 0x0406 tx timeout [ 191.313035][ T4959] Bluetooth: hci4: command 0x0406 tx timeout [ 191.834899][ T8741] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.987'. [ 192.013412][ T8778] loop2: detected capacity change from 0 to 128 [ 192.071500][ T8778] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.078834][ T8786] loop5: detected capacity change from 0 to 1024 [ 192.093612][ T8778] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.437687][ T8791] syz.1.999 (8791) used greatest stack depth: 18984 bytes left [ 193.690747][ T5642] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.810718][ T8803] loop2: detected capacity change from 0 to 16 [ 193.836605][ T8803] erofs (device loop2): unsupported datalayout 7 of nid 36 [ 193.985237][ T8807] gadgetfs: bound to dummy_udc driver [ 194.094920][ T8813] loop3: detected capacity change from 0 to 256 [ 194.255923][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.255974][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.341819][ T8811] syzkaller0: entered promiscuous mode [ 194.341843][ T8811] syzkaller0: entered allmulticast mode [ 194.705590][ T8826] loop3: detected capacity change from 0 to 128 [ 194.733508][ T8826] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 194.735836][ T8826] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.868460][ T5652] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.986483][ T8833] FAULT_INJECTION: forcing a failure. [ 194.986483][ T8833] name failslab, interval 1, probability 0, space 0, times 0 [ 194.986513][ T8833] CPU: 1 UID: 0 PID: 8833 Comm: syz.1.1003 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.986538][ T8833] Tainted: [L]=SOFTLOCKUP [ 194.986545][ T8833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 194.986555][ T8833] Call Trace: [ 194.986562][ T8833] [ 194.986570][ T8833] dump_stack_lvl+0xe8/0x150 [ 194.986603][ T8833] should_fail_ex+0x3eb/0x540 [ 194.986634][ T8833] should_failslab+0xa8/0x100 [ 194.986656][ T8833] __kmalloc_cache_node_noprof+0xa5/0x620 [ 194.986682][ T8833] ? stack_depot_save_flags+0x33/0x840 [ 194.986711][ T8833] ? __get_vm_area_node+0x155/0x2f0 [ 194.986730][ T8833] ? __get_vm_area_node+0x155/0x2f0 [ 194.986757][ T8833] __get_vm_area_node+0x155/0x2f0 [ 194.986785][ T8833] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 194.986810][ T8833] ? copy_process+0x7ea/0x4510 [ 194.986845][ T8833] ? percpu_ref_get_many+0x19/0x140 [ 194.986875][ T8833] ? __memcg_slab_post_alloc_hook+0x46f/0xdb0 [ 194.986906][ T8833] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 194.986930][ T8833] ? dup_task_struct+0x52/0xa00 [ 194.986952][ T8833] ? trace_kmem_cache_alloc+0x29/0xe0 [ 194.986976][ T8833] ? memcpy_and_pad+0x48/0x80 [ 194.987001][ T8833] __vmalloc_node_noprof+0xc2/0x100 [ 194.987024][ T8833] ? copy_process+0x7ea/0x4510 [ 194.987046][ T8833] ? copy_process+0x7ea/0x4510 [ 194.987072][ T8833] dup_task_struct+0x2c6/0xa00 [ 194.987102][ T8833] copy_process+0x7ea/0x4510 [ 194.987143][ T8833] ? kstrtouint+0x6e/0xe0 [ 194.987176][ T8833] ? lock_acquire+0x115/0x350 [ 194.987198][ T8833] ? get_pid_task+0x20/0x1f0 [ 194.987221][ T8833] ? __pfx_copy_process+0x10/0x10 [ 194.987246][ T8833] ? get_pid_task+0x20/0x1f0 [ 194.987264][ T8833] ? get_pid_task+0x20/0x1f0 [ 194.987292][ T8833] kernel_clone+0x2d7/0x940 [ 194.987324][ T8833] ? __pfx_kernel_clone+0x10/0x10 [ 194.987369][ T8833] __x64_sys_clone+0x1b6/0x230 [ 194.987398][ T8833] ? __pfx___x64_sys_clone+0x10/0x10 [ 194.987440][ T8833] ? __pfx_ksys_write+0x10/0x10 [ 194.987469][ T8833] do_syscall_64+0x16a/0x530 [ 194.987492][ T8833] ? trace_irq_disable+0x3b/0x140 [ 194.987516][ T8833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.987535][ T8833] ? clear_bhb_loop+0x70/0xc0 [ 194.987558][ T8833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.987576][ T8833] RIP: 0033:0x00007f4c1eb9fb19 [ 194.987593][ T8833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.987609][ T8833] RSP: 002b:00007f4c1fadcfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 194.987631][ T8833] RAX: ffffffffffffffda RBX: 00007f4c1ee25fa0 RCX: 00007f4c1eb9fb19 [ 194.987645][ T8833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080081000 [ 194.987655][ T8833] RBP: 00007f4c1fadd090 R08: 0000000000000000 R09: 0000000000000000 [ 194.987667][ T8833] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 194.987677][ T8833] R13: 00007f4c1ee26038 R14: 00007f4c1ee25fa0 R15: 00007fff2b5ae448 [ 194.987708][ T8833] [ 194.996376][ T8833] syz.1.1003: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 194.996603][ T8833] CPU: 1 UID: 0 PID: 8833 Comm: syz.1.1003 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.996628][ T8833] Tainted: [L]=SOFTLOCKUP [ 194.996634][ T8833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 194.996644][ T8833] Call Trace: [ 194.996650][ T8833] [ 194.996657][ T8833] dump_stack_lvl+0xe8/0x150 [ 194.996690][ T8833] warn_alloc+0x24d/0x270 [ 194.996715][ T8833] ? __kasan_kmalloc+0x22/0xb0 [ 194.996736][ T8833] ? __pfx_warn_alloc+0x10/0x10 [ 194.996759][ T8833] ? __get_vm_area_node+0x155/0x2f0 [ 194.996786][ T8833] ? __get_vm_area_node+0x2a9/0x2f0 [ 194.996814][ T8833] __vmalloc_node_range_noprof+0x396/0x16f0 [ 194.996847][ T8833] ? percpu_ref_get_many+0x19/0x140 [ 194.996875][ T8833] ? __memcg_slab_post_alloc_hook+0x46f/0xdb0 [ 194.996905][ T8833] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 194.996927][ T8833] ? dup_task_struct+0x52/0xa00 [ 194.996950][ T8833] ? trace_kmem_cache_alloc+0x29/0xe0 [ 194.996973][ T8833] ? memcpy_and_pad+0x48/0x80 [ 194.996998][ T8833] __vmalloc_node_noprof+0xc2/0x100 [ 194.997021][ T8833] ? copy_process+0x7ea/0x4510 [ 194.997042][ T8833] ? copy_process+0x7ea/0x4510 [ 194.997067][ T8833] dup_task_struct+0x2c6/0xa00 [ 194.997097][ T8833] copy_process+0x7ea/0x4510 [ 194.997136][ T8833] ? kstrtouint+0x6e/0xe0 [ 194.997167][ T8833] ? lock_acquire+0x115/0x350 [ 194.997189][ T8833] ? get_pid_task+0x20/0x1f0 [ 194.997213][ T8833] ? __pfx_copy_process+0x10/0x10 [ 194.997237][ T8833] ? get_pid_task+0x20/0x1f0 [ 194.997254][ T8833] ? get_pid_task+0x20/0x1f0 [ 194.997281][ T8833] kernel_clone+0x2d7/0x940 [ 194.997312][ T8833] ? __pfx_kernel_clone+0x10/0x10 [ 194.997355][ T8833] __x64_sys_clone+0x1b6/0x230 [ 194.997383][ T8833] ? __pfx___x64_sys_clone+0x10/0x10 [ 194.997426][ T8833] ? __pfx_ksys_write+0x10/0x10 [ 194.997453][ T8833] do_syscall_64+0x16a/0x530 [ 194.997475][ T8833] ? trace_irq_disable+0x3b/0x140 [ 194.997499][ T8833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.997517][ T8833] ? clear_bhb_loop+0x70/0xc0 [ 194.997538][ T8833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.997555][ T8833] RIP: 0033:0x00007f4c1eb9fb19 [ 194.997573][ T8833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.997587][ T8833] RSP: 002b:00007f4c1fadcfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 194.997604][ T8833] RAX: ffffffffffffffda RBX: 00007f4c1ee25fa0 RCX: 00007f4c1eb9fb19 [ 194.997617][ T8833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080081000 [ 194.997627][ T8833] RBP: 00007f4c1fadd090 R08: 0000000000000000 R09: 0000000000000000 [ 194.997638][ T8833] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 194.997648][ T8833] R13: 00007f4c1ee26038 R14: 00007f4c1ee25fa0 R15: 00007fff2b5ae448 [ 194.997677][ T8833] [ 195.006450][ T8833] Mem-Info: [ 195.006464][ T8833] active_anon:3124 inactive_anon:6329 isolated_anon:0 [ 195.006464][ T8833] active_file:1766 inactive_file:12871 isolated_file:0 [ 195.006464][ T8833] unevictable:0 dirty:97 writeback:0 [ 195.006464][ T8833] slab_reclaimable:6926 slab_unreclaimable:103170 [ 195.006464][ T8833] mapped:30417 shmem:3547 pagetables:1320 [ 195.006464][ T8833] sec_pagetables:0 bounce:0 [ 195.006464][ T8833] kernel_misc_reclaimable:0 [ 195.006464][ T8833] free:1332664 free_pcp:22279 free_cma:0 [ 195.006515][ T8833] Node 0 active_anon:12496kB inactive_anon:25316kB active_file:7048kB inactive_file:51288kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121652kB dirty:384kB writeback:0kB shmem:14188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13172kB pagetables:5144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 195.006564][ T8833] Node 1 active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 195.006610][ T8833] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 195.006660][ T8833] lowmem_reserve[]: 0 2463 2464 2464 2464 [ 195.006691][ T8833] Node 0 DMA32 free:1380496kB boost:0kB min:33916kB low:42392kB high:50868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:12504kB inactive_anon:25316kB active_file:7048kB inactive_file:51288kB unevictable:0kB writepending:384kB zspages:0kB present:3129332kB managed:2522348kB mlocked:0kB bounce:0kB free_pcp:83520kB local_pcp:34268kB free_cma:0kB [ 195.006743][ T8833] lowmem_reserve[]: 0 0 1 1 1 [ 195.006772][ T8833] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1380kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 195.006820][ T8833] lowmem_reserve[]: 0 0 0 0 0 [ 195.006848][ T8833] Node 1 Normal free:3934800kB boost:0kB min:55964kB low:69952kB high:83940kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:196kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:5592kB local_pcp:1376kB free_cma:0kB [ 195.006899][ T8833] lowmem_reserve[]: 0 0 0 0 0 [ 195.006928][ T8833] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 195.007031][ T8833] Node 0 DMA32: 750*4kB (UM) 1133*8kB (UME) 435*16kB (UME) 149*32kB (UME) 154*64kB (UME) 38*128kB (ME) 2*256kB (UE) 2*512kB (UE) 3*1024kB (M) 3*2048kB (UME) 325*4096kB (UM) = 1380464kB [ 195.007173][ T8833] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 195.007257][ T8833] Node 1 Normal: 3*4kB (M) 5*8kB (UM) 3*16kB (UM) 15*32kB (UM) 11*64kB (UM) 5*128kB (UM) 3*256kB (UM) 2*512kB (UM) 1*1024kB (U) 1*2048kB (U) 959*4096kB (M) = 3934852kB [ 195.007401][ T8833] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 195.007415][ T8833] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 195.007429][ T8833] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 195.007443][ T8833] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 195.007457][ T8833] 18181 total pagecache pages [ 195.007468][ T8833] 0 pages in swap cache [ 195.007474][ T8833] Free swap = 124996kB [ 195.007480][ T8833] Total swap = 124996kB [ 195.007487][ T8833] 2097051 pages RAM [ 195.007493][ T8833] 0 pages HighMem/MovableOnly [ 195.007499][ T8833] 434503 pages reserved [ 195.007505][ T8833] 0 pages cma reserved [ 195.565990][ T8848] gadgetfs: bound to dummy_udc driver [ 195.618128][ T8846] FAULT_INJECTION: forcing a failure. [ 195.618128][ T8846] name failslab, interval 1, probability 0, space 0, times 0 [ 195.618160][ T8846] CPU: 1 UID: 0 PID: 8846 Comm: syz.3.1022 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.618186][ T8846] Tainted: [L]=SOFTLOCKUP [ 195.618192][ T8846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 195.618203][ T8846] Call Trace: [ 195.618211][ T8846] [ 195.618218][ T8846] dump_stack_lvl+0xe8/0x150 [ 195.618254][ T8846] should_fail_ex+0x3eb/0x540 [ 195.618288][ T8846] should_failslab+0xa8/0x100 [ 195.618308][ T8846] ? single_open+0x119/0x240 [ 195.618331][ T8846] kmem_cache_alloc_noprof+0x9c/0x600 [ 195.618355][ T8846] ? __kmalloc_cache_noprof+0x31c/0x600 [ 195.618382][ T8846] ? single_open+0x5a/0x240 [ 195.618401][ T8846] ? single_open+0x119/0x240 [ 195.618429][ T8846] single_open+0x119/0x240 [ 195.618454][ T8846] bm_entry_open+0x50/0xf0 [ 195.618478][ T8846] ? __pfx_bm_entry_open+0x10/0x10 [ 195.618502][ T8846] do_dentry_open+0x80e/0x1360 [ 195.618535][ T8846] vfs_open_consume+0x4a/0x350 [ 195.618557][ T8846] ? path_openat+0x16e1/0x20f0 [ 195.618578][ T8846] path_openat+0x16fc/0x20f0 [ 195.618612][ T8846] do_file_open+0x23e/0x4a0 [ 195.618636][ T8846] ? __pfx_do_file_open+0x10/0x10 [ 195.618674][ T8846] ? _raw_spin_unlock+0x28/0x50 [ 195.618696][ T8846] ? alloc_fd+0x6af/0x760 [ 195.618730][ T8846] do_sys_openat2+0x115/0x200 [ 195.618754][ T8846] ? __se_sys_futex+0x3a8/0x450 [ 195.618773][ T8846] ? __pfx_do_sys_openat2+0x10/0x10 [ 195.618802][ T8846] ? rcu_is_watching+0x16/0xb0 [ 195.618835][ T8846] __x64_sys_openat+0x138/0x170 [ 195.618863][ T8846] do_syscall_64+0x16a/0x530 [ 195.618887][ T8846] ? trace_irq_disable+0x3b/0x140 [ 195.618911][ T8846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.618930][ T8846] ? clear_bhb_loop+0x70/0xc0 [ 195.618953][ T8846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.618971][ T8846] RIP: 0033:0x00007fb18e39fb19 [ 195.618990][ T8846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.619005][ T8846] RSP: 002b:00007fb18f1cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 195.619025][ T8846] RAX: ffffffffffffffda RBX: 00007fb18e625fa0 RCX: 00007fb18e39fb19 [ 195.619039][ T8846] RDX: 0000000000000002 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 195.619052][ T8846] RBP: 00007fb18e437b70 R08: 0000000000000000 R09: 0000000000000000 [ 195.619063][ T8846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.619074][ T8846] R13: 00007fb18e626038 R14: 00007fb18e625fa0 R15: 00007ffe594a2948 [ 195.619112][ T8846] [ 195.819931][ T5375] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 195.820261][ C1] gadgetfs: connected [ 195.821379][ T5375] gadgetfs: disconnected [ 195.877284][ T8857] FAULT_INJECTION: forcing a failure. [ 195.877284][ T8857] name failslab, interval 1, probability 0, space 0, times 0 [ 195.877327][ T8857] CPU: 1 UID: 0 PID: 8857 Comm: syz.1.1026 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.877367][ T8857] Tainted: [L]=SOFTLOCKUP [ 195.877375][ T8857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 195.877394][ T8857] Call Trace: [ 195.877402][ T8857] [ 195.877411][ T8857] dump_stack_lvl+0xe8/0x150 [ 195.877451][ T8857] should_fail_ex+0x3eb/0x540 [ 195.877490][ T8857] should_failslab+0xa8/0x100 [ 195.877514][ T8857] ? single_open+0x119/0x240 [ 195.877541][ T8857] kmem_cache_alloc_noprof+0x9c/0x600 [ 195.877569][ T8857] ? __kmalloc_cache_noprof+0x31c/0x600 [ 195.877601][ T8857] ? single_open+0x5a/0x240 [ 195.877626][ T8857] ? single_open+0x119/0x240 [ 195.877673][ T8857] single_open+0x119/0x240 [ 195.877708][ T8857] bm_entry_open+0x50/0xf0 [ 195.877738][ T8857] ? __pfx_bm_entry_open+0x10/0x10 [ 195.877768][ T8857] do_dentry_open+0x80e/0x1360 [ 195.877810][ T8857] vfs_open_consume+0x4a/0x350 [ 195.877836][ T8857] ? path_openat+0x16e1/0x20f0 [ 195.877862][ T8857] path_openat+0x16fc/0x20f0 [ 195.877909][ T8857] do_file_open+0x23e/0x4a0 [ 195.877941][ T8857] ? __pfx_do_file_open+0x10/0x10 [ 195.878004][ T8857] ? _raw_spin_unlock+0x28/0x50 [ 195.878035][ T8857] ? alloc_fd+0x6af/0x760 [ 195.878078][ T8857] do_sys_openat2+0x115/0x200 [ 195.878107][ T8857] ? __se_sys_futex+0x3a8/0x450 [ 195.878131][ T8857] ? __pfx_do_sys_openat2+0x10/0x10 [ 195.878170][ T8857] ? rcu_is_watching+0x16/0xb0 [ 195.878208][ T8857] __x64_sys_openat+0x138/0x170 [ 195.878243][ T8857] do_syscall_64+0x16a/0x530 [ 195.878271][ T8857] ? trace_irq_disable+0x3b/0x140 [ 195.878304][ T8857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.878328][ T8857] ? clear_bhb_loop+0x70/0xc0 [ 195.878356][ T8857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.878378][ T8857] RIP: 0033:0x00007f4c1eb9fb19 [ 195.878401][ T8857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.878421][ T8857] RSP: 002b:00007f4c1fadd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 195.878445][ T8857] RAX: ffffffffffffffda RBX: 00007f4c1ee25fa0 RCX: 00007f4c1eb9fb19 [ 195.878464][ T8857] RDX: 0000000000000002 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 195.878479][ T8857] RBP: 00007f4c1ec37b70 R08: 0000000000000000 R09: 0000000000000000 [ 195.878494][ T8857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.878507][ T8857] R13: 00007f4c1ee26038 R14: 00007f4c1ee25fa0 R15: 00007fff2b5ae448 [ 195.878541][ T8857] [ 195.988081][ C1] gadgetfs: connected [ 195.989099][ T5375] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00 [ 195.989455][ T5375] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 195.989487][ T5375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.017911][ C1] gadgetfs: configuration #1 [ 196.026900][ T8860] loop3: detected capacity change from 0 to 512 [ 196.104649][ T8860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.104788][ T8860] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.161281][ T8865] loop1: detected capacity change from 0 to 128 [ 196.228851][ T8865] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.233175][ T8865] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.358776][ T8847] gadgetfs: suspended from state 3 [ 196.358884][ T8847] gadgetfs: disconnected [ 196.360584][ T5375] usb 1-1: USB disconnect, device number 7 [ 196.490163][ T5648] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 198.312236][ T8860] geneve2: entered allmulticast mode [ 198.434078][ T5652] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.579714][ T8890] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1036'. [ 198.652464][ T8897] loop5: detected capacity change from 0 to 128 [ 198.686555][ T8897] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.702496][ T8897] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.726815][ T8894] gadgetfs: bound to dummy_udc driver [ 198.874719][ T7934] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 198.938292][ T5375] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 198.944238][ T8906] gadgetfs: bound to dummy_udc driver [ 199.079565][ T5375] usb 5-1: device descriptor read/64, error -71 [ 199.085167][ T8910] syzkaller0: entered promiscuous mode [ 199.085191][ T8910] syzkaller0: entered allmulticast mode [ 199.193447][ T8922] FAULT_INJECTION: forcing a failure. [ 199.193447][ T8922] name failslab, interval 1, probability 0, space 0, times 0 [ 199.193476][ T8922] CPU: 1 UID: 0 PID: 8922 Comm: syz.5.1048 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.193501][ T8922] Tainted: [L]=SOFTLOCKUP [ 199.193507][ T8922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 199.193518][ T8922] Call Trace: [ 199.193525][ T8922] [ 199.193532][ T8922] dump_stack_lvl+0xe8/0x150 [ 199.193564][ T8922] should_fail_ex+0x3eb/0x540 [ 199.193593][ T8922] should_failslab+0xa8/0x100 [ 199.193612][ T8922] __kmalloc_noprof+0xf9/0x710 [ 199.193637][ T8922] ? __kmalloc_cache_noprof+0x148/0x600 [ 199.193660][ T8922] ? alloc_pipe_info+0x1f4/0x4c0 [ 199.193678][ T8922] ? alloc_pipe_info+0x1f4/0x4c0 [ 199.193703][ T8922] alloc_pipe_info+0x1f4/0x4c0 [ 199.193726][ T8922] splice_direct_to_actor+0xa41/0xcb0 [ 199.193765][ T8922] ? lock_acquire+0x115/0x350 [ 199.193788][ T8922] ? __pfx_aa_file_perm+0x10/0x10 [ 199.193823][ T8922] ? __pfx_direct_splice_actor+0x10/0x10 [ 199.193848][ T8922] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 199.193885][ T8922] do_splice_direct+0x195/0x290 [ 199.193915][ T8922] ? __pfx_do_splice_direct+0x10/0x10 [ 199.193942][ T8922] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 199.193962][ T8922] ? bpf_lsm_file_permission+0x9/0x20 [ 199.193978][ T8922] ? security_file_permission+0x75/0x260 [ 199.193997][ T8922] ? rw_verify_area+0x203/0x4c0 [ 199.194021][ T8922] ? fdget+0x1ac/0x250 [ 199.194049][ T8922] do_sendfile+0x52e/0x7c0 [ 199.194079][ T8922] ? __pfx_do_sendfile+0x10/0x10 [ 199.194104][ T8922] ? fdget+0x1ac/0x250 [ 199.194136][ T8922] __se_sys_sendfile64+0x144/0x1a0 [ 199.194160][ T8922] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 199.194192][ T8922] do_syscall_64+0x16a/0x530 [ 199.194215][ T8922] ? trace_irq_disable+0x3b/0x140 [ 199.194240][ T8922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.194258][ T8922] ? clear_bhb_loop+0x70/0xc0 [ 199.194280][ T8922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.194298][ T8922] RIP: 0033:0x00007f02ffd9fb19 [ 199.194316][ T8922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.194331][ T8922] RSP: 002b:00007f0300cd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 199.194351][ T8922] RAX: ffffffffffffffda RBX: 00007f0300025fa0 RCX: 00007f02ffd9fb19 [ 199.194365][ T8922] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 199.194376][ T8922] RBP: 00007f0300cd9090 R08: 0000000000000000 R09: 0000000000000000 [ 199.194387][ T8922] R10: 0000000020000006 R11: 0000000000000246 R12: 0000000000000001 [ 199.194402][ T8922] R13: 00007f0300026038 R14: 00007f0300025fa0 R15: 00007ffcfc962498 [ 199.194431][ T8922] [ 199.339029][ T5375] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 199.399501][ T8928] loop3: detected capacity change from 0 to 2048 [ 199.457333][ T8928] loop3: p1 p2 p3 [ 199.457333][ T8928] p1: [ 199.457559][ T8928] loop3: p1 size 16779263 extends beyond EOD, truncated [ 199.481886][ T8928] loop3: p2 size 458752 extends beyond EOD, truncated [ 199.484893][ T5375] usb 5-1: device descriptor read/64, error -71 [ 199.490709][ T8928] loop3: p3 start 3036741376 is beyond EOD, truncated [ 199.588300][ T5375] usb usb5-port1: attempt power cycle [ 199.634357][ T8933] loop5: detected capacity change from 0 to 8 [ 199.663035][ T8933] overlayfs: missing 'lowerdir' [ 199.937925][ T5375] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 199.981001][ T5375] usb 5-1: device descriptor read/8, error -71 [ 200.223134][ T5375] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 200.262469][ T5375] usb 5-1: device descriptor read/8, error -71 [ 200.371789][ T5375] usb usb5-port1: unable to enumerate USB device [ 201.626931][ T8937] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1053'. [ 201.751328][ T8946] gadgetfs: bound to dummy_udc driver [ 201.854100][ T8955] loop2: detected capacity change from 0 to 256 [ 201.934210][ T8955] FAULT_INJECTION: forcing a failure. [ 201.934210][ T8955] name failslab, interval 1, probability 0, space 0, times 0 [ 201.934241][ T8955] CPU: 1 UID: 0 PID: 8955 Comm: syz.2.1060 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.934264][ T8955] Tainted: [L]=SOFTLOCKUP [ 201.934270][ T8955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 201.934281][ T8955] Call Trace: [ 201.934288][ T8955] [ 201.934296][ T8955] dump_stack_lvl+0xe8/0x150 [ 201.934329][ T8955] should_fail_ex+0x3eb/0x540 [ 201.934362][ T8955] should_failslab+0xa8/0x100 [ 201.934384][ T8955] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 201.934412][ T8955] ? __d_alloc+0x37/0x820 [ 201.934436][ T8955] ? __d_alloc+0x37/0x820 [ 201.934468][ T8955] __d_alloc+0x37/0x820 [ 201.934498][ T8955] d_alloc+0x4b/0x190 [ 201.934522][ T8955] ? lookup_one_qstr_excl+0xc4/0x360 [ 201.934551][ T8955] lookup_one_qstr_excl+0xd8/0x360 [ 201.934584][ T8955] filename_create+0x20e/0x370 [ 201.934609][ T8955] ? __pfx_filename_create+0x10/0x10 [ 201.934639][ T8955] filename_mkdirat+0xd2/0x550 [ 201.934658][ T8955] ? __might_fault+0xaf/0x130 [ 201.934685][ T8955] ? __pfx_filename_mkdirat+0x10/0x10 [ 201.934709][ T8955] ? do_getname+0x151/0x250 [ 201.934734][ T8955] __se_sys_mkdirat+0x35/0x150 [ 201.934757][ T8955] do_syscall_64+0x16a/0x530 [ 201.934779][ T8955] ? trace_irq_disable+0x3b/0x140 [ 201.934804][ T8955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.934822][ T8955] ? clear_bhb_loop+0x70/0xc0 [ 201.934845][ T8955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.934863][ T8955] RIP: 0033:0x00007f9866d9fb19 [ 201.934881][ T8955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.934896][ T8955] RSP: 002b:00007f9864fee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 201.934915][ T8955] RAX: ffffffffffffffda RBX: 00007f9867025fa0 RCX: 00007f9866d9fb19 [ 201.934928][ T8955] RDX: 0000000000000030 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 201.934940][ T8955] RBP: 00007f9864fee090 R08: 0000000000000000 R09: 0000000000000000 [ 201.934952][ T8955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.934962][ T8955] R13: 00007f9867026038 R14: 00007f9867025fa0 R15: 00007ffcde7a0508 [ 201.934994][ T8955] [ 202.066345][ T8962] loop4: detected capacity change from 0 to 8 [ 202.104548][ T8963] overlayfs: missing 'lowerdir' [ 202.129333][ T8962] overlayfs: missing 'lowerdir' [ 202.281092][ T8967] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1067'. [ 202.282390][ T8969] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1068'. [ 202.324623][ T8972] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 202.406193][ T8969] loop5: detected capacity change from 0 to 512 [ 202.611034][ T8984] gadgetfs: bound to dummy_udc driver [ 202.789235][ T8998] overlayfs: missing 'lowerdir' [ 202.806128][ T8999] loop1: detected capacity change from 0 to 8 [ 202.850564][ T8999] overlayfs: missing 'lowerdir' [ 202.857726][ T8989] kvm: pic: level sensitive irq not supported [ 202.863157][ T8989] kvm: pic: non byte read [ 202.863518][ T8989] kvm: pic: non byte read [ 202.863805][ T8989] kvm: pic: non byte read [ 202.864142][ T8989] kvm: pic: non byte read [ 202.864495][ T8989] kvm: pic: non byte read [ 202.864900][ T8989] kvm: pic: single mode not supported [ 202.864909][ T8989] kvm: pic: level sensitive irq not supported [ 202.864972][ T8989] kvm: pic: non byte read [ 202.865216][ T8989] kvm: pic: level sensitive irq not supported [ 202.865270][ T8989] kvm: pic: non byte read [ 202.865514][ T8989] kvm: pic: level sensitive irq not supported [ 202.865566][ T8989] kvm: pic: non byte read [ 202.865808][ T8989] kvm: pic: single mode not supported [ 202.865816][ T8989] kvm: pic: level sensitive irq not supported [ 202.865868][ T8989] kvm: pic: non byte read [ 203.123218][ T9014] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1083'. [ 203.216170][ T9017] FAULT_INJECTION: forcing a failure. [ 203.216170][ T9017] name failslab, interval 1, probability 0, space 0, times 0 [ 203.216202][ T9017] CPU: 0 UID: 0 PID: 9017 Comm: syz.5.1085 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.216228][ T9017] Tainted: [L]=SOFTLOCKUP [ 203.216234][ T9017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 203.216245][ T9017] Call Trace: [ 203.216254][ T9017] [ 203.216262][ T9017] dump_stack_lvl+0xe8/0x150 [ 203.216297][ T9017] should_fail_ex+0x3eb/0x540 [ 203.216331][ T9017] should_failslab+0xa8/0x100 [ 203.216354][ T9017] __kmalloc_cache_noprof+0x9e/0x600 [ 203.216394][ T9017] ? __se_sys_mount+0x166/0x420 [ 203.216417][ T9017] ? __se_sys_mount+0x166/0x420 [ 203.216443][ T9017] ? memdup_user+0x99/0xd0 [ 203.216471][ T9017] __se_sys_mount+0x166/0x420 [ 203.216503][ T9017] ? __pfx___se_sys_mount+0x10/0x10 [ 203.216536][ T9017] ? __x64_sys_mount+0x20/0xc0 [ 203.216564][ T9017] do_syscall_64+0x16a/0x530 [ 203.216593][ T9017] ? trace_irq_disable+0x3b/0x140 [ 203.216618][ T9017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.216638][ T9017] ? clear_bhb_loop+0x70/0xc0 [ 203.216663][ T9017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.216682][ T9017] RIP: 0033:0x00007f02ffd9fb19 [ 203.216700][ T9017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.216717][ T9017] RSP: 002b:00007f0300cd9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 203.216736][ T9017] RAX: ffffffffffffffda RBX: 00007f0300025fa0 RCX: 00007f02ffd9fb19 [ 203.216751][ T9017] RDX: 0000200000000340 RSI: 0000200000000280 RDI: 0000000000000000 [ 203.216763][ T9017] RBP: 00007f0300cd9090 R08: 0000200000000180 R09: 0000000000000000 [ 203.216776][ T9017] R10: 0000000000008401 R11: 0000000000000246 R12: 0000000000000001 [ 203.216787][ T9017] R13: 00007f0300026038 R14: 00007f0300025fa0 R15: 00007ffcfc962498 [ 203.216817][ T9017] [ 203.360908][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1086'. [ 203.447074][ T9022] loop1: detected capacity change from 0 to 512 [ 203.482168][ T9022] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 203.482297][ T9022] System zones: 1-12 [ 203.493768][ T9022] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.1087: missing EA_INODE flag [ 203.493790][ T9022] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 203.497845][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 203.497882][ C1] EXT4-fs (loop1): initial error at time 1794113622: ext4_xattr_inode_iget:437: inode 12 [ 203.497911][ C1] EXT4-fs (loop1): last error at time 1794113622: ext4_xattr_inode_iget:437: inode 12 [ 203.502495][ T9022] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.1087: error while reading EA inode 12 err=-117 [ 203.502528][ T9022] loop1: lost filesystem error report for type 5 error -117 [ 203.506922][ T9022] EXT4-fs (loop1): 1 orphan inode deleted [ 203.532788][ T9022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.556772][ T9022] fscrypt (loop1, inode 15): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 203.641287][ T5648] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.781439][ T9033] loop1: detected capacity change from 0 to 512 [ 203.801625][ T9033] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 203.801742][ T9033] System zones: 1-12 [ 203.804949][ T9033] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.1091: missing EA_INODE flag [ 203.804982][ T9033] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 203.807413][ T9033] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.1091: error while reading EA inode 12 err=-117 [ 203.807447][ T9033] loop1: lost filesystem error report for type 5 error -117 [ 203.807763][ T9033] EXT4-fs (loop1): 1 orphan inode deleted [ 203.807863][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 203.807879][ C0] EXT4-fs (loop1): initial error at time 1794113622: ext4_xattr_inode_iget:437: inode 12 [ 203.807908][ C0] EXT4-fs (loop1): last error at time 1794113622: ext4_xattr_inode_iget:442 [ 203.895841][ T9033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.924281][ T9038] loop2: detected capacity change from 0 to 8 [ 203.949305][ T9033] fscrypt (loop1, inode 15): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 203.968899][ T4971] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 203.997969][ T9038] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 203.998017][ T9038] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 204.012519][ T5648] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.124148][ T9045] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1096'. [ 204.129692][ T4971] usb 6-1: Using ep0 maxpacket: 16 [ 204.130486][ T4971] usb 6-1: New USB device found: idVendor=046d, idProduct=087c, bcdDevice=b0.7c [ 204.133052][ T4971] usb 6-1: config 64 has an invalid interface number: 238 but max is 0 [ 204.133074][ T4971] usb 6-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 204.133091][ T4971] usb 6-1: config 64 has no interface number 0 [ 204.133117][ T4971] usb 6-1: config 64 interface 238 has no altsetting 0 [ 204.136591][ T4971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.136613][ T4971] usb 6-1: Product: syz [ 204.136625][ T4971] usb 6-1: Manufacturer: syz [ 204.136637][ T4971] usb 6-1: SerialNumber: syz [ 204.204311][ T9047] loop1: detected capacity change from 0 to 256 [ 204.232284][ T9048] FAULT_INJECTION: forcing a failure. [ 204.232284][ T9048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.232314][ T9048] CPU: 1 UID: 0 PID: 9048 Comm: syz.2.1097 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.232338][ T9048] Tainted: [L]=SOFTLOCKUP [ 204.232347][ T9048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 204.232358][ T9048] Call Trace: [ 204.232365][ T9048] [ 204.232372][ T9048] dump_stack_lvl+0xe8/0x150 [ 204.232405][ T9048] should_fail_ex+0x3eb/0x540 [ 204.232437][ T9048] _copy_from_user+0x2d/0xb0 [ 204.232456][ T9048] video_usercopy+0x359/0x1430 [ 204.232489][ T9048] ? __pfx___video_do_ioctl+0x10/0x10 [ 204.232513][ T9048] ? __pfx_video_usercopy+0x10/0x10 [ 204.232549][ T9048] ? __fget_files+0x2a/0x420 [ 204.232575][ T9048] ? __fget_files+0x2a/0x420 [ 204.232602][ T9048] v4l2_ioctl+0x18d/0x1e0 [ 204.232635][ T9048] ? __pfx_v4l2_ioctl+0x10/0x10 [ 204.232659][ T9048] __se_sys_ioctl+0xfc/0x170 [ 204.232682][ T9048] do_syscall_64+0x16a/0x530 [ 204.232704][ T9048] ? trace_irq_disable+0x3b/0x140 [ 204.232727][ T9048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.232745][ T9048] ? clear_bhb_loop+0x70/0xc0 [ 204.232767][ T9048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.232783][ T9048] RIP: 0033:0x00007f9866d9fb19 [ 204.232802][ T9048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.232817][ T9048] RSP: 002b:00007f9864fee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.232837][ T9048] RAX: ffffffffffffffda RBX: 00007f9867025fa0 RCX: 00007f9866d9fb19 [ 204.232850][ T9048] RDX: 0000200000000340 RSI: 00000000c0405602 RDI: 0000000000000003 [ 204.232861][ T9048] RBP: 00007f9864fee090 R08: 0000000000000000 R09: 0000000000000000 [ 204.232871][ T9048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.232882][ T9048] R13: 00007f9867026038 R14: 00007f9867025fa0 R15: 00007ffcde7a0508 [ 204.232911][ T9048] [ 204.301662][ T977] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 204.368718][ T9050] loop4: detected capacity change from 0 to 16 [ 204.415558][ T4971] uvcvideo 6-1:64.238: probe with driver uvcvideo failed with error -22 [ 204.438390][ T4971] usb 6-1: USB disconnect, device number 3 [ 204.483917][ C0] Illegal XDP return value 16128 on prog (id 38) dev veth0_to_bond, expect packet loss! [ 204.512008][ T9050] erofs (device loop4): mounted with root inode @ nid 36. [ 204.526808][ T977] usb 4-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 204.530473][ T9052] FAULT_INJECTION: forcing a failure. [ 204.530473][ T9052] name failslab, interval 1, probability 0, space 0, times 0 [ 204.530517][ T9052] CPU: 1 UID: 0 PID: 9052 Comm: syz.2.1099 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.530541][ T9052] Tainted: [L]=SOFTLOCKUP [ 204.530548][ T9052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 204.530558][ T9052] Call Trace: [ 204.530565][ T9052] [ 204.530572][ T9052] dump_stack_lvl+0xe8/0x150 [ 204.530606][ T9052] should_fail_ex+0x3eb/0x540 [ 204.530637][ T9052] ? __alloc_skb+0x1db/0x7a0 [ 204.530663][ T9052] should_failslab+0xa8/0x100 [ 204.530686][ T9052] ? __alloc_skb+0x1db/0x7a0 [ 204.530701][ T9052] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 204.530726][ T9052] ? __alloc_skb+0x18d/0x7a0 [ 204.530745][ T9052] ? __alloc_skb+0x1db/0x7a0 [ 204.530769][ T9052] __alloc_skb+0x1db/0x7a0 [ 204.530791][ T9052] netlink_sendmsg+0x5cd/0xb20 [ 204.530825][ T9052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.530856][ T9052] ? aa_sock_msg_perm+0x144/0x210 [ 204.530883][ T9052] ? apparmor_socket_sendmsg+0x98/0x360 [ 204.530905][ T9052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.530930][ T9052] sock_sendmsg_nosec+0x14e/0x190 [ 204.530957][ T9052] ____sys_sendmsg+0x54e/0x850 [ 204.530982][ T9052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.531010][ T9052] ? import_iovec+0x73/0xa0 [ 204.531040][ T9052] ___sys_sendmsg+0x2a6/0x360 [ 204.531058][ T9052] ? __lock_acquire+0x747/0x2de0 [ 204.531086][ T9052] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.531143][ T9052] ? __fget_files+0x3a2/0x420 [ 204.531166][ T9052] ? __fget_files+0x2a/0x420 [ 204.531199][ T9052] __x64_sys_sendmsg+0x1b1/0x290 [ 204.531222][ T9052] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 204.531262][ T9052] do_syscall_64+0x16a/0x530 [ 204.531285][ T9052] ? trace_irq_disable+0x3b/0x140 [ 204.531308][ T9052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.531326][ T9052] ? clear_bhb_loop+0x70/0xc0 [ 204.531349][ T9052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.531366][ T9052] RIP: 0033:0x00007f9866d9fb19 [ 204.531384][ T9052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.531398][ T9052] RSP: 002b:00007f9864fee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.531416][ T9052] RAX: ffffffffffffffda RBX: 00007f9867025fa0 RCX: 00007f9866d9fb19 [ 204.531430][ T9052] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000004 [ 204.531441][ T9052] RBP: 00007f9864fee090 R08: 0000000000000000 R09: 0000000000000000 [ 204.531452][ T9052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.531462][ T9052] R13: 00007f9867026038 R14: 00007f9867025fa0 R15: 00007ffcde7a0508 [ 204.531491][ T9052] [ 204.581332][ T977] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 204.581465][ T977] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.589098][ T9047] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 204.608755][ T9050] erofs (device loop4): invalid h_shared_count 83 @ nid 46 [ 204.610813][ T9050] evm: overlay not supported [ 204.626807][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.626833][ T977] usb 4-1: Product: syz [ 204.626846][ T977] usb 4-1: Manufacturer: syz [ 204.626859][ T977] usb 4-1: SerialNumber: syz [ 204.631442][ T9050] erofs (device loop4): invalid h_shared_count 83 @ nid 46 [ 204.907415][ T977] rtl8150 4-1:1.0: couldn't find required endpoints [ 204.915842][ T977] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 205.023140][ T5375] usb 4-1: USB disconnect, device number 4 [ 205.620851][ T9087] loop3: detected capacity change from 0 to 8 [ 205.662935][ T9087] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 205.662985][ T9087] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 205.945059][ T9074] loop4: detected capacity change from 0 to 32768 [ 205.964683][ T9074] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1105 (9074) [ 206.354340][ T9074] BTRFS error (device loop4): open_ctree failed: -EINTR [ 206.389793][ T9092] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1108'. [ 206.811815][ T9099] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1111'. [ 208.162755][ T9111] loop2: detected capacity change from 0 to 512 [ 208.191084][ T9111] EXT4-fs (loop2): invalid journal inode [ 208.191155][ T9111] EXT4-fs (loop2): can't get journal size [ 208.221277][ T9111] EXT4-fs (loop2): 1 truncate cleaned up [ 208.224471][ T9111] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.326734][ T9122] FAULT_INJECTION: forcing a failure. [ 208.326734][ T9122] name failslab, interval 1, probability 0, space 0, times 0 [ 208.326765][ T9122] CPU: 1 UID: 0 PID: 9122 Comm: syz.2.1115 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.326789][ T9122] Tainted: [L]=SOFTLOCKUP [ 208.326795][ T9122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 208.326806][ T9122] Call Trace: [ 208.326812][ T9122] [ 208.326820][ T9122] dump_stack_lvl+0xe8/0x150 [ 208.326867][ T9122] should_fail_ex+0x3eb/0x540 [ 208.326899][ T9122] should_failslab+0xa8/0x100 [ 208.326920][ T9122] __kmalloc_noprof+0xf9/0x710 [ 208.326945][ T9122] ? rcu_is_watching+0x16/0xb0 [ 208.326973][ T9122] ? tomoyo_realpath_from_path+0xf2/0x640 [ 208.326996][ T9122] ? tomoyo_realpath_from_path+0xf2/0x640 [ 208.327026][ T9122] tomoyo_realpath_from_path+0xf2/0x640 [ 208.327060][ T9122] ? tomoyo_path_number_perm+0x219/0x5f0 [ 208.327081][ T9122] tomoyo_path_number_perm+0x246/0x5f0 [ 208.327105][ T9122] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 208.327123][ T9122] ? __lock_acquire+0x747/0x2de0 [ 208.327185][ T9122] ? __fget_files+0x2a/0x420 [ 208.327212][ T9122] ? __fget_files+0x2a/0x420 [ 208.327237][ T9122] ? __fget_files+0x2a/0x420 [ 208.327266][ T9122] security_file_ioctl+0xc3/0x2a0 [ 208.327288][ T9122] __se_sys_ioctl+0x47/0x170 [ 208.327312][ T9122] do_syscall_64+0x16a/0x530 [ 208.327334][ T9122] ? trace_irq_disable+0x3b/0x140 [ 208.327358][ T9122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.327377][ T9122] ? clear_bhb_loop+0x70/0xc0 [ 208.327399][ T9122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.327417][ T9122] RIP: 0033:0x00007f9866d9fb19 [ 208.327436][ T9122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.327451][ T9122] RSP: 002b:00007f9864fcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.327471][ T9122] RAX: ffffffffffffffda RBX: 00007f9867026090 RCX: 00007f9866d9fb19 [ 208.327483][ T9122] RDX: 0000200000000c40 RSI: 0000000040305829 RDI: 0000000000000004 [ 208.327495][ T9122] RBP: 00007f9864fcd090 R08: 0000000000000000 R09: 0000000000000000 [ 208.327506][ T9122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.327517][ T9122] R13: 00007f9867026128 R14: 00007f9867026090 R15: 00007ffcde7a0508 [ 208.327547][ T9122] [ 208.453337][ T9122] ERROR: Out of memory at tomoyo_realpath_from_path. [ 208.626999][ T9127] loop4: detected capacity change from 0 to 1024 [ 208.804727][ T9130] loop5: detected capacity change from 0 to 8 [ 208.836390][ T9130] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 208.836439][ T9130] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 208.911176][ T5642] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.071419][ T9136] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1121'. [ 209.693714][ T9116] loop1: detected capacity change from 0 to 8 [ 209.694265][ T9116] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 209.715739][ T9116] cramfs: empty filesystem [ 210.213573][ T6489] udevd[6489]: incorrect cramfs checksum on /dev/loop1 [ 210.252610][ T6489] udevd[6489]: incorrect cramfs checksum on /dev/loop1 [ 210.415441][ T9148] loop2: detected capacity change from 0 to 1024 [ 210.430455][ T9148] hfsplus: Unknown parameter 'smackfstransmute' [ 210.559011][ T9158] FAULT_INJECTION: forcing a failure. [ 210.559011][ T9158] name failslab, interval 1, probability 0, space 0, times 0 [ 210.559045][ T9158] CPU: 1 UID: 0 PID: 9158 Comm: syz.3.1128 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.559070][ T9158] Tainted: [L]=SOFTLOCKUP [ 210.559077][ T9158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 210.559089][ T9158] Call Trace: [ 210.559096][ T9158] [ 210.559105][ T9158] dump_stack_lvl+0xe8/0x150 [ 210.559141][ T9158] should_fail_ex+0x3eb/0x540 [ 210.559175][ T9158] should_failslab+0xa8/0x100 [ 210.559199][ T9158] __kmalloc_noprof+0xf9/0x710 [ 210.559226][ T9158] ? __register_sysctl_table+0x6f/0x1370 [ 210.559248][ T9158] ? __register_sysctl_table+0x6f/0x1370 [ 210.559280][ T9158] __register_sysctl_table+0x6f/0x1370 [ 210.559306][ T9158] ? __asan_memcpy+0x40/0x70 [ 210.559338][ T9158] setup_ipc_sysctls+0x247/0x2e0 [ 210.559370][ T9158] copy_ipcs+0x48f/0x6c0 [ 210.559394][ T9158] create_new_namespaces+0x210/0x6b0 [ 210.559429][ T9158] ? security_capable+0x7e/0x2c0 [ 210.559458][ T9158] unshare_nsproxy_namespaces+0x144/0x190 [ 210.559488][ T9158] ksys_unshare+0x532/0x890 [ 210.559508][ T9158] ? __pfx_ksys_unshare+0x10/0x10 [ 210.559526][ T9158] ? rcu_is_watching+0x16/0xb0 [ 210.559566][ T9158] __x64_sys_unshare+0x38/0x50 [ 210.559585][ T9158] do_syscall_64+0x16a/0x530 [ 210.559609][ T9158] ? trace_irq_disable+0x3b/0x140 [ 210.559634][ T9158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.559653][ T9158] ? clear_bhb_loop+0x70/0xc0 [ 210.559675][ T9158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.559693][ T9158] RIP: 0033:0x00007fb18e39fb19 [ 210.559712][ T9158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.559727][ T9158] RSP: 002b:00007fb18f1ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 210.559747][ T9158] RAX: ffffffffffffffda RBX: 00007fb18e626090 RCX: 00007fb18e39fb19 [ 210.559761][ T9158] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400 [ 210.559772][ T9158] RBP: 00007fb18e437b70 R08: 0000000000000000 R09: 0000000000000000 [ 210.559784][ T9158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.559795][ T9158] R13: 00007fb18e626128 R14: 00007fb18e626090 R15: 00007ffe594a2948 [ 210.559826][ T9158] [ 210.621638][ T9148] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1126'. [ 210.674214][ T9163] netlink: 280 bytes leftover after parsing attributes in process `syz.3.1128'. [ 210.855262][ T9168] FAULT_INJECTION: forcing a failure. [ 210.855262][ T9168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.855294][ T9168] CPU: 1 UID: 0 PID: 9168 Comm: syz.4.1130 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.855318][ T9168] Tainted: [L]=SOFTLOCKUP [ 210.855324][ T9168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 210.855334][ T9168] Call Trace: [ 210.855342][ T9168] [ 210.855350][ T9168] dump_stack_lvl+0xe8/0x150 [ 210.855382][ T9168] should_fail_ex+0x3eb/0x540 [ 210.855411][ T9168] _copy_from_user+0x2d/0xb0 [ 210.855429][ T9168] ___sys_recvmsg+0x173/0x5a0 [ 210.855456][ T9168] ? __pfx____sys_recvmsg+0x10/0x10 [ 210.855479][ T9168] ? lock_acquire+0x115/0x350 [ 210.855528][ T9168] do_recvmmsg+0x31a/0x800 [ 210.855556][ T9168] ? __pfx_do_recvmmsg+0x10/0x10 [ 210.855586][ T9168] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 210.855615][ T9168] ? fdget+0x1ac/0x250 [ 210.855646][ T9168] __x64_sys_recvmmsg+0x198/0x250 [ 210.855669][ T9168] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 210.855699][ T9168] do_syscall_64+0x16a/0x530 [ 210.855722][ T9168] ? trace_irq_disable+0x3b/0x140 [ 210.855746][ T9168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.855762][ T9168] ? clear_bhb_loop+0x70/0xc0 [ 210.855782][ T9168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.855799][ T9168] RIP: 0033:0x00007f766f99fb19 [ 210.855817][ T9168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.855830][ T9168] RSP: 002b:00007f7670806028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 210.855847][ T9168] RAX: ffffffffffffffda RBX: 00007f766fc25fa0 RCX: 00007f766f99fb19 [ 210.855859][ T9168] RDX: 0000000000000414 RSI: 0000200000000100 RDI: 0000000000000003 [ 210.855870][ T9168] RBP: 00007f7670806090 R08: 0000000000000000 R09: 0000000000000000 [ 210.855880][ T9168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.855890][ T9168] R13: 00007f766fc26038 R14: 00007f766fc25fa0 R15: 00007fffc21ab2e8 [ 210.855920][ T9168] [ 211.126814][ T9172] loop4: detected capacity change from 0 to 8 [ 211.141533][ T9172] overlayfs: missing 'lowerdir' [ 211.415469][ T9174] syzkaller0: entered promiscuous mode [ 211.415494][ T9174] syzkaller0: entered allmulticast mode [ 211.757341][ T9190] block2mtd: device name too long [ 211.930415][ T9195] FAULT_INJECTION: forcing a failure. [ 211.930415][ T9195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.930436][ T9195] CPU: 0 UID: 0 PID: 9195 Comm: syz.1.1140 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.930457][ T9195] Tainted: [L]=SOFTLOCKUP [ 211.930461][ T9195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 211.930467][ T9195] Call Trace: [ 211.930471][ T9195] [ 211.930476][ T9195] dump_stack_lvl+0xe8/0x150 [ 211.930497][ T9195] should_fail_ex+0x3eb/0x540 [ 211.930515][ T9195] _copy_from_user+0x2d/0xb0 [ 211.930526][ T9195] get_user_ifreq+0x6b/0x180 [ 211.930541][ T9195] inet_ioctl+0x3ec/0x560 [ 211.930555][ T9195] ? __pfx_inet_ioctl+0x10/0x10 [ 211.930577][ T9195] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 211.930592][ T9195] sock_do_ioctl+0x101/0x320 [ 211.930606][ T9195] ? __pfx_sock_do_ioctl+0x10/0x10 [ 211.930627][ T9195] sock_ioctl+0x57a/0x7e0 [ 211.930640][ T9195] ? __fget_files+0x2a/0x420 [ 211.930655][ T9195] ? __pfx_sock_ioctl+0x10/0x10 [ 211.930667][ T9195] ? __fget_files+0x2a/0x420 [ 211.930681][ T9195] ? __fget_files+0x2a/0x420 [ 211.930696][ T9195] ? bpf_lsm_file_ioctl+0x9/0x20 [ 211.930707][ T9195] ? __pfx_sock_ioctl+0x10/0x10 [ 211.930719][ T9195] __se_sys_ioctl+0xfc/0x170 [ 211.930731][ T9195] do_syscall_64+0x16a/0x530 [ 211.930745][ T9195] ? trace_irq_disable+0x3b/0x140 [ 211.930758][ T9195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.930769][ T9195] ? clear_bhb_loop+0x70/0xc0 [ 211.930781][ T9195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.930791][ T9195] RIP: 0033:0x00007f4c1eb9fb19 [ 211.930803][ T9195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.930811][ T9195] RSP: 002b:00007f4c1fabc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.930822][ T9195] RAX: ffffffffffffffda RBX: 00007f4c1ee26090 RCX: 00007f4c1eb9fb19 [ 211.930830][ T9195] RDX: 0000200000000180 RSI: 0000000000008916 RDI: 0000000000000003 [ 211.930836][ T9195] RBP: 00007f4c1fabc090 R08: 0000000000000000 R09: 0000000000000000 [ 211.930843][ T9195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.930848][ T9195] R13: 00007f4c1ee26128 R14: 00007f4c1ee26090 R15: 00007fff2b5ae448 [ 211.930864][ T9195] [ 213.493889][ T9203] FAULT_INJECTION: forcing a failure. [ 213.493889][ T9203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.493917][ T9203] CPU: 0 UID: 0 PID: 9203 Comm: syz.2.1141 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.493939][ T9203] Tainted: [L]=SOFTLOCKUP [ 213.493945][ T9203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 213.493955][ T9203] Call Trace: [ 213.493961][ T9203] [ 213.493968][ T9203] dump_stack_lvl+0xe8/0x150 [ 213.494006][ T9203] should_fail_ex+0x3eb/0x540 [ 213.494035][ T9203] _copy_from_user+0x2d/0xb0 [ 213.494053][ T9203] dm_ctl_ioctl+0x14c/0xe10 [ 213.494069][ T9203] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 213.494097][ T9203] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 213.494142][ T9203] ? __fget_files+0x2a/0x420 [ 213.494168][ T9203] ? bpf_lsm_file_ioctl+0x9/0x20 [ 213.494184][ T9203] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 213.494200][ T9203] __se_sys_ioctl+0xfc/0x170 [ 213.494231][ T9203] do_syscall_64+0x16a/0x530 [ 213.494252][ T9203] ? trace_irq_disable+0x3b/0x140 [ 213.494274][ T9203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.494290][ T9203] ? clear_bhb_loop+0x70/0xc0 [ 213.494311][ T9203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.494327][ T9203] RIP: 0033:0x00007f9866d9fb19 [ 213.494344][ T9203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.494359][ T9203] RSP: 002b:00007f9864fee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.494377][ T9203] RAX: ffffffffffffffda RBX: 00007f9867025fa0 RCX: 00007f9866d9fb19 [ 213.494389][ T9203] RDX: 0000200000000680 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 213.494400][ T9203] RBP: 00007f9864fee090 R08: 0000000000000000 R09: 0000000000000000 [ 213.494410][ T9203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.494419][ T9203] R13: 00007f9867026038 R14: 00007f9867025fa0 R15: 00007ffcde7a0508 [ 213.494448][ T9203] [ 213.953012][ T9181] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1136'. [ 214.046379][ T9209] loop2: detected capacity change from 0 to 512 [ 214.066184][ T9209] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 214.110126][ T9212] FAULT_INJECTION: forcing a failure. [ 214.110126][ T9212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.110155][ T9212] CPU: 1 UID: 0 PID: 9212 Comm: syz.1.1144 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.110177][ T9212] Tainted: [L]=SOFTLOCKUP [ 214.110182][ T9212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 214.110191][ T9212] Call Trace: [ 214.110197][ T9212] [ 214.110204][ T9212] dump_stack_lvl+0xe8/0x150 [ 214.110245][ T9212] should_fail_ex+0x3eb/0x540 [ 214.110277][ T9212] _copy_to_user+0x31/0xb0 [ 214.110296][ T9212] simple_read_from_buffer+0xe1/0x170 [ 214.110326][ T9212] proc_fail_nth_read+0x1bb/0x230 [ 214.110352][ T9212] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 214.110374][ T9212] ? rw_verify_area+0x24a/0x4c0 [ 214.110400][ T9212] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 214.110420][ T9212] vfs_read+0x213/0xa80 [ 214.110451][ T9212] ? __pfx___mutex_lock+0x10/0x10 [ 214.110477][ T9212] ? __pfx_vfs_read+0x10/0x10 [ 214.110503][ T9212] ? __fget_files+0x2a/0x420 [ 214.110526][ T9212] ? __fget_files+0x3a2/0x420 [ 214.110547][ T9212] ? __fget_files+0x2a/0x420 [ 214.110574][ T9212] ? fdget+0x1ac/0x250 [ 214.110606][ T9212] ksys_read+0x150/0x270 [ 214.110625][ T9212] ? __pfx_ksys_read+0x10/0x10 [ 214.110654][ T9212] do_syscall_64+0x16a/0x530 [ 214.110676][ T9212] ? trace_irq_disable+0x3b/0x140 [ 214.110698][ T9212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.110715][ T9212] ? clear_bhb_loop+0x70/0xc0 [ 214.110736][ T9212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.110753][ T9212] RIP: 0033:0x00007f4c1eb6034e [ 214.110771][ T9212] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 214.110785][ T9212] RSP: 002b:00007f4c1fadcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 214.110804][ T9212] RAX: ffffffffffffffda RBX: 00007f4c1fadd6c0 RCX: 00007f4c1eb6034e [ 214.110817][ T9212] RDX: 000000000000000f RSI: 00007f4c1fadd0a0 RDI: 0000000000000004 [ 214.110829][ T9212] RBP: 00007f4c1fadd090 R08: 0000000000000000 R09: 0000000000000000 [ 214.110840][ T9212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.110851][ T9212] R13: 00007f4c1ee26038 R14: 00007f4c1ee25fa0 R15: 00007fff2b5ae448 [ 214.110881][ T9212] [ 214.126390][ T9213] loop4: detected capacity change from 0 to 8 [ 214.194210][ T9213] overlayfs: missing 'lowerdir' [ 214.551576][ T9227] FAULT_INJECTION: forcing a failure. [ 214.551576][ T9227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.551606][ T9227] CPU: 0 UID: 0 PID: 9227 Comm: syz.5.1148 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.551630][ T9227] Tainted: [L]=SOFTLOCKUP [ 214.551636][ T9227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 214.551646][ T9227] Call Trace: [ 214.551653][ T9227] [ 214.551661][ T9227] dump_stack_lvl+0xe8/0x150 [ 214.551694][ T9227] should_fail_ex+0x3eb/0x540 [ 214.551726][ T9227] _copy_from_iter+0x1d3/0x1680 [ 214.551752][ T9227] ? __alloc_skb+0x27a/0x7a0 [ 214.551772][ T9227] ? __alloc_skb+0x27a/0x7a0 [ 214.551791][ T9227] ? __alloc_skb+0x27a/0x7a0 [ 214.551808][ T9227] ? __pfx__copy_from_iter+0x10/0x10 [ 214.551831][ T9227] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 214.551855][ T9227] ? __alloc_skb+0x27a/0x7a0 [ 214.551870][ T9227] ? __alloc_skb+0x27a/0x7a0 [ 214.551893][ T9227] ? netlink_sendmsg+0x64f/0xb20 [ 214.551919][ T9227] ? skb_put+0x112/0x210 [ 214.551941][ T9227] netlink_sendmsg+0x6bb/0xb20 [ 214.551974][ T9227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.552004][ T9227] ? aa_sock_msg_perm+0x144/0x210 [ 214.552032][ T9227] ? apparmor_socket_sendmsg+0x98/0x360 [ 214.552054][ T9227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.552080][ T9227] sock_sendmsg_nosec+0x14e/0x190 [ 214.552107][ T9227] ____sys_sendmsg+0x54e/0x850 [ 214.552133][ T9227] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.552163][ T9227] ? import_iovec+0x73/0xa0 [ 214.552201][ T9227] ___sys_sendmsg+0x2a6/0x360 [ 214.552219][ T9227] ? __lock_acquire+0x747/0x2de0 [ 214.552245][ T9227] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.552296][ T9227] ? __fget_files+0x3a2/0x420 [ 214.552321][ T9227] ? __fget_files+0x2a/0x420 [ 214.552351][ T9227] __x64_sys_sendmsg+0x1b1/0x290 [ 214.552375][ T9227] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 214.552415][ T9227] do_syscall_64+0x16a/0x530 [ 214.552438][ T9227] ? trace_irq_disable+0x3b/0x140 [ 214.552462][ T9227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.552480][ T9227] ? clear_bhb_loop+0x70/0xc0 [ 214.552502][ T9227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.552520][ T9227] RIP: 0033:0x00007f02ffd9fb19 [ 214.552543][ T9227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.552559][ T9227] RSP: 002b:00007f0300cd9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.552577][ T9227] RAX: ffffffffffffffda RBX: 00007f0300025fa0 RCX: 00007f02ffd9fb19 [ 214.552590][ T9227] RDX: 0000000000000c00 RSI: 0000200000000140 RDI: 0000000000000003 [ 214.552603][ T9227] RBP: 00007f0300cd9090 R08: 0000000000000000 R09: 0000000000000000 [ 214.552614][ T9227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.552623][ T9227] R13: 00007f0300026038 R14: 00007f0300025fa0 R15: 00007ffcfc962498 [ 214.552651][ T9227] [ 214.664000][ T9231] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1153'. [ 214.841134][ T9235] FAULT_INJECTION: forcing a failure. [ 214.841134][ T9235] name failslab, interval 1, probability 0, space 0, times 0 [ 214.841163][ T9235] CPU: 0 UID: 0 PID: 9235 Comm: syz.2.1155 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.841187][ T9235] Tainted: [L]=SOFTLOCKUP [ 214.841193][ T9235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 214.841204][ T9235] Call Trace: [ 214.841211][ T9235] [ 214.841218][ T9235] dump_stack_lvl+0xe8/0x150 [ 214.841251][ T9235] should_fail_ex+0x3eb/0x540 [ 214.841283][ T9235] should_failslab+0xa8/0x100 [ 214.841305][ T9235] __kmalloc_noprof+0xf9/0x710 [ 214.841331][ T9235] ? iovec_from_user+0x87/0x250 [ 214.841355][ T9235] ? iovec_from_user+0x87/0x250 [ 214.841386][ T9235] iovec_from_user+0x87/0x250 [ 214.841417][ T9235] __import_iovec+0x153/0x7d0 [ 214.841449][ T9235] ? capable+0x83/0xe0 [ 214.841476][ T9235] io_import_rw_buffer+0x44c/0x720 [ 214.841512][ T9235] ? __pfx_io_import_rw_buffer+0x10/0x10 [ 214.841550][ T9235] io_prep_rwv+0x12c/0x390 [ 214.841575][ T9235] ? __pfx_io_prep_rwv+0x10/0x10 [ 214.841597][ T9235] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 214.841624][ T9235] ? io_task_refs_refill+0xba/0x180 [ 214.841653][ T9235] io_submit_sqes+0xd6e/0x2500 [ 214.841708][ T9235] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 214.841780][ T9235] ? fdget+0x1ac/0x250 [ 214.841807][ T9235] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 214.841832][ T9235] ? fput+0xa0/0xd0 [ 214.841854][ T9235] ? ksys_write+0x242/0x270 [ 214.841873][ T9235] ? __pfx_ksys_write+0x10/0x10 [ 214.841896][ T9235] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 214.841923][ T9235] do_syscall_64+0x16a/0x530 [ 214.841944][ T9235] ? trace_irq_disable+0x3b/0x140 [ 214.841968][ T9235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.841986][ T9235] ? clear_bhb_loop+0x70/0xc0 [ 214.842008][ T9235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.842026][ T9235] RIP: 0033:0x00007f9866d9fb19 [ 214.842044][ T9235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.842074][ T9235] RSP: 002b:00007f9864fee028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 214.842093][ T9235] RAX: ffffffffffffffda RBX: 00007f9867025fa0 RCX: 00007f9866d9fb19 [ 214.842105][ T9235] RDX: 000000000000a334 RSI: 0000000000007c65 RDI: 0000000000000003 [ 214.842116][ T9235] RBP: 00007f9864fee090 R08: 0000000000000000 R09: 0000000000000000 [ 214.842128][ T9235] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 214.842136][ T9235] R13: 00007f9867026038 R14: 00007f9867025fa0 R15: 00007ffcde7a0508 [ 214.842160][ T9235] [ 215.006319][ T9236] FAULT_INJECTION: forcing a failure. [ 215.006319][ T9236] name failslab, interval 1, probability 0, space 0, times 0 [ 215.006351][ T9236] CPU: 0 UID: 0 PID: 9236 Comm: syz.5.1154 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.006377][ T9236] Tainted: [L]=SOFTLOCKUP [ 215.006384][ T9236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 215.006395][ T9236] Call Trace: [ 215.006403][ T9236] [ 215.006411][ T9236] dump_stack_lvl+0xe8/0x150 [ 215.006446][ T9236] should_fail_ex+0x3eb/0x540 [ 215.006481][ T9236] should_failslab+0xa8/0x100 [ 215.006505][ T9236] __kvmalloc_node_noprof+0x171/0x820 [ 215.006534][ T9236] ? __nf_register_net_hook+0x1f1/0x940 [ 215.006575][ T9236] ? nf_hook_entries_grow+0x287/0x740 [ 215.006594][ T9236] ? nf_hook_entries_grow+0x287/0x740 [ 215.006629][ T9236] nf_hook_entries_grow+0x287/0x740 [ 215.006666][ T9236] __nf_register_net_hook+0x26f/0x940 [ 215.006698][ T9236] nf_register_net_hook+0xb2/0x190 [ 215.006722][ T9236] nf_register_net_hooks+0x44/0x1b0 [ 215.006748][ T9236] ip_vs_register_hooks+0xce/0x150 [ 215.006777][ T9236] ip_vs_add_service+0x94c/0x2040 [ 215.006798][ T9236] ? lock_acquire+0x115/0x350 [ 215.006830][ T9236] ? ip_vs_add_service+0x1f5/0x2040 [ 215.006858][ T9236] ? rcu_read_unlock+0x87/0xa0 [ 215.006882][ T9236] do_ip_vs_set_ctl+0x8ce/0xaf0 [ 215.006909][ T9236] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 215.006960][ T9236] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 215.007001][ T9236] nf_setsockopt+0x26f/0x290 [ 215.007026][ T9236] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 215.007057][ T9236] do_sock_setsockopt+0x17c/0x1b0 [ 215.007083][ T9236] __x64_sys_setsockopt+0x13d/0x1b0 [ 215.007107][ T9236] do_syscall_64+0x16a/0x530 [ 215.007131][ T9236] ? trace_irq_disable+0x3b/0x140 [ 215.007156][ T9236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.007176][ T9236] ? clear_bhb_loop+0x70/0xc0 [ 215.007199][ T9236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.007219][ T9236] RIP: 0033:0x00007f02ffd9fb19 [ 215.007238][ T9236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.007253][ T9236] RSP: 002b:00007f0300cd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 215.007273][ T9236] RAX: ffffffffffffffda RBX: 00007f0300025fa0 RCX: 00007f02ffd9fb19 [ 215.007287][ T9236] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000007 [ 215.007298][ T9236] RBP: 00007f02ffe37b70 R08: 000000000000002c R09: 0000000000000000 [ 215.007310][ T9236] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000 [ 215.007321][ T9236] R13: 00007f0300026038 R14: 00007f0300025fa0 R15: 00007ffcfc962498 [ 215.007353][ T9236] [ 215.075125][ T33] audit: type=1400 audit(1794113633.714:36): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=9242 comm="syz.2.1158" [ 215.120165][ T9243] loop3: detected capacity change from 0 to 8 [ 215.125518][ T9243] cramfs: Unknown parameter 'm' [ 215.130200][ T9243] FAULT_INJECTION: forcing a failure. [ 215.130200][ T9243] name failslab, interval 1, probability 0, space 0, times 0 [ 215.130229][ T9243] CPU: 0 UID: 0 PID: 9243 Comm: syz.3.1156 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.130254][ T9243] Tainted: [L]=SOFTLOCKUP [ 215.130261][ T9243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 215.130272][ T9243] Call Trace: [ 215.130280][ T9243] [ 215.130288][ T9243] dump_stack_lvl+0xe8/0x150 [ 215.130323][ T9243] should_fail_ex+0x3eb/0x540 [ 215.130358][ T9243] should_failslab+0xa8/0x100 [ 215.130383][ T9243] __kmalloc_noprof+0xf9/0x710 [ 215.130408][ T9243] ? rcu_is_watching+0x16/0xb0 [ 215.130436][ T9243] ? tomoyo_realpath_from_path+0xf2/0x640 [ 215.130461][ T9243] ? tomoyo_realpath_from_path+0xf2/0x640 [ 215.130494][ T9243] tomoyo_realpath_from_path+0xf2/0x640 [ 215.130533][ T9243] tomoyo_check_open_permission+0x229/0x470 [ 215.130556][ T9243] ? tomoyo_check_open_permission+0x1d3/0x470 [ 215.130579][ T9243] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 215.130611][ T9243] ? __asan_memset+0x22/0x50 [ 215.130643][ T9243] ? seqcount_lockdep_reader_access+0xea/0x100 [ 215.130700][ T9243] ? devcgroup_check_permission+0x31/0x8f0 [ 215.130733][ T9243] security_file_open+0xa9/0x240 [ 215.130755][ T9243] do_dentry_open+0x495/0x1360 [ 215.130789][ T9243] vfs_open_consume+0x4a/0x350 [ 215.130812][ T9243] ? path_openat+0x16e1/0x20f0 [ 215.130834][ T9243] path_openat+0x16fc/0x20f0 [ 215.130873][ T9243] do_file_open+0x23e/0x4a0 [ 215.130898][ T9243] ? __pfx_do_file_open+0x10/0x10 [ 215.130940][ T9243] ? _raw_spin_unlock+0x28/0x50 [ 215.130961][ T9243] ? alloc_fd+0x6af/0x760 [ 215.130999][ T9243] do_sys_openat2+0x115/0x200 [ 215.131023][ T9243] ? __se_sys_futex+0x3a8/0x450 [ 215.131044][ T9243] ? __pfx_do_sys_openat2+0x10/0x10 [ 215.131074][ T9243] ? rcu_is_watching+0x16/0xb0 [ 215.131107][ T9243] __x64_sys_openat+0x138/0x170 [ 215.131136][ T9243] do_syscall_64+0x16a/0x530 [ 215.131162][ T9243] ? trace_irq_disable+0x3b/0x140 [ 215.131188][ T9243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.131207][ T9243] ? clear_bhb_loop+0x70/0xc0 [ 215.131260][ T9243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.131280][ T9243] RIP: 0033:0x00007fb18e36034e [ 215.131300][ T9243] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 215.131316][ T9243] RSP: 002b:00007fb18f1aab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 215.131336][ T9243] RAX: ffffffffffffffda RBX: 00007fb18f1ab6c0 RCX: 00007fb18e36034e [ 215.131351][ T9243] RDX: 0000000000000002 RSI: 00007fb18f1aac00 RDI: ffffffffffffff9c [ 215.131366][ T9243] RBP: 00007fb18f1aac00 R08: 0000000000000000 R09: 0000000000000000 [ 215.131378][ T9243] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 215.131390][ T9243] R13: 00007fb18e626128 R14: 00007fb18e626090 R15: 00007ffe594a2948 [ 215.131420][ T9243] [ 215.131428][ T9243] ERROR: Out of memory at tomoyo_realpath_from_path. [ 215.186217][ T9244] capability: warning: `syz.2.1158' uses deprecated v2 capabilities in a way that may be insecure [ 215.186890][ T6489] udevd[6489]: incorrect cramfs checksum on /dev/loop3 [ 215.502071][ T9251] loop2: detected capacity change from 0 to 8 [ 215.535094][ T9251] overlayfs: missing 'lowerdir' [ 215.984974][ T9271] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1167'. [ 216.816778][ T9288] loop1: detected capacity change from 0 to 8 [ 216.835286][ T9288] overlayfs: missing 'workdir' [ 217.012142][ T9275] loop2: detected capacity change from 0 to 32768 [ 217.017518][ T9275] xfs: Deprecated parameter 'noikeep' [ 217.017542][ T9275] XFS: noikeep mount option is deprecated. [ 217.017561][ T9275] xfs: Deprecated parameter 'ikeep' [ 217.017571][ T9275] XFS: ikeep mount option is deprecated. [ 217.017585][ T9275] xfs: Deprecated parameter 'attr2' [ 217.017595][ T9275] XFS: attr2 mount option is deprecated. [ 217.217305][ T9296] loop4: detected capacity change from 0 to 512 [ 217.313584][ T9296] EXT4-fs (loop4): 1 truncate cleaned up [ 217.325121][ T9294] loop3: detected capacity change from 0 to 32768 [ 217.332303][ T9296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.356754][ T9275] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 217.376300][ T9294] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 217.376328][ T9294] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 217.435705][ T9294] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 217.488345][ T5745] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 217.488364][ T5745] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 217.570225][ T9275] XFS (loop2): Ending clean mount [ 217.585707][ T9275] XFS (loop2): Quotacheck needed: Please wait. [ 217.743132][ T5745] kworker/1:5: attempt to access beyond end of device [ 217.743132][ T5745] loop3: rw=8388608, sector=2814749767106560, nr_sectors = 2 limit=32768 [ 217.820973][ T5745] gfs2: fsid=syz:syz.0: jid=0: Failed [ 217.845564][ T9294] gfs2: fsid=syz:syz.0: error recovering journal 0: -5 [ 217.900527][ T9275] XFS (loop2): Quotacheck: Done. [ 218.247360][ T33] audit: type=1107 audit(1794113636.804:37): pid=9293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 218.654434][ T9317] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1182'. [ 218.923698][ T9321] loop3: detected capacity change from 0 to 512 [ 218.973152][ T9321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.973260][ T9321] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.023919][ T9321] EXT4-fs error (device loop3): ext4_get_verity_descriptor_location:313: inode #15: comm syz.3.1183: verity file corrupted; can't find descriptor [ 219.042104][ T9321] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size [ 219.062913][ T9330] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1187'. [ 219.196734][ T9296] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 13: comm syz.4.1179: bad entry in directory: directory entry overrun - offset=92, inode=0, rec_len=196732, size=1024 fake=0 [ 219.290756][ T5652] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.292523][ T5655] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.323744][ T9334] loop1: detected capacity change from 0 to 256 [ 219.618648][ T9337] loop3: detected capacity change from 0 to 8 [ 219.662306][ T9337] overlayfs: missing 'workdir' [ 219.710504][ T5642] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 219.739508][ T9342] loop1: detected capacity change from 0 to 512 [ 219.751387][ T9342] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 219.817286][ T9342] EXT4-fs error (device loop1): ext4_read_inode_bitmap:141: comm syz.1.1193: Invalid inode bitmap blk 4 in block_group 0 [ 219.817318][ T9342] loop1: lost filesystem error report for type 5 error -117 [ 219.818069][ C0] EXT4-fs (loop1): initial error at time 1794113638: ext4_read_inode_bitmap:141 [ 219.818098][ C0] EXT4-fs (loop1): last error at time 1794113638: ext4_read_inode_bitmap:141 [ 219.904299][ T9342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.951560][ T9346] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1194'. [ 220.259800][ T9359] FAULT_INJECTION: forcing a failure. [ 220.259800][ T9359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.259830][ T9359] CPU: 0 UID: 0 PID: 9359 Comm: syz.3.1199 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.259855][ T9359] Tainted: [L]=SOFTLOCKUP [ 220.259861][ T9359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 220.259872][ T9359] Call Trace: [ 220.259879][ T9359] [ 220.259887][ T9359] dump_stack_lvl+0xe8/0x150 [ 220.259921][ T9359] should_fail_ex+0x3eb/0x540 [ 220.259952][ T9359] _copy_to_user+0x31/0xb0 [ 220.259972][ T9359] simple_read_from_buffer+0xe1/0x170 [ 220.260002][ T9359] proc_fail_nth_read+0x1bb/0x230 [ 220.260026][ T9359] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.260051][ T9359] ? rw_verify_area+0x24a/0x4c0 [ 220.260079][ T9359] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.260099][ T9359] vfs_read+0x213/0xa80 [ 220.260125][ T9359] ? __pfx_sync_timeline_signal+0x10/0x10 [ 220.260152][ T9359] ? __pfx_vfs_read+0x10/0x10 [ 220.260178][ T9359] ? sw_sync_ioctl+0x516/0x10f0 [ 220.260205][ T9359] ? fdget+0x16b/0x250 [ 220.260237][ T9359] ksys_read+0x150/0x270 [ 220.260257][ T9359] ? __pfx_ksys_read+0x10/0x10 [ 220.260285][ T9359] do_syscall_64+0x16a/0x530 [ 220.260309][ T9359] ? trace_irq_disable+0x3b/0x140 [ 220.260334][ T9359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.260353][ T9359] ? clear_bhb_loop+0x70/0xc0 [ 220.260379][ T9359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.260397][ T9359] RIP: 0033:0x00007fb18e36034e [ 220.260415][ T9359] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 220.260431][ T9359] RSP: 002b:00007fb18f1cbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 220.260457][ T9359] RAX: ffffffffffffffda RBX: 00007fb18f1cc6c0 RCX: 00007fb18e36034e [ 220.260471][ T9359] RDX: 000000000000000f RSI: 00007fb18f1cc0a0 RDI: 0000000000000005 [ 220.260482][ T9359] RBP: 00007fb18f1cc090 R08: 0000000000000000 R09: 0000000000000000 [ 220.260494][ T9359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.260505][ T9359] R13: 00007fb18e626038 R14: 00007fb18e625fa0 R15: 00007ffe594a2948 [ 220.260534][ T9359] [ 220.742580][ T5648] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.041225][ T9365] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1201'. [ 221.041299][ T9365] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1201'. [ 221.118500][ T5639] Bluetooth: hci0: command 0x0405 tx timeout [ 221.164045][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1201'. [ 221.430125][ T9369] FAULT_INJECTION: forcing a failure. [ 221.430125][ T9369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.430155][ T9369] CPU: 0 UID: 0 PID: 9369 Comm: syz.3.1202 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.430179][ T9369] Tainted: [L]=SOFTLOCKUP [ 221.430186][ T9369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 221.430196][ T9369] Call Trace: [ 221.430203][ T9369] [ 221.430211][ T9369] dump_stack_lvl+0xe8/0x150 [ 221.430245][ T9369] should_fail_ex+0x3eb/0x540 [ 221.430278][ T9369] _copy_to_user+0x31/0xb0 [ 221.430300][ T9369] tomoyo_flush+0x16a/0x5d0 [ 221.430334][ T9369] tomoyo_read_domain+0x6be/0xda0 [ 221.430373][ T9369] tomoyo_read_control+0x2cf/0x4e0 [ 221.430398][ T9369] ? tomoyo_read_control+0x10c/0x4e0 [ 221.430436][ T9369] vfs_readv+0x57b/0x840 [ 221.430460][ T9369] ? __pfx_tomoyo_read+0x10/0x10 [ 221.430488][ T9369] ? __pfx_vfs_readv+0x10/0x10 [ 221.430532][ T9369] ? __fget_files+0x3a2/0x420 [ 221.430556][ T9369] ? __fget_files+0x2a/0x420 [ 221.430585][ T9369] ? fdget+0x1ac/0x250 [ 221.430612][ T9369] do_preadv+0x1a9/0x2d0 [ 221.430636][ T9369] ? __pfx_do_preadv+0x10/0x10 [ 221.430670][ T9369] do_syscall_64+0x16a/0x530 [ 221.430694][ T9369] ? trace_irq_disable+0x3b/0x140 [ 221.430718][ T9369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.430737][ T9369] ? clear_bhb_loop+0x70/0xc0 [ 221.430760][ T9369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.430778][ T9369] RIP: 0033:0x00007fb18e39fb19 [ 221.430795][ T9369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.430810][ T9369] RSP: 002b:00007fb18f1cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 221.430830][ T9369] RAX: ffffffffffffffda RBX: 00007fb18e625fa0 RCX: 00007fb18e39fb19 [ 221.430844][ T9369] RDX: 0000000000000002 RSI: 0000200000001d80 RDI: 0000000000000003 [ 221.430855][ T9369] RBP: 00007fb18f1cc090 R08: 0000000079654e17 R09: 0000000000000000 [ 221.430866][ T9369] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 221.430877][ T9369] R13: 00007fb18e626038 R14: 00007fb18e625fa0 R15: 00007ffe594a2948 [ 221.430927][ T9369] [ 223.291674][ T9377] loop2: detected capacity change from 0 to 8 [ 223.305496][ T9377] overlayfs: missing 'workdir' [ 223.657773][ T9391] FAULT_INJECTION: forcing a failure. [ 223.657773][ T9391] name failslab, interval 1, probability 0, space 0, times 0 [ 223.657945][ T9391] CPU: 0 UID: 0 PID: 9391 Comm: syz.2.1210 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.657971][ T9391] Tainted: [L]=SOFTLOCKUP [ 223.657978][ T9391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 223.657988][ T9391] Call Trace: [ 223.657996][ T9391] [ 223.658004][ T9391] dump_stack_lvl+0xe8/0x150 [ 223.658037][ T9391] should_fail_ex+0x3eb/0x540 [ 223.658067][ T9391] should_failslab+0xa8/0x100 [ 223.658090][ T9391] __kmalloc_noprof+0xf9/0x710 [ 223.658116][ T9391] ? tomoyo_encode+0x2ad/0x570 [ 223.658138][ T9391] ? tomoyo_encode+0x2ad/0x570 [ 223.658168][ T9391] tomoyo_encode+0x2ad/0x570 [ 223.658198][ T9391] tomoyo_realpath_from_path+0x5fd/0x640 [ 223.658232][ T9391] ? tomoyo_path_number_perm+0x219/0x5f0 [ 223.658253][ T9391] tomoyo_path_number_perm+0x246/0x5f0 [ 223.658284][ T9391] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 223.658303][ T9391] ? __lock_acquire+0x747/0x2de0 [ 223.658366][ T9391] ? __fget_files+0x2a/0x420 [ 223.658394][ T9391] ? __fget_files+0x2a/0x420 [ 223.658419][ T9391] ? __fget_files+0x2a/0x420 [ 223.658448][ T9391] security_file_ioctl+0xc3/0x2a0 [ 223.658470][ T9391] __se_sys_ioctl+0x47/0x170 [ 223.658496][ T9391] do_syscall_64+0x16a/0x530 [ 223.658519][ T9391] ? trace_irq_disable+0x3b/0x140 [ 223.658543][ T9391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.658562][ T9391] ? clear_bhb_loop+0x70/0xc0 [ 223.658585][ T9391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.658603][ T9391] RIP: 0033:0x00007f9866d9fb19 [ 223.658621][ T9391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.658637][ T9391] RSP: 002b:00007f9864fee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.658656][ T9391] RAX: ffffffffffffffda RBX: 00007f9867025fa0 RCX: 00007f9866d9fb19 [ 223.658669][ T9391] RDX: 0000200000000000 RSI: 000000008008af83 RDI: 0000000000000003 [ 223.658682][ T9391] RBP: 00007f9864fee090 R08: 0000000000000000 R09: 0000000000000000 [ 223.658693][ T9391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.658704][ T9391] R13: 00007f9867026038 R14: 00007f9867025fa0 R15: 00007ffcde7a0508 [ 223.658735][ T9391] [ 223.659872][ T9391] ERROR: Out of memory at tomoyo_realpath_from_path. [ 224.786514][ T9396] loop2: detected capacity change from 0 to 2048 [ 224.791548][ T9396] ext4: Unknown parameter 'fsmagic' [ 224.850991][ T9402] veth1_to_batadv: mtu less than device minimum [ 224.879936][ T9398] loop1: detected capacity change from 0 to 2048 [ 224.936064][ T9398] loop1: p1 p4 [ 224.936064][ T9398] p1: [ 224.936704][ T9398] loop1: partition table partially beyond EOD, truncated [ 224.948543][ T9398] loop1: p4 start 184549376 is beyond EOD, truncated [ 224.953348][ T9398] loop1: p6 start 184549376 is beyond EOD, truncated [ 225.097896][ T5745] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 225.127374][ T9408] loop2: detected capacity change from 0 to 256 [ 225.160754][ T9410] loop1: detected capacity change from 0 to 8 [ 225.209642][ T9406] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 225.209666][ T9406] FAT-fs (loop2): Filesystem has been set read-only [ 225.254703][ T6496] udevd[6496]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 225.303055][ T6489] udevd[6489]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 225.387970][ T9412] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1216'. [ 225.468030][ T5745] usb 4-1: Using ep0 maxpacket: 8 [ 225.530589][ T5745] usb 4-1: New USB device found: idVendor=0763, idProduct=2081, bcdDevice=0.40 [ 225.555157][ T5744] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 225.820273][ T5744] usb 3-1: Using ep0 maxpacket: 16 [ 225.845511][ T5745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.846856][ T5745] usb 4-1: Product: ꌢ霮鸁霶榾Ŋａ슛뺏ᆉ꾃붇⩯鮞꒑ᐠ禀쀊鎓ﭲ陏㰨燯䵂㈂珝唐惕辿Ὥ䟆␖噇曂렀ꁔ멗塓䶽ᨩ릥덇ť枨챘ﵛƒح쑾衡樓軄聪禫鎚꠽陁歮㜔㒓ꯃ䌻塀킚흜㯶稦ユ茥෤츟鋩瘂ᶮٜ䂰䙢⋐आ [ 225.847376][ T5745] usb 4-1: Manufacturer: 읚៰ꦇ胿䔓䓄檣⋐ŧ귏䙗鴓䆃콩血粟멕若ﯥ쏋쾐ࢧ佦ほⲋ뻝ꈗ芰쟭椿㸇꼂ꪯ益ꙺず놤坼덒㵑뒎㨺ࡣꥥ䰰驈 [ 225.856724][ T5745] usb 4-1: SerialNumber: Ђ [ 225.936865][ T5744] usb 3-1: unable to get BOS descriptor or descriptor too short [ 225.936913][ T5744] usb 3-1: New USB device found: idVendor=11ba, idProduct=1001, bcdDevice=f1.7f [ 225.961770][ T5744] usb 3-1: config 0 has an invalid interface number: 228 but max is 1 [ 225.961795][ T5744] usb 3-1: config 0 has an invalid interface number: 181 but max is 1 [ 225.961813][ T5744] usb 3-1: config 0 has no interface number 0 [ 225.961825][ T5744] usb 3-1: config 0 has no interface number 1 [ 225.961857][ T5744] usb 3-1: config 0 interface 228 has no altsetting 0 [ 225.961873][ T5744] usb 3-1: config 0 interface 181 has no altsetting 0 [ 225.966676][ T5744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.966701][ T5744] usb 3-1: Product: syz [ 225.966714][ T5744] usb 3-1: Manufacturer: syz [ 225.966727][ T5744] usb 3-1: SerialNumber: syz [ 226.146870][ T5744] usb 3-1: config 0 descriptor?? [ 226.224273][ T9421] netlink: 'syz.5.1221': attribute type 1 has an invalid length. [ 226.280356][ T9421] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.307026][ T9421] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1221'. [ 226.307140][ T9421] bond1: entered promiscuous mode [ 226.307159][ T9421] bond1: entered allmulticast mode [ 226.323532][ T9421] bond1: (slave dummy0): making interface the new active one [ 226.323555][ T9421] dummy0: entered promiscuous mode [ 226.324150][ T9421] dummy0: entered allmulticast mode [ 226.328751][ T9421] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 226.400453][ T5744] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 226.401070][ T5744] usb 3-1: selecting invalid altsetting 0 [ 226.405002][ T2355] pvrusb2: Invalid write control endpoint [ 226.405014][ T2355] pvrusb2: Device being rendered inoperable [ 226.437768][ T5744] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 226.438601][ T5744] usb 3-1: selecting invalid altsetting 0 [ 226.438829][ T2355] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 226.438841][ T2355] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 226.438878][ T2355] pvrusb2: Invalid write control endpoint [ 226.438885][ T2355] pvrusb2: Device being rendered inoperable [ 226.438906][ T2355] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 226.438915][ T2355] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 226.444060][ T5744] usb 3-1: USB disconnect, device number 3 [ 226.483932][ T9402] xt_NFQUEUE: number of total queues is 0 [ 226.538702][ T5745] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 226.544563][ T5745] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 226.571638][ T9426] FAULT_INJECTION: forcing a failure. [ 226.571638][ T9426] name failslab, interval 1, probability 0, space 0, times 0 [ 226.571670][ T9426] CPU: 0 UID: 0 PID: 9426 Comm: syz.1.1222 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.571697][ T9426] Tainted: [L]=SOFTLOCKUP [ 226.571704][ T9426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 226.571718][ T9426] Call Trace: [ 226.571725][ T9426] [ 226.571733][ T9426] dump_stack_lvl+0xe8/0x150 [ 226.571769][ T9426] should_fail_ex+0x3eb/0x540 [ 226.571803][ T9426] should_failslab+0xa8/0x100 [ 226.571827][ T9426] __kmalloc_noprof+0xf9/0x710 [ 226.571867][ T9426] ? __register_sysctl_table+0xc02/0x1370 [ 226.571891][ T9426] ? __register_sysctl_table+0xc02/0x1370 [ 226.571921][ T9426] __register_sysctl_table+0xc02/0x1370 [ 226.571953][ T9426] setup_ipc_sysctls+0x247/0x2e0 [ 226.571985][ T9426] copy_ipcs+0x48f/0x6c0 [ 226.572007][ T9426] create_new_namespaces+0x210/0x6b0 [ 226.572039][ T9426] ? security_capable+0x7e/0x2c0 [ 226.572067][ T9426] unshare_nsproxy_namespaces+0x144/0x190 [ 226.572099][ T9426] ksys_unshare+0x532/0x890 [ 226.572120][ T9426] ? __pfx_ksys_unshare+0x10/0x10 [ 226.572140][ T9426] ? rcu_is_watching+0x16/0xb0 [ 226.572176][ T9426] __x64_sys_unshare+0x38/0x50 [ 226.572194][ T9426] do_syscall_64+0x16a/0x530 [ 226.572220][ T9426] ? trace_irq_disable+0x3b/0x140 [ 226.572247][ T9426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.572267][ T9426] ? clear_bhb_loop+0x70/0xc0 [ 226.572291][ T9426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.572312][ T9426] RIP: 0033:0x00007f4c1eb9fb19 [ 226.572332][ T9426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.572349][ T9426] RSP: 002b:00007f4c1fadd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 226.572369][ T9426] RAX: ffffffffffffffda RBX: 00007f4c1ee25fa0 RCX: 00007f4c1eb9fb19 [ 226.572385][ T9426] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400 [ 226.572397][ T9426] RBP: 00007f4c1ec37b70 R08: 0000000000000000 R09: 0000000000000000 [ 226.572413][ T9426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.572425][ T9426] R13: 00007f4c1ee26038 R14: 00007f4c1ee25fa0 R15: 00007fff2b5ae448 [ 226.572458][ T9426] [ 226.572479][ T9426] sysctl could not get directory: /kernel -12 [ 226.602288][ T9427] loop4: detected capacity change from 0 to 64 [ 226.724754][ T9427] hfs: Bad value for 'gid' [ 227.074337][ T9437] FAULT_INJECTION: forcing a failure. [ 227.074337][ T9437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.074369][ T9437] CPU: 0 UID: 0 PID: 9437 Comm: syz.4.1227 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.074393][ T9437] Tainted: [L]=SOFTLOCKUP [ 227.074400][ T9437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 227.074411][ T9437] Call Trace: [ 227.074418][ T9437] [ 227.074425][ T9437] dump_stack_lvl+0xe8/0x150 [ 227.074458][ T9437] should_fail_ex+0x3eb/0x540 [ 227.074491][ T9437] _copy_to_user+0x31/0xb0 [ 227.074514][ T9437] vhost_net_ioctl+0x52b/0x17e0 [ 227.074550][ T9437] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 227.074592][ T9437] ? bpf_lsm_file_ioctl+0x9/0x20 [ 227.074611][ T9437] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 227.074638][ T9437] __se_sys_ioctl+0xfc/0x170 [ 227.074660][ T9437] do_syscall_64+0x16a/0x530 [ 227.074684][ T9437] ? trace_irq_disable+0x3b/0x140 [ 227.074707][ T9437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.074726][ T9437] ? clear_bhb_loop+0x70/0xc0 [ 227.074766][ T9437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.074785][ T9437] RIP: 0033:0x00007f766f99fb19 [ 227.074804][ T9437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.074819][ T9437] RSP: 002b:00007f7670806028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.074839][ T9437] RAX: ffffffffffffffda RBX: 00007f766fc25fa0 RCX: 00007f766f99fb19 [ 227.074852][ T9437] RDX: 0000200000000000 RSI: 000000008008af83 RDI: 0000000000000003 [ 227.074863][ T9437] RBP: 00007f7670806090 R08: 0000000000000000 R09: 0000000000000000 [ 227.074874][ T9437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.074883][ T9437] R13: 00007f766fc26038 R14: 00007f766fc25fa0 R15: 00007fffc21ab2e8 [ 227.074910][ T9437] [ 227.341530][ T9445] FAULT_INJECTION: forcing a failure. [ 227.341530][ T9445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.341562][ T9445] CPU: 0 UID: 0 PID: 9445 Comm: syz.1.1231 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.341586][ T9445] Tainted: [L]=SOFTLOCKUP [ 227.341592][ T9445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 227.341603][ T9445] Call Trace: [ 227.341610][ T9445] [ 227.341617][ T9445] dump_stack_lvl+0xe8/0x150 [ 227.341651][ T9445] should_fail_ex+0x3eb/0x540 [ 227.341681][ T9445] _copy_from_user+0x2d/0xb0 [ 227.341699][ T9445] __se_sys_mount+0x18b/0x420 [ 227.341729][ T9445] ? __pfx___se_sys_mount+0x10/0x10 [ 227.341758][ T9445] ? __x64_sys_mount+0x20/0xc0 [ 227.341784][ T9445] do_syscall_64+0x16a/0x530 [ 227.341806][ T9445] ? trace_irq_disable+0x3b/0x140 [ 227.341838][ T9445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.341854][ T9445] ? clear_bhb_loop+0x70/0xc0 [ 227.341876][ T9445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.341894][ T9445] RIP: 0033:0x00007f4c1eb9fb19 [ 227.341911][ T9445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.341926][ T9445] RSP: 002b:00007f4c1fadd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 227.341944][ T9445] RAX: ffffffffffffffda RBX: 00007f4c1ee25fa0 RCX: 00007f4c1eb9fb19 [ 227.341956][ T9445] RDX: 0000200000000340 RSI: 0000200000000280 RDI: 0000000000000000 [ 227.341968][ T9445] RBP: 00007f4c1fadd090 R08: 0000200000000180 R09: 0000000000000000 [ 227.341979][ T9445] R10: 0000000000008401 R11: 0000000000000246 R12: 0000000000000001 [ 227.341988][ T9445] R13: 00007f4c1ee26038 R14: 00007f4c1ee25fa0 R15: 00007fff2b5ae448 [ 227.342016][ T9445] [ 227.369011][ T5745] usb 4-1: USB disconnect, device number 5 [ 227.629517][ T9449] FAULT_INJECTION: forcing a failure. [ 227.629517][ T9449] name failslab, interval 1, probability 0, space 0, times 0 [ 227.629552][ T9449] CPU: 1 UID: 0 PID: 9449 Comm: syz.4.1230 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.629578][ T9449] Tainted: [L]=SOFTLOCKUP [ 227.629585][ T9449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 227.629597][ T9449] Call Trace: [ 227.629604][ T9449] [ 227.629612][ T9449] dump_stack_lvl+0xe8/0x150 [ 227.629647][ T9449] should_fail_ex+0x3eb/0x540 [ 227.629682][ T9449] should_failslab+0xa8/0x100 [ 227.629707][ T9449] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 227.629736][ T9449] ? _raw_spin_unlock+0x41/0x50 [ 227.629758][ T9449] ? setup_ipc_sysctls+0x55/0x2e0 [ 227.629817][ T9449] ? setup_ipc_sysctls+0x55/0x2e0 [ 227.629850][ T9449] kmemdup_noprof+0x2b/0x70 [ 227.629880][ T9449] setup_ipc_sysctls+0x55/0x2e0 [ 227.629910][ T9449] copy_ipcs+0x48f/0x6c0 [ 227.629934][ T9449] create_new_namespaces+0x210/0x6b0 [ 227.629965][ T9449] ? security_capable+0x7e/0x2c0 [ 227.629994][ T9449] unshare_nsproxy_namespaces+0x144/0x190 [ 227.630026][ T9449] ksys_unshare+0x532/0x890 [ 227.630047][ T9449] ? __pfx_ksys_unshare+0x10/0x10 [ 227.630068][ T9449] ? rcu_is_watching+0x16/0xb0 [ 227.630108][ T9449] __x64_sys_unshare+0x38/0x50 [ 227.630125][ T9449] do_syscall_64+0x16a/0x530 [ 227.630149][ T9449] ? trace_irq_disable+0x3b/0x140 [ 227.630176][ T9449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.630195][ T9449] ? clear_bhb_loop+0x70/0xc0 [ 227.630219][ T9449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.630238][ T9449] RIP: 0033:0x00007f766f99fb19 [ 227.630258][ T9449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.630274][ T9449] RSP: 002b:00007f7670806028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 227.630295][ T9449] RAX: ffffffffffffffda RBX: 00007f766fc25fa0 RCX: 00007f766f99fb19 [ 227.630309][ T9449] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400 [ 227.630320][ T9449] RBP: 00007f766fa37b70 R08: 0000000000000000 R09: 0000000000000000 [ 227.630332][ T9449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.630343][ T9449] R13: 00007f766fc26038 R14: 00007f766fc25fa0 R15: 00007fffc21ab2e8 [ 227.630376][ T9449] [ 228.972079][ T9471] ieee802154 phy0 wpan0: encryption failed: -90 [ 228.975598][ T9471] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1239'. [ 230.450269][ T9480] FAULT_INJECTION: forcing a failure. [ 230.450269][ T9480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.450299][ T9480] CPU: 0 UID: 0 PID: 9480 Comm: syz.2.1241 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.450324][ T9480] Tainted: [L]=SOFTLOCKUP [ 230.450331][ T9480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 230.450341][ T9480] Call Trace: [ 230.450348][ T9480] [ 230.450355][ T9480] dump_stack_lvl+0xe8/0x150 [ 230.450388][ T9480] should_fail_ex+0x3eb/0x540 [ 230.450428][ T9480] _copy_from_iter+0x1d3/0x1680 [ 230.450454][ T9480] ? __alloc_skb+0x27a/0x7a0 [ 230.450474][ T9480] ? __alloc_skb+0x27a/0x7a0 [ 230.450493][ T9480] ? __alloc_skb+0x27a/0x7a0 [ 230.450510][ T9480] ? __pfx__copy_from_iter+0x10/0x10 [ 230.450533][ T9480] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 230.450557][ T9480] ? __alloc_skb+0x27a/0x7a0 [ 230.450572][ T9480] ? __alloc_skb+0x27a/0x7a0 [ 230.450595][ T9480] ? netlink_sendmsg+0x64f/0xb20 [ 230.450621][ T9480] ? skb_put+0x112/0x210 [ 230.450642][ T9480] netlink_sendmsg+0x6bb/0xb20 [ 230.450675][ T9480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.450705][ T9480] ? aa_sock_msg_perm+0x144/0x210 [ 230.450733][ T9480] ? apparmor_socket_sendmsg+0x98/0x360 [ 230.450755][ T9480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.450781][ T9480] sock_sendmsg_nosec+0x14e/0x190 [ 230.450808][ T9480] ____sys_sendmsg+0x54e/0x850 [ 230.450835][ T9480] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.450864][ T9480] ? import_iovec+0x73/0xa0 [ 230.450898][ T9480] ___sys_sendmsg+0x2a6/0x360 [ 230.450916][ T9480] ? __lock_acquire+0x747/0x2de0 [ 230.450944][ T9480] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.451000][ T9480] ? __fget_files+0x3a2/0x420 [ 230.451024][ T9480] ? __fget_files+0x2a/0x420 [ 230.451058][ T9480] __x64_sys_sendmsg+0x1b1/0x290 [ 230.451081][ T9480] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 230.451123][ T9480] do_syscall_64+0x16a/0x530 [ 230.451146][ T9480] ? trace_irq_disable+0x3b/0x140 [ 230.451170][ T9480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.451189][ T9480] ? clear_bhb_loop+0x70/0xc0 [ 230.451211][ T9480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.451229][ T9480] RIP: 0033:0x00007f9866d9fb19 [ 230.451247][ T9480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.451262][ T9480] RSP: 002b:00007f9864fee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.451281][ T9480] RAX: ffffffffffffffda RBX: 00007f9867025fa0 RCX: 00007f9866d9fb19 [ 230.451294][ T9480] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000004 [ 230.451306][ T9480] RBP: 00007f9864fee090 R08: 0000000000000000 R09: 0000000000000000 [ 230.451317][ T9480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.451327][ T9480] R13: 00007f9867026038 R14: 00007f9867025fa0 R15: 00007ffcde7a0508 [ 230.451359][ T9480] [ 230.550227][ T9482] loop1: detected capacity change from 0 to 1024 [ 230.631458][ T9482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.857657][ T9491] overlayfs: missing 'lowerdir' [ 230.866243][ T5648] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.027317][ T9498] FAULT_INJECTION: forcing a failure. [ 231.027317][ T9498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.027373][ T9498] CPU: 0 UID: 0 PID: 9498 Comm: syz.5.1249 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.027396][ T9498] Tainted: [L]=SOFTLOCKUP [ 231.027402][ T9498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 231.027413][ T9498] Call Trace: [ 231.027421][ T9498] [ 231.027428][ T9498] dump_stack_lvl+0xe8/0x150 [ 231.027461][ T9498] should_fail_ex+0x3eb/0x540 [ 231.027493][ T9498] _copy_from_user+0x2d/0xb0 [ 231.027512][ T9498] ___sys_sendmsg+0x1c6/0x360 [ 231.027533][ T9498] ? __lock_acquire+0x747/0x2de0 [ 231.027561][ T9498] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.027614][ T9498] ? __fget_files+0x3a2/0x420 [ 231.027639][ T9498] ? __fget_files+0x2a/0x420 [ 231.027673][ T9498] __x64_sys_sendmsg+0x1b1/0x290 [ 231.027697][ T9498] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 231.027735][ T9498] do_syscall_64+0x16a/0x530 [ 231.027756][ T9498] ? trace_irq_disable+0x3b/0x140 [ 231.027780][ T9498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.027802][ T9498] ? clear_bhb_loop+0x70/0xc0 [ 231.027823][ T9498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.027838][ T9498] RIP: 0033:0x00007f02ffd9fb19 [ 231.027854][ T9498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.027868][ T9498] RSP: 002b:00007f0300cb8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.027885][ T9498] RAX: ffffffffffffffda RBX: 00007f0300026090 RCX: 00007f02ffd9fb19 [ 231.027897][ T9498] RDX: 0000000004008840 RSI: 0000200000000b40 RDI: 0000000000000003 [ 231.027907][ T9498] RBP: 00007f0300cb8090 R08: 0000000000000000 R09: 0000000000000000 [ 231.027918][ T9498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.027928][ T9498] R13: 00007f0300026128 R14: 00007f0300026090 R15: 00007ffcfc962498 [ 231.027956][ T9498] [ 231.223904][ T9500] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1247'. [ 231.723812][ T9504] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 232.137205][ T9522] loop2: detected capacity change from 0 to 8 [ 232.286625][ T4971] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 232.286826][ T4971] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 232.286996][ T4971] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 232.287165][ T4971] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 232.287174][ T4971] rtc rtc0: __rtc_set_alarm: err=-22 [ 233.413796][ T9508] loop5: detected capacity change from 0 to 32768 [ 233.414730][ T9508] xfs: Deprecated parameter 'noikeep' [ 233.414747][ T9508] XFS: noikeep mount option is deprecated. [ 233.414765][ T9508] xfs: Deprecated parameter 'ikeep' [ 233.414776][ T9508] XFS: ikeep mount option is deprecated. [ 233.414790][ T9508] xfs: Deprecated parameter 'attr2' [ 233.414801][ T9508] XFS: attr2 mount option is deprecated. [ 233.481782][ T9508] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 233.687426][ T9508] XFS (loop5): Ending clean mount [ 233.755751][ T9508] XFS (loop5): Quotacheck needed: Please wait. [ 233.783593][ T9547] netlink: 280 bytes leftover after parsing attributes in process `syz.3.1261'. [ 233.906916][ T9508] XFS (loop5): Quotacheck: Done. [ 234.086298][ T9553] tipc: Cannot configure node identity twice [ 234.203875][ T9560] loop1: detected capacity change from 0 to 128 [ 234.273002][ T9560] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 234.276501][ T9560] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.368645][ T9564] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1264'. [ 234.961090][ T7934] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 235.263434][ T9571] FAULT_INJECTION: forcing a failure. [ 235.263434][ T9571] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 235.263475][ T9571] CPU: 1 UID: 0 PID: 9571 Comm: syz.4.1268 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.263500][ T9571] Tainted: [L]=SOFTLOCKUP [ 235.263507][ T9571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 235.263518][ T9571] Call Trace: [ 235.263525][ T9571] [ 235.263534][ T9571] dump_stack_lvl+0xe8/0x150 [ 235.263569][ T9571] should_fail_ex+0x3eb/0x540 [ 235.263603][ T9571] prepare_alloc_pages+0x21e/0x5f0 [ 235.263638][ T9571] __alloc_frozen_pages_noprof+0x189/0x450 [ 235.263673][ T9571] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 235.263711][ T9571] ? policy_nodemask+0x31b/0x980 [ 235.263738][ T9571] alloc_pages_mpol+0x21e/0x390 [ 235.263764][ T9571] alloc_pages_noprof+0xb1/0x2b0 [ 235.263789][ T9571] get_free_pages_noprof+0xf/0x80 [ 235.263818][ T9571] __kasan_populate_vmalloc+0x38/0x1c0 [ 235.263846][ T9571] ? do_raw_spin_unlock+0xf5/0x200 [ 235.263872][ T9571] alloc_vmap_area+0xd10/0x1410 [ 235.263910][ T9571] ? __pfx_alloc_vmap_area+0x10/0x10 [ 235.263930][ T9571] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 235.263958][ T9571] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 235.263983][ T9571] ? __get_vm_area_node+0x155/0x2f0 [ 235.264010][ T9571] __get_vm_area_node+0x200/0x2f0 [ 235.264039][ T9571] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 235.264064][ T9571] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 235.264086][ T9571] ? __lock_acquire+0x747/0x2de0 [ 235.264124][ T9571] ? hook_capable+0x1c3/0x5e0 [ 235.264155][ T9571] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 235.264178][ T9571] ? futex_unqueue+0x22/0x240 [ 235.264214][ T9571] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 235.264230][ T9571] __vmalloc_noprof+0xd2/0x120 [ 235.264254][ T9571] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 235.264275][ T9571] bpf_prog_alloc_no_stats+0x47/0x550 [ 235.264292][ T9571] ? bpf_prog_alloc+0x2a/0x1a0 [ 235.264312][ T9571] bpf_prog_alloc+0x3c/0x1a0 [ 235.264332][ T9571] bpf_prog_load+0x7f8/0x1c60 [ 235.264363][ T9571] ? __pfx_bpf_prog_load+0x10/0x10 [ 235.264398][ T9571] ? __might_fault+0xaf/0x130 [ 235.264427][ T9571] __sys_bpf+0xdeb/0xe70 [ 235.264453][ T9571] ? __pfx___sys_bpf+0x10/0x10 [ 235.264482][ T9571] ? do_futex+0x3e7/0x4e0 [ 235.264529][ T9571] ? rcu_is_watching+0x16/0xb0 [ 235.264564][ T9571] __x64_sys_bpf+0xba/0xd0 [ 235.264596][ T9571] do_syscall_64+0x16a/0x530 [ 235.264620][ T9571] ? trace_irq_disable+0x3b/0x140 [ 235.264647][ T9571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.264666][ T9571] ? clear_bhb_loop+0x70/0xc0 [ 235.264691][ T9571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.264709][ T9571] RIP: 0033:0x00007f766f99fb19 [ 235.264728][ T9571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.264744][ T9571] RSP: 002b:00007f7670806028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 235.264765][ T9571] RAX: ffffffffffffffda RBX: 00007f766fc25fa0 RCX: 00007f766f99fb19 [ 235.264779][ T9571] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 235.264791][ T9571] RBP: 00007f766fa37b70 R08: 0000000000000000 R09: 0000000000000000 [ 235.264804][ T9571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.264815][ T9571] R13: 00007f766fc26038 R14: 00007f766fc25fa0 R15: 00007fffc21ab2e8 [ 235.264849][ T9571] [ 235.274079][ T9571] syz.4.1268: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 235.274154][ T9571] CPU: 1 UID: 0 PID: 9571 Comm: syz.4.1268 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.274181][ T9571] Tainted: [L]=SOFTLOCKUP [ 235.274187][ T9571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 235.274200][ T9571] Call Trace: [ 235.274208][ T9571] [ 235.274216][ T9571] dump_stack_lvl+0xe8/0x150 [ 235.274251][ T9571] warn_alloc+0x24d/0x270 [ 235.274280][ T9571] ? lockdep_hardirqs_on+0x7b/0x110 [ 235.274308][ T9571] ? __pfx_warn_alloc+0x10/0x10 [ 235.274333][ T9571] ? kfree+0x1c7/0x650 [ 235.274363][ T9571] ? __get_vm_area_node+0x219/0x2f0 [ 235.274392][ T9571] __vmalloc_node_range_noprof+0x396/0x16f0 [ 235.274420][ T9571] ? __lock_acquire+0x747/0x2de0 [ 235.274483][ T9571] ? hook_capable+0x1c3/0x5e0 [ 235.274516][ T9571] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 235.274539][ T9571] ? futex_unqueue+0x22/0x240 [ 235.274574][ T9571] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 235.274591][ T9571] __vmalloc_noprof+0xd2/0x120 [ 235.274614][ T9571] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 235.274636][ T9571] bpf_prog_alloc_no_stats+0x47/0x550 [ 235.274654][ T9571] ? bpf_prog_alloc+0x2a/0x1a0 [ 235.274675][ T9571] bpf_prog_alloc+0x3c/0x1a0 [ 235.274697][ T9571] bpf_prog_load+0x7f8/0x1c60 [ 235.274728][ T9571] ? __pfx_bpf_prog_load+0x10/0x10 [ 235.274764][ T9571] ? __might_fault+0xaf/0x130 [ 235.274794][ T9571] __sys_bpf+0xdeb/0xe70 [ 235.274822][ T9571] ? __pfx___sys_bpf+0x10/0x10 [ 235.274844][ T9571] ? do_futex+0x3e7/0x4e0 [ 235.274891][ T9571] ? rcu_is_watching+0x16/0xb0 [ 235.274925][ T9571] __x64_sys_bpf+0xba/0xd0 [ 235.274956][ T9571] do_syscall_64+0x16a/0x530 [ 235.274984][ T9571] ? trace_irq_disable+0x3b/0x140 [ 235.275009][ T9571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.275029][ T9571] ? clear_bhb_loop+0x70/0xc0 [ 235.275053][ T9571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.275072][ T9571] RIP: 0033:0x00007f766f99fb19 [ 235.275093][ T9571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.275109][ T9571] RSP: 002b:00007f7670806028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 235.275129][ T9571] RAX: ffffffffffffffda RBX: 00007f766fc25fa0 RCX: 00007f766f99fb19 [ 235.275144][ T9571] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 235.275156][ T9571] RBP: 00007f766fa37b70 R08: 0000000000000000 R09: 0000000000000000 [ 235.275168][ T9571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.275181][ T9571] R13: 00007f766fc26038 R14: 00007f766fc25fa0 R15: 00007fffc21ab2e8 [ 235.275212][ T9571] [ 235.277908][ T9571] Mem-Info: [ 235.277922][ T9571] active_anon:8122 inactive_anon:86 isolated_anon:0 [ 235.277922][ T9571] active_file:685 inactive_file:4038 isolated_file:0 [ 235.277922][ T9571] unevictable:0 dirty:72 writeback:0 [ 235.277922][ T9571] slab_reclaimable:7260 slab_unreclaimable:100736 [ 235.277922][ T9571] mapped:28275 shmem:1633 pagetables:1316 [ 235.277922][ T9571] sec_pagetables:0 bounce:0 [ 235.277922][ T9571] kernel_misc_reclaimable:0 [ 235.277922][ T9571] free:1338792 free_pcp:29546 free_cma:0 [ 235.277973][ T9571] Node 0 active_anon:32488kB inactive_anon:344kB active_file:2724kB inactive_file:15956kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:113084kB dirty:288kB writeback:0kB shmem:6532kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13212kB pagetables:5128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 235.278025][ T9571] Node 1 active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 235.282284][ T9571] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 235.282346][ T9571] lowmem_reserve[]: 0 2463 2464 2464 2464 [ 235.282380][ T9571] Node 0 DMA32 free:1398852kB boost:0kB min:33916kB low:42392kB high:50868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:32552kB inactive_anon:364kB active_file:2724kB inactive_file:15984kB unevictable:0kB writepending:288kB zspages:0kB present:3129332kB managed:2522348kB mlocked:0kB bounce:0kB free_pcp:118496kB local_pcp:26132kB free_cma:0kB [ 235.282435][ T9571] lowmem_reserve[]: 0 0 1 1 1 [ 235.282471][ T9571] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1380kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 235.282522][ T9571] lowmem_reserve[]: 0 0 0 0 0 [ 235.282552][ T9571] Node 1 Normal free:3940956kB boost:0kB min:55964kB low:69952kB high:83940kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 235.282605][ T9571] lowmem_reserve[]: 0 0 0 0 0 [ 235.282635][ T9571] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 235.282738][ T9571] Node 0 DMA32: 3066*4kB (UM) 1007*8kB (UME) 403*16kB (UME) 549*32kB (UME) 162*64kB (UME) 73*128kB (UME) 34*256kB (UME) 4*512kB (ME) 5*1024kB (M) 4*2048kB (ME) 320*4096kB (UM) = 1398832kB [ 235.282879][ T9571] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 235.282967][ T9571] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 2*16kB (U) 15*32kB (UM) 11*64kB (UM) 5*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3940956kB [ 235.283110][ T9571] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 235.283126][ T9571] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 235.283140][ T9571] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 235.283154][ T9571] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 235.283168][ T9571] 6394 total pagecache pages [ 235.283175][ T9571] 0 pages in swap cache [ 235.283182][ T9571] Free swap = 124996kB [ 235.283188][ T9571] Total swap = 124996kB [ 235.283195][ T9571] 2097051 pages RAM [ 235.283202][ T9571] 0 pages HighMem/MovableOnly [ 235.283208][ T9571] 434503 pages reserved [ 235.283214][ T9571] 0 pages cma reserved [ 235.418811][ T9571] loop4: detected capacity change from 0 to 2048 [ 235.507406][ T9573] loop3: detected capacity change from 0 to 8 [ 236.170042][ T9577] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.195156][ T5648] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 236.269995][ T9571] FAULT_INJECTION: forcing a failure. [ 236.269995][ T9571] name failslab, interval 1, probability 0, space 0, times 0 [ 236.270028][ T9571] CPU: 0 UID: 0 PID: 9571 Comm: syz.4.1268 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.270054][ T9571] Tainted: [L]=SOFTLOCKUP [ 236.270061][ T9571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 236.270071][ T9571] Call Trace: [ 236.270079][ T9571] [ 236.270085][ T9571] dump_stack_lvl+0xe8/0x150 [ 236.270121][ T9571] should_fail_ex+0x3eb/0x540 [ 236.270156][ T9571] should_failslab+0xa8/0x100 [ 236.270178][ T9571] ? __send_signal_locked+0x313/0x1010 [ 236.270201][ T9571] kmem_cache_alloc_noprof+0x9c/0x600 [ 236.270227][ T9571] ? sig_get_ucounts+0x26/0x450 [ 236.270252][ T9571] ? __send_signal_locked+0x313/0x1010 [ 236.270275][ T9571] ? sig_get_ucounts+0x3da/0x450 [ 236.270302][ T9571] __send_signal_locked+0x313/0x1010 [ 236.270332][ T9571] send_signal_locked+0x135/0x9e0 [ 236.270352][ T9571] ? reacquire_held_locks+0x117/0x1a0 [ 236.270379][ T9571] ? lock_task_sighand+0x14a/0x2e0 [ 236.270410][ T9571] ? __pfx_send_signal_locked+0x10/0x10 [ 236.270438][ T9571] ? lock_task_sighand+0x29/0x2e0 [ 236.270459][ T9571] ? lock_task_sighand+0x2b4/0x2e0 [ 236.270480][ T9571] ? group_send_sig_info+0x3d/0x260 [ 236.270504][ T9571] group_send_sig_info+0x1fd/0x260 [ 236.270528][ T9571] ? kill_pid_info_type+0x33/0x1f0 [ 236.270551][ T9571] kill_pid_info_type+0xf8/0x1f0 [ 236.270574][ T9571] ? kill_proc_info+0x21/0x180 [ 236.270598][ T9571] kill_proc_info+0xd9/0x180 [ 236.270623][ T9571] __se_sys_rt_sigqueueinfo+0x263/0x4e0 [ 236.270646][ T9571] ? __pfx___se_sys_rt_sigqueueinfo+0x10/0x10 [ 236.270667][ T9571] ? __se_sys_futex+0x3a8/0x450 [ 236.270710][ T9571] do_syscall_64+0x16a/0x530 [ 236.270735][ T9571] ? trace_irq_disable+0x3b/0x140 [ 236.270760][ T9571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.270778][ T9571] ? clear_bhb_loop+0x70/0xc0 [ 236.270801][ T9571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.270820][ T9571] RIP: 0033:0x00007f766f99fb19 [ 236.270839][ T9571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.270854][ T9571] RSP: 002b:00007f7670806028 EFLAGS: 00000246 ORIG_RAX: 0000000000000081 [ 236.270873][ T9571] RAX: ffffffffffffffda RBX: 00007f766fc25fa0 RCX: 00007f766f99fb19 [ 236.270886][ T9571] RDX: 0000200000002640 RSI: 0000000000000021 RDI: 000000000000025d [ 236.270898][ T9571] RBP: 00007f766fa37b70 R08: 0000000000000000 R09: 0000000000000000 [ 236.270910][ T9571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.270921][ T9571] R13: 00007f766fc26038 R14: 00007f766fc25fa0 R15: 00007fffc21ab2e8 [ 236.270952][ T9571] [ 237.182610][ T9615] overlayfs: missing 'workdir' [ 237.233818][ T5744] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 237.263479][ T5744] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 238.095936][ T9626] loop1: detected capacity change from 0 to 8 [ 238.520338][ T9637] loop3: detected capacity change from 0 to 512 [ 238.557479][ T9637] EXT4-fs: Mount option(s) incompatible with ext3 [ 238.674311][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1285'. [ 238.724382][ T9637] loop3: detected capacity change from 0 to 512 [ 238.747177][ T9637] EXT4-fs (loop3): 1 truncate cleaned up [ 238.753849][ T9637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.786639][ T9637] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.1285: bg 0: block 465: padding at end of block bitmap is not set [ 238.807183][ T9637] EXT4-fs (loop3): Remounting filesystem read-only [ 239.098626][ T977] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 239.180791][ T9644] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1287'. [ 239.200843][ T9644] bond0: (slave bond_slave_0): Releasing backup interface [ 239.241453][ T9646] loop2: detected capacity change from 0 to 8 [ 239.250250][ T977] usb 4-1: Using ep0 maxpacket: 16 [ 239.251060][ T977] usb 4-1: New USB device found: idVendor=1189, idProduct=0893, bcdDevice=0.00 [ 239.255413][ T977] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 239.255435][ T977] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 239.255451][ T977] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 239.255470][ T977] usb 4-1: config 0 has no interface number 0 [ 239.255505][ T977] usb 4-1: config 0 interface 104 altsetting 0 endpoint 0x8 has an invalid bInterval 52, changing to 7 [ 239.255528][ T977] usb 4-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 9272, setting to 1024 [ 239.255551][ T977] usb 4-1: config 0 interface 104 has no altsetting 1 [ 239.262038][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.262063][ T977] usb 4-1: Product: syz [ 239.262076][ T977] usb 4-1: Manufacturer: syz [ 239.262088][ T977] usb 4-1: SerialNumber: syz [ 239.291769][ T977] usb 4-1: config 0 descriptor?? [ 239.303835][ T977] asix 4-1:0.104: probe with driver asix failed with error -22 [ 239.351526][ T9650] block2mtd: error: cannot open device /dev [ 239.378090][ T9644] bond_slave_0: entered promiscuous mode [ 239.378112][ T9644] bond_slave_0: entered allmulticast mode [ 239.539781][ T9644] SQUASHFS error: Failed to read block 0x285: -5 [ 239.539804][ T9644] SQUASHFS error: Unable to read metadata cache entry [283] [ 239.539815][ T9644] SQUASHFS error: Unable to read directory block [283:0] [ 239.569234][ T9644] SQUASHFS error: Unable to read metadata cache entry [283] [ 239.569254][ T9644] SQUASHFS error: Unable to read directory block [283:0] [ 239.711329][ T9644] SQUASHFS error: Unable to read metadata cache entry [283] [ 239.711349][ T9644] SQUASHFS error: Unable to read directory block [1d0:26] [ 239.745548][ T9644] SQUASHFS error: Unable to read metadata cache entry [283] [ 239.745569][ T9644] SQUASHFS error: Unable to read directory block [1d0:26] [ 239.759159][ T9644] SQUASHFS error: Unable to read metadata cache entry [283] [ 239.759177][ T9644] SQUASHFS error: Unable to read directory block [1d0:26] [ 240.112175][ T9674] loop5: detected capacity change from 0 to 1024 [ 240.151688][ T2266] usb 4-1: USB disconnect, device number 7 [ 240.222550][ T9674] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.295819][ T9683] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1292'. [ 240.850710][ T5652] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.004207][ T9679] loop4: detected capacity change from 0 to 512 [ 241.041694][ T9679] EXT4-fs error (device loop4): ext4_xattr_inode_iget:473: comm syz.4.1294: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 241.041727][ T9679] loop4: lost filesystem error report for type 5 error -117 [ 241.057541][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 241.057567][ C0] EXT4-fs (loop4): initial error at time 1794113659: ext4_xattr_inode_iget:473 [ 241.057591][ C0] EXT4-fs (loop4): last error at time 1794113659: ext4_xattr_inode_iget:473 [ 241.098004][ T9679] EXT4-fs (loop4): 1 orphan inode deleted [ 241.103258][ T9679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.179389][ T9697] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1295'. [ 241.179460][ T9697] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1295'. [ 241.220384][ T7934] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.372600][ T9697] block2mtd: error: cannot open device /dev [ 241.494312][ T9708] lo: entered allmulticast mode [ 241.500901][ T9708] lo: left allmulticast mode [ 241.612486][ T5655] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.312804][ T9733] Bluetooth: MGMT ver 1.23 [ 255.679401][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.679457][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 278.237946][ T55] Bluetooth: hci0: command 0x0405 tx timeout [ 317.123561][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.123617][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.559299][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.559360][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 391.367881][ T35] INFO: task kworker/u8:15:4344 blocked in I/O wait for more than 143 seconds. [ 391.367901][ T35] Tainted: G L syzkaller #0 [ 391.367908][ T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.367913][ T35] task:kworker/u8:15 state:D stack:23496 pid:4344 tgid:4344 ppid:2 task_flags:0x4248060 flags:0x00080000 [ 391.367950][ T35] Workqueue: writeback wb_workfn (flush-8:0) [ 391.367987][ T35] Call Trace: [ 391.367991][ T35] [ 391.367999][ T35] __schedule+0x17dd/0x5830 [ 391.368016][ T35] ? blk_mq_flush_plug_list+0x415/0x540 [ 391.368037][ T35] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 391.368054][ T35] ? __blk_flush_plug+0x416/0x4d0 [ 391.368067][ T35] ? __pfx___schedule+0x10/0x10 [ 391.368085][ T35] ? schedule+0x90/0x2b0 [ 391.368099][ T35] schedule+0x164/0x2b0 [ 391.368113][ T35] io_schedule+0x7f/0xd0 [ 391.368126][ T35] rq_qos_wait+0x266/0x360 [ 391.368143][ T35] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 391.368156][ T35] ? __pfx_wbt_cleanup_cb+0x10/0x10 [ 391.368170][ T35] ? __pfx_rq_qos_wait+0x10/0x10 [ 391.368185][ T35] ? __pfx_rq_qos_wake_function+0x10/0x10 [ 391.368201][ T35] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 391.368221][ T35] wbt_wait+0x326/0x550 [ 391.368235][ T35] ? __pfx_wbt_wait+0x10/0x10 [ 391.368247][ T35] ? __pfx_dd_bio_merge+0x10/0x10 [ 391.368259][ T35] ? __pfx_wbt_wait+0x10/0x10 [ 391.368270][ T35] __rq_qos_throttle+0x6b/0xb0 [ 391.368287][ T35] blk_mq_submit_bio+0x18ae/0x2eb0 [ 391.368303][ T35] ? mlock_drain_local+0x79/0x490 [ 391.368320][ T35] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 391.368332][ T35] ? blk_cgroup_bio_start+0x5d7/0x670 [ 391.368349][ T35] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 391.368366][ T35] ? __submit_bio+0x7e/0x340 [ 391.368380][ T35] submit_bio_noacct_nocheck+0x2fe/0xb10 [ 391.368397][ T35] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 391.368420][ T35] ext4_io_submit+0x11b/0x190 [ 391.368434][ T35] ext4_do_writepages+0x1264/0x44a0 [ 391.368470][ T35] ? __pfx_ext4_do_writepages+0x10/0x10 [ 391.368495][ T35] ? lock_acquire+0x115/0x350 [ 391.368518][ T35] ext4_writepages+0x1fe/0x4e0 [ 391.368534][ T35] ? __pfx_ext4_writepages+0x10/0x10 [ 391.368555][ T35] ? do_raw_spin_unlock+0xf5/0x200 [ 391.368566][ T35] ? __pfx_ext4_writepages+0x10/0x10 [ 391.368580][ T35] do_writepages+0x338/0x560 [ 391.368594][ T35] ? do_raw_spin_lock+0x12b/0x2f0 [ 391.368607][ T35] ? reacquire_held_locks+0x117/0x1a0 [ 391.368621][ T35] ? writeback_sb_inodes+0x450/0x1af0 [ 391.368638][ T35] __writeback_single_inode+0x136/0x1220 [ 391.368654][ T35] ? do_raw_spin_unlock+0xf5/0x200 [ 391.368667][ T35] writeback_sb_inodes+0x9de/0x1af0 [ 391.368694][ T35] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 391.368725][ T35] ? __pfx_down_read_trylock+0x10/0x10 [ 391.368743][ T35] __writeback_inodes_wb+0x114/0x250 [ 391.368761][ T35] wb_writeback+0x42f/0xad0 [ 391.368776][ T35] ? queue_io+0x211/0x470 [ 391.368792][ T35] ? __pfx_wb_writeback+0x10/0x10 [ 391.368804][ T35] ? do_raw_spin_lock+0x12b/0x2f0 [ 391.368823][ T35] wb_workfn+0x980/0x10f0 [ 391.368844][ T35] ? __pfx_wb_workfn+0x10/0x10 [ 391.368862][ T35] ? do_raw_spin_lock+0x12b/0x2f0 [ 391.368877][ T35] ? lock_acquire+0x115/0x350 [ 391.368894][ T35] ? rcu_is_watching+0x16/0xb0 [ 391.368910][ T35] ? process_scheduled_works+0x97a/0x1630 [ 391.368927][ T35] process_scheduled_works+0xc3d/0x1630 [ 391.368962][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 391.368981][ T35] ? assign_work+0x3cf/0x5d0 [ 391.368999][ T35] worker_thread+0xa47/0xfb0 [ 391.369016][ T35] ? __kthread_parkme+0x71/0x1f0 [ 391.369031][ T35] kthread+0x38b/0x480 [ 391.369044][ T35] ? __pfx_worker_thread+0x10/0x10 [ 391.369053][ T35] ? __pfx_kthread+0x10/0x10 [ 391.369065][ T35] ret_from_fork+0x514/0xb70 [ 391.369079][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 391.369091][ T35] ? __switch_to+0xc78/0x1410 [ 391.369102][ T35] ? __pfx_kthread+0x10/0x10 [ 391.369114][ T35] ret_from_fork_asm+0x1a/0x30 [ 391.369135][ T35] [ 391.369141][ T35] INFO: task jbd2/sda1-8:4972 blocked in I/O wait for more than 143 seconds. [ 391.369151][ T35] Tainted: G L syzkaller #0 [ 391.369156][ T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.369160][ T35] task:jbd2/sda1-8 state:D stack:24872 pid:4972 tgid:4972 ppid:2 task_flags:0x240040 flags:0x00080000 [ 391.369187][ T35] Call Trace: [ 391.369191][ T35] [ 391.369197][ T35] __schedule+0x17dd/0x5830 [ 391.369216][ T35] ? percpu_ref_put_many+0x18e/0x240 [ 391.369232][ T35] ? blk_mq_dispatch_list+0xd2c/0xe10 [ 391.369249][ T35] ? __pfx___schedule+0x10/0x10 [ 391.369266][ T35] ? schedule+0x90/0x2b0 [ 391.369280][ T35] schedule+0x164/0x2b0 [ 391.369293][ T35] io_schedule+0x7f/0xd0 [ 391.369306][ T35] bit_wait_io+0x13/0x110 [ 391.369321][ T35] __wait_on_bit+0xac/0x300 [ 391.369334][ T35] ? __pfx_bit_wait_io+0x10/0x10 [ 391.369349][ T35] out_of_line_wait_on_bit+0x13b/0x190 [ 391.369363][ T35] ? __pfx_bit_wait_io+0x10/0x10 [ 391.369376][ T35] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 391.369391][ T35] ? __pfx_wake_bit_function+0x10/0x10 [ 391.369409][ T35] ? __wait_on_buffer+0xe/0x80 [ 391.369423][ T35] jbd2_journal_commit_transaction+0x2f6e/0x5c80 [ 391.369455][ T35] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 391.369472][ T35] ? do_raw_spin_lock+0x12b/0x2f0 [ 391.369487][ T35] ? do_raw_spin_lock+0x12b/0x2f0 [ 391.369503][ T35] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 391.369517][ T35] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 391.369529][ T35] ? __timer_delete_sync+0x4a7/0x520 [ 391.369546][ T35] kjournald2+0x3bc/0x740 [ 391.369576][ T35] ? __pfx_kjournald2+0x10/0x10 [ 391.369590][ T35] ? __pfx_autoremove_wake_function+0x10/0x10 [ 391.369606][ T35] ? __kthread_parkme+0x71/0x1f0 [ 391.369617][ T35] ? __kthread_parkme+0x199/0x1f0 [ 391.369630][ T35] kthread+0x38b/0x480 [ 391.369642][ T35] ? __pfx_kjournald2+0x10/0x10 [ 391.369654][ T35] ? __pfx_kthread+0x10/0x10 [ 391.369667][ T35] ret_from_fork+0x514/0xb70 [ 391.369680][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 391.369691][ T35] ? __switch_to+0xc78/0x1410 [ 391.369702][ T35] ? __pfx_kthread+0x10/0x10 [ 391.369715][ T35] ret_from_fork_asm+0x1a/0x30 [ 391.369734][ T35] [ 391.369779][ T35] [ 391.369779][ T35] Showing all locks held in the system: [ 391.369785][ T35] locks held by kworker/u8:0/13: 2, on CPU#0: [ 391.369793][ T35] #0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 391.369827][ T35] #1: ffffc90000127c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 391.369856][ T35] locks held by kworker/u8:1/14: 2, on CPU#1: [ 391.369863][ T35] #0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 391.369891][ T35] #1: ffffc90000137c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 391.369921][ T35] locks held by khungtaskd/35: 1, last CPU#1: [ 391.369929][ T35] #0: ffffffff9015a560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 391.369959][ T35] locks held by kworker/u8:2/46: 2, on CPU#0: [ 391.369965][ T35] #0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 391.369993][ T35] #1: ffffc90000b67c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 391.370022][ T35] locks held by kworker/u8:3/53: 2, on CPU#1: [ 391.370029][ T35] #0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 391.370057][ T35] #1: ffffc90000bd7c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 391.370085][ T35] locks held by kworker/u8:4/64: 2, on CPU#1: [ 391.370092][ T35] #0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 391.370119][ T35] #1: ffffc9000205fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 391.370163][ T35] locks held by kworker/u8:10/3378: 2, on CPU#1: [ 391.370170][ T35] #0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 391.370197][ T35] #1: ffffc9000de57c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 391.370226][ T35] locks held by kworker/u8:15/4344: 4, on CPU#0: [ 391.370233][ T35] #0: ffff888021e88950 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 391.370261][ T35] #1: ffffc9000f4a7c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 391.370288][ T35] #2: ffff88807f990100 (&type->s_umount_key#35){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 391.370381][ T35] #3: ffff88807f9a4cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0 [ 391.370449][ T35] locks held by klogd/4998: 1, on CPU#0: [ 391.370456][ T35] #0: ffff88803614a048 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x69e/0x12c0 [ 391.370505][ T35] locks held by udevd/5009: 1, on CPU#1: [ 391.370512][ T35] #0: ffff88803614a048 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x99f/0x12c0 [ 391.370538][ T35] locks held by crond/5379: 1, on CPU#1: [ 391.370544][ T35] #0: ffff88803614a048 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x69e/0x12c0 [ 391.370569][ T35] locks held by getty/5395: 2, on CPU#1: [ 391.370576][ T35] #0: ffff88802a8c00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 391.370605][ T35] #1: ffffc900032362e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 391.370630][ T35] locks held by sshd-session/5626: 1, on CPU#1: [ 391.370637][ T35] #0: ffff88803614a048 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x69e/0x12c0 [ 391.370662][ T35] locks held by syz-executor/5627: 1, on CPU#1: [ 391.370669][ T35] #0: ffff888076dc0518 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x99f/0x12c0 [ 391.370694][ T35] locks held by syz-executor/5642: 1, on CPU#0: [ 391.370700][ T35] #0: ffff888076dc0518 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x99f/0x12c0 [ 391.370725][ T35] locks held by syz-executor/5652: 1, on CPU#1: [ 391.370732][ T35] #0: ffff888076dc0518 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x69e/0x12c0 [ 391.370757][ T35] locks held by syz-executor/5655: 1, on CPU#1: [ 391.370765][ T35] #0: ffff888076dc0518 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x69e/0x12c0 [ 391.370795][ T35] locks held by syz.2.1298/9698: 1, on CPU#0: [ 391.370802][ T35] #0: ffff8880286e5fb8 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x99f/0x12c0 [ 391.370827][ T35] locks held by syz.2.1298/9704: 1, on CPU#0: [ 391.370834][ T35] #0: ffff888076dc0518 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x99f/0x12c0 [ 391.370859][ T35] locks held by syz.4.1302/9722: 1, on CPU#0: [ 391.370866][ T35] #0: ffff888076d4fae8 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x99f/0x12c0 [ 391.370891][ T35] locks held by sed/9725: 1, on CPU#0: [ 391.370898][ T35] #0: ffff888076d21738 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x99f/0x12c0 [ 391.370924][ T35] locks held by modprobe/9731: 1, on CPU#1: [ 391.370930][ T35] #0: ffff888076dc5fb8 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x99f/0x12c0 [ 391.370961][ T35] locks held by modprobe/9734: 1, on CPU#0: [ 391.370968][ T35] #0: ffff888076dc5fb8 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x69e/0x12c0 [ 391.370993][ T35] locks held by modprobe/9736: 1, on CPU#0: [ 391.371000][ T35] #0: ffff888076dc5fb8 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x69e/0x12c0 [ 391.371025][ T35] locks held by syz.3.1305/9737: 1, on CPU#0: [ 391.371032][ T35] #0: ffff888076d30518 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x99f/0x12c0 [ 391.371057][ T35] locks held by kworker/u8:4/9740: 1, on CPU#0: [ 391.371064][ T35] #0: ffff888028fea2e0 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xbc/0x1590 [ 391.371087][ T35] locks held by kworker/u8:2/9741: 1, on CPU#1: [ 391.371094][ T35] #0: ffff888029e985e0 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xbc/0x1590 [ 391.371116][ T35] locks held by kworker/u8:1/9742: 1, on CPU#0: [ 391.371123][ T35] #0: ffff888028febfe0 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xbc/0x1590 [ 391.371146][ T35] [ 391.371148][ T35] ============================================= [ 391.371148][ T35] [ 391.371161][ T35] NMI backtrace for cpu 1 [ 391.371173][ T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 391.371195][ T35] Tainted: [L]=SOFTLOCKUP [ 391.371201][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 391.371212][ T35] Call Trace: [ 391.371220][ T35] [ 391.371227][ T35] dump_stack_lvl+0xe8/0x150 [ 391.371258][ T35] nmi_cpu_backtrace+0x274/0x2d0 [ 391.371280][ T35] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 391.371293][ T35] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 391.371306][ T35] sys_info+0x135/0x170 [ 391.371315][ T35] watchdog+0x1073/0x10f0 [ 391.371333][ T35] ? watchdog+0x209/0x10f0 [ 391.371349][ T35] kthread+0x38b/0x480 [ 391.371360][ T35] ? __pfx_watchdog+0x10/0x10 [ 391.371372][ T35] ? __pfx_kthread+0x10/0x10 [ 391.371384][ T35] ret_from_fork+0x514/0xb70 [ 391.371397][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 391.371408][ T35] ? __switch_to+0xc78/0x1410 [ 391.371419][ T35] ? __pfx_kthread+0x10/0x10 [ 391.371430][ T35] ret_from_fork_asm+0x1a/0x30 [ 391.371448][ T35] [ 391.371452][ T35] Sending NMI from CPU 1 to CPUs 0: [ 391.371491][ C0] NMI backtrace for cpu 0 [ 391.371506][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 391.371529][ C0] Tainted: [L]=SOFTLOCKUP [ 391.371535][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 391.371551][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 391.371577][ C0] Code: fa 8c 02 e9 83 17 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 1a 1e 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 391.371592][ C0] RSP: 0000:ffffffff8fe07ca0 EFLAGS: 00000246 [ 391.371608][ C0] RAX: 00000000002bac8d RBX: ffffffff819cc03c RCX: 8000000000000001 [ 391.371621][ C0] RDX: 0000000000000001 RSI: ffffffff8e6af44b RDI: ffffffff8c8eba80 [ 391.371634][ C0] RBP: ffffffff8fe07d78 R08: ffff8880b8233d9b R09: 1ffff110170467b3 [ 391.371648][ C0] R10: dffffc0000000000 R11: ffffed10170467b4 R12: 0000000000000000 [ 391.371661][ C0] R13: 1ffffffff1fd1df8 R14: 1ffffffff1fc0f9c R15: dffffc0000000000 [ 391.371675][ C0] FS: 0000000000000000(0000) GS:ffff8881233f0000(0000) knlGS:0000000000000000 [ 391.371690][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 391.371702][ C0] CR2: 00007fcd7efa2a37 CR3: 000000000ff48000 CR4: 00000000003526f0 [ 391.371718][ C0] Call Trace: [ 391.371724][ C0] [ 391.371730][ C0] default_idle+0x9/0x20 [ 391.371756][ C0] default_idle_call+0x72/0xb0 [ 391.371782][ C0] do_idle+0x1cc/0x540 [ 391.371806][ C0] ? __pfx_do_idle+0x10/0x10 [ 391.371831][ C0] cpu_startup_entry+0x43/0x60 [ 391.371852][ C0] rest_init+0x378/0x3a0 [ 391.371869][ C0] ? __pfx_rest_init+0x10/0x10 [ 391.371889][ C0] ? __pfx_kernel_init+0x10/0x10 [ 391.371907][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 391.371933][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 391.371954][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 391.371977][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 391.372003][ C0] start_kernel+0x392/0x3e0 [ 391.372026][ C0] x86_64_start_reservations+0x24/0x30 [ 391.372055][ C0] x86_64_start_kernel+0x137/0x1b0 [ 391.372082][ C0] common_startup_64+0x13e/0x157 [ 391.372118][ C0] [ 391.372477][ T35] Kernel panic - not syncing: hung_task: blocked tasks [ 392.909182][ T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 392.919848][ T35] Tainted: [L]=SOFTLOCKUP [ 392.924154][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 392.934189][ T35] Call Trace: [ 392.937462][ T35] [ 392.940392][ T35] vpanic+0x26f/0x710 [ 392.944369][ T35] panic+0xc5/0xd0 [ 392.948083][ T35] ? __pfx_panic+0x10/0x10 [ 392.952486][ T35] ? wq_watchdog_touch+0xf9/0x160 [ 392.957536][ T35] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 392.963682][ T35] watchdog+0x10e7/0x10f0 [ 392.968012][ T35] ? watchdog+0x209/0x10f0 [ 392.972425][ T35] kthread+0x38b/0x480 [ 392.976484][ T35] ? __pfx_watchdog+0x10/0x10 [ 392.981147][ T35] ? __pfx_kthread+0x10/0x10 [ 392.985724][ T35] ret_from_fork+0x514/0xb70 [ 392.990303][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 392.995399][ T35] ? __switch_to+0xc78/0x1410 [ 393.000062][ T35] ? __pfx_kthread+0x10/0x10 [ 393.004640][ T35] ret_from_fork_asm+0x1a/0x30 [ 393.009400][ T35] [ 393.012651][ T35] Kernel Offset: disabled [ 393.016961][ T35] Rebooting in 86400 seconds..