last executing test programs: 15m27.774310297s ago: executing program 32 (id=1011): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000013000500010000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001a0006000000020000001800048014"], 0x44}}, 0x0) 15m9.703522237s ago: executing program 33 (id=1157): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) 15m0.200176249s ago: executing program 34 (id=1232): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000150003000100000001000000010000000000000005010902a1010506092015002564750895018102c0"], 0x12d) close_range(r0, 0xffffffffffffffff, 0x0) 14m30.502604829s ago: executing program 35 (id=1494): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000001c0)={0xfffc, 0xe}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1e, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0xb, 0x6, 0x5, 0x100}, 0x8) 12m33.855401136s ago: executing program 36 (id=2592): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @remote, @local, @remote}}}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x30000, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 11m18.743639045s ago: executing program 37 (id=3141): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./debug\x00', &(0x7f0000006dc0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000006e00)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) read$ptp(r0, 0x0, 0x0) 10m55.567402953s ago: executing program 38 (id=3195): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f00000001c0)=""/156, 0x9c}], 0x2, 0x3ebc, 0x3) 7m38.406034803s ago: executing program 39 (id=4674): socket$igmp(0x2, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000001, 0x5d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e000000000000004c452b0006"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, 0x0}, 0x20) 5m15.069610171s ago: executing program 40 (id=5931): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000140003050abd7178fddbdf21021f51ff", @ANYRES32=r2, @ANYBLOB="080002007f000001080008008003"], 0x28}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @rand_addr=0x64010101}}) 4m8.266289337s ago: executing program 41 (id=6433): syz_mount_image$fuse(0x0, &(0x7f0000000180)='./proc\x00', 0x1000009, 0x0, 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000480)=0x9b, 0x12) write$tun(r0, &(0x7f0000000200)={@val={0x0, 0xa00}, @val={0x2, 0x1, 0xa000, 0x8, 0x800, 0xfff}, @llc={@llc={0xaa, 0x7e, '2'}}}, 0x11) 3m55.941355122s ago: executing program 42 (id=6421): syz_open_dev$usbfs(&(0x7f00000000c0), 0x76, 0x101b01) mkdirat(0xffffffffffffff9c, &(0x7f0000005c40)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000005c80)='./proc_mnt\x00', &(0x7f0000005cc0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000005d00)='./proc_mnt/kcore\x00', 0x0, 0x0) read$msr(r0, 0x0, 0x0) 3m14.977794942s ago: executing program 43 (id=6757): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) r2 = add_key$keyring(&(0x7f0000001100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r1}) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r2) 2m34.788400412s ago: executing program 7 (id=6982): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') r1 = open_tree(r0, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x800, &(0x7f0000001dc0)={0xf, 0x0, 0x40000}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x42, 0x0) 2m34.264565776s ago: executing program 7 (id=6985): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000003240)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000003340)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000033c0)="66f7", 0x20}, {&(0x7f0000003400)='l3', 0x7fffef80}], 0x3, 0x0, 0x0, 0x8800}], 0x1e, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f0000003440)) 2m32.981793394s ago: executing program 7 (id=6998): r0 = gettid() timer_create(0x7, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000002c0)=0x0) timer_settime(r1, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = msgget$private(0x0, 0x184) msgsnd(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="03"], 0xfd1, 0x0) 2m32.355482159s ago: executing program 7 (id=7001): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000040)={0x18, r1}) 2m30.743257394s ago: executing program 7 (id=7011): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./pipe\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./pipe\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./pipe/gssd/clntXX/gssd\x00', 0x1, 0x20) mount(&(0x7f00000001c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000080)='./mnt\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000240)='vers=4.0,sec=krb5p,addr=127.0.0.1,port=20000\x00') 2m30.122023851s ago: executing program 2 (id=7016): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000002800)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@jqfmt_vfsv0}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@noquota}, {@delalloc}, {@noblock_validity}, {@nodioread_nolock}, {@errors_remount}]}, 0x11, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) fallocate(r0, 0x0, 0xfff, 0x9) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"715b1a6a9fca300288d0d6f164694e9be52056879d4f7f9e17a2f387a1e887ad9fea8a741f3a85292a8ca98e1512418fbd5b5beafe58966442a9c6d52bdef586966362501755a16514ded809c856f4e58261695dbfb4d87cd5d13b78c6cf696afecb55cca3e7607479bc2ceded20d446347481aa05e3083992814f23f6ba955daa8c5988fcc3e1f4a1657a94b74a6161fb233fa5146129889ae615315f974fd1e2c6db572e40a4ec1325c81eff25243f2fbe74fc9cc389297c04d98213ca54c33fe33622c7ebe8f6e9712c07be77c43bddb575411faf61123d450d3c608e581d9d1fd5562abd932bbdf70ff573330754d8f2a3c38906aefc04f438f74482b6e4ec9501b6b43d08d910bda4fc230cfbdc06b2447775f53c6aa87b73a284167aee5e05fc8d867afd4b6b8c3ec81a23be5df245d8e21aa8a630de4b680f34fee2af9de02aeaf31aa7d15edbee78a2a7a621305217678c619a19d41e927e798df495ff28a6485e978bb29cf5f82e31ee8e142134e0845f5c1eaa9664c7dbbfcfcd9dc0567fd447f25de86bea1c28e8a9973e3d5f00e74d022f2b9a97ff08f404af3911f7f086643bfd9004c2500b1684e73c885374cb382bcb37fc82a31c79991b2547fbbba3c005b4d88825488599a8cf0cdaebb4d137232516c9f897d72d034a5b69d03be18c0a0958495e3c0f9b7b31f7684236be8772de10aef1446909f13fb49b4516d00f889efe72769585f4e1ffaa5fc9c0dbfa7b05efbaa14a3e240cf7603c6a487f4155f92bc22c262f496e2f30eef1b95cf28235c0273f295a136f122539ceccb412f7c08a019efb4c270a417db7deb6973a6d0370df72d12456b2d2187c4abdb632bc6323eaaa10f6e8c829d9b556b04498de35a355907c9a17b99b2effaca8ffbfe486493740f3dded005e8bf91b417e2cde579f9232c04807dd2f2da29faf183dee67430972a0c85ee9e9319a7b55b03b3db7d2623f3b16da80eee507de1f18b298a045f32970903d4ee04f99c8a6c086c93f465ad8493f3f2e0579993374b1941818c67c448c4e218e64467ea9755042b593a33f5f909ba7eb4c14be439964ff2c5ff2367710438f2d306e721042b39499b21b034cf9a95048a43e8d96eb88c7e372ee61e7a909b6e947d416b2ac672fa3683771cf6986bda28ccd50c448e31985adf2b836349d8e1ac3ea17dd9256bac1f3c47f39953fceddef2e12b9956ad44347142d836ef531528fd9cbc0c132ac6e270c9f5e4d950d62b788dfb1e337be9629a02f945897bdd5168d73d78ec3a7651465949f5027dcd0affb6b24063499d4afb57b80aa62efaefe607fb9073c79d7083c629bf11a56527fe85a41c3b347c7ef54c85a6e6d046994101ae7627e74d14337a9bb042f5f0aeca0a6199dedb3e4b1aa30760131e8d76d43d9991ac1b3c443b25d7c4c8153d1c7763e6f2fda8c404697668f6aa61f8e28d568320ed190ca635c74d9948adcaa53776a2db303b848723b414bd192511f557f2a426822acecfa3ce6f9bfd60c0144b1a55294387238fbb196addf0502ee9af4108682d056f8965ce4fca03d8ecdcf5f302eaea2de59bf663b15bf8a20ce874ff7d3958fe6da3301b678c2930129b3cb4413400388a59ae939c58d96043d93a57a980ed6b9f35751e059ef6c06cffa4f5c3f8ba1ba67f0160390ec77311e4e67d921bb40a29d448f274da50115c2c67baa3d6f39f9ddfaf3e67392d9e3802c353f0b855c927d6a45e445f58526a09793bcc2e72163fb1b7a779d99f230bd95e5bce797cacb0b8343dcf1be080f18040fe288b157b01b074d25fe44ab6b3c0362f1931f6b174412a8d6a2a645270e7430b3884ac16930105786e469d1d8bcf9ed4010ee3accf78ecc138a8b11c15798eeb29ef4fc3bc5b376807348e1647148c35a1aa3d7ed05dc3a11274887f04f035837a9ea81fcb5eaccd4f43f2f6bbf3c426f72e1423c9175c2b234be0fd3c40c15e5e35c5c7359c894e95f82797c48fdca7ef07a6fa6f0dd0bb9a24c4aa9050000000000005c67e60f8814f67d86caba122def954662ae2c6f4f99cfbb55214c61216e8c8f84e9b172129642d754a49c923c6c6f1ba820e99a513308a03c9a080be7224244f2bc1d99d93ddcb25a3d2e0a6b4b868f877760b019c8c475c3e0b90109c21c309e7bc0ffc48753aeb70e7884c8eac52b2fb8576ae917199bfeea255da4b54667320798db03440fabaebb1e8e181506bf93ac67ba128a14c9dcc45d9f07ddfea21e7da2bf4215bc73e82e9a7187cd5fa7c17f7710f2cdf59bb22ce786328af52f17349c42ca7bce681619246b8b467b7b4c60125ea5687e1cd9bf36a67023759a8baeccb60e84c7102f284436584d0508486d96af8ea8358f7ac1f9a21c1229eda8a1a273b999a74f39d3851b6aec92d120f2c4ca0b2852844b5529eb40db91749f221568850f23f089dd704434b6fe736ab7eb67ebd52943000770e0a57c6ff7c1420a225fdeca0cddcf4083a3f5f9fb37490dfdf2c8aae282558c8a4af6ec41f7788d6340053ff69311489323c403becde20ae84c6a8968717e8923c13723be082aab3edd7cf0fd1b2a1f64692911d9e49c4d7d20f8c9364c454fdb51ff376abbae26df57ab7d458772a919879ea7caada2c17fb0011ecc8ced3d7dfa39250fc3c8cc9d0f377860d8b58fd81952f50d732adc73e470c1f5778a49d7f3d507e5ab5cb798420f3a56d9d3ad76b75e5d41921a7ae04099968867c816f6d44c4a41cefbe31623d6899a00c28454bdc0ea17f284dcb39a0221989e3c2bbcc5556e8f870bbf98be4b57be438797995d221ecd0515e4c89c431ff7b595f35527911371cc324cd4c76d4ea68cfdd1eed120ec16e89e4ec4c5ac28039de8b3aa451e1e55631d599612e94630ad3d67ba79e03c4ff023e8ddfd10c09517df736a01af5488a87f551c7e8e41dd0d0d10c58f3053cbdef2c4fd72e51c2d9724360687ab6d0395023626bbfcab24737a50bb27d78ebfe11b5e40a71b2141254074b3dca3cf45456ea1860704b0d5da04710667bf6454c81b33b5b429d2764afd13338d60b928140c05e0b7f41c6fb19b911216ca2357d8171b3673b454b5017bbf34dabdf5fd0d7fb602399ec434f40bc0450cd6e418713c68b349b7deb3ef014b8ec7a62f686b37b1c3a8b60340d0bbf09a6965013c68317d7a2e07bcd3bcaa7cd2cbf34d64534e1ff9cb4ba32d9a5cde63e2da7dfdfcc86886a0ee01fa0d95b78a12085d6dfb62d622041e97d8f03f4727e865be656d9286d628a8950b55dc71058b6dec200049738824a8200023be3f93e740f2a8d241e57deeb642ff28140ee91424db3cf2fafdd8a7d9fc80a7a54da30029ef65df2e7900059ab1141985376e7f9f46e712b4536ed49778e0629d284f56eef0906d21536427333d8a7d6d7e74591031a526eea16a627c5d9f399ec4628a26d9812b68b501716b602564504ab8f16e76a19c608ac550fa52fb80af1e81b48abf13c9996cf47f34d8e943b7d48de31c0d5d794af157c16209d3c0632c2801ab17f05de2c2fb9b9b8c0a257c18a832ac743c9341042af1e56619154fc4f7b20c8de3edbb1636f0a098ed6f6858c27905b00798fd8bedda5eaeeb12ff19943dad0a7f069a9e01dfc9730568784a07c0a6b01623b11a1e6f86cab4d95bf256cd28b00c17b5df66dd4c393471f0f18c68aeae404f5f3fb66bbfd62f1511b35caddad004408fe3b182edf81ad50ac3a639121236968c6be1ba7f7bee6409a91f4c7caf077c2a94c6d8d547cc680a1d7e6cd57c328f6e21312ab76491565c5f4271cbf64ed2be12d770e927cba3cfa0fb89452285a69fe205bc9943eee4466ca8f9998997e2c1a1fe782c9e2241c51dc008bb8f6fe9a49edefae6f43d3e0cd207439745dfd4c347058a4ec3c3bbd56f3108b9a034600f78dc5c889621a6b78e2f7256034d53ae7877de459b6895d5849eb4a8099a62a4bd50d5b4d48cf82fae64985e1e22435fe5d5a4b9119eed5d8ee03a6d1675b7b75d47b8e20a44c05812b36cc2e31947a02c48262c5a875e562dbd4a1a8d045a37afabb28079d3904f53d466e5abab09b8e5e0a56dbae4c4cd9bc6640b47cc6616b2e7cf19c6e9591d32ab0cf87880c81d63948a508ad0cbd50e348d399daf51efb2b96ef9d56a8ba89d04bf5e7d4f7353f71d1a6cb78da6644574664d08e848cf97bab16d6acf70f0e8a06dad5c741cb5eb483f809c4c35307595f00d00bf6a1474aef94cfc913d08c612387172aabc802c17753c6ccd752eaa81e7eefd61c037f958e23bcb9c1510ea47bcaefa72f070809de9f79faede74c87231411b17b353382974bcd334cf983c85ad9e1844cdbd9181a5bb976c35b6a638ae8dd20119858f8c525d735779b2f8e244ed2fc0d900445fe1fe775b4bcb1d2e8d456fd6234ddfcad7fe7abf716d9f4b4a6ee83be812cdda17ec43a895a5c03e5359cce3de61d9736f8a4d66051891b1431f2e61a324f252bd0e9b32e23bd31a5405642bbd2cdc5d3e45b56530568f05a72d475a7d3505b26d9fcdaeb30a62ddf09bcd9e59c1f34e375149782b8019a7a9883fd93397acb338af428f1e015a671b5c11651d3c0168f747fdc6e1fb084bdcbd760adce881492b2bbb76c0a1327e76c9c7ce0afff2f80ec30f2be04d9f93a9b291cc01bcc03f7b67e16a7f1bcc838aab9240df99691a2781da614fdcecf5115382e1357460f4b8e3a577d3ae922379eadc2416d40028c785905bb43a41f5fb7189a8704b8e492c86bd82d0560f81796693e74f08739b632e5226d3c3a963caf5db455ac20288d472611e7dc243531fd66718e94daa2bf93a30a38e6a497a50f2472a72bf9c4689e54105c44cd074bb87e087735791b436d6553c5f2b61ff75dc64ba597b77f7ea42a0ec14dc08107e7bbe97ae519beb5e18a8859493afd097d4609a3a2025fe9603b85f2b1350336d92e15d0bdea3a42bb8775ff2b38babf2ec27e77452c93a05a798ec789a6a012047481ea8e1a8dfc77a9f0f6ddebb9f3503702b147f663f01f70cdfc29afe0cfd7823823fa2e139ea7d1a010a67bb3a31e620aff5cbe1a99ac3cd0f91c472dd021213edf5a9225941b575e27f99c0cb94eb9598a443ec7665335305895ebc28e3f8d34adf6aa37084f823d293ba9dcb2f73d88457d0a55c9202dd309a9b36daa4e50c8f9c93ec7644a7a730b6b947f0f2381a34d67bce50e790a7655a34a2f70723f360af014befa4fd3dbbb8bc2f1461eb48b987a8b772b3ad31a1077c59ef45e4b2870739454ef56402115ab427527e67b6a6a97b2bb3d7a2c13d2a55d1032a64b83efc13939589e46abd78bcc493529cf38581fe3160b2c6eb5a9ac6cee0b05618e51450af077fba0dc943089f112e67a2c654ad94157e95295219d0bbab3a02a2c9ec08ce9d904a703760dc41a7943d52561aeb5519e82d0d390365cfd796434c3decf733d8f09789af0b990f4f9b791cf0d677f34d85fc2b3583b21737955cbaa098963bfa39755f335329f265db75c5d406a0a91ed76563a3ed5f3d2877c2b4b81dc1eaccde6d642c0d8791482e27c64103fc87a55ae91e7adf49ddc1dace5c3108d6a496d678ec5ba09b2a9e6990cb63ac3e4b787661800d11c73da87bf5d297c1fb531aa105d30464b0e023e4212a0d4a0ac119c1568280d49d084729e680a0f453a725ed08454fa874cf22f5718e2afd995a1d7acbe92e0a49307f1b322367dc12b3673708024a85fcc643bd00", 0x1000}}, 0x1006) write$binfmt_misc(r0, &(0x7f00000001c0)="09a4499cb5", 0x5) 2m29.893957788s ago: executing program 7 (id=7018): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 2m28.969656027s ago: executing program 2 (id=7024): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) unshare(0x22020600) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) 2m28.204447352s ago: executing program 2 (id=7027): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)="d8", 0x1, r0) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r0) 2m27.877627584s ago: executing program 2 (id=7029): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x40, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/../file0/../file0\x00') 2m27.411781472s ago: executing program 2 (id=7033): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5800003a, r0, 0x0) read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) 2m26.567683794s ago: executing program 2 (id=7039): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0) syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000200)=""/31) syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 2m25.451952593s ago: executing program 44 (id=7039): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0) syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000200)=""/31) syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 2m14.366022978s ago: executing program 45 (id=7018): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 2m8.878080625s ago: executing program 0 (id=7122): r0 = io_uring_setup(0x136a, &(0x7f0000019080)={0x0, 0x1f89, 0x0, 0x5, 0x288}) r1 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x1000) io_uring_enter(r1, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m7.642071182s ago: executing program 0 (id=7127): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2m4.065885542s ago: executing program 0 (id=7140): syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0x815, 0x13, 0xfffffffd, 0x4}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) 2m3.762518738s ago: executing program 0 (id=7142): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") syz_mount_image$vfat(&(0x7f0000005880), &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x5, 0x0, &(0x7f0000000240)) r0 = open(&(0x7f0000014000)='.\x00', 0x8000, 0x14b) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}}) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m3.276147464s ago: executing program 0 (id=7143): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000f6"], 0x22) 2m0.968365011s ago: executing program 0 (id=7149): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/245, 0xf5}], 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2m0.495871833s ago: executing program 46 (id=7149): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/245, 0xf5}], 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 1m28.634719937s ago: executing program 9 (id=7295): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000007c0)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f0000000980)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x0, 0x82) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000001780)={0x8, 0x40000cca8, 0x10003}) r1 = openat(0xffffffffffffff9c, &(0x7f00000017c0)='.\x00', 0x0, 0x6) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000001800)={0xff9c, 0x8001}) 1m27.551194932s ago: executing program 9 (id=7300): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f00000002c0)={[{@errors_continue}, {@norecovery}, {@inlinecrypt}, {@resuid}]}, 0x8, 0x617, &(0x7f0000000480)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/220, &(0x7f0000000000)=0xdc) 1m26.694782723s ago: executing program 9 (id=7304): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1m26.139881872s ago: executing program 9 (id=7311): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$eJzs28tvG0UYAPBv10lKX8SU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlW0IFSOqBJ3xIEDEn8BJ7gg4ITEFe6oUoV6aeFktPZuYjt2mocTF/z7SdvO7M5q5vPu2DM72QD61kj2TxKxKyJ+j4jhera5wEj9v1s3Lk7/fePidBLV6lt/JbVyN29cnC6KFuftzDOjaUT6aRIH2tQ7f/7C6alKZfZcnh9fOPP++Pz5C8+eOjN1cvbk7NnJY8eOHpl44fnJ57oSZ9amm/s/mju477V3rr4xffzquz9/mxTxt8TRJSMrHXyiWu1ydb21uyGdDPSwIaxJKSKyyzVY6//DUYqlizccr37S08YBm6parVZ3dj58uQr8jyXR6xYAvVH80Gfz32LboqHHHeH6S/UJUBb3rXyrHxmINC8z2DK/7aaRiDh++Z8vsy025zkEAECT77PxzzPtxn9p3N9Q7u58bagcEfdExJ6IuDci9kbEfRG1sg9ExINrrL91kWT5+Ce9tq7AVikb/72Yr201j/+K0V+US3ludy3+weTEqcrs4fwzGY3BbVl+YoU6fnjlt887HWsc/2VbVn8xFszbcW1gW/M5M1MLUxuJudH1jyP2D7SLP1lcCUgiYl9E7F9nHaee+uZgp2O3j38FXVhnqn4V8WT9+l+OlvgLycrrk+N3RWX28HhxVyz3y69X3uxU/4bi74Ls+u9oe/8vxl9OGtdr59dex5U/Pus4p1nd/V+91HhOdv8PJW/X0kP5vg+nFhbOTUQMJa/XG924f3Lp3CJflM/iHz3Uvv/viaVP4kBEZDfxQxHxcEQ8krf90Yh4LCIOrRD/Ty8//t76499cWfwza7r+S4mhaN3TPlE6/eN3TZWW1xJ/dv2P1lKj+Z7VfP+tpl3ru5sBAADgvyeNiF2RpGOL6TQdG6v/vfze2JFW5uYXnj4x98HZmfo7AuUYTIsnXcMNz0Mn8ml9kZ+M+LoxfyR/bvxFaXstPzY9V5npdfDQ53Z26P+ZP0u9bh2w6byvBf1L/4f+pf9D/9L/oX+16f/be9EOYOu1+/2/1IN2AFuvpf9b9oM+Yv4P/Uv/h/6l/0Nfmt8et39JXkJiWSLSO6IZEt1JpBHRtGf5d0W5F19QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG/RvAAAA//831udB") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./bus\x00', 0x2000022) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m25.165849081s ago: executing program 9 (id=7317): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x3, r1, 0x0, &(0x7f0000000380)='i', 0x1}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000007c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 1m23.434952584s ago: executing program 9 (id=7323): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) munlock(&(0x7f0000093000/0x2000)=nil, 0x2000) 1m21.98494686s ago: executing program 47 (id=7323): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) munlock(&(0x7f0000093000/0x2000)=nil, 0x2000) 24.942723961s ago: executing program 8 (id=7658): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x1f, 0xd, &(0x7f0000001380)=ANY=[@ANYBLOB="18000000fcffffff000000008000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000001400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1f, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000015c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000016c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 24.405672049s ago: executing program 8 (id=7663): mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x20440, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x5, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt(r0, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) 23.929122569s ago: executing program 8 (id=7666): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000a00)={0x3, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff010}, {0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0xb, 0xa1, 0x1000}]}, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000037c0)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="110000000400"], 0x48) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 22.796888593s ago: executing program 8 (id=7673): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@discard}, {@barrier}]}, 0x3, 0x481, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setreuid(0x0, 0xee00) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 21.746860946s ago: executing program 8 (id=7680): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x1e, 0x2, 0x7, 0xa, 0x0, 0x0, 0x20, 0x0, 0xff, 0x0, 0x3, 0xec, 0x53, 0x31}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0xa84c, 0x5, 0x6, 0x0, 0xfff}, &(0x7f0000000140)=0x14) 20.456212131s ago: executing program 8 (id=7690): socket(0x10, 0x803, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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", @ANYRES8=r1], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) 18.895844728s ago: executing program 48 (id=7690): socket(0x10, 0x803, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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", @ANYRES8=r1], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) 9.528161806s ago: executing program 3 (id=7748): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) 8.937465669s ago: executing program 3 (id=7752): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc080) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x38}}, 0xc00) 6.198377003s ago: executing program 3 (id=7763): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x5032}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', 0x1}) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000680)="010000000000140010000900000000010000000000020800450000740001400040063c817f0000017f00000104d204d2", 0x30}, {&(0x7f00000006c0)="605223115b1d83d13d7a514a665db0fa", 0x10}], 0x2) 5.914309973s ago: executing program 1 (id=7764): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='100', 0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0xd, 0x7, &(0x7f0000000200)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) 4.644494804s ago: executing program 1 (id=7770): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@deltfilter={0xf34, 0x2d, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xe}, {}, {0x4}}, [@TCA_RATE={0x6, 0x5, {0x4}}, @filter_kind_options=@f_flower={{0xb}, {0xd0, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "81685f7601f78f6c2875219ea88e6255"}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x4}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x7}, @TCA_FLOWER_ACT={0x98, 0x3, [@m_mirred={0x44, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x15, 0x6, "e9173c0ddb697005dde205cf6868746e12"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x50, 0xf, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x9, 0x20000000, 0x6, 0xffffff65}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x9a8}]}}, @TCA_CHAIN={0x8, 0xb, 0x800}, @filter_kind_options=@f_cgroup={{0xb}, {0xe18, 0x2, [@TCA_CGROUP_POLICE={0x850, 0x2, [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0x3, 0x8, 0x4, 0x6, 0x5, 0xfa, 0x101, 0x4, 0x5, 0xffffffff, 0x70f11a29, 0x332afdda, 0x1, 0x6, 0x4, 0x800, 0x1eb, 0xa0, 0x9, 0x0, 0x8b1d, 0x7, 0xfc8c, 0x10, 0xaa2, 0x608, 0x0, 0x38, 0x4, 0xfffffffd, 0x2, 0x8, 0x1, 0x10, 0xfffffff7, 0x62, 0x1, 0xa24, 0x0, 0x9, 0x4, 0x3, 0x7fff, 0x0, 0x7, 0x0, 0xfffffffb, 0x3116, 0x1, 0xfffffff3, 0xc85, 0x4, 0x4, 0x9, 0x8, 0xf, 0x8, 0x3a02, 0xe, 0x523, 0x7, 0x9, 0x8, 0x81, 0x9, 0xfffffff8, 0x6, 0xdb, 0x8, 0x0, 0xd8f, 0x8, 0x4, 0x200000, 0xffff, 0xfffff3ae, 0x0, 0x8, 0x7ff, 0x7, 0x5, 0x6, 0x0, 0x800, 0x1fe679e7, 0x1, 0x8, 0x2, 0xb, 0x7fff, 0xe, 0xfff, 0x0, 0x3, 0xffffff53, 0x5c, 0x1, 0x0, 0x76b, 0x9, 0x1, 0x8001, 0xfff, 0xffff, 0xbe7c, 0x3, 0x40, 0x4, 0xa, 0x0, 0x3d9b, 0x4, 0x5, 0x4, 0x8001, 0x8001, 0xfffffb63, 0x2, 0x1, 0x7, 0x9, 0x2d87, 0x4, 0x7fffffff, 0x7fff, 0x7, 0x3ff, 0xae38, 0x8, 0x923, 0x0, 0x4, 0xffffff81, 0xca, 0x6, 0x1, 0x9, 0x200, 0x401, 0x5, 0xc7, 0x1000, 0x0, 0x48e, 0x1, 0x400, 0x5, 0x0, 0x80000008, 0x40400000, 0x2ac, 0x2, 0x80000000, 0x40, 0x6, 0x200, 0x8, 0x7, 0x0, 0x976, 0x9, 0x4, 0x1c0000, 0x9ee, 0x6, 0xe3, 0x5, 0x8000, 0x5, 0x9, 0xfc, 0x67, 0x2d, 0x3, 0x9, 0x3, 0x8, 0xed43, 0x5, 0x1000, 0xffff, 0x9, 0x1, 0x8, 0xfffffff9, 0x8, 0x10, 0x384a, 0x7, 0x2, 0x23ed, 0x4, 0x8, 0x7fff, 0x1, 0xfffffff9, 0x80, 0xc83, 0x8f, 0x7, 0x9, 0xc5b, 0x3, 0x3, 0x7, 0x4, 0x40, 0x5, 0xb, 0x0, 0x1000, 0xfffffffa, 0x5, 0x81, 0x1, 0x3, 0x3, 0x800, 0x1, 0x0, 0xfffffffa, 0x28, 0x80000001, 0x2, 0xffffffff, 0x661, 0x1, 0x8, 0x872, 0xb, 0x82, 0x726, 0x0, 0x0, 0x8000, 0xffffffff, 0x83, 0x4, 0x6, 0x81, 0x7, 0x9, 0x9, 0x4, 0x7, 0x4, 0xb0, 0xffffffff, 0x7, 0x7fffffff, 0xf, 0xf90, 0x7, 0x8586, 0x3d7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x6, 0x9, 0x19, 0x61d, {0x5, 0x2, 0xfff9, 0x5, 0x1, 0xf22}, {0xea, 0x2, 0x200, 0x77fc, 0x1000, 0x3}, 0x80000001, 0x953, 0xc3b}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x5, 0x8000, 0x8, 0x3, 0x4, 0x3ff, 0x2, 0x1, 0x7, 0x3, 0x4d8534b8, 0x83, 0x146, 0xffffffff, 0x3, 0x9, 0x4, 0x4, 0x4, 0x200, 0x4f1a, 0x4, 0x2, 0x5, 0x80000001, 0x5, 0x3, 0x4, 0x40, 0x4, 0x400000, 0x8cd, 0x2, 0x6, 0x7ff, 0x3ff, 0x0, 0x910, 0x3, 0x2, 0x169c, 0x9, 0x8, 0xd9, 0x0, 0x7fffffff, 0x6, 0x101, 0x6, 0x3, 0x8, 0xfffffff9, 0xb, 0x0, 0x0, 0x80, 0x5, 0x10001, 0x4e877062, 0xfffffff8, 0x3, 0xd, 0x2, 0xc664, 0x16, 0x0, 0x81, 0xc, 0xfffffffa, 0x7f, 0x9, 0x7fff, 0x5, 0x1, 0xcd, 0x3, 0x1000, 0x8, 0x40, 0x81, 0x7, 0x2, 0xfff, 0x3, 0x800, 0x3, 0xabf, 0x9, 0x6, 0x0, 0x4, 0x6a0, 0x2, 0x9, 0x7, 0x3, 0x5, 0x7, 0x5, 0x0, 0x94, 0xb, 0x7, 0x9, 0x6, 0xd, 0x5462, 0xe0b, 0x7, 0x2, 0x33c, 0x1, 0x0, 0xffffffff, 0x3, 0x7, 0x400, 0x10000, 0x3, 0x0, 0x7fff, 0x2, 0x9, 0xfffffffa, 0x72a, 0x9, 0x2, 0x0, 0x10, 0x68e8, 0x759f, 0x2, 0x5, 0x6, 0x9, 0x8, 0x1, 0x4, 0x2, 0x8, 0xf4eb, 0x0, 0x4, 0xffffff32, 0x10000000, 0x3ff, 0x4, 0x6, 0x1, 0x7c, 0x8, 0x10000, 0x2, 0x6, 0x6b9d, 0x100, 0x5, 0x2, 0x63db, 0x3, 0xfff, 0x7fffffff, 0xb8, 0x2, 0x8, 0x4, 0x5, 0xffffffff, 0x6, 0x1, 0x7, 0x5, 0x4, 0xb9e, 0x5, 0xe, 0x3, 0x10000, 0x1, 0xc, 0x1, 0x0, 0x80000000, 0x4f09, 0x4, 0x0, 0xab, 0x8, 0x9, 0x2, 0x7, 0x1, 0x40, 0x81, 0xf, 0xd, 0x112, 0xc4e, 0xfffffff8, 0x1, 0x80000000, 0x4, 0x8000, 0x10000, 0x2, 0xf1b, 0x3, 0xfffff5fb, 0x0, 0x3, 0x879, 0x9, 0xc0, 0xd, 0x70f1, 0x1, 0x3, 0x7, 0x37b80a71, 0x2, 0x2b39, 0x80000000, 0x9906, 0x9, 0x81f, 0x1, 0x27f21b41, 0x9, 0xa303, 0x4010000, 0x2e58, 0x1, 0xb8, 0x3, 0x1ff, 0x9, 0x1, 0x8, 0x3, 0x9, 0x2, 0x1, 0x2, 0x3, 0x6, 0x9, 0x40, 0x5, 0x6, 0x6, 0x0, 0x4, 0x61, 0x1]}]}, @TCA_CGROUP_ACT={0xbc, 0x1, [@m_bpf={0xb8, 0x1c, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2008, 0x5, 0x8, 0x81, 0x8}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x0, 0x6, 0x2, 0x3}}, @TCA_ACT_BPF_FD={0x8}]}, {0x2d, 0x6, "d5f52a9c6ffa1877cab97727c1e999e7801f5ac36eccb3f13d722d68dfc1babbfabeb71be358197cdf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_CGROUP_ACT={0x34, 0x1, [@m_mpls={0x30, 0xc, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}, @TCA_CGROUP_POLICE={0x4}, @TCA_CGROUP_POLICE={0x4d0, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x1, 0x0, 0x4, 0x6, {0x5, 0x1, 0x7, 0x0, 0x2, 0x1}, {0xd, 0x2, 0x0, 0x2, 0x4, 0x5}, 0x60f, 0x3, 0xfffffffa}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x40, 0x4, 0x4b, 0x3, 0x0, {0xa6, 0x2, 0xff, 0x401, 0xfffb}, {0x10, 0x2, 0x0, 0x6, 0x8, 0x4}, 0x88d, 0x5, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb8, 0x10000000, 0xbb, 0x101, 0x5, {0x7, 0x1, 0x6, 0x4, 0x2, 0x1}, {0x3, 0x0, 0x3, 0x6, 0xd2, 0x9}, 0x2, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x520, 0x10, 0xb, 0xff, 0x1, 0x40, 0x4, 0x8001, 0xfffffc00, 0x800, 0xffffff1a, 0xd0, 0xfffffff9, 0x1ff, 0x7, 0x8, 0x9, 0x9, 0x1000, 0x101, 0xa922, 0xffffff00, 0x9, 0x1, 0x9, 0x10, 0x200, 0x800, 0xfe, 0x8, 0x2, 0x80000000, 0x3, 0x380000, 0x2, 0x0, 0x9, 0x8, 0x3, 0xffffffff, 0x5, 0x96e, 0xfffff8d4, 0x1ff, 0x6, 0x8, 0x6, 0x1, 0xf, 0x9, 0x3, 0x6, 0x0, 0x1000, 0x401, 0x4, 0x9, 0x7fffffff, 0x2e, 0x7, 0x81, 0x6, 0x0, 0x997e, 0x7, 0x3, 0x3, 0xda, 0x5, 0x0, 0x80, 0x10001, 0x9, 0x5, 0x6, 0x2, 0x2, 0x2, 0xfff, 0x1, 0x8, 0x1, 0x40, 0x4, 0x1000, 0x0, 0x8, 0x3, 0x8, 0x0, 0x8, 0x7, 0x7, 0xa4f4, 0x2c63, 0x0, 0x6a73, 0x7, 0x6, 0x1000, 0xfff, 0x5, 0x1, 0x7, 0xc, 0x1, 0xe78, 0x101, 0x9, 0x8, 0x2, 0x4, 0x0, 0x3538, 0x30000000, 0x2, 0xc, 0xcb3f, 0x2, 0x4, 0x71, 0x7fff, 0x4, 0x2d, 0x9, 0x1, 0xfffffffa, 0x2769, 0x8, 0xfffffff9, 0x8a, 0x10, 0xfffffffa, 0x4, 0x2, 0x2, 0x38000, 0x9, 0x4, 0x7, 0x2, 0x9, 0xea, 0x1000, 0x3ff, 0xffffffff, 0x2, 0xe047, 0x6, 0x7, 0xa, 0x0, 0xa, 0x10, 0x2, 0x1, 0x9, 0x8, 0x5, 0x64d02eed, 0x5, 0x9, 0x7, 0xfffffff7, 0x0, 0x9c, 0x8, 0x7, 0x5d4, 0x1, 0x8, 0x4, 0x9, 0x200, 0x4, 0x7, 0x9, 0x6, 0xfffffffb, 0x80000000, 0x9, 0x7, 0x2, 0x2c0, 0x4, 0x8, 0x1, 0x2, 0x3, 0x8, 0x2, 0x0, 0x7fff, 0x6, 0x5, 0x10000, 0x5, 0x8, 0x6, 0xc07, 0x10000, 0x1, 0x1, 0x8, 0x79, 0x619, 0xffffffff, 0x8, 0x4, 0x81, 0x3, 0x4, 0x0, 0x3, 0x68, 0x3, 0xfff, 0xffff, 0x8, 0x9, 0x4, 0x6, 0x7, 0xa3a, 0x1, 0x5, 0x9, 0x1, 0x81, 0x2, 0x6, 0x340000, 0x3, 0x8, 0x7, 0xfffffffe, 0x5, 0x9, 0xe000000, 0x7fffffff, 0x3, 0x8, 0x10000, 0x6, 0x6, 0x7ff, 0xa63, 0x5, 0x1, 0x2, 0x40, 0x0, 0x3508, 0x3, 0x74f1, 0x6]}]}]}}]}, 0xf34}}, 0x40844) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x4dc0, 0x9c080, 0xa, 0x1b1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.601643481s ago: executing program 3 (id=7773): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e24, 0x2000002, @mcast2, 0x34b4}}, 0x0, 0x11, 0x3fc, 0xfffffffc, 0x32, 0x0, 0xfe}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.403610014s ago: executing program 1 (id=7774): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4309, 0x4) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000740)=""/212, 0xd4}], 0x1}, 0x3ff}], 0x1, 0x10000, 0x0) 3.224513747s ago: executing program 4 (id=7775): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000003c0)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01"], 0x17) r1 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) sendmmsg$inet6(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x18}}], 0x1, 0x40040) 3.04213763s ago: executing program 6 (id=7776): r0 = memfd_create(&(0x7f0000000040)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89Z\x99\xb0\x12\xdd\xb2FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xa3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]', 0x1) r1 = dup(r0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0xee01) 3.010433647s ago: executing program 3 (id=7778): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000640)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000680)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 2.950839958s ago: executing program 4 (id=7779): unshare(0x28000600) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x2000, 0x800) msgsnd(r0, &(0x7f0000000200)={0x1}, 0x8, 0x800) msgctl$IPC_RMID(r0, 0x0) 2.320077866s ago: executing program 5 (id=7780): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x6}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000)={0x4}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0x7f}, 0x1) 2.306471211s ago: executing program 6 (id=7781): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000bc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000001140)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r1, &(0x7f0000001180)=[{&(0x7f00000011c0)=',', 0x1}, {&(0x7f0000001200)="06c391891fe7a0aa63998d25b797", 0xe}, {&(0x7f0000001240)="3ad667fc905d682b82dc7bba428fde5aa0384509182fccd7941df43e2cefc3d87ef7ea2406ea992fb13c0cd454", 0xff8b}], 0x3) 2.29801968s ago: executing program 4 (id=7782): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001080)='./proc\x00', &(0x7f00000010c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc/net/stat\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000001140)='rt_cache\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000340)=""/209, 0xd1, 0x5) 2.058548527s ago: executing program 1 (id=7783): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) ptrace(0x10, 0x0) ptrace$peek(0x3, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, &(0x7f0000000140), 0x0}, 0x20) 1.885581215s ago: executing program 5 (id=7784): pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(r2, &(0x7f00000014c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000003500)={0x10, 0xfffffffffffffffe, r3}, 0x66) splice(r0, 0x0, r2, 0x0, 0x10, 0x7) 1.809158632s ago: executing program 6 (id=7785): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="040000000000000000000000380100") ioctl(r0, 0xc138fd09, &(0x7f0000000000)) 1.806995467s ago: executing program 4 (id=7786): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./bus\x00', 0x1ef) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000bc0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@userxattr}]}) setxattr$trusted_overlay_origin(&(0x7f0000001e80)='./file0/file1\x00', &(0x7f0000002000), 0x0, 0x0, 0x3) 1.559856693s ago: executing program 1 (id=7787): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x73e9}) 1.482553983s ago: executing program 5 (id=7788): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x25, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}) close(r0) 1.394485668s ago: executing program 3 (id=7789): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b12, 0x0) 1.348532359s ago: executing program 6 (id=7790): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/sys/kernel/unprivileged_bpf_disabled\x00', 0x1, 0x0) capset(&(0x7f0000000580)={0x20071026}, &(0x7f00000005c0)) write$FUSE_GETXATTR(r0, 0x0, 0x0) 1.23879654s ago: executing program 4 (id=7791): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3800006, 0x31, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f00006ca000/0x2000)=nil, 0x2000}, 0x1}) 1.111829048s ago: executing program 5 (id=7792): socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x4a, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = syz_io_uring_setup(0xf51, &(0x7f0000000580)={0x0, 0xbbda, 0x13d81, 0x2}, &(0x7f0000000240), &(0x7f0000000180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) 837.182113ms ago: executing program 6 (id=7793): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='-bond0', 0x6) 701.952214ms ago: executing program 5 (id=7794): mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x2000003, 0x6c033, 0xffffffffffffffff, 0xf9546000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000340)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 313.220245ms ago: executing program 6 (id=7795): r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000002c0)={0x0, 0xffffffffffffff36, &(0x7f0000000300)="952bb3e006ae9a4c3a"}) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) r1 = landlock_create_ruleset(&(0x7f0000001340)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x8) 146.669148ms ago: executing program 1 (id=7796): r0 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="01ebcb"], 0x5c}, 0x1, 0x0, 0x0, 0x24008802}, 0x4) r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000680)=""/188, 0xbc}], 0x1}, 0x0, 0x10182, 0x0, {0x1}}) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) 30.65911ms ago: executing program 5 (id=7797): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/cpu/cpu1/firmware_node/eject\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(r0, &(0x7f0000000400)='1', 0x1) 0s ago: executing program 4 (id=7798): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='mtd0\x00', 0x181) kernel console output (not intermixed with test programs): 0000000000 [ 1015.190261][T27234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1015.190277][T27234] R13: 00007f8db0626038 R14: 00007f8db0625fa0 R15: 00007fff75a8bab8 [ 1015.190318][T27234] [ 1015.453486][T19156] usb 4-1: USB disconnect, device number 30 [ 1015.787025][ T5637] Bluetooth: hci2: command tx timeout [ 1016.077459][T27241] loop8: detected capacity change from 0 to 40427 [ 1016.127772][T27241] F2FS-fs (loop8): invalid crc value [ 1016.286058][T27253] loop5: detected capacity change from 0 to 512 [ 1016.770342][T27241] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1016.917525][T27241] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1017.097359][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1017.250147][ T10] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1017.252026][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.278334][ T10] usb 4-1: config 0 descriptor?? [ 1017.549118][ T10] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1017.579023][T24152] syz-executor: attempt to access beyond end of device [ 1017.579023][T24152] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1017.579470][T24152] CPU: 0 UID: 0 PID: 24152 Comm: syz-executor Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1017.579505][T24152] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1017.579516][T24152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1017.579536][T24152] Call Trace: [ 1017.579546][T24152] [ 1017.579556][T24152] dump_stack_lvl+0xe8/0x150 [ 1017.579599][T24152] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1017.579634][T24152] f2fs_write_end_bio+0x114c/0x15f0 [ 1017.579695][T24152] __submit_merged_bio+0x258/0x6a0 [ 1017.579721][T24152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1017.579751][T24152] ? rcu_is_watching+0x16/0xb0 [ 1017.579794][T24152] __submit_merged_write_cond+0x3c9/0x4e0 [ 1017.579833][T24152] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1017.579878][T24152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1017.579931][T24152] f2fs_write_data_pages+0x2a1d/0x36f0 [ 1017.580007][T24152] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1017.580054][T24152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1017.580083][T24152] ? lru_gen_update_size+0x719/0xd00 [ 1017.580155][T24152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1017.580184][T24152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1017.580212][T24152] ? __bfs+0x153/0x290 [ 1017.580241][T24152] ? __pfx_hlock_conflict+0x10/0x10 [ 1017.580281][T24152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1017.580324][T24152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1017.580353][T24152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1017.580381][T24152] ? __lock_acquire+0x1511/0x2de0 [ 1017.580443][T24152] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1017.580477][T24152] do_writepages+0x338/0x560 [ 1017.580531][T24152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1017.580564][T24152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1017.580600][T24152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1017.580630][T24152] ? do_raw_spin_unlock+0xf5/0x200 [ 1017.580675][T24152] filemap_fdatawrite+0x1e9/0x2f0 [ 1017.580706][T24152] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1017.580777][T24152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1017.580810][T24152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1017.580844][T24152] ? do_raw_spin_unlock+0xf5/0x200 [ 1017.580890][T24152] f2fs_sync_dirty_inodes+0x30e/0x830 [ 1017.580950][T24152] f2fs_write_checkpoint+0xa38/0x2710 [ 1017.581026][T24152] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1017.581129][T24152] kill_f2fs_super+0x2dd/0x700 [ 1017.581170][T24152] ? rcu_do_enqueue+0x616/0x870 [ 1017.581199][T24152] ? lockdep_hardirqs_on+0x7b/0x110 [ 1017.581227][T24152] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1017.581282][T24152] ? __pfx_call_rcu+0x10/0x10 [ 1017.581326][T24152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1017.581356][T24152] ? shrinker_free+0x2a7/0x3b0 [ 1017.581385][T24152] deactivate_locked_super+0xbe/0x110 [ 1017.581428][T24152] cleanup_mnt+0x204/0x2a0 [ 1017.581464][T24152] task_work_run+0x1d9/0x260 [ 1017.581500][T24152] ? __pfx_task_work_run+0x10/0x10 [ 1017.581543][T24152] exit_to_user_mode_loop+0x204/0x770 [ 1017.581575][T24152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1017.581605][T24152] ? rcu_is_watching+0x16/0xb0 [ 1017.581647][T24152] do_syscall_64+0x328/0x520 [ 1017.581673][T24152] ? trace_irq_disable+0x3b/0x140 [ 1017.581707][T24152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.581740][T24152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.581766][T24152] RIP: 0033:0x7f0ee7fa0797 [ 1017.581789][T24152] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1017.581810][T24152] RSP: 002b:00007ffd0d1abdf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1017.581837][T24152] RAX: 0000000000000000 RBX: 00007f0ee8035f63 RCX: 00007f0ee7fa0797 [ 1017.581855][T24152] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0d1abeb0 [ 1017.581871][T24152] RBP: 00007ffd0d1abeb0 R08: 00007ffd0d1aceb0 R09: 00000000ffffffff [ 1017.581889][T24152] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0d1acf40 [ 1017.581910][T24152] R13: 00007f0ee8035f63 R14: 00000000000f8552 R15: 00007ffd0d1acf80 [ 1017.581952][T24152] [ 1017.736041][T27092] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1017.787486][T27092] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1017.804528][T27092] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1017.855730][T24152] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1017.890499][T27092] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1017.914883][ T10] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 1017.914915][ T10] [drm] Initialized udl on minor 1 [ 1018.015681][T27092] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1018.102390][T27092] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1018.103642][T27092] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1018.167002][T27273] loop6: detected capacity change from 0 to 32768 [ 1018.219677][T27092] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1018.222516][T27273] (syz.6.7380,27273,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1018.223086][T27273] (syz.6.7380,27273,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1018.264625][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 1018.264643][ T29] audit: type=1800 audit(1792814150.477:3585): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15344 res=0 errno=-22 [ 1018.300174][ T29] audit: type=1800 audit(1792814150.517:3586): pid=26672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=404254 res=0 errno=-22 [ 1018.394777][T27273] JBD2: Ignoring recovery information on journal [ 1018.510986][ T29] audit: type=1800 audit(1792814150.727:3587): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15590 res=0 errno=-22 [ 1018.628178][T27273] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1018.944202][T27296] input: syz1 as /devices/virtual/input/input58 [ 1018.955179][ T29] audit: type=1800 audit(1792814151.167:3588): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=404290 res=0 errno=-22 [ 1018.976822][ T29] audit: type=1800 audit(1792814151.187:3589): pid=26975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=404305 res=0 errno=-22 [ 1018.976905][ T29] audit: type=1800 audit(1792814151.187:3590): pid=26975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=404308 res=0 errno=-22 [ 1019.006115][ T29] audit: type=1800 audit(1792814151.217:3591): pid=26975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=404307 res=0 errno=-22 [ 1019.036811][ T29] audit: type=1800 audit(1792814151.247:3592): pid=26975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=404306 res=0 errno=-22 [ 1019.062054][ T29] audit: type=1800 audit(1792814151.277:3593): pid=26975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=404297 res=0 errno=-22 [ 1019.085671][ T29] audit: type=1800 audit(1792814151.297:3594): pid=26975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=404300 res=0 errno=-22 [ 1019.397741][T27092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1019.584871][T27092] 8021q: adding VLAN 0 to HW filter on device team0 [ 1019.636453][ T9838] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.636559][ T9838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1019.671504][ T9749] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.671693][ T9749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1019.913416][T27273] overlayfs: upper fs does not support tmpfile. [ 1020.025049][T27273] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1020.030575][ T5643] Bluetooth: hci7: command 0x0406 tx timeout [ 1020.238859][T27273] overlayfs: upper fs missing required features. [ 1020.252845][T27092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1020.523099][T22442] ocfs2: Unmounting device (7,6) on (node local) [ 1020.741498][T27092] veth0_vlan: entered promiscuous mode [ 1020.810992][T27092] veth1_vlan: entered promiscuous mode [ 1021.010571][ T5283] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1021.135598][T27092] veth0_macvtap: entered promiscuous mode [ 1021.229616][T27092] veth1_macvtap: entered promiscuous mode [ 1021.353183][T27092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1021.402307][T27092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1021.495194][ T9838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.618503][ T9922] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.618571][ T9838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.907982][ T8629] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.949993][T27358] loop1: detected capacity change from 0 to 512 [ 1022.020535][T27358] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1022.020558][T27358] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 1022.020851][T27358] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1022.040760][T27358] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #13: comm syz.1.7399: iget: bad i_size value: 12154761577498 [ 1022.040794][T27358] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1022.046470][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1022.046492][ C0] EXT4-fs (loop1): initial error at time 1792814154: ext4_orphan_get:1403: inode 13 [ 1022.046525][ C0] EXT4-fs (loop1): last error at time 1792814154: ext4_orphan_get:1403: inode 13 [ 1022.087287][T27358] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.7399: couldn't read orphan inode 13 (err -117) [ 1022.087320][T27358] loop1: lost filesystem error report for type 5 error -117 [ 1022.129821][T27358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1022.213047][T27358] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.7399: dx entry: limit 65535 != root limit 120 [ 1022.213085][T27358] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.7399: Corrupt directory, running e2fsck is recommended [ 1022.362284][ T8629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1022.362310][ T8629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1022.467721][T26233] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.622309][T27363] pimreg: entered allmulticast mode [ 1022.679796][T27364] pimreg: left allmulticast mode [ 1022.735395][ T9918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1022.735430][ T9918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1022.995911][ T10] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1022.997255][ T10] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1023.046232][ T10] usb 4-1: USB disconnect, device number 31 [ 1023.065740][ T5823] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1023.066170][ T5823] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1023.121241][ T5823] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1024.156123][T27395] FAULT_INJECTION: forcing a failure. [ 1024.156123][T27395] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.156165][T27395] CPU: 0 UID: 0 PID: 27395 Comm: syz.1.7411 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1024.156199][T27395] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1024.156210][T27395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1024.156225][T27395] Call Trace: [ 1024.156236][T27395] [ 1024.156246][T27395] dump_stack_lvl+0xe8/0x150 [ 1024.156296][T27395] should_fail_ex+0x410/0x560 [ 1024.156331][T27395] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1024.156364][T27395] should_failslab+0xa8/0x100 [ 1024.156399][T27395] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1024.156437][T27395] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 1024.156481][T27395] ? sock_alloc_inode+0x2c/0x1a0 [ 1024.156511][T27395] ? sock_alloc_inode+0x2c/0x1a0 [ 1024.156550][T27395] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1024.156582][T27395] sock_alloc_inode+0x2c/0x1a0 [ 1024.156615][T27395] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1024.156647][T27395] alloc_inode+0x6a/0x1b0 [ 1024.156687][T27395] __sock_create+0x127/0xac0 [ 1024.156724][T27395] ? __pfx___se_sys_setns+0x10/0x10 [ 1024.156768][T27395] __sys_socket+0xd6/0x1b0 [ 1024.156808][T27395] __x64_sys_socket+0x7a/0x90 [ 1024.156844][T27395] do_syscall_64+0x166/0x520 [ 1024.156871][T27395] ? trace_irq_disable+0x3b/0x140 [ 1024.156903][T27395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.156936][T27395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.156962][T27395] RIP: 0033:0x7fe088f9f559 [ 1024.156984][T27395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.157006][T27395] RSP: 002b:00007fe089dbefc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1024.157032][T27395] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fe088f9f559 [ 1024.157050][T27395] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 000000000000001f [ 1024.157065][T27395] RBP: 00007fe089036b20 R08: 0000000000000000 R09: 0000000000000000 [ 1024.157082][T27395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1024.157098][T27395] R13: 00007fe089226038 R14: 00007fe089225fa0 R15: 00007fffaceb9a78 [ 1024.157138][T27395] [ 1024.170281][T27395] socket: no more sockets [ 1024.535235][T27400] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input59 [ 1024.555196][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1024.555214][ T29] audit: type=1800 audit(1792814156.767:3603): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=404763 res=0 errno=-22 [ 1024.634059][ T29] audit: type=1800 audit(1792814156.847:3604): pid=26672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=404779 res=0 errno=-22 [ 1024.644303][ T29] audit: type=1800 audit(1792814156.857:3605): pid=26672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=404782 res=0 errno=-22 [ 1024.659116][ T29] audit: type=1800 audit(1792814156.877:3606): pid=26672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=404781 res=0 errno=-22 [ 1024.680041][ T29] audit: type=1800 audit(1792814156.897:3607): pid=26672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=404780 res=0 errno=-22 [ 1024.680092][ T29] audit: type=1800 audit(1792814156.897:3608): pid=26672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=404771 res=0 errno=-22 [ 1024.721827][ T29] audit: type=1800 audit(1792814156.937:3609): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=404795 res=0 errno=-22 [ 1024.779360][ T29] audit: type=1800 audit(1792814156.997:3610): pid=26672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=404767 res=0 errno=-22 [ 1024.781501][ T29] audit: type=1800 audit(1792814156.997:3611): pid=26672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="phys" dev="sysfs" ino=404768 res=0 errno=-22 [ 1024.930578][T27415] FAULT_INJECTION: forcing a failure. [ 1024.930578][T27415] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.930619][T27415] CPU: 1 UID: 0 PID: 27415 Comm: syz.8.7418 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1024.930662][T27415] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1024.930673][T27415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1024.930689][T27415] Call Trace: [ 1024.930699][T27415] [ 1024.930710][T27415] dump_stack_lvl+0xe8/0x150 [ 1024.930754][T27415] should_fail_ex+0x410/0x560 [ 1024.930790][T27415] should_failslab+0xa8/0x100 [ 1024.930826][T27415] __kvmalloc_node_noprof+0x171/0x820 [ 1024.930859][T27415] ? __kvmalloc_node_noprof+0x340/0x820 [ 1024.930889][T27415] ? alloc_fdtable+0x169/0x2c0 [ 1024.930932][T27415] ? alloc_fdtable+0x169/0x2c0 [ 1024.930978][T27415] alloc_fdtable+0x169/0x2c0 [ 1024.931020][T27415] dup_fd+0x9a5/0xbf0 [ 1024.931068][T27415] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.931099][T27415] ? do_raw_spin_unlock+0xf5/0x200 [ 1024.931146][T27415] unshare_fd+0xa8/0x120 [ 1024.931187][T27415] ksys_unshare+0x4c8/0x890 [ 1024.931229][T27415] ? __pfx_ksys_unshare+0x10/0x10 [ 1024.931271][T27415] ? rcu_is_watching+0x16/0xb0 [ 1024.931322][T27415] __x64_sys_unshare+0x38/0x50 [ 1024.931360][T27415] do_syscall_64+0x166/0x520 [ 1024.931386][T27415] ? trace_irq_disable+0x3b/0x140 [ 1024.931419][T27415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.931453][T27415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.931479][T27415] RIP: 0033:0x7f0ee7f9f559 [ 1024.931503][T27415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.931525][T27415] RSP: 002b:00007f0ee8dfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1024.931551][T27415] RAX: ffffffffffffffda RBX: 00007f0ee8225fa0 RCX: 00007f0ee7f9f559 [ 1024.931571][T27415] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008020480 [ 1024.931587][T27415] RBP: 00007f0ee8036b20 R08: 0000000000000000 R09: 0000000000000000 [ 1024.931603][T27415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1024.931619][T27415] R13: 00007f0ee8226038 R14: 00007f0ee8225fa0 R15: 00007ffd0d1acb88 [ 1024.931664][T27415] [ 1025.775213][T27435] loop6: detected capacity change from 0 to 512 [ 1025.820261][T27435] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #15: comm syz.6.7425: inode has both inline data and extents flags [ 1025.820297][T27435] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1025.825000][T27435] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.7425: couldn't read orphan inode 15 (err -117) [ 1025.825033][T27435] loop6: lost filesystem error report for type 5 error -117 [ 1025.826361][ C0] EXT4-fs (loop6): error count since last fsck: 2 [ 1025.826384][ C0] EXT4-fs (loop6): initial error at time 1792814158: ext4_orphan_get:1403: inode 15 [ 1025.826425][ C0] EXT4-fs (loop6): last error at time 1792814158: ext4_orphan_get:1408 [ 1025.839405][T27435] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1025.871350][T27435] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 1025.939885][ T29] audit: type=1800 audit(1792814158.157:3612): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15590 res=0 errno=-22 [ 1026.377199][T27443] loop1: detected capacity change from 0 to 131072 [ 1026.378277][T27443] xfs: Deprecated parameter 'ikeep' [ 1026.378295][T27443] XFS: ikeep mount option is deprecated. [ 1026.475096][T27443] XFS (loop1): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 1026.479517][T22442] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1026.650422][T27457] netlink: 'syz.5.7431': attribute type 34 has an invalid length. [ 1026.797553][T27443] XFS (loop1): Starting recovery (logdev: internal) [ 1026.851250][T27460] loop8: detected capacity change from 0 to 16 [ 1026.928536][T27460] erofs (device loop8): mounted with root inode @ nid 36. [ 1026.950826][T27443] XFS (loop1): Ending recovery (logdev: internal) [ 1027.059819][T27460] syz.8.7428: attempt to access beyond end of device [ 1027.059819][T27460] loop8: rw=8912896, sector=1342177272, nr_sectors = 32 limit=16 [ 1027.088060][T27460] syz.8.7428: attempt to access beyond end of device [ 1027.088060][T27460] loop8: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16 [ 1027.114412][T27466] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input60 [ 1027.555888][T26233] XFS (loop1): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 1028.427979][T27479] loop6: detected capacity change from 0 to 32768 [ 1028.522176][T27479] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 1028.608985][T27479] JBD2: Ignoring recovery information on journal [ 1028.629102][T27498] loop8: detected capacity change from 0 to 512 [ 1028.772052][T27479] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1029.774118][T22442] ocfs2: Unmounting device (7,6) on (node local) [ 1030.047338][T27517] loop3: detected capacity change from 0 to 32768 [ 1030.160455][T27517] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1030.180930][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 1030.180948][ T29] audit: type=1800 audit(1792814162.397:3627): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15221 res=0 errno=-22 [ 1030.253622][T27540] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1030.292302][T19340] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1030.460202][T19340] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1030.469724][T19340] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.469757][T19340] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1030.469798][T19340] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.489921][ T29] audit: type=1800 audit(1792814162.707:3628): pid=26975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=405006 res=0 errno=-22 [ 1030.493473][T19340] usb 7-1: config 0 descriptor?? [ 1030.539955][ T29] audit: type=1800 audit(1792814162.737:3629): pid=26975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=405035 res=0 errno=-22 [ 1030.568772][ T29] audit: type=1800 audit(1792814162.777:3630): pid=26975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=405013 res=0 errno=-22 [ 1030.583133][ T29] audit: type=1800 audit(1792814162.787:3631): pid=26975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=405014 res=0 errno=-22 [ 1030.613939][ T29] audit: type=1800 audit(1792814162.827:3632): pid=26975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=405015 res=0 errno=-22 [ 1030.683237][ T29] audit: type=1800 audit(1792814162.897:3633): pid=26975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=405055 res=0 errno=-22 [ 1031.022946][ T29] audit: type=1800 audit(1792814163.237:3634): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=405150 res=0 errno=-22 [ 1031.037434][T19340] hid_parser_main: 5 callbacks suppressed [ 1031.037456][T19340] cm6533_jd 0003:0D8C:0022.001D: unknown main item tag 0x0 [ 1031.037561][T19340] cm6533_jd 0003:0D8C:0022.001D: unknown main item tag 0x0 [ 1031.070248][ T29] audit: type=1800 audit(1792814163.277:3635): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=405172 res=0 errno=-22 [ 1031.074858][T19340] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.001D/input/input61 [ 1031.123602][ T29] audit: type=1800 audit(1792814163.327:3636): pid=26975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=405188 res=0 errno=-22 [ 1031.136816][T27517] XFS (loop3): Ending clean mount [ 1031.268260][T19340] cm6533_jd 0003:0D8C:0022.001D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 1031.312295][T27517] XFS (loop3): Quotacheck needed: Please wait. [ 1031.333003][T19340] usb 7-1: USB disconnect, device number 21 [ 1031.613346][ T5283] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1031.719106][T27517] XFS (loop3): Quotacheck: Done. [ 1031.815970][T27570] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1032.384260][T26421] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1032.560076][T27589] FAULT_INJECTION: forcing a failure. [ 1032.560076][T27589] name failslab, interval 1, probability 0, space 0, times 0 [ 1032.560119][T27589] CPU: 1 UID: 0 PID: 27589 Comm: syz.5.7468 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1032.560157][T27589] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1032.560169][T27589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1032.560186][T27589] Call Trace: [ 1032.560196][T27589] [ 1032.560207][T27589] dump_stack_lvl+0xe8/0x150 [ 1032.560252][T27589] should_fail_ex+0x410/0x560 [ 1032.560289][T27589] should_failslab+0xa8/0x100 [ 1032.560327][T27589] __kmalloc_cache_noprof+0x9e/0x600 [ 1032.560357][T27589] ? alloc_mnt_ns+0xae/0x2c0 [ 1032.560395][T27589] ? alloc_mnt_ns+0xae/0x2c0 [ 1032.560442][T27589] alloc_mnt_ns+0xae/0x2c0 [ 1032.560486][T27589] open_detached_copy+0x95/0x550 [ 1032.560517][T27589] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1032.560561][T27589] ? do_getname+0x151/0x250 [ 1032.560602][T27589] vfs_open_tree+0x40d/0x480 [ 1032.560640][T27589] ? __pfx_vfs_open_tree+0x10/0x10 [ 1032.560686][T27589] __x64_sys_open_tree+0x93/0x110 [ 1032.560728][T27589] do_syscall_64+0x166/0x520 [ 1032.560755][T27589] ? trace_irq_disable+0x3b/0x140 [ 1032.560789][T27589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.560823][T27589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.560849][T27589] RIP: 0033:0x7f4fce19f559 [ 1032.560872][T27589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1032.560894][T27589] RSP: 002b:00007f4fcc3f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 1032.560947][T27589] RAX: ffffffffffffffda RBX: 00007f4fce425fa0 RCX: 00007f4fce19f559 [ 1032.560967][T27589] RDX: 0000000000089101 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 1032.560986][T27589] RBP: 00007f4fce236b20 R08: 0000000000000000 R09: 0000000000000000 [ 1032.561003][T27589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1032.561019][T27589] R13: 00007f4fce426038 R14: 00007f4fce425fa0 R15: 00007ffcd857a088 [ 1032.561061][T27589] [ 1032.672782][ T9916] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1032.809145][T27591] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1032.810878][T27591] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1033.237280][T27602] loop4: detected capacity change from 0 to 512 [ 1033.249709][T27602] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 1033.249727][T27602] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1033.286475][T18088] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1033.349927][T27602] EXT4-fs (loop4): 1 truncate cleaned up [ 1033.377146][T27602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1033.426528][T19155] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1033.458738][T18088] usb 7-1: Using ep0 maxpacket: 8 [ 1033.461299][T18088] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1033.463143][T18088] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1033.463195][T18088] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1033.463221][T18088] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1033.463249][T18088] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1033.463276][T18088] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1033.463321][T18088] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.597750][T19155] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1033.601578][T19155] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.624794][T19155] usb 6-1: config 0 descriptor?? [ 1033.773064][T18088] usb 7-1: usb_control_msg returned -32 [ 1033.773139][T18088] usbtmc 7-1:16.0: can't read capabilities [ 1033.840799][T27092] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1033.891766][T27617] loop3: detected capacity change from 0 to 4096 [ 1034.006475][T19155] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1034.292802][T27617] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1034.295337][T27617] ntfs3(loop3): Failed to load $Extend (-22). [ 1034.295358][T27617] ntfs3(loop3): Failed to initialize $Extend. [ 1034.296036][T19155] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 1034.330260][T19155] [drm] Initialized udl on minor 1 [ 1034.599499][ T9916] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1034.601953][ T5283] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1034.948634][T26421] ntfs3(loop3): ino=9, ntfs_sync_fs failed, -22. [ 1034.969427][T27635] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1035.452286][T27646] loop1: detected capacity change from 0 to 4096 [ 1035.543495][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 1035.543543][ T29] audit: type=1800 audit(1792814167.757:3669): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14975 res=0 errno=-22 [ 1035.669668][T27646] ntfs3(loop1): Failed to load $Extend (-22). [ 1035.669698][T27646] ntfs3(loop1): Failed to initialize $Extend. [ 1035.984440][T27654] FAULT_INJECTION: forcing a failure. [ 1035.984440][T27654] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.984480][T27654] CPU: 1 UID: 0 PID: 27654 Comm: syz.8.7490 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1035.984517][T27654] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1035.984528][T27654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1035.984543][T27654] Call Trace: [ 1035.984556][T27654] [ 1035.984568][T27654] dump_stack_lvl+0xe8/0x150 [ 1035.984611][T27654] should_fail_ex+0x410/0x560 [ 1035.984647][T27654] should_failslab+0xa8/0x100 [ 1035.984680][T27654] ? do_getname+0x2e/0x250 [ 1035.984716][T27654] kmem_cache_alloc_noprof+0x9c/0x600 [ 1035.984760][T27654] ? do_getname+0x2e/0x250 [ 1035.984804][T27654] do_getname+0x2e/0x250 [ 1035.984838][T27654] ? getname_uflags+0x11/0x30 [ 1035.984878][T27654] __x64_sys_execveat+0xad/0xf0 [ 1035.984921][T27654] do_syscall_64+0x166/0x520 [ 1035.984949][T27654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.984983][T27654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.985008][T27654] RIP: 0033:0x7f0ee7f9f559 [ 1035.985031][T27654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.985052][T27654] RSP: 002b:00007f0ee8dfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1035.985079][T27654] RAX: ffffffffffffffda RBX: 00007f0ee8225fa0 RCX: 00007f0ee7f9f559 [ 1035.985099][T27654] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 1035.985117][T27654] RBP: 00007f0ee8036b20 R08: 0000000000000100 R09: 0000000000000000 [ 1035.985134][T27654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1035.985151][T27654] R13: 00007f0ee8226038 R14: 00007f0ee8225fa0 R15: 00007ffd0d1acb88 [ 1035.985193][T27654] [ 1036.070971][T27656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7489'. [ 1036.417369][ T10] usb 7-1: USB disconnect, device number 22 [ 1037.547673][T27691] loop1: detected capacity change from 0 to 512 [ 1037.616154][T27691] EXT4-fs error (device loop1) in ext4_process_orphan:346: Out of memory [ 1037.616184][T27691] loop1: lost filesystem error report for type 5 error -12 [ 1037.616377][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1037.616398][ C0] EXT4-fs (loop1): initial error at time 1792814169: ext4_process_orphan:346 [ 1037.616431][ C0] EXT4-fs (loop1): last error at time 1792814169: ext4_process_orphan:346 [ 1037.644991][T27691] EXT4-fs (loop1): 2 truncates cleaned up [ 1037.656895][T27691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1037.683888][ T29] audit: type=1800 audit(1792814169.887:3670): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14975 res=0 errno=-22 [ 1038.018793][ T5283] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1038.115214][T26233] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1038.687352][T27709] loop6: detected capacity change from 0 to 131072 [ 1038.695342][T27709] F2FS-fs (loop6): invalid crc value [ 1038.808373][T27709] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1038.821821][T27709] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 1038.857285][ T29] audit: type=1800 audit(1792814171.077:3671): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15590 res=0 errno=-22 [ 1039.391662][T19155] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1039.413438][T27732] loop8: detected capacity change from 0 to 512 [ 1039.426814][T19155] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1039.440575][T27732] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1039.440634][T27732] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1039.458688][T27732] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1039.498907][T19155] usb 6-1: USB disconnect, device number 21 [ 1039.535731][T27732] EXT4-fs (loop8): 1 truncate cleaned up [ 1039.607232][ T29] audit: type=1800 audit(1792814171.817:3672): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15836 res=0 errno=-22 [ 1039.665710][T27732] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1040.129019][ T29] audit: type=1800 audit(1792814172.337:3673): pid=26672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=405971 res=0 errno=-22 [ 1040.143983][ T29] audit: type=1800 audit(1792814172.357:3674): pid=26672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=405976 res=0 errno=-22 [ 1040.149561][ T29] audit: type=1800 audit(1792814172.357:3675): pid=26672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=405980 res=0 errno=-22 [ 1040.191076][ T29] audit: type=1800 audit(1792814172.397:3676): pid=26672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=405979 res=0 errno=-22 [ 1040.208187][ T29] audit: type=1800 audit(1792814172.417:3677): pid=26672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=405982 res=0 errno=-22 [ 1040.221593][ T29] audit: type=1800 audit(1792814172.437:3678): pid=26672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="address" dev="sysfs" ino=405985 res=0 errno=-22 [ 1040.502286][T24152] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1040.880827][T27761] loop6: detected capacity change from 0 to 1024 [ 1040.926234][ T29] audit: type=1800 audit(1792814173.137:3679): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15590 res=0 errno=-22 [ 1040.934877][T27766] loop8: detected capacity change from 0 to 256 [ 1040.935913][T27766] exfat: Deprecated parameter 'utf8' [ 1040.935973][T27766] exfat: Deprecated parameter 'namecase' [ 1040.936082][T27766] exfat: Deprecated parameter 'namecase' [ 1040.936110][T27766] exfat: Deprecated parameter 'utf8' [ 1040.994516][T27761] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1040.994621][T27761] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1041.039042][ T29] audit: type=1800 audit(1792814173.257:3680): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15836 res=0 errno=-22 [ 1041.173409][T27766] exFAT-fs (loop8): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 1041.173784][T27766] exFAT-fs (loop8): failed to test first cluster bit of root dir(5) [ 1041.309936][T27766] exFAT-fs (loop8): start_clu is invalid cluster(0x400) [ 1041.454392][T22442] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1041.474128][T27775] loop1: detected capacity change from 0 to 164 [ 1041.523267][T27770] loop4: detected capacity change from 0 to 4096 [ 1041.539190][T27775] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1041.545098][T27770] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1041.624108][ T29] audit: type=1800 audit(1792814173.837:3681): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14975 res=0 errno=-22 [ 1041.801620][T27770] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1041.859204][ T5283] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1041.867798][T27770] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 1042.641339][T27795] netlink: 'syz.3.7533': attribute type 1 has an invalid length. [ 1042.641363][T27795] netlink: 'syz.3.7533': attribute type 2 has an invalid length. [ 1043.253139][T27812] loop6: detected capacity change from 0 to 512 [ 1043.310347][T27812] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 1043.310484][T27812] System zones: 1-12 [ 1043.312319][T27812] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #12: comm syz.6.7537: missing EA_INODE flag [ 1043.312348][T27812] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1043.316476][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1043.316499][ C0] EXT4-fs (loop6): initial error at time 1792814175: ext4_xattr_inode_iget:437: inode 12 [ 1043.316536][ C0] EXT4-fs (loop6): last error at time 1792814175: ext4_xattr_inode_iget:437: inode 12 [ 1043.335028][ T29] audit: type=1800 audit(1792814175.547:3682): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15590 res=0 errno=-22 [ 1043.412682][T27812] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.7537: error while reading EA inode 12 err=-117 [ 1043.412720][T27812] loop6: lost filesystem error report for type 5 error -117 [ 1043.413571][T27812] EXT4-fs (loop6): 1 orphan inode deleted [ 1043.444441][T27812] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1043.764651][T27822] bridge0: port 3(vlan2) entered blocking state [ 1043.768939][T27822] bridge0: port 3(vlan2) entered disabled state [ 1043.772599][T27822] vlan2: entered allmulticast mode [ 1043.772618][T27822] syz_tun: entered allmulticast mode [ 1043.780328][T27822] vlan2: entered promiscuous mode [ 1043.780348][T27822] syz_tun: entered promiscuous mode [ 1043.789858][T27822] bridge0: port 3(vlan2) entered blocking state [ 1043.789978][T27822] bridge0: port 3(vlan2) entered forwarding state [ 1043.847714][T22442] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.395192][T27843] ip_tables: iptables: counters copy to user failed while replacing table [ 1044.546688][T19155] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1044.701321][T19155] usb 6-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1044.705274][T19155] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1044.705308][T19155] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1044.705339][T19155] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1044.705376][T19155] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.772963][T19155] usb 6-1: config 0 descriptor?? [ 1044.784590][ T29] audit: type=1800 audit(1792814176.997:3683): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=406305 res=0 errno=-22 [ 1044.820827][ T29] audit: type=1800 audit(1792814177.037:3684): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=406334 res=0 errno=-22 [ 1044.851225][ T29] audit: type=1800 audit(1792814177.057:3685): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=406312 res=0 errno=-22 [ 1044.857332][ T29] audit: type=1800 audit(1792814177.067:3686): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=406313 res=0 errno=-22 [ 1044.889340][ T29] audit: type=1800 audit(1792814177.107:3687): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=406314 res=0 errno=-22 [ 1044.962946][ T29] audit: type=1800 audit(1792814177.177:3688): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=406354 res=0 errno=-22 [ 1045.245647][T19155] vrc2 0003:07C0:1125.001E: fixing up VRC-2 report descriptor [ 1045.277560][T19155] input: HID 07c0:1125 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:07C0:1125.001E/input/input62 [ 1045.305717][T19155] vrc2 0003:07C0:1125.001E: input,hidraw0: USB HID v0.10 Joystick [HID 07c0:1125] on usb-dummy_hcd.5-1/input0 [ 1045.431056][T19155] usb 6-1: USB disconnect, device number 22 [ 1046.716504][T19337] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1046.866625][T19337] usb 6-1: Using ep0 maxpacket: 16 [ 1046.868717][T19337] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1046.897032][T19337] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 1046.912318][T19337] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.912347][T19337] usb 6-1: Product: syz [ 1046.912364][T19337] usb 6-1: Manufacturer: syz [ 1046.912382][T19337] usb 6-1: SerialNumber: syz [ 1046.951235][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1046.951255][ T29] audit: type=1800 audit(1792814179.167:3702): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=406509 res=0 errno=-22 [ 1046.976674][T19337] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1046.976699][T19337] r8152-cfgselector 6-1: config 0 descriptor?? [ 1046.993030][ T29] audit: type=1800 audit(1792814179.207:3703): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=406541 res=0 errno=-22 [ 1047.022937][ T29] audit: type=1800 audit(1792814179.237:3704): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=406516 res=0 errno=-22 [ 1047.023837][ T29] audit: type=1800 audit(1792814179.237:3705): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=406517 res=0 errno=-22 [ 1047.312638][ T29] audit: type=1800 audit(1792814179.507:3706): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=406538 res=0 errno=-22 [ 1047.317339][ T29] audit: type=1800 audit(1792814179.537:3707): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=406539 res=0 errno=-22 [ 1047.372145][ T29] audit: type=1800 audit(1792814179.587:3708): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=406518 res=0 errno=-22 [ 1047.372196][ T29] audit: type=1800 audit(1792814179.587:3709): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=406540 res=0 errno=-22 [ 1047.437038][ T29] audit: type=1800 audit(1792814179.657:3710): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=406561 res=0 errno=-22 [ 1047.489156][T27892] loop4: detected capacity change from 0 to 256 [ 1047.519287][ T29] audit: type=1800 audit(1792814179.737:3711): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15344 res=0 errno=-22 [ 1047.595653][T27892] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 1047.607586][ T10] r8152-cfgselector 6-1: USB disconnect, device number 23 [ 1047.812981][T27896] loop8: detected capacity change from 0 to 8 [ 1048.363777][T27903] loop4: detected capacity change from 0 to 164 [ 1048.488969][T27903] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1049.111988][T27920] loop6: detected capacity change from 0 to 32768 [ 1049.113802][T27920] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.7572 (27920) [ 1049.144068][T27920] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1049.144099][T27920] BTRFS info (device loop6): using sha256 checksum algorithm [ 1049.325015][T27920] BTRFS info (device loop6): enabling ssd optimizations [ 1049.325045][T27920] BTRFS info (device loop6): turning on sync discard [ 1049.325065][T27920] BTRFS info (device loop6): enabling free space tree [ 1049.325086][T27920] BTRFS info (device loop6): use zlib compression, level 3 [ 1050.092784][T27956] loop4: detected capacity change from 0 to 512 [ 1050.177774][T22442] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1051.057481][T27977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7581'. [ 1051.057520][T27977] netlink: 'syz.3.7581': attribute type 30 has an invalid length. [ 1051.120920][T27977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7581'. [ 1051.120955][T27977] netlink: 'syz.3.7581': attribute type 30 has an invalid length. [ 1051.153037][ T8598] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1051.153144][ T8598] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1051.153279][ T8598] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1051.153318][ T8598] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1051.544088][T27986] FAULT_INJECTION: forcing a failure. [ 1051.544088][T27986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1051.544129][T27986] CPU: 1 UID: 0 PID: 27986 Comm: syz.8.7586 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1051.544165][T27986] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1051.544175][T27986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1051.544190][T27986] Call Trace: [ 1051.544201][T27986] [ 1051.544213][T27986] dump_stack_lvl+0xe8/0x150 [ 1051.544256][T27986] should_fail_ex+0x410/0x560 [ 1051.544291][T27986] _copy_from_user+0x2d/0xb0 [ 1051.544322][T27986] wants_mount_setattr+0x1b6/0x8d0 [ 1051.544364][T27986] ? __pfx_wants_mount_setattr+0x10/0x10 [ 1051.544395][T27986] ? __fget_files+0x3a2/0x420 [ 1051.544443][T27986] __se_sys_mount_setattr+0x16a/0x280 [ 1051.544479][T27986] ? __pfx___se_sys_mount_setattr+0x10/0x10 [ 1051.544514][T27986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1051.544543][T27986] ? __x64_sys_mount_setattr+0x20/0xc0 [ 1051.544574][T27986] do_syscall_64+0x166/0x520 [ 1051.544601][T27986] ? trace_irq_disable+0x3b/0x140 [ 1051.544633][T27986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.544666][T27986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.544691][T27986] RIP: 0033:0x7f0ee7f9f559 [ 1051.544714][T27986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1051.544735][T27986] RSP: 002b:00007f0ee8dfc028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba [ 1051.544760][T27986] RAX: ffffffffffffffda RBX: 00007f0ee8225fa0 RCX: 00007f0ee7f9f559 [ 1051.544779][T27986] RDX: 0000000000008800 RSI: 0000000000000000 RDI: ffffffffffffffff [ 1051.544796][T27986] RBP: 00007f0ee8036b20 R08: 0000000000000020 R09: 0000000000000000 [ 1051.544812][T27986] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 1051.544828][T27986] R13: 00007f0ee8226038 R14: 00007f0ee8225fa0 R15: 00007ffd0d1acb88 [ 1051.544870][T27986] [ 1052.113201][T27999] CIFS: Attempting to mount //127.0.0.1/share [ 1052.819152][T28016] loop1: detected capacity change from 0 to 32768 [ 1052.890514][T28016] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1052.951191][T28032] loop4: detected capacity change from 0 to 512 [ 1052.998903][T28016] XFS (loop1): Ending clean mount [ 1053.016547][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1053.016565][ T29] audit: type=1800 audit(1792814185.227:3719): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14975 res=0 errno=-22 [ 1053.034005][T27999] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1053.067101][T28032] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.7599: inode has both inline data and extents flags [ 1053.067135][T28032] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1053.068118][T28032] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.7599: couldn't read orphan inode 15 (err -117) [ 1053.068149][T28032] loop4: lost filesystem error report for type 5 error -117 [ 1053.080139][T28032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1053.098064][ T29] audit: type=1800 audit(1792814185.307:3720): pid=28016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7597" name="file1" dev="loop1" ino=6150 res=0 errno=-22 [ 1053.303299][ T29] audit: type=1800 audit(1792814185.517:3721): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15344 res=0 errno=-22 [ 1053.502055][T27092] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.508762][T26233] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1053.584323][T28044] loop8: detected capacity change from 0 to 256 [ 1053.726195][ T29] audit: type=1800 audit(1792814185.937:3722): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15836 res=0 errno=-22 [ 1053.798810][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1053.945219][T28051] loop5: detected capacity change from 0 to 136 [ 1053.945785][T28052] loop4: detected capacity change from 0 to 256 [ 1053.970998][T28051] iso9660: Unknown parameter '1ú00000000000006607575061ÿÿ±3eÔ [ 1053.970998][T28051] †”çãü^úH'‚@㟅ž.X&ÇuQ‚x' [ 1054.071577][T28052] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 1054.147419][ T29] audit: type=1800 audit(1792814186.367:3723): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15467 res=0 errno=-22 [ 1054.204751][T28056] FAULT_INJECTION: forcing a failure. [ 1054.204751][T28056] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.204790][T28056] CPU: 0 UID: 0 PID: 28056 Comm: syz.3.7607 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1054.204826][T28056] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1054.204838][T28056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1054.204854][T28056] Call Trace: [ 1054.204864][T28056] [ 1054.204875][T28056] dump_stack_lvl+0xe8/0x150 [ 1054.204919][T28056] should_fail_ex+0x410/0x560 [ 1054.204962][T28056] should_failslab+0xa8/0x100 [ 1054.204998][T28056] __kvmalloc_node_noprof+0x171/0x820 [ 1054.205033][T28056] ? v4l2_ctrl_handler_init_class+0x1b3/0x2e0 [ 1054.205073][T28056] ? v4l2_ctrl_handler_init_class+0x1b3/0x2e0 [ 1054.205114][T28056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.205151][T28056] v4l2_ctrl_handler_init_class+0x1b3/0x2e0 [ 1054.205197][T28056] vim2m_open+0x111/0x620 [ 1054.205233][T28056] v4l2_open+0x1bc/0x3a0 [ 1054.205265][T28056] chrdev_open+0x4d9/0x600 [ 1054.205304][T28056] ? __pfx_chrdev_open+0x10/0x10 [ 1054.205336][T28056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.205365][T28056] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 1054.205399][T28056] ? devcgroup_check_permission+0x31/0x8f0 [ 1054.205438][T28056] ? __pfx_chrdev_open+0x10/0x10 [ 1054.205471][T28056] do_dentry_open+0x80e/0x1360 [ 1054.205519][T28056] vfs_open_consume+0x4a/0x350 [ 1054.205554][T28056] ? path_openat+0x16e1/0x20f0 [ 1054.205588][T28056] path_openat+0x16fc/0x20f0 [ 1054.205643][T28056] do_file_open+0x23e/0x4a0 [ 1054.205680][T28056] ? __pfx_do_file_open+0x10/0x10 [ 1054.205739][T28056] ? _raw_spin_unlock+0x28/0x50 [ 1054.205777][T28056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.205807][T28056] ? alloc_fd+0x6af/0x760 [ 1054.205862][T28056] do_sys_openat2+0x115/0x200 [ 1054.205898][T28056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.205928][T28056] ? __se_sys_futex+0x3a8/0x450 [ 1054.205960][T28056] ? __pfx_do_sys_openat2+0x10/0x10 [ 1054.206005][T28056] ? rcu_is_watching+0x16/0xb0 [ 1054.206045][T28056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.206082][T28056] __x64_sys_openat+0x138/0x170 [ 1054.206127][T28056] do_syscall_64+0x166/0x520 [ 1054.206154][T28056] ? trace_irq_disable+0x3b/0x140 [ 1054.206187][T28056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.206221][T28056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.206247][T28056] RIP: 0033:0x7efce119f559 [ 1054.206271][T28056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1054.206293][T28056] RSP: 002b:00007efce20c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1054.206321][T28056] RAX: ffffffffffffffda RBX: 00007efce1425fa0 RCX: 00007efce119f559 [ 1054.206341][T28056] RDX: 0000000000000002 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1054.206360][T28056] RBP: 00007efce1236b20 R08: 0000000000000000 R09: 0000000000000000 [ 1054.206377][T28056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1054.206393][T28056] R13: 00007efce1426038 R14: 00007efce1425fa0 R15: 00007ffcd6b7cf18 [ 1054.206436][T28056] [ 1054.908527][T28066] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1055.729105][T28078] loop5: detected capacity change from 0 to 131072 [ 1055.730882][ T1223] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1055.777629][T28078] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (512, 24) [ 1055.777655][T28078] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1055.777681][T28078] F2FS-fs (loop5): Test dummy encryption mode enabled [ 1055.784619][T28078] F2FS-fs (loop5): invalid crc value [ 1055.879585][ T29] audit: type=1800 audit(1792814188.097:3724): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15467 res=0 errno=-22 [ 1055.936945][T28078] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 1055.940001][T28078] loop5: lost filesystem error report for type 5 error -117 [ 1055.969101][T28078] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1055.971744][T28078] F2FS-fs (loop5): f2fs_disable_checkpoint starts, unusable: 0 [ 1055.971769][T28078] F2FS-fs (loop5): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1055.971797][T28078] F2FS-fs (loop5): Start checkpoint disabled! [ 1055.977029][ T1223] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1055.997920][T28078] F2FS-fs (loop5): f2fs_disable_checkpoint finishes, err:0 [ 1056.007497][ T1223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.045044][T28078] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 1056.045070][T28078] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1056.145631][ T1223] usb 4-1: config 0 descriptor?? [ 1056.178853][ T29] audit: type=1800 audit(1792814188.397:3725): pid=26672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=407086 res=0 errno=-22 [ 1056.184417][ T29] audit: type=1800 audit(1792814188.397:3726): pid=26672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=407115 res=0 errno=-22 [ 1056.185933][ T29] audit: type=1800 audit(1792814188.397:3727): pid=26672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=407093 res=0 errno=-22 [ 1056.208231][T28067] loop6: detected capacity change from 0 to 32768 [ 1056.269050][ T29] audit: type=1800 audit(1792814188.487:3728): pid=26672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=407094 res=0 errno=-22 [ 1056.439935][ T1223] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1056.735465][ T1223] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 1056.735494][ T1223] [drm] Initialized udl on minor 1 [ 1057.581017][T28099] FAULT_INJECTION: forcing a failure. [ 1057.581017][T28099] name failslab, interval 1, probability 0, space 0, times 0 [ 1057.581060][T28099] CPU: 1 UID: 0 PID: 28099 Comm: syz.5.7616 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1057.581097][T28099] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1057.581108][T28099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1057.581124][T28099] Call Trace: [ 1057.581135][T28099] [ 1057.581146][T28099] dump_stack_lvl+0xe8/0x150 [ 1057.581193][T28099] should_fail_ex+0x410/0x560 [ 1057.581229][T28099] should_failslab+0xa8/0x100 [ 1057.581266][T28099] __kmalloc_noprof+0xf9/0x710 [ 1057.581295][T28099] ? __se_sys_futex_waitv+0x19d/0x2c0 [ 1057.581321][T28099] ? __se_sys_futex_waitv+0x19d/0x2c0 [ 1057.581355][T28099] __se_sys_futex_waitv+0x19d/0x2c0 [ 1057.581385][T28099] ? __pfx___se_sys_futex_waitv+0x10/0x10 [ 1057.581422][T28099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1057.581468][T28099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1057.581498][T28099] ? __x64_sys_futex_waitv+0x20/0xc0 [ 1057.581528][T28099] do_syscall_64+0x166/0x520 [ 1057.581556][T28099] ? trace_irq_disable+0x3b/0x140 [ 1057.581590][T28099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.581625][T28099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.581651][T28099] RIP: 0033:0x7f4fce19f559 [ 1057.581674][T28099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1057.581696][T28099] RSP: 002b:00007f4fcc3f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 1057.581723][T28099] RAX: ffffffffffffffda RBX: 00007f4fce425fa0 RCX: 00007f4fce19f559 [ 1057.581743][T28099] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000002040 [ 1057.581760][T28099] RBP: 00007f4fce236b20 R08: 0000000000000001 R09: 0000000000000000 [ 1057.581778][T28099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1057.581794][T28099] R13: 00007f4fce426038 R14: 00007f4fce425fa0 R15: 00007ffcd857a088 [ 1057.581837][T28099] [ 1058.131144][T28103] loop1: detected capacity change from 0 to 131072 [ 1058.134269][T28103] F2FS-fs (loop1): invalid crc value [ 1058.239705][T28103] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1058.261540][T28103] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 1058.313210][T28111] loop6: detected capacity change from 0 to 256 [ 1058.360300][T28111] exfat: Deprecated parameter 'utf8' [ 1058.360438][T28111] exfat: Deprecated parameter 'namecase' [ 1058.362245][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1058.362262][ T29] audit: type=1800 audit(1792814190.577:3734): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14975 res=0 errno=-22 [ 1058.519048][T28111] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1058.555486][ T29] audit: type=1800 audit(1792814190.767:3735): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15590 res=0 errno=-22 [ 1059.144705][T28124] loop6: detected capacity change from 0 to 1024 [ 1059.162945][T28124] EXT4-fs: Ignoring removed nobh option [ 1059.163088][T28124] EXT4-fs: Ignoring removed bh option [ 1059.163143][T28124] EXT4-fs: Ignoring removed nobh option [ 1059.180173][T28124] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1059.284312][T28124] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1059.484070][ T29] audit: type=1800 audit(1792814191.697:3736): pid=28130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7628" name="group_addr" dev="sysfs" ino=366338 res=0 errno=-22 [ 1059.690172][T22442] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1059.824918][ T29] audit: type=1800 audit(1792814192.037:3737): pid=28134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.7631" name="make-it-fail" dev="sysfs" ino=144968 res=0 errno=-22 [ 1060.184566][T28141] loop5: detected capacity change from 0 to 2048 [ 1060.186116][T28143] loop1: detected capacity change from 0 to 64 [ 1060.221937][T28141] udf: Bad value for 'anchor' [ 1060.310602][ T29] audit: type=1800 audit(1792814192.527:3738): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15467 res=0 errno=-22 [ 1060.342399][ T29] audit: type=1326 audit(1792814192.537:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28140 comm="syz.5.7633" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce19f559 code=0x7ffc0000 [ 1060.342487][ T29] audit: type=1326 audit(1792814192.537:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28140 comm="syz.5.7633" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce19f559 code=0x7ffc0000 [ 1060.342535][ T29] audit: type=1326 audit(1792814192.537:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28140 comm="syz.5.7633" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce19f559 code=0x7ffc0000 [ 1060.342612][ T29] audit: type=1326 audit(1792814192.537:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28140 comm="syz.5.7633" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce19f559 code=0x7ffc0000 [ 1060.373188][ T29] audit: type=1326 audit(1792814192.567:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28140 comm="syz.5.7633" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4fce19f559 code=0x7ffc0000 [ 1060.900021][T28152] loop1: detected capacity change from 0 to 512 [ 1061.044891][T28152] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1061.045036][T28152] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1061.309870][T26233] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1061.551385][T28170] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7642'. [ 1061.551426][T28170] bond0: ARP target 8.4.0.0 is already present [ 1061.551447][T28170] bond0: option arp_ip_target: invalid value (1032) [ 1061.691772][T28173] loop6: detected capacity change from 0 to 1 [ 1061.789936][ T1223] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1061.790367][ T1223] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1061.817048][ T1223] usb 4-1: USB disconnect, device number 32 [ 1061.828390][ T5823] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1062.469776][T28196] loop3: detected capacity change from 0 to 1024 [ 1062.495153][T28196] EXT4-fs (loop3): stripe (511) is not aligned with cluster size (16), stripe is disabled [ 1062.605430][T28196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1062.605565][T28196] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1062.717500][T28196] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: comm syz.3.7649: lblock 0 mapped to illegal pblock 0 (length 1) [ 1062.725459][T28196] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1062.725492][T28196] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1062.725492][T28196] [ 1062.821522][T28196] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.7649: bg 0: block 112: padding at end of block bitmap is not set [ 1062.956105][T28196] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 50 with error 28 [ 1062.956142][T28196] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1062.956142][T28196] [ 1062.956161][T28196] EXT4-fs (loop3): Total free blocks count 0 [ 1062.956178][T28196] EXT4-fs (loop3): Free/Dirty block details [ 1062.956195][T28196] EXT4-fs (loop3): free_blocks=0 [ 1062.956212][T28196] EXT4-fs (loop3): dirty_blocks=64 [ 1062.956229][T28196] EXT4-fs (loop3): Block reservation details [ 1063.022087][T28206] loop6: detected capacity change from 0 to 256 [ 1063.165901][T28210] loop4: detected capacity change from 0 to 2048 [ 1063.264192][T28210] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1063.936191][ T5283] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1064.247832][T28230] loop5: detected capacity change from 0 to 1024 [ 1064.304454][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 1064.304474][ T29] audit: type=1800 audit(1792814196.517:3784): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15467 res=0 errno=-22 [ 1064.333841][T28230] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1064.333948][T28230] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1064.448705][T28230] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: block 3: comm syz.5.7664: lblock 3 mapped to illegal pblock 3 (length 3) [ 1064.456857][T28230] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 1064.456888][T28230] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1064.456888][T28230] [ 1064.662080][ T9916] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:102: lblock 8 mapped to illegal pblock 8 (length 8) [ 1064.669020][ T9921] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1064.675876][ T9916] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1064.675907][ T9916] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1064.675907][ T9916] [ 1064.726632][T26036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1065.075323][T28245] loop6: detected capacity change from 0 to 2048 [ 1065.176908][ T29] audit: type=1800 audit(1792814197.397:3785): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15590 res=0 errno=-22 [ 1065.180788][T28245] NILFS (loop6): invalid segment: Magic number mismatch [ 1065.180814][T28245] NILFS (loop6): trying rollback from an earlier position [ 1065.274008][T28245] NILFS (loop6): recovery complete [ 1065.293399][T28251] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1065.592582][T28256] loop5: detected capacity change from 0 to 512 [ 1065.693972][T28258] loop8: detected capacity change from 0 to 512 [ 1065.713916][T28258] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 1065.713934][T28258] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1065.728045][ T29] audit: type=1800 audit(1792814197.937:3786): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15467 res=0 errno=-22 [ 1065.750442][T28256] syz.5.7671: attempt to access beyond end of device [ 1065.750442][T28256] loop5: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512 [ 1065.761279][T28256] syz.5.7671: attempt to access beyond end of device [ 1065.761279][T28256] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 1065.766688][ T29] audit: type=1800 audit(1792814197.977:3787): pid=28256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7671" name="file2" dev="loop5" ino=1049261 res=0 errno=-5 [ 1065.823448][T28258] EXT4-fs error (device loop8): ext4_orphan_get:1429: comm syz.8.7673: bad orphan inode 131072 [ 1065.823481][T28258] loop8: lost filesystem error report for type 5 error -117 [ 1065.826485][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1065.826507][ C0] EXT4-fs (loop8): initial error at time 1792814198: ext4_orphan_get:1429 [ 1065.826534][ C0] EXT4-fs (loop8): last error at time 1792814198: ext4_orphan_get:1429 [ 1065.833818][T28256] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 1065.833842][T28256] FAT-fs (loop5): Filesystem has been set read-only [ 1065.834282][T28256] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 1065.859893][T28256] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 1065.860460][T28256] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 1065.861028][T28256] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 1065.878819][T28258] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1065.879809][ T29] audit: type=1800 audit(1792814198.097:3788): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15836 res=0 errno=-22 [ 1065.927627][T28256] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 1065.930010][T28256] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 1065.935200][T28256] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 1066.000666][T28256] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 1066.000974][T28256] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 1066.104226][T28258] overlayfs: upper fs needs to support d_type. [ 1066.107921][ T5637] Bluetooth: hci0: command 0x0406 tx timeout [ 1066.583914][T28270] netlink: 'syz.6.7674': attribute type 1 has an invalid length. [ 1066.588621][ T9916] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1066.863368][T28275] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1067.041641][T28283] loop6: detected capacity change from 0 to 4096 [ 1067.055168][T28283] EXT4-fs: Ignoring removed mblk_io_submit option [ 1067.104844][T28283] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1067.142305][T28283] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1067.165182][ T29] audit: type=1800 audit(1792814199.377:3789): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=407870 res=0 errno=-22 [ 1067.209787][ T29] audit: type=1800 audit(1792814199.427:3790): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=407885 res=0 errno=-22 [ 1067.340187][T28291] loop4: detected capacity change from 0 to 64 [ 1067.377492][T28283] Quota error (device loop6): do_check_range: Getting block 4278190084 out of range 1-5 [ 1067.377576][T28283] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1067.377598][T28283] EXT4-fs error (device loop6): ext4_acquire_dquot:7079: comm syz.6.7682: Failed to acquire dquot type 1 [ 1067.382260][ T29] audit: type=1800 audit(1792814199.597:3791): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15344 res=0 errno=-22 [ 1067.522408][T28293] loop3: detected capacity change from 0 to 2048 [ 1067.718198][T24152] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1067.782298][T28296] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1067.860171][T22442] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1067.951265][T28293] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: unaligned directory entry - offset=80, inode=15, rec_len=1498, name_len=5 [ 1067.996005][T28298] FAULT_INJECTION: forcing a failure. [ 1067.996005][T28298] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.996041][T28298] CPU: 0 UID: 0 PID: 28298 Comm: syz.1.7688 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1067.996073][T28298] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1067.996083][T28298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1067.996097][T28298] Call Trace: [ 1067.996107][T28298] [ 1067.996117][T28298] dump_stack_lvl+0xe8/0x150 [ 1067.996159][T28298] should_fail_ex+0x410/0x560 [ 1067.996192][T28298] should_failslab+0xa8/0x100 [ 1067.996220][T28298] ? prepare_creds+0x30/0x820 [ 1067.996252][T28298] kmem_cache_alloc_noprof+0x9c/0x600 [ 1067.996287][T28298] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1067.996314][T28298] ? make_kuid+0x1e5/0x670 [ 1067.996341][T28298] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1067.996367][T28298] ? prepare_creds+0x30/0x820 [ 1067.996395][T28298] ? __pfx_make_kuid+0x10/0x10 [ 1067.996424][T28298] prepare_creds+0x30/0x820 [ 1067.996451][T28298] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1067.996484][T28298] __sys_setreuid+0x100/0x960 [ 1067.996522][T28298] do_syscall_64+0x166/0x520 [ 1067.996547][T28298] ? trace_irq_disable+0x3b/0x140 [ 1067.996577][T28298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.996607][T28298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.996630][T28298] RIP: 0033:0x7fe088f9f559 [ 1067.996650][T28298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1067.996669][T28298] RSP: 002b:00007fe089dbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 1067.996691][T28298] RAX: ffffffffffffffda RBX: 00007fe089225fa0 RCX: 00007fe088f9f559 [ 1067.996709][T28298] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000000000000000 [ 1067.996722][T28298] RBP: 00007fe089036b20 R08: 0000000000000000 R09: 0000000000000000 [ 1067.996737][T28298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1067.996752][T28298] R13: 00007fe089226038 R14: 00007fe089225fa0 R15: 00007fffaceb9a78 [ 1067.996788][T28298] [ 1068.070550][T28293] Remounting filesystem read-only [ 1068.070740][T28293] NILFS error (device loop3): nilfs_readdir: bad page in #2 [ 1068.377660][ T9838] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.603785][T28303] loop4: detected capacity change from 0 to 64 [ 1069.015447][ T9838] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.330663][ T9838] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.618466][T28312] FAULT_INJECTION: forcing a failure. [ 1069.618466][T28312] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.618507][T28312] CPU: 0 UID: 0 PID: 28312 Comm: syz.4.7695 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1069.618542][T28312] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1069.618553][T28312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1069.618569][T28312] Call Trace: [ 1069.618579][T28312] [ 1069.618590][T28312] dump_stack_lvl+0xe8/0x150 [ 1069.618633][T28312] should_fail_ex+0x410/0x560 [ 1069.618667][T28312] should_failslab+0xa8/0x100 [ 1069.618703][T28312] __kmalloc_cache_noprof+0x9e/0x600 [ 1069.618732][T28312] ? proc_thread_self_get_link+0xfc/0x190 [ 1069.618764][T28312] ? proc_thread_self_get_link+0xfc/0x190 [ 1069.618798][T28312] ? __task_pid_nr_ns+0x399/0x470 [ 1069.618831][T28312] proc_thread_self_get_link+0xfc/0x190 [ 1069.618864][T28312] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 1069.618898][T28312] pick_link+0x72a/0xfd0 [ 1069.618935][T28312] step_into_slowpath+0x58a/0x820 [ 1069.618971][T28312] ? __pfx_step_into_slowpath+0x10/0x10 [ 1069.619000][T28312] ? inode_permission+0x2b8/0x600 [ 1069.619037][T28312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1069.619073][T28312] link_path_walk+0xd50/0x1910 [ 1069.619137][T28312] path_openat+0x1b7/0x20f0 [ 1069.619190][T28312] do_file_open+0x23e/0x4a0 [ 1069.619228][T28312] ? __pfx_do_file_open+0x10/0x10 [ 1069.619287][T28312] ? _raw_spin_unlock+0x28/0x50 [ 1069.619325][T28312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1069.619355][T28312] ? alloc_fd+0x6af/0x760 [ 1069.619405][T28312] do_sys_openat2+0x115/0x200 [ 1069.619440][T28312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1069.619467][T28312] ? __se_sys_futex+0x3a8/0x450 [ 1069.619492][T28312] ? __pfx_do_sys_openat2+0x10/0x10 [ 1069.619534][T28312] ? rcu_is_watching+0x16/0xb0 [ 1069.619571][T28312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1069.619607][T28312] __x64_sys_openat+0x138/0x170 [ 1069.619653][T28312] do_syscall_64+0x166/0x520 [ 1069.619680][T28312] ? trace_irq_disable+0x3b/0x140 [ 1069.619713][T28312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.619747][T28312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.619774][T28312] RIP: 0033:0x7fc8b435fd8e [ 1069.619796][T28312] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1069.619818][T28312] RSP: 002b:00007fc8b5191ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1069.619844][T28312] RAX: ffffffffffffffda RBX: 00007fc8b51926c0 RCX: 00007fc8b435fd8e [ 1069.619864][T28312] RDX: 0000000000000002 RSI: 00007fc8b5191f90 RDI: ffffffffffffff9c [ 1069.619882][T28312] RBP: 00007fc8b4436b20 R08: 0000000000000000 R09: 0000000000000000 [ 1069.619899][T28312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1069.619915][T28312] R13: 00007fc8b4626038 R14: 00007fc8b4625fa0 R15: 00007ffd493b4fa8 [ 1069.619965][T28312] [ 1069.677771][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1069.677790][ T29] audit: type=1800 audit(1792814201.887:3793): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=27322 res=0 errno=-22 [ 1069.758569][ T9838] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.979554][ T29] audit: type=1800 audit(1792814202.197:3794): pid=28320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7696" name="autosuspend_delay_ms" dev="sysfs" ino=26371 res=0 errno=-22 [ 1070.384560][ T29] audit: type=1800 audit(1792814202.597:3795): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=408003 res=0 errno=-22 [ 1070.385349][ T5637] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1070.410540][ T29] audit: type=1800 audit(1792814202.627:3796): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=408014 res=0 errno=-22 [ 1070.445561][ T5637] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1070.454230][ T5637] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1070.458786][ T5637] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1070.462862][ T5637] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1070.564034][ T29] audit: type=1800 audit(1792814202.777:3797): pid=26672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=408120 res=0 errno=-22 [ 1070.595870][ T29] audit: type=1800 audit(1792814202.807:3798): pid=26975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=408131 res=0 errno=-22 [ 1070.642666][ T29] audit: type=1800 audit(1792814202.857:3799): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=408142 res=0 errno=-22 [ 1070.701762][ T29] audit: type=1800 audit(1792814202.917:3800): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=408034 res=0 errno=-22 [ 1070.730464][ T29] audit: type=1800 audit(1792814202.947:3801): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=408039 res=0 errno=-22 [ 1070.748419][ T29] audit: type=1800 audit(1792814202.957:3802): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=408043 res=0 errno=-22 [ 1071.240067][ T9838] bridge_slave_1: left allmulticast mode [ 1071.240096][ T9838] bridge_slave_1: left promiscuous mode [ 1071.240331][ T9838] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.301726][ T9838] bridge_slave_0: left allmulticast mode [ 1071.301754][ T9838] bridge_slave_0: left promiscuous mode [ 1071.303487][ T9838] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.428500][T28358] FAULT_INJECTION: forcing a failure. [ 1071.428500][T28358] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.428538][T28358] CPU: 1 UID: 0 PID: 28358 Comm: syz.3.7704 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1071.428573][T28358] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1071.428584][T28358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1071.428600][T28358] Call Trace: [ 1071.428611][T28358] [ 1071.428621][T28358] dump_stack_lvl+0xe8/0x150 [ 1071.428665][T28358] should_fail_ex+0x410/0x560 [ 1071.428701][T28358] should_failslab+0xa8/0x100 [ 1071.428738][T28358] __kmalloc_noprof+0xf9/0x710 [ 1071.428768][T28358] ? tomoyo_encode+0x2ad/0x570 [ 1071.428795][T28358] ? tomoyo_encode+0x2ad/0x570 [ 1071.428832][T28358] tomoyo_encode+0x2ad/0x570 [ 1071.428868][T28358] tomoyo_realpath_from_path+0x5fa/0x640 [ 1071.428910][T28358] ? tomoyo_mkdev_perm+0x209/0x5d0 [ 1071.428950][T28358] tomoyo_mkdev_perm+0x235/0x5d0 [ 1071.428997][T28358] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 1071.429045][T28358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1071.429075][T28358] ? do_raw_spin_lock+0x12b/0x2f0 [ 1071.429140][T28358] ? __d_add+0x26d/0x330 [ 1071.429173][T28358] ? __pfx_current_check_access_path+0x10/0x10 [ 1071.429217][T28358] ? d_splice_alias+0x12/0x30 [ 1071.429249][T28358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1071.429285][T28358] tomoyo_path_mknod+0xfb/0x1a0 [ 1071.429317][T28358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1071.429350][T28358] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 1071.429386][T28358] ? __pfx_filename_create+0x10/0x10 [ 1071.429424][T28358] security_path_mknod+0x176/0x370 [ 1071.429457][T28358] filename_mknodat+0x2be/0x660 [ 1071.429496][T28358] ? __pfx_filename_mknodat+0x10/0x10 [ 1071.429531][T28358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1071.429561][T28358] ? do_getname+0x151/0x250 [ 1071.429602][T28358] __se_sys_mknodat+0x3b/0x150 [ 1071.429638][T28358] do_syscall_64+0x166/0x520 [ 1071.429665][T28358] ? trace_irq_disable+0x3b/0x140 [ 1071.429699][T28358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.429733][T28358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.429758][T28358] RIP: 0033:0x7efce119f559 [ 1071.429782][T28358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1071.429804][T28358] RSP: 002b:00007efce20c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 1071.429830][T28358] RAX: ffffffffffffffda RBX: 00007efce1425fa0 RCX: 00007efce119f559 [ 1071.429848][T28358] RDX: 00000000000021c0 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1071.429867][T28358] RBP: 00007efce1236b20 R08: 0000000000000000 R09: 0000000000000000 [ 1071.429884][T28358] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000000 [ 1071.429905][T28358] R13: 00007efce1426038 R14: 00007efce1425fa0 R15: 00007ffcd6b7cf18 [ 1071.429948][T28358] [ 1071.429990][T28358] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1072.193993][ T9838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1072.225944][ T9838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1072.252448][ T9838] bond0 (unregistering): Released all slaves [ 1072.355273][T28331] rxe_eth0 speed is unknown, defaulting to 1000 [ 1072.587950][ T5643] Bluetooth: hci7: command tx timeout [ 1073.206941][ T24] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 1073.388410][ T24] usb 4-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 1073.395483][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1073.395516][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1073.395556][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.452520][T28384] ecryptfs_get_tree: kern_path() failed [ 1073.516141][T28384] Reading sb failed; rc = [-2] [ 1073.675835][T28394] loop1: detected capacity change from 0 to 32768 [ 1073.692563][T28394] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7718 (28394) [ 1073.796467][T28394] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1073.796502][T28394] BTRFS info (device loop1): using sha256 checksum algorithm [ 1074.157223][T28394] BTRFS info (device loop1): enabling ssd optimizations [ 1074.157252][T28394] BTRFS info (device loop1): disabling tree log [ 1074.157271][T28394] BTRFS info (device loop1): turning on async discard [ 1074.157290][T28394] BTRFS info (device loop1): enabling free space tree [ 1074.261066][T28420] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7721'. [ 1074.655290][T26233] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1074.671136][ T5643] Bluetooth: hci7: command tx timeout [ 1074.711704][ T24] pegasus 4-1:1.0: probe with driver pegasus failed with error -71 [ 1074.881068][ T24] usb 4-1: USB disconnect, device number 33 [ 1075.193342][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 1075.193365][ T29] audit: type=1800 audit(1792814207.407:3829): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=412350 res=0 errno=-22 [ 1075.392541][ T5823] libceph: connect (1)[c::]:6789 error -101 [ 1075.419847][ T5823] libceph: mon0 (1)[c::]:6789 connect error [ 1075.453193][ T5823] libceph: connect (1)[c::]:6789 error -101 [ 1075.453361][ T5823] libceph: mon0 (1)[c::]:6789 connect error [ 1075.480660][T28429] ceph: No mds server is up or the cluster is laggy [ 1075.750344][ T5823] libceph: connect (1)[c::]:6789 error -101 [ 1075.754904][ T5823] libceph: mon0 (1)[c::]:6789 connect error [ 1076.019587][T28450] FAULT_INJECTION: forcing a failure. [ 1076.019587][T28450] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1076.019629][T28450] CPU: 1 UID: 0 PID: 28450 Comm: syz.3.7728 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1076.019666][T28450] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1076.019677][T28450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1076.019693][T28450] Call Trace: [ 1076.019703][T28450] [ 1076.019714][T28450] dump_stack_lvl+0xe8/0x150 [ 1076.019757][T28450] should_fail_ex+0x410/0x560 [ 1076.019793][T28450] prepare_alloc_pages+0x21e/0x5f0 [ 1076.019830][T28450] __alloc_frozen_pages_noprof+0x17a/0x400 [ 1076.019864][T28450] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1076.019905][T28450] ? policy_nodemask+0x2cc/0x8e0 [ 1076.019937][T28450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1076.019966][T28450] ? lockdep_hardirqs_on+0x7b/0x110 [ 1076.019999][T28450] alloc_pages_mpol+0x21e/0x390 [ 1076.020040][T28450] alloc_pages_noprof+0xb1/0x2b0 [ 1076.020076][T28450] kimage_alloc_pages+0xbe/0x3c0 [ 1076.020116][T28450] kimage_alloc_control_pages+0x49b/0xbc0 [ 1076.020160][T28450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1076.020188][T28450] ? __kmalloc_cache_noprof+0x31c/0x600 [ 1076.020222][T28450] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 1076.020252][T28450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1076.020296][T28450] do_kexec_load+0x492/0x7c0 [ 1076.020338][T28450] ? __pfx_do_kexec_load+0x10/0x10 [ 1076.020378][T28450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1076.020406][T28450] ? _copy_from_user+0x94/0xb0 [ 1076.020440][T28450] __se_sys_kexec_load+0x134/0x160 [ 1076.020484][T28450] do_syscall_64+0x166/0x520 [ 1076.020510][T28450] ? trace_irq_disable+0x3b/0x140 [ 1076.020542][T28450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.020575][T28450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.020618][T28450] RIP: 0033:0x7efce119f559 [ 1076.020640][T28450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1076.020661][T28450] RSP: 002b:00007efce20c4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 1076.020688][T28450] RAX: ffffffffffffffda RBX: 00007efce1425fa0 RCX: 00007efce119f559 [ 1076.020706][T28450] RDX: 0000200000000040 RSI: 0000000000000008 RDI: 0000000000000002 [ 1076.020723][T28450] RBP: 00007efce1236b20 R08: 0000000000000000 R09: 0000000000000000 [ 1076.020738][T28450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1076.020754][T28450] R13: 00007efce1426038 R14: 00007efce1425fa0 R15: 00007ffcd6b7cf18 [ 1076.020795][T28450] [ 1076.058273][T28450] kexec: Could not allocate control_code_buffer [ 1076.293748][T19340] libceph: connect (1)[c::]:6789 error -101 [ 1076.293910][T19340] libceph: mon0 (1)[c::]:6789 connect error [ 1076.520639][ T9838] hsr_slave_0: left promiscuous mode [ 1076.544905][ T9838] hsr_slave_1: left promiscuous mode [ 1076.551904][ T9838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1076.551927][ T9838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1076.613220][ T9838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1076.613247][ T9838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1076.670273][ T9838] veth1_macvtap: left promiscuous mode [ 1076.670334][ T9838] veth0_macvtap: left promiscuous mode [ 1076.670442][ T9838] veth1_vlan: left promiscuous mode [ 1076.670513][ T9838] veth0_vlan: left promiscuous mode [ 1076.747101][ T5643] Bluetooth: hci7: command tx timeout [ 1077.672291][T28469] FAULT_INJECTION: forcing a failure. [ 1077.672291][T28469] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.672333][T28469] CPU: 0 UID: 0 PID: 28469 Comm: syz.3.7735 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1077.672370][T28469] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1077.672381][T28469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1077.672397][T28469] Call Trace: [ 1077.672408][T28469] [ 1077.672419][T28469] dump_stack_lvl+0xe8/0x150 [ 1077.672464][T28469] should_fail_ex+0x410/0x560 [ 1077.672508][T28469] should_failslab+0xa8/0x100 [ 1077.672543][T28469] ? seq_open+0x5f/0x140 [ 1077.672577][T28469] kmem_cache_alloc_noprof+0x9c/0x600 [ 1077.672618][T28469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.672650][T28469] ? __kasan_kmalloc+0x93/0xb0 [ 1077.672682][T28469] ? seq_open+0x5f/0x140 [ 1077.672725][T28469] seq_open+0x5f/0x140 [ 1077.672762][T28469] kernfs_fop_open+0x53f/0xd20 [ 1077.672815][T28469] ? __pfx_kernfs_fop_open+0x10/0x10 [ 1077.672855][T28469] do_dentry_open+0x80e/0x1360 [ 1077.672906][T28469] vfs_open_consume+0x4a/0x350 [ 1077.672941][T28469] ? path_openat+0x16e1/0x20f0 [ 1077.672998][T28469] path_openat+0x16fc/0x20f0 [ 1077.673056][T28469] do_file_open+0x23e/0x4a0 [ 1077.673095][T28469] ? __pfx_do_file_open+0x10/0x10 [ 1077.673155][T28469] ? _raw_spin_unlock+0x28/0x50 [ 1077.673197][T28469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.673228][T28469] ? alloc_fd+0x6af/0x760 [ 1077.673285][T28469] do_sys_openat2+0x115/0x200 [ 1077.673321][T28469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.673351][T28469] ? __se_sys_futex+0x3a8/0x450 [ 1077.673378][T28469] ? __pfx_do_sys_openat2+0x10/0x10 [ 1077.673423][T28469] ? rcu_is_watching+0x16/0xb0 [ 1077.673459][T28469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.673516][T28469] __x64_sys_openat+0x138/0x170 [ 1077.673560][T28469] do_syscall_64+0x166/0x520 [ 1077.673585][T28469] ? trace_irq_disable+0x3b/0x140 [ 1077.673618][T28469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.673650][T28469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.673676][T28469] RIP: 0033:0x7efce119f559 [ 1077.673699][T28469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1077.673720][T28469] RSP: 002b:00007efce20c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1077.673746][T28469] RAX: ffffffffffffffda RBX: 00007efce1425fa0 RCX: 00007efce119f559 [ 1077.673765][T28469] RDX: 0000000000000002 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 1077.673783][T28469] RBP: 00007efce1236b20 R08: 0000000000000000 R09: 0000000000000000 [ 1077.673799][T28469] R10: 0000000000000090 R11: 0000000000000246 R12: 0000000000000000 [ 1077.673814][T28469] R13: 00007efce1426038 R14: 00007efce1425fa0 R15: 00007ffcd6b7cf18 [ 1077.673855][T28469] [ 1078.475287][ T9838] team0 (unregistering): Port device team_slave_1 removed [ 1078.501716][T28479] loop3: detected capacity change from 0 to 16 [ 1078.559262][T28479] erofs (device loop3): mounted with root inode @ nid 36. [ 1078.604454][ T9838] team0 (unregistering): Port device team_slave_0 removed [ 1078.696836][ T29] audit: type=1800 audit(1792814210.907:3830): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15221 res=0 errno=-22 [ 1078.826612][ T5643] Bluetooth: hci7: command tx timeout [ 1079.600955][ T5283] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1079.992445][T28502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.993116][T28502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.033958][T28516] loop6: detected capacity change from 0 to 512 [ 1080.073194][T28516] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1080.142170][T28516] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1080.292778][T28520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7756'. [ 1080.347737][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.464602][T28502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1080.519712][ T9749] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1080.531331][T28502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1080.809993][T28524] ip_tables: iptables: counters copy to user failed while replacing table [ 1081.153153][T19155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.187001][ T8598] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.187239][ T8629] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.187300][ T8629] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.307540][T28503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.309446][T28503] 8021q: adding VLAN 0 to HW filter on device team0 [ 1081.333649][T28503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1081.369754][T28503] bridge0: port 1(bridge_slave_0) entered blocking state                                                                                                                                                                                                                                                                                                                                                                                                                                                          [ 1082.918274][T28551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.918306][T28551] alloc_pages_mpol+0x21e/0x390 [ 1082.918347][T28551] alloc_pages_noprof+0xb1/0x2b0 [ 1082.918384][T28551] get_free_pages_noprof+0xf/0x80 [ 1082.918414][T28551] __kasan_populate_vmalloc+0x38/0x1c0 [ 1082.918444][T28551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.918478][T28551] ? do_raw_spin_unlock+0xf5/0x200 [ 1082.918524][T28551] alloc_vmap_area+0xd10/0x1410 [ 1082.918575][T28551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.918607][T28551] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1082.918640][T28551] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 1082.918670][T28551] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 1082.918697][T28551] ? __get_vm_area_node+0x155/0x2f0 [ 1082.918740][T28551] __get_vm_area_node+0x200/0x2f0 [ 1082.918786][T28551] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 1082.918826][T28551] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 1082.918866][T28551] ? bpf_jit_binary_pack_alloc+0x10a/0x300 [ 1082.918890][T28551] ? bpf_jit_binary_pack_alloc+0x10a/0x300 [ 1082.918921][T28551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.918951][T28551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.918994][T28551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.919024][T28551] ? bpf_int_jit_compile+0x16d0/0x1a40 [ 1082.919072][T28551] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1082.919120][T28551] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 1082.919159][T28551] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 1082.919195][T28551] __vmalloc_noprof+0xd2/0x120 [ 1082.919233][T28551] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 1082.919274][T28551] bpf_prog_alloc_no_stats+0x47/0x550 [ 1082.919318][T28551] bpf_jit_subprogs+0x90c/0x4830 [ 1082.919385][T28551] bpf_check+0x2012/0x3530 [ 1082.919439][T28551] ? ktime_get_with_offset+0x93/0x2d0 [ 1082.919478][T28551] ? ktime_get_with_offset+0x93/0x2d0 [ 1082.919511][T28551] ? __pfx_bpf_check+0x10/0x10 [ 1082.919550][T28551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.919583][T28551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.919612][T28551] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1082.919647][T28551] bpf_prog_load+0x158f/0x1d60 [ 1082.919701][T28551] ? __pfx_bpf_prog_load+0x10/0x10 [ 1082.919771][T28551] __sys_bpf+0xd86/0xe00 [ 1082.919818][T28551] ? __pfx___sys_bpf+0x10/0x10 [ 1082.919859][T28551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.919888][T28551] ? do_futex+0x3e7/0x4e0 [ 1082.919963][T28551] ? rcu_is_watching+0x16/0xb0 [ 1082.920000][T28551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.920036][T28551] __x64_sys_bpf+0xba/0xd0 [ 1082.920074][T28551] do_syscall_64+0x166/0x520 [ 1082.920100][T28551] ? trace_irq_disable+0x3b/0x140 [ 1082.920132][T28551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.920165][T28551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.920191][T28551] RIP: 0033:0x7fe088f9f559 [ 1082.920213][T28551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1082.920235][T28551] RSP: 002b:00007fe089dbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1082.920261][T28551] RAX: ffffffffffffffda RBX: 00007fe089225fa0 RCX: 00007fe088f9f559 [ 1082.920280][T28551] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 1082.920297][T28551] RBP: 00007fe089036b20 R08: 0000000000000000 R09: 0000000000000000 [ 1082.920314][T28551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1082.920330][T28551] R13: 00007fe089226038 R14: 00007fe089225fa0 R15: 00007fffaceb9a78 [ 1082.920371][T28551] [ 1082.920716][T28557] hpfs: hpfs_map_4sectors(): unaligned read [ 1082.920795][T28557] hpfs: hpfs_map_4sectors(): unaligned read [ 1082.920807][T28557] hpfs: filesystem error: unable to find root dir [ 1082.965003][T28551] syz.1.7764: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1082.965085][T28551] CPU: 1 UID: 0 PID: 28551 Comm: syz.1.7764 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1082.965120][T28551] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1082.965132][T28551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1082.965148][T28551] Call Trace: [ 1082.965158][T28551] [ 1082.965169][T28551] dump_stack_lvl+0xe8/0x150 [ 1082.965211][T28551] warn_alloc+0x24d/0x270 [ 1082.965239][T28551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.965269][T28551] ? lockdep_hardirqs_on+0x7b/0x110 [ 1082.965299][T28551] ? __pfx_warn_alloc+0x10/0x10 [ 1082.965325][T28551] ? kfree+0x1c5/0x650 [ 1082.965368][T28551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.965397][T28551] ? __get_vm_area_node+0x219/0x2f0 [ 1082.965448][T28551] __vmalloc_node_range_noprof+0x396/0x16f0 [ 1082.965495][T28551] ? bpf_jit_binary_pack_alloc+0x10a/0x300 [ 1082.965521][T28551] ? bpf_jit_binary_pack_alloc+0x10a/0x300 [ 1082.965552][T28551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.965581][T28551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.965625][T28551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.965654][T28551] ? bpf_int_jit_compile+0x16d0/0x1a40 [ 1082.965703][T28551] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1082.965752][T28551] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 1082.965791][T28551] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 1082.965827][T28551] __vmalloc_noprof+0xd2/0x120 [ 1082.965867][T28551] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 1082.965909][T28551] bpf_prog_alloc_no_stats+0x47/0x550 [ 1082.965951][T28551] bpf_jit_subprogs+0x90c/0x4830 [ 1082.966018][T28551] bpf_check+0x2012/0x3530 [ 1082.966072][T28551] ? ktime_get_with_offset+0x93/0x2d0 [ 1082.966106][T28551] ? ktime_get_with_offset+0x93/0x2d0 [ 1082.966139][T28551] ? __pfx_bpf_check+0x10/0x10 [ 1082.966178][T28551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.966210][T28551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.966239][T28551] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1082.966274][T28551] bpf_prog_load+0x158f/0x1d60 [ 1082.966327][T28551] ? __pfx_bpf_prog_load+0x10/0x10 [ 1082.966397][T28551] __sys_bpf+0xd86/0xe00 [ 1082.966445][T28551] ? __pfx___sys_bpf+0x10/0x10 [ 1082.966491][T28551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.966520][T28551] ? do_futex+0x3e7/0x4e0 [ 1082.966595][T28551] ? rcu_is_watching+0x16/0xb0 [ 1082.966630][T28551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.966667][T28551] __x64_sys_bpf+0xba/0xd0 [ 1082.966706][T28551] do_syscall_64+0x166/0x520 [ 1082.966732][T28551] ? trace_irq_disable+0x3b/0x140 [ 1082.966764][T28551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.966798][T28551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.966824][T28551] RIP: 0033:0x7fe088f9f559 [ 1082.966846][T28551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1082.966867][T28551] RSP: 002b:00007fe089dbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 syzkaller [ 1082.966893][T28551] RAX: ffffffffffffffda RBX: 00007fe089225fa0 RCX: 00007fe088f9f559 syzkaller login: [ 1082.966912][T28551] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 1082.966929][T28551] RBP: 00007fe089036b20 R08: 0000000000000000 R09: 0000000000000000 [ 1082.966946][T28551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1082.966962][T28551] R13: 00007fe089226038 R14: 00007fe089225fa0 R15: 00007fffaceb9a78 [ 1082.967002][T28551] [ 1083.045656][ T29] audit: type=1804 audit(1792814215.257:3834): pid=28547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="getty" name="/run/utmp" dev="tmpfs" ino=2 res=1 errno=0 [ 1083.045741][T28551] Mem-Info: [ 1083.045753][T28551] active_anon:8927 inactive_anon:5 isolated_anon:0 [ 1083.045753][T28551] active_file:4188 inactive_file:31411 isolated_file:0 [ 1083.045753][T28551] unevictable:0 dirty:474 writeback:0 [ 1083.045753][T28551] slab_reclaimable:13270 slab_unreclaimable:131046 [ 1083.045753][T28551] mapped:51059 shmem:1049 pagetables:1714 [ 1083.045753][T28551] sec_pagetables:0 bounce:0 [ 1083.045753][T28551] kernel_misc_reclaimable:0 [ 1083.045753][T28551] free:1200729 free_pcp:7397 free_cma:0 [ 1083.045815][T28551] Node 0 active_anon:35708kB inactive_anon:20kB active_file:16752kB inactive_file:125440kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:204236kB dirty:1896kB writeback:0kB shmem:4196kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15604kB pagetables:6704kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1083.045882][T28551] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1083.045942][T28551] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1083.046010][T28551] lowmem_reserve[]: 0 2464 2466 2466 2466 [ 1083.046058][T28551] Node 0 DMA32 free:835060kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0kB free_highatomic:0kB active_anon:35708kB inactive_anon:20kB active_file:16752kB inactive_file:125440kB unevictable:0kB writepending:1896kB zspages:0kB present:3129332kB managed:2523580kB mlocked:0kB bounce:0kB free_pcp:29572kB local_pcp:13480kB free_cma:0kB [ 1083.046130][T28551] lowmem_reserve[]: 0 0 1 1 1 [ 1083.046176][T28551] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1668kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 1083.046424][T28551] lowmem_reserve[]: 0 0 0 0 0 [ 1083.046472][T28551] Node 1 Normal free:3952472kB boost:0kB min:55692kB low:69612kB high:83532kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1083.046549][T28551] lowmem_reserve[]: 0 0 0 0 0 [ 1083.046594][T28551] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1083.046742][T28551] Node 0 DMA32: 1203*4kB (UME) 907*8kB (UME) 925*16kB (UME) 810*32kB (UME) 445*64kB (UME) 171*128kB (ME) 131*256kB (UME) 46*512kB (UME) 35*1024kB (UM) 8*2048kB (ME) 152*4096kB (UM) = 835060kB [ 1083.062834][T28551] Node 0 Normal: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 1083.062975][T28551] Node 1 Normal: 2*4kB (UM) 8*8kB (UM) 13*16kB (UM) 12*32kB (UM) 7*64kB (UM) 10*128kB (UM) 6*256kB (UM) 6*512kB (UM) 1*1024kB (M) 4*2048kB (UM) 961*4096kB (UM) = 3952472kB [ 1083.063176][T28551] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1083.063196][T28551] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1083.063218][T28551] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1083.063239][T28551] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1083.063259][T28551] 36136 total pagecache pages [ 1083.063270][T28551] 0 pages in swap cache [ 1083.063280][T28551] Free swap = 124996kB [ 1083.063290][T28551] Total swap = 124996kB [ 1083.063301][T28551] 2097051 pages RAM [ 1083.063311][T28551] 0 pages HighMem/MovableOnly [ 1083.063321][T28551] 434123 pages reserved [ 1083.063330][T28551] 0 pages cma reserved [ 1083.103210][T28557] hpfs: hpfs_map_4sectors(): unaligned read [ 1083.103386][T28557] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 1083.476096][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.198652][T19156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.253966][T28331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.254087][T28331] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.254312][T28331] bridge_slave_0: entered allmulticast mode [ 1084.272857][T28331] bridge_slave_0: entered promiscuous mode [ 1084.332576][T28331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.332689][T28331] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.332838][T28331] bridge_slave_1: entered allmulticast mode [ 1084.368162][T28331] bridge_slave_1: entered promiscuous mode [ 1084.508730][T18088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.540156][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.683582][T28574] loop5: detected capacity change from 0 to 1024 [ 1084.703129][T28574] EXT4-fs: Ignoring removed oldalloc option [ 1084.839051][T28574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1084.839162][T28574] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1084.858877][T28331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1084.931699][T28331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.225990][T28331] team0: Port device team_slave_0 added [ 1085.281938][T28331] team0: Port device team_slave_1 added [ 1085.294784][T28588] Bluetooth: ISO socket layer initialized [ 1085.305287][T26036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1085.547776][T19340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.627293][T28331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1085.627315][T28331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1085.627346][T28331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1085.664337][T28331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1085.664356][T28331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1085.664386][T28331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1086.125062][T28331] hsr_slave_0: entered promiscuous mode [ 1086.135031][T28331] hsr_slave_1: entered promiscuous mode [ 1086.135854][T28331] debugfs: 'hsr0' already exists in 'hsr' [ 1086.135875][T28331] Cannot create hsr debugfs directory [ 1086.317142][T28606] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1086.588382][T19340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.764937][T28615] device-mapper: ioctl: name not supplied when creating device [ 1087.141948][ T29] audit: type=1800 audit(1792814219.357:3835): pid=28331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24498 res=0 errno=-13 [ 1087.238202][T19156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.549379][ T1223] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1087.627004][T19340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.707448][ T1223] usb 4-1: Using ep0 maxpacket: 8 [ 1087.708533][ T1223] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1087.711066][ T1223] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1087.711115][ T1223] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1087.711140][ T1223] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1087.711167][ T1223] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1087.711193][ T1223] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1087.711237][ T1223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.741774][ T29] audit: type=1800 audit(1792814219.947:3836): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=417652 res=0 errno=-22 [ 1087.773711][ T29] audit: type=1800 audit(1792814219.987:3837): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=417681 res=0 errno=-22 [ 1087.796647][ T29] audit: type=1800 audit(1792814220.007:3838): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=417659 res=0 errno=-22 [ 1087.838267][ T29] audit: type=1800 audit(1792814220.037:3840): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=417660 res=0 errno=-22 [ 1087.838323][ T29] audit: type=1800 audit(1792814220.027:3839): pid=28637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.7793" name="bonding_masters" dev="sysfs" ino=299007 res=0 errno=-22 [ 1087.846680][ T29] audit: type=1800 audit(1792814220.057:3841): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=417661 res=0 errno=-22 [ 1087.922055][ T29] audit: type=1800 audit(1792814220.127:3842): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=417701 res=0 errno=-22 [ 1087.962930][ T1223] usb 4-1: usb_control_msg returned -32 [ 1087.962982][ T1223] usbtmc 4-1:16.0: can't read capabilities [ 1088.067260][ T29] audit: type=1800 audit(1792814220.277:3843): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=417718 res=0 errno=-22 [ 1088.347235][ T28] INFO: rcu_tasks detected stalls on tasks: [ 1088.347252][ T28] ffff888036eabe80: .. nvcsw: 2/2 holdout: 1 idle_cpu: -1/0 [ 1088.347280][ T28] task:syz.8.3195 state:R running task stack:23336 pid:14730 tgid:14728 ppid:9159 task_flags:0x400140 flags:0x00080003 [ 1088.347356][ T28] Call Trace: [ 1088.347366][ T28] [ 1088.347382][ T28] __schedule+0x17dd/0x5820 [ 1088.347442][ T28] ? srso_alias_return_thunk+0x5/0xfbef5 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1088.347477][ T28] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1088.347512][ T28] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1088.347543][ T28] ? clockevents_program_event+0x491/0x630 [ 1088.347574][ T28] ? __pfx_clockevents_program_event+0x10/0x10 [ 1088.347602][ T28] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1088.347640][ T28] ? __pfx___schedule+0x10/0x10 [ 1088.347684][ T28] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1088.347714][ T28] ? __lock_acquire+0x747/0x2de0 [ 1088.347760][ T28] preempt_schedule_irq+0x4b/0x90 [ 1088.347785][ T28] irqentry_exit+0x14f/0x9b0 [ 1088.347809][ T28] ? trace_irq_disable+0x3b/0x140 [ 1088.347851][ T28] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1088.347880][ T28] RIP: 0010:lock_acquire+0x232/0x350 [ 1088.347911][ T28] Code: ff ff ff e8 30 5e 59 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 32 78 1a 13 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 fa 38 6c ff cc 48 8d 3d 77 61 fc [ 1088.347934][ T28] RSP: 0018:ffffc900044deb80 EFLAGS: 00000292 [ 1088.347957][ T28] RAX: 45b4166a97a76800 RBX: 0000000000000001 RCX: 0000000000000046 [ 1088.347975][ T28] RDX: 0000000016768143 RSI: ffffffff8e924bb3 RDI: ffffffff8c8e6980 [ 1088.348002][ T28] RBP: ffff888036eabe80 R08: ffffffff82526b6a R09: 0000000000000000 [ 1088.348020][ T28] R10: dffffc0000000000 R11: ffffffff8280c8d0 R12: ffffffff90138150 [ 1088.348041][ T28] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000246 [ 1088.348064][ T28] ? __pfx_read_kcore_iter+0x10/0x10 [ 1088.348105][ T28] ? __kernel_read+0x4ca/0x960 [ 1088.348147][ T28] read_kcore_iter+0x18f/0x1940 [ 1088.348185][ T28] ? __kernel_read+0x4ca/0x960 [ 1088.348212][ T28] ? __kernel_read+0x4ca/0x960 [ 1088.348249][ T28] ? __pfx_read_kcore_iter+0x10/0x10 [ 1088.348290][ T28] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1088.348324][ T28] ? ktime_get+0x45/0x220 [ 1088.348359][ T28] ? ktime_get+0x45/0x220 [ 1088.348390][ T28] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1088.348420][ T28] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 1088.348454][ T28] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1088.348483][ T28] ? ktime_get+0x1f5/0x220 [ 1088.348515][ T28] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1088.348544][ T28] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1088.348574][ T28] ? clockevents_program_event+0x491/0x630 [ 1088.348604][ T28] ? __pfx_clockevents_program_event+0x10/0x10 [ 1088.348628][ T28] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1088.348658][ T28] ? hrtimer_start_range_ns_common+0x7cd/0xb60 [ 1088.348703][ T28] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1088.348736][ T28] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1088.348773][ T28] ? finish_task_switch+0x40e/0xc60 [ 1088.348808][ T28] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1088.348838][ T28] ? lockdep_hardirqs_on+0x7b/0x110 [ 1088.349002][ T28] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1088.349034][ T28] ? rcu_is_watching+0x16/0xb0 [ 1088.349072][ T28] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1088.349102][ T28] ? trace_sched_exit_tp+0x3a/0x130 [ 1088.349138][ T28] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1088.349168][ T28] ? __schedule+0x17f3/0x5820 [ 1088.349214][ T28] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1088.349244][ T28] ? __asan_memset+0x22/0x50 [ 1088.349269][ T28] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1088.349298][ T28] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1088.349327][ T28] ? proc_reg_read_iter+0x11f/0x280 [ 1088.349366][ T28] __kernel_read+0x4ca/0x960 [ 1088.349400][ T28] ? __pfx___kernel_read+0x10/0x10 [ 1088.349423][ T28] ? __pfx_crypto_sha256_update+0x10/0x10 [ 1088.349464][ T28] ? __pfx___schedule+0x10/0x10 [ 1088.349501][ T28] ? kernel_fpu_begin_mask+0x12a/0x380 [ 1088.349554][ T28] ? __pfx_kernel_fpu_begin_mask+0x10/0x10 [ 1088.349591][ T28] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1088.349620][ T28] ? preempt_schedule_common+0x7f/0xd0 [ 1088.349645][ T28] ? kernel_fpu_end+0x62/0x80 [ 1088.349684][ T28] integrity_kernel_read+0x89/0xd0 [ 1088.349721][ T28] ? __pfx_integrity_kernel_read+0x10/0x10 [ 1088.349750][ T28] ? __local_bh_enable_ip+0xd6/0x140 [ 1088.349789][ T28] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1088.349830][ T28] ima_calc_file_hash+0x451/0x890 [ 1088.349877][ T28] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 1088.349959][ T28] ? generic_fillattr+0x560/0x840 [ 1088.350018][ T28] ima_collect_measurement+0x51b/0xa00 [ 1088.350066][ T28] ? __pfx_ima_collect_measurement+0x10/0x10 [ 1088.350114][ T28] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1088.350145][ T28] ? trace_contention_end+0x3d/0x140 [ 1088.350218][ T28] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1088.350261][ T28] process_measurement+0x1272/0x1c10 [ 1088.350315][ T28] ? __pfx_process_measurement+0x10/0x10 [ 1088.350388][ T28] ? rcu_is_watching+0x16/0xb0 [ 1088.350427][ T28] ? __kasan_kmalloc+0x93/0xb0 [ 1088.350459][ T28] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1088.350491][ T28] ? __kmalloc_cache_noprof+0x148/0x600 [ 1088.350518][ T28] ? open_kcore+0xa1/0x1c0 [ 1088.350566][ T28] ima_file_check+0xdc/0x130 [ 1088.350615][ T28] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1088.351555][ T28] ? do_dentry_open+0xcf9/0x1360 [ 1088.351592][ T28] ? __pfx_ima_file_check+0x10/0x10 [ 1088.351636][ T28] security_file_post_open+0xb3/0x260 [ 1088.351676][ T28] path_openat+0x1748/0x20f0 [ 1088.351730][ T28] do_file_open+0x23e/0x4a0 [ 1088.351768][ T28] ? __pfx_do_file_open+0x10/0x10 [ 1088.351826][ T28] ? _raw_spin_unlock+0x28/0x50 [ 1088.351863][ T28] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1088.351893][ T28] ? alloc_fd+0x6af/0x760 [ 1088.351946][ T28] do_sys_openat2+0x115/0x200 [ 1088.351988][ T28] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1088.352018][ T28] ? __se_sys_futex+0x3a8/0x450 [ 1088.352044][ T28] ? __pfx_do_sys_openat2+0x10/0x10 [ 1088.352088][ T28] ? rcu_is_watching+0x16/0xb0 [ 1088.352124][ T28] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1088.352161][ T28] __x64_sys_openat+0x138/0x170 [ 1088.352204][ T28] do_syscall_64+0x166/0x520 [ 1088.352231][ T28] ? trace_irq_disable+0x3b/0x140 [ 1088.352264][ T28] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.352298][ T28] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.352324][ T28] RIP: 0033:0x7f71dc79f559 [ 1088.352348][ T28] RSP: 002b:00007f71dd6ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1088.352375][ T28] RAX: ffffffffffffffda RBX: 00007f71dca25fa0 RCX: 00007f71dc79f559 [ 1088.352394][ T28] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1088.352413][ T28] RBP: 00007f71dc836b20 R08: 0000000000000000 R09: 0000000000000000 [ 1088.352430][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1088.352446][ T28] R13: 00007f71dca26038 R14: 00007f71dca25fa0 R15: 00007ffe4f2664d8 [ 1088.352488][ T28] [ 1088.431193][T28646] usbtmc 4-1:16.0: stb usb_control_msg returned -32 [ 1088.500974][ T5823] usb 4-1: USB disconnect, device number 34 [ 1088.670812][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.952856][T28654] jffs2: notice: (28654) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1089.202360][ T29] audit: type=1800 audit(1792814221.417:3844): pid=28653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7797" name="eject" dev="sysfs" ino=2620 res=0 errno=-13 [ 1089.757956][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.268450][T18088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.828987][T19337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.452560][T26036] bridge0: port 3(vlan2) entered disabled state [ 1091.491387][T26036] vlan2 (unregistering): left allmulticast mode [ 1091.491411][T26036] syz_tun (unregistering): left allmulticast mode [ 1091.491433][T26036] vlan2 (unregistering): left promiscuous mode [ 1091.491449][T26036] syz_tun (unregistering): left promiscuous mode [ 1091.491586][T26036] bridge0: port 3(vlan2) entered disabled state [ 1091.869631][T19340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.455130][ T8629] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.751260][T28644] batman_adv: batadv0: Interface deactivated: syz_tun [ 1092.810554][T28644] batman_adv: batadv0: Removing interface: syz_tun [ 1092.830412][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.936887][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.028693][ T8629] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.308540][T19155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.314419][ T8629] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.527661][ T8629] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.809934][ T29] audit: type=1800 audit(1792814226.027:3845): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=417786 res=0 errno=-22 [ 1093.838377][ T29] audit: type=1800 audit(1792814226.057:3846): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=417791 res=0 errno=-22 [ 1093.839612][ T29] audit: type=1800 audit(1792814226.057:3847): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=417795 res=0 errno=-22 [ 1093.844502][ T29] audit: type=1800 audit(1792814226.057:3848): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=417794 res=0 errno=-22 [ 1093.887392][ T29] audit: type=1800 audit(1792814226.097:3849): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=417797 res=0 errno=-22 [ 1093.947559][T19340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.959454][ T29] audit: type=1800 audit(1792814226.177:3850): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=417872 res=0 errno=-22 [ 1093.988630][ T29] audit: type=1800 audit(1792814226.207:3851): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=417877 res=0 errno=-22 [ 1094.011373][ T29] audit: type=1800 audit(1792814226.227:3852): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=417881 res=0 errno=-22 [ 1094.019756][ T29] audit: type=1800 audit(1792814226.227:3853): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=417880 res=0 errno=-22 [ 1094.019806][ T29] audit: type=1800 audit(1792814226.237:3854): pid=27564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=417883 res=0 errno=-22 [ 1094.111209][T18088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.149046][ T8629] bridge_slave_1: left allmulticast mode [ 1094.149070][ T8629] bridge_slave_1: left promiscuous mode [ 1094.149291][ T8629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.179610][ T8629] bridge_slave_0: left allmulticast mode [ 1094.179632][ T8629] bridge_slave_0: left promiscuous mode [ 1094.179931][ T8629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.982537][ T8629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1094.988935][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.005237][ T8629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1095.012736][ T8629] bond0 (unregistering): Released all slaves [ 1096.030832][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.295083][ T8629] hsr_slave_0: left promiscuous mode [ 1096.303097][ T8629] hsr_slave_1: left promiscuous mode [ 1096.312304][ T8629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1096.312327][ T8629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1096.331777][ T8629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1096.331800][ T8629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1096.352747][T19155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.386763][ T8629] veth1_macvtap: left promiscuous mode [ 1096.386801][ T8629] veth0_macvtap: left promiscuous mode [ 1096.386961][ T8629] veth1_vlan: left promiscuous mode [ 1096.387032][ T8629] veth0_vlan: left promiscuous mode [ 1096.666606][ T9838] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1097.067400][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.249351][ T8629] team0 (unregistering): Port device team_slave_1 removed [ 1097.301289][ T8629] team0 (unregistering): Port device team_slave_0 removed [ 1098.107016][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog