last executing test programs: 7m51.198775213s ago: executing program 32 (id=1917): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r1}) ioctl(r0, 0x3b8e, &(0x7f0000000580)="10") ioctl(r0, 0x3b89, &(0x7f00000005c0)="3000000004000000030000000100000000000000000000000000000000000000000000000000000005") ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r1, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2}) 6m21.172543704s ago: executing program 2 (id=2368): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./gadget\x00', 0x28) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff0000000705810200020012010002000000402505a0a4000100000001", 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./gadget/ep1in-bulk\x00', 0x2, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 6m18.644372408s ago: executing program 2 (id=2379): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1234, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000040), &(0x7f0000000080)=@udp=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r1], 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, &(0x7f0000000800)="000000000000000002", 0x0}, 0x50) 6m17.915164936s ago: executing program 2 (id=2384): r0 = socket$inet6(0xa, 0x3, 0x87) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd28, 0x0, {{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x407ffffffffffe, 0x800000000000001}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x10) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x7, @empty, 0x80000000}, 0x1c) 6m17.125876644s ago: executing program 2 (id=2388): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 6m16.27795801s ago: executing program 2 (id=2391): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x9, 0xf5, 0x5, 0x39, 0x747d5a16, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0x10f252, 0x1, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0x6, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x7, 0x40, 0x1009, 0x1, 0x199f, 0x8, 0xa, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x294, 0x5, 0x0, 0x981, 0x4, 0xfd, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xf6, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x1, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x400001, 0x3, 0x8, 0x6, 0x200, 0x3], [0x3fd, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x4, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x3, 0x4, 0x1000007, 0x9, 0x2, 0x20000005, 0x7d, 0x7, 0xb, 0x47, 0x2, 0x3, 0x4, 0x207, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x5, 0x95a, 0xffffffff, 0x4, 0x2, 0x6, 0x100ffff, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x3ff, 0x7], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x1, 0x40, 0x2, 0x763, 0xb, 0x8000402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x101, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa809, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x402, 0x1, 0x200, 0x7, 0x4edf, 0xfefffffd, 0x4, 0xe, 0x2, 0xe, 0x11, 0x133, 0x2]}, 0x45c) flock(r0, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="c80000001000a54627bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYRES32=r2], 0xc8}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) readv(r0, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/138, 0x8a}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_open_procfs(0x0, &(0x7f0000000280)='setgroups\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80140, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0) write(r5, &(0x7f0000000140)='0', 0x1) r6 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@secondary) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000300)="1100f8ae", 0x4}, {&(0x7f00000002c0)='#o\x00', 0x3}], 0x3) 6m15.162314425s ago: executing program 2 (id=2397): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) socket$inet6(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) 6m13.84797517s ago: executing program 33 (id=2397): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) socket$inet6(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) 4m50.574667977s ago: executing program 1 (id=2679): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_clone3(&(0x7f0000000080)={0x20800100, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) 4m47.834089488s ago: executing program 1 (id=2704): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x9, 0xf5, 0x5, 0x39, 0x747d5a16, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0x10f252, 0x1, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0x6, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x7, 0x40, 0x1009, 0x1, 0x199f, 0x8, 0xa, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x294, 0x5, 0x0, 0x981, 0x4, 0xfd, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xf6, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x1, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x400001, 0x3, 0x8, 0x6, 0x200, 0x3], [0x3fd, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x4, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x3, 0x4, 0x1000007, 0x9, 0x2, 0x20000005, 0x7d, 0x7, 0xb, 0x47, 0x2, 0x3, 0x4, 0x207, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x5, 0x95a, 0xffffffff, 0x4, 0x2, 0x6, 0x100ffff, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x3ff, 0x7], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x1, 0x40, 0x2, 0x763, 0xb, 0x8000402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x101, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa809, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x402, 0x1, 0x200, 0x7, 0x4edf, 0xfefffffd, 0x4, 0xe, 0x2, 0xe, 0x11, 0x133, 0x2]}, 0x45c) flock(r0, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="c80000001000a54627bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYRES32=r2], 0xc8}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) readv(r0, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/138, 0x8a}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_open_procfs(0x0, &(0x7f0000000280)='setgroups\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80140, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, &(0x7f0000000140)='0', 0x1) r6 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@secondary) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000300)="1100f8ae", 0x4}, {&(0x7f00000002c0)='#o\x00', 0x3}], 0x3) 4m43.622719117s ago: executing program 1 (id=2698): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0xe, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 4m42.76071051s ago: executing program 1 (id=2702): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 4m42.101605535s ago: executing program 1 (id=2707): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000240)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0xd81, &(0x7f0000004000)={@local, @random="e130aeaaba30", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6eeaa6", 0xd4b, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[@dstopts={0x2e, 0xd, '\x00', [@jumbo, @enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0xfffc}, @calipso={0x7, 0x58, {0x2, 0x14, 0x3, 0x8, [0x0, 0x81, 0xe2, 0x3, 0x401, 0x9, 0x8000, 0x81, 0x571, 0x29]}}, @pad1]}, @dstopts={0x33, 0x7, '\x00', [@generic={0x40, 0x25, "c3b2bd4b0d54f15fed20aa1b6ce852241ac6978283bf8bc7b0ee62970def5a7382cb027f7d"}, @hao={0xc9, 0x10, @loopback}]}, @dstopts={0x2, 0x28, '\x00', [@generic={0x9, 0xd2, "c57e9e3386bfe23efe79323ef528ccefbed663964190f09793df89acd31840a067cebdaf4e9461561aee4f9f2d36d9df89971525e34a80da4ac1d8162b35d4de6cf8656d4606a78231546fc7ac28897fe325cca38f0279ea20f94c1290612acd6ed9290e39b1653af6207a4fc0f3085756979323c0c7a86b96d8c665f3892ec95cd8c815d357ea99f7db9354d899f7cfbafd73628887528ed0bfbaaf45e78c8380a628763fc70b40ab7cdd7d502ae8f23b2a295e48fbcaef6cf71679c6fe6de8f22e1647ce95a1a99d4cb3622b82566c052d"}, @jumbo={0xc2, 0x4, 0x8000}, @calipso={0x7, 0x38, {0x1, 0xc, 0x5, 0xf, [0x4, 0xfffffffffffffffe, 0xdd64, 0x800000000000000, 0xffffffffbd7bb119, 0x800]}}, @calipso={0x7, 0x28, {0x1, 0x8, 0xfc, 0x1, [0xe5b, 0x5, 0xffdf, 0xfffffffffffffff7]}}, @pad1]}, @fragment={0x33, 0x0, 0x2, 0x0, 0x0, 0x6, 0x64}, @dstopts={0x2b, 0x14b, '\x00', [@generic={0x6, 0xa57, "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"}]}], "cca8d5aa96c9782a0bc7527f7b39fa4103edaf80681d1902d9689f100d3ab37de5c9f705a9a9259caaf8b30135a732905e87c39f8b7f29e2a3ed73202412f963103f1f3544984f5a7cdfdcb9057cac39b6bafc60d75d80e22638f2083ab04a497a868be8058476e058939f195b1b45e634c889af309cd600f3963a203c4f0284a40ad208ac1f37a2b9dee5311c227ea295345886ef2e6660ae9c7224d9c45632e38be2447d218cd4cb6d75fb11028aca8d8f84907aad48904c97337ee512a5f0d0c275d6069064d1f71b76"}}}}}, 0x0) 4m40.869768681s ago: executing program 1 (id=2712): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@alu={0x4, 0x0, 0x5, 0x0, 0x2, 0x5c}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) 4m38.49751974s ago: executing program 34 (id=2712): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@alu={0x4, 0x0, 0x5, 0x0, 0x2, 0x5c}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) 4m25.689679941s ago: executing program 0 (id=2759): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000240)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0xd81, &(0x7f0000004000)={@local, @random="e130aeaaba30", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6eeaa6", 0xd4b, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[@dstopts={0x2e, 0xd, '\x00', [@jumbo, @enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0xfffc}, @calipso={0x7, 0x58, {0x2, 0x14, 0x3, 0x8, [0x0, 0x81, 0xe2, 0x3, 0x401, 0x9, 0x8000, 0x81, 0x571, 0x29]}}, @pad1]}, @dstopts={0x33, 0x7, '\x00', [@generic={0x40, 0x25, "c3b2bd4b0d54f15fed20aa1b6ce852241ac6978283bf8bc7b0ee62970def5a7382cb027f7d"}, @hao={0xc9, 0x10, @loopback}]}, @dstopts={0x2, 0x28, '\x00', [@generic={0x9, 0xd2, "c57e9e3386bfe23efe79323ef528ccefbed663964190f09793df89acd31840a067cebdaf4e9461561aee4f9f2d36d9df89971525e34a80da4ac1d8162b35d4de6cf8656d4606a78231546fc7ac28897fe325cca38f0279ea20f94c1290612acd6ed9290e39b1653af6207a4fc0f3085756979323c0c7a86b96d8c665f3892ec95cd8c815d357ea99f7db9354d899f7cfbafd73628887528ed0bfbaaf45e78c8380a628763fc70b40ab7cdd7d502ae8f23b2a295e48fbcaef6cf71679c6fe6de8f22e1647ce95a1a99d4cb3622b82566c052d"}, @jumbo={0xc2, 0x4, 0x8000}, @calipso={0x7, 0x38, {0x1, 0xc, 0x5, 0xf, [0x4, 0xfffffffffffffffe, 0xdd64, 0x800000000000000, 0xffffffffbd7bb119, 0x800]}}, @calipso={0x7, 0x28, {0x1, 0x8, 0xfc, 0x1, [0xe5b, 0x5, 0xffdf, 0xfffffffffffffff7]}}, @pad1]}, @fragment={0x33, 0x0, 0x2, 0x0, 0x0, 0x6, 0x64}, @dstopts={0x2b, 0x14b, '\x00', [@generic={0x6, 0xa57, "9393b0f83e1ca0e2208f5c1fee083e5d4835bbc5ff2cba777be4f8153835b6ecf9c09cfd93e3c163c562e1e8b86c5bf9a4e734717691d280144042dd3ddb7baf3a9cd3ae9aad3e3342f614b7616ab30b4ebda60ff60c880f6292b078d5eb85c3c9fd2699132d7c7456f9a07c4d8794bbcce63bea65f81f6182ea6b377c4e3fe600bca9b7dc66c372318995b7eee646e8cd4d225a11f09c224a2adbcd6f4cdd057f45706281548689448da7be3820c2a409df73d5a39ed566d4d743011b8d818c3fa0acbfef7dfffb417d03c54f930cd3541ab6b471334389fabefa5090379ee069e7a086b94411276345b062ffc3e898d2ae937a0a9282e75b5ac083e3ad099923dd5d805ca50de89848560bd47d1af1f664f034ef2721e32981afe4a512cd88412c3220492096defb48e3246e1e9801891313b188d3c151fe6e08f0f50af1354fa4d7954957979e748cdeb6153ed8ceb5b8548df050e3f835c9186167ea0931efc3f8c961dd7a77e185bd075872f520e81d7bf4321c8f763a6fd82dea86e275b00690a257596b17f3d5bb7c613f5d33140881ec0877adba509754ae4c8e205b5ab9903919ead96f11bb2722ab98f027ba571751b7867b3a942e35294998aace3385c35c86fa207d92a24c3291bb11fc734b0b42ca4b54fe23dfaa2d46f15e091b1a7d1dc59fd86089e21c1caade4bfb62a47b1627cc40a0e9e1d2a94498a85028250783cc13999c907eece7a97a160cfe8b29be4128cf1b357dea33784b3ac700c8e45e0d4b1c067aa32c6a6b06623d7bd6733378763cf36a2c418c8105b757b42c10221743d015d37fcf2a2cd3ee84c9ff9c15b1ea1db82dd0accdbe539b2104717e53baabc85fdd2edf50971dd602f28bc08cac22403fdac36d7574b36b9a081c8ef186049da4b77d4d150866351d1183b52b50958cad0d078d1ce7144babf0ba1878f89087022574ed711850dc9a37cc9357f0d3e33c02c133fc0e305bb925e1f02a7f34fbd13435ab83b1de5377b56f702954a65ca368fed9c981d0a212b91c02e8a88dbd8688b89699138dd92c563e748f0e61c2228a65af8b6987e4cb40d207fd6bad55852d909f0aca063db22f9cfbaa21a1796d73d47f07742a0755adaa4b193c4023119939423ac7851f8fe1a27c559151d517c575f4bca20ae7cb251b5c2d788a9da0391a8e40506a9d8a0547a71ab5992b2b709302b2d7356c1162267ff9bbbed3d20083dc804bd9459285f5a56e7adb8ff2e18d12846264a6182f24ac09ac42013c87bde7dc940cb5f5ad1bce17c547569b12c06d4320fa9b84c1e819ff83e734013aecbea25bbfe30064444809c9dc89bccb3dd6555c2281cb5d2f95f5346a4bc4c2bfc98c6f045144d6a0d622470fab35410d6296099353047e4612c782c0bd5079247a3a08de03b61b3b090b6056480d1edd67e32733e934e5e7778d79e8d1d3ddb2875b2359af9e225724bf83e6e8eab463bae9a375d57037f3f981a5421f0c10c00711c386277aa0b9ed1564903e46f14466892b258e3aa95fc041f569b15ef9e1929e9bee054970a03283fab92a87810bc4d2d9f8bac6af0ccb732e4e35bca95d7aac2ded426b9d8ce5c0218bda084feab754cb85a0315a6953b3ba97e109960ef87e8bc4a221eea358247fe9366b68c84a68e14b636a22be3ee55b955d291be2ea99160f7e64845efecae9bda061d2e6b97df6f7e0e872e39802b5913b67eaab8d6d72322574571ebc421775aa25872f353d40db9e596065915c27e4b462b28e236bfc3fb165883472625d0f6dcb580641614f538af47033b4029be7586d820c4f803403ce2000793e68615c24d49411af968c7f13d4801381a3f37fb71d1f60e76bc7f7ec8be0a71c4d2702e5880aea8988e16598e197a2a296a32217c7ff88dd79160551e5781eefcfa3b78c3cc4a96cfb267fb9451b779d9d31503e581821168ed916abe963aab7ec14a7bca9902965efd63442f016e8a52101459c744192257edaeb1481d4d6bfe4048faea67f8acb9a887290c83d4bd0d1af1d897086f7099ad27fd568b2c9d8f37f86c0cebc1d95c2cf8321e18b0358b989bc8fa0e5ae6704563b8966dd175213de44841df4fd2ff0d2194b54990300000000000000090cc94af5d14c752f7c57a47d80c62220d2436597c4734ea134f54a9110a8b816a99c213354ef39b83d7ddf25a424aa5861aba2b5ce2c50966e73d2ac21e6935e9d1e9addc3e9745636c8b39eb4f92a82f6f1ff1bfb6bd1f26f9e0de5525fac84259266e51bb31da1ae03eceb3035a4666c04ad003937ccf0ab69b7748a6aee4b049055d51edc9d3f362183193af3bcd20bba03af87e2dc5c2c5c2e34b4cc69973b2976feafe3aa04fe09b2408c8eb8a81b50a46825bee19417b44eb6eea888112866898ebc00686fcfca8adaa40b7c4acae2928d4585747d3c0641b5426a2b37c9c2af12efbe6d70c4794463c5df8b9d03338af66ce3d030ca0cabbf4d1a2bed7bbbb5743a39f7f128a752bc841afa2dd8ed15ad60f30ab314d7ec01a69ba90db9e852e4fc49d14c6c1db3ebf3e28f72939f93021bc6d2d2bbf20f1a8c8fcf38c5d4ddc829254a0cd986e87cd2a916c89bddfa3937244e06b35dad670067874dedf231b080849f4455cdae7bb1ab65ede674e5f1da8ce7d1a349ea4558b242f4e7a0077c203ab00b580dc6db481f7b9de2900f68a99eef1ee329a03b365a53a33ed3b1f03a678af8aa545f14bdbeb6f3201c8e0fe046864c9aa12cca078c1695213256f54e9edcd164bb6cdaf2b251f40c4ee642d4d878050d001bc932bd2d93d9a3f93e76a8302b6a51aefd5ed2949127a0f7f20306a71392c5bfe0d70772b01cdd1e9e7841b98f15cf9b5966cda4f688042e453c7885c8c2d8c4dc2d0a1104c7ab6dea1612bde3a7945dadd063b83ecf896c73c5884d2a05f5da438bd991f776e9da1c68f8de25e599369337818cff2898ed281cc22972745f9f9aaeb6182292e5d3cc85ac53ca5d57db2d2e23875a91538af524ce26d3399f5ebe246ac10e8a08a83ae01345244e826f8e69030ba39f8a55d6a870d11f7e2bbae7c2dc7d18bc7d6dd3521ef526e797c8553461dc49943defad5b0c59fa97b83ab1736943db858702aac3fde8344f878d5c00acf3829acf338f2d1b8e883a1b30f744e0fe55856223041f7117ae27901a55bcee8f394ddc52802153055c88998662cac86acfba9d9ea7d5ad0aa51d44064c6f8faf8d01c046445c5ad6d14463858902efdecd5c1193ea45a5e854934db269e7a955dbe75a38b2708b90f9e9e8499f18fc9b82017f9c5c3233f911a44959a0221776942a00e047003828a831905984ad636e08bbdd0c276214b45219c71b23b4a9e3f110a79333bf8f6067a24a5982c9d7304143e438863ef61a92f1ec8a51a1b4dc55ae1d0ac301b3e500165d9dfc1e393cd1777d527ffcf37daaa567a78c91d9a519f6b6b6a5f7a024a98394fec8bcbcafca3cc5ee7031fb50aec74534ec5dd9572a506b78dc37aacf8b7e3acce60e42a0da23a24b53c9dd26e79500f77917c07de0e694cbcda30e90fbd8c7cb51b00f91cd0dfecd8ce7ab4cafb1e7ad432180bb8aec49ad7eee5bfaa547490f0dd88525d1c057b695e2392b3a8db03e773b53e3eb1b425367c2beabf554ae16e426153c2e7fe098af5ba0b7fa4b98e6a872ac8dc222f971a062d9468bd7632a31a894c89272499f5888bac83d77cceac051"}]}], "cca8d5aa96c9782a0bc7527f7b39fa4103edaf80681d1902d9689f100d3ab37de5c9f705a9a9259caaf8b30135a732905e87c39f8b7f29e2a3ed73202412f963103f1f3544984f5a7cdfdcb9057cac39b6bafc60d75d80e22638f2083ab04a497a868be8058476e058939f195b1b45e634c889af309cd600f3963a203c4f0284a40ad208ac1f37a2b9dee5311c227ea295345886ef2e6660ae9c7224d9c45632e38be2447d218cd4cb6d75fb11028aca8d8f84907aad48904c97337ee512a5f0d0c275d6069064d1f71b76"}}}}}, 0x0) 4m21.6900358s ago: executing program 0 (id=2768): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x1, 0x9, 0x0, 0x1}}}}, 0x30}}, 0x0) 4m20.89816142s ago: executing program 0 (id=2772): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x0, 0x1}}, 0x10) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0xfffd, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x41}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1235, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "f3a74d33b95518f01bbd7604731c892a0a13e19a51f64f9e", "78077bb13c9fc3304cf3c5cd542ab66fee275d6644654e5b0e7123e822a71d27"}}}}, 0x66) 4m19.840275399s ago: executing program 0 (id=2775): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000000)={[{@grpquota}, {}]}, 0x3, 0x7b5, &(0x7f00000007c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x1240404, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ce35af41090000000000000000298b070000000000004faa2ae2c084a0ea0000000000007700000c0000200000002000000000000400", "036c47c678082000cb59d654cbb41bbcef549ba197fce47ddfdd753abd950100f20000000200000000000000000000000000000000000000000200", "b7326736181c208220fffff2ff00", [0x6]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) 4m18.195126166s ago: executing program 0 (id=2779): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newlink={0x38, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x390c, 0x6536d5ef40a93725}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x410c0}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 4m16.644494563s ago: executing program 0 (id=2783): getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x0, 0x17, 0x4, "0e72ca83"}, 0x0, 0x0, &(0x7f00000003c0), 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x4, {0x20, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0xb, 0x2, "a08b"}, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6}, &(0x7f0000000e40)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000e80)={0x40, 0x19, 0x2, "c0be"}, 0x0, &(0x7f0000000f00)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000f40)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000f80)={0x40, 0x21, 0x1, 0xff}}) 4m15.319907997s ago: executing program 35 (id=2783): getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x0, 0x17, 0x4, "0e72ca83"}, 0x0, 0x0, &(0x7f00000003c0), 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x4, {0x20, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0xb, 0x2, "a08b"}, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6}, &(0x7f0000000e40)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000e80)={0x40, 0x19, 0x2, "c0be"}, 0x0, &(0x7f0000000f00)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000f40)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000f80)={0x40, 0x21, 0x1, 0xff}}) 3m22.576856552s ago: executing program 6 (id=2907): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x29000, 0x1000, 0xbb}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xe, r2, 0x20000000}, 0x10) 3m21.588065865s ago: executing program 6 (id=2912): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b00faff0000f0ffdefe0000000000000000f200"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0xc, r1, 0x80000}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, &(0x7f0000000540)=0x1) 3m19.038994291s ago: executing program 6 (id=2917): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r1, &(0x7f0000000000)='3', 0x4e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1) 3m16.317840365s ago: executing program 6 (id=2924): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1c7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x40080}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat(r1, &(0x7f0000000140)='root/proc/sys\x00', 0x10000, 0x0) getdents64(r2, &(0x7f0000000000)=""/256, 0x100) 3m15.294025261s ago: executing program 6 (id=2927): epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x34) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00) 3m14.542794125s ago: executing program 6 (id=2931): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0xf29d}], 0x1a000, 0x40010102, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r1, 0x0, 0x0) 2m58.81803174s ago: executing program 36 (id=2931): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0xf29d}], 0x1a000, 0x40010102, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r1, 0x0, 0x0) 1m24.964071962s ago: executing program 8 (id=3228): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x80540, 0x1d4) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x3820c4b, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x14a0, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x80080, 0x32) 1m23.996140038s ago: executing program 8 (id=3233): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x578410eb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x10040003}, 0x8008880) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m19.296623094s ago: executing program 8 (id=3235): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x9) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xac776000) capset(&(0x7f0000000040)={0x20071026}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 1m17.776384378s ago: executing program 8 (id=3237): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40106614, 0x0) 1m8.214234112s ago: executing program 8 (id=3256): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r0 = io_uring_setup(0x27, &(0x7f0000000040)={0x0, 0x400c8a1, 0xc000, 0x8, 0x3a8}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m7.451331709s ago: executing program 8 (id=3260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd3f, 0x30bd31, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 50.810149827s ago: executing program 37 (id=3260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd3f, 0x30bd31, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 11.193976616s ago: executing program 9 (id=3405): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000740)={0x20, 0x16, 0x2, "e6d0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00300f0000001da9f08e9f2e41200da152e07d66"], 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x4800) 9.072433743s ago: executing program 3 (id=3410): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x6}], 0x31680, 0x40000000, 0x0) 8.875316288s ago: executing program 5 (id=3411): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b788f8a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68", 0xb9}, {&(0x7f0000000cc0)="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", 0x116}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="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", 0x148}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c5", 0xb3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a80)="e6", 0x1}], 0x1}}], 0x4, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 8.431614664s ago: executing program 7 (id=3412): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) r2 = fcntl$dupfd(r1, 0x0, r1) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1) read(r2, &(0x7f0000000380)=""/66, 0x42) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$snddsp(r2, &(0x7f0000000340)="87ecc00c05dbb58b776f34f9b779d998d21e0e3353174bb169f81d1590532836dee3667c58e173cdd67b", 0x2a) 8.336269565s ago: executing program 4 (id=3413): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r0, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r0, &(0x7f0000000080)="cd", 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r1, 0x8) 8.025014126s ago: executing program 3 (id=3414): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902"], 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x8d, 0x8f, 0x33, 0x10, 0x5ac, 0x247, 0xc91e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x6, 0x20, 0x7, "", [{{0x9, 0x4, 0x19, 0xfe, 0x0, 0x3, 0x4b, 0x2, 0xe}}]}}]}}, 0x0) 7.845130809s ago: executing program 9 (id=3415): timer_settime(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x81}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000000500)={0xa, 0xfffd, 0xffffffff, @local, 0x6}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440), 0x1000a) sendfile(r1, r2, &(0x7f0000000080)=0x11, 0x7fff) 7.523248887s ago: executing program 5 (id=3416): r0 = userfaultfd(0x80801) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x20000, &(0x7f0000001780)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000001dc0), 0xffffffffffffffff) 7.013265922s ago: executing program 4 (id=3417): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0, 0x80000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a1", 0xa}], 0x1}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc}) ioctl(r2, 0x3b8f, &(0x7f00000000c0)="2800000002000000010000000400000000000000000000000010") 6.379026438s ago: executing program 7 (id=3418): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xd) r1 = syz_io_uring_setup(0x2c5d, &(0x7f0000000300)={0x0, 0xfefffffe, 0x10, 0x3, 0x200003ca}, &(0x7f0000000580)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r5 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$TCXONC(r5, 0x540a, 0x2) 6.21494351s ago: executing program 9 (id=3419): setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x20000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100098026"], 0xe8}, 0x1, 0x0, 0x0, 0x44010}, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 5.977227765s ago: executing program 4 (id=3420): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_SETMODE(r2, 0x5602, 0x0) ioctl$VT_RELDISP(r2, 0x5605) write$tcp_mem(r1, &(0x7f00000000c0)={0x4ea, 0x20, 0x1, 0x20, 0x6}, 0x48) 5.668237885s ago: executing program 7 (id=3421): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) 5.667874556s ago: executing program 5 (id=3422): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@data_err_ignore}, {@test_dummy_encryption_v1}, {@data_err_abort}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@nouid32}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x17}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) fallocate(r0, 0x0, 0xfff, 0x9) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 5.604751639s ago: executing program 9 (id=3423): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffff9, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r2, 0x0, 0x0) 5.478497532s ago: executing program 3 (id=3424): socketpair(0x1, 0x20000000000001, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x9, 0x8}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 5.290410228s ago: executing program 4 (id=3425): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004cfe050000000000002f77fbac141416e000030a94079f03b1800044150510e0845013f2325f003909050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xffffff3e}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r3, 0x4) 4.694517586s ago: executing program 3 (id=3426): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x44080}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x4) write(r0, &(0x7f0000000000)='3', 0x4e) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) 3.986244046s ago: executing program 9 (id=3427): unshare(0x22020600) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r4, r5, 0x0, 0x0, 0xdead, 0xfffffffffffffd50, &(0x7f0000000240)}) 3.779518579s ago: executing program 5 (id=3428): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 3.718758699s ago: executing program 4 (id=3429): mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000002f00135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) 3.641639051s ago: executing program 7 (id=3430): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setns(r1, 0x24020000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 3.5013755s ago: executing program 3 (id=3431): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0xc7) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x4004662b, 0x0) 2.406949812s ago: executing program 5 (id=3432): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x80540, 0x1d4) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x3820c4b, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x14a0, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x80080, 0x32) 2.094922613s ago: executing program 3 (id=3433): setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000440)={'\x00', 0x9, 0x6, 0x5, 0x0, 0x0, 0xffffffffffffffff}) 1.949160459s ago: executing program 5 (id=3434): mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='localhost /\n\x00', 0xc) 1.900871472s ago: executing program 7 (id=3435): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 583.972721ms ago: executing program 7 (id=3436): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x4, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17c07}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x488c5}, 0x0) 326.506196ms ago: executing program 9 (id=3437): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000380)={0x0, 0x2, 0xbe}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=3438): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 3] FAULT_INJECTION: forcing a failure. [ 1102.030760][T16403] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.030804][T16403] CPU: 0 UID: 0 PID: 16403 Comm: syz.7.3100 Tainted: G L syzkaller #0 PREEMPT(full) [ 1102.030846][T16403] Tainted: [L]=SOFTLOCKUP [ 1102.030857][T16403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1102.030876][T16403] Call Trace: [ 1102.030890][T16403] [ 1102.030902][T16403] dump_stack_lvl+0x100/0x190 [ 1102.030949][T16403] should_fail_ex.cold+0x5/0xa [ 1102.030986][T16403] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1102.031027][T16403] should_failslab+0xc2/0x120 [ 1102.031062][T16403] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1102.031112][T16403] ? __alloc_skb+0x140/0x710 [ 1102.031165][T16403] __alloc_skb+0x140/0x710 [ 1102.031208][T16403] ? __alloc_skb+0x5b7/0x710 [ 1102.031253][T16403] ? __pfx___alloc_skb+0x10/0x10 [ 1102.031302][T16403] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1102.031338][T16403] ? lock_acquire+0x1d1/0x380 [ 1102.031374][T16403] xfrm_alloc_compat+0x780/0x1200 [ 1102.031409][T16403] ? xfrm_get_translator+0xeb/0x290 [ 1102.031464][T16403] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 1102.031499][T16403] xfrm_send_policy_notify+0xc39/0x1b30 [ 1102.031542][T16403] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 1102.031576][T16403] ? km_policy_notify+0x33/0x240 [ 1102.031627][T16403] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1102.031669][T16403] ? __local_bh_enable_ip+0xa5/0x120 [ 1102.031703][T16403] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1102.031741][T16403] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 1102.031784][T16403] km_policy_notify+0xb3/0x240 [ 1102.031835][T16403] xfrm_add_policy+0x452/0x6c0 [ 1102.031870][T16403] ? rcu_is_watching+0x13/0xc0 [ 1102.031911][T16403] ? __pfx_xfrm_add_policy+0x10/0x10 [ 1102.031943][T16403] ? apparmor_capable+0x1d7/0x4d0 [ 1102.032001][T16403] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1102.032036][T16403] ? __nla_parse+0x40/0x60 [ 1102.032073][T16403] ? __pfx_xfrm_add_policy+0x10/0x10 [ 1102.032109][T16403] xfrm_user_rcv_msg+0x483/0xd80 [ 1102.032168][T16403] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1102.032218][T16403] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1102.032254][T16403] ? kfree_skbmem+0x19f/0x210 [ 1102.032291][T16403] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1102.032327][T16403] ? consume_skb+0xd6/0x110 [ 1102.032359][T16403] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1102.032395][T16403] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1102.032466][T16403] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1102.032502][T16403] ? rcu_is_watching+0x13/0xc0 [ 1102.032541][T16403] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1102.032576][T16403] ? trace_contention_end+0x126/0x160 [ 1102.032612][T16403] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1102.032653][T16403] ? __mutex_lock+0x26c/0x1bd0 [ 1102.032696][T16403] netlink_rcv_skb+0x159/0x420 [ 1102.032743][T16403] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1102.032794][T16403] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1102.032856][T16403] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1102.032900][T16403] xfrm_netlink_rcv+0x71/0x90 [ 1102.032946][T16403] netlink_unicast+0x585/0x850 [ 1102.032997][T16403] ? __pfx_netlink_unicast+0x10/0x10 [ 1102.033053][T16403] netlink_sendmsg+0x8b0/0xda0 [ 1102.033105][T16403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1102.033154][T16403] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1102.033190][T16403] ? apparmor_socket_sendmsg+0x165/0x280 [ 1102.033242][T16403] ____sys_sendmsg+0xa4d/0xbe0 [ 1102.033278][T16403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1102.033326][T16403] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1102.033381][T16403] ___sys_sendmsg+0x190/0x1e0 [ 1102.033422][T16403] ? __pfx____sys_sendmsg+0x10/0x10 [ 1102.033462][T16403] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1102.033498][T16403] ? futex_wait+0x11e/0x370 [ 1102.033558][T16403] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1102.033594][T16403] ? find_held_lock+0x2b/0x80 [ 1102.033665][T16403] __sys_sendmsg+0x160/0x210 [ 1102.033714][T16403] ? __pfx___sys_sendmsg+0x10/0x10 [ 1102.033777][T16403] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1102.033819][T16403] do_syscall_64+0x123/0x790 [ 1102.033861][T16403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.033895][T16403] RIP: 0033:0x7f73d7b9e159 [ 1102.033919][T16403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1102.033949][T16403] RSP: 002b:00007f73d89ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1102.033979][T16403] RAX: ffffffffffffffda RBX: 00007f73d7e25fa0 RCX: 00007f73d7b9e159 [ 1102.033999][T16403] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 1102.034018][T16403] RBP: 00007f73d7c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1102.034037][T16403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1102.034056][T16403] R13: 00007f73d7e26038 R14: 00007f73d7e25fa0 R15: 00007ffd8589a968 [ 1102.034096][T16403] [ 1102.897970][T16407] fido_id[16407]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1103.366219][T16415] gr_udc pcspkr: error -EINVAL: invalid resource (null) [ 1103.366255][T16415] gr_udc pcspkr: probe with driver gr_udc failed with error -22 [ 1104.171690][T16432] input: syz1 as /devices/virtual/input/input243 [ 1104.282154][T16432] netlink: 168 bytes leftover after parsing attributes in process `syz.7.3107'. [ 1104.445602][T16443] netlink: 168 bytes leftover after parsing attributes in process `syz.8.3109'. [ 1104.722765][T12523] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1104.723001][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1104.805031][T16436] input: syz1 as /devices/virtual/input/input244 [ 1104.845989][T16432] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1104.867296][T12523] usb 6-1: device descriptor read/64, error -32 [ 1105.137648][T12523] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1105.308032][T12523] usb 6-1: Using ep0 maxpacket: 8 [ 1105.311744][T12523] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1105.348589][T12523] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.348623][T12523] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1105.348665][T12523] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.432387][T12523] usb 6-1: config 0 descriptor?? [ 1105.617532][T16458] bridge0: port 3(syz_tun) entered blocking state [ 1105.618448][T16458] bridge0: port 3(syz_tun) entered disabled state [ 1105.649923][T16458] syz_tun: entered allmulticast mode [ 1105.738073][ T5737] usb 6-1: USB disconnect, device number 44 [ 1105.802501][T16458] FAULT_INJECTION: forcing a failure. [ 1105.802501][T16458] name failslab, interval 1, probability 0, space 0, times 0 [ 1105.811664][T16458] CPU: 0 UID: 0 PID: 16458 Comm: syz.3.3112 Tainted: G L syzkaller #0 PREEMPT(full) [ 1105.811708][T16458] Tainted: [L]=SOFTLOCKUP [ 1105.811720][T16458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1105.811742][T16458] Call Trace: [ 1105.811752][T16458] [ 1105.811765][T16458] dump_stack_lvl+0x100/0x190 [ 1105.811811][T16458] should_fail_ex.cold+0x5/0xa [ 1105.811845][T16458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1105.811886][T16458] should_failslab+0xc2/0x120 [ 1105.811922][T16458] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1105.811971][T16458] ? __kernfs_new_node+0xd2/0xa10 [ 1105.812020][T16458] __kernfs_new_node+0xd2/0xa10 [ 1105.812065][T16458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1105.812102][T16458] ? __pfx___kernfs_new_node+0x10/0x10 [ 1105.812148][T16458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1105.812184][T16458] ? lock_acquire+0x1d1/0x380 [ 1105.812215][T16458] ? kernfs_root+0x23/0x2a0 [ 1105.812252][T16458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1105.812288][T16458] ? find_held_lock+0x2b/0x80 [ 1105.812330][T16458] ? kernfs_root+0xee/0x2a0 [ 1105.812366][T16458] ? kernfs_root+0xee/0x2a0 [ 1105.812400][T16458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1105.812447][T16458] kernfs_new_node+0x117/0x150 [ 1105.812495][T16458] __kernfs_create_file+0x53/0x350 [ 1105.812529][T16458] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1105.812579][T16458] sysfs_create_file_ns+0x145/0x1e0 [ 1105.812615][T16458] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 1105.812649][T16458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1105.812684][T16458] ? kernfs_create_link+0x1bd/0x240 [ 1105.812715][T16458] ? kernfs_put+0x3f/0x60 [ 1105.812751][T16458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1105.812787][T16458] ? sysfs_do_create_link_sd+0xbb/0x140 [ 1105.812830][T16458] br_sysfs_addif+0xe4/0x210 [ 1105.812874][T16458] br_add_if+0x82c/0x1c80 [ 1105.812911][T16458] ? security_capable+0x80/0x260 [ 1105.812959][T16458] add_del_if+0x114/0x160 [ 1105.812996][T16458] br_ioctl_stub+0x384/0x4d0 [ 1105.813034][T16458] ? __pfx_br_ioctl_stub+0x10/0x10 [ 1105.813081][T16458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1105.813117][T16458] ? do_vfs_ioctl+0x226/0x13e0 [ 1105.813164][T16458] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1105.813211][T16458] ? __pfx_br_ioctl_stub+0x10/0x10 [ 1105.813248][T16458] br_ioctl_call+0x53/0xa0 [ 1105.813290][T16458] sock_ioctl+0x616/0x6b0 [ 1105.813330][T16458] ? __pfx_sock_ioctl+0x10/0x10 [ 1105.813375][T16458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1105.813411][T16458] ? __fget_files+0x21f/0x3d0 [ 1105.813449][T16458] ? __pfx_sock_ioctl+0x10/0x10 [ 1105.813491][T16458] __x64_sys_ioctl+0x18e/0x210 [ 1105.813540][T16458] do_syscall_64+0x123/0x790 [ 1105.813585][T16458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.813616][T16458] RIP: 0033:0x7fc67519e159 [ 1105.813640][T16458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1105.813670][T16458] RSP: 002b:00007fc6760b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1105.813699][T16458] RAX: ffffffffffffffda RBX: 00007fc675425fa0 RCX: 00007fc67519e159 [ 1105.813720][T16458] RDX: 0000200000000000 RSI: 00000000000089a2 RDI: 0000000000000004 [ 1105.813739][T16458] RBP: 00007fc67523506b R08: 0000000000000000 R09: 0000000000000000 [ 1105.813759][T16458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1105.813778][T16458] R13: 00007fc675426038 R14: 00007fc675425fa0 R15: 00007ffd718bc9e8 [ 1105.813817][T16458] [ 1106.510296][T16458] syz_tun: left allmulticast mode [ 1108.833445][ T5347] kworker/1:3 (5347) used greatest stack depth: 19528 bytes left [ 1108.999957][T16473] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 1108.999981][T16473] binder: 16471:16473 ioctl 4018620d 0 returned -1 [ 1109.105568][T16473] binder: 16471:16473 ioctl c0306201 200000000040 returned -22 [ 1109.133791][T16473] binder: 16471:16473 ioctl c0306201 200000000640 returned -22 [ 1109.652372][T16481] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3119'. [ 1110.029370][T16255] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.667353][T16499] input: syz1 as /devices/virtual/input/input245 [ 1110.738706][T16499] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3124'. [ 1110.993985][T12523] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1111.142675][T12523] usb 10-1: Using ep0 maxpacket: 32 [ 1111.145607][T12523] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1111.148443][T12523] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 1111.148474][T12523] usb 10-1: config 0 has no interface number 0 [ 1111.148539][T12523] usb 10-1: config 0 interface 184 has no altsetting 0 [ 1111.226492][T12523] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.226553][T12523] usb 10-1: Product: syz [ 1111.226574][T12523] usb 10-1: Manufacturer: syz [ 1111.226601][T12523] usb 10-1: SerialNumber: syz [ 1111.263385][T12523] usb 10-1: config 0 descriptor?? [ 1111.322787][T16508] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1112.480215][T12523] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1112.698090][T12523] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1112.698132][T12523] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1112.698160][T12523] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1112.698187][T12523] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1112.698390][T12523] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -32 [ 1112.796590][T12523] usb 10-1: USB disconnect, device number 6 [ 1113.276948][T16255] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.545647][T16529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3129'. [ 1114.187051][T16547] loop5: detected capacity change from 0 to 512 [ 1114.320201][T16547] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1114.320329][T16547] ext4 filesystem being mounted at /538/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1114.373638][ T5737] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1114.409548][T16255] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.523416][ T5737] usb 10-1: Using ep0 maxpacket: 16 [ 1114.524190][ T5737] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1114.527190][ T5737] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1114.567184][ T5737] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.567217][ T5737] usb 10-1: Product: syz [ 1114.567239][ T5737] usb 10-1: Manufacturer: syz [ 1114.567260][ T5737] usb 10-1: SerialNumber: syz [ 1114.608934][ T5737] usb 10-1: config 0 descriptor?? [ 1114.694744][ T5737] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1114.694792][ T5737] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 1115.156337][T16255] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.218348][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.218410][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.218955][ T1305] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 1115.339726][ T5737] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1115.816753][ T5621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1116.207423][T16574] loop4: detected capacity change from 0 to 164 [ 1116.255773][ T5737] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1116.255811][ T5737] em28xx 10-1:0.0: board has no eeprom [ 1116.347831][ T5737] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1116.347866][ T5737] em28xx 10-1:0.0: dvb set to bulk mode. [ 1116.348796][T15624] em28xx 10-1:0.0: Binding DVB extension [ 1116.415734][ T5737] usb 10-1: USB disconnect, device number 7 [ 1116.434470][ T5737] em28xx 10-1:0.0: Disconnecting em28xx [ 1116.462959][T16579] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 1116.462984][T16579] binder: 16577:16579 ioctl 4018620d 200000000100 returned -1 [ 1116.563668][T16574] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 1116.920419][T15624] em28xx 10-1:0.0: Registering input extension [ 1116.935625][ T5737] em28xx 10-1:0.0: Closing input extension [ 1117.366133][T16588] FAULT_INJECTION: forcing a failure. [ 1117.366133][T16588] name failslab, interval 1, probability 0, space 0, times 0 [ 1117.366179][T16588] CPU: 0 UID: 0 PID: 16588 Comm: syz.8.3144 Tainted: G L syzkaller #0 PREEMPT(full) [ 1117.366221][T16588] Tainted: [L]=SOFTLOCKUP [ 1117.366233][T16588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1117.366251][T16588] Call Trace: [ 1117.366263][T16588] [ 1117.366275][T16588] dump_stack_lvl+0x100/0x190 [ 1117.366322][T16588] should_fail_ex.cold+0x5/0xa [ 1117.366356][T16588] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.366398][T16588] should_failslab+0xc2/0x120 [ 1117.366434][T16588] __kmalloc_cache_noprof+0x91/0x6d0 [ 1117.366475][T16588] ? _raw_spin_unlock_irq+0x23/0x50 [ 1117.366511][T16588] ? snd_seq_fifo_new+0x42/0x270 [ 1117.366557][T16588] ? __pfx_snd_seq_open+0x10/0x10 [ 1117.366605][T16588] snd_seq_fifo_new+0x42/0x270 [ 1117.366645][T16588] snd_seq_open+0x144/0x530 [ 1117.366694][T16588] ? __pfx_snd_seq_open+0x10/0x10 [ 1117.366740][T16588] snd_open+0x201/0x450 [ 1117.366773][T16588] ? __pfx_snd_open+0x10/0x10 [ 1117.366802][T16588] chrdev_open+0x234/0x6a0 [ 1117.366834][T16588] ? __pfx_apparmor_file_open+0x10/0x10 [ 1117.366869][T16588] ? __pfx_chrdev_open+0x10/0x10 [ 1117.366903][T16588] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.366940][T16588] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1117.366990][T16588] do_dentry_open+0x6ab/0x14d0 [ 1117.367042][T16588] ? __pfx_chrdev_open+0x10/0x10 [ 1117.367083][T16588] vfs_open+0x82/0x3f0 [ 1117.367116][T16588] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.367159][T16588] path_openat+0x19fa/0x2440 [ 1117.367199][T16588] ? __pfx_path_openat+0x10/0x10 [ 1117.367244][T16588] do_file_open+0x20e/0x430 [ 1117.367281][T16588] ? __pfx_do_file_open+0x10/0x10 [ 1117.367341][T16588] ? _raw_spin_unlock+0x28/0x50 [ 1117.367371][T16588] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.367407][T16588] ? alloc_fd+0x471/0x7a0 [ 1117.367452][T16588] do_sys_openat2+0x10f/0x1e0 [ 1117.367490][T16588] ? __pfx_do_sys_openat2+0x10/0x10 [ 1117.367542][T16588] __x64_sys_openat+0x12d/0x210 [ 1117.367582][T16588] ? __pfx___x64_sys_openat+0x10/0x10 [ 1117.367628][T16588] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.367671][T16588] do_syscall_64+0x123/0x790 [ 1117.367712][T16588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.367744][T16588] RIP: 0033:0x7fd2b3d9e159 [ 1117.367768][T16588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.367798][T16588] RSP: 002b:00007fd2b4cc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1117.367827][T16588] RAX: ffffffffffffffda RBX: 00007fd2b4025fa0 RCX: 00007fd2b3d9e159 [ 1117.367848][T16588] RDX: 0000000000042202 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1117.367868][T16588] RBP: 00007fd2b3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1117.367888][T16588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1117.367907][T16588] R13: 00007fd2b4026038 R14: 00007fd2b4025fa0 R15: 00007ffd89d8b528 [ 1117.367947][T16588] [ 1117.815151][T16590] loop5: detected capacity change from 0 to 512 [ 1117.881632][T16590] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1117.881658][T16590] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1117.881736][T16590] System zones: 0-1, 15-15, 18-18, 34-34 [ 1117.881996][T16590] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1117.882064][T16590] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 1117.882137][T16590] EXT4-fs warning (device loop5): ext4_enable_quotas:7300: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1117.882172][T16590] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1118.012156][T16590] EXT4-fs (loop5): 1 truncate cleaned up [ 1118.031291][ T5737] em28xx: Freeing device [ 1118.078646][T16590] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1118.204548][T16590] fscrypt (loop5, inode 16): Error -61 getting encryption context [ 1118.227436][T16255] bridge_slave_1: left allmulticast mode [ 1118.227464][T16255] bridge_slave_1: left promiscuous mode [ 1118.227669][T16255] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.317668][T16255] bridge_slave_0: left allmulticast mode [ 1118.317703][T16255] bridge_slave_0: left promiscuous mode [ 1118.347250][T16255] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.643664][ T5621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1122.253101][T12525] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1122.405432][T12525] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1122.409840][T12525] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.409892][T12525] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.450253][T12525] usb 8-1: config 0 descriptor?? [ 1122.478851][T12525] pwc: Askey VC010 type 2 USB webcam detected. [ 1122.530738][T16617] FAULT_INJECTION: forcing a failure. [ 1122.530738][T16617] name failslab, interval 1, probability 0, space 0, times 0 [ 1122.530782][T16617] CPU: 0 UID: 0 PID: 16617 Comm: syz.8.3153 Tainted: G L syzkaller #0 PREEMPT(full) [ 1122.530824][T16617] Tainted: [L]=SOFTLOCKUP [ 1122.530836][T16617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1122.530857][T16617] Call Trace: [ 1122.530868][T16617] [ 1122.530880][T16617] dump_stack_lvl+0x100/0x190 [ 1122.530926][T16617] should_fail_ex.cold+0x5/0xa [ 1122.530959][T16617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1122.531004][T16617] should_failslab+0xc2/0x120 [ 1122.531039][T16617] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1122.531089][T16617] ? mempool_init_node+0x2f7/0x6f0 [ 1122.531134][T16617] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 1122.531178][T16617] mempool_init_node+0x2f7/0x6f0 [ 1122.531228][T16617] ? __pfx_mempool_free_slab+0x10/0x10 [ 1122.531269][T16617] mempool_create_node_noprof+0xe9/0x1b0 [ 1122.531314][T16617] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 1122.531360][T16617] ceph_osdc_init+0x48b/0xa00 [ 1122.531414][T16617] ceph_create_client+0x281/0x370 [ 1122.531462][T16617] ceph_get_tree+0x1a4/0x1fd0 [ 1122.531502][T16617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1122.531538][T16617] ? security_capable+0x80/0x260 [ 1122.531585][T16617] vfs_get_tree+0x92/0x320 [ 1122.531630][T16617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1122.531668][T16617] vfs_cmd_create+0xd7/0x2a0 [ 1122.531716][T16617] __do_sys_fsconfig+0x55a/0xcb0 [ 1122.531765][T16617] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1122.531812][T16617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1122.531858][T16617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1122.531900][T16617] do_syscall_64+0x123/0x790 [ 1122.531941][T16617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.531972][T16617] RIP: 0033:0x7fd2b3d9e159 [ 1122.531996][T16617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1122.532027][T16617] RSP: 002b:00007fd2b4cc6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1122.532056][T16617] RAX: ffffffffffffffda RBX: 00007fd2b4025fa0 RCX: 00007fd2b3d9e159 [ 1122.532077][T16617] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1122.532095][T16617] RBP: 00007fd2b3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1122.532114][T16617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1122.532132][T16617] R13: 00007fd2b4026038 R14: 00007fd2b4025fa0 R15: 00007ffd89d8b528 [ 1122.532172][T16617] [ 1124.899878][ T5737] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 1125.092922][ T5737] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1125.092970][ T5737] usb 10-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 1125.093314][T12525] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1125.099816][T12525] pwc: recv_control_msg error -71 req 02 val 2700 [ 1125.100083][ T5737] usb 10-1: config 142 has an invalid interface number: 251 but max is 0 [ 1125.100114][ T5737] usb 10-1: config 142 descriptor has 1 excess byte, ignoring [ 1125.100140][ T5737] usb 10-1: config 142 has no interface number 0 [ 1125.100230][ T5737] usb 10-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1125.100266][ T5737] usb 10-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 1125.100299][ T5737] usb 10-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 1125.100331][ T5737] usb 10-1: config 142 interface 251 has no altsetting 0 [ 1125.100803][T12525] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1125.135759][T12525] pwc: recv_control_msg error -71 req 04 val 1000 [ 1125.154427][T12525] pwc: recv_control_msg error -71 req 04 val 1300 [ 1125.164142][T12525] pwc: recv_control_msg error -71 req 04 val 1400 [ 1125.199072][T12525] pwc: recv_control_msg error -71 req 02 val 2000 [ 1125.239017][T12525] pwc: recv_control_msg error -71 req 02 val 2100 [ 1125.247344][ T5737] usb 10-1: string descriptor 0 read error: -22 [ 1125.247458][ T5737] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.249963][T12525] pwc: recv_control_msg error -71 req 04 val 1500 [ 1125.290794][T12525] pwc: recv_control_msg error -71 req 02 val 2500 [ 1125.305930][T12525] pwc: recv_control_msg error -71 req 02 val 2400 [ 1125.317162][T12525] pwc: recv_control_msg error -71 req 02 val 2600 [ 1125.321998][T12525] pwc: recv_control_msg error -71 req 02 val 2900 [ 1125.341958][T12525] pwc: recv_control_msg error -71 req 02 val 2800 [ 1125.354266][T12525] pwc: recv_control_msg error -71 req 04 val 1100 [ 1125.355287][T12525] pwc: recv_control_msg error -71 req 04 val 1200 [ 1125.376894][T16624] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1125.377032][T16624] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1125.381582][T12525] pwc: Registered as video103. [ 1125.394972][ T5737] cypress_m8 10-1:142.251: HID->COM RS232 Adapter converter detected [ 1125.434911][T12525] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input247 [ 1125.487622][ T5737] usb 10-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 1125.526972][T12525] usb 8-1: USB disconnect, device number 10 [ 1125.858754][T16632] input: syz1 as /devices/virtual/input/input248 [ 1125.893441][ T5737] usb 10-1: USB disconnect, device number 8 [ 1125.949391][T16632] netlink: 168 bytes leftover after parsing attributes in process `syz.8.3157'. [ 1125.965105][ T5737] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 1126.000856][ T5737] cypress_m8 10-1:142.251: device disconnected [ 1126.588823][T16650] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1127.275196][T16255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1127.488953][T16255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1127.526843][T16255] bond0 (unregistering): Released all slaves [ 1128.498354][T15624] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1128.674773][T15624] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1128.675921][T15624] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1128.678504][T15624] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1128.726926][T15624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.726962][T15624] usb 6-1: Product: syz [ 1128.726983][T15624] usb 6-1: Manufacturer: syz [ 1128.727004][T15624] usb 6-1: SerialNumber: syz [ 1128.815005][T15624] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 1128.855788][T15624] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1128.914672][T15624] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1129.256469][T16686] FAULT_INJECTION: forcing a failure. [ 1129.256469][T16686] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1129.256547][T16686] CPU: 0 UID: 0 PID: 16686 Comm: syz.3.3167 Tainted: G L syzkaller #0 PREEMPT(full) [ 1129.256589][T16686] Tainted: [L]=SOFTLOCKUP [ 1129.256605][T16686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1129.256624][T16686] Call Trace: [ 1129.256635][T16686] [ 1129.256647][T16686] dump_stack_lvl+0x100/0x190 [ 1129.256695][T16686] should_fail_ex.cold+0x5/0xa [ 1129.256730][T16686] ? prepare_alloc_pages+0x16d/0x5b0 [ 1129.256767][T16686] should_fail_alloc_page+0xeb/0x140 [ 1129.256804][T16686] prepare_alloc_pages+0x1f0/0x5b0 [ 1129.256851][T16686] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1129.256900][T16686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1129.256937][T16686] ? stack_trace_save+0x8e/0xc0 [ 1129.256986][T16686] ? __pfx_stack_trace_save+0x10/0x10 [ 1129.257035][T16686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1129.257071][T16686] ? stack_depot_save_flags+0x27/0x9f0 [ 1129.257102][T16686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1129.257138][T16686] ? __lock_acquire+0x5c0/0x1f40 [ 1129.257172][T16686] ? tomoyo_path_number_perm+0x46d/0x580 [ 1129.257224][T16686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1129.257260][T16686] ? kasan_save_stack+0x3f/0x50 [ 1129.257288][T16686] ? kasan_save_stack+0x30/0x50 [ 1129.257316][T16686] ? kasan_save_track+0x14/0x30 [ 1129.257346][T16686] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1129.257391][T16686] ? tomoyo_path_number_perm+0x46d/0x580 [ 1129.257443][T16686] ? register_lock_class+0x3f/0x7b0 [ 1129.257486][T16686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1129.257523][T16686] ? __lock_acquire+0x5c0/0x1f40 [ 1129.257557][T16686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1129.257593][T16686] ? look_up_lock_class+0x64/0x120 [ 1129.257649][T16686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1129.257685][T16686] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1129.257723][T16686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1129.257759][T16686] ? policy_nodemask+0xed/0x4f0 [ 1129.257798][T16686] alloc_pages_mpol+0x201/0x550 [ 1129.257836][T16686] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1129.257870][T16686] ? lock_acquire+0x1d1/0x380 [ 1129.257901][T16686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1129.257937][T16686] ? do_raw_spin_lock+0x128/0x260 [ 1129.257974][T16686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1129.258010][T16686] ? find_held_lock+0x2b/0x80 [ 1129.258059][T16686] ___kmalloc_large_node+0xe8/0x130 [ 1129.258094][T16686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1129.258134][T16686] __kmalloc_large_noprof+0x1c/0x70 [ 1129.258169][T16686] ? get_task_mm+0xc7/0xf0 [ 1129.258220][T16686] vhost_dev_set_owner+0x2b6/0xa30 [ 1129.258271][T16686] vhost_net_ioctl+0xfa6/0x1910 [ 1129.258307][T16686] ? do_vfs_ioctl+0x226/0x13e0 [ 1129.258353][T16686] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1129.258400][T16686] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 1129.258443][T16686] ? __fget_files+0x34/0x3d0 [ 1129.258475][T16686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1129.258512][T16686] ? find_held_lock+0x2b/0x80 [ 1129.258553][T16686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1129.258589][T16686] ? hook_file_ioctl_common+0x140/0x440 [ 1129.258634][T16686] ? __fget_files+0x21f/0x3d0 [ 1129.258672][T16686] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 1129.258713][T16686] __x64_sys_ioctl+0x18e/0x210 [ 1129.258762][T16686] do_syscall_64+0x123/0x790 [ 1129.258803][T16686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.258834][T16686] RIP: 0033:0x7fc67519e159 [ 1129.258858][T16686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1129.258888][T16686] RSP: 002b:00007fc6760b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1129.258918][T16686] RAX: ffffffffffffffda RBX: 00007fc675425fa0 RCX: 00007fc67519e159 [ 1129.258938][T16686] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000004 [ 1129.258957][T16686] RBP: 00007fc67523506b R08: 0000000000000000 R09: 0000000000000000 [ 1129.258977][T16686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1129.258995][T16686] R13: 00007fc675426038 R14: 00007fc675425fa0 R15: 00007ffd718bc9e8 [ 1129.259035][T16686] [ 1129.494561][T16687] binder: 16685:16687 ioctl c0306201 200000000080 returned -14 [ 1129.868776][T16687] binder_alloc: 16685: binder_alloc_buf, no vma [ 1130.240367][T16691] FAULT_INJECTION: forcing a failure. [ 1130.240367][T16691] name failslab, interval 1, probability 0, space 0, times 0 [ 1130.240441][T16691] CPU: 0 UID: 0 PID: 16691 Comm: syz.8.3169 Tainted: G L syzkaller #0 PREEMPT(full) [ 1130.240484][T16691] Tainted: [L]=SOFTLOCKUP [ 1130.240496][T16691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1130.240517][T16691] Call Trace: [ 1130.240528][T16691] [ 1130.240540][T16691] dump_stack_lvl+0x100/0x190 [ 1130.240590][T16691] should_fail_ex.cold+0x5/0xa [ 1130.240623][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1130.240665][T16691] should_failslab+0xc2/0x120 [ 1130.240700][T16691] __kmalloc_noprof+0xfc/0x840 [ 1130.240746][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1130.240781][T16691] ? rcu_is_watching+0x13/0xc0 [ 1130.240821][T16691] ? io_cache_alloc_new+0x45/0xe0 [ 1130.240863][T16691] io_cache_alloc_new+0x45/0xe0 [ 1130.240899][T16691] io_uring_alloc_async_data+0x17e/0x300 [ 1130.240935][T16691] io_send_zc_prep+0x49b/0xa60 [ 1130.240975][T16691] io_submit_sqes+0xa03/0x2480 [ 1130.241039][T16691] __do_sys_io_uring_enter+0xa88/0x1b10 [ 1130.241088][T16691] ? irqentry_exit+0x24d/0xa10 [ 1130.241125][T16691] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1130.241171][T16691] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1130.241228][T16691] ? exit_to_user_mode_loop+0x166/0x700 [ 1130.241264][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1130.241299][T16691] ? rcu_is_watching+0x13/0xc0 [ 1130.241339][T16691] ? trace_hardirqs_off+0x70/0x170 [ 1130.241380][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1130.241415][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1130.241457][T16691] do_syscall_64+0x123/0x790 [ 1130.241497][T16691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.241528][T16691] RIP: 0033:0x7fd2b3d9e159 [ 1130.241552][T16691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1130.241588][T16691] RSP: 002b:00007fd2b4cc5f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1130.241617][T16691] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd2b3d9e159 [ 1130.241637][T16691] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000006 [ 1130.241656][T16691] RBP: 0000000000000075 R08: 0000000000000000 R09: 0000000000000008 [ 1130.241675][T16691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000400 [ 1130.241694][T16691] R13: 0000200000000408 R14: 00000000000003f7 R15: 0000000000000000 [ 1130.241733][T16691] [ 1130.982153][T16255] hsr_slave_0: left promiscuous mode [ 1130.998313][T16255] hsr_slave_1: left promiscuous mode [ 1131.002298][T16255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1131.047112][T16255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1131.168065][T16255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1131.168093][T16255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1131.476670][T16255] veth1_macvtap: left promiscuous mode [ 1131.476713][T16255] veth0_macvtap: left promiscuous mode [ 1131.476832][T16255] veth1_vlan: left promiscuous mode [ 1131.476899][T16255] veth0_vlan: left promiscuous mode [ 1131.616266][T16677] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110 [ 1131.644138][T12523] usb 6-1: USB disconnect, device number 45 [ 1131.735086][T12523] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1131.796582][T12523] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1131.797442][T12523] ti_usb_3410_5052 6-1:2.0: device disconnected [ 1133.333850][T15624] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1133.487266][T15624] usb 4-1: Using ep0 maxpacket: 32 [ 1133.491753][T15624] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1133.512818][T15624] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1133.512859][T15624] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1133.520790][T15624] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1133.520823][T15624] usb 4-1: Product: syz [ 1133.520844][T15624] usb 4-1: Manufacturer: syz [ 1133.594471][T15624] hub 4-1:4.0: USB hub found [ 1133.734312][T16728] loop5: detected capacity change from 0 to 32768 [ 1133.767727][T16728] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3178 (16728) [ 1133.837063][T15624] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 1133.839034][T16728] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1133.839071][T16728] BTRFS info (device loop5): using crc32c checksum algorithm [ 1134.052459][T16728] BTRFS info (device loop5): enabling ssd optimizations [ 1134.052492][T16728] BTRFS info (device loop5): turning on flush-on-commit [ 1134.052543][T16728] BTRFS info (device loop5): enabling free space tree [ 1134.075485][T16728] BTRFS info (device loop5): enabling auto defrag [ 1134.075537][T16728] BTRFS info (device loop5): use lzo compression, level 1 [ 1134.075566][T16728] BTRFS info (device loop5): max_inline set to 4096 [ 1134.131506][T15624] usb 4-1: USB disconnect, device number 28 [ 1134.664499][T15624] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 1134.668023][ T31] audit: type=1800 audit(1790659997.439:83): pid=16728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3178" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 1134.827394][T15624] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1134.849900][T15624] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1134.849941][T15624] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.878337][T15624] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1134.878371][T15624] usb 4-1: Product: syz [ 1134.878405][T15624] usb 4-1: Manufacturer: syz [ 1134.938344][T15624] hub 4-1:4.0: USB hub found [ 1135.176795][T16255] team0 (unregistering): Port device team_slave_1 removed [ 1135.265566][T15624] hub 4-1:4.0: 1 port detected [ 1135.359505][T16255] team0 (unregistering): Port device team_slave_0 removed [ 1136.091414][ T5621] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1136.196935][T15624] hub 4-1:4.0: activate --> -90 [ 1136.668291][ T10] usb 4-1: USB disconnect, device number 29 [ 1139.192743][ T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1139.345725][ T10] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1139.348149][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1139.348182][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1139.350638][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.350668][ T10] usb 5-1: Product: syz [ 1139.350689][ T10] usb 5-1: Manufacturer: syz [ 1139.350710][ T10] usb 5-1: SerialNumber: syz [ 1139.701649][ T10] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 52 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 1140.051195][ T31] audit: type=1326 audit(1790660002.819:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16807 comm="syz.4.3193" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19179e159 code=0x7ffc0000 [ 1140.051289][ T31] audit: type=1326 audit(1790660002.819:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16807 comm="syz.4.3193" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19179e159 code=0x7ffc0000 [ 1140.123330][ T31] audit: type=1326 audit(1790660002.899:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16807 comm="syz.4.3193" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fe19179e159 code=0x7ffc0000 [ 1140.123418][ T31] audit: type=1326 audit(1790660002.899:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16807 comm="syz.4.3193" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19179e159 code=0x7ffc0000 [ 1140.123475][ T31] audit: type=1326 audit(1790660002.899:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16807 comm="syz.4.3193" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19179e159 code=0x7ffc0000 [ 1140.233973][ T31] audit: type=1326 audit(1790660003.009:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16807 comm="syz.4.3193" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe19179e159 code=0x7ffc0000 [ 1140.234040][ T31] audit: type=1326 audit(1790660003.009:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16807 comm="syz.4.3193" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19179e159 code=0x7ffc0000 [ 1140.234117][ T31] audit: type=1326 audit(1790660003.009:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16807 comm="syz.4.3193" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19179e159 code=0x7ffc0000 [ 1140.367656][ T31] audit: type=1326 audit(1790660003.139:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16807 comm="syz.4.3193" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fe19179e159 code=0x7ffc0000 [ 1140.367747][ T31] audit: type=1326 audit(1790660003.139:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16807 comm="syz.4.3193" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19179e159 code=0x7ffc0000 [ 1140.487269][ T5737] usb 5-1: USB disconnect, device number 52 [ 1140.513971][ T5737] usblp0: removed [ 1142.513829][ T5737] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1142.668442][ T5737] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1142.683618][ T5737] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.683896][ T5737] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1142.683928][ T5737] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1142.683959][ T5737] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1142.684008][ T5737] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.275221][T12523] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1143.290560][T12523] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1143.400280][T12523] hid-generic 0000:0000:0000.0040: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1143.461218][T16898] loop7: detected capacity change from 0 to 2048 [ 1143.501830][T16898] loop7: p2 p3 < > p4 < p5 > [ 1143.501859][T16898] loop7: partition table partially beyond EOD, truncated [ 1143.720339][T16898] loop7: p3 start 4225 is beyond EOD, truncated [ 1144.018559][T16903] fido_id[16903]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1144.098666][T16890] FAULT_INJECTION: forcing a failure. [ 1144.098666][T16890] name failslab, interval 1, probability 0, space 0, times 0 [ 1144.098710][T16890] CPU: 0 UID: 0 PID: 16890 Comm: syz.5.3216 Tainted: G L syzkaller #0 PREEMPT(full) [ 1144.098755][T16890] Tainted: [L]=SOFTLOCKUP [ 1144.098766][T16890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1144.098786][T16890] Call Trace: [ 1144.098797][T16890] [ 1144.098809][T16890] dump_stack_lvl+0x100/0x190 [ 1144.098854][T16890] should_fail_ex.cold+0x5/0xa [ 1144.098888][T16890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1144.098929][T16890] ? __pfx_rescuer_thread+0x10/0x10 [ 1144.098973][T16890] should_failslab+0xc2/0x120 [ 1144.099007][T16890] __kmalloc_cache_noprof+0x91/0x6d0 [ 1144.099049][T16890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1144.099086][T16890] ? __kthread_create_on_node+0xce/0x3f0 [ 1144.099128][T16890] ? __pfx_rescuer_thread+0x10/0x10 [ 1144.099171][T16890] __kthread_create_on_node+0xce/0x3f0 [ 1144.099207][T16890] ? vsnprintf+0x4c5/0x1300 [ 1144.099255][T16890] ? __pfx___kthread_create_on_node+0x10/0x10 [ 1144.099311][T16890] ? __pfx_rescuer_thread+0x10/0x10 [ 1144.099356][T16890] kthread_create_on_node+0xc7/0x100 [ 1144.099393][T16890] ? __pfx_kthread_create_on_node+0x10/0x10 [ 1144.099428][T16890] ? __pfx_scnprintf+0x10/0x10 [ 1144.099467][T16890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1144.099503][T16890] ? __kmalloc_cache_node_noprof+0x30c/0x720 [ 1144.099536][T16890] ? init_rescuer+0x19f/0x550 [ 1144.099583][T16890] init_rescuer+0x321/0x550 [ 1144.099627][T16890] ? __pfx_init_rescuer+0x10/0x10 [ 1144.099667][T16890] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1144.099722][T16890] __alloc_workqueue+0xe82/0x1950 [ 1144.099771][T16890] alloc_workqueue_noprof+0xc7/0x130 [ 1144.099809][T16890] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1144.099854][T16890] ? __pfx___debug_object_init+0x10/0x10 [ 1144.099912][T16890] nci_register_device+0x21e/0xb80 [ 1144.099944][T16890] ? __pfx_nci_register_device+0x10/0x10 [ 1144.099978][T16890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1144.100014][T16890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1144.100050][T16890] ? lockdep_init_map_type+0x5c/0x250 [ 1144.100085][T16890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1144.100126][T16890] virtual_ncidev_open+0x141/0x220 [ 1144.100161][T16890] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1144.100195][T16890] misc_open+0x26d/0x450 [ 1144.100235][T16890] ? __pfx_misc_open+0x10/0x10 [ 1144.100275][T16890] chrdev_open+0x234/0x6a0 [ 1144.100308][T16890] ? __pfx_chrdev_open+0x10/0x10 [ 1144.100343][T16890] ? write_comp_data+0x8/0xa0 [ 1144.100374][T16890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1144.100410][T16890] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1144.100460][T16890] do_dentry_open+0x6ab/0x14d0 [ 1144.100507][T16890] ? __pfx_chrdev_open+0x10/0x10 [ 1144.100541][T16890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1144.100583][T16890] vfs_open+0x82/0x3f0 [ 1144.100620][T16890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1144.100662][T16890] path_openat+0x19fa/0x2440 [ 1144.100701][T16890] ? __pfx_path_openat+0x10/0x10 [ 1144.100746][T16890] do_file_open+0x20e/0x430 [ 1144.100782][T16890] ? __pfx_do_file_open+0x10/0x10 [ 1144.100843][T16890] ? _raw_spin_unlock+0x28/0x50 [ 1144.100871][T16890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1144.100907][T16890] ? alloc_fd+0x471/0x7a0 [ 1144.100951][T16890] do_sys_openat2+0x10f/0x1e0 [ 1144.100989][T16890] ? __pfx_do_sys_openat2+0x10/0x10 [ 1144.101041][T16890] __x64_sys_openat+0x12d/0x210 [ 1144.101080][T16890] ? __pfx___x64_sys_openat+0x10/0x10 [ 1144.101125][T16890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1144.101168][T16890] do_syscall_64+0x123/0x790 [ 1144.101209][T16890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.101240][T16890] RIP: 0033:0x7f9868f9e159 [ 1144.101264][T16890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1144.101295][T16890] RSP: 002b:00007f9869eb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1144.101325][T16890] RAX: ffffffffffffffda RBX: 00007f9869225fa0 RCX: 00007f9868f9e159 [ 1144.101346][T16890] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 1144.101366][T16890] RBP: 00007f986903506b R08: 0000000000000000 R09: 0000000000000000 [ 1144.101385][T16890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1144.101404][T16890] R13: 00007f9869226038 R14: 00007f9869225fa0 R15: 00007ffe1278daa8 [ 1144.101444][T16890] [ 1144.275935][ T5737] gud 9-1:1.0: USB-1: Failed to add TV modes (ret=-5) [ 1144.275987][ T5737] gud 9-1:1.0: USB-1: Failed to add properties (ret=-5) [ 1144.276031][ T5737] gud 9-1:1.0: Failed to get connectors (error=-5) [ 1144.276061][ T5737] gud 9-1:1.0: probe with driver gud failed with error -5 [ 1144.679303][T16890] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -ENOMEM [ 1144.971051][ T5737] usb 9-1: USB disconnect, device number 2 [ 1145.909579][ T6716] udevd[6716]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 1145.946000][ T5871] udevd[5871]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 1146.091069][T16929] netlink: 'syz.5.3222': attribute type 1 has an invalid length. [ 1146.131608][T16927] loop7: detected capacity change from 0 to 128 [ 1146.183496][T16927] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1146.187662][T16927] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1146.277471][T16927] syz.7.3225 (pid 16927) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1146.677868][T16929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1146.750684][ C0] Unknown status report in ack skb [ 1147.008476][T16927] fscrypt (loop7, inode 12): Error allocating 'adiantum(xchacha12,aes)' transform: -4 [ 1147.249883][T13643] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1147.321879][T16934] bond1: (slave erspan1): making interface the new active one [ 1147.327219][T16934] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 1151.278425][T16971] syz.3.3230 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1151.278474][T16971] CPU: 0 UID: 0 PID: 16971 Comm: syz.3.3230 Tainted: G L syzkaller #0 PREEMPT(full) [ 1151.278520][T16971] Tainted: [L]=SOFTLOCKUP [ 1151.278532][T16971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1151.278556][T16971] Call Trace: [ 1151.278566][T16971] [ 1151.278579][T16971] dump_stack_lvl+0x100/0x190 [ 1151.278625][T16971] dump_header+0xfb/0x606 [ 1151.278661][T16971] oom_kill_process.cold+0xd/0x380 [ 1151.278699][T16971] out_of_memory+0x340/0x14f0 [ 1151.278742][T16971] ? __pfx_out_of_memory+0x10/0x10 [ 1151.278776][T16971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.278823][T16971] mem_cgroup_out_of_memory+0xc6/0x130 [ 1151.278872][T16971] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1151.278921][T16971] ? find_held_lock+0x2b/0x80 [ 1151.278970][T16971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.279006][T16971] ? do_raw_spin_unlock+0x145/0x1e0 [ 1151.279046][T16971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.279082][T16971] ? _raw_spin_unlock+0x28/0x50 [ 1151.279117][T16971] try_charge_memcg+0x783/0xf60 [ 1151.279166][T16971] ? __pfx_try_charge_memcg+0x10/0x10 [ 1151.279204][T16971] ? find_held_lock+0x2b/0x80 [ 1151.279260][T16971] ? rcu_read_unlock+0x17/0x60 [ 1151.279300][T16971] ? rcu_read_unlock+0x17/0x60 [ 1151.279341][T16971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.279377][T16971] ? find_held_lock+0x2b/0x80 [ 1151.279421][T16971] ? rcu_read_unlock+0x17/0x60 [ 1151.279460][T16971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.279504][T16971] charge_memcg+0x1ae/0x210 [ 1151.279551][T16971] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 1151.279602][T16971] swap_cache_alloc_folio+0x548/0xc50 [ 1151.279657][T16971] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 1151.279704][T16971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.279740][T16971] ? swap_cache_get_folio+0x28d/0x360 [ 1151.279787][T16971] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1151.279833][T16971] ? kasan_quarantine_put+0x104/0x240 [ 1151.279881][T16971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.279917][T16971] ? lockdep_hardirqs_on+0x7d/0x110 [ 1151.279953][T16971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.279995][T16971] swap_cache_read_folio+0x47/0x140 [ 1151.280046][T16971] swap_cluster_readahead+0x369/0x5d0 [ 1151.280102][T16971] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1151.280150][T16971] ? kfree+0x1e5/0x6d0 [ 1151.280193][T16971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.280230][T16971] ? lock_acquire+0x1d1/0x380 [ 1151.280261][T16971] ? swap_table_get+0x28/0x2c0 [ 1151.280314][T16971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.280352][T16971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.280393][T16971] swapin_readahead+0xf0/0x260 [ 1151.280441][T16971] ? __pfx_swapin_readahead+0x10/0x10 [ 1151.280487][T16971] ? __pfx_get_swap_device+0x10/0x10 [ 1151.280521][T16971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.280571][T16971] do_swap_page+0xf72/0x5580 [ 1151.280619][T16971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.280656][T16971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.280693][T16971] ? __sys_bpf+0x20a/0x4a30 [ 1151.280741][T16971] ? __pfx_do_swap_page+0x10/0x10 [ 1151.280777][T16971] ? lock_acquire+0x1d1/0x380 [ 1151.280808][T16971] ? __pte_offset_map+0x2f/0x310 [ 1151.280856][T16971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.280895][T16971] ? find_held_lock+0x2b/0x80 [ 1151.280943][T16971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.280980][T16971] ? rcu_is_watching+0x13/0xc0 [ 1151.281021][T16971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.281057][T16971] ? __pte_offset_map+0x179/0x310 [ 1151.281112][T16971] __handle_mm_fault+0x15bd/0x2f60 [ 1151.281157][T16971] ? lock_vma_under_rcu+0x11d/0x590 [ 1151.281196][T16971] ? __pfx___handle_mm_fault+0x10/0x10 [ 1151.281238][T16971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.281278][T16971] ? lock_vma_under_rcu+0x17c/0x590 [ 1151.281338][T16971] handle_mm_fault+0x363/0xa20 [ 1151.281385][T16971] do_user_addr_fault+0x59c/0x12f0 [ 1151.281435][T16971] exc_page_fault+0x6f/0xd0 [ 1151.281471][T16971] asm_exc_page_fault+0x26/0x30 [ 1151.281501][T16971] RIP: 0033:0x7fc67519e16b [ 1151.281526][T16971] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 [ 1151.281561][T16971] RSP: 002b:00007fc67604d028 EFLAGS: 00010217 [ 1151.281585][T16971] RAX: 000000000000000c RBX: 00007fc675426270 RCX: ffffffffffffffe8 [ 1151.281606][T16971] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 0000000000000000 [ 1151.281625][T16971] RBP: 00007fc67523506b R08: 0000000000000000 R09: 0000000000000000 [ 1151.281645][T16971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1151.281664][T16971] R13: 00007fc675426308 R14: 00007fc675426270 R15: 00007ffd718bc9e8 [ 1151.281704][T16971] [ 1151.281748][T16971] memory: usage 307200kB, limit 307200kB, failcnt 3159 [ 1151.281767][T16971] memory+swap: usage 313552kB, limit 9007199254740988kB, failcnt 0 [ 1151.281788][T16971] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 1151.281806][T16971] Memory cgroup stats for /syz3: [ 1151.282023][T16971] cache 4096 [ 1151.282036][T16971] rss 0 [ 1151.282047][T16971] rss_huge 0 [ 1151.282058][T16971] shmem 0 [ 1151.282069][T16971] mapped_file 0 [ 1151.282080][T16971] dirty 0 [ 1151.282091][T16971] writeback 0 [ 1151.282102][T16971] workingset_refault_anon 20 [ 1151.282115][T16971] workingset_refault_file 442 [ 1151.282128][T16971] swap 6504448 [ 1151.282139][T16971] swapcached 6594560 [ 1151.282151][T16971] pgpgin 348691 [ 1151.282162][T16971] pgpgout 350221 [ 1151.282173][T16971] pgfault 323738 [ 1151.282185][T16971] pgmajfault 26 [ 1151.282196][T16971] inactive_anon 0 [ 1151.282208][T16971] active_anon 8192 [ 1151.282219][T16971] inactive_file 0 [ 1151.282230][T16971] active_file 4096 [ 1151.282242][T16971] unevictable 0 [ 1151.282254][T16971] hierarchical_memory_limit 314572800 [ 1151.282267][T16971] hierarchical_memsw_limit 9223372036854771712 [ 1151.282282][T16971] total_cache 4096 [ 1151.282293][T16971] total_rss 0 [ 1151.282304][T16971] total_rss_huge 0 [ 1151.282316][T16971] total_shmem 0 [ 1151.282327][T16971] total_mapped_file 0 [ 1151.282339][T16971] total_dirty 0 [ 1151.282350][T16971] total_writeback 0 [ 1151.282362][T16971] total_workingset_refault_anon 20 [ 1151.282376][T16971] total_workingset_refault_file 442 [ 1151.282389][T16971] total_swap 6504448 [ 1151.282400][T16971] total_swapcached 6594560 [ 1151.282413][T16971] total_pgpgin 348691 [ 1151.282425][T16971] total_pgpgout 350221 [ 1151.282437][T16971] total_pgfault 323738 [ 1151.282449][T16971] total_pgmajfault 26 [ 1151.282460][T16971] total_inactive_anon 0 [ 1151.282473][T16971] total_active_anon 8192 [ 1151.282485][T16971] total_inactive_file 0 [ 1151.282497][T16971] total_active_file 4096 [ 1151.282530][T16971] total_unevictable 0 [ 1151.282546][T16971] anon_cost 0 [ 1151.282644][T16971] file_cost 0 [ 1151.282656][T16971] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3230,pid=16960,uid=0 [ 1151.285340][T16971] Memory cgroup out of memory: Killed process 16960 (syz.3.3230) total-vm:209296kB, anon-rss:1260kB, file-rss:29768kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 1152.588437][T16911] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 1154.251137][ T33] oom_reaper: reaped process 16960 (syz.3.3230), now anon-rss:0kB, file-rss:9392kB, shmem-rss:0kB [ 1157.233278][T17003] input: syz1 as /devices/virtual/input/input249 [ 1157.372498][T17003] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3241'. [ 1157.850425][T17003] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1159.405685][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 1161.092841][T17029] loop5: detected capacity change from 0 to 256 [ 1161.323187][T17032] loop7: detected capacity change from 0 to 512 [ 1161.324149][T17032] EXT4-fs: Ignoring removed i_version option [ 1161.367210][T17032] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1161.418361][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 1161.418384][ T31] audit: type=1800 audit(1790660024.189:95): pid=17029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3247" name="bus" dev="loop5" ino=1049763 res=0 errno=0 [ 1161.495072][T17032] EXT4-fs error (device loop7) in ext4_process_orphan:346: Corrupt filesystem [ 1161.495103][T17032] loop7: lost filesystem error report for type 5 error -117 [ 1161.502606][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1161.502632][ C0] EXT4-fs (loop7): initial error at time 1790660024: ext4_process_orphan:346 [ 1161.502664][ C0] EXT4-fs (loop7): last error at time 1790660024: ext4_process_orphan:346 [ 1161.589703][T17030] FAULT_INJECTION: forcing a failure. [ 1161.589703][T17030] name failslab, interval 1, probability 0, space 0, times 0 [ 1161.589748][T17030] CPU: 0 UID: 0 PID: 17030 Comm: syz.9.3249 Tainted: G L syzkaller #0 PREEMPT(full) [ 1161.589790][T17030] Tainted: [L]=SOFTLOCKUP [ 1161.589802][T17030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1161.589820][T17030] Call Trace: [ 1161.589831][T17030] [ 1161.589843][T17030] dump_stack_lvl+0x100/0x190 [ 1161.589889][T17030] should_fail_ex.cold+0x5/0xa [ 1161.589923][T17030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1161.589965][T17030] should_failslab+0xc2/0x120 [ 1161.589999][T17030] __kmalloc_noprof+0xfc/0x840 [ 1161.590044][T17030] ? rcu_is_watching+0x13/0xc0 [ 1161.590085][T17030] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1161.590131][T17030] tomoyo_realpath_from_path+0xb6/0x690 [ 1161.590176][T17030] tomoyo_path_number_perm+0x23c/0x580 [ 1161.590225][T17030] ? tomoyo_path_number_perm+0x22e/0x580 [ 1161.590277][T17030] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1161.590330][T17030] ? __pfx_futex_wait+0x10/0x10 [ 1161.590391][T17030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1161.590427][T17030] ? __lock_acquire+0x5c0/0x1f40 [ 1161.590476][T17030] ? __fget_files+0x34/0x3d0 [ 1161.590509][T17030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1161.590545][T17030] ? find_held_lock+0x2b/0x80 [ 1161.590591][T17030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1161.590627][T17030] ? hook_file_ioctl_common+0x140/0x440 [ 1161.590659][T17030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1161.590702][T17030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1161.590738][T17030] ? __fget_files+0x21f/0x3d0 [ 1161.590777][T17030] security_file_ioctl+0xd3/0x230 [ 1161.590828][T17030] __x64_sys_ioctl+0xb7/0x210 [ 1161.590878][T17030] do_syscall_64+0x123/0x790 [ 1161.590919][T17030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.590951][T17030] RIP: 0033:0x7fb74c99e159 [ 1161.590975][T17030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1161.591006][T17030] RSP: 002b:00007fb74d867028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1161.591035][T17030] RAX: ffffffffffffffda RBX: 00007fb74cc25fa0 RCX: 00007fb74c99e159 [ 1161.591056][T17030] RDX: 0000200000000980 RSI: 000000000000890b RDI: 0000000000000004 [ 1161.591076][T17030] RBP: 00007fb74ca3506b R08: 0000000000000000 R09: 0000000000000000 [ 1161.591095][T17030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1161.591114][T17030] R13: 00007fb74cc26038 R14: 00007fb74cc25fa0 R15: 00007ffc31129898 [ 1161.591154][T17030] [ 1161.690491][T17030] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1161.724447][T17032] EXT4-fs (loop7): 2 truncates cleaned up [ 1161.842266][T17032] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1162.071983][T17032] EXT4-fs error (device loop7): ext4_get_parent:1833: inode #11: comm syz.7.3250: bad parent inode number: 3 [ 1162.975636][T13643] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1164.017773][T17053] input: syz0 as /devices/virtual/input/input250 [ 1165.840299][T17068] syzkaller1: entered promiscuous mode [ 1165.840327][T17068] syzkaller1: entered allmulticast mode [ 1166.148858][T17083] loop4: detected capacity change from 0 to 64 [ 1167.379449][T17100] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3268'. [ 1168.140380][ T31] audit: type=1800 audit(1790660030.909:96): pid=17105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3269" name="file1" dev="sda1" ino=2061 res=0 errno=0 [ 1168.281731][T17110] FAULT_INJECTION: forcing a failure. [ 1168.281731][T17110] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.281775][T17110] CPU: 0 UID: 0 PID: 17110 Comm: syz.9.3271 Tainted: G L syzkaller #0 PREEMPT(full) [ 1168.281817][T17110] Tainted: [L]=SOFTLOCKUP [ 1168.281829][T17110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1168.281847][T17110] Call Trace: [ 1168.281858][T17110] [ 1168.281870][T17110] dump_stack_lvl+0x100/0x190 [ 1168.281917][T17110] should_fail_ex.cold+0x5/0xa [ 1168.281951][T17110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.281993][T17110] should_failslab+0xc2/0x120 [ 1168.282028][T17110] __kmalloc_cache_noprof+0x91/0x6d0 [ 1168.282073][T17110] ? __request_region+0x5c/0xf0 [ 1168.282117][T17110] __request_region+0x5c/0xf0 [ 1168.282159][T17110] __comedi_check_request_region+0xfb/0x130 [ 1168.282202][T17110] das16m1_attach+0x104/0xc30 [ 1168.282247][T17110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.282289][T17110] comedi_device_attach+0x40e/0x6b0 [ 1168.282336][T17110] do_devconfig_ioctl+0x1b3/0x6d0 [ 1168.282385][T17110] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 1168.282447][T17110] ? kasan_quarantine_put+0x104/0x240 [ 1168.282495][T17110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.282542][T17110] ? lockdep_hardirqs_on+0x7d/0x110 [ 1168.282578][T17110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.282616][T17110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.282652][T17110] ? find_held_lock+0x2b/0x80 [ 1168.282702][T17110] comedi_unlocked_ioctl+0x860/0x3310 [ 1168.282735][T17110] ? tomoyo_path_number_perm+0x188/0x580 [ 1168.282790][T17110] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1168.282844][T17110] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1168.282883][T17110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.282920][T17110] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1168.282957][T17110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.282993][T17110] ? do_vfs_ioctl+0x226/0x13e0 [ 1168.283041][T17110] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1168.283095][T17110] ? __fget_files+0x34/0x3d0 [ 1168.283127][T17110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.283164][T17110] ? find_held_lock+0x2b/0x80 [ 1168.283206][T17110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.283242][T17110] ? hook_file_ioctl_common+0x140/0x440 [ 1168.283283][T17110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.283319][T17110] ? __fget_files+0x21f/0x3d0 [ 1168.283358][T17110] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1168.283392][T17110] __x64_sys_ioctl+0x18e/0x210 [ 1168.283442][T17110] do_syscall_64+0x123/0x790 [ 1168.283483][T17110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.283515][T17110] RIP: 0033:0x7fb74c99e159 [ 1168.283543][T17110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1168.283574][T17110] RSP: 002b:00007fb74d867028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1168.283605][T17110] RAX: ffffffffffffffda RBX: 00007fb74cc25fa0 RCX: 00007fb74c99e159 [ 1168.283626][T17110] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000005 [ 1168.283646][T17110] RBP: 00007fb74ca3506b R08: 0000000000000000 R09: 0000000000000000 [ 1168.283665][T17110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1168.283685][T17110] R13: 00007fb74cc26038 R14: 00007fb74cc25fa0 R15: 00007ffc31129898 [ 1168.283725][T17110] [ 1168.451562][T17110] comedi comedi2: das16m1: I/O port conflict (0x540,8) [ 1170.574929][T17143] loop5: detected capacity change from 0 to 1024 [ 1170.659382][T17146] ubi0: attaching mtd0 [ 1170.712699][T17143] hfsplus: failed to load catalog file [ 1171.117997][T12523] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1171.303028][T12523] usb 6-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 1.00 [ 1171.327621][T12523] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.327656][T12523] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1171.327710][T12523] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.577921][T17146] ubi0: scanning is finished [ 1171.577975][T17146] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1171.718109][T12523] usb 6-1: skipping empty audio interface (v1) [ 1172.099546][T12523] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1172.127687][T12523] usb 6-1: USB disconnect, device number 46 [ 1172.747250][T17146] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1173.401751][T17166] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3285'. [ 1173.854653][T17174] tipc: Started in network mode [ 1173.854689][T17174] tipc: Node identity 66a9d6dbe7ed, cluster identity 4711 [ 1173.854924][T17174] tipc: Enabled bearer , priority 0 [ 1174.354635][T17174] syzkaller0: entered promiscuous mode [ 1174.354664][T17174] syzkaller0: entered allmulticast mode [ 1174.379414][T17174] tipc: Resetting bearer [ 1174.641921][T17173] tipc: Resetting bearer [ 1175.150764][T17202] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1176.354850][T17216] FAULT_INJECTION: forcing a failure. [ 1176.354850][T17216] name failslab, interval 1, probability 0, space 0, times 0 [ 1176.354893][T17216] CPU: 0 UID: 0 PID: 17216 Comm: syz.5.3296 Tainted: G L syzkaller #0 PREEMPT(full) [ 1176.354935][T17216] Tainted: [L]=SOFTLOCKUP [ 1176.354946][T17216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1176.354965][T17216] Call Trace: [ 1176.354975][T17216] [ 1176.354987][T17216] dump_stack_lvl+0x100/0x190 [ 1176.355033][T17216] should_fail_ex.cold+0x5/0xa [ 1176.355067][T17216] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1176.355108][T17216] should_failslab+0xc2/0x120 [ 1176.355142][T17216] __kmalloc_cache_noprof+0x91/0x6d0 [ 1176.355183][T17216] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1176.355219][T17216] ? __lock_acquire+0x5c0/0x1f40 [ 1176.355250][T17216] ? snd_timer_instance_new+0x47/0x350 [ 1176.355290][T17216] snd_timer_instance_new+0x47/0x350 [ 1176.355324][T17216] snd_seq_timer_open+0x1d4/0x5c0 [ 1176.355371][T17216] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 1176.355416][T17216] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1176.355457][T17216] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1176.355498][T17216] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1176.355538][T17216] ? mark_held_locks+0x40/0x70 [ 1176.355575][T17216] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1176.355613][T17216] queue_use+0xdc/0x1f0 [ 1176.355649][T17216] snd_seq_queue_alloc+0x2e5/0x540 [ 1176.355693][T17216] snd_seq_ioctl_create_queue+0xa9/0x370 [ 1176.355743][T17216] snd_seq_ioctl+0x219/0x410 [ 1176.355790][T17216] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 1176.355856][T17216] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1176.355892][T17216] ? __fget_files+0x21f/0x3d0 [ 1176.355930][T17216] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 1176.355978][T17216] __x64_sys_ioctl+0x18e/0x210 [ 1176.356027][T17216] do_syscall_64+0x123/0x790 [ 1176.356067][T17216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.356099][T17216] RIP: 0033:0x7f9868f9e159 [ 1176.356122][T17216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1176.356153][T17216] RSP: 002b:00007f9869eb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1176.356181][T17216] RAX: ffffffffffffffda RBX: 00007f9869225fa0 RCX: 00007f9868f9e159 [ 1176.356202][T17216] RDX: 0000200000000380 RSI: 00000000c08c5332 RDI: 0000000000000004 [ 1176.356221][T17216] RBP: 00007f986903506b R08: 0000000000000000 R09: 0000000000000000 [ 1176.356241][T17216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1176.356259][T17216] R13: 00007f9869226038 R14: 00007f9869225fa0 R15: 00007ffe1278daa8 [ 1176.356299][T17216] [ 1176.627213][T17218] binder: 17215:17218 ioctl c0306201 200000000640 returned -22 [ 1176.662966][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.663025][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.663447][ T1305] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 1177.423434][T17223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3299'. [ 1177.507219][T17225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3299'. [ 1178.739469][T12920] Bluetooth: hci4: command 0x0406 tx timeout [ 1181.720833][T12920] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1181.748409][T12920] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1181.760489][T12920] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1181.761369][T12920] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1181.781182][T12920] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1182.126661][T17232] loop5: detected capacity change from 0 to 32768 [ 1183.855548][ T5630] Bluetooth: hci6: command tx timeout [ 1184.807361][T17173] tipc: Disabling bearer [ 1184.811714][ T10] tipc: Node number set to 2168772315 [ 1184.871887][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1185.323607][T17254] input: syz1 as /devices/virtual/input/input251 [ 1185.432408][T17254] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3306'. [ 1185.935865][ T5630] Bluetooth: hci6: command tx timeout [ 1186.049461][T17254] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1187.027582][T16262] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.147589][T17291] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1187.147768][T17291] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1188.014324][ T5630] Bluetooth: hci6: command tx timeout [ 1188.627390][T16262] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.133037][T16262] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.210159][ T5276] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1189.253673][T17313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.254728][T17313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.066635][T16262] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.092727][ T5630] Bluetooth: hci6: command tx timeout [ 1190.190951][T17323] syzkaller1: entered promiscuous mode [ 1190.190978][T17323] syzkaller1: entered allmulticast mode [ 1191.827841][T17363] input: syz1 as /devices/virtual/input/input252 [ 1191.901656][T17363] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3328'. [ 1192.490308][T17370] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1192.880045][T17380] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3330'. [ 1193.210997][T17384] input: syz0 as /devices/virtual/input/input253 [ 1196.418325][T16262] bridge_slave_1: left allmulticast mode [ 1196.418359][T16262] bridge_slave_1: left promiscuous mode [ 1196.418571][T16262] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.460006][T16262] bridge_slave_0: left allmulticast mode [ 1196.460037][T16262] bridge_slave_0: left promiscuous mode [ 1196.482239][T16262] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.646464][T17410] input: syz1 as /devices/virtual/input/input254 [ 1196.754328][T17410] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3338'. [ 1197.142126][T17414] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1197.282288][T17421] input: syz1 as /devices/virtual/input/input255 [ 1197.327699][T17421] netlink: 168 bytes leftover after parsing attributes in process `syz.7.3341'. [ 1197.730308][T17428] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1197.915083][T16262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1197.939492][T16262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1197.957125][T16262] bond0 (unregistering): Released all slaves [ 1198.072202][ T5276] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1198.327554][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a68fc00: rx timeout, send abort [ 1198.333046][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a68fc00: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 1198.361887][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805335ac00: rx timeout, send abort [ 1198.362182][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805335ac00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1198.529994][T17438] input: syz1 as /devices/virtual/input/input256 [ 1198.587867][T17438] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3344'. [ 1199.021283][T17448] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1199.101062][T17233] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.101156][T17233] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.101276][T17233] bridge_slave_0: entered allmulticast mode [ 1199.148501][T17233] bridge_slave_0: entered promiscuous mode [ 1199.429297][T17233] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.429410][T17233] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.429575][T17233] bridge_slave_1: entered allmulticast mode [ 1199.480925][T17233] bridge_slave_1: entered promiscuous mode [ 1200.372691][ T1214] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1200.524364][ T1214] usb 4-1: Using ep0 maxpacket: 8 [ 1200.529746][ T1214] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1200.557137][ T1214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.557171][ T1214] usb 4-1: Product: syz [ 1200.557192][ T1214] usb 4-1: Manufacturer: syz [ 1200.557215][ T1214] usb 4-1: SerialNumber: syz [ 1200.608546][ T1214] usb 4-1: config 0 descriptor?? [ 1200.760337][T16262] hsr_slave_0: left promiscuous mode [ 1200.772846][T16262] hsr_slave_1: left promiscuous mode [ 1200.773853][T16262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1200.773877][T16262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1200.808421][T16262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1200.808470][T16262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1200.916942][ T1214] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1201.038809][T16262] veth1_macvtap: left promiscuous mode [ 1201.038882][T16262] veth0_macvtap: left promiscuous mode [ 1201.038983][T16262] veth1_vlan: left promiscuous mode [ 1201.039075][T16262] veth0_vlan: left promiscuous mode [ 1201.341057][T17468] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1201.356031][T17468] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1201.777213][ T1214] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1201.800727][ T1214] usb 4-1: USB disconnect, device number 30 [ 1202.393113][T17480] netlink: 'syz.9.3354': attribute type 2 has an invalid length. [ 1202.581352][T17486] netlink: 'syz.9.3354': attribute type 2 has an invalid length. [ 1202.581380][T17486] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3354'. [ 1203.027046][T17495] FAULT_INJECTION: forcing a failure. [ 1203.027046][T17495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1203.027092][T17495] CPU: 0 UID: 0 PID: 17495 Comm: syz.7.3358 Tainted: G L syzkaller #0 PREEMPT(full) [ 1203.027134][T17495] Tainted: [L]=SOFTLOCKUP [ 1203.027153][T17495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1203.027171][T17495] Call Trace: [ 1203.027182][T17495] [ 1203.027194][T17495] dump_stack_lvl+0x100/0x190 [ 1203.027240][T17495] should_fail_ex.cold+0x5/0xa [ 1203.027280][T17495] _copy_from_user+0x2e/0xd0 [ 1203.027324][T17495] do_ipt_set_ctl+0xa09/0xcf0 [ 1203.027363][T17495] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1203.027394][T17495] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1203.027429][T17495] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 1203.027467][T17495] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.027503][T17495] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1203.027544][T17495] ? sockopt_release_sock+0x5c/0x70 [ 1203.027583][T17495] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1203.027636][T17495] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.027672][T17495] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1203.027707][T17495] nf_setsockopt+0x8d/0xf0 [ 1203.027741][T17495] ip_setsockopt+0xcb/0xf0 [ 1203.027784][T17495] udp_setsockopt+0x64/0xb0 [ 1203.027817][T17495] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1203.027857][T17495] do_sock_setsockopt+0xf3/0x1d0 [ 1203.027895][T17495] __sys_setsockopt+0x195/0x220 [ 1203.027950][T17495] __x64_sys_setsockopt+0xbd/0x160 [ 1203.027996][T17495] ? do_syscall_64+0xae/0x790 [ 1203.028031][T17495] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.028067][T17495] ? lockdep_hardirqs_on+0x7d/0x110 [ 1203.028103][T17495] do_syscall_64+0x123/0x790 [ 1203.028143][T17495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.028174][T17495] RIP: 0033:0x7f73d7b9e159 [ 1203.028198][T17495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1203.028229][T17495] RSP: 002b:00007f73d89ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1203.028258][T17495] RAX: ffffffffffffffda RBX: 00007f73d7e25fa0 RCX: 00007f73d7b9e159 [ 1203.028279][T17495] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 1203.028298][T17495] RBP: 00007f73d7c3506b R08: 0000000000000398 R09: 0000000000000000 [ 1203.028318][T17495] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 1203.028337][T17495] R13: 00007f73d7e26038 R14: 00007f73d7e25fa0 R15: 00007ffd8589a968 [ 1203.028376][T17495] [ 1203.604142][T17498] loop3: detected capacity change from 0 to 128 [ 1203.650565][T17498] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1203.652212][T17498] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1203.819507][T17498] EXT4-fs (loop3): shut down requested (2) [ 1203.834504][T17498] fscrypt (loop3, inode 12): Error -5 getting encryption context [ 1203.920498][T16262] team0 (unregistering): Port device team_slave_1 removed [ 1204.006498][T16262] team0 (unregistering): Port device team_slave_0 removed [ 1204.099068][T15869] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1204.971211][T17233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1204.998502][T17484] syz_tun: entered allmulticast mode [ 1205.063887][T17485] dvmrp6: entered allmulticast mode [ 1205.185449][ T5276] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1205.242480][T17233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1205.244321][T17484] syz_tun: left allmulticast mode [ 1205.555417][T17233] team0: Port device team_slave_0 added [ 1205.577293][T17233] team0: Port device team_slave_1 added [ 1205.891911][T17233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1205.891933][T17233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1205.891969][T17233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1205.960021][T17233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1205.960042][T17233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1205.960079][T17233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1206.796174][T17233] hsr_slave_0: entered promiscuous mode [ 1206.801723][T17233] hsr_slave_1: entered promiscuous mode [ 1206.830468][T17233] debugfs: 'hsr0' already exists in 'hsr' [ 1206.830496][T17233] Cannot create hsr debugfs directory [ 1207.097384][T17551] FAULT_INJECTION: forcing a failure. [ 1207.097384][T17551] name failslab, interval 1, probability 0, space 0, times 0 [ 1207.097427][T17551] CPU: 0 UID: 0 PID: 17551 Comm: syz.5.3368 Tainted: G L syzkaller #0 PREEMPT(full) [ 1207.097470][T17551] Tainted: [L]=SOFTLOCKUP [ 1207.097482][T17551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1207.097501][T17551] Call Trace: [ 1207.097515][T17551] [ 1207.097527][T17551] dump_stack_lvl+0x100/0x190 [ 1207.097580][T17551] should_fail_ex.cold+0x5/0xa [ 1207.097614][T17551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.097656][T17551] should_failslab+0xc2/0x120 [ 1207.097692][T17551] __kmalloc_cache_noprof+0x91/0x6d0 [ 1207.097733][T17551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.097769][T17551] ? lockdep_init_map_type+0x5c/0x250 [ 1207.097804][T17551] ? snd_seq_prioq_new+0x3f/0x110 [ 1207.097854][T17551] snd_seq_prioq_new+0x3f/0x110 [ 1207.097895][T17551] snd_seq_queue_alloc+0x12b/0x540 [ 1207.097939][T17551] snd_seq_ioctl_create_queue+0xa9/0x370 [ 1207.097989][T17551] snd_seq_ioctl+0x219/0x410 [ 1207.098037][T17551] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 1207.098104][T17551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.098140][T17551] ? __fget_files+0x21f/0x3d0 [ 1207.098179][T17551] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 1207.098228][T17551] __x64_sys_ioctl+0x18e/0x210 [ 1207.098278][T17551] do_syscall_64+0x123/0x790 [ 1207.098319][T17551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.098351][T17551] RIP: 0033:0x7f9868f9e159 [ 1207.098375][T17551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1207.098406][T17551] RSP: 002b:00007f9869eb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1207.098436][T17551] RAX: ffffffffffffffda RBX: 00007f9869225fa0 RCX: 00007f9868f9e159 [ 1207.098457][T17551] RDX: 0000200000000040 RSI: 00000000c08c5332 RDI: 0000000000000005 [ 1207.098477][T17551] RBP: 00007f986903506b R08: 0000000000000000 R09: 0000000000000000 [ 1207.098497][T17551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1207.098516][T17551] R13: 00007f9869226038 R14: 00007f9869225fa0 R15: 00007ffe1278daa8 [ 1207.098561][T17551] [ 1207.276609][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805387a800: rx timeout, send abort [ 1207.276818][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805387a800: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 1207.300752][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880318acc00: rx timeout, send abort [ 1207.300912][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880318acc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1207.530928][T17553] FAULT_INJECTION: forcing a failure. [ 1207.530928][T17553] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1207.530973][T17553] CPU: 0 UID: 0 PID: 17553 Comm: syz.9.3369 Tainted: G L syzkaller #0 PREEMPT(full) [ 1207.531015][T17553] Tainted: [L]=SOFTLOCKUP [ 1207.531026][T17553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1207.531045][T17553] Call Trace: [ 1207.531056][T17553] [ 1207.531067][T17553] dump_stack_lvl+0x100/0x190 [ 1207.531113][T17553] should_fail_ex.cold+0x5/0xa [ 1207.531147][T17553] ? prepare_alloc_pages+0x16d/0x5b0 [ 1207.531184][T17553] should_fail_alloc_page+0xeb/0x140 [ 1207.531226][T17553] prepare_alloc_pages+0x1f0/0x5b0 [ 1207.531266][T17553] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1207.531316][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.531351][T17553] ? prepare_alloc_pages+0x151/0x5b0 [ 1207.531384][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.531423][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.531458][T17553] ? rcu_is_watching+0x13/0xc0 [ 1207.531498][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.531537][T17553] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 1207.531585][T17553] ? lock_release+0x24d/0x310 [ 1207.531615][T17553] ? bpf_ksym_find+0x124/0x1c0 [ 1207.531661][T17553] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1207.531705][T17553] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1207.531763][T17553] ? is_bpf_text_address+0x94/0x1a0 [ 1207.531797][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.531833][T17553] ? kernel_text_address+0x8d/0x100 [ 1207.531877][T17553] ? mark_held_locks+0x40/0x70 [ 1207.531907][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.531942][T17553] ? __kernel_text_address+0xd/0x30 [ 1207.531986][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.532021][T17553] ? unwind_get_return_address+0x59/0xa0 [ 1207.532063][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.532098][T17553] ? arch_stack_walk+0xa6/0xf0 [ 1207.532135][T17553] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1207.532192][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.532228][T17553] ? stack_trace_save+0x8e/0xc0 [ 1207.532275][T17553] ? __pfx_stack_trace_save+0x10/0x10 [ 1207.532339][T17553] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 1207.532387][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.532428][T17553] ? policy_nodemask+0xed/0x4f0 [ 1207.532467][T17553] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1207.532534][T17553] __kasan_populate_vmalloc+0xf0/0x210 [ 1207.532590][T17553] alloc_vmap_area+0x95d/0x2bb0 [ 1207.532631][T17553] ? kasan_save_track+0x14/0x30 [ 1207.532660][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.532695][T17553] ? __kasan_kmalloc+0xaa/0xb0 [ 1207.532728][T17553] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1207.532756][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.532797][T17553] ? __get_vm_area_node+0x124/0x350 [ 1207.532834][T17553] __get_vm_area_node+0x1ed/0x350 [ 1207.532874][T17553] __vmalloc_node_range_noprof+0x268/0x1420 [ 1207.532912][T17553] ? hash_mac_create+0x3e0/0x1080 [ 1207.532957][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.532993][T17553] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1207.533030][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.533073][T17553] ? hash_mac_create+0x3e0/0x1080 [ 1207.533119][T17553] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1207.533157][T17553] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1207.533197][T17553] ? rcu_is_watching+0x13/0xc0 [ 1207.533236][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.533274][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.533316][T17553] __kvmalloc_node_noprof+0x3da/0x9b0 [ 1207.533365][T17553] ? hash_mac_create+0x3e0/0x1080 [ 1207.533409][T17553] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1207.533452][T17553] ? hash_mac_create+0x3e0/0x1080 [ 1207.533502][T17553] hash_mac_create+0x3e0/0x1080 [ 1207.533546][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.533585][T17553] ? __pfx_hash_mac_create+0x10/0x10 [ 1207.533632][T17553] ip_set_create+0x6c4/0x1510 [ 1207.533681][T17553] ? __pfx_ip_set_create+0x10/0x10 [ 1207.533750][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.533786][T17553] ? find_held_lock+0x2b/0x80 [ 1207.533831][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.533874][T17553] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 1207.533922][T17553] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1207.533955][T17553] ? skb_release_data+0x65e/0x860 [ 1207.534008][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.534044][T17553] ? kfree_skbmem+0x19f/0x210 [ 1207.534117][T17553] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1207.534163][T17553] netlink_rcv_skb+0x159/0x420 [ 1207.534210][T17553] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1207.534247][T17553] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1207.534291][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.534344][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.534379][T17553] ? ns_capable+0xd2/0xf0 [ 1207.534431][T17553] nfnetlink_rcv+0x1b3/0x440 [ 1207.534465][T17553] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1207.534498][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.534533][T17553] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1207.534583][T17553] netlink_unicast+0x585/0x850 [ 1207.534634][T17553] ? __pfx_netlink_unicast+0x10/0x10 [ 1207.534690][T17553] netlink_sendmsg+0x8b0/0xda0 [ 1207.534747][T17553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1207.534796][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.534831][T17553] ? apparmor_socket_sendmsg+0x165/0x280 [ 1207.534883][T17553] ____sys_sendmsg+0xa4d/0xbe0 [ 1207.534918][T17553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1207.534967][T17553] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1207.535022][T17553] ___sys_sendmsg+0x190/0x1e0 [ 1207.535063][T17553] ? __pfx____sys_sendmsg+0x10/0x10 [ 1207.535103][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.535138][T17553] ? futex_wait+0x11e/0x370 [ 1207.535199][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.535235][T17553] ? find_held_lock+0x2b/0x80 [ 1207.535300][T17553] __sys_sendmsg+0x160/0x210 [ 1207.535350][T17553] ? __pfx___sys_sendmsg+0x10/0x10 [ 1207.535413][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1207.535455][T17553] do_syscall_64+0x123/0x790 [ 1207.535495][T17553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.535527][T17553] RIP: 0033:0x7fb74c99e159 [ 1207.535551][T17553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1207.535582][T17553] RSP: 002b:00007fb74d867028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1207.535612][T17553] RAX: ffffffffffffffda RBX: 00007fb74cc25fa0 RCX: 00007fb74c99e159 [ 1207.535632][T17553] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 1207.535652][T17553] RBP: 00007fb74ca3506b R08: 0000000000000000 R09: 0000000000000000 [ 1207.535671][T17553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1207.535690][T17553] R13: 00007fb74cc26038 R14: 00007fb74cc25fa0 R15: 00007ffc31129898 [ 1207.535735][T17553] [ 1208.018833][T17553] syz.9.3369: vmalloc error: size 16777256, align 0x200000, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1208.018945][T17553] CPU: 0 UID: 0 PID: 17553 Comm: syz.9.3369 Tainted: G L syzkaller #0 PREEMPT(full) [ 1208.018986][T17553] Tainted: [L]=SOFTLOCKUP [ 1208.018998][T17553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1208.019016][T17553] Call Trace: [ 1208.019026][T17553] [ 1208.019038][T17553] dump_stack_lvl+0x100/0x190 [ 1208.019083][T17553] warn_alloc.cold+0x9e/0xb2 [ 1208.019117][T17553] ? __pfx_warn_alloc+0x10/0x10 [ 1208.019158][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1208.019194][T17553] ? lockdep_hardirqs_on+0x7d/0x110 [ 1208.019248][T17553] ? __get_vm_area_node+0x2f0/0x350 [ 1208.019289][T17553] ? __get_vm_area_node+0x22b/0x350 [ 1208.019329][T17553] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 1208.019366][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1208.019403][T17553] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1208.019440][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1208.019482][T17553] ? hash_mac_create+0x3e0/0x1080 [ 1208.019530][T17553] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1208.019574][T17553] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1208.019615][T17553] ? rcu_is_watching+0x13/0xc0 [ 1208.019655][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1208.019692][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1208.019733][T17553] __kvmalloc_node_noprof+0x3da/0x9b0 [ 1208.019783][T17553] ? hash_mac_create+0x3e0/0x1080 [ 1208.019826][T17553] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1208.019869][T17553] ? hash_mac_create+0x3e0/0x1080 [ 1208.019919][T17553] hash_mac_create+0x3e0/0x1080 [ 1208.019963][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1208.020002][T17553] ? __pfx_hash_mac_create+0x10/0x10 [ 1208.020049][T17553] ip_set_create+0x6c4/0x1510 [ 1208.020097][T17553] ? __pfx_ip_set_create+0x10/0x10 [ 1208.020162][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1208.020197][T17553] ? find_held_lock+0x2b/0x80 [ 1208.020242][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1208.020284][T17553] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 1208.020332][T17553] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1208.020365][T17553] ? skb_release_data+0x65e/0x860 [ 1208.020417][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1208.020453][T17553] ? kfree_skbmem+0x19f/0x210 [ 1208.020526][T17553] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1208.020577][T17553] netlink_rcv_skb+0x159/0x420 [ 1208.020623][T17553] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1208.020660][T17553] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1208.020704][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1208.020756][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1208.020791][T17553] ? ns_capable+0xd2/0xf0 [ 1208.020843][T17553] nfnetlink_rcv+0x1b3/0x440 [ 1208.020877][T17553] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1208.020909][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1208.020945][T17553] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1208.020995][T17553] netlink_unicast+0x585/0x850 [ 1208.021046][T17553] ? __pfx_netlink_unicast+0x10/0x10 [ 1208.021102][T17553] netlink_sendmsg+0x8b0/0xda0 [ 1208.021154][T17553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1208.021203][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1208.021238][T17553] ? apparmor_socket_sendmsg+0x165/0x280 [ 1208.021290][T17553] ____sys_sendmsg+0xa4d/0xbe0 [ 1208.021324][T17553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1208.021373][T17553] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1208.021428][T17553] ___sys_sendmsg+0x190/0x1e0 [ 1208.021469][T17553] ? __pfx____sys_sendmsg+0x10/0x10 [ 1208.021508][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1208.021549][T17553] ? futex_wait+0x11e/0x370 [ 1208.021610][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1208.021646][T17553] ? find_held_lock+0x2b/0x80 [ 1208.021711][T17553] __sys_sendmsg+0x160/0x210 [ 1208.021761][T17553] ? __pfx___sys_sendmsg+0x10/0x10 [ 1208.021823][T17553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1208.021865][T17553] do_syscall_64+0x123/0x790 [ 1208.021905][T17553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.021936][T17553] RIP: 0033:0x7fb74c99e159 [ 1208.021961][T17553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1208.021990][T17553] RSP: 002b:00007fb74d867028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1208.022018][T17553] RAX: ffffffffffffffda RBX: 00007fb74cc25fa0 RCX: 00007fb74c99e159 [ 1208.022039][T17553] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 1208.022058][T17553] RBP: 00007fb74ca3506b R08: 0000000000000000 R09: 0000000000000000 [ 1208.022078][T17553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1208.022097][T17553] R13: 00007fb74cc26038 R14: 00007fb74cc25fa0 R15: 00007ffc31129898 [ 1208.022137][T17553] [ 1208.981329][T17553] Mem-Info: [ 1208.981347][T17553] active_anon:9036 inactive_anon:7 isolated_anon:0 [ 1208.981347][T17553] active_file:1 inactive_file:66200 isolated_file:0 [ 1208.981347][T17553] unevictable:0 dirty:581 writeback:0 [ 1208.981347][T17553] slab_reclaimable:11675 slab_unreclaimable:101513 [ 1208.981347][T17553] mapped:36826 shmem:1310 pagetables:1767 [ 1208.981347][T17553] sec_pagetables:0 bounce:0 [ 1208.981347][T17553] kernel_misc_reclaimable:0 [ 1208.981347][T17553] free:1272695 free_pcp:9903 free_cma:0 [ 1208.981422][T17553] Node 0 active_anon:36144kB inactive_anon:28kB active_file:4kB inactive_file:264608kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:147304kB dirty:2324kB writeback:0kB shmem:5240kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13664kB pagetables:6924kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1208.981502][T17553] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1208.981600][T17553] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1208.981688][T17553] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 1208.981743][T17553] Node 0 DMA32 free:1134188kB boost:0kB min:34252kB low:42812kB high:51372kB reserved_highatomic:0kB free_highatomic:0kB active_anon:36144kB inactive_anon:28kB active_file:4kB inactive_file:264608kB unevictable:0kB writepending:2324kB zspages:0kB present:3129332kB managed:2530476kB mlocked:0kB bounce:0kB free_pcp:39612kB local_pcp:39612kB free_cma:0kB [ 1208.981829][T17553] lowmem_reserve[]: 0 0 0 0 0 [ 1208.981880][T17553] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:72kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1208.981960][T17553] lowmem_reserve[]: 0 0 0 0 0 [ 1208.982012][T17553] Node 1 Normal free:3941232kB boost:0kB min:55648kB low:69560kB high:83472kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1208.982095][T17553] lowmem_reserve[]: 0 0 0 0 0 [ 1208.982146][T17553] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1208.982319][T17553] Node 0 DMA32: 2099*4kB (UME) 1210*8kB (UM) 1199*16kB (UM) 1107*32kB (UME) 654*64kB (UM) 474*128kB (UME) 376*256kB (UM) 177*512kB (UME) 66*1024kB (UME) 18*2048kB (UM) 163*4096kB (UM) = 1134188kB [ 1209.039894][T17553] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1209.334246][T17553] Node 1 Normal: 2*4kB (M) 1*8kB (M) 4*16kB (UM) 3*32kB (UM) 9*64kB (UM) 7*128kB (UM) 5*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 3*2048kB (UM) 959*4096kB (UM) = 3941232kB [ 1209.334495][T17553] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1209.334541][T17553] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1209.334566][T17553] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1209.334596][T17553] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1209.334620][T17553] 67487 total pagecache pages [ 1209.334632][T17553] 0 pages in swap cache [ 1209.334642][T17553] Free swap = 124996kB [ 1209.334655][T17553] Total swap = 124996kB [ 1209.334667][T17553] 2097051 pages RAM [ 1209.334678][T17553] 0 pages HighMem/MovableOnly [ 1209.334689][T17553] 432798 pages reserved [ 1209.334700][T17553] 0 pages cma reserved [ 1210.002489][T17562] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 1211.243484][ T3288] IPVS: starting estimator thread 0... [ 1211.337317][T17589] IPVS: using max 30 ests per chain, 72000 per kthread [ 1215.181966][ T5276] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1215.924067][T15624] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 1216.075781][T15624] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1216.114449][T15624] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.114488][T15624] usb 10-1: Product: syz [ 1216.114510][T15624] usb 10-1: Manufacturer: syz [ 1216.114561][T15624] usb 10-1: SerialNumber: syz [ 1216.175464][T15624] usb 10-1: config 0 descriptor?? [ 1216.248578][T17621] input: syz1 as /devices/virtual/input/input257 [ 1216.383932][T17621] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3390'. [ 1216.468320][T17624] input: syz1 as /devices/virtual/input/input258 [ 1216.517538][T15624] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1216.542137][T17624] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3391'. [ 1217.398396][T17621] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1217.600693][T15624] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1217.825826][T15624] usb 10-1: USB disconnect, device number 9 [ 1219.042981][T17662] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3397'. [ 1219.680723][T17667] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1219.726850][ T5276] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1219.742218][T17666] syzkaller1: entered promiscuous mode [ 1219.742245][T17666] syzkaller1: entered allmulticast mode [ 1219.833677][T15624] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1219.983354][T15624] usb 6-1: Using ep0 maxpacket: 32 [ 1219.988008][T15624] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1219.992188][T15624] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1219.992220][T15624] usb 6-1: config 0 has no interface number 0 [ 1219.992263][T15624] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1220.039659][T15624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.039693][T15624] usb 6-1: Product: syz [ 1220.039714][T15624] usb 6-1: Manufacturer: syz [ 1220.039735][T15624] usb 6-1: SerialNumber: syz [ 1220.104969][T15624] usb 6-1: config 0 descriptor?? [ 1220.621849][T17233] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1220.696778][T17233] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1220.714432][T17233] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1220.727273][T17233] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1220.728209][T17233] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1220.805595][T17233] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1220.866920][T17233] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1220.941679][T17233] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1221.206205][T15624] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1221.206246][T15624] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1221.210757][T17698] FAULT_INJECTION: forcing a failure. [ 1221.210757][T17698] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.210797][T17698] CPU: 0 UID: 0 PID: 17698 Comm: syz.3.3406 Tainted: G L syzkaller #0 PREEMPT(full) [ 1221.210838][T17698] Tainted: [L]=SOFTLOCKUP [ 1221.210850][T17698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1221.210868][T17698] Call Trace: [ 1221.210878][T17698] [ 1221.210891][T17698] dump_stack_lvl+0x100/0x190 [ 1221.210937][T17698] should_fail_ex.cold+0x5/0xa [ 1221.210971][T17698] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.211013][T17698] should_failslab+0xc2/0x120 [ 1221.211047][T17698] __kmalloc_cache_noprof+0x91/0x6d0 [ 1221.211090][T17698] ? fuse_get_tree+0x88/0x490 [ 1221.211132][T17698] fuse_get_tree+0x88/0x490 [ 1221.211169][T17698] vfs_get_tree+0x92/0x320 [ 1221.211205][T17698] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.211243][T17698] path_mount+0x7d0/0x24c0 [ 1221.211289][T17698] ? __pfx_path_mount+0x10/0x10 [ 1221.211326][T17698] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.211362][T17698] ? lockdep_hardirqs_on+0x7d/0x110 [ 1221.211403][T17698] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.211438][T17698] ? kmem_cache_free+0x127/0x6c0 [ 1221.211492][T17698] ? __x64_sys_mount+0x293/0x310 [ 1221.211535][T17698] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.211577][T17698] __x64_sys_mount+0x293/0x310 [ 1221.211619][T17698] ? __pfx___x64_sys_mount+0x10/0x10 [ 1221.211663][T17698] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.211706][T17698] do_syscall_64+0x123/0x790 [ 1221.211746][T17698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.211777][T17698] RIP: 0033:0x7fc67519e159 [ 1221.211801][T17698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.211831][T17698] RSP: 002b:00007fc6760b0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1221.211860][T17698] RAX: ffffffffffffffda RBX: 00007fc675425fa0 RCX: 00007fc67519e159 [ 1221.211880][T17698] RDX: 0000200000000000 RSI: 0000200000002080 RDI: 0000000000000000 [ 1221.211900][T17698] RBP: 00007fc67523506b R08: 0000000000000000 R09: 0000000000000000 [ 1221.211919][T17698] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000000 [ 1221.211938][T17698] R13: 00007fc675426038 R14: 00007fc675425fa0 R15: 00007ffd718bc9e8 [ 1221.211977][T17698] [ 1221.662990][T12523] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1221.695075][T17233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1221.742278][T15624] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1221.742318][T15624] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1221.742346][T15624] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1221.743653][T15624] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 1221.811361][T15624] usb 6-1: USB disconnect, device number 47 [ 1221.821470][T12523] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1221.852447][T12523] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.879930][T17695] FAULT_INJECTION: forcing a failure. [ 1221.879930][T17695] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1221.879971][T17695] CPU: 0 UID: 0 PID: 17695 Comm: syz.7.3404 Tainted: G L syzkaller #0 PREEMPT(full) [ 1221.880012][T17695] Tainted: [L]=SOFTLOCKUP [ 1221.880024][T17695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1221.880042][T17695] Call Trace: [ 1221.880053][T17695] [ 1221.880065][T17695] dump_stack_lvl+0x100/0x190 [ 1221.880121][T17695] should_fail_ex.cold+0x5/0xa [ 1221.880161][T17695] get_futex_key+0xf72/0x14f0 [ 1221.880203][T17695] ? __pfx_get_futex_key+0x10/0x10 [ 1221.880240][T17695] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.880277][T17695] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.880313][T17695] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1221.880353][T17695] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.880395][T17695] futex_wake+0xf4/0x5e0 [ 1221.880446][T17695] ? __pfx_futex_wake+0x10/0x10 [ 1221.880493][T17695] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.880532][T17695] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.880567][T17695] ? lock_acquire+0x1d1/0x380 [ 1221.880597][T17695] ? detach_task_ctx_data+0x83/0x490 [ 1221.880644][T17695] do_futex+0x2b2/0x440 [ 1221.880685][T17695] ? __pfx_do_futex+0x10/0x10 [ 1221.880723][T17695] ? __might_fault+0xc5/0x140 [ 1221.880772][T17695] mm_exit_exec_release+0x256/0x2f0 [ 1221.880807][T17695] do_exit+0x707/0x2a50 [ 1221.880849][T17695] ? __pfx_do_exit+0x10/0x10 [ 1221.880884][T17695] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.880920][T17695] ? do_raw_spin_lock+0x128/0x260 [ 1221.880955][T17695] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.880990][T17695] ? find_held_lock+0x2b/0x80 [ 1221.881031][T17695] ? get_signal+0x7e0/0x21e0 [ 1221.881065][T17695] do_group_exit+0xd5/0x2a0 [ 1221.881110][T17695] get_signal+0x1ec7/0x21e0 [ 1221.881142][T17695] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.881178][T17695] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.881214][T17695] ? find_held_lock+0x2b/0x80 [ 1221.881255][T17695] ? inet_stream_connect+0x79/0xa0 [ 1221.881292][T17695] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.881331][T17695] ? __pfx_get_signal+0x10/0x10 [ 1221.881361][T17695] ? __local_bh_enable_ip+0xa5/0x120 [ 1221.881392][T17695] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.881427][T17695] ? inet_stream_connect+0x79/0xa0 [ 1221.881469][T17695] arch_do_signal_or_restart+0x91/0x7e0 [ 1221.881511][T17695] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.881549][T17695] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1221.881591][T17695] ? __pfx___sys_connect+0x10/0x10 [ 1221.881647][T17695] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.881689][T17695] exit_to_user_mode_loop+0x139/0x700 [ 1221.881724][T17695] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.881759][T17695] ? rcu_is_watching+0x13/0xc0 [ 1221.881802][T17695] do_syscall_64+0x661/0x790 [ 1221.881842][T17695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.881873][T17695] RIP: 0033:0x7f73d7b9e159 [ 1221.881896][T17695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.881926][T17695] RSP: 002b:00007f73d89ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1221.881955][T17695] RAX: fffffffffffffe00 RBX: 00007f73d7e25fa0 RCX: 00007f73d7b9e159 [ 1221.881976][T17695] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000004 [ 1221.881995][T17695] RBP: 00007f73d7c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1221.882014][T17695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1221.882033][T17695] R13: 00007f73d7e26038 R14: 00007f73d7e25fa0 R15: 00007ffd8589a968 [ 1221.882072][T17695] [ 1221.914952][T17233] 8021q: adding VLAN 0 to HW filter on device team0 [ 1222.183105][T12523] usb 10-1: config 0 descriptor?? [ 1222.384877][T12523] cp210x 10-1:0.0: cp210x converter detected [ 1222.409510][ T3388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.409625][ T3388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1222.480314][ T3354] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.480410][ T3354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1222.842395][T12523] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1223.126100][T12523] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1223.231883][ T31] audit: type=1800 audit(1790660085.999:97): pid=17710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3408" name=8006 dev="sda1" ino=2063 res=0 errno=0 [ 1223.352133][T12523] usb 10-1: USB disconnect, device number 10 [ 1223.447707][T12523] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1223.475050][T12523] cp210x 10-1:0.0: device disconnected [ 1224.503223][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1224.655600][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1224.659588][ T10] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1224.669968][ T10] usb 4-1: config 0 has no interfaces? [ 1224.694824][ T10] usb 4-1: config 0 has no interfaces? [ 1224.695629][ T10] usb 4-1: config 0 has no interfaces? [ 1224.725023][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.725057][ T10] usb 4-1: Product: syz [ 1224.725079][ T10] usb 4-1: Manufacturer: syz [ 1224.725100][ T10] usb 4-1: SerialNumber: syz [ 1224.771999][ T10] usb 4-1: config 0 descriptor?? [ 1225.099114][T17733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1225.099750][T17733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1225.167418][T17733] FAULT_INJECTION: forcing a failure. [ 1225.167418][T17733] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.167462][T17733] CPU: 0 UID: 0 PID: 17733 Comm: syz.3.3414 Tainted: G L syzkaller #0 PREEMPT(full) [ 1225.167505][T17733] Tainted: [L]=SOFTLOCKUP [ 1225.167521][T17733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1225.167540][T17733] Call Trace: [ 1225.167551][T17733] [ 1225.167563][T17733] dump_stack_lvl+0x100/0x190 [ 1225.167616][T17733] should_fail_ex.cold+0x5/0xa [ 1225.167649][T17733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.167690][T17733] should_failslab+0xc2/0x120 [ 1225.167724][T17733] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1225.167773][T17733] ? __kernfs_new_node+0xd2/0xa10 [ 1225.167821][T17733] __kernfs_new_node+0xd2/0xa10 [ 1225.167867][T17733] ? __pfx___kernfs_new_node+0x10/0x10 [ 1225.167911][T17733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.167947][T17733] ? lock_acquire+0x1d1/0x380 [ 1225.167978][T17733] ? kernfs_root+0x23/0x2a0 [ 1225.168014][T17733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.168049][T17733] ? find_held_lock+0x2b/0x80 [ 1225.168091][T17733] ? kernfs_root+0xee/0x2a0 [ 1225.168126][T17733] ? kernfs_root+0xee/0x2a0 [ 1225.168159][T17733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.168205][T17733] kernfs_new_node+0x117/0x150 [ 1225.168256][T17733] __kernfs_create_file+0x53/0x350 [ 1225.168373][T17733] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1225.168421][T17733] sysfs_create_file_ns+0x145/0x1e0 [ 1225.168453][T17733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.168490][T17733] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 1225.168524][T17733] ? module_add_driver+0x1e2/0x420 [ 1225.168583][T17733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.168620][T17733] ? sysfs_do_create_link_sd+0xbb/0x140 [ 1225.168667][T17733] driver_create_file+0x4a/0x70 [ 1225.168698][T17733] bus_add_driver+0x49f/0x5b0 [ 1225.168744][T17733] driver_register+0x1e2/0x360 [ 1225.168771][T17733] ? rcu_is_watching+0x13/0xc0 [ 1225.168815][T17733] usb_gadget_register_driver_owner+0x132/0x210 [ 1225.168864][T17733] raw_ioctl+0x1a85/0x2b80 [ 1225.168912][T17733] ? __pfx_raw_ioctl+0x10/0x10 [ 1225.168957][T17733] ? __pfx_raw_ioctl+0x10/0x10 [ 1225.168998][T17733] __x64_sys_ioctl+0x18e/0x210 [ 1225.169050][T17733] do_syscall_64+0x123/0x790 [ 1225.169094][T17733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.169125][T17733] RIP: 0033:0x7fc67519ddeb [ 1225.169149][T17733] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1225.169180][T17733] RSP: 002b:00007fc6760adf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1225.169210][T17733] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fc67519ddeb [ 1225.169230][T17733] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 1225.169249][T17733] RBP: 00007fc6760aefd0 R08: 0000000000000001 R09: 00000000ffffffff [ 1225.169269][T17733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1225.169289][T17733] R13: 0000200000000040 R14: 0000000000000005 R15: 00000000000010d0 [ 1225.169328][T17733] [ 1225.331329][T17733] bus_add_driver: add_bind_files(raw-gadget.2) failed [ 1225.331501][T17733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1225.331894][T17733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1225.626280][ T10] usb 4-1: USB disconnect, device number 31 [ 1225.941134][ T5276] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1226.111385][T17751] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3419'. [ 1226.650356][T17758] loop5: detected capacity change from 0 to 4096 [ 1226.694739][T17758] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1226.694763][T17758] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1226.697258][T17758] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 1227.188100][T17233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1227.723156][T17233] veth0_vlan: entered promiscuous mode [ 1227.788693][T17233] veth1_vlan: entered promiscuous mode [ 1227.841703][T17777] FAULT_INJECTION: forcing a failure. [ 1227.841703][T17777] name failslab, interval 1, probability 0, space 0, times 0 [ 1227.841748][T17777] CPU: 0 UID: 0 PID: 17777 Comm: syz.3.3426 Tainted: G L syzkaller #0 PREEMPT(full) [ 1227.841789][T17777] Tainted: [L]=SOFTLOCKUP [ 1227.841801][T17777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1227.841819][T17777] Call Trace: [ 1227.841829][T17777] [ 1227.841842][T17777] dump_stack_lvl+0x100/0x190 [ 1227.841888][T17777] should_fail_ex.cold+0x5/0xa [ 1227.841921][T17777] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1227.841963][T17777] should_failslab+0xc2/0x120 [ 1227.841997][T17777] __kmalloc_cache_noprof+0x91/0x6d0 [ 1227.842040][T17777] ? kernfs_fop_open+0x23d/0xd50 [ 1227.842095][T17777] kernfs_fop_open+0x23d/0xd50 [ 1227.842145][T17777] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1227.842190][T17777] do_dentry_open+0x6ab/0x14d0 [ 1227.842236][T17777] ? __pfx_kernfs_fop_open+0x10/0x10 [ 1227.842287][T17777] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1227.842328][T17777] vfs_open+0x82/0x3f0 [ 1227.842361][T17777] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1227.842403][T17777] path_openat+0x19fa/0x2440 [ 1227.842443][T17777] ? __pfx_path_openat+0x10/0x10 [ 1227.842487][T17777] do_file_open+0x20e/0x430 [ 1227.842524][T17777] ? __pfx_do_file_open+0x10/0x10 [ 1227.842583][T17777] ? _raw_spin_unlock+0x28/0x50 [ 1227.842617][T17777] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1227.842653][T17777] ? alloc_fd+0x471/0x7a0 [ 1227.842697][T17777] do_sys_openat2+0x10f/0x1e0 [ 1227.842735][T17777] ? __pfx_do_sys_openat2+0x10/0x10 [ 1227.842774][T17777] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1227.842820][T17777] __x64_sys_openat+0x12d/0x210 [ 1227.842859][T17777] ? __pfx___x64_sys_openat+0x10/0x10 [ 1227.842904][T17777] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1227.842947][T17777] do_syscall_64+0x123/0x790 [ 1227.842987][T17777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.843018][T17777] RIP: 0033:0x7fc67519e159 [ 1227.843042][T17777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1227.843072][T17777] RSP: 002b:00007fc6760b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1227.843102][T17777] RAX: ffffffffffffffda RBX: 00007fc675425fa0 RCX: 00007fc67519e159 [ 1227.843122][T17777] RDX: 0000000000189002 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1227.843142][T17777] RBP: 00007fc67523506b R08: 0000000000000000 R09: 0000000000000000 [ 1227.843161][T17777] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000000 [ 1227.843181][T17777] R13: 00007fc675426038 R14: 00007fc675425fa0 R15: 00007ffd718bc9e8 [ 1227.843220][T17777] [ 1228.374665][T17233] veth0_macvtap: entered promiscuous mode [ 1228.412429][T17233] veth1_macvtap: entered promiscuous mode [ 1228.598178][T17233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1228.679259][T17233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1228.802846][ T3354] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.803902][ T3354] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.803950][ T3354] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.834465][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.954629][T17790] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1231.756935][ T5276] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1231.978777][T17806] netlink: 'syz.7.3436': attribute type 1 has an invalid length. [ 1232.373099][T17810] FAULT_INJECTION: forcing a failure. [ 1232.373099][T17810] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.373144][T17810] CPU: 0 UID: 0 PID: 17810 Comm: syz.3.3433 Tainted: G L syzkaller #0 PREEMPT(full) [ 1232.373185][T17810] Tainted: [L]=SOFTLOCKUP [ 1232.373197][T17810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1232.373215][T17810] Call Trace: [ 1232.373226][T17810] [ 1232.373238][T17810] dump_stack_lvl+0x100/0x190 [ 1232.373284][T17810] should_fail_ex.cold+0x5/0xa [ 1232.373318][T17810] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1232.373360][T17810] should_failslab+0xc2/0x120 [ 1232.373395][T17810] __kmalloc_noprof+0xfc/0x840 [ 1232.373440][T17810] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1232.373478][T17810] ? tracepoint_add_func+0x3a8/0x1150 [ 1232.373522][T17810] ? __pfx_blk_add_trace_rq_issue+0x10/0x10 [ 1232.373554][T17810] tracepoint_add_func+0x3a8/0x1150 [ 1232.373588][T17810] ? __pfx_blk_add_trace_rq_issue+0x10/0x10 [ 1232.373627][T17810] ? __pfx_blk_add_trace_rq_issue+0x10/0x10 [ 1232.373658][T17810] tracepoint_probe_register+0xc4/0x110 [ 1232.373696][T17810] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 1232.373733][T17810] ? __pfx_blk_add_trace_rq_issue+0x10/0x10 [ 1232.373766][T17810] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1232.373802][T17810] ? relay_open+0x793/0xa00 [ 1232.373836][T17810] blk_register_tracepoints+0x48/0x440 [ 1232.373880][T17810] blk_trace_setup_finalize+0x320/0x3a0 [ 1232.373928][T17810] blk_trace_setup+0x254/0x440 [ 1232.373982][T17810] ? __pfx_blk_trace_setup+0x10/0x10 [ 1232.374029][T17810] ? vsnprintf+0x4c5/0x1300 [ 1232.374077][T17810] ? __pfx_vsnprintf+0x10/0x10 [ 1232.374132][T17810] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1232.374168][T17810] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1232.374205][T17810] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1232.374241][T17810] ? do_vfs_ioctl+0x226/0x13e0 [ 1232.374291][T17810] blk_trace_ioctl+0x245/0x320 [ 1232.374323][T17810] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 1232.374359][T17810] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1232.374394][T17810] ? find_held_lock+0x2b/0x80 [ 1232.374436][T17810] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1232.374472][T17810] ? hook_file_ioctl_common+0x140/0x440 [ 1232.374512][T17810] blkdev_ioctl+0x17c/0x6f0 [ 1232.374559][T17810] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1232.374611][T17810] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1232.374679][T17810] __x64_sys_ioctl+0x18e/0x210 [ 1232.374728][T17810] do_syscall_64+0x123/0x790 [ 1232.374769][T17810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.374801][T17810] RIP: 0033:0x7fc67519e159 [ 1232.374825][T17810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1232.374856][T17810] RSP: 002b:00007fc6760b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1232.374885][T17810] RAX: ffffffffffffffda RBX: 00007fc675425fa0 RCX: 00007fc67519e159 [ 1232.374906][T17810] RDX: 0000200000000440 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1232.374926][T17810] RBP: 00007fc67523506b R08: 0000000000000000 R09: 0000000000000000 [ 1232.374946][T17810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1232.374964][T17810] R13: 00007fc675426038 R14: 00007fc675425fa0 R15: 00007ffd718bc9e8 [ 1232.375003][T17810] [ 1232.773348][T17810] ------------[ cut here ]------------ [ 1232.773364][T17810] ret [ 1232.773373][T17810] WARNING: kernel/trace/blktrace.c:1334 at blk_register_tracepoints+0x34a/0x440, CPU#0: syz.3.3433/17810 [ 1232.792972][T17810] Modules linked in: [ 1232.796917][T17810] CPU: 0 UID: 0 PID: 17810 Comm: syz.3.3433 Tainted: G L syzkaller #0 PREEMPT(full) [ 1232.807997][T17810] Tainted: [L]=SOFTLOCKUP [ 1232.812349][T17810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1232.822660][T17810] RIP: 0010:blk_register_tracepoints+0x34a/0x440 [ 1232.830045][T17810] Code: 7f f7 ff 85 db 0f 85 f9 00 00 00 e8 70 85 f7 ff 5b e9 c5 a2 fb fe e8 65 85 f7 ff 90 0f 0b 90 e9 ea fc ff ff e8 57 85 f7 ff 90 <0f> 0b 90 e9 09 fd ff ff e8 49 85 f7 ff 90 0f 0b 90 e9 28 fd ff ff [ 1232.850579][T17810] RSP: 0018:ffffc9000515fb00 EFLAGS: 00010283 [ 1232.857428][T17810] RAX: 000000000001bac1 RBX: 00000000fffffff4 RCX: ffffc90006631000 [ 1232.865619][T17810] RDX: 0000000000080000 RSI: ffffffff82149e59 RDI: ffff8880132d0000 [ 1232.874044][T17810] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 1232.882078][T17810] R10: 00000000fffffff4 R11: 0000000000000001 R12: 0000000000000000 [ 1232.890184][T17810] R13: ffff888023f8efc0 R14: ffffc9000515fda0 R15: 0000000000000001 [ 1232.898680][T17810] FS: 00007fc6760b06c0(0000) GS:ffff888123b4f000(0000) knlGS:0000000000000000 [ 1232.907966][T17810] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1232.914705][T17810] CR2: 00007fffecb6af30 CR3: 0000000026888000 CR4: 0000000000350ef0 [ 1232.922850][T17810] Call Trace: [ 1232.926149][T17810] [ 1232.929971][T17810] blk_trace_setup_finalize+0x320/0x3a0 [ 1232.936216][T17810] blk_trace_setup+0x254/0x440 [ 1232.941072][T17810] ? __pfx_blk_trace_setup+0x10/0x10 [ 1232.946458][T17810] ? vsnprintf+0x4c5/0x1300 [ 1232.951017][T17810] ? __pfx_vsnprintf+0x10/0x10 [ 1232.955886][T17810] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1232.961574][T17810] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1232.967657][T17810] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1232.978552][T17810] ? do_vfs_ioctl+0x226/0x13e0 [ 1232.984086][T17810] blk_trace_ioctl+0x245/0x320 [ 1232.988905][T17810] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 1232.994268][T17810] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1232.999949][T17810] ? find_held_lock+0x2b/0x80 [ 1233.004701][T17810] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1233.010375][T17810] ? hook_file_ioctl_common+0x140/0x440 [ 1233.016026][T17810] blkdev_ioctl+0x17c/0x6f0 [ 1233.020590][T17810] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1233.025718][T17810] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1233.030799][T17810] __x64_sys_ioctl+0x18e/0x210 [ 1233.037130][T17810] do_syscall_64+0x123/0x790 [ 1233.041798][T17810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.047772][T17810] RIP: 0033:0x7fc67519e159 [ 1233.052220][T17810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1233.072635][T17810] RSP: 002b:00007fc6760b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1233.081108][T17810] RAX: ffffffffffffffda RBX: 00007fc675425fa0 RCX: 00007fc67519e159 [ 1233.089159][T17810] RDX: 0000200000000440 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1233.097227][T17810] RBP: 00007fc67523506b R08: 0000000000000000 R09: 0000000000000000 [ 1233.105285][T17810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1233.113371][T17810] R13: 00007fc675426038 R14: 00007fc675425fa0 R15: 00007ffd718bc9e8 [ 1233.121419][T17810] [ 1233.124507][T17810] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1233.131789][T17810] CPU: 0 UID: 0 PID: 17810 Comm: syz.3.3433 Tainted: G L syzkaller #0 PREEMPT(full) [ 1233.142730][T17810] Tainted: [L]=SOFTLOCKUP [ 1233.147038][T17810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1233.157082][T17810] Call Trace: [ 1233.160351][T17810] [ 1233.163297][T17810] dump_stack_lvl+0x100/0x190 [ 1233.168007][T17810] vpanic+0x553/0x970 [ 1233.171987][T17810] ? __pfx_vpanic+0x10/0x10 [ 1233.176501][T17810] panic+0xd1/0xe0 [ 1233.180219][T17810] ? __pfx_panic+0x10/0x10 [ 1233.184650][T17810] check_panic_on_warn.cold+0x19/0x34 [ 1233.190042][T17810] ? blk_register_tracepoints+0x34a/0x440 [ 1233.195795][T17810] __warn.cold+0x191/0x318 [ 1233.200217][T17810] __report_bug+0x30f/0x440 [ 1233.204726][T17810] ? blk_register_tracepoints+0x34a/0x440 [ 1233.210477][T17810] ? __pfx___report_bug+0x10/0x10 [ 1233.215544][T17810] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1233.221189][T17810] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1233.226862][T17810] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1233.232510][T17810] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1233.238234][T17810] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1233.243899][T17810] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1233.249890][T17810] ? blk_register_tracepoints+0x34a/0x440 [ 1233.255640][T17810] report_bug+0xb3/0x220 [ 1233.259890][T17810] ? blk_register_tracepoints+0x34a/0x440 [ 1233.265624][T17810] handle_bug+0x16a/0x2a0 [ 1233.269966][T17810] exc_invalid_op+0x17/0x50 [ 1233.274482][T17810] asm_exc_invalid_op+0x1a/0x20 [ 1233.279341][T17810] RIP: 0010:blk_register_tracepoints+0x34a/0x440 [ 1233.285682][T17810] Code: 7f f7 ff 85 db 0f 85 f9 00 00 00 e8 70 85 f7 ff 5b e9 c5 a2 fb fe e8 65 85 f7 ff 90 0f 0b 90 e9 ea fc ff ff e8 57 85 f7 ff 90 <0f> 0b 90 e9 09 fd ff ff e8 49 85 f7 ff 90 0f 0b 90 e9 28 fd ff ff [ 1233.305289][T17810] RSP: 0018:ffffc9000515fb00 EFLAGS: 00010283 [ 1233.311358][T17810] RAX: 000000000001bac1 RBX: 00000000fffffff4 RCX: ffffc90006631000 [ 1233.319336][T17810] RDX: 0000000000080000 RSI: ffffffff82149e59 RDI: ffff8880132d0000 [ 1233.327300][T17810] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 1233.335265][T17810] R10: 00000000fffffff4 R11: 0000000000000001 R12: 0000000000000000 [ 1233.343227][T17810] R13: ffff888023f8efc0 R14: ffffc9000515fda0 R15: 0000000000000001 [ 1233.351204][T17810] ? blk_register_tracepoints+0x349/0x440 [ 1233.356946][T17810] blk_trace_setup_finalize+0x320/0x3a0 [ 1233.362526][T17810] blk_trace_setup+0x254/0x440 [ 1233.367357][T17810] ? __pfx_blk_trace_setup+0x10/0x10 [ 1233.372664][T17810] ? vsnprintf+0x4c5/0x1300 [ 1233.377183][T17810] ? __pfx_vsnprintf+0x10/0x10 [ 1233.381970][T17810] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1233.387607][T17810] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1233.393505][T17810] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1233.399176][T17810] ? do_vfs_ioctl+0x226/0x13e0 [ 1233.404007][T17810] blk_trace_ioctl+0x245/0x320 [ 1233.408776][T17810] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 1233.414062][T17810] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1233.419795][T17810] ? find_held_lock+0x2b/0x80 [ 1233.424594][T17810] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1233.430246][T17810] ? hook_file_ioctl_common+0x140/0x440 [ 1233.435799][T17810] blkdev_ioctl+0x17c/0x6f0 [ 1233.440320][T17810] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1233.445451][T17810] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1233.450555][T17810] __x64_sys_ioctl+0x18e/0x210 [ 1233.455344][T17810] do_syscall_64+0x123/0x790 [ 1233.459946][T17810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.465841][T17810] RIP: 0033:0x7fc67519e159 [ 1233.470252][T17810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1233.489856][T17810] RSP: 002b:00007fc6760b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1233.498269][T17810] RAX: ffffffffffffffda RBX: 00007fc675425fa0 RCX: 00007fc67519e159 [ 1233.506246][T17810] RDX: 0000200000000440 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1233.514215][T17810] RBP: 00007fc67523506b R08: 0000000000000000 R09: 0000000000000000 [ 1233.522175][T17810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1233.530136][T17810] R13: 00007fc675426038 R14: 00007fc675425fa0 R15: 00007ffd718bc9e8 [ 1233.538120][T17810] [ 1233.541166][T17810] Kernel Offset: disabled [ 1233.545492][T17810] Rebooting in 86400 seconds..