last executing test programs: 15m31.767571724s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@local, @in=@empty, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, 0x0, 0xfffffffe, 0x1, 0x0, 0x2, 0x4}, {{@in=@dev={0xac, 0x14, 0x14, 0xfd}, 0x0, 0xff}, 0x0, @in=@multicast1, 0x1, 0x1, 0x3}}, 0xe8) r1 = syz_open_procfs(0x0, &(0x7f0000000680)='net/igmp\x00') pread64(r1, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) 15m19.732254531s ago: executing program 0 (id=14): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@local, @in=@empty, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, 0x0, 0xfffffffe, 0x1, 0x0, 0x2, 0x4}, {{@in=@dev={0xac, 0x14, 0x14, 0xfd}, 0x0, 0xff}, 0x0, @in=@multicast1, 0x1, 0x1, 0x3}}, 0xe8) r1 = syz_open_procfs(0x0, &(0x7f0000000680)='net/igmp\x00') pread64(r1, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) 15m2.83080808s ago: executing program 32 (id=14): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@local, @in=@empty, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, 0x0, 0xfffffffe, 0x1, 0x0, 0x2, 0x4}, {{@in=@dev={0xac, 0x14, 0x14, 0xfd}, 0x0, 0xff}, 0x0, @in=@multicast1, 0x1, 0x1, 0x3}}, 0xe8) r1 = syz_open_procfs(0x0, &(0x7f0000000680)='net/igmp\x00') pread64(r1, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) 8m34.60164557s ago: executing program 3 (id=1042): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) getpeername$netlink(r0, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8m33.260839607s ago: executing program 3 (id=1045): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0xa, 0xfffffffe) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="010001"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x90, 0x800}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4000880) 8m29.667331545s ago: executing program 3 (id=1049): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) landlock_restrict_self(r0, 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0x100, r2}, 0x0) landlock_restrict_self(r1, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x2c800) 8m29.069431578s ago: executing program 3 (id=1051): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x444}) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000100)="00072e5b583a8dcb8e1aa2b4054fa3ed88b4abce5d2fc84ce9269ff5d2f5584fd4e35239f8b49f") r1 = dup(0xffffffffffffffff) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000001c0)={0x0, 0x4, 0x6, &(0x7f0000000180)={0x20, "055d2b6241b3d29c99a4eedfe7c6aed4b2fe3d3ce18e976058dc5d9a8a4ca71061"}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaa91aabb72b4000000590806000108000604"], 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xffffffffffffffab, 0x41, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4080) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r5, r5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000240)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@mcast1}}, &(0x7f0000000340)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@cache_fscache}, {@cache_fscache}], [{@appraise_type}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='ro'}, {@seclabel}, {@fsname={'fsname', 0x3d, '%#{^-({'}}, {@fowner_gt={'fowner>', r5}}, {@euid_lt={'euid<', r6}}, {@smackfsroot={'smackfsroot', 0x3d, '/'}}, {@seclabel}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000039c0), r7) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003a80)={&(0x7f0000003a00)={0x68, r8, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {0x0, 0x4108}, {0x4c, 0x18, {0x4, @media='udp\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x800) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) 8m27.315781484s ago: executing program 3 (id=1056): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='memory=low,background_gc=off,noquota,inline_dentry,data_flush,disable_roll_forward,noinline_xattr,discard,checkpoint=disable,user_xattr,atgc,resuid=', @ANYRESDEC=0x0, @ANYRES16=0x0], 0xff, 0x5512, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) fallocate(r0, 0x10, 0x37ec, 0x683) 8m26.282516466s ago: executing program 3 (id=1062): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) lchown(&(0x7f0000000040)='my_tracefs/events/task/task_rename/filter\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 8m10.979042576s ago: executing program 33 (id=1062): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) lchown(&(0x7f0000000040)='my_tracefs/events/task/task_rename/filter\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 24.330003124s ago: executing program 7 (id=2218): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='timeo\x00', &(0x7f0000000400)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 22.125261327s ago: executing program 7 (id=2222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}}, 0x0) getpeername$netlink(r0, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5], 0x6f4}}, 0x0) 21.66868173s ago: executing program 7 (id=2223): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) shutdown(r0, 0x1) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, 0xfffffffffffffffc) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$vhost_msg(r1, &(0x7f0000000340)={0x1, {0x0, 0x0, 0x0, 0x1, 0x3}}, 0xb) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000300)={0x5d, 0x401, 0xc, 0x6, 0x0, 0x81}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000080)=ANY=[], 0xf0}}], 0x1, 0x24004c41) poll(&(0x7f00000001c0)=[{r0, 0x254c}], 0x1, 0xfffe) 21.364767928s ago: executing program 7 (id=2225): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a05404, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000380)='./file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 21.142836852s ago: executing program 7 (id=2227): syz_usb_connect(0x6, 0x4a, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_usb_connect$midi(0x2, 0x10d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020351210824000010203010902"], &(0x7f0000000700)={0x0, 0x0, 0x62, 0x0, 0x2, [{0x4b, &(0x7f00000002c0)=@string={0x4b, 0x3, "708273e4afe584d382efd898c0eac17e1748507277666b2ab886e89566c1d68c90f07430bd27091a0a1b155e3735ed3a7436c373b5a9be7c2cb3dc8c7ab28aef14fe2cf5b4b21dff0c"}}, {0xd9, &(0x7f0000000b80)=ANY=[@ANYBLOB]}]}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) pwrite64(r0, 0x0, 0x0, 0xe7c) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 18.890296783s ago: executing program 7 (id=2235): r0 = socket$kcm(0x10, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x50}}, 0x0) splice(r1, 0x0, r2, 0x0, 0x408cd, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r1}) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000980)="d800000018009903e00312ba0d8105040a5fe100ff0f040b067c55a1bc000900b800069907000000b0000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce0d5a235076bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7030000000000000091643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e9703", 0xd8}], 0x1}, 0x20048812) socket$nl_generic(0x10, 0x3, 0x10) 17.653688786s ago: executing program 34 (id=2235): r0 = socket$kcm(0x10, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x50}}, 0x0) splice(r1, 0x0, r2, 0x0, 0x408cd, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r1}) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000980)="d800000018009903e00312ba0d8105040a5fe100ff0f040b067c55a1bc000900b800069907000000b0000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce0d5a235076bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7030000000000000091643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e9703", 0xd8}], 0x1}, 0x20048812) socket$nl_generic(0x10, 0x3, 0x10) 11.720709799s ago: executing program 6 (id=2254): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sigaltstack(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x100) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) r2 = io_uring_setup(0x68e4, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0xd1}) mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0x3}) mq_unlink(&(0x7f00000000c0)='bat\x13\x1b\r\xcbs\xecave_5\x00') sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$eJzslM9K80AUxc9M+rX0Q1fuBHFhwbpomqQqbkSKL1DwH+6MNpZqaksbwdaVuPUB3Lr1FboRfBF1JUKXriPJTJuptFUELeL9LW7OZO7c3LmBA4Ig/ixPj68PVy/tcw3ABFJIyPfPWpTDlfzTQnJ/KrN+276+v1yrzVQH1fT9z38/BuAur8Hrne0/nZLPTfCe3gLHgtQ7YNCl3gPHttQOGHalPlJ0NcjX9cOy6+gHVbcYCCMIZhCsIOTe99e5YCgq/TFlv9FsHduu69S/UXw0v06eY1XpT/1f3dkYyvxMcJhS58CwIfUKEt3ZiJEo95+ORfW1H74/CRIkfpuI/Mm/YZhX/Cmm+EfWq9SyjWYrU67YJafknFhWbtlYNIwlKxsakYgj/C8Z+tN/pf6/IblxFseZ7Xl1U8Te2hJxkOPy0P840nNiHXh/fGg3Yp/JcyxUaW1EOkEQxNiYBYNv+wqT0kX7sArjbpQgCIIgCIIgCIIgiC/zFgAA///dqHHL") openat(r1, &(0x7f0000000100)='./file2\x00', 0x4002, 0x40) r3 = fsopen(&(0x7f0000000680)='ocfs2_dlmfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x86) fchdir(r4) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 11.353871737s ago: executing program 6 (id=2255): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x80400, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@uid_lt}]}}) socket$nl_rdma(0x10, 0x3, 0x14) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x103401, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) (async) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000001c0)=0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x8}}, 0x26) (async) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x8}}, 0x26) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 11.179317118s ago: executing program 5 (id=2257): r0 = io_uring_setup(0x2f04, &(0x7f000000c480)={0x0, 0xe8e2, 0x10, 0x20001, 0x2d7}) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x163882, 0x6d) write$FUSE_WRITE(r1, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x8010}}, 0xffffff20) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000280)=""/175, 0xaf}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1) r2 = io_uring_setup(0x7625, &(0x7f00000002c0)={0x0, 0xdfe4, 0x40, 0x4000, 0x1c9, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000280)=[r0], 0x1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000003c0)='timeo\x00', &(0x7f0000000400)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) bind$802154_dgram(r3, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r3, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) 10.708141907s ago: executing program 1 (id=2259): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x7e}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006900e0ff0000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x8, 0xd8, &(0x7f0000000000)=""/216}, 0x94) syz_open_dev$sg(&(0x7f0000000100), 0x80, 0x280100) 8.868219139s ago: executing program 5 (id=2260): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x14) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf3bc9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.20860758s ago: executing program 2 (id=2261): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x48524742, 0x9, 0x0, [{}, {0x0, 0x2}, {}, {}, {}, {0x4000}], 0x0, 0x0, 0x16, 0x1}}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x84, 0x9b, 0x7fff0000}]}) socket$kcm(0x2b, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) 8.012469133s ago: executing program 6 (id=2262): r0 = io_uring_setup(0x2f04, &(0x7f000000c480)={0x0, 0xe8e2, 0x10, 0x20001, 0x2d7}) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x163882, 0x6d) write$FUSE_WRITE(r1, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x8010}}, 0xffffff20) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000280)=""/175, 0xaf}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1) r2 = io_uring_setup(0x7625, &(0x7f00000002c0)={0x0, 0xdfe4, 0x40, 0x4000, 0x1c9, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000280)=[r0], 0x1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000003c0)='timeo\x00', &(0x7f0000000400)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) bind$802154_dgram(r3, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) 6.136451449s ago: executing program 6 (id=2263): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x7, 0x34, 0x36, 0x61, 0x6b, 0x61, 0x32, 0x38, 0x37, 0x32, 0x66, 0x36, 0x32, 0x64, 0x37, 0x36]}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8}, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x5c, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x3c, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c0000000001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e1167"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x80000001, @empty, 0x4}], 0x1c) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @loopback, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000002000)="fd", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x3}}}, 0x84) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newtaction={0x174, 0x30, 0xffff, 0x0, 0x0, {}, [{0x160, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x8e14, 0x10000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0xf0, 0x2, 0x0, 0x0, {{0x9}, {0xc4, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x4, 0x80eb412d19906718, 0x100, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x10000, 0x6, 0x3, 0x5b, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7b9, 0x1, 0x20000000, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1000, 0xef, 0x20000000, 0x0, 0x1ff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1bdd, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0xd, 0x7, 0x3, 0x7, 0xead}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x9d90, 0x6, 0x0, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d1d, 0xfffffffffffffff7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x6b2, 0x5, 0x2, 0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x174}}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x6, r3, 0xffffffffffffffff, 0xfffffffdfffffffc) 5.604777582s ago: executing program 1 (id=2265): socket$netlink(0x10, 0x3, 0x8000000004) memfd_create(&(0x7f0000000040)='rootmode', 0x0) socket$netlink(0x10, 0x3, 0x0) userfaultfd(0x80001) socket$packet(0x11, 0x3, 0x300) socket$igmp(0x2, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) pipe(&(0x7f0000000040)) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x10) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000180)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9ffff28bbe044ff092403f3", @ANYRES8=r0], 0x0) 5.38057706s ago: executing program 2 (id=2266): socket$inet(0x2, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x7, 0x72}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d60, 0x9}}, 0x44) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000300)={0xc, r3}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f00000001c0)={0x18, 0x2, 0x0, 0x9}) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) 4.901207844s ago: executing program 2 (id=2267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x2711, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff018) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d118db0049d90491c3248040000dbb8", 0x27}, {&(0x7f0000000200)="b63f4c5d6875b765c3810f2211704a357d14e832ed29ebbabe60cb", 0x1b}], 0x2) 4.648899546s ago: executing program 4 (id=2268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d118db0049d90491c3248040000dbb8", 0x27}, {&(0x7f0000000200)="b63f4c5d6875b765c3810f2211704a357d14e832ed29ebbabe60cb", 0x1b}], 0x2) 4.381404208s ago: executing program 5 (id=2269): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) syz_clone(0x81489000, 0x0, 0x61, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 4.055683863s ago: executing program 1 (id=2270): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@prjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xffffffffffffffff}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './sys_mnt\x00'}, 0x6e) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000001c0)={0x7}) r4 = semget$private(0x0, 0x5, 0x0) semop(r4, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semtimedop(r4, &(0x7f0000000080)=[{0x3, 0x8, 0x2c00}, {0x3, 0x1, 0x1800}], 0x1f4, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_mnt/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='TH', 0x2) 3.706811919s ago: executing program 2 (id=2271): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040eb46a05397c6a9162a058594b57e5497395a48742af77280b040a8e10502d9117c2b2fce28b191666e987b6454ab04b4fca55ec1d9cb1"], 0xa) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0x260, 0xffffffff, 0x260, 0xffffffff, 0xffffffff, 0x260, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x88, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x6e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0xffffff00, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x29, 0x0, 0x3}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x340) close(r3) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r6 = socket(0xa, 0x5, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000000)="0a000000010001", 0x7) (fail_nth: 1) getsockopt$IP_VS_SO_GET_INFO(r7, 0x0, 0x481, &(0x7f0000000140), &(0x7f00000005c0)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e22, 0x3f, @ipv4={'\x00', '\xff\xff', @remote}, 0x1000}}, 0x400, 0x81, 0x2, 0xa000000, 0x0, 0x4, 0x8}, 0x0) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xff}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) 3.604611209s ago: executing program 5 (id=2272): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close(0x3) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = dup(r2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, &(0x7f00000000c0)) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f00000004c0)={0x3, 0x1, @stop_pts=0x7}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)=@overlay={0x9, 0x2, 0x4, 0x8, 0x413, {}, {0x4, 0x0, 0x81, 0xf6, 0x28, 0x1, "7a89c908"}, 0x101, 0x3, {}, 0x2}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000005580)=""/102392, 0x18ff8) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) socket(0x400000000010, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x25a, &(0x7f0000000240)="$eJzs2s9rI2UYB/Bn6sqmXbqp+ItdEF/0oF6Gbc8edpEKYkFRK6yC7KydauyYlE4oRMT2pFf/BM/i0Zsge/TSi3+BB2+99LgHcSRNWtOysIs/mqX7+RySh3nnm7zzvmF4ErL/6refb6zX+XrRj5ksi5nrsRt3s1iImTiyG6+8dPOX5969+cGbN1ZWWuOjSymly8///OGXP7xwp3/p/R8v/3Qx9hY+2j9Y+n3vmb0r+3++92mnTp06dXv9VKTbvV6/uF2Vaa1Tb+QpvV2VRV2mTrcut06Mr1e9zc1BKrpr83ObW2Vdp6I7SBvlIPV7qb81SMUnRaeb8jxP83PBv7H6/d2miYPm8VvRNM3sd3HpTsz/Fu3InkjZk9ezp29lz+5mVw6apn06OjudGfPf+sf7z7kwvqkvv5NSK6L6Znt1e3X0PBxtxY316EQVZVyL2fgjhh+TsVH9+hsry9fSoYX4utoZ53e2Vx87fP3j/GK0Y+He+cVRPh3lL0bE8HFuMr8U7Xjq3vmlU/nR+7fi5Rcn8nm049ePoxdVrMUwGzvjJVj+ajGl195aOZW/engeAMB5k6djw/5t2LSd6N/y/MT4RH80yk/0h+379Ien+qsLcfXCdK+diHrwxUZRVeXW8AveYXF85FEtZieX5UGKo59C/r+JzZzYs4dloRTnuYj4bCp3JM7S35t+31NbZzIhAAAAAAAAAAAAHshZ/J1w2tcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA83P4KAAD//8scwHs=") 3.600188595s ago: executing program 4 (id=2273): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 2.732794922s ago: executing program 1 (id=2274): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') exit(0xe0a1) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd86", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000140)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a48793d7368b992a889f51854c7b63c1", 0xda}], 0x1}}], 0x2, 0x2090) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f757365725f78617474722c63616368655f73747261746567793d7265616461686561541d5e9bd39ac2ab48642c00"], 0x1, 0x17a, &(0x7f0000000240)="$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") dup(0xffffffffffffffff) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) write$cgroup_pressure(r0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x406, r2) read$FUSE(r3, 0x0, 0x23) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xdac, &(0x7f0000001e00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x4000, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r4, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0x2, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x100000001], 0x1, 0x8, 0x98f, 0x7}}) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x9, 0x100000, 0x1cc5, 0x8001, 0x8, 0x4, 0x0, 0x0, 0x1, 0x759}}, 0x50) write$tun(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xb2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'dummy0\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x3d}}) syz_emit_ethernet(0x10e, &(0x7f00000002c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "efba04", 0xd8, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@dstopts={0x5c, 0x13, '\x00', [@ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0x5}, @ra={0x5, 0x2, 0x7}, @ra={0x5, 0x2, 0x9c}, @generic={0x9, 0x72, "1dd0be85ce84013b4b86a69273a0b805d352a437b255c14cd7204d8c9e94b1bafe05903bbc2cf4b04955e893415bc3b5212b994250213dd87013778a217289e0d7eb2d2e42620f69f3c387389be54cce2a0c3d86baa6cb928e303d361f80f91e543d390c3bfae3305cc9bd0f1d61b12cc89a"}, @hao={0xc9, 0x10, @private1}, @enc_lim={0x4, 0x1, 0x4}]}]}}}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000a000100aaaaaaaaaa000000300012800c0001006d6163766c616e002000028008000300030000000a0004000180c20000010000060002"], 0x5c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.732434972s ago: executing program 2 (id=2275): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0) getpeername$netlink(r2, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.260369229s ago: executing program 4 (id=2276): newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r0, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000039c0), r1) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x800) 1.416511605s ago: executing program 4 (id=2277): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x48524742, 0x9, 0x0, [{}, {0x0, 0x2}, {}, {}, {}, {0x4000}], 0x0, 0x0, 0x16, 0x1}}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x84, 0x9b, 0x7fff0000}]}) socket$kcm(0x2b, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) 1.243299227s ago: executing program 5 (id=2278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 948.626836ms ago: executing program 4 (id=2279): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='tcp', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='127.0.0.1', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='8', 0x1) write(0xffffffffffffffff, &(0x7f0000000400)='ipv4', 0x4) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') 881.630116ms ago: executing program 1 (id=2280): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0x1) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) capset(0x0, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) r1 = io_uring_setup(0x5282, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x20, &(0x7f0000000000)=[r1], 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000840)={'bond0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000000)={&(0x7f0000000100)={0x1d, r3}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=@can={{0x3, 0x1, 0x0, 0x1}, 0x80, 0x2, 0x0, 0x0, "1d97ee0710e02311"}, 0x10}, 0x2, 0x0, 0x0, 0x20000004}, 0x10044009) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x3, 0x24) move_mount(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000200)='./file0\x00', 0x201) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="8588fa25ba61", 0x0, 0x100004, 0x10026, 0x3, 0x0}) 728.73345ms ago: executing program 4 (id=2281): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 456.025064ms ago: executing program 6 (id=2282): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x429a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_virt_wifi\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x8000) 388.58691ms ago: executing program 2 (id=2283): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x2c, r0, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40048d1}, 0x4894) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000300)={[{@discard}, {@fatal_errors_bug}, {@discard}]}, 0xf4, 0x559e, &(0x7f000000ac40)="$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") r2 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000900)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r7 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r7, 0x29, 0x38, &(0x7f0000000040)=0xfffffffa, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r7, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x1003}], 0x40000000000012d, 0x40010142, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x85, 0x80000001, 0x1, {0x3, 0xff, 0x3, 0x8, 0x200, 0xd615, 0x9, 0x535, 0xfffffffe, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 347.276861ms ago: executing program 1 (id=2284): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) syz_clone(0x81489000, 0x0, 0x61, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 161.875905ms ago: executing program 5 (id=2285): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@prjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xffffffffffffffff}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './sys_mnt\x00'}, 0x6e) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000001c0)={0x7}) r4 = semget$private(0x0, 0x5, 0x0) semop(r4, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semtimedop(r4, &(0x7f0000000080)=[{0x3, 0x8, 0x2c00}, {0x3, 0x1, 0x1800}], 0x1f4, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_mnt/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='TH', 0x2) 0s ago: executing program 6 (id=2286): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000005000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0x9, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x0, 0x1000000000ff6, 0x58e1}) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): 12.669098][T14025] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 912.686469][ T30] audit: type=1800 audit(1786761555.823:229): pid=14025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1981" name="addr_trtype" dev="configfs" ino=31271 res=0 errno=0 [ 912.700214][T14025] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 912.726931][T10764] usb 2-1: Manufacturer: syz [ 912.763421][T10764] usb 2-1: SerialNumber: syz [ 912.968129][T14025] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 912.981988][ T30] audit: type=1800 audit(1786761555.873:231): pid=14025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1981" name="addr_traddr" dev="configfs" ino=32005 res=0 errno=0 [ 913.394983][ T30] audit: type=1800 audit(1786761556.123:232): pid=14025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1981" name="addr_trsvcid" dev="configfs" ino=31277 res=0 errno=0 [ 914.028624][T10764] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 914.264288][T14038] loop1: detected capacity change from 0 to 128 [ 914.346666][T14038] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 915.556499][T10763] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 915.589126][T10278] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 915.599751][T10764] usb 2-1: USB disconnect, device number 52 [ 915.601071][ T5924] udevd[5924]: incorrect ext4 checksum on /dev/loop1 [ 915.786341][T10763] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 915.829048][ T6001] udevd[6001]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 915.857165][T10763] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 915.904020][T10763] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 915.964308][T10763] usb 7-1: config 0 interface 0 has no altsetting 0 [ 916.001139][T10763] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 916.030059][T10763] usb 7-1: Product: syz [ 916.046342][T10763] usb 7-1: Manufacturer: syz [ 916.071898][T10763] usb 7-1: SerialNumber: syz [ 916.183359][T10763] usb 7-1: config 0 descriptor?? [ 916.285090][T10763] usb 7-1: selecting invalid altsetting 0 [ 916.586284][T14039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.688427][T14039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.463557][T10763] usb 7-1: USB disconnect, device number 42 [ 917.598794][T14055] FAULT_INJECTION: forcing a failure. [ 917.598794][T14055] name failslab, interval 1, probability 0, space 0, times 0 [ 917.697204][T14055] CPU: 0 UID: 0 PID: 14055 Comm: syz.1.1992 Tainted: G L syzkaller #0 PREEMPT(full) [ 917.697243][T14055] Tainted: [L]=SOFTLOCKUP [ 917.697253][T14055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 917.697268][T14055] Call Trace: [ 917.697278][T14055] [ 917.697288][T14055] dump_stack_lvl+0xe8/0x150 [ 917.697333][T14055] should_fail_ex+0x40c/0x560 [ 917.697379][T14055] should_failslab+0xa8/0x100 [ 917.697420][T14055] __kmalloc_noprof+0xfe/0x720 [ 917.697452][T14055] ? srso_alias_return_thunk+0x5/0xfbef5 [ 917.697483][T14055] ? rcu_is_watching+0x15/0xb0 [ 917.697523][T14055] ? tomoyo_realpath_from_path+0xef/0x640 [ 917.697551][T14055] ? tomoyo_realpath_from_path+0xef/0x640 [ 917.697588][T14055] tomoyo_realpath_from_path+0xef/0x640 [ 917.697627][T14055] ? tomoyo_path_number_perm+0x219/0x5f0 [ 917.697667][T14055] tomoyo_path_number_perm+0x246/0x5f0 [ 917.697709][T14055] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 917.697746][T14055] ? srso_alias_return_thunk+0x5/0xfbef5 [ 917.697775][T14055] ? __lock_acquire+0x683/0x2cf0 [ 917.697828][T14055] ? srso_alias_return_thunk+0x5/0xfbef5 [ 917.697858][T14055] ? hook_file_ioctl+0x1f0/0x5f0 [ 917.697923][T14055] ? __fget_files+0x2a/0x420 [ 917.697961][T14055] ? __fget_files+0x2a/0x420 [ 917.697994][T14055] ? __fget_files+0x3a2/0x420 [ 917.698027][T14055] ? __fget_files+0x2a/0x420 [ 917.698066][T14055] security_file_ioctl+0xc3/0x2a0 [ 917.698104][T14055] __se_sys_ioctl+0x47/0x170 [ 917.698130][T14055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.698159][T14055] do_syscall_64+0x174/0x580 [ 917.698198][T14055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.698225][T14055] RIP: 0033:0x7fb13cf9e0d9 [ 917.698249][T14055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 917.698270][T14055] RSP: 002b:00007fb13de77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 917.698296][T14055] RAX: ffffffffffffffda RBX: 00007fb13d225fa0 RCX: 00007fb13cf9e0d9 [ 917.698316][T14055] RDX: 0000200000000000 RSI: 0000000000008953 RDI: 0000000000000003 [ 917.698333][T14055] RBP: 00007fb13de77090 R08: 0000000000000000 R09: 0000000000000000 [ 917.698357][T14055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 917.698373][T14055] R13: 00007fb13d226038 R14: 00007fb13d225fa0 R15: 00007ffd84142b88 [ 917.698413][T14055] [ 917.698451][T14055] ERROR: Out of memory at tomoyo_realpath_from_path. [ 918.048956][T14062] FAULT_INJECTION: forcing a failure. [ 918.048956][T14062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 918.098691][T14062] CPU: 0 UID: 0 PID: 14062 Comm: syz.7.1995 Tainted: G L syzkaller #0 PREEMPT(full) [ 918.098731][T14062] Tainted: [L]=SOFTLOCKUP [ 918.098741][T14062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 918.098757][T14062] Call Trace: [ 918.098770][T14062] [ 918.098781][T14062] dump_stack_lvl+0xe8/0x150 [ 918.098822][T14062] should_fail_ex+0x40c/0x560 [ 918.098859][T14062] _copy_from_user+0x2d/0xb0 [ 918.098901][T14062] ___sys_sendmsg+0x1c6/0x360 [ 918.098930][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.098960][T14062] ? __lock_acquire+0x683/0x2cf0 [ 918.099002][T14062] ? __pfx____sys_sendmsg+0x10/0x10 [ 918.099030][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.099068][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.099098][T14062] ? kstrtouint+0x6e/0xe0 [ 918.099158][T14062] ? __fget_files+0x2a/0x420 [ 918.099191][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.099221][T14062] ? __fget_files+0x3a2/0x420 [ 918.099268][T14062] __sys_sendmmsg+0x273/0x4d0 [ 918.099305][T14062] ? __pfx___sys_sendmmsg+0x10/0x10 [ 918.099346][T14062] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 918.099400][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.099429][T14062] ? ksys_write+0x242/0x270 [ 918.099472][T14062] ? __pfx_ksys_write+0x10/0x10 [ 918.099520][T14062] __x64_sys_sendmmsg+0xa0/0xc0 [ 918.099551][T14062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.099579][T14062] do_syscall_64+0x174/0x580 [ 918.099609][T14062] ? trace_irq_disable+0x3b/0x140 [ 918.099647][T14062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.099674][T14062] RIP: 0033:0x7f35fbb9e0d9 [ 918.099696][T14062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.099717][T14062] RSP: 002b:00007f35fca7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 918.099744][T14062] RAX: ffffffffffffffda RBX: 00007f35fbe25fa0 RCX: 00007f35fbb9e0d9 [ 918.099763][T14062] RDX: 0000000000000001 RSI: 0000200000005200 RDI: 0000000000000003 [ 918.099781][T14062] RBP: 00007f35fca7a090 R08: 0000000000000000 R09: 0000000000000000 [ 918.099797][T14062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.099813][T14062] R13: 00007f35fbe26038 R14: 00007f35fbe25fa0 R15: 00007fff80c10ca8 [ 918.099853][T14062] [ 919.216601][T14077] loop5: detected capacity change from 0 to 32768 [ 919.228780][T14077] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1984 (14077) [ 919.251275][T14077] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 919.261763][T14077] BTRFS info (device loop5): using sha256 checksum algorithm [ 919.351737][T10763] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 919.583642][T10763] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 919.606058][T10763] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 919.626856][T10763] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.638595][T10763] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 919.651734][T10763] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 919.681894][T10763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.693062][T10763] usb 2-1: Product: syz [ 919.697264][T10763] usb 2-1: Manufacturer: syz [ 919.704581][T10763] usb 2-1: SerialNumber: syz [ 919.739426][T14077] BTRFS info (device loop5): enabling ssd optimizations [ 919.746564][T14077] BTRFS info (device loop5): turning on sync discard [ 919.753496][T14077] BTRFS info (device loop5): enabling free space tree [ 919.924192][ T30] audit: type=1800 audit(1786761563.103:233): pid=14077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1984" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 920.100462][T10763] usb 2-1: Cannot retrieve CPort count: 0 [ 920.167907][T10763] usb 2-1: Cannot retrieve CPort count: -5 [ 920.258502][T10763] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -5 [ 921.024559][T14105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1999'. [ 921.066040][T14074] Bluetooth: hci2: command 0x0406 tx timeout [ 921.162169][T14110] size and base must be multiples of 4 kiB [ 921.168030][T14110] CPU: 1 UID: 0 PID: 14110 Comm: syz.2.1999 Tainted: G L syzkaller #0 PREEMPT(full) [ 921.168065][T14110] Tainted: [L]=SOFTLOCKUP [ 921.168074][T14110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 921.168090][T14110] Call Trace: [ 921.168100][T14110] [ 921.168110][T14110] dump_stack_lvl+0xe8/0x150 [ 921.168151][T14110] mtrr_del+0xc8/0xf0 [ 921.168186][T14110] mtrr_ioctl+0xcb8/0x13b0 [ 921.168228][T14110] ? __pfx_mtrr_ioctl+0x10/0x10 [ 921.168280][T14110] ? __fget_files+0x2a/0x420 [ 921.168314][T14110] ? __fget_files+0x3a2/0x420 [ 921.168346][T14110] ? __fget_files+0x2a/0x420 [ 921.168378][T14110] ? __pfx_mtrr_ioctl+0x10/0x10 [ 921.168412][T14110] proc_reg_unlocked_ioctl+0x1d6/0x2c0 [ 921.168458][T14110] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 921.168501][T14110] __se_sys_ioctl+0xfc/0x170 [ 921.168526][T14110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.168555][T14110] do_syscall_64+0x174/0x580 [ 921.168584][T14110] ? trace_irq_disable+0x3b/0x140 [ 921.168623][T14110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.168649][T14110] RIP: 0033:0x7fda48b9e0d9 [ 921.168672][T14110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.168693][T14110] RSP: 002b:00007fda49af7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 921.168719][T14110] RAX: ffffffffffffffda RBX: 00007fda48e26180 RCX: 00007fda48b9e0d9 [ 921.168738][T14110] RDX: 0000200000000200 RSI: 0000000040104d04 RDI: 0000000000000008 [ 921.168756][T14110] RBP: 00007fda48c35024 R08: 0000000000000000 R09: 0000000000000000 [ 921.168772][T14110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 921.168788][T14110] R13: 00007fda48e26218 R14: 00007fda48e26180 R15: 00007fff503bd378 [ 921.168827][T14110] [ 921.460054][ T5605] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 921.792146][ T980] usb 2-1: USB disconnect, device number 53 [ 922.504874][T14116] input: syz0 as /devices/virtual/input/input20 [ 922.517400][ T5612] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 922.531014][T14126] netlink: 'syz.2.2005': attribute type 1 has an invalid length. [ 923.171483][T14130] FAULT_INJECTION: forcing a failure. [ 923.171483][T14130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 923.184895][T14130] CPU: 0 UID: 0 PID: 14130 Comm: syz.1.2006 Tainted: G L syzkaller #0 PREEMPT(full) [ 923.184931][T14130] Tainted: [L]=SOFTLOCKUP [ 923.184940][T14130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 923.184959][T14130] Call Trace: [ 923.184970][T14130] [ 923.184984][T14130] dump_stack_lvl+0xe8/0x150 [ 923.185027][T14130] should_fail_ex+0x40c/0x560 [ 923.185065][T14130] _copy_from_user+0x2d/0xb0 [ 923.185105][T14130] io_submit_one+0xd2/0x13d0 [ 923.185138][T14130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 923.185169][T14130] ? lockdep_hardirqs_on+0x7a/0x110 [ 923.185200][T14130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 923.185230][T14130] ? irqentry_exit+0x218/0x8f0 [ 923.185266][T14130] ? __pfx_io_submit_one+0x10/0x10 [ 923.185293][T14130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 923.185335][T14130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 923.185370][T14130] ? __might_fault+0xaf/0x130 [ 923.185404][T14130] __se_sys_io_submit+0x195/0x340 [ 923.185446][T14130] ? __pfx___se_sys_io_submit+0x10/0x10 [ 923.185482][T14130] ? ksys_write+0x242/0x270 [ 923.185538][T14130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.185567][T14130] do_syscall_64+0x174/0x580 [ 923.185606][T14130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.185633][T14130] RIP: 0033:0x7fb13cf9e0d9 [ 923.185655][T14130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.185677][T14130] RSP: 002b:00007fb13de56028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 923.185703][T14130] RAX: ffffffffffffffda RBX: 00007fb13d226090 RCX: 00007fb13cf9e0d9 [ 923.185723][T14130] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007fb13de12000 [ 923.185741][T14130] RBP: 00007fb13de56090 R08: 0000000000000000 R09: 0000000000000000 [ 923.185758][T14130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.185774][T14130] R13: 00007fb13d226128 R14: 00007fb13d226090 R15: 00007ffd84142b88 [ 923.185814][T14130] [ 924.211794][T10763] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 924.220780][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 924.359999][T10763] usb 6-1: device descriptor read/64, error -32 [ 924.642209][T10763] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 924.758097][T14126] 8021q: adding VLAN 0 to HW filter on device bond1 [ 924.835234][T10763] usb 6-1: Using ep0 maxpacket: 8 [ 924.874655][T10763] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 924.914721][T14140] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2010'. [ 924.955217][T10763] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 924.999419][T14140] openvswitch: netlink: EtherType 300 is less than min 600 [ 925.049070][T14138] loop4: detected capacity change from 0 to 32768 [ 925.057741][T14138] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2009 (14138) [ 925.077951][T14138] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 925.088083][T14138] BTRFS info (device loop4): using sha256 checksum algorithm [ 925.177508][T10763] usb 6-1: string descriptor 0 read error: -71 [ 925.227171][T10763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.243122][T14127] bond1: (slave veth3): Enslaving as an active interface with a down link [ 925.266529][T14133] veth0_virt_wifi: entered promiscuous mode [ 925.281851][T14133] bond1: (slave veth0_virt_wifi): making interface the new active one [ 925.292289][T14133] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 925.310816][T10763] usb 6-1: config 0 descriptor?? [ 925.322816][T14138] BTRFS info (device loop4): enabling ssd optimizations [ 925.329803][T14138] BTRFS info (device loop4): turning on sync discard [ 925.332255][T10763] usb 6-1: can't set config #0, error -71 [ 925.336542][T14138] BTRFS info (device loop4): enabling free space tree [ 925.370068][T10763] usb 6-1: USB disconnect, device number 39 [ 925.417718][T14134] bond1: (slave veth0_virt_wifi): Releasing active interface [ 925.490558][ T30] audit: type=1800 audit(1786761568.663:234): pid=14138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2009" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 926.383271][T14165] FAULT_INJECTION: forcing a failure. [ 926.383271][T14165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 926.396706][T14165] CPU: 1 UID: 0 PID: 14165 Comm: syz.2.2014 Tainted: G L syzkaller #0 PREEMPT(full) [ 926.396742][T14165] Tainted: [L]=SOFTLOCKUP [ 926.396753][T14165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 926.396769][T14165] Call Trace: [ 926.396779][T14165] [ 926.396789][T14165] dump_stack_lvl+0xe8/0x150 [ 926.396831][T14165] should_fail_ex+0x40c/0x560 [ 926.396868][T14165] _copy_from_user+0x2d/0xb0 [ 926.396910][T14165] sk_setsockopt+0x2b5/0x2f10 [ 926.396940][T14165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.396975][T14165] ? __pfx_sk_setsockopt+0x10/0x10 [ 926.397005][T14165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.397041][T14165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.397081][T14165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.397115][T14165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.397145][T14165] ? aa_sock_opt_perm+0xd4/0x1a0 [ 926.397175][T14165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.397205][T14165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.397240][T14165] do_sock_setsockopt+0x11b/0x1b0 [ 926.397274][T14165] __x64_sys_setsockopt+0x13d/0x1b0 [ 926.397310][T14165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.397341][T14165] do_syscall_64+0x174/0x580 [ 926.397382][T14165] ? trace_irq_disable+0x3b/0x140 [ 926.397424][T14165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.397451][T14165] RIP: 0033:0x7fda48b9e0d9 [ 926.397474][T14165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.397496][T14165] RSP: 002b:00007fda49b39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 926.397523][T14165] RAX: ffffffffffffffda RBX: 00007fda48e25fa0 RCX: 00007fda48b9e0d9 [ 926.397542][T14165] RDX: 0000000000000025 RSI: 0000000000000001 RDI: 0000000000000003 [ 926.397558][T14165] RBP: 00007fda49b39090 R08: 0000000000000004 R09: 0000000000000000 [ 926.397575][T14165] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 926.397592][T14165] R13: 00007fda48e26038 R14: 00007fda48e25fa0 R15: 00007fff503bd378 [ 926.397632][T14165] [ 926.864532][T14169] sock: sock_timestamping_bind_phc: sock not bind to device [ 926.910505][T14167] sock: sock_timestamping_bind_phc: sock not bind to device [ 926.980308][ T5610] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 927.692647][T14188] FAULT_INJECTION: forcing a failure. [ 927.692647][T14188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 927.941835][T14188] CPU: 1 UID: 0 PID: 14188 Comm: syz.7.2022 Tainted: G L syzkaller #0 PREEMPT(full) [ 927.941872][T14188] Tainted: [L]=SOFTLOCKUP [ 927.941884][T14188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 927.941896][T14188] Call Trace: [ 927.941904][T14188] [ 927.941913][T14188] dump_stack_lvl+0xe8/0x150 [ 927.941952][T14188] should_fail_ex+0x40c/0x560 [ 927.941989][T14188] _copy_from_user+0x2d/0xb0 [ 927.942027][T14188] ___sys_sendmsg+0x1c6/0x360 [ 927.942049][T14188] ? srso_alias_return_thunk+0x5/0xfbef5 [ 927.942072][T14188] ? __lock_acquire+0x683/0x2cf0 [ 927.942111][T14188] ? __pfx____sys_sendmsg+0x10/0x10 [ 927.942179][T14188] ? __fget_files+0x2a/0x420 [ 927.942203][T14188] ? srso_alias_return_thunk+0x5/0xfbef5 [ 927.942224][T14188] ? __fget_files+0x3a2/0x420 [ 927.942271][T14188] __x64_sys_sendmsg+0x1b1/0x290 [ 927.942304][T14188] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 927.942347][T14188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.942368][T14188] do_syscall_64+0x174/0x580 [ 927.942396][T14188] ? trace_irq_disable+0x3b/0x140 [ 927.942435][T14188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.942459][T14188] RIP: 0033:0x7f35fbb9e0d9 [ 927.942480][T14188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.942495][T14188] RSP: 002b:00007f35fca7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 927.942515][T14188] RAX: ffffffffffffffda RBX: 00007f35fbe25fa0 RCX: 00007f35fbb9e0d9 [ 927.942530][T14188] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 927.942547][T14188] RBP: 00007f35fca7a090 R08: 0000000000000000 R09: 0000000000000000 [ 927.942564][T14188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.942579][T14188] R13: 00007f35fbe26038 R14: 00007f35fbe25fa0 R15: 00007fff80c10ca8 [ 927.942617][T14188] [ 928.263526][T14196] FAULT_INJECTION: forcing a failure. [ 928.263526][T14196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 928.276685][T14196] CPU: 1 UID: 0 PID: 14196 Comm: syz.1.2007 Tainted: G L syzkaller #0 PREEMPT(full) [ 928.276721][T14196] Tainted: [L]=SOFTLOCKUP [ 928.276730][T14196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 928.276745][T14196] Call Trace: [ 928.276755][T14196] [ 928.276766][T14196] dump_stack_lvl+0xe8/0x150 [ 928.276807][T14196] should_fail_ex+0x40c/0x560 [ 928.276844][T14196] _copy_to_user+0x31/0xb0 [ 928.276899][T14196] simple_read_from_buffer+0xe1/0x170 [ 928.276941][T14196] proc_fail_nth_read+0x1bb/0x230 [ 928.276978][T14196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.277014][T14196] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 928.277054][T14196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.277083][T14196] ? rw_verify_area+0x24a/0x4c0 [ 928.277125][T14196] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 928.277162][T14196] vfs_read+0x213/0xa80 [ 928.277207][T14196] ? __pfx___mutex_lock+0x10/0x10 [ 928.277240][T14196] ? __pfx_vfs_read+0x10/0x10 [ 928.277281][T14196] ? __fget_files+0x2a/0x420 [ 928.277320][T14196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.277349][T14196] ? __fget_files+0x3a2/0x420 [ 928.277382][T14196] ? __fget_files+0x2a/0x420 [ 928.277420][T14196] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.277456][T14196] ksys_read+0x150/0x270 [ 928.277498][T14196] ? __pfx_ksys_read+0x10/0x10 [ 928.277548][T14196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.277578][T14196] do_syscall_64+0x174/0x580 [ 928.277610][T14196] ? trace_irq_disable+0x3b/0x140 [ 928.277649][T14196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.277675][T14196] RIP: 0033:0x7fb13cf5e90e [ 928.277698][T14196] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 928.277720][T14196] RSP: 002b:00007fb13de55fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 928.277747][T14196] RAX: ffffffffffffffda RBX: 00007fb13de566c0 RCX: 00007fb13cf5e90e [ 928.277766][T14196] RDX: 000000000000000f RSI: 00007fb13de560a0 RDI: 0000000000000006 [ 928.277783][T14196] RBP: 00007fb13de56090 R08: 0000000000000000 R09: 0000000000000000 [ 928.277799][T14196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.277815][T14196] R13: 00007fb13d226128 R14: 00007fb13d226090 R15: 00007ffd84142b88 [ 928.277856][T14196] [ 930.233185][T14201] netlink: 'syz.7.2026': attribute type 1 has an invalid length. [ 930.254744][T14201] netlink: 232 bytes leftover after parsing attributes in process `syz.7.2026'. [ 930.310732][T14201] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2026'. [ 930.323125][T14205] xt_hashlimit: size too large, truncated to 1048576 [ 930.404729][T14204] loop7: detected capacity change from 0 to 512 [ 930.448694][T14204] EXT4-fs: Ignoring removed orlov option [ 930.547779][T14204] EXT4-fs: Mount option(s) incompatible with ext3 [ 930.557010][T14210] loop1: detected capacity change from 0 to 512 [ 930.775524][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.784996][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 930.799105][T14210] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.2028: bad orphan inode 11862016 [ 930.832029][T14210] loop1: lost filesystem error report for type 5 error -117 [ 930.876862][T14210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 930.958383][T14216] FAULT_INJECTION: forcing a failure. [ 930.958383][T14216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 931.050260][T14216] CPU: 1 UID: 0 PID: 14216 Comm: syz.2.2030 Tainted: G L syzkaller #0 PREEMPT(full) [ 931.050297][T14216] Tainted: [L]=SOFTLOCKUP [ 931.050307][T14216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 931.050323][T14216] Call Trace: [ 931.050333][T14216] [ 931.050343][T14216] dump_stack_lvl+0xe8/0x150 [ 931.050384][T14216] should_fail_ex+0x40c/0x560 [ 931.050421][T14216] _copy_to_iter+0x1e4/0x1810 [ 931.050463][T14216] ? srso_alias_return_thunk+0x5/0xfbef5 [ 931.050494][T14216] ? do_raw_spin_lock+0x12b/0x2f0 [ 931.050529][T14216] ? __pfx__copy_to_iter+0x10/0x10 [ 931.050562][T14216] ? srso_alias_return_thunk+0x5/0xfbef5 [ 931.050596][T14216] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 931.050624][T14216] ? srso_alias_return_thunk+0x5/0xfbef5 [ 931.050654][T14216] ? lockdep_hardirqs_on+0x7a/0x110 [ 931.050683][T14216] ? srso_alias_return_thunk+0x5/0xfbef5 [ 931.050713][T14216] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 931.050740][T14216] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 931.050781][T14216] __skb_datagram_iter+0xf8/0x980 [ 931.050812][T14216] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 931.050852][T14216] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 931.050901][T14216] skb_copy_datagram_iter+0xb5/0x240 [ 931.050940][T14216] netlink_recvmsg+0x2b9/0xa50 [ 931.050984][T14216] ? __pfx_netlink_recvmsg+0x10/0x10 [ 931.051015][T14216] ? srso_alias_return_thunk+0x5/0xfbef5 [ 931.051045][T14216] ? kstrtoull+0x12f/0x1d0 [ 931.051078][T14216] ? srso_alias_return_thunk+0x5/0xfbef5 [ 931.051108][T14216] ? aa_sock_msg_perm+0xf1/0x1b0 [ 931.051136][T14216] ? srso_alias_return_thunk+0x5/0xfbef5 [ 931.051167][T14216] ? srso_alias_return_thunk+0x5/0xfbef5 [ 931.051198][T14216] ? security_socket_recvmsg+0x7e/0x2c0 [ 931.051231][T14216] ? __pfx_netlink_recvmsg+0x10/0x10 [ 931.051263][T14216] sock_recvmsg+0x196/0x1e0 [ 931.051309][T14216] sock_read_iter+0x22a/0x2f0 [ 931.051348][T14216] ? __pfx_sock_read_iter+0x10/0x10 [ 931.051392][T14216] ? srso_alias_return_thunk+0x5/0xfbef5 [ 931.051422][T14216] ? security_file_permission+0x75/0x260 [ 931.051467][T14216] vfs_read+0x595/0xa80 [ 931.051518][T14216] ? __pfx_vfs_read+0x10/0x10 [ 931.051569][T14216] ? __fget_files+0x2a/0x420 [ 931.051609][T14216] ? srso_alias_return_thunk+0x5/0xfbef5 [ 931.051644][T14216] ksys_read+0x150/0x270 [ 931.051687][T14216] ? __pfx_ksys_read+0x10/0x10 [ 931.051748][T14216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.051778][T14216] do_syscall_64+0x174/0x580 [ 931.051817][T14216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.051844][T14216] RIP: 0033:0x7fda48b9e0d9 [ 931.051867][T14216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 931.051896][T14216] RSP: 002b:00007fda49b39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 931.051924][T14216] RAX: ffffffffffffffda RBX: 00007fda48e25fa0 RCX: 00007fda48b9e0d9 [ 931.051943][T14216] RDX: 000000000000fdef RSI: 00002000000000c0 RDI: 0000000000000004 [ 931.051960][T14216] RBP: 00007fda49b39090 R08: 0000000000000000 R09: 0000000000000000 [ 931.051977][T14216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 931.051992][T14216] R13: 00007fda48e26038 R14: 00007fda48e25fa0 R15: 00007fff503bd378 [ 931.052032][T14216] [ 931.480529][T14210] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 931.938470][T14221] netlink: zone id is out of range [ 931.968982][T14221] netlink: zone id is out of range [ 931.987283][T14228] FAULT_INJECTION: forcing a failure. [ 931.987283][T14228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 932.006833][T14221] netlink: zone id is out of range [ 932.028004][T14221] netlink: zone id is out of range [ 932.041008][T14228] CPU: 0 UID: 0 PID: 14228 Comm: syz.4.2035 Tainted: G L syzkaller #0 PREEMPT(full) [ 932.041044][T14228] Tainted: [L]=SOFTLOCKUP [ 932.041054][T14228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 932.041069][T14228] Call Trace: [ 932.041080][T14228] [ 932.041093][T14228] dump_stack_lvl+0xe8/0x150 [ 932.041134][T14228] should_fail_ex+0x40c/0x560 [ 932.041172][T14228] _copy_from_user+0x2d/0xb0 [ 932.041213][T14228] ___sys_sendmsg+0x1c6/0x360 [ 932.041243][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 932.041273][T14228] ? __lock_acquire+0x683/0x2cf0 [ 932.041314][T14228] ? __pfx____sys_sendmsg+0x10/0x10 [ 932.041395][T14228] ? __fget_files+0x2a/0x420 [ 932.041429][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 932.041459][T14228] ? __fget_files+0x3a2/0x420 [ 932.041507][T14228] __x64_sys_sendmsg+0x1b1/0x290 [ 932.041542][T14228] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 932.041595][T14228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.041625][T14228] do_syscall_64+0x174/0x580 [ 932.041657][T14228] ? trace_irq_disable+0x3b/0x140 [ 932.041696][T14228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.041722][T14228] RIP: 0033:0x7f6237d9e0d9 [ 932.041745][T14228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 932.041766][T14228] RSP: 002b:00007f6238cef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 932.041792][T14228] RAX: ffffffffffffffda RBX: 00007f6238025fa0 RCX: 00007f6237d9e0d9 [ 932.041812][T14228] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 932.041829][T14228] RBP: 00007f6238cef090 R08: 0000000000000000 R09: 0000000000000000 [ 932.041846][T14228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.041861][T14228] R13: 00007f6238026038 R14: 00007f6238025fa0 R15: 00007fff55762078 [ 932.041902][T14228] [ 932.235628][T14221] netlink: zone id is out of range [ 932.240970][T14221] netlink: zone id is out of range [ 932.246160][T14221] netlink: zone id is out of range [ 932.251334][T14221] netlink: zone id is out of range [ 932.256532][T14221] netlink: zone id is out of range [ 932.261717][T14221] netlink: zone id is out of range [ 933.365712][T14238] FAULT_INJECTION: forcing a failure. [ 933.365712][T14238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 933.697109][T14238] CPU: 0 UID: 0 PID: 14238 Comm: syz.7.2039 Tainted: G L syzkaller #0 PREEMPT(full) [ 933.697149][T14238] Tainted: [L]=SOFTLOCKUP [ 933.697162][T14238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 933.697178][T14238] Call Trace: [ 933.697189][T14238] [ 933.697200][T14238] dump_stack_lvl+0xe8/0x150 [ 933.697244][T14238] should_fail_ex+0x40c/0x560 [ 933.697282][T14238] _copy_to_user+0x31/0xb0 [ 933.697326][T14238] simple_read_from_buffer+0xe1/0x170 [ 933.697369][T14238] proc_fail_nth_read+0x1bb/0x230 [ 933.697413][T14238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 933.697450][T14238] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 933.697491][T14238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 933.697522][T14238] ? rw_verify_area+0x24a/0x4c0 [ 933.697565][T14238] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 933.697603][T14238] vfs_read+0x213/0xa80 [ 933.697650][T14238] ? __pfx___mutex_lock+0x10/0x10 [ 933.697685][T14238] ? __pfx_vfs_read+0x10/0x10 [ 933.697727][T14238] ? __fget_files+0x2a/0x420 [ 933.697767][T14238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 933.697797][T14238] ? __fget_files+0x3a2/0x420 [ 933.697832][T14238] ? __fget_files+0x2a/0x420 [ 933.697871][T14238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 933.697907][T14238] ksys_read+0x150/0x270 [ 933.697951][T14238] ? __pfx_ksys_read+0x10/0x10 [ 933.698002][T14238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.698031][T14238] do_syscall_64+0x174/0x580 [ 933.698064][T14238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 933.698102][T14238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.698128][T14238] RIP: 0033:0x7f35fbb5e90e [ 933.698152][T14238] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 933.698174][T14238] RSP: 002b:00007f35fca79fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 933.698201][T14238] RAX: ffffffffffffffda RBX: 00007f35fca7a6c0 RCX: 00007f35fbb5e90e [ 933.698222][T14238] RDX: 000000000000000f RSI: 00007f35fca7a0a0 RDI: 0000000000000005 [ 933.698239][T14238] RBP: 00007f35fca7a090 R08: 0000000000000000 R09: 0000000000000000 [ 933.698256][T14238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 933.698273][T14238] R13: 00007f35fbe26038 R14: 00007f35fbe25fa0 R15: 00007fff80c10ca8 [ 933.698315][T14238] [ 934.129685][ T5606] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 934.239963][T14244] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2040'. [ 934.617949][T14251] FAULT_INJECTION: forcing a failure. [ 934.617949][T14251] name failslab, interval 1, probability 0, space 0, times 0 [ 934.680395][T14251] CPU: 1 UID: 0 PID: 14251 Comm: syz.1.2041 Tainted: G L syzkaller #0 PREEMPT(full) [ 934.680432][T14251] Tainted: [L]=SOFTLOCKUP [ 934.680441][T14251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 934.680457][T14251] Call Trace: [ 934.680468][T14251] [ 934.680479][T14251] dump_stack_lvl+0xe8/0x150 [ 934.680520][T14251] should_fail_ex+0x40c/0x560 [ 934.680558][T14251] should_failslab+0xa8/0x100 [ 934.680598][T14251] __kmalloc_cache_noprof+0xa8/0x660 [ 934.680636][T14251] ? pagemap_read+0x281/0x7c0 [ 934.680666][T14251] ? pagemap_read+0x281/0x7c0 [ 934.680705][T14251] pagemap_read+0x281/0x7c0 [ 934.680736][T14251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.680769][T14251] ? __lock_acquire+0x683/0x2cf0 [ 934.680810][T14251] ? __pfx_pagemap_read+0x10/0x10 [ 934.680849][T14251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.680878][T14251] ? rw_verify_area+0x24a/0x4c0 [ 934.680924][T14251] ? __pfx_pagemap_read+0x10/0x10 [ 934.680955][T14251] vfs_read+0x213/0xa80 [ 934.681003][T14251] ? __pfx_vfs_read+0x10/0x10 [ 934.681040][T14251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.681074][T14251] ? __fget_files+0x2a/0x420 [ 934.681115][T14251] ? __fget_files+0x2a/0x420 [ 934.681147][T14251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.681176][T14251] ? __fget_files+0x3a2/0x420 [ 934.681212][T14251] ? __fget_files+0x2a/0x420 [ 934.681250][T14251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.681285][T14251] __x64_sys_pread64+0x196/0x220 [ 934.681330][T14251] ? __pfx___x64_sys_pread64+0x10/0x10 [ 934.681382][T14251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.681411][T14251] do_syscall_64+0x174/0x580 [ 934.681442][T14251] ? trace_irq_disable+0x3b/0x140 [ 934.681481][T14251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.681509][T14251] RIP: 0033:0x7fb13cf9e0d9 [ 934.681531][T14251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 934.681553][T14251] RSP: 002b:00007fb13de77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 934.681580][T14251] RAX: ffffffffffffffda RBX: 00007fb13d225fa0 RCX: 00007fb13cf9e0d9 [ 934.681600][T14251] RDX: 0000000000019020 RSI: 0000200000000200 RDI: 0000000000000004 [ 934.681618][T14251] RBP: 00007fb13de77090 R08: 0000000000000000 R09: 0000000000000000 [ 934.681635][T14251] R10: 0000001000000000 R11: 0000000000000246 R12: 0000000000000001 [ 934.681652][T14251] R13: 00007fb13d226038 R14: 00007fb13d225fa0 R15: 00007ffd84142b88 [ 934.681692][T14251] [ 936.301780][T14260] 9pnet_virtio: no channels available for device syz [ 937.057157][T14266] xt_hashlimit: size too large, truncated to 1048576 [ 938.440218][T14277] FAULT_INJECTION: forcing a failure. [ 938.440218][T14277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 938.453920][T14277] CPU: 1 UID: 0 PID: 14277 Comm: syz.6.2033 Tainted: G L syzkaller #0 PREEMPT(full) [ 938.453956][T14277] Tainted: [L]=SOFTLOCKUP [ 938.453966][T14277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 938.453981][T14277] Call Trace: [ 938.453991][T14277] [ 938.454001][T14277] dump_stack_lvl+0xe8/0x150 [ 938.454041][T14277] should_fail_ex+0x40c/0x560 [ 938.454079][T14277] _copy_from_user+0x2d/0xb0 [ 938.454120][T14277] ___sys_sendmsg+0x1c6/0x360 [ 938.454149][T14277] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.454179][T14277] ? __lock_acquire+0x683/0x2cf0 [ 938.454220][T14277] ? __pfx____sys_sendmsg+0x10/0x10 [ 938.454293][T14277] ? __fget_files+0x2a/0x420 [ 938.454326][T14277] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.454356][T14277] ? __fget_files+0x3a2/0x420 [ 938.454402][T14277] __x64_sys_sendmsg+0x1b1/0x290 [ 938.454436][T14277] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 938.454488][T14277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.454517][T14277] do_syscall_64+0x174/0x580 [ 938.454548][T14277] ? trace_irq_disable+0x3b/0x140 [ 938.454586][T14277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.454612][T14277] RIP: 0033:0x7fb204b9e0d9 [ 938.454634][T14277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.454655][T14277] RSP: 002b:00007fb2059bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 938.454681][T14277] RAX: ffffffffffffffda RBX: 00007fb204e25fa0 RCX: 00007fb204b9e0d9 [ 938.454701][T14277] RDX: 0000000020040000 RSI: 0000200000000380 RDI: 0000000000000003 [ 938.454718][T14277] RBP: 00007fb2059bb090 R08: 0000000000000000 R09: 0000000000000000 [ 938.454738][T14277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.454754][T14277] R13: 00007fb204e26038 R14: 00007fb204e25fa0 R15: 00007ffc24b586e8 [ 938.454794][T14277] [ 938.747633][T14274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.791111][T14274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.946375][T14270] loop7: detected capacity change from 0 to 1764 [ 938.998924][T14280] FAULT_INJECTION: forcing a failure. [ 938.998924][T14280] name failslab, interval 1, probability 0, space 0, times 0 [ 939.001913][T10763] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 939.114080][T14283] loop4: detected capacity change from 0 to 256 [ 939.121976][T14281] lo speed is unknown, defaulting to 1000 [ 939.126235][T14280] CPU: 1 UID: 0 PID: 14280 Comm: syz.2.2052 Tainted: G L syzkaller #0 PREEMPT(full) [ 939.126270][T14280] Tainted: [L]=SOFTLOCKUP [ 939.126280][T14280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 939.126295][T14280] Call Trace: [ 939.126305][T14280] [ 939.126316][T14280] dump_stack_lvl+0xe8/0x150 [ 939.126356][T14280] should_fail_ex+0x40c/0x560 [ 939.126394][T14280] should_failslab+0xa8/0x100 [ 939.126433][T14280] __kmalloc_noprof+0xfe/0x720 [ 939.126464][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.126494][T14280] ? rcu_is_watching+0x15/0xb0 [ 939.126533][T14280] ? tomoyo_realpath_from_path+0xef/0x640 [ 939.126561][T14280] ? tomoyo_realpath_from_path+0xef/0x640 [ 939.126598][T14280] tomoyo_realpath_from_path+0xef/0x640 [ 939.126638][T14280] ? tomoyo_path_number_perm+0x219/0x5f0 [ 939.126676][T14280] tomoyo_path_number_perm+0x246/0x5f0 [ 939.126718][T14280] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 939.126752][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.126782][T14280] ? __lock_acquire+0x683/0x2cf0 [ 939.126834][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.126863][T14280] ? hook_file_ioctl+0x1f0/0x5f0 [ 939.126935][T14280] ? __fget_files+0x2a/0x420 [ 939.126972][T14280] ? __fget_files+0x2a/0x420 [ 939.127004][T14280] ? __fget_files+0x3a2/0x420 [ 939.127036][T14280] ? __fget_files+0x2a/0x420 [ 939.127077][T14280] security_file_ioctl+0xc3/0x2a0 [ 939.127115][T14280] __se_sys_ioctl+0x47/0x170 [ 939.127141][T14280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.127170][T14280] do_syscall_64+0x174/0x580 [ 939.127199][T14280] ? trace_irq_disable+0x3b/0x140 [ 939.127238][T14280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.127264][T14280] RIP: 0033:0x7fda48b9e0d9 [ 939.127286][T14280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.127307][T14280] RSP: 002b:00007fda49b39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 939.127334][T14280] RAX: ffffffffffffffda RBX: 00007fda48e25fa0 RCX: 00007fda48b9e0d9 [ 939.127352][T14280] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000004 [ 939.127369][T14280] RBP: 00007fda49b39090 R08: 0000000000000000 R09: 0000000000000000 [ 939.127385][T14280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 939.127400][T14280] R13: 00007fda48e26038 R14: 00007fda48e25fa0 R15: 00007fff503bd378 [ 939.127440][T14280] [ 939.416021][T14280] ERROR: Out of memory at tomoyo_realpath_from_path. [ 939.444558][T14283] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x0faec825, utbl_chksum : 0xe619d30d) [ 939.459036][T14270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.478910][T14283] exFAT-fs (loop4): failed to load alloc-bitmap [ 939.499762][T14270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.508816][T14283] exFAT-fs (loop4): failed to recognize exfat type [ 939.539707][T10763] usb 8-1: unable to get BOS descriptor or descriptor too short [ 939.552568][T10763] usb 8-1: New USB device found, idVendor=0bfd, idProduct=0108, bcdDevice=a1.2e [ 939.575262][T10763] usb 8-1: config 255 has an invalid interface number: 199 but max is 0 [ 939.593636][T10763] usb 8-1: config 255 has no interface number 0 [ 939.672547][T14288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2054'. [ 940.445307][T10763] usb 8-1: config 255 interface 199 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 940.455463][T10763] usb 8-1: config 255 interface 199 has no altsetting 0 [ 940.468167][T10763] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.476379][T10763] usb 8-1: Product: syz [ 940.480591][T10763] usb 8-1: Manufacturer: syz [ 940.485352][T10763] usb 8-1: SerialNumber: syz [ 940.513235][T14272] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 940.614092][T14294] loop2: detected capacity change from 0 to 256 [ 940.688014][ T30] audit: type=1800 audit(1786761583.863:235): pid=14294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2056" name="file1" dev="loop2" ino=1049129 res=0 errno=0 [ 940.758474][T10763] kvaser_usb 8-1:255.199: error -ENODEV: Cannot get usb endpoint(s) [ 940.809797][T10763] usb 8-1: USB disconnect, device number 16 [ 941.032511][ T980] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 941.206205][ T980] usb 3-1: unable to get BOS descriptor or descriptor too short [ 941.226368][ T980] usb 3-1: not running at top speed; connect to a high speed hub [ 941.247456][ T980] usb 3-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 941.268061][ T980] usb 3-1: config 4 has an invalid interface number: 135 but max is 0 [ 941.277762][ T980] usb 3-1: config 4 has no interface number 0 [ 941.290330][ T980] usb 3-1: config 4 interface 135 has no altsetting 0 [ 941.317207][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.349164][ T980] usb 3-1: Product: syz [ 941.359748][ T980] usb 3-1: Manufacturer: syz [ 941.375614][ T980] usb 3-1: SerialNumber: syz [ 941.965604][T14308] FAULT_INJECTION: forcing a failure. [ 941.965604][T14308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 942.173380][T14308] CPU: 0 UID: 0 PID: 14308 Comm: syz.4.2061 Tainted: G L syzkaller #0 PREEMPT(full) [ 942.173426][T14308] Tainted: [L]=SOFTLOCKUP [ 942.173436][T14308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 942.173451][T14308] Call Trace: [ 942.173465][T14308] [ 942.173477][T14308] dump_stack_lvl+0xe8/0x150 [ 942.173520][T14308] should_fail_ex+0x40c/0x560 [ 942.173559][T14308] _copy_to_user+0x31/0xb0 [ 942.173604][T14308] simple_read_from_buffer+0xe1/0x170 [ 942.173647][T14308] proc_fail_nth_read+0x1bb/0x230 [ 942.173684][T14308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.173721][T14308] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 942.173762][T14308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.173793][T14308] ? rw_verify_area+0x24a/0x4c0 [ 942.173836][T14308] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 942.173874][T14308] vfs_read+0x213/0xa80 [ 942.173921][T14308] ? __pfx___mutex_lock+0x10/0x10 [ 942.173955][T14308] ? __pfx_vfs_read+0x10/0x10 [ 942.173997][T14308] ? __fget_files+0x2a/0x420 [ 942.174038][T14308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.174068][T14308] ? __fget_files+0x3a2/0x420 [ 942.174102][T14308] ? __fget_files+0x2a/0x420 [ 942.174141][T14308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.174177][T14308] ksys_read+0x150/0x270 [ 942.174215][T14308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.174250][T14308] ? __pfx_ksys_read+0x10/0x10 [ 942.174301][T14308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.174331][T14308] do_syscall_64+0x174/0x580 [ 942.174364][T14308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.174401][T14308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.174434][T14308] RIP: 0033:0x7f6237d5e90e [ 942.174458][T14308] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 942.174481][T14308] RSP: 002b:00007f6238ceefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 942.174507][T14308] RAX: ffffffffffffffda RBX: 00007f6238cef6c0 RCX: 00007f6237d5e90e [ 942.174528][T14308] RDX: 000000000000000f RSI: 00007f6238cef0a0 RDI: 0000000000000004 [ 942.174545][T14308] RBP: 00007f6238cef090 R08: 0000000000000000 R09: 0000000000000000 [ 942.174561][T14308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 942.174578][T14308] R13: 00007f6238026038 R14: 00007f6238025fa0 R15: 00007fff55762078 [ 942.174620][T14308] [ 942.647708][ T980] go7007 3-1:4.135: The Lifeview TV Walker Ultra is not supported. Sorry! [ 942.694030][ T980] usb 3-1: USB disconnect, device number 28 [ 942.852852][T10512] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 943.012437][T10512] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 943.037919][T10512] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.059762][T10512] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 943.081673][T10512] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 943.108537][T10512] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.108936][T14317] loop1: detected capacity change from 0 to 32768 [ 943.138851][T14317] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2063 (14317) [ 943.157134][T14317] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 943.168589][T14317] BTRFS info (device loop1): using sha256 checksum algorithm [ 943.204098][T10512] usb 6-1: config 0 descriptor?? [ 943.275639][T14317] BTRFS info (device loop1): enabling ssd optimizations [ 943.282705][T14317] BTRFS info (device loop1): turning on sync discard [ 943.289401][T14317] BTRFS info (device loop1): enabling free space tree [ 943.337550][ T30] audit: type=1800 audit(1786761586.513:236): pid=14317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2063" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 943.443520][T14311] jffs2: notice: (14311) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 944.068886][T10512] usbhid 6-1:0.0: can't add hid device: -71 [ 944.260063][T10512] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 944.344909][T10512] usb 6-1: USB disconnect, device number 40 [ 944.662675][T14348] loop6: detected capacity change from 0 to 512 [ 944.734767][T14351] siw: device registration error -23 [ 945.434239][T14348] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 945.447507][T14348] EXT4-fs (loop6): 1 truncate cleaned up [ 945.468857][T14348] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 945.933850][T14361] loop4: detected capacity change from 0 to 2048 [ 946.142800][T14361] nilfs2: Unknown parameter ' [ 946.142800][T14361] ' [ 946.421827][T14366] program syz.5.2073 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 946.464980][ T5606] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 946.590621][T14368] loop4: detected capacity change from 0 to 128 [ 946.634990][T14368] ext4: Bad value for 'max_dir_size_kb' [ 947.645883][ T30] audit: type=1326 audit(1786761590.813:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.5.2077" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7cb9e0d9 code=0x7ffc0000 [ 948.181290][ T30] audit: type=1326 audit(1786761590.953:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.5.2077" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7cb9e0d9 code=0x7ffc0000 [ 948.448584][T14372] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 948.455245][T14372] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 948.463406][T14372] vhci_hcd vhci_hcd.0: Device attached [ 948.470445][ T30] audit: type=1326 audit(1786761590.953:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.5.2077" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7cb9e0d9 code=0x7ffc0000 [ 948.707805][ T30] audit: type=1326 audit(1786761590.963:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.5.2077" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fdf7cb9e0d9 code=0x7ffc0000 [ 948.771071][ T5699] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 948.873001][T14385] loop4: detected capacity change from 0 to 1764 [ 948.930545][ T30] audit: type=1326 audit(1786761590.973:241): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.5.2077" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7cb9e0d9 code=0x7ffc0000 [ 949.102983][ T30] audit: type=1326 audit(1786761590.983:242): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.5.2077" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7cb9e0d9 code=0x7ffc0000 [ 949.218386][T14383] vhci_hcd: connection reset by peer [ 949.229400][ T30] audit: type=1326 audit(1786761591.043:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.5.2077" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7cb9e0d9 code=0x7ffc0000 [ 949.299947][ T6237] vhci_hcd vhci_hcd.5: stop threads [ 949.324325][ T6017] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.334089][ T6237] vhci_hcd vhci_hcd.5: release socket [ 949.415416][ T6237] vhci_hcd vhci_hcd.5: disconnect device [ 950.380542][T14392] net_ratelimit: 86 callbacks suppressed [ 950.380675][T14392] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 950.641327][ T30] audit: type=1326 audit(1786761591.053:244): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.5.2077" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdf7cb9e0d9 code=0x7ffc0000 [ 950.657696][T14396] loop7: detected capacity change from 0 to 8 [ 950.666807][ T30] audit: type=1326 audit(1786761591.053:245): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.5.2077" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7cb9e0d9 code=0x7ffc0000 [ 950.698287][ T30] audit: type=1326 audit(1786761591.053:246): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.5.2077" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7cb9e0d9 code=0x7ffc0000 [ 950.859462][T14403] loop6: detected capacity change from 0 to 128 [ 950.935407][T14401] loop2: detected capacity change from 0 to 2048 [ 951.228539][T14401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 951.775305][T10763] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 951.775645][T14411] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 951.809787][T14401] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:169: inode #12: comm syz.2.2084: inline data xattr refers to an external xattr inode [ 951.834188][T14411] EXT4-fs (loop2): Remounting filesystem read-only [ 952.002388][T10763] usb 5-1: device descriptor read/64, error -71 [ 952.252156][T14421] loop1: detected capacity change from 0 to 256 [ 952.259272][T14421] exfat: Deprecated parameter 'utf8' [ 952.264662][T14421] exfat: Deprecated parameter 'namecase' [ 952.270377][T14421] exfat: Deprecated parameter 'namecase' [ 952.276057][T14421] exfat: Deprecated parameter 'utf8' [ 952.295550][T10763] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 952.312065][T14421] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 952.324398][T14421] exFAT-fs (loop1): failed to test first cluster bit of root dir(5) [ 952.761704][T10763] usb 5-1: device descriptor read/64, error -71 [ 952.791752][ T5608] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 952.938162][T10763] usb usb5-port1: attempt power cycle [ 953.513977][T14421] exFAT-fs (loop1): start_clu is invalid cluster(0x400) [ 953.600449][T14434] 9p: Bad value for 'wfdno' [ 953.683284][T10763] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 953.733023][T10763] usb 5-1: device descriptor read/8, error -71 [ 953.768487][T14436] loop2: detected capacity change from 0 to 16 [ 953.813099][T14436] erofs (device loop2): mounted with root inode @ nid 36. [ 953.963248][ T5699] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 954.313528][T14444] FAULT_INJECTION: forcing a failure. [ 954.313528][T14444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 954.333715][T14444] CPU: 1 UID: 0 PID: 14444 Comm: syz.1.2093 Tainted: G L syzkaller #0 PREEMPT(full) [ 954.333750][T14444] Tainted: [L]=SOFTLOCKUP [ 954.333761][T14444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 954.333776][T14444] Call Trace: [ 954.333785][T14444] [ 954.333795][T14444] dump_stack_lvl+0xe8/0x150 [ 954.333836][T14444] should_fail_ex+0x40c/0x560 [ 954.333873][T14444] _copy_from_iter+0x1d3/0x1660 [ 954.333920][T14444] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.333959][T14444] ? __pfx__copy_from_iter+0x10/0x10 [ 954.333998][T14444] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.334044][T14444] copy_page_from_iter+0x219/0x2d0 [ 954.334086][T14444] tun_get_user+0x1bf1/0x4370 [ 954.334127][T14444] ? tun_get_user+0x6e7/0x4370 [ 954.334188][T14444] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.334218][T14444] ? aa_file_perm+0x4ed/0x15f0 [ 954.334247][T14444] ? __pfx_tun_get_user+0x10/0x10 [ 954.334287][T14444] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.334317][T14444] ? __lock_acquire+0x683/0x2cf0 [ 954.334369][T14444] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.334399][T14444] ? ref_tracker_alloc+0x341/0x4b0 [ 954.334430][T14444] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.334465][T14444] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 954.334501][T14444] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.334535][T14444] ? tun_get+0x1c/0x2f0 [ 954.334574][T14444] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.334609][T14444] ? tun_get+0x1c/0x2f0 [ 954.334645][T14444] ? tun_get+0x1c/0x2f0 [ 954.334680][T14444] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.334717][T14444] tun_chr_write_iter+0x113/0x200 [ 954.334757][T14444] vfs_write+0x612/0xba0 [ 954.334808][T14444] ? __pfx_vfs_write+0x10/0x10 [ 954.334860][T14444] ? __fget_files+0x2a/0x420 [ 954.334899][T14444] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.334942][T14444] ksys_write+0x150/0x270 [ 954.334985][T14444] ? __pfx_ksys_write+0x10/0x10 [ 954.335035][T14444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.335064][T14444] do_syscall_64+0x174/0x580 [ 954.335094][T14444] ? trace_irq_disable+0x3b/0x140 [ 954.335133][T14444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.335160][T14444] RIP: 0033:0x7fb13cf5e90e [ 954.335183][T14444] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 954.335205][T14444] RSP: 002b:00007fb13de76fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 954.335231][T14444] RAX: ffffffffffffffda RBX: 00007fb13de776c0 RCX: 00007fb13cf5e90e [ 954.335250][T14444] RDX: 0000000000000042 RSI: 0000200000000080 RDI: 00000000000000c8 [ 954.335267][T14444] RBP: 00007fb13de77090 R08: 0000000000000000 R09: 0000000000000000 [ 954.335283][T14444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.335299][T14444] R13: 00007fb13d226038 R14: 00007fb13d225fa0 R15: 00007ffd84142b88 [ 954.335340][T14444] [ 954.638925][T14446] loop2: detected capacity change from 0 to 32768 [ 954.693878][T14446] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2096 (14446) [ 954.708914][T10763] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 954.718913][T14446] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 954.729209][T14446] BTRFS info (device loop2): using sha256 checksum algorithm [ 954.808403][T10763] usb 5-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 954.870347][T10763] usb 5-1: config 0 has no interfaces? [ 954.961529][T10763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.985475][T14446] BTRFS info (device loop2): enabling ssd optimizations [ 954.992581][T14446] BTRFS info (device loop2): turning on sync discard [ 954.999300][T14446] BTRFS info (device loop2): enabling free space tree [ 955.124577][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 955.124597][ T30] audit: type=1800 audit(1786761598.213:304): pid=14446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2096" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 955.634799][T10763] usb 5-1: Product: syz [ 955.639040][T10763] usb 5-1: SerialNumber: syz [ 955.648994][T10763] usb 5-1: config 0 descriptor?? [ 955.887205][T14438] loop4: detected capacity change from 0 to 2048 [ 956.883305][T14438] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 956.909139][ T5699] usb 5-1: USB disconnect, device number 19 [ 958.133075][T14476] loop7: detected capacity change from 0 to 1024 [ 958.255786][T14476] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 958.359669][ T5608] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 958.650061][T10278] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.998003][T14503] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 961.027331][T14503] binder: 14501:14503 ioctl c0306201 0 returned -14 [ 961.161852][T10764] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 961.373365][T10764] usb 8-1: Using ep0 maxpacket: 16 [ 961.405975][T10764] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 961.478035][T10764] usb 8-1: config 0 has an invalid interface number: 189 but max is 0 [ 961.537571][T10764] usb 8-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 961.600768][T10764] usb 8-1: config 0 has no interface number 0 [ 961.625269][T10764] usb 8-1: config 0 interface 189 altsetting 195 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 961.678412][T10764] usb 8-1: config 0 interface 189 has no altsetting 0 [ 961.701545][T10764] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.823466][T10764] usb 8-1: config 0 descriptor?? [ 962.109315][T14520] FAULT_INJECTION: forcing a failure. [ 962.109315][T14520] name failslab, interval 1, probability 0, space 0, times 0 [ 962.126405][T14520] CPU: 1 UID: 0 PID: 14520 Comm: syz.2.2112 Tainted: G L syzkaller #0 PREEMPT(full) [ 962.126442][T14520] Tainted: [L]=SOFTLOCKUP [ 962.126457][T14520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 962.126474][T14520] Call Trace: [ 962.126483][T14520] [ 962.126494][T14520] dump_stack_lvl+0xe8/0x150 [ 962.126536][T14520] should_fail_ex+0x40c/0x560 [ 962.126574][T14520] should_failslab+0xa8/0x100 [ 962.126616][T14520] __kmalloc_noprof+0xfe/0x720 [ 962.126648][T14520] ? srso_alias_return_thunk+0x5/0xfbef5 [ 962.126680][T14520] ? rcu_is_watching+0x15/0xb0 [ 962.126720][T14520] ? tomoyo_realpath_from_path+0xef/0x640 [ 962.126749][T14520] ? tomoyo_realpath_from_path+0xef/0x640 [ 962.126787][T14520] tomoyo_realpath_from_path+0xef/0x640 [ 962.126828][T14520] ? tomoyo_path_number_perm+0x219/0x5f0 [ 962.126868][T14520] tomoyo_path_number_perm+0x246/0x5f0 [ 962.126911][T14520] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 962.126947][T14520] ? srso_alias_return_thunk+0x5/0xfbef5 [ 962.126977][T14520] ? __lock_acquire+0x683/0x2cf0 [ 962.127031][T14520] ? srso_alias_return_thunk+0x5/0xfbef5 [ 962.127062][T14520] ? hook_file_ioctl+0x1f0/0x5f0 [ 962.127126][T14520] ? __fget_files+0x2a/0x420 [ 962.127165][T14520] ? __fget_files+0x2a/0x420 [ 962.127198][T14520] ? __fget_files+0x3a2/0x420 [ 962.127231][T14520] ? __fget_files+0x2a/0x420 [ 962.127270][T14520] security_file_ioctl+0xc3/0x2a0 [ 962.127310][T14520] __se_sys_ioctl+0x47/0x170 [ 962.127336][T14520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.127365][T14520] do_syscall_64+0x174/0x580 [ 962.127395][T14520] ? trace_irq_disable+0x3b/0x140 [ 962.127435][T14520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.127468][T14520] RIP: 0033:0x7fda48b9e0d9 [ 962.127491][T14520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.127513][T14520] RSP: 002b:00007fda49b39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 962.127539][T14520] RAX: ffffffffffffffda RBX: 00007fda48e25fa0 RCX: 00007fda48b9e0d9 [ 962.127558][T14520] RDX: 0000200000000000 RSI: 0000000000003b72 RDI: 0000000000000003 [ 962.127576][T14520] RBP: 00007fda49b39090 R08: 0000000000000000 R09: 0000000000000000 [ 962.127593][T14520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.127610][T14520] R13: 00007fda48e26038 R14: 00007fda48e25fa0 R15: 00007fff503bd378 [ 962.127652][T14520] [ 962.127663][T14520] ERROR: Out of memory at tomoyo_realpath_from_path. [ 962.207298][T10764] usb 8-1: string descriptor 0 read error: -71 [ 963.051720][T10764] usb 8-1: USB disconnect, device number 17 [ 964.988864][T14545] loop7: detected capacity change from 0 to 32768 [ 965.012021][T14545] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2120 (14545) [ 965.036900][T14545] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 965.048078][T14545] BTRFS info (device loop7): using sha256 checksum algorithm [ 965.154291][T14545] BTRFS info (device loop7): enabling ssd optimizations [ 965.161320][T14545] BTRFS info (device loop7): turning on sync discard [ 965.168056][T14545] BTRFS info (device loop7): enabling free space tree [ 965.216330][T14564] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 965.253585][T14564] binder: 14547:14564 ioctl c0306201 0 returned -14 [ 965.433072][T14566] siw: device registration error -23 [ 966.037505][T14565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2122'. [ 966.107985][ T30] audit: type=1800 audit(1786761609.283:305): pid=14545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2120" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 967.456946][T14579] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 967.490452][T14582] loop2: detected capacity change from 0 to 512 [ 967.697112][T14582] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 967.709137][T10278] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 967.805035][T14587] loop4: detected capacity change from 0 to 16 [ 967.824454][T14587] erofs (device loop4): mounted with root inode @ nid 36. [ 967.867886][T14587] erofs (device loop4): bogus i_mode (0) @ nid 360287970189639716 [ 967.916978][T14582] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2126: iget: bad i_size value: 360287970189639680 [ 967.951216][T14582] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 967.952642][ C1] EXT4-fs (loop2): initial error at time 1786761611: ext4_orphan_get:1399: inode 15 [ 967.971245][ C1] EXT4-fs (loop2): last error at time 1786761611: ext4_orphan_get:1399: inode 15 [ 967.998361][T14582] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2126: couldn't read orphan inode 15 (err -117) [ 968.058026][T14582] loop2: lost filesystem error report for type 5 error -117 [ 968.078174][T14591] loop1: detected capacity change from 0 to 64 [ 968.109699][T14591] hfs: Bad value for 'part' [ 968.144182][T14582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 968.354891][T14600] loop4: detected capacity change from 0 to 512 [ 968.365902][T14582] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.2126: iget: bad i_size value: 360287970189639680 [ 968.390491][T14600] EXT4-fs: Ignoring removed oldalloc option [ 968.438431][T14600] EXT4-fs: Ignoring removed nobh option [ 968.472977][T14600] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 968.822296][ T5608] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.993874][T14618] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 969.028553][T14618] binder: 14613:14618 ioctl c0306201 0 returned -14 [ 971.054783][T14635] loop1: detected capacity change from 0 to 32768 [ 971.072901][T14635] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2141 (14635) [ 971.115935][T14635] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 971.126491][T14635] BTRFS info (device loop1): using sha256 checksum algorithm [ 971.854402][T14635] BTRFS info (device loop1): enabling ssd optimizations [ 971.861412][T14635] BTRFS info (device loop1): turning on sync discard [ 971.868157][T14635] BTRFS info (device loop1): enabling free space tree [ 972.552473][ T30] audit: type=1800 audit(1786761615.723:306): pid=14635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2141" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 973.620048][ T5606] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 975.081949][T14668] FAULT_INJECTION: forcing a failure. [ 975.081949][T14668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 975.102463][ T5612] Bluetooth: hci0: adv larger than maximum supported [ 975.102492][ T5612] Bluetooth: hci0: Malformed LE Event: 0x0d [ 975.164612][T14668] CPU: 1 UID: 0 PID: 14668 Comm: syz.7.2148 Tainted: G L syzkaller #0 PREEMPT(full) [ 975.164649][T14668] Tainted: [L]=SOFTLOCKUP [ 975.164658][T14668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 975.164673][T14668] Call Trace: [ 975.164682][T14668] [ 975.164690][T14668] dump_stack_lvl+0xe8/0x150 [ 975.164720][T14668] should_fail_ex+0x40c/0x560 [ 975.164758][T14668] _copy_from_user+0x2d/0xb0 [ 975.164798][T14668] __sys_bpf+0x2e7/0xd90 [ 975.164829][T14668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 975.164857][T14668] ? __pfx___sys_bpf+0x10/0x10 [ 975.164898][T14668] ? __fget_files+0x2a/0x420 [ 975.164952][T14668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 975.164979][T14668] ? ksys_write+0x242/0x270 [ 975.165011][T14668] ? __pfx_ksys_write+0x10/0x10 [ 975.165053][T14668] __x64_sys_bpf+0xba/0xd0 [ 975.165082][T14668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.165109][T14668] do_syscall_64+0x174/0x580 [ 975.165134][T14668] ? trace_irq_disable+0x3b/0x140 [ 975.165163][T14668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.165184][T14668] RIP: 0033:0x7f35fbb9e0d9 [ 975.165207][T14668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 975.165228][T14668] RSP: 002b:00007f35fca7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 975.165252][T14668] RAX: ffffffffffffffda RBX: 00007f35fbe25fa0 RCX: 00007f35fbb9e0d9 [ 975.165270][T14668] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 975.165282][T14668] RBP: 00007f35fca7a090 R08: 0000000000000000 R09: 0000000000000000 [ 975.165294][T14668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 975.165306][T14668] R13: 00007f35fbe26038 R14: 00007f35fbe25fa0 R15: 00007fff80c10ca8 [ 975.165340][T14668] [ 975.384467][T14670] loop6: detected capacity change from 0 to 1024 [ 975.391963][T14670] hfsplus: Unknown parameter 'n49' [ 975.520087][T14673] use of bytesused == 0 is deprecated and will be removed in the future, [ 975.529266][T14673] use the actual size instead. [ 975.642991][T14676] FAULT_INJECTION: forcing a failure. [ 975.642991][T14676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 975.657413][T14676] CPU: 0 UID: 0 PID: 14676 Comm: syz.2.2146 Tainted: G L syzkaller #0 PREEMPT(full) [ 975.657446][T14676] Tainted: [L]=SOFTLOCKUP [ 975.657455][T14676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 975.657472][T14676] Call Trace: [ 975.657482][T14676] [ 975.657491][T14676] dump_stack_lvl+0xe8/0x150 [ 975.657522][T14676] should_fail_ex+0x40c/0x560 [ 975.657550][T14676] _copy_from_user+0x2d/0xb0 [ 975.657579][T14676] ___sys_sendmsg+0x1c6/0x360 [ 975.657600][T14676] ? srso_alias_return_thunk+0x5/0xfbef5 [ 975.657623][T14676] ? __lock_acquire+0x683/0x2cf0 [ 975.657653][T14676] ? __pfx____sys_sendmsg+0x10/0x10 [ 975.657682][T14676] ? irqentry_exit+0x218/0x8f0 [ 975.657729][T14676] ? __fget_files+0x2a/0x420 [ 975.657753][T14676] ? srso_alias_return_thunk+0x5/0xfbef5 [ 975.657775][T14676] ? __fget_files+0x3a2/0x420 [ 975.657809][T14676] __x64_sys_sendmsg+0x1b1/0x290 [ 975.657834][T14676] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 975.657874][T14676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.657895][T14676] do_syscall_64+0x174/0x580 [ 975.657923][T14676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.657943][T14676] RIP: 0033:0x7fda48b9e0d9 [ 975.657960][T14676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 975.657981][T14676] RSP: 002b:00007fda49b18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 975.658001][T14676] RAX: ffffffffffffffda RBX: 00007fda48e26090 RCX: 00007fda48b9e0d9 [ 975.658015][T14676] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000009 [ 975.658027][T14676] RBP: 00007fda49b18090 R08: 0000000000000000 R09: 0000000000000000 [ 975.658039][T14676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 975.658050][T14676] R13: 00007fda48e26128 R14: 00007fda48e26090 R15: 00007fff503bd378 [ 975.658080][T14676] [ 975.973769][ T980] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 976.129808][T14675] loop1: detected capacity change from 0 to 8 [ 976.357672][ T980] usb 7-1: Using ep0 maxpacket: 32 [ 976.364044][ T980] usb 7-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice=70.55 [ 976.374815][ T980] usb 7-1: config 247 has an invalid interface number: 221 but max is 0 [ 976.383516][ T980] usb 7-1: config 247 has no interface number 0 [ 976.389929][ T980] usb 7-1: config 247 interface 221 has no altsetting 0 [ 976.403635][ T980] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.412256][ T980] usb 7-1: Product: syz [ 976.416440][ T980] usb 7-1: Manufacturer: syz [ 976.421734][ T980] usb 7-1: SerialNumber: syz [ 976.450325][ T980] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:247.221/input/input21 [ 976.640201][ T4959] bcm5974 7-1:247.221: could not read from device [ 976.765934][ T4959] bcm5974 7-1:247.221: could not read from device [ 976.825942][ T980] usb 7-1: USB disconnect, device number 43 [ 976.846348][T14683] loop7: detected capacity change from 0 to 256 [ 976.868903][ T4959] bcm5974 7-1:247.221: could not read from device [ 976.955866][T14683] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 977.015690][T14683] exFAT-fs (loop7): failed to test first cluster bit of root dir(5) [ 977.599622][T14685] loop1: detected capacity change from 0 to 512 [ 979.126083][T14685] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.2152: couldn't read orphan inode 26 (err -116) [ 979.369010][T14685] loop1: lost filesystem error report for type 5 error -116 [ 979.371601][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 979.385596][ C1] EXT4-fs (loop1): initial error at time 1786761622: ext4_orphan_get:1404 [ 979.394262][ C1] EXT4-fs (loop1): last error at time 1786761622: ext4_orphan_get:1404 [ 979.953881][T14685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 980.117155][T14685] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 980.159943][T14707] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 980.264233][ T5606] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.281997][ T5699] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 980.361710][T10762] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 980.389997][T14711] FAULT_INJECTION: forcing a failure. [ 980.389997][T14711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 980.407426][T14711] CPU: 1 UID: 0 PID: 14711 Comm: syz.1.2158 Tainted: G L syzkaller #0 PREEMPT(full) [ 980.407461][T14711] Tainted: [L]=SOFTLOCKUP [ 980.407471][T14711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 980.407494][T14711] Call Trace: [ 980.407504][T14711] [ 980.407514][T14711] dump_stack_lvl+0xe8/0x150 [ 980.407560][T14711] should_fail_ex+0x40c/0x560 [ 980.407598][T14711] _copy_from_user+0x2d/0xb0 [ 980.407639][T14711] __sys_bpf+0x2e7/0xd90 [ 980.407676][T14711] ? srso_alias_return_thunk+0x5/0xfbef5 [ 980.407714][T14711] ? __pfx___sys_bpf+0x10/0x10 [ 980.407762][T14711] ? __fget_files+0x2a/0x420 [ 980.407817][T14711] ? srso_alias_return_thunk+0x5/0xfbef5 [ 980.407847][T14711] ? ksys_write+0x242/0x270 [ 980.407891][T14711] ? __pfx_ksys_write+0x10/0x10 [ 980.407937][T14711] __x64_sys_bpf+0xba/0xd0 [ 980.407969][T14711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.407998][T14711] do_syscall_64+0x174/0x580 [ 980.408029][T14711] ? trace_irq_disable+0x3b/0x140 [ 980.408068][T14711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.408094][T14711] RIP: 0033:0x7fb13cf9e0d9 [ 980.408118][T14711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 980.408139][T14711] RSP: 002b:00007fb13de77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 980.408166][T14711] RAX: ffffffffffffffda RBX: 00007fb13d225fa0 RCX: 00007fb13cf9e0d9 [ 980.408186][T14711] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 980.408203][T14711] RBP: 00007fb13de77090 R08: 0000000000000000 R09: 0000000000000000 [ 980.408220][T14711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.408237][T14711] R13: 00007fb13d226038 R14: 00007fb13d225fa0 R15: 00007ffd84142b88 [ 980.408277][T14711] [ 980.572492][T10762] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 980.653885][T14714] program syz.4.2159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 980.686476][ T5699] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 980.709713][ T5699] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.717851][ T5699] usb 8-1: Product: syz [ 980.722064][ T5699] usb 8-1: Manufacturer: syz [ 980.726660][ T5699] usb 8-1: SerialNumber: syz [ 980.845296][T10762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.855970][T10762] usb 3-1: Product: syz [ 980.874841][T10762] usb 3-1: Manufacturer: syz [ 980.893993][T10762] usb 3-1: SerialNumber: syz [ 980.899315][T14716] FAULT_INJECTION: forcing a failure. [ 980.899315][T14716] name failslab, interval 1, probability 0, space 0, times 0 [ 980.939094][T10762] usb 3-1: config 0 descriptor?? [ 980.941851][T14716] CPU: 1 UID: 0 PID: 14716 Comm: syz.6.2160 Tainted: G L syzkaller #0 PREEMPT(full) [ 980.941886][T14716] Tainted: [L]=SOFTLOCKUP [ 980.941896][T14716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 980.941912][T14716] Call Trace: [ 980.941922][T14716] [ 980.941932][T14716] dump_stack_lvl+0xe8/0x150 [ 980.941976][T14716] should_fail_ex+0x40c/0x560 [ 980.942014][T14716] should_failslab+0xa8/0x100 [ 980.942054][T14716] __kmalloc_noprof+0xfe/0x720 [ 980.942084][T14716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 980.942114][T14716] ? rcu_is_watching+0x15/0xb0 [ 980.942153][T14716] ? tomoyo_realpath_from_path+0xef/0x640 [ 980.942180][T14716] ? tomoyo_realpath_from_path+0xef/0x640 [ 980.942217][T14716] tomoyo_realpath_from_path+0xef/0x640 [ 980.942257][T14716] ? tomoyo_path_number_perm+0x219/0x5f0 [ 980.942295][T14716] tomoyo_path_number_perm+0x246/0x5f0 [ 980.942337][T14716] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 980.942372][T14716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 980.942401][T14716] ? __lock_acquire+0x683/0x2cf0 [ 980.942453][T14716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 980.942483][T14716] ? hook_file_ioctl+0x1f0/0x5f0 [ 980.942551][T14716] ? __fget_files+0x2a/0x420 [ 980.942588][T14716] ? __fget_files+0x2a/0x420 [ 980.942620][T14716] ? __fget_files+0x3a2/0x420 [ 980.942652][T14716] ? __fget_files+0x2a/0x420 [ 980.942690][T14716] security_file_ioctl+0xc3/0x2a0 [ 980.942728][T14716] __se_sys_ioctl+0x47/0x170 [ 980.942753][T14716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.942781][T14716] do_syscall_64+0x174/0x580 [ 980.942811][T14716] ? trace_irq_disable+0x3b/0x140 [ 980.942850][T14716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.942876][T14716] RIP: 0033:0x7fb204b9e0d9 [ 980.942899][T14716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 980.942919][T14716] RSP: 002b:00007fb2059bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 980.942946][T14716] RAX: ffffffffffffffda RBX: 00007fb204e25fa0 RCX: 00007fb204b9e0d9 [ 980.942964][T14716] RDX: 0000200000000680 RSI: 00000000c0189436 RDI: 0000000000000003 [ 980.942982][T14716] RBP: 00007fb2059bb090 R08: 0000000000000000 R09: 0000000000000000 [ 980.942998][T14716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.943013][T14716] R13: 00007fb204e26038 R14: 00007fb204e25fa0 R15: 00007ffc24b586e8 [ 980.943054][T14716] [ 980.944140][T14716] ERROR: Out of memory at tomoyo_realpath_from_path. [ 981.082047][ T5612] Bluetooth: hci1: adv larger than maximum supported [ 981.202704][ T5612] Bluetooth: hci1: Malformed LE Event: 0x0d [ 981.297886][T10762] peak_usb 3-1:0.0: PEAK-System PCAN-USB FD v249 fw v11.251.34 (1 channels) [ 981.341709][ T980] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 981.501678][ T980] usb 5-1: Using ep0 maxpacket: 8 [ 981.502004][T10762] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 981.511127][ T980] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 981.530673][T10762] peak_usb 3-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71) [ 981.547566][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.561913][ T980] usb 5-1: Product: syz [ 981.571636][ T980] usb 5-1: Manufacturer: syz [ 981.581644][ T980] usb 5-1: SerialNumber: syz [ 981.606317][ T980] usb 5-1: config 0 descriptor?? [ 981.671850][ T980] gspca_main: se401-2.14.0 probing 047d:5003 [ 981.694149][T10762] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 981.708422][T10762] usb 3-1: USB disconnect, device number 29 [ 981.885511][ T5699] cdc_ncm 8-1:1.0: failed to get mac address [ 981.911945][T10764] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 981.926706][ T5699] cdc_ncm 8-1:1.0: bind() failure [ 981.992340][ T5699] cdc_ncm 8-1:1.1: probe with driver cdc_ncm failed with error -71 [ 982.013123][ T5699] cdc_mbim 8-1:1.1: probe with driver cdc_mbim failed with error -71 [ 982.034547][ T980] gspca_se401: Wrong descriptor type [ 982.050380][ T5699] usbtest 8-1:1.1: probe with driver usbtest failed with error -71 [ 982.081963][T10764] usb 7-1: Using ep0 maxpacket: 16 [ 982.100500][ T5699] usb 8-1: USB disconnect, device number 18 [ 982.109915][T10764] usb 7-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 982.151052][T10764] usb 7-1: config 127 has an invalid interface number: 124 but max is 0 [ 982.180463][T10764] usb 7-1: config 127 has no interface number 0 [ 982.193369][T10764] usb 7-1: config 127 interface 124 has no altsetting 0 [ 982.208604][T14743] loop7: detected capacity change from 0 to 512 [ 982.225126][T14747] FAULT_INJECTION: forcing a failure. [ 982.225126][T14747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 982.259772][T14720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.291355][T10764] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.330063][T14743] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.2170: couldn't read orphan inode 26 (err -116) [ 982.348965][T14720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.356966][T10764] usb 7-1: Product: syz [ 982.368506][T14747] CPU: 0 UID: 0 PID: 14747 Comm: syz.1.2172 Tainted: G L syzkaller #0 PREEMPT(full) [ 982.368542][T14747] Tainted: [L]=SOFTLOCKUP [ 982.368552][T14747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 982.368568][T14747] Call Trace: [ 982.368581][T14747] [ 982.368592][T14747] dump_stack_lvl+0xe8/0x150 [ 982.368634][T14747] should_fail_ex+0x40c/0x560 [ 982.368672][T14747] _copy_from_user+0x2d/0xb0 [ 982.368714][T14747] core_sys_select+0x509/0xb40 [ 982.368744][T14747] ? get_pid_task+0x20/0x1f0 [ 982.368797][T14747] ? __pfx_core_sys_select+0x10/0x10 [ 982.368857][T14747] ? __pfx_set_user_sigmask+0x10/0x10 [ 982.368890][T14747] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 982.368933][T14747] __se_sys_pselect6+0x267/0x320 [ 982.368972][T14747] ? __pfx___se_sys_pselect6+0x10/0x10 [ 982.369004][T14747] ? __pfx_ksys_write+0x10/0x10 [ 982.369043][T14747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 982.369080][T14747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 982.369111][T14747] ? __x64_sys_pselect6+0x21/0xf0 [ 982.369142][T14747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.369171][T14747] do_syscall_64+0x174/0x580 [ 982.369201][T14747] ? trace_irq_disable+0x3b/0x140 [ 982.369241][T14747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.369267][T14747] RIP: 0033:0x7fb13cf9e0d9 [ 982.369290][T14747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 982.369312][T14747] RSP: 002b:00007fb13de56028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 982.369338][T14747] RAX: ffffffffffffffda RBX: 00007fb13d226090 RCX: 00007fb13cf9e0d9 [ 982.369357][T14747] RDX: 0000200000000640 RSI: 0000200000000600 RDI: 0000000000000040 [ 982.369376][T14747] RBP: 00007fb13de56090 R08: 0000000000000000 R09: 0000000000000000 [ 982.369393][T14747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 982.369409][T14747] R13: 00007fb13d226128 R14: 00007fb13d226090 R15: 00007ffd84142b88 [ 982.369450][T14747] [ 982.571892][T14744] loop5: detected capacity change from 0 to 40427 [ 982.589555][T14743] loop7: lost filesystem error report for type 5 error -116 [ 982.591589][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 982.605309][ C1] EXT4-fs (loop7): initial error at time 1786761625: ext4_orphan_get:1404 [ 982.613845][ C1] EXT4-fs (loop7): last error at time 1786761625: ext4_orphan_get:1404 [ 982.628606][T10764] usb 7-1: Manufacturer: syz [ 982.633278][T10764] usb 7-1: SerialNumber: syz [ 982.639756][T14744] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 982.647457][T14744] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 982.660884][T14744] F2FS-fs (loop5): invalid crc value [ 982.993662][T14744] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 983.020684][T14744] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 983.027888][T14744] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 983.038890][T14743] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 983.055901][T14764] loop4: detected capacity change from 0 to 256 [ 983.136874][T14743] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 985.189924][T14770] IPv6: NLM_F_CREATE should be specified when creating new route [ 985.934555][T14743] EXT4-fs error (device loop7): ext4_lookup:1785: inode #15: comm syz.7.2170: iget: bad i_size value: 360287970189639690 [ 985.952694][T14743] EXT4-fs error (device loop7): ext4_lookup:1785: inode #15: comm syz.7.2170: iget: bad i_size value: 360287970189639690 [ 985.979273][T14751] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 64: padding at end of block bitmap is not set [ 986.012174][T10764] usb 7-1: reset high-speed USB device number 44 using dummy_hcd [ 986.190179][T10763] usb 5-1: USB disconnect, device number 20 [ 986.326363][T10278] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.937113][T10764] usb 7-1: USB disconnect, device number 44 [ 989.076451][ T5612] Bluetooth: hci6: adv larger than maximum supported [ 989.076480][ T5612] Bluetooth: hci6: Malformed LE Event: 0x0d [ 989.225481][T14795] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.2182'. [ 989.530711][T14801] loop5: detected capacity change from 0 to 32768 [ 989.539287][T14801] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2185 (14801) [ 989.588008][T14801] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 989.598374][T14801] BTRFS info (device loop5): using sha256 checksum algorithm [ 989.704614][T14801] BTRFS info (device loop5): enabling ssd optimizations [ 989.711921][T14801] BTRFS info (device loop5): turning on sync discard [ 989.718987][T14801] BTRFS info (device loop5): enabling free space tree [ 989.781795][ T30] audit: type=1800 audit(1786761632.953:307): pid=14801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2185" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 989.961118][T14812] loop7: detected capacity change from 0 to 32768 [ 990.024559][T14812] BTRFS info: device /dev/loop7 (7:7) using temp-fsid 0bc2133a-f27e-441d-8332-ac06072dbbd0 [ 990.034912][T14812] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2187 (14812) [ 990.074548][T14812] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 990.084769][T14812] BTRFS info (device loop7): using sha256 checksum algorithm [ 990.283924][T14812] BTRFS info (device loop7): enabling ssd optimizations [ 990.290941][T14812] BTRFS info (device loop7): turning on sync discard [ 990.297718][T14812] BTRFS info (device loop7): enabling free space tree [ 990.421223][ T30] audit: type=1800 audit(1786761633.593:308): pid=14812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2187" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 990.570241][ T5605] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 991.061297][T10763] libceph: connect (1)[c::]:6789 error -101 [ 991.103164][T10763] libceph: mon0 (1)[c::]:6789 connect error [ 991.129852][T10278] BTRFS info (device loop7): last unmount of filesystem 0bc2133a-f27e-441d-8332-ac06072dbbd0 [ 991.163850][T14846] ceph: No mds server is up or the cluster is laggy [ 991.184468][T10763] libceph: connect (1)[c::]:6789 error -101 [ 991.215129][T10763] libceph: mon0 (1)[c::]:6789 connect error [ 991.753031][T14849] loop4: detected capacity change from 0 to 128 [ 991.823029][T14859] FAULT_INJECTION: forcing a failure. [ 991.823029][T14859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 991.963391][T14859] CPU: 0 UID: 0 PID: 14859 Comm: syz.5.2195 Tainted: G L syzkaller #0 PREEMPT(full) [ 991.963431][T14859] Tainted: [L]=SOFTLOCKUP [ 991.963442][T14859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 991.963458][T14859] Call Trace: [ 991.963468][T14859] [ 991.963480][T14859] dump_stack_lvl+0xe8/0x150 [ 991.963531][T14859] should_fail_ex+0x40c/0x560 [ 991.963569][T14859] _copy_to_user+0x31/0xb0 [ 991.963613][T14859] simple_read_from_buffer+0xe1/0x170 [ 991.963656][T14859] proc_fail_nth_read+0x1bb/0x230 [ 991.963693][T14859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.963729][T14859] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 991.963770][T14859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.963800][T14859] ? rw_verify_area+0x24a/0x4c0 [ 991.963841][T14859] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 991.963880][T14859] vfs_read+0x213/0xa80 [ 991.963918][T14859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.963960][T14859] ? __pfx_vfs_read+0x10/0x10 [ 991.964018][T14859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.964054][T14859] ksys_read+0x150/0x270 [ 991.964097][T14859] ? __pfx_ksys_read+0x10/0x10 [ 991.964148][T14859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.964178][T14859] do_syscall_64+0x174/0x580 [ 991.964210][T14859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.964248][T14859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.964274][T14859] RIP: 0033:0x7fdf7cb5e90e [ 991.964298][T14859] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 991.964320][T14859] RSP: 002b:00007fdf7da50fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 991.964346][T14859] RAX: ffffffffffffffda RBX: 00007fdf7da516c0 RCX: 00007fdf7cb5e90e [ 991.964366][T14859] RDX: 000000000000000f RSI: 00007fdf7da510a0 RDI: 0000000000000004 [ 991.964382][T14859] RBP: 00007fdf7da51090 R08: 0000000000000000 R09: 0000000000000000 [ 991.964399][T14859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 991.964414][T14859] R13: 00007fdf7ce26128 R14: 00007fdf7ce26090 R15: 00007ffcbf60b4f8 [ 991.964456][T14859] [ 992.325022][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.331390][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.836416][T14872] FAULT_INJECTION: forcing a failure. [ 992.836416][T14872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 992.937843][T14872] CPU: 1 UID: 0 PID: 14872 Comm: syz.5.2198 Tainted: G L syzkaller #0 PREEMPT(full) [ 992.937882][T14872] Tainted: [L]=SOFTLOCKUP [ 992.937892][T14872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 992.937907][T14872] Call Trace: [ 992.937917][T14872] [ 992.937928][T14872] dump_stack_lvl+0xe8/0x150 [ 992.937969][T14872] should_fail_ex+0x40c/0x560 [ 992.938007][T14872] _copy_from_user+0x2d/0xb0 [ 992.938055][T14872] ___sys_recvmsg+0x173/0x5a0 [ 992.938094][T14872] ? __pfx____sys_recvmsg+0x10/0x10 [ 992.938132][T14872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.938184][T14872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.938214][T14872] ? __fget_files+0x3a2/0x420 [ 992.938256][T14872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.938292][T14872] do_recvmmsg+0x31a/0x7f0 [ 992.938337][T14872] ? __pfx_do_recvmmsg+0x10/0x10 [ 992.938383][T14872] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 992.938418][T14872] ? __fget_files+0x3a2/0x420 [ 992.938465][T14872] __x64_sys_recvmmsg+0x198/0x250 [ 992.938501][T14872] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 992.938545][T14872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.938574][T14872] do_syscall_64+0x174/0x580 [ 992.938604][T14872] ? trace_irq_disable+0x3b/0x140 [ 992.938643][T14872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.938669][T14872] RIP: 0033:0x7fdf7cb9e0d9 [ 992.938692][T14872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 992.938713][T14872] RSP: 002b:00007fdf7da72028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 992.938740][T14872] RAX: ffffffffffffffda RBX: 00007fdf7ce25fa0 RCX: 00007fdf7cb9e0d9 [ 992.938759][T14872] RDX: 040000000000049e RSI: 0000200000000300 RDI: 0000000000000003 [ 992.938777][T14872] RBP: 00007fdf7da72090 R08: 0000000000000000 R09: 0000000000000000 [ 992.938794][T14872] R10: 00001000000000fe R11: 0000000000000246 R12: 0000000000000001 [ 992.938810][T14872] R13: 00007fdf7ce26038 R14: 00007fdf7ce25fa0 R15: 00007ffcbf60b4f8 [ 992.938850][T14872] [ 993.252756][T14878] FAULT_INJECTION: forcing a failure. [ 993.252756][T14878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 993.265969][T14878] CPU: 1 UID: 0 PID: 14878 Comm: syz.7.2201 Tainted: G L syzkaller #0 PREEMPT(full) [ 993.266000][T14878] Tainted: [L]=SOFTLOCKUP [ 993.266009][T14878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 993.266029][T14878] Call Trace: [ 993.266040][T14878] [ 993.266050][T14878] dump_stack_lvl+0xe8/0x150 [ 993.266091][T14878] should_fail_ex+0x40c/0x560 [ 993.266128][T14878] _copy_from_user+0x2d/0xb0 [ 993.266168][T14878] ___sys_sendmsg+0x1c6/0x360 [ 993.266198][T14878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.266229][T14878] ? __lock_acquire+0x683/0x2cf0 [ 993.266269][T14878] ? __pfx____sys_sendmsg+0x10/0x10 [ 993.266342][T14878] ? __fget_files+0x2a/0x420 [ 993.266374][T14878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.266404][T14878] ? __fget_files+0x3a2/0x420 [ 993.266450][T14878] __x64_sys_sendmsg+0x1b1/0x290 [ 993.266484][T14878] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 993.266536][T14878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.266565][T14878] do_syscall_64+0x174/0x580 [ 993.266595][T14878] ? trace_irq_disable+0x3b/0x140 [ 993.266633][T14878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.266659][T14878] RIP: 0033:0x7f35fbb9e0d9 [ 993.266680][T14878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 993.266699][T14878] RSP: 002b:00007f35fca7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 993.266721][T14878] RAX: ffffffffffffffda RBX: 00007f35fbe25fa0 RCX: 00007f35fbb9e0d9 [ 993.266738][T14878] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 993.266753][T14878] RBP: 00007f35fca7a090 R08: 0000000000000000 R09: 0000000000000000 [ 993.266768][T14878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 993.266782][T14878] R13: 00007f35fbe26038 R14: 00007f35fbe25fa0 R15: 00007fff80c10ca8 [ 993.266819][T14878] [ 993.641217][T14882] loop5: detected capacity change from 0 to 16 [ 993.702672][T14882] erofs (device loop5): mounted with root inode @ nid 36. [ 993.746494][T14879] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2199'. [ 994.895656][T14895] FAULT_INJECTION: forcing a failure. [ 994.895656][T14895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 995.096052][T14895] CPU: 0 UID: 0 PID: 14895 Comm: syz.1.2206 Tainted: G L syzkaller #0 PREEMPT(full) [ 995.096093][T14895] Tainted: [L]=SOFTLOCKUP [ 995.096104][T14895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 995.096119][T14895] Call Trace: [ 995.096130][T14895] [ 995.096141][T14895] dump_stack_lvl+0xe8/0x150 [ 995.096188][T14895] should_fail_ex+0x40c/0x560 [ 995.096227][T14895] strncpy_from_user+0x36/0x2c0 [ 995.096263][T14895] __se_sys_request_key+0xb8/0x350 [ 995.096302][T14895] ? __pfx___se_sys_request_key+0x10/0x10 [ 995.096348][T14895] ? srso_alias_return_thunk+0x5/0xfbef5 [ 995.096382][T14895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.096412][T14895] do_syscall_64+0x174/0x580 [ 995.096444][T14895] ? trace_irq_disable+0x3b/0x140 [ 995.096483][T14895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.096511][T14895] RIP: 0033:0x7fb13cf9e0d9 [ 995.096540][T14895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 995.096563][T14895] RSP: 002b:00007fb13de77028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 995.096590][T14895] RAX: ffffffffffffffda RBX: 00007fb13d225fa0 RCX: 00007fb13cf9e0d9 [ 995.096610][T14895] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000100 [ 995.096628][T14895] RBP: 00007fb13de77090 R08: 0000000000000000 R09: 0000000000000000 [ 995.096645][T14895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 995.096661][T14895] R13: 00007fb13d226038 R14: 00007fb13d225fa0 R15: 00007ffd84142b88 [ 995.096703][T14895] [ 996.122902][T14901] loop4: detected capacity change from 0 to 256 [ 996.252850][T14901] exfat: Deprecated parameter 'utf8' [ 996.278539][T14901] exfat: Deprecated parameter 'utf8' [ 996.348201][T14910] loop1: detected capacity change from 0 to 128 [ 996.384740][T14901] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 999.034211][T14921] raw_sendmsg: syz.2.2214 forgot to set AF_INET. Fix it! [ 1001.607825][T14940] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.2222'. [ 1001.635666][T14942] loop4: detected capacity change from 0 to 1024 [ 1001.662710][T14942] hfsplus: unable to load nls mapping "koi8-Z9:~`V0~Z[@fła@O5F*ZNc׻6n|乿GrfU2a@%.f;MϮ" [ 1001.961641][ T980] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 1002.157196][ T980] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1002.205834][ T980] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1002.238887][ T980] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.268301][ T980] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1002.294298][ T980] usb 5-1: Product: syz [ 1002.307900][ T980] usb 5-1: Manufacturer: syz [ 1002.348488][ T980] hub 5-1:4.0: USB hub found [ 1002.363999][T14954] mmap: syz.5.2213 (14954) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1002.678259][T14956] loop6: detected capacity change from 0 to 32768 [ 1002.689797][ T980] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 1002.701420][T14956] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2226 (14956) [ 1002.715965][T14957] FAULT_INJECTION: forcing a failure. [ 1002.715965][T14957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1002.729935][T14957] CPU: 0 UID: 0 PID: 14957 Comm: syz.5.2213 Tainted: G L syzkaller #0 PREEMPT(full) [ 1002.729962][T14957] Tainted: [L]=SOFTLOCKUP [ 1002.729969][T14957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1002.729981][T14957] Call Trace: [ 1002.729989][T14957] [ 1002.729997][T14957] dump_stack_lvl+0xe8/0x150 [ 1002.730028][T14957] should_fail_ex+0x40c/0x560 [ 1002.730063][T14957] _copy_from_user+0x2d/0xb0 [ 1002.730093][T14957] __sys_bpf+0x2e7/0xd90 [ 1002.730119][T14957] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1002.730148][T14957] ? __pfx___sys_bpf+0x10/0x10 [ 1002.730183][T14957] ? __fget_files+0x2a/0x420 [ 1002.730224][T14957] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1002.730245][T14957] ? ksys_write+0x242/0x270 [ 1002.730278][T14957] ? __pfx_ksys_write+0x10/0x10 [ 1002.730312][T14957] __x64_sys_bpf+0xba/0xd0 [ 1002.730334][T14957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.730356][T14957] do_syscall_64+0x174/0x580 [ 1002.730378][T14957] ? trace_irq_disable+0x3b/0x140 [ 1002.730407][T14957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.730426][T14957] RIP: 0033:0x7fdf7cb9e0d9 [ 1002.730443][T14957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.730459][T14957] RSP: 002b:00007fdf7da51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1002.730478][T14957] RAX: ffffffffffffffda RBX: 00007fdf7ce26090 RCX: 00007fdf7cb9e0d9 [ 1002.730492][T14957] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 1002.730505][T14957] RBP: 00007fdf7da51090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.730517][T14957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1002.730529][T14957] R13: 00007fdf7ce26128 R14: 00007fdf7ce26090 R15: 00007ffcbf60b4f8 [ 1002.730558][T14957] [ 1002.846963][ T980] usb 5-1: USB disconnect, device number 21 [ 1002.923330][T14956] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1002.933867][T14956] BTRFS info (device loop6): using sha256 checksum algorithm [ 1003.250005][T14956] BTRFS info (device loop6): enabling ssd optimizations [ 1003.257024][T14956] BTRFS info (device loop6): turning on sync discard [ 1003.263754][T14956] BTRFS info (device loop6): enabling free space tree [ 1003.310325][ T30] audit: type=1800 audit(1786761646.483:309): pid=14956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2226" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 1004.643917][T14987] loop2: detected capacity change from 0 to 16 [ 1004.771135][T14987] erofs (device loop2): mounted with root inode @ nid 36. [ 1004.917128][ T6017] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1004.958693][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.375711][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.430386][T15001] FAULT_INJECTION: forcing a failure. [ 1005.430386][T15001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1005.510917][T15001] CPU: 0 UID: 0 PID: 15001 Comm: syz.6.2236 Tainted: G L syzkaller #0 PREEMPT(full) [ 1005.510960][T15001] Tainted: [L]=SOFTLOCKUP [ 1005.510970][T15001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1005.510985][T15001] Call Trace: [ 1005.510996][T15001] [ 1005.511006][T15001] dump_stack_lvl+0xe8/0x150 [ 1005.511056][T15001] should_fail_ex+0x40c/0x560 [ 1005.511095][T15001] _copy_from_user+0x2d/0xb0 [ 1005.511137][T15001] ___sys_recvmsg+0x173/0x5a0 [ 1005.511177][T15001] ? __pfx____sys_recvmsg+0x10/0x10 [ 1005.511216][T15001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.511269][T15001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.511299][T15001] ? __fget_files+0x3a2/0x420 [ 1005.511342][T15001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.511377][T15001] do_recvmmsg+0x31a/0x7f0 [ 1005.511420][T15001] ? __pfx_do_recvmmsg+0x10/0x10 [ 1005.511467][T15001] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1005.511503][T15001] ? __fget_files+0x3a2/0x420 [ 1005.511550][T15001] __x64_sys_recvmmsg+0x198/0x250 [ 1005.511588][T15001] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1005.511618][T15001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1005.511661][T15001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.511689][T15001] do_syscall_64+0x174/0x580 [ 1005.511719][T15001] ? trace_irq_disable+0x3b/0x140 [ 1005.511759][T15001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.511785][T15001] RIP: 0033:0x7fb204b9e0d9 [ 1005.511809][T15001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1005.511830][T15001] RSP: 002b:00007fb20599a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1005.511872][T15001] RAX: ffffffffffffffda RBX: 00007fb204e26090 RCX: 00007fb204b9e0d9 [ 1005.511892][T15001] RDX: 0000000000000001 RSI: 0000200000002700 RDI: 0000000000000003 [ 1005.511909][T15001] RBP: 00007fb20599a090 R08: 0000000000000000 R09: 0000000000000000 [ 1005.511927][T15001] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 1005.511943][T15001] R13: 00007fb204e26128 R14: 00007fb204e26090 R15: 00007ffc24b586e8 [ 1005.511984][T15001] [ 1006.021124][T14074] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1006.034952][T14074] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1006.048005][T14074] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1006.062136][T14074] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1006.074735][T14074] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1007.592842][T15022] netlink: 'syz.5.2242': attribute type 4 has an invalid length. [ 1007.632300][T15023] netlink: 'syz.5.2242': attribute type 4 has an invalid length. [ 1007.773553][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.133372][T14074] Bluetooth: hci2: command tx timeout [ 1008.182665][T15029] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 1008.294745][T15030] binder: 15026:15030 ioctl c0306201 0 returned -14 [ 1008.376282][T15029] gadgetfs: bound to dummy_udc driver [ 1008.651317][T10763] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 1008.808412][ C0] gadgetfs: connected [ 1008.821958][T10763] gadgetfs: disconnected [ 1009.092426][ C0] gadgetfs: connected [ 1009.099798][T10763] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1009.280694][T10763] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1009.478969][T10763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.558163][T15026] gadgetfs: suspended from state 3 [ 1009.565067][T15026] gadgetfs: disconnected [ 1009.646243][T15032] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2244'. [ 1009.775728][T15032] FAULT_INJECTION: forcing a failure. [ 1009.775728][T15032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1009.795565][T10763] usb 2-1: can't set config #1, error -71 [ 1009.804952][T10763] usb 2-1: USB disconnect, device number 54 [ 1009.861940][T15034] o2cb: Local heartbeat has not been started. [ 1009.876727][T15032] CPU: 1 UID: 0 PID: 15032 Comm: syz.5.2244 Tainted: G L syzkaller #0 PREEMPT(full) [ 1009.876762][T15032] Tainted: [L]=SOFTLOCKUP [ 1009.876772][T15032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1009.876786][T15032] Call Trace: [ 1009.876796][T15032] [ 1009.876807][T15032] dump_stack_lvl+0xe8/0x150 [ 1009.876839][T15032] should_fail_ex+0x40c/0x560 [ 1009.876870][T15032] _copy_from_user+0x2d/0xb0 [ 1009.876912][T15032] ___sys_sendmsg+0x1c6/0x360 [ 1009.876940][T15032] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.876967][T15032] ? __lock_acquire+0x683/0x2cf0 [ 1009.876997][T15032] ? __pfx____sys_sendmsg+0x10/0x10 [ 1009.877065][T15032] ? __fget_files+0x2a/0x420 [ 1009.877096][T15032] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.877122][T15032] ? __fget_files+0x3a2/0x420 [ 1009.877156][T15032] __x64_sys_sendmsg+0x1b1/0x290 [ 1009.877189][T15032] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1009.877241][T15032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.877266][T15032] do_syscall_64+0x174/0x580 [ 1009.877288][T15032] ? trace_irq_disable+0x3b/0x140 [ 1009.877319][T15032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.877346][T15032] RIP: 0033:0x7fdf7cb9e0d9 [ 1009.877368][T15032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1009.877388][T15032] RSP: 002b:00007fdf7da72028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1009.877412][T15032] RAX: ffffffffffffffda RBX: 00007fdf7ce25fa0 RCX: 00007fdf7cb9e0d9 [ 1009.877426][T15032] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1009.877438][T15032] RBP: 00007fdf7da72090 R08: 0000000000000000 R09: 0000000000000000 [ 1009.877450][T15032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1009.877462][T15032] R13: 00007fdf7ce26038 R14: 00007fdf7ce25fa0 R15: 00007ffcbf60b4f8 [ 1009.877503][T15032] [ 1009.941716][T15034] o2cb: Cluster check failed. Fix errors before retrying. [ 1010.103067][T15034] (syz.4.2245,15034,1):user_dlm_register:674 ERROR: status = -22 [ 1010.121110][T15034] (syz.4.2245,15034,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1010.214545][T14074] Bluetooth: hci2: command tx timeout [ 1010.621819][T10512] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 1010.735448][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.783267][T15050] loop4: detected capacity change from 0 to 2048 [ 1010.800970][T10512] usb 6-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 1010.838556][T10512] usb 6-1: config 0 has no interfaces? [ 1010.862991][T10512] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.902876][T10512] usb 6-1: Product: syz [ 1010.917712][T10512] usb 6-1: SerialNumber: syz [ 1010.924578][T15050] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2249'. [ 1010.972326][T10512] usb 6-1: config 0 descriptor?? [ 1011.044578][T15055] loop4: detected capacity change from 0 to 512 [ 1011.117768][T15055] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1011.165855][T15055] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #17: comm syz.4.2249: corrupted in-inode xattr: e_name out of bounds [ 1011.299621][T15055] loop4: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 1011.301386][T15055] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2249: couldn't read orphan inode 17 (err -117) [ 1011.310771][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1011.310793][ C1] EXT4-fs (loop4): initial error at time 1786761654: ext4_iget_extra_inode:5180: inode 17 [ 1011.310833][ C1] EXT4-fs (loop4): last error at time 1786761654: ext4_iget_extra_inode:5180: inode 17 [ 1011.394028][T15063] FAULT_INJECTION: forcing a failure. [ 1011.394028][T15063] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.417562][T15055] loop4: lost filesystem error report for type 5 error -117 [ 1011.420071][T15055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1011.425573][T15045] loop5: detected capacity change from 0 to 2048 [ 1011.438917][T15063] CPU: 1 UID: 0 PID: 15063 Comm: syz.6.2252 Tainted: G L syzkaller #0 PREEMPT(full) [ 1011.438952][T15063] Tainted: [L]=SOFTLOCKUP [ 1011.438961][T15063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1011.438976][T15063] Call Trace: [ 1011.438987][T15063] [ 1011.438997][T15063] dump_stack_lvl+0xe8/0x150 [ 1011.439037][T15063] should_fail_ex+0x40c/0x560 [ 1011.439076][T15063] ? traverse+0xf1/0x620 [ 1011.439105][T15063] should_failslab+0xa8/0x100 [ 1011.439144][T15063] __kvmalloc_node_noprof+0x176/0x860 [ 1011.439185][T15063] ? traverse+0xf1/0x620 [ 1011.439219][T15063] traverse+0xf1/0x620 [ 1011.439243][T15063] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.439273][T15063] ? aa_file_perm+0x4ed/0x15f0 [ 1011.439300][T15063] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.439329][T15063] ? aa_file_perm+0x18b/0x15f0 [ 1011.439366][T15063] seq_read_iter+0xb6a/0xca0 [ 1011.439413][T15063] seq_read+0x367/0x480 [ 1011.439450][T15063] ? __pfx_seq_read+0x10/0x10 [ 1011.439484][T15063] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.439519][T15063] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.439548][T15063] ? rw_verify_area+0x24a/0x4c0 [ 1011.439591][T15063] vfs_readv+0x57c/0x850 [ 1011.439619][T15063] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.439652][T15063] ? __pfx_seq_read+0x10/0x10 [ 1011.439683][T15063] ? __pfx_vfs_readv+0x10/0x10 [ 1011.439726][T15063] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.439759][T15063] ? __fget_files+0x2a/0x420 [ 1011.439797][T15063] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.439826][T15063] ? __fget_files+0x3a2/0x420 [ 1011.439858][T15063] ? __fget_files+0x2a/0x420 [ 1011.439896][T15063] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.439931][T15063] __x64_sys_preadv+0x19c/0x2b0 [ 1011.439960][T15063] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1011.439997][T15063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.440026][T15063] do_syscall_64+0x174/0x580 [ 1011.440069][T15063] ? trace_irq_disable+0x3b/0x140 [ 1011.440108][T15063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.440134][T15063] RIP: 0033:0x7fb204b9e0d9 [ 1011.440157][T15063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1011.440177][T15063] RSP: 002b:00007fb2059bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1011.440203][T15063] RAX: ffffffffffffffda RBX: 00007fb204e25fa0 RCX: 00007fb204b9e0d9 [ 1011.440221][T15063] RDX: 0000000000000001 RSI: 0000200000002540 RDI: 0000000000000004 [ 1011.440238][T15063] RBP: 00007fb2059bb090 R08: 0000000000000000 R09: 0000000000000000 [ 1011.440254][T15063] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 1011.440270][T15063] R13: 00007fb204e26038 R14: 00007fb204e25fa0 R15: 00007ffc24b586e8 [ 1011.440309][T15063] [ 1011.704346][T15050] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2249'. [ 1011.743898][T15045] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1011.774501][T10763] usb 6-1: USB disconnect, device number 41 [ 1011.838298][T15055] netlink: 'syz.4.2249': attribute type 4 has an invalid length. [ 1011.890606][T15050] netlink: 4136 bytes leftover after parsing attributes in process `syz.4.2249'. [ 1011.930503][T15070] loop6: detected capacity change from 0 to 16 [ 1011.943766][T15055] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #12: block 7: comm syz.4.2249: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 1011.957418][T15003] lo speed is unknown, defaulting to 1000 [ 1011.992740][T15070] erofs (device loop6): mounted with root inode @ nid 36. [ 1012.250013][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.302635][T14074] Bluetooth: hci2: command tx timeout [ 1012.483573][T10512] libceph: connect (1)[c::]:6789 error -101 [ 1012.532008][T10512] libceph: mon0 (1)[c::]:6789 connect error [ 1012.548027][T15076] ceph: No mds server is up or the cluster is laggy [ 1014.624880][T14074] Bluetooth: hci2: command tx timeout [ 1014.673324][T15094] FAULT_INJECTION: forcing a failure. [ 1014.673324][T15094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1014.971785][T15094] CPU: 0 UID: 0 PID: 15094 Comm: syz.2.2258 Tainted: G L syzkaller #0 PREEMPT(full) [ 1014.971829][T15094] Tainted: [L]=SOFTLOCKUP [ 1014.971839][T15094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1014.971854][T15094] Call Trace: [ 1014.971864][T15094] [ 1014.971890][T15094] dump_stack_lvl+0xe8/0x150 [ 1014.971932][T15094] should_fail_ex+0x40c/0x560 [ 1014.971968][T15094] _copy_from_user+0x2d/0xb0 [ 1014.972009][T15094] ___sys_sendmsg+0x1c6/0x360 [ 1014.972038][T15094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1014.972108][T15094] ? __lock_acquire+0x683/0x2cf0 [ 1014.972149][T15094] ? __pfx____sys_sendmsg+0x10/0x10 [ 1014.972221][T15094] ? __fget_files+0x2a/0x420 [ 1014.972253][T15094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1014.972283][T15094] ? __fget_files+0x3a2/0x420 [ 1014.972330][T15094] __x64_sys_sendmsg+0x1b1/0x290 [ 1014.972365][T15094] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1014.972418][T15094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.972447][T15094] do_syscall_64+0x174/0x580 [ 1014.972477][T15094] ? trace_irq_disable+0x3b/0x140 [ 1014.972516][T15094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.972543][T15094] RIP: 0033:0x7fda48b9e0d9 [ 1014.972566][T15094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.972587][T15094] RSP: 002b:00007fda49b39028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1014.972613][T15094] RAX: ffffffffffffffda RBX: 00007fda48e25fa0 RCX: 00007fda48b9e0d9 [ 1014.972632][T15094] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000006 [ 1014.972649][T15094] RBP: 00007fda49b39090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.972664][T15094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1014.972680][T15094] R13: 00007fda48e26038 R14: 00007fda48e25fa0 R15: 00007fff503bd378 [ 1014.972720][T15094] [ 1015.629688][ T13] bond0 (unregistering): Released all slaves [ 1017.835558][ T5269] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1018.106539][T15120] netlink: 'syz.4.2264': attribute type 1 has an invalid length. [ 1018.217723][T15122] veth0_virt_wifi: entered promiscuous mode [ 1018.302093][T10763] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1018.387105][T15120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1018.403433][T10764] IPVS: starting estimator thread 0... [ 1018.491782][T15126] IPVS: using max 25 ests per chain, 60000 per kthread [ 1018.500105][T10763] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1018.513172][T10763] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.523855][T10763] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1018.534506][T10763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1018.542965][T10763] usb 2-1: SerialNumber: syz [ 1018.565132][T15121] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1018.782964][T10763] usb 2-1: 0:2 : does not exist [ 1018.817769][T15134] o2cb: Local heartbeat has not been started. [ 1018.828742][T15134] o2cb: Cluster check failed. Fix errors before retrying. [ 1018.853001][T15134] (syz.5.2260,15134,0):user_dlm_register:674 ERROR: status = -22 [ 1018.919589][T15134] (syz.5.2260,15134,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1018.949576][T10763] usb 2-1: USB disconnect, device number 55 [ 1019.113659][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1019.642063][T15154] loop1: detected capacity change from 0 to 128 [ 1019.664659][T15154] ext4: Bad value for 'max_dir_size_kb' [ 1019.856705][ T13] hsr_slave_0: left promiscuous mode [ 1019.888617][ T13] hsr_slave_1: left promiscuous mode [ 1020.035919][ T13] veth1_macvtap: left promiscuous mode [ 1020.761766][T14074] Bluetooth: hci3: unexpected event for opcode 0x3905 [ 1020.773069][ T13] veth0_macvtap: left promiscuous mode [ 1020.791875][ T13] veth1_vlan: left promiscuous mode [ 1020.797190][ T13] veth0_vlan: left promiscuous mode [ 1021.003673][T15168] ceph: No mds server is up or the cluster is laggy [ 1021.005012][ T980] libceph: connect (1)[c::]:6789 error -101 [ 1021.099732][ T980] libceph: mon0 (1)[c::]:6789 connect error [ 1021.108948][T15181] loop1: detected capacity change from 0 to 16 [ 1021.150223][T15181] erofs: Bad value for 'cache_strategy' [ 1021.544288][T15174] loop5: detected capacity change from 0 to 128 [ 1022.070620][T15188] loop1: detected capacity change from 0 to 4096 [ 1022.139843][T15188] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1022.191178][T15188] NILFS (loop1): trying rollback from an earlier position [ 1022.317956][T15188] NILFS (loop1): recovery complete [ 1022.335387][T15195] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1022.386184][T15188] NILFS (loop1): Segment number 4294967297 to be freed is out of range [ 1023.038478][ T5269] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1023.227370][T15213] veth0_virt_wifi: entered promiscuous mode [ 1023.513799][T15215] loop2: detected capacity change from 0 to 32768 [ 1023.525212][T15215] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2283 (15215) [ 1023.546835][T15003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.603262][T15003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.619504][T15215] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1023.630109][T15215] BTRFS info (device loop2): using sha256 checksum algorithm [ 1023.650118][T15219] loop5: detected capacity change from 0 to 128 [ 1023.666289][T15003] bridge_slave_0: entered allmulticast mode [ 1023.689753][T15003] bridge_slave_0: entered promiscuous mode [ 1023.725004][T15003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.737895][T15219] ext4: Bad value for 'max_dir_size_kb' [ 1023.786581][T15215] BTRFS info (device loop2): enabling ssd optimizations [ 1023.793828][T15215] BTRFS info (device loop2): turning on sync discard [ 1023.800505][T15215] BTRFS info (device loop2): enabling free space tree [ 1023.826924][T15003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.852600][ T30] audit: type=1800 audit(1786761667.033:310): pid=15215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2283" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 1023.880384][T10762] [ 1023.882715][T10762] ============================================ [ 1023.888601][T15003] bridge_slave_1: entered allmulticast mode [ 1023.888849][T10762] WARNING: possible recursive locking detected [ 1023.900845][T10762] syzkaller #0 Tainted: G L [ 1023.906815][T10762] -------------------------------------------- [ 1023.912955][T10762] kworker/0:4/10762 is trying to acquire lock: [ 1023.919099][T10762] ffff88803117c128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x241/0xa40 [ 1023.928868][T10762] [ 1023.928868][T10762] but task is already holding lock: [ 1023.936221][T10762] ffff888065411928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x241/0xa40 [ 1023.946077][T10762] [ 1023.946077][T10762] other info that might help us debug this: [ 1023.954127][T10762] Possible unsafe locking scenario: [ 1023.954127][T10762] [ 1023.961573][T10762] CPU0 [ 1023.964850][T10762] ---- [ 1023.968120][T10762] lock(&grp->list_lock); [ 1023.972544][T10762] lock(&grp->list_lock); [ 1023.976966][T10762] [ 1023.976966][T10762] *** DEADLOCK *** [ 1023.976966][T10762] [ 1023.985100][T10762] May be due to missing lock nesting notation [ 1023.985100][T10762] [ 1023.993408][T10762] 3 locks held by kworker/0:4/10762: [ 1023.998680][T10762] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1024.009672][T10762] #1: ffffc900073cfc40 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1024.022225][T10762] #2: ffff888065411928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x241/0xa40 [ 1024.032437][T10762] [ 1024.032437][T10762] stack backtrace: [ 1024.038323][T10762] CPU: 0 UID: 0 PID: 10762 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1024.038359][T10762] Tainted: [L]=SOFTLOCKUP [ 1024.038369][T10762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1024.038386][T10762] Workqueue: events snd_rawmidi_input_event_work [ 1024.038430][T10762] Call Trace: [ 1024.038440][T10762] [ 1024.038452][T10762] dump_stack_lvl+0xe8/0x150 [ 1024.038489][T10762] print_deadlock_bug+0x279/0x290 [ 1024.038532][T10762] __lock_acquire+0x24df/0x2cf0 [ 1024.038570][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.038608][T10762] ? __lock_acquire+0x13e8/0x2cf0 [ 1024.038650][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.038683][T10762] ? snd_seq_deliver_event+0x241/0xa40 [ 1024.038710][T10762] lock_acquire+0x106/0x350 [ 1024.038745][T10762] ? snd_seq_deliver_event+0x241/0xa40 [ 1024.038778][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.038807][T10762] ? do_raw_read_unlock+0x3d/0x80 [ 1024.038839][T10762] _raw_read_lock+0x36/0x50 [ 1024.038863][T10762] ? snd_seq_deliver_event+0x241/0xa40 [ 1024.038892][T10762] snd_seq_deliver_event+0x241/0xa40 [ 1024.038924][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.038958][T10762] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 1024.038989][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.039020][T10762] ? lockdep_hardirqs_on+0x7a/0x110 [ 1024.039049][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.039080][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.039110][T10762] ? client_use_ptr+0xa9/0xaf0 [ 1024.039135][T10762] ? snd_seq_kernel_client_dispatch+0x17a/0x310 [ 1024.039170][T10762] snd_seq_kernel_client_dispatch+0x201/0x310 [ 1024.039204][T10762] snd_seq_control_queue+0x977/0x11b0 [ 1024.039246][T10762] ? __kasan_check_byte+0x12/0x40 [ 1024.039289][T10762] ? __pfx_snd_seq_control_queue+0x10/0x10 [ 1024.039332][T10762] ? unwind_next_frame+0x8f/0x2550 [ 1024.039357][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.039388][T10762] ? unwind_next_frame+0x1baf/0x2550 [ 1024.039416][T10762] ? ret_from_fork_asm+0x1a/0x30 [ 1024.039454][T10762] ? unwind_next_frame+0x8f/0x2550 [ 1024.039484][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.039514][T10762] ? lock_acquire+0x106/0x350 [ 1024.039550][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.039592][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.039627][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.039657][T10762] ? do_raw_read_unlock+0x3d/0x80 [ 1024.039685][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.039715][T10762] ? _raw_read_unlock+0x28/0x50 [ 1024.039739][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.039770][T10762] ? snd_seq_port_use_ptr+0x101/0x130 [ 1024.039801][T10762] snd_seq_deliver_single_event+0x568/0xc40 [ 1024.039835][T10762] ? __pfx_event_input_timer+0x10/0x10 [ 1024.039865][T10762] ? __lock_acquire+0x683/0x2cf0 [ 1024.039900][T10762] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 1024.039932][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.039972][T10762] snd_seq_deliver_event+0x26a/0xa40 [ 1024.040005][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.040039][T10762] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 1024.040068][T10762] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1024.040095][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.040125][T10762] ? lockdep_hardirqs_on+0x7a/0x110 [ 1024.040153][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.040184][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.040215][T10762] ? client_use_ptr+0xa9/0xaf0 [ 1024.040240][T10762] ? snd_seq_kernel_client_dispatch+0x17a/0x310 [ 1024.040274][T10762] snd_seq_kernel_client_dispatch+0x201/0x310 [ 1024.040309][T10762] snd_seq_oss_timer_start+0x336/0x580 [ 1024.040347][T10762] ? __pfx_snd_seq_oss_timer_start+0x10/0x10 [ 1024.040382][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.040419][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.040449][T10762] ? snd_seq_oss_readq_put_timestamp+0x205/0x240 [ 1024.040480][T10762] ? __pfx_snd_seq_oss_readq_put_timestamp+0x10/0x10 [ 1024.040507][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.040538][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.040568][T10762] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1024.040605][T10762] snd_seq_oss_midi_input+0x332/0x9c0 [ 1024.040646][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.040676][T10762] ? lock_acquire+0x106/0x350 [ 1024.040713][T10762] ? __pfx_snd_seq_oss_midi_input+0x10/0x10 [ 1024.040758][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.040789][T10762] ? do_raw_read_unlock+0x3d/0x80 [ 1024.040816][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.040847][T10762] ? _raw_read_unlock+0x28/0x50 [ 1024.040871][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.040901][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.040934][T10762] snd_seq_deliver_single_event+0x568/0xc40 [ 1024.040967][T10762] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 1024.041006][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.041038][T10762] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 1024.041073][T10762] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1024.041098][T10762] ? lockdep_hardirqs_on+0x7a/0x110 [ 1024.041127][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.041157][T10762] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1024.041186][T10762] snd_seq_deliver_event+0x543/0xa40 [ 1024.041222][T10762] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 1024.041253][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.041283][T10762] ? lockdep_hardirqs_on+0x7a/0x110 [ 1024.041312][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.041343][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.041373][T10762] ? client_use_ptr+0xa9/0xaf0 [ 1024.041399][T10762] ? snd_seq_kernel_client_dispatch+0x17a/0x310 [ 1024.041433][T10762] snd_seq_kernel_client_dispatch+0x201/0x310 [ 1024.041467][T10762] snd_midi_input_event+0x2b1/0x400 [ 1024.041501][T10762] ? __pfx_snd_midi_input_event+0x10/0x10 [ 1024.041536][T10762] ? rcu_is_watching+0x15/0xb0 [ 1024.041576][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.041613][T10762] ? process_scheduled_works+0xa20/0x14e0 [ 1024.041641][T10762] process_scheduled_works+0xa8e/0x14e0 [ 1024.041687][T10762] ? __pfx_process_scheduled_works+0x10/0x10 [ 1024.041718][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.041748][T10762] ? assign_work+0x3cf/0x5d0 [ 1024.041778][T10762] worker_thread+0xa47/0xfb0 [ 1024.041825][T10762] kthread+0x388/0x470 [ 1024.041860][T10762] ? __pfx_worker_thread+0x10/0x10 [ 1024.041888][T10762] ? __pfx_kthread+0x10/0x10 [ 1024.041925][T10762] ret_from_fork+0x514/0xb70 [ 1024.041963][T10762] ? __pfx_ret_from_fork+0x10/0x10 [ 1024.041999][T10762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.042030][T10762] ? __switch_to+0xc89/0x1420 [ 1024.042062][T10762] ? __pfx_kthread+0x10/0x10 [ 1024.042098][T10762] ret_from_fork_asm+0x1a/0x30 [ 1024.042146][T10762] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1024.937719][T15003] bridge_slave_1: entered promiscuous mode [ 1024.966536][T15003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.985374][T15003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1025.016614][T15003] team0: Port device team_slave_0 added [ 1025.024883][T15003] team0: Port device team_slave_1 added [ 1025.053155][T15003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1025.060147][T15003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.313313][T15003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1025.870970][T15003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1025.904293][T15003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.022897][T15003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.088860][T15237] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1026.450861][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.551989][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.640485][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.768753][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.787949][ T5269] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1026.996771][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.079122][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.148742][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.198939][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.254800][ T5269] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1027.388642][ T13] bond0 (unregistering): Released all slaves [ 1027.398455][ T13] bond1 (unregistering): Released all slaves [ 1027.454649][ T13] bond0 (unregistering): Released all slaves [ 1027.464016][ T13] bond1 (unregistering): Released all slaves [ 1027.821136][ T13] hsr_slave_0: left promiscuous mode [ 1027.829378][ T13] hsr_slave_1: left promiscuous mode [ 1027.838338][ T13] hsr_slave_0: left promiscuous mode [ 1027.844460][ T13] hsr_slave_1: left promiscuous mode [ 1027.856034][ T13] veth1_macvtap: left promiscuous mode [ 1027.861521][ T13] veth0_macvtap: left promiscuous mode [ 1027.870911][ T13] veth1_vlan: left promiscuous mode [ 1027.876334][ T13] veth0_vlan: left promiscuous mode [ 1027.883484][ T13] veth1_macvtap: left promiscuous mode [ 1027.888986][ T13] veth0_macvtap: left promiscuous mode [ 1027.894766][ T13] veth1_vlan: left promiscuous mode [ 1027.899998][ T13] veth0_vlan: left promiscuous mode [ 1028.268144][ T5269] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1028.603950][ T13] IPVS: stop unused estimator thread 0... [ 1028.664756][ T5269] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1028.678375][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.749099][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.849384][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.907835][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.007843][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1029.019705][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.067085][ T5269] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1029.078510][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1029.089185][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.148776][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1029.159119][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.221990][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1029.232356][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.340354][ T13] bridge_slave_1: left allmulticast mode [ 1029.346709][ T13] bridge_slave_1: left promiscuous mode [ 1029.353195][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.368102][ T13] bridge_slave_0: left allmulticast mode [ 1029.373882][ T13] bridge_slave_0: left promiscuous mode [ 1029.379596][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.487568][ T13] bond0 (unregistering): Released all slaves [ 1029.499244][ T13] bond1 (unregistering): (slave veth3): Releasing active interface [ 1029.508597][ T13] bond1 (unregistering): Released all slaves [ 1029.541060][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1029.554107][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1029.563714][ T13] bond0 (unregistering): Released all slaves [ 1029.610682][ T13] bond0 (unregistering): Released all slaves [ 1029.624177][ T5269] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1029.723800][ T13] tipc: Left network mode [ 1029.763758][ T13] rxrpc: Leaked peer 101 {1} 127.0.0.1:7003 [ 1029.975163][ T13] hsr_slave_0: left promiscuous mode [ 1029.980989][ T13] hsr_slave_1: left promiscuous mode [ 1029.990526][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1029.999080][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1030.013826][ T13] hsr_slave_0: left promiscuous mode [ 1030.019721][ T13] hsr_slave_1: left promiscuous mode [ 1030.031444][ T13] veth1_macvtap: left promiscuous mode [ 1030.037238][ T13] veth0_macvtap: left promiscuous mode [ 1030.043014][ T13] veth1_vlan: left promiscuous mode [ 1030.048290][ T13] veth0_vlan: left promiscuous mode [ 1030.056292][ T13] veth1_macvtap: left promiscuous mode [ 1030.062125][ T13] veth0_macvtap: left promiscuous mode [ 1030.067839][ T13] veth1_vlan: left promiscuous mode [ 1030.073083][ T13] veth0_vlan: left promiscuous mode [ 1030.302863][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1030.314873][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1030.522952][ T5269] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1031.036039][ T5269] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1031.084861][ T13] IPVS: stop unused estimator thread 0... [ 1031.091415][ T13] IPVS: stop unused estimator thread 0... [ 1031.407274][ T5269] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1031.730812][ T5269] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1032.079506][ T5269] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1032.421437][ T5269] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1032.786724][ T5269] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1033.123672][ T5269] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1033.440306][ T5269] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1033.765791][ T5269] 8021q: adding VLAN 0 to HW filter on device eth22