last executing test programs: 8.697985298s ago: executing program 1 (id=568): syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x340, 0x23, 0x67, 0xdc, 0x10, 0x4766, 0x1, 0xd655, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x31, 0x0, 0x4e, [{{0x9, 0x4, 0xbd, 0x10, 0x0, 0x67, 0x7f, 0x68, 0x7}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x97, &(0x7f0000000080)=@string={0x97, 0x3, "f14a65799c19ddb3f02992343f711e31da954c74a22883d3febe9aecef3c2c445c60c0fb72f16fd33a055ab5a2255260386480b8bce43dc346aa7b71f24d84751cbb91b93d54a48bdb96a95a6a0e3a036e183f0c388c8cb847b8523f899765e72ab3ebd52e42ab31e7781bea93694f6c742d8335bdf32011d64107b63e6b40ceea2fcbce2a768b02533205fc7486ffaa1cfd4b5cfa"}}, {0xc4, &(0x7f0000000140)=@string={0xc4, 0x3, "46ab1c20f45f9b86bec5fb559dbe0c8977b3f16bf7ba9589f9c7e081eaac95ab92e014db5477f9e1780828b99aa9120711e3a3707e0814869f2339207e531cc9947d8966755b3eba0c70fb5e8c16b338f2b7fba16cc666818c35941f7538eb455abe1d43376084cb18f1c02f3c774697cca5416027f7a9fef70d86a5790cf18ae0d6daa7571859eb5bf543c152a66c00dc33e0a9560a294fb5dea044fb8ccc0802575fac9e1c743d902815015912e9e44b8bd471f19c0ecee3d487fa1b47cc7654d4"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x340, 0x23, 0x67, 0xdc, 0x10, 0x4766, 0x1, 0xd655, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x31, 0x0, 0x4e, [{{0x9, 0x4, 0xbd, 0x10, 0x0, 0x67, 0x7f, 0x68, 0x7}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x97, &(0x7f0000000080)=@string={0x97, 0x3, "f14a65799c19ddb3f02992343f711e31da954c74a22883d3febe9aecef3c2c445c60c0fb72f16fd33a055ab5a2255260386480b8bce43dc346aa7b71f24d84751cbb91b93d54a48bdb96a95a6a0e3a036e183f0c388c8cb847b8523f899765e72ab3ebd52e42ab31e7781bea93694f6c742d8335bdf32011d64107b63e6b40ceea2fcbce2a768b02533205fc7486ffaa1cfd4b5cfa"}}, {0xc4, &(0x7f0000000140)=@string={0xc4, 0x3, "46ab1c20f45f9b86bec5fb559dbe0c8977b3f16bf7ba9589f9c7e081eaac95ab92e014db5477f9e1780828b99aa9120711e3a3707e0814869f2339207e531cc9947d8966755b3eba0c70fb5e8c16b338f2b7fba16cc666818c35941f7538eb455abe1d43376084cb18f1c02f3c774697cca5416027f7a9fef70d86a5790cf18ae0d6daa7571859eb5bf543c152a66c00dc33e0a9560a294fb5dea044fb8ccc0802575fac9e1c743d902815015912e9e44b8bd471f19c0ecee3d487fa1b47cc7654d4"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) (async) 8.220953437s ago: executing program 0 (id=571): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="0f4b59d866b882143e8f86df6bd2ba64f00fc169dd0cb003ee61cfcf0f6fd8f20f1f3965650ffc63fb66b90402000066b82300000066ba000000000f30660f1aba0d00f00fb34892f20f0119660f38811ff20f78cd0008", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.623804975s ago: executing program 0 (id=572): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000065102700000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000003c0)={@ipv4={""/10, ""/2, @multicast2}}, &(0x7f0000000400)=0x14) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000004c0)=0x14) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080088484803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000500)={@initdev}, &(0x7f0000000540)=0x14) r5 = syz_io_uring_setup(0x48be, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000001180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x0, &(0x7f0000001140)=0x80000001, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r7, &(0x7f0000000080)=""/237, 0xed, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r0, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8d, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x85, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x448, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {}, {0x9, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x418, 0x2, [@TCA_BASIC_POLICE={0x414, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xffff64ea, 0x1b88c000, 0x8c, 0x0, 0x9, 0x100, 0x5, 0x80, 0x92, 0x0, 0xffffffff, 0x200, 0x2, 0x9, 0x5, 0x10001, 0x6, 0x5, 0x6871, 0x4, 0x800, 0x6, 0xf5, 0x1556, 0x6, 0x2, 0x0, 0x800, 0x401, 0x4, 0x3, 0x2, 0x0, 0x57, 0x5, 0x7, 0x0, 0x3ff, 0x4, 0xa, 0x8000, 0x9, 0x3ff, 0x28, 0x40, 0xd, 0x8, 0x60a, 0x10, 0x66, 0xa28d, 0x5, 0x80000001, 0x2, 0x6, 0x3, 0x9, 0x6, 0x3, 0xffff2e9d, 0xa4, 0x6, 0x4, 0x2, 0x8, 0x1, 0x2, 0xc, 0x4, 0x8000, 0xa, 0x5, 0x7, 0x6, 0xffffffff, 0x6ea348e0, 0x1, 0x2, 0x9, 0x3, 0x81, 0x2fffffe, 0xfffffa97, 0x40, 0x1, 0x2, 0x3406a1ca, 0x6, 0x7, 0x0, 0x3, 0x1, 0x4, 0x8, 0x5, 0x400, 0x1, 0x2, 0xa, 0x0, 0x4, 0x9, 0x3, 0x0, 0x4, 0xa, 0x7ff, 0x6, 0x73, 0x9, 0x8, 0x1, 0x5f8, 0x7ff, 0xc, 0x4, 0xc, 0x8000, 0xd36, 0x87, 0x2, 0xffffffff, 0xc, 0x100, 0x7f, 0xa9d4, 0x5, 0x1, 0x2, 0xfffffff8, 0x8, 0x88, 0x9a28, 0x8, 0x0, 0x1, 0x8, 0x8001, 0x7, 0x8, 0x8, 0xffff, 0x9, 0x5, 0x7f, 0x69b16338, 0x7, 0x0, 0x5828, 0xc, 0x1, 0x6, 0xa5, 0x3, 0x40, 0xb, 0x400, 0x6631, 0x0, 0x0, 0xa91, 0x101, 0x1, 0x8, 0x3, 0xd7, 0x0, 0x0, 0xfffffffd, 0x7, 0x1000, 0x5, 0x80000001, 0x6, 0x8, 0x9, 0x3, 0x7fff, 0x6bfdbc00, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x7, 0x9, 0x1000, 0x8, 0x9, 0x8, 0x10001, 0xeb5, 0x8, 0x6, 0x6, 0x80000001, 0x5, 0x1ff, 0x3, 0x8, 0x100, 0x9, 0x1, 0x9, 0x6, 0x6, 0x254, 0x4, 0x400, 0x7, 0x9, 0x9, 0x2, 0x3, 0x9, 0x3, 0x6, 0x4, 0xb, 0x0, 0x5, 0x251, 0x1, 0x3, 0x5, 0x9, 0x2, 0x10000, 0x4, 0x4, 0x6, 0x401, 0x85d0, 0x5, 0x2, 0x1, 0xbd, 0x3, 0x6fe, 0x1, 0x100, 0x7, 0x1ff, 0x200, 0x2305, 0x29, 0x8, 0x3, 0x3, 0x9, 0x3ff, 0x3, 0x6, 0x9, 0xe565]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xb3}]}]}}]}, 0x448}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000a00)={0x0, @multicast2, @initdev}, &(0x7f0000000a40)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000bc0)={'sit0\x00', &(0x7f0000000b00)={'syztnl2\x00', 0x0, 0x711, 0x8, 0x8, 0x6, {{0x11, 0x4, 0x3, 0x3, 0x44, 0x67, 0x0, 0x0, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x4, 0x28, 0x0, 0xf}, @lsrr={0x83, 0x23, 0xd0, [@multicast1, @local, @loopback, @private=0xa010101, @local, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @ssrr={0x89, 0x7, 0x38, [@rand_addr=0x64010100]}, @end]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000c00)={@empty, @dev}, &(0x7f0000000c40)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d40)={'ip_vti0\x00', &(0x7f0000000c80)={'sit0\x00', 0x0, 0x700, 0x700, 0x100, 0x9, {{0x20, 0x4, 0x2, 0x7, 0x80, 0x65, 0x0, 0x3e, 0x2f, 0x0, @multicast1, @rand_addr=0x64010101, {[@rr={0x7, 0xf, 0xb5, [@private=0xa010100, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x59, 0xffffffffffffffff, [{0x0, 0xe, "dcc8d648b669c23d53fe092d"}, {0x7, 0x12, "fa7ccd47f28ea75e96c2a7b2f6a7fc60"}, {0x5, 0x6, "c6db5b8e"}, {0x1, 0x5, "40a540"}, {0x6, 0x2}, {0x7, 0x9, "1c54480bad41ce"}, {0x2, 0x7, "c8fdf17c43"}, {0x6, 0x5, "f6485a"}, {0x2, 0x11, "1a8d9996e59685f57e23a068604064"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) 6.796127212s ago: executing program 1 (id=575): socket$kcm(0x1e, 0x2, 0x0) socket$kcm(0x2c, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = socket$kcm(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_DIRENTPLUS(r4, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x20, 0x1, 0x5, 0x6, 0x1000, 0x6, {0x1, 0x0, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x1, 0x7fff, 0x7, 0x4000, 0xe, r5, 0x0, 0x4, 0x10000}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,access=', @ANYRESDEC=r5]) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x800) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f00000004c0)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb07a9dbec07d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8e690d1049c884d79e243210c733da8adfb6db6f3b3464aca805a08f3cacf9bce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519bccdcfda872f503656169", @ANYRES16, @ANYBLOB="48aa122ce7bad1d4005fd66df97f8ec44bbc8f22ca2298ce346671617bb371da3c639abd9ee548b49a9c10009f28579f82efb3cf18d7e4f7d0cda9f6feec4c5df95db277defa1414ccf2075e6fd144cdc78c1f843f1574502ce415c27f3cec8893fe5950104e7d7b43440fd107294cf00fe8000000000000", @ANYRESOCT], 0x1, 0x65b, &(0x7f00000007c0)="$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") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) 6.620818466s ago: executing program 0 (id=578): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x1b, 0x5, 0x4c8, 0x330, 0x330, 0xffffffff, 0x0, 0x128, 0x420, 0x420, 0xffffffff, 0x420, 0x420, 0x5, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @broadcast}, [0xffffffff, 0xff000000, 0xffffff00, 0xff], [0xffffff00, 0x0, 0xffffffff, 0xffffffff], 'batadv_slave_1\x00', 'ip6_vti0\x00', {}, {}, 0x3a, 0x98, 0x0, 0x10}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@eui64={{0x2000}}, @common=@ah={{0x30}, {[0x4d6, 0x4d4], 0x5, 0x0, 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv6=@remote, @ipv6=@mcast2, @icmp_id=0x64, @gre_key=0x2}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @local, [0x0, 0xff0001fe, 0xffffff00, 0xffffffff], [0xff000000, 0xffffff00, 0xffffff00, 0xffffff00], 'team_slave_1\x00', 'ip6erspan0\x00', {}, {}, 0x87, 0x9, 0x2, 0x28}, 0x0, 0xa8, 0xf0, 0x0, {}, [@common=@eui64]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0xa, @ipv4=@remote, @ipv6=@loopback, @icmp_id=0x64, @icmp_id=0x68}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x9a, 'MASQUERADE\x00', 0x0, {0x1c, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@remote, @gre_key=0x36b9, @port=0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x533) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000132000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="f3a50f09cbd0640f01c4660f38817ac5baf80c66b814370f8766efbafc0cb000ef0f01c40f07568000048e3665660ff5649ff082622463baf80c66b8b8ba8a8966efbafc0cec8ed8", 0x48}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000700)={[0x20062a, 0x6, 0x800000000009, 0xffffffffffffffff, 0x8, 0x8000, 0x80000001, 0x1, 0x7, 0x8, 0x100000001, 0x9, 0x0, 0x7, 0x40000000000000fd, 0xffffffffffff5f24], 0x0, 0x890}) socket$kcm(0x29, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000007900)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES8=0x0, @ANYRESHEX], 0x6, 0x2e6, &(0x7f00000000c0)="$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") mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x130820, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x1, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x3) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.597321398s ago: executing program 3 (id=580): syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xa6l\a\xb0\xf5\xa9^a\xf0h\x16\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xb4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\x00\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1UAA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97cy\xef\xbc\x1a\xbf\xc4\xdd\xe2\x9eBk\x1d\x8eg>\x87\x0e:\x9f\x88\xc0\x9ay\xffQ\xd6\xaf\xf5\xc1\xf3{\x91\xfc\x02t\'H \x97', 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) pread64(r2, &(0x7f0000000200)=""/56, 0x38, 0x100000000) 6.127189426s ago: executing program 1 (id=582): socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='noadinicb,partition=00000000000000000005,noadinicb,mode=00000000000000000003324,gid=', @ANYRESDEC=0x0, @ANYBLOB=',volume=0000000000000,\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x489, &(0x7f0000000580)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000040000000400000002000100040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000ffffffff00"/27], 0x50) 5.874187916s ago: executing program 3 (id=583): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20082, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r0 = socket$inet_sctp(0x2, 0x2, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180), &(0x7f0000000240)=0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000002440)="66b821000000d9f30fc72abc4ec80f01c8f30f09ed0f931e0000650f381e5509670f78a7000000800f01cb660f38815c00660f3a44410001", 0x38}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000000240)={{0x1, 0x0, 0xfffffffffffffcee, {0xdddd0000, 0x80af000}}, "cdb372b4dfe02964a59572ecc37526989e90f15cc175ae8c93ae45591f356c6884a1eb49a1ccc74c2260aded1979bfd746a27408d1220c39493a1d3b65f5306464393183b3b654e5237f83855fde05bc36e88baa2c07c6acd1e5d8c2b3736f1ec8fb98c1b5c20bae0c02c146f4182375c277e8647f577021416f8ba515ffa35cddd261d521df3e841a9179cda39879511c2e9ab06778ce9ffa6f2c9370d7af33bc74d16360a42aa2ced6433463ef4bbed671371e8eba18f2aa973f65ff1b5b35c7c67638ba4aaa64a717f556fe32f70ab1f227b75eaace9c63811a4abc99987e6c8964cfac90a0ca3384510dc63e3e3935540ce749bfa6a8785ee00fe862262ce28ff980e350a64be310b5f576ccfb5a2ba166b324b4bbe9f23030a79f16f20258d077d87f7b1e5b8ca402ce6e51b3236729fde5e6f96d7a94c8db3cc00fdab35e2544ebb424632bb9d82cbfb21146bfeb80e5f5e26ed89a6c521920b5c02cd9cf8063e1ef18919946124f64f749f5c2e3d603af2b7a2d2d24acb6ebe5f47b988dc51e690d9aea44fece3a353bae1b80dcae49c8cb6443978623b0ec80cd0feb0a134a51fdd2b1912a45c6ca41414273268c676bbef4ab3e2f7ac5e061d6dcf0041af2cc971a27b616444ae913033933ed4b1d89b96c8ee9edc86ee12d5917695796906d4822fb3a931df763e3a8e8893ae4749765bdbae4377ce47fb5e26890cb5178c03dd0df248bf35caf84f3cea3d778086065dbb0cd51ea04f28dd6ce80820fda0ffa3f33d38adb2d68d41db8ab27d4cad8b7abb026827738fb9c59d043199cd27c2bdf9711acb36926c730e216de7ad2de0326676916586ec8325f4b13735e34c4d60bd27e2fde3edc95dc59cb69c1dc25569da425488b6b6e9a63b17964ce1fa57bf2c7508ed199cf64a5cbc23b01cdf08b1ad4337f1b0aa02a6c137fb90e32fd7e204966170aa80fca868a45d496be7758c47f83760208793eb1600b6ebf4d1d2dcaa2b741f1c0b9f8844b9e68ec7f7123083c6926a1e95fe9b75f16064f213f69f8f1a97b66961279a6aa3498f146f7e517c2f5a9c0b0673b93dca4fe0c48d53c8f5f89bb7ab0476e00a13e020370077a55c28abccb585bcbdf29966a4db1c3ab0f3f58e54640032484e08072aac638b9c9dc9655a525e9016d9b24358ba477695875e3abd484ff3adb92069825841c3bd1870f708cc25288ee5cc4a6d7fab62eaa724a7acb4ee5952db977b4da11597891f5c5af6086ddf387deb19ce0995ba175f830c94b5adac04d8618a262b3059fe96d5b18690e5adf3e592ae77fed8214ef468d0cacdbbdb1712cff009e03146b57bab5b8302a5ed0f75f59c63877ad8fea5ec596c667ffc2337343e1726e79985bf7c663f8dca6ae731dd96486568d0c0e4c3a3860d7250e04373cc55018eda3ac9077cd2c5317df8992b548e34344ca97a9ed3b6f8bf1a97e060231657706c9e8ce8f03805b111d4bf1a559f4cf0822a20cd9ce06b56c5f051317e187d76a303af82d2053286d5d3cee381602170f5bb4036fb34c080992e9f7d509aa230935233dac608f533ae2a26c5e5710e6c2ed1bf61303cc3c47465791333dae385f91de77c3357fbedbbb64ae3b868ee90b98ab647fa0dcc85bfbab33058667b95106519c7ba80246f73391919fb575dedfe436fb190e828fd58ac25537a4ba5ef0a97c595ce67a740d1cfd84a05d3462d9203dd6ea94f60dc03a29c3c81aa25dce4b330fa7500234016373add8120018ea6b5fac8597fcc8404c793658db3277e2a7e042cb56420002922183f14af74d970dec12a781763c1d9d69cf664b065a9b09491b1ff043e9c9a2098975c17e82a5d06b9f1081c43a539669e95991d866f3105e0b327ab8659e23bf1b196603c7406221e47494b765a114077187295dfafc261ea9ad3064b3449c6e8ef5e2517f609995adf82710d6c23a83e06f61c8186017afa6b2de5b28082770edfc81ee72e46fd1365d0a7583e3609ce420e54cc7a2d57542b924c6c5c9c896d068912adf22a97b3547502d0181d2c69729c539921ab16c466ba6d1d518c3e787fb0e9f708c9a1bc6d428355f0a3bd574397a6f8eda6a1503854a1bd4004719db60a9b3fefe434464d9f2aaddf44ee98c503ac606b7d4d8bac4efa557a77fa5a31ed8c8b48cd1ee6e4e7731ffb273bf21838f4e0cb8eec8a2cbd8acd40c15fcc3959ec3b4ea86680fb1e65743acfc164c6ae830f81a00c83102085d6ae8c7b4424ee0e86673015d98449252de73a25bfbe1697ff06aecf299b2a0e7ce452ba6bcba6b6da2c494cf0ce51cbb555cc2a371bf5a595748486825b0798221f40d2c29396431d13a03248874b893c7880d3b87cf845858a31f68fe57b032e3e0204fd4fb23fd5b2357d8e4f6052dd058b3bf6cd913b4341446e62895d6a367e4233e25ef3aabfb7f35a7804938e3181b6f551ac4a947ff016a12dffb53e7101b6ee911fac7637b2786cf95a4611376d0ac7b1e61c763040550e0c00ddb39a11086e08941c518a5ebedcff2c9477f7be26ad4dc48d837b85d082b4a54c8ec3f1caff75f7fb8f1282df6c5b336c2e56c0f35d9c5dd38fc91001e950f5fb41b58a620a9ee5e6b001a637aad4ec9ffd09eb762fd0d1d8058ca0e544329ee8693547095264c46d9b716fe56ff991b28dc056caefb0d08c0c509ab0eafeffc280684f8654b18323eddff28b4e778a674b4d5b85df786bb12ca24e1980e56032d1d32eb472954eed24b99bbc404dc920e16d4f8e792d6fe581efa82420085155ab9716dc642b44e2a9215cdaaf3df4fa5ad66a26804ad87b7520c132fdb595ea560eb408b5d519cb31c2c6ed2a16fe971d7ca71b7530af7478f06509cc988b96b27dd3e667ce4b08ca685ae818527103addba74d71d094e7a58325658343b989a1d973fc9f1cfebe848c35279cfff728928f77af22430daee46cc9242fa4afe5197e6b42811396f9136fbd545826e020a910fa790acf9292472b7ee3b34723d6f56781d5c061be6e535e49bfcc292a1208645c730b6aadc94e56f05c6f8ca71c7fde81b687190accb75b08f131d61d6536cb3810eb2b6006336f700f1e6ea8104de9c9c6c9f4566a3783d253e3153e9550b91d547430bbe6dc2b586ad5eb67c7add5b009fa44c416bfbe28e524ee6a2d0b016331037010fa882db5d35cfa359d1c7a173cf913e11b8888d0f37b75011f26ce9f97b132dd6f50cbf4bd7d1f9201c55b7ebc08c4e2df4a3b35d2980bf8ee63b8091fed356f764c0bbcc95a91afeb4a2c1deb3fc0c44fa76d768fed87d737bb3380794e4b67932e7492e6558ca53599a446664031ef83e6a6d5362d89eac11c767932f477201d2953b4bb6058f4a3baca2968719edbf41ca5da5be2efeb9bceb38e2f1394ff41d9e93ecc746175b8e5fa2f5bf903663cebc1266ca7a2f8c57340c1ef42e4fc8a85d76ce24237d16f1ac13d32bfd1121017e9a72ad3fb0e952a296ff9a79bdc5be6d8691696720d97daa7c27fb9489e47584c00c854779de5980490afbacad0d0774a7f13e424b0ea955a87b7e296a40eca7ab8f45ae76170da77fff6b554c50dcdc6a261e8ebb7d2f24583023d001ff218ec7844fb4640736f04e9f7d968aa74bef26f65eae961a4857a946d3b221818a798d65bf74f8c0ac1b4529e36183c49606890643573722d467f4c464e68069955e561ccfd4423c2a240cfbb96efb668844ba0a1ceb910ad4ef06cd0f13f7ffa85744bdd0dd16ca27f62179b3916868187421b6d9f9c698d6542a02d4c124373ce0f10cbbc6b9a18385d99519f06a24aa9a4f5560157880233ee8352f2e9de0ffa333bb50932587a70153a37f25263693b86dd6a61f7d1f40cac0f205b65fa2faa3098254fb084160c271addea6711ecae589870450b941db419bb27c8b597982b704ba0ea0189e7b5cd6b72e3529cd77e4a79c752f2f7af6aa43ec9eb0bbefc91a02a85871771189c1f9a0742e8e6fc2d71575e20631dee592f0ed44c9d8f6a22e7d7844445066ca5e8bb97dd5c2ca0365d7c33563ceca884e8e14ba21733c4d2415c1be9369298fbd616fd792bd767555aa2deec8f45e92e10fcc88079cf0093ca2e38adc797845548005a0660b5cbf6423d966ebdccb6ce9d5d476bfd562dff0dd1f8e576d424c0f5cbfe68a3a571e860e5665861a133bc8eb3d9838e9a88f18edb12dfec18a488ad1177ca22f6f763beee9c1e0dd61344997dbbc6de56800f15d2b04a4d83a0b79adb12c54aa7c418d8fd0c96b5797a003b8313d14093fdadd4b530233dd1176e86090e0cc5401d6f98529de8bb6094b8e2f02b53f562a4c115655dc2619811d8caade655b767a5d4fac6c10784bf5bb06e9f535fd1304f383e39bbc5ce58a5f2f9deb9af1d6df6b491fbcbb9053f9bc73da0ae2e815ae72aff41c71ab7adc71074dfa6906724f18b74a344f7911994ee8ee843fd991de053dd9fae152d02b4fe0818c6313aee7df2f32009221f6c2d0ef9b53b7c2e795d64dcae34e5fab88e6b112b935fa836c6868f72077c57a42a940d3c0a667f3d0b674a3de2aa8c3443748c3a5ac949f72ed49220a9cbf0896794f58e12b74a1d7c7bbf8bec7d8aa055855c34a6c25d6fddd22a73725ca3daf8e357b8173508be65d329a4b97820cdb1c7a98d222a839b4da2a33ac687ab4004f5e1d90be7dad53a50ab4d6bc04135e0a9f31af27dc75eae3b9e7fd7459455a4cdd7faf94c5fe701d66d2006719b9acb72db3c89ca61bddea7c0be7ec769ec1cbfae11a77f36a59966f042e5dd32ece56932b083f0cb68c92194c6a4ca0267186b5f3ebaa25f63b6a1b60a2a5c78b9b5b488962b2ce4854b51ab2bc001231b6be3fcdc5563b0950165da87745e387c1205ba818287a8cebfaae10ff461c2933d775c6cddaa936d1907e29b5b4e1ef0a000aafab5363dd692560a291a71f06552647144cac4884a8ae8f2dade616384eeafa54f84737d1613beb945faaa4a316ee2e2a3a094187b5edba42358e930c89bfeaf4620bada8aa6d6c8800d1b19548a308b8310a0b51c8ccc7db60aa2a04fd8b21769a32eded238f93f476b69a6548a8a17aee1d0c4476db41e4eba24d9351d3f98fac043f423ffead379b6cbfb05aaf705ff0dca6e5f6ba36d00d1bc98714a92c8ac1e7cbf441521c98e2b913dd7a5d8595e0479537029de96e2991652243fe3093594720a0538b1687711bf0bc46a1453ebe60c5d33bd798b66f19e69c90e55c2b68b62d1a759a3519630798dd4434fa658b013e28fe9befca82abc1f89a3b246f2fd44df84f88dab2792fc67b3ef2ef8eef84e441e2a7ff5a83e3784a5636a7d4775f5b3063d8e190bfcedcd8083d864d0cbb2fcca7af05cee2be552d89c801e760348dadf01ee4dbb9fb09d5b6c993ab9ac9ff7d5e1e104ab3a894f6cc9067ad64c5a97d3e12efd17820b3c07e4ce302a20fd4c5b5de8752bc4e609fbe9e6cebe713f309229883790ab6dffc22864f7b02fd9026a07299f8cf1e799acdd448428199165abf20eee23988cfcad773c7bc483f941f994c07f255e6cd72e7198f34bcbcbd801abb84e6e383d7bf6e217ee0281f4691beba5d17ef8bd59d7474540dda647ca3bdb8e280a2e6b7a7688bc677a25b2186b1e59e637737366733d75f02a597b7cabb18e75a1722d2327f4f2f101955ca88636ae97d5740ba61d7867c5141becd39f7fc5abb5b96142e0995046c2ab369ac46c18159d5a3569df964e69e7686471ac756bf0515fee78904fe8fcec2096b5f3e", "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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xd8}}, 0x4000040) syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012030000003a"], 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r7, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 5.562103741s ago: executing program 0 (id=584): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x40, 0x1}, 0x50) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8010002}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000850) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$xfs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x8000, &(0x7f0000000040), 0x4, 0x9836, &(0x7f0000009b80)="$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") ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x50, r2, 0x8000000) r3 = syz_open_dev$audion(&(0x7f0000000580), 0x6, 0x800) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f00000005c0)=""/192) ioctl$FITRIM(r2, 0xc0c0586d, &(0x7f0000000180)={0x0, 0x5, 0x4}) 4.522752075s ago: executing program 1 (id=585): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000002c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10080}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x9}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@test_dummy_encryption_v1}]}, 0x3, 0x595, &(0x7f0000000440)="$eJzs3U1rG9caAOB3ZDtxvm4cCOHmLi6GLG4ubeTY7kcKhaTL0oYG2n0qbMUEy1Gw5BC7gSSLBko3JRRKaaD0B5Ruuwz9Ae1v6CLQBkIJpl104zLSyFEsybIdUcvV84Csc2ZGOnM08x6/8yEUwMAaT//kIk5GxGdJxNGmecORzRyvL7f69NZM+khibe3935JIsmmN5ZPs+VBW+XdE/PBxHBlp025leWW+UCoVF7P6RHXh+kRleeXM1YXCXHGueG1qevrcq9NTb7z+Ws/6+v9Lf3z53sO3z316avWLbx8fu5/EhTiczWvuxwu401wZj/HsMxmJCxsWnOxBY/0k2e0VYEeGsjhPY/RkHI2hLOqBf77bEbEGDKhE/MOAauQBjWP7Hh0H7xlP3qofALX2f7h+biRGa8dGB1eT546M0uPdsR60n7bx/a8P7qeP6HIe4nYP2gNouHM3Is4OD7eOf0k2/u3c2drJ481tbGM113H8c2IKeuxhmv+83C7/ya3nP9Em/znUJnZ3oiX+W/Kf3OMeNNNRmv+92Tb/XR+6xoay2pFazjeSXLlaKp6NiH9FxOkY2Z/WN7uec2710VqneePr7dRzwLT9Ri6Yrcfj4f3Pv2a2UC3stL8bPbkb8Z9n+W8SLeP/aC3X3bj907W+lBZ+/KRrGyeKD/7baV5z/tu+/816nwGvfRPxv7bb/9kVrWTz65MTtf1horFXtPr93omfOrW/vf73Xrr9D27e/7Gk+XptZfttfD36Z7HTvO79b7//70s+qJX3ZdNuFqrVxcmIfcm7rdOnnr22UW8sn/b/9KnNx792+/+BiPhwi/2/d/xex0X7YfvPbmv7b7/w6J2PvurU/ta2/yu10ulsylbGv62u4It8dgAAAAAAANBvchFxOJJcfr2cy+Xz9fs7jsfBXKlcqb50pbx0bTZq35Udi5Fc40r30ab7ISaz+2Eb9al6vXFzQ3E6Io5FxOdDB2rz8zPl0uwu9x0AAAAAAAAAAAAAAAAAAAD6xaEO3/9P/TJUf+76Iy7A3uWXlWBwdY3/XvzSE9CX/P+HwSX+YXCJfxhc4h8Gl/iHwSX+YXCJfxhc4h8AAAAAAAAAAAAAAAAAAAAAAAAAAAB66tLFi+ljbfXprZm0PntjeWm+fOPMbLEyn19YmsnPlBev5+fK5blSMT9TXuj2fqVy+frkVCzdnKgWK9WJyvLK5YXy0rXq5asLhbni5eLI2N/SLQAAAAAAAAAAAAAAAAAAANhTKssr84VSqbio0LFwPvpiNXZcSLpt5fPZzrCtd46sMLz7HexQ+Hm03q1+WZ+9VYjvdnNcAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBmfwUAAP//1zksMw==") inotify_add_watch(0xffffffffffffffff, 0x0, 0x52000775) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000ff1c1b1f1c4000010203010902240001010800fe09040000020301025f09210800060122cb0f09058103ff03"], 0x0) syz_usb_connect(0x4, 0xb81, &(0x7f0000000a00)={{0x12, 0x1, 0x310, 0xc8, 0x6f, 0xe8, 0xff, 0xc26, 0xb, 0xbd1e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6f, 0x3, 0x8, 0x2, 0x40, 0x7, [{{0x9, 0x4, 0x4d, 0x1, 0xd, 0x33, 0x47, 0xb0, 0x1, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "c663"}, {0x5, 0x24, 0x0, 0x600}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2, 0x1f, 0x5}, [@mdlm={0x15, 0x24, 0x12, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7f}]}], [{{0x9, 0x5, 0x3, 0x0, 0x200, 0xed, 0x9, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x2}, @generic={0x66, 0x7, "a99e2d87ed8df994b795832c388518d347fd0f4d975bef3d78a5ec236d1f43e7311d596ebc2e3b44827d329339df71a503db2b204f2b503b872b4ac0752e996afb05540a0a35c571188e0964c709c500a6512f78cf3b060de5acaf5b47727afa2f93aa24"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x0, 0x7, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe, 0x4e8}]}}, {{0x9, 0x5, 0xb, 0x8, 0x10, 0xb, 0x8, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x75, 0x3}]}}, {{0x9, 0x5, 0x6, 0x2, 0x40, 0x3, 0x21, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xc6}]}}, {{0x9, 0x5, 0x9, 0x0, 0x210, 0x3, 0xd, 0x4, [@generic={0xcb, 0x24, "a7c1f6fa576146374fff9dddc6455f792988a443256a1059c381eaf3ec272382d999508164986e59a23031cb3b065e960cd4a929d08cb6ee45e11561d1a8691e25742ab72d6209344438e138faf5c217b732ad64297e6a3cf47a821fed4e05afcee49a006caab02061430e3db43fd93aae997233cd317eccc2cafdf6066b4f67f2671525067552b0ad05f3e5fd452e0c43b0b166f27ccda380f7201a36bb81e58ee12f3ab9b6424b901dc98ae2cffbadb094da8ebf1cac6047f4ddde30c8a0a1f79cd60dc78c555a7a"}, @generic={0x6b, 0x4, "69f842519ba97e4f711693ace944d0861cf4725f05a6faab5f9349658327a710de39da126f33b1cbb7d07a90347401d533826864902dd0487c43cfe877ca65700068d3ed24e37b062be733ee8b4db50c0f59f1c5b9e8453f08ab5ef5420d862a1dbec5cfbef419390c"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x10, 0x45, 0x2, [@generic={0xce, 0x8, "29d531fa8f59c899d7a5b6756c4d44022658684313617cf9ced7d0fc3b9939fd1450fb164eaf88a001a4e65ad2ec8256b8ff8e27c5384695012cc54de2d0cc124520d90e303810f3f92d64db8f8fcf732f44601e77bb593af441174e5d1340037efcff3dd42ab62cbf7df5583010746e8a20791f481d93dc4d34d740ad8e102e42cdc425da414112ba3e723d59a58c283dec85022c13898d39adafd88e51e1772d5a69627c587c119c07171e523c295b48232b45d329bb4298f87d18e4337b3b394d1667cc9f810a29a88c6c"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x20, 0x9, 0xa0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x1000}, @generic={0x8e, 0x23, "bb55d3b8a0c8ee8e90f7e62845c85109b6d593abaecb4a11be61083047e7a737884b61bc643cec3d3208b0bc1db1129c6ae1673375704005ddeba935e91e3c0ae77818d0b6c0d52a62c4003d2140cf02be1a17f5efbda830a5baa31a8fa7eacc440f4d69f2f991ab898ab8c004e24b5419ab53e5ef6753f9312b7f6f2bfb4b150dba9d976329d1ae100faaf1"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x10, 0x0, 0x81, 0xc1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf3, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xaca6}]}}, {{0x9, 0x5, 0xf, 0xc, 0x8, 0x9, 0x1, 0x2, [@generic={0xae, 0x22, "104e451222230bb254269463a87ab733a6f3d6c17f8233dd51d7abfa7c8f7bf1eed3f66fb3a415b7710465fd580a55d69e491a80d5dc64bab12a83ed7902763ebe528a00f27fd0c29c134c7f26ef581b012c6200314546a5360a7e71e7f048ef7f1771ca7c5f5a8ffbf42fcf6b67b5ac065b0da4586288bd3f7b85512dfc4efb3d17db9a32d065cafde8ce6cc6ba2bbf29621744113c6f3e969f2cda0aed89368cde6507f524b9e05e20d657"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x3ff, 0x5, 0x3, 0xb9}}, {{0x9, 0x5, 0x8, 0xc, 0x40, 0x8, 0xfa, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3}]}}, {{0x9, 0x5, 0xe, 0x8, 0x200, 0xe, 0x3a, 0x4}}, {{0x9, 0x5, 0x8, 0x8, 0x40, 0x1, 0xb3, 0x0, [@generic={0xc8, 0x3c, "36423f62f6ed2dcea253de9021098fbc59e6598a0ef740c15405939f143991d5d3d2ada74136337d7b3128ccf298438d165414803acfdce666b96071bf3c43f4c64367b9830608cf46859670eb9454c4db444f5eaf0d985e47f1ffdd47dfbc831fab0fb460cb2b65e6a420927d9abf5fc0ae87eb3434a6cfa2c4e6957f5e20621b364eb2579ac9ea16fefaef5e5acad519021e58b66d8d7c5fbae0f6415ebba3114af23bf7b3b641712faf8fa2f7e890fc1c1c6f6663ffc6b90b14a70bcc4b9d160bf08ce61e"}]}}]}}, {{0x9, 0x4, 0x6e, 0x6, 0xe, 0x1d, 0x8d, 0x1, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x2}, [@processing_unit={0x7, 0x24, 0x7, 0x6, 0x5, 0x7}]}, @generic={0x11, 0xb, "2e88bd2bdfbcea3c11e72611af376b"}], [{{0x9, 0x5, 0xf, 0x2, 0x20, 0x9, 0xba, 0xf8}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x7, 0x6, 0x2}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x7f, 0xd, 0xf7}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x72, 0x80, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x4}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x3, 0xa, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2d, 0x6}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x2, 0xb8, 0x8}}, {{0x9, 0x5, 0x80, 0x3, 0x20, 0x8, 0xad, 0x81, [@generic={0x91, 0x30, "f005cacfd9c604730215ca592b14d34bec159f0fbecafb73893fbf512d6cad28127d89c03c65ebba02416449a7c07269367c23b71f98fc4d5dc8332f2bc0e8b597ecf79be8d5eb64f4aee381a1833377e0309ffe8627a80b188464f4dad4c6ffbb01d44f3a4fac9aecd57be00fd9d64e29ee34245aad2647d6e3d3752cf91a4d65dd65bfb8cca4711307961fb15e0f"}]}}, {{0x9, 0x5, 0x4, 0xd, 0x20, 0x7e, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xd80}]}}, {{0x9, 0x5, 0x8, 0x8, 0x200, 0xfe, 0x5, 0x1}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0xb1, 0x7f, 0x40}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x5, 0xa, 0x58, [@generic={0x9a, 0x30, "5113ab73e1d3901b5c54ef7073c2cbb38624e6d38a055d1aed90200e0d67444e58d5195f289a15db11e5e6fd139a52112c558688808e0fb9c4905d633659efbe9b42113f8e7214a8fab3f8858918a1c8b2719bd6d566d1f688e0fe3fe5e65a73461227fcb6723f04e598f9b32d44c17b6fdf2b49dcf692f918947588e947c7a36274479ab999c14ebe0de63e08fcc69011c223f952f25fea"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x1, 0xa7, 0x37, [@generic={0xd, 0x23, "3a17c39e19aa4ac577deec"}, @generic={0x100, 0x23, "9742b37c453e1e7f410991ae0c2c8576947e8db7fbd7753625bdf547547af33b3b3696442fcf5d39cf9a7deb246dde5f21cef5a12e2471adafb54f2d853b9e599011df763d92a5798b98e9e8555f892ec0db0d24ac7603185348a29fe8ec4247bf0ef97b9d5a8e76171089cae4d8b67a37f993df5a100e5697906f07c1a13f68e3688f7180b4899e9dd58f84b9e87379bb58df7084e4e19aee1e3f801b671ad8ab97b4b40294fccb1c79171f57d6a2d2eee29e761d6b215088bc1d7d8c0eed47d85a4b1b6dbc7f5cb6343700e9121149aa1bafdfc6b8a63169f402b70bf1f8a6a1846c11dc88f6c901b72bec3f6f470b1206a4c5488d5482438acaaac7b2"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x8, 0x2, 0x7, [@generic={0x81, 0x2, "e9012a472262f2fbdbac5ab17b45edb28b3dbf1cb98651f2b6840152a909d6583e66f3678f283728499f73bbf3aee2afc13fcf991a191e6d6fcc772acf0330bc9af1a2f9c253c51d3a1519639edc19e4f075642df072c8ef237e26f43bf8cdcae4bee21acf94856221020b714298ddfe945854db523c343bae84716095e2d3"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x3, 0x1, 0x2, [@generic={0xed, 0x1, "6462c84a90913509a13f5ee363bc366ef1f88c0a9ed2df9af247ea00963a3afeb85866aa74f60fd6919f54b1b0d358f8d5f54b93217f3988db809befeb8cebf0c8cadd43636b1570fa16a6d66ad4b2c5c6e1b4670a7ab8f792867a76794950e14ccbcefd24d7bbfddf07a68181c5f53f919c10e63f68c9d52e39c264c6a061aa19e2684b94e32099f658103d2c0707249a2752541c08f69f4703f24bdf59379eaf785d2637fc89a650187f5af59ac8fc43f70a60b719d0541f260ca85dbfcf02bebefb1219a9d72cecb2b48448f4053312d75238f77e37378fa537ca19e5e2aec6466e59b5f56b0196dfa7"}]}}]}}, {{0x9, 0x4, 0x17, 0x0, 0x4, 0x69, 0x5a, 0xd9, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x101, 0x80}, [@feature_unit={0xd, 0x24, 0x6, 0x2, 0x3, 0x3, [0x5, 0x4, 0x3], 0x3}, @mixer_unit={0x5, 0x24, 0x4, 0x4, 0x7}, @processing_unit={0x9, 0x24, 0x7, 0x4, 0x1, 0x3, '!\f'}, @processing_unit={0xa, 0x24, 0x7, 0x6, 0x4, 0x83, "26530f"}, @selector_unit={0x7, 0x24, 0x5, 0x4, 0x9, "0916"}, @extension_unit={0xd, 0x24, 0x8, 0x1, 0x1, 0xac, "54f4e4eda3ac"}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "5101c4c61d"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x10000000, 0x401, 0x1, 0x8}, {0x6, 0x24, 0x1a, 0x4, 0x15}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x3}, @acm={0x4, 0x24, 0x2, 0x9}]}], [{{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0xc, 0xfc, [@generic={0x9f, 0xa, "09ff561767ac4ac94ab54693c6f96b9535a9661368ea3164f641e6220c9852f4597d271ef3965d49f420af6d0f58b8d2893c1d717cbc5410a72ad4a30fc7062176b949b399fc93543cc9d71778e95d129e41cf77ec057bfa9ca838c67d7a9544080804b78630b77d488daecc947730a7d9b0eb417c19ec6001f216248ab50292b38bdde97c5e378a568325c9149844bdaecbe7107e28b8cb68a79b30f1"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x6, 0x8, 0x3, [@generic={0x5b, 0xb, "83e8ee6f7afa95554409669059cc67ee0ca5893c88f96ea31e464ab4a4b67724daaf4edd7875fc69aa1eab1bd602cad864a83ae68c021e7393ce050ad41dea0c0a1a0f9b9dcaefc045996865135877041170c13fd9377cfe39"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x200, 0x9, 0x3, 0x7}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0x6, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xe, 0x101}]}}]}}]}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x1, 0x4, 0x6, 0x0, 0x8}, 0x35, &(0x7f0000000100)={0x5, 0xf, 0x35, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x1c, 0x3, 0x0, 0xf8}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x2, 0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "7e2755798465b792fd29a1c9c9f8c0fc"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x4, 0x6, 0x7}]}, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x861}}, {0xfd, &(0x7f00000015c0)=@string={0xfd, 0x3, "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"}}, {0xe, &(0x7f0000000280)=@string={0xe, 0x3, "d58c85ee3dee05a2e7538826"}}, {0x11, &(0x7f00000003c0)=@string={0x11, 0x3, "c30f35dd8d9cb35a9424deb01ca7af"}}, {0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x446}}]}) pipe2$9p(&(0x7f00000027c0)={0xffffffffffffffff}, 0x0) unshare(0x22020000) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r1}, 0x20) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x1}]}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000004) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x46, &(0x7f00000000c0)=0x40, 0x4) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000200)=ANY=[]) 4.389200246s ago: executing program 3 (id=586): ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)) dup(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) 3.934172942s ago: executing program 2 (id=587): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, 0x3}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000020000000200000004"], 0x2d) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000300)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000a17000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x8}]}}, 0x0, 0x26, 0x0, 0x1, 0x800}, 0x28) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f000063e000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="8fc830a64301032e0fc728c4c195db56d3650f07b95d0800000f32262636f20f7df166ba210066ed26660fc7b262e0ce5266b830018ed00f35", 0x39}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x1000) openat$comedi(0xffffffffffffff9c, 0x0, 0x181001, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCDELRT(r9, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e23, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x24, 0x0, 0x3, 0x29, 0x5}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3.440620312s ago: executing program 0 (id=589): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000280)="c4e2052ebd35e400003e360f01c8eae3000000360166baf80cb8f646b38def66bafc0c66b8fe0066efc4c2510164e2e2c4e3fd6905007000001cf30f52d2b94c0a0000b897000000ba000000000f300fa8c4e1fb5d8300000000", 0x5a}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x4, 0x7f, 0x4232, 0x0, 0x81, 0x9c1, 0x8001, 0x5, 0x7, 0x4dba, 0x0, 0xfffffdfffffffffd], 0xdddd1000, 0x80300}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.242252028s ago: executing program 3 (id=590): openat$tun(0xffffffffffffff9c, 0x0, 0x8001, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x5, 0x10f5, &(0x7f0000001180)="$eJzs2DGLE0EYBuB3dgNyVWSuXw+0sJDjjvgHrlBIY2FtF6zsTKXk5/hz5Cr743qvCNgrmxgSJGKRxUB4Hlh252Xm+2bKnQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBvlHwvyXmT1E3WJClJ191O75N0m/zx17ZJydv30/mrj5PX8/W09FmT0q9ajev101ondVKv68vzm2d1/unzh3anZUmXu+VidvbmYdCj9L3bQSsCAADAafh5sPGR+wMAAAD/MthFAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6uajSVKSrrud3ifpjrstAAAA4EAlTd6N9+Xra4CtF/k2LimPtsmP0s+5ypc96/+iLzk6aMMAAABwosrO//jznOXJTn6RUS4v1+PfrzzcJG2Sqz/q3C0Xs9VzsZiV/3kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAACYKgAA//87RdIO") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a"], 0x64}}, 0x4800) 2.8512521s ago: executing program 4 (id=593): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x14, r1, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4c00c}, 0x20000004) 2.623534658s ago: executing program 4 (id=594): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) read$FUSE(r1, &(0x7f0000000840)={0x2020}, 0x2020) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x21) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000100)={[{@resgid}, {@resgid}, {@jqfmt_vfsv0}]}, 0xff, 0x454, &(0x7f0000001080)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xf) mknod$loop(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1) symlink(&(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = syz_open_dev$video(&(0x7f0000003780), 0xfffffffffffffff7, 0x800) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a1) 2.522398466s ago: executing program 2 (id=595): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0x1, 0x0, 0x5, 0x0, 0xee3f, 0xffffffff, 0x5000000}]}) 2.407763015s ago: executing program 4 (id=596): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x40000000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014}) r3 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r0, &(0x7f0000000100)={r1, r2, 0x4}) (fail_nth: 1) 2.294613224s ago: executing program 4 (id=597): r0 = socket(0x10, 0x80002, 0x0) socket(0x2b, 0x2, 0xfffffffd) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000e00), 0x0, 0x22002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004080}, 0x20008004) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000", @ANYRES64], 0x1, 0x1a1, &(0x7f0000000440)="$eJzs0bFrFEEUx/Hvm53b2whRT8UiggkYXPeI5HaDFlaHVYRbsLARPPS4rElwo1z2ChMSvEYCEs2/oIVoqYJWIgrWwUKw0Nikk1wRLMRCTvZuIvg3ZD7Nb99bdmfmzVzWyorAn92VJlX6HA7yCUEDozLoKTXIN6b+YXJjEFw09brJ5yZHsqXlW400TRbHLhQo/dcAfo4VS/Cvlb3kuGJIqCJfdleaDbkR06uyoGZiSjXKD3HqtIJHjOhhjl3Hoeevc0nREr8GhybbHpPZ0vLZ+YXGbDKb3I6iqfP3qFTO5ftPk8prJHggisesEkAxZihYpVDn/qY+wIQgwZzacqTcxa2zsemcOTXRRQU79BDe+12K37SLusJpvGv5gaY5KjzBiRmvcVihuTmfJpVp5LJ6JaH+rH8VFF7HcbzmnXRm7aqS3+6zqux4Em5T8EOicshUPhqO8IG1LTpmqGx/Z1Te5qvszVX3370w1QlO8tTlbqPdXgxd+Ch+TNSBqATD/d+pmPH8gnlnvjHB170Hy7Isy7Isy7Isax/4GwAA//+IG117") r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000011c0)=""/4096, 0x41000, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e00)={0x2, 0xb, 0x800, 0x2}, 0x10, 0x29ec4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) openat$null(0xffffffffffffff9c, &(0x7f0000000b00), 0x20080, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32, @ANYBLOB="08000000000000000000000032b247fef4637694", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x0, 0xc, 0x6, 0x1ff}, 0x10, 0x0, r5, 0x3, &(0x7f0000000b40)=[0xffffffffffffffff, 0x1], &(0x7f0000000d00)=[{0x4, 0x1, 0x2, 0x9}, {0x4, 0x1, 0x5, 0x6}, {0x4, 0x5, 0x0, 0x4}], 0x10, 0x4}, 0x94) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32], 0x38}}, 0x40084c0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 2.174164334s ago: executing program 2 (id=598): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setrlimit(0xb, &(0x7f0000000040)={0x6}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000000b90000000100010009000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000040), &(0x7f0000000440)=""/183}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r3, &(0x7f0000000040)}, 0x20) 1.427676925s ago: executing program 0 (id=599): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x40, 0x1}, 0x50) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8010002}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000850) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$xfs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x8000, &(0x7f0000000040), 0x4, 0x9836, &(0x7f0000009b80)="$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") ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x50, r2, 0x8000000) r3 = syz_open_dev$audion(&(0x7f0000000580), 0x6, 0x800) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f00000005c0)=""/192) ioctl$FITRIM(r2, 0xc0c0586d, &(0x7f0000000180)={0x0, 0x5, 0x4}) 1.258392968s ago: executing program 2 (id=600): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) read$FUSE(r1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x21) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000100)={[{@resgid}, {@resgid}, {@jqfmt_vfsv0}]}, 0xff, 0x454, &(0x7f0000001080)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xf) mknod$loop(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1) symlink(&(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = syz_open_dev$video(&(0x7f0000003780), 0xfffffffffffffff7, 0x800) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a1) 1.094786091s ago: executing program 1 (id=601): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setrlimit(0xb, &(0x7f0000000040)={0x6}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000000b90000000100010009000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000040), &(0x7f0000000440)=""/183}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r3, &(0x7f0000000040)}, 0x20) 827.622073ms ago: executing program 3 (id=602): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000003900090000002e4a54a9eb8702"], 0x18}}, 0x20000040) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delroute={0x30, 0x19, 0x1, 0x70bd25, 0x25dfcbfb, {0xa, 0x10, 0x14, 0x0, 0xff, 0x2, 0xfe, 0x1, 0x8ba1941754a13caa}, [@RTA_PRIORITY={0x8, 0x1e, 0x40006}, @RTA_MULTIPATH={0xc, 0x9, {0x57, 0x18, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20008010) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r2) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x0, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000005) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0xfc, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x455f}, {0x6, 0x11, 0xadd6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8000}, {0x6, 0x11, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa}, {0x6, 0x11, 0x6}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x801c3}, 0x4040000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fbdbdd004400000008000300", @ANYRES32=r6, @ANYBLOB="1800700004000700050008000f00000005000100000000000a0018000303030303030000"], 0x40}}, 0x24040890) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000003900090000002e4a54a9eb8702"], 0x18}}, 0x20000040) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delroute={0x30, 0x19, 0x1, 0x70bd25, 0x25dfcbfb, {0xa, 0x10, 0x14, 0x0, 0xff, 0x2, 0xfe, 0x1, 0x8ba1941754a13caa}, [@RTA_PRIORITY={0x8, 0x1e, 0x40006}, @RTA_MULTIPATH={0xc, 0x9, {0x57, 0x18, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20008010) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r2) (async) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x0, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000005) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0xfc, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x455f}, {0x6, 0x11, 0xadd6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8000}, {0x6, 0x11, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa}, {0x6, 0x11, 0x6}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x801c3}, 0x4040000) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fbdbdd004400000008000300", @ANYRES32=r6, @ANYBLOB="1800700004000700050008000f00000005000100000000000a0018000303030303030000"], 0x40}}, 0x24040890) (async) 195.283894ms ago: executing program 4 (id=603): connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8942, &(0x7f00000002c0)={'veth0\x00', @random="bc1a091f2845"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 194.891974ms ago: executing program 2 (id=604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x14, r1, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4c00c}, 0x20000004) 188.939704ms ago: executing program 1 (id=605): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000140)={0x2, 0x1, 0x8, 0x9}, &(0x7f0000000180)=0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x49, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc004ae0a, &(0x7f0000000080)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 147.976827ms ago: executing program 4 (id=606): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000140)={0x2, 0x1, 0x8, 0x9}, &(0x7f0000000180)=0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x49, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc004ae0a, &(0x7f0000000080)) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 1) 18.356388ms ago: executing program 3 (id=607): clock_gettime(0x7, &(0x7f0000000240)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000009ac0)={r0, r1+10000000}) (async) r2 = userfaultfd(0x800) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007305ccd2644c05754957b95b75bde5a44070270290f5150102"], 0x0) 0s ago: executing program 2 (id=608): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x5) r3 = eventfd(0x3) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r3, 0x7, 0x2, r2}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000380)={0x7, 0x200}) (fail_nth: 1) kernel console output (not intermixed with test programs): mber_perm+0x1b6/0x600 [ 177.565802][ T5495] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 177.571274][ T5495] ? ksys_write+0x1bd/0x240 [ 177.575794][ T5495] ? common_file_perm+0x171/0x1c0 [ 177.580878][ T5495] ? __fget_files+0x28/0x4d0 [ 177.585517][ T5495] security_file_ioctl+0x6c/0xa0 [ 177.590523][ T5495] __se_sys_ioctl+0x48/0x170 [ 177.595242][ T5495] do_syscall_64+0x4c/0xa0 [ 177.599709][ T5495] ? clear_bhb_loop+0x60/0xb0 [ 177.604421][ T5495] ? clear_bhb_loop+0x60/0xb0 [ 177.609115][ T5495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.615025][ T5495] RIP: 0033:0x7fc22058ebe9 [ 177.619493][ T5495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.639123][ T5495] RSP: 002b:00007fc2213b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.647554][ T5495] RAX: ffffffffffffffda RBX: 00007fc2207b5fa0 RCX: 00007fc22058ebe9 [ 177.655533][ T5495] RDX: 0000200000001340 RSI: 00000000c1105517 RDI: 0000000000000003 [ 177.663514][ T5495] RBP: 00007fc2213b6090 R08: 0000000000000000 R09: 0000000000000000 [ 177.671552][ T5495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.679528][ T5495] R13: 00007fc2207b6038 R14: 00007fc2207b5fa0 R15: 00007ffc946bbed8 [ 177.687525][ T5495] [ 177.716169][ T5495] ERROR: Out of memory at tomoyo_realpath_from_path. [ 178.226860][ T9] hfsplus: b-tree write err: -5, ino 4 [ 179.187824][ T5523] fuse: Bad value for 'fd' [ 179.246509][ T5505] loop1: detected capacity change from 0 to 32768 [ 179.271944][ T5505] (syz.1.278,5505,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "jourmit" or missing value [ 179.335477][ T5505] (syz.1.278,5505,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 179.642134][ T5526] loop2: detected capacity change from 0 to 8192 [ 179.691836][ T5526] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 179.706324][ T5526] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 179.746438][ T5526] REISERFS (device loop2): using ordered data mode [ 179.856113][ T5526] reiserfs: using flush barriers [ 179.907699][ T5526] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 179.935211][ T5531] loop0: detected capacity change from 0 to 128 [ 179.950612][ T5531] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 179.965045][ T5531] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.120434][ T5526] REISERFS (device loop2): checking transaction log (loop2) [ 181.527860][ T5526] REISERFS (device loop2): Using tea hash to sort names [ 181.539157][ T5526] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 181.669108][ T5526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.280'. [ 184.077518][ T5554] loop2: detected capacity change from 0 to 256 [ 184.646402][ T27] audit: type=1326 audit(1754880824.809:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5560 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287bd8ebe9 code=0x7ffc0000 [ 184.699212][ T5561] FAULT_INJECTION: forcing a failure. [ 184.699212][ T5561] name failslab, interval 1, probability 0, space 0, times 0 [ 184.776179][ T27] audit: type=1326 audit(1754880824.849:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5560 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287bd8ebe9 code=0x7ffc0000 [ 184.804357][ T5561] CPU: 1 PID: 5561 Comm: syz.2.294 Not tainted 6.1.147-syzkaller #0 [ 184.812400][ T5561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 184.821710][ T5562] loop0: detected capacity change from 0 to 764 [ 184.822469][ T5561] Call Trace: [ 184.822479][ T5561] [ 184.834967][ T5561] dump_stack_lvl+0x168/0x22e [ 184.839666][ T5561] ? show_regs_print_info+0x12/0x12 [ 184.844876][ T5561] ? load_image+0x3b0/0x3b0 [ 184.849410][ T5561] ? __might_sleep+0xd0/0xd0 [ 184.854036][ T5561] ? __lock_acquire+0x7c50/0x7c50 [ 184.859081][ T5561] should_fail_ex+0x399/0x4d0 [ 184.863890][ T5561] should_failslab+0x5/0x20 [ 184.868403][ T5561] slab_pre_alloc_hook+0x59/0x310 [ 184.873440][ T5561] kmem_cache_alloc+0x56/0x2f0 [ 184.878219][ T5561] ? audit_log_start+0x122/0x830 [ 184.883164][ T5561] audit_log_start+0x122/0x830 [ 184.887942][ T5561] ? audit_serial+0x30/0x30 [ 184.892491][ T5561] ? get_pid_task+0x1c/0x1e0 [ 184.897094][ T5561] ? __cant_sleep+0x210/0x210 [ 184.901787][ T5561] audit_seccomp+0x5f/0x180 [ 184.906312][ T5561] __seccomp_filter+0xa33/0x1ad0 [ 184.911291][ T5561] ? file_end_write+0x156/0x250 [ 184.916176][ T5561] ? __secure_computing+0x2f0/0x2f0 [ 184.921385][ T5561] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 184.927028][ T5561] ? mutex_unlock+0x10/0x10 [ 184.931551][ T5561] ? __fget_files+0x44a/0x4d0 [ 184.936260][ T5561] ? lock_chain_count+0x20/0x20 [ 184.941119][ T5561] ? __secure_computing+0x10d/0x2f0 [ 184.946419][ T5561] syscall_trace_enter+0xa7/0x150 [ 184.951468][ T5561] do_syscall_64+0x24/0xa0 [ 184.955914][ T5561] ? clear_bhb_loop+0x60/0xb0 [ 184.960596][ T5561] ? clear_bhb_loop+0x60/0xb0 [ 184.965278][ T5561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.971185][ T5561] RIP: 0033:0x7f287bd8ebe9 [ 184.975632][ T5561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.995266][ T5561] RSP: 002b:00007f287ccea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 185.003715][ T5561] RAX: ffffffffffffffda RBX: 00007f287bfb5fa0 RCX: 00007f287bd8ebe9 [ 185.011718][ T5561] RDX: 000000000000007f RSI: 0000000000000084 RDI: 0000000000000003 [ 185.019730][ T5561] RBP: 00007f287ccea090 R08: 0000200000000000 R09: 0000000000000000 [ 185.027733][ T5561] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 185.035712][ T5561] R13: 00007f287bfb6038 R14: 00007f287bfb5fa0 R15: 00007fff40e1dcf8 [ 185.043713][ T5561] [ 185.048778][ T5561] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 185.132198][ T5561] audit: out of memory in audit_log_start [ 185.162738][ T5562] rock: directory entry would overflow storage [ 185.182201][ T5562] rock: sig=0x5245, size=8, remaining=5 [ 185.189305][ T27] audit: type=1326 audit(1754880824.849:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5560 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287bd8ebe9 code=0x7ffc0000 [ 185.277018][ T27] audit: type=1326 audit(1754880824.849:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5560 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f287bd8ebe9 code=0x7ffc0000 [ 185.436929][ T27] audit: type=1326 audit(1754880824.849:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5560 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287bd8ebe9 code=0x7ffc0000 [ 185.564221][ T27] audit: type=1326 audit(1754880824.849:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5560 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287bd8ebe9 code=0x7ffc0000 [ 185.649781][ T27] audit: type=1326 audit(1754880824.849:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5560 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287bd8ebe9 code=0x7ffc0000 [ 185.729667][ T27] audit: type=1326 audit(1754880824.859:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5560 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f287bd8ebe9 code=0x7ffc0000 [ 186.453133][ T5580] loop1: detected capacity change from 0 to 128 [ 186.460831][ T5580] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 186.474628][ T5580] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.697927][ T5584] netlink: 10 bytes leftover after parsing attributes in process `syz.3.300'. [ 187.736243][ T5450] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 187.755363][ T5586] FAULT_INJECTION: forcing a failure. [ 187.755363][ T5586] name failslab, interval 1, probability 0, space 0, times 0 [ 187.807572][ T5586] CPU: 1 PID: 5586 Comm: syz.1.301 Not tainted 6.1.147-syzkaller #0 [ 187.815635][ T5586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.823588][ T5571] loop0: detected capacity change from 0 to 32768 [ 187.825706][ T5586] Call Trace: [ 187.825716][ T5586] [ 187.838442][ T5586] dump_stack_lvl+0x168/0x22e [ 187.843172][ T5586] ? show_regs_print_info+0x12/0x12 [ 187.848407][ T5586] ? load_image+0x3b0/0x3b0 [ 187.852957][ T5586] ? __might_sleep+0xd0/0xd0 [ 187.857588][ T5586] ? __lock_acquire+0x7c50/0x7c50 [ 187.862654][ T5586] should_fail_ex+0x399/0x4d0 [ 187.867472][ T5586] should_failslab+0x5/0x20 [ 187.872027][ T5586] slab_pre_alloc_hook+0x59/0x310 [ 187.872036][ T5571] (syz.0.296,5571,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "jourmit" or missing value [ 187.877068][ T5586] ? tomoyo_realpath_from_path+0xd2/0x5d0 [ 187.877099][ T5586] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 187.877130][ T5586] __kmem_cache_alloc_node+0x4f/0x260 [ 187.877155][ T5586] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 187.877182][ T5586] __kmalloc+0xa0/0x240 [ 187.877215][ T5586] tomoyo_realpath_from_path+0xdf/0x5d0 [ 187.877254][ T5586] tomoyo_path_number_perm+0x1e3/0x600 [ 187.926242][ T5586] ? tomoyo_path_number_perm+0x1b6/0x600 [ 187.931893][ T5586] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 187.937367][ T5586] ? ksys_write+0x1bd/0x240 [ 187.941888][ T5586] ? common_file_perm+0x171/0x1c0 [ 187.946980][ T5586] ? __fget_files+0x28/0x4d0 [ 187.951617][ T5586] security_file_ioctl+0x6c/0xa0 [ 187.956582][ T5586] __se_sys_ioctl+0x48/0x170 [ 187.961199][ T5586] do_syscall_64+0x4c/0xa0 [ 187.965635][ T5586] ? clear_bhb_loop+0x60/0xb0 [ 187.970365][ T5586] ? clear_bhb_loop+0x60/0xb0 [ 187.975073][ T5586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.980996][ T5586] RIP: 0033:0x7f354458ebe9 [ 187.985430][ T5586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.005068][ T5586] RSP: 002b:00007f35453df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.013505][ T5586] RAX: ffffffffffffffda RBX: 00007f35447b5fa0 RCX: 00007f354458ebe9 [ 188.021492][ T5586] RDX: 00002000000005c0 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 188.029475][ T5586] RBP: 00007f35453df090 R08: 0000000000000000 R09: 0000000000000000 [ 188.037530][ T5586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.045515][ T5586] R13: 00007f35447b6038 R14: 00007f35447b5fa0 R15: 00007ffc043a7858 [ 188.053518][ T5586] [ 188.060953][ T5571] (syz.0.296,5571,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 188.166211][ T5450] usb 3-1: Using ep0 maxpacket: 32 [ 188.177976][ T5450] usb 3-1: unable to get BOS descriptor or descriptor too short [ 188.361778][ T5450] usb 3-1: config 8 has an invalid interface number: 10 but max is 0 [ 188.416461][ T5450] usb 3-1: config 8 has no interface number 0 [ 188.506150][ T5450] usb 3-1: config 8 interface 10 altsetting 250 bulk endpoint 0xA has invalid maxpacket 1024 [ 188.712931][ T5586] ERROR: Out of memory at tomoyo_realpath_from_path. [ 188.722779][ T5450] usb 3-1: config 8 interface 10 has no altsetting 0 [ 188.868420][ T5450] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=d0.01 [ 188.896265][ T5450] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.904354][ T5450] usb 3-1: Product: syz [ 188.916091][ T5450] usb 3-1: Manufacturer: syz [ 188.920738][ T5450] usb 3-1: SerialNumber: syz [ 188.958615][ T5577] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 189.010902][ T5594] loop3: detected capacity change from 0 to 256 [ 189.088603][ T5594] FAT-fs (loop3): Directory bread(block 64) failed [ 189.109861][ T5594] FAT-fs (loop3): Directory bread(block 65) failed [ 189.165688][ T5594] FAT-fs (loop3): Directory bread(block 66) failed [ 189.196826][ T5450] usb 3-1: USB disconnect, device number 6 [ 189.217751][ T5594] FAT-fs (loop3): Directory bread(block 67) failed [ 189.224448][ T5594] FAT-fs (loop3): Directory bread(block 68) failed [ 189.303667][ T5594] FAT-fs (loop3): Directory bread(block 69) failed [ 189.334190][ T5594] FAT-fs (loop3): Directory bread(block 70) failed [ 189.364805][ T5594] FAT-fs (loop3): Directory bread(block 71) failed [ 189.425547][ T5594] FAT-fs (loop3): Directory bread(block 72) failed [ 189.452985][ T5594] FAT-fs (loop3): Directory bread(block 73) failed [ 189.558846][ T5594] FAT-fs (loop3): Filesystem has been set read-only [ 189.594125][ T5594] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006c61) [ 189.619751][ T5606] loop0: detected capacity change from 0 to 128 [ 189.842759][ T5606] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 189.871061][ T5606] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 189.972031][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 190.346284][ T5410] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 190.589349][ T5410] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 190.688888][ T5410] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.828784][ T5410] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 190.883215][ T5625] loop0: detected capacity change from 0 to 128 [ 190.893472][ T5625] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 190.906403][ T5625] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.102448][ T5410] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.112573][ T5410] usb 4-1: config 0 descriptor?? [ 192.012763][ T5640] netlink: 72 bytes leftover after parsing attributes in process `syz.4.318'. [ 192.013047][ T5635] FAULT_INJECTION: forcing a failure. [ 192.013047][ T5635] name failslab, interval 1, probability 0, space 0, times 0 [ 192.086098][ T5635] CPU: 1 PID: 5635 Comm: syz.1.317 Not tainted 6.1.147-syzkaller #0 [ 192.094159][ T5635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 192.104254][ T5635] Call Trace: [ 192.107583][ T5635] [ 192.110573][ T5635] dump_stack_lvl+0x168/0x22e [ 192.115308][ T5635] ? show_regs_print_info+0x12/0x12 [ 192.120546][ T5635] ? load_image+0x3b0/0x3b0 [ 192.125104][ T5635] ? __might_sleep+0xd0/0xd0 [ 192.129744][ T5635] ? __lock_acquire+0x7c50/0x7c50 [ 192.134815][ T5635] should_fail_ex+0x399/0x4d0 [ 192.139544][ T5635] should_failslab+0x5/0x20 [ 192.144107][ T5635] slab_pre_alloc_hook+0x59/0x310 [ 192.149172][ T5635] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 192.154937][ T5635] __kmem_cache_alloc_node+0x4f/0x260 [ 192.160345][ T5635] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 192.166106][ T5635] __kmalloc+0xa0/0x240 [ 192.170306][ T5635] tomoyo_realpath_from_path+0xdf/0x5d0 [ 192.175917][ T5635] tomoyo_path_number_perm+0x1e3/0x600 [ 192.181409][ T5635] ? tomoyo_path_number_perm+0x1b6/0x600 [ 192.187086][ T5635] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 192.190823][ T5410] usbhid 4-1:0.0: can't add hid device: -71 [ 192.192565][ T5635] ? ksys_write+0x1bd/0x240 [ 192.202983][ T5635] ? common_file_perm+0x171/0x1c0 [ 192.208064][ T5635] ? __fget_files+0x28/0x4d0 [ 192.212677][ T5635] security_file_ioctl+0x6c/0xa0 [ 192.217642][ T5635] __se_sys_ioctl+0x48/0x170 [ 192.222263][ T5635] do_syscall_64+0x4c/0xa0 [ 192.226688][ T5635] ? clear_bhb_loop+0x60/0xb0 [ 192.231380][ T5635] ? clear_bhb_loop+0x60/0xb0 [ 192.236073][ T5635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.241997][ T5635] RIP: 0033:0x7f354458ebe9 [ 192.246424][ T5635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.266057][ T5635] RSP: 002b:00007f35453df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.274498][ T5635] RAX: ffffffffffffffda RBX: 00007f35447b5fa0 RCX: 00007f354458ebe9 [ 192.282481][ T5635] RDX: 0000200000000380 RSI: 000000004008ae89 RDI: 0000000000000005 [ 192.290469][ T5635] RBP: 00007f35453df090 R08: 0000000000000000 R09: 0000000000000000 [ 192.298467][ T5635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.306456][ T5635] R13: 00007f35447b6038 R14: 00007f35447b5fa0 R15: 00007ffc043a7858 [ 192.314456][ T5635] [ 192.335571][ T5410] usbhid: probe of 4-1:0.0 failed with error -71 [ 192.366379][ T5410] usb 4-1: USB disconnect, device number 3 [ 192.389782][ T5635] ERROR: Out of memory at tomoyo_realpath_from_path. [ 192.499597][ T5621] loop2: detected capacity change from 0 to 32768 [ 192.559542][ T5621] (syz.2.313,5621,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "jourmit" or missing value [ 192.616476][ T5621] (syz.2.313,5621,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 192.888694][ T5621] loop2: detected capacity change from 0 to 4096 [ 194.191481][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.202682][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.475759][ T5671] loop2: detected capacity change from 0 to 128 [ 194.484562][ T5671] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 194.506631][ T5671] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.162296][ T5686] netlink: 'syz.3.329': attribute type 32 has an invalid length. [ 196.247537][ T5685] Illegal XDP return value 4294967274 on prog (id 79) dev N/A, expect packet loss! [ 196.254092][ T5688] loop2: detected capacity change from 0 to 256 [ 196.256356][ T4286] Bluetooth: hci2: command 0x0406 tx timeout [ 196.256421][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 196.256452][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 196.256481][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 196.256509][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 196.394719][ T5696] FAULT_INJECTION: forcing a failure. [ 196.394719][ T5696] name failslab, interval 1, probability 0, space 0, times 0 [ 196.394767][ T5696] CPU: 1 PID: 5696 Comm: syz.1.332 Not tainted 6.1.147-syzkaller #0 [ 196.394783][ T5696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 196.394792][ T5696] Call Trace: [ 196.394805][ T5696] [ 196.394812][ T5696] dump_stack_lvl+0x168/0x22e [ 196.394834][ T5696] ? show_regs_print_info+0x12/0x12 [ 196.394850][ T5696] ? load_image+0x3b0/0x3b0 [ 196.394874][ T5696] ? __might_sleep+0xd0/0xd0 [ 196.394898][ T5696] ? __lock_acquire+0x7c50/0x7c50 [ 196.394918][ T5696] ? aa_file_perm+0x3ef/0xec0 [ 196.394945][ T5696] should_fail_ex+0x399/0x4d0 [ 196.394972][ T5696] should_failslab+0x5/0x20 [ 196.394994][ T5696] slab_pre_alloc_hook+0x59/0x310 [ 196.395011][ T5696] ? kernfs_fop_write_iter+0x155/0x4c0 [ 196.395030][ T5696] __kmem_cache_alloc_node+0x4f/0x260 [ 196.395049][ T5696] ? kernfs_fop_write_iter+0x155/0x4c0 [ 196.395067][ T5696] __kmalloc+0xa0/0x240 [ 196.395091][ T5696] kernfs_fop_write_iter+0x155/0x4c0 [ 196.395125][ T5696] vfs_write+0x44c/0x960 [ 196.395149][ T5696] ? file_end_write+0x250/0x250 [ 196.395172][ T5696] ? __fget_files+0x44a/0x4d0 [ 196.395206][ T5696] ? __fdget_pos+0x2ae/0x360 [ 196.395225][ T5696] ? ksys_write+0x71/0x240 [ 196.395264][ T5696] ksys_write+0x143/0x240 [ 196.395286][ T5696] ? __ia32_sys_read+0x80/0x80 [ 196.395310][ T5696] ? lockdep_hardirqs_on+0x94/0x140 [ 196.395332][ T5696] do_syscall_64+0x4c/0xa0 [ 196.395346][ T5696] ? clear_bhb_loop+0x60/0xb0 [ 196.395361][ T5696] ? clear_bhb_loop+0x60/0xb0 [ 196.395377][ T5696] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.395413][ T5696] RIP: 0033:0x7f354458ebe9 [ 196.395426][ T5696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.395440][ T5696] RSP: 002b:00007f35453df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 196.395456][ T5696] RAX: ffffffffffffffda RBX: 00007f35447b5fa0 RCX: 00007f354458ebe9 [ 196.395468][ T5696] RDX: 000000000000000a RSI: 00002000000000c0 RDI: 0000000000000004 [ 196.395477][ T5696] RBP: 00007f35453df090 R08: 0000000000000000 R09: 0000000000000000 [ 196.395487][ T5696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.395495][ T5696] R13: 00007f35447b6038 R14: 00007f35447b5fa0 R15: 00007ffc043a7858 [ 196.395517][ T5696] [ 197.123539][ T5706] FAULT_INJECTION: forcing a failure. [ 197.123539][ T5706] name failslab, interval 1, probability 0, space 0, times 0 [ 197.123562][ T5706] CPU: 0 PID: 5706 Comm: syz.0.336 Not tainted 6.1.147-syzkaller #0 [ 197.123592][ T5706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 197.123601][ T5706] Call Trace: [ 197.123606][ T5706] [ 197.123612][ T5706] dump_stack_lvl+0x168/0x22e [ 197.123635][ T5706] ? show_regs_print_info+0x12/0x12 [ 197.123656][ T5706] ? load_image+0x3b0/0x3b0 [ 197.123679][ T5706] ? __might_sleep+0xd0/0xd0 [ 197.123703][ T5706] ? __lock_acquire+0x7c50/0x7c50 [ 197.123732][ T5706] should_fail_ex+0x399/0x4d0 [ 197.123758][ T5706] should_failslab+0x5/0x20 [ 197.123780][ T5706] slab_pre_alloc_hook+0x59/0x310 [ 197.123797][ T5706] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 197.123820][ T5706] __kmem_cache_alloc_node+0x4f/0x260 [ 197.123838][ T5706] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 197.123858][ T5706] __kmalloc+0xa0/0x240 [ 197.123881][ T5706] tomoyo_realpath_from_path+0xdf/0x5d0 [ 197.123910][ T5706] tomoyo_path_number_perm+0x1e3/0x600 [ 197.123927][ T5706] ? tomoyo_path_number_perm+0x1b6/0x600 [ 197.123946][ T5706] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 197.123964][ T5706] ? ksys_write+0x1bd/0x240 [ 197.123987][ T5706] ? common_file_perm+0x171/0x1c0 [ 197.124031][ T5706] ? __fget_files+0x28/0x4d0 [ 197.124060][ T5706] security_file_ioctl+0x6c/0xa0 [ 197.124080][ T5706] __se_sys_ioctl+0x48/0x170 [ 197.124101][ T5706] do_syscall_64+0x4c/0xa0 [ 197.124115][ T5706] ? clear_bhb_loop+0x60/0xb0 [ 197.124129][ T5706] ? clear_bhb_loop+0x60/0xb0 [ 197.124145][ T5706] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.124170][ T5706] RIP: 0033:0x7f57a738ebe9 [ 197.124182][ T5706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.124195][ T5706] RSP: 002b:00007f57a8261038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.124213][ T5706] RAX: ffffffffffffffda RBX: 00007f57a75b5fa0 RCX: 00007f57a738ebe9 [ 197.124224][ T5706] RDX: 0000200000010240 RSI: 000000004008ae89 RDI: 0000000000000005 [ 197.124234][ T5706] RBP: 00007f57a8261090 R08: 0000000000000000 R09: 0000000000000000 [ 197.124244][ T5706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.124253][ T5706] R13: 00007f57a75b6038 R14: 00007f57a75b5fa0 R15: 00007ffdb122c758 [ 197.124274][ T5706] [ 197.131113][ T5706] ERROR: Out of memory at tomoyo_realpath_from_path. [ 198.405604][ T5719] loop0: detected capacity change from 0 to 128 [ 198.415951][ T5719] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 198.425146][ T5719] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.163159][ T5684] tty tty26: ldisc open failed (-12), clearing slot 25 [ 202.182115][ T5683] tty tty26: ldisc open failed (-12), clearing slot 25 [ 202.233645][ T5688] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 202.422258][ T5733] loop0: detected capacity change from 0 to 1024 [ 202.441704][ T5733] EXT4-fs: Ignoring removed nomblk_io_submit option [ 202.470853][ T5735] FAULT_INJECTION: forcing a failure. [ 202.470853][ T5735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.553742][ T5735] CPU: 0 PID: 5735 Comm: syz.3.345 Not tainted 6.1.147-syzkaller #0 [ 202.561794][ T5735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 202.570585][ T5733] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 202.571864][ T5735] Call Trace: [ 202.571874][ T5735] [ 202.586546][ T5735] dump_stack_lvl+0x168/0x22e [ 202.591284][ T5735] ? show_regs_print_info+0x12/0x12 [ 202.596500][ T5735] ? load_image+0x3b0/0x3b0 [ 202.601013][ T5735] ? __lock_acquire+0x7c50/0x7c50 [ 202.606060][ T5735] ? verify_lock_unused+0x140/0x140 [ 202.611285][ T5735] should_fail_ex+0x399/0x4d0 [ 202.615987][ T5735] _copy_from_user+0x2c/0x170 [ 202.620697][ T5735] ___sys_sendmsg+0x155/0x290 [ 202.625413][ T5735] ? __sys_sendmsg+0x270/0x270 [ 202.630243][ T5735] ? __lock_acquire+0x7c50/0x7c50 [ 202.635333][ T5735] ? __fdget+0x17c/0x200 [ 202.639660][ T5735] __se_sys_sendmsg+0x19e/0x270 [ 202.644532][ T5735] ? __x64_sys_sendmsg+0x80/0x80 [ 202.649500][ T5735] ? lockdep_hardirqs_on+0x94/0x140 [ 202.654727][ T5735] do_syscall_64+0x4c/0xa0 [ 202.659160][ T5735] ? clear_bhb_loop+0x60/0xb0 [ 202.663853][ T5735] ? clear_bhb_loop+0x60/0xb0 [ 202.668542][ T5735] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.674456][ T5735] RIP: 0033:0x7fc22058ebe9 [ 202.678887][ T5735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.698513][ T5735] RSP: 002b:00007fc2213b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.706950][ T5735] RAX: ffffffffffffffda RBX: 00007fc2207b5fa0 RCX: 00007fc22058ebe9 [ 202.714933][ T5735] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 202.722917][ T5735] RBP: 00007fc2213b6090 R08: 0000000000000000 R09: 0000000000000000 [ 202.730898][ T5735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.739152][ T5735] R13: 00007fc2207b6038 R14: 00007fc2207b5fa0 R15: 00007ffc946bbed8 [ 202.747148][ T5735] [ 202.786402][ T5733] IPv6: sit1: Disabled Multicast RS [ 202.790551][ T5740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'. [ 202.836412][ T27] kauditd_printk_skb: 65 callbacks suppressed [ 202.836428][ T27] audit: type=1326 audit(1754880842.999:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.0.344" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57a738ebe9 code=0x0 [ 202.888509][ T5745] tipc: Failed to remove unknown binding: 66,1,1/0:18507376/18507378 [ 202.984003][ T5745] tipc: Failed to remove unknown binding: 66,1,1/0:18507376/18507378 [ 203.254011][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 203.388273][ T5756] loop0: detected capacity change from 0 to 512 [ 203.450130][ T5756] EXT4-fs: Ignoring removed nomblk_io_submit option [ 203.481313][ T5756] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 203.640588][ T5756] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 203.652530][ T5762] loop3: detected capacity change from 0 to 8 [ 203.696173][ T5756] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 203.708686][ T5762] SQUASHFS error: lzo decompression failed, data probably corrupt [ 203.717761][ T5762] SQUASHFS error: Failed to read block 0x144: -5 [ 203.724140][ T5762] SQUASHFS error: Unable to read metadata cache entry [142] [ 203.731553][ T5762] SQUASHFS error: Unable to read inode 0x11f [ 203.762263][ T5760] loop1: detected capacity change from 0 to 4096 [ 203.778962][ T4427] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 203.795797][ T5760] ntfs3: loop1: Failed to load $MFT. [ 203.855267][ T5756] netlink: 24 bytes leftover after parsing attributes in process `syz.0.352'. [ 203.878625][ T4429] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 203.925162][ T5756] EXT4-fs warning (device loop0): verify_group_input:169: Last group not full [ 204.177384][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 204.844249][ T5784] FAULT_INJECTION: forcing a failure. [ 204.844249][ T5784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.888745][ T5784] CPU: 0 PID: 5784 Comm: syz.3.360 Not tainted 6.1.147-syzkaller #0 [ 204.896803][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 204.906908][ T5784] Call Trace: [ 204.910208][ T5784] [ 204.913155][ T5784] dump_stack_lvl+0x168/0x22e [ 204.917871][ T5784] ? show_regs_print_info+0x12/0x12 [ 204.923117][ T5784] ? load_image+0x3b0/0x3b0 [ 204.927670][ T5784] ? __lock_acquire+0x7c50/0x7c50 [ 204.932745][ T5784] ? snprintf+0xd7/0x120 [ 204.937048][ T5784] should_fail_ex+0x399/0x4d0 [ 204.941770][ T5784] _copy_to_user+0x2c/0x130 [ 204.946312][ T5784] simple_read_from_buffer+0xe3/0x150 [ 204.951732][ T5784] proc_fail_nth_read+0x19a/0x210 [ 204.956804][ T5784] ? proc_fault_inject_write+0x2f0/0x2f0 [ 204.962480][ T5784] ? fsnotify_perm+0x248/0x550 [ 204.967285][ T5784] ? proc_fault_inject_write+0x2f0/0x2f0 [ 204.972955][ T5784] vfs_read+0x2c0/0x920 [ 204.977159][ T5784] ? kernel_read+0x1e0/0x1e0 [ 204.981793][ T5784] ? __fget_files+0x28/0x4d0 [ 204.981967][ T5760] loop1: detected capacity change from 0 to 32768 [ 204.986405][ T5784] ? __fget_files+0x44a/0x4d0 [ 204.986444][ T5784] ? __fdget_pos+0x2ae/0x360 [ 204.986470][ T5784] ? ksys_read+0x71/0x240 [ 204.986501][ T5784] ksys_read+0x143/0x240 [ 205.010817][ T5784] ? vfs_write+0x960/0x960 [ 205.015285][ T5784] ? lockdep_hardirqs_on+0x94/0x140 [ 205.020531][ T5784] do_syscall_64+0x4c/0xa0 [ 205.024976][ T5784] ? clear_bhb_loop+0x60/0xb0 [ 205.029678][ T5784] ? clear_bhb_loop+0x60/0xb0 [ 205.034393][ T5784] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.040349][ T5784] RIP: 0033:0x7fc22058d5fc [ 205.044794][ T5784] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 205.064427][ T5784] RSP: 002b:00007fc221395030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 205.072876][ T5784] RAX: ffffffffffffffda RBX: 00007fc2207b6090 RCX: 00007fc22058d5fc [ 205.080884][ T5784] RDX: 000000000000000f RSI: 00007fc2213950a0 RDI: 0000000000000005 [ 205.088901][ T5784] RBP: 00007fc221395090 R08: 0000000000000000 R09: 0000000000000000 [ 205.096914][ T5784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.104939][ T5784] R13: 00007fc2207b6128 R14: 00007fc2207b6090 R15: 00007ffc946bbed8 [ 205.112953][ T5784] [ 205.175593][ T5760] XFS (loop1): Mounting V5 Filesystem [ 205.290432][ T5760] XFS (loop1): Ending clean mount [ 205.443104][ T4269] XFS (loop1): Unmounting Filesystem [ 205.519866][ T5796] loop0: detected capacity change from 0 to 8192 [ 205.558349][ T5796] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 205.726179][ T5796] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 205.745704][ T5796] REISERFS (device loop0): using ordered data mode [ 205.755760][ T5796] reiserfs: using flush barriers [ 205.779416][ T5796] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 205.837133][ T5796] REISERFS (device loop0): checking transaction log (loop0) [ 205.996360][ T5808] netlink: 16 bytes leftover after parsing attributes in process `syz.3.365'. [ 206.131724][ T5796] REISERFS (device loop0): Using tea hash to sort names [ 206.155274][ T5796] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 206.324813][ T5775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.357'. [ 206.666228][ T4396] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 206.697704][ T5828] loop2: detected capacity change from 0 to 512 [ 206.858370][ T4396] usb 2-1: config 0 has an invalid interface number: 91 but max is 0 [ 206.887791][ T5828] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.370: bg 0: block 288: padding at end of block bitmap is not set [ 206.913547][ T4396] usb 2-1: config 0 has no interface number 0 [ 206.968252][ T4396] usb 2-1: New USB device found, idVendor=05ac, idProduct=a9d2, bcdDevice=95.16 [ 207.030724][ T4396] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.048711][ T5828] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 207.090525][ T4396] usb 2-1: Product: syz [ 207.109693][ T5828] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.370: attempt to clear invalid blocks 1024 len 1 [ 207.128357][ T4396] usb 2-1: Manufacturer: syz [ 207.147341][ T4396] usb 2-1: SerialNumber: syz [ 207.180410][ T4396] usb 2-1: config 0 descriptor?? [ 207.191557][ T5828] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.370: invalid indirect mapped block 1819239214 (level 0) [ 207.423424][ T5828] EXT4-fs (loop2): 1 truncate cleaned up [ 207.463881][ T5828] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 207.546291][ T4396] usb 2-1: USB disconnect, device number 4 [ 207.804941][ T5840] kvm [5839]: vcpu1, guest rIP: 0xfff0 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x3, nop [ 207.831445][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 208.016322][ T5847] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 208.293471][ T5854] loop2: detected capacity change from 0 to 512 [ 209.239948][ T5862] FAULT_INJECTION: forcing a failure. [ 209.239948][ T5862] name failslab, interval 1, probability 0, space 0, times 0 [ 209.273166][ T5862] CPU: 0 PID: 5862 Comm: syz.0.381 Not tainted 6.1.147-syzkaller #0 [ 209.281217][ T5862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 209.291310][ T5862] Call Trace: [ 209.294617][ T5862] [ 209.297589][ T5862] dump_stack_lvl+0x168/0x22e [ 209.302310][ T5862] ? show_regs_print_info+0x12/0x12 [ 209.307549][ T5862] ? load_image+0x3b0/0x3b0 [ 209.312104][ T5862] ? __might_sleep+0xd0/0xd0 [ 209.316743][ T5862] ? __lock_acquire+0x7c50/0x7c50 [ 209.321824][ T5862] should_fail_ex+0x399/0x4d0 [ 209.326550][ T5862] should_failslab+0x5/0x20 [ 209.331113][ T5862] slab_pre_alloc_hook+0x59/0x310 [ 209.336177][ T5862] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 209.342108][ T5862] __kmem_cache_alloc_node+0x4f/0x260 [ 209.347524][ T5862] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 209.353288][ T5862] __kmalloc+0xa0/0x240 [ 209.357578][ T5862] tomoyo_realpath_from_path+0xdf/0x5d0 [ 209.363179][ T5862] tomoyo_path_number_perm+0x1e3/0x600 [ 209.368704][ T5862] ? tomoyo_path_number_perm+0x1b6/0x600 [ 209.374359][ T5862] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 209.379878][ T5862] ? ksys_write+0x1bd/0x240 [ 209.384836][ T5862] ? common_file_perm+0x171/0x1c0 [ 209.389907][ T5862] ? __fget_files+0x28/0x4d0 [ 209.394520][ T5862] security_file_ioctl+0x6c/0xa0 [ 209.399565][ T5862] __se_sys_ioctl+0x48/0x170 [ 209.404173][ T5862] do_syscall_64+0x4c/0xa0 [ 209.408603][ T5862] ? clear_bhb_loop+0x60/0xb0 [ 209.413289][ T5862] ? clear_bhb_loop+0x60/0xb0 [ 209.417992][ T5862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 209.423907][ T5862] RIP: 0033:0x7f57a738ebe9 [ 209.428329][ T5862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.448044][ T5862] RSP: 002b:00007f57a8261038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.456617][ T5862] RAX: ffffffffffffffda RBX: 00007f57a75b5fa0 RCX: 00007f57a738ebe9 [ 209.464723][ T5862] RDX: 0000200000000100 RSI: 000000004004ae99 RDI: 0000000000000005 [ 209.472710][ T5862] RBP: 00007f57a8261090 R08: 0000000000000000 R09: 0000000000000000 [ 209.480696][ T5862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.488685][ T5862] R13: 00007f57a75b6038 R14: 00007f57a75b5fa0 R15: 00007ffdb122c758 [ 209.496701][ T5862] [ 209.517225][ T5865] FAULT_INJECTION: forcing a failure. [ 209.517225][ T5865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.553685][ T5865] CPU: 1 PID: 5865 Comm: syz.2.382 Not tainted 6.1.147-syzkaller #0 [ 209.561752][ T5865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 209.571841][ T5865] Call Trace: [ 209.575158][ T5865] [ 209.578134][ T5865] dump_stack_lvl+0x168/0x22e [ 209.582854][ T5865] ? show_regs_print_info+0x12/0x12 [ 209.588094][ T5865] ? load_image+0x3b0/0x3b0 [ 209.592647][ T5865] ? __lock_acquire+0x7c50/0x7c50 [ 209.597712][ T5865] ? snprintf+0xd7/0x120 [ 209.601995][ T5865] should_fail_ex+0x399/0x4d0 [ 209.606724][ T5865] _copy_to_user+0x2c/0x130 [ 209.611261][ T5865] simple_read_from_buffer+0xe3/0x150 [ 209.616678][ T5865] proc_fail_nth_read+0x19a/0x210 [ 209.621741][ T5865] ? proc_fault_inject_write+0x2f0/0x2f0 [ 209.627413][ T5865] ? fsnotify_perm+0x248/0x550 [ 209.632215][ T5865] ? proc_fault_inject_write+0x2f0/0x2f0 [ 209.637883][ T5865] vfs_read+0x2c0/0x920 [ 209.642200][ T5865] ? kernel_read+0x1e0/0x1e0 [ 209.646840][ T5865] ? __fget_files+0x28/0x4d0 [ 209.651487][ T5865] ? __fget_files+0x44a/0x4d0 [ 209.656214][ T5865] ? __fdget_pos+0x2ae/0x360 [ 209.660844][ T5865] ? ksys_read+0x71/0x240 [ 209.665220][ T5865] ksys_read+0x143/0x240 [ 209.669510][ T5865] ? vfs_write+0x960/0x960 [ 209.673964][ T5865] ? lockdep_hardirqs_on+0x94/0x140 [ 209.679204][ T5865] do_syscall_64+0x4c/0xa0 [ 209.683647][ T5865] ? clear_bhb_loop+0x60/0xb0 [ 209.688453][ T5865] ? clear_bhb_loop+0x60/0xb0 [ 209.693162][ T5865] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 209.699148][ T5865] RIP: 0033:0x7f287bd8d5fc [ 209.703646][ T5865] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 209.723294][ T5865] RSP: 002b:00007f287ccea030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 209.731743][ T5865] RAX: ffffffffffffffda RBX: 00007f287bfb5fa0 RCX: 00007f287bd8d5fc [ 209.739800][ T5865] RDX: 000000000000000f RSI: 00007f287ccea0a0 RDI: 0000000000000004 [ 209.747789][ T5865] RBP: 00007f287ccea090 R08: 0000000000000000 R09: 0000000000000000 [ 209.755781][ T5865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.763795][ T5865] R13: 00007f287bfb6038 R14: 00007f287bfb5fa0 R15: 00007fff40e1dcf8 [ 209.771887][ T5865] [ 209.777146][ T5862] ERROR: Out of memory at tomoyo_realpath_from_path. [ 210.064696][ T5872] loop1: detected capacity change from 0 to 8 [ 210.108837][ T5872] SQUASHFS error: lzo decompression failed, data probably corrupt [ 210.117184][ T5872] SQUASHFS error: Failed to read block 0x144: -5 [ 210.123553][ T5872] SQUASHFS error: Unable to read metadata cache entry [142] [ 210.131026][ T5872] SQUASHFS error: Unable to read inode 0x11f [ 211.120286][ T5897] loop2: detected capacity change from 0 to 8192 [ 211.753917][ T5897] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 211.793936][ T4327] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 211.834583][ T5897] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 211.875409][ T5897] REISERFS (device loop2): using ordered data mode [ 211.897943][ T5897] reiserfs: using flush barriers [ 211.923139][ T5897] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 212.000865][ T5897] REISERFS (device loop2): checking transaction log (loop2) [ 212.116059][ T4327] usb 2-1: Using ep0 maxpacket: 16 [ 212.125459][ T4327] usb 2-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 212.156366][ T4327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.164558][ T4327] usb 2-1: Product: syz [ 212.185584][ T4327] usb 2-1: Manufacturer: syz [ 212.210741][ T4327] usb 2-1: SerialNumber: syz [ 212.253281][ T4327] usb 2-1: config 0 descriptor?? [ 212.273448][ T4327] usb-storage 2-1:0.0: USB Mass Storage device detected [ 212.421331][ T5897] REISERFS (device loop2): Using tea hash to sort names [ 212.442729][ T4327] usb-storage 2-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 212.457743][ T4327] usb-storage 2-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.1.147-syzkaller) [ 212.457743][ T4327] Please send a copy of this message to and [ 212.493499][ T5897] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 212.578292][ T5875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.384'. [ 213.257221][ T5410] usb 2-1: USB disconnect, device number 5 [ 213.357990][ T5909] loop0: detected capacity change from 0 to 32768 [ 213.447826][ T5909] (syz.0.393,5909,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "jourmit" or missing value [ 213.743602][ T5909] (syz.0.393,5909,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 214.214257][ T5926] loop3: detected capacity change from 0 to 8 [ 214.234116][ T5926] SQUASHFS error: lzo decompression failed, data probably corrupt [ 214.242126][ T5926] SQUASHFS error: Failed to read block 0x144: -5 [ 214.248607][ T5926] SQUASHFS error: Unable to read metadata cache entry [142] [ 214.255923][ T5926] SQUASHFS error: Unable to read inode 0x11f [ 214.680127][ T5936] loop1: detected capacity change from 0 to 8 [ 214.758125][ T5936] SQUASHFS error: lzo decompression failed, data probably corrupt [ 214.766202][ T5936] SQUASHFS error: Failed to read block 0x144: -5 [ 214.772559][ T5936] SQUASHFS error: Unable to read metadata cache entry [142] [ 214.780865][ T5936] SQUASHFS error: Unable to read inode 0x11f [ 215.309285][ T4428] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 215.442729][ T5940] loop3: detected capacity change from 0 to 4096 [ 215.535755][ T5940] ntfs3: loop3: Failed to load $MFT. [ 215.677930][ T5411] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 215.888101][ T5411] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.919822][ T5411] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 216.038181][ T5411] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.129770][ T5411] usb 3-1: config 0 descriptor?? [ 216.592472][ T5411] usbhid 3-1:0.0: can't add hid device: -71 [ 216.600465][ T5411] usbhid: probe of 3-1:0.0 failed with error -71 [ 216.670358][ T5411] usb 3-1: USB disconnect, device number 7 [ 217.104613][ T5962] loop2: detected capacity change from 0 to 24 [ 217.126989][ T5962] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 217.216104][ T27] audit: type=1326 audit(1754880857.199:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287bd8ebe9 code=0x7ffc0000 [ 217.244859][ T5962] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 217.619398][ T27] audit: type=1326 audit(1754880857.199:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f287bd8ebe9 code=0x7ffc0000 [ 217.716741][ T5940] loop3: detected capacity change from 0 to 32768 [ 217.775236][ T27] audit: type=1326 audit(1754880857.199:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287bd8ebe9 code=0x7ffc0000 [ 217.955525][ T27] audit: type=1326 audit(1754880857.199:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f287bd8ebe9 code=0x7ffc0000 [ 217.996807][ T5970] FAULT_INJECTION: forcing a failure. [ 217.996807][ T5970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.071509][ T5970] CPU: 1 PID: 5970 Comm: syz.1.410 Not tainted 6.1.147-syzkaller #0 [ 218.079566][ T5970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 218.089649][ T5970] Call Trace: [ 218.092954][ T5970] [ 218.095919][ T5970] dump_stack_lvl+0x168/0x22e [ 218.100638][ T5970] ? show_regs_print_info+0x12/0x12 [ 218.105871][ T5970] ? load_image+0x3b0/0x3b0 [ 218.110416][ T5970] ? __lock_acquire+0x7c50/0x7c50 [ 218.115478][ T5970] ? snprintf+0xd7/0x120 [ 218.119756][ T5970] should_fail_ex+0x399/0x4d0 [ 218.124475][ T5970] _copy_to_user+0x2c/0x130 [ 218.129106][ T5970] simple_read_from_buffer+0xe3/0x150 [ 218.134522][ T5970] proc_fail_nth_read+0x19a/0x210 [ 218.139573][ T5970] ? proc_fault_inject_write+0x2f0/0x2f0 [ 218.145241][ T5970] ? fsnotify_perm+0x248/0x550 [ 218.150038][ T5970] ? proc_fault_inject_write+0x2f0/0x2f0 [ 218.155711][ T5970] vfs_read+0x2c0/0x920 [ 218.160002][ T5970] ? kernel_read+0x1e0/0x1e0 [ 218.164626][ T5970] ? __fget_files+0x28/0x4d0 [ 218.169248][ T5970] ? __fget_files+0x44a/0x4d0 [ 218.173965][ T5970] ? __fdget_pos+0x2ae/0x360 [ 218.178599][ T5970] ? ksys_read+0x71/0x240 [ 218.182993][ T5970] ksys_read+0x143/0x240 [ 218.187276][ T5970] ? vfs_write+0x960/0x960 [ 218.191732][ T5970] ? lockdep_hardirqs_on+0x94/0x140 [ 218.196972][ T5970] do_syscall_64+0x4c/0xa0 [ 218.201422][ T5970] ? clear_bhb_loop+0x60/0xb0 [ 218.206135][ T5970] ? clear_bhb_loop+0x60/0xb0 [ 218.210838][ T5970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.216791][ T5970] RIP: 0033:0x7f354458d5fc [ 218.221244][ T5970] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 218.240891][ T5970] RSP: 002b:00007f35453be030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 218.249344][ T5970] RAX: ffffffffffffffda RBX: 00007f35447b6090 RCX: 00007f354458d5fc [ 218.257454][ T5970] RDX: 000000000000000f RSI: 00007f35453be0a0 RDI: 0000000000000005 [ 218.265453][ T5970] RBP: 00007f35453be090 R08: 0000000000000000 R09: 0000000000000000 [ 218.273455][ T5970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.281458][ T5970] R13: 00007f35447b6128 R14: 00007f35447b6090 R15: 00007ffc043a7858 [ 218.285828][ T27] audit: type=1326 audit(1754880857.199:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287bd8ebe9 code=0x7ffc0000 [ 218.289462][ T5970] [ 218.316292][ T27] audit: type=1326 audit(1754880857.209:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f287bd8ebe9 code=0x7ffc0000 [ 218.337607][ T5940] XFS (loop3): Mounting V5 Filesystem [ 218.338653][ T27] audit: type=1326 audit(1754880857.209:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287bd8ebe9 code=0x7ffc0000 [ 218.391784][ T27] audit: type=1326 audit(1754880857.209:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f287bd8ebe9 code=0x7ffc0000 [ 218.418774][ T5940] XFS (loop3): log mount failed [ 218.434494][ T27] audit: type=1326 audit(1754880857.209:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287bd8ebe9 code=0x7ffc0000 [ 218.522560][ T27] audit: type=1326 audit(1754880857.219:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f287bd8ebe9 code=0x7ffc0000 [ 218.854675][ T5981] overlayfs: failed to clone upperpath [ 218.991036][ T5987] loop0: detected capacity change from 0 to 8192 [ 219.031977][ T5987] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 219.110607][ T5987] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 219.121366][ T5987] REISERFS (device loop0): using ordered data mode [ 219.128123][ T5987] reiserfs: using flush barriers [ 219.186209][ T5987] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 219.325238][ T5987] REISERFS (device loop0): checking transaction log (loop0) [ 219.418312][ T5999] loop3: detected capacity change from 0 to 8 [ 219.498991][ T5999] SQUASHFS error: lzo decompression failed, data probably corrupt [ 219.507045][ T5999] SQUASHFS error: Failed to read block 0x144: -5 [ 219.513440][ T5999] SQUASHFS error: Unable to read metadata cache entry [142] [ 219.520818][ T5999] SQUASHFS error: Unable to read inode 0x11f [ 220.938458][ T6006] FAULT_INJECTION: forcing a failure. [ 220.938458][ T6006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.022059][ T5987] REISERFS (device loop0): Using tea hash to sort names [ 221.067275][ T6006] CPU: 0 PID: 6006 Comm: syz.3.419 Not tainted 6.1.147-syzkaller #0 [ 221.075334][ T6006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 221.085430][ T6006] Call Trace: [ 221.088748][ T6006] [ 221.091717][ T6006] dump_stack_lvl+0x168/0x22e [ 221.096445][ T6006] ? show_regs_print_info+0x12/0x12 [ 221.101676][ T6006] ? load_image+0x3b0/0x3b0 [ 221.106216][ T6006] ? __lock_acquire+0x7c50/0x7c50 [ 221.111271][ T6006] ? snprintf+0xd7/0x120 [ 221.115540][ T6006] should_fail_ex+0x399/0x4d0 [ 221.120340][ T6006] _copy_to_user+0x2c/0x130 [ 221.124896][ T6006] simple_read_from_buffer+0xe3/0x150 [ 221.130312][ T6006] proc_fail_nth_read+0x19a/0x210 [ 221.135362][ T6006] ? proc_fault_inject_write+0x2f0/0x2f0 [ 221.141080][ T6006] ? fsnotify_perm+0x248/0x550 [ 221.145953][ T6006] ? proc_fault_inject_write+0x2f0/0x2f0 [ 221.151617][ T6006] vfs_read+0x2c0/0x920 [ 221.155806][ T6006] ? kernel_read+0x1e0/0x1e0 [ 221.160446][ T6006] ? __fget_files+0x28/0x4d0 [ 221.165061][ T6006] ? __fget_files+0x44a/0x4d0 [ 221.169773][ T6006] ? __fdget_pos+0x2ae/0x360 [ 221.174390][ T6006] ? ksys_read+0x71/0x240 [ 221.178768][ T6006] ksys_read+0x143/0x240 [ 221.183046][ T6006] ? vfs_write+0x960/0x960 [ 221.187490][ T6006] ? lockdep_hardirqs_on+0x94/0x140 [ 221.192726][ T6006] do_syscall_64+0x4c/0xa0 [ 221.197178][ T6006] ? clear_bhb_loop+0x60/0xb0 [ 221.201876][ T6006] ? clear_bhb_loop+0x60/0xb0 [ 221.206580][ T6006] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.212498][ T6006] RIP: 0033:0x7fc22058d5fc [ 221.216932][ T6006] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 221.236567][ T6006] RSP: 002b:00007fc221395030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 221.245031][ T6006] RAX: ffffffffffffffda RBX: 00007fc2207b6090 RCX: 00007fc22058d5fc [ 221.253021][ T6006] RDX: 000000000000000f RSI: 00007fc2213950a0 RDI: 0000000000000005 [ 221.261026][ T6006] RBP: 00007fc221395090 R08: 0000000000000000 R09: 0000000000000000 [ 221.269025][ T6006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.277016][ T6006] R13: 00007fc2207b6128 R14: 00007fc2207b6090 R15: 00007ffc946bbed8 [ 221.285022][ T6006] [ 221.304483][ T5987] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 221.387707][ T5983] loop1: detected capacity change from 0 to 32768 [ 221.395178][ T5983] (syz.1.413,5983,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "jourmit" or missing value [ 221.461007][ T5983] (syz.1.413,5983,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 221.830642][ T6016] loop3: detected capacity change from 0 to 128 [ 221.871660][ T6016] ext4: Unknown parameter '' [ 222.017218][ T4427] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 222.139630][ T5450] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 222.171920][ T6022] loop1: detected capacity change from 0 to 4096 [ 222.230976][ T6022] ntfs3: loop1: Failed to load $MFT. [ 222.346107][ T5450] usb 4-1: Using ep0 maxpacket: 32 [ 222.357424][ T5450] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.372727][ T6028] wg1 speed is unknown, defaulting to 1000 [ 222.380228][ T6033] FAULT_INJECTION: forcing a failure. [ 222.380228][ T6033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.396068][ T5450] usb 4-1: config 0 interface 0 has no altsetting 0 [ 222.416891][ T5450] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 222.426066][ T6033] CPU: 0 PID: 6033 Comm: syz.2.428 Not tainted 6.1.147-syzkaller #0 [ 222.426091][ T6033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.426102][ T6033] Call Trace: [ 222.426109][ T6033] [ 222.426118][ T6033] dump_stack_lvl+0x168/0x22e [ 222.454938][ T5450] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.455207][ T6033] ? show_regs_print_info+0x12/0x12 [ 222.468434][ T6033] ? load_image+0x3b0/0x3b0 [ 222.472984][ T6033] ? __lock_acquire+0x7c50/0x7c50 [ 222.478053][ T6033] ? verify_lock_unused+0x140/0x140 [ 222.483294][ T6033] should_fail_ex+0x399/0x4d0 [ 222.488025][ T6033] _copy_from_user+0x2c/0x170 [ 222.488206][ T5450] usb 4-1: config 0 descriptor?? [ 222.492749][ T6033] iovec_from_user+0x143/0x360 [ 222.502524][ T6033] __import_iovec+0x6d/0x500 [ 222.507171][ T6033] import_iovec+0x6f/0xa0 [ 222.511553][ T6033] __se_sys_vmsplice+0x216/0xbd0 [ 222.516556][ T6033] ? __x64_sys_vmsplice+0xa0/0xa0 [ 222.521619][ T6033] ? rcu_read_lock_any_held+0xb0/0x120 [ 222.527102][ T6033] ? rcu_read_lock_bh_held+0xe0/0xe0 [ 222.532399][ T6033] ? proc_fail_nth_write+0x17a/0x1f0 [ 222.537696][ T6033] ? proc_fail_nth_read+0x210/0x210 [ 222.542909][ T6033] ? common_file_perm+0x171/0x1c0 [ 222.547984][ T6033] ? file_end_write+0x156/0x250 [ 222.552889][ T6033] ? vfs_write+0x56f/0x960 [ 222.557332][ T6033] ? file_end_write+0x250/0x250 [ 222.562204][ T6033] ? do_sys_openat2+0x1fe/0x490 [ 222.567079][ T6033] ? kmem_cache_free+0xf7/0x290 [ 222.571964][ T6033] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 222.578067][ T6033] ? lockdep_hardirqs_on+0x94/0x140 [ 222.583286][ T6033] do_syscall_64+0x4c/0xa0 [ 222.587720][ T6033] ? clear_bhb_loop+0x60/0xb0 [ 222.592499][ T6033] ? clear_bhb_loop+0x60/0xb0 [ 222.597197][ T6033] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.603210][ T6033] RIP: 0033:0x7f287bd8ebe9 [ 222.607645][ T6033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.627269][ T6033] RSP: 002b:00007f287ccea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 222.635700][ T6033] RAX: ffffffffffffffda RBX: 00007f287bfb5fa0 RCX: 00007f287bd8ebe9 [ 222.643684][ T6033] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000004 [ 222.651669][ T6033] RBP: 00007f287ccea090 R08: 0000000000000000 R09: 0000000000000000 [ 222.659678][ T6033] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 [ 222.667662][ T6033] R13: 00007f287bfb6038 R14: 00007f287bfb5fa0 R15: 00007fff40e1dcf8 [ 222.675662][ T6033] [ 222.761504][ T6029] wg1 speed is unknown, defaulting to 1000 [ 223.077320][ T5450] usbhid 4-1:0.0: can't add hid device: -71 [ 223.099152][ T5450] usbhid: probe of 4-1:0.0 failed with error -71 [ 223.150045][ T5450] usb 4-1: USB disconnect, device number 4 [ 223.529115][ T6044] loop3: detected capacity change from 0 to 8 [ 223.544576][ T6044] SQUASHFS error: lzo decompression failed, data probably corrupt [ 223.552717][ T6044] SQUASHFS error: Failed to read block 0x144: -5 [ 223.559113][ T6044] SQUASHFS error: Unable to read metadata cache entry [142] [ 223.566466][ T6044] SQUASHFS error: Unable to read inode 0x11f [ 224.343384][ T6022] loop1: detected capacity change from 0 to 32768 [ 224.609560][ T6022] XFS (loop1): Mounting V5 Filesystem [ 224.730841][ T6022] XFS (loop1): Ending clean mount [ 224.881157][ T6055] loop0: detected capacity change from 0 to 2048 [ 224.936814][ T6055] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.951657][ T4269] XFS (loop1): Unmounting Filesystem [ 225.307461][ T6063] loop3: detected capacity change from 0 to 8192 [ 225.358856][ T6063] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 225.454213][ T6063] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 225.485865][ T6062] loop2: detected capacity change from 0 to 32768 [ 225.499963][ T6062] (syz.2.434,6062,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "jourmit" or missing value [ 225.511507][ T6062] (syz.2.434,6062,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 225.517493][ T6063] REISERFS (device loop3): using ordered data mode [ 225.587555][ T6063] reiserfs: using flush barriers [ 225.598856][ T6066] loop0: detected capacity change from 0 to 736 [ 225.610081][ T6063] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 225.641475][ T6063] REISERFS (device loop3): checking transaction log (loop3) [ 225.844303][ T6072] FAULT_INJECTION: forcing a failure. [ 225.844303][ T6072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.896427][ T6072] CPU: 1 PID: 6072 Comm: syz.1.435 Not tainted 6.1.147-syzkaller #0 [ 225.904486][ T6072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 225.914580][ T6072] Call Trace: [ 225.917898][ T6072] [ 225.920869][ T6072] dump_stack_lvl+0x168/0x22e [ 225.925595][ T6072] ? show_regs_print_info+0x12/0x12 [ 225.930830][ T6072] ? load_image+0x3b0/0x3b0 [ 225.935374][ T6072] ? __lock_acquire+0x7c50/0x7c50 [ 225.940456][ T6072] ? snprintf+0xd7/0x120 [ 225.944746][ T6072] should_fail_ex+0x399/0x4d0 [ 225.949477][ T6072] _copy_to_user+0x2c/0x130 [ 225.954022][ T6072] simple_read_from_buffer+0xe3/0x150 [ 225.959454][ T6072] proc_fail_nth_read+0x19a/0x210 [ 225.964520][ T6072] ? proc_fault_inject_write+0x2f0/0x2f0 [ 225.970187][ T6072] ? fsnotify_perm+0x248/0x550 [ 225.974989][ T6072] ? proc_fault_inject_write+0x2f0/0x2f0 [ 225.980663][ T6072] vfs_read+0x2c0/0x920 [ 225.984871][ T6072] ? kernel_read+0x1e0/0x1e0 [ 225.989510][ T6072] ? __fget_files+0x28/0x4d0 [ 225.994237][ T6072] ? __fget_files+0x44a/0x4d0 [ 225.998963][ T6072] ? __fdget_pos+0x2ae/0x360 [ 226.003589][ T6072] ? ksys_read+0x71/0x240 [ 226.007968][ T6072] ksys_read+0x143/0x240 [ 226.012258][ T6072] ? vfs_write+0x960/0x960 [ 226.016721][ T6072] ? lockdep_hardirqs_on+0x94/0x140 [ 226.021971][ T6072] do_syscall_64+0x4c/0xa0 [ 226.026434][ T6072] ? clear_bhb_loop+0x60/0xb0 [ 226.031146][ T6072] ? clear_bhb_loop+0x60/0xb0 [ 226.035923][ T6072] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.041861][ T6072] RIP: 0033:0x7f354458d5fc [ 226.046398][ T6072] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 226.066080][ T6072] RSP: 002b:00007f35453be030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 226.074535][ T6072] RAX: ffffffffffffffda RBX: 00007f35447b6090 RCX: 00007f354458d5fc [ 226.082538][ T6072] RDX: 000000000000000f RSI: 00007f35453be0a0 RDI: 0000000000000005 [ 226.090552][ T6072] RBP: 00007f35453be090 R08: 0000000000000000 R09: 0000000000000000 [ 226.098569][ T6072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.106594][ T6072] R13: 00007f35447b6128 R14: 00007f35447b6090 R15: 00007ffc043a7858 [ 226.114644][ T6072] [ 226.468891][ T6063] REISERFS (device loop3): Using tea hash to sort names [ 226.536435][ T6063] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 226.607159][ T6077] loop2: detected capacity change from 0 to 32768 [ 226.693911][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.432'. [ 226.703223][ T6077] XFS (loop2): Mounting V5 Filesystem [ 226.929891][ T6077] XFS (loop2): Starting recovery (logdev: internal) [ 226.952677][ T6077] XFS (loop2): Corruption warning: Metadata has LSN (8192:16) ahead of current LSN (1:48). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 226.968934][ T6077] XFS (loop2): Metadata corruption detected at xfs_agi_verify+0x211/0x4f0, xfs_agi block 0x2 [ 226.979318][ T6077] XFS (loop2): Unmount and run xfs_repair [ 226.985074][ T6077] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 226.992586][ T6077] 00000000: 58 41 47 49 00 00 00 01 00 00 00 00 00 00 20 00 XAGI.......... . [ 227.001705][ T6077] 00000010: 00 00 00 40 00 00 00 03 00 00 00 01 00 00 00 37 ...@...........7 [ 227.010636][ T6077] 00000020: 00 00 18 00 ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 227.019558][ T6077] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 227.028510][ T6077] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 227.037438][ T6077] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 227.046401][ T6077] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 227.055291][ T6077] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 227.065014][ T6077] XFS (loop2): Corruption of in-memory data (0x8) detected at _xfs_buf_ioapply+0x1ff/0x670 (fs/xfs/xfs_buf.c:1553). Shutting down filesystem. [ 227.079688][ T6077] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 227.088830][ T6077] XFS (loop2): log mount/recovery failed: error -117 [ 227.128501][ T6077] XFS (loop2): log mount failed [ 227.386239][ T6092] loop1: detected capacity change from 0 to 4096 [ 227.431410][ T6092] __ntfs_error: 31 callbacks suppressed [ 227.431431][ T6092] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 227.463939][ T6096] FAULT_INJECTION: forcing a failure. [ 227.463939][ T6096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.512180][ T6092] ntfs: (device loop1): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 227.526140][ T6096] CPU: 0 PID: 6096 Comm: syz.3.440 Not tainted 6.1.147-syzkaller #0 [ 227.534208][ T6096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 227.544299][ T6096] Call Trace: [ 227.547616][ T6096] [ 227.550593][ T6096] dump_stack_lvl+0x168/0x22e [ 227.555321][ T6096] ? show_regs_print_info+0x12/0x12 [ 227.560582][ T6096] ? load_image+0x3b0/0x3b0 [ 227.565138][ T6096] ? __lock_acquire+0x7c50/0x7c50 [ 227.570218][ T6096] ? snprintf+0xd7/0x120 [ 227.574510][ T6096] should_fail_ex+0x399/0x4d0 [ 227.579240][ T6096] _copy_to_user+0x2c/0x130 [ 227.583790][ T6096] simple_read_from_buffer+0xe3/0x150 [ 227.589221][ T6096] proc_fail_nth_read+0x19a/0x210 [ 227.594296][ T6096] ? proc_fault_inject_write+0x2f0/0x2f0 [ 227.599986][ T6096] ? fsnotify_perm+0x248/0x550 [ 227.604790][ T6096] ? proc_fault_inject_write+0x2f0/0x2f0 [ 227.610459][ T6096] vfs_read+0x2c0/0x920 [ 227.614667][ T6096] ? kernel_read+0x1e0/0x1e0 [ 227.619302][ T6096] ? __fget_files+0x28/0x4d0 [ 227.623941][ T6096] ? __fget_files+0x44a/0x4d0 [ 227.628672][ T6096] ? __fdget_pos+0x2ae/0x360 [ 227.633307][ T6096] ? ksys_read+0x71/0x240 [ 227.637683][ T6096] ksys_read+0x143/0x240 [ 227.642000][ T6096] ? vfs_write+0x960/0x960 [ 227.646470][ T6096] ? lockdep_hardirqs_on+0x94/0x140 [ 227.651715][ T6096] do_syscall_64+0x4c/0xa0 [ 227.656169][ T6096] ? clear_bhb_loop+0x60/0xb0 [ 227.660909][ T6096] ? clear_bhb_loop+0x60/0xb0 [ 227.665623][ T6096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.671574][ T6096] RIP: 0033:0x7fc22058d5fc [ 227.676189][ T6096] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 227.695839][ T6096] RSP: 002b:00007fc221395030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 227.704411][ T6096] RAX: ffffffffffffffda RBX: 00007fc2207b6090 RCX: 00007fc22058d5fc [ 227.712425][ T6096] RDX: 000000000000000f RSI: 00007fc2213950a0 RDI: 0000000000000005 [ 227.720451][ T6096] RBP: 00007fc221395090 R08: 0000000000000000 R09: 0000000000000000 [ 227.728468][ T6096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.736478][ T6096] R13: 00007fc2207b6128 R14: 00007fc2207b6090 R15: 00007ffc946bbed8 [ 227.744505][ T6096] [ 227.944734][ T6092] ntfs: (device loop1): ntfs_fill_super(): Not an NTFS volume. [ 228.073738][ T6101] loop2: detected capacity change from 0 to 8 [ 228.103672][ T6101] SQUASHFS error: lzo decompression failed, data probably corrupt [ 228.111915][ T6101] SQUASHFS error: Failed to read block 0x144: -5 [ 228.118414][ T6101] SQUASHFS error: Unable to read metadata cache entry [142] [ 228.125765][ T6101] SQUASHFS error: Unable to read inode 0x11f [ 229.846631][ T6114] loop3: detected capacity change from 0 to 4096 [ 229.955646][ T6114] ntfs3: loop3: Failed to load $MFT. [ 230.534596][ T6119] loop0: detected capacity change from 0 to 32768 [ 230.548894][ T6119] (syz.0.448,6119,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "jourmit" or missing value [ 230.561445][ T6119] (syz.0.448,6119,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 230.765464][ T6130] FAULT_INJECTION: forcing a failure. [ 230.765464][ T6130] name failslab, interval 1, probability 0, space 0, times 0 [ 230.882411][ T6130] CPU: 1 PID: 6130 Comm: syz.1.453 Not tainted 6.1.147-syzkaller #0 [ 230.890466][ T6130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 230.900547][ T6130] Call Trace: [ 230.903848][ T6130] [ 230.906807][ T6130] dump_stack_lvl+0x168/0x22e [ 230.911530][ T6130] ? show_regs_print_info+0x12/0x12 [ 230.916775][ T6130] ? load_image+0x3b0/0x3b0 [ 230.921332][ T6130] ? __might_sleep+0xd0/0xd0 [ 230.925985][ T6130] ? __lock_acquire+0x7c50/0x7c50 [ 230.931050][ T6130] should_fail_ex+0x399/0x4d0 [ 230.935801][ T6130] should_failslab+0x5/0x20 [ 230.940344][ T6130] slab_pre_alloc_hook+0x59/0x310 [ 230.945399][ T6130] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 230.948638][ T6114] loop3: detected capacity change from 0 to 32768 [ 230.951146][ T6130] __kmem_cache_alloc_node+0x4f/0x260 [ 230.951181][ T6130] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 230.951221][ T6130] __kmalloc+0xa0/0x240 [ 230.972981][ T6130] tomoyo_realpath_from_path+0xdf/0x5d0 [ 230.978709][ T6130] tomoyo_path_number_perm+0x1e3/0x600 [ 230.984200][ T6130] ? tomoyo_path_number_perm+0x1b6/0x600 [ 230.989864][ T6130] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 230.995352][ T6130] ? ksys_write+0x1bd/0x240 [ 230.999889][ T6130] ? common_file_perm+0x171/0x1c0 [ 231.004990][ T6130] ? __fget_files+0x28/0x4d0 [ 231.009629][ T6130] security_file_ioctl+0x6c/0xa0 [ 231.014608][ T6130] __se_sys_ioctl+0x48/0x170 [ 231.019239][ T6130] do_syscall_64+0x4c/0xa0 [ 231.023685][ T6130] ? clear_bhb_loop+0x60/0xb0 [ 231.028388][ T6130] ? clear_bhb_loop+0x60/0xb0 [ 231.033091][ T6130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.039028][ T6130] RIP: 0033:0x7f354458ebe9 [ 231.043469][ T6130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.063099][ T6130] RSP: 002b:00007f35453df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.071556][ T6130] RAX: ffffffffffffffda RBX: 00007f35447b5fa0 RCX: 00007f354458ebe9 [ 231.079565][ T6130] RDX: 0000200000000280 RSI: 000000004008ae90 RDI: 0000000000000005 [ 231.087578][ T6130] RBP: 00007f35453df090 R08: 0000000000000000 R09: 0000000000000000 [ 231.095594][ T6130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.103597][ T6130] R13: 00007f35447b6038 R14: 00007f35447b5fa0 R15: 00007ffc043a7858 [ 231.111612][ T6130] [ 231.141836][ T6130] ERROR: Out of memory at tomoyo_realpath_from_path. [ 231.258547][ T6114] XFS (loop3): Mounting V5 Filesystem [ 231.387126][ T6144] FAULT_INJECTION: forcing a failure. [ 231.387126][ T6144] name failslab, interval 1, probability 0, space 0, times 0 [ 231.403125][ T6114] XFS (loop3): Ending clean mount [ 231.429264][ T6144] CPU: 0 PID: 6144 Comm: syz.0.455 Not tainted 6.1.147-syzkaller #0 [ 231.437309][ T6144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 231.447396][ T6144] Call Trace: [ 231.450698][ T6144] [ 231.453656][ T6144] dump_stack_lvl+0x168/0x22e [ 231.458374][ T6144] ? show_regs_print_info+0x12/0x12 [ 231.463606][ T6144] ? load_image+0x3b0/0x3b0 [ 231.468164][ T6144] ? __might_sleep+0xd0/0xd0 [ 231.472792][ T6144] ? __lock_acquire+0x7c50/0x7c50 [ 231.477854][ T6144] should_fail_ex+0x399/0x4d0 [ 231.482584][ T6144] should_failslab+0x5/0x20 [ 231.487131][ T6144] slab_pre_alloc_hook+0x59/0x310 [ 231.492191][ T6144] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 231.497956][ T6144] __kmem_cache_alloc_node+0x4f/0x260 [ 231.503400][ T6144] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 231.509175][ T6144] __kmalloc+0xa0/0x240 [ 231.513380][ T6144] tomoyo_realpath_from_path+0xdf/0x5d0 [ 231.518978][ T6144] tomoyo_path_number_perm+0x1e3/0x600 [ 231.524474][ T6144] ? tomoyo_path_number_perm+0x1b6/0x600 [ 231.530150][ T6144] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 231.535633][ T6144] ? ksys_write+0x1bd/0x240 [ 231.540149][ T6144] ? common_file_perm+0x171/0x1c0 [ 231.545205][ T6144] ? __fget_files+0x28/0x4d0 [ 231.549809][ T6144] security_file_ioctl+0x6c/0xa0 [ 231.554755][ T6144] __se_sys_ioctl+0x48/0x170 [ 231.559357][ T6144] do_syscall_64+0x4c/0xa0 [ 231.563777][ T6144] ? clear_bhb_loop+0x60/0xb0 [ 231.568459][ T6144] ? clear_bhb_loop+0x60/0xb0 [ 231.573142][ T6144] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.579050][ T6144] RIP: 0033:0x7f57a738ebe9 [ 231.583473][ T6144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.603120][ T6144] RSP: 002b:00007f57a8261038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.611550][ T6144] RAX: ffffffffffffffda RBX: 00007f57a75b5fa0 RCX: 00007f57a738ebe9 [ 231.619535][ T6144] RDX: 0000200000000080 RSI: 000000004008ae89 RDI: 0000000000000005 [ 231.627518][ T6144] RBP: 00007f57a8261090 R08: 0000000000000000 R09: 0000000000000000 [ 231.635495][ T6144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.643471][ T6144] R13: 00007f57a75b6038 R14: 00007f57a75b5fa0 R15: 00007ffdb122c758 [ 231.651477][ T6144] [ 231.813280][ T4270] XFS (loop3): Unmounting Filesystem [ 231.950069][ T6147] loop1: detected capacity change from 0 to 8 [ 231.981927][ T6147] SQUASHFS error: lzo decompression failed, data probably corrupt [ 231.989985][ T6147] SQUASHFS error: Failed to read block 0x144: -5 [ 231.996441][ T6147] SQUASHFS error: Unable to read metadata cache entry [142] [ 232.003765][ T6147] SQUASHFS error: Unable to read inode 0x11f [ 232.269804][ T6144] ERROR: Out of memory at tomoyo_realpath_from_path. [ 232.323181][ T6137] loop2: detected capacity change from 0 to 32768 [ 232.331212][ T6137] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.454 (6137) [ 232.348102][ T6137] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 232.358429][ T6137] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 232.367969][ T6137] BTRFS info (device loop2): using free space tree [ 232.507101][ T6137] BTRFS info (device loop2): enabling ssd optimizations [ 232.574400][ T6175] netlink: 'syz.1.460': attribute type 1 has an invalid length. [ 233.511236][ T4266] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 234.870513][ T6207] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.984477][ T6207] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.225208][ T6215] loop1: detected capacity change from 0 to 128 [ 235.248290][ T6215] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 235.261134][ T6215] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 236.141931][ T6201] loop3: detected capacity change from 0 to 32768 [ 236.259994][ T6201] (syz.3.465,6201,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "jourmit" or missing value [ 236.372078][ T6201] (syz.3.465,6201,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 237.356939][ T6228] loop2: detected capacity change from 0 to 8192 [ 237.485473][ T6227] loop0: detected capacity change from 0 to 4096 [ 237.559791][ T6228] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 237.596089][ T6228] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 237.706708][ T6228] REISERFS (device loop2): using ordered data mode [ 237.747535][ T6228] reiserfs: using flush barriers [ 237.850335][ T6227] ntfs3: loop0: Failed to load $MFT. [ 238.009616][ T6228] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 238.320333][ T6228] REISERFS (device loop2): checking transaction log (loop2) [ 239.772059][ T6252] netlink: 'syz.1.479': attribute type 1 has an invalid length. [ 239.803024][ T6228] REISERFS (device loop2): Using tea hash to sort names [ 239.816343][ T6228] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 240.142707][ T6258] netlink: 'syz.0.481': attribute type 1 has an invalid length. [ 240.446165][ T126] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 240.633606][ T6269] loop1: detected capacity change from 0 to 128 [ 240.646138][ T126] usb 1-1: Using ep0 maxpacket: 32 [ 240.660936][ T6269] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 240.673491][ T126] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 240.684944][ T6269] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 240.816806][ T126] usb 1-1: config 0 has no interface number 0 [ 240.823280][ T126] usb 1-1: config 0 interface 230 has no altsetting 0 [ 240.837540][ T126] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 240.866069][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.962606][ T126] usb 1-1: Product: syz [ 240.991935][ T126] usb 1-1: Manufacturer: syz [ 241.531986][ T126] usb 1-1: SerialNumber: syz [ 241.607131][ T126] usb 1-1: config 0 descriptor?? [ 241.854477][ T126] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 241.929915][ T126] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 242.421196][ T6289] loop1: detected capacity change from 0 to 8 [ 242.476765][ T6289] SQUASHFS error: lzo decompression failed, data probably corrupt [ 242.484894][ T6289] SQUASHFS error: Failed to read block 0x144: -5 [ 242.491365][ T6289] SQUASHFS error: Unable to read metadata cache entry [142] [ 242.498851][ T6289] SQUASHFS error: Unable to read inode 0x11f [ 243.218924][ T6282] loop2: detected capacity change from 0 to 32768 [ 243.226544][ T6282] (syz.2.487,6282,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "jourmit" or missing value [ 243.238383][ T6282] (syz.2.487,6282,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 243.925478][ T4427] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 244.146450][ T126] ums-usbat: probe of 1-1:0.230 failed with error -5 [ 244.563321][ T6307] loop3: detected capacity change from 0 to 4096 [ 244.617920][ T6307] ntfs3: loop3: Failed to load $MFT. [ 244.776739][ T6311] loop1: detected capacity change from 0 to 8192 [ 244.805606][ T6311] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 244.828157][ T6311] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 244.846470][ T6311] REISERFS (device loop1): using ordered data mode [ 244.853029][ T6311] reiserfs: using flush barriers [ 244.886063][ T6311] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 244.906592][ T6311] REISERFS (device loop1): checking transaction log (loop1) [ 244.995373][ T6282] loop2: detected capacity change from 0 to 4096 [ 245.259393][ T126] usb 1-1: USB disconnect, device number 4 [ 245.266628][ T6311] REISERFS (device loop1): Using tea hash to sort names [ 245.273893][ T6311] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 245.577164][ T6317] FAULT_INJECTION: forcing a failure. [ 245.577164][ T6317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.626402][ T6317] CPU: 0 PID: 6317 Comm: syz.0.496 Not tainted 6.1.147-syzkaller #0 [ 245.634468][ T6317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 245.644569][ T6317] Call Trace: [ 245.647877][ T6317] [ 245.650833][ T6317] dump_stack_lvl+0x168/0x22e [ 245.655547][ T6317] ? show_regs_print_info+0x12/0x12 [ 245.660773][ T6317] ? load_image+0x3b0/0x3b0 [ 245.665326][ T6317] ? __lock_acquire+0x7c50/0x7c50 [ 245.670394][ T6317] ? __local_bh_enable_ip+0x12a/0x1b0 [ 245.675814][ T6317] ? _local_bh_enable+0xa0/0xa0 [ 245.680706][ T6317] should_fail_ex+0x399/0x4d0 [ 245.685413][ T6317] copy_fpstate_to_sigframe+0xa58/0xcb0 [ 245.691002][ T6317] ? copy_fpstate_to_sigframe+0x270/0xcb0 [ 245.696756][ T6317] ? fpregs_set+0x570/0x570 [ 245.701292][ T6317] ? get_signal+0x110e/0x1350 [ 245.706021][ T6317] ? fpu__alloc_mathframe+0xa3/0x120 [ 245.711328][ T6317] arch_do_signal_or_restart+0x610/0x1230 [ 245.717099][ T6317] ? memset+0x1e/0x40 [ 245.721128][ T6317] ? pollwake+0x200/0x200 [ 245.725496][ T6317] ? get_sigframe_size+0x10/0x10 [ 245.730469][ T6317] ? set_user_sigmask+0xc4/0x1b0 [ 245.735447][ T6317] ? sigprocmask+0x190/0x190 [ 245.740082][ T6317] ? __se_sys_ppoll+0x210/0x260 [ 245.744975][ T6317] ? exit_to_user_mode_loop+0x3b/0x110 [ 245.750476][ T6317] exit_to_user_mode_loop+0x70/0x110 [ 245.755800][ T6317] exit_to_user_mode_prepare+0xb1/0x140 [ 245.761381][ T6317] syscall_exit_to_user_mode+0x16/0x40 [ 245.766904][ T6317] do_syscall_64+0x58/0xa0 [ 245.771374][ T6317] ? clear_bhb_loop+0x60/0xb0 [ 245.776083][ T6317] ? clear_bhb_loop+0x60/0xb0 [ 245.780786][ T6317] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.786722][ T6317] RIP: 0033:0x7f57a738ebe9 [ 245.791168][ T6317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.810890][ T6317] RSP: 002b:00007f57a8261038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 245.819332][ T6317] RAX: fffffffffffffff2 RBX: 00007f57a75b5fa0 RCX: 00007f57a738ebe9 [ 245.827335][ T6317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 245.835329][ T6317] RBP: 00007f57a8261090 R08: 0000000000000000 R09: 0000000000000000 [ 245.843328][ T6317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.851325][ T6317] R13: 00007f57a75b6038 R14: 00007f57a75b5fa0 R15: 00007ffdb122c758 [ 245.859363][ T6317] [ 247.446907][ T6307] loop3: detected capacity change from 0 to 32768 [ 248.358739][ T6339] loop0: detected capacity change from 0 to 8 [ 248.389449][ T6339] SQUASHFS error: lzo decompression failed, data probably corrupt [ 248.397715][ T6339] SQUASHFS error: Failed to read block 0x144: -5 [ 248.404114][ T6339] SQUASHFS error: Unable to read metadata cache entry [142] [ 248.411581][ T6339] SQUASHFS error: Unable to read inode 0x11f [ 248.856891][ T6340] FAULT_INJECTION: forcing a failure. [ 248.856891][ T6340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.870019][ T6340] CPU: 0 PID: 6340 Comm: syz.3.501 Not tainted 6.1.147-syzkaller #0 [ 248.878034][ T6340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 248.888128][ T6340] Call Trace: [ 248.891453][ T6340] [ 248.894425][ T6340] dump_stack_lvl+0x168/0x22e [ 248.899160][ T6340] ? show_regs_print_info+0x12/0x12 [ 248.904421][ T6340] ? load_image+0x3b0/0x3b0 [ 248.908966][ T6340] ? __lock_acquire+0x7c50/0x7c50 [ 248.914024][ T6340] ? snprintf+0xd7/0x120 [ 248.918282][ T6340] should_fail_ex+0x399/0x4d0 [ 248.922974][ T6340] _copy_to_user+0x2c/0x130 [ 248.927489][ T6340] simple_read_from_buffer+0xe3/0x150 [ 248.932893][ T6340] proc_fail_nth_read+0x19a/0x210 [ 248.937945][ T6340] ? proc_fault_inject_write+0x2f0/0x2f0 [ 248.943603][ T6340] ? fsnotify_perm+0x248/0x550 [ 248.948381][ T6340] ? proc_fault_inject_write+0x2f0/0x2f0 [ 248.954025][ T6340] vfs_read+0x2c0/0x920 [ 248.958202][ T6340] ? kernel_read+0x1e0/0x1e0 [ 248.962811][ T6340] ? __fget_files+0x28/0x4d0 [ 248.967421][ T6340] ? __fget_files+0x44a/0x4d0 [ 248.972132][ T6340] ? __fdget_pos+0x2ae/0x360 [ 248.976784][ T6340] ? ksys_read+0x71/0x240 [ 248.981156][ T6340] ksys_read+0x143/0x240 [ 248.985421][ T6340] ? vfs_write+0x960/0x960 [ 248.989852][ T6340] ? lockdep_hardirqs_on+0x94/0x140 [ 248.995062][ T6340] do_syscall_64+0x4c/0xa0 [ 248.999490][ T6340] ? clear_bhb_loop+0x60/0xb0 [ 249.004173][ T6340] ? clear_bhb_loop+0x60/0xb0 [ 249.008859][ T6340] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.014770][ T6340] RIP: 0033:0x7fc22058d5fc [ 249.019196][ T6340] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 249.038813][ T6340] RSP: 002b:00007fc221395030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 249.047239][ T6340] RAX: ffffffffffffffda RBX: 00007fc2207b6090 RCX: 00007fc22058d5fc [ 249.055223][ T6340] RDX: 000000000000000f RSI: 00007fc2213950a0 RDI: 0000000000000005 [ 249.063208][ T6340] RBP: 00007fc221395090 R08: 0000000000000000 R09: 0000000000000000 [ 249.071186][ T6340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.079163][ T6340] R13: 00007fc2207b6128 R14: 00007fc2207b6090 R15: 00007ffc946bbed8 [ 249.087160][ T6340] [ 249.106111][ T4429] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 249.695812][ T6349] loop0: detected capacity change from 0 to 2364 [ 249.715259][ T4429] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 249.800551][ T6349] ISOFS: Unable to identify CD-ROM format. [ 249.863279][ T6350] loop0: detected capacity change from 0 to 64 [ 249.901194][ T6355] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.932223][ T6356] loop2: detected capacity change from 0 to 32768 [ 251.963838][ T6356] (syz.2.505,6356,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "jourmit" or missing value [ 251.975691][ T6356] (syz.2.505,6356,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 253.179298][ T6370] FAULT_INJECTION: forcing a failure. [ 253.179298][ T6370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.296186][ T6370] CPU: 1 PID: 6370 Comm: syz.0.510 Not tainted 6.1.147-syzkaller #0 [ 253.304241][ T6370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 253.314322][ T6370] Call Trace: [ 253.317617][ T6370] [ 253.320573][ T6370] dump_stack_lvl+0x168/0x22e [ 253.325291][ T6370] ? show_regs_print_info+0x12/0x12 [ 253.330514][ T6370] ? load_image+0x3b0/0x3b0 [ 253.335057][ T6370] ? __lock_acquire+0x7c50/0x7c50 [ 253.340144][ T6370] ? up_read+0x20/0x20 [ 253.344241][ T6370] should_fail_ex+0x399/0x4d0 [ 253.348931][ T6370] _copy_from_user+0x2c/0x170 [ 253.353633][ T6370] io_submit_one+0xbe/0x1300 [ 253.358253][ T6370] ? lookup_ioctx+0x680/0x680 [ 253.362946][ T6370] ? __might_fault+0xa6/0x120 [ 253.367656][ T6370] ? __might_fault+0xc2/0x120 [ 253.372351][ T6370] ? __might_fault+0xa6/0x120 [ 253.377044][ T6370] __se_sys_io_submit+0x190/0x300 [ 253.382099][ T6370] ? __x64_sys_io_submit+0x80/0x80 [ 253.387236][ T6370] ? lockdep_hardirqs_on+0x94/0x140 [ 253.392448][ T6370] do_syscall_64+0x4c/0xa0 [ 253.396962][ T6370] ? clear_bhb_loop+0x60/0xb0 [ 253.401646][ T6370] ? clear_bhb_loop+0x60/0xb0 [ 253.406337][ T6370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.412244][ T6370] RIP: 0033:0x7f57a738ebe9 [ 253.416666][ T6370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.436278][ T6370] RSP: 002b:00007f57a8261038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 253.444779][ T6370] RAX: ffffffffffffffda RBX: 00007f57a75b5fa0 RCX: 00007f57a738ebe9 [ 253.452760][ T6370] RDX: 0000200000000140 RSI: 0000000000000001 RDI: 00007f57a8240000 [ 253.460737][ T6370] RBP: 00007f57a8261090 R08: 0000000000000000 R09: 0000000000000000 [ 253.468727][ T6370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.476710][ T6370] R13: 00007f57a75b6038 R14: 00007f57a75b5fa0 R15: 00007ffdb122c758 [ 253.484705][ T6370] [ 253.799280][ T6377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'. [ 253.958798][ T6383] FAULT_INJECTION: forcing a failure. [ 253.958798][ T6383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.030706][ T6383] CPU: 1 PID: 6383 Comm: syz.3.514 Not tainted 6.1.147-syzkaller #0 [ 254.038774][ T6383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.048866][ T6383] Call Trace: [ 254.052169][ T6383] [ 254.055134][ T6383] dump_stack_lvl+0x168/0x22e [ 254.059849][ T6383] ? show_regs_print_info+0x12/0x12 [ 254.065081][ T6383] ? load_image+0x3b0/0x3b0 [ 254.069622][ T6383] ? __lock_acquire+0x7c50/0x7c50 [ 254.074717][ T6383] ? snprintf+0xd7/0x120 [ 254.078983][ T6383] should_fail_ex+0x399/0x4d0 [ 254.083689][ T6383] _copy_to_user+0x2c/0x130 [ 254.088209][ T6383] simple_read_from_buffer+0xe3/0x150 [ 254.093603][ T6383] proc_fail_nth_read+0x19a/0x210 [ 254.098652][ T6383] ? proc_fault_inject_write+0x2f0/0x2f0 [ 254.104309][ T6383] ? fsnotify_perm+0x248/0x550 [ 254.109101][ T6383] ? proc_fault_inject_write+0x2f0/0x2f0 [ 254.114743][ T6383] vfs_read+0x2c0/0x920 [ 254.118932][ T6383] ? kernel_read+0x1e0/0x1e0 [ 254.123555][ T6383] ? __fget_files+0x28/0x4d0 [ 254.128167][ T6383] ? __fget_files+0x44a/0x4d0 [ 254.132871][ T6383] ? __fdget_pos+0x2ae/0x360 [ 254.137497][ T6383] ? ksys_read+0x71/0x240 [ 254.141860][ T6383] ksys_read+0x143/0x240 [ 254.146151][ T6383] ? vfs_write+0x960/0x960 [ 254.150611][ T6383] ? lockdep_hardirqs_on+0x94/0x140 [ 254.155861][ T6383] do_syscall_64+0x4c/0xa0 [ 254.160295][ T6383] ? clear_bhb_loop+0x60/0xb0 [ 254.164987][ T6383] ? clear_bhb_loop+0x60/0xb0 [ 254.169681][ T6383] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.175593][ T6383] RIP: 0033:0x7fc22058d5fc [ 254.180019][ T6383] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 254.199654][ T6383] RSP: 002b:00007fc221395030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 254.208109][ T6383] RAX: ffffffffffffffda RBX: 00007fc2207b6090 RCX: 00007fc22058d5fc [ 254.216150][ T6383] RDX: 000000000000000f RSI: 00007fc2213950a0 RDI: 0000000000000005 [ 254.224145][ T6383] RBP: 00007fc221395090 R08: 0000000000000000 R09: 0000000000000000 [ 254.232136][ T6383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.240154][ T6383] R13: 00007fc2207b6128 R14: 00007fc2207b6090 R15: 00007ffc946bbed8 [ 254.248189][ T6383] [ 254.372285][ T6393] loop1: detected capacity change from 0 to 8 [ 254.412504][ T6393] SQUASHFS error: lzo decompression failed, data probably corrupt [ 254.420813][ T6393] SQUASHFS error: Failed to read block 0x144: -5 [ 254.427274][ T6393] SQUASHFS error: Unable to read metadata cache entry [142] [ 254.434629][ T6393] SQUASHFS error: Unable to read inode 0x11f [ 255.427265][ T6403] FAULT_INJECTION: forcing a failure. [ 255.427265][ T6403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.489576][ T6403] CPU: 1 PID: 6403 Comm: syz.0.519 Not tainted 6.1.147-syzkaller #0 [ 255.495035][ T6407] FAULT_INJECTION: forcing a failure. [ 255.495035][ T6407] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 255.497616][ T6403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 255.497632][ T6403] Call Trace: [ 255.497646][ T6403] [ 255.497656][ T6403] dump_stack_lvl+0x168/0x22e [ 255.497687][ T6403] ? show_regs_print_info+0x12/0x12 [ 255.497709][ T6403] ? load_image+0x3b0/0x3b0 [ 255.497742][ T6403] ? __lock_acquire+0x7c50/0x7c50 [ 255.497771][ T6403] ? snprintf+0xd7/0x120 [ 255.497800][ T6403] should_fail_ex+0x399/0x4d0 [ 255.497835][ T6403] _copy_to_user+0x2c/0x130 [ 255.497862][ T6403] simple_read_from_buffer+0xe3/0x150 [ 255.497899][ T6403] proc_fail_nth_read+0x19a/0x210 [ 255.497965][ T6403] ? proc_fault_inject_write+0x2f0/0x2f0 [ 255.497989][ T6403] ? fsnotify_perm+0x248/0x550 [ 255.498011][ T6403] ? proc_fault_inject_write+0x2f0/0x2f0 [ 255.587005][ T6403] vfs_read+0x2c0/0x920 [ 255.591192][ T6403] ? kernel_read+0x1e0/0x1e0 [ 255.595797][ T6403] ? __fget_files+0x28/0x4d0 [ 255.600400][ T6403] ? __fget_files+0x44a/0x4d0 [ 255.605101][ T6403] ? __fdget_pos+0x2ae/0x360 [ 255.609706][ T6403] ? ksys_read+0x71/0x240 [ 255.614056][ T6403] ksys_read+0x143/0x240 [ 255.618329][ T6403] ? vfs_write+0x960/0x960 [ 255.622776][ T6403] ? lockdep_hardirqs_on+0x94/0x140 [ 255.627996][ T6403] do_syscall_64+0x4c/0xa0 [ 255.632423][ T6403] ? clear_bhb_loop+0x60/0xb0 [ 255.637115][ T6403] ? clear_bhb_loop+0x60/0xb0 [ 255.641798][ T6403] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.647707][ T6403] RIP: 0033:0x7f57a738d5fc [ 255.652133][ T6403] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 255.671748][ T6403] RSP: 002b:00007f57a8240030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 255.680170][ T6403] RAX: ffffffffffffffda RBX: 00007f57a75b6090 RCX: 00007f57a738d5fc [ 255.688150][ T6403] RDX: 000000000000000f RSI: 00007f57a82400a0 RDI: 0000000000000005 [ 255.696123][ T6403] RBP: 00007f57a8240090 R08: 0000000000000000 R09: 0000000000000000 [ 255.704099][ T6403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.712090][ T6403] R13: 00007f57a75b6128 R14: 00007f57a75b6090 R15: 00007ffdb122c758 [ 255.720084][ T6403] [ 255.725321][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.735321][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.744155][ T6407] CPU: 1 PID: 6407 Comm: syz.2.520 Not tainted 6.1.147-syzkaller #0 [ 255.752173][ T6407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 255.762254][ T6407] Call Trace: [ 255.765553][ T6407] [ 255.768500][ T6407] dump_stack_lvl+0x168/0x22e [ 255.773382][ T6407] ? show_regs_print_info+0x12/0x12 [ 255.778626][ T6407] ? load_image+0x3b0/0x3b0 [ 255.783166][ T6407] ? __lock_acquire+0x7c50/0x7c50 [ 255.788234][ T6407] ? __lock_acquire+0x12e5/0x7c50 [ 255.793298][ T6407] should_fail_ex+0x399/0x4d0 [ 255.798017][ T6407] prepare_alloc_pages+0x1e2/0x5f0 [ 255.803189][ T6407] __alloc_pages+0x123/0x4e0 [ 255.807825][ T6407] ? lock_chain_count+0x20/0x20 [ 255.812721][ T6407] ? zone_statistics+0x170/0x170 [ 255.817714][ T6407] ? count_memcg_event_mm+0x8f/0x3b0 [ 255.823127][ T6407] ? count_memcg_event_mm+0x358/0x3b0 [ 255.828546][ T6407] ? count_memcg_event_mm+0x8f/0x3b0 [ 255.833891][ T6407] __folio_alloc+0xe/0x30 [ 255.838266][ T6407] vma_alloc_folio+0x4a3/0x900 [ 255.843074][ T6407] handle_mm_fault+0x2242/0x3e70 [ 255.848091][ T6407] ? numa_migrate_prep+0x250/0x250 [ 255.853256][ T6407] ? lock_chain_count+0x20/0x20 [ 255.858142][ T6407] ? __mutex_trylock_common+0x14f/0x250 [ 255.863728][ T6407] ? lock_mm_and_find_vma+0xae/0x2f0 [ 255.869062][ T6407] do_user_addr_fault+0x51f/0xb10 [ 255.874140][ T6407] exc_page_fault+0x60/0x100 [ 255.878768][ T6407] asm_exc_page_fault+0x22/0x30 [ 255.883661][ T6407] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 255.889417][ T6407] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 255.909061][ T6407] RSP: 0018:ffffc90003b17b98 EFLAGS: 00050246 [ 255.915162][ T6407] RAX: 0000000000000001 RBX: ffff88802c3fbc6c RCX: 0000200000000240 [ 255.923166][ T6407] RDX: ffff88807e0d0000 RSI: 0000000000000001 RDI: ffff88802c3fbc73 [ 255.931171][ T6407] RBP: ffffc90003b17df8 R08: dffffc0000000000 R09: ffffed10050beadf [ 255.939265][ T6407] R10: ffffed10050beadf R11: 1ffff110050beade R12: ffff88802c3fbc18 [ 255.947273][ T6407] R13: 0000000000000000 R14: 0000000000000001 R15: 0000200000000240 [ 255.955296][ T6407] do_epoll_wait+0xcf5/0x1b30 [ 255.960041][ T6407] ? ep_destroy_wakeup_source+0x130/0x130 [ 255.965816][ T6407] ? vfs_write+0x56f/0x960 [ 255.970295][ T6407] ? set_user_sigmask+0xc4/0x1b0 [ 255.975291][ T6407] ? timespec64_add_safe+0x174/0x1d0 [ 255.980633][ T6407] ? nsecs_to_jiffies+0x30/0x30 [ 255.985530][ T6407] do_epoll_pwait+0x60/0x1c0 [ 255.990167][ T6407] __x64_sys_epoll_pwait+0x207/0x250 [ 255.995500][ T6407] ? __ia32_sys_epoll_wait+0x200/0x200 [ 256.001005][ T6407] ? lockdep_hardirqs_on+0x94/0x140 [ 256.006251][ T6407] do_syscall_64+0x4c/0xa0 [ 256.010713][ T6407] ? clear_bhb_loop+0x60/0xb0 [ 256.015501][ T6407] ? clear_bhb_loop+0x60/0xb0 [ 256.020227][ T6407] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 256.026180][ T6407] RIP: 0033:0x7f287bd8ebe9 [ 256.030639][ T6407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.050311][ T6407] RSP: 002b:00007f287ccea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000119 [ 256.058779][ T6407] RAX: ffffffffffffffda RBX: 00007f287bfb5fa0 RCX: 00007f287bd8ebe9 [ 256.066957][ T6407] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 256.074946][ T6407] RBP: 00007f287ccea090 R08: 0000000000000000 R09: 0000000000000000 [ 256.082948][ T6407] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 256.090936][ T6407] R13: 00007f287bfb6038 R14: 00007f287bfb5fa0 R15: 00007fff40e1dcf8 [ 256.098931][ T6407] [ 256.107869][ T6408] loop3: detected capacity change from 0 to 128 [ 256.130379][ T6408] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 256.146609][ T6408] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.205130][ T6424] FAULT_INJECTION: forcing a failure. [ 257.205130][ T6424] name failslab, interval 1, probability 0, space 0, times 0 [ 257.241739][ T6423] loop0: detected capacity change from 0 to 128 [ 257.248856][ T6424] CPU: 1 PID: 6424 Comm: syz.1.527 Not tainted 6.1.147-syzkaller #0 [ 257.256914][ T6424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 257.267149][ T6424] Call Trace: [ 257.270460][ T6424] [ 257.273418][ T6424] dump_stack_lvl+0x168/0x22e [ 257.278127][ T6424] ? show_regs_print_info+0x12/0x12 [ 257.283359][ T6424] ? load_image+0x3b0/0x3b0 [ 257.287903][ T6424] ? __might_sleep+0xd0/0xd0 [ 257.292537][ T6424] ? __lock_acquire+0x7c50/0x7c50 [ 257.297628][ T6424] should_fail_ex+0x399/0x4d0 [ 257.302355][ T6424] should_failslab+0x5/0x20 [ 257.306899][ T6424] slab_pre_alloc_hook+0x59/0x310 [ 257.311939][ T6424] ? file_end_write+0x156/0x250 [ 257.316817][ T6424] kmem_cache_alloc+0x56/0x2f0 [ 257.321602][ T6424] ? getname_flags+0xb7/0x500 [ 257.326305][ T6424] getname_flags+0xb7/0x500 [ 257.330834][ T6424] do_sys_openat2+0xcf/0x490 [ 257.335452][ T6424] ? do_sys_open+0xe0/0xe0 [ 257.339890][ T6424] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 257.345891][ T6424] ? lock_chain_count+0x20/0x20 [ 257.350766][ T6424] __x64_sys_openat+0x135/0x160 [ 257.355812][ T6424] do_syscall_64+0x4c/0xa0 [ 257.360247][ T6424] ? clear_bhb_loop+0x60/0xb0 [ 257.364933][ T6424] ? clear_bhb_loop+0x60/0xb0 [ 257.369629][ T6424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.375555][ T6424] RIP: 0033:0x7f354458ebe9 [ 257.379985][ T6424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.399693][ T6424] RSP: 002b:00007f35453df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 257.408137][ T6424] RAX: ffffffffffffffda RBX: 00007f35447b5fa0 RCX: 00007f354458ebe9 [ 257.416131][ T6424] RDX: 0000000000000442 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 257.424115][ T6424] RBP: 00007f35453df090 R08: 0000000000000000 R09: 0000000000000000 [ 257.432095][ T6424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.440075][ T6424] R13: 00007f35447b6038 R14: 00007f35447b5fa0 R15: 00007ffc043a7858 [ 257.448070][ T6424] [ 257.530764][ T6413] loop2: detected capacity change from 0 to 32768 [ 257.549296][ T27] audit: type=1800 audit(1754880897.709:119): pid=6423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.528" name="bus" dev="loop0" ino=1048603 res=0 errno=0 [ 257.594280][ T6413] (syz.2.523,6413,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "jourmit" or missing value [ 257.641765][ T6413] (syz.2.523,6413,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 258.153683][ T6429] loop1: detected capacity change from 0 to 4096 [ 258.212300][ T6418] loop3: detected capacity change from 0 to 32768 [ 258.427857][ T6418] XFS (loop3): Mounting V5 Filesystem [ 259.112943][ T6418] XFS (loop3): Ending clean mount [ 259.166830][ T6418] XFS (loop3): Quotacheck needed: Please wait. [ 259.261510][ T6418] XFS (loop3): Quotacheck: Done. [ 259.516199][ T6447] loop2: detected capacity change from 0 to 4096 [ 259.563407][ T4269] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 259.572292][ T6447] ntfs3: loop2: Failed to load $MFT. [ 259.586545][ T4269] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 259.641337][ T4270] XFS (loop3): Unmounting Filesystem [ 259.776364][ T5410] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 259.874719][ T6453] FAULT_INJECTION: forcing a failure. [ 259.874719][ T6453] name failslab, interval 1, probability 0, space 0, times 0 [ 259.924335][ T6453] CPU: 1 PID: 6453 Comm: syz.1.534 Not tainted 6.1.147-syzkaller #0 [ 259.932398][ T6453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 259.942489][ T6453] Call Trace: [ 259.945802][ T6453] [ 259.948777][ T6453] dump_stack_lvl+0x168/0x22e [ 259.953488][ T6453] ? show_regs_print_info+0x12/0x12 [ 259.958719][ T6453] ? load_image+0x3b0/0x3b0 [ 259.963267][ T6453] ? __might_sleep+0xd0/0xd0 [ 259.967903][ T6453] ? __lock_acquire+0x7c50/0x7c50 [ 259.972972][ T6453] should_fail_ex+0x399/0x4d0 [ 259.976068][ T5410] usb 1-1: Using ep0 maxpacket: 8 [ 259.977678][ T6453] should_failslab+0x5/0x20 [ 259.987239][ T6453] slab_pre_alloc_hook+0x59/0x310 [ 259.989126][ T5410] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.992284][ T6453] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 260.008118][ T6453] __kmem_cache_alloc_node+0x4f/0x260 [ 260.013536][ T6453] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 260.019301][ T6453] __kmalloc+0xa0/0x240 [ 260.023502][ T6453] tomoyo_realpath_from_path+0xdf/0x5d0 [ 260.029117][ T6453] tomoyo_path_number_perm+0x1e3/0x600 [ 260.034620][ T6453] ? tomoyo_path_number_perm+0x1b6/0x600 [ 260.039848][ T5410] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 260.040276][ T6453] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 260.054802][ T6453] ? ksys_write+0x1bd/0x240 [ 260.059341][ T6453] ? common_file_perm+0x171/0x1c0 [ 260.064646][ T6453] ? __fget_files+0x28/0x4d0 [ 260.069296][ T6453] security_file_ioctl+0x6c/0xa0 [ 260.074272][ T6453] __se_sys_ioctl+0x48/0x170 [ 260.078908][ T6453] do_syscall_64+0x4c/0xa0 [ 260.083355][ T6453] ? clear_bhb_loop+0x60/0xb0 [ 260.086107][ T5410] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.088098][ T6453] ? clear_bhb_loop+0x60/0xb0 [ 260.100793][ T6453] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.106742][ T6453] RIP: 0033:0x7f354458ebe9 [ 260.111198][ T6453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.126115][ T5410] usb 1-1: Product: syz [ 260.130814][ T6453] RSP: 002b:00007f35453df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 260.130841][ T6453] RAX: ffffffffffffffda RBX: 00007f35447b5fa0 RCX: 00007f354458ebe9 [ 260.130857][ T6453] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 260.135012][ T5410] usb 1-1: Manufacturer: syz [ 260.143406][ T6453] RBP: 00007f35453df090 R08: 0000000000000000 R09: 0000000000000000 [ 260.143423][ T6453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.143440][ T6453] R13: 00007f35447b6038 R14: 00007f35447b5fa0 R15: 00007ffc043a7858 [ 260.143471][ T6453] [ 260.336096][ T5410] usb 1-1: SerialNumber: syz [ 260.359983][ T6453] ERROR: Out of memory at tomoyo_realpath_from_path. [ 260.372666][ T5410] usb 1-1: bad CDC descriptors [ 260.560108][ T6450] loop0: detected capacity change from 0 to 256 [ 260.567936][ T6447] loop2: detected capacity change from 0 to 32768 [ 260.747487][ T6450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.774695][ T6447] XFS (loop2): Mounting V5 Filesystem [ 260.848995][ T6450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.874177][ T5410] usb 1-1: USB disconnect, device number 5 [ 260.898236][ T6447] XFS (loop2): Ending clean mount [ 261.022350][ T4266] XFS (loop2): Unmounting Filesystem [ 261.090621][ T6473] loop1: detected capacity change from 0 to 4096 [ 261.106823][ T6473] ext4: Unknown parameter 'pcr' [ 261.451680][ T126] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 261.817918][ T126] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 261.831846][ T126] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 262.150273][ T126] usb 2-1: config 220 has no interface number 2 [ 262.157137][ T126] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 262.171881][ T126] usb 2-1: config 220 interface 0 has no altsetting 0 [ 262.266168][ T126] usb 2-1: config 220 interface 76 has no altsetting 0 [ 262.312146][ T126] usb 2-1: config 220 interface 1 has no altsetting 0 [ 262.358363][ T126] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 262.381634][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.398901][ T6475] loop3: detected capacity change from 0 to 32768 [ 262.405730][ T126] usb 2-1: Product: syz [ 262.410513][ T126] usb 2-1: Manufacturer: syz [ 262.433306][ T126] usb 2-1: SerialNumber: syz [ 262.859195][ T4427] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by udevd (4427) [ 263.022451][ T6509] FAULT_INJECTION: forcing a failure. [ 263.022451][ T6509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.055550][ T6509] CPU: 0 PID: 6509 Comm: syz.2.546 Not tainted 6.1.147-syzkaller #0 [ 263.063623][ T6509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.073711][ T6509] Call Trace: [ 263.077022][ T6509] [ 263.079987][ T6509] dump_stack_lvl+0x168/0x22e [ 263.084716][ T6509] ? show_regs_print_info+0x12/0x12 [ 263.089956][ T6509] ? load_image+0x3b0/0x3b0 [ 263.094513][ T6509] ? __lock_acquire+0x7c50/0x7c50 [ 263.099577][ T6509] ? snprintf+0xd7/0x120 [ 263.103858][ T6509] should_fail_ex+0x399/0x4d0 [ 263.108582][ T6509] _copy_to_user+0x2c/0x130 [ 263.113120][ T6509] simple_read_from_buffer+0xe3/0x150 [ 263.118543][ T6509] proc_fail_nth_read+0x19a/0x210 [ 263.123629][ T6509] ? proc_fault_inject_write+0x2f0/0x2f0 [ 263.129305][ T6509] ? fsnotify_perm+0x248/0x550 [ 263.134133][ T6509] ? proc_fault_inject_write+0x2f0/0x2f0 [ 263.139817][ T6509] vfs_read+0x2c0/0x920 [ 263.144028][ T6509] ? kernel_read+0x1e0/0x1e0 [ 263.148676][ T6509] ? __fget_files+0x28/0x4d0 [ 263.153311][ T6509] ? __fget_files+0x44a/0x4d0 [ 263.158053][ T6509] ? __fdget_pos+0x2ae/0x360 [ 263.162682][ T6509] ? ksys_read+0x71/0x240 [ 263.167036][ T6509] ksys_read+0x143/0x240 [ 263.171299][ T6509] ? vfs_write+0x960/0x960 [ 263.175729][ T6509] ? lockdep_hardirqs_on+0x94/0x140 [ 263.180943][ T6509] do_syscall_64+0x4c/0xa0 [ 263.185369][ T6509] ? clear_bhb_loop+0x60/0xb0 [ 263.190053][ T6509] ? clear_bhb_loop+0x60/0xb0 [ 263.194737][ T6509] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 263.200647][ T6509] RIP: 0033:0x7f287bd8d5fc [ 263.205084][ T6509] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 263.224734][ T6509] RSP: 002b:00007f287ccc9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 263.233170][ T6509] RAX: ffffffffffffffda RBX: 00007f287bfb6090 RCX: 00007f287bd8d5fc [ 263.241161][ T6509] RDX: 000000000000000f RSI: 00007f287ccc90a0 RDI: 0000000000000005 [ 263.249147][ T6509] RBP: 00007f287ccc9090 R08: 0000000000000000 R09: 0000000000000000 [ 263.257139][ T6509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.265117][ T6509] R13: 00007f287bfb6128 R14: 00007f287bfb6090 R15: 00007fff40e1dcf8 [ 263.273118][ T6509] [ 263.699740][ T6475] loop3: detected capacity change from 0 to 32768 [ 264.078988][ T126] usb 2-1: selecting invalid altsetting 0 [ 264.097288][ T126] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 264.103725][ T126] usb 2-1: No valid video chain found. [ 264.154484][ T126] usb 2-1: selecting invalid altsetting 0 [ 264.180746][ T126] usbtest: probe of 2-1:220.1 failed with error -22 [ 264.226231][ T4396] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 264.236430][ T126] usb 2-1: USB disconnect, device number 6 [ 264.348254][ T6521] loop0: detected capacity change from 0 to 8192 [ 264.396418][ T6521] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 264.428614][ T6515] loop2: detected capacity change from 0 to 16 [ 264.437794][ T4396] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 264.476032][ T4396] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.496721][ T6521] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 264.522606][ T6515] erofs: (device loop2): mounted with root inode @ nid 36. [ 264.538561][ T4396] usb 4-1: config 0 descriptor?? [ 264.566603][ T6521] REISERFS (device loop0): using ordered data mode [ 264.573208][ T6521] reiserfs: using flush barriers [ 264.590642][ T6521] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 264.668481][ T6515] erofs: (device loop2): z_erofs_fill_inode_lazy: unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 264.688242][ T6521] REISERFS (device loop0): checking transaction log (loop0) [ 264.706372][ T6515] erofs: (device loop2): z_erofs_fill_inode_lazy: unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 264.727421][ T6514] netlink: 28 bytes leftover after parsing attributes in process `syz.2.548'. [ 264.756114][ T6515] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-95] [ 264.772786][ T6475] netlink: 'syz.3.539': attribute type 10 has an invalid length. [ 264.792911][ T6536] loop1: detected capacity change from 0 to 128 [ 264.870639][ T6515] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 264.899794][ T6536] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 264.931877][ T6475] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 264.936876][ T6536] ext4 filesystem being mounted at /109/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 265.004453][ T4396] ath6kl: Failed to submit usb control message: -71 [ 265.025130][ T4396] ath6kl: unable to send the bmi data to the device: -71 [ 265.053087][ T4396] ath6kl: Unable to send get target info: -71 [ 265.085007][ T4396] ath6kl: Failed to init ath6kl core: -71 [ 265.092073][ T6521] REISERFS (device loop0): Using tea hash to sort names [ 265.106692][ T6521] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 265.179187][ T4396] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 265.220173][ T4396] usb 4-1: USB disconnect, device number 5 [ 265.509129][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 266.076964][ T126] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 266.277914][ T126] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 266.326051][ T126] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 266.365420][ T126] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 266.401485][ T126] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 266.436027][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.476116][ T126] usb 2-1: Product: syz [ 266.480339][ T126] usb 2-1: Manufacturer: syz [ 266.484970][ T126] usb 2-1: SerialNumber: syz [ 266.546386][ T6545] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 267.179263][ T6545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.208340][ T6545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.285030][ T6557] loop0: detected capacity change from 0 to 32768 [ 267.324094][ T6557] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.555 (6557) [ 267.481319][ T6557] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 267.545291][ T6557] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 267.587508][ T6557] BTRFS info (device loop0): force clearing of disk cache [ 267.594768][ T6557] BTRFS info (device loop0): enabling auto defrag [ 267.598994][ T6545] Bluetooth: MGMT ver 1.22 [ 267.601720][ T6557] BTRFS info (device loop0): max_inline at 0 [ 267.613576][ T6557] BTRFS info (device loop0): setting nodatacow, compression disabled [ 267.650742][ T6557] BTRFS info (device loop0): using free space tree [ 267.720548][ T6579] loop3: detected capacity change from 0 to 8 [ 267.746023][ T6579] SQUASHFS error: lzo decompression failed, data probably corrupt [ 267.754108][ T6579] SQUASHFS error: Failed to read block 0x144: -5 [ 267.760613][ T6579] SQUASHFS error: Unable to read metadata cache entry [142] [ 267.768008][ T6579] SQUASHFS error: Unable to read inode 0x11f [ 268.606328][ T126] cdc_ncm 2-1:1.0: bind() failure [ 268.616371][ T4429] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 268.628543][ T126] usb 2-1: USB disconnect, device number 7 [ 268.797382][ T6557] BTRFS info (device loop0): enabling ssd optimizations [ 268.833217][ T6557] BTRFS info (device loop0): rebuilding free space tree [ 269.256530][ T4267] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 269.643388][ T4427] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop0 scanned by udevd (4427) [ 269.697086][ T4277] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 269.705026][ T4277] Bluetooth: hci0: command 0x0c1a tx timeout [ 269.771849][ T6610] input: syz1 as /devices/virtual/input/input7 [ 270.323868][ T6615] FAULT_INJECTION: forcing a failure. [ 270.323868][ T6615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.574857][ T6615] CPU: 1 PID: 6615 Comm: syz.3.564 Not tainted 6.1.147-syzkaller #0 [ 270.582917][ T6615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 270.593014][ T6615] Call Trace: [ 270.596330][ T6615] [ 270.599296][ T6615] dump_stack_lvl+0x168/0x22e [ 270.604034][ T6615] ? show_regs_print_info+0x12/0x12 [ 270.609361][ T6615] ? load_image+0x3b0/0x3b0 [ 270.613919][ T6615] ? __lock_acquire+0x7c50/0x7c50 [ 270.618992][ T6615] ? snprintf+0xd7/0x120 [ 270.623275][ T6615] should_fail_ex+0x399/0x4d0 [ 270.628023][ T6615] _copy_to_user+0x2c/0x130 [ 270.632566][ T6615] simple_read_from_buffer+0xe3/0x150 [ 270.637991][ T6615] proc_fail_nth_read+0x19a/0x210 [ 270.643054][ T6615] ? proc_fault_inject_write+0x2f0/0x2f0 [ 270.648712][ T6615] ? fsnotify_perm+0x248/0x550 [ 270.653505][ T6615] ? proc_fault_inject_write+0x2f0/0x2f0 [ 270.659185][ T6615] vfs_read+0x2c0/0x920 [ 270.663382][ T6615] ? kernel_read+0x1e0/0x1e0 [ 270.668016][ T6615] ? __fget_files+0x28/0x4d0 [ 270.672628][ T6615] ? __fget_files+0x44a/0x4d0 [ 270.677349][ T6615] ? __fdget_pos+0x2ae/0x360 [ 270.681967][ T6615] ? ksys_read+0x71/0x240 [ 270.686333][ T6615] ksys_read+0x143/0x240 [ 270.690596][ T6615] ? vfs_write+0x960/0x960 [ 270.695028][ T6615] ? lockdep_hardirqs_on+0x94/0x140 [ 270.700254][ T6615] do_syscall_64+0x4c/0xa0 [ 270.704678][ T6615] ? clear_bhb_loop+0x60/0xb0 [ 270.709365][ T6615] ? clear_bhb_loop+0x60/0xb0 [ 270.714054][ T6615] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 270.719975][ T6615] RIP: 0033:0x7fc22058d5fc [ 270.724402][ T6615] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 270.744032][ T6615] RSP: 002b:00007fc221395030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 270.752483][ T6615] RAX: ffffffffffffffda RBX: 00007fc2207b6090 RCX: 00007fc22058d5fc [ 270.760494][ T6615] RDX: 000000000000000f RSI: 00007fc2213950a0 RDI: 0000000000000005 [ 270.768492][ T6615] RBP: 00007fc221395090 R08: 0000000000000000 R09: 0000000000000000 [ 270.776570][ T6615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.784557][ T6615] R13: 00007fc2207b6128 R14: 00007fc2207b6090 R15: 00007ffc946bbed8 [ 270.792574][ T6615] [ 271.446084][ T4396] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 271.636238][ T4396] usb 2-1: Using ep0 maxpacket: 16 [ 271.643810][ T4396] usb 2-1: unable to get BOS descriptor or descriptor too short [ 271.677561][ T4396] usb 2-1: config 2 has an invalid interface number: 189 but max is 0 [ 271.699344][ T4396] usb 2-1: config 2 has no interface number 0 [ 271.715613][ T4396] usb 2-1: config 2 interface 189 has no altsetting 0 [ 271.742197][ T4396] usb 2-1: New USB device found, idVendor=4766, idProduct=0001, bcdDevice=d6.55 [ 271.762646][ T4396] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.780811][ T4396] usb 2-1: Manufacturer: ꭆ“忴蚛얾嗻뺝褌덷毱뫷覕쟹臠곪ꮕ睔ࡸ뤨ꦚܒ炣ࡾ蘔⎟‹卾줜綔暉孵먾瀌廻ᚌ㢳럲ꇻ왬腦㖌ᾔ㡵䗫빚䌝怷쮄⿀眼靆ꗌ恁ﺩ෷ꖆ౹諱훠Ꟛᡗ셃Ꙓl㏜ꧠ੖伩䒠賻࣌圂걟Პ㵴⢐ĕ቙譋燔鳱츎퓣慎䜛盌푔 [ 271.834807][ T4396] usb 2-1: SerialNumber: syz [ 272.063372][ T6629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.089883][ T6629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.140887][ T4396] usb 2-1: active config #2 != 1 ?? [ 272.163477][ T4396] usb 2-1: USB disconnect, device number 8 [ 272.213450][ T6630] loop3: detected capacity change from 0 to 8192 [ 272.233841][ T6630] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 272.249295][ T6630] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 272.259133][ T6630] REISERFS (device loop3): using ordered data mode [ 272.265764][ T6630] reiserfs: using flush barriers [ 272.272832][ T6630] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 272.289755][ T6630] REISERFS (device loop3): checking transaction log (loop3) [ 272.442650][ T6630] REISERFS (device loop3): Using tea hash to sort names [ 272.479757][ T6630] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 272.586926][ T6652] FAULT_INJECTION: forcing a failure. [ 272.586926][ T6652] name failslab, interval 1, probability 0, space 0, times 0 [ 272.630939][ T6652] CPU: 1 PID: 6652 Comm: syz.2.573 Not tainted 6.1.147-syzkaller #0 [ 272.638995][ T6652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 272.649156][ T6652] Call Trace: [ 272.652459][ T6652] [ 272.655398][ T6652] dump_stack_lvl+0x168/0x22e [ 272.660101][ T6652] ? show_regs_print_info+0x12/0x12 [ 272.665312][ T6652] ? load_image+0x3b0/0x3b0 [ 272.669836][ T6652] ? __might_sleep+0xd0/0xd0 [ 272.674439][ T6652] ? __lock_acquire+0x7c50/0x7c50 [ 272.679577][ T6652] should_fail_ex+0x399/0x4d0 [ 272.684284][ T6652] should_failslab+0x5/0x20 [ 272.688811][ T6652] slab_pre_alloc_hook+0x59/0x310 [ 272.693850][ T6652] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 272.699586][ T6652] __kmem_cache_alloc_node+0x4f/0x260 [ 272.704970][ T6652] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 272.710711][ T6652] __kmalloc+0xa0/0x240 [ 272.714891][ T6652] tomoyo_realpath_from_path+0xdf/0x5d0 [ 272.720465][ T6652] tomoyo_path_number_perm+0x1e3/0x600 [ 272.725937][ T6652] ? tomoyo_path_number_perm+0x1b6/0x600 [ 272.731585][ T6652] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 272.737071][ T6652] ? ksys_write+0x1bd/0x240 [ 272.741597][ T6652] ? common_file_perm+0x171/0x1c0 [ 272.746674][ T6652] ? __fget_files+0x28/0x4d0 [ 272.751293][ T6652] security_file_ioctl+0x6c/0xa0 [ 272.756250][ T6652] __se_sys_ioctl+0x48/0x170 [ 272.760856][ T6652] do_syscall_64+0x4c/0xa0 [ 272.765279][ T6652] ? clear_bhb_loop+0x60/0xb0 [ 272.769966][ T6652] ? clear_bhb_loop+0x60/0xb0 [ 272.774677][ T6652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.780593][ T6652] RIP: 0033:0x7f287bd8ebe9 [ 272.785025][ T6652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.804663][ T6652] RSP: 002b:00007f287ccea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.813111][ T6652] RAX: ffffffffffffffda RBX: 00007f287bfb5fa0 RCX: 00007f287bd8ebe9 [ 272.821092][ T6652] RDX: 0000200000000100 RSI: 000000004008ae89 RDI: 0000000000000005 [ 272.829070][ T6652] RBP: 00007f287ccea090 R08: 0000000000000000 R09: 0000000000000000 [ 272.837056][ T6652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.845034][ T6652] R13: 00007f287bfb6038 R14: 00007f287bfb5fa0 R15: 00007fff40e1dcf8 [ 272.853033][ T6652] [ 272.876355][ T6652] ERROR: Out of memory at tomoyo_realpath_from_path. [ 273.173175][ T6660] loop1: detected capacity change from 0 to 164 [ 273.247116][ T6660] rock: directory entry would overflow storage [ 273.267146][ T6660] rock: sig=0x66, size=4, remaining=3 [ 273.296107][ T6666] 9pnet_fd: Insufficient options for proto=fd [ 273.326925][ T6660] rock: directory entry would overflow storage [ 273.333682][ T6660] rock: sig=0x66, size=4, remaining=3 [ 273.436436][ T6660] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 273.958265][ T6678] loop1: detected capacity change from 0 to 128 [ 273.967571][ T6678] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 273.981996][ T6678] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.332875][ T6663] loop2: detected capacity change from 0 to 32768 [ 275.355873][ T6663] (syz.2.577,6663,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "jourmit" or missing value [ 275.411546][ T6663] (syz.2.577,6663,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 275.451516][ T6692] loop1: detected capacity change from 0 to 1024 [ 275.489142][ T6692] EXT4-fs: Ignoring removed orlov option [ 275.522734][ T6692] EXT4-fs: Invalid want_extra_isize 5 [ 275.601262][ T27] audit: type=1326 audit(1754880915.759:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6691 comm="syz.1.585" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f354458ebe9 code=0x0 [ 275.976119][ T4415] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 276.015279][ T6698] wg1 speed is unknown, defaulting to 1000 [ 276.031634][ T6687] loop0: detected capacity change from 0 to 32768 [ 276.104215][ T6687] XFS (loop0): Mounting V5 Filesystem [ 276.131700][ T6674] ptrace attach of "./syz-executor exec"[4268] was attempted by "./syz-executor exec"[6674] [ 276.166201][ T4415] usb 2-1: Using ep0 maxpacket: 16 [ 276.173058][ T4415] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.196677][ T6687] XFS (loop0): Ending clean mount [ 276.202997][ T4415] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 276.228886][ T4415] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 276.286019][ T4415] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 276.304818][ T4415] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.322369][ T4267] XFS (loop0): Unmounting Filesystem [ 276.337688][ T4415] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 276.368042][ T4415] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 276.386761][ T4415] usb 2-1: Manufacturer: syz [ 276.427170][ T4415] usb 2-1: config 0 descriptor?? [ 276.856073][ T4415] rc_core: IR keymap rc-hauppauge not found [ 276.862175][ T4415] Registered IR keymap rc-empty [ 276.882526][ T4415] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 276.926166][ T4415] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 276.958361][ T4415] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 276.996408][ T4415] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 277.046242][ T4415] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 277.098130][ T4415] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 277.146144][ T4415] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 277.196189][ T4415] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 277.236218][ T4415] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 277.266146][ T4415] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 277.316215][ T4415] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 277.356561][ T4415] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 277.396329][ T4415] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 277.436207][ T4415] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 277.472876][ T6729] loop3: detected capacity change from 0 to 8192 [ 277.479585][ T4415] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 277.512954][ T6729] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 277.537382][ T4415] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 277.576264][ T4415] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 277.618947][ T6729] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 277.628661][ T6729] REISERFS (device loop3): using ordered data mode [ 277.635313][ T6729] reiserfs: using flush barriers [ 277.681384][ T6729] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 277.757477][ T6729] REISERFS (device loop3): checking transaction log (loop3) [ 278.464022][ T6729] REISERFS (device loop3): Using tea hash to sort names [ 278.516605][ T6729] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 278.609040][ T4415] usb 2-1: USB disconnect, device number 9 [ 278.611356][ T6751] loop2: detected capacity change from 0 to 512 [ 278.716151][ T6751] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 278.962428][ T6751] EXT4-fs (loop2): 1 truncate cleaned up [ 278.968198][ T6751] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 279.330560][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 279.796153][ T6773] [ 279.798544][ T6773] ====================================================== [ 279.805572][ T6773] WARNING: possible circular locking dependency detected [ 279.812605][ T6773] 6.1.147-syzkaller #0 Not tainted [ 279.817717][ T6773] ------------------------------------------------------ [ 279.824741][ T6773] syz.1.605/6773 is trying to acquire lock: [ 279.830642][ T6773] ffff88807c0ee2d8 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 279.840325][ T6773] [ 279.840325][ T6773] but task is already holding lock: [ 279.847779][ T6773] ffff8880305c08e0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 279.858679][ T6773] [ 279.858679][ T6773] which lock already depends on the new lock. [ 279.858679][ T6773] [ 279.869080][ T6773] [ 279.869080][ T6773] the existing dependency chain (in reverse order) is: [ 279.878092][ T6773] [ 279.878092][ T6773] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 279.886796][ T6773] down_write+0x36/0x60 [ 279.891490][ T6773] process_measurement+0x33c/0x1a10 [ 279.897226][ T6773] ima_file_mmap+0x104/0x150 [ 279.902355][ T6773] __se_sys_remap_file_pages+0x53e/0x770 [ 279.908519][ T6773] do_syscall_64+0x4c/0xa0 [ 279.913460][ T6773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 279.919893][ T6773] [ 279.919893][ T6773] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 279.927461][ T6773] __lock_acquire+0x2cf8/0x7c50 [ 279.932866][ T6773] lock_acquire+0x1b4/0x490 [ 279.937917][ T6773] down_read_killable+0x4c/0x340 [ 279.943386][ T6773] mmap_read_lock_killable+0x1d/0x60 [ 279.949208][ T6773] lock_mm_and_find_vma+0x2b1/0x2f0 [ 279.954943][ T6773] do_user_addr_fault+0x2db/0xb10 [ 279.960496][ T6773] exc_page_fault+0x60/0x100 [ 279.965615][ T6773] asm_exc_page_fault+0x22/0x30 [ 279.971356][ T6773] fault_in_readable+0x13e/0x1f0 [ 279.976831][ T6773] fault_in_iov_iter_readable+0xbb/0x2e0 [ 279.982994][ T6773] generic_perform_write+0x1d2/0x560 [ 279.988829][ T6773] __generic_file_write_iter+0x172/0x430 [ 279.994989][ T6773] generic_file_write_iter+0xab/0x2e0 [ 280.000897][ T6773] vfs_write+0x44c/0x960 [ 280.005679][ T6773] ksys_write+0x143/0x240 [ 280.010569][ T6773] do_syscall_64+0x4c/0xa0 [ 280.015515][ T6773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.021949][ T6773] [ 280.021949][ T6773] other info that might help us debug this: [ 280.021949][ T6773] [ 280.032180][ T6773] Possible unsafe locking scenario: [ 280.032180][ T6773] [ 280.039639][ T6773] CPU0 CPU1 [ 280.045013][ T6773] ---- ---- [ 280.050395][ T6773] lock(&sb->s_type->i_mutex_key#12); [ 280.055875][ T6773] lock(&mm->mmap_lock); [ 280.062726][ T6773] lock(&sb->s_type->i_mutex_key#12); [ 280.070730][ T6773] lock(&mm->mmap_lock); [ 280.075068][ T6773] [ 280.075068][ T6773] *** DEADLOCK *** [ 280.075068][ T6773] [ 280.083213][ T6773] 3 locks held by syz.1.605/6773: [ 280.088237][ T6773] #0: ffff88807cebeae8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 280.097478][ T6773] #1: ffff8880555a6460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x256/0x960 [ 280.106492][ T6773] #2: ffff8880305c08e0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 280.117842][ T6773] [ 280.117842][ T6773] stack backtrace: [ 280.123736][ T6773] CPU: 1 PID: 6773 Comm: syz.1.605 Not tainted 6.1.147-syzkaller #0 [ 280.131727][ T6773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 280.141797][ T6773] Call Trace: [ 280.145092][ T6773] [ 280.148029][ T6773] dump_stack_lvl+0x168/0x22e [ 280.152745][ T6773] ? load_image+0x3b0/0x3b0 [ 280.157270][ T6773] ? show_regs_print_info+0x12/0x12 [ 280.162502][ T6773] ? print_circular_bug+0x12b/0x1a0 [ 280.167724][ T6773] check_noncircular+0x274/0x310 [ 280.172693][ T6773] ? add_chain_block+0x940/0x940 [ 280.177666][ T6773] ? lockdep_lock+0xdc/0x1e0 [ 280.182309][ T6773] ? _find_first_zero_bit+0xcf/0x100 [ 280.187619][ T6773] __lock_acquire+0x2cf8/0x7c50 [ 280.192507][ T6773] ? verify_lock_unused+0x140/0x140 [ 280.197727][ T6773] ? verify_lock_unused+0x140/0x140 [ 280.202942][ T6773] ? verify_lock_unused+0x140/0x140 [ 280.208154][ T6773] ? mark_lock+0x94/0x320 [ 280.212525][ T6773] lock_acquire+0x1b4/0x490 [ 280.217047][ T6773] ? mmap_read_lock_killable+0x1d/0x60 [ 280.222533][ T6773] ? read_lock_is_recursive+0x10/0x10 [ 280.227945][ T6773] ? cmp_ex_search+0x1a/0x70 [ 280.232541][ T6773] ? bsearch+0x8a/0xb0 [ 280.236631][ T6773] ? fault_in_readable+0x13e/0x1f0 [ 280.241763][ T6773] ? search_extable+0x8c/0xd0 [ 280.246471][ T6773] ? trim_init_extable+0x3b0/0x3b0 [ 280.251592][ T6773] ? mmap_read_lock_killable+0x1d/0x60 [ 280.257079][ T6773] down_read_killable+0x4c/0x340 [ 280.262031][ T6773] ? mmap_read_lock_killable+0x1d/0x60 [ 280.267507][ T6773] mmap_read_lock_killable+0x1d/0x60 [ 280.272811][ T6773] lock_mm_and_find_vma+0x2b1/0x2f0 [ 280.278036][ T6773] do_user_addr_fault+0x2db/0xb10 [ 280.283154][ T6773] ? _raw_spin_unlock_irq+0x1f/0x40 [ 280.288366][ T6773] exc_page_fault+0x60/0x100 [ 280.292971][ T6773] asm_exc_page_fault+0x22/0x30 [ 280.297836][ T6773] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 280.303568][ T6773] Code: 78 eb c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 57 eb c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 3a eb [ 280.323210][ T6773] RSP: 0018:ffffc9000c0ffa90 EFLAGS: 00050287 [ 280.329298][ T6773] RAX: ffffffff81bbdb89 RBX: 0000000000001000 RCX: ffff888018ea9dc0 [ 280.337279][ T6773] RDX: 0000000000000003 RSI: 0000000000000100 RDI: 0000000000000000 [ 280.345254][ T6773] RBP: 0000000000000000 R08: 000000000001ffff R09: 0000000000400000 [ 280.353248][ T6773] R10: 0000000000400008 R11: ffffc9000ebca000 R12: 0000200000118000 [ 280.361236][ T6773] R13: dffffc0000000000 R14: 0000200000116100 R15: 0000200000117000 [ 280.369251][ T6773] ? fault_in_readable+0x139/0x1f0 [ 280.374391][ T6773] fault_in_iov_iter_readable+0xbb/0x2e0 [ 280.380037][ T6773] generic_perform_write+0x1d2/0x560 [ 280.385341][ T6773] ? atime_needs_update+0x780/0x780 [ 280.390610][ T6773] ? generic_file_direct_write+0x660/0x660 [ 280.396435][ T6773] ? __file_remove_privs+0x5b0/0x5b0 [ 280.401733][ T6773] ? preempt_count_add+0x8d/0x190 [ 280.406770][ T6773] ? rwsem_write_trylock+0x12f/0x1b0 [ 280.412068][ T6773] ? clear_nonspinnable+0x60/0x60 [ 280.417107][ T6773] ? generic_write_checks_count+0x3d9/0x4c0 [ 280.423042][ T6773] __generic_file_write_iter+0x172/0x430 [ 280.428752][ T6773] generic_file_write_iter+0xab/0x2e0 [ 280.434133][ T6773] vfs_write+0x44c/0x960 [ 280.438391][ T6773] ? file_end_write+0x250/0x250 [ 280.443261][ T6773] ? __fget_files+0x44a/0x4d0 [ 280.447954][ T6773] ? __fdget_pos+0x2ae/0x360 [ 280.452557][ T6773] ? ksys_write+0x71/0x240 [ 280.456988][ T6773] ksys_write+0x143/0x240 [ 280.461342][ T6773] ? __ia32_sys_read+0x80/0x80 [ 280.466120][ T6773] ? lockdep_hardirqs_on+0x94/0x140 [ 280.471333][ T6773] do_syscall_64+0x4c/0xa0 [ 280.475763][ T6773] ? clear_bhb_loop+0x60/0xb0 [ 280.480442][ T6773] ? clear_bhb_loop+0x60/0xb0 [ 280.485134][ T6773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.491045][ T6773] RIP: 0033:0x7f354458ebe9 [ 280.495478][ T6773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.515097][ T6773] RSP: 002b:00007f35453be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 280.523520][ T6773] RAX: ffffffffffffffda RBX: 00007f35447b6090 RCX: 00007f354458ebe9 [ 280.531502][ T6773] RDX: 000000000208e24b RSI: 0000200000000100 RDI: 0000000000000005 [ 280.539476][ T6773] RBP: 00007f3544611e19 R08: 0000000000000000 R09: 0000000000000000 [ 280.547456][ T6773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.555434][ T6773] R13: 00007f35447b6128 R14: 00007f35447b6090 R15: 00007ffc043a7858 [ 280.563425][ T6773] [ 280.598630][ T6779] FAULT_INJECTION: forcing a failure. [ 280.598630][ T6779] name failslab, interval 1, probability 0, space 0, times 0 [ 280.622920][ T6779] CPU: 1 PID: 6779 Comm: syz.2.608 Not tainted 6.1.147-syzkaller #0 [ 280.630961][ T6779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 280.641039][ T6779] Call Trace: [ 280.644356][ T6779] [ 280.647325][ T6779] dump_stack_lvl+0x168/0x22e [ 280.652043][ T6779] ? show_regs_print_info+0x12/0x12 [ 280.657274][ T6779] ? load_image+0x3b0/0x3b0 [ 280.661807][ T6779] ? rcu_is_watching+0x11/0xa0 [ 280.666598][ T6779] ? __might_sleep+0xd0/0xd0 [ 280.671233][ T6779] ? rcu_is_watching+0x11/0xa0 [ 280.674081][ T6749] loop0: detected capacity change from 0 to 32768 [ 280.676031][ T6779] ? __lock_acquire+0x7c50/0x7c50 [ 280.676059][ T6779] ? lock_release+0xd4/0x910 [ 280.676085][ T6779] should_fail_ex+0x399/0x4d0 [ 280.676122][ T6779] should_failslab+0x5/0x20 [ 280.676150][ T6779] slab_pre_alloc_hook+0x59/0x310 [ 280.706734][ T6779] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 280.712470][ T6779] __kmem_cache_alloc_node+0x4f/0x260 [ 280.717856][ T6779] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 280.723589][ T6779] __kmalloc+0xa0/0x240 [ 280.727764][ T6779] tomoyo_realpath_from_path+0xdf/0x5d0 [ 280.733320][ T6779] ? tomoyo_domain+0xd2/0x120 [ 280.738012][ T6779] tomoyo_path_number_perm+0x1e3/0x600 [ 280.743480][ T6779] ? tomoyo_path_number_perm+0x1b6/0x600 [ 280.749122][ T6779] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 280.754588][ T6779] ? proc_fail_nth_write+0x17a/0x1f0 [ 280.759893][ T6779] ? ksys_write+0x1bd/0x240 [ 280.764413][ T6779] ? common_file_perm+0x171/0x1c0 [ 280.769466][ T6779] ? __fget_files+0x28/0x4d0 [ 280.774094][ T6779] security_file_ioctl+0x6c/0xa0 [ 280.779041][ T6779] __se_sys_ioctl+0x48/0x170 [ 280.783643][ T6779] do_syscall_64+0x4c/0xa0 [ 280.788067][ T6779] ? clear_bhb_loop+0x60/0xb0 [ 280.792758][ T6779] ? clear_bhb_loop+0x60/0xb0 [ 280.797439][ T6779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.803350][ T6779] RIP: 0033:0x7f287bd8ebe9 [ 280.807774][ T6779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.827390][ T6779] RSP: 002b:00007f287ccea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.835810][ T6779] RAX: ffffffffffffffda RBX: 00007f287bfb5fa0 RCX: 00007f287bd8ebe9 [ 280.843790][ T6779] RDX: 0000200000000380 RSI: 00000000c008ae67 RDI: 0000000000000004 [ 280.851786][ T6779] RBP: 00007f287ccea090 R08: 0000000000000000 R09: 0000000000000000 [ 280.859783][ T6779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.867760][ T6779] R13: 00007f287bfb6038 R14: 00007f287bfb5fa0 R15: 00007fff40e1dcf8 [ 280.875745][ T6779] [ 280.878956][ T4396] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 280.886637][ T6779] ERROR: Out of memory at tomoyo_realpath_from_path. [ 280.920480][ T6749] XFS (loop0): Mounting V5 Filesystem [ 280.943786][ T6749] XFS (loop0): Ending clean mount [ 280.983515][ T6769] kvm [6768]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x1fd00000800 [ 281.017305][ T4267] XFS (loop0): Unmounting Filesystem [ 281.018481][ T6769] kvm [6768]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x3f500000800 [ 281.036070][ T4396] usb 4-1: device descriptor read/64, error -71 [ 281.036992][ T6769] kvm [6768]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x46600000000 [ 281.068359][ T6769] kvm [6768]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x4fe00000000 [ 281.306078][ T4396] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 281.456017][ T4396] usb 4-1: device descriptor read/64, error -71 [ 281.576605][ T4396] usb usb4-port1: attempt power cycle [ 281.986108][ T4396] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 282.017098][ T4396] usb 4-1: device descriptor read/8, error -71 [ 282.296022][ T4396] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 282.328276][ T4396] usb 4-1: device descriptor read/8, error -71 [ 282.457340][ T4396] usb usb4-port1: unable to enumerate USB device